@camstack/addon-post-analysis 1.2.116 → 1.2.117

package/dist/pipeline-analytics/index.mjs

@@ -1,4 +1,4 @@
-import { $ as deriveRecordingMode, At as array, B as TimelapseRulePatchSchema, Bt as EventCategory, C as NcScheduleSchema, Ct as DeviceType, D as NcSystemEventKindSchema, Dt as nodePin, E as NcSnoozeSuppressedSchema, Et as isDeviceScopedCap, F as SCENE_DEFAULT_UNCOVERED_POLICY, Ft as object, G as alarmPanelCapability, H as TrackSourceSchema, I as SCENE_DIVERGED, It as partialRecord, J as audioModeOf, K as assertTimelapseCadences, L as SceneMonitorSchema, Lt as record, M as RetrainStatusSchema, Mt as discriminatedUnion, Nt as literal, O as NcTaxonomySchema, Ot as sleep, P as SCENE_DEFAULT_ANCHOR_THRESHOLD, Pt as number, Q as defineCustomActions, R as TIMELAPSE_DENSE_FLOOR_SEC, Rt as string, S as NcRuleTargetSchema, St as BaseAddon, T as NcSnoozeSchema, Tt as hydrateSchema, U as VISIT_MERGE_GAP_MS, V as TimelapseRuleSchema, W as addonWidgetsSourceCapability, X as cosineSimilarity$1, Y as buildEventKindDescriptor, Z as customAction, _ as NC_TAXONOMY, _t as systemEventFilterApplies, a as DETECTION_MACRO_CLASSES, at as isScheduleActive, b as NcRulePatchSchema, bt as zoneAnalyticsCapability, c as EVENT_KIND_BY_CAP, d as LabelAttributionSchema, dt as plateGalleryCapability, f as MACRO_LABELS, ft as readDeviceStateFrom, gt as subKindsOf, h as NC_DEFAULT_SNOOZE_MINUTES, ht as sceneMonitorCapability, it as isDetectionMacroClass, j as RECORDING_EXPORT_MAX_READ_BYTES, jt as boolean, k as OpsLogEntrySchema, kt as _enum, l as EVENT_PAD_MS, lt as pickClusterStepModels, m as NC_CONDITION_CATALOG, n as CLUSTER_MODEL_SCOPED_STEPS, nt as faceGalleryCapability, ot as kebabToCamel, p as NC_ALARM_SYSTEM_EVENT_KINDS, pt as readTimelapseGeneratedAt, q as audioMetricsCapability, r as DEFAULT_EVENT_COLOR, s as DeclaredDevices, st as notificationRulesCapability, t as BaseDevice, tt as encodeVectorBase64, u as FULL_IMAGE_BBOX, ut as pipelineAnalyticsCapability, v as NcConditionDescriptorSchema, vt as vectorDimFromBase64, w as NcSnoozeInputSchema, wt as createEvent, x as NcRuleSchema, xt as errMsg, y as NcRuleInputSchema, yt as videoclipsCapability, z as TimelapseRuleInputSchema, zt as unknown } from "../dist-B13sFjR2.mjs";
+import { $ as customAction, A as NcTaxonomySchema, At as sleep, B as TIMELAPSE_DENSE_FLOOR_SEC, Bt as string, C as NcRuleSchema, Ct as errMsg, D as NcSnoozeSchema, Dt as hydrateSchema, E as NcSnoozeInputSchema, Et as createEvent, Ft as literal, G as VISIT_MERGE_GAP_MS, H as TimelapseRulePatchSchema, Ht as EventCategory, I as SCENE_DEFAULT_ANCHOR_THRESHOLD, It as number, J as assertTimelapseCadences, K as addonWidgetsSourceCapability, L as SCENE_DEFAULT_UNCOVERED_POLICY, Lt as object, Mt as array, N as RECORDING_EXPORT_MAX_READ_BYTES, Nt as boolean, O as NcSnoozeSuppressedSchema, Ot as isDeviceScopedCap, P as RetrainStatusSchema, Pt as discriminatedUnion, Q as cosineSimilarity$1, R as SCENE_DIVERGED, Rt as partialRecord, S as NcRulePatchSchema, St as zoneAnalyticsCapability, T as NcScheduleSchema, Tt as DeviceType, U as TimelapseRuleSchema, V as TimelapseRuleInputSchema, Vt as unknown, W as TrackSourceSchema, X as audioModeOf, Y as audioMetricsCapability, Z as buildEventKindDescriptor, _ as NC_DEFAULT_SNOOZE_MINUTES, _t as sceneMonitorCapability, a as DEFAULT_EVENT_COLOR, b as NcConditionDescriptorSchema, bt as vectorDimFromBase64, ct as kebabToCamel, d as EVENT_PAD_MS, dt as pickClusterStepModels, et as defineCustomActions, f as FULL_IMAGE_BBOX, ft as pipelineAnalyticsCapability, g as NC_CONDITION_CATALOG, h as NC_ALARM_SYSTEM_EVENT_KINDS, ht as readTimelapseGeneratedAt, i as CLUSTER_MODEL_SCOPED_STEPS, it as faceGalleryCapability, j as OpsLogEntrySchema, jt as _enum, k as NcSystemEventKindSchema, kt as nodePin, l as DeclaredDevices, lt as notificationRulesCapability, m as MACRO_LABELS, mt as readDeviceStateFrom, n as AnalyticsGroupRecordSchema, ot as isDetectionMacroClass, p as LabelAttributionSchema, pt as plateGalleryCapability, q as alarmPanelCapability, r as BaseDevice, rt as encodeVectorBase64, s as DETECTION_MACRO_CLASSES, st as isScheduleActive, t as AnalyticsGroupDetailSchema, tt as deriveRecordingMode, u as EVENT_KIND_BY_CAP, vt as subKindsOf, w as NcRuleTargetSchema, wt as BaseAddon, x as NcRuleInputSchema, xt as videoclipsCapability, y as NC_TAXONOMY, yt as systemEventFilterApplies, z as SceneMonitorSchema, zt as record } from "../dist-PMOtjzh2.mjs";
 import { t as __exportAll } from "../embedding-encoder/index.mjs";
 import * as fs from "node:fs";
 import { promises } from "node:fs";
@@ -15142,26 +15142,28 @@ function remainingSummaryCandidates(kept, taken, rank) {
 /**
 * The media a tile is drawn from, best first.
