@camstack/addon-pipeline 1.2.197 → 1.2.199

package/dist/audio-analyzer/index.js

@@ -2,8 +2,8 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-CBa1j3On.js");
-const require_process_memory = require("../process-memory-CmeKr_MZ.js");
+const require_dist = require("../dist-DmCrC2yx.js");
+const require_process_memory = require("../process-memory-9lvvhHym.js");
 let node_fs = require("node:fs");
 node_fs = require_dist.__toESM(node_fs);
 let node_path = require("node:path");

package/dist/audio-analyzer/index.mjs

@@ -1,6 +1,6 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { Dt as errMsg, M as audioAnalyzerCapability, Pt as BaseAddon, S as PoolMemoryWatchdog, bt as resolvePoolMemoryPolicy, j as audioAnalysisCapability, n as AUDIO_BACKEND_CHOICES, rt as mapAudioLabelToMacro, s as DEFAULT_AUDIO_ANALYZER_CONFIG, v as HF_BASE_URL, zt as hydrateSchema } from "../dist-Y4BsF_EC.mjs";
-import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-DeO2OZ3-.mjs";
+import { Bt as hydrateSchema, Ft as BaseAddon, M as audioAnalyzerCapability, Ot as errMsg, S as PoolMemoryWatchdog, bt as resolvePoolMemoryPolicy, j as audioAnalysisCapability, n as AUDIO_BACKEND_CHOICES, rt as mapAudioLabelToMacro, s as DEFAULT_AUDIO_ANALYZER_CONFIG, v as HF_BASE_URL } from "../dist-B23u1tmN.mjs";
+import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-P24NTDb1.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";
 import { downloadFile } from "@camstack/system/addon-utils";

package/dist/{default-detection-model-CM-8U0Bb.js → default-detection-model-CMe44Kid.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-CBa1j3On.js");
+const require_dist = require("./dist-DmCrC2yx.js");
 let node_crypto = require("node:crypto");
 //#region src/detection-pipeline/registry/model-catalogs.ts
 var HF_REPO = "camstack/camstack-models";

package/dist/{default-detection-model-CplzzTmN.mjs → default-detection-model-O1uBusV2.mjs}

@@ -1,4 +1,4 @@
-import { N as audioKindId, Q as hfModelUrl, a as COCO_80_LABELS, o as COCO_TO_MACRO, r as AUDIO_MACRO_LABELS } from "./dist-Y4BsF_EC.mjs";
+import { N as audioKindId, Q as hfModelUrl, a as COCO_80_LABELS, o as COCO_TO_MACRO, r as AUDIO_MACRO_LABELS } from "./dist-B23u1tmN.mjs";
 import { randomUUID } from "node:crypto";
 //#region src/detection-pipeline/registry/model-catalogs.ts
 var HF_REPO = "camstack/camstack-models";

package/dist/detection-pipeline/index.js

@@ -2,12 +2,12 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-CBa1j3On.js");
-const require_node = require("../node-C-B8VuGi.js");
-const require_default_detection_model = require("../default-detection-model-CM-8U0Bb.js");
-const require_lazy_sharp = require("../lazy-sharp-CS5WE9mI.js");
+const require_dist = require("../dist-DmCrC2yx.js");
+const require_node = require("../node-DCSTbt6C.js");
+const require_default_detection_model = require("../default-detection-model-CMe44Kid.js");
+const require_lazy_sharp = require("../lazy-sharp-DBHsD2lh.js");
 const require_event_loop_stall_monitor = require("../event-loop-stall-monitor-DaUBcb13.js");
-const require_process_memory = require("../process-memory-CmeKr_MZ.js");
+const require_process_memory = require("../process-memory-9lvvhHym.js");
 let node_os = require("node:os");
 node_os = require_dist.__toESM(node_os);
 let node_fs = require("node:fs");

