@camstack/addon-post-analysis 1.2.100 → 1.2.101

package/dist/pipeline-analytics/{_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-Caz0R4UZ.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-D8HLGYbH.mjs}

@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.90",
+		version: "1.2.91",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_analytics_widgets",

package/dist/pipeline-analytics/{hostInit-By6c47y7.mjs → hostInit-Br0v_V7W.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.2.90",
+				version: "1.2.91",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/pipeline-analytics/index.js

@@ -8304,23 +8304,23 @@ var en_default = {
 	},
 	"class.other": "{{name}}",
 	"group.others.person": {
-		"one": "1 other person",
+		"one": "{{count}} other person",
 		"other": "{{count}} other people"
 	},
 	"group.others.vehicle": {
-		"one": "1 other vehicle",
+		"one": "{{count}} other vehicle",
 		"other": "{{count}} other vehicles"
 	},
 	"group.others.animal": {
-		"one": "1 other animal",
+		"one": "{{count}} other animal",
 		"other": "{{count}} other animals"
 	},
 	"group.others.package": {
-		"one": "1 other package",
+		"one": "{{count}} other package",
 		"other": "{{count}} other packages"
 	},
 	"group.others.other": {
-		"one": "1 other {{classNoun}}",
+		"one": "{{count}} other {{classNoun}}",
 		"other": "{{count}} other {{classNoun}}"
 	},
 	"occupancy.body": "{{scope}} {{op}} ({{count}}/{{capacity}})",
@@ -8518,23 +8518,23 @@ var it_default = {
 	},
 	"class.other": "{{name}}",
 	"group.others.person": {
-		"one": "1 altra persona",
+		"one": "{{count}} altra persona",
 		"other": "{{count}} altre persone"
 	},
 	"group.others.vehicle": {
-		"one": "1 altro veicolo",
+		"one": "{{count}} altro veicolo",
 		"other": "{{count}} altri veicoli"
 	},
 	"group.others.animal": {
-		"one": "1 altro animale",
+		"one": "{{count}} altro animale",
 		"other": "{{count}} altri animali"
 	},
 	"group.others.package": {
-		"one": "1 altro pacco",
+		"one": "{{count}} altro pacco",
 		"other": "{{count}} altri pacchi"
 	},
 	"group.others.other": {
-		"one": "1 altro {{classNoun}}",
+		"one": "{{count}} altro {{classNoun}}",
 		"other": "{{count}} altri {{classNoun}}"
 	},
 	"occupancy.body": "{{scope}} {{op}} ({{count}}/{{capacity}})",
@@ -31058,8 +31058,14 @@ function reportUnvouchedClips(deps, deviceId, clips) {
 * @durable class=config owner=pipeline-analytics
 *   write="a signed-in viewer user saves a named snapshot of their local stores"
 *   retention="none — a row goes only when its owner deletes it"
+*
+* Renamed from the bare `viewer-settings-snapshots` on 2026-08-19: an addon
+* collection carries its owner's prefix, and the bare name sat in the same flat
+* namespace as the kernel's `users` / `system-settings`. Rows already written
+* under the old name are adopted at boot by
+* `viewer-settings-legacy-adoption.ts`.
 */
-var VIEWER_SETTINGS_SNAPSHOTS_COLLECTION = "viewer-settings-snapshots";
+var VIEWER_SETTINGS_SNAPSHOTS_COLLECTION = "pipeline-analytics:viewer-settings-snapshots";
 var COLUMNS = [
 	{
 		name: "id",
@@ -31159,7 +31165,7 @@ var ViewerSettingsSnapshotStore = class {
 			collection: VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
 			columns: [...COLUMNS],
 			indexes: [{
-				name: "idx_viewer_settings_owner",
+				name: "idx_pa_viewer_settings_owner",
 				columns: ["ownerUserId"]
 			}]
 		});
@@ -31258,6 +31264,183 @@ function makeViewerSettingsActionHandlers(store) {
 		}
 	};
 }
+//#endregion
+//#region src/pipeline-analytics/viewer-settings-legacy-adoption.ts
+/**
+* @durable class=config owner=pipeline-analytics
+*   write="NOTHING writes it any more — it is the pre-2026-08-19 bare name of
+*     `pipeline-analytics:viewer-settings-snapshots`, declared here only so its
+*     surviving rows can be READ once and moved"
+*   retention="drained, not pruned: a row goes as soon as the successor is
+*     confirmed to hold the same id. The table is empty and inert once every
+*     hub has booted this addon; it is then dropped through the kernel's
+*     `RETIRED_COLLECTIONS` and this module deleted."
+*
+* Bare, and therefore a namespacing violation — hence the single
+* `ALLOWED_BARE` entry in `scripts/check-collection-namespacing.ts`, which
+* names this file and the condition for removing both.
+*/
+var LEGACY_VIEWER_SETTINGS_SNAPSHOTS_COLLECTION = "viewer-settings-snapshots";
+/**
+* The ORIGINAL column list, byte-for-byte.
+*
+* Do not "tidy" this to reference the successor's constant: they are allowed to
+* diverge, and the day they do, a shared constant would silently rebuild the
+* legacy table and destroy the rows.