 *
-* For a group: `groupCrop` (union crop, the group's own blob) then
-* `nativeFrame` (pointer at the anchor's clean keyFrame). A digest of a
-* cohort may show the native still when the crop was not written; a
-* member's `keyFrame` listed as itself stays off this ladder so tracker
-* ID churn cannot refill a mosaic with eleven driveways. Boxed frames stay
-* absent: a drawn rectangle is a permanent lie in a digest tile.
+* First-level group crop only (`groupCrop`), then the group's native-frame
+* pointer, then a member's clean full frame. Member `thumbnail` / plate /
+* face crops stay off this ladder: a successful plate read overwrites the
+* vehicle first-level crop under the same `thumbnail` kind, and a digest
+* tile of a targa is the wrong picture. Boxed frames stay absent: a drawn
+* rectangle is a permanent lie in a digest tile. Duplicate driveways from
+* tracker ID churn are collapsed by `frameDedupeKey`, not by hiding the
+* full-frame fallback.
 */
 var SUMMARY_MEDIA_LADDER = [
 	"groupCrop",
 	"nativeFrame",
-	"thumbnail",
-	"thumbnailSmall",
-	"snapshot"
+	"keyFrame",
+	"keyFrameSmall",
+	"fullFrame"
 ];
 /**
 * Pick ONE media row for a track — the cheap question first (index rows only),
 * so exactly one blob is ever read.
 *
-* Within a rung the row CLOSEST to the track's peak is chosen; `snapshot` is a
-* filmstrip and its rows accumulate, so "the first one" would systematically
+* Within a rung the row CLOSEST to the track's peak is chosen; a member may
+* carry more than one full-frame still, so "the first one" would systematically
 * pick the moment the subject entered rather than the moment it was best seen.
 */
 function pickSummaryMedia(rows, aroundMs) {
@@ -39873,8 +39875,9 @@ var OverlayDetailStateStore = class {
 *
 * See docs/superpowers/specs/2026-07-17-package-zones-design.md §3.3 +
 * docs/superpowers/specs/2026-07-17-detection-config-exposure-design.md
-* (surface C). Dwell default is 15s per operator decision (the design's
-* §3.3 draft said 45s).
+* (surface C). Confirmation is N frames (default 3); dwell default is 0
+* (an extra bar). The 15 s dwell plus a 5 s round-gap missed a real
+* parcel on device 615 (2026-08-24 13:40).
 */
 var PackageDropSettingsSchema = object({
 	/**
@@ -39895,13 +39898,20 @@ var PackageDropSettingsSchema = object({
 	*/
 	packageDropEnabled: boolean().default(true),
 	/**
-	* Minimum OBSERVED dwell (seconds, since first-seen) before a newly
-	* promoted stationary package counts as a delivery. Kills a bag briefly
-	* set down and snatched back. Operator default 15s. Values beyond the
-	* stationary promotion window (30s) are satisfied only once the entry
-	* has actually been observed that long.
+	* Frames the box must be re-seen on before it is a parked package.
+	* Same bar as tracker `minHits`: one frame is a flicker, two can still
+	* be a passer-by's bag, three is "it stayed". A settle burst of three
+	* frames in ~1 s is enough; no second governor round after the courier
+	* left. Device 615 2026-08-24 13:40 expired at 1 round / 1.5 s dwell.
+	*/
+	packageDropMinFrames: number().int().min(1).max(20).default(3),
+	/**
+	* Extra OBSERVED dwell (seconds, since first-seen) on top of N frames.
+	* 0 (the default) means the frame count is enough — a courier who drops
+	* and leaves in 2 s still delivers. Raise this to reject a bag briefly
+	* set down and snatched back.