package/dist/detection-pipeline/index.mjs

@@ -1,10 +1,10 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { $ as inferModelProvider, B as defaultDeviceFor$1, Dt as errMsg, G as detectionPipelineCapability, J as enumerateInferenceDevices, Pt as BaseAddon, Rt as createEvent, S as PoolMemoryWatchdog, St as runtimeDevices$1, Tt as supportedRuntimes$1, Ut as nodePin, Wt as parseJsonUnknown, X as evaluateZoneRules, Yt as array, an as union, bt as resolvePoolMemoryPolicy, c as DEFAULT_CLUSTER_STEP_MODELS, in as string, k as YAMNET_TO_MACRO, l as DEFAULT_CLUSTER_STEP_SETTINGS, lt as pickClusterStepModels, m as DEVICE_BACKEND_TO_FORMAT, on as EventCategory, pt as pipelineExecutorCapability, qt as sleep, st as overlayClusterStepSettings, t as APPLE_SA_TO_MACRO, tn as object, tt as loadContributionCapability, ut as pickClusterStepSettings, vt as resolveClusterStepModelId, zt as hydrateSchema } from "../dist-Y4BsF_EC.mjs";
-import { a as readProcessCost } from "../node-B5ouEQYN.mjs";
-import { a as ALL_PIPELINE_STEPS, c as getStep, d as landmarkPrecisionVerdict, l as getStepDefinition, n as resolveDefaultDetectionModel, o as ALL_STEPS, r as localFrameRegistry, s as getDefaultModelForFormat, u as resolveModelForFormat } from "../default-detection-model-CplzzTmN.mjs";
+import { $ as inferModelProvider, B as defaultDeviceFor$1, Bt as hydrateSchema, Et as supportedRuntimes$1, Ft as BaseAddon, G as detectionPipelineCapability, Gt as parseJsonUnknown, J as enumerateInferenceDevices, Jt as sleep, Ot as errMsg, S as PoolMemoryWatchdog, St as runtimeDevices$1, Wt as nodePin, X as evaluateZoneRules, Xt as array, an as string, bt as resolvePoolMemoryPolicy, c as DEFAULT_CLUSTER_STEP_MODELS, k as YAMNET_TO_MACRO, l as DEFAULT_CLUSTER_STEP_SETTINGS, lt as pickClusterStepModels, m as DEVICE_BACKEND_TO_FORMAT, nn as object, on as union, pt as pipelineExecutorCapability, sn as EventCategory, st as overlayClusterStepSettings, t as APPLE_SA_TO_MACRO, tt as loadContributionCapability, ut as pickClusterStepSettings, vt as resolveClusterStepModelId, zt as createEvent } from "../dist-B23u1tmN.mjs";
+import { a as readProcessCost } from "../node-D1MLn6oV.mjs";
+import { a as ALL_PIPELINE_STEPS, c as getStep, d as landmarkPrecisionVerdict, l as getStepDefinition, n as resolveDefaultDetectionModel, o as ALL_STEPS, r as localFrameRegistry, s as getDefaultModelForFormat, u as resolveModelForFormat } from "../default-detection-model-O1uBusV2.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
 import { n as startEventLoopStallMonitor } from "../event-loop-stall-monitor-DXLNBMkY.mjs";
-import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-DeO2OZ3-.mjs";
+import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-P24NTDb1.mjs";
 import * as os from "node:os";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/{dist-Y4BsF_EC.mjs → dist-B23u1tmN.mjs}

