allow non-admin users to send PTZ commands for cameras they have access to (#23578)

* offload preview ffmpeg encoding to a thread to avoid blocking the api event loop

* offload Frigate+ recording snapshot upload to a thread to avoid blocking the api event loop

.cspell/frigate-dictionary.txt

@@ -229,7 +229,6 @@ Reolink
 restream
 restreamed
 restreaming
-RJSF
 rkmpp
 rknn
 rkrga

.github/copilot-instructions.md

@@ -324,12 +324,6 @@ try:
     value = await sensor.read()
 except Exception:  # ❌ Too broad
     logger.error("Failed")
-
-# Returning exceptions in JSON responses
-except ValueError as e:
-    return JSONResponse(
-        content={"success": False, "message": str(e)},
-    )
 ```
 
 ### ✅ Use These Instead
@@ -359,16 +353,6 @@ try:
     value = await sensor.read()
 except SensorException as err:  # ✅ Specific
     logger.exception("Failed to read sensor")
-
-# Safe error responses
-except ValueError:
-    logger.exception("Invalid parameters for API request")
-    return JSONResponse(
-        content={
-            "success": False,
-            "message": "Invalid request parameters",
-        },
-    )
 ```
 
 ## Project-Specific Conventions

.gitignore

@@ -3,8 +3,6 @@ __pycache__
 .mypy_cache
 *.swp
 debug
-.claude/*
-.mcp.json
 .vscode/*
 !.vscode/launch.json
 config/*
@@ -21,4 +19,4 @@ web/.env
 core
 !/web/**/*.ts
 .idea/*
-.ipynb_checkpoints
+.ipynb_checkpoints

Makefile

@@ -1,7 +1,7 @@
 default_target: local
 
 COMMIT_HASH := $(shell git log -1 --pretty=format:"%h"|tail -1)
-VERSION = 0.18.0
+VERSION = 0.17.2
 IMAGE_REPO ?= ghcr.io/blakeblackshear/frigate
 GITHUB_REF_NAME ?= $(shell git rev-parse --abbrev-ref HEAD)
 BOARDS= #Initialized empty
@@ -49,8 +49,7 @@ push: push-boards
 		--push
 
 run: local
-	docker run --rm --publish=5000:5000 --publish=8971:8971 \
-		--volume=${PWD}/config:/config frigate:latest
+	docker run --rm --publish=5000:5000 --volume=${PWD}/config:/config frigate:latest
 
 run_tests: local
 	docker run --rm --workdir=/opt/frigate --entrypoint= frigate:latest \

docker/main/Dockerfile

@@ -55,7 +55,7 @@ RUN --mount=type=tmpfs,target=/tmp --mount=type=tmpfs,target=/var/cache/apt \
 FROM scratch AS go2rtc
 ARG TARGETARCH
 WORKDIR /rootfs/usr/local/go2rtc/bin
-ADD --link --chmod=755 "https://github.com/AlexxIT/go2rtc/releases/download/v1.9.13/go2rtc_linux_${TARGETARCH}" go2rtc
+ADD --link --chmod=755 "https://github.com/AlexxIT/go2rtc/releases/download/v1.9.10/go2rtc_linux_${TARGETARCH}" go2rtc
 
 FROM wget AS tempio
 ARG TARGETARCH

docker/main/rootfs/etc/s6-overlay/s6-rc.d/certsync/run

@@ -10,8 +10,7 @@ echo "[INFO] Starting certsync..."
 
 lefile="/etc/letsencrypt/live/frigate/fullchain.pem"
 
-tls_enabled=`python3 /usr/local/nginx/get_nginx_settings.py | jq -r .tls.enabled`
-listen_external_port=`python3 /usr/local/nginx/get_nginx_settings.py | jq -r .listen.external_port`
+tls_enabled=`python3 /usr/local/nginx/get_listen_settings.py | jq -r .tls.enabled`
 
 while true
 do
@@ -35,7 +34,7 @@ do
             ;;
     esac
 
-    liveprint=`echo | openssl s_client -showcerts -connect 127.0.0.1:$listen_external_port 2>&1 | openssl x509 -fingerprint 2>&1 | grep -i fingerprint  || echo 'failed'`
+    liveprint=`echo | openssl s_client -showcerts -connect 127.0.0.1:8971 2>&1 | openssl x509 -fingerprint 2>&1 | grep -i fingerprint  || echo 'failed'`
 
     case "$liveprint" in
         *Fingerprint*)
@@ -56,4 +55,4 @@ do
 
 done
 
-exit 0
+exit 0

docker/main/rootfs/etc/s6-overlay/s6-rc.d/go2rtc/run

@@ -55,7 +55,7 @@ function setup_homekit_config() {
 
     if [[ ! -f "${config_path}" ]]; then
         echo "[INFO] Creating empty config file for HomeKit..."
-        echo '{}' > "${config_path}"
+        : > "${config_path}"
     fi
 
     # Convert YAML to JSON for jq processing
@@ -65,23 +65,25 @@ function setup_homekit_config() {
         return 0
     }
 
-    # Use jq to filter and keep only the homekit section
-    local cleaned_json="/tmp/cache/homekit_cleaned.json"
-    jq '
-        # Keep only the homekit section if it exists, otherwise empty object
-        if has("homekit") then {homekit: .homekit} else {} end
-    ' "${temp_json}" > "${cleaned_json}" 2>/dev/null || {
-        echo '{}' > "${cleaned_json}"
-    }
+    # Use jq to extract the homekit section, if it exists
+    local homekit_json
+    homekit_json=$(jq '
+        if has("homekit") then {homekit: .homekit} else null end
+    ' "${temp_json}" 2>/dev/null) || homekit_json="null"
 
-    # Convert back to YAML and write to the config file
-    yq eval -P "${cleaned_json}" > "${config_path}" 2>/dev/null || {
-        echo "[WARNING] Failed to convert cleaned config to YAML, creating minimal config"
-        echo '{}' > "${config_path}"
-    }
+    # If no homekit section, write an empty config file
+    if [[ "${homekit_json}" == "null" ]]; then
+        : > "${config_path}"
+    else
+        # Convert homekit JSON back to YAML and write to the config file
+        echo "${homekit_json}" | yq eval -P - > "${config_path}" 2>/dev/null || {
+            echo "[WARNING] Failed to convert cleaned config to YAML, creating minimal config"
+            : > "${config_path}"
+        }
+    fi
 
     # Clean up temp files
-    rm -f "${temp_json}" "${cleaned_json}"
+    rm -f "${temp_json}"
 }
 
 set_libva_version

docker/main/rootfs/etc/s6-overlay/s6-rc.d/nginx/run

@@ -80,14 +80,14 @@ if [ ! \( -f "$letsencrypt_path/privkey.pem" -a -f "$letsencrypt_path/fullchain.
 fi
 
 # build templates for optional FRIGATE_BASE_PATH environment variable
-python3 /usr/local/nginx/get_nginx_settings.py | \
+python3 /usr/local/nginx/get_base_path.py | \
     tempio -template /usr/local/nginx/templates/base_path.gotmpl \
-           -out /usr/local/nginx/conf/base_path.conf
+       -out /usr/local/nginx/conf/base_path.conf
 
-# build templates for additional network settings
-python3 /usr/local/nginx/get_nginx_settings.py | \
-    tempio -template /usr/local/nginx/templates/listen.gotmpl \
-           -out /usr/local/nginx/conf/listen.conf
+# build templates for optional TLS support
+python3 /usr/local/nginx/get_listen_settings.py | \
+    tempio  -template /usr/local/nginx/templates/listen.gotmpl \
+            -out /usr/local/nginx/conf/listen.conf
 
 # Replace the bash process with the NGINX process, redirecting stderr to stdout
 exec 2>&1

docker/main/rootfs/usr/local/go2rtc/create_config.py

@@ -17,36 +17,15 @@ from frigate.const import (
 )
 from frigate.ffmpeg_presets import parse_preset_hardware_acceleration_encode
 from frigate.util.config import find_config_file
+from frigate.util.services import (
+    is_go2rtc_arbitrary_exec_allowed,
+    is_restricted_go2rtc_source,
+)
 
 sys.path.remove("/opt/frigate")
 
 yaml = YAML()
 
-# Check if arbitrary exec sources are allowed (defaults to False for security)
-allow_arbitrary_exec = None
-if "GO2RTC_ALLOW_ARBITRARY_EXEC" in os.environ:
-    allow_arbitrary_exec = os.environ.get("GO2RTC_ALLOW_ARBITRARY_EXEC")
-elif (
-    os.path.isdir("/run/secrets")
-    and os.access("/run/secrets", os.R_OK)
-    and "GO2RTC_ALLOW_ARBITRARY_EXEC" in os.listdir("/run/secrets")
-):
-    allow_arbitrary_exec = (
-        Path(os.path.join("/run/secrets", "GO2RTC_ALLOW_ARBITRARY_EXEC"))
-        .read_text()
-        .strip()
-    )
-# check for the add-on options file
-elif os.path.isfile("/data/options.json"):
-    with open("/data/options.json") as f:
-        raw_options = f.read()
-    options = json.loads(raw_options)
-    allow_arbitrary_exec = options.get("go2rtc_allow_arbitrary_exec")
-
-ALLOW_ARBITRARY_EXEC = allow_arbitrary_exec is not None and str(
-    allow_arbitrary_exec
-).lower() in ("true", "1", "yes")
-
 FRIGATE_ENV_VARS = {k: v for k, v in os.environ.items() if k.startswith("FRIGATE_")}
 # read docker secret files as env vars too
 if os.path.isdir("/run/secrets"):
@@ -135,18 +114,13 @@ if LIBAVFORMAT_VERSION_MAJOR < 59:
         go2rtc_config["ffmpeg"]["rtsp"] = rtsp_args
 
 
-def is_restricted_source(stream_source: str) -> bool:
-    """Check if a stream source is restricted (echo, expr, or exec)."""
-    return stream_source.strip().startswith(("echo:", "expr:", "exec:"))
-
-
 for name in list(go2rtc_config.get("streams", {})):
     stream = go2rtc_config["streams"][name]
 
     if isinstance(stream, str):
         try:
             formatted_stream = stream.format(**FRIGATE_ENV_VARS)
-            if not ALLOW_ARBITRARY_EXEC and is_restricted_source(formatted_stream):
+            if is_restricted_go2rtc_source(formatted_stream):
                 print(
                     f"[ERROR] Stream '{name}' uses a restricted source (echo/expr/exec) which is disabled by default for security. "
                     f"Set GO2RTC_ALLOW_ARBITRARY_EXEC=true to enable arbitrary exec sources."
@@ -165,7 +139,7 @@ for name in list(go2rtc_config.get("streams", {})):
         for i, stream_item in enumerate(stream):
             try:
                 formatted_stream = stream_item.format(**FRIGATE_ENV_VARS)
-                if not ALLOW_ARBITRARY_EXEC and is_restricted_source(formatted_stream):
+                if is_restricted_go2rtc_source(formatted_stream):
                     print(
                         f"[ERROR] Stream '{name}' item {i + 1} uses a restricted source (echo/expr/exec) which is disabled by default for security. "
                         f"Set GO2RTC_ALLOW_ARBITRARY_EXEC=true to enable arbitrary exec sources."
@@ -188,6 +162,20 @@ for name in list(go2rtc_config.get("streams", {})):
             )
             del go2rtc_config["streams"][name]
 
+    elif isinstance(stream, dict):
+        # The map form ({"url": ...}) lets go2rtc resolve the source
+        # recursively, so it is effectively a dynamic way to generate the URL
+        # for a stream. That can only be backed by an exec source, so it cannot
+        # be allowed unless arbitrary exec is explicitly enabled. When it is
+        # enabled, leave the map untouched for go2rtc to resolve.
+        if not is_go2rtc_arbitrary_exec_allowed():
+            print(
+                f"[ERROR] Stream '{name}' uses a dynamic source format which is disabled by default for security. "
+                f"Set GO2RTC_ALLOW_ARBITRARY_EXEC=true to enable arbitrary exec sources."
+            )
+            del go2rtc_config["streams"][name]
+            continue
+
 # add birdseye restream stream if enabled
 if config.get("birdseye", {}).get("restream", False):
     birdseye: dict[str, Any] = config.get("birdseye")

docker/main/rootfs/usr/local/nginx/conf/nginx.conf

@@ -259,6 +259,7 @@ http {
             include proxy.conf;
 
             proxy_cache api_cache;
+            proxy_cache_key "$scheme$proxy_host$request_uri|$role|$groups|$user";
             proxy_cache_lock on;
             proxy_cache_use_stale updating;
             proxy_cache_valid 200 5s;

docker/main/rootfs/usr/local/nginx/get_base_path.py

@@ -0,0 +1,11 @@
+"""Prints the base path as json to stdout."""
+
+import json
+import os
+from typing import Any
+
+base_path = os.environ.get("FRIGATE_BASE_PATH", "")
+
+result: dict[str, Any] = {"base_path": base_path}
+
+print(json.dumps(result))

docker/main/rootfs/usr/local/nginx/get_listen_settings.py

@@ -0,0 +1,35 @@
+"""Prints the tls config as json to stdout."""
+
+import json
+import sys
+from typing import Any
+
+from ruamel.yaml import YAML
+
+sys.path.insert(0, "/opt/frigate")
+from frigate.util.config import find_config_file
+
+sys.path.remove("/opt/frigate")
+
+yaml = YAML()
+
+config_file = find_config_file()
+
+try:
+    with open(config_file) as f:
+        raw_config = f.read()
+
+    if config_file.endswith((".yaml", ".yml")):
+        config: dict[str, Any] = yaml.load(raw_config)
+    elif config_file.endswith(".json"):
+        config: dict[str, Any] = json.loads(raw_config)
+except FileNotFoundError:
+    config: dict[str, Any] = {}
+
+tls_config: dict[str, any] = config.get("tls", {"enabled": True})
+networking_config = config.get("networking", {})
+ipv6_config = networking_config.get("ipv6", {"enabled": False})
+
+output = {"tls": tls_config, "ipv6": ipv6_config}
+
+print(json.dumps(output))

docker/main/rootfs/usr/local/nginx/get_nginx_settings.py

@@ -1,62 +0,0 @@
-"""Prints the nginx settings as json to stdout."""
-
-import json
-import os
-import sys
-from typing import Any
-
-from ruamel.yaml import YAML
-
-sys.path.insert(0, "/opt/frigate")
-from frigate.util.config import find_config_file
-
-sys.path.remove("/opt/frigate")
-
-yaml = YAML()
-
-config_file = find_config_file()
-
-try:
-    with open(config_file) as f:
-        raw_config = f.read()
-
-    if config_file.endswith((".yaml", ".yml")):
-        config: dict[str, Any] = yaml.load(raw_config)
-    elif config_file.endswith(".json"):
-        config: dict[str, Any] = json.loads(raw_config)
-except FileNotFoundError:
-    config: dict[str, Any] = {}
-
-tls_config: dict[str, Any] = config.get("tls", {})
-tls_config.setdefault("enabled", True)
-
-networking_config: dict[str, Any] = config.get("networking", {})
-ipv6_config: dict[str, Any] = networking_config.get("ipv6", {})
-ipv6_config.setdefault("enabled", False)
-
-listen_config: dict[str, Any] = networking_config.get("listen", {})
-listen_config.setdefault("internal", 5000)
-listen_config.setdefault("external", 8971)
-
-# handle case where internal port is a string with ip:port
-internal_port = listen_config["internal"]
-if type(internal_port) is str:
-    internal_port = int(internal_port.split(":")[-1])
-listen_config["internal_port"] = internal_port
-
-# handle case where external port is a string with ip:port
-external_port = listen_config["external"]
-if type(external_port) is str:
-    external_port = int(external_port.split(":")[-1])
-listen_config["external_port"] = external_port
-
-base_path = os.environ.get("FRIGATE_BASE_PATH", "")
-
-result: dict[str, Any] = {
-    "tls": tls_config,
-    "ipv6": ipv6_config,
-    "listen": listen_config,
-    "base_path": base_path,
-}
-
-print(json.dumps(result))

docker/main/rootfs/usr/local/nginx/templates/base_path.gotmpl

@@ -7,7 +7,7 @@ location ^~ {{ .base_path }}/ {
     # remove base_url from the path before passing upstream
     rewrite ^{{ .base_path }}/(.*) /$1 break;
 
-    proxy_pass $scheme://127.0.0.1:{{ .listen.external_port }};
+    proxy_pass $scheme://127.0.0.1:8971;
     proxy_http_version 1.1;
     proxy_set_header Upgrade $http_upgrade;
     proxy_set_header Connection "upgrade";

docker/main/rootfs/usr/local/nginx/templates/listen.gotmpl

@@ -1,36 +1,45 @@
+
 # Internal (IPv4 always; IPv6 optional)
-listen {{ .listen.internal }};
-{{ if .ipv6.enabled }}listen [::]:{{ .listen.internal_port }};{{ end }}
+listen 5000;
+{{ if .ipv6 }}{{ if .ipv6.enabled }}listen [::]:5000;{{ end }}{{ end }}
+
 
 # intended for external traffic, protected by auth
-{{ if .tls.enabled }}
-    # external HTTPS (IPv4 always; IPv6 optional)
-    listen {{ .listen.external }} ssl;
-    {{ if .ipv6.enabled }}listen [::]:{{ .listen.external_port }} ssl;{{ end }}
+{{ if .tls }}
+    {{ if .tls.enabled }}
+        # external HTTPS (IPv4 always; IPv6 optional)
+        listen 8971 ssl;
+        {{ if .ipv6 }}{{ if .ipv6.enabled }}listen [::]:8971 ssl;{{ end }}{{ end }}
 
-    ssl_certificate /etc/letsencrypt/live/frigate/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt/live/frigate/privkey.pem;
+        ssl_certificate /etc/letsencrypt/live/frigate/fullchain.pem;
+        ssl_certificate_key /etc/letsencrypt/live/frigate/privkey.pem;
 
-    # generated 2024-06-01, Mozilla Guideline v5.7, nginx 1.25.3, OpenSSL 1.1.1w, modern configuration, no OCSP
-    # https://ssl-config.mozilla.org/#server=nginx&version=1.25.3&config=modern&openssl=1.1.1w&ocsp=false&guideline=5.7
-    ssl_session_timeout 1d;
-    ssl_session_cache shared:MozSSL:10m;  # about 40000 sessions
-    ssl_session_tickets off;
+        # generated 2024-06-01, Mozilla Guideline v5.7, nginx 1.25.3, OpenSSL 1.1.1w, modern configuration, no OCSP
+        # https://ssl-config.mozilla.org/#server=nginx&version=1.25.3&config=modern&openssl=1.1.1w&ocsp=false&guideline=5.7
+        ssl_session_timeout 1d;
+        ssl_session_cache shared:MozSSL:10m;  # about 40000 sessions
+        ssl_session_tickets off;
 
-    # modern configuration
-    ssl_protocols TLSv1.3;
-    ssl_prefer_server_ciphers off;
+        # modern configuration
+        ssl_protocols TLSv1.3;
+        ssl_prefer_server_ciphers off;
 
-    # HSTS (ngx_http_headers_module is required) (63072000 seconds)
-    add_header Strict-Transport-Security "max-age=63072000" always;
+        # HSTS (ngx_http_headers_module is required) (63072000 seconds)
+        add_header Strict-Transport-Security "max-age=63072000" always;
 
-    # ACME challenge location
-    location /.well-known/acme-challenge/ {
-            default_type "text/plain";
-            root /etc/letsencrypt/www;
-    }
+        # ACME challenge location
+        location /.well-known/acme-challenge/ {
+                default_type "text/plain";
+                root /etc/letsencrypt/www;
+        }
+    {{ else }}
+        # external HTTP (IPv4 always; IPv6 optional)
+        listen 8971;
+        {{ if .ipv6 }}{{ if .ipv6.enabled }}listen [::]:8971;{{ end }}{{ end }}
+    {{ end }}
 {{ else }}
-    # (No tls) default to HTTP (IPv4 always; IPv6 optional)
-    listen {{ .listen.external }};
-    {{ if .ipv6.enabled }}listen [::]:{{ .listen.external_port }};{{ end }}
+    # (No tls section) default to HTTP (IPv4 always; IPv6 optional)
+    listen 8971;
+    {{ if .ipv6 }}{{ if .ipv6.enabled }}listen [::]:8971;{{ end }}{{ end }}
 {{ end }}
+

docker/rocm/Dockerfile

@@ -13,7 +13,7 @@ ARG ROCM
 
 RUN apt update -qq && \
     apt install -y wget gpg && \
-    wget -O rocm.deb https://repo.radeon.com/amdgpu-install/7.2/ubuntu/jammy/amdgpu-install_7.2.70200-1_all.deb && \
+    wget -O rocm.deb https://repo.radeon.com/amdgpu-install/7.1.1/ubuntu/jammy/amdgpu-install_7.1.1.70101-1_all.deb && \
     apt install -y ./rocm.deb && \
     apt update && \
     apt install -qq -y rocm
@@ -56,8 +56,6 @@ FROM scratch AS rocm-dist
 
 ARG ROCM
 
-# Copy HIP headers required for MIOpen JIT (BuildHip) / HIPRTC at runtime
-COPY --from=rocm /opt/rocm-${ROCM}/include/ /opt/rocm-${ROCM}/include/
 COPY --from=rocm /opt/rocm-$ROCM/bin/rocminfo /opt/rocm-$ROCM/bin/migraphx-driver /opt/rocm-$ROCM/bin/
 # Copy MIOpen database files for gfx10xx and gfx11xx only (RDNA2/RDNA3)
 COPY --from=rocm /opt/rocm-$ROCM/share/miopen/db/*gfx10* /opt/rocm-$ROCM/share/miopen/db/

docker/rocm/requirements-wheels-rocm.txt

@@ -1 +1 @@
-onnxruntime-migraphx @ https://github.com/NickM-27/frigate-onnxruntime-rocm/releases/download/v7.2.0/onnxruntime_migraphx-1.23.1-cp311-cp311-linux_x86_64.whl
+onnxruntime-migraphx @ https://github.com/NickM-27/frigate-onnxruntime-rocm/releases/download/v7.1.0/onnxruntime_migraphx-1.23.1-cp311-cp311-linux_x86_64.whl

docker/rocm/rocm.hcl

@@ -1,5 +1,5 @@
 variable "ROCM" {
-  default = "7.2.0"
+  default = "7.1.1"
 }
 variable "HSA_OVERRIDE_GFX_VERSION" {
   default = ""

docker/tensorrt/requirements-amd64.txt

@@ -1,18 +1,18 @@
-# Nvidia ONNX Runtime GPU Support
+# NVidia TensorRT Support (amd64 only)
 --extra-index-url 'https://pypi.nvidia.com'
 cython==3.0.*; platform_machine == 'x86_64'
-nvidia-cuda-cupti-cu12==12.9.79; platform_machine == 'x86_64'
-nvidia-cublas-cu12==12.9.1.*; platform_machine == 'x86_64'
-nvidia-cudnn-cu12==9.19.0.*; platform_machine == 'x86_64'
-nvidia-cufft-cu12==11.4.1.*; platform_machine == 'x86_64'
-nvidia-curand-cu12==10.3.10.*; platform_machine == 'x86_64'
-nvidia-cuda-nvcc-cu12==12.9.86; platform_machine == 'x86_64'
-nvidia-cuda-nvrtc-cu12==12.9.86; platform_machine == 'x86_64'
-nvidia-cuda-runtime-cu12==12.9.79; platform_machine == 'x86_64'
-nvidia-cusolver-cu12==11.7.5.*; platform_machine == 'x86_64'
-nvidia-cusparse-cu12==12.5.10.*; platform_machine == 'x86_64'
-nvidia-nccl-cu12==2.29.7; platform_machine == 'x86_64'
-nvidia-nvjitlink-cu12==12.9.86; platform_machine == 'x86_64'
+nvidia_cuda_cupti_cu12==12.5.82; platform_machine == 'x86_64'
+nvidia-cublas-cu12==12.5.3.*; platform_machine == 'x86_64'
+nvidia-cudnn-cu12==9.3.0.*; platform_machine == 'x86_64'
+nvidia-cufft-cu12==11.2.3.*; platform_machine == 'x86_64'
+nvidia-curand-cu12==10.3.6.*; platform_machine == 'x86_64'
+nvidia_cuda_nvcc_cu12==12.5.82; platform_machine == 'x86_64'
+nvidia-cuda-nvrtc-cu12==12.5.82; platform_machine == 'x86_64'
+nvidia_cuda_runtime_cu12==12.5.82; platform_machine == 'x86_64'
+nvidia_cusolver_cu12==11.6.3.*; platform_machine == 'x86_64'
+nvidia_cusparse_cu12==12.5.1.*; platform_machine == 'x86_64'
+nvidia_nccl_cu12==2.23.4; platform_machine == 'x86_64'
+nvidia_nvjitlink_cu12==12.5.82; platform_machine == 'x86_64'
 onnx==1.16.*; platform_machine == 'x86_64'
-onnxruntime-gpu==1.24.*; platform_machine == 'x86_64'
+onnxruntime-gpu==1.22.*; platform_machine == 'x86_64'
 protobuf==3.20.3; platform_machine == 'x86_64'

docs/docs/configuration/advanced.md

@@ -44,13 +44,21 @@ go2rtc:
 
 ### `environment_vars`
 
-This section can be used to set environment variables for those unable to modify the environment of the container, like within Home Assistant OS.
+This section can be used to set environment variables for those unable to modify the environment of the container, like within Home Assistant OS. Docker users should set environment variables in their `docker run` command (`-e FRIGATE_MQTT_PASSWORD=secret`) or `docker-compose.yml` file (`environment:` section) instead. Note that values set here are stored in plain text in your config file, so if the goal is to keep credentials out of your configuration, use Docker environment variables or Docker secrets instead.
+
+Variables prefixed with `FRIGATE_` can be referenced in config fields that support environment variable substitution (such as MQTT host and credentials, camera stream URLs, and ONVIF host and credentials) using the `{FRIGATE_VARIABLE_NAME}` syntax.
 
 Example:
 
 ```yaml
 environment_vars:
-  VARIABLE_NAME: variable_value
+  FRIGATE_MQTT_USER: my_mqtt_user
+  FRIGATE_MQTT_PASSWORD: my_mqtt_password
+
+mqtt:
+  host: "{FRIGATE_MQTT_HOST}"
+  user: "{FRIGATE_MQTT_USER}"
+  password: "{FRIGATE_MQTT_PASSWORD}"
 ```
 
 #### TensorFlow Thread Configuration
@@ -155,32 +163,33 @@ services:
 
 ### Enabling IPv6
 
-IPv6 is disabled by default, to enable IPv6 modify your Frigate configuration as follows:
+IPv6 is disabled by default, to enable IPv6 listen.gotmpl needs to be bind mounted with IPv6 enabled. For example:
 
-```yaml
-networking:
-  ipv6:
-    enabled: True
+```
+{{ if not .enabled }}
+# intended for external traffic, protected by auth
+listen 8971;
+{{ else }}
+# intended for external traffic, protected by auth
+listen 8971 ssl;
+
+# intended for internal traffic, not protected by auth
+listen 5000;
 ```
 
-### Listen on different ports
+becomes
 
-You can change the ports Nginx uses for listening using Frigate's configuration file. The internal port (unauthenticated) and external port (authenticated) can be changed independently. You can also specify an IP address using the format `ip:port` if you wish to bind the port to a specific interface. This may be useful for example to prevent exposing the internal port outside the container.
-
-For example:
-
-```yaml
-networking:
-  listen:
-    internal: 127.0.0.1:5000
-    external: 8971
 ```
+{{ if not .enabled }}
+# intended for external traffic, protected by auth
+listen [::]:8971 ipv6only=off;
+{{ else }}
+# intended for external traffic, protected by auth
+listen [::]:8971 ipv6only=off ssl;
 
-:::warning
-
-This setting is for advanced users. For the majority of use cases it's recommended to change the `ports` section of your Docker compose file or use the Docker `run` `--publish` option instead, e.g. `-p 443:8971`. Changing Frigate's ports may break some integrations.
-
-:::
+# intended for internal traffic, not protected by auth
+listen [::]:5000 ipv6only=off;
+```
 
 ## Base path
 
@@ -233,7 +242,7 @@ To do this:
 
 ### Custom go2rtc version
 
-Frigate currently includes go2rtc v1.9.13, there may be certain cases where you want to run a different version of go2rtc.
+Frigate currently includes go2rtc v1.9.10, there may be certain cases where you want to run a different version of go2rtc.
 
 To do this:
 

docs/docs/configuration/authentication.md

@@ -86,7 +86,7 @@ Frigate looks for a JWT token secret in the following order:
 
 1. An environment variable named `FRIGATE_JWT_SECRET`
 2. A file named `FRIGATE_JWT_SECRET` in the directory specified by the `CREDENTIALS_DIRECTORY` environment variable (defaults to the Docker Secrets directory: `/run/secrets/`)
-3. A `jwt_secret` option from the Home Assistant Add-on options
+3. A `jwt_secret` option from the Home Assistant App options
 4. A `.jwt_secret` file in the config directory
 
 If no secret is found on startup, Frigate generates one and stores it in a `.jwt_secret` file in the config directory.
@@ -232,7 +232,7 @@ The viewer role provides read-only access to all cameras in the UI and API. Cust
 
 ### Role Configuration Example
 
-```yaml
+```yaml {11-16}
 cameras:
   front_door:
     # ... camera config

docs/docs/configuration/birdseye.md

@@ -24,7 +24,7 @@ A custom icon can be added to the birdseye background by providing a 180x180 ima
 
 If you want to include a camera in Birdseye view only for specific circumstances, or just don't include it at all, the Birdseye setting can be set at the camera level.
 
-```yaml
+```yaml {8-10,12-14}
 # Include all cameras by default in Birdseye view
 birdseye:
   enabled: True
@@ -48,6 +48,7 @@ By default birdseye shows all cameras that have had the configured activity in t
 ```yaml
 birdseye:
   enabled: True
+  # highlight-next-line
   inactivity_threshold: 15
 ```
 
@@ -78,9 +79,11 @@ birdseye:
 cameras:
   front:
     birdseye:
+      # highlight-next-line
       order: 1
   back:
     birdseye:
+      # highlight-next-line
       order: 2
 ```
 
@@ -92,7 +95,7 @@ It is possible to limit the number of cameras shown on birdseye at one time. Whe
 
 For example, this can be configured to only show the most recently active camera.
 
-```yaml
+```yaml {3-4}
 birdseye:
   enabled: True
   layout:
@@ -103,7 +106,7 @@ birdseye:
 
 By default birdseye tries to fit 2 cameras in each row and then double in size until a suitable layout is found. The scaling can be configured with a value between 1.0 and 5.0 depending on use case.
 
-```yaml
+```yaml {3-4}
 birdseye:
   enabled: True
   layout:

docs/docs/configuration/camera_specific.md

@@ -23,6 +23,7 @@ Some cameras support h265 with different formats, but Safari only supports the a
 cameras:
   h265_cam: # <------ Doesn't matter what the camera is called
     ffmpeg:
+      # highlight-next-line
       apple_compatibility: true # <- Adds compatibility with MacOS and iPhone
 ```
 
@@ -30,7 +31,7 @@ cameras:
 
 Note that mjpeg cameras require encoding the video into h264 for recording, and restream roles. This will use significantly more CPU than if the cameras supported h264 feeds directly. It is recommended to use the restream role to create an h264 restream and then use that as the source for ffmpeg.
 
-```yaml
+```yaml {3,10}
 go2rtc:
   streams:
     mjpeg_cam: "ffmpeg:http://your_mjpeg_stream_url#video=h264#hardware" # <- use hardware acceleration to create an h264 stream usable for other components.
@@ -96,6 +97,7 @@ This camera is H.265 only. To be able to play clips on some devices (like MacOs
 cameras:
   annkec800: # <------ Name the camera
     ffmpeg:
+      # highlight-next-line
       apple_compatibility: true # <- Adds compatibility with MacOS and iPhone
       output_args:
         record: preset-record-generic-audio-aac
@@ -244,7 +246,7 @@ go2rtc:
       - rtspx://192.168.1.1:7441/abcdefghijk
 ```
 
-[See the go2rtc docs for more information](https://github.com/AlexxIT/go2rtc/tree/v1.9.13#source-rtsp)
+[See the go2rtc docs for more information](https://github.com/AlexxIT/go2rtc/tree/v1.9.10#source-rtsp)
 
 In the Unifi 2.0 update Unifi Protect Cameras had a change in audio sample rate which causes issues for ffmpeg. The input rate needs to be set for record if used directly with unifi protect.
 
@@ -274,7 +276,7 @@ To use a USB camera (webcam) with Frigate, the recommendation is to use go2rtc's
 
 - In your Frigate Configuration File, add the go2rtc stream and roles as appropriate:
 
-```
+```yaml {4,11-12}
 go2rtc:
   streams:
     usb_camera:

docs/docs/configuration/cameras.md

@@ -66,7 +66,7 @@ Not every PTZ supports ONVIF, which is the standard protocol Frigate uses to com
 
 Add the onvif section to your camera in your configuration file:
 
-```yaml
+```yaml {4-8}
 cameras:
   back:
     ffmpeg: ...

docs/docs/configuration/custom_classification/object_classification.md

@@ -7,11 +7,11 @@ Object classification allows you to train a custom MobileNetV2 classification mo
 
 ## Minimum System Requirements
 
-Object classification models are lightweight and run very fast on CPU. Inference should be usable on virtually any machine that can run Frigate.
+Object classification models are lightweight and run very fast on CPU.
 
 Training the model does briefly use a high amount of system resources for about 1–3 minutes per training run. On lower-power devices, training may take longer.
 
-A CPU with AVX instructions is required for training and inference.
+A CPU with AVX + AVX2 instructions is required for training and inference.
 
 ## Classes
 
@@ -27,7 +27,6 @@ For object classification:
 ### Classification Type
 
 - **Sub label**:
-
   - Applied to the object’s `sub_label` field.
   - Ideal for a single, more specific identity or type.
   - Example: `cat` → `Leo`, `Charlie`, `None`.
@@ -119,6 +118,7 @@ Enable debug logs for classification models by adding `frigate.data_processing.r
 logger:
   default: info
   logs:
+    # highlight-next-line
     frigate.data_processing.real_time.custom_classification: debug
 ```
 

docs/docs/configuration/custom_classification/state_classification.md

@@ -7,11 +7,11 @@ State classification allows you to train a custom MobileNetV2 classification mod
 
 ## Minimum System Requirements
 
-State classification models are lightweight and run very fast on CPU. Inference should be usable on virtually any machine that can run Frigate.
+State classification models are lightweight and run very fast on CPU.
 
 Training the model does briefly use a high amount of system resources for about 1–3 minutes per training run. On lower-power devices, training may take longer.
 
-A CPU with AVX instructions is required for training and inference.
+A CPU with AVX + AVX2 instructions is required for training and inference.
 
 ## Classes
 
@@ -85,6 +85,7 @@ Enable debug logs for classification models by adding `frigate.data_processing.r
 logger:
   default: info
   logs:
+    # highlight-next-line
     frigate.data_processing.real_time.custom_classification: debug
 ```
 

docs/docs/configuration/face_recognition.md

@@ -9,7 +9,7 @@ Face recognition identifies known individuals by matching detected faces with pr
 
 ### Face Detection
 
-When running a Frigate+ model (or any custom model that natively detects faces) should ensure that `face` is added to the [list of objects to track](../plus/#available-label-types) either globally or for a specific camera. This will allow face detection to run at the same time as object detection and be more efficient.
+When running a Frigate+ model (or any custom model that natively detects faces) should ensure that `face` is added to the [list of objects to track](../plus/index.md#available-label-types) either globally or for a specific camera. This will allow face detection to run at the same time as object detection and be more efficient.
 
 When running a default COCO model or another model that does not include `face` as a detectable label, face detection will run via CV2 using a lightweight DNN model that runs on the CPU. In this case, you should _not_ define `face` in your list of objects to track.
 
@@ -32,6 +32,8 @@ All of these features run locally on your system.
 
 ## Minimum System Requirements
 
+A CPU with AVX + AVX2 instructions is required to run Face Recognition.
+
 The `small` model is optimized for efficiency and runs on the CPU, most CPUs should run the model efficiently.
 
 The `large` model is optimized for accuracy, an integrated or discrete GPU / NPU is required. See the [Hardware Accelerated Enrichments](/configuration/hardware_acceleration_enrichments.md) documentation.
@@ -143,17 +145,14 @@ Start with the [Usage](#usage) section and re-read the [Model Requirements](#mod
 1. Ensure `person` is being _detected_. A `person` will automatically be scanned by Frigate for a face. Any detected faces will appear in the Recent Recognitions tab in the Frigate UI's Face Library.
 
    If you are using a Frigate+ or `face` detecting model:
-
    - Watch the debug view (Settings --> Debug) to ensure that `face` is being detected along with `person`.
    - You may need to adjust the `min_score` for the `face` object if faces are not being detected.
 
    If you are **not** using a Frigate+ or `face` detecting model:
-
    - Check your `detect` stream resolution and ensure it is sufficiently high enough to capture face details on `person` objects.
    - You may need to lower your `detection_threshold` if faces are not being detected.
 
 2. Any detected faces will then be _recognized_.
-
    - Make sure you have trained at least one face per the recommendations above.
    - Adjust `recognition_threshold` settings per the suggestions [above](#advanced-configuration).
 

docs/docs/configuration/genai/config.md

@@ -5,167 +5,89 @@ title: Configuring Generative AI
 
 ## Configuration
 
-A Generative AI provider can be configured in the global config, which will make the Generative AI features available for use. There are currently 4 native providers available to integrate with Frigate. Other providers that support the OpenAI standard API can also be used. See the OpenAI-Compatible section below.
+A Generative AI provider can be configured in the global config, which will make the Generative AI features available for use. There are currently 3 native providers available to integrate with Frigate. Other providers that support the OpenAI standard API can also be used. See the OpenAI section below.
 
 To use Generative AI, you must define a single provider at the global level of your Frigate configuration. If the provider you choose requires an API key, you may either directly paste it in your configuration, or store it in an environment variable prefixed with `FRIGATE_`.
 
-## Local Providers
-
-Local providers run on your own hardware and keep all data processing private. These require a GPU or dedicated hardware for best performance.
+## Ollama
 
 :::warning
 
-Running Generative AI models on CPU is not recommended, as high inference times make using Generative AI impractical.
+Using Ollama on CPU is not recommended, high inference times make using Generative AI impractical.
 
 :::
 
-### Recommended Local Models
-
-You must use a vision-capable model with Frigate. The following models are recommended for local deployment:
-
-| Model         | Notes                                                                                                                                                                |
-| ------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `qwen3-vl`    | Strong visual and situational understanding, strong ability to identify smaller objects and interactions with object.                                                |
-| `qwen3.5`     | Strong situational understanding, but missing DeepStack from qwen3-vl leading to worse performance for identifying objects in people's hand and other small details. |
-| `Intern3.5VL` | Relatively fast with good vision comprehension                                                                                                                       |
-| `gemma3`      | Slower model with good vision and temporal understanding                                                                                                             |
-| `qwen2.5-vl`  | Fast but capable model with good vision comprehension                                                                                                                |
-
-:::info
-
-Each model is available in multiple parameter sizes (3b, 4b, 8b, etc.). Larger sizes are more capable of complex tasks and understanding of situations, but requires more memory and computational resources. It is recommended to try multiple models and experiment to see which performs best.
-
-:::
-
-:::note
-
-You should have at least 8 GB of RAM available (or VRAM if running on GPU) to run the 7B models, 16 GB to run the 13B models, and 24 GB to run the 33B models.
-
-:::
-
-### Model Types: Instruct vs Thinking
-
-Most vision-language models are available as **instruct** models, which are fine-tuned to follow instructions and respond concisely to prompts. However, some models (such as certain Qwen-VL or minigpt variants) offer both **instruct** and **thinking** versions.
-
-- **Instruct models** are always recommended for use with Frigate. These models generate direct, relevant, actionable descriptions that best fit Frigate's object and event summary use case.
-- **Reasoning / Thinking models** are fine-tuned for more free-form, open-ended, and speculative outputs, which are typically not concise and may not provide the practical summaries Frigate expects. For this reason, Frigate does **not** recommend or support using thinking models.
-
-Some models are labeled as **hybrid** (capable of both thinking and instruct tasks). In these cases, it is recommended to disable reasoning / thinking, which is generally model specific (see your models documentation).
-
-**Recommendation:**
-Always select the `-instruct` or documented instruct/tagged variant of any model you use in your Frigate configuration. If in doubt, refer to your model provider's documentation or model library for guidance on the correct model variant to use.
-
-### llama.cpp
-
-[llama.cpp](https://github.com/ggml-org/llama.cpp) is a C++ implementation of LLaMA that provides a high-performance inference server.
-
-It is highly recommended to host the llama.cpp server on a machine with a discrete graphics card, or on an Apple silicon Mac for best performance.
-
-#### Supported Models
-
-You must use a vision capable model with Frigate. The llama.cpp server supports various vision models in GGUF format.
-
-#### Configuration
-
-All llama.cpp native options can be passed through `provider_options`, including `temperature`, `top_k`, `top_p`, `min_p`, `repeat_penalty`, `repeat_last_n`, `seed`, `grammar`, and more. See the [llama.cpp server documentation](https://github.com/ggml-org/llama.cpp/blob/master/tools/server/README.md) for a complete list of available parameters.
-
-```yaml
-genai:
-  provider: llamacpp
-  base_url: http://localhost:8080
-  model: your-model-name
-  provider_options:
-    context_size: 16000 # Tell Frigate your context size so it can send the appropriate amount of information.
-```
-
-### Ollama
-
 [Ollama](https://ollama.com/) allows you to self-host large language models and keep everything running locally. It is highly recommended to host this server on a machine with an Nvidia graphics card, or on a Apple silicon Mac for best performance.
 
 Most of the 7b parameter 4-bit vision models will fit inside 8GB of VRAM. There is also a [Docker container](https://hub.docker.com/r/ollama/ollama) available.
 
 Parallel requests also come with some caveats. You will need to set `OLLAMA_NUM_PARALLEL=1` and choose a `OLLAMA_MAX_QUEUE` and `OLLAMA_MAX_LOADED_MODELS` values that are appropriate for your hardware and preferences. See the [Ollama documentation](https://docs.ollama.com/faq#how-does-ollama-handle-concurrent-requests).
 
+### Model Types: Instruct vs Thinking
+
+Most vision-language models are available as **instruct** models, which are fine-tuned to follow instructions and respond concisely to prompts. However, some models (such as certain Qwen-VL or minigpt variants) offer both **instruct** and **thinking** versions.
+
+- **Instruct models** are always recommended for use with Frigate. These models generate direct, relevant, actionable descriptions that best fit Frigate's object and event summary use case.
+- **Thinking models** are fine-tuned for more free-form, open-ended, and speculative outputs, which are typically not concise and may not provide the practical summaries Frigate expects. For this reason, Frigate does **not** recommend or support using thinking models.
+
+Some models are labeled as **hybrid** (capable of both thinking and instruct tasks). In these cases, Frigate will always use instruct-style prompts and specifically disables thinking-mode behaviors to ensure concise, useful responses.
+
+**Recommendation:**
+Always select the `-instruct` or documented instruct/tagged variant of any model you use in your Frigate configuration. If in doubt, refer to your model provider’s documentation or model library for guidance on the correct model variant to use.
+
+### Supported Models
+
+You must use a vision capable model with Frigate. Current model variants can be found [in their model library](https://ollama.com/library). Note that Frigate will not automatically download the model you specify in your config, Ollama will try to download the model but it may take longer than the timeout, it is recommended to pull the model beforehand by running `ollama pull your_model` on your Ollama server/Docker container. Note that the model specified in Frigate's config must match the downloaded model tag.
+
+:::info
+
+Each model is available in multiple parameter sizes (3b, 4b, 8b, etc.). Larger sizes are more capable of complex tasks and understanding of situations, but requires more memory and computational resources. It is recommended to try multiple models and experiment to see which performs best.
+
+:::
+
 :::tip
 
 If you are trying to use a single model for Frigate and HomeAssistant, it will need to support vision and tools calling. qwen3-VL supports vision and tools simultaneously in Ollama.
 
 :::
 
-Note that Frigate will not automatically download the model you specify in your config. Ollama will try to download the model but it may take longer than the timeout, so it is recommended to pull the model beforehand by running `ollama pull your_model` on your Ollama server/Docker container. The model specified in Frigate's config must match the downloaded model tag.
+The following models are recommended:
 
-#### Configuration
+| Model         | Notes                                                                |
+| ------------- | -------------------------------------------------------------------- |
+| `qwen3-vl`    | Strong visual and situational understanding, higher vram requirement |
+| `Intern3.5VL` | Relatively fast with good vision comprehension                       |
+| `gemma3`      | Strong frame-to-frame understanding, slower inference times          |
+| `qwen2.5-vl`  | Fast but capable model with good vision comprehension                |
+
+:::note
+
+You should have at least 8 GB of RAM available (or VRAM if running on GPU) to run the 7B models, 16 GB to run the 13B models, and 32 GB to run the 33B models.
+
+:::
+
+#### Ollama Cloud models
+
+Ollama also supports [cloud models](https://ollama.com/cloud), where your local Ollama instance handles requests from Frigate, but model inference is performed in the cloud. Set up Ollama locally, sign in with your Ollama account, and specify the cloud model name in your Frigate config. For more details, see the Ollama cloud model [docs](https://docs.ollama.com/cloud).
+
+### Configuration
 
 ```yaml
 genai:
   provider: ollama
   base_url: http://localhost:11434
   model: qwen3-vl:4b
-  provider_options: # other Ollama client options can be defined
-    keep_alive: -1
-    options:
-      num_ctx: 8192 # make sure the context matches other services that are using ollama
 ```
 
-### OpenAI-Compatible
-
-Frigate supports any provider that implements the OpenAI API standard. This includes self-hosted solutions like [vLLM](https://docs.vllm.ai/), [LocalAI](https://localai.io/), and other OpenAI-compatible servers.
-
-:::tip
-
-For OpenAI-compatible servers (such as llama.cpp) that don't expose the configured context size in the API response, you can manually specify the context size in `provider_options`:
-
-```yaml
-genai:
-  provider: openai
-  base_url: http://your-llama-server
-  model: your-model-name
-  provider_options:
-    context_size: 8192 # Specify the configured context size
-```
-
-This ensures Frigate uses the correct context window size when generating prompts.
-
-:::
-
-#### Configuration
-
-```yaml
-genai:
-  provider: openai
-  base_url: http://your-server:port
-  api_key: your-api-key # May not be required for local servers
-  model: your-model-name
-```
-
-To use a different OpenAI-compatible API endpoint, set the `OPENAI_BASE_URL` environment variable to your provider's API URL.
-
-## Cloud Providers
-
-Cloud providers run on remote infrastructure and require an API key for authentication. These services handle all model inference on their servers.
-
-### Ollama Cloud
-
-Ollama also supports [cloud models](https://ollama.com/cloud), where your local Ollama instance handles requests from Frigate, but model inference is performed in the cloud. Set up Ollama locally, sign in with your Ollama account, and specify the cloud model name in your Frigate config. For more details, see the Ollama cloud model [docs](https://docs.ollama.com/cloud).
-
-#### Configuration
-
-```yaml
-genai:
-  provider: ollama
-  base_url: http://localhost:11434
-  model: cloud-model-name
-```
-
-### Google Gemini
+## Google Gemini
 
 Google Gemini has a [free tier](https://ai.google.dev/pricing) for the API, however the limits may not be sufficient for standard Frigate usage. Choose a plan appropriate for your installation.
 
-#### Supported Models
+### Supported Models
 
 You must use a vision capable model with Frigate. Current model variants can be found [in their documentation](https://ai.google.dev/gemini-api/docs/models/gemini).
 
-#### Get API Key
+### Get API Key
 
 To start using Gemini, you must first get an API key from [Google AI Studio](https://aistudio.google.com).
 
@@ -174,7 +96,7 @@ To start using Gemini, you must first get an API key from [Google AI Studio](htt
 3. Click "Create API key in new project"
 4. Copy the API key for use in your config
 
-#### Configuration
+### Configuration
 
 ```yaml
 genai:
@@ -187,7 +109,7 @@ genai:
 
 To use a different Gemini-compatible API endpoint, set the `provider_options` with the `base_url` key to your provider's API URL. For example:
 
-```
+```yaml {4,5}
 genai:
   provider: gemini
   ...
@@ -199,19 +121,19 @@ Other HTTP options are available, see the [python-genai documentation](https://g
 
 :::
 
-### OpenAI
+## OpenAI
 
 OpenAI does not have a free tier for their API. With the release of gpt-4o, pricing has been reduced and each generation should cost fractions of a cent if you choose to go this route.
 