 	*/
-	packageDropDwellSec: number().int().min(0).max(3600).default(15),
+	packageDropDwellSec: number().int().min(0).max(3600).default(0),
 	/** Reject tiny far-field blobs: min bbox area as a fraction of the frame. */
 	packageDropMinBboxAreaFrac: number().min(0).max(1).default(.004),
 	/**
@@ -39919,13 +39929,15 @@ var PackageDropSettingsSchema = object({
 	packageDropPickupEnabled: boolean().default(true),
 	/**
 	* A parcel needs a deliverer: a stillness candidate only ever promotes to
-	* `delivered` if a non-package track (person/vehicle/animal) was active on
-	* the device within this many seconds BEFORE the box first appeared — and a
-	* departure only counts as `picked-up` with somebody around the
-	* disappearance. 0 disables both gates. Device 615's streetlight wedge
-	* cycled delivered→picked-up ~23×/night with nobody in frame, ever.
-	* Default 300 s: wide enough to absorb the motion-settle governor's cadence
-	* (the box is often first SEEN minutes after the courier left).
+	* `delivered` if a non-package track (person/vehicle/animal) was active IN
+	* A CONFIGURED PACKAGE DROP-OFF ZONE within this many seconds BEFORE the
+	* box first appeared — and a departure only counts as `picked-up` with
+	* somebody in that zone around the disappearance. Whole-camera motion (a
+	* walker at the far gate) does not count. 0 disables both gates. Device
+	* 615's streetlight wedge cycled delivered→picked-up ~23×/night with
+	* nobody in the drop-off zone. Default 300 s: wide enough to absorb the
+	* motion-settle governor's cadence (the box is often first SEEN minutes
+	* after the courier left).
 	*/
 	packageDropActivityWindowSec: number().int().min(0).max(3600).default(300),
 	/**
@@ -39949,6 +39961,7 @@ function resolvePackageDropSettings(raw) {
 	};
 	return {
 		packageDropEnabled: pick("packageDropEnabled"),
+		packageDropMinFrames: pick("packageDropMinFrames"),
 		packageDropDwellSec: pick("packageDropDwellSec"),
 		packageDropMinBboxAreaFrac: pick("packageDropMinBboxAreaFrac"),
 		packageDropMaxBboxAreaFrac: pick("packageDropMaxBboxAreaFrac"),
@@ -40206,29 +40219,6 @@ var DeferredBirthRegistry = class {
 		this.byDevice.delete(deviceKey);
 	}
 };
-var AnalyticsGroupRecordSchema = object({
-	id: string(),
-	deviceId: number().int(),
-	openedAt: number().int(),
-	closedAt: number().int(),
-	timestamp: number().int(),
-	memberCount: number().int(),
-	memberTrackIds: array(string()).readonly(),
-	className: string(),
-	classes: array(string()).readonly(),
-	/** Relative event-media path, or null when the group has no picture yet. */
-	mediaUrl: string().nullable(),
-	singleton: boolean()
-});
-var AnalyticsGroupMemberSchema = object({
-	trackId: string(),
-	deviceId: number().int(),
-	className: string(),
-	firstSeen: number().int(),
-	lastSeen: number().int(),
-	mediaUrl: string().nullable()
-});
-var AnalyticsGroupDetailSchema = AnalyticsGroupRecordSchema.extend({ members: array(AnalyticsGroupMemberSchema).readonly() });
 var groupActions = defineCustomActions({
 	"analytics.listGroups": customAction(object({
 		deviceId: number().int().optional(),
@@ -40242,61 +40232,6 @@ var groupActions = defineCustomActions({
 	})),
 	"analytics.getGroup": customAction(object({ groupId: string().min(1) }), object({ group: AnalyticsGroupDetailSchema.nullable() }))
 });
-//#endregion
-//#region src/pipeline-analytics/group/group-query.ts
-/**
-* Stamp a relative event-media URL.
-*
-* Media keys contain `:` and the data-plane serves them by key. Track ids are
-* bare and fall through to the existing event/track thumbnail resolver. Never
-* percent-encode: the handler does not URL-decode the path.