+*/
+var LEGACY_COLUMNS = [
+	{
+		name: "id",
+		type: "TEXT",
+		primaryKey: true,
+		notNull: true
+	},
+	{
+		name: "name",
+		type: "TEXT",
+		notNull: true
+	},
+	{
+		name: "ownerUserId",
+		type: "TEXT",
+		notNull: true
+	},
+	{
+		name: "ownerUsername",
+		type: "TEXT",
+		notNull: true
+	},
+	{
+		name: "createdAt",
+		type: "INTEGER",
+		notNull: true
+	},
+	{
+		name: "updatedAt",
+		type: "INTEGER",
+		notNull: true
+	},
+	{
+		name: "blob",
+		type: "JSON",
+		notNull: true
+	}
+];
+/** Bounded read: this table held 1 row on the reference hub. */
+var LEGACY_READ_LIMIT = 500;
+function errText(err) {
+	return err instanceof Error ? err.message : String(err);
+}
+function asRows(raw) {
+	if (!Array.isArray(raw)) return [];
+	const out = [];
+	for (const item of raw) {
+		if (typeof item !== "object" || item === null) continue;
+		const id = Reflect.get(item, "id");
+		const data = Reflect.get(item, "data");
+		if (typeof id !== "string" || typeof data !== "object" || data === null) continue;
+		out.push({
+			id,
+			data
+		});
+	}
+	return out;
+}
+/**
+* Move every legacy row into the successor and clear the legacy table.
+*
+* Returns the number of legacy rows RETIRED — the completion metric, not the
+* number written. A row copied but not yet verified counts as zero and is
+* retried on the next boot, which is the safe direction.
+*/
+async function adoptLegacyViewerSettingsSnapshots(deps) {
+	await deps.store.declareCollection.mutate({
+		collection: LEGACY_VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+		columns: LEGACY_COLUMNS
+	});
+	let legacy;
+	try {
+		legacy = asRows(await deps.store.query.query({
+			collection: LEGACY_VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+			filter: { limit: LEGACY_READ_LIMIT }
+		}));
+	} catch (err) {
+		deps.logger.warn("viewer-settings legacy adoption skipped — legacy read failed", { meta: {
+			collection: LEGACY_VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+			error: errText(err)
+		} });
+		return 0;
+	}
+	if (legacy.length === 0) return 0;
+	let existing;
+	try {
+		existing = new Set(asRows(await deps.store.query.query({
+			collection: VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+			filter: { limit: LEGACY_READ_LIMIT }
+		})).map((r) => r.id));
+	} catch (err) {
+		deps.logger.warn("viewer-settings legacy adoption skipped — successor read failed", { meta: {
+			collection: VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+			error: errText(err)
+		} });
+		return 0;
+	}
+	let written = 0;
+	for (const row of legacy) {
+		if (existing.has(row.id)) continue;
+		try {
+			await deps.store.set.mutate({
+				collection: VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+				key: row.id,
+				value: row.data
+			});
+			written += 1;
+		} catch (err) {
+			deps.logger.warn("viewer-settings legacy adoption — one row failed to write", { meta: {
+				snapshotId: row.id,
+				error: errText(err)
+			} });
+		}
+	}
+	let landed;
+	try {
+		landed = new Set(asRows(await deps.store.query.query({
+			collection: VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+			filter: { limit: LEGACY_READ_LIMIT }
+		})).map((r) => r.id));
+	} catch (err) {
+		deps.logger.warn("viewer-settings legacy adoption — verification read failed, legacy rows kept", { meta: {
+			written,
+			error: errText(err)
+		} });
+		return 0;
+	}
+	let retired = 0;
+	for (const row of legacy) {
+		if (!landed.has(row.id)) continue;
+		try {
+			await deps.store.delete.mutate({
+				collection: LEGACY_VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+				key: row.id
+			});
+			retired += 1;
+		} catch (err) {
+			deps.logger.warn("viewer-settings legacy adoption — one legacy row failed to delete", { meta: {
+				snapshotId: row.id,
+				error: errText(err)
+			} });
+		}
+	}
+	deps.logger.warn("viewer-settings snapshots adopted from the legacy bare collection", { meta: {
+		from: LEGACY_VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+		to: VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+		found: legacy.length,
+		written,
+		retired,
+		kept: legacy.length - retired
+	} });
+	return retired;
+}
 /**
 * The VIDEO's playback rate — 4×, the same as {@link NC_GIF_SPEED}.
 *
@@ -40020,6 +40203,129 @@ function buildRecordedStillPorts(input) {
 		})
 	};
 }
+/** Where the completion marker lives. */
+var MIGRATION_MARKER_COLLECTION = "pipeline-analytics:migrations";
+var MIGRATION_MARKER_KEY = "label-tier-4g";
+/**
+* The decision for ONE row, exposed so the rule is testable without a store.
+*
+* `null` = leave the row alone.