-#### Supported Models
+### Supported Models
 
 You must use a vision capable model with Frigate. Current model variants can be found [in their documentation](https://platform.openai.com/docs/models).
 
-#### Get API Key
+### Get API Key
 
 To start using OpenAI, you must first [create an API key](https://platform.openai.com/api-keys) and [configure billing](https://platform.openai.com/settings/organization/billing/overview).
 
-#### Configuration
+### Configuration
 
 ```yaml
 genai:
@@ -220,19 +142,42 @@ genai:
   model: gpt-4o
 ```
 
-### Azure OpenAI
+:::note
+
+To use a different OpenAI-compatible API endpoint, set the `OPENAI_BASE_URL` environment variable to your provider's API URL.
+
+:::
+
+:::tip
+
+For OpenAI-compatible servers (such as llama.cpp) that don't expose the configured context size in the API response, you can manually specify the context size in `provider_options`:
+
+```yaml {5,6}
+genai:
+  provider: openai
+  base_url: http://your-llama-server
+  model: your-model-name
+  provider_options:
+    context_size: 8192 # Specify the configured context size
+```
+
+This ensures Frigate uses the correct context window size when generating prompts.
+
+:::
+
+## Azure OpenAI
 
 Microsoft offers several vision models through Azure OpenAI. A subscription is required.
 
-#### Supported Models
+### Supported Models
 
 You must use a vision capable model with Frigate. Current model variants can be found [in their documentation](https://learn.microsoft.com/en-us/azure/ai-services/openai/concepts/models).
 
-#### Create Resource and Get API Key
+### Create Resource and Get API Key
 
 To start using Azure OpenAI, you must first [create a resource](https://learn.microsoft.com/azure/cognitive-services/openai/how-to/create-resource?pivots=web-portal#create-a-resource). You'll need your API key, model name, and resource URL, which must include the `api-version` parameter (see the example below).
 
-#### Configuration
+### Configuration
 
 ```yaml
 genai:

docs/docs/configuration/genai/objects.md

@@ -11,7 +11,7 @@ By default, descriptions will be generated for all tracked objects and all zones
 
 Optionally, you can generate the description using a snapshot (if enabled) by setting `use_snapshot` to `True`. By default, this is set to `False`, which sends the uncompressed images from the `detect` stream collected over the object's lifetime to the model. Once the object lifecycle ends, only a single compressed and cropped thumbnail is saved with the tracked object. Using a snapshot might be useful when you want to _regenerate_ a tracked object's description as it will provide the AI with a higher-quality image (typically downscaled by the AI itself) than the cropped/compressed thumbnail. Using a snapshot otherwise has a trade-off in that only a single image is sent to your provider, which will limit the model's ability to determine object movement or direction.
 
-Generative AI object descriptions can also be toggled dynamically for a camera via MQTT with the topic `frigate/<camera_name>/object_descriptions/set`. See the [MQTT documentation](/integrations/mqtt#frigatecamera_nameobject_descriptionsset).
+Generative AI object descriptions can also be toggled dynamically for a camera via MQTT with the topic `frigate/<camera_name>/object_descriptions/set`. See the [MQTT documentation](/integrations/mqtt/#frigatecamera_nameobjectdescriptionsset).
 
 ## Usage and Best Practices
 

docs/docs/configuration/genai/review_summaries.md

@@ -7,7 +7,7 @@ Generative AI can be used to automatically generate structured summaries of revi
 
 Requests for a summary are requested automatically to your AI provider for alert review items when the activity has ended, they can also be optionally enabled for detections as well.
 
-Generative AI review summaries can also be toggled dynamically for a [camera via MQTT](/integrations/mqtt#frigatecamera_namereview_descriptionsset).
+Generative AI review summaries can also be toggled dynamically for a [camera via MQTT](/integrations/mqtt/#frigatecamera_namereviewdescriptionsset).
 
 ## Review Summary Usage and Best Practices
 
@@ -80,6 +80,7 @@ By default, review summaries use preview images (cached preview frames) which ha
 review:
   genai:
     enabled: true
+    # highlight-next-line
     image_source: recordings # Options: "preview" (default) or "recordings"
 ```
 
@@ -104,7 +105,7 @@ If recordings are not available for a given time period, the system will automat
 
 Along with the concern of suspicious activity or immediate threat, you may have concerns such as animals in your garden or a gate being left open. These concerns can be configured so that the review summaries will make note of them if the activity requires additional review. For example:
 
-```yaml
+```yaml {4,5}
 review:
   genai:
     enabled: true
@@ -116,7 +117,7 @@ review:
 
 By default, review summaries are generated in English. You can configure Frigate to generate summaries in your preferred language by setting the `preferred_language` option:
 
-```yaml
+```yaml {4}
 review:
   genai:
     enabled: true

docs/docs/configuration/hardware_acceleration_video.md

@@ -10,6 +10,7 @@ import CommunityBadge from '@site/src/components/CommunityBadge';
 It is highly recommended to use an integrated or discrete GPU for hardware acceleration video decoding in Frigate.
 
 Some types of hardware acceleration are detected and used automatically, but you may need to update your configuration to enable hardware accelerated decoding in ffmpeg. To verify that hardware acceleration is working:
+
 - Check the logs: A message will either say that hardware acceleration was automatically detected, or there will be a warning that no hardware acceleration was automatically detected
 - If hardware acceleration is specified in the config, verification can be done by ensuring the logs are free from errors. There is no CPU fallback for hardware acceleration.
 
@@ -67,7 +68,7 @@ Frigate can utilize most Intel integrated GPUs and Arc GPUs to accelerate video
 
 :::note
 
-The default driver is `iHD`. You may need to change the driver to `i965` by adding the following environment variable `LIBVA_DRIVER_NAME=i965` to your docker-compose file or [in the `config.yml` for HA Add-on users](advanced.md#environment_vars).
+The default driver is `iHD`. You may need to change the driver to `i965` by adding the following environment variable `LIBVA_DRIVER_NAME=i965` to your docker-compose file or [in the `config.yml` for HA App users](advanced.md#environment_vars).
 
 See [The Intel Docs](https://www.intel.com/content/www/us/en/support/articles/000005505/processors.html) to figure out what generation your CPU is.
 
@@ -116,12 +117,13 @@ services:
   frigate:
     ...
     image: ghcr.io/blakeblackshear/frigate:stable
+    # highlight-next-line
     privileged: true
 ```
 
 ##### Docker Run CLI - Privileged
 
-```bash
+```bash {4}
 docker run -d \
   --name frigate \
   ...
@@ -135,7 +137,7 @@ Only recent versions of Docker support the `CAP_PERFMON` capability. You can tes
 
 ##### Docker Compose - CAP_PERFMON
 
-```yaml
+```yaml {5,6}
 services:
   frigate:
     ...
@@ -146,7 +148,7 @@ services:
 
 ##### Docker Run CLI - CAP_PERFMON
 
-```bash
+```bash {4}
 docker run -d \
   --name frigate \
   ...
@@ -188,7 +190,7 @@ Frigate can utilize modern AMD integrated GPUs and AMD GPUs to accelerate video
 
 ### Configuring Radeon Driver
 
-You need to change the driver to `radeonsi` by adding the following environment variable `LIBVA_DRIVER_NAME=radeonsi` to your docker-compose file or [in the `config.yml` for HA Add-on users](advanced.md#environment_vars).
+You need to change the driver to `radeonsi` by adding the following environment variable `LIBVA_DRIVER_NAME=radeonsi` to your docker-compose file or [in the `config.yml` for HA App users](advanced.md#environment_vars).
 
 ### Via VAAPI
 
@@ -213,7 +215,7 @@ Additional configuration is needed for the Docker container to be able to access
 
 #### Docker Compose - Nvidia GPU
 
-```yaml
+```yaml {5-12}
 services:
   frigate:
     ...
@@ -230,7 +232,7 @@ services:
 
 #### Docker Run CLI - Nvidia GPU
 
-```bash
+```bash {4}
 docker run -d \
   --name frigate \
   ...
@@ -292,7 +294,7 @@ These instructions were originally based on the [Jellyfin documentation](https:/
 ## Raspberry Pi 3/4
 
 Ensure you increase the allocated RAM for your GPU to at least 128 (`raspi-config` > Performance Options > GPU Memory).
-If you are using the HA Add-on, you may need to use the full access variant and turn off _Protection mode_ for hardware acceleration.
+If you are using the HA App, you may need to use the full access variant and turn off _Protection mode_ for hardware acceleration.
 
 ```yaml
 # if you want to decode a h264 stream
@@ -309,7 +311,7 @@ ffmpeg:
 If running Frigate through Docker, you either need to run in privileged mode or
 map the `/dev/video*` devices to Frigate. With Docker Compose add:
 
-```yaml
+```yaml {4-5}
 services:
   frigate:
     ...
@@ -319,7 +321,7 @@ services:
 
 Or with `docker run`:
 
-```bash
+```bash {4}
 docker run -d \
   --name frigate \
   ...
@@ -351,7 +353,7 @@ You will need to use the image with the nvidia container runtime:
 
 ### Docker Run CLI - Jetson
 
-```bash
+```bash {3}
 docker run -d \
   ...
   --runtime nvidia
@@ -360,7 +362,7 @@ docker run -d \
 
 ### Docker Compose - Jetson
 
-```yaml
+```yaml {5}
 services:
   frigate:
     ...
@@ -451,14 +453,14 @@ Restarting ffmpeg...
 
 you should try to uprade to FFmpeg 7. This can be done using this config option:
 
-```
+```yaml
 ffmpeg:
   path: "7.0"
 ```
 
 You can set this option globally to use FFmpeg 7 for all cameras or on camera level to use it only for specific cameras. Do not confuse this option with:
 
-```
+```yaml
 cameras:
   name:
     ffmpeg:
@@ -480,7 +482,7 @@ Make sure to follow the [Synaptics specific installation instructions](/frigate/
 
 Add one of the following FFmpeg presets to your `config.yml` to enable hardware video processing:
 
-```yaml
+```yaml {2}
 ffmpeg:
   hwaccel_args: -c:v h264_v4l2m2m
   input_args: preset-rtsp-restream

docs/docs/configuration/index.md

@@ -3,7 +3,7 @@ id: index
 title: Frigate Configuration
 ---
 
-For Home Assistant Add-on installations, the config file should be at `/addon_configs/<addon_directory>/config.yml`, where `<addon_directory>` is specific to the variant of the Frigate Add-on you are running. See the list of directories [here](#accessing-add-on-config-dir).
+For Home Assistant App installations, the config file should be at `/addon_configs/<addon_directory>/config.yml`, where `<addon_directory>` is specific to the variant of the Frigate App you are running. See the list of directories [here](#accessing-app-config-dir).
 
 For all other installation types, the config file should be mapped to `/config/config.yml` inside the container.
 
@@ -25,11 +25,11 @@ cameras:
             - detect
 ```
 
-## Accessing the Home Assistant Add-on configuration directory {#accessing-add-on-config-dir}
+## Accessing the Home Assistant App configuration directory {#accessing-app-config-dir}
 
-When running Frigate through the HA Add-on, the Frigate `/config` directory is mapped to `/addon_configs/<addon_directory>` in the host, where `<addon_directory>` is specific to the variant of the Frigate Add-on you are running.
+When running Frigate through the HA App, the Frigate `/config` directory is mapped to `/addon_configs/<addon_directory>` in the host, where `<addon_directory>` is specific to the variant of the Frigate App you are running.
 
-| Add-on Variant             | Configuration directory                   |
+| App Variant                | Configuration directory                   |
 | -------------------------- | ----------------------------------------- |
 | Frigate                    | `/addon_configs/ccab4aaf_frigate`         |
 | Frigate (Full Access)      | `/addon_configs/ccab4aaf_frigate-fa`      |
@@ -38,11 +38,11 @@ When running Frigate through the HA Add-on, the Frigate `/config` directory is m
 
 **Whenever you see `/config` in the documentation, it refers to this directory.**
 
-If for example you are running the standard Add-on variant and use the [VS Code Add-on](https://github.com/hassio-addons/addon-vscode) to browse your files, you can click _File_ > _Open folder..._ and navigate to `/addon_configs/ccab4aaf_frigate` to access the Frigate `/config` directory and edit the `config.yaml` file. You can also use the built-in file editor in the Frigate UI to edit the configuration file.
+If for example you are running the standard App variant and use the [VS Code App](https://github.com/hassio-addons/addon-vscode) to browse your files, you can click _File_ > _Open folder..._ and navigate to `/addon_configs/ccab4aaf_frigate` to access the Frigate `/config` directory and edit the `config.yaml` file. You can also use the built-in file editor in the Frigate UI to edit the configuration file.
 
 ## VS Code Configuration Schema
 
-VS Code supports JSON schemas for automatically validating configuration files. You can enable this feature by adding `# yaml-language-server: $schema=http://frigate_host:5000/api/config/schema.json` to the beginning of the configuration file. Replace `frigate_host` with the IP address or hostname of your Frigate server. If you're using both VS Code and Frigate as an Add-on, you should use `ccab4aaf-frigate` instead. Make sure to expose the internal unauthenticated port `5000` when accessing the config from VS Code on another machine.
+VS Code supports JSON schemas for automatically validating configuration files. You can enable this feature by adding `# yaml-language-server: $schema=http://frigate_host:5000/api/config/schema.json` to the beginning of the configuration file. Replace `frigate_host` with the IP address or hostname of your Frigate server. If you're using both VS Code and Frigate as an App, you should use `ccab4aaf-frigate` instead. Make sure to expose the internal unauthenticated port `5000` when accessing the config from VS Code on another machine.
 
 ## Environment Variable Substitution
 
@@ -50,6 +50,7 @@ Frigate supports the use of environment variables starting with `FRIGATE_` **onl
 
 ```yaml
 mqtt:
+  host: "{FRIGATE_MQTT_HOST}"
   user: "{FRIGATE_MQTT_USER}"
   password: "{FRIGATE_MQTT_PASSWORD}"
 ```
@@ -60,7 +61,7 @@ mqtt:
 
 ```yaml
 onvif:
-  host: 10.0.10.10
+  host: "192.168.1.12"
   port: 8000
   user: "{FRIGATE_RTSP_USER}"
   password: "{FRIGATE_RTSP_PASSWORD}"
@@ -82,10 +83,10 @@ genai:
 
 Here are some common starter configuration examples. Refer to the [reference config](./reference.md) for detailed information about all the config values.
 
-### Raspberry Pi Home Assistant Add-on with USB Coral
+### Raspberry Pi Home Assistant App with USB Coral
 
 - Single camera with 720p, 5fps stream for detect
-- MQTT connected to the Home Assistant Mosquitto Add-on
+- MQTT connected to the Home Assistant Mosquitto App
 - Hardware acceleration for decoding video
 - USB Coral detector
 - Save all video with any detectable motion for 7 days regardless of whether any objects were detected or not
@@ -138,10 +139,7 @@ cameras:
             - detect
     motion:
       mask:
-        timestamp:
-          friendly_name: "Camera timestamp"
-          enabled: true
-          coordinates: "0.000,0.427,0.002,0.000,0.999,0.000,0.999,0.781,0.885,0.456,0.700,0.424,0.701,0.311,0.507,0.294,0.453,0.347,0.451,0.400"
+        - 0.000,0.427,0.002,0.000,0.999,0.000,0.999,0.781,0.885,0.456,0.700,0.424,0.701,0.311,0.507,0.294,0.453,0.347,0.451,0.400
 ```
 
 ### Standalone Intel Mini PC with USB Coral
@@ -198,10 +196,7 @@ cameras:
             - detect
     motion:
       mask:
-        timestamp:
-          friendly_name: "Camera timestamp"
-          enabled: true
-          coordinates: "0.000,0.427,0.002,0.000,0.999,0.000,0.999,0.781,0.885,0.456,0.700,0.424,0.701,0.311,0.507,0.294,0.453,0.347,0.451,0.400"
+        - 0.000,0.427,0.002,0.000,0.999,0.000,0.999,0.781,0.885,0.456,0.700,0.424,0.701,0.311,0.507,0.294,0.453,0.347,0.451,0.400
 ```
 
 ### Home Assistant integrated Intel Mini PC with OpenVino
@@ -268,8 +263,5 @@ cameras:
             - detect
     motion:
       mask:
-        timestamp:
-          friendly_name: "Camera timestamp"
-          enabled: true
-          coordinates: "0.000,0.427,0.002,0.000,0.999,0.000,0.999,0.781,0.885,0.456,0.700,0.424,0.701,0.311,0.507,0.294,0.453,0.347,0.451,0.400"
+        - 0.000,0.427,0.002,0.000,0.999,0.000,0.999,0.781,0.885,0.456,0.700,0.424,0.701,0.311,0.507,0.294,0.453,0.347,0.451,0.400
 ```

docs/docs/configuration/license_plate_recognition.md

@@ -30,7 +30,7 @@ In the default mode, Frigate's LPR needs to first detect a `car` or `motorcycle`
 
 ## Minimum System Requirements
 
-License plate recognition works by running AI models locally on your system. The YOLOv9 plate detector model and the OCR models ([PaddleOCR](https://github.com/PaddlePaddle/PaddleOCR)) are relatively lightweight and can run on your CPU or GPU, depending on your configuration. At least 4GB of RAM is required.
+License plate recognition works by running AI models locally on your system. The YOLOv9 plate detector model and the OCR models ([PaddleOCR](https://github.com/PaddlePaddle/PaddleOCR)) are relatively lightweight and can run on your CPU or GPU, depending on your configuration. At least 4GB of RAM and a CPU with AVX + AVX2 instructions is required.
 
 ## Configuration
 
@@ -43,7 +43,7 @@ lpr:
 
 Like other enrichments in Frigate, LPR **must be enabled globally** to use the feature. You should disable it for specific cameras at the camera level if you don't want to run LPR on cars on those cameras:
 
-```yaml
+```yaml {4,5}
 cameras:
   garage:
     ...
@@ -375,7 +375,6 @@ Use `match_distance` to allow small character mismatches. Alternatively, define
 Start with ["Why isn't my license plate being detected and recognized?"](#why-isnt-my-license-plate-being-detected-and-recognized). If you are still having issues, work through these steps.
 
 1. Start with a simplified LPR config.
-
    - Remove or comment out everything in your LPR config, including `min_area`, `min_plate_length`, `format`, `known_plates`, or `enhancement` values so that the only values left are `enabled` and `debug_save_plates`. This will run LPR with Frigate's default values.
 
      ```yaml
@@ -386,31 +385,28 @@ Start with ["Why isn't my license plate being detected and recognized?"](#why-is
      ```
 
 2. Enable debug logs to see exactly what Frigate is doing.
-
    - Enable debug logs for LPR by adding `frigate.data_processing.common.license_plate: debug` to your `logger` configuration. These logs are _very_ verbose, so only keep this enabled when necessary. Restart Frigate after this change.
 
      ```yaml
      logger:
        default: info
        logs:
+        # highlight-next-line
          frigate.data_processing.common.license_plate: debug
      ```
 
 3. Ensure your plates are being _detected_.
 
    If you are using a Frigate+ or `license_plate` detecting model:
-
    - Watch the debug view (Settings --> Debug) to ensure that `license_plate` is being detected.
    - View MQTT messages for `frigate/events` to verify detected plates.
    - You may need to adjust your `min_score` and/or `threshold` for the `license_plate` object if your plates are not being detected.
 
    If you are **not** using a Frigate+ or `license_plate` detecting model:
-
    - Watch the debug logs for messages from the YOLOv9 plate detector.
    - You may need to adjust your `detection_threshold` if your plates are not being detected.
 
 4. Ensure the characters on detected plates are being _recognized_.
-
    - Enable `debug_save_plates` to save images of detected text on plates to the clips directory (`/media/frigate/clips/lpr`). Ensure these images are readable and the text is clear.
    - Watch the debug view to see plates recognized in real-time. For non-dedicated LPR cameras, the `car` or `motorcycle` label will change to the recognized plate when LPR is enabled and working.
    - Adjust `recognition_threshold` settings per the suggestions [above](#advanced-configuration).

docs/docs/configuration/live.md

@@ -15,7 +15,7 @@ The jsmpeg live view will use more browser and client GPU resources. Using go2rt
 | ------ | ------------------------------------- | ---------- | ---------------------------- | --------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | jsmpeg | same as `detect -> fps`, capped at 10 | 720p       | no                           | no              | Resolution is configurable, but go2rtc is recommended if you want higher resolutions and better frame rates. jsmpeg is Frigate's default without go2rtc configured. |
 | mse    | native                                | native     | yes (depends on audio codec) | yes             | iPhone requires iOS 17.1+, Firefox is h.264 only. This is Frigate's default when go2rtc is configured.                                                              |
-| webrtc | native                                | native     | yes (depends on audio codec) | yes             | Requires extra configuration. Frigate attempts to use WebRTC when MSE fails or when using a camera's two-way talk feature.                   |
+| webrtc | native                                | native     | yes (depends on audio codec) | yes             | Requires extra configuration. Frigate attempts to use WebRTC when MSE fails or when using a camera's two-way talk feature.                                          |
 
 ### Camera Settings Recommendations
 
@@ -77,7 +77,7 @@ Configure the `streams` option with a "friendly name" for your stream followed b
 
 Using Frigate's internal version of go2rtc is required to use this feature. You cannot specify paths in the `streams` configuration, only go2rtc stream names.
 
-```yaml
+```yaml {3,6,8,25-29}
 go2rtc:
   streams:
     test_cam:
@@ -114,9 +114,9 @@ cameras:
 WebRTC works by creating a TCP or UDP connection on port `8555`. However, it requires additional configuration:
 
 - For external access, over the internet, setup your router to forward port `8555` to port `8555` on the Frigate device, for both TCP and UDP.
-- For internal/local access, unless you are running through the HA Add-on, you will also need to set the WebRTC candidates list in the go2rtc config. For example, if `192.168.1.10` is the local IP of the device running Frigate:
+- For internal/local access, unless you are running through the HA App, you will also need to set the WebRTC candidates list in the go2rtc config. For example, if `192.168.1.10` is the local IP of the device running Frigate:
 
-  ```yaml title="config.yml"
+  ```yaml title="config.yml" {4-7}
   go2rtc:
     streams:
       test_cam: ...
@@ -128,13 +128,13 @@ WebRTC works by creating a TCP or UDP connection on port `8555`. However, it req
 
 - For access through Tailscale, the Frigate system's Tailscale IP must be added as a WebRTC candidate. Tailscale IPs all start with `100.`, and are reserved within the `100.64.0.0/10` CIDR block.
 
-- Note that some browsers may not support H.265 (HEVC). You can check your browser's current version for H.265 compatibility [here](https://github.com/AlexxIT/go2rtc?tab=readme-ov-file#codecs-madness). 
+- Note that some browsers may not support H.265 (HEVC). You can check your browser's current version for H.265 compatibility [here](https://github.com/AlexxIT/go2rtc?tab=readme-ov-file#codecs-madness).
 
 :::tip
 
-This extra configuration may not be required if Frigate has been installed as a Home Assistant Add-on, as Frigate uses the Supervisor's API to generate a WebRTC candidate.
+This extra configuration may not be required if Frigate has been installed as a Home Assistant App, as Frigate uses the Supervisor's API to generate a WebRTC candidate.
 
-However, it is recommended if issues occur to define the candidates manually. You should do this if the Frigate Add-on fails to generate a valid candidate. If an error occurs you will see some warnings like the below in the Add-on logs page during the initialization:
+However, it is recommended if issues occur to define the candidates manually. You should do this if the Frigate App fails to generate a valid candidate. If an error occurs you will see some warnings like the below in the App logs page during the initialization:
 
 ```log
 [WARN] Failed to get IP address from supervisor
@@ -154,7 +154,7 @@ If not running in host mode, port 8555 will need to be mapped for the container:
 
 docker-compose.yml
 
-```yaml
+```yaml {4-6}
 services:
   frigate:
     ...
@@ -222,34 +222,28 @@ Note that disabling a camera through the config file (`enabled: False`) removes
 When your browser runs into problems playing back your camera streams, it will log short error messages to the browser console. They indicate playback, codec, or network issues on the client/browser side, not something server side with Frigate itself. Below are the common messages you may see and simple actions you can take to try to resolve them.
 
 - **startup**
-
   - What it means: The player failed to initialize or connect to the live stream (network or startup error).
   - What to try: Reload the Live view or click _Reset_. Verify `go2rtc` is running and the camera stream is reachable. Try switching to a different stream from the Live UI dropdown (if available) or use a different browser.
 
   - Possible console messages from the player code:
-
     - `Error opening MediaSource.`
     - `Browser reported a network error.`
     - `Max error count ${errorCount} exceeded.` (the numeric value will vary)
 
 - **mse-decode**
-
   - What it means: The browser reported a decoding error while trying to play the stream, which usually is a result of a codec incompatibility or corrupted frames.
   - What to try: Check the browser console for the supported and negotiated codecs. Ensure your camera/restream is using H.264 video and AAC audio (these are the most compatible). If your camera uses a non-standard audio codec, configure `go2rtc` to transcode the stream to AAC. Try another browser (some browsers have stricter MSE/codec support) and, for iPhone, ensure you're on iOS 17.1 or newer.
 
   - Possible console messages from the player code:
-
     - `Safari cannot open MediaSource.`
     - `Safari reported InvalidStateError.`
     - `Safari reported decoding errors.`
 
 - **stalled**
-
   - What it means: Playback has stalled because the player has fallen too far behind live (extended buffering or no data arriving).
   - What to try: This is usually indicative of the browser struggling to decode too many high-resolution streams at once. Try selecting a lower-bandwidth stream (substream), reduce the number of live streams open, improve the network connection, or lower the camera resolution. Also check your camera's keyframe (I-frame) interval — shorter intervals make playback start and recover faster. You can also try increasing the timeout value in the UI pane of Frigate's settings.
 
   - Possible console messages from the player code:
-
     - `Buffer time (10 seconds) exceeded, browser may not be playing media correctly.`
     - `Media playback has stalled after <n> seconds due to insufficient buffering or a network interruption.` (the seconds value will vary)
 
@@ -270,21 +264,18 @@ When your browser runs into problems playing back your camera streams, it will l
    If you are using continuous streaming or you are loading more than a few high resolution streams at once on the dashboard, your browser may struggle to begin playback of your streams before the timeout. Frigate always prioritizes showing a live stream as quickly as possible, even if it is a lower quality jsmpeg stream. You can use the "Reset" link/button to try loading your high resolution stream again.
 
    Errors in stream playback (e.g., connection failures, codec issues, or buffering timeouts) that cause the fallback to low bandwidth mode (jsmpeg) are logged to the browser console for easier debugging. These errors may include:
-
    - Network issues (e.g., MSE or WebRTC network connection problems).
    - Unsupported codecs or stream formats (e.g., H.265 in WebRTC, which is not supported in some browsers).
    - Buffering timeouts or low bandwidth conditions causing fallback to jsmpeg.
    - Browser compatibility problems (e.g., iOS Safari limitations with MSE).
 
    To view browser console logs:
-
    1. Open the Frigate Live View in your browser.
    2. Open the browser's Developer Tools (F12 or right-click > Inspect > Console tab).
    3. Reproduce the error (e.g., load a problematic stream or simulate network issues).
    4. Look for messages prefixed with the camera name.
 
    These logs help identify if the issue is player-specific (MSE vs. WebRTC) or related to camera configuration (e.g., go2rtc streams, codecs). If you see frequent errors:
-
    - Verify your camera's H.264/AAC settings (see [Frigate's camera settings recommendations](#camera_settings_recommendations)).
    - Check go2rtc configuration for transcoding (e.g., audio to AAC/OPUS).
    - Test with a different stream via the UI dropdown (if `live -> streams` is configured).
@@ -324,9 +315,7 @@ When your browser runs into problems playing back your camera streams, it will l
    To prevent this, make the `detect` stream match the go2rtc live stream's aspect ratio (resolution does not need to match, just the aspect ratio). You can either adjust the camera's output resolution or set the `width` and `height` values in your config's `detect` section to a resolution with an aspect ratio that matches.
 
    Example: Resolutions from two streams
-
    - Mismatched (may cause aspect ratio switching on the dashboard):
-
      - Live/go2rtc stream: 1920x1080 (16:9)
      - Detect stream: 640x352 (~1.82:1, not 16:9)
 

docs/docs/configuration/masks.md

@@ -3,6 +3,8 @@ id: masks
 title: Masks
 ---
 
+Frigate has two kinds of masks: motion masks and object filter masks. Both are narrow tools for fine-tuning, **not for hiding an area from Frigate**. Masks should be used sparingly; in most cases where users reach for one, a [zone](zones.md) with `required_zones` is the right tool instead. See [Which tool do I need?](#which-tool-do-i-need) and [Common mistakes](#common-mistakes) below if you're new to Frigate's mask behavior.
+
 ## Motion masks
 
 Motion masks are used to prevent unwanted types of motion from triggering detection. Try watching the Debug feed (Settings --> Debug) with `Motion Boxes` enabled to see what may be regularly detected as motion. For example, you want to mask out your timestamp, the sky, rooftops, etc. Keep in mind that this mask only prevents motion from being detected and does not prevent objects from being detected if object detection was started due to motion in unmasked areas. Motion is also used during object tracking to refine the object detection area in the next frame. _Over-masking will make it more difficult for objects to be tracked._
@@ -17,6 +19,15 @@ Object filter masks can be used to filter out stubborn false positives in fixed
 
 ![object mask](/img/bottom-center-mask.jpg)
 
+## Which tool do I need?
+
+| What you're trying to do                                                                                                       | Recommended tool                                                                                            | How it works                                                                                                                                                                                |
+| ------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Don't get alerts or recordings for activity in an area (e.g., the sidewalk in front of your house)                             | A [zone](zones.md) combined with `review.alerts.required_zones` (and/or `review.detections.required_zones`) | Frigate keeps detecting and tracking activity in the area, but a review item is only created once the bottom-center of an object's bounding box enters a required zone.                     |
+| Stop a stubborn false positive at a specific fixed spot (e.g., a tree base that keeps being detected as a person)              | An **object filter mask** for that object type                                                              | Any detection of that object type whose bounding-box bottom-center lands inside the mask is treated as a false positive and discarded.                                                      |
+| Ignore motion in an area that obviously isn't an object of interest (e.g., the camera timestamp, sky, flags, treetops swaying) | A **motion mask**                                                                                           | Motion inside the mask is ignored when deciding whether to run object detection. Objects can still be detected in a motion masked area if motion elsewhere in the frame triggers detection. |
+| Stop tracking an object type altogether on this camera (e.g., you never care about cats)                                       | Remove the object from the camera's [`objects.track`](objects.md) list                                      | Frigate skips this object type entirely on this camera, regardless of where it appears.                                                                                                     |
+
 ## Using the mask creator
 
 To create a poly mask:
@@ -33,55 +44,18 @@ Your config file will be updated with the relative coordinates of the mask/zone:
 
 ```yaml
 motion:
-  mask:
-    # Motion mask name (required)
-    mask1:
-      # Optional: A friendly name for the mask
-      friendly_name: "Timestamp area"
-      # Optional: Whether this mask is active (default: true)
-      enabled: true
-      # Required: Coordinates polygon for the mask
-      coordinates: "0.000,0.427,0.002,0.000,0.999,0.000,0.999,0.781,0.885,0.456,0.700,0.424,0.701,0.311,0.507,0.294,0.453,0.347,0.451,0.400"
+  mask: "0.000,0.427,0.002,0.000,0.999,0.000,0.999,0.781,0.885,0.456,0.700,0.424,0.701,0.311,0.507,0.294,0.453,0.347,0.451,0.400"
 ```
 
-Multiple motion masks can be listed in your config:
+Multiple masks can be listed in your config.
 
 ```yaml
 motion:
   mask:
-    mask1:
-      friendly_name: "Timestamp area"
-      enabled: true
-      coordinates: "0.239,1.246,0.175,0.901,0.165,0.805,0.195,0.802"
-    mask2:
-      friendly_name: "Tree area"
-      enabled: true
-      coordinates: "0.000,0.427,0.002,0.000,0.999,0.000,0.999,0.781,0.885,0.456"
+    - 0.239,1.246,0.175,0.901,0.165,0.805,0.195,0.802
+    - 0.000,0.427,0.002,0.000,0.999,0.000,0.999,0.781,0.885,0.456
 ```
 
-Object filter masks can also be created through the UI or manually in the config. They are configured under the object filters section for each object type:
-
-```yaml
-objects:
-  filters:
-    person:
-      mask:
-        person_filter1:
-          friendly_name: "Roof area"
-          enabled: true
-          coordinates: "0.000,0.000,1.000,0.000,1.000,0.400,0.000,0.400"
-    car:
-      mask:
-        car_filter1:
-          friendly_name: "Sidewalk area"
-          enabled: true
-          coordinates: "0.000,0.700,1.000,0.700,1.000,1.000,0.000,1.000"
-```
-
-## Enabling/Disabling Masks
-
-Both motion masks and object filter masks can be toggled on or off without removing them from the configuration. Disabled masks are completely ignored at runtime - they will not affect motion detection or object filtering. This is useful for temporarily disabling a mask during certain seasons or times of day without modifying the configuration.
-
 ### Further Clarification
 
 This is a response to a [question posed on reddit](https://www.reddit.com/r/homeautomation/comments/ppxdve/replacing_my_doorbell_with_a_security_camera_a_6/hd876w4?utm_source=share&utm_medium=web2x&context=3):
@@ -119,3 +93,14 @@ This is what `required_zones` are for. You should define a zone (remember this i
 > Maybe my specific situation just warrants this. I've just been having a hard time understanding the relevance of this information - it seems to be that it's exactly what would be expected when "masking out" an area of ANY image.
 
 That may be the case for you. Frigate will definitely work harder tracking people on the sidewalk to make sure it doesn't miss anyone who steps foot on your stoop. The trade off with the way you have it now is slower recognition of objects and potential misses. That may be acceptable based on your needs. Also, if your resolution is low enough on the detect stream, your regions may already be so big that they grab the entire object anyway.
+
+## Common mistakes
+
+**"I added a motion mask to ignore my driveway/sidewalk."**
+A motion mask doesn't hide an area from Frigate. Objects can still be detected and tracked inside a masked area. The mask only stops motion _in that area_ from triggering object detection. If you want activity on the sidewalk to never produce a review item, define a [zone](zones.md) over the area you DO care about (your stoop, your driveway) and add it to `review.alerts.required_zones`. Frigate will still see people on the sidewalk, but it won't create an alert until they cross into the zone.
+
+**"I added an object filter mask because I don't care about cars in my yard."**
+Object filter masks are for stubborn false positives at fixed locations, not for filtering whole areas or whole object types. If you only want alerts when a car enters the driveway, use a [zone](zones.md) with `required_zones`. If you don't care about a whole object type on this camera, remove it from [`objects.track`](objects.md).
+
+**"I masked everything except a thin strip on my stoop."**
+Heavy masking hurts tracking. Frigate uses motion near a tracked object's previous bounding box to decide where to look in the next frame; with most of the frame masked, an object walking from an unmasked area into a masked one effectively disappears and gets picked up as a "new" object when it reappears. For example: someone walks down your sidewalk, stops under a tree (masked area) to tie their shoe, then continues. Frigate sees that as two separate people and can create two separate review items. Because Frigate needs several consecutive frames above the confidence threshold to commit to a detection, each re-appearance can also delay or miss alerts. Use `required_zones` for "only alert me about this spot" and leave the surrounding area unmasked so tracking stays intact.

docs/docs/configuration/motion_detection.md

@@ -38,6 +38,7 @@ Remember that motion detection is just used to determine when object detection s
 The threshold value dictates how much of a change in a pixels luminance is required to be considered motion.
 
 ```yaml
+# default threshold value
 motion:
   # Optional: The threshold passed to cv2.threshold to determine if a pixel is different enough to be counted as motion. (default: shown below)
   # Increasing this value will make motion detection less sensitive and decreasing it will make motion detection more sensitive.
@@ -52,6 +53,7 @@ Watching the motion boxes in the debug view, increase the threshold until you on
 ### Contour Area
 
 ```yaml
+# default contour_area value
 motion:
   # Optional: Minimum size in pixels in the resized motion image that counts as motion (default: shown below)
   # Increasing this value will prevent smaller areas of motion from being detected. Decreasing will
@@ -79,49 +81,27 @@ However, if the preferred day settings do not work well at night it is recommend
 
 ## Tuning For Large Changes In Motion
 
-### Lightning Threshold
-
 ```yaml
+# default lightning_threshold:
 motion:
-  # Optional: The percentage of the image used to detect lightning or
-  #           other substantial changes where motion detection needs to
-  #           recalibrate. (default: shown below)
-  #           Increasing this value will make motion detection more likely
-  #           to consider lightning or IR mode changes as valid motion.
-  #           Decreasing this value will make motion detection more likely
-  #           to ignore large amounts of motion such as a person
-  #           approaching a doorbell camera.
+  # Optional: The percentage of the image used to detect lightning or other substantial changes where motion detection
+  #           needs to recalibrate. (default: shown below)
+  # Increasing this value will make motion detection more likely to consider lightning or ir mode changes as valid motion.
+  # Decreasing this value will make motion detection more likely to ignore large amounts of motion such as a person approaching
+  # a doorbell camera.
   lightning_threshold: 0.8
 ```
 
-Large changes in motion like PTZ moves and camera switches between Color and IR mode should result in a pause in object detection. `lightning_threshold` defines the percentage of the image used to detect these substantial changes. Increasing this value makes motion detection more likely to treat large changes (like IR mode switches) as valid motion. Decreasing it makes motion detection more likely to ignore large amounts of motion, such as a person approaching a doorbell camera.
-
-Note that `lightning_threshold` does **not** stop motion-based recordings from being saved — it only prevents additional motion analysis after the threshold is exceeded, reducing false positive object detections during high-motion periods (e.g. storms or PTZ sweeps) without interfering with recordings.
-
 :::warning
 
-Some cameras, like doorbell cameras, may have missed detections when someone walks directly in front of the camera and the `lightning_threshold` causes motion detection to recalibrate. In this case, it may be desirable to increase the `lightning_threshold` to ensure these objects are not missed.
+Some cameras like doorbell cameras may have missed detections when someone walks directly in front of the camera and the lightning_threshold causes motion detection to be re-calibrated. In this case, it may be desirable to increase the `lightning_threshold` to ensure these objects are not missed.
 
 :::
 
-### Skip Motion On Large Scene Changes
+:::note
 
-```yaml
-motion:
-  # Optional: Fraction of the frame that must change in a single update
-  #           before Frigate will completely ignore any motion in that frame.
-  #           Values range between 0.0 and 1.0, leave unset (null) to disable.
-  #           Setting this to 0.7 would cause Frigate to **skip** reporting
-  #           motion boxes when more than 70% of the image appears to change
-  #           (e.g. during lightning storms, IR/color mode switches, or other
-  #           sudden lighting events).
-  skip_motion_threshold: 0.7
-```
-
-This option is handy when you want to prevent large transient changes from triggering recordings or object detection. It differs from `lightning_threshold` because it completely suppresses motion instead of just forcing a recalibration.
-
-:::warning
-
-When the skip threshold is exceeded, **no motion is reported** for that frame, meaning **nothing is recorded** for that frame. That means you can miss something important, like a PTZ camera auto-tracking an object or activity while the camera is moving. If you prefer to guarantee that every frame is saved, leave this unset and accept occasional recordings containing scene noise — they typically only take up a few megabytes and are quick to scan in the timeline UI.
+Lightning threshold does not stop motion based recordings from being saved.
 
 :::
+
+Large changes in motion like PTZ moves and camera switches between Color and IR mode should result in a pause in object detection. This is done via the `lightning_threshold` configuration. It is defined as the percentage of the image used to detect lightning or other substantial changes where motion detection needs to recalibrate. Increasing this value will make motion detection more likely to consider lightning or IR mode changes as valid motion. Decreasing this value will make motion detection more likely to ignore large amounts of motion such as a person approaching a doorbell camera.

docs/docs/configuration/object_detectors.md

@@ -161,7 +161,7 @@ YOLOv9 models that are compiled for TensorFlow Lite and properly quantized are s
 
 :::tip
 
-**Frigate+ Users:** Follow the [instructions](../integrations/plus#use-models) to set a model ID in your config file.
+**Frigate+ Users:** Follow the [instructions](/integrations/plus#use-models) to set a model ID in your config file.
 
 :::
 
@@ -330,7 +330,7 @@ detectors:
 | [YOLO-NAS](#yolo-nas)                 | ✅  | ✅  |                                                              |
 | [MobileNet v2](#ssdlite-mobilenet-v2) | ✅  | ✅  | Fast and lightweight model, less accurate than larger models |
 | [YOLOX](#yolox)                       | ✅  | ?   |                                                              |
-| [D-FINE](#d-fine)                     | ❌  | ❌  |                                                              |
+| [D-FINE / DEIMv2](#d-fine--deimv2)    | ❌  | ❌  |                                                              |
 
 #### SSDLite MobileNet v2
 
@@ -464,13 +464,13 @@ model:
 
 </details>
 
-#### D-FINE
+#### D-FINE / DEIMv2
 
-[D-FINE](https://github.com/Peterande/D-FINE) is a DETR based model. The ONNX exported models are supported, but not included by default. See [the models section](#downloading-d-fine-model) for more information on downloading the D-FINE model for use in Frigate.
+[D-FINE](https://github.com/Peterande/D-FINE) and [DEIMv2](https://github.com/Intellindust-AI-Lab/DEIMv2) are DETR based models that share the same ONNX input/output format. The ONNX exported models are supported, but not included by default. See the models section for downloading [D-FINE](#downloading-d-fine-model) or [DEIMv2](#downloading-deimv2-model) for use in Frigate.
 
 :::warning
 
-Currently D-FINE models only run on OpenVINO in CPU mode, GPUs currently fail to compile the model
+Currently D-FINE / DEIMv2 models only run on OpenVINO in CPU mode, GPUs currently fail to compile the model
 
 :::
 
@@ -499,6 +499,31 @@ Note that the labelmap uses a subset of the complete COCO label set that has onl
 
 </details>
 
+<details>
+  <summary>DEIMv2 Setup & Config</summary>
+
+After placing the downloaded onnx model in your `config/model_cache` folder, you can use the following configuration:
+
+```yaml
+detectors:
+  ov:
+    type: openvino
+    device: CPU
+
+model:
+  model_type: dfine
+  width: 640
+  height: 640
+  input_tensor: nchw
+  input_dtype: float
+  path: /config/model_cache/deimv2_hgnetv2_n.onnx
+  labelmap_path: /labelmap/coco-80.txt
+```
+
+Note that the labelmap uses a subset of the complete COCO label set that has only 80 objects.
+
+</details>
+
 ## Apple Silicon detector
 
 The NPU in Apple Silicon can't be accessed from within a container, so the [Apple Silicon detector client](https://github.com/frigate-nvr/apple-silicon-detector) must first be setup. It is recommended to use the Frigate docker image with `-standard-arm64` suffix, for example `ghcr.io/blakeblackshear/frigate:stable-standard-arm64`.
@@ -572,7 +597,7 @@ $ docker run --device=/dev/kfd --device=/dev/dri  \
 
 When using Docker Compose:
 
-```yaml
+```yaml {4-6}
 services:
   frigate:
     ...
@@ -603,7 +628,7 @@ $ docker run -e HSA_OVERRIDE_GFX_VERSION=10.0.0 \
 
 When using Docker Compose:
 
-```yaml
+```yaml {4-5}
 services:
   frigate:
     ...
@@ -648,7 +673,7 @@ The AMD GPU kernel is known problematic especially when converting models to mxr
 
 See [ONNX supported models](#supported-models) for supported models, there are some caveats:
 
-- D-FINE models are not supported
+- D-FINE / DEIMv2 models are not supported
 - YOLO-NAS models are known to not run well on integrated GPUs
 
 ## ONNX
@@ -693,7 +718,7 @@ detectors:
 | [RF-DETR](#rf-detr)           | ✅         | ❌      | Supports CUDA Graphs for optimal Nvidia performance |
 | [YOLO-NAS](#yolo-nas-1)       | ⚠️         | ⚠️      | Not supported by CUDA Graphs                        |
 | [YOLOX](#yolox-1)             | ✅         | ✅      | Supports CUDA Graphs for optimal Nvidia performance |
-| [D-FINE](#d-fine)             | ⚠️         | ❌      | Not supported by CUDA Graphs                        |
+| [D-FINE / DEIMv2](#d-fine--deimv2-1) | ⚠️         | ❌      | Not supported by CUDA Graphs                        |
 
 There is no default model provided, the following formats are supported:
 
@@ -822,9 +847,9 @@ model:
 
 </details>
 
-#### D-FINE
+#### D-FINE / DEIMv2
 
-[D-FINE](https://github.com/Peterande/D-FINE) is a DETR based model. The ONNX exported models are supported, but not included by default. See [the models section](#downloading-d-fine-model) for more information on downloading the D-FINE model for use in Frigate.
+[D-FINE](https://github.com/Peterande/D-FINE) and [DEIMv2](https://github.com/Intellindust-AI-Lab/DEIMv2) are DETR based models that share the same ONNX input/output format. The ONNX exported models are supported, but not included by default. See the models section for downloading [D-FINE](#downloading-d-fine-model) or [DEIMv2](#downloading-deimv2-model) for use in Frigate.
 
 <details>
   <summary>D-FINE Setup & Config</summary>
@@ -848,6 +873,28 @@ model:
 
 </details>
 
+<details>
+  <summary>DEIMv2 Setup & Config</summary>
+
+After placing the downloaded onnx model in your `config/model_cache` folder, you can use the following configuration:
+
+```yaml
+detectors:
+  onnx:
+    type: onnx
+
+model:
+  model_type: dfine
+  width: 640
+  height: 640
+  input_tensor: nchw
+  input_dtype: float
+  path: /config/model_cache/deimv2_hgnetv2_n.onnx
+  labelmap_path: /labelmap/coco-80.txt
+```
+
+</details>
+
 Note that the labelmap uses a subset of the complete COCO label set that has only 80 objects.
 
 ## CPU Detector (not recommended)
@@ -947,7 +994,7 @@ MemryX `.dfp` models are automatically downloaded at runtime, if enabled, to the
 
 #### YOLO-NAS
 
-The [YOLO-NAS](https://github.com/Deci-AI/super-gradients/blob/master/YOLONAS.md) model included in this detector is downloaded from the [Models Section](#downloading-yolo-nas-model) and compiled to DFP with [mx_nc](https://developer.memryx.com/tools/neural_compiler.html#usage).
+The [YOLO-NAS](https://github.com/Deci-AI/super-gradients/blob/master/YOLONAS.md) model included in this detector is downloaded from the [Models Section](#downloading-yolo-nas-model) and compiled to DFP with [mx_nc](https://developer.memryx.com/2p1/tools/neural_compiler.html#usage).
 
 **Note:** The default model for the MemryX detector is YOLO-NAS 320x320.
 
@@ -981,7 +1028,7 @@ model:
 
 #### YOLOv9
 
-The YOLOv9s model included in this detector is downloaded from [the original GitHub](https://github.com/WongKinYiu/yolov9) like in the [Models Section](#yolov9-1) and compiled to DFP with [mx_nc](https://developer.memryx.com/tools/neural_compiler.html#usage).
+The YOLOv9s model included in this detector is downloaded from [the original GitHub](https://github.com/WongKinYiu/yolov9) like in the [Models Section](#yolov9-1) and compiled to DFP with [mx_nc](https://developer.memryx.com/2p1/tools/neural_compiler.html#usage).
 
 ##### Configuration
 
@@ -1063,19 +1110,39 @@ model:
 
 #### Using a Custom Model
 
-To use your own model:
+To use your own custom model, first compile it into a [.dfp](https://developer.memryx.com/2p1/specs/files.html#dataflow-program) file, which is the format used by MemryX.
 
-1.  Package your compiled model into a `.zip` file.
+#### Compile the Model
 
-2.  The `.zip` must contain the compiled `.dfp` file.
+Custom models must be compiled using **MemryX SDK 2.1**.
 
-3.  Depending on the model, the compiler may also generate a cropped post-processing network. If present, it will be named with the suffix `_post.onnx`.
+Before compiling your model, install the MemryX Neural Compiler tools from the
+[Install Tools](https://developer.memryx.com/2p1/get_started/install_tools.html) page on the **host**.
 
-4.  Bind-mount the `.zip` file into the container and specify its path using `model.path` in your config.
+> **Note:** It is recommended to compile the model on the host machine, or on another separate machine, rather than inside the Frigate Docker container. Installing the compiler inside Docker may conflict with container packages. It is recommended to create a Python virtual environment and install the compiler there.
 
-5.  Update the `labelmap_path` to match your custom model's labels.
+Once the SDK 2.1 environment is set up, follow the
+[MemryX Compiler](https://developer.memryx.com/2p1/tools/neural_compiler.html#usage) documentation to compile your model.
 
-For detailed instructions on compiling models, refer to the [MemryX Compiler](https://developer.memryx.com/tools/neural_compiler.html#usage) docs and [Tutorials](https://developer.memryx.com/tutorials/tutorials.html).
+Example:
+
+```bash
+mx_nc -m yolonas.onnx -c 4 --autocrop -v --dfp_fname yolonas.dfp
+```
+
+For detailed instructions on compiling models, refer to the [MemryX Compiler](https://developer.memryx.com/2p1/tools/neural_compiler.html#usage) docs and [Tutorials](https://developer.memryx.com/2p1/tutorials/tutorials.html).
+
+#### Package the Compiled Model
+
+1. Package your compiled model into a `.zip` file.
+
+2. The `.zip` file must contain the compiled `.dfp` file.
+
+3. Depending on the model, the compiler may also generate a cropped post-processing network. If present, it will be named with the suffix `_post.onnx`.
+
+4. Bind-mount the `.zip` file into the container and specify its path using `model.path` in your config.
+
+5. Update `labelmap_path` to match your custom model's labels.
 