-*/
-function stampEventMediaUrl(baseUrl, id) {
-	if (baseUrl === null || baseUrl.length === 0) return null;
-	if (id === null || id === void 0 || id.length === 0) return null;
-	return `${baseUrl}/${id}`;
-}
-/** Union of every class on the members; `className` is the first, stable order. */
-function aggregateGroupClasses(tracks) {
-	const seen = /* @__PURE__ */ new Set();
-	const classes = [];
-	for (const track of tracks) for (const name of [track.className, ...track.classes ?? []]) {
-		if (name.length === 0 || seen.has(name)) continue;
-		seen.add(name);
-		classes.push(name);
-	}
-	return {
-		className: classes[0] ?? "unknown",
-		classes
-	};
-}
-function toGroupRecord(input) {
-	const { className, classes } = aggregateGroupClasses(input.tracks);
-	const mediaId = input.group.mediaKey ?? input.group.nativeKey ?? (input.group.memberCount === 1 ? input.memberTrackIds[0] : null);
-	return {
-		id: input.group.id,
-		deviceId: input.group.deviceId,
-		openedAt: input.group.openedAt,
-		closedAt: input.group.closedAt,
-		timestamp: input.group.timestamp,
-		memberCount: input.memberTrackIds.length > 0 ? input.memberTrackIds.length : input.group.memberCount,
-		memberTrackIds: [...input.memberTrackIds],
-		className,
-		classes: [...classes],
-		mediaUrl: stampEventMediaUrl(input.eventMediaBaseUrl, mediaId),
-		singleton: input.memberTrackIds.length <= 1
-	};
-}
-function toGroupMember(member, track, eventMediaBaseUrl) {
-	return {
-		trackId: member.trackId,
-		deviceId: member.deviceId,
-		className: track?.className ?? "unknown",
-		firstSeen: track?.firstSeen ?? member.timestamp,
-		lastSeen: track?.lastSeen ?? member.timestamp,
-		mediaUrl: stampEventMediaUrl(eventMediaBaseUrl, member.trackId)
-	};
-}
 function trackToLite(track) {
 	return {
 		trackId: track.trackId,
@@ -40306,56 +40241,18 @@ function trackToLite(track) {
 		lastSeen: track.lastSeen
 	};
 }
-async function listGroupRecords(ports, input) {
-	const page = await ports.groupStore.listRecent(input);
-	const groups = [];
-	for (const group of page.groups) groups.push(await buildGroupRecord(ports, group));
-	return {
-		groups,
-		hasMore: page.hasMore
-	};
-}
-async function getGroupDetail(ports, groupId) {
-	const group = await ports.groupStore.get(groupId);
-	if (group === null) return null;
-	const members = await ports.groupStore.listMembers(groupId);
-	const lites = [];
-	const rows = [];
-	for (const member of members) {
-		const track = await ports.loadTrack(member.trackId);
-		const lite = track === null ? null : trackToLite(track);
-		if (lite !== null) lites.push(lite);
-		rows.push(toGroupMember(member, lite, ports.eventMediaBaseUrl()));
-	}
-	return {
-		...toGroupRecord({
-			group,
-			memberTrackIds: members.map((m) => m.trackId),
-			tracks: lites,
-			eventMediaBaseUrl: ports.eventMediaBaseUrl()
-		}),
-		members: rows
-	};
-}
-async function buildGroupRecord(ports, group) {
-	const members = await ports.groupStore.listMembers(group.id);
-	const lites = [];
-	for (const member of members) {
-		const track = await ports.loadTrack(member.trackId);
-		if (track !== null) lites.push(trackToLite(track));
-	}
-	return toGroupRecord({
-		group,
-		memberTrackIds: members.map((m) => m.trackId),
-		tracks: lites,
-		eventMediaBaseUrl: ports.eventMediaBaseUrl()
-	});
-}
 /**
 * Gallery and digest read the same ladder: groupCrop, then the native-frame
-* pointer, then member subject crops. A multi with no crop still has a
-* picture if the sealer stored `nativeKey`.
+* pointer, then a member's clean full frame. Plate / face / member
+* thumbnails never reach the picker — a plate read overwrites the vehicle
+* first-level crop under the same `thumbnail` kind. A multi with no crop
+* still has a picture if the sealer stored `nativeKey`.
 */
+var DIGEST_MEMBER_FALLBACK_KINDS = new Set([
+	"keyFrame",
+	"keyFrameSmall",
+	"fullFrame"
+]);
 function digestMediaRows(input) {
 	const owned = [];
 	if (input.mediaKey !== null && input.mediaKey.length > 0) owned.push({
@@ -40369,7 +40266,7 @@ function digestMediaRows(input) {
 		timestamp: input.timestamp
 	});
 	if (owned.length > 0) return owned;
-	return input.memberRows;
+	return input.memberRows.filter((row) => DIGEST_MEMBER_FALLBACK_KINDS.has(row.kind));
 }
 var MATCH_WINDOW_MS = 1e3;
 var MOVE_EPS = .35;
@@ -40923,6 +40820,34 @@ function toInstant(t) {
 		confidence: t.importance
 	};
 }
+function memberBoxesAt(members, at, frame) {
+	const w = Math.max(frame.width, 1);
+	const h = Math.max(frame.height, 1);
+	const boxes = [];
+	for (const member of members) {
+		let best = member.positions[0];
+		let bestDt = Number.POSITIVE_INFINITY;
+		for (const p of member.positions) {
+			const dt = Math.abs(p.timestamp - at);
+			if (dt <= 1e3 && dt < bestDt) {
+				best = p;
+				bestDt = dt;
+			}
+		}
+		if (best === void 0 || bestDt === Number.POSITIVE_INFINITY) continue;
+		boxes.push({
+			bbox: {
+				x: best.bbox.x / w,
+				y: best.bbox.y / h,
+				w: best.bbox.w / w,
+				h: best.bbox.h / h
+			},
+			label: member.className,
+			observedAt: best.timestamp
+		});
+	}
+	return boxes;
+}
 function toSealer(track) {
 	return {
 		trackId: track.trackId,
@@ -40939,7 +40864,11 @@ var GroupSealer = class {
 	constructor(deps) {
 		this.deps = deps;
 	}
+	get processEnabled() {
+		return this.deps.enabled ?? false;
+	}
 	async flushIdle(buffer, now = this.deps.now()) {
+		if (!this.processEnabled) return 0;
 		let written = 0;
 		for (const group of buffer.idleGroups(now, GROUP_SESSION_IDLE_MS)) if (await this.persistLiveGroup(group, buffer)) {
 			buffer.drop([group.id]);
@@ -40952,6 +40881,7 @@ var GroupSealer = class {
 	* into the live buffer, persist whoever is already idle, keep the rest in RAM.