+*/
+function decideRowMigration(data, now) {
+	const label = data["label"];
+	if (typeof label !== "string" || label.length === 0) return null;
+	if (typeof data["subLabel"] === "string" && data["subLabel"].length > 0) return null;
+	if (data["labelMeta"] !== null && data["labelMeta"] !== void 0) return null;
+	if (isMacroClass(label)) return {
+		label: null,
+		labelScore: null,
+		labelMeta: null
+	};
+	return {
+		label: null,
+		labelScore: null,
+		labelMeta: null,
+		subLabel: label,
+		subLabelScore: null,
+		subLabelMeta: {
+			stepId: MIGRATION_STEP_ID,
+			decidedAt: now
+		}
+	};
+}
+/** Migrate one collection, paged and bounded. */
+async function migrateCollectionLabelTiers(deps, collection) {
+	let scanned = 0;
+	let demoted = 0;
+	let cleared = 0;
+	let skipped = 0;
+	let offset = 0;
+	let truncated = false;
+	for (;;) {
+		if (scanned >= 2e5) {
+			truncated = true;
+			break;
+		}
+		const rows = await deps.store.query.query({
+			collection,
+			filter: {
+				limit: 500,
+				offset
+			}
+		});
+		if (rows.length === 0) break;
+		for (const row of rows) {
+			scanned++;
+			const patch = decideRowMigration(row.data, deps.now());
+			if (patch === null) {
+				skipped++;
+				continue;
+			}
+			try {
+				await deps.store.update.mutate({
+					collection,
+					id: row.id,
+					data: patch
+				});
+				if (patch["subLabel"] === void 0) cleared++;
+				else demoted++;
+			} catch (err) {
+				deps.logger.warn("label tier migration row failed", { meta: {
+					collection,
+					id: row.id,
+					error: String(err)
+				} });
+				skipped++;
+			}
+		}
+		if (rows.length < 500) break;
+		offset += rows.length;
+	}
+	return {
+		collection,
+		scanned,
+		demoted,
+		cleared,
+		skipped,
+		truncated
+	};
+}
+/**
+* Run the migration across the collections that carry the tiered columns, once.
+*
+* The marker short-circuits a completed migration; it is written only when
+* NEITHER collection was truncated, so an interrupted pass resumes on the next
+* boot instead of declaring itself done.
+*/
+async function runLabelTierMigration(deps, collections) {
+	try {
+		const marker = await deps.store.get.query({
+			collection: MIGRATION_MARKER_COLLECTION,
+			key: MIGRATION_MARKER_KEY
+		});
+		if (marker !== null && marker !== void 0) return [];
+	} catch {}
+	const stats = [];
+	for (const collection of collections) stats.push(await migrateCollectionLabelTiers(deps, collection));
+	if (stats.every((s) => !s.truncated)) try {
+		await deps.store.set.mutate({
+			collection: MIGRATION_MARKER_COLLECTION,
+			key: MIGRATION_MARKER_KEY,
+			value: { completedAt: deps.now() }
+		});
+	} catch (err) {
+		deps.logger.warn("label tier migration marker failed", { meta: { error: String(err) } });
+	}
+	for (const s of stats) deps.logger.info("label tier migration", { meta: {
+		collection: s.collection,
+		scanned: s.scanned,
+		demoted: s.demoted,
+		cleared: s.cleared,
+		skipped: s.skipped,
+		truncated: s.truncated
+	} });
+	return stats;
+}
 //#endregion
 //#region src/durable/lts-aggregator.ts
 /** Wall-clock bucket width. Five minutes, matching HA's statistics tier. */
@@ -45211,6 +45517,55 @@ var ANALYTICS_COLLECTIONS = [
 			why: "a five-minute statistics row summarises an INTERVAL, not an entity — there is no owner it can be orphaned from. Its bound is a ROW CAP per (subject, series, scope) enforced by the aggregator itself (105,120 rows ≈ one year), deliberately not an age sweep: D61 collapsed ten disagreeing age clocks into one, and an LTS series has no clock but its own."
 		}
 	},
+	{
+		collection: RETRAIN_ANNOTATIONS_COLLECTION,
+		classification: {
+			kind: "never-orphaned",
+			why: "the ground truth an operator DREW. It declares `trackId` and must be classified by hand for that reason: the id is provenance, not ownership. The dataset addresses COPIES (D81), which is precisely what makes a 'trained' track evictable again — so a track ageing out leaves the annotations standing. Rows go only through `deleteForFrame`, when the operator deselects the frame. Deleting one because its track expired would destroy labelling work no sweep can recreate."
+		}
+	},
+	{
+		collection: RETRAIN_FRAMES_COLLECTION,
+		classification: {
+			kind: "never-orphaned",
+			why: "the frame COPIES the dataset owns outright, under a `retrain` prefix no owner cascade and no age sweep walks (D81). Also declares `trackId` as provenance. Rows go only through `deleteFrame`, after their annotations, on operator deselection. NOTE: nothing caps this table or the disk it consumes — that is a deliberate decision, not an oversight, and it is the one collection here whose bound is an operator's habit."
+		}
+	},
+	{
+		collection: SCENE_COLLECTION,
+		classification: {
+			kind: "never-orphaned",
+			why: "operator intent — one row per (deviceId, monitorId), created and destroyed by scene CRUD or by a device-removal sweep. Nothing retention does can orphan it, and no age clock applies: a scene the operator configured and never revisits is not stale, it is configured."
+		}
+	},
+	{
+		collection: SCENE_LATCH_COLLECTION,
+		classification: {
+			kind: "never-orphaned",
+			why: "it IS owned — by the scene set — but the owner-cleanup is self-contained: `pruneExcept(the scene set)` runs on every scene reload, so a latch whose scene is gone is collected there and never by retention. Deliberately NOT `owner-indirection`: that kind puts a collection into `auditableCollections()`, and the orphan audit resolves exactly one indirection, that of `pipeline-analytics:media`."
+		}
+	},
+	{
+		collection: MIGRATION_MARKER_COLLECTION,
+		classification: {
+			kind: "never-orphaned",
+			why: "a one-row completion marker for the label-tier 4g pass. It summarises a one-time event, so there is no entity it can be orphaned from — and its PRESENCE is what stops the migration running again, so deleting it is not cleanup, it is a re-run over every track, face and object-event row."