 ```yaml
 # The detector automatically selects the default model if nothing is provided in the config.
@@ -1512,6 +1579,49 @@ COPY --from=build /dfine/output/dfine_${MODEL_SIZE}_obj2coco.onnx /dfine-${MODEL
 EOF
 ```
 
+### Downloading DEIMv2 Model
+
+[DEIMv2](https://github.com/Intellindust-AI-Lab/DEIMv2) can be exported as ONNX by running the command below. Pretrained weights are available on Hugging Face for two backbone families:
+
+- **HGNetv2** (smaller/faster): `atto`, `femto`, `pico`, `n`
+- **DINOv3** (larger/more accurate): `s`, `m`, `l`, `x`
+
+Set `BACKBONE` and `MODEL_SIZE` in the first line to match your desired variant. Hugging Face model names use uppercase (e.g. `HGNetv2_N`, `DINOv3_S`), while config files use lowercase (e.g. `hgnetv2_n`, `dinov3_s`).
+
+```sh
+docker build . --rm --build-arg BACKBONE=hgnetv2 --build-arg MODEL_SIZE=n --output . -f- <<'EOF'
+FROM python:3.11-slim AS build
+RUN apt-get update && apt-get install --no-install-recommends -y git libgl1 libglib2.0-0 && rm -rf /var/lib/apt/lists/*
+COPY --from=ghcr.io/astral-sh/uv:0.8.0 /uv /bin/
+WORKDIR /deimv2
+RUN git clone https://github.com/Intellindust-AI-Lab/DEIMv2.git .
+# Install CPU-only PyTorch first to avoid pulling CUDA variant
+RUN uv pip install --no-cache --system torch torchvision --index-url https://download.pytorch.org/whl/cpu
+RUN uv pip install --no-cache --system -r requirements.txt
+RUN uv pip install --no-cache --system onnx safetensors huggingface_hub
+RUN mkdir -p output
+ARG BACKBONE
+ARG MODEL_SIZE
+# Download from Hugging Face and convert safetensors to pth
+RUN python3 -c "\
+from huggingface_hub import hf_hub_download; \
+from safetensors.torch import load_file; \
+import torch; \
+backbone = '${BACKBONE}'.replace('hgnetv2','HGNetv2').replace('dinov3','DINOv3'); \
+size = '${MODEL_SIZE}'.upper(); \
+st = load_file(hf_hub_download('Intellindust/DEIMv2_' + backbone + '_' + size + '_COCO', 'model.safetensors')); \
+torch.save({'model': st}, 'output/deimv2.pth')"
+RUN sed -i "s/data = torch.rand(2/data = torch.rand(1/" tools/deployment/export_onnx.py
+# HuggingFace safetensors omits frozen constants that the model constructor initializes
+RUN sed -i "s/cfg.model.load_state_dict(state)/cfg.model.load_state_dict(state, strict=False)/" tools/deployment/export_onnx.py
+RUN python3 tools/deployment/export_onnx.py -c configs/deimv2/deimv2_${BACKBONE}_${MODEL_SIZE}_coco.yml -r output/deimv2.pth
+FROM scratch
+ARG BACKBONE
+ARG MODEL_SIZE
+COPY --from=build /deimv2/output/deimv2.onnx /deimv2_${BACKBONE}_${MODEL_SIZE}.onnx
+EOF
+```
+
 ### Downloading RF-DETR Model
 
 RF-DETR can be exported as ONNX by running the command below. You can copy and paste the whole thing to your terminal and execute, altering `MODEL_SIZE=Nano` in the first line to `Nano`, `Small`, or `Medium` size.
@@ -1571,12 +1681,12 @@ YOLOv9 model can be exported as ONNX using the command below. You can copy and p
 ```sh
 docker build . --build-arg MODEL_SIZE=t --build-arg IMG_SIZE=320 --output . -f- <<'EOF'
 FROM python:3.11 AS build
-RUN apt-get update && apt-get install --no-install-recommends -y libgl1 && rm -rf /var/lib/apt/lists/*
-COPY --from=ghcr.io/astral-sh/uv:0.8.0 /uv /bin/
+RUN apt-get update && apt-get install --no-install-recommends -y cmake libgl1 && rm -rf /var/lib/apt/lists/*
+COPY --from=ghcr.io/astral-sh/uv:0.10.4 /uv /bin/
 WORKDIR /yolov9
 ADD https://github.com/WongKinYiu/yolov9.git .
 RUN uv pip install --system -r requirements.txt
-RUN uv pip install --system onnx==1.18.0 onnxruntime onnx-simplifier>=0.4.1 onnxscript
+RUN uv pip install --system onnx==1.18.0 onnxruntime onnx-simplifier==0.4.* onnxscript
 ARG MODEL_SIZE
 ARG IMG_SIZE
 ADD https://github.com/WongKinYiu/yolov9/releases/download/v0.1/yolov9-${MODEL_SIZE}-converted.pt yolov9-${MODEL_SIZE}.pt

docs/docs/configuration/profiles.md

@@ -1,188 +0,0 @@
----
-id: profiles
-title: Profiles
----
-
-Profiles allow you to define named sets of camera configuration overrides that can be activated and deactivated at runtime without restarting Frigate. This is useful for scenarios like switching between "Home" and "Away" modes, daytime and nighttime configurations, or any situation where you want to quickly change how multiple cameras behave.
-
-## How Profiles Work
-
-Profiles operate as a two-level system:
-
-1. **Profile definitions** are declared at the top level of your config under `profiles`. Each definition has a machine name (the key) and a `friendly_name` for display in the UI.
-2. **Camera profile overrides** are declared under each camera's `profiles` section, keyed by the profile name. Only the settings you want to change need to be specified — everything else is inherited from the camera's base configuration.
-
-When a profile is activated, Frigate merges each camera's profile overrides on top of its base config. When the profile is deactivated, all cameras revert to their original settings. Only one profile can be active at a time.
-
-:::info
-
-Profile changes are applied in-memory and take effect immediately — no restart is required. The active profile is persisted across Frigate restarts (stored in the `/config/.active_profile` file).
-
-:::
-
-## Configuration
-
-The easiest way to define profiles is to use the Frigate UI. Profiles can also be configured manually in your configuration file.
-
-### Using the UI
-
-To create and manage profiles from the UI, open **Settings**. From there you can:
-
-1. **Create a profile** — Navigate to **Profiles**. Click the **Add Profile** button, enter a name (and optionally a profile ID).
-2. **Configure overrides** — Navigate to a camera configuration section (e.g. Motion detection, Record, Notifications). In the top right, two buttons will appear - choose a camera and a profile from the profile selector to edit overrides for that camera and section. Only the fields you change will be stored as overrides — fields that require a restart are hidden since profiles are applied at runtime. You can click the **Remove Profile Override** button
-3. **Activate a profile** — Use the **Profiles** option in Frigate's main menu to choose a profile. Alternatively, in Settings, navigate to **Profiles**, then choose a profile in the Active Profile dropdown to activate it. The active profile is also shown in the status bar at the bottom of the screen on desktop browsers.
-4. **Delete a profile** — Navigate to **Profiles**, then click the trash icon for a profile. This removes the profile definition and all camera overrides associated with it.
-
-### Defining Profiles in YAML
-
-First, define your profiles at the top level of your Frigate config. Every profile name referenced by a camera must be defined here.
-
-```yaml
-profiles:
-  home:
-    friendly_name: Home
-  away:
-    friendly_name: Away
-  night:
-    friendly_name: Night Mode
-```
-
-### Camera Profile Overrides
-
-Under each camera, add a `profiles` section with overrides for each profile. You only need to include the settings you want to change.
-
-```yaml
-cameras:
-  front_door:
-    ffmpeg:
-      inputs:
-        - path: rtsp://camera:554/stream
-          roles:
-            - detect
-            - record
-    detect:
-      enabled: true
-    record:
-      enabled: true
-    profiles:
-      away:
-        detect:
-          enabled: true
-        notifications:
-          enabled: true
-        objects:
-          track:
-            - person
-            - car
-            - package
-        review:
-          alerts:
-            labels:
-              - person
-              - car
-              - package
-      home:
-        detect:
-          enabled: true
-        notifications:
-          enabled: false
-        objects:
-          track:
-            - person
-```
-
-### Supported Override Sections
-
-The following camera configuration sections can be overridden in a profile:
-
-| Section            | Description                               |
-| ------------------ | ----------------------------------------- |
-| `enabled`          | Enable or disable the camera entirely     |
-| `audio`            | Audio detection settings                  |
-| `birdseye`         | Birdseye view settings                    |
-| `detect`           | Object detection settings                 |
-| `face_recognition` | Face recognition settings                 |
-| `lpr`              | License plate recognition settings        |
-| `motion`           | Motion detection settings                 |
-| `notifications`    | Notification settings                     |
-| `objects`          | Object tracking and filter settings       |
-| `record`           | Recording settings                        |
-| `review`           | Review alert and detection settings       |
-| `snapshots`        | Snapshot settings                         |
-| `zones`            | Zone definitions (merged with base zones) |
-
-:::note
-
-Only the fields you explicitly set in a profile override are applied. All other fields retain their base configuration values. For zones, profile zones are merged with the camera's base zones — any zone defined in the profile will override or add to the base zones.
-
-:::
-
-## Activating Profiles
-
-Profiles can be activated and deactivated from the Frigate UI. Open the Settings cog and select **Profiles** from the submenu to see all defined profiles. From there you can activate any profile or deactivate the current one. The active profile is indicated in the UI so you always know which profile is in effect.
-
-## Example: Home / Away Setup
-
-A common use case is having different detection and notification settings based on whether you are home or away.
-
-```yaml
-profiles:
-  home:
-    friendly_name: Home
-  away:
-    friendly_name: Away
-
-cameras:
-  front_door:
-    ffmpeg:
-      inputs:
-        - path: rtsp://camera:554/stream
-          roles:
-            - detect
-            - record
-    detect:
-      enabled: true
-    record:
-      enabled: true
-    notifications:
-      enabled: false
-    profiles:
-      away:
-        notifications:
-          enabled: true
-        review:
-          alerts:
-            labels:
-              - person
-              - car
-      home:
-        notifications:
-          enabled: false
-
-  indoor_cam:
-    ffmpeg:
-      inputs:
-        - path: rtsp://camera:554/indoor
-          roles:
-            - detect
-            - record
-    detect:
-      enabled: false
-    record:
-      enabled: false
-    profiles:
-      away:
-        enabled: true
-        detect:
-          enabled: true
-        record:
-          enabled: true
-      home:
-        enabled: false
-```
-
-In this example:
-
-- **Away profile**: The front door camera enables notifications and tracks specific alert labels. The indoor camera is fully enabled with detection and recording.
-- **Home profile**: The front door camera disables notifications. The indoor camera is completely disabled for privacy.
-- **No profile active**: All cameras use their base configuration values.

docs/docs/configuration/record.md

@@ -68,7 +68,7 @@ record:
 
 ## Will Frigate delete old recordings if my storage runs out?
 
-As of Frigate 0.12 if there is less than an hour left of storage, the oldest 2 hours of recordings will be deleted.
+If there is less than an hour left of storage, the oldest hour of recordings will be deleted and a message will be printed in the Frigate logs. This emergency cleanup deletes the oldest recordings first regardless of retention settings to reclaim space as quickly as possible.
 
 ## Configuring Recording Retention
 
@@ -130,7 +130,7 @@ When exporting a time-lapse the default speed-up is 25x with 30 FPS. This means
 
 To configure the speed-up factor, the frame rate and further custom settings, the configuration parameter `timelapse_args` can be used. The below configuration example would change the time-lapse speed to 60x (for fitting 1 hour of recording into 1 minute of time-lapse) with 25 FPS:
 
-```yaml
+```yaml {3-4}
 record:
   enabled: True
   export:
@@ -139,13 +139,7 @@ record:
 
 :::tip
 
-When using `hwaccel_args`, hardware encoding is used for timelapse generation. This setting can be overridden for a specific camera (e.g., when camera resolution exceeds hardware encoder limits); set `cameras.<camera>.record.export.hwaccel_args` with the appropriate settings. Using an unrecognized value or empty string will fall back to software encoding (libx264).
-
-:::
-
-:::tip
-
-The encoder determines its own behavior so the resulting file size may be undesirably large.
+When using `hwaccel_args` globally hardware encoding is used for time lapse generation. The encoder determines its own behavior so the resulting file size may be undesirably large.
 To reduce the output file size the ffmpeg parameter `-qp n` can be utilized (where `n` stands for the value of the quantisation parameter). The value can be adjusted to get an acceptable tradeoff between quality and file size for the given scenario.
 
 :::
@@ -154,16 +148,19 @@ To reduce the output file size the ffmpeg parameter `-qp n` can be utilized (whe
 
 Apple devices running the Safari browser may fail to playback h.265 recordings. The [apple compatibility option](../configuration/camera_specific.md#h265-cameras-via-safari) should be used to ensure seamless playback on Apple devices.
 
-## Syncing Media Files With Disk
+## Syncing Recordings With Disk
 
-Media files (event snapshots, event thumbnails, review thumbnails, previews, exports, and recordings) can become orphaned when database entries are deleted but the corresponding files remain on disk.
+In some cases the recordings files may be deleted but Frigate will not know this has happened. Recordings sync can be enabled which will tell Frigate to check the file system and delete any db entries for files which don't exist.
 
-Normal operation may leave small numbers of orphaned files until Frigate's scheduled cleanup, but crashes, configuration changes, or upgrades may cause more orphaned files that Frigate does not clean up. This feature checks the file system for media files and removes any that are not referenced in the database.
+```yaml
+record:
+  sync_recordings: True
+```
 
-The Maintenance pane in the Frigate UI or an API endpoint `POST /api/media/sync` can be used to trigger a media sync. When using the API, a job ID is returned and the operation continues on the server. Status can be checked with the `/api/media/sync/status/{job_id}` endpoint.
+This feature is meant to fix variations in files, not completely delete entries in the database. If you delete all of your media, don't use `sync_recordings`, just stop Frigate, delete the `frigate.db` database, and restart.
 
 :::warning
 
-This operation uses considerable CPU resources and includes a safety threshold that aborts if more than 50% of files would be deleted. Only run when necessary. If you set `force: true` the safety threshold will be bypassed; do not use `force` unless you are certain the deletions are intended.
+The sync operation uses considerable CPU resources and in most cases is not needed, only enable when necessary.
 
 :::

docs/docs/configuration/reference.md

@@ -16,6 +16,8 @@ mqtt:
   # Optional: Enable mqtt server (default: shown below)
   enabled: True
   # Required: host name
+  # NOTE: MQTT host can be specified with an environment variable or docker secrets that must begin with 'FRIGATE_'.
+  #       e.g. host: '{FRIGATE_MQTT_HOST}'
   host: mqtt.server.com
   # Optional: port (default: shown below)
   port: 1883
@@ -73,19 +75,11 @@ tls:
   # Optional: Enable TLS for port 8971 (default: shown below)
   enabled: True
 
-# Optional: Networking configuration
+# Optional: IPv6 configuration
 networking:
   # Optional: Enable IPv6 on 5000, and 8971 if tls is configured (default: shown below)
   ipv6:
     enabled: False
-  # Optional: Override ports Frigate uses for listening (defaults: shown below)
-  # An IP address may also be provided to bind to a specific interface, e.g. ip:port
-  # NOTE: This setting is for advanced users and may break some integrations. The majority
-  #       of users should change ports in the docker compose file
-  #       or use the docker run `--publish` option to select a different port.
-  listen:
-    internal: 5000
-    external: 8971
 
 # Optional: Proxy configuration
 proxy:
@@ -345,15 +339,7 @@ objects:
   # Optional: mask to prevent all object types from being detected in certain areas (default: no mask)
   # Checks based on the bottom center of the bounding box of the object.
   # NOTE: This mask is COMBINED with the object type specific mask below
-  mask:
-    # Object filter mask name (required)
-    mask1:
-      # Optional: A friendly name for the mask
-      friendly_name: "Object filter mask area"
-      # Optional: Whether this mask is active (default: true)
-      enabled: true
-      # Required: Coordinates polygon for the mask
-      coordinates: "0.000,0.000,0.781,0.000,0.781,0.278,0.000,0.278"
+  mask: 0.000,0.000,0.781,0.000,0.781,0.278,0.000,0.278
   # Optional: filters to reduce false positives for specific object types
   filters:
     person:
@@ -373,15 +359,7 @@ objects:
       threshold: 0.7
       # Optional: mask to prevent this object type from being detected in certain areas (default: no mask)
       # Checks based on the bottom center of the bounding box of the object
-      mask:
-        # Object filter mask name (required)
-        mask1:
-          # Optional: A friendly name for the mask
-          friendly_name: "Object filter mask area"
-          # Optional: Whether this mask is active (default: true)
-          enabled: true
-          # Required: Coordinates polygon for the mask
-          coordinates: "0.000,0.000,0.781,0.000,0.781,0.278,0.000,0.278"
+      mask: 0.000,0.000,0.781,0.000,0.781,0.278,0.000,0.278
   # Optional: Configuration for AI generated tracked object descriptions
   genai:
     # Optional: Enable AI object description generation (default: shown below)
@@ -480,16 +458,12 @@ motion:
   # Increasing this value will make motion detection less sensitive and decreasing it will make motion detection more sensitive.
   # The value should be between 1 and 255.
   threshold: 30
-  # Optional: The percentage of the image used to detect lightning or other substantial changes where motion detection needs
-  # to recalibrate and motion checks stop for that frame. Recordings are unaffected. (default: shown below)
+  # Optional: The percentage of the image used to detect lightning or other substantial changes where motion detection
+  #           needs to recalibrate. (default: shown below)
   # Increasing this value will make motion detection more likely to consider lightning or ir mode changes as valid motion.
-  # Decreasing this value will make motion detection more likely to ignore large amounts of motion such as a person approaching a doorbell camera.
+  # Decreasing this value will make motion detection more likely to ignore large amounts of motion such as a person approaching
+  # a doorbell camera.
   lightning_threshold: 0.8
-  # Optional: Fraction of the frame that must change in a single update before motion boxes are completely
-  # ignored. Values range between 0.0 and 1.0. When exceeded, no motion boxes are reported and **no motion
-  # recording** is created for that frame. Leave unset (null) to disable this feature. Use with care on PTZ
-  # cameras or other situations where you require guaranteed frame capture.
-  skip_motion_threshold: None
   # Optional: Minimum size in pixels in the resized motion image that counts as motion (default: shown below)
   # Increasing this value will prevent smaller areas of motion from being detected. Decreasing will
   # make motion detection more sensitive to smaller moving objects.
@@ -509,15 +483,7 @@ motion:
   frame_height: 100
   # Optional: motion mask
   # NOTE: see docs for more detailed info on creating masks
-  mask:
-    # Motion mask name (required)
-    mask1:
-      # Optional: A friendly name for the mask
-      friendly_name: "Motion mask area"
-      # Optional: Whether this mask is active (default: true)
-      enabled: true
-      # Required: Coordinates polygon for the mask
-      coordinates: "0.000,0.469,1.000,0.469,1.000,1.000,0.000,1.000"
+  mask: 0.000,0.469,1.000,0.469,1.000,1.000,0.000,1.000
   # Optional: improve contrast (default: shown below)
   # Enables dynamic contrast improvement. This should help improve night detections at the cost of making motion detection more sensitive
   # for daytime.
@@ -546,6 +512,8 @@ record:
   # Optional: Number of minutes to wait between cleanup runs (default: shown below)
   # This can be used to reduce the frequency of deleting recording segments from disk if you want to minimize i/o
   expire_interval: 60
+  # Optional: Two-way sync recordings database with disk on startup and once a day (default: shown below).
+  sync_recordings: False
   # Optional: Continuous retention settings
   continuous:
     # Optional: Number of days to retain recordings regardless of tracked objects or motion (default: shown below)
@@ -568,8 +536,6 @@ record:
     # The -r (framerate) dictates how smooth the output video is.
     # So the args would be -vf setpts=0.02*PTS -r 30 in that case.
     timelapse_args: "-vf setpts=0.04*PTS -r 30"
-    # Optional: Global hardware acceleration settings for timelapse exports. (default: inherit)
-    hwaccel_args: auto
   # Optional: Recording Preview Settings
   preview:
     # Optional: Quality of recording preview (default: shown below).
@@ -788,7 +754,7 @@ classification:
         interval: None
 
 # Optional: Restream configuration
-# Uses https://github.com/AlexxIT/go2rtc (v1.9.13)
+# Uses https://github.com/AlexxIT/go2rtc (v1.9.10)
 # NOTE: The default go2rtc API port (1984) must be used,
 #       changing this port for the integrated go2rtc instance is not supported.
 go2rtc:
@@ -874,11 +840,6 @@ cameras:
       # Optional: camera specific output args (default: inherit)
       # output_args:
 
-    # Optional: camera specific hwaccel args for timelapse export (default: inherit)
-    # record:
-    #   export:
-    #     hwaccel_args:
-
     # Optional: timeout for highest scoring image before allowing it
     # to be replaced by a newer image. (default: shown below)
     best_image_timeout: 60
@@ -894,9 +855,6 @@ cameras:
       front_steps:
         # Optional: A friendly name or descriptive text for the zones
         friendly_name: ""
-        # Optional: Whether this zone is active (default: shown below)
-        # Disabled zones are completely ignored at runtime - no object tracking or debug drawing
-        enabled: True
         # Required: List of x,y coordinates to define the polygon of the zone.
         # NOTE: Presence in a zone is evaluated only based on the bottom center of the objects bounding box.
         coordinates: 0.033,0.306,0.324,0.138,0.439,0.185,0.042,0.428
@@ -950,6 +908,8 @@ cameras:
     onvif:
       # Required: host of the camera being connected to.
       # NOTE: HTTP is assumed by default; HTTPS is supported if you specify the scheme, ex: "https://0.0.0.0".
+      # NOTE: ONVIF user, and password can be specified with environment variables or docker secrets
+      #       that must begin with 'FRIGATE_'. e.g. host: '{FRIGATE_ONVIF_USERNAME}'
       host: 0.0.0.0
       # Optional: ONVIF port for device (default: shown below).
       port: 8000
@@ -1026,49 +986,6 @@ cameras:
         actions:
           - notification
 
-    # Optional: Named config profiles with partial overrides that can be activated at runtime.
-    # NOTE: Profile names must be defined in the top-level 'profiles' section.
-    profiles:
-      # Required: name of the profile (must match a top-level profile definition)
-      away:
-        # Optional: Enable or disable the camera when this profile is active (default: not set, inherits base)
-        enabled: true
-        # Optional: Override audio settings
-        audio:
-          enabled: true
-        # Optional: Override birdseye settings
-        # birdseye:
-        # Optional: Override detect settings
-        detect:
-          enabled: true
-        # Optional: Override face_recognition settings
-        # face_recognition:
-        # Optional: Override lpr settings
-        # lpr:
-        # Optional: Override motion settings
-        # motion:
-        # Optional: Override notification settings
-        notifications:
-          enabled: true
-        # Optional: Override objects settings
-        objects:
-          track:
-            - person
-            - car
-        # Optional: Override record settings
-        record:
-          enabled: true
-        # Optional: Override review settings
-        review:
-          alerts:
-            labels:
-              - person
-              - car
-        # Optional: Override snapshot settings
-        # snapshots:
-        # Optional: Override or add zones (merged with base zones)
-        # zones:
-
 # Optional
 ui:
   # Optional: Set a timezone to use in the UI (default: use browser local time)
@@ -1135,14 +1052,4 @@ camera_groups:
     icon: LuCar
     # Required: index of this group
     order: 0
-
-# Optional: Profile definitions for named config overrides
-# NOTE: Profile names defined here can be referenced in camera profiles sections
-profiles:
-  # Required: name of the profile (machine name used internally)
-  home:
-    # Required: display name shown in the UI
-    friendly_name: Home
-  away:
-    friendly_name: Away
 ```

docs/docs/configuration/restream.md

@@ -7,7 +7,7 @@ title: Restream
 
 Frigate can restream your video feed as an RTSP feed for other applications such as Home Assistant to utilize it at `rtsp://<frigate_host>:8554/<camera_name>`. Port 8554 must be open. [This allows you to use a video feed for detection in Frigate and Home Assistant live view at the same time without having to make two separate connections to the camera](#reduce-connections-to-camera). The video feed is copied from the original video feed directly to avoid re-encoding. This feed does not include any annotation by Frigate.
 
-Frigate uses [go2rtc](https://github.com/AlexxIT/go2rtc/tree/v1.9.13) to provide its restream and MSE/WebRTC capabilities. The go2rtc config is hosted at the `go2rtc` in the config, see [go2rtc docs](https://github.com/AlexxIT/go2rtc/tree/v1.9.13#configuration) for more advanced configurations and features.
+Frigate uses [go2rtc](https://github.com/AlexxIT/go2rtc/tree/v1.9.10) to provide its restream and MSE/WebRTC capabilities. The go2rtc config is hosted at the `go2rtc` in the config, see [go2rtc docs](https://github.com/AlexxIT/go2rtc/tree/v1.9.10#configuration) for more advanced configurations and features.
 
 :::note
 
@@ -34,7 +34,7 @@ To improve connection speed when using Birdseye via restream you can enable a sm
 
 The go2rtc restream can be secured with RTSP based username / password authentication. Ex:
 
-```yaml
+```yaml {2-4}
 go2rtc:
   rtsp:
     username: "admin"
@@ -147,6 +147,7 @@ For example:
 ```yaml
 go2rtc:
   streams:
+    # highlight-error-line
     my_camera: rtsp://username:$@foo%@192.168.1.100
 ```
 
@@ -155,6 +156,7 @@ becomes
 ```yaml
 go2rtc:
   streams:
+    # highlight-next-line
     my_camera: rtsp://username:$%40foo%25@192.168.1.100
 ```
 
@@ -206,7 +208,7 @@ Enabling arbitrary exec sources allows execution of arbitrary commands through g
 
 ## Advanced Restream Configurations
 
-The [exec](https://github.com/AlexxIT/go2rtc/tree/v1.9.13#source-exec) source in go2rtc can be used for custom ffmpeg commands. An example is below:
+The [exec](https://github.com/AlexxIT/go2rtc/tree/v1.9.10#source-exec) source in go2rtc can be used for custom ffmpeg commands and other applications. An example is below:
 
 :::warning
 
@@ -214,16 +216,11 @@ The `exec:`, `echo:`, and `expr:` sources are disabled by default for security.
 
 :::
 
-:::warning
-
-The `exec:`, `echo:`, and `expr:` sources are disabled by default for security. You must set `GO2RTC_ALLOW_ARBITRARY_EXEC=true` to use them. See [Security: Restricted Stream Sources](#security-restricted-stream-sources) for more information.
-
-:::
-
-NOTE: The output will need to be passed with two curly braces `{{output}}`
+NOTE: RTSP output will need to be passed with two curly braces `{{output}}`, whereas pipe output must be passed without curly braces.
 
 ```yaml
 go2rtc:
   streams:
     stream1: exec:ffmpeg -hide_banner -re -stream_loop -1 -i /media/BigBuckBunny.mp4 -c copy -rtsp_transport tcp -f rtsp {{output}}
+    stream2: exec:rpicam-vid -t 0 --libav-format h264 -o -
 ```

docs/docs/configuration/review.md

@@ -71,7 +71,7 @@ To exclude a specific camera from alerts or detections, simply provide an empty
 
 For example, to exclude objects on the camera _gatecamera_ from any detections, include this in your config:
 
-```yaml
+```yaml {3-5}
 cameras:
   gatecamera:
     review:

docs/docs/configuration/semantic_search.md

@@ -13,7 +13,7 @@ Semantic Search is accessed via the _Explore_ view in the Frigate UI.
 
 Semantic Search works by running a large AI model locally on your system. Small or underpowered systems like a Raspberry Pi will not run Semantic Search reliably or at all.
 
-A minimum of 8GB of RAM is required to use Semantic Search. A GPU is not strictly required but will provide a significant performance increase over CPU-only systems.
+A minimum of 8GB of RAM is required to use Semantic Search. A CPU with AVX + AVX2 instructions is required to run Semantic Search. A GPU is not strictly required but will provide a significant performance increase over CPU-only systems.
 
 For best performance, 16GB or more of RAM and a dedicated GPU are recommended.
 
@@ -76,40 +76,6 @@ Switching between V1 and V2 requires reindexing your embeddings. The embeddings
 
 :::
 
-### GenAI Provider
-
-Frigate can use a GenAI provider for semantic search embeddings when that provider has the `embeddings` role. Currently, only **llama.cpp** supports multimodal embeddings (both text and images).
-
-To use llama.cpp for semantic search:
-
-1. Configure a GenAI provider in your config with `embeddings` in its `roles`.
-2. Set `semantic_search.model` to the GenAI config key (e.g. `default`).
-3. Start the llama.cpp server with `--embeddings` and `--mmproj` for image support:
-
-```yaml
-genai:
-  default:
-    provider: llamacpp
-    base_url: http://localhost:8080
-    model: your-model-name
-    roles:
-      - embeddings
-      - vision
-      - tools
-
-semantic_search:
-  enabled: True
-  model: default
-```
-
-The llama.cpp server must be started with `--embeddings` for the embeddings API, and a multi-modal embeddings model. See the [llama.cpp server documentation](https://github.com/ggml-org/llama.cpp/blob/master/tools/server/README.md) for details.
-
-:::note
-
-Switching between Jina models and a GenAI provider requires reindexing. Embeddings from different backends are incompatible.
-
-:::
-
 ### GPU Acceleration
 
 The CLIP models are downloaded in ONNX format, and the `large` model can be accelerated using GPU hardware, when available. This depends on the Docker build that is used. You can also target a specific device in a multi-GPU installation.

docs/docs/configuration/tls.md

@@ -20,7 +20,7 @@ tls:
 
 TLS certificates can be mounted at `/etc/letsencrypt/live/frigate` using a bind mount or docker volume.
 
-```yaml
+```yaml {3-4}
 frigate:
   ...
   volumes:
@@ -32,7 +32,7 @@ Within the folder, the private key is expected to be named `privkey.pem` and the
 
 Note that certbot uses symlinks, and those can't be followed by the container unless it has access to the targets as well, so if using certbot you'll also have to mount the `archive` folder for your domain, e.g.:
 
-```yaml
+```yaml {3-5}
 frigate:
   ...
   volumes:
@@ -46,7 +46,7 @@ Frigate automatically compares the fingerprint of the certificate at `/etc/letse
 
 If you issue Frigate valid certificates you will likely want to configure it to run on port 443 so you can access it without a port number like `https://your-frigate-domain.com` by mapping 8971 to 443.
 
-```yaml
+```yaml {3-4}
 frigate:
   ...
   ports:

docs/docs/configuration/zones.md

@@ -10,10 +10,6 @@ For example, the cat in this image is currently in Zone 1, but **not** Zone 2.
 
 Zones cannot have the same name as a camera. If desired, a single zone can include multiple cameras if you have multiple cameras covering the same area by configuring zones with the same name for each camera.
 
-## Enabling/Disabling Zones
-
-Zones can be toggled on or off without removing them from the configuration. Disabled zones are completely ignored at runtime - objects will not be tracked for zone presence, and zones will not appear in the debug view. This is useful for temporarily disabling a zone during certain seasons or times of day without modifying the configuration.
-
 During testing, enable the Zones option for the Debug view of your camera (Settings --> Debug) so you can adjust as needed. The zone line will increase in thickness when any object enters the zone.
 
 To create a zone, follow [the steps for a "Motion mask"](masks.md), but use the section of the web UI for creating a zone instead.
@@ -22,7 +18,7 @@ To create a zone, follow [the steps for a "Motion mask"](masks.md), but use the
 
 Often you will only want alerts to be created when an object enters areas of interest. This is done using zones along with setting required_zones. Let's say you only want to have an alert created when an object enters your entire_yard zone, the config would be:
 
-```yaml
+```yaml {6,8}
 cameras:
   name_of_your_camera:
     review:
@@ -90,6 +86,7 @@ cameras:
 
 Only car objects can trigger the `front_yard_street` zone and only person can trigger the `entire_yard`. Objects will be tracked for any `person` that enter anywhere in the yard, and for cars only if they enter the street.
 
+
 ### Zone Loitering
 
 Sometimes objects are expected to be passing through a zone, but an object loitering in an area is unexpected. Zones can be configured to have a minimum loitering time after which the object will be considered in the zone.
@@ -97,7 +94,6 @@ Sometimes objects are expected to be passing through a zone, but an object loite
 :::note
 
 When using loitering zones, a review item will behave in the following way:
-
 - When a person is in a loitering zone, the review item will remain active until the person leaves the loitering zone, regardless of if they are stationary.
 - When any other object is in a loitering zone, the review item will remain active until the loitering time is met. Then if the object is stationary the review item will end.
 
@@ -108,6 +104,7 @@ cameras:
   name_of_your_camera:
     zones:
       sidewalk:
+        # highlight-next-line
         loitering_time: 4 # unit is in seconds
         objects:
           - person
@@ -122,6 +119,7 @@ cameras:
   name_of_your_camera:
     zones:
       front_yard:
+        # highlight-next-line
         inertia: 3
         objects:
           - person
@@ -134,6 +132,7 @@ cameras:
   name_of_your_camera:
     zones:
       driveway_entrance:
+        # highlight-next-line
         inertia: 1
         objects:
           - car
@@ -196,5 +195,6 @@ cameras:
         coordinates: ...
         distances: ...
         inertia: 1
+        # highlight-next-line
         speed_threshold: 20 # unit is in kph or mph, depending on how unit_system is set (see above)
 ```

docs/docs/development/contributing.md

@@ -17,15 +17,15 @@ From here, follow the guides for:
 - [Web Interface](#web-interface)
 - [Documentation](#documentation)
 
-### Frigate Home Assistant Add-on
+### Frigate Home Assistant App
 
-This repository holds the Home Assistant Add-on, for use with Home Assistant OS and compatible installations. It is the piece that allows you to run Frigate from your Home Assistant Supervisor tab.
+This repository holds the Home Assistant App, for use with Home Assistant OS and compatible installations. It is the piece that allows you to run Frigate from your Home Assistant Supervisor tab.
 
 Fork [blakeblackshear/frigate-hass-addons](https://github.com/blakeblackshear/frigate-hass-addons) to your own Github profile, then clone the forked repo to your local machine.
 
 ### Frigate Home Assistant Integration
 
-This repository holds the custom integration that allows your Home Assistant installation to automatically create entities for your Frigate instance, whether you are running Frigate as a standalone Docker container or as a [Home Assistant Add-on](#frigate-home-assistant-add-on).
+This repository holds the custom integration that allows your Home Assistant installation to automatically create entities for your Frigate instance, whether you are running Frigate as a standalone Docker container or as a [Home Assistant App](#frigate-home-assistant-app).
 
 Fork [blakeblackshear/frigate-hass-integration](https://github.com/blakeblackshear/frigate-hass-integration) to your own GitHub profile, then clone the forked repo to your local machine.
 
@@ -89,6 +89,14 @@ After closing VS Code, you may still have containers running. To close everythin
 
 ### Testing
 
+#### Unit Tests
+
+GitHub will execute unit tests on new PRs. You must ensure that all tests pass.
+
+```shell
+python3 -u -m unittest
+```
+
 #### FFMPEG Hardware Acceleration
 
 The following commands are used inside the container to ensure hardware acceleration is working properly.
@@ -125,6 +133,28 @@ ffmpeg -hwaccel vaapi -hwaccel_device /dev/dri/renderD128 -hwaccel_output_format
 ffmpeg -c:v h264_qsv -re -stream_loop -1 -i https://streams.videolan.org/ffmpeg/incoming/720p60.mp4 -f rawvideo -pix_fmt yuv420p pipe: > /dev/null
 ```
 
+### Submitting a pull request
+
+Code must be formatted, linted and type-tested. GitHub will run these checks on pull requests, so it is advised to run them yourself prior to opening.
+
+**Formatting**
+
+```shell
+ruff format frigate migrations docker *.py
+```
+
+**Linting**
+
+```shell
+ruff check frigate migrations docker *.py
+```
+
+**MyPy Static Typing**
+
+```shell
+python3 -u -m mypy --config-file frigate/mypy.ini frigate
+```
+
 ## Web Interface
 
 ### Prerequisites

docs/docs/frigate/hardware.md

@@ -26,7 +26,7 @@ I may earn a small commission for my endorsement, recommendation, testimonial, o
 
 ## Server
 
-My current favorite is the Beelink EQ13 because of the efficient N100 CPU and dual NICs that allow you to setup a dedicated private network for your cameras where they can be blocked from accessing the internet. There are many used workstation options on eBay that work very well. Anything with an Intel CPU and capable of running Debian should work fine. As a bonus, you may want to look for devices with a M.2 or PCIe express slot that is compatible with the Google Coral, Hailo, or other AI accelerators.
+My current favorite is the Beelink EQ13 because of the efficient N100 CPU and dual NICs that allow you to setup a dedicated private network for your cameras where they can be blocked from accessing the internet. There are many used workstation options on eBay that work very well. Anything with an Intel CPU (with AVX + AVX2 instructions) and capable of running Debian should work fine. As a bonus, you may want to look for devices with a M.2 or PCIe express slot that is compatible with the Google Coral, Hailo, or other AI accelerators.
 
 Note that many of these mini PCs come with Windows pre-installed, and you will need to install Linux according to the [getting started guide](../guides/getting_started.md).
 

docs/docs/frigate/installation.md

@@ -3,11 +3,11 @@ id: installation
 title: Installation
 ---
 
-Frigate is a Docker container that can be run on any Docker host including as a [Home Assistant Add-on](https://www.home-assistant.io/addons/). Note that the Home Assistant Add-on is **not** the same thing as the integration. The [integration](/integrations/home-assistant) is required to integrate Frigate into Home Assistant, whether you are running Frigate as a standalone Docker container or as a Home Assistant Add-on.
+Frigate is a Docker container that can be run on any Docker host including as a [Home Assistant App](https://www.home-assistant.io/apps/). Note that the Home Assistant App is **not** the same thing as the integration. The [integration](/integrations/home-assistant) is required to integrate Frigate into Home Assistant, whether you are running Frigate as a standalone Docker container or as a Home Assistant App.
 
 :::tip
 
-If you already have Frigate installed as a Home Assistant Add-on, check out the [getting started guide](../guides/getting_started#configuring-frigate) to configure Frigate.
+If you already have Frigate installed as a Home Assistant App, check out the [getting started guide](../guides/getting_started.md#configuring-frigate) to configure Frigate.
 
 :::
 
@@ -92,7 +92,7 @@ $ python -c 'print("{:.2f}MB".format(((1280 * 720 * 1.5 * 20 + 270480) / 1048576
 253MB
 ```
 
-The shm size cannot be set per container for Home Assistant add-ons. However, this is probably not required since by default Home Assistant Supervisor allocates `/dev/shm` with half the size of your total memory. If your machine has 8GB of memory, chances are that Frigate will have access to up to 4GB without any additional configuration.
+The shm size cannot be set per container for Home Assistant Apps. However, this is probably not required since by default Home Assistant Supervisor allocates `/dev/shm` with half the size of your total memory. If your machine has 8GB of memory, chances are that Frigate will have access to up to 4GB without any additional configuration.
 
 ## Extra Steps for Specific Hardware
 
@@ -297,7 +297,7 @@ The MemryX MX3 Accelerator is available in the M.2 2280 form factor (like an NVM
 
 #### Installation
 
-To get started with MX3 hardware setup for your system, refer to the [Hardware Setup Guide](https://developer.memryx.com/get_started/hardware_setup.html).
+To get started with MX3 hardware setup for your system, refer to the [Hardware Setup Guide](https://developer.memryx.com/2p1/get_started/install_hardware.html).
 
 Then follow these steps for installing the correct driver/runtime configuration:
 
@@ -306,6 +306,12 @@ Then follow these steps for installing the correct driver/runtime configuration:
 3. Run the script with `./user_installation.sh`
 4. **Restart your computer** to complete driver installation.
 
+:::warning
+
+For manual setup, use **MemryX SDK 2.1** only. Other SDK versions are not supported for this setup. See the [SDK 2.1 documentation](https://developer.memryx.com/2p1/index.html)
+
+:::
+
 #### Setup
 
 To set up Frigate, follow the default installation instructions, for example: `ghcr.io/blakeblackshear/frigate:stable`
@@ -510,7 +516,7 @@ The community supported docker image tags for the current stable version are:
 - `stable-tensorrt-jp6` - Frigate build optimized for Nvidia Jetson devices running Jetpack 6
 - `stable-rk` - Frigate build for SBCs with Rockchip SoC
 
-## Home Assistant Add-on
+## Home Assistant App
 
 :::warning
 
@@ -521,7 +527,7 @@ There are important limitations in HA OS to be aware of:
 - Separate local storage for media is not yet supported by Home Assistant
 - AMD GPUs are not supported because HA OS does not include the mesa driver.
 - Intel NPUs are not supported because HA OS does not include the NPU firmware.
-- Nvidia GPUs are not supported because addons do not support the Nvidia runtime.
+- Nvidia GPUs are not supported because HA Apps do not support the Nvidia runtime.
 
 :::
 
@@ -531,27 +537,27 @@ See [the network storage guide](/guides/ha_network_storage.md) for instructions
 
 :::
 
-Home Assistant OS users can install via the Add-on repository.
+Home Assistant OS users can install via the App repository.
 