 	*/
 	async recoverCamera(deviceId, buffer) {
+		if (!this.processEnabled) return 0;
 		if (buffer.isPrimed(deviceId)) return 0;
 		const now = this.deps.now();
 		try {
@@ -40980,6 +40910,7 @@ var GroupSealer = class {
 	* is what wedged hub-main.
 	*/
 	async sealWindow(deviceId, since, until) {
+		if (!this.processEnabled) return 0;
 		try {
 			const closed = await this.deps.trackStore.queryHistorical({
 				deviceId,
@@ -41094,26 +41025,54 @@ var GroupSealer = class {
 			return;
 		}
 		try {
-			const raw = await sharp(source.jpeg).removeAlpha().raw().toBuffer({ resolveWithObject: true });
-			if (raw.info.channels !== 3) return;
-			const union = {
-				x: instant.ux * raw.info.width,
-				y: instant.uy * raw.info.height,
-				w: instant.uw * raw.info.width,
-				h: instant.uh * raw.info.height
-			};
-			const crop = await cropGroupFromRgb(raw.data, raw.info.width, raw.info.height, union);
-			const mediaKey = await this.deps.mediaStore.put({
+			const raw = await sharp(source.jpeg).removeAlpha().toColorspace("srgb").raw().toBuffer({ resolveWithObject: true });
+			if (raw.info.channels === 3) {
+				const union = {
+					x: instant.ux * raw.info.width,
+					y: instant.uy * raw.info.height,
+					w: instant.uw * raw.info.width,
+					h: instant.uh * raw.info.height
+				};
+				const crop = await cropGroupFromRgb(raw.data, raw.info.width, raw.info.height, union);
+				const mediaKey = await this.deps.mediaStore.put({
+					deviceId,
+					ownerKind: "group",
+					ownerId: draft.id,
+					kind: "thumbnail",
+					timestamp,
+					data: crop
+				});
+				await this.deps.groupStore.setMediaKey(draft.id, mediaKey);
+			}
+		} catch (err) {
+			this.deps.logger.warn("group sealer: crop failed", {
+				tags: { deviceId },
+				meta: {
+					groupId: draft.id,
+					error: String(err)
+				}
+			});
+		}
+		try {
+			const composed = await composeGroupFrame({
+				jpeg: source.jpeg,
+				boxes: memberBoxesAt(instantMembers, timestamp, frame),
+				at: timestamp,
+				logger: this.deps.logger,
+				deviceId,
+				groupKey: draft.id
+			});
+			if (composed === null) return;
+			await this.deps.mediaStore.put({
 				deviceId,
 				ownerKind: "group",
 				ownerId: draft.id,
-				kind: "thumbnail",
+				kind: "fullFrameBoxed",
 				timestamp,
-				data: crop
+				data: composed.bytes
 			});
-			await this.deps.groupStore.setMediaKey(draft.id, mediaKey);
 		} catch (err) {
-			this.deps.logger.warn("group sealer: crop failed", {
+			this.deps.logger.warn("group sealer: boxed frame failed", {
 				tags: { deviceId },
 				meta: {
 					groupId: draft.id,
@@ -41138,6 +41097,37 @@ var GroupSealer = class {
 	}
 };
 //#endregion
+//#region src/pipeline-analytics/group/group-cursor.ts
+function encodeGroupCursor(cursor) {
+	return Buffer.from(JSON.stringify({
+		c: cursor.closedAt,
+		i: cursor.groupId
+	}), "utf8").toString("base64url");
+}
+function decodeGroupCursor(raw) {
+	let parsed;
+	try {
+		parsed = JSON.parse(Buffer.from(raw, "base64url").toString("utf8"));
+	} catch {
+		throw new Error("listGroups: malformed cursor");
+	}
+	if (parsed === null || typeof parsed !== "object" || !("c" in parsed) || !("i" in parsed) || typeof parsed.c !== "number" || !Number.isFinite(parsed.c) || typeof parsed.i !== "string" || parsed.i.length === 0) throw new Error("listGroups: malformed cursor");
+	return {
+		closedAt: parsed.c,
+		groupId: parsed.i
+	};
+}
+function compareGroupDesc(a, b) {
+	if (a.closedAt !== b.closedAt) return b.closedAt - a.closedAt;
+	if (a.id === b.id) return 0;
+	return a.id < b.id ? 1 : -1;
+}
+/** True when `row` sits strictly AFTER the cursor in DESC order. */
+function isAfterGroupCursor(row, cursor) {
+	if (row.closedAt < cursor.closedAt) return true;
+	return row.closedAt === cursor.closedAt && row.id < cursor.groupId;
+}
+//#endregion
 //#region src/pipeline-analytics/group/group-store.ts
 /**
 * The group ENTITY store — a co-moving partition of one session, with one
@@ -41399,6 +41389,24 @@ var TrackGroupStore = class {
 			data: r.data
 		}));
 	}
+	/**
+	* Membership for a page of groups in ONE query. `listGroupRecords` used to
+	* call {@link listMembers} per row — 60 groups is 60 settings-store RPCs,
+	* ~20 s, and the viewer feed times out into a retry loop.