+		}
+	},
+	{
+		collection: VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+		classification: {
+			kind: "never-orphaned",
+			why: "a hub user's named snapshot of their own viewer layout. It is not analytics data — it happens to live in this addon because the actions ride `addons.custom`. Owned by the user who saved it and deleted only by them; no track, device or event can orphan it, and no age applies."
+		}
+	},
+	{
+		collection: LEGACY_VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+		classification: {
+			kind: "never-orphaned",
+			why: "the drained predecessor of the row above, declared only so its rows can be read once and moved (`viewer-settings-legacy-adoption.ts`). Retention must never touch it: its rows go one way only, to the successor, gated on a re-read that confirms they landed. Delete this entry together with that module."
+		}
+	},
 	{
 		collection: STATIONARY_COLLECTION,
 		classification: {
@@ -49890,129 +50245,6 @@ function evaluatePeriodicSnapshot(input) {
 		movedFraction
 	};
 }
-/** Where the completion marker lives. */
-var MIGRATION_MARKER_COLLECTION = "pipeline-analytics:migrations";
-var MIGRATION_MARKER_KEY = "label-tier-4g";
-/**
-* The decision for ONE row, exposed so the rule is testable without a store.
-*
-* `null` = leave the row alone.
-*/
-function decideRowMigration(data, now) {
-	const label = data["label"];
-	if (typeof label !== "string" || label.length === 0) return null;
-	if (typeof data["subLabel"] === "string" && data["subLabel"].length > 0) return null;
-	if (data["labelMeta"] !== null && data["labelMeta"] !== void 0) return null;
-	if (isMacroClass(label)) return {
-		label: null,
-		labelScore: null,
-		labelMeta: null
-	};
-	return {
-		label: null,
-		labelScore: null,
-		labelMeta: null,
-		subLabel: label,
-		subLabelScore: null,
-		subLabelMeta: {
-			stepId: MIGRATION_STEP_ID,
-			decidedAt: now
-		}
-	};
-}
-/** Migrate one collection, paged and bounded. */
-async function migrateCollectionLabelTiers(deps, collection) {
-	let scanned = 0;
-	let demoted = 0;
-	let cleared = 0;
-	let skipped = 0;
-	let offset = 0;
-	let truncated = false;
-	for (;;) {
-		if (scanned >= 2e5) {
-			truncated = true;
-			break;
-		}
-		const rows = await deps.store.query.query({
-			collection,
-			filter: {
-				limit: 500,
-				offset
-			}
-		});
-		if (rows.length === 0) break;
-		for (const row of rows) {
-			scanned++;
-			const patch = decideRowMigration(row.data, deps.now());
-			if (patch === null) {
-				skipped++;
-				continue;
-			}
-			try {
-				await deps.store.update.mutate({
-					collection,
-					id: row.id,
-					data: patch
-				});
-				if (patch["subLabel"] === void 0) cleared++;
-				else demoted++;
-			} catch (err) {
-				deps.logger.warn("label tier migration row failed", { meta: {
-					collection,
-					id: row.id,
-					error: String(err)
-				} });
-				skipped++;
-			}
-		}
-		if (rows.length < 500) break;
-		offset += rows.length;
-	}
-	return {
-		collection,
-		scanned,
-		demoted,
-		cleared,
-		skipped,
-		truncated
-	};
-}
-/**
-* Run the migration across the collections that carry the tiered columns, once.
-*
-* The marker short-circuits a completed migration; it is written only when
-* NEITHER collection was truncated, so an interrupted pass resumes on the next
-* boot instead of declaring itself done.
-*/
-async function runLabelTierMigration(deps, collections) {
-	try {
-		const marker = await deps.store.get.query({
-			collection: MIGRATION_MARKER_COLLECTION,
-			key: MIGRATION_MARKER_KEY
-		});
-		if (marker !== null && marker !== void 0) return [];
-	} catch {}
-	const stats = [];
-	for (const collection of collections) stats.push(await migrateCollectionLabelTiers(deps, collection));
-	if (stats.every((s) => !s.truncated)) try {
-		await deps.store.set.mutate({
-			collection: MIGRATION_MARKER_COLLECTION,
-			key: MIGRATION_MARKER_KEY,
-			value: { completedAt: deps.now() }
-		});
-	} catch (err) {
-		deps.logger.warn("label tier migration marker failed", { meta: { error: String(err) } });
-	}
-	for (const s of stats) deps.logger.info("label tier migration", { meta: {
-		collection: s.collection,
-		scanned: s.scanned,
-		demoted: s.demoted,
-		cleared: s.cleared,
-		skipped: s.skipped,
-		truncated: s.truncated
-	} });
-	return stats;
-}
 //#endregion
 //#region src/pipeline-analytics/store/object-embedding-store.ts
 /**
@@ -52424,6 +52656,14 @@ var PipelineAnalyticsAddon = class extends require_dist.BaseAddon {
 			ViewerSettingsSnapshotStore.declare(api.settingsStore)