-1. In Home Assistant, navigate to _Settings_ > _Add-ons_ > _Add-on Store_ > _Repositories_
+1. In Home Assistant, navigate to _Settings_ > _Apps_ > _App Store_ > _Repositories_
 2. Add `https://github.com/blakeblackshear/frigate-hass-addons`
-3. Install the desired variant of the Frigate Add-on (see below)
+3. Install the desired variant of the Frigate App (see below)
 4. Setup your network configuration in the `Configuration` tab
-5. Start the Add-on
+5. Start the App
 6. Use the _Open Web UI_ button to access the Frigate UI, then click in the _cog icon_ > _Configuration editor_ and configure Frigate to your liking
 
-There are several variants of the Add-on available:
+There are several variants of the App available:
 
-| Add-on Variant             | Description                                                |
+| App Variant                | Description                                                |
 | -------------------------- | ---------------------------------------------------------- |
 | Frigate                    | Current release with protection mode on                    |
 | Frigate (Full Access)      | Current release with the option to disable protection mode |
 | Frigate Beta               | Beta release with protection mode on                       |
 | Frigate Beta (Full Access) | Beta release with the option to disable protection mode    |
 
-If you are using hardware acceleration for ffmpeg, you **may** need to use the _Full Access_ variant of the Add-on. This is because the Frigate Add-on runs in a container with limited access to the host system. The _Full Access_ variant allows you to disable _Protection mode_ and give Frigate full access to the host system.
+If you are using hardware acceleration for ffmpeg, you **may** need to use the _Full Access_ variant of the App. This is because the Frigate App runs in a container with limited access to the host system. The _Full Access_ variant allows you to disable _Protection mode_ and give Frigate full access to the host system.
 
-You can also edit the Frigate configuration file through the [VS Code Add-on](https://github.com/hassio-addons/addon-vscode) or similar. In that case, the configuration file will be at `/addon_configs/<addon_directory>/config.yml`, where `<addon_directory>` is specific to the variant of the Frigate Add-on you are running. See the list of directories [here](../configuration/index.md#accessing-add-on-config-dir).
+You can also edit the Frigate configuration file through the [VS Code App](https://github.com/hassio-addons/addon-vscode) or similar. In that case, the configuration file will be at `/addon_configs/<addon_directory>/config.yml`, where `<addon_directory>` is specific to the variant of the Frigate App you are running. See the list of directories [here](../configuration/index.md#accessing-app-config-dir).
 
 ## Kubernetes
 

docs/docs/frigate/planning_setup.md

@@ -34,11 +34,14 @@ For commercial installations it is important to verify the number of supported c
 
 There are many different hardware options for object detection depending on priorities and available hardware. See [the recommended hardware page](./hardware.md#detectors) for more specifics on what hardware is recommended for object detection.
 
+### CPU
+
+Frigate requires a CPU with AVX + AVX2 instructions. Most modern CPUs (post-2011) support AVX and AVX2, but it is generally absent in low-power or budget-oriented processors, particularly older Intel Pentium, Celeron, and Atom-based chips. Specifically, Intel Celeron and Pentium models prior to the 2020 Tiger Lake generation typically lack AVX. Older Intel Xeon models may have AVX, but may lack AVX2.
+
 ### Storage
 
 Storage is an important consideration when planning a new installation. To get a more precise estimate of your storage requirements, you can use an IP camera storage calculator. Websites like [IPConfigure Storage Calculator](https://calculator.ipconfigure.com/) can help you determine the necessary disk space based on your camera settings.
 
-
 #### SSDs (Solid State Drives)
 
 SSDs are an excellent choice for Frigate, offering high speed and responsiveness. The older concern that SSDs would quickly "wear out" from constant video recording is largely no longer valid for modern consumer and enterprise-grade SSDs.
@@ -71,4 +74,4 @@ While supported, using network-attached storage (NAS) for recordings can introdu
 
 - **Basic Minimum: 4GB RAM**: This is generally sufficient for a very basic Frigate setup with a few cameras and a dedicated object detection accelerator, without running any enrichments. Performance might be tight, especially with higher resolution streams or numerous detections.
 - **Minimum for Enrichments: 8GB RAM**: If you plan to utilize Frigate's enrichment features (e.g., facial recognition, license plate recognition, or other AI models that run alongside standard object detection), 8GB of RAM should be considered the minimum. Enrichments require additional memory to load and process their respective models and data.
-- **Recommended: 16GB RAM**: For most users, especially those with many cameras (8+) or who plan to heavily leverage enrichments, 16GB of RAM is highly recommended. This provides ample headroom for smooth operation, reduces the likelihood of swapping to disk (which can impact performance), and allows for future expansion.
+- **Recommended: 16GB RAM**: For most users, especially those with many cameras (8+) or who plan to heavily leverage enrichments, 16GB of RAM is highly recommended. This provides ample headroom for smooth operation, reduces the likelihood of swapping to disk (which can impact performance), and allows for future expansion.

docs/docs/frigate/updating.md

@@ -5,9 +5,9 @@ title: Updating
 
 # Updating Frigate
 
-The current stable version of Frigate is **0.17.0**. The release notes and any breaking changes for this version can be found on the [Frigate GitHub releases page](https://github.com/blakeblackshear/frigate/releases/tag/v0.17.0).
+The current stable version of Frigate is **0.17.2**. The release notes and any breaking changes for this version can be found on the [Frigate GitHub releases page](https://github.com/blakeblackshear/frigate/releases/tag/v0.17.2).
 
-Keeping Frigate up to date ensures you benefit from the latest features, performance improvements, and bug fixes. The update process varies slightly depending on your installation method (Docker, Home Assistant Addon, etc.). Below are instructions for the most common setups.
+Keeping Frigate up to date ensures you benefit from the latest features, performance improvements, and bug fixes. The update process varies slightly depending on your installation method (Docker, Home Assistant App, etc.). Below are instructions for the most common setups.
 
 ## Before You Begin
 
@@ -31,21 +31,21 @@ If you’re running Frigate via Docker (recommended method), follow these steps:
 
 2. **Update and Pull the Latest Image**:
    - If using Docker Compose:
-     - Edit your `docker-compose.yml` file to specify the desired version tag (e.g., `0.17.0` instead of `0.16.4`). For example:
+     - Edit your `docker-compose.yml` file to specify the desired version tag (e.g., `0.17.2` instead of `0.16.4`). For example:
        ```yaml
        services:
          frigate:
-           image: ghcr.io/blakeblackshear/frigate:0.17.0
+           image: ghcr.io/blakeblackshear/frigate:0.17.2
        ```
      - Then pull the image:
        ```bash
-       docker pull ghcr.io/blakeblackshear/frigate:0.17.0
+       docker pull ghcr.io/blakeblackshear/frigate:0.17.2
        ```
      - **Note for `stable` Tag Users**: If your `docker-compose.yml` uses the `stable` tag (e.g., `ghcr.io/blakeblackshear/frigate:stable`), you don’t need to update the tag manually. The `stable` tag always points to the latest stable release after pulling.
    - If using `docker run`:
-     - Pull the image with the appropriate tag (e.g., `0.17.0`, `0.17.0-tensorrt`, or `stable`):
+     - Pull the image with the appropriate tag (e.g., `0.17.2`, `0.17.2-tensorrt`, or `stable`):
        ```bash
-       docker pull ghcr.io/blakeblackshear/frigate:0.17.0
+       docker pull ghcr.io/blakeblackshear/frigate:0.17.2
        ```
 
 3. **Start the Container**:
@@ -67,30 +67,30 @@ If you’re running Frigate via Docker (recommended method), follow these steps:
 - If you’ve customized other settings (e.g., `shm-size`), ensure they’re still appropriate after the update.
 - Docker will automatically use the updated image when you restart the container, as long as you pulled the correct version.
 
-## Updating the Home Assistant Addon
+## Updating the Home Assistant App (formerly Addon)
 
-For users running Frigate as a Home Assistant Addon:
+For users running Frigate as a Home Assistant App:
 
 1. **Check for Updates**:
-   - Navigate to **Settings > Add-ons** in Home Assistant.
-   - Find your installed Frigate addon (e.g., "Frigate NVR" or "Frigate NVR (Full Access)").
+   - Navigate to **Settings > Apps** in Home Assistant.
+   - Find your installed Frigate app (e.g., "Frigate NVR" or "Frigate NVR (Full Access)").
    - If an update is available, you’ll see an "Update" button.
 
-2. **Update the Addon**:
-   - Click the "Update" button next to the Frigate addon.
+2. **Update the App**:
+   - Click the "Update" button next to the Frigate app.
    - Wait for the process to complete. Home Assistant will handle downloading and installing the new version.
 
-3. **Restart the Addon**:
-   - After updating, go to the addon’s page and click "Restart" to apply the changes.
+3. **Restart the App**:
+   - After updating, go to the app’s page and click "Restart" to apply the changes.
 
 4. **Verify the Update**:
-   - Check the addon logs (under the "Log" tab) to ensure Frigate starts without errors.
+   - Check the app logs (under the "Log" tab) to ensure Frigate starts without errors.
    - Access the Frigate Web UI to confirm the new version is running.
 
 ### Notes
 
 - Ensure your `/config/frigate.yml` is compatible with the new version by reviewing the [Release notes](https://github.com/blakeblackshear/frigate/releases).
-- If using custom hardware (e.g., Coral or GPU), verify that configurations still work, as addon updates don’t modify your hardware settings.
+- If using custom hardware (e.g., Coral or GPU), verify that configurations still work, as app updates don’t modify your hardware settings.
 
 ## Rolling Back
 
@@ -101,7 +101,7 @@ If an update causes issues:
 3. Revert to the previous image version:
    - For Docker: Specify an older tag (e.g., `ghcr.io/blakeblackshear/frigate:0.16.4`) in your `docker run` command.
    - For Docker Compose: Edit your `docker-compose.yml`, specify the older version tag (e.g., `ghcr.io/blakeblackshear/frigate:0.16.4`), and re-run `docker compose up -d`.
-   - For Home Assistant: Reinstall the previous addon version manually via the repository if needed and restart the addon.
+   - For Home Assistant: Restore from the app/addon backup you took before you updated.
 4. Verify the old version is running again.
 
 ## Troubleshooting

docs/docs/frigate/video_pipeline.md

@@ -37,18 +37,18 @@ The following diagram adds a lot more detail than the simple view explained befo
 %%{init: {"themeVariables": {"edgeLabelBackground": "transparent"}}}%%
 
 flowchart TD
-    RecStore[(Recording\nstore)]
-    SnapStore[(Snapshot\nstore)]
+    RecStore[(Recording<br>store)]
+    SnapStore[(Snapshot<br>store)]
 
     subgraph Acquisition
         Cam["Camera"] -->|FFmpeg supported| Stream
-        Cam -->|"Other streaming\nprotocols"| go2rtc
+        Cam -->|"Other streaming<br>protocols"| go2rtc
         go2rtc("go2rtc") --> Stream
-        Stream[Capture main and\nsub streams] --> |detect stream|Decode(Decode and\ndownscale)
+        Stream[Capture main and<br>sub streams] --> |detect stream|Decode(Decode and<br>downscale)
     end
     subgraph Motion
-        Decode --> MotionM(Apply\nmotion masks)
-        MotionM --> MotionD(Motion\ndetection)
+        Decode --> MotionM(Apply<br>motion masks)
+        MotionM --> MotionD(Motion<br>detection)
     end
     subgraph Detection
         MotionD --> |motion regions| ObjectD(Object detection)
@@ -60,8 +60,8 @@ flowchart TD
     MotionD --> |motion event|Birdseye
     ObjectZ --> |object event|Birdseye
 
-    MotionD --> |"video segments\n(retain motion)"|RecStore
+    MotionD --> |"video segments<br>(retain motion)"|RecStore
     ObjectZ --> |detection clip|RecStore
-    Stream -->|"video segments\n(retain all)"| RecStore
+    Stream -->|"video segments<br>(retain all)"| RecStore
     ObjectZ --> |detection snapshot|SnapStore
 ```

docs/docs/guides/configuring_go2rtc.md

@@ -11,7 +11,7 @@ Use of the bundled go2rtc is optional. You can still configure FFmpeg to connect
 
 ## Setup a go2rtc stream
 
-First, you will want to configure go2rtc to connect to your camera stream by adding the stream you want to use for live view in your Frigate config file. Avoid changing any other parts of your config at this step. Note that go2rtc supports [many different stream types](https://github.com/AlexxIT/go2rtc/tree/v1.9.13#module-streams), not just rtsp.
+First, you will want to configure go2rtc to connect to your camera stream by adding the stream you want to use for live view in your Frigate config file. Avoid changing any other parts of your config at this step. Note that go2rtc supports [many different stream types](https://github.com/AlexxIT/go2rtc/tree/v1.9.10#module-streams), not just rtsp.
 
 :::tip
 
@@ -33,22 +33,19 @@ After adding this to the config, restart Frigate and try to watch the live strea
 ### What if my video doesn't play?
 
 - Check Logs:
-
   - Access the go2rtc logs in the Frigate UI under Logs in the sidebar.
   - If go2rtc is having difficulty connecting to your camera, you should see some error messages in the log.
 
 - Check go2rtc Web Interface: if you don't see any errors in the logs, try viewing the camera through go2rtc's web interface.
-
   - Navigate to port 1984 in your browser to access go2rtc's web interface.
     - If using Frigate through Home Assistant, enable the web interface at port 1984.
     - If using Docker, forward port 1984 before accessing the web interface.
   - Click `stream` for the specific camera to see if the camera's stream is being received.
 
 - Check Video Codec:
-
   - If the camera stream works in go2rtc but not in your browser, the video codec might be unsupported.
-  - If using H265, switch to H264. Refer to [video codec compatibility](https://github.com/AlexxIT/go2rtc/tree/v1.9.13#codecs-madness) in go2rtc documentation.
-  - If unable to switch from H265 to H264, or if the stream format is different (e.g., MJPEG), re-encode the video using [FFmpeg parameters](https://github.com/AlexxIT/go2rtc/tree/v1.9.13#source-ffmpeg). It supports rotating and resizing video feeds and hardware acceleration. Keep in mind that transcoding video from one format to another is a resource intensive task and you may be better off using the built-in jsmpeg view.
+  - If using H265, switch to H264. Refer to [video codec compatibility](https://github.com/AlexxIT/go2rtc/tree/v1.9.10#codecs-madness) in go2rtc documentation.
+  - If unable to switch from H265 to H264, or if the stream format is different (e.g., MJPEG), re-encode the video using [FFmpeg parameters](https://github.com/AlexxIT/go2rtc/tree/v1.9.10#source-ffmpeg). It supports rotating and resizing video feeds and hardware acceleration. Keep in mind that transcoding video from one format to another is a resource intensive task and you may be better off using the built-in jsmpeg view.
     ```yaml
     go2rtc:
       streams:
@@ -58,7 +55,6 @@ After adding this to the config, restart Frigate and try to watch the live strea
     ```
 
 - Switch to FFmpeg if needed:
-
   - Some camera streams may need to use the ffmpeg module in go2rtc. This has the downside of slower startup times, but has compatibility with more stream types.
 
     ```yaml
@@ -101,9 +97,9 @@ After adding this to the config, restart Frigate and try to watch the live strea
 
 :::warning
 
-To access the go2rtc stream externally when utilizing the Frigate Add-On (for
+To access the go2rtc stream externally when utilizing the Frigate App (for
 instance through VLC), you must first enable the RTSP Restream port.
-You can do this by visiting the Frigate Add-On configuration page within Home
+You can do this by visiting the Frigate App configuration page within Home
 Assistant and revealing the hidden options under the "Show disabled ports"
 section.
 

docs/docs/guides/getting_started.md

@@ -9,7 +9,7 @@ title: Getting started
 
 If you already have an environment with Linux and Docker installed, you can continue to [Installing Frigate](#installing-frigate) below.
 
-If you already have Frigate installed through Docker or through a Home Assistant Add-on, you can continue to [Configuring Frigate](#configuring-frigate) below.
+If you already have Frigate installed through Docker or through a Home Assistant App, you can continue to [Configuring Frigate](#configuring-frigate) below.
 
 :::
 
@@ -81,7 +81,7 @@ Now you have a minimal Debian server that requires very little maintenance.
 
 ## Installing Frigate
 
-This section shows how to create a minimal directory structure for a Docker installation on Debian. If you have installed Frigate as a Home Assistant Add-on or another way, you can continue to [Configuring Frigate](#configuring-frigate).
+This section shows how to create a minimal directory structure for a Docker installation on Debian. If you have installed Frigate as a Home Assistant App or another way, you can continue to [Configuring Frigate](#configuring-frigate).
 
 ### Setup directories
 
@@ -150,7 +150,7 @@ Here is an example configuration with hardware acceleration configured to work w
 
 `docker-compose.yml` (after modifying, you will need to run `docker compose up -d` to apply changes)
 
-```yaml
+```yaml {4,5}
 services:
   frigate:
     ...
@@ -168,17 +168,57 @@ cameras:
   name_of_your_camera:
     ffmpeg:
       inputs: ...
+      # highlight-next-line
       hwaccel_args: preset-vaapi
     detect: ...
 ```
 
 ### Step 4: Configure detectors
 
-By default, Frigate will use a single CPU detector. If you have a USB Coral, you will need to add a detectors section to your config.
+By default, Frigate will use a single CPU detector.
+
+In many cases, the integrated graphics on Intel CPUs provides sufficient performance for typical Frigate setups. If you have an Intel processor, you can follow the configuration below.
+
+<details>
+  <summary>Use Intel OpenVINO detector</summary>
+
+You need to refer to **Configure hardware acceleration** above to enable the container to use the GPU.
+
+```yaml {3-6,9-15,20-21}
+mqtt: ...
+
+detectors: # <---- add detectors
+  ov:
+    type: openvino  # <---- use openvino detector
+    device: GPU
+
+# We will use the default MobileNet_v2 model from OpenVINO.
+model:
+  width: 300
+  height: 300
+  input_tensor: nhwc
+  input_pixel_format: bgr
+  path: /openvino-model/ssdlite_mobilenet_v2.xml
+  labelmap_path: /openvino-model/coco_91cl_bkgr.txt
+
+cameras:
+  name_of_your_camera:
+    ffmpeg: ...
+    detect:
+      enabled: True # <---- turn on detection
+      ...
+```
+
+</details>
+
+If you have a USB Coral, you will need to add a detectors section to your config.
+
+<details>
+   <summary>Use USB Coral detector</summary>
 
 `docker-compose.yml` (after modifying, you will need to run `docker compose up -d` to apply changes)
 
-```yaml
+```yaml {4-6}
 services:
   frigate:
     ...
@@ -188,7 +228,7 @@ services:
     ...
 ```
 
-```yaml
+```yaml {3-6,11-12}
 mqtt: ...
 
 detectors: # <---- add detectors
@@ -204,6 +244,8 @@ cameras:
       ...
 ```
 
+</details>
+
 More details on available detectors can be found [here](../configuration/object_detectors.md).
 
 Restart Frigate and you should start seeing detections for `person`. If you want to track other objects, they will need to be added according to the [configuration file reference](../configuration/reference.md).
@@ -222,7 +264,7 @@ Note that motion masks should not be used to mark out areas where you do not wan
 
 Your configuration should look similar to this now.
 
-```yaml
+```yaml {16-18}
 mqtt:
   enabled: False
 
@@ -240,10 +282,7 @@ cameras:
             - detect
     motion:
       mask:
-        motion_area:
-          friendly_name: "Motion mask"
-          enabled: true
-          coordinates: "0,461,3,0,1919,0,1919,843,1699,492,1344,458,1346,336,973,317,869,375,866,432"
+        - 0,461,3,0,1919,0,1919,843,1699,492,1344,458,1346,336,973,317,869,375,866,432
 ```
 
 ### Step 6: Enable recordings
@@ -252,7 +291,7 @@ In order to review activity in the Frigate UI, recordings need to be enabled.
 
 To enable recording video, add the `record` role to a stream and enable it in the config. If record is disabled in the config, it won't be possible to enable it in the UI.
 
-```yaml
+```yaml {16-17}
 mqtt: ...
 
 detectors: ...

docs/docs/guides/ha_network_storage.md

@@ -3,7 +3,7 @@ id: ha_network_storage
 title: Home Assistant network storage
 ---
 
-As of Home Assistant 2023.6, Network Mounted Storage is supported for Add-ons.
+As of Home Assistant 2023.6, Network Mounted Storage is supported for Apps.
 
 ## Setting Up Remote Storage For Frigate
 
@@ -14,7 +14,7 @@ As of Home Assistant 2023.6, Network Mounted Storage is supported for Add-ons.
 
 ### Initial Setup
 
-1. Stop the Frigate Add-on
+1. Stop the Frigate App
 
 ### Move current data
 
@@ -37,4 +37,4 @@ Keeping the current data is optional, but the data will need to be moved regardl
 4. Fill out the additional required info for your particular NAS
 5. Connect
 6. Move files from `/media/frigate_tmp` to `/media/frigate` if they were kept in previous step
-7. Start the Frigate Add-on
+7. Start the Frigate App

docs/docs/integrations/home-assistant.md

@@ -99,11 +99,11 @@ services:
       ...
 ```
 
-### Home Assistant Add-on
+### Home Assistant App
 
-If you are using Home Assistant Add-on, the URL should be one of the following depending on which Add-on variant you are using. Note that if you are using the Proxy Add-on, you should NOT point the integration at the proxy URL. Just enter the same URL used to access Frigate directly from your network.
+If you are using Home Assistant App, the URL should be one of the following depending on which App variant you are using. Note that if you are using the Proxy App, you should NOT point the integration at the proxy URL. Just enter the same URL used to access Frigate directly from your network.
 
-| Add-on Variant             | URL                                    |
+| App Variant                | URL                                    |
 | -------------------------- | -------------------------------------- |
 | Frigate                    | `http://ccab4aaf-frigate:5000`         |
 | Frigate (Full Access)      | `http://ccab4aaf-frigate-fa:5000`      |

docs/docs/integrations/mqtt.md

@@ -159,8 +159,7 @@ Published when a license plate is recognized on a car object. See the [License P
   "plate": "123ABC",
   "score": 0.95,
   "camera": "driveway_cam",
-  "timestamp": 1607123958.748393,
-  "plate_box": [917, 487, 1029, 529] // box coordinates of the detected license plate in the frame
+  "timestamp": 1607123958.748393
 }
 ```
 
@@ -275,25 +274,6 @@ Same data available at `/api/stats` published at a configurable interval.
 
 Returns data about each camera, its current features, and if it is detecting motion, objects, etc. Can be triggered by publising to `frigate/onConnect`
 
-### `frigate/profile/set`
-
-Topic to activate or deactivate a [profile](/configuration/profiles). Publish a profile name to activate it, or `none` to deactivate the current profile.
-
-### `frigate/profile/state`
-
-Topic with the currently active profile name. Published value is the profile name or `none` if no profile is active. This topic is retained.
-
-### `frigate/profiles/available`
-
-Topic with a JSON array of all available profile definitions. Published on startup as a retained message.
-
-```json
-[
-  { "name": "away", "friendly_name": "Away" },
-  { "name": "home", "friendly_name": "Home" }
-]
-```
-
 ### `frigate/notifications/set`
 
 Topic to turn notifications on and off. Expected values are `ON` and `OFF`.
@@ -449,30 +429,6 @@ Topic to adjust motion contour area for a camera. Expected value is an integer.
 
 Topic with current motion contour area for a camera. Published value is an integer.
 
-### `frigate/<camera_name>/motion_mask/<mask_name>/set`
-
-Topic to turn a specific motion mask for a camera on and off. Expected values are `ON` and `OFF`.
-
-### `frigate/<camera_name>/motion_mask/<mask_name>/state`
-
-Topic with current state of a specific motion mask for a camera. Published values are `ON` and `OFF`.
-
-### `frigate/<camera_name>/object_mask/<mask_name>/set`
-
-Topic to turn a specific object mask for a camera on and off. Expected values are `ON` and `OFF`.
-
-### `frigate/<camera_name>/object_mask/<mask_name>/state`
-
-Topic with current state of a specific object mask for a camera. Published values are `ON` and `OFF`.
-
-### `frigate/<camera_name>/zone/<zone_name>/set`
-
-Topic to turn a specific zone for a camera on and off. Expected values are `ON` and `OFF`.
-
-### `frigate/<camera_name>/zone/<zone_name>/state`
-
-Topic with current state of a specific zone for a camera. Published values are `ON` and `OFF`.
-
 ### `frigate/<camera_name>/review_status`
 
 Topic with current activity status of the camera. Possible values are `NONE`, `DETECTION`, or `ALERT`.

docs/docs/integrations/plus.md

@@ -19,11 +19,11 @@ Once logged in, you can generate an API key for Frigate in Settings.
 
 ### Set your API key
 
-In Frigate, you can use an environment variable or a docker secret named `PLUS_API_KEY` to enable the `Frigate+` buttons on the Explore page. Home Assistant Addon users can set it under Settings > Add-ons > Frigate > Configuration > Options (be sure to toggle the "Show unused optional configuration options" switch).
+In Frigate, you can use an environment variable or a docker secret named `PLUS_API_KEY` to enable the `Frigate+` buttons on the Explore page. Home Assistant App users can set it under Settings > Apps > Frigate > Configuration > Options (be sure to toggle the "Show unused optional configuration options" switch).
 
 :::warning
 
-You cannot use the `environment_vars` section of your Frigate configuration file to set this environment variable. It must be defined as an environment variable in the docker config or Home Assistant Add-on config.
+You cannot use the `environment_vars` section of your Frigate configuration file to set this environment variable. It must be defined as an environment variable in the docker config or Home Assistant App config.
 
 :::
 

docs/docs/integrations/third_party_extensions.md

@@ -42,3 +42,7 @@ This is a fork (with fixed errors and new features) of [original Double Take](ht
 ## [Scrypted - Frigate bridge plugin](https://github.com/apocaliss92/scrypted-frigate-bridge)
 
 [Scrypted - Frigate bridge](https://github.com/apocaliss92/scrypted-frigate-bridge) is an plugin that allows to ingest Frigate detections, motion, videoclips on Scrypted as well as provide templates to export rebroadcast configurations on Frigate.
+
+## [Strix](https://github.com/eduard256/Strix)
+
+[Strix](https://github.com/eduard256/Strix) auto-discovers working stream URLs for IP cameras and generates ready-to-use Frigate configs. It tests thousands of URL patterns against your camera and supports cameras without RTSP or ONVIF. 67K+ camera models from 3.6K+ brands.

docs/docs/troubleshooting/dummy-camera.md

@@ -3,67 +3,17 @@ id: dummy-camera
 title: Analyzing Object Detection
 ---
 
-Frigate provides several tools for investigating object detection and tracking behavior: reviewing recorded detections through the UI, using the built-in Debug Replay feature, and manually setting up a dummy camera for advanced scenarios.
+When investigating object detection or tracking problems, it can be helpful to replay an exported video as a temporary "dummy" camera. This lets you reproduce issues locally, iterate on configuration (detections, zones, enrichment settings), and capture logs and clips for analysis.
 
-## Reviewing Detections in the UI
+## When to use
 
-Before setting up a replay, you can often diagnose detection issues by reviewing existing recordings directly in the Frigate UI.
+- Replaying an exported clip to reproduce incorrect detections
+- Testing configuration changes (model settings, trackers, filters) against a known clip
+- Gathering deterministic logs and recordings for debugging or issue reports
 
-### Detail View (History)
+## Example Config
 
-The **Detail Stream** view in History shows recorded video with detection overlays (bounding boxes, path points, and zone highlights) drawn on top. Select a review item to see its tracked objects and lifecycle events. Clicking a lifecycle event seeks the video to that point so you can see exactly what the detector saw.
-
-### Tracking Details (Explore)
-
-In **Explore**, clicking a thumbnail opens the **Tracking Details** pane, which shows the full lifecycle of a single tracked object: every detection, zone entry/exit, and attribute change. The video plays back with the bounding box overlaid, letting you step through the object's entire lifecycle.
-
-### Annotation Offset
-
-Both views support an **Annotation Offset** setting (`detect.annotation_offset` in your camera config) that shifts the detection overlay in time relative to the recorded video. This compensates for the timing drift between the `detect` and `record` pipelines.
-
-These streams use fundamentally different clocks with different buffering and latency characteristics, so the detection data and the recorded video are never perfectly synchronized. The annotation offset shifts the overlay to visually align the bounding boxes with the objects in the recorded video.
-
-#### Why the offset varies between clips
-
-The base timing drift between detect and record is roughly constant for a given camera, so a single offset value works well on average. However, you may notice the alignment is not pixel-perfect in every clip. This is normal and caused by several factors:
-
-- **Keyframe-constrained seeking**: When the browser seeks to a timestamp, it can only land on the nearest keyframe. Each recording segment has keyframes at different positions relative to the detection timestamps, so the same offset may land slightly early in one clip and slightly late in another.
-- **Segment boundary trimming**: When a recording range starts mid-segment, the video is trimmed to the requested start point. This trim may not align with a keyframe, shifting the effective reference point.
-- **Capture-time jitter**: Network buffering, camera buffer flushes, and ffmpeg's own buffering mean the system-clock timestamp and the corresponding recorded frame are not always offset by exactly the same amount.
-
-The per-clip variation is typically quite low and is mostly an artifact of keyframe granularity rather than a change in the true drift. A "perfect" alignment would require per-frame, keyframe-aware offset compensation, which is not practical. Treat the annotation offset as a best-effort average for your camera.
-
-## Debug Replay
-
-Debug Replay lets you re-run Frigate's detection pipeline against a section of recorded video without manually configuring a dummy camera. It automatically extracts the recording, creates a temporary camera with the same detection settings as the original, and loops the clip through the pipeline so you can observe detections in real time.
-
-### When to use
-
-- Reproducing a detection or tracking issue from a specific time range
-- Testing configuration changes (model settings, zones, filters, motion) against a known clip
-- Gathering logs and debug overlays for a bug report
-
-:::note
-
-Only one replay session can be active at a time. If a session is already running, you will be prompted to navigate to it or stop it first.
-
-:::
-
-### Variables to consider
-
-- The replay will not always produce identical results to the original run. Different frames may be selected on replay, which can change detections and tracking.
-- Motion detection depends on the exact frames used; small frame shifts can change motion regions and therefore what gets passed to the detector.
-- Object detection is not fully deterministic: models and post-processing can yield slightly different results across runs.
-
-Treat the replay as a close approximation rather than an exact reproduction. Run multiple loops and examine the debug overlays and logs to understand the behavior.
-
-## Manual Dummy Camera
-
-For advanced scenarios — such as testing with a clip from a different source, debugging ffmpeg behavior, or running a clip through a completely custom configuration — you can set up a dummy camera manually.
-
-### Example config
-
-Place the clip you want to replay in a location accessible to Frigate (for example `/media/frigate/` or the repository `debug/` folder when developing). Then add a temporary camera to your `config/config.yml`:
+Place the clip you want to replay in a location accessible to Frigate (for example `/media/frigate/` or the repository `debug/` folder when developing). Then add a temporary camera to your `config/config.yml` like this:
 