+	*/
+	async listMembersForGroups(groupIds) {
+		if (groupIds.length === 0) return [];
+		return (await this.store.query.query({
+			collection: TRACK_GROUP_MEMBERS_COLLECTION,
+			filter: {
+				whereIn: { groupId: [...groupIds] },
+				limit: 1e4
+			}
+		})).map((r) => this.normalizeMember({
+			id: r.id,
+			data: r.data
+		}));
+	}
 	async membersOfTracks(trackIds) {
 		const out = [];
 		for (const trackId of trackIds) {
@@ -41414,20 +41422,29 @@ var TrackGroupStore = class {
 		return out;
 	}
 	/**
-	* Newest-closed page for the Library Groups tab.
+	* Newest-closed page for the Groups feed.
 	*
 	* Time filter is overlap (`closedAt >= since` and `openedAt <= until`),
 	* same as {@link listOverlapping}. Pagination is applied AFTER the window
 	* so a day cursor is honest rather than a raw-row offset that skips live
-	* groups on a busy camera.
+	* groups on a busy camera. `deviceIds: []` is an empty page (same as
+	* `listRecentTracks`); omit the field for every camera. `deviceId` stays
+	* as the single-camera alias the custom-action bridge still sends.
 	*/
 	async listRecent(input) {
 		const limit = Math.min(Math.max(input.limit ?? 40, 1), 100);
 		const offset = Math.max(input.offset ?? 0, 0);
-		const slice = (await this.store.query.query({
+		const deviceIds = input.deviceIds !== void 0 ? input.deviceIds : input.deviceId !== void 0 ? [input.deviceId] : void 0;
+		if (deviceIds !== void 0 && deviceIds.length === 0) return {
+			groups: [],
+			hasMore: false,
+			nextCursor: null
+		};
+		const cursor = input.cursor !== void 0 && input.cursor.length > 0 ? decodeGroupCursor(input.cursor) : null;
+		const filtered = (await this.store.query.query({
 			collection: TRACK_GROUPS_COLLECTION,
 			filter: {
-				...input.deviceId !== void 0 ? { where: { deviceId: input.deviceId } } : {},
+				...deviceIds !== void 0 && deviceIds.length === 1 ? { where: { deviceId: deviceIds[0] } } : deviceIds !== void 0 ? { whereIn: { deviceId: [...deviceIds] } } : {},
 				orderBy: {
 					field: "closedAt",
 					direction: "desc"
@@ -41440,11 +41457,20 @@ var TrackGroupStore = class {
 		})).filter((g) => {
 			if (input.sinceMs !== void 0 && g.closedAt < input.sinceMs) return false;
 			if (input.untilMs !== void 0 && g.openedAt > input.untilMs) return false;
+			if (cursor !== null && !isAfterGroupCursor(g, cursor)) return false;
 			return true;
-		}).slice(offset, offset + limit + 1);
+		}).toSorted(compareGroupDesc);
+		const slice = (cursor !== null ? filtered : filtered.slice(offset)).slice(0, limit + 1);
+		const groups = slice.slice(0, limit);
+		const hasMore = slice.length > limit;
+		const last = groups[groups.length - 1];
 		return {
-			groups: slice.slice(0, limit),
-			hasMore: slice.length > limit
+			groups,
+			hasMore,
+			nextCursor: hasMore && last !== void 0 ? encodeGroupCursor({
+				closedAt: last.closedAt,
+				groupId: last.id
+			}) : null
 		};
 	}
 	/** Groups whose life overlaps `[since, until]` on one camera. */
@@ -42776,7 +42802,7 @@ function evaluateStationaryPromotion(input) {
 	};
 }
 var DEFAULT_PACKAGE_STILLNESS_CONFIG = {
-	minRounds: 2,
+	minHits: 3,
 	roundGapMs: 5e3,
 	ttlMs: 5 * 6e4,
 	assocIou: .3
@@ -42809,8 +42835,9 @@ var PackageStillnessTracker = class {
 			const prev = next[index];
 			if (prev === void 0) continue;
 			consumed.add(prev.id);
-			const updated = confirm(prev, input, s, this.config.roundGapMs);
-			if (!(updated.promotedAt === null && updated.activityBackedAtOpen && updated.rounds >= this.config.minRounds && input.timestamp - updated.firstSeenAt >= input.minDwellMs)) {
+			const updated = confirm(prev, input, s);
+			const minHits = input.minHits ?? this.config.minHits;
+			if (!(updated.promotedAt === null && updated.activityBackedAtOpen && updated.hits >= minHits && input.timestamp - updated.firstSeenAt >= input.minDwellMs)) {
 				next[index] = updated;
 				continue;
 			}
@@ -42834,7 +42861,7 @@ var PackageStillnessTracker = class {
 					id: c.id,
 					className: c.className,
 					bbox: { ...c.bbox },
-					rounds: c.rounds,
+					hits: c.hits,
 					firstSeenAt: c.firstSeenAt,
 					lastSeenAt: c.lastSeenAt,
 					activityBackedAtOpen: c.activityBackedAtOpen
@@ -42892,7 +42919,7 @@ var PackageStillnessTracker = class {
 			frameHeight: input.frameHeight,
 			firstSeenAt: input.timestamp,
 			lastSeenAt: input.timestamp,
-			rounds: 1,
+			hits: 1,
 			promotedAt: null,
 			activityBackedAtOpen,
 			...s.trackId !== void 0 ? { sourceTrackId: s.trackId } : {},
@@ -42902,18 +42929,16 @@ var PackageStillnessTracker = class {
 		};
 	}
 };
-/** Re-confirm a candidate with this frame's box. A new ROUND is only counted
-*  when the gap since the last sighting clears `roundGapMs`, so a burst of
-*  frames inside one governor round counts once. */
-function confirm(prev, input, s, roundGapMs) {
-	const newRound = input.timestamp - prev.lastSeenAt >= roundGapMs;
+/** Re-confirm a candidate with this frame's box. Every sighting is a hit —
+*  a settle burst of three frames in one second is three confirmations. */
+function confirm(prev, input, s) {
 	return {
 		...prev,
 		bbox: { ...s.bbox },