 		]);
 		this.viewerSettingsSnapshots = new ViewerSettingsSnapshotStore(api.settingsStore);
+		try {
+			await adoptLegacyViewerSettingsSnapshots({
+				store: api.settingsStore,
+				logger: this.ctx.logger.child("viewer-settings")
+			});
+		} catch (err) {
+			this.ctx.logger.warn("viewer-settings legacy adoption threw", { meta: { error: require_dist.errMsg(err) } });
+		}
 		runLabelTierMigration({
 			store: api.settingsStore,
 			logger: this.ctx.logger,

package/dist/pipeline-analytics/index.mjs

@@ -8297,23 +8297,23 @@ var en_default = {
 	},
 	"class.other": "{{name}}",
 	"group.others.person": {
-		"one": "1 other person",
+		"one": "{{count}} other person",
 		"other": "{{count}} other people"
 	},
 	"group.others.vehicle": {
-		"one": "1 other vehicle",
+		"one": "{{count}} other vehicle",
 		"other": "{{count}} other vehicles"
 	},
 	"group.others.animal": {
-		"one": "1 other animal",
+		"one": "{{count}} other animal",
 		"other": "{{count}} other animals"
 	},
 	"group.others.package": {
-		"one": "1 other package",
+		"one": "{{count}} other package",
 		"other": "{{count}} other packages"
 	},
 	"group.others.other": {
-		"one": "1 other {{classNoun}}",
+		"one": "{{count}} other {{classNoun}}",
 		"other": "{{count}} other {{classNoun}}"
 	},
 	"occupancy.body": "{{scope}} {{op}} ({{count}}/{{capacity}})",
@@ -8511,23 +8511,23 @@ var it_default = {
 	},
 	"class.other": "{{name}}",
 	"group.others.person": {
-		"one": "1 altra persona",
+		"one": "{{count}} altra persona",
 		"other": "{{count}} altre persone"
 	},
 	"group.others.vehicle": {
-		"one": "1 altro veicolo",
+		"one": "{{count}} altro veicolo",
 		"other": "{{count}} altri veicoli"
 	},
 	"group.others.animal": {
-		"one": "1 altro animale",
+		"one": "{{count}} altro animale",
 		"other": "{{count}} altri animali"
 	},
 	"group.others.package": {
-		"one": "1 altro pacco",
+		"one": "{{count}} altro pacco",
 		"other": "{{count}} altri pacchi"
 	},
 	"group.others.other": {
-		"one": "1 altro {{classNoun}}",
+		"one": "{{count}} altro {{classNoun}}",
 		"other": "{{count}} altri {{classNoun}}"
 	},
 	"occupancy.body": "{{scope}} {{op}} ({{count}}/{{capacity}})",
@@ -30999,8 +30999,14 @@ function reportUnvouchedClips(deps, deviceId, clips) {
 * @durable class=config owner=pipeline-analytics
 *   write="a signed-in viewer user saves a named snapshot of their local stores"
 *   retention="none — a row goes only when its owner deletes it"
+*
+* Renamed from the bare `viewer-settings-snapshots` on 2026-08-19: an addon
+* collection carries its owner's prefix, and the bare name sat in the same flat
+* namespace as the kernel's `users` / `system-settings`. Rows already written
+* under the old name are adopted at boot by
+* `viewer-settings-legacy-adoption.ts`.
 */
-var VIEWER_SETTINGS_SNAPSHOTS_COLLECTION = "viewer-settings-snapshots";
+var VIEWER_SETTINGS_SNAPSHOTS_COLLECTION = "pipeline-analytics:viewer-settings-snapshots";
 var COLUMNS = [
 	{
 		name: "id",
@@ -31099,7 +31105,7 @@ var ViewerSettingsSnapshotStore = class {
 			collection: VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
 			columns: [...COLUMNS],
 			indexes: [{
-				name: "idx_viewer_settings_owner",
+				name: "idx_pa_viewer_settings_owner",
 				columns: ["ownerUserId"]
 			}]
 		});
@@ -31198,6 +31204,183 @@ function makeViewerSettingsActionHandlers(store) {
 		}
 	};
 }
+//#endregion
+//#region src/pipeline-analytics/viewer-settings-legacy-adoption.ts
+/**
+* @durable class=config owner=pipeline-analytics
+*   write="NOTHING writes it any more — it is the pre-2026-08-19 bare name of
+*     `pipeline-analytics:viewer-settings-snapshots`, declared here only so its
+*     surviving rows can be READ once and moved"
+*   retention="drained, not pruned: a row goes as soon as the successor is
+*     confirmed to hold the same id. The table is empty and inert once every
+*     hub has booted this addon; it is then dropped through the kernel's
+*     `RETIRED_COLLECTIONS` and this module deleted."
+*
+* Bare, and therefore a namespacing violation — hence the single
+* `ALLOWED_BARE` entry in `scripts/check-collection-namespacing.ts`, which
+* names this file and the condition for removing both.
+*/
+var LEGACY_VIEWER_SETTINGS_SNAPSHOTS_COLLECTION = "viewer-settings-snapshots";
+/**
+* The ORIGINAL column list, byte-for-byte.
+*
+* Do not "tidy" this to reference the successor's constant: they are allowed to
+* diverge, and the day they do, a shared constant would silently rebuild the
+* legacy table and destroy the rows.