 ```yaml
 cameras:
@@ -82,10 +32,10 @@ cameras:
       enabled: false
 ```
 
-- `-re -stream_loop -1` tells ffmpeg to play the file in real time and loop indefinitely.
-- `-fflags +genpts` generates presentation timestamps when they are missing in the file.
+- `-re -stream_loop -1` tells `ffmpeg` to play the file in realtime and loop indefinitely, which is useful for long debugging sessions.
+- `-fflags +genpts` helps generate presentation timestamps when they are missing in the file.
 
-### Steps
+## Steps
 
 1. Export or copy the clip you want to replay to the Frigate host (e.g., `/media/frigate/` or `debug/clips/`). Depending on what you are looking to debug, it is often helpful to add some "pre-capture" time (where the tracked object is not yet visible) to the clip when exporting.
 2. Add the temporary camera to `config/config.yml` (example above). Use a unique name such as `test` or `replay_camera` so it's easy to remove later.
@@ -95,8 +45,16 @@ cameras:
 5. Iterate on camera or enrichment settings (model, fps, zones, filters) and re-check the replay until the behavior is resolved.
 6. Remove the temporary camera from your config after debugging to avoid spurious telemetry or recordings.
 
-### Troubleshooting
+## Variables to consider in object tracking
 
-- **No video**: verify the file path is correct and accessible from the Frigate process/container.
-- **FFmpeg errors**: check the log output and adjust `input_args` for your file format. You may also need to disable hardware acceleration (`hwaccel_args: ""`) for the dummy camera.
-- **No detections**: confirm the camera `roles` include `detect` and that the model/detector configuration is enabled.
+- The exported video will not always line up exactly with how it originally ran through Frigate (or even with the last loop). Different frames may be used on replay, which can change detections and tracking.
+- Motion detection depends on the frames used; small frame shifts can change motion regions and therefore what gets passed to the detector.
+- Object detection is not deterministic: models and post-processing can yield different results across runs, so you may not get identical detections or track IDs every time.
+
+When debugging, treat the replay as a close approximation rather than a byte-for-byte replay. Capture multiple runs, enable recording if helpful, and examine logs and saved event clips to understand variability.
+
+## Troubleshooting
+
+- No video: verify the path is correct and accessible from the Frigate process/container.
+- FFmpeg errors: check the log output for ffmpeg-specific flags and adjust `input_args` accordingly for your file/container. You may also need to disable hardware acceleration (`hwaccel_args: ""`) for the dummy camera.
+- No detections: confirm the camera `roles` include `detect`, and model/detector configuration is enabled.

docs/docs/troubleshooting/edgetpu.md

@@ -32,7 +32,7 @@ The USB coral can draw up to 900mA and this can be too much for some on-device U
 The USB coral has different IDs when it is uninitialized and initialized.
 
 - When running Frigate in a VM, Proxmox lxc, etc. you must ensure both device IDs are mapped.
-- When running through the Home Assistant OS you may need to run the Full Access variant of the Frigate Add-on with the _Protection mode_ switch disabled so that the coral can be accessed.
+- When running through the Home Assistant OS you may need to run the Full Access variant of the Frigate App with the _Protection mode_ switch disabled so that the coral can be accessed.
 
 ### Synology 716+II running DSM 7.2.1-69057 Update 5
 

docs/docs/troubleshooting/faqs.md

@@ -110,3 +110,19 @@ No. Frigate uses the TCP protocol to connect to your camera's RTSP URL. VLC auto
 TCP ensures that all data packets arrive in the correct order. This is crucial for video recording, decoding, and stream processing, which is why Frigate enforces a TCP connection. UDP is faster but less reliable, as it does not guarantee packet delivery or order, and VLC does not have the same requirements as Frigate.
 
 You can still configure Frigate to use UDP by using ffmpeg input args or the preset `preset-rtsp-udp`. See the [ffmpeg presets](/configuration/ffmpeg_presets) documentation.
+
+### Why does Frigate keep creating new events for my parked car?
+
+Stationary tracking is designed to _prevent_ this — a parked car should stay one tracked object and not generate new events. If you're getting repeated events for the same car, it's likely that Frigate is losing the tracked object and re-detecting it as a new one.
+
+Open one of the events in Explore → **Tracking Details**. If the detection scores are low (< 70% or so), the model isn't confident the parked car is a car. This is common with the free [COCO-trained](https://cocodataset.org/#explore) object detection models on steep/top-down angles, partially occluded cars, foliage, or low-light footage. When detections fall below `min_score` for too many frames the tracker loses the object, and the next confident frame creates a brand new one.
+
+What helps:
+
+- **Improve the view** — even a small angle change that gets more of the car visible could lift scores enough to stabilize tracking.
+- **Use a more accurate model** — switching from `mobiledet` to `yolov9`, or stepping up to a larger variant like `yolov9-s` over `yolov9-t`, can help (at the cost of inference time, and still on the COCO dataset). The biggest gains usually come from fine-tuning a model on images from your own cameras so it learns your specific scene. [Frigate+](https://frigate.video/plus) is a paid option that does this - models are trained on security-camera footage and can be fine-tuned on images you submit from your own setup.
+- **Don't set `detect -> stationary -> max_frames` for `car`** — it artificially ends tracking and forces re-detection as a new object. See [Stationary Objects](../configuration/stationary_objects.md).
+- **Restrict alerts to the areas you care about** with `required_zones` — see [Zones](../configuration/zones.md#restricting-alerts-and-detections-to-specific-zones). Make sure those zones use the default `loitering_time: 0` unless you specifically want the review item to stay open until the car leaves.
+- **Filter impossible locations** with [object filter masks](../configuration/masks.md#object-filter-masks) if cars are being detected on rooftops, treetops, etc.
+
+See [Object Filters](../configuration/object_filters.md) for more on tuning `min_score` and `threshold` — note that raising them too high will make this exact problem worse.

docs/docusaurus.config.ts

@@ -83,6 +83,17 @@ const config: Config = {
       },
     },
     prism: {
+      magicComments:[
+        {
+          className: 'theme-code-block-highlighted-line',
+          line: 'highlight-next-line',
+          block: {start: 'highlight-start', end: 'highlight-end'},
+        },
+        {
+          className: 'code-block-error-line',
+          line: 'highlight-error-line',
+        },
+      ],
       additionalLanguages: ["bash", "json"],
     },
     languageTabs: [

docs/sidebars.ts

@@ -28,7 +28,7 @@ const sidebars: SidebarsConfig = {
         {
           type: "link",
           label: "Go2RTC Configuration Reference",
-          href: "https://github.com/AlexxIT/go2rtc/tree/v1.9.13#configuration",
+          href: "https://github.com/AlexxIT/go2rtc/tree/v1.9.10#configuration",
         } as PropSidebarItemLink,
       ],
       Detectors: [
@@ -94,7 +94,6 @@ const sidebars: SidebarsConfig = {
       "Extra Configuration": [
         "configuration/authentication",
         "configuration/notifications",
-        "configuration/profiles",
         "configuration/ffmpeg_presets",
         "configuration/pwa",
         "configuration/tls",

docs/src/css/custom.css

@@ -234,3 +234,11 @@
   content: "schema";
   color: var(--ifm-color-secondary-contrast-foreground);
 }
+
+.code-block-error-line {
+  background-color: #ff000020;
+  display: block;
+  margin: 0 calc(-1 * var(--ifm-pre-padding));
+  padding: 0 var(--ifm-pre-padding);
+  border-left: 3px solid #ff000080;
+}

docs/static/frigate-api.yaml

@@ -331,59 +331,6 @@ paths:
             application/json:
               schema:
                 $ref: "#/components/schemas/HTTPValidationError"
-  /media/sync:
-    post:
-      tags:
-        - App
-      summary: Start media sync job
-      description: |-
-        Start an asynchronous media sync job to find and (optionally) remove orphaned media files.
-        Returns 202 with job details when queued, or 409 if a job is already running.
-      operationId: sync_media_media_sync_post
-      requestBody:
-        required: true
-        content:
-          application/json:
-      responses:
-        "202":
-          description: Accepted - Job queued
-        "409":
-          description: Conflict - Job already running
-        "422":
-          description: Validation Error
-
-  /media/sync/current:
-    get:
-      tags:
-        - App
-      summary: Get current media sync job
-      description: |-
-        Retrieve the current running media sync job, if any. Returns the job details or null when no job is active.
-      operationId: get_media_sync_current_media_sync_current_get
-      responses:
-        "200":
-          description: Successful Response
-        "422":
-          description: Validation Error
-
-  /media/sync/status/{job_id}:
-    get:
-      tags:
-        - App
-      summary: Get media sync job status
-      description: |-
-        Get status and results for the specified media sync job id. Returns 200 with job details including results, or 404 if the job is not found.
-      operationId: get_media_sync_status_media_sync_status__job_id__get
-      parameters:
-        - name: job_id
-          in: path
-      responses:
-        "200":
-          description: Successful Response
-        "404":
-          description: Not Found - Job not found
-        "422":
-          description: Validation Error
   /faces/train/{name}/classify:
     post:
       tags:
@@ -3200,7 +3147,6 @@ paths:
                 duration: 30
                 include_recording: true
                 draw: {}
-                pre_capture: null
       responses:
         "200":
           description: Successful Response
@@ -5003,12 +4949,6 @@ components:
             - type: "null"
           title: Draw
           default: {}
-        pre_capture:
-          anyOf:
-            - type: integer
-            - type: "null"
-          title: Pre Capture Seconds
-          default: null
       type: object
       title: EventsCreateBody
     EventsDeleteBody:

frigate/api/app.py

@@ -19,7 +19,6 @@ from fastapi import APIRouter, Body, Path, Request, Response
 from fastapi.encoders import jsonable_encoder
 from fastapi.params import Depends
 from fastapi.responses import JSONResponse, PlainTextResponse, StreamingResponse
-from filelock import FileLock, Timeout
 from markupsafe import escape
 from peewee import SQL, fn, operator
 from pydantic import ValidationError
@@ -31,36 +30,22 @@ from frigate.api.auth import (
     require_role,
 )
 from frigate.api.defs.query.app_query_parameters import AppTimelineHourlyQueryParameters
-from frigate.api.defs.request.app_body import (
-    AppConfigSetBody,
-    MediaSyncBody,
-    ProfileSetBody,
-)
+from frigate.api.defs.request.app_body import AppConfigSetBody
 from frigate.api.defs.tags import Tags
 from frigate.config import FrigateConfig
 from frigate.config.camera.updater import (
     CameraConfigUpdateEnum,
     CameraConfigUpdateTopic,
 )
-from frigate.ffmpeg_presets import FFMPEG_HWACCEL_VAAPI, _gpu_selector
-from frigate.jobs.media_sync import (
-    get_current_media_sync_job,
-    get_media_sync_job_by_id,
-    start_media_sync_job,
-)
 from frigate.models import Event, Timeline
 from frigate.stats.prometheus import get_metrics, update_metrics
-from frigate.types import JobStatusTypesEnum
 from frigate.util.builtin import (
     clean_camera_user_pass,
-    deep_merge,
     flatten_config_data,
-    load_labels,
     process_config_query_string,
     update_yaml_file_bulk,
 )
-from frigate.util.config import apply_section_update, find_config_file
-from frigate.util.schema import get_config_schema
+from frigate.util.config import find_config_file
 from frigate.util.services import (
     get_nvidia_driver_info,
     process_logs,
@@ -85,7 +70,9 @@ def is_healthy():
 
 @router.get("/config/schema.json", dependencies=[Depends(allow_public())])
 def config_schema(request: Request):
-    return JSONResponse(content=get_config_schema(FrigateConfig))
+    return Response(
+        content=request.app.frigate_config.schema_json(), media_type="application/json"
+    )
 
 
 @router.get(
@@ -131,10 +118,6 @@ def config(request: Request):
     config: dict[str, dict[str, Any]] = config_obj.model_dump(
         mode="json", warnings="none", exclude_none=True
     )
-    config["detectors"] = {
-        name: detector.model_dump(mode="json", warnings="none", exclude_none=True)
-        for name, detector in config_obj.detectors.items()
-    }
 
     # remove the mqtt password
     config["mqtt"].pop("password", None)
@@ -158,31 +141,6 @@ def config(request: Request):
         for zone_name, zone in config_obj.cameras[camera_name].zones.items():
             camera_dict["zones"][zone_name]["color"] = zone.color
 
-        # Re-dump profile overrides with exclude_unset so that only
-        # explicitly-set fields are returned (not Pydantic defaults).
-        # Without this, the frontend merges defaults (e.g. threshold=30)
-        # over the camera's actual base values (e.g. threshold=20).
-        if camera.profiles:
-            for profile_name, profile_config in camera.profiles.items():
-                camera_dict.setdefault("profiles", {})[profile_name] = (
-                    profile_config.model_dump(
-                        mode="json", warnings="none", exclude_unset=True
-                    )
-                )
-
-        # When a profile is active, the top-level camera sections contain
-        # profile-merged (effective) values.  Include the original base
-        # configs so the frontend settings can display them separately.
-        if (
-            config_obj.active_profile is not None
-            and request.app.profile_manager is not None
-        ):
-            base_sections = request.app.profile_manager.get_base_configs_for_api(
-                camera_name
-            )
-            if base_sections:
-                camera_dict["base_config"] = base_sections
-
     # remove go2rtc stream passwords
     go2rtc: dict[str, Any] = config_obj.go2rtc.model_dump(
         mode="json", warnings="none", exclude_none=True
@@ -230,87 +188,6 @@ def config(request: Request):
     return JSONResponse(content=config)
 
 
-@router.get("/profiles", dependencies=[Depends(allow_any_authenticated())])
-def get_profiles(request: Request):
-    """List all available profiles and the currently active profile."""
-    profile_manager = request.app.profile_manager
-    return JSONResponse(content=profile_manager.get_profile_info())
-
-
-@router.get("/profile/active", dependencies=[Depends(allow_any_authenticated())])
-def get_active_profile(request: Request):
-    """Get the currently active profile."""
-    config_obj: FrigateConfig = request.app.frigate_config
-    return JSONResponse(content={"active_profile": config_obj.active_profile})
-
-
-@router.put("/profile/set", dependencies=[Depends(require_role(["admin"]))])
-def set_profile(request: Request, body: ProfileSetBody):
-    """Activate or deactivate a profile."""
-    profile_manager = request.app.profile_manager
-    err = profile_manager.activate_profile(body.profile)
-    if err:
-        return JSONResponse(
-            content={"success": False, "message": err},
-            status_code=400,
-        )
-    request.app.dispatcher.publish("profile/state", body.profile or "none", retain=True)
-    return JSONResponse(
-        content={
-            "success": True,
-            "active_profile": body.profile,
-        }
-    )
-
-
-@router.get("/ffmpeg/presets", dependencies=[Depends(allow_any_authenticated())])
-def ffmpeg_presets():
-    """Return available ffmpeg preset keys for config UI usage."""
-
-    # Whitelist based on documented presets in ffmpeg_presets.md
-    hwaccel_presets = [
-        "preset-rpi-64-h264",
-        "preset-rpi-64-h265",
-        "preset-vaapi",
-        "preset-intel-qsv-h264",
-        "preset-intel-qsv-h265",
-        "preset-nvidia",
-        "preset-jetson-h264",
-        "preset-jetson-h265",
-        "preset-rkmpp",
-    ]
-    input_presets = [
-        "preset-http-jpeg-generic",
-        "preset-http-mjpeg-generic",
-        "preset-http-reolink",
-        "preset-rtmp-generic",
-        "preset-rtsp-generic",
-        "preset-rtsp-restream",
-        "preset-rtsp-restream-low-latency",
-        "preset-rtsp-udp",
-        "preset-rtsp-blue-iris",
-    ]
-    record_output_presets = [
-        "preset-record-generic",
-        "preset-record-generic-audio-copy",
-        "preset-record-generic-audio-aac",
-        "preset-record-mjpeg",
-        "preset-record-jpeg",
-        "preset-record-ubiquiti",
-    ]
-
-    return JSONResponse(
-        content={
-            "hwaccel_args": hwaccel_presets,
-            "input_args": input_presets,
-            "output_args": {
-                "record": record_output_presets,
-                "detect": [],
-            },
-        }
-    )
-
-
 @router.get("/config/raw_paths", dependencies=[Depends(require_role(["admin"]))])
 def config_raw_paths(request: Request):
     """Admin-only endpoint that returns camera paths and go2rtc streams without credential masking."""
@@ -341,7 +218,7 @@ def config_raw_paths(request: Request):
     return JSONResponse(content=raw_paths)
 
 
-@router.get("/config/raw", dependencies=[Depends(allow_any_authenticated())])
+@router.get("/config/raw", dependencies=[Depends(require_role(["admin"]))])
 def config_raw():
     config_file = find_config_file()
 
@@ -485,248 +362,108 @@ def config_save(save_option: str, body: Any = Body(media_type="text/plain")):
         )
 
 
-def _config_set_in_memory(request: Request, body: AppConfigSetBody) -> JSONResponse:
-    """Apply config changes in-memory only, without writing to YAML.
-
-    Used for temporary config changes like debug replay camera tuning.
-    Updates the in-memory Pydantic config and publishes ZMQ updates,
-    bypassing YAML parsing entirely.
-    """
-    try:
-        updates = {}
-        if body.config_data:
-            updates = flatten_config_data(body.config_data)
-            updates = {k: ("" if v is None else v) for k, v in updates.items()}
-
-        if not updates:
-            return JSONResponse(
-                content={"success": False, "message": "No configuration data provided"},
-                status_code=400,
-            )
-
-        config: FrigateConfig = request.app.frigate_config
-
-        # Group flat key paths into nested per-camera, per-section dicts
-        grouped: dict[str, dict[str, dict]] = {}
-        for key_path, value in updates.items():
-            parts = key_path.split(".")
-            if len(parts) < 3 or parts[0] != "cameras":
-                continue
-
-            cam, section = parts[1], parts[2]
-            grouped.setdefault(cam, {}).setdefault(section, {})
-
-            # Build nested dict from remaining path (e.g. "filters.person.threshold")
-            target = grouped[cam][section]
-            for part in parts[3:-1]:
-                target = target.setdefault(part, {})
-            if len(parts) > 3:
-                target[parts[-1]] = value
-            elif isinstance(value, dict):
-                grouped[cam][section] = deep_merge(
-                    grouped[cam][section], value, override=True
-                )
-            else:
-                grouped[cam][section] = value
-
-        # Apply each section update
-        for cam_name, sections in grouped.items():
-            camera_config = config.cameras.get(cam_name)
-            if not camera_config:
-                return JSONResponse(
-                    content={
-                        "success": False,
-                        "message": f"Camera '{cam_name}' not found",
-                    },
-                    status_code=400,
-                )
-
-            for section_name, update in sections.items():
-                err = apply_section_update(camera_config, section_name, update)
-                if err is not None:
-                    return JSONResponse(
-                        content={"success": False, "message": err},
-                        status_code=400,
-                    )
-
-        # Publish ZMQ updates so processing threads pick up changes
-        if body.update_topic and body.update_topic.startswith("config/cameras/"):
-            _, _, camera, field = body.update_topic.split("/")
-            settings = getattr(config.cameras.get(camera, None), field, None)
-
-            if settings is not None:
-                request.app.config_publisher.publish_update(
-                    CameraConfigUpdateTopic(CameraConfigUpdateEnum[field], camera),
-                    settings,
-                )
-
-        return JSONResponse(
-            content={"success": True, "message": "Config applied in-memory"},
-            status_code=200,
-        )
-    except Exception as e:
-        logger.error(f"Error applying config in-memory: {e}")
-        return JSONResponse(
-            content={"success": False, "message": "Error applying config"},
-            status_code=500,
-        )
-
-
 @router.put("/config/set", dependencies=[Depends(require_role(["admin"]))])
 def config_set(request: Request, body: AppConfigSetBody):
     config_file = find_config_file()
 
-    if body.skip_save:
-        return _config_set_in_memory(request, body)
-
-    lock = FileLock(f"{config_file}.lock", timeout=5)
+    with open(config_file, "r") as f:
+        old_raw_config = f.read()
 
     try:
-        with lock:
-            with open(config_file, "r") as f:
-                old_raw_config = f.read()
+        updates = {}
 
-            try:
-                updates = {}
+        # process query string parameters (takes precedence over body.config_data)
+        parsed_url = urllib.parse.urlparse(str(request.url))
+        query_string = urllib.parse.parse_qs(parsed_url.query, keep_blank_values=True)
 
-                # process query string parameters (takes precedence over body.config_data)
-                parsed_url = urllib.parse.urlparse(str(request.url))
-                query_string = urllib.parse.parse_qs(
-                    parsed_url.query, keep_blank_values=True
-                )
+        # Filter out empty keys but keep blank values for non-empty keys
+        query_string = {k: v for k, v in query_string.items() if k}
 
-                # Filter out empty keys but keep blank values for non-empty keys
-                query_string = {k: v for k, v in query_string.items() if k}
+        if query_string:
+            updates = process_config_query_string(query_string)
+        elif body.config_data:
+            updates = flatten_config_data(body.config_data)
 
-                if query_string:
-                    updates = process_config_query_string(query_string)
-                elif body.config_data:
-                    updates = flatten_config_data(body.config_data)
-                    # Convert None values to empty strings for deletion (e.g., when deleting masks)
-                    updates = {k: ("" if v is None else v) for k, v in updates.items()}
+        if not updates:
+            return JSONResponse(
+                content=(
+                    {"success": False, "message": "No configuration data provided"}
+                ),
+                status_code=400,
+            )
 
-                if not updates:
-                    return JSONResponse(
-                        content=(
-                            {
-                                "success": False,
-                                "message": "No configuration data provided",
-                            }
-                        ),
-                        status_code=400,
-                    )
+        # apply all updates in a single operation
+        update_yaml_file_bulk(config_file, updates)
 
-                # apply all updates in a single operation
-                update_yaml_file_bulk(config_file, updates)
-
-                # validate the updated config
-                with open(config_file, "r") as f:
-                    new_raw_config = f.read()
-
-                try:
-                    config = FrigateConfig.parse(new_raw_config)
-                except Exception:
-                    with open(config_file, "w") as f:
-                        f.write(old_raw_config)
-                        f.close()
-                    logger.error(f"\nConfig Error:\n\n{str(traceback.format_exc())}")
-                    return JSONResponse(
-                        content=(
-                            {
-                                "success": False,
-                                "message": "Error parsing config. Check logs for error message.",
-                            }
-                        ),
-                        status_code=400,
-                    )
-            except Exception as e:
-                logging.error(f"Error updating config: {e}")
-                return JSONResponse(
-                    content=({"success": False, "message": "Error updating config"}),
-                    status_code=500,
-                )
-
-            if body.requires_restart == 0 or body.update_topic:
-                old_config: FrigateConfig = request.app.frigate_config
-                request.app.frigate_config = config
-                request.app.genai_manager.update_config(config)
-
-                if request.app.profile_manager is not None:
-                    request.app.profile_manager.update_config(config)
-
-                if request.app.stats_emitter is not None:
-                    request.app.stats_emitter.config = config
-
-                if body.update_topic:
-                    if body.update_topic.startswith("config/cameras/"):
-                        _, _, camera, field = body.update_topic.split("/")
-
-                        if camera == "*":
-                            # Wildcard: fan out update to all cameras
-                            enum_value = CameraConfigUpdateEnum[field]
-                            for camera_name in config.cameras:
-                                settings = config.get_nested_object(
-                                    f"config/cameras/{camera_name}/{field}"
-                                )
-                                request.app.config_publisher.publish_update(
-                                    CameraConfigUpdateTopic(enum_value, camera_name),
-                                    settings,
-                                )
-                        else:
-                            if field == "add":
-                                settings = config.cameras[camera]
-                            elif field == "remove":
-                                settings = old_config.cameras[camera]
-                            else:
-                                settings = config.get_nested_object(body.update_topic)
-
-                            request.app.config_publisher.publish_update(
-                                CameraConfigUpdateTopic(
-                                    CameraConfigUpdateEnum[field], camera
-                                ),
-                                settings,
-                            )
-                    else:
-                        # Generic handling for global config updates
-                        settings = config.get_nested_object(body.update_topic)
-
-                        # Publish None for removal, actual config for add/update
-                        request.app.config_publisher.publisher.publish(
-                            body.update_topic, settings
-                        )
+        # validate the updated config
+        with open(config_file, "r") as f:
+            new_raw_config = f.read()
 
+        try:
+            config = FrigateConfig.parse(new_raw_config)
+        except Exception:
+            with open(config_file, "w") as f:
+                f.write(old_raw_config)
+                f.close()
+            logger.error(f"\nConfig Error:\n\n{str(traceback.format_exc())}")
             return JSONResponse(
                 content=(
                     {
-                        "success": True,
-                        "message": "Config successfully updated, restart to apply",
+                        "success": False,
+                        "message": "Error parsing config. Check logs for error message.",
                     }
                 ),
-                status_code=200,
+                status_code=400,
             )
-    except Timeout:
+    except Exception as e:
+        logging.error(f"Error updating config: {e}")
         return JSONResponse(
-            content=(
-                {
-                    "success": False,
-                    "message": "Another process is currently updating the config. Please try again in a few seconds.",
-                }
-            ),
-            status_code=503,
+            content=({"success": False, "message": "Error updating config"}),
+            status_code=500,
         )
 
+    if body.requires_restart == 0 or body.update_topic:
+        old_config: FrigateConfig = request.app.frigate_config
+        request.app.frigate_config = config
+
+        if body.update_topic:
+            if body.update_topic.startswith("config/cameras/"):
+                _, _, camera, field = body.update_topic.split("/")
+
+                if field == "add":
+                    settings = config.cameras[camera]
+                elif field == "remove":
+                    settings = old_config.cameras[camera]
+                else:
+                    settings = config.get_nested_object(body.update_topic)
+
+                request.app.config_publisher.publish_update(
+                    CameraConfigUpdateTopic(CameraConfigUpdateEnum[field], camera),
+                    settings,
+                )
+            else:
+                # Generic handling for global config updates
+                settings = config.get_nested_object(body.update_topic)
+
+                # Publish None for removal, actual config for add/update
+                request.app.config_publisher.publisher.publish(
+                    body.update_topic, settings
+                )
+
+    return JSONResponse(
+        content=(
+            {
+                "success": True,
+                "message": "Config successfully updated, restart to apply",
+            }
+        ),
+        status_code=200,
+    )
+
 
 @router.get("/vainfo", dependencies=[Depends(allow_any_authenticated())])
 def vainfo():
-    # Use LibvaGpuSelector to pick an appropriate libva device (if available)
-    selected_gpu = ""
-    try:
-        selected_gpu = _gpu_selector.get_gpu_arg(FFMPEG_HWACCEL_VAAPI, 0) or ""
-    except Exception:
-        selected_gpu = ""
-
-    # If selected_gpu is empty, pass None to vainfo_hwaccel to run plain `vainfo`.
-    vainfo = vainfo_hwaccel(device_name=selected_gpu or None)
+    vainfo = vainfo_hwaccel()
     return JSONResponse(
         content={
             "return_code": vainfo.returncode,
@@ -861,98 +598,6 @@ def restart():
     )
 
 
-@router.post(
-    "/media/sync",
-    dependencies=[Depends(require_role(["admin"]))],
-    summary="Start media sync job",
-    description="""Start an asynchronous media sync job to find and (optionally) remove orphaned media files.
-    Returns 202 with job details when queued, or 409 if a job is already running.""",
-)
-def sync_media(body: MediaSyncBody = Body(...)):
-    """Start async media sync job - remove orphaned files.
-
-    Syncs specified media types: event snapshots, event thumbnails, review thumbnails,
-    previews, exports, and/or recordings. Job runs in background; use /media/sync/current
-    or /media/sync/status/{job_id} to check status.
-
-    Args:
-        body: MediaSyncBody with dry_run flag and media_types list.
-              media_types can include: 'all', 'event_snapshots', 'event_thumbnails',
-              'review_thumbnails', 'previews', 'exports', 'recordings'
-
-    Returns:
-        202 Accepted with job_id, or 409 Conflict if job already running.
-    """
-    job_id = start_media_sync_job(
-        dry_run=body.dry_run, media_types=body.media_types, force=body.force
-    )
-
-    if job_id is None:
-        # A job is already running
-        current = get_current_media_sync_job()
-        return JSONResponse(
-            content={
-                "error": "A media sync job is already running",
-                "current_job_id": current.id if current else None,
-            },
-            status_code=409,
-        )
-
-    return JSONResponse(
-        content={
-            "job": {
-                "job_type": "media_sync",
-                "status": JobStatusTypesEnum.queued,
-                "id": job_id,
-            }
-        },
-        status_code=202,
-    )
-
-
-@router.get(
-    "/media/sync/current",
-    dependencies=[Depends(require_role(["admin"]))],
-    summary="Get current media sync job",
-    description="""Retrieve the current running media sync job, if any. Returns the job details
-    or null when no job is active.""",
-)
-def get_media_sync_current():
-    """Get the current running media sync job, if any."""
-    job = get_current_media_sync_job()
-
-    if job is None:
-        return JSONResponse(content={"job": None}, status_code=200)
-
-    return JSONResponse(
-        content={"job": job.to_dict()},
-        status_code=200,
-    )
-
-
-@router.get(
-    "/media/sync/status/{job_id}",
-    dependencies=[Depends(require_role(["admin"]))],
-    summary="Get media sync job status",
-    description="""Get status and results for the specified media sync job id. Returns 200 with
-    job details including results, or 404 if the job is not found.""",
-)
-def get_media_sync_status(job_id: str):
-    """Get the status of a specific media sync job."""
-    job = get_media_sync_job_by_id(job_id)
-
-    if job is None:
-        return JSONResponse(
-            content={"error": "Job not found"},
-            status_code=404,
-        )
-
-    return JSONResponse(
-        content={"job": job.to_dict()},
-        status_code=200,
-    )
-
-
 @router.get("/labels", dependencies=[Depends(allow_any_authenticated())])
 def get_labels(camera: str = ""):
     try:
@@ -1002,12 +647,6 @@ def get_sub_labels(split_joined: Optional[int] = None):
     return JSONResponse(content=sub_labels)
 
 
-@router.get("/audio_labels", dependencies=[Depends(allow_any_authenticated())])
-def get_audio_labels():
-    labels = load_labels("/audio-labelmap.txt", prefill=521)
-    return JSONResponse(content=labels)
-
-
 @router.get("/plus/models", dependencies=[Depends(allow_any_authenticated())])
 def plusModels(request: Request, filterByCurrentModelDetector: bool = False):
     if not request.app.frigate_config.plus_api.is_active():
@@ -1093,7 +732,12 @@ def get_recognized_license_plates(
 
 
 @router.get("/timeline", dependencies=[Depends(allow_any_authenticated())])
-def timeline(camera: str = "all", limit: int = 100, source_id: Optional[str] = None):
+def timeline(
+    camera: str = "all",
+    limit: int = 100,
+    source_id: Optional[str] = None,
+    allowed_cameras: List[str] = Depends(get_allowed_cameras_for_filter),
+):
     clauses = []
 
     selected_columns = [
@@ -1115,6 +759,9 @@ def timeline(camera: str = "all", limit: int = 100, source_id: Optional[str] = N
         else:
             clauses.append((Timeline.source_id.in_(source_ids)))
 
+    # Enforce per-camera access control
+    clauses.append((Timeline.camera << allowed_cameras))
+
     if len(clauses) == 0:
         clauses.append((True))
 
@@ -1130,7 +777,10 @@ def timeline(camera: str = "all", limit: int = 100, source_id: Optional[str] = N
 
 
 @router.get("/timeline/hourly", dependencies=[Depends(allow_any_authenticated())])
-def hourly_timeline(params: AppTimelineHourlyQueryParameters = Depends()):
+def hourly_timeline(
+    params: AppTimelineHourlyQueryParameters = Depends(),
+    allowed_cameras: List[str] = Depends(get_allowed_cameras_for_filter),
+):
     """Get hourly summary for timeline."""
     cameras = params.cameras
     labels = params.labels
@@ -1148,6 +798,9 @@ def hourly_timeline(params: AppTimelineHourlyQueryParameters = Depends()):
         camera_list = cameras.split(",")
         clauses.append((Timeline.camera << camera_list))
 
+    # Enforce per-camera access control
+    clauses.append((Timeline.camera << allowed_cameras))
+
     if labels != "all":
         label_list = labels.split(",")
         clauses.append((Timeline.data["label"] << label_list))

frigate/api/auth.py

@@ -26,18 +26,12 @@ from frigate.api.defs.request.app_body import (
     AppPutRoleBody,
 )
 from frigate.api.defs.tags import Tags
-from frigate.config import AuthConfig, NetworkingConfig, ProxyConfig
+from frigate.config import AuthConfig, ProxyConfig
 from frigate.const import CONFIG_DIR, JWT_SECRET_ENV_VAR, PASSWORD_HASH_ALGORITHM
 from frigate.models import User
 
 logger = logging.getLogger(__name__)
 
-# In-memory cache to track which clients we've logged for an anonymous access event.
-# Keyed by a hashed value combining remote address + user-agent. The value is
-# an expiration timestamp (float).
-FIRST_LOAD_TTL_SECONDS = 60 * 60 * 24 * 7  # 7 days
-_first_load_seen: dict[str, float] = {}
-
 
 def require_admin_by_default():
     """
@@ -47,7 +41,7 @@ def require_admin_by_default():
     endpoints require admin access unless explicitly overridden with
     allow_public(), allow_any_authenticated(), or require_role().
 
-    Internal port always has admin role set by the /auth endpoint,
+    Port 5000 (internal) always has admin role set by the /auth endpoint,
     so this check passes automatically for internal requests.
 
     Certain paths are exempted from the global admin check because they must
@@ -73,7 +67,6 @@ def require_admin_by_default():
         "/stats",
         "/stats/history",
         "/config",
-        "/config/raw",
         "/vainfo",
         "/nvinfo",
         "/labels",
@@ -136,7 +129,7 @@ def require_admin_by_default():
             pass
 
         # For all other paths, require admin role
-        # Internal port requests have admin role set automatically
+        # Port 5000 (internal) requests have admin role set automatically
         role = request.headers.get("remote-role")
         if role == "admin":
             return
@@ -149,17 +142,6 @@ def require_admin_by_default():
     return admin_checker
 
 
-def _is_authenticated(request: Request) -> bool:
-    """
-    Helper to determine if a request is from an authenticated user.
-
-    Returns True if the request has a valid authenticated user (not anonymous).
-    Internal port requests are considered anonymous despite having admin role.
-    """
-    username = request.headers.get("remote-user")
-    return username is not None and username != "anonymous"
-
-
 def allow_public():
     """
     Override dependency to allow unauthenticated access to an endpoint.
@@ -188,7 +170,6 @@ def allow_any_authenticated():
 
     Rejects:
     - Requests with no remote-user header (did not pass through /auth endpoint)
-    - External port requests with anonymous user (auth disabled, no proxy auth)
 
     Example:
         @router.get("/authenticated-endpoint", dependencies=[Depends(allow_any_authenticated())])
@@ -197,14 +178,8 @@ def allow_any_authenticated():
     async def auth_checker(request: Request):
         # Ensure a remote-user has been set by the /auth endpoint
         username = request.headers.get("remote-user")
-
-        # Internal port requests have admin role and should be allowed
-        role = request.headers.get("remote-role")
-
-        if role != "admin":
-            if username is None or not _is_authenticated(request):
-                raise HTTPException(status_code=401, detail="Authentication required")
-
+        if username is None:
+            raise HTTPException(status_code=401, detail="Authentication required")
         return
 
     return auth_checker
@@ -290,15 +265,6 @@ def get_remote_addr(request: Request):
     return remote_addr or "127.0.0.1"
 
 
-def _cleanup_first_load_seen() -> None:
-    """Cleanup expired entries in the in-memory first-load cache."""
-    now = time.time()
-    # Build list for removal to avoid mutating dict during iteration
-    expired = [k for k, exp in _first_load_seen.items() if exp <= now]
-    for k in expired:
-        del _first_load_seen[k]
-
-
 def get_jwt_secret() -> str:
     jwt_secret = None
     # check env var
@@ -603,18 +569,12 @@ def resolve_role(
 def auth(request: Request):
     auth_config: AuthConfig = request.app.frigate_config.auth
     proxy_config: ProxyConfig = request.app.frigate_config.proxy
-    networking_config: NetworkingConfig = request.app.frigate_config.networking
 
     success_response = Response("", status_code=202)
 
-    # handle case where internal port is a string with ip:port
-    internal_port = networking_config.listen.internal
-    if type(internal_port) is str:
-        internal_port = int(internal_port.split(":")[-1])
-
     # dont require auth if the request is on the internal port
     # this header is set by Frigate's nginx proxy, so it cant be spoofed
-    if int(request.headers.get("x-server-port", default=0)) == internal_port:
+    if int(request.headers.get("x-server-port", default=0)) == 5000:
         success_response.headers["remote-user"] = "anonymous"
         success_response.headers["remote-role"] = "admin"
         return success_response
@@ -759,30 +719,10 @@ def profile(request: Request):
     roles_dict = request.app.frigate_config.auth.roles
     allowed_cameras = User.get_allowed_cameras(role, roles_dict, all_camera_names)
 
-    response = JSONResponse(
+    return JSONResponse(
         content={"username": username, "role": role, "allowed_cameras": allowed_cameras}
     )
 
-    if username == "anonymous":
-        try:
-            remote_addr = get_remote_addr(request)
-        except Exception:
-            remote_addr = (
-                request.client.host if hasattr(request, "client") else "unknown"
-            )
-
-        ua = request.headers.get("user-agent", "")
-        key_material = f"{remote_addr}|{ua}"
-        cache_key = hashlib.sha256(key_material.encode()).hexdigest()
-
-        _cleanup_first_load_seen()
-        now = time.time()
-        if cache_key not in _first_load_seen:
-            _first_load_seen[cache_key] = now + FIRST_LOAD_TTL_SECONDS
-            logger.info(f"Anonymous user access from {remote_addr} ua={ua[:200]}")
-
-    return response
-
 
 @router.get(
     "/logout",
@@ -896,6 +836,7 @@ def create_user(
             User.notification_tokens: [],
         }
     ).execute()
+    request.app.config_publisher.publisher.publish("config/auth", None)
     return JSONResponse(content={"username": body.username})
 
 
@@ -913,6 +854,7 @@ def delete_user(request: Request, username: str):
         )
 
     User.delete_by_id(username)
+    request.app.config_publisher.publisher.publish("config/auth", None)
     return JSONResponse(content={"success": True})
 
 
@@ -1032,6 +974,7 @@ async def update_role(
         )
 
     User.set_by_id(username, {User.role: body.role})
+    request.app.config_publisher.publisher.publish("config/auth", None)
     return JSONResponse(content={"success": True})
 
 
@@ -1045,7 +988,16 @@ async def require_camera_access(
 
     current_user = await get_current_user(request)
     if isinstance(current_user, JSONResponse):
-        return current_user
+        detail = "Authentication required"
+        try:
+            error_payload = json.loads(current_user.body)
+            detail = (
+                error_payload.get("message") or error_payload.get("detail") or detail
+            )
+        except Exception:
+            pass
+
+        raise HTTPException(status_code=current_user.status_code, detail=detail)
 
     role = current_user["role"]
     all_camera_names = set(request.app.frigate_config.cameras.keys())
@@ -1063,6 +1015,61 @@ async def require_camera_access(
         )
 
 
+def _get_stream_owner_cameras(request: Request, stream_name: str) -> set[str]:
+    owner_cameras: set[str] = set()
+
+    for camera_name, camera in request.app.frigate_config.cameras.items():
+        if stream_name == camera_name:
+            owner_cameras.add(camera_name)
+            continue
+
+        if stream_name in camera.live.streams.values():
+            owner_cameras.add(camera_name)
+
+    return owner_cameras
+
+
+async def require_go2rtc_stream_access(
+    stream_name: Optional[str] = None,
+    request: Request = None,
+):
+    """Dependency to enforce go2rtc stream access based on owning camera access."""
+    if stream_name is None:
+        return
+
+    current_user = await get_current_user(request)
+    if isinstance(current_user, JSONResponse):
+        detail = "Authentication required"
+        try:
+            error_payload = json.loads(current_user.body)
+            detail = (
+                error_payload.get("message") or error_payload.get("detail") or detail
+            )
+        except Exception:
+            pass
+
+        raise HTTPException(status_code=current_user.status_code, detail=detail)
+
+    role = current_user["role"]
+    all_camera_names = set(request.app.frigate_config.cameras.keys())
+    roles_dict = request.app.frigate_config.auth.roles
+    allowed_cameras = User.get_allowed_cameras(role, roles_dict, all_camera_names)
+
+    # Admin or full access bypasses
+    if role == "admin" or not roles_dict.get(role):
+        return
+
+    owner_cameras = _get_stream_owner_cameras(request, stream_name)
+
+    if owner_cameras & set(allowed_cameras):
+        return
+
+    raise HTTPException(
+        status_code=403,
+        detail=f"Access denied to camera '{stream_name}'. Allowed: {allowed_cameras}",
+    )
+
+
 async def get_allowed_cameras_for_filter(request: Request):
     """Dependency to get allowed_cameras for filtering lists."""
     current_user = await get_current_user(request)

frigate/api/camera.py

@@ -1,6 +1,5 @@
 """Camera apis."""
 
-import asyncio
 import json
 import logging
 import re
@@ -12,28 +11,20 @@ import httpx
 import requests
 from fastapi import APIRouter, Depends, Query, Request, Response
 from fastapi.responses import JSONResponse
-from filelock import FileLock, Timeout
 from onvif import ONVIFCamera, ONVIFError
-from ruamel.yaml import YAML
 from zeep.exceptions import Fault, TransportError
 from zeep.transports import AsyncTransport
 
 from frigate.api.auth import (
     allow_any_authenticated,
-    require_camera_access,
+    require_go2rtc_stream_access,
     require_role,
 )
 from frigate.api.defs.tags import Tags
-from frigate.config import FrigateConfig
-from frigate.config.camera.updater import (
-    CameraConfigUpdateEnum,
-    CameraConfigUpdateTopic,
-)
+from frigate.config.config import FrigateConfig
 from frigate.util.builtin import clean_camera_user_pass
-from frigate.util.camera_cleanup import cleanup_camera_db, cleanup_camera_files
-from frigate.util.config import find_config_file
 from frigate.util.image import run_ffmpeg_snapshot
-from frigate.util.services import ffprobe_stream
+from frigate.util.services import ffprobe_stream, is_restricted_go2rtc_source
 
 logger = logging.getLogger(__name__)
 
@@ -80,14 +71,27 @@ def go2rtc_streams():
 
 
 @router.get(
-    "/go2rtc/streams/{camera_name}", dependencies=[Depends(require_camera_access)]
+    "/go2rtc/streams/{stream_name}",
+    dependencies=[Depends(require_go2rtc_stream_access)],
 )
-def go2rtc_camera_stream(request: Request, camera_name: str):
+def go2rtc_camera_stream(request: Request, stream_name: str):
     r = requests.get(
-        f"http://127.0.0.1:1984/api/streams?src={camera_name}&video=all&audio=all&microphone"
+        "http://127.0.0.1:1984/api/streams",
+        params={
+            "src": stream_name,
+            "video": "all",
+            "audio": "all",
+            "microphone": "",
+        },
     )
     if not r.ok:
-        camera_config = request.app.frigate_config.cameras.get(camera_name)
+        camera_config = request.app.frigate_config.cameras.get(stream_name)
+
+        if camera_config is None:
+            for camera_name, camera in request.app.frigate_config.cameras.items():
+                if stream_name in camera.live.streams.values():
+                    camera_config = request.app.frigate_config.cameras.get(camera_name)
+                    break
 
         if camera_config and camera_config.enabled:
             logger.error("Failed to fetch streams from go2rtc")
@@ -107,6 +111,19 @@ def go2rtc_camera_stream(request: Request, camera_name: str):
 )
 def go2rtc_add_stream(request: Request, stream_name: str, src: str = ""):
     """Add or update a go2rtc stream configuration."""
+    if src and is_restricted_go2rtc_source(src):
+        logger.warning(
+            "Rejected go2rtc stream '%s' with restricted source type (echo/expr/exec)",
+            stream_name,
+        )
+        return JSONResponse(
+            content={
+                "success": False,
+                "message": "Restricted stream source type",
+            },
+            status_code=400,
+        )
+
     try:
         params = {"name": stream_name}
         if src:
@@ -1004,154 +1021,3 @@ async def onvif_probe(
                     await onvif_camera.close()
             except Exception as e:
                 logger.debug(f"Error closing ONVIF camera session: {e}")
-
-
-@router.delete(
-    "/cameras/{camera_name}",
-    dependencies=[Depends(require_role(["admin"]))],
-)
-async def delete_camera(
-    request: Request,
-    camera_name: str,
-    delete_exports: bool = Query(default=False),
-):
-    """Delete a camera and all its associated data.
-
-    Removes the camera from config, stops processes, and cleans up
-    all database entries and media files.
-
-    Args:
-        camera_name: Name of the camera to delete
-        delete_exports: Whether to also delete exports for this camera
-    """
-    frigate_config: FrigateConfig = request.app.frigate_config
-
-    if camera_name not in frigate_config.cameras:
-        return JSONResponse(
-            content={
-                "success": False,
-                "message": f"Camera {camera_name} not found",
-            },
-            status_code=404,
-        )
-
-    old_camera_config = frigate_config.cameras[camera_name]
-    config_file = find_config_file()
-    lock = FileLock(f"{config_file}.lock", timeout=5)
-
-    try:
-        with lock:
-            with open(config_file, "r") as f:
-                old_raw_config = f.read()
-
-            try:
-                yaml = YAML()
-                yaml.indent(mapping=2, sequence=4, offset=2)
-
-                with open(config_file, "r") as f:
-                    data = yaml.load(f)
-
-                # Remove camera from config
-                if "cameras" in data and camera_name in data["cameras"]:
-                    del data["cameras"][camera_name]
-
-                # Remove camera from auth roles
-                auth = data.get("auth", {})
-                if auth and "roles" in auth:
-                    empty_roles = []
-                    for role_name, cameras_list in auth["roles"].items():
-                        if (
-                            isinstance(cameras_list, list)
-                            and camera_name in cameras_list
-                        ):
-                            cameras_list.remove(camera_name)
-                            # Custom roles can't be empty; mark for removal
-                            if not cameras_list and role_name not in (
-                                "admin",
-                                "viewer",
-                            ):
-                                empty_roles.append(role_name)
-                    for role_name in empty_roles:
-                        del auth["roles"][role_name]
-
-                with open(config_file, "w") as f:
-                    yaml.dump(data, f)
-
-                with open(config_file, "r") as f:
-                    new_raw_config = f.read()
-
-                try:
-                    config = FrigateConfig.parse(new_raw_config)
-                except Exception:
-                    with open(config_file, "w") as f:
-                        f.write(old_raw_config)
-                    logger.exception(
-                        "Config error after removing camera %s",
-                        camera_name,
-                    )
-                    return JSONResponse(
-                        content={
-                            "success": False,
-                            "message": "Error parsing config after camera removal",
-                        },
-                        status_code=400,
-                    )
-            except Exception as e:
-                logger.error(
-                    "Error updating config to remove camera %s: %s", camera_name, e
-                )
-                return JSONResponse(
-                    content={
-                        "success": False,
-                        "message": "Error updating config",
-                    },
-                    status_code=500,
-                )
-
-            # Update runtime config
-            request.app.frigate_config = config
-            request.app.genai_manager.update_config(config)
-
-            # Publish removal to stop ffmpeg processes and clean up runtime state
-            request.app.config_publisher.publish_update(
-                CameraConfigUpdateTopic(CameraConfigUpdateEnum.remove, camera_name),
-                old_camera_config,
-            )
-
-    except Timeout:
-        return JSONResponse(
-            content={
-                "success": False,
-                "message": "Another process is currently updating the config",
-            },
-            status_code=409,
-        )
-
-    # Clean up database entries
-    counts, export_paths = await asyncio.to_thread(
-        cleanup_camera_db, camera_name, delete_exports
-    )
-
-    # Clean up media files in background thread
-    await asyncio.to_thread(
-        cleanup_camera_files, camera_name, export_paths if delete_exports else None
-    )
-
-    # Best-effort go2rtc stream removal
-    try:
-        requests.delete(
-            "http://127.0.0.1:1984/api/streams",
-            params={"src": camera_name},
-            timeout=5,
-        )
-    except Exception:
-        logger.debug("Failed to remove go2rtc stream for %s", camera_name)
-
-    return JSONResponse(
-        content={
-            "success": True,
-            "message": f"Camera {camera_name} has been deleted",
-            "cleanup": counts,
-        },
-        status_code=200,
-    )

frigate/api/chat.py

@@ -1,821 +0,0 @@
-"""Chat and LLM tool calling APIs."""
-
-import base64
-import json
-import logging
-import time
-from datetime import datetime
-from typing import Any, Dict, Generator, List, Optional
-
-import cv2
-from fastapi import APIRouter, Body, Depends, Request
-from fastapi.responses import JSONResponse, StreamingResponse
-from pydantic import BaseModel
-
-from frigate.api.auth import (
-    allow_any_authenticated,
-    get_allowed_cameras_for_filter,
-)
-from frigate.api.defs.query.events_query_parameters import EventsQueryParams
-from frigate.api.defs.request.chat_body import ChatCompletionRequest
-from frigate.api.defs.response.chat_response import (
-    ChatCompletionResponse,
-    ChatMessageResponse,
-    ToolCall,
-)
-from frigate.api.defs.tags import Tags
-from frigate.api.event import events
-from frigate.genai.utils import build_assistant_message_for_conversation