@@ -9189,6 +9189,24 @@ var RecordingBandSchema = object({
 	end: string().regex(HHMM),
 	mode: RecordingBandModeSchema,
 	triggers: RecordingBandTriggersSchema.optional(),
+	/**
+	* RETIRED (D381). A band no longer carries a pre-buffer of its own.
+	*
+	* It was the retroactive KEEP bound — which already-written segments survive
+	* a trigger — and it had to be at least as wide as the widest pre-roll the
+	* broker could serve, or the gate would delete the seconds the ring had just
+	* handed the writer. That "at least as wide as" is the tell: it was a second
+	* expression of the broker's retention, in different units, in a different
+	* addon, with an invariant the operator had to maintain by hand. The keep
+	* bound is now derived from the one prebuffer ceiling and there is nothing
+	* left to configure here.
+	*
+	* The key survives in the SHAPE so a config written before that record still
+	* parses and can be migrated deliberately — `RecordingBandSchema` is not
+	* strict, so simply deleting it would strip an operator's value in silence on
+	* the next save (the failure D380 came one commit from shipping). Nothing
+	* reads it: {@link stripRetiredBandPreBufferSec} removes it on load.
+	*/
 	preBufferSec: number().min(0).optional(),
 	postBufferSec: number().min(0).optional()
 });
@@ -9206,29 +9224,56 @@ var RecordingBandSchema = object({
 * `postBufferSec` must therefore exceed one segment length plus the attach
 * latency (ffmpeg spawn + RTSP dial), or the window closes before the first
 * segment is ever finalized and the camera records nothing anyway. At the 10 s
-* default segment length, 30 s leaves room for two full segments. `preBufferSec`
-* is retroactive only — it costs nothing at record time, it merely keeps
-* already-written segments.
-*
-* ## Why `preBufferSec` is 15 and not one segment length
-*
-* It has to cover the broker's RECORDING pre-roll, which is media handed to the
-* writer from BEFORE the trigger (D192/D193). If this bound were narrower, the
-* keep gate would delete the very seconds the ring just supplied — two
-* authorities disagreeing about the same footage, which is the failure D191 was
-* written against. It is therefore set to `RECORDING_PRE_ROLL_MAX_MS` (15 s),
-* the widest window the broker can be configured to serve, so an operator
-* raising the cluster pre-roll can never walk past the gate silently. The
-* addon-side guard is
-* `packages/addon-pipeline/src/recorder/addon/__tests__/band-decision.spec.ts`.
-*
-* An EXPLICIT `0` is left alone: that is an operator statement, not an omission,
-* and it is excluded from that invariant by name.
-*/
-var DEFAULT_EVENTS_BAND_BUFFER_SEC = {
-	preBufferSec: 15,
-	postBufferSec: 30
-};
+* default segment length, 30 s leaves room for two full segments.
+*
+* ## There is no `preBufferSec` here any more (D381)
+*
+* There used to be, at 15 s, and its whole justification was that it had to
+* cover the widest pre-roll the broker could serve. A number whose only
+* correct value is another subsystem's ceiling is not a setting; it is that
+* ceiling, restated where it can drift. The keep bound is derived from the
+* prebuffer ceiling directly now, in `band-decision.ts`, so an operator
+* raising the prebuffer cannot walk past the gate at all rather than merely
+* being warned not to.
+*/
+var DEFAULT_EVENTS_BAND_BUFFER_SEC = { postBufferSec: 30 };
+/**
+* Drop the RETIRED band `preBufferSec` from a persisted recording config.
+*
+* Explicit, and it reports what it removed, because the alternative is a
+* silent strip: `RecordingBandSchema` is a plain `z.object`, so the key
+* survives a parse and disappears on the next save with no line anywhere. An
+* operator who had typed a number would find it gone and nothing would say
+* when or why.
+*
+* Nothing is carried forward: the value it held was always required to be at
+* least the broker's widest pre-roll, and the gate is now derived from exactly
+* that ceiling. Every configuration that was legal therefore keeps a keep-gate
+* at least as wide as the one it had — including an explicit `0`, which widens.
+* That is deliberate and it is the only behaviour change: a band that kept
+* nothing before its trigger now keeps up to the prebuffer ceiling of
+* already-written footage, which is media that exists either way.
+*/
+function stripRetiredBandPreBufferSec(config) {
+	const strippedBands = [];
+	const bands = config.bands.map((band, index) => {
+		if (band.preBufferSec === void 0) return band;
+		strippedBands.push(index);
+		const { preBufferSec: _retired, ...rest } = band;
+		return rest;
+	});
+	if (strippedBands.length === 0) return {
+		config,
+		strippedBands
+	};
+	return {
+		config: {
+			...config,