+*/
+var LEGACY_COLUMNS = [
+	{
+		name: "id",
+		type: "TEXT",
+		primaryKey: true,
+		notNull: true
+	},
+	{
+		name: "name",
+		type: "TEXT",
+		notNull: true
+	},
+	{
+		name: "ownerUserId",
+		type: "TEXT",
+		notNull: true
+	},
+	{
+		name: "ownerUsername",
+		type: "TEXT",
+		notNull: true
+	},
+	{
+		name: "createdAt",
+		type: "INTEGER",
+		notNull: true
+	},
+	{
+		name: "updatedAt",
+		type: "INTEGER",
+		notNull: true
+	},
+	{
+		name: "blob",
+		type: "JSON",
+		notNull: true
+	}
+];
+/** Bounded read: this table held 1 row on the reference hub. */
+var LEGACY_READ_LIMIT = 500;
+function errText(err) {
+	return err instanceof Error ? err.message : String(err);
+}
+function asRows(raw) {
+	if (!Array.isArray(raw)) return [];
+	const out = [];
+	for (const item of raw) {
+		if (typeof item !== "object" || item === null) continue;
+		const id = Reflect.get(item, "id");
+		const data = Reflect.get(item, "data");
+		if (typeof id !== "string" || typeof data !== "object" || data === null) continue;
+		out.push({
+			id,
+			data
+		});
+	}
+	return out;
+}
+/**
+* Move every legacy row into the successor and clear the legacy table.
+*
+* Returns the number of legacy rows RETIRED — the completion metric, not the
+* number written. A row copied but not yet verified counts as zero and is
+* retried on the next boot, which is the safe direction.
+*/
+async function adoptLegacyViewerSettingsSnapshots(deps) {
+	await deps.store.declareCollection.mutate({
+		collection: LEGACY_VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+		columns: LEGACY_COLUMNS
+	});
+	let legacy;
+	try {
+		legacy = asRows(await deps.store.query.query({
+			collection: LEGACY_VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+			filter: { limit: LEGACY_READ_LIMIT }
+		}));
+	} catch (err) {
+		deps.logger.warn("viewer-settings legacy adoption skipped — legacy read failed", { meta: {
+			collection: LEGACY_VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+			error: errText(err)
+		} });
+		return 0;
+	}
+	if (legacy.length === 0) return 0;
+	let existing;
+	try {
+		existing = new Set(asRows(await deps.store.query.query({
+			collection: VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+			filter: { limit: LEGACY_READ_LIMIT }
+		})).map((r) => r.id));
+	} catch (err) {
+		deps.logger.warn("viewer-settings legacy adoption skipped — successor read failed", { meta: {
+			collection: VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+			error: errText(err)
+		} });
+		return 0;
+	}
+	let written = 0;
+	for (const row of legacy) {
+		if (existing.has(row.id)) continue;
+		try {
+			await deps.store.set.mutate({
+				collection: VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+				key: row.id,
+				value: row.data
+			});
+			written += 1;
+		} catch (err) {
+			deps.logger.warn("viewer-settings legacy adoption — one row failed to write", { meta: {
+				snapshotId: row.id,
+				error: errText(err)
+			} });
+		}
+	}
+	let landed;
+	try {
+		landed = new Set(asRows(await deps.store.query.query({
+			collection: VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+			filter: { limit: LEGACY_READ_LIMIT }
+		})).map((r) => r.id));
+	} catch (err) {
+		deps.logger.warn("viewer-settings legacy adoption — verification read failed, legacy rows kept", { meta: {
+			written,
+			error: errText(err)
+		} });
+		return 0;
+	}
+	let retired = 0;
+	for (const row of legacy) {
+		if (!landed.has(row.id)) continue;
+		try {
+			await deps.store.delete.mutate({
+				collection: LEGACY_VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+				key: row.id
+			});
+			retired += 1;
+		} catch (err) {
+			deps.logger.warn("viewer-settings legacy adoption — one legacy row failed to delete", { meta: {
+				snapshotId: row.id,
+				error: errText(err)
+			} });
+		}
+	}
+	deps.logger.warn("viewer-settings snapshots adopted from the legacy bare collection", { meta: {
+		from: LEGACY_VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+		to: VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+		found: legacy.length,
+		written,
+		retired,
+		kept: legacy.length - retired
+	} });
+	return retired;
+}
 /**
 * The VIDEO's playback rate — 4×, the same as {@link NC_GIF_SPEED}.
 *
@@ -39960,6 +40143,129 @@ function buildRecordedStillPorts(input) {
 		})
 	};
 }
+/** Where the completion marker lives. */
+var MIGRATION_MARKER_COLLECTION = "pipeline-analytics:migrations";
+var MIGRATION_MARKER_KEY = "label-tier-4g";
+/**
+* The decision for ONE row, exposed so the rule is testable without a store.
+*
+* `null` = leave the row alone.
+*/
+function decideRowMigration(data, now) {
+	const label = data["label"];
+	if (typeof label !== "string" || label.length === 0) return null;
+	if (typeof data["subLabel"] === "string" && data["subLabel"].length > 0) return null;
+	if (data["labelMeta"] !== null && data["labelMeta"] !== void 0) return null;
+	if (isMacroClass(label)) return {
+		label: null,
+		labelScore: null,
+		labelMeta: null
+	};
+	return {
+		label: null,
+		labelScore: null,
+		labelMeta: null,
+		subLabel: label,
+		subLabelScore: null,
+		subLabelMeta: {
+			stepId: MIGRATION_STEP_ID,
+			decidedAt: now
+		}
+	};
+}
+/** Migrate one collection, paged and bounded. */
+async function migrateCollectionLabelTiers(deps, collection) {
+	let scanned = 0;
+	let demoted = 0;
+	let cleared = 0;
+	let skipped = 0;
+	let offset = 0;
+	let truncated = false;
+	for (;;) {
+		if (scanned >= 2e5) {
+			truncated = true;
+			break;
+		}
+		const rows = await deps.store.query.query({
+			collection,
+			filter: {
+				limit: 500,
+				offset
+			}
+		});
+		if (rows.length === 0) break;
+		for (const row of rows) {
+			scanned++;
+			const patch = decideRowMigration(row.data, deps.now());
+			if (patch === null) {
+				skipped++;
+				continue;
+			}
+			try {
+				await deps.store.update.mutate({
+					collection,
+					id: row.id,
+					data: patch
+				});
+				if (patch["subLabel"] === void 0) cleared++;
+				else demoted++;
+			} catch (err) {
+				deps.logger.warn("label tier migration row failed", { meta: {
+					collection,
+					id: row.id,
+					error: String(err)
+				} });
+				skipped++;
+			}
+		}
+		if (rows.length < 500) break;
+		offset += rows.length;
+	}
+	return {
+		collection,
+		scanned,
+		demoted,
+		cleared,
+		skipped,
+		truncated
+	};
+}
+/**
+* Run the migration across the collections that carry the tiered columns, once.