-
-logger = logging.getLogger(__name__)
-
-router = APIRouter(tags=[Tags.chat])
-
-
-def _chunk_content(content: str, chunk_size: int = 80) -> Generator[str, None, None]:
-    """Yield content in word-aware chunks for streaming."""
-    if not content:
-        return
-    words = content.split(" ")
-    current: List[str] = []
-    current_len = 0
-    for w in words:
-        current.append(w)
-        current_len += len(w) + 1
-        if current_len >= chunk_size:
-            yield " ".join(current) + " "
-            current = []
-            current_len = 0
-    if current:
-        yield " ".join(current)
-
-
-def _format_events_with_local_time(
-    events_list: List[Dict[str, Any]],
-) -> List[Dict[str, Any]]:
-    """Add human-readable local start/end times to each event for the LLM."""
-    result = []
-    for evt in events_list:
-        if not isinstance(evt, dict):
-            result.append(evt)
-            continue
-        copy_evt = dict(evt)
-        try:
-            start_ts = evt.get("start_time")
-            end_ts = evt.get("end_time")
-            if start_ts is not None:
-                dt_start = datetime.fromtimestamp(start_ts)
-                copy_evt["start_time_local"] = dt_start.strftime("%Y-%m-%d %I:%M:%S %p")
-            if end_ts is not None:
-                dt_end = datetime.fromtimestamp(end_ts)
-                copy_evt["end_time_local"] = dt_end.strftime("%Y-%m-%d %I:%M:%S %p")
-        except (TypeError, ValueError, OSError):
-            pass
-        result.append(copy_evt)
-    return result
-
-
-class ToolExecuteRequest(BaseModel):
-    """Request model for tool execution."""
-
-    tool_name: str
-    arguments: Dict[str, Any]
-
-
-def get_tool_definitions() -> List[Dict[str, Any]]:
-    """
-    Get OpenAI-compatible tool definitions for Frigate.
-
-    Returns a list of tool definitions that can be used with OpenAI-compatible
-    function calling APIs.
-    """
-    return [
-        {
-            "type": "function",
-            "function": {
-                "name": "search_objects",
-                "description": (
-                    "Search for detected objects in Frigate by camera, object label, time range, "
-                    "zones, and other filters. Use this to answer questions about when "
-                    "objects were detected, what objects appeared, or to find specific object detections. "
-                    "An 'object' in Frigate represents a tracked detection (e.g., a person, package, car). "
-                    "When the user asks about a specific name (person, delivery company, animal, etc.), "
-                    "filter by sub_label only and do not set label."
-                ),
-                "parameters": {
-                    "type": "object",
-                    "properties": {
-                        "camera": {
-                            "type": "string",
-                            "description": "Camera name to filter by (optional).",
-                        },
-                        "label": {
-                            "type": "string",
-                            "description": "Object label to filter by (e.g., 'person', 'package', 'car').",
-                        },
-                        "sub_label": {
-                            "type": "string",
-                            "description": "Name of a person, delivery company, animal, etc. When filtering by a specific name, use only sub_label; do not set label.",
-                        },
-                        "after": {
-                            "type": "string",
-                            "description": "Start time in ISO 8601 format (e.g., '2024-01-01T00:00:00Z').",
-                        },
-                        "before": {
-                            "type": "string",
-                            "description": "End time in ISO 8601 format (e.g., '2024-01-01T23:59:59Z').",
-                        },
-                        "zones": {
-                            "type": "array",
-                            "items": {"type": "string"},
-                            "description": "List of zone names to filter by.",
-                        },
-                        "limit": {
-                            "type": "integer",
-                            "description": "Maximum number of objects to return (default: 25).",
-                            "default": 25,
-                        },
-                    },
-                },
-                "required": [],
-            },
-        },
-        {
-            "type": "function",
-            "function": {
-                "name": "get_live_context",
-                "description": (
-                    "Get the current detection information for a camera: objects being tracked, "
-                    "zones, timestamps. Use this to understand what is visible in the live view. "
-                    "Call this when the user has included a live image (via include_live_image) or "
-                    "when answering questions about what is happening right now on a specific camera."
-                ),
-                "parameters": {
-                    "type": "object",
-                    "properties": {
-                        "camera": {
-                            "type": "string",
-                            "description": "Camera name to get live context for.",
-                        },
-                    },
-                    "required": ["camera"],
-                },
-            },
-        },
-    ]
-
-
-@router.get(
-    "/chat/tools",
-    dependencies=[Depends(allow_any_authenticated())],
-    summary="Get available tools",
-    description="Returns OpenAI-compatible tool definitions for function calling.",
-)
-def get_tools() -> JSONResponse:
-    """Get list of available tools for LLM function calling."""
-    tools = get_tool_definitions()
-    return JSONResponse(content={"tools": tools})
-
-
-async def _execute_search_objects(
-    arguments: Dict[str, Any],
-    allowed_cameras: List[str],
-) -> JSONResponse:
-    """
-    Execute the search_objects tool.
-
-    This searches for detected objects (events) in Frigate using the same
-    logic as the events API endpoint.
-    """
-    # Parse after/before as server local time; convert to Unix timestamp
-    after = arguments.get("after")
-    before = arguments.get("before")
-
-    def _parse_as_local_timestamp(s: str):
-        s = s.replace("Z", "").strip()[:19]
-        dt = datetime.strptime(s, "%Y-%m-%dT%H:%M:%S")
-        return time.mktime(dt.timetuple())
-
-    if after:
-        try:
-            after = _parse_as_local_timestamp(after)
-        except (ValueError, AttributeError, TypeError):
-            logger.warning(f"Invalid 'after' timestamp format: {after}")
-            after = None
-
-    if before:
-        try:
-            before = _parse_as_local_timestamp(before)
-        except (ValueError, AttributeError, TypeError):
-            logger.warning(f"Invalid 'before' timestamp format: {before}")
-            before = None
-
-    # Convert zones array to comma-separated string if provided
-    zones = arguments.get("zones")
-    if isinstance(zones, list):
-        zones = ",".join(zones)
-    elif zones is None:
-        zones = "all"
-
-    # Build query parameters compatible with EventsQueryParams
-    query_params = EventsQueryParams(
-        cameras=arguments.get("camera", "all"),
-        labels=arguments.get("label", "all"),
-        sub_labels=arguments.get("sub_label", "all").lower(),
-        zones=zones,
-        zone=zones,
-        after=after,
-        before=before,
-        limit=arguments.get("limit", 25),
-    )
-
-    try:
-        # Call the events endpoint function directly
-        # The events function is synchronous and takes params and allowed_cameras
-        response = events(query_params, allowed_cameras)
-
-        # The response is already a JSONResponse with event data
-        # Return it as-is for the LLM
-        return response
-    except Exception as e:
-        logger.error(f"Error executing search_objects: {e}", exc_info=True)
-        return JSONResponse(
-            content={
-                "success": False,
-                "message": "Error searching objects",
-            },
-            status_code=500,
-        )
-
-
-@router.post(
-    "/chat/execute",
-    dependencies=[Depends(allow_any_authenticated())],
-    summary="Execute a tool",
-    description="Execute a tool function call from an LLM.",
-)
-async def execute_tool(
-    body: ToolExecuteRequest = Body(...),
-    allowed_cameras: List[str] = Depends(get_allowed_cameras_for_filter),
-) -> JSONResponse:
-    """
-    Execute a tool function call.
-
-    This endpoint receives tool calls from LLMs and executes the corresponding
-    Frigate operations, returning results in a format the LLM can understand.
-    """
-    tool_name = body.tool_name
-    arguments = body.arguments
-
-    logger.debug(f"Executing tool: {tool_name} with arguments: {arguments}")
-
-    if tool_name == "search_objects":
-        return await _execute_search_objects(arguments, allowed_cameras)
-
-    return JSONResponse(
-        content={
-            "success": False,
-            "message": f"Unknown tool: {tool_name}",
-            "tool": tool_name,
-        },
-        status_code=400,
-    )
-
-
-async def _execute_get_live_context(
-    request: Request,
-    camera: str,
-    allowed_cameras: List[str],
-) -> Dict[str, Any]:
-    if camera not in allowed_cameras:
-        return {
-            "error": f"Camera '{camera}' not found or access denied",
-        }
-
-    if camera not in request.app.frigate_config.cameras:
-        return {
-            "error": f"Camera '{camera}' not found",
-        }
-
-    try:
-        frame_processor = request.app.detected_frames_processor
-        camera_state = frame_processor.camera_states.get(camera)
-
-        if camera_state is None:
-            return {
-                "error": f"Camera '{camera}' state not available",
-            }
-
-        tracked_objects_dict = {}
-        with camera_state.current_frame_lock:
-            tracked_objects = camera_state.tracked_objects.copy()
-            frame_time = camera_state.current_frame_time
-
-        for obj_id, tracked_obj in tracked_objects.items():
-            obj_dict = tracked_obj.to_dict()
-            if obj_dict.get("frame_time") == frame_time:
-                tracked_objects_dict[obj_id] = {
-                    "label": obj_dict.get("label"),
-                    "zones": obj_dict.get("current_zones", []),
-                    "sub_label": obj_dict.get("sub_label"),
-                    "stationary": obj_dict.get("stationary", False),
-                }
-
-        return {
-            "camera": camera,
-            "timestamp": frame_time,
-            "detections": list(tracked_objects_dict.values()),
-        }
-
-    except Exception as e:
-        logger.error(f"Error executing get_live_context: {e}", exc_info=True)
-        return {
-            "error": "Error getting live context",
-        }
-
-
-async def _get_live_frame_image_url(
-    request: Request,
-    camera: str,
-    allowed_cameras: List[str],
-) -> Optional[str]:
-    """
-    Fetch the current live frame for a camera as a base64 data URL.
-
-    Returns None if the frame cannot be retrieved. Used when include_live_image
-    is set to attach the image to the first user message.
-    """
-    if (
-        camera not in allowed_cameras
-        or camera not in request.app.frigate_config.cameras
-    ):
-        return None
-    try:
-        frame_processor = request.app.detected_frames_processor
-        if camera not in frame_processor.camera_states:
-            return None
-        frame = frame_processor.get_current_frame(camera, {})
-        if frame is None:
-            return None
-        height, width = frame.shape[:2]
-        max_dimension = 1024
-        if height > max_dimension or width > max_dimension:
-            scale = max_dimension / max(height, width)
-            frame = cv2.resize(
-                frame,
-                (int(width * scale), int(height * scale)),
-                interpolation=cv2.INTER_AREA,
-            )
-        _, img_encoded = cv2.imencode(".jpg", frame, [cv2.IMWRITE_JPEG_QUALITY, 85])
-        b64 = base64.b64encode(img_encoded.tobytes()).decode("utf-8")
-        return f"data:image/jpeg;base64,{b64}"
-    except Exception as e:
-        logger.debug("Failed to get live frame for %s: %s", camera, e)
-        return None
-
-
-async def _execute_tool_internal(
-    tool_name: str,
-    arguments: Dict[str, Any],
-    request: Request,
-    allowed_cameras: List[str],
-) -> Dict[str, Any]:
-    """
-    Internal helper to execute a tool and return the result as a dict.
-
-    This is used by the chat completion endpoint to execute tools.
-    """
-    if tool_name == "search_objects":
-        response = await _execute_search_objects(arguments, allowed_cameras)
-        try:
-            if hasattr(response, "body"):
-                body_str = response.body.decode("utf-8")
-                return json.loads(body_str)
-            elif hasattr(response, "content"):
-                return response.content
-            else:
-                return {}
-        except (json.JSONDecodeError, AttributeError) as e:
-            logger.warning(f"Failed to extract tool result: {e}")
-            return {"error": "Failed to parse tool result"}
-    elif tool_name == "get_live_context":
-        camera = arguments.get("camera")
-        if not camera:
-            logger.error(
-                "Tool get_live_context failed: camera parameter is required. "
-                "Arguments: %s",
-                json.dumps(arguments),
-            )
-            return {"error": "Camera parameter is required"}
-        return await _execute_get_live_context(request, camera, allowed_cameras)
-    else:
-        logger.error(
-            "Tool call failed: unknown tool %r. Expected one of: search_objects, get_live_context. "
-            "Arguments received: %s",
-            tool_name,
-            json.dumps(arguments),
-        )
-        return {"error": f"Unknown tool: {tool_name}"}
-
-
-async def _execute_pending_tools(
-    pending_tool_calls: List[Dict[str, Any]],
-    request: Request,
-    allowed_cameras: List[str],
-) -> tuple[List[ToolCall], List[Dict[str, Any]]]:
-    """
-    Execute a list of tool calls; return (ToolCall list for API response, tool result dicts for conversation).
-    """
-    tool_calls_out: List[ToolCall] = []
-    tool_results: List[Dict[str, Any]] = []
-    for tool_call in pending_tool_calls:
-        tool_name = tool_call["name"]
-        tool_args = tool_call.get("arguments") or {}
-        tool_call_id = tool_call["id"]
-        logger.debug(
-            f"Executing tool: {tool_name} (id: {tool_call_id}) with arguments: {json.dumps(tool_args, indent=2)}"
-        )
-        try:
-            tool_result = await _execute_tool_internal(
-                tool_name, tool_args, request, allowed_cameras
-            )
-            if isinstance(tool_result, dict) and tool_result.get("error"):
-                logger.error(
-                    "Tool call %s (id: %s) returned error: %s. Arguments: %s",
-                    tool_name,
-                    tool_call_id,
-                    tool_result.get("error"),
-                    json.dumps(tool_args),
-                )
-            if tool_name == "search_objects" and isinstance(tool_result, list):
-                tool_result = _format_events_with_local_time(tool_result)
-                _keys = {
-                    "id",
-                    "camera",
-                    "label",
-                    "zones",
-                    "start_time_local",
-                    "end_time_local",
-                    "sub_label",
-                    "event_count",
-                }
-                tool_result = [
-                    {k: evt[k] for k in _keys if k in evt}
-                    for evt in tool_result
-                    if isinstance(evt, dict)
-                ]
-            result_content = (
-                json.dumps(tool_result)
-                if isinstance(tool_result, (dict, list))
-                else (tool_result if isinstance(tool_result, str) else str(tool_result))
-            )
-            tool_calls_out.append(
-                ToolCall(name=tool_name, arguments=tool_args, response=result_content)
-            )
-            tool_results.append(
-                {
-                    "role": "tool",
-                    "tool_call_id": tool_call_id,
-                    "content": result_content,
-                }
-            )
-        except Exception as e:
-            logger.error(
-                "Error executing tool %s (id: %s): %s. Arguments: %s",
-                tool_name,
-                tool_call_id,
-                e,
-                json.dumps(tool_args),
-                exc_info=True,
-            )
-            error_content = json.dumps({"error": f"Tool execution failed: {str(e)}"})
-            tool_calls_out.append(
-                ToolCall(name=tool_name, arguments=tool_args, response=error_content)
-            )
-            tool_results.append(
-                {
-                    "role": "tool",
-                    "tool_call_id": tool_call_id,
-                    "content": error_content,
-                }
-            )
-    return (tool_calls_out, tool_results)
-
-
-@router.post(
-    "/chat/completion",
-    dependencies=[Depends(allow_any_authenticated())],
-    summary="Chat completion with tool calling",
-    description=(
-        "Send a chat message to the configured GenAI provider with tool calling support. "
-        "The LLM can call Frigate tools to answer questions about your cameras and events."
-    ),
-)
-async def chat_completion(
-    request: Request,
-    body: ChatCompletionRequest = Body(...),
-    allowed_cameras: List[str] = Depends(get_allowed_cameras_for_filter),
-):
-    """
-    Chat completion endpoint with tool calling support.
-
-    This endpoint:
-    1. Gets the configured GenAI client
-    2. Gets tool definitions
-    3. Sends messages + tools to LLM
-    4. Handles tool_calls if present
-    5. Executes tools and sends results back to LLM
-    6. Repeats until final answer
-    7. Returns response to user
-    """
-    genai_client = request.app.genai_manager.tool_client
-    if not genai_client:
-        return JSONResponse(
-            content={
-                "error": "GenAI is not configured. Please configure a GenAI provider in your Frigate config.",
-            },
-            status_code=400,
-        )
-
-    tools = get_tool_definitions()
-    conversation = []
-
-    current_datetime = datetime.now()
-    current_date_str = current_datetime.strftime("%Y-%m-%d")
-    current_time_str = current_datetime.strftime("%I:%M:%S %p")
-
-    cameras_info = []
-    config = request.app.frigate_config
-    for camera_id in allowed_cameras:
-        if camera_id not in config.cameras:
-            continue
-        camera_config = config.cameras[camera_id]
-        friendly_name = (
-            camera_config.friendly_name
-            if camera_config.friendly_name
-            else camera_id.replace("_", " ").title()
-        )
-        cameras_info.append(f"  - {friendly_name} (ID: {camera_id})")
-
-    cameras_section = ""
-    if cameras_info:
-        cameras_section = (
-            "\n\nAvailable cameras:\n"
-            + "\n".join(cameras_info)
-            + "\n\nWhen users refer to cameras by their friendly name (e.g., 'Back Deck Camera'), use the corresponding camera ID (e.g., 'back_deck_cam') in tool calls."
-        )
-
-    live_image_note = ""
-    if body.include_live_image:
-        live_image_note = (
-            f"\n\nThe first user message includes a live image from camera "
-            f"'{body.include_live_image}'. Use get_live_context for that camera to get "
-            "current detection details (objects, zones) to aid in understanding the image."
-        )
-
-    system_prompt = f"""You are a helpful assistant for Frigate, a security camera NVR system. You help users answer questions about their cameras, detected objects, and events.
-
-Current server local date and time: {current_date_str} at {current_time_str}
-
-Do not start your response with phrases like "I will check...", "Let me see...", or "Let me look...". Answer directly.
-
-Always present times to the user in the server's local timezone. When tool results include start_time_local and end_time_local, use those exact strings when listing or describing detection times—do not convert or invent timestamps. Do not use UTC or ISO format with Z for the user-facing answer unless the tool result only provides Unix timestamps without local time fields.
-When users ask about "today", "yesterday", "this week", etc., use the current date above as reference.
-When searching for objects or events, use ISO 8601 format for dates (e.g., {current_date_str}T00:00:00Z for the start of today).
-Always be accurate with time calculations based on the current date provided.{cameras_section}{live_image_note}"""
-
-    conversation.append(
-        {
-            "role": "system",
-            "content": system_prompt,
-        }
-    )
-
-    first_user_message_seen = False
-    for msg in body.messages:
-        msg_dict = {
-            "role": msg.role,
-            "content": msg.content,
-        }
-        if msg.tool_call_id:
-            msg_dict["tool_call_id"] = msg.tool_call_id
-        if msg.name:
-            msg_dict["name"] = msg.name
-
-        if (
-            msg.role == "user"
-            and not first_user_message_seen
-            and body.include_live_image
-        ):
-            first_user_message_seen = True
-            image_url = await _get_live_frame_image_url(
-                request, body.include_live_image, allowed_cameras
-            )
-            if image_url:
-                msg_dict["content"] = [
-                    {"type": "text", "text": msg.content},
-                    {"type": "image_url", "image_url": {"url": image_url}},
-                ]
-
-        conversation.append(msg_dict)
-
-    tool_iterations = 0
-    tool_calls: List[ToolCall] = []
-    max_iterations = body.max_tool_iterations
-
-    logger.debug(
-        f"Starting chat completion with {len(conversation)} message(s), "
-        f"{len(tools)} tool(s) available, max_iterations={max_iterations}"
-    )
-
-    # True LLM streaming when client supports it and stream requested
-    if body.stream and hasattr(genai_client, "chat_with_tools_stream"):
-        stream_tool_calls: List[ToolCall] = []
-        stream_iterations = 0
-
-        async def stream_body_llm():
-            nonlocal conversation, stream_tool_calls, stream_iterations
-            while stream_iterations < max_iterations:
-                logger.debug(
-                    f"Streaming LLM (iteration {stream_iterations + 1}/{max_iterations}) "
-                    f"with {len(conversation)} message(s)"
-                )
-                async for event in genai_client.chat_with_tools_stream(
-                    messages=conversation,
-                    tools=tools if tools else None,
-                    tool_choice="auto",
-                ):
-                    kind, value = event
-                    if kind == "content_delta":
-                        yield (
-                            json.dumps({"type": "content", "delta": value}).encode(
-                                "utf-8"
-                            )
-                            + b"\n"
-                        )
-                    elif kind == "message":
-                        msg = value
-                        if msg.get("finish_reason") == "error":
-                            yield (
-                                json.dumps(
-                                    {
-                                        "type": "error",
-                                        "error": "An error occurred while processing your request.",
-                                    }
-                                ).encode("utf-8")
-                                + b"\n"
-                            )
-                            return
-                        pending = msg.get("tool_calls")
-                        if pending:
-                            stream_iterations += 1
-                            conversation.append(
-                                build_assistant_message_for_conversation(
-                                    msg.get("content"), pending
-                                )
-                            )
-                            executed_calls, tool_results = await _execute_pending_tools(
-                                pending, request, allowed_cameras
-                            )
-                            stream_tool_calls.extend(executed_calls)
-                            conversation.extend(tool_results)
-                            yield (
-                                json.dumps(
-                                    {
-                                        "type": "tool_calls",
-                                        "tool_calls": [
-                                            tc.model_dump() for tc in stream_tool_calls
-                                        ],
-                                    }
-                                ).encode("utf-8")
-                                + b"\n"
-                            )
-                            break
-                        else:
-                            yield (json.dumps({"type": "done"}).encode("utf-8") + b"\n")
-                            return
-            else:
-                yield json.dumps({"type": "done"}).encode("utf-8") + b"\n"
-
-        return StreamingResponse(
-            stream_body_llm(),
-            media_type="application/x-ndjson",
-            headers={"X-Accel-Buffering": "no"},
-        )
-
-    try:
-        while tool_iterations < max_iterations:
-            logger.debug(
-                f"Calling LLM (iteration {tool_iterations + 1}/{max_iterations}) "
-                f"with {len(conversation)} message(s) in conversation"
-            )
-            response = genai_client.chat_with_tools(
-                messages=conversation,
-                tools=tools if tools else None,
-                tool_choice="auto",
-            )
-
-            if response.get("finish_reason") == "error":
-                logger.error("GenAI client returned an error")
-                return JSONResponse(
-                    content={
-                        "error": "An error occurred while processing your request.",
-                    },
-                    status_code=500,
-                )
-
-            conversation.append(
-                build_assistant_message_for_conversation(
-                    response.get("content"), response.get("tool_calls")
-                )
-            )
-
-            pending_tool_calls = response.get("tool_calls")
-            if not pending_tool_calls:
-                logger.debug(
-                    f"Chat completion finished with final answer (iterations: {tool_iterations})"
-                )
-                final_content = response.get("content") or ""
-
-                if body.stream:
-
-                    async def stream_body() -> Any:
-                        if tool_calls:
-                            yield (
-                                json.dumps(
-                                    {
-                                        "type": "tool_calls",
-                                        "tool_calls": [
-                                            tc.model_dump() for tc in tool_calls
-                                        ],
-                                    }
-                                ).encode("utf-8")
-                                + b"\n"
-                            )
-                        # Stream content in word-sized chunks for smooth UX
-                        for part in _chunk_content(final_content):
-                            yield (
-                                json.dumps({"type": "content", "delta": part}).encode(
-                                    "utf-8"
-                                )
-                                + b"\n"
-                            )
-                        yield json.dumps({"type": "done"}).encode("utf-8") + b"\n"
-
-                    return StreamingResponse(
-                        stream_body(),
-                        media_type="application/x-ndjson",
-                    )
-
-                return JSONResponse(
-                    content=ChatCompletionResponse(
-                        message=ChatMessageResponse(
-                            role="assistant",
-                            content=final_content,
-                            tool_calls=None,
-                        ),
-                        finish_reason=response.get("finish_reason", "stop"),
-                        tool_iterations=tool_iterations,
-                        tool_calls=tool_calls,
-                    ).model_dump(),
-                )
-
-            tool_iterations += 1
-            logger.debug(
-                f"Tool calls detected (iteration {tool_iterations}/{max_iterations}): "
-                f"{len(pending_tool_calls)} tool(s) to execute"
-            )
-            executed_calls, tool_results = await _execute_pending_tools(
-                pending_tool_calls, request, allowed_cameras
-            )
-            tool_calls.extend(executed_calls)
-            conversation.extend(tool_results)
-            logger.debug(
-                f"Added {len(tool_results)} tool result(s) to conversation. "
-                f"Continuing with next LLM call..."
-            )
-
-        logger.warning(
-            f"Max tool iterations ({max_iterations}) reached. Returning partial response."
-        )
-        return JSONResponse(
-            content=ChatCompletionResponse(
-                message=ChatMessageResponse(
-                    role="assistant",
-                    content="I reached the maximum number of tool call iterations. Please try rephrasing your question.",
-                    tool_calls=None,
-                ),
-                finish_reason="length",
-                tool_iterations=tool_iterations,
-                tool_calls=tool_calls,
-            ).model_dump(),
-        )
-
-    except Exception as e:
-        logger.error(f"Error in chat completion: {e}", exc_info=True)
-        return JSONResponse(
-            content={
-                "error": "An error occurred while processing your request.",
-            },
-            status_code=500,
-        )

frigate/api/debug_replay.py

@@ -1,176 +0,0 @@
-"""Debug replay API endpoints."""
-
-import asyncio
-import logging
-from datetime import datetime
-
-from fastapi import APIRouter, Depends, Request
-from fastapi.responses import JSONResponse
-from pydantic import BaseModel, Field
-
-from frigate.api.auth import require_role
-from frigate.api.defs.tags import Tags
-
-logger = logging.getLogger(__name__)
-
-router = APIRouter(tags=[Tags.app])
-
-
-class DebugReplayStartBody(BaseModel):
-    """Request body for starting a debug replay session."""
-
-    camera: str = Field(title="Source camera name")
-    start_time: float = Field(title="Start timestamp")
-    end_time: float = Field(title="End timestamp")
-
-
-class DebugReplayStartResponse(BaseModel):
-    """Response for starting a debug replay session."""
-
-    success: bool
-    replay_camera: str
-
-
-class DebugReplayStatusResponse(BaseModel):
-    """Response for debug replay status."""
-
-    active: bool
-    replay_camera: str | None = None
-    source_camera: str | None = None
-    start_time: float | None = None
-    end_time: float | None = None
-    live_ready: bool = False
-
-
-class DebugReplayStopResponse(BaseModel):
-    """Response for stopping a debug replay session."""
-
-    success: bool
-
-
-@router.post(
-    "/debug_replay/start",
-    response_model=DebugReplayStartResponse,
-    dependencies=[Depends(require_role(["admin"]))],
-    summary="Start debug replay",
-    description="Start a debug replay session from camera recordings.",
-)
-async def start_debug_replay(request: Request, body: DebugReplayStartBody):
-    """Start a debug replay session."""
-    replay_manager = request.app.replay_manager
-
-    if replay_manager.active:
-        return JSONResponse(
-            content={
-                "success": False,
-                "message": "A replay session is already active",
-            },
-            status_code=409,
-        )
-
-    try:
-        replay_camera = await asyncio.to_thread(
-            replay_manager.start,
-            source_camera=body.camera,
-            start_ts=body.start_time,
-            end_ts=body.end_time,
-            frigate_config=request.app.frigate_config,
-            config_publisher=request.app.config_publisher,
-        )
-    except ValueError:
-        logger.exception("Invalid parameters for debug replay start request")
-        return JSONResponse(
-            content={
-                "success": False,
-                "message": "Invalid debug replay request parameters",
-            },
-            status_code=400,
-        )
-    except RuntimeError:
-        logger.exception("Error while starting debug replay session")
-        return JSONResponse(
-            content={
-                "success": False,
-                "message": "An internal error occurred while starting debug replay",
-            },
-            status_code=500,
-        )
-
-    return DebugReplayStartResponse(
-        success=True,
-        replay_camera=replay_camera,
-    )
-
-
-@router.get(
-    "/debug_replay/status",
-    response_model=DebugReplayStatusResponse,
-    dependencies=[Depends(require_role(["admin"]))],
-    summary="Get debug replay status",
-    description="Get the status of the current debug replay session.",
-)
-def get_debug_replay_status(request: Request):
-    """Get the current replay session status."""
-    replay_manager = request.app.replay_manager
-
-    live_ready = False
-    replay_camera = replay_manager.replay_camera_name
-
-    if replay_manager.active and replay_camera:
-        frame_processor = request.app.detected_frames_processor
-        frame = frame_processor.get_current_frame(replay_camera)
-
-        if frame is not None:
-            frame_time = frame_processor.get_current_frame_time(replay_camera)
-            camera_config = request.app.frigate_config.cameras.get(replay_camera)
-            retry_interval = 10
-
-            if camera_config is not None:
-                retry_interval = float(camera_config.ffmpeg.retry_interval or 10)
-
-            live_ready = datetime.now().timestamp() <= frame_time + retry_interval
-
-    return DebugReplayStatusResponse(
-        active=replay_manager.active,
-        replay_camera=replay_camera,
-        source_camera=replay_manager.source_camera,
-        start_time=replay_manager.start_ts,
-        end_time=replay_manager.end_ts,
-        live_ready=live_ready,
-    )
-
-
-@router.post(
-    "/debug_replay/stop",
-    response_model=DebugReplayStopResponse,
-    dependencies=[Depends(require_role(["admin"]))],
-    summary="Stop debug replay",
-    description="Stop the active debug replay session and clean up all artifacts.",
-)
-async def stop_debug_replay(request: Request):
-    """Stop the active replay session."""
-    replay_manager = request.app.replay_manager
-
-    if not replay_manager.active:
-        return JSONResponse(
-            content={"success": False, "message": "No active replay session"},
-            status_code=400,
-        )
-
-    try:
-        await asyncio.to_thread(
-            replay_manager.stop,
-            frigate_config=request.app.frigate_config,
-            config_publisher=request.app.config_publisher,
-        )
-    except (ValueError, RuntimeError, OSError) as e:
-        logger.error("Error stopping replay: %s", e)
-        return JSONResponse(
-            content={
-                "success": False,
-                "message": "Failed to stop replay session due to an internal error.",
-            },
-            status_code=500,
-        )
-
-    return DebugReplayStopResponse(success=True)

frigate/api/defs/query/media_query_parameters.py

@@ -1,7 +1,8 @@
 from enum import Enum
-from typing import Optional
+from typing import Optional, Union
 
 from pydantic import BaseModel
+from pydantic.json_schema import SkipJsonSchema
 
 
 class Extension(str, Enum):
@@ -47,3 +48,15 @@ class MediaMjpegFeedQueryParams(BaseModel):
     mask: Optional[int] = None
     motion: Optional[int] = None
     regions: Optional[int] = None
+
+
+class MediaRecordingsSummaryQueryParams(BaseModel):
+    timezone: str = "utc"
+    cameras: Optional[str] = "all"
+
+
+class MediaRecordingsAvailabilityQueryParams(BaseModel):
+    cameras: str = "all"
+    before: Union[float, SkipJsonSchema[None]] = None
+    after: Union[float, SkipJsonSchema[None]] = None
+    scale: int = 30

frigate/api/defs/query/recordings_query_parameters.py

@@ -1,21 +0,0 @@
-from typing import Optional, Union
-
-from pydantic import BaseModel
-from pydantic.json_schema import SkipJsonSchema
-
-
-class MediaRecordingsSummaryQueryParams(BaseModel):
-    timezone: str = "utc"
-    cameras: Optional[str] = "all"
-
-
-class MediaRecordingsAvailabilityQueryParams(BaseModel):
-    cameras: str = "all"
-    before: Union[float, SkipJsonSchema[None]] = None
-    after: Union[float, SkipJsonSchema[None]] = None
-    scale: int = 30
-
-
-class RecordingsDeleteQueryParams(BaseModel):
-    keep: Optional[str] = None
-    cameras: Optional[str] = "all"

frigate/api/defs/request/app_body.py

@@ -1,13 +1,12 @@
-from typing import Any, Dict, List, Optional
+from typing import Any, Dict, Optional
 
-from pydantic import BaseModel, Field
+from pydantic import BaseModel
 
 
 class AppConfigSetBody(BaseModel):
     requires_restart: int = 1
     update_topic: str | None = None
     config_data: Optional[Dict[str, Any]] = None
-    skip_save: bool = False
 
 
 class AppPutPasswordBody(BaseModel):
@@ -28,22 +27,3 @@ class AppPostLoginBody(BaseModel):
 
 class AppPutRoleBody(BaseModel):
     role: str
-
-
-class ProfileSetBody(BaseModel):
-    profile: Optional[str] = Field(
-        default=None, description="Profile name to activate, or null to deactivate"
-    )
-
-
-class MediaSyncBody(BaseModel):
-    dry_run: bool = Field(
-        default=True, description="If True, only report orphans without deleting them"
-    )
-    media_types: List[str] = Field(
-        default=["all"],
-        description="Types of media to sync: 'all', 'event_snapshots', 'event_thumbnails', 'review_thumbnails', 'previews', 'exports', 'recordings'",
-    )
-    force: bool = Field(
-        default=False, description="If True, bypass safety threshold checks"
-    )

frigate/api/defs/request/chat_body.py

@@ -1,45 +0,0 @@
-"""Chat API request models."""
-
-from typing import Optional
-
-from pydantic import BaseModel, Field
-
-
-class ChatMessage(BaseModel):
-    """A single message in a chat conversation."""
-
-    role: str = Field(
-        description="Message role: 'user', 'assistant', 'system', or 'tool'"
-    )
-    content: str = Field(description="Message content")
-    tool_call_id: Optional[str] = Field(
-        default=None, description="For tool messages, the ID of the tool call"
-    )
-    name: Optional[str] = Field(
-        default=None, description="For tool messages, the tool name"
-    )
-
-
-class ChatCompletionRequest(BaseModel):
-    """Request for chat completion with tool calling."""
-
-    messages: list[ChatMessage] = Field(
-        description="List of messages in the conversation"
-    )
-    max_tool_iterations: int = Field(
-        default=5,
-        ge=1,
-        le=10,
-        description="Maximum number of tool call iterations (default: 5)",
-    )
-    include_live_image: Optional[str] = Field(
-        default=None,
-        description=(
-            "If set, the current live frame from this camera is attached to the first "
-            "user message as multimodal content. Use with get_live_context for detection info."
-        ),
-    )
-    stream: bool = Field(
-        default=False,
-        description="If true, stream the final assistant response in the body as newline-delimited JSON.",
-    )

frigate/api/defs/request/events_body.py

@@ -41,7 +41,6 @@ class EventsCreateBody(BaseModel):
     duration: Optional[int] = 30
     include_recording: Optional[bool] = True
     draw: Optional[dict] = {}
-    pre_capture: Optional[int] = None
 
 
 class EventsEndBody(BaseModel):

frigate/api/defs/request/export_case_body.py

@@ -1,35 +0,0 @@
-from typing import Optional
-
-from pydantic import BaseModel, Field
-
-
-class ExportCaseCreateBody(BaseModel):
-    """Request body for creating a new export case."""
-
-    name: str = Field(max_length=100, description="Friendly name of the export case")
-    description: Optional[str] = Field(
-        default=None, description="Optional description of the export case"
-    )
-
-
-class ExportCaseUpdateBody(BaseModel):
-    """Request body for updating an existing export case."""
-
-    name: Optional[str] = Field(
-        default=None,
-        max_length=100,
-        description="Updated friendly name of the export case",
-    )
-    description: Optional[str] = Field(
-        default=None, description="Updated description of the export case"
-    )
-
-
-class ExportCaseAssignBody(BaseModel):
-    """Request body for assigning or unassigning an export to a case."""
-
-    export_case_id: Optional[str] = Field(
-        default=None,
-        max_length=30,
-        description="Case ID to assign to the export, or null to unassign",
-    )

frigate/api/defs/request/export_recordings_body.py

@@ -3,47 +3,27 @@ from typing import Optional, Union
 from pydantic import BaseModel, Field
 from pydantic.json_schema import SkipJsonSchema
 
-from frigate.record.export import PlaybackSourceEnum
+from frigate.record.export import (
+    ChaptersEnum,
+    PlaybackFactorEnum,
+    PlaybackSourceEnum,
+)
 
 
 class ExportRecordingsBody(BaseModel):
+    playback: PlaybackFactorEnum = Field(
+        default=PlaybackFactorEnum.realtime, title="Playback factor"
+    )
     source: PlaybackSourceEnum = Field(
         default=PlaybackSourceEnum.recordings, title="Playback source"
     )
     name: Optional[str] = Field(title="Friendly name", default=None, max_length=256)
     image_path: Union[str, SkipJsonSchema[None]] = None
-    export_case_id: Optional[str] = Field(
+    chapters: Optional[ChaptersEnum] = Field(
         default=None,
-        title="Export case ID",
-        max_length=30,
-        description="ID of the export case to assign this export to",
-    )
-
-
-class ExportRecordingsCustomBody(BaseModel):
-    source: PlaybackSourceEnum = Field(
-        default=PlaybackSourceEnum.recordings, title="Playback source"
-    )
-    name: str = Field(title="Friendly name", default=None, max_length=256)
-    image_path: Union[str, SkipJsonSchema[None]] = None
-    export_case_id: Optional[str] = Field(
-        default=None,
-        title="Export case ID",
-        max_length=30,
-        description="ID of the export case to assign this export to",
-    )
-    ffmpeg_input_args: Optional[str] = Field(
-        default=None,
-        title="FFmpeg input arguments",
-        description="Custom FFmpeg input arguments. If not provided, defaults to timelapse input args.",
-    )
-    ffmpeg_output_args: Optional[str] = Field(
-        default=None,
-        title="FFmpeg output arguments",
-        description="Custom FFmpeg output arguments. If not provided, defaults to timelapse output args.",
-    )
-    cpu_fallback: bool = Field(
-        default=False,
-        title="CPU Fallback",
-        description="If true, retry export without hardware acceleration if the initial export fails.",
+        title="Chapter mode",
+        description=(
+            "Optional chapter metadata to embed in the export. When omitted, "
+            "no chapter track is added."
+        ),
     )

frigate/api/defs/response/chat_response.py

@@ -1,54 +0,0 @@
-"""Chat API response models."""
-
-from typing import Any, Optional
-
-from pydantic import BaseModel, Field
-
-
-class ToolCallInvocation(BaseModel):
-    """A tool call requested by the LLM (before execution)."""
-
-    id: str = Field(description="Unique identifier for this tool call")
-    name: str = Field(description="Tool name to call")
-    arguments: dict[str, Any] = Field(description="Arguments for the tool call")
-
-
-class ChatMessageResponse(BaseModel):
-    """A message in the chat response."""
-
-    role: str = Field(description="Message role")
-    content: Optional[str] = Field(
-        default=None, description="Message content (None if tool calls present)"
-    )
-    tool_calls: Optional[list[ToolCallInvocation]] = Field(
-        default=None, description="Tool calls if LLM wants to call tools"
-    )
-
-
-class ToolCall(BaseModel):
-    """A tool that was executed during the completion, with its response."""
-
-    name: str = Field(description="Tool name that was called")
-    arguments: dict[str, Any] = Field(
-        default_factory=dict, description="Arguments passed to the tool"
-    )
-    response: str = Field(
-        default="",
-        description="The response or result returned from the tool execution",
-    )
-
-
-class ChatCompletionResponse(BaseModel):
-    """Response from chat completion."""
-
-    message: ChatMessageResponse = Field(description="The assistant's message")
-    finish_reason: str = Field(
-        description="Reason generation stopped: 'stop', 'tool_calls', 'length', 'error'"
-    )
-    tool_iterations: int = Field(
-        default=0, description="Number of tool call iterations performed"
-    )
-    tool_calls: list[ToolCall] = Field(
-        default_factory=list,
-        description="List of tool calls that were executed during this completion",
-    )

frigate/api/defs/response/export_case_response.py

@@ -1,22 +0,0 @@
-from typing import List, Optional
-
-from pydantic import BaseModel, Field
-
-
-class ExportCaseModel(BaseModel):
-    """Model representing a single export case."""
-
-    id: str = Field(description="Unique identifier for the export case")
-    name: str = Field(description="Friendly name of the export case")
-    description: Optional[str] = Field(
-        default=None, description="Optional description of the export case"
-    )
-    created_at: float = Field(
-        description="Unix timestamp when the export case was created"
-    )
-    updated_at: float = Field(
-        description="Unix timestamp when the export case was last updated"
-    )
-
-
-ExportCasesResponse = List[ExportCaseModel]

frigate/api/defs/response/export_response.py

@@ -15,9 +15,6 @@ class ExportModel(BaseModel):
     in_progress: bool = Field(
         description="Whether the export is currently being processed"
     )
-    export_case_id: Optional[str] = Field(
-        default=None, description="ID of the export case this export belongs to"
-    )
 
 
 class StartExportResponse(BaseModel):

frigate/api/defs/tags.py

@@ -3,16 +3,13 @@ from enum import Enum
 
 class Tags(Enum):
     app = "App"
-    auth = "Auth"
     camera = "Camera"
-    chat = "Chat"
-    events = "Events"
-    export = "Export"
-    classification = "Classification"
+    preview = "Preview"
     logs = "Logs"
     media = "Media"
-    motion_search = "Motion Search"
     notifications = "Notifications"
-    preview = "Preview"
-    recordings = "Recordings"
     review = "Review"
+    export = "Export"
+    events = "Events"
+    classification = "Classification"
+    auth = "Auth"

frigate/api/event.py

@@ -1782,7 +1782,6 @@ def create_event(
             body.duration,
             "api",
             body.draw,
-            body.pre_capture,
         ),
         EventMetadataTypeEnum.manual_event_create.value,
     )

frigate/api/export.py

@@ -4,10 +4,10 @@ import logging
 import random
 import string
 from pathlib import Path
-from typing import List, Optional
+from typing import List
 
 import psutil
-from fastapi import APIRouter, Depends, Query, Request
+from fastapi import APIRouter, Depends, Request
 from fastapi.responses import JSONResponse
 from pathvalidate import sanitize_filepath
 from peewee import DoesNotExist
@@ -19,20 +19,8 @@ from frigate.api.auth import (
     require_camera_access,
     require_role,
 )
-from frigate.api.defs.request.export_case_body import (
-    ExportCaseAssignBody,
-    ExportCaseCreateBody,
-    ExportCaseUpdateBody,
-)
-from frigate.api.defs.request.export_recordings_body import (
-    ExportRecordingsBody,
-    ExportRecordingsCustomBody,
-)
+from frigate.api.defs.request.export_recordings_body import ExportRecordingsBody
 from frigate.api.defs.request.export_rename_body import ExportRenameBody
-from frigate.api.defs.response.export_case_response import (
-    ExportCaseModel,
-    ExportCasesResponse,
-)
 from frigate.api.defs.response.export_response import (
     ExportModel,
     ExportsResponse,
@@ -41,9 +29,9 @@ from frigate.api.defs.response.export_response import (
 from frigate.api.defs.response.generic_response import GenericResponse
 from frigate.api.defs.tags import Tags
 from frigate.const import CLIPS_DIR, EXPORT_DIR
-from frigate.models import Export, ExportCase, Previews, Recordings
+from frigate.models import Export, Previews, Recordings
 from frigate.record.export import (
-    DEFAULT_TIME_LAPSE_FFMPEG_ARGS,
+    PlaybackFactorEnum,
     PlaybackSourceEnum,
     RecordingExporter,
 )
@@ -64,182 +52,17 @@ router = APIRouter(tags=[Tags.export])
 )
 def get_exports(
     allowed_cameras: List[str] = Depends(get_allowed_cameras_for_filter),
-    export_case_id: Optional[str] = None,
-    cameras: Optional[str] = Query(default="all"),
-    start_date: Optional[float] = None,
-    end_date: Optional[float] = None,
 ):
-    query = Export.select().where(Export.camera << allowed_cameras)
-
-    if export_case_id is not None:
-        if export_case_id == "unassigned":
-            query = query.where(Export.export_case.is_null(True))
-        else:
-            query = query.where(Export.export_case == export_case_id)
-
-    if cameras and cameras != "all":
-        requested = set(cameras.split(","))
-        filtered_cameras = list(requested.intersection(allowed_cameras))
-        if not filtered_cameras:
-            return JSONResponse(content=[])
-        query = query.where(Export.camera << filtered_cameras)
-
-    if start_date is not None:
-        query = query.where(Export.date >= start_date)
-
-    if end_date is not None:
-        query = query.where(Export.date <= end_date)
-
-    exports = query.order_by(Export.date.desc()).dicts().iterator()
+    exports = (
+        Export.select()
+        .where(Export.camera << allowed_cameras)
+        .order_by(Export.date.desc())
+        .dicts()
+        .iterator()
+    )
     return JSONResponse(content=[e for e in exports])
 
 
-@router.get(
-    "/cases",
-    response_model=ExportCasesResponse,
-    dependencies=[Depends(allow_any_authenticated())],
-    summary="Get export cases",
-    description="Gets all export cases from the database.",
-)
-def get_export_cases():
-    cases = (
-        ExportCase.select().order_by(ExportCase.created_at.desc()).dicts().iterator()
-    )
-    return JSONResponse(content=[c for c in cases])
-
-
-@router.post(
-    "/cases",
-    response_model=ExportCaseModel,
-    dependencies=[Depends(require_role(["admin"]))],
-    summary="Create export case",
-    description="Creates a new export case.",
-)
-def create_export_case(body: ExportCaseCreateBody):
-    case = ExportCase.create(
-        id="".join(random.choices(string.ascii_lowercase + string.digits, k=12)),
-        name=body.name,
-        description=body.description,
-        created_at=Path().stat().st_mtime,
-        updated_at=Path().stat().st_mtime,
-    )
-    return JSONResponse(content=model_to_dict(case))
-
-
-@router.get(
-    "/cases/{case_id}",
-    response_model=ExportCaseModel,
-    dependencies=[Depends(allow_any_authenticated())],
-    summary="Get a single export case",
-    description="Gets a specific export case by ID.",
-)
-def get_export_case(case_id: str):
-    try:
-        case = ExportCase.get(ExportCase.id == case_id)
-        return JSONResponse(content=model_to_dict(case))
-    except DoesNotExist:
-        return JSONResponse(
-            content={"success": False, "message": "Export case not found"},
-            status_code=404,
-        )
-
-
-@router.patch(
-    "/cases/{case_id}",
-    response_model=GenericResponse,
-    dependencies=[Depends(require_role(["admin"]))],
-    summary="Update export case",
-    description="Updates an existing export case.",
-)
-def update_export_case(case_id: str, body: ExportCaseUpdateBody):
-    try:
-        case = ExportCase.get(ExportCase.id == case_id)
-    except DoesNotExist:
-        return JSONResponse(
-            content={"success": False, "message": "Export case not found"},
-            status_code=404,
-        )
-
-    if body.name is not None:
-        case.name = body.name
-    if body.description is not None:
-        case.description = body.description
-
-    case.save()
-
-    return JSONResponse(
-        content={"success": True, "message": "Successfully updated export case."}
-    )
-
-
-@router.delete(
-    "/cases/{case_id}",
-    response_model=GenericResponse,
-    dependencies=[Depends(require_role(["admin"]))],
-    summary="Delete export case",
-    description="""Deletes an export case.\n    Exports that reference this case will have their export_case set to null.\n    """,
-)
-def delete_export_case(case_id: str):
-    try:
-        case = ExportCase.get(ExportCase.id == case_id)
-    except DoesNotExist:
-        return JSONResponse(
-            content={"success": False, "message": "Export case not found"},
-            status_code=404,
-        )
-
-    # Unassign exports from this case but keep the exports themselves
-    Export.update(export_case=None).where(Export.export_case == case).execute()
-
-    case.delete_instance()
-
-    return JSONResponse(
-        content={"success": True, "message": "Successfully deleted export case."}
-    )
-
-
-@router.patch(
-    "/export/{export_id}/case",
-    response_model=GenericResponse,
-    dependencies=[Depends(require_role(["admin"]))],
-    summary="Assign export to case",
-    description=(
-        "Assigns an export to a case, or unassigns it if export_case_id is null."
-    ),
-)
-async def assign_export_case(
-    export_id: str,
-    body: ExportCaseAssignBody,
-    request: Request,
-):
-    try:
-        export: Export = Export.get(Export.id == export_id)
-        await require_camera_access(export.camera, request=request)
-    except DoesNotExist:
-        return JSONResponse(
-            content={"success": False, "message": "Export not found."},
-            status_code=404,
-        )
-
-    if body.export_case_id is not None:
-        try:
-            ExportCase.get(ExportCase.id == body.export_case_id)
-        except DoesNotExist:
-            return JSONResponse(
-                content={"success": False, "message": "Export case not found."},
-                status_code=404,
-            )
-        export.export_case = body.export_case_id
-    else:
-        export.export_case = None
-
-    export.save()
-
-    return JSONResponse(
-        content={"success": True, "message": "Successfully updated export case."}
-    )
-
-
 @router.post(
     "/export/{camera_name}/start/{start_time}/end/{end_time}",
     response_model=StartExportResponse,
@@ -265,19 +88,28 @@ def export_recording(
             status_code=404,
         )
 
+    playback_factor = body.playback
     playback_source = body.source
     friendly_name = body.name
+