 		frameWidth: input.frameWidth,
 		frameHeight: input.frameHeight,
 		lastSeenAt: input.timestamp,
-		rounds: newRound ? prev.rounds + 1 : prev.rounds,
+		hits: prev.hits + 1,
 		...s.trackId !== void 0 ? { sourceTrackId: s.trackId } : {},
 		...s.label !== void 0 ? { label: s.label } : {},
 		...s.confidence !== void 0 ? { confidence: s.confidence } : {},
@@ -42938,6 +42963,31 @@ function toEntry(c) {
 	};
 }
 //#endregion
+//#region src/pipeline-analytics/pipeline/package/package-zone-activity.ts
+/**
+* Whether a live track is motion inside a configured package drop-off zone.
+*
+* The stillness activity gate used to stamp ANY non-package track on the
+* camera. A walker at the far gate then "delivered" the streetlight wedge
+* on the doormat. The operator's prerequisite is motion in the drop-off
+* zone the package rule points at — the same zones `PackageDropDetector`
+* uses for the centroid gate.
+*/
+function isDelivererInPackageZone(trackZones, packageZoneIds) {
+	if (packageZoneIds.size === 0 || trackZones.length === 0) return false;
+	for (const z of trackZones) if (packageZoneIds.has(z)) return true;
+	return false;
+}
+/** Zone ids referenced by enabled `package`-stage rules. Disabled rules do not count. */
+function collectPackageZoneIds(rules) {
+	const ids = /* @__PURE__ */ new Set();
+	for (const r of rules) {
+		if (r.enabled === false) continue;
+		for (const z of r.zoneIds) ids.add(z);
+	}
+	return ids;
+}
+//#endregion
 //#region src/pipeline-analytics/pipeline/stationary/stationary-zones.ts
 /**
 * Zone ids whose 0–1 polygon contains the entry's normalised bbox centroid.
@@ -49841,6 +49891,28 @@ var TrackStore = class {
 		return this.rowToTrack(row.id, row.data);
 	}
 	/**
+	* Batch read of persisted tracks. `listGroupRecords` cannot call
+	* {@link getPersistedByTrackId} per member — that is one settings-store RPC
+	* per row and a 60-group page takes ~20 s, which the viewer feed times out.
+	*/
+	async getPersistedByTrackIds(trackIds) {
+		if (trackIds.length === 0) return [];
+		const PAGE = 500;
+		const out = [];
+		for (let i = 0; i < trackIds.length; i += PAGE) {
+			const chunk = trackIds.slice(i, i + PAGE);
+			const rows = await this.store.query.query({
+				collection: TRACKS_COLLECTION,
+				filter: {
+					whereIn: { id: [...chunk] },
+					limit: chunk.length
+				}
+			});
+			for (const row of rows) out.push(this.rowToTrack(row.id, row.data));
+		}
+		return out;
+	}
+	/**
 	* Persist a SYNTHETIC track (a sensor/control event projected into the
 	* unified track store). Unlike `persistCompleted` there is no live in-RAM
 	* state and no trajectory envelope (synthetic tracks carry no positions) —
@@ -54913,11 +54985,22 @@ function buildGlobalSettingsSchema(cap) {
 					description: "Also emit a package-picked-up event when the delivered package leaves.",
 					default: PACKAGE_DROP_DEFAULTS.packageDropPickupEnabled
 				},
+				{
+					type: "slider",
+					key: "packageDropMinFrames",
+					label: "Confirmation frames",
+					description: "How many frames the box must be seen on before it counts as a delivery. One is a flicker; two can still be a passer-by; three is the default bar against false positives. Independent of dwell.",
+					min: 1,
+					max: 10,
+					step: 1,
+					default: PACKAGE_DROP_DEFAULTS.packageDropMinFrames,
+					showValue: true
+				},
 				{
 					type: "slider",
 					key: "packageDropDwellSec",
 					label: "Minimum dwell",
-					description: "How long a package must stay parked before it counts as a delivery. Higher = fewer false positives from bags briefly set down.",
+					description: "Extra time the package must stay parked after the confirmation frames. 0 (default) means N frames is enough — a courier who drops and leaves in a couple of seconds still delivers. Raise to reject a bag briefly set down.",
 					min: 0,
 					max: 300,
 					step: 5,
@@ -54951,7 +55034,7 @@ function buildGlobalSettingsSchema(cap) {
 					type: "slider",
 					key: "packageDropActivityWindowSec",
 					label: "Deliverer window",
-					description: "A delivery only counts if a person or vehicle was active on this camera within this many seconds before the package appeared — and a pick-up only with somebody around when it vanished. 0 disables the requirement.",
+					description: "A delivery only counts if a person or vehicle was in the configured package drop-off zone within this many seconds before the package appeared — and a pick-up only with somebody in that zone when it vanished. Motion elsewhere on the camera does not count. 0 disables the requirement.",
 					min: 0,
 					max: 1800,
 					step: 30,
@@ -57376,11 +57459,12 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 	*/
 	packageStillness = new PackageStillnessTracker({ newId: () => randomUUID() });
 	/**
-	* Frame-clock timestamp of the last NON-package track seen per device — the
-	* activity mirror behind the package activity gate ("a parcel needs a
-	* deliverer"). Deliberately not {@link lastTrackActivityMs}: that map is
-	* stamped by ANY live track, including the package-class FP itself, which
-	* would let the streetlight wedge vouch for its own delivery.