+*
+* The marker short-circuits a completed migration; it is written only when
+* NEITHER collection was truncated, so an interrupted pass resumes on the next
+* boot instead of declaring itself done.
+*/
+async function runLabelTierMigration(deps, collections) {
+	try {
+		const marker = await deps.store.get.query({
+			collection: MIGRATION_MARKER_COLLECTION,
+			key: MIGRATION_MARKER_KEY
+		});
+		if (marker !== null && marker !== void 0) return [];
+	} catch {}
+	const stats = [];
+	for (const collection of collections) stats.push(await migrateCollectionLabelTiers(deps, collection));
+	if (stats.every((s) => !s.truncated)) try {
+		await deps.store.set.mutate({
+			collection: MIGRATION_MARKER_COLLECTION,
+			key: MIGRATION_MARKER_KEY,
+			value: { completedAt: deps.now() }
+		});
+	} catch (err) {
+		deps.logger.warn("label tier migration marker failed", { meta: { error: String(err) } });
+	}
+	for (const s of stats) deps.logger.info("label tier migration", { meta: {
+		collection: s.collection,
+		scanned: s.scanned,
+		demoted: s.demoted,
+		cleared: s.cleared,
+		skipped: s.skipped,
+		truncated: s.truncated
+	} });
+	return stats;
+}
 //#endregion
 //#region src/durable/lts-aggregator.ts
 /** Wall-clock bucket width. Five minutes, matching HA's statistics tier. */
@@ -45151,6 +45457,55 @@ var ANALYTICS_COLLECTIONS = [
 			why: "a five-minute statistics row summarises an INTERVAL, not an entity — there is no owner it can be orphaned from. Its bound is a ROW CAP per (subject, series, scope) enforced by the aggregator itself (105,120 rows ≈ one year), deliberately not an age sweep: D61 collapsed ten disagreeing age clocks into one, and an LTS series has no clock but its own."
 		}
 	},
+	{
+		collection: RETRAIN_ANNOTATIONS_COLLECTION,
+		classification: {
+			kind: "never-orphaned",
+			why: "the ground truth an operator DREW. It declares `trackId` and must be classified by hand for that reason: the id is provenance, not ownership. The dataset addresses COPIES (D81), which is precisely what makes a 'trained' track evictable again — so a track ageing out leaves the annotations standing. Rows go only through `deleteForFrame`, when the operator deselects the frame. Deleting one because its track expired would destroy labelling work no sweep can recreate."
+		}
+	},
+	{
+		collection: RETRAIN_FRAMES_COLLECTION,
+		classification: {
+			kind: "never-orphaned",
+			why: "the frame COPIES the dataset owns outright, under a `retrain` prefix no owner cascade and no age sweep walks (D81). Also declares `trackId` as provenance. Rows go only through `deleteFrame`, after their annotations, on operator deselection. NOTE: nothing caps this table or the disk it consumes — that is a deliberate decision, not an oversight, and it is the one collection here whose bound is an operator's habit."
+		}
+	},
+	{
+		collection: SCENE_COLLECTION,
+		classification: {
+			kind: "never-orphaned",
+			why: "operator intent — one row per (deviceId, monitorId), created and destroyed by scene CRUD or by a device-removal sweep. Nothing retention does can orphan it, and no age clock applies: a scene the operator configured and never revisits is not stale, it is configured."
+		}
+	},
+	{
+		collection: SCENE_LATCH_COLLECTION,
+		classification: {
+			kind: "never-orphaned",
+			why: "it IS owned — by the scene set — but the owner-cleanup is self-contained: `pruneExcept(the scene set)` runs on every scene reload, so a latch whose scene is gone is collected there and never by retention. Deliberately NOT `owner-indirection`: that kind puts a collection into `auditableCollections()`, and the orphan audit resolves exactly one indirection, that of `pipeline-analytics:media`."
+		}
+	},
+	{
+		collection: MIGRATION_MARKER_COLLECTION,
+		classification: {
+			kind: "never-orphaned",
+			why: "a one-row completion marker for the label-tier 4g pass. It summarises a one-time event, so there is no entity it can be orphaned from — and its PRESENCE is what stops the migration running again, so deleting it is not cleanup, it is a re-run over every track, face and object-event row."
+		}
+	},
+	{
+		collection: VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+		classification: {
+			kind: "never-orphaned",
+			why: "a hub user's named snapshot of their own viewer layout. It is not analytics data — it happens to live in this addon because the actions ride `addons.custom`. Owned by the user who saved it and deleted only by them; no track, device or event can orphan it, and no age applies."