+			bands
+		},
+		strippedBands
+	};
+}
 DEFAULT_EVENTS_BAND_BUFFER_SEC.postBufferSec * 1e3;
 /**
 * Per-device retention overrides. Every field is optional; an unset or `0`
@@ -12149,12 +12194,30 @@ var BackupDestinationInfoSchema = object({
 	lastSuccessAt: number().optional(),
 	/** Newest-archive size from `manifests.json`, or undefined. */
 	lastSuccessSizeBytes: number().optional(),
-	/** Per-destination cron expression. Empty = manual-only (no schedule). */
+	/**
+	* Cron cadence(s) of the ENABLED schedules that fan out to this
+	* destination, comma-joined. Absent when no enabled schedule targets it
+	* — a destination nothing is scheduled to write to must not advertise a
+	* cadence (D384). This is never the `backup_destination_policies.cron`
+	* column: that per-location cron has scheduled nothing since 2026-07-28
+	* and reading it made a destination with a DISABLED schedule claim a
+	* nightly run.
+	*/
 	cron: string().optional(),
-	/** ms-epoch of next computed firing for this destination's cron, if any. */
+	/** ms-epoch of the next firing across those schedules (earliest), if any. */
 	nextRunAt: number().optional(),
-	/** ms-epoch of last successful scheduled run (mirrors policy.lastRunAt). */
-	lastRunAt: number().optional()
+	/**
+	* ms-epoch of the last time a run ATTEMPTED to write here — success or
+	* failure. Never a success stamp: pair it with `lastSuccessAt` (the
+	* newest archive that actually landed) and `lastError`.
+	*/
+	lastAttemptAt: number().optional(),
+	/**
+	* Why the last attempt failed, verbatim. Absent when the last attempt
+	* landed the archive. A destination that has never been written to has
+	* neither this nor `lastAttemptAt`.
+	*/
+	lastError: string().optional()
 });
 /**
 * Per-archive entry returned by `backup.listArchives({ destinationId })`.
@@ -12317,8 +12380,16 @@ var BackupScheduleSchema = object({
 	retentionCount: number().int().min(1).max(1e3),
 	/** Optional subset of source locations to include; omitted = all. */
 	dataSources: array(string()).readonly().optional(),
-	/** ms-epoch of last successful run. */
-	lastRunAt: number().optional(),
+	/**
+	* ms-epoch of the last tick that FIRED this schedule. Stamped before the
+	* archive runs (it is the dedupe anchor), so it says "attempted", never
+	* "succeeded" — a run refused by every destination stamps it too.
+	*/
+	lastAttemptAt: number().optional(),
+	/** ms-epoch of the last run of this schedule that landed at ≥1 destination. */
+	lastSuccessAt: number().optional(),
+	/** Why the last fired run failed, verbatim. Absent when it succeeded. */
+	lastError: string().optional(),
 	/** ms-epoch of next computed firing (read-only, filled on list). */
 	nextRunAt: number().optional()
 });
@@ -12367,14 +12438,7 @@ method(_void(), array(BackupDestinationInfoSchema).readonly(), { auth: "admin" }
 	locationId: string(),
 	enabled: boolean(),
 	retentionCount: number().int().min(1).max(1e3),
-	label: string().optional(),
-	/**
-	* Per-destination cron expression. Empty string clears the
-	* schedule (manual-only). Validated server-side via croner;
-	* malformed expressions reject the upsert with an actionable
-	* message.
-	*/
-	cron: string().optional()
+	label: string().optional()
 }), _void(), {
 	kind: "mutation",
 	auth: "admin"
@@ -42313,4 +42377,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { inferModelProvider as $, literal as $t, addonWidgetsSourceCapability as A, buildFfmpegArgs as At, defaultDeviceFor as B, isEvent as Bt, RATE_CONTROL_RELAXED as C, storageEvictableCapability as Ct, RecordingSignalStatusSchema as D, errMsg as Dt, RecordingConfigSchema as E, webrtcSessionCapability as Et, cameraStreamsCapability as F, CAM_PROFILE_ORDER as Ft, detectionPipelineCapability as G, parseProfileBrokerId as Gt, deriveBatteryPresence as H, makeSourceBrokerId as Ht, createHwAccelCache as I, DeviceFeature as It, enumerateInferenceDevices as J, _enum as Jt, egressTranscodeSharingKey as K, selectAssignedProfileSlots as Kt, createLogChannelsProvider as L, DeviceType as Lt, audioAnalyzerCapability as M, isSoftwareDecode as Mt, audioKindId as N, BOOT_RECOVERY_BACKOFF_MS as Nt, RingBuffer as O, AUDIO_PRESETS as Ot, batteryCapability as P, BaseAddon as Pt, hfModelUrl as Q, lazy as Qt, customAction as R, createEvent as Rt, PoolMemoryWatchdog as S, runtimeDevices as St, RECORDING_EXPORT_MAX_READ_BYTES as T, supportedRuntimes as Tt, deriveDetailCropRect as U, nodePin as Ut, defineCustomActions as V, makeProfileBrokerId as Vt, deriveRecordingMode as W, parseJsonUnknown as Wt, evaluateZoneRules as X, boolean as Xt, evaluateSensorEdge as Y, array as Yt, failureContributionCapability as Z, discriminatedUnion as Zt, FailureCounters as _, recordingSignalCapability as _t, COCO_80_LABELS as a, union as an, migrateLegacyDeviceSignalConfig as at, NativeLeaseSettingsSchema as b, resolvePoolMemoryPolicy as bt, DEFAULT_CLUSTER_STEP_MODELS as c, parseProcStatus as ct, DEFAULT_EVENTS_BAND_BUFFER_SEC as d, pickDetailCropConvention as dt, number as en, isFirstLevelMacroClass as et, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as f, pickNativeLeaseOverride as ft, ExportRecordSchema as g, recordingExportCapability as gt, EncodeProfileSchema as h, recordingCapability as ht, BatteryStatusSchema as i, string as in, maskUrlCredentials as it, audioAnalysisCapability as j, invocationFromEncodeProfile as jt, YAMNET_TO_MACRO as k, Fmp4BoxSplitter as kt, DEFAULT_CLUSTER_STEP_SETTINGS as l, pickClusterStepModels as lt, DEVICE_BACKEND_TO_FORMAT as m, pipelineRunnerCapability as mt, AUDIO_BACKEND_CHOICES as n, preprocess as nn, logChannelsCapability as nt, COCO_TO_MACRO as o, EventCategory as on, motionDetectionCapability as ot, DEFAULT_NATIVE_LEASE_SETTINGS as p, pipelineExecutorCapability as pt, egressTransportFromRequest as q, sleep as qt, AUDIO_MACRO_LABELS as r, record as rn, mapAudioLabelToMacro as rt, DEFAULT_AUDIO_ANALYZER_CONFIG as s, overlayClusterStepSettings as st, APPLE_SA_TO_MACRO as t, object as tn, loadContributionCapability as tt, DEFAULT_DETAIL_CROP_CONVENTION as u, pickClusterStepSettings as ut, HF_BASE_URL as v, resolveClusterStepModelId as vt, RATE_CONTROL_TIGHT as w, streamBrokerCapability as wt, OpsLogEntrySchema as x, resolveRecordingProfiles as xt, NativeLeaseAdmissionSchema as y, resolveEgressDecodeHwAccel as yt, declareLogChannel as z, hydrateSchema as zt };
+export { inferModelProvider as $, lazy as $t, addonWidgetsSourceCapability as A, Fmp4BoxSplitter as At, defaultDeviceFor as B, hydrateSchema as Bt, RATE_CONTROL_RELAXED as C, storageEvictableCapability as Ct, RecordingSignalStatusSchema as D, webrtcSessionCapability as Dt, RecordingConfigSchema as E, supportedRuntimes as Et, cameraStreamsCapability as F, BaseAddon as Ft, detectionPipelineCapability as G, parseJsonUnknown as Gt, deriveBatteryPresence as H, makeProfileBrokerId as Ht, createHwAccelCache as I, CAM_PROFILE_ORDER as It, enumerateInferenceDevices as J, sleep as Jt, egressTranscodeSharingKey as K, parseProfileBrokerId as Kt, createLogChannelsProvider as L, DeviceFeature as Lt, audioAnalyzerCapability as M, invocationFromEncodeProfile as Mt, audioKindId as N, isSoftwareDecode as Nt, RingBuffer as O, errMsg as Ot, batteryCapability as P, BOOT_RECOVERY_BACKOFF_MS as Pt, hfModelUrl as Q, discriminatedUnion as Qt, customAction as R, DeviceType as Rt, PoolMemoryWatchdog as S, runtimeDevices as St, RECORDING_EXPORT_MAX_READ_BYTES as T, stripRetiredBandPreBufferSec as Tt, deriveDetailCropRect as U, makeSourceBrokerId as Ut, defineCustomActions as V, isEvent as Vt, deriveRecordingMode as W, nodePin as Wt, evaluateZoneRules as X, array as Xt, evaluateSensorEdge as Y, _enum as Yt, failureContributionCapability as Z, boolean as Zt, FailureCounters as _, recordingSignalCapability as _t, COCO_80_LABELS as a, string as an, migrateLegacyDeviceSignalConfig as at, NativeLeaseSettingsSchema as b, resolvePoolMemoryPolicy as bt, DEFAULT_CLUSTER_STEP_MODELS as c, parseProcStatus as ct, DEFAULT_EVENTS_BAND_BUFFER_SEC as d, pickDetailCropConvention as dt, literal as en, isFirstLevelMacroClass as et, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as f, pickNativeLeaseOverride as ft, ExportRecordSchema as g, recordingExportCapability as gt, EncodeProfileSchema as h, recordingCapability as ht, BatteryStatusSchema as i, record as in, maskUrlCredentials as it, audioAnalysisCapability as j, buildFfmpegArgs as jt, YAMNET_TO_MACRO as k, AUDIO_PRESETS as kt, DEFAULT_CLUSTER_STEP_SETTINGS as l, pickClusterStepModels as lt, DEVICE_BACKEND_TO_FORMAT as m, pipelineRunnerCapability as mt, AUDIO_BACKEND_CHOICES as n, object as nn, logChannelsCapability as nt, COCO_TO_MACRO as o, union as on, motionDetectionCapability as ot, DEFAULT_NATIVE_LEASE_SETTINGS as p, pipelineExecutorCapability as pt, egressTransportFromRequest as q, selectAssignedProfileSlots as qt, AUDIO_MACRO_LABELS as r, preprocess as rn, mapAudioLabelToMacro as rt, DEFAULT_AUDIO_ANALYZER_CONFIG as s, EventCategory as sn, overlayClusterStepSettings as st, APPLE_SA_TO_MACRO as t, number as tn, loadContributionCapability as tt, DEFAULT_DETAIL_CROP_CONVENTION as u, pickClusterStepSettings as ut, HF_BASE_URL as v, resolveClusterStepModelId as vt, RATE_CONTROL_TIGHT as w, streamBrokerCapability as wt, OpsLogEntrySchema as x, resolveRecordingProfiles as xt, NativeLeaseAdmissionSchema as y, resolveEgressDecodeHwAccel as yt, declareLogChannel as z, createEvent as zt };