+    # sanitize_filepath normalizes "\" to "/" but leaves ".." intact, so a path
+    # like "clips\..\..\etc/passwd" passes the CLIPS_DIR prefix check yet still
+    # escapes the directory once resolved. A valid snapshot path never uses "..".
+    if body.image_path and ".." in body.image_path:
+        return JSONResponse(
+            content=({"success": False, "message": "Invalid image path"}),
+            status_code=400,
+        )
+
     existing_image = sanitize_filepath(body.image_path) if body.image_path else None
 
-    export_case_id = body.export_case_id
-    if export_case_id is not None:
-        try:
-            ExportCase.get(ExportCase.id == export_case_id)
-        except DoesNotExist:
-            return JSONResponse(
-                content={"success": False, "message": "Export case not found"},
-                status_code=404,
-            )
+    # a chapters value in the request body overrides the camera's export config
+    camera_config = request.app.frigate_config.cameras[camera_name]
+    chapters = (
+        body.chapters
+        if body.chapters is not None
+        else camera_config.record.export.chapters
+    )
 
     # Ensure that existing_image is a valid path
     if existing_image and not existing_image.startswith(CLIPS_DIR):
@@ -337,12 +169,17 @@ def export_recording(
         existing_image,
         int(start_time),
         int(end_time),
+        (
+            PlaybackFactorEnum[playback_factor]
+            if playback_factor in PlaybackFactorEnum.__members__.values()
+            else PlaybackFactorEnum.realtime
+        ),
         (
             PlaybackSourceEnum[playback_source]
             if playback_source in PlaybackSourceEnum.__members__.values()
             else PlaybackSourceEnum.recordings
         ),
-        export_case_id,
+        chapters=chapters,
     )
     exporter.start()
     return JSONResponse(
@@ -453,138 +290,6 @@ async def export_delete(event_id: str, request: Request):
     )
 
 
-@router.post(
-    "/export/custom/{camera_name}/start/{start_time}/end/{end_time}",
-    response_model=StartExportResponse,
-    dependencies=[Depends(require_camera_access)],
-    summary="Start custom recording export",
-    description="""Starts an export of a recording for the specified time range using custom FFmpeg arguments.
-    The export can be from recordings or preview footage. Returns the export ID if
-    successful, or an error message if the camera is invalid or no recordings/previews
-    are found for the time range. If ffmpeg_input_args and ffmpeg_output_args are not provided,
-    defaults to timelapse export settings.""",
-)
-def export_recording_custom(
-    request: Request,
-    camera_name: str,
-    start_time: float,
-    end_time: float,
-    body: ExportRecordingsCustomBody,
-):
-    if not camera_name or not request.app.frigate_config.cameras.get(camera_name):
-        return JSONResponse(
-            content=(
-                {"success": False, "message": f"{camera_name} is not a valid camera."}
-            ),
-            status_code=404,
-        )
-
-    playback_source = body.source
-    friendly_name = body.name
-    existing_image = sanitize_filepath(body.image_path) if body.image_path else None
-    ffmpeg_input_args = body.ffmpeg_input_args
-    ffmpeg_output_args = body.ffmpeg_output_args
-    cpu_fallback = body.cpu_fallback
-
-    export_case_id = body.export_case_id
-    if export_case_id is not None:
-        try:
-            ExportCase.get(ExportCase.id == export_case_id)
-        except DoesNotExist:
-            return JSONResponse(
-                content={"success": False, "message": "Export case not found"},
-                status_code=404,
-            )
-
-    # Ensure that existing_image is a valid path
-    if existing_image and not existing_image.startswith(CLIPS_DIR):
-        return JSONResponse(
-            content=({"success": False, "message": "Invalid image path"}),
-            status_code=400,
-        )
-
-    if playback_source == "recordings":
-        recordings_count = (
-            Recordings.select()
-            .where(
-                Recordings.start_time.between(start_time, end_time)
-                | Recordings.end_time.between(start_time, end_time)
-                | (
-                    (start_time > Recordings.start_time)
-                    & (end_time < Recordings.end_time)
-                )
-            )
-            .where(Recordings.camera == camera_name)
-            .count()
-        )
-
-        if recordings_count <= 0:
-            return JSONResponse(
-                content=(
-                    {"success": False, "message": "No recordings found for time range"}
-                ),
-                status_code=400,
-            )
-    else:
-        previews_count = (
-            Previews.select()
-            .where(
-                Previews.start_time.between(start_time, end_time)
-                | Previews.end_time.between(start_time, end_time)
-                | ((start_time > Previews.start_time) & (end_time < Previews.end_time))
-            )
-            .where(Previews.camera == camera_name)
-            .count()
-        )
-
-        if not is_current_hour(start_time) and previews_count <= 0:
-            return JSONResponse(
-                content=(
-                    {"success": False, "message": "No previews found for time range"}
-                ),
-                status_code=400,
-            )
-
-    export_id = f"{camera_name}_{''.join(random.choices(string.ascii_lowercase + string.digits, k=6))}"
-
-    # Set default values if not provided (timelapse defaults)
-    if ffmpeg_input_args is None:
-        ffmpeg_input_args = ""
-
-    if ffmpeg_output_args is None:
-        ffmpeg_output_args = DEFAULT_TIME_LAPSE_FFMPEG_ARGS
-
-    exporter = RecordingExporter(
-        request.app.frigate_config,
-        export_id,
-        camera_name,
-        friendly_name,
-        existing_image,
-        int(start_time),
-        int(end_time),
-        (
-            PlaybackSourceEnum[playback_source]
-            if playback_source in PlaybackSourceEnum.__members__.values()
-            else PlaybackSourceEnum.recordings
-        ),
-        export_case_id,
-        ffmpeg_input_args,
-        ffmpeg_output_args,
-        cpu_fallback,
-    )
-    exporter.start()
-    return JSONResponse(
-        content=(
-            {
-                "success": True,
-                "message": "Starting export of recording.",
-                "export_id": export_id,
-            }
-        ),
-        status_code=200,
-    )
-
-
 @router.get(
     "/exports/{export_id}",
     response_model=ExportModel,

frigate/api/fastapi_app.py

@@ -16,16 +16,12 @@ from frigate.api import app as main_app
 from frigate.api import (
     auth,
     camera,
-    chat,
     classification,
-    debug_replay,
     event,
     export,
     media,
-    motion_search,
     notification,
     preview,
-    record,
     review,
 )
 from frigate.api.auth import get_jwt_secret, limiter, require_admin_by_default
@@ -34,9 +30,7 @@ from frigate.comms.event_metadata_updater import (
 )
 from frigate.config import FrigateConfig
 from frigate.config.camera.updater import CameraConfigUpdatePublisher
-from frigate.debug_replay import DebugReplayManager
 from frigate.embeddings import EmbeddingsContext
-from frigate.genai import GenAIClientManager
 from frigate.ptz.onvif import OnvifController
 from frigate.stats.emitter import StatsEmitter
 from frigate.storage import StorageMaintainer
@@ -68,9 +62,6 @@ def create_fastapi_app(
     stats_emitter: StatsEmitter,
     event_metadata_updater: EventMetadataPublisher,
     config_publisher: CameraConfigUpdatePublisher,
-    replay_manager: DebugReplayManager,
-    dispatcher=None,
-    profile_manager=None,
     enforce_default_admin: bool = True,
 ):
     logger.info("Starting FastAPI app")
@@ -129,7 +120,6 @@ def create_fastapi_app(
     # Order of include_router matters: https://fastapi.tiangolo.com/tutorial/path-params/#order-matters
     app.include_router(auth.router)
     app.include_router(camera.router)
-    app.include_router(chat.router)
     app.include_router(classification.router)
     app.include_router(review.router)
     app.include_router(main_app.router)
@@ -138,12 +128,8 @@ def create_fastapi_app(
     app.include_router(export.router)
     app.include_router(event.router)
     app.include_router(media.router)
-    app.include_router(motion_search.router)
-    app.include_router(record.router)
-    app.include_router(debug_replay.router)
     # App Properties
     app.frigate_config = frigate_config
-    app.genai_manager = GenAIClientManager(frigate_config)
     app.embeddings = embeddings
     app.detected_frames_processor = detected_frames_processor
     app.storage_maintainer = storage_maintainer
@@ -152,9 +138,6 @@ def create_fastapi_app(
     app.stats_emitter = stats_emitter
     app.event_metadata_updater = event_metadata_updater
     app.config_publisher = config_publisher
-    app.replay_manager = replay_manager
-    app.dispatcher = dispatcher
-    app.profile_manager = profile_manager
 
     if frigate_config.auth.enabled:
         secret = get_jwt_secret()

frigate/api/media.py

@@ -8,8 +8,9 @@ import os
 import subprocess as sp
 import time
 from datetime import datetime, timedelta, timezone
+from functools import reduce
 from pathlib import Path as FilePath
-from typing import Any
+from typing import Any, List
 from urllib.parse import unquote
 
 import cv2
@@ -18,19 +19,21 @@ import pytz
 from fastapi import APIRouter, Depends, Path, Query, Request, Response
 from fastapi.responses import FileResponse, JSONResponse, StreamingResponse
 from pathvalidate import sanitize_filename
-from peewee import DoesNotExist, fn
+from peewee import DoesNotExist, fn, operator
 from tzlocal import get_localzone_name
 
 from frigate.api.auth import (
     allow_any_authenticated,
+    get_allowed_cameras_for_filter,
     require_camera_access,
-    require_role,
 )
 from frigate.api.defs.query.media_query_parameters import (
     Extension,
     MediaEventsSnapshotQueryParams,
     MediaLatestFrameQueryParams,
     MediaMjpegFeedQueryParams,
+    MediaRecordingsAvailabilityQueryParams,
+    MediaRecordingsSummaryQueryParams,
 )
 from frigate.api.defs.tags import Tags
 from frigate.camera.state import CameraState
@@ -41,18 +44,34 @@ from frigate.const import (
     INSTALL_DIR,
     MAX_SEGMENT_DURATION,
     PREVIEW_FRAME_TYPE,
+    RECORD_DIR,
 )
 from frigate.models import Event, Previews, Recordings, Regions, ReviewSegment
-from frigate.output.preview import get_most_recent_preview_frame
 from frigate.track.object_processing import TrackedObjectProcessor
 from frigate.util.file import get_event_thumbnail_bytes
 from frigate.util.image import get_image_from_recording
+from frigate.util.media import get_keyframe_before
+from frigate.util.time import get_dst_transitions
 
 logger = logging.getLogger(__name__)
 
+
 router = APIRouter(tags=[Tags.media])
 
 
+def _resolve_cache_age(max_cache_age: int) -> int:
+    """Return max_cache_age as an int.
+
+    When a media handler is invoked directly by another handler instead of
+    through its route, FastAPI doesn't resolve the Query() default and
+    max_cache_age arrives as the Query object; fall back to its int default.
+    """
+    if isinstance(max_cache_age, int):
+        return max_cache_age
+
+    return max_cache_age.default
+
+
 @router.get("/{camera_name}", dependencies=[Depends(require_camera_access)])
 async def mjpeg_feed(
     request: Request,
@@ -127,9 +146,7 @@ async def camera_ptz_info(request: Request, camera_name: str):
 
 
 @router.get(
-    "/{camera_name}/latest.{extension}",
-    dependencies=[Depends(require_camera_access)],
-    description="Returns the latest frame from the specified camera in the requested format (jpg, png, webp). Falls back to preview frames if the camera is offline.",
+    "/{camera_name}/latest.{extension}", dependencies=[Depends(require_camera_access)]
 )
 async def latest_frame(
     request: Request,
@@ -163,37 +180,20 @@ async def latest_frame(
             or 10
         )
 
-        is_offline = False
         if frame is None or datetime.now().timestamp() > (
             frame_processor.get_current_frame_time(camera_name) + retry_interval
         ):
-            last_frame_time = frame_processor.get_current_frame_time(camera_name)
-            preview_path = get_most_recent_preview_frame(
-                camera_name, before=last_frame_time
-            )
-
-            if preview_path:
-                logger.debug(f"Using most recent preview frame for {camera_name}")
-                frame = cv2.imread(preview_path, cv2.IMREAD_UNCHANGED)
-
-                if frame is not None:
-                    is_offline = True
-
-            if frame is None or not is_offline:
-                logger.debug(
-                    f"No live or preview frame available for {camera_name}. Using error image."
+            if request.app.camera_error_image is None:
+                error_image = glob.glob(
+                    os.path.join(INSTALL_DIR, "frigate/images/camera-error.jpg")
                 )
-                if request.app.camera_error_image is None:
-                    error_image = glob.glob(
-                        os.path.join(INSTALL_DIR, "frigate/images/camera-error.jpg")
+
+                if len(error_image) > 0:
+                    request.app.camera_error_image = cv2.imread(
+                        error_image[0], cv2.IMREAD_UNCHANGED
                     )
 
-                    if len(error_image) > 0:
-                        request.app.camera_error_image = cv2.imread(
-                            error_image[0], cv2.IMREAD_UNCHANGED
-                        )
-
-                frame = request.app.camera_error_image
+            frame = request.app.camera_error_image
 
         height = int(params.height or str(frame.shape[0]))
         width = int(height * frame.shape[1] / frame.shape[0])
@@ -215,18 +215,14 @@ async def latest_frame(
         frame = cv2.resize(frame, dsize=(width, height), interpolation=cv2.INTER_AREA)
 
         _, img = cv2.imencode(f".{extension.value}", frame, quality_params)
-
-        headers = {
-            "Cache-Control": "no-store" if not params.store else "private, max-age=60",
-        }
-
-        if is_offline:
-            headers["X-Frigate-Offline"] = "true"
-
         return Response(
             content=img.tobytes(),
             media_type=extension.get_mime_type(),
-            headers=headers,
+            headers={
+                "Cache-Control": "no-store"
+                if not params.store
+                else "private, max-age=60",
+            },
         )
     elif (
         camera_name == "birdseye"
@@ -397,7 +393,9 @@ async def submit_recording_snapshot_to_plus(
             )
 
         nd = cv2.imdecode(np.frombuffer(image_data, dtype=np.int8), cv2.IMREAD_COLOR)
-        request.app.frigate_config.plus_api.upload_image(nd, camera_name)
+        await asyncio.to_thread(
+            request.app.frigate_config.plus_api.upload_image, nd, camera_name
+        )
 
         return JSONResponse(
             content={
@@ -416,6 +414,333 @@ async def submit_recording_snapshot_to_plus(
         )
 
 
+@router.get("/recordings/storage", dependencies=[Depends(allow_any_authenticated())])
+def get_recordings_storage_usage(request: Request):
+    recording_stats = request.app.stats_emitter.get_latest_stats()["service"][
+        "storage"
+    ][RECORD_DIR]
+
+    if not recording_stats:
+        return JSONResponse({})
+
+    total_mb = recording_stats["total"]
+
+    camera_usages: dict[str, dict] = (
+        request.app.storage_maintainer.calculate_camera_usages()
+    )
+
+    for camera_name in camera_usages.keys():
+        if camera_usages.get(camera_name, {}).get("usage"):
+            camera_usages[camera_name]["usage_percent"] = (
+                camera_usages.get(camera_name, {}).get("usage", 0) / total_mb
+            ) * 100
+
+    return JSONResponse(content=camera_usages)
+
+
+@router.get("/recordings/summary", dependencies=[Depends(allow_any_authenticated())])
+def all_recordings_summary(
+    request: Request,
+    params: MediaRecordingsSummaryQueryParams = Depends(),
+    allowed_cameras: List[str] = Depends(get_allowed_cameras_for_filter),
+):
+    """Returns true/false by day indicating if recordings exist"""
+
+    cameras = params.cameras
+    if cameras != "all":
+        requested = set(unquote(cameras).split(","))
+        filtered = requested.intersection(allowed_cameras)
+        if not filtered:
+            return JSONResponse(content={})
+        camera_list = list(filtered)
+    else:
+        camera_list = allowed_cameras
+
+    time_range_query = (
+        Recordings.select(
+            fn.MIN(Recordings.start_time).alias("min_time"),
+            fn.MAX(Recordings.start_time).alias("max_time"),
+        )
+        .where(Recordings.camera << camera_list)
+        .dicts()
+        .get()
+    )
+
+    min_time = time_range_query.get("min_time")
+    max_time = time_range_query.get("max_time")
+
+    if min_time is None or max_time is None:
+        return JSONResponse(content={})
+
+    dst_periods = get_dst_transitions(params.timezone, min_time, max_time)
+
+    days: dict[str, bool] = {}
+
+    for period_start, period_end, period_offset in dst_periods:
+        hours_offset = int(period_offset / 60 / 60)
+        minutes_offset = int(period_offset / 60 - hours_offset * 60)
+        period_hour_modifier = f"{hours_offset} hour"
+        period_minute_modifier = f"{minutes_offset} minute"
+
+        period_query = (
+            Recordings.select(
+                fn.strftime(
+                    "%Y-%m-%d",
+                    fn.datetime(
+                        Recordings.start_time,
+                        "unixepoch",
+                        period_hour_modifier,
+                        period_minute_modifier,
+                    ),
+                ).alias("day")
+            )
+            .where(
+                (Recordings.camera << camera_list)
+                & (Recordings.end_time >= period_start)
+                & (Recordings.start_time <= period_end)
+            )
+            .group_by(
+                fn.strftime(
+                    "%Y-%m-%d",
+                    fn.datetime(
+                        Recordings.start_time,
+                        "unixepoch",
+                        period_hour_modifier,
+                        period_minute_modifier,
+                    ),
+                )
+            )
+            .order_by(Recordings.start_time.desc())
+            .namedtuples()
+        )
+
+        for g in period_query:
+            days[g.day] = True
+
+    return JSONResponse(content=dict(sorted(days.items())))
+
+
+@router.get(
+    "/{camera_name}/recordings/summary", dependencies=[Depends(require_camera_access)]
+)
+async def recordings_summary(camera_name: str, timezone: str = "utc"):
+    """Returns hourly summary for recordings of given camera"""
+
+    time_range_query = (
+        Recordings.select(
+            fn.MIN(Recordings.start_time).alias("min_time"),
+            fn.MAX(Recordings.start_time).alias("max_time"),
+        )
+        .where(Recordings.camera == camera_name)
+        .dicts()
+        .get()
+    )
+
+    min_time = time_range_query.get("min_time")
+    max_time = time_range_query.get("max_time")
+
+    days: dict[str, dict] = {}
+
+    if min_time is None or max_time is None:
+        return JSONResponse(content=list(days.values()))
+
+    dst_periods = get_dst_transitions(timezone, min_time, max_time)
+
+    for period_start, period_end, period_offset in dst_periods:
+        hours_offset = int(period_offset / 60 / 60)
+        minutes_offset = int(period_offset / 60 - hours_offset * 60)
+        period_hour_modifier = f"{hours_offset} hour"
+        period_minute_modifier = f"{minutes_offset} minute"
+
+        recording_groups = (
+            Recordings.select(
+                fn.strftime(
+                    "%Y-%m-%d %H",
+                    fn.datetime(
+                        Recordings.start_time,
+                        "unixepoch",
+                        period_hour_modifier,
+                        period_minute_modifier,
+                    ),
+                ).alias("hour"),
+                fn.SUM(Recordings.duration).alias("duration"),
+                fn.SUM(Recordings.motion).alias("motion"),
+                fn.SUM(Recordings.objects).alias("objects"),
+            )
+            .where(
+                (Recordings.camera == camera_name)
+                & (Recordings.end_time >= period_start)
+                & (Recordings.start_time <= period_end)
+            )
+            .group_by((Recordings.start_time + period_offset).cast("int") / 3600)
+            .order_by(Recordings.start_time.desc())
+            .namedtuples()
+        )
+
+        event_groups = (
+            Event.select(
+                fn.strftime(
+                    "%Y-%m-%d %H",
+                    fn.datetime(
+                        Event.start_time,
+                        "unixepoch",
+                        period_hour_modifier,
+                        period_minute_modifier,
+                    ),
+                ).alias("hour"),
+                fn.COUNT(Event.id).alias("count"),
+            )
+            .where(Event.camera == camera_name, Event.has_clip)
+            .where(
+                (Event.start_time >= period_start) & (Event.start_time <= period_end)
+            )
+            .group_by((Event.start_time + period_offset).cast("int") / 3600)
+            .namedtuples()
+        )
+
+        event_map = {g.hour: g.count for g in event_groups}
+
+        for recording_group in recording_groups:
+            parts = recording_group.hour.split()
+            hour = parts[1]
+            day = parts[0]
+            events_count = event_map.get(recording_group.hour, 0)
+            hour_data = {
+                "hour": hour,
+                "events": events_count,
+                "motion": recording_group.motion,
+                "objects": recording_group.objects,
+                "duration": round(recording_group.duration),
+            }
+            if day in days:
+                # merge counts if already present (edge-case at DST boundary)
+                days[day]["events"] += events_count or 0
+                days[day]["hours"].append(hour_data)
+            else:
+                days[day] = {
+                    "events": events_count or 0,
+                    "hours": [hour_data],
+                    "day": day,
+                }
+
+    return JSONResponse(content=list(days.values()))
+
+
+@router.get("/{camera_name}/recordings", dependencies=[Depends(require_camera_access)])
+async def recordings(
+    camera_name: str,
+    after: float = (datetime.now() - timedelta(hours=1)).timestamp(),
+    before: float = datetime.now().timestamp(),
+):
+    """Return specific camera recordings between the given 'after'/'end' times. If not provided the last hour will be used"""
+    recordings = (
+        Recordings.select(
+            Recordings.id,
+            Recordings.start_time,
+            Recordings.end_time,
+            Recordings.segment_size,
+            Recordings.motion,
+            Recordings.objects,
+            Recordings.duration,
+        )
+        .where(
+            Recordings.camera == camera_name,
+            Recordings.end_time >= after,
+            Recordings.start_time <= before,
+        )
+        .order_by(Recordings.start_time)
+        .dicts()
+        .iterator()
+    )
+
+    return JSONResponse(content=list(recordings))
+
+
+@router.get(
+    "/recordings/unavailable",
+    response_model=list[dict],
+    dependencies=[Depends(allow_any_authenticated())],
+)
+async def no_recordings(
+    request: Request,
+    params: MediaRecordingsAvailabilityQueryParams = Depends(),
+    allowed_cameras: List[str] = Depends(get_allowed_cameras_for_filter),
+):
+    """Get time ranges with no recordings."""
+    cameras = params.cameras
+    if cameras != "all":
+        requested = set(unquote(cameras).split(","))
+        filtered = requested.intersection(allowed_cameras)
+        if not filtered:
+            return JSONResponse(content=[])
+        cameras = ",".join(filtered)
+    else:
+        cameras = allowed_cameras
+
+    before = params.before or datetime.datetime.now().timestamp()
+    after = (
+        params.after
+        or (datetime.datetime.now() - datetime.timedelta(hours=1)).timestamp()
+    )
+    scale = params.scale
+
+    clauses = [(Recordings.end_time >= after) & (Recordings.start_time <= before)]
+    if cameras != "all":
+        camera_list = cameras.split(",")
+        clauses.append((Recordings.camera << camera_list))
+    else:
+        camera_list = allowed_cameras
+
+    # Get recording start times
+    data: list[Recordings] = (
+        Recordings.select(Recordings.start_time, Recordings.end_time)
+        .where(reduce(operator.and_, clauses))
+        .order_by(Recordings.start_time.asc())
+        .dicts()
+        .iterator()
+    )
+
+    # Convert recordings to list of (start, end) tuples
+    recordings = [(r["start_time"], r["end_time"]) for r in data]
+
+    # Iterate through time segments and check if each has any recording
+    no_recording_segments = []
+    current = after
+    current_gap_start = None
+
+    while current < before:
+        segment_end = min(current + scale, before)
+
+        # Check if this segment overlaps with any recording
+        has_recording = any(
+            rec_start < segment_end and rec_end > current
+            for rec_start, rec_end in recordings
+        )
+
+        if not has_recording:
+            # This segment has no recordings
+            if current_gap_start is None:
+                current_gap_start = current  # Start a new gap
+        else:
+            # This segment has recordings
+            if current_gap_start is not None:
+                # End the current gap and append it
+                no_recording_segments.append(
+                    {"start_time": int(current_gap_start), "end_time": int(current)}
+                )
+                current_gap_start = None
+
+        current = segment_end
+
+    # Append the last gap if it exists
+    if current_gap_start is not None:
+        no_recording_segments.append(
+            {"start_time": int(current_gap_start), "end_time": int(before)}
+        )
+
+    return JSONResponse(content=no_recording_segments)
+
+
 @router.get(
     "/{camera_name}/start/{start_ts}/end/{end_ts}/clip.mp4",
     dependencies=[Depends(require_camera_access)],
@@ -592,6 +917,33 @@ async def vod_ts(
         if recording.end_time > end_ts:
             duration -= int((recording.end_time - end_ts) * 1000)
 
+        # nginx-vod-module pushes clipFrom forward to the next keyframe,
+        # which can leave too few frames and produce an empty/unplayable
+        # segment. Snap clipFrom back to the preceding keyframe so the
+        # segment always starts with a decodable frame.
+        if "clipFrom" in clip:
+            keyframe_ms = get_keyframe_before(recording.path, clip["clipFrom"])
+            if keyframe_ms is not None:
+                gained = clip["clipFrom"] - keyframe_ms
+                clip["clipFrom"] = keyframe_ms
+                duration += gained
+                logger.debug(
+                    "VOD: snapped clipFrom to keyframe at %sms for %s, duration now %sms",
+                    keyframe_ms,
+                    recording.path,
+                    duration,
+                )
+            else:
+                # could not read keyframes, remove clipFrom to use full recording
+                logger.debug(
+                    "VOD: no keyframe info for %s, removing clipFrom to use full recording",
+                    recording.path,
+                )
+                del clip["clipFrom"]
+                duration = int(recording.duration * 1000)
+                if recording.end_time > end_ts:
+                    duration -= int((recording.end_time - end_ts) * 1000)
+
         if duration < min_duration_ms:
             # skip if the clip has no valid duration (too short to contain frames)
             logger.debug(
@@ -738,7 +1090,6 @@ async def event_snapshot(
 ):
     event_complete = False
     jpg_bytes = None
-    frame_time = 0
     try:
         event = Event.get(Event.id == event_id, Event.end_time != None)
         event_complete = True
@@ -763,7 +1114,7 @@ async def event_snapshot(
                 if event_id in camera_state.tracked_objects:
                     tracked_obj = camera_state.tracked_objects.get(event_id)
                     if tracked_obj is not None:
-                        jpg_bytes, frame_time = tracked_obj.get_img_bytes(
+                        jpg_bytes = tracked_obj.get_img_bytes(
                             ext="jpg",
                             timestamp=params.timestamp,
                             bounding_box=params.bbox,
@@ -792,7 +1143,6 @@ async def event_snapshot(
     headers = {
         "Content-Type": "image/jpeg",
         "Cache-Control": "private, max-age=31536000" if event_complete else "no-store",
-        "X-Frame-Time": str(frame_time),
     }
 
     if params.download:
@@ -807,7 +1157,6 @@ async def event_snapshot(
 
 @router.get(
     "/events/{event_id}/thumbnail.{extension}",
-    dependencies=[Depends(require_camera_access)],
 )
 async def event_thumbnail(
     request: Request,
@@ -851,11 +1200,12 @@ async def event_thumbnail(
             status_code=404,
         )
 
+    img_as_np = np.frombuffer(thumbnail_bytes, dtype=np.uint8)
+    img = cv2.imdecode(img_as_np, flags=1)
+
     # android notifications prefer a 2:1 ratio
     if format == "android":
-        img_as_np = np.frombuffer(thumbnail_bytes, dtype=np.uint8)
-        img = cv2.imdecode(img_as_np, flags=1)
-        thumbnail = cv2.copyMakeBorder(
+        img = cv2.copyMakeBorder(
             img,
             0,
             0,
@@ -865,20 +1215,20 @@ async def event_thumbnail(
             (0, 0, 0),
         )
 
-        quality_params = None
-        if extension in (Extension.jpg, Extension.jpeg):
-            quality_params = [int(cv2.IMWRITE_JPEG_QUALITY), 70]
-        elif extension == Extension.webp:
-            quality_params = [int(cv2.IMWRITE_WEBP_QUALITY), 60]
+    quality_params = None
+    if extension in (Extension.jpg, Extension.jpeg):
+        quality_params = [int(cv2.IMWRITE_JPEG_QUALITY), 70]
+    elif extension == Extension.webp:
+        quality_params = [int(cv2.IMWRITE_WEBP_QUALITY), 60]
 
-        _, img = cv2.imencode(f".{extension.value}", thumbnail, quality_params)
-        thumbnail_bytes = img.tobytes()
+    _, encoded = cv2.imencode(f".{extension.value}", img, quality_params)
+    thumbnail_bytes = encoded.tobytes()
 
     return Response(
         thumbnail_bytes,
         media_type=extension.get_mime_type(),
         headers={
-            "Cache-Control": f"private, max-age={max_cache_age}"
+            "Cache-Control": f"private, max-age={_resolve_cache_age(max_cache_age)}"
             if event_complete
             else "no-store",
         },
@@ -1006,31 +1356,14 @@ def grid_snapshot(
         )
 
 
-@router.delete(
-    "/{camera_name}/region_grid", dependencies=[Depends(require_role("admin"))]
-)
-def clear_region_grid(request: Request, camera_name: str):
-    """Clear the region grid for a camera."""
-    if camera_name not in request.app.frigate_config.cameras:
-        return JSONResponse(
-            content={"success": False, "message": "Camera not found"},
-            status_code=404,
-        )
-
-    Regions.delete().where(Regions.camera == camera_name).execute()
-    return JSONResponse(
-        content={"success": True, "message": "Region grid cleared"},
-    )
-
-
 @router.get(
     "/events/{event_id}/snapshot-clean.webp",
-    dependencies=[Depends(require_camera_access)],
 )
-def event_snapshot_clean(request: Request, event_id: str, download: bool = False):
+async def event_snapshot_clean(request: Request, event_id: str, download: bool = False):
     webp_bytes = None
     try:
         event = Event.get(Event.id == event_id)
+        await require_camera_access(event.camera, request=request)
         snapshot_config = request.app.frigate_config.cameras[event.camera].snapshots
         if not (snapshot_config.enabled and event.has_snapshot):
             return JSONResponse(
@@ -1151,7 +1484,7 @@ def event_snapshot_clean(request: Request, event_id: str, download: bool = False
 
 
 @router.get(
-    "/events/{event_id}/clip.mp4", dependencies=[Depends(require_camera_access)]
+    "/events/{event_id}/clip.mp4",
 )
 async def event_clip(
     request: Request,
@@ -1165,6 +1498,8 @@ async def event_clip(
             content={"success": False, "message": "Event not found"}, status_code=404
         )
 
+    await require_camera_access(event.camera, request=request)
+
     if not event.has_clip:
         return JSONResponse(
             content={"success": False, "message": "Clip not available"}, status_code=404
@@ -1181,9 +1516,9 @@ async def event_clip(
 
 
 @router.get(
-    "/events/{event_id}/preview.gif", dependencies=[Depends(require_camera_access)]
+    "/events/{event_id}/preview.gif",
 )
-def event_preview(request: Request, event_id: str):
+async def event_preview(request: Request, event_id: str):
     try:
         event: Event = Event.get(Event.id == event_id)
     except DoesNotExist:
@@ -1191,18 +1526,20 @@ def event_preview(request: Request, event_id: str):
             content={"success": False, "message": "Event not found"}, status_code=404
         )
 
+    await require_camera_access(event.camera, request=request)
+
     start_ts = event.start_time
     end_ts = start_ts + (
         min(event.end_time - event.start_time, 20) if event.end_time else 20
     )
-    return preview_gif(request, event.camera, start_ts, end_ts)
+    return await preview_gif(request, event.camera, start_ts, end_ts)
 
 
 @router.get(
     "/{camera_name}/start/{start_ts}/end/{end_ts}/preview.gif",
     dependencies=[Depends(require_camera_access)],
 )
-def preview_gif(
+async def preview_gif(
     request: Request,
     camera_name: str,
     start_ts: float,
@@ -1213,25 +1550,25 @@ def preview_gif(
 ):
     if datetime.fromtimestamp(start_ts) < datetime.now().replace(minute=0, second=0):
         # has preview mp4
-        preview: Previews = (
-            Previews.select(
-                Previews.camera,
-                Previews.path,
-                Previews.duration,
-                Previews.start_time,
-                Previews.end_time,
+        try:
+            preview: Previews = (
+                Previews.select(
+                    Previews.camera,
+                    Previews.path,
+                    Previews.duration,
+                    Previews.start_time,
+                    Previews.end_time,
+                )
+                .where(
+                    Previews.start_time.between(start_ts, end_ts)
+                    | Previews.end_time.between(start_ts, end_ts)
+                    | ((start_ts > Previews.start_time) & (end_ts < Previews.end_time))
+                )
+                .where(Previews.camera == camera_name)
+                .limit(1)
+                .get()
             )
-            .where(
-                Previews.start_time.between(start_ts, end_ts)
-                | Previews.end_time.between(start_ts, end_ts)
-                | ((start_ts > Previews.start_time) & (end_ts < Previews.end_time))
-            )
-            .where(Previews.camera == camera_name)
-            .limit(1)
-            .get()
-        )
-
-        if not preview:
+        except DoesNotExist:
             return JSONResponse(
                 content={"success": False, "message": "Preview not found"},
                 status_code=404,
@@ -1265,7 +1602,8 @@ def preview_gif(
             "-",
         ]
 
-        process = sp.run(
+        process = await asyncio.to_thread(
+            sp.run,
             ffmpeg_cmd,
             capture_output=True,
         )
@@ -1281,13 +1619,6 @@ def preview_gif(
     else:
         # need to generate from existing images
         preview_dir = os.path.join(CACHE_DIR, "preview_frames")
-
-        if not os.path.isdir(preview_dir):
-            return JSONResponse(
-                content={"success": False, "message": "Preview not found"},
-                status_code=404,
-            )
-
         file_start = f"preview_{camera_name}"
         start_file = f"{file_start}-{start_ts}.{PREVIEW_FRAME_TYPE}"
         end_file = f"{file_start}-{end_ts}.{PREVIEW_FRAME_TYPE}"
@@ -1339,7 +1670,8 @@ def preview_gif(
             "-",
         ]
 
-        process = sp.run(
+        process = await asyncio.to_thread(
+            sp.run,
             ffmpeg_cmd,
             input=str.encode("\n".join(selected_previews)),
             capture_output=True,
@@ -1358,7 +1690,7 @@ def preview_gif(
         gif_bytes,
         media_type="image/gif",
         headers={
-            "Cache-Control": f"private, max-age={max_cache_age}",
+            "Cache-Control": f"private, max-age={_resolve_cache_age(max_cache_age)}",
             "Content-Type": "image/gif",
         },
     )
@@ -1368,7 +1700,7 @@ def preview_gif(
     "/{camera_name}/start/{start_ts}/end/{end_ts}/preview.mp4",
     dependencies=[Depends(require_camera_access)],
 )
-def preview_mp4(
+async def preview_mp4(
     request: Request,
     camera_name: str,
     start_ts: float,
@@ -1448,7 +1780,8 @@ def preview_mp4(
             path,
         ]
 
-        process = sp.run(
+        process = await asyncio.to_thread(
+            sp.run,
             ffmpeg_cmd,
             capture_output=True,
         )
@@ -1463,13 +1796,6 @@ def preview_mp4(
     else:
         # need to generate from existing images
         preview_dir = os.path.join(CACHE_DIR, "preview_frames")
-
-        if not os.path.isdir(preview_dir):
-            return JSONResponse(
-                content={"success": False, "message": "Preview not found"},
-                status_code=404,
-            )
-
         file_start = f"preview_{camera_name}"
         start_file = f"{file_start}-{start_ts}.{PREVIEW_FRAME_TYPE}"
         end_file = f"{file_start}-{end_ts}.{PREVIEW_FRAME_TYPE}"
@@ -1519,7 +1845,8 @@ def preview_mp4(
             path,
         ]
 
-        process = sp.run(
+        process = await asyncio.to_thread(
+            sp.run,
             ffmpeg_cmd,
             input=str.encode("\n".join(selected_previews)),
             capture_output=True,
@@ -1534,7 +1861,7 @@ def preview_mp4(
 
     headers = {
         "Content-Description": "File Transfer",
-        "Cache-Control": f"private, max-age={max_cache_age}",
+        "Cache-Control": f"private, max-age={_resolve_cache_age(max_cache_age)}",
         "Content-Type": "video/mp4",
         "Content-Length": str(os.path.getsize(path)),
         # nginx: https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_ignore_headers
@@ -1549,8 +1876,8 @@ def preview_mp4(
     )
 
 
-@router.get("/review/{event_id}/preview", dependencies=[Depends(require_camera_access)])
-def review_preview(
+@router.get("/review/{event_id}/preview")
+async def review_preview(
     request: Request,
     event_id: str,
     format: str = Query(default="gif", enum=["gif", "mp4"]),
@@ -1563,6 +1890,8 @@ def review_preview(
             status_code=404,
         )
 
+    await require_camera_access(review.camera, request=request)
+
     padding = 8
     start_ts = review.start_time - padding
     end_ts = (
@@ -1570,18 +1899,20 @@ def review_preview(
     )
 
     if format == "gif":
-        return preview_gif(request, review.camera, start_ts, end_ts)
+        return await preview_gif(request, review.camera, start_ts, end_ts)
     else:
-        return preview_mp4(request, review.camera, start_ts, end_ts)
+        return await preview_mp4(request, review.camera, start_ts, end_ts)
 
 
 @router.get(
-    "/preview/{file_name}/thumbnail.jpg", dependencies=[Depends(require_camera_access)]
+    "/preview/{file_name}/thumbnail.jpg",
+    dependencies=[Depends(allow_any_authenticated())],
 )
 @router.get(
-    "/preview/{file_name}/thumbnail.webp", dependencies=[Depends(require_camera_access)]
+    "/preview/{file_name}/thumbnail.webp",
+    dependencies=[Depends(allow_any_authenticated())],
 )
-def preview_thumbnail(file_name: str):
+async def preview_thumbnail(request: Request, file_name: str):
     """Get a thumbnail from the cached preview frames."""
     if len(file_name) > 1000:
         return JSONResponse(
@@ -1591,6 +1922,17 @@ def preview_thumbnail(file_name: str):
             status_code=403,
         )
 
+    # Extract camera name from preview filename (format: preview_{camera}-{timestamp}.ext)
+    if not file_name.startswith("preview_"):
+        return JSONResponse(
+            content={"success": False, "message": "Invalid preview filename"},
+            status_code=400,
+        )
+    # Use rsplit to handle camera names containing dashes (e.g. front-door)
+    name_part = file_name[len("preview_") :].rsplit(".", 1)[0]  # strip extension
+    camera_name = name_part.rsplit("-", 1)[0]  # split off timestamp
+    await require_camera_access(camera_name, request=request)
+
     safe_file_name_current = sanitize_filename(file_name)
     preview_dir = os.path.join(CACHE_DIR, "preview_frames")
 

frigate/api/motion_search.py

@@ -1,292 +0,0 @@
-"""Motion search API for detecting changes within a region of interest."""
-
-import logging
-from typing import Any, List, Optional
-
-from fastapi import APIRouter, Depends, Request
-from fastapi.responses import JSONResponse
-from pydantic import BaseModel, Field
-
-from frigate.api.auth import require_camera_access
-from frigate.api.defs.tags import Tags
-from frigate.jobs.motion_search import (
-    cancel_motion_search_job,
-    get_motion_search_job,
-    start_motion_search_job,
-)
-from frigate.types import JobStatusTypesEnum
-
-logger = logging.getLogger(__name__)
-
-router = APIRouter(tags=[Tags.motion_search])
-
-
-class MotionSearchRequest(BaseModel):
-    """Request body for motion search."""
-
-    start_time: float = Field(description="Start timestamp for the search range")
-    end_time: float = Field(description="End timestamp for the search range")
-    polygon_points: List[List[float]] = Field(
-        description="List of [x, y] normalized coordinates (0-1) defining the ROI polygon"
-    )
-    threshold: int = Field(
-        default=30,
-        ge=1,
-        le=255,
-        description="Pixel difference threshold (1-255)",
-    )
-    min_area: float = Field(
-        default=5.0,
-        ge=0.1,
-        le=100.0,
-        description="Minimum change area as a percentage of the ROI",
-    )
-    frame_skip: int = Field(
-        default=5,
-        ge=1,
-        le=30,
-        description="Process every Nth frame (1=all frames, 5=every 5th frame)",
-    )
-    parallel: bool = Field(
-        default=False,
-        description="Enable parallel scanning across segments",
-    )
-    max_results: int = Field(
-        default=25,
-        ge=1,
-        le=200,
-        description="Maximum number of search results to return",
-    )
-
-
-class MotionSearchResult(BaseModel):
-    """A single search result with timestamp and change info."""
-
-    timestamp: float = Field(description="Timestamp where change was detected")
-    change_percentage: float = Field(description="Percentage of ROI area that changed")
-
-
-class MotionSearchMetricsResponse(BaseModel):
-    """Metrics collected during motion search execution."""
-
-    segments_scanned: int = 0
-    segments_processed: int = 0
-    metadata_inactive_segments: int = 0
-    heatmap_roi_skip_segments: int = 0
-    fallback_full_range_segments: int = 0
-    frames_decoded: int = 0
-    wall_time_seconds: float = 0.0
-    segments_with_errors: int = 0
-
-
-class MotionSearchStartResponse(BaseModel):
-    """Response when motion search job starts."""
-
-    success: bool
-    message: str
-    job_id: str
-
-
-class MotionSearchStatusResponse(BaseModel):
-    """Response containing job status and results."""
-
-    success: bool
-    message: str
-    status: str  # "queued", "running", "success", "failed", or "cancelled"
-    results: Optional[List[MotionSearchResult]] = None
-    total_frames_processed: Optional[int] = None
-    error_message: Optional[str] = None
-    metrics: Optional[MotionSearchMetricsResponse] = None
-
-
-@router.post(
-    "/{camera_name}/search/motion",
-    response_model=MotionSearchStartResponse,
-    dependencies=[Depends(require_camera_access)],
-    summary="Start motion search job",
-    description="""Starts an asynchronous search for significant motion changes within
-    a user-defined Region of Interest (ROI) over a specified time range. Returns a job_id
-    that can be used to poll for results.""",
-)
-async def start_motion_search(
-    request: Request,
-    camera_name: str,
-    body: MotionSearchRequest,
-):
-    """Start an async motion search job."""
-    config = request.app.frigate_config
-
-    if camera_name not in config.cameras:
-        return JSONResponse(
-            content={"success": False, "message": f"Camera {camera_name} not found"},
-            status_code=404,
-        )
-
-    # Validate polygon has at least 3 points
-    if len(body.polygon_points) < 3:
-        return JSONResponse(
-            content={
-                "success": False,
-                "message": "Polygon must have at least 3 points",
-            },
-            status_code=400,
-        )
-
-    # Validate time range
-    if body.start_time >= body.end_time:
-        return JSONResponse(
-            content={
-                "success": False,
-                "message": "Start time must be before end time",
-            },
-            status_code=400,
-        )
-
-    # Start the job using the jobs module
-    job_id = start_motion_search_job(
-        config=config,
-        camera_name=camera_name,
-        start_time=body.start_time,
-        end_time=body.end_time,
-        polygon_points=body.polygon_points,
-        threshold=body.threshold,
-        min_area=body.min_area,
-        frame_skip=body.frame_skip,
-        parallel=body.parallel,
-        max_results=body.max_results,
-    )
-
-    return JSONResponse(
-        content={
-            "success": True,
-            "message": "Search job started",
-            "job_id": job_id,
-        }
-    )
-
-
-@router.get(
-    "/{camera_name}/search/motion/{job_id}",
-    response_model=MotionSearchStatusResponse,
-    dependencies=[Depends(require_camera_access)],
-    summary="Get motion search job status",
-    description="Returns the status and results (if complete) of a motion search job.",
-)
-async def get_motion_search_status_endpoint(
-    request: Request,
-    camera_name: str,
-    job_id: str,
-):
-    """Get the status of a motion search job."""
-    config = request.app.frigate_config
-
-    if camera_name not in config.cameras:
-        return JSONResponse(
-            content={"success": False, "message": f"Camera {camera_name} not found"},
-            status_code=404,
-        )
-
-    job = get_motion_search_job(job_id)
-    if not job:
-        return JSONResponse(
-            content={"success": False, "message": "Job not found"},
-            status_code=404,
-        )
-
-    api_status = job.status
-
-    # Build response content
-    response_content: dict[str, Any] = {
-        "success": api_status != JobStatusTypesEnum.failed,
-        "status": api_status,
-    }
-
-    if api_status == JobStatusTypesEnum.failed:
-        response_content["message"] = job.error_message or "Search failed"
-        response_content["error_message"] = job.error_message
-    elif api_status == JobStatusTypesEnum.cancelled:
-        response_content["message"] = "Search cancelled"
-        response_content["total_frames_processed"] = job.total_frames_processed
-    elif api_status == JobStatusTypesEnum.success:
-        response_content["message"] = "Search complete"
-        if job.results:
-            response_content["results"] = job.results.get("results", [])
-            response_content["total_frames_processed"] = job.results.get(
-                "total_frames_processed", job.total_frames_processed
-            )
-        else:
-            response_content["results"] = []
-            response_content["total_frames_processed"] = job.total_frames_processed
-    else:
-        response_content["message"] = "Job processing"
-        response_content["total_frames_processed"] = job.total_frames_processed
-        # Include partial results if available (streaming)
-        if job.results:
-            response_content["results"] = job.results.get("results", [])
-            response_content["total_frames_processed"] = job.results.get(
-                "total_frames_processed", job.total_frames_processed
-            )
-
-    # Include metrics if available
-    if job.metrics:
-        response_content["metrics"] = job.metrics.to_dict()
-
-    return JSONResponse(content=response_content)
-
-
-@router.post(
-    "/{camera_name}/search/motion/{job_id}/cancel",
-    dependencies=[Depends(require_camera_access)],
-    summary="Cancel motion search job",
-    description="Cancels an active motion search job if it is still processing.",
-)
-async def cancel_motion_search_endpoint(
-    request: Request,
-    camera_name: str,
-    job_id: str,
-):
-    """Cancel an active motion search job."""
-    config = request.app.frigate_config
-
-    if camera_name not in config.cameras:
-        return JSONResponse(
-            content={"success": False, "message": f"Camera {camera_name} not found"},
-            status_code=404,
-        )
-
-    job = get_motion_search_job(job_id)
-    if not job:
-        return JSONResponse(
-            content={"success": False, "message": "Job not found"},
-            status_code=404,
-        )
-
-    # Check if already finished
-    api_status = job.status
-    if api_status not in (JobStatusTypesEnum.queued, JobStatusTypesEnum.running):
-        return JSONResponse(
-            content={
-                "success": True,
-                "message": "Job already finished",
-                "status": api_status,
-            }
-        )
-
-    # Request cancellation
-    cancelled = cancel_motion_search_job(job_id)
-    if cancelled:
-        return JSONResponse(
-            content={
-                "success": True,
-                "message": "Search cancelled",
-                "status": "cancelled",
-            }
-        )
-
-    return JSONResponse(
-        content={
-            "success": False,
-            "message": "Failed to cancel job",
-        },
-        status_code=500,
-    )

frigate/api/record.py

@@ -1,480 +0,0 @@
-"""Recording APIs."""
-
-import logging
-from datetime import datetime, timedelta
-from functools import reduce
-from pathlib import Path
-from typing import List
-from urllib.parse import unquote
-
-from fastapi import APIRouter, Depends, Request
-from fastapi import Path as PathParam
-from fastapi.responses import JSONResponse
-from peewee import fn, operator
-
-from frigate.api.auth import (
-    allow_any_authenticated,
-    get_allowed_cameras_for_filter,
-    require_camera_access,
-    require_role,
-)
-from frigate.api.defs.query.recordings_query_parameters import (
-    MediaRecordingsAvailabilityQueryParams,
-    MediaRecordingsSummaryQueryParams,
-    RecordingsDeleteQueryParams,
-)
-from frigate.api.defs.response.generic_response import GenericResponse
-from frigate.api.defs.tags import Tags
-from frigate.const import RECORD_DIR
-from frigate.models import Event, Recordings
-from frigate.util.time import get_dst_transitions
-
-logger = logging.getLogger(__name__)
-
-router = APIRouter(tags=[Tags.recordings])
-
-
-@router.get("/recordings/storage", dependencies=[Depends(allow_any_authenticated())])
-def get_recordings_storage_usage(request: Request):
-    recording_stats = request.app.stats_emitter.get_latest_stats()["service"][
-        "storage"
-    ][RECORD_DIR]
-
-    if not recording_stats:
-        return JSONResponse({})
-
-    total_mb = recording_stats["total"]
-
-    camera_usages: dict[str, dict] = (
-        request.app.storage_maintainer.calculate_camera_usages()
-    )
-
-    for camera_name in camera_usages.keys():
-        if camera_usages.get(camera_name, {}).get("usage"):
-            camera_usages[camera_name]["usage_percent"] = (
-                camera_usages.get(camera_name, {}).get("usage", 0) / total_mb
-            ) * 100
-
-    return JSONResponse(content=camera_usages)
-
-
-@router.get("/recordings/summary", dependencies=[Depends(allow_any_authenticated())])
-def all_recordings_summary(
-    request: Request,
-    params: MediaRecordingsSummaryQueryParams = Depends(),
-    allowed_cameras: List[str] = Depends(get_allowed_cameras_for_filter),
-):
-    """Returns true/false by day indicating if recordings exist"""
-
-    cameras = params.cameras
-    if cameras != "all":
-        requested = set(unquote(cameras).split(","))
-        filtered = requested.intersection(allowed_cameras)
-        if not filtered:
-            return JSONResponse(content={})
-        camera_list = list(filtered)
-    else:
-        camera_list = allowed_cameras
-
-    time_range_query = (
-        Recordings.select(
-            fn.MIN(Recordings.start_time).alias("min_time"),
-            fn.MAX(Recordings.start_time).alias("max_time"),
-        )
-        .where(Recordings.camera << camera_list)
-        .dicts()
-        .get()
-    )
-
-    min_time = time_range_query.get("min_time")
-    max_time = time_range_query.get("max_time")
-
-    if min_time is None or max_time is None:
-        return JSONResponse(content={})
-
-    dst_periods = get_dst_transitions(params.timezone, min_time, max_time)
-
-    days: dict[str, bool] = {}
-
-    for period_start, period_end, period_offset in dst_periods:
-        hours_offset = int(period_offset / 60 / 60)
-        minutes_offset = int(period_offset / 60 - hours_offset * 60)
-        period_hour_modifier = f"{hours_offset} hour"
-        period_minute_modifier = f"{minutes_offset} minute"
-
-        period_query = (
-            Recordings.select(
-                fn.strftime(
-                    "%Y-%m-%d",
-                    fn.datetime(
-                        Recordings.start_time,
-                        "unixepoch",
-                        period_hour_modifier,
-                        period_minute_modifier,
-                    ),
-                ).alias("day")
-            )
-            .where(
-                (Recordings.camera << camera_list)
-                & (Recordings.end_time >= period_start)
-                & (Recordings.start_time <= period_end)
-            )
-            .group_by(
-                fn.strftime(
-                    "%Y-%m-%d",
-                    fn.datetime(
-                        Recordings.start_time,
-                        "unixepoch",
-                        period_hour_modifier,
-                        period_minute_modifier,
-                    ),
-                )
-            )
-            .order_by(Recordings.start_time.desc())
-            .namedtuples()
-        )
-
-        for g in period_query:
-            days[g.day] = True
-
-    return JSONResponse(content=dict(sorted(days.items())))
-
-
-@router.get(
-    "/{camera_name}/recordings/summary", dependencies=[Depends(require_camera_access)]
-)
-async def recordings_summary(camera_name: str, timezone: str = "utc"):
-    """Returns hourly summary for recordings of given camera"""
-
-    time_range_query = (
-        Recordings.select(
-            fn.MIN(Recordings.start_time).alias("min_time"),
-            fn.MAX(Recordings.start_time).alias("max_time"),
-        )
-        .where(Recordings.camera == camera_name)
-        .dicts()
-        .get()
-    )
-
-    min_time = time_range_query.get("min_time")
-    max_time = time_range_query.get("max_time")
-
-    days: dict[str, dict] = {}
-