+		}
+	},
+	{
+		collection: LEGACY_VIEWER_SETTINGS_SNAPSHOTS_COLLECTION,
+		classification: {
+			kind: "never-orphaned",
+			why: "the drained predecessor of the row above, declared only so its rows can be read once and moved (`viewer-settings-legacy-adoption.ts`). Retention must never touch it: its rows go one way only, to the successor, gated on a re-read that confirms they landed. Delete this entry together with that module."
+		}
+	},
 	{
 		collection: STATIONARY_COLLECTION,
 		classification: {
@@ -49830,129 +50185,6 @@ function evaluatePeriodicSnapshot(input) {
 		movedFraction
 	};
 }
-/** Where the completion marker lives. */
-var MIGRATION_MARKER_COLLECTION = "pipeline-analytics:migrations";
-var MIGRATION_MARKER_KEY = "label-tier-4g";
-/**
-* The decision for ONE row, exposed so the rule is testable without a store.
-*
-* `null` = leave the row alone.
-*/
-function decideRowMigration(data, now) {
-	const label = data["label"];
-	if (typeof label !== "string" || label.length === 0) return null;
-	if (typeof data["subLabel"] === "string" && data["subLabel"].length > 0) return null;
-	if (data["labelMeta"] !== null && data["labelMeta"] !== void 0) return null;
-	if (isMacroClass(label)) return {
-		label: null,
-		labelScore: null,
-		labelMeta: null
-	};
-	return {
-		label: null,
-		labelScore: null,
-		labelMeta: null,
-		subLabel: label,
-		subLabelScore: null,
-		subLabelMeta: {
-			stepId: MIGRATION_STEP_ID,
-			decidedAt: now
-		}
-	};
-}
-/** Migrate one collection, paged and bounded. */
-async function migrateCollectionLabelTiers(deps, collection) {
-	let scanned = 0;
-	let demoted = 0;
-	let cleared = 0;
-	let skipped = 0;
-	let offset = 0;
-	let truncated = false;
-	for (;;) {
-		if (scanned >= 2e5) {
-			truncated = true;
-			break;
-		}
-		const rows = await deps.store.query.query({
-			collection,
-			filter: {
-				limit: 500,
-				offset
-			}
-		});
-		if (rows.length === 0) break;
-		for (const row of rows) {
-			scanned++;
-			const patch = decideRowMigration(row.data, deps.now());
-			if (patch === null) {
-				skipped++;
-				continue;
-			}
-			try {
-				await deps.store.update.mutate({
-					collection,
-					id: row.id,
-					data: patch
-				});
-				if (patch["subLabel"] === void 0) cleared++;
-				else demoted++;
-			} catch (err) {
-				deps.logger.warn("label tier migration row failed", { meta: {
-					collection,
-					id: row.id,
-					error: String(err)
-				} });
-				skipped++;
-			}
-		}
-		if (rows.length < 500) break;
-		offset += rows.length;
-	}
-	return {
-		collection,
-		scanned,
-		demoted,
-		cleared,
-		skipped,
-		truncated
-	};
-}
-/**
-* Run the migration across the collections that carry the tiered columns, once.
-*
-* The marker short-circuits a completed migration; it is written only when
-* NEITHER collection was truncated, so an interrupted pass resumes on the next
-* boot instead of declaring itself done.
-*/
-async function runLabelTierMigration(deps, collections) {
-	try {
-		const marker = await deps.store.get.query({
-			collection: MIGRATION_MARKER_COLLECTION,
-			key: MIGRATION_MARKER_KEY
-		});
-		if (marker !== null && marker !== void 0) return [];
-	} catch {}
-	const stats = [];
-	for (const collection of collections) stats.push(await migrateCollectionLabelTiers(deps, collection));
-	if (stats.every((s) => !s.truncated)) try {
-		await deps.store.set.mutate({
-			collection: MIGRATION_MARKER_COLLECTION,
-			key: MIGRATION_MARKER_KEY,
-			value: { completedAt: deps.now() }
-		});
-	} catch (err) {
-		deps.logger.warn("label tier migration marker failed", { meta: { error: String(err) } });
-	}
-	for (const s of stats) deps.logger.info("label tier migration", { meta: {
-		collection: s.collection,
-		scanned: s.scanned,
-		demoted: s.demoted,
-		cleared: s.cleared,
-		skipped: s.skipped,
-		truncated: s.truncated
-	} });
-	return stats;
-}
 //#endregion
 //#region src/pipeline-analytics/store/object-embedding-store.ts
 /**
@@ -52364,6 +52596,14 @@ var PipelineAnalyticsAddon = class extends BaseAddon {
 			ViewerSettingsSnapshotStore.declare(api.settingsStore)
 		]);
 		this.viewerSettingsSnapshots = new ViewerSettingsSnapshotStore(api.settingsStore);
+		try {
+			await adoptLegacyViewerSettingsSnapshots({
+				store: api.settingsStore,
+				logger: this.ctx.logger.child("viewer-settings")
+			});
+		} catch (err) {
+			this.ctx.logger.warn("viewer-settings legacy adoption threw", { meta: { error: errMsg(err) } });
+		}
 		runLabelTierMigration({
 			store: api.settingsStore,
 			logger: this.ctx.logger,

package/dist/pipeline-analytics/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-Caz0R4UZ.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-D8HLGYbH.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-post-analysis",
-  "version": "1.2.100",
+  "version": "1.2.101",
   "description": "Post-Analysis bundle — enrichment, embedding-encoder, pipeline-analytics. Multi-entry npm package shipping addons that consume pipeline output.",
   "keywords": [
     "camstack",