package/dist/{dist-CBa1j3On.js → dist-DmCrC2yx.js}

@@ -9212,6 +9212,24 @@ var RecordingBandSchema = object({
 	end: string().regex(HHMM),
 	mode: RecordingBandModeSchema,
 	triggers: RecordingBandTriggersSchema.optional(),
+	/**
+	* RETIRED (D381). A band no longer carries a pre-buffer of its own.
+	*
+	* It was the retroactive KEEP bound — which already-written segments survive
+	* a trigger — and it had to be at least as wide as the widest pre-roll the
+	* broker could serve, or the gate would delete the seconds the ring had just
+	* handed the writer. That "at least as wide as" is the tell: it was a second
+	* expression of the broker's retention, in different units, in a different
+	* addon, with an invariant the operator had to maintain by hand. The keep
+	* bound is now derived from the one prebuffer ceiling and there is nothing
+	* left to configure here.
+	*
+	* The key survives in the SHAPE so a config written before that record still
+	* parses and can be migrated deliberately — `RecordingBandSchema` is not
+	* strict, so simply deleting it would strip an operator's value in silence on
+	* the next save (the failure D380 came one commit from shipping). Nothing
+	* reads it: {@link stripRetiredBandPreBufferSec} removes it on load.
+	*/
 	preBufferSec: number().min(0).optional(),
 	postBufferSec: number().min(0).optional()
 });
@@ -9229,29 +9247,56 @@ var RecordingBandSchema = object({
 * `postBufferSec` must therefore exceed one segment length plus the attach
 * latency (ffmpeg spawn + RTSP dial), or the window closes before the first
 * segment is ever finalized and the camera records nothing anyway. At the 10 s
-* default segment length, 30 s leaves room for two full segments. `preBufferSec`
-* is retroactive only — it costs nothing at record time, it merely keeps
-* already-written segments.
-*
-* ## Why `preBufferSec` is 15 and not one segment length
-*
-* It has to cover the broker's RECORDING pre-roll, which is media handed to the
-* writer from BEFORE the trigger (D192/D193). If this bound were narrower, the
-* keep gate would delete the very seconds the ring just supplied — two
-* authorities disagreeing about the same footage, which is the failure D191 was
-* written against. It is therefore set to `RECORDING_PRE_ROLL_MAX_MS` (15 s),
-* the widest window the broker can be configured to serve, so an operator
-* raising the cluster pre-roll can never walk past the gate silently. The
-* addon-side guard is
-* `packages/addon-pipeline/src/recorder/addon/__tests__/band-decision.spec.ts`.
-*
-* An EXPLICIT `0` is left alone: that is an operator statement, not an omission,
-* and it is excluded from that invariant by name.
-*/
-var DEFAULT_EVENTS_BAND_BUFFER_SEC = {
-	preBufferSec: 15,
-	postBufferSec: 30
-};
+* default segment length, 30 s leaves room for two full segments.
+*
+* ## There is no `preBufferSec` here any more (D381)
+*
+* There used to be, at 15 s, and its whole justification was that it had to
+* cover the widest pre-roll the broker could serve. A number whose only
+* correct value is another subsystem's ceiling is not a setting; it is that
+* ceiling, restated where it can drift. The keep bound is derived from the
+* prebuffer ceiling directly now, in `band-decision.ts`, so an operator
+* raising the prebuffer cannot walk past the gate at all rather than merely
+* being warned not to.
+*/
+var DEFAULT_EVENTS_BAND_BUFFER_SEC = { postBufferSec: 30 };
+/**
+* Drop the RETIRED band `preBufferSec` from a persisted recording config.
+*
+* Explicit, and it reports what it removed, because the alternative is a
+* silent strip: `RecordingBandSchema` is a plain `z.object`, so the key
+* survives a parse and disappears on the next save with no line anywhere. An
+* operator who had typed a number would find it gone and nothing would say
+* when or why.
+*
+* Nothing is carried forward: the value it held was always required to be at
+* least the broker's widest pre-roll, and the gate is now derived from exactly
+* that ceiling. Every configuration that was legal therefore keeps a keep-gate
+* at least as wide as the one it had — including an explicit `0`, which widens.
+* That is deliberate and it is the only behaviour change: a band that kept
+* nothing before its trigger now keeps up to the prebuffer ceiling of
+* already-written footage, which is media that exists either way.
+*/
+function stripRetiredBandPreBufferSec(config) {
+	const strippedBands = [];
+	const bands = config.bands.map((band, index) => {
+		if (band.preBufferSec === void 0) return band;
+		strippedBands.push(index);
+		const { preBufferSec: _retired, ...rest } = band;
+		return rest;
+	});
+	if (strippedBands.length === 0) return {
+		config,
+		strippedBands
+	};
+	return {
+		config: {
+			...config,
+			bands
+		},
+		strippedBands
+	};
+}
 DEFAULT_EVENTS_BAND_BUFFER_SEC.postBufferSec * 1e3;
 /**
 * Per-device retention overrides. Every field is optional; an unset or `0`
@@ -12172,12 +12217,30 @@ var BackupDestinationInfoSchema = object({
 	lastSuccessAt: number().optional(),
 	/** Newest-archive size from `manifests.json`, or undefined. */
 	lastSuccessSizeBytes: number().optional(),
-	/** Per-destination cron expression. Empty = manual-only (no schedule). */
+	/**
+	* Cron cadence(s) of the ENABLED schedules that fan out to this
+	* destination, comma-joined. Absent when no enabled schedule targets it
+	* — a destination nothing is scheduled to write to must not advertise a
+	* cadence (D384). This is never the `backup_destination_policies.cron`
+	* column: that per-location cron has scheduled nothing since 2026-07-28
+	* and reading it made a destination with a DISABLED schedule claim a
+	* nightly run.
+	*/
 	cron: string().optional(),
-	/** ms-epoch of next computed firing for this destination's cron, if any. */
+	/** ms-epoch of the next firing across those schedules (earliest), if any. */
 	nextRunAt: number().optional(),
-	/** ms-epoch of last successful scheduled run (mirrors policy.lastRunAt). */
-	lastRunAt: number().optional()
+	/**
+	* ms-epoch of the last time a run ATTEMPTED to write here — success or
+	* failure. Never a success stamp: pair it with `lastSuccessAt` (the
+	* newest archive that actually landed) and `lastError`.
+	*/
+	lastAttemptAt: number().optional(),
+	/**
+	* Why the last attempt failed, verbatim. Absent when the last attempt
+	* landed the archive. A destination that has never been written to has
+	* neither this nor `lastAttemptAt`.
+	*/
+	lastError: string().optional()
 });
 /**
 * Per-archive entry returned by `backup.listArchives({ destinationId })`.
@@ -12340,8 +12403,16 @@ var BackupScheduleSchema = object({
 	retentionCount: number().int().min(1).max(1e3),
 	/** Optional subset of source locations to include; omitted = all. */
 	dataSources: array(string()).readonly().optional(),
-	/** ms-epoch of last successful run. */
-	lastRunAt: number().optional(),
+	/**
+	* ms-epoch of the last tick that FIRED this schedule. Stamped before the
+	* archive runs (it is the dedupe anchor), so it says "attempted", never
+	* "succeeded" — a run refused by every destination stamps it too.
+	*/
+	lastAttemptAt: number().optional(),
+	/** ms-epoch of the last run of this schedule that landed at ≥1 destination. */
+	lastSuccessAt: number().optional(),
+	/** Why the last fired run failed, verbatim. Absent when it succeeded. */
+	lastError: string().optional(),
 	/** ms-epoch of next computed firing (read-only, filled on list). */
 	nextRunAt: number().optional()
 });
@@ -12390,14 +12461,7 @@ method(_void(), array(BackupDestinationInfoSchema).readonly(), { auth: "admin" }
 	locationId: string(),
 	enabled: boolean(),
 	retentionCount: number().int().min(1).max(1e3),
-	label: string().optional(),
-	/**
-	* Per-destination cron expression. Empty string clears the
-	* schedule (manual-only). Validated server-side via croner;
-	* malformed expressions reject the upsert with an actionable
-	* message.
-	*/
-	cron: string().optional()
+	label: string().optional()
 }), _void(), {
 	kind: "mutation",
 	auth: "admin"
@@ -43014,6 +43078,12 @@ Object.defineProperty(exports, "string", {
 		return string;
 	}
 });
+Object.defineProperty(exports, "stripRetiredBandPreBufferSec", {
+	enumerable: true,
+	get: function() {
+		return stripRetiredBandPreBufferSec;
+	}
+});
 Object.defineProperty(exports, "supportedRuntimes", {
 	enumerable: true,
 	get: function() {