-    if min_time is None or max_time is None:
-        return JSONResponse(content=list(days.values()))
-
-    dst_periods = get_dst_transitions(timezone, min_time, max_time)
-
-    for period_start, period_end, period_offset in dst_periods:
-        hours_offset = int(period_offset / 60 / 60)
-        minutes_offset = int(period_offset / 60 - hours_offset * 60)
-        period_hour_modifier = f"{hours_offset} hour"
-        period_minute_modifier = f"{minutes_offset} minute"
-
-        recording_groups = (
-            Recordings.select(
-                fn.strftime(
-                    "%Y-%m-%d %H",
-                    fn.datetime(
-                        Recordings.start_time,
-                        "unixepoch",
-                        period_hour_modifier,
-                        period_minute_modifier,
-                    ),
-                ).alias("hour"),
-                fn.SUM(Recordings.duration).alias("duration"),
-                fn.SUM(Recordings.motion).alias("motion"),
-                fn.SUM(Recordings.objects).alias("objects"),
-            )
-            .where(
-                (Recordings.camera == camera_name)
-                & (Recordings.end_time >= period_start)
-                & (Recordings.start_time <= period_end)
-            )
-            .group_by((Recordings.start_time + period_offset).cast("int") / 3600)
-            .order_by(Recordings.start_time.desc())
-            .namedtuples()
-        )
-
-        event_groups = (
-            Event.select(
-                fn.strftime(
-                    "%Y-%m-%d %H",
-                    fn.datetime(
-                        Event.start_time,
-                        "unixepoch",
-                        period_hour_modifier,
-                        period_minute_modifier,
-                    ),
-                ).alias("hour"),
-                fn.COUNT(Event.id).alias("count"),
-            )
-            .where(Event.camera == camera_name, Event.has_clip)
-            .where(
-                (Event.start_time >= period_start) & (Event.start_time <= period_end)
-            )
-            .group_by((Event.start_time + period_offset).cast("int") / 3600)
-            .namedtuples()
-        )
-
-        event_map = {g.hour: g.count for g in event_groups}
-
-        for recording_group in recording_groups:
-            parts = recording_group.hour.split()
-            hour = parts[1]
-            day = parts[0]
-            events_count = event_map.get(recording_group.hour, 0)
-            hour_data = {
-                "hour": hour,
-                "events": events_count,
-                "motion": recording_group.motion,
-                "objects": recording_group.objects,
-                "duration": round(recording_group.duration),
-            }
-            if day in days:
-                # merge counts if already present (edge-case at DST boundary)
-                days[day]["events"] += events_count or 0
-                days[day]["hours"].append(hour_data)
-            else:
-                days[day] = {
-                    "events": events_count or 0,
-                    "hours": [hour_data],
-                    "day": day,
-                }
-
-    return JSONResponse(content=list(days.values()))
-
-
-@router.get("/{camera_name}/recordings", dependencies=[Depends(require_camera_access)])
-async def recordings(
-    camera_name: str,
-    after: float = (datetime.now() - timedelta(hours=1)).timestamp(),
-    before: float = datetime.now().timestamp(),
-):
-    """Return specific camera recordings between the given 'after'/'end' times. If not provided the last hour will be used"""
-    recordings = (
-        Recordings.select(
-            Recordings.id,
-            Recordings.start_time,
-            Recordings.end_time,
-            Recordings.segment_size,
-            Recordings.motion,
-            Recordings.objects,
-            Recordings.motion_heatmap,
-            Recordings.duration,
-        )
-        .where(
-            Recordings.camera == camera_name,
-            Recordings.end_time >= after,
-            Recordings.start_time <= before,
-        )
-        .order_by(Recordings.start_time)
-        .dicts()
-        .iterator()
-    )
-
-    return JSONResponse(content=list(recordings))
-
-
-@router.get(
-    "/recordings/unavailable",
-    response_model=list[dict],
-    dependencies=[Depends(allow_any_authenticated())],
-)
-async def no_recordings(
-    request: Request,
-    params: MediaRecordingsAvailabilityQueryParams = Depends(),
-    allowed_cameras: List[str] = Depends(get_allowed_cameras_for_filter),
-):
-    """Get time ranges with no recordings."""
-    cameras = params.cameras
-    if cameras != "all":
-        requested = set(unquote(cameras).split(","))
-        filtered = requested.intersection(allowed_cameras)
-        if not filtered:
-            return JSONResponse(content=[])
-        cameras = ",".join(filtered)
-    else:
-        cameras = allowed_cameras
-
-    before = params.before or datetime.datetime.now().timestamp()
-    after = (
-        params.after
-        or (datetime.datetime.now() - datetime.timedelta(hours=1)).timestamp()
-    )
-    scale = params.scale
-
-    clauses = [(Recordings.end_time >= after) & (Recordings.start_time <= before)]
-    if cameras != "all":
-        camera_list = cameras.split(",")
-        clauses.append((Recordings.camera << camera_list))
-    else:
-        camera_list = allowed_cameras
-
-    # Get recording start times
-    data: list[Recordings] = (
-        Recordings.select(Recordings.start_time, Recordings.end_time)
-        .where(reduce(operator.and_, clauses))
-        .order_by(Recordings.start_time.asc())
-        .dicts()
-        .iterator()
-    )
-
-    # Convert recordings to list of (start, end) tuples
-    recordings = [(r["start_time"], r["end_time"]) for r in data]
-
-    # Iterate through time segments and check if each has any recording
-    no_recording_segments = []
-    current = after
-    current_gap_start = None
-
-    while current < before:
-        segment_end = min(current + scale, before)
-
-        # Check if this segment overlaps with any recording
-        has_recording = any(
-            rec_start < segment_end and rec_end > current
-            for rec_start, rec_end in recordings
-        )
-
-        if not has_recording:
-            # This segment has no recordings
-            if current_gap_start is None:
-                current_gap_start = current  # Start a new gap
-        else:
-            # This segment has recordings
-            if current_gap_start is not None:
-                # End the current gap and append it
-                no_recording_segments.append(
-                    {"start_time": int(current_gap_start), "end_time": int(current)}
-                )
-                current_gap_start = None
-
-        current = segment_end
-
-    # Append the last gap if it exists
-    if current_gap_start is not None:
-        no_recording_segments.append(
-            {"start_time": int(current_gap_start), "end_time": int(before)}
-        )
-
-    return JSONResponse(content=no_recording_segments)
-
-
-@router.delete(
-    "/recordings/start/{start}/end/{end}",
-    response_model=GenericResponse,
-    dependencies=[Depends(require_role(["admin"]))],
-    summary="Delete recordings",
-    description="""Deletes recordings within the specified time range.
-    Recordings can be filtered by cameras and kept based on motion, objects, or audio attributes.
-    """,
-)
-async def delete_recordings(
-    start: float = PathParam(..., description="Start timestamp (unix)"),
-    end: float = PathParam(..., description="End timestamp (unix)"),
-    params: RecordingsDeleteQueryParams = Depends(),
-    allowed_cameras: List[str] = Depends(get_allowed_cameras_for_filter),
-):
-    """Delete recordings in the specified time range."""
-    if start >= end:
-        return JSONResponse(
-            content={
-                "success": False,
-                "message": "Start time must be less than end time.",
-            },
-            status_code=400,
-        )
-
-    cameras = params.cameras
-
-    if cameras != "all":
-        requested = set(cameras.split(","))
-        filtered = requested.intersection(allowed_cameras)
-
-        if not filtered:
-            return JSONResponse(
-                content={
-                    "success": False,
-                    "message": "No valid cameras found in the request.",
-                },
-                status_code=400,
-            )
-
-        camera_list = list(filtered)
-    else:
-        camera_list = allowed_cameras
-
-    # Parse keep parameter
-    keep_set = set()
-
-    if params.keep:
-        keep_set = set(params.keep.split(","))
-
-    # Build query to find overlapping recordings
-    clauses = [
-        (
-            Recordings.start_time.between(start, end)
-            | Recordings.end_time.between(start, end)
-            | ((start > Recordings.start_time) & (end < Recordings.end_time))
-        ),
-        (Recordings.camera << camera_list),
-    ]
-
-    keep_clauses = []
-
-    if "motion" in keep_set:
-        keep_clauses.append(Recordings.motion.is_null(False) & (Recordings.motion > 0))
-
-    if "object" in keep_set:
-        keep_clauses.append(
-            Recordings.objects.is_null(False) & (Recordings.objects > 0)
-        )
-
-    if "audio" in keep_set:
-        keep_clauses.append(Recordings.dBFS.is_null(False))
-
-    if keep_clauses:
-        keep_condition = reduce(operator.or_, keep_clauses)
-        clauses.append(~keep_condition)
-
-    recordings_to_delete = (
-        Recordings.select(Recordings.id, Recordings.path)
-        .where(reduce(operator.and_, clauses))
-        .dicts()
-        .iterator()
-    )
-
-    recording_ids = []
-    deleted_count = 0
-    error_count = 0
-
-    for recording in recordings_to_delete:
-        recording_ids.append(recording["id"])
-
-        try:
-            Path(recording["path"]).unlink(missing_ok=True)
-            deleted_count += 1
-        except Exception as e:
-            logger.error(f"Failed to delete recording file {recording['path']}: {e}")
-            error_count += 1
-
-    if recording_ids:
-        max_deletes = 100000
-        recording_ids_list = list(recording_ids)
-
-        for i in range(0, len(recording_ids_list), max_deletes):
-            Recordings.delete().where(
-                Recordings.id << recording_ids_list[i : i + max_deletes]
-            ).execute()
-
-    message = f"Successfully deleted {deleted_count} recording(s)."
-
-    if error_count > 0:
-        message += f" {error_count} file deletion error(s) occurred."
-
-    return JSONResponse(
-        content={"success": True, "message": message},
-        status_code=200,
-    )

frigate/api/review.py

@@ -33,6 +33,7 @@ from frigate.api.defs.response.review_response import (
     ReviewSummaryResponse,
 )
 from frigate.api.defs.tags import Tags
+from frigate.config import FrigateConfig
 from frigate.embeddings import EmbeddingsContext
 from frigate.models import Recordings, ReviewSegment, UserReviewStatus
 from frigate.review.types import SeverityEnum
@@ -746,7 +747,9 @@ async def set_not_reviewed(
     description="Use GenAI to summarize review items over a period of time.",
 )
 def generate_review_summary(request: Request, start_ts: float, end_ts: float):
-    if not request.app.genai_manager.vision_client:
+    config: FrigateConfig = request.app.frigate_config
+
+    if not config.genai.provider:
         return JSONResponse(
             content=(
                 {

frigate/app.py

@@ -30,7 +30,6 @@ from frigate.comms.ws import WebSocketClient
 from frigate.comms.zmq_proxy import ZmqProxy
 from frigate.config.camera.updater import CameraConfigUpdatePublisher
 from frigate.config.config import FrigateConfig
-from frigate.config.profile_manager import ProfileManager
 from frigate.const import (
     CACHE_DIR,
     CLIPS_DIR,
@@ -44,15 +43,10 @@ from frigate.const import (
 )
 from frigate.data_processing.types import DataProcessorMetrics
 from frigate.db.sqlitevecq import SqliteVecQueueDatabase
-from frigate.debug_replay import (
-    DebugReplayManager,
-    cleanup_replay_cameras,
-)
 from frigate.embeddings import EmbeddingProcess, EmbeddingsContext
 from frigate.events.audio import AudioProcessor
 from frigate.events.cleanup import EventCleanup
 from frigate.events.maintainer import EventProcessor
-from frigate.jobs.motion_search import stop_all_motion_search_jobs
 from frigate.log import _stop_logging
 from frigate.models import (
     Event,
@@ -119,7 +113,6 @@ class FrigateApp:
         self.ptz_metrics: dict[str, PTZMetrics] = {}
         self.processes: dict[str, int] = {}
         self.embeddings: Optional[EmbeddingsContext] = None
-        self.profile_manager: Optional[ProfileManager] = None
         self.config = config
 
     def ensure_dirs(self) -> None:
@@ -146,9 +139,6 @@ class FrigateApp:
             else:
                 logger.debug(f"Skipping directory: {d}")
 
-    def init_debug_replay_manager(self) -> None:
-        self.replay_manager = DebugReplayManager()
-
     def init_camera_metrics(self) -> None:
         # create camera_metrics
         for camera_name in self.config.cameras.keys():
@@ -351,19 +341,6 @@ class FrigateApp:
             comms,
         )
 
-    def init_profile_manager(self) -> None:
-        self.profile_manager = ProfileManager(
-            self.config, self.inter_config_updater, self.dispatcher
-        )
-        self.dispatcher.profile_manager = self.profile_manager
-
-        persisted = ProfileManager.load_persisted_profile()
-        if persisted and any(
-            persisted in cam.profiles for cam in self.config.cameras.values()
-        ):
-            logger.info("Restoring persisted profile '%s'", persisted)
-            self.profile_manager.activate_profile(persisted)
-
     def start_detectors(self) -> None:
         for name in self.config.cameras.keys():
             try:
@@ -554,7 +531,6 @@ class FrigateApp:
         set_file_limit()
 
         # Start frigate services.
-        self.init_debug_replay_manager()
         self.init_camera_metrics()
         self.init_queues()
         self.init_database()
@@ -565,14 +541,9 @@ class FrigateApp:
         self.init_embeddings_manager()
         self.bind_database()
         self.check_db_data_migrations()
-
-        # Clean up any stale replay camera artifacts (filesystem + DB)
-        cleanup_replay_cameras()
-
         self.init_inter_process_communicator()
         self.start_detectors()
         self.init_dispatcher()
-        self.init_profile_manager()
         self.init_embeddings_client()
         self.start_video_output_processor()
         self.start_ptz_autotracker()
@@ -601,9 +572,6 @@ class FrigateApp:
                     self.stats_emitter,
                     self.event_metadata_updater,
                     self.inter_config_updater,
-                    self.replay_manager,
-                    self.dispatcher,
-                    self.profile_manager,
                 ),
                 host="127.0.0.1",
                 port=5001,
@@ -618,9 +586,6 @@ class FrigateApp:
         # used by the docker healthcheck
         Path("/dev/shm/.frigate-is-stopping").touch()
 
-        # Cancel any running motion search jobs before setting stop_event
-        stop_all_motion_search_jobs()
-
         self.stop_event.set()
 
         # set an end_time on entries without an end_time before exiting
@@ -672,7 +637,6 @@ class FrigateApp:
         self.record_cleanup.join()
         self.stats_emitter.join()
         self.frigate_watchdog.join()
-        self.camera_maintainer.join()
         self.db.stop()
 
         # Save embeddings stats to disk

frigate/camera/__init__.py

@@ -19,8 +19,6 @@ class CameraMetrics:
     process_pid: Synchronized
     capture_process_pid: Synchronized
     ffmpeg_pid: Synchronized
-    reconnects_last_hour: Synchronized
-    stalls_last_hour: Synchronized
 
     def __init__(self, manager: SyncManager):
         self.camera_fps = manager.Value("d", 0)
@@ -37,8 +35,6 @@ class CameraMetrics:
         self.process_pid = manager.Value("i", 0)
         self.capture_process_pid = manager.Value("i", 0)
         self.ffmpeg_pid = manager.Value("i", 0)
-        self.reconnects_last_hour = manager.Value("i", 0)
-        self.stalls_last_hour = manager.Value("i", 0)
 
 
 class PTZMetrics:

frigate/camera/activity_manager.py

@@ -57,9 +57,6 @@ class CameraActivityManager:
         all_objects: list[dict[str, Any]] = []
 
         for camera in new_activity.keys():
-            if camera not in self.config.cameras:
-                continue
-
             # handle cameras that were added dynamically
             if camera not in self.camera_all_object_counts:
                 self.__init_camera(self.config.cameras[camera])
@@ -127,11 +124,7 @@ class CameraActivityManager:
         any_changed = False
 
         # run through each object and check what topics need to be updated
-        camera_config = self.config.cameras.get(camera)
-        if camera_config is None:
-            return
-
-        for label in camera_config.objects.track:
+        for label in self.config.cameras[camera].objects.track:
             if label in self.config.model.non_logo_attributes:
                 continue
 
@@ -181,9 +174,6 @@ class AudioActivityManager:
         now = datetime.datetime.now().timestamp()
 
         for camera in new_activity.keys():
-            if camera not in self.config.cameras:
-                continue
-
             # handle cameras that were added dynamically
             if camera not in self.current_audio_detections:
                 self.__init_camera(self.config.cameras[camera])
@@ -203,11 +193,7 @@ class AudioActivityManager:
     def compare_audio_activity(
         self, camera: str, new_detections: list[tuple[str, float]], now: float
     ) -> None:
-        camera_config = self.config.cameras.get(camera)
-        if camera_config is None:
-            return False
-
-        max_not_heard = camera_config.audio.max_not_heard
+        max_not_heard = self.config.cameras[camera].audio.max_not_heard
         current = self.current_audio_detections[camera]
 
         any_changed = False
@@ -236,7 +222,6 @@ class AudioActivityManager:
                         None,
                         "audio",
                         {},
-                        None,
                     ),
                     EventMetadataTypeEnum.manual_event_create.value,
                 )

frigate/camera/maintainer.py

@@ -55,20 +55,8 @@ class CameraMaintainer(threading.Thread):
         self.shm_count = self.__calculate_shm_frame_count()
         self.camera_processes: dict[str, mp.Process] = {}
         self.capture_processes: dict[str, mp.Process] = {}
-        self.camera_stop_events: dict[str, MpEvent] = {}
         self.metrics_manager = metrics_manager
 
-    def __ensure_camera_stop_event(self, camera: str) -> MpEvent:
-        camera_stop_event = self.camera_stop_events.get(camera)
-
-        if camera_stop_event is None:
-            camera_stop_event = mp.Event()
-            self.camera_stop_events[camera] = camera_stop_event
-        else:
-            camera_stop_event.clear()
-
-        return camera_stop_event
-
     def __init_historical_regions(self) -> None:
         # delete region grids for removed or renamed cameras
         cameras = list(self.config.cameras.keys())
@@ -111,8 +99,6 @@ class CameraMaintainer(threading.Thread):
             logger.info(f"Camera processor not started for disabled camera {name}")
             return
 
-        camera_stop_event = self.__ensure_camera_stop_event(name)
-
         if runtime:
             self.camera_metrics[name] = CameraMetrics(self.metrics_manager)
             self.ptz_metrics[name] = PTZMetrics(autotracker_enabled=False)
@@ -149,7 +135,7 @@ class CameraMaintainer(threading.Thread):
             self.camera_metrics[name],
             self.ptz_metrics[name],
             self.region_grids[name],
-            camera_stop_event,
+            self.stop_event,
             self.config.logger,
         )
         self.camera_processes[config.name] = camera_process
@@ -164,8 +150,6 @@ class CameraMaintainer(threading.Thread):
             logger.info(f"Capture process not started for disabled camera {name}")
             return
 
-        camera_stop_event = self.__ensure_camera_stop_event(name)
-
         # pre-create shms
         count = 10 if runtime else self.shm_count
         for i in range(count):
@@ -176,7 +160,7 @@ class CameraMaintainer(threading.Thread):
             config,
             count,
             self.camera_metrics[name],
-            camera_stop_event,
+            self.stop_event,
             self.config.logger,
         )
         capture_process.daemon = True
@@ -186,36 +170,18 @@ class CameraMaintainer(threading.Thread):
         logger.info(f"Capture process started for {name}: {capture_process.pid}")
 
     def __stop_camera_capture_process(self, camera: str) -> None:
-        capture_process = self.capture_processes.get(camera)
+        capture_process = self.capture_processes[camera]
         if capture_process is not None:
             logger.info(f"Waiting for capture process for {camera} to stop")
-            camera_stop_event = self.camera_stop_events.get(camera)
-
-            if camera_stop_event is not None:
-                camera_stop_event.set()
-
-            capture_process.join(timeout=10)
-            if capture_process.is_alive():
-                logger.warning(
-                    f"Capture process for {camera} didn't exit, forcing termination"
-                )
-                capture_process.terminate()
-                capture_process.join()
+            capture_process.terminate()
+            capture_process.join()
 
     def __stop_camera_process(self, camera: str) -> None:
-        camera_process = self.camera_processes.get(camera)
+        camera_process = self.camera_processes[camera]
         if camera_process is not None:
             logger.info(f"Waiting for process for {camera} to stop")
-            camera_stop_event = self.camera_stop_events.get(camera)
-
-            if camera_stop_event is not None:
-                camera_stop_event.set()
-
-            camera_process.join(timeout=10)
-            if camera_process.is_alive():
-                logger.warning(f"Process for {camera} didn't exit, forcing termination")
-                camera_process.terminate()
-                camera_process.join()
+            camera_process.terminate()
+            camera_process.join()
             logger.info(f"Closing frame queue for {camera}")
             empty_and_close_queue(self.camera_metrics[camera].frame_queue)
 
@@ -233,12 +199,6 @@ class CameraMaintainer(threading.Thread):
             for update_type, updated_cameras in updates.items():
                 if update_type == CameraConfigUpdateEnum.add.name:
                     for camera in updated_cameras:
-                        if (
-                            camera in self.camera_processes
-                            or camera in self.capture_processes
-                        ):
-                            continue
-
                         self.__start_camera_processor(
                             camera,
                             self.update_subscriber.camera_configs[camera],
@@ -250,22 +210,15 @@ class CameraMaintainer(threading.Thread):
                             runtime=True,
                         )
                 elif update_type == CameraConfigUpdateEnum.remove.name:
-                    for camera in updated_cameras:
-                        self.__stop_camera_capture_process(camera)
-                        self.__stop_camera_process(camera)
-                        self.capture_processes.pop(camera, None)
-                        self.camera_processes.pop(camera, None)
-                        self.camera_stop_events.pop(camera, None)
-                        self.region_grids.pop(camera, None)
-                        self.camera_metrics.pop(camera, None)
-                        self.ptz_metrics.pop(camera, None)
+                    self.__stop_camera_capture_process(camera)
+                    self.__stop_camera_process(camera)
 
         # ensure the capture processes are done
-        for camera in self.capture_processes.keys():
+        for camera in self.camera_processes.keys():
             self.__stop_camera_capture_process(camera)
 
         # ensure the camera processors are done
-        for camera in self.camera_processes.keys():
+        for camera in self.capture_processes.keys():
             self.__stop_camera_process(camera)
 
         self.update_subscriber.stop()

frigate/camera/state.py

@@ -65,7 +65,7 @@ class CameraState:
         frame_copy = cv2.cvtColor(frame_copy, cv2.COLOR_YUV2BGR_I420)
         # draw on the frame
         if draw_options.get("mask"):
-            mask_overlay = np.where(self.camera_config.motion.rasterized_mask == [0])
+            mask_overlay = np.where(self.camera_config.motion.mask == [0])
             frame_copy[mask_overlay] = [0, 0, 0]
 
         if draw_options.get("bounding_boxes"):
@@ -197,10 +197,6 @@ class CameraState:
 
         if draw_options.get("zones"):
             for name, zone in self.camera_config.zones.items():
-                # skip disabled zones
-                if not zone.enabled:
-                    continue
-
                 thickness = (
                     8
                     if any(

frigate/comms/config_updater.py

@@ -26,8 +26,8 @@ class ConfigPublisher:
 
     def stop(self) -> None:
         self.stop_event.set()
-        self.socket.close(linger=0)
-        self.context.destroy(linger=0)
+        self.socket.close()
+        self.context.destroy()
 
 
 class ConfigSubscriber:
@@ -55,5 +55,5 @@ class ConfigSubscriber:
             return (None, None)
 
     def stop(self) -> None:
-        self.socket.close(linger=0)
-        self.context.destroy(linger=0)
+        self.socket.close()
+        self.context.destroy()

frigate/comms/dispatcher.py

@@ -15,8 +15,6 @@ from frigate.config.camera.updater import (
     CameraConfigUpdatePublisher,
     CameraConfigUpdateTopic,
 )
-from frigate.config.config import RuntimeFilterConfig, RuntimeMotionConfig
-from frigate.config.profile_manager import ProfileManager
 from frigate.const import (
     CLEAR_ONGOING_REVIEW_SEGMENTS,
     EXPIRE_AUDIO_ACTIVITY,
@@ -30,7 +28,6 @@ from frigate.const import (
     UPDATE_CAMERA_ACTIVITY,
     UPDATE_EMBEDDINGS_REINDEX_PROGRESS,
     UPDATE_EVENT_DESCRIPTION,
-    UPDATE_JOB_STATE,
     UPDATE_MODEL_STATE,
     UPDATE_REVIEW_DESCRIPTION,
     UPSERT_REVIEW_SEGMENT,
@@ -63,7 +60,6 @@ class Dispatcher:
         self.camera_activity = CameraActivityManager(config, self.publish)
         self.audio_activity = AudioActivityManager(config, self.publish)
         self.model_state: dict[str, ModelStatusTypesEnum] = {}
-        self.job_state: dict[str, dict[str, Any]] = {}  # {job_type: job_data}
         self.embeddings_reindex: dict[str, Any] = {}
         self.birdseye_layout: dict[str, Any] = {}
         self.audio_transcription_state: str = "idle"
@@ -86,15 +82,10 @@ class Dispatcher:
             "review_detections": self._on_detections_command,
             "object_descriptions": self._on_object_description_command,
             "review_descriptions": self._on_review_description_command,
-            "motion_mask": self._on_motion_mask_command,
-            "object_mask": self._on_object_mask_command,
-            "zone": self._on_zone_command,
         }
         self._global_settings_handlers: dict[str, Callable] = {
             "notifications": self._on_global_notification_command,
-            "profile": self._on_profile_command,
         }
-        self.profile_manager: Optional[ProfileManager] = None
 
         for comm in self.comms:
             comm.subscribe(self._receive)
@@ -107,23 +98,11 @@ class Dispatcher:
         """Handle receiving of payload from communicators."""
 
         def handle_camera_command(
-            command_type: str,
-            camera_name: str,
-            command: str,
-            payload: str,
-            sub_command: str | None = None,
+            command_type: str, camera_name: str, command: str, payload: str
         ) -> None:
-            if camera_name not in self.config.cameras:
-                return
-
             try:
                 if command_type == "set":
-                    if sub_command:
-                        self._camera_settings_handlers[command](
-                            camera_name, sub_command, payload
-                        )
-                    else:
-                        self._camera_settings_handlers[command](camera_name, payload)
+                    self._camera_settings_handlers[command](camera_name, payload)
                 elif command_type == "ptz":
                     self._on_ptz_command(camera_name, payload)
             except KeyError:
@@ -137,9 +116,6 @@ class Dispatcher:
 
         def handle_request_region_grid() -> Any:
             camera = payload
-            if camera not in self.config.cameras:
-                return None
-
             grid = get_camera_regions_grid(
                 camera,
                 self.config.cameras[camera].detect,
@@ -204,19 +180,6 @@ class Dispatcher:
         def handle_model_state() -> None:
             self.publish("model_state", json.dumps(self.model_state.copy()))
 
-        def handle_update_job_state() -> None:
-            if payload and isinstance(payload, dict):
-                job_type = payload.get("job_type")
-                if job_type:
-                    self.job_state[job_type] = payload
-                    self.publish(
-                        "job_state",
-                        json.dumps(self.job_state),
-                    )
-
-        def handle_job_state() -> None:
-            self.publish("job_state", json.dumps(self.job_state.copy()))
-
         def handle_update_audio_transcription_state() -> None:
             if payload:
                 self.audio_transcription_state = payload
@@ -252,11 +215,7 @@ class Dispatcher:
             self.publish("birdseye_layout", json.dumps(self.birdseye_layout.copy()))
 
         def handle_on_connect() -> None:
-            camera_status = {
-                camera: status
-                for camera, status in self.camera_activity.last_camera_activity.copy().items()
-                if camera in self.config.cameras
-            }
+            camera_status = self.camera_activity.last_camera_activity.copy()
             audio_detections = self.audio_activity.current_audio_detections.copy()
             cameras_with_status = camera_status.keys()
 
@@ -301,11 +260,6 @@ class Dispatcher:
             )
             self.publish("birdseye_layout", json.dumps(self.birdseye_layout.copy()))
             self.publish("audio_detections", json.dumps(audio_detections))
-            self.publish(
-                "profile/state",
-                self.config.active_profile or "none",
-                retain=True,
-            )
 
         def handle_notification_test() -> None:
             self.publish("notification_test", "Test notification")
@@ -323,7 +277,6 @@ class Dispatcher:
             UPDATE_EVENT_DESCRIPTION: handle_update_event_description,
             UPDATE_REVIEW_DESCRIPTION: handle_update_review_description,
             UPDATE_MODEL_STATE: handle_update_model_state,
-            UPDATE_JOB_STATE: handle_update_job_state,
             UPDATE_EMBEDDINGS_REINDEX_PROGRESS: handle_update_embeddings_reindex_progress,
             UPDATE_BIRDSEYE_LAYOUT: handle_update_birdseye_layout,
             UPDATE_AUDIO_TRANSCRIPTION_STATE: handle_update_audio_transcription_state,
@@ -331,7 +284,6 @@ class Dispatcher:
             "restart": handle_restart,
             "embeddingsReindexProgress": handle_embeddings_reindex_progress,
             "modelState": handle_model_state,
-            "jobState": handle_job_state,
             "audioTranscriptionState": handle_audio_transcription_state,
             "birdseyeLayout": handle_birdseye_layout,
             "onConnect": handle_on_connect,
@@ -345,14 +297,6 @@ class Dispatcher:
                     camera_name = parts[-3]
                     command = parts[-2]
                     handle_camera_command("set", camera_name, command, payload)
-                elif len(parts) == 4 and topic.endswith("set"):
-                    # example /cam_name/motion_mask/mask_name/set payload=ON|OFF
-                    camera_name = parts[-4]
-                    command = parts[-3]
-                    sub_command = parts[-2]
-                    handle_camera_command(
-                        "set", camera_name, command, payload, sub_command
-                    )
                 elif len(parts) == 2 and topic.endswith("set"):
                     command = parts[-2]
                     self._global_settings_handlers[command](payload)
@@ -364,8 +308,7 @@ class Dispatcher:
                     # example /cam_name/notifications/suspend payload=duration
                     camera_name = parts[-3]
                     command = parts[-2]
-                    if camera_name in self.config.cameras:
-                        self._on_camera_notification_suspend(camera_name, payload)
+                    self._on_camera_notification_suspend(camera_name, payload)
             except IndexError:
                 logger.error(
                     f"Received invalid {topic.split('/')[-1]} command: {topic}"
@@ -564,22 +507,6 @@ class Dispatcher:
         )
         self.publish("notifications/state", payload, retain=True)
 
-    def _on_profile_command(self, payload: str) -> None:
-        """Callback for profile/set topic."""
-        if self.profile_manager is None:
-            logger.error("Profile manager not initialized")
-            return
-
-        profile_name = (
-            payload.strip() if payload.strip() not in ("", "none", "None") else None
-        )
-        err = self.profile_manager.activate_profile(profile_name)
-        if err:
-            logger.error("Failed to activate profile: %s", err)
-            return
-
-        self.publish("profile/state", payload.strip() or "none", retain=True)
-
     def _on_audio_command(self, camera_name: str, payload: str) -> None:
         """Callback for audio topic."""
         audio_settings = self.config.cameras[camera_name].audio
@@ -914,149 +841,3 @@ class Dispatcher:
             genai_settings,
         )
         self.publish(f"{camera_name}/review_descriptions/state", payload, retain=True)
-
-    def _on_motion_mask_command(
-        self, camera_name: str, mask_name: str, payload: str
-    ) -> None:
-        """Callback for motion mask topic."""
-        if payload not in ["ON", "OFF"]:
-            logger.error(f"Invalid payload for motion mask {mask_name}: {payload}")
-            return
-
-        motion_settings = self.config.cameras[camera_name].motion
-
-        if mask_name not in motion_settings.mask:
-            logger.error(f"Unknown motion mask: {mask_name}")
-            return
-
-        mask = motion_settings.mask[mask_name]
-
-        if not mask:
-            logger.error(f"Motion mask {mask_name} is None")
-            return
-
-        if payload == "ON":
-            if not mask.enabled_in_config:
-                logger.error(
-                    f"Motion mask {mask_name} must be enabled in the config to be turned on via MQTT."
-                )
-                return
-
-        mask.enabled = payload == "ON"
-
-        # Recreate RuntimeMotionConfig to update rasterized_mask
-        motion_settings = RuntimeMotionConfig(
-            frame_shape=self.config.cameras[camera_name].frame_shape,
-            **motion_settings.model_dump(exclude_unset=True),
-        )
-
-        # Update the dispatcher's own config
-        self.config.cameras[camera_name].motion = motion_settings
-
-        self.config_updater.publish_update(
-            CameraConfigUpdateTopic(CameraConfigUpdateEnum.motion, camera_name),
-            motion_settings,
-        )
-        self.publish(
-            f"{camera_name}/motion_mask/{mask_name}/state", payload, retain=True
-        )
-
-    def _on_object_mask_command(
-        self, camera_name: str, mask_name: str, payload: str
-    ) -> None:
-        """Callback for object mask topic."""
-        if payload not in ["ON", "OFF"]:
-            logger.error(f"Invalid payload for object mask {mask_name}: {payload}")
-            return
-
-        object_settings = self.config.cameras[camera_name].objects
-
-        # Check if this is a global mask
-        mask_found = False
-        if mask_name in object_settings.mask:
-            mask = object_settings.mask[mask_name]
-            if mask:
-                if payload == "ON":
-                    if not mask.enabled_in_config:
-                        logger.error(
-                            f"Object mask {mask_name} must be enabled in the config to be turned on via MQTT."
-                        )
-                        return
-                mask.enabled = payload == "ON"
-                mask_found = True
-
-        # Check if this is a per-object filter mask
-        for object_name, filter_config in object_settings.filters.items():
-            if mask_name in filter_config.mask:
-                mask = filter_config.mask[mask_name]
-                if mask:
-                    if payload == "ON":
-                        if not mask.enabled_in_config:
-                            logger.error(
-                                f"Object mask {mask_name} must be enabled in the config to be turned on via MQTT."
-                            )
-                            return
-                    mask.enabled = payload == "ON"
-                    mask_found = True
-
-        if not mask_found:
-            logger.error(f"Unknown object mask: {mask_name}")
-            return
-
-        # Recreate RuntimeFilterConfig for each object filter to update rasterized_mask
-        for object_name, filter_config in object_settings.filters.items():
-            # Merge global object masks with per-object filter masks
-            merged_mask = dict(filter_config.mask)  # Copy filter-specific masks
-
-            # Add global object masks if they exist
-            if object_settings.mask:
-                for global_mask_id, global_mask_config in object_settings.mask.items():
-                    # Use a global prefix to avoid key collisions
-                    global_mask_id_prefixed = f"global_{global_mask_id}"
-                    merged_mask[global_mask_id_prefixed] = global_mask_config
-
-            object_settings.filters[object_name] = RuntimeFilterConfig(
-                frame_shape=self.config.cameras[camera_name].frame_shape,
-                mask=merged_mask,
-                **filter_config.model_dump(
-                    exclude_unset=True, exclude={"mask", "raw_mask"}
-                ),
-            )
-
-        # Update the dispatcher's own config
-        self.config.cameras[camera_name].objects = object_settings
-
-        self.config_updater.publish_update(
-            CameraConfigUpdateTopic(CameraConfigUpdateEnum.objects, camera_name),
-            object_settings,
-        )
-        self.publish(
-            f"{camera_name}/object_mask/{mask_name}/state", payload, retain=True
-        )
-
-    def _on_zone_command(self, camera_name: str, zone_name: str, payload: str) -> None:
-        """Callback for zone topic."""
-        if payload not in ["ON", "OFF"]:
-            logger.error(f"Invalid payload for zone {zone_name}: {payload}")
-            return
-
-        camera_config = self.config.cameras[camera_name]
-
-        if zone_name not in camera_config.zones:
-            logger.error(f"Unknown zone: {zone_name}")
-            return
-
-        if payload == "ON":
-            if not camera_config.zones[zone_name].enabled_in_config:
-                logger.error(
-                    f"Zone {zone_name} must be enabled in the config to be turned on via MQTT."
-                )
-                return
-
-        camera_config.zones[zone_name].enabled = payload == "ON"
-
-        self.config_updater.publish_update(
-            CameraConfigUpdateTopic(CameraConfigUpdateEnum.zones, camera_name),
-            camera_config.zones,
-        )
-        self.publish(f"{camera_name}/zone/{zone_name}/state", payload, retain=True)

frigate/comms/inter_process.py

@@ -61,8 +61,8 @@ class InterProcessCommunicator(Communicator):
     def stop(self) -> None:
         self.stop_event.set()
         self.reader_thread.join()
-        self.socket.close(linger=0)
-        self.context.destroy(linger=0)
+        self.socket.close()
+        self.context.destroy()
 
 
 class InterProcessRequestor:
@@ -82,5 +82,5 @@ class InterProcessRequestor:
             return ""
 
     def stop(self) -> None:
-        self.socket.close(linger=0)
-        self.context.destroy(linger=0)
+        self.socket.close()
+        self.context.destroy()

frigate/comms/mqtt.py

@@ -1,4 +1,3 @@
-import json
 import logging
 import threading
 from typing import Any, Callable
@@ -134,29 +133,6 @@ class MqttClient(Communicator):
                 retain=True,
             )
 
-            for mask_name, motion_mask in camera.motion.mask.items():
-                if motion_mask:
-                    self.publish(
-                        f"{camera_name}/motion_mask/{mask_name}/state",
-                        "ON" if motion_mask.enabled else "OFF",
-                        retain=True,
-                    )
-
-            for mask_name, object_mask in camera.objects.mask.items():
-                if object_mask:
-                    self.publish(
-                        f"{camera_name}/object_mask/{mask_name}/state",
-                        "ON" if object_mask.enabled else "OFF",
-                        retain=True,
-                    )
-
-            for zone_name, zone in camera.zones.items():
-                self.publish(
-                    f"{camera_name}/zone/{zone_name}/state",
-                    "ON" if zone.enabled else "OFF",
-                    retain=True,
-                )
-
         if self.config.notifications.enabled_in_config:
             self.publish(
                 "notifications/state",
@@ -164,21 +140,6 @@ class MqttClient(Communicator):
                 retain=True,
             )
 
-        self.publish(
-            "profile/state",
-            self.config.active_profile or "none",
-            retain=True,
-        )
-        available_profiles = [
-            {"name": name, "friendly_name": defn.friendly_name}
-            for name, defn in sorted(self.config.profiles.items())
-        ]
-        self.publish(
-            "profiles/available",
-            json.dumps(available_profiles),
-            retain=True,
-        )
-
         self.publish("available", "online", retain=True)
 
     def on_mqtt_command(
@@ -281,35 +242,12 @@ class MqttClient(Communicator):
                     self.on_mqtt_command,
                 )
 
-            for mask_name in self.config.cameras[name].motion.mask.keys():
-                self.client.message_callback_add(
-                    f"{self.mqtt_config.topic_prefix}/{name}/motion_mask/{mask_name}/set",
-                    self.on_mqtt_command,
-                )
-
-            for mask_name in self.config.cameras[name].objects.mask.keys():
-                self.client.message_callback_add(
-                    f"{self.mqtt_config.topic_prefix}/{name}/object_mask/{mask_name}/set",
-                    self.on_mqtt_command,
-                )
-
-            for zone_name in self.config.cameras[name].zones.keys():
-                self.client.message_callback_add(
-                    f"{self.mqtt_config.topic_prefix}/{name}/zone/{zone_name}/set",
-                    self.on_mqtt_command,
-                )
-
         if self.config.notifications.enabled_in_config:
             self.client.message_callback_add(
                 f"{self.mqtt_config.topic_prefix}/notifications/set",
                 self.on_mqtt_command,
             )
 
-        self.client.message_callback_add(
-            f"{self.mqtt_config.topic_prefix}/profile/set",
-            self.on_mqtt_command,
-        )
-
         self.client.message_callback_add(
             f"{self.mqtt_config.topic_prefix}/onConnect", self.on_mqtt_command
         )

frigate/comms/webpush.py

@@ -17,6 +17,7 @@ from titlecase import titlecase
 from frigate.comms.base_communicator import Communicator
 from frigate.comms.config_updater import ConfigSubscriber
 from frigate.config import FrigateConfig
+from frigate.config.auth import AuthConfig
 from frigate.config.camera.updater import (
     CameraConfigUpdateEnum,
     CameraConfigUpdateSubscriber,
@@ -58,6 +59,7 @@ class WebPushClient(Communicator):
             for c in self.config.cameras.values()
         }
         self.last_notification_time: float = 0
+        self.user_cameras: dict[str, set[str]] = {}
         self.notification_queue: queue.Queue[PushNotification] = queue.Queue()
         self.notification_thread = threading.Thread(
             target=self._process_notifications, daemon=True
@@ -78,13 +80,12 @@ class WebPushClient(Communicator):
             for sub in user["notification_tokens"]:
                 self.web_pushers[user["username"]].append(WebPusher(sub))
 
-        # notification config updater
-        self.global_config_subscriber = ConfigSubscriber(
-            "config/notifications", exact=True
-        )
+        # notification and auth config updater
+        self.global_config_subscriber = ConfigSubscriber("config/")
         self.config_subscriber = CameraConfigUpdateSubscriber(
             self.config, self.config.cameras, [CameraConfigUpdateEnum.notifications]
         )
+        self._refresh_user_cameras()
 
     def subscribe(self, receiver: Callable) -> None:
         """Wrapper for allowing dispatcher to subscribe."""
@@ -164,13 +165,19 @@ class WebPushClient(Communicator):
 
     def publish(self, topic: str, payload: Any, retain: bool = False) -> None:
         """Wrapper for publishing when client is in valid state."""
-        # check for updated notification config
-        _, updated_notification_config = (
-            self.global_config_subscriber.check_for_update()
-        )
-
-        if updated_notification_config:
-            self.config.notifications = updated_notification_config
+        # check for updated global config (notifications, auth)
+        while True:
+            config_topic, config_payload = (
+                self.global_config_subscriber.check_for_update()
+            )
+            if config_topic is None:
+                break
+            if config_topic == "config/notifications" and config_payload:
+                self.config.notifications = config_payload
+            elif config_topic == "config/auth":
+                if isinstance(config_payload, AuthConfig):
+                    self.config.auth = config_payload
+                self._refresh_user_cameras()
 
         updates = self.config_subscriber.check_for_updates()
 
@@ -291,6 +298,31 @@ class WebPushClient(Communicator):
             except Exception as e:
                 logger.error(f"Error processing notification: {str(e)}")
 
+    def _refresh_user_cameras(self) -> None:
+        """Rebuild the user-to-cameras access cache from the database."""
+        all_camera_names = set(self.config.cameras.keys())
+        roles_dict = self.config.auth.roles
+        updated: dict[str, set[str]] = {}
+        for user in User.select(User.username, User.role).dicts().iterator():
+            allowed = User.get_allowed_cameras(
+                user["role"], roles_dict, all_camera_names
+            )
+            updated[user["username"]] = set(allowed)
+            logger.debug(
+                "User %s has access to cameras: %s",
+                user["username"],
+                ", ".join(allowed),
+            )
+        self.user_cameras = updated
+
+    def _user_has_camera_access(self, username: str, camera: str) -> bool:
+        """Check if a user has access to a specific camera based on cached roles."""
+        allowed = self.user_cameras.get(username)
+        if allowed is None:
+            logger.debug(f"No camera access information found for user {username}")
+            return False
+        return camera in allowed
+
     def _within_cooldown(self, camera: str) -> bool:
         now = datetime.datetime.now().timestamp()
         if now - self.last_notification_time < self.config.notifications.cooldown:
@@ -418,6 +450,14 @@ class WebPushClient(Communicator):
         logger.debug(f"Sending push notification for {camera}, review ID {reviewId}")
 
         for user in self.web_pushers:
+            if not self._user_has_camera_access(user, camera):
+                logger.debug(
+                    "Skipping notification for user %s - no access to camera %s",
+                    user,
+                    camera,
+                )
+                continue
+
             self.send_push_notification(
                 user=user,
                 payload=payload,
@@ -465,6 +505,14 @@ class WebPushClient(Communicator):
         )
 
         for user in self.web_pushers:
+            if not self._user_has_camera_access(user, camera):
+                logger.debug(
+                    "Skipping notification for user %s - no access to camera %s",
+                    user,
+                    camera,
+                )
+                continue
+
             self.send_push_notification(
                 user=user,
                 payload=payload,

frigate/comms/ws.py

@@ -17,9 +17,117 @@ from ws4py.websocket import WebSocket as WebSocket_
 
 from frigate.comms.base_communicator import Communicator
 from frigate.config import FrigateConfig
+from frigate.const import (
+    CLEAR_ONGOING_REVIEW_SEGMENTS,
+    EXPIRE_AUDIO_ACTIVITY,
+    INSERT_MANY_RECORDINGS,
+    INSERT_PREVIEW,
+    NOTIFICATION_TEST,
+    REQUEST_REGION_GRID,
+    UPDATE_AUDIO_ACTIVITY,
+    UPDATE_AUDIO_TRANSCRIPTION_STATE,
+    UPDATE_BIRDSEYE_LAYOUT,
+    UPDATE_CAMERA_ACTIVITY,
+    UPDATE_EMBEDDINGS_REINDEX_PROGRESS,
+    UPDATE_EVENT_DESCRIPTION,
+    UPDATE_MODEL_STATE,
+    UPDATE_REVIEW_DESCRIPTION,
+    UPSERT_REVIEW_SEGMENT,
+)
+from frigate.models import User
 
 logger = logging.getLogger(__name__)
 
+# Internal IPC topics — NEVER allowed from WebSocket, regardless of role
+_WS_BLOCKED_TOPICS = frozenset(
+    {
+        INSERT_MANY_RECORDINGS,
+        INSERT_PREVIEW,
+        REQUEST_REGION_GRID,
+        UPSERT_REVIEW_SEGMENT,
+        CLEAR_ONGOING_REVIEW_SEGMENTS,
+        UPDATE_CAMERA_ACTIVITY,
+        UPDATE_AUDIO_ACTIVITY,
+        EXPIRE_AUDIO_ACTIVITY,
+        UPDATE_EVENT_DESCRIPTION,
+        UPDATE_REVIEW_DESCRIPTION,
+        UPDATE_MODEL_STATE,
+        UPDATE_EMBEDDINGS_REINDEX_PROGRESS,
+        UPDATE_BIRDSEYE_LAYOUT,
+        UPDATE_AUDIO_TRANSCRIPTION_STATE,
+        NOTIFICATION_TEST,
+    }
+)
+
+# Read-only topics any authenticated user (including viewer) can send
+_WS_VIEWER_TOPICS = frozenset(
+    {
+        "onConnect",
+        "modelState",
+        "audioTranscriptionState",
+        "birdseyeLayout",
+        "embeddingsReindexProgress",
+    }
+)
+
+# Camera-scoped command topics a camera-authorized (non-admin) user may send.
+_WS_CAMERA_COMMAND_TOPICS = frozenset({"ptz"})
+
+
+def _check_ws_authorization(
+    topic: str,
+    role_header: str | None,
+    separator: str,
+    roles_config: dict[str, list[str]] | None = None,
+    camera_names: set[str] | None = None,
+) -> bool:
+    """Check if a WebSocket message is authorized.
+
+    Args:
+        topic: The message topic.
+        role_header: The HTTP_REMOTE_ROLE header value, or None.
+        separator: The role separator character from proxy config.
+        roles_config: The auth.roles mapping (role -> allowed cameras), used to
+            authorize camera-scoped commands for non-admin users.
+        camera_names: All configured camera names, used to resolve a role's
+            allowed cameras.
+
+    Returns:
+        True if authorized, False if blocked.
+    """
+    # Block IPC-only topics unconditionally
+    if topic in _WS_BLOCKED_TOPICS:
+        return False
+
+    # No role header: default to viewer (fail-closed)
+    roles = [r.strip() for r in role_header.split(separator)] if role_header else []
+
+    # Admin can send anything
+    if "admin" in roles:
+        return True
+
+    # Read-only topics any authenticated user can send
+    if topic in _WS_VIEWER_TOPICS:
+        return True
+
+    # Camera-scoped command like "<camera>/ptz": allow when the user's role(s)
+    # grant access to that camera.
+    parts = topic.split("/")
+    if (
+        roles_config is not None
+        and len(parts) == 2
+        and parts[1] in _WS_CAMERA_COMMAND_TOPICS
+    ):
+        allowed: set[str] = set()
+        # No role header maps to the default viewer role (e.g. proxy-only setups)
+        for role in roles or ["viewer"]:
+            allowed.update(
+                User.get_allowed_cameras(role, roles_config, camera_names or set())
+            )
+        return parts[0] in allowed
+
+    return False
+
 
 class WebSocket(WebSocket_):  # type: ignore[misc]
     def unhandled_error(self, error: Any) -> None:
@@ -49,6 +157,9 @@ class WebSocketClient(Communicator):
 
         class _WebSocketHandler(WebSocket):
             receiver = self._dispatcher
+            role_separator = self.config.proxy.separator or ","
+            roles_config = self.config.auth.roles
+            camera_names = set(self.config.cameras.keys())
 
             def received_message(self, message: WebSocket.received_message) -> None:  # type: ignore[name-defined]
                 try:
@@ -63,11 +174,29 @@ class WebSocketClient(Communicator):
                     )
                     return
 
-                logger.debug(
-                    f"Publishing mqtt message from websockets at {json_message['topic']}."
+                topic = json_message["topic"]
+
+                # Authorization check (skip when environ is None — direct internal connection)
+                role_header = (
+                    self.environ.get("HTTP_REMOTE_ROLE") if self.environ else None
                 )
+                if self.environ is not None and not _check_ws_authorization(
+                    topic,
+                    role_header,
+                    self.role_separator,
+                    self.roles_config,
+                    self.camera_names,
+                ):
+                    logger.warning(
+                        "Blocked unauthorized WebSocket message: topic=%s, role=%s",
+                        topic,
+                        role_header,
+                    )
+                    return
+
+                logger.debug(f"Publishing mqtt message from websockets at {topic}.")
                 self.receiver(
-                    json_message["topic"],
+                    topic,
                     json_message["payload"],
                 )
 

frigate/comms/zmq_proxy.py

@@ -43,7 +43,7 @@ class ZmqProxy:
 
     def stop(self) -> None:
         # destroying the context will tell the proxy to stop
-        self.context.destroy(linger=0)
+        self.context.destroy()
         self.runner.join()
 
 
@@ -66,8 +66,8 @@ class Publisher(Generic[T]):
         self.socket.send_string(f"{self.topic}{sub_topic} {json.dumps(payload)}")
 
     def stop(self) -> None:
-        self.socket.close(linger=0)
-        self.context.destroy(linger=0)
+        self.socket.close()
+        self.context.destroy()
 
 
 class Subscriber(Generic[T]):
@@ -96,8 +96,8 @@ class Subscriber(Generic[T]):
         return self._return_object("", None)
 
     def stop(self) -> None:
-        self.socket.close(linger=0)
-        self.context.destroy(linger=0)
+        self.socket.close()
+        self.context.destroy()
 
     def _return_object(self, topic: str, payload: T | None) -> T | None:
         return payload