package/dist/{lazy-sharp-CS5WE9mI.js → lazy-sharp-DBHsD2lh.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-CBa1j3On.js");
+const require_dist = require("./dist-DmCrC2yx.js");
 let node_path = require("node:path");
 node_path = require_dist.__toESM(node_path);
 let node_url = require("node:url");

package/dist/motion-wasm/index.js

@@ -2,8 +2,8 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-CBa1j3On.js");
-const require_lazy_sharp = require("../lazy-sharp-CS5WE9mI.js");
+const require_dist = require("../dist-DmCrC2yx.js");
+const require_lazy_sharp = require("../lazy-sharp-DBHsD2lh.js");
 let node_fs = require("node:fs");
 let node_path = require("node:path");
 //#region src/motion-wasm/wasm-motion-detector.ts

package/dist/motion-wasm/index.mjs

@@ -1,4 +1,4 @@
-import { Lt as DeviceType, Pt as BaseAddon, X as evaluateZoneRules, ot as motionDetectionCapability, zt as hydrateSchema } from "../dist-Y4BsF_EC.mjs";
+import { Bt as hydrateSchema, Ft as BaseAddon, Rt as DeviceType, X as evaluateZoneRules, ot as motionDetectionCapability } from "../dist-B23u1tmN.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";

package/dist/{node-B5ouEQYN.mjs → node-D1MLn6oV.mjs}

@@ -1,4 +1,4 @@
-import { At as buildFfmpegArgs, Dt as errMsg, Mt as isSoftwareDecode, kt as Fmp4BoxSplitter } from "./dist-Y4BsF_EC.mjs";
+import { At as Fmp4BoxSplitter, Nt as isSoftwareDecode, Ot as errMsg, jt as buildFfmpegArgs } from "./dist-B23u1tmN.mjs";
 import { randomUUID } from "node:crypto";
 import "node:fs";
 import "node:path";

package/dist/{node-C-B8VuGi.js → node-DCSTbt6C.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-CBa1j3On.js");
+const require_dist = require("./dist-DmCrC2yx.js");
 let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
 node_fs = require_dist.__toESM(node_fs, 1);

package/dist/pipeline-runner/index.js

@@ -2,12 +2,12 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-CBa1j3On.js");
-const require_node = require("../node-C-B8VuGi.js");
-const require_default_detection_model = require("../default-detection-model-CM-8U0Bb.js");
-const require_worker_protocol = require("../worker-protocol-CXsdriRX.js");
+const require_dist = require("../dist-DmCrC2yx.js");
+const require_node = require("../node-DCSTbt6C.js");
+const require_default_detection_model = require("../default-detection-model-CMe44Kid.js");
+const require_worker_protocol = require("../worker-protocol-c1r1Yddg.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
-const require_lazy_sharp = require("../lazy-sharp-CS5WE9mI.js");
+const require_lazy_sharp = require("../lazy-sharp-DBHsD2lh.js");
 const require_restream_intent = require("../restream-intent-Cv9x3jmu.js");
 const require_event_loop_stall_monitor = require("../event-loop-stall-monitor-DaUBcb13.js");
 const require_remote_restream = require("../remote-restream-CO36Sr30.js");

package/dist/pipeline-runner/index.mjs

@@ -1,7 +1,7 @@
-import { $t as literal, Dt as errMsg, Jt as _enum, Pt as BaseAddon, Qt as lazy, R as customAction, Rt as createEvent, U as deriveDetailCropRect, Ut as nodePin, V as defineCustomActions, Xt as boolean, Yt as array, Z as failureContributionCapability, _ as FailureCounters, dt as pickDetailCropConvention, en as number, ft as pickNativeLeaseOverride, in as string, m as DEVICE_BACKEND_TO_FORMAT, mt as pipelineRunnerCapability, on as EventCategory, p as DEFAULT_NATIVE_LEASE_SETTINGS, tn as object, tt as loadContributionCapability, u as DEFAULT_DETAIL_CROP_CONVENTION } from "../dist-Y4BsF_EC.mjs";
-import { i as NO_COST_CLAIM, t as ChildCostRegistry } from "../node-B5ouEQYN.mjs";
-import { i as resolveFrameViewGeometry, l as getStepDefinition, r as localFrameRegistry } from "../default-detection-model-CplzzTmN.mjs";
-import { a as nativeLeaseSettingEnv, t as isWorkerReply } from "../worker-protocol-_7zrToTo.mjs";
+import { $t as lazy, Ft as BaseAddon, Ot as errMsg, R as customAction, U as deriveDetailCropRect, V as defineCustomActions, Wt as nodePin, Xt as array, Yt as _enum, Z as failureContributionCapability, Zt as boolean, _ as FailureCounters, an as string, dt as pickDetailCropConvention, en as literal, ft as pickNativeLeaseOverride, m as DEVICE_BACKEND_TO_FORMAT, mt as pipelineRunnerCapability, nn as object, p as DEFAULT_NATIVE_LEASE_SETTINGS, sn as EventCategory, tn as number, tt as loadContributionCapability, u as DEFAULT_DETAIL_CROP_CONVENTION, zt as createEvent } from "../dist-B23u1tmN.mjs";
+import { i as NO_COST_CLAIM, t as ChildCostRegistry } from "../node-D1MLn6oV.mjs";
+import { i as resolveFrameViewGeometry, l as getStepDefinition, r as localFrameRegistry } from "../default-detection-model-O1uBusV2.mjs";
+import { a as nativeLeaseSettingEnv, t as isWorkerReply } from "../worker-protocol-BxpGZ0Dt.mjs";
 import { t as resolveHubHostname } from "../hub-hostname-cCknRYKj.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
 import { n as withDetectionIntent } from "../restream-intent-B4BXZra7.mjs";

package/dist/{retire-root-keys-Csb8z2f3.js → prebuffer-DmBYRQWg.mjs}

@@ -323,16 +323,68 @@ function isRecord(value) {
 function errText(err) {
 	return err instanceof Error ? err.message : String(err);
 }
-//#endregion
-Object.defineProperty(exports, "RowMapStore", {
-	enumerable: true,
-	get: function() {
-		return RowMapStore;
-	}
-});
-Object.defineProperty(exports, "retireRootKeys", {
-	enumerable: true,
-	get: function() {
-		return retireRootKeys;
+/** {@link PREBUFFER_MAX_SEC} in ms — the widest window any consumer can be served. */
+var PREBUFFER_MAX_MS = 15 * 1e3;
+/** Clamp an enabled window's seconds into `[MIN, MAX]`; `0`/invalid means off. */
+function clampSeconds(value) {
+	if (value === void 0) return 5;
+	if (!Number.isFinite(value) || value <= 0) return 0;
+	return Math.min(15, Math.max(1, value));
+}
+/** `enabled: false` is the only representation of off — never `seconds: 0` alone. */
+var OFF = {
+	enabled: false,
+	seconds: 0
+};
+/**
+* The ONE prebuffer decision.
+*
+* Precedence: explicit per-stream override -> battery / terminal relay (off) ->
+* the profile's warm default -> off. Every layer that used to make this
+* decision somewhere else — `isDefaultWarm`, `applyPreBufferConfig`,
+* `getEffectivePreBufferSec`, `resolvePreRollMs`, `resolveRecordingPreRollMs` —
+* is this function now, so the four of them cannot disagree about one camera.
+*/
+function resolvePrebuffer(input) {
+	const override = input.overrides?.[input.camStreamId];
+	if (override !== void 0) {
+		if (!override.enabled) return OFF;
+		const seconds = clampSeconds(override.seconds);
+		return seconds > 0 ? {
+			enabled: true,
+			seconds
+		} : OFF;
 	}
-});
+	if (input.batteryOperated === true) return OFF;
+	if (input.terminalRelay === true) return OFF;
+	if (input.defaultWarm !== true) return OFF;
+	const seconds = clampSeconds(input.clusterSeconds);
+	return seconds > 0 ? {
+		enabled: true,
+		seconds
+	} : OFF;
+}
+/** The retention, in ms — the single number the ring is trimmed to. */
+function prebufferRetentionMs(config) {
+	return config.enabled ? config.seconds * 1e3 : 0;
+}
+/**
+* What a consumer asking for `requestedMs` of history is actually served.
+*
+* The cap is the point of the record: a consumer states a WISH and the ring
+* states the truth. `undefined` means "whatever you have", which is what a
+* consumer that configures nothing asks for — and is why the recorder no
+* longer carries a duration of its own.
+*
+* A nonsense request resolves to `0`, never to the whole window: an
+* unparseable number arriving on a dial path must not be able to widen a burst.
+*/
+function capPreRollRequestMs(requestedMs, retainedMs) {
+	const retained = Number.isFinite(retainedMs) && retainedMs > 0 ? retainedMs : 0;
+	if (retained === 0) return 0;
+	if (requestedMs === void 0) return retained;
+	if (!Number.isFinite(requestedMs) || requestedMs <= 0) return 0;
+	return Math.min(requestedMs, retained);
+}
+//#endregion
+export { retireRootKeys as a, resolvePrebuffer as i, capPreRollRequestMs as n, RowMapStore as o, prebufferRetentionMs as r, PREBUFFER_MAX_MS as t };