+	* Frame-clock timestamp of the last NON-package track seen IN A PACKAGE
+	* DROP-OFF ZONE per device — the activity mirror behind the package
+	* activity gate ("a parcel needs a deliverer"). A walker at the far gate
+	* does not stamp this. Deliberately not {@link lastTrackActivityMs}: that
+	* map is stamped by ANY live track, including the package-class FP itself,
+	* which would let the streetlight wedge vouch for its own delivery.
 	*/
 	lastNonPackageActivityAt = /* @__PURE__ */ new Map();
 	/** Last time the oversize-sighting drop was logged per device — one line
@@ -58747,13 +58831,6 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 	buildSummaryPorts(stores) {
 		return {
 			listTracks: async ({ deviceId, sinceMs, untilMs, limit }) => {
-				await this.groupSealer?.sealWindow(deviceId, sinceMs, untilMs);
-				const groups = await stores.groupStore.listOverlapping({
-					deviceId,
-					sinceMs,
-					untilMs,
-					limit
-				});
 				const windowTracks = await stores.trackStore.queryHistorical({
 					deviceId,
 					since: sinceMs,
@@ -58761,33 +58838,19 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 					projection: "slim",
 					limit: Math.max(limit, 2e3)
 				});
-				const trackById = new Map(windowTracks.map((t) => [t.trackId, t]));
 				const { minHits } = await this.resolveDeviceDetectionSensitivitySettings(deviceId);
-				const out = [];
-				for (const group of groups) {
-					const members = await stores.groupStore.listMembers(group.id);
-					const tracks = members.map((m) => trackById.get(m.trackId)).filter((t) => t !== void 0);
-					if (tracks.length === 0) continue;
-					const classes = [...new Set(tracks.flatMap((t) => [t.className, ...t.classes ?? []]))];
-					const zones = [...new Set(tracks.flatMap((t) => [...t.zonesVisited]))];
-					const importance = Math.max(0, ...tracks.map((t) => t.importance ?? 0));
-					const primary = tracks.reduce((best, t) => (t.importance ?? 0) > (best.importance ?? 0) ? t : best);
-					out.push({
-						trackId: group.id,
-						groupId: group.id,
-						memberTrackIds: members.map((m) => m.trackId),
-						deviceId,
-						className: primary.className,
-						firstSeen: group.openedAt,
-						lastSeen: group.closedAt,
-						importance,
-						zones,
-						classes,
-						...tracks.every((t) => t.closedReason === "stationary-promotion") ? { stationary: true } : {},
-						confirmed: tracks.some((t) => t.observations !== void 0 && t.observations >= minHits)
-					});
-				}
-				return out;
+				return windowTracks.map((t) => ({
+					trackId: t.trackId,
+					deviceId,
+					className: t.className,
+					firstSeen: t.firstSeen,
+					lastSeen: t.lastSeen,
+					zones: [...t.zonesVisited],
+					...t.importance !== void 0 ? { importance: t.importance } : {},
+					...t.classes !== void 0 && t.classes.length > 0 ? { classes: t.classes } : {},
+					...t.closedReason === "stationary-promotion" ? { stationary: true } : {},
+					confirmed: t.observations !== void 0 && t.observations >= minHits
+				}));
 			},
 			listMediaInfo: async (id) => {
 				const group = await stores.groupStore.get(id);
@@ -60270,6 +60333,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 			deviceId,
 			tracked: result.tracked,
 			packageClasses,
+			packageZoneIds: collectPackageZoneIds(proxy?.state.zoneRules.value?.package ?? []),
 			settings: packageSettings,
 			frameWidth: result.frameWidth,
 			frameHeight: result.frameHeight,
@@ -61984,25 +62048,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 	}
 	/** Hub-only: assign this sighting in RAM. First activity on a camera
 	*  replays 2 minutes of that camera (crash recover), then observe is sync. */
-	enqueueLiveGroup(track, now) {
-		if (!this.isPostProcessingNode || !this.groupLive) return;
-		const deviceId = track.deviceId;
-		const snapshot = toGroupableTrack(track);
-		if (this.groupLive.isPrimed(deviceId)) {
-			this.groupLive.observe(snapshot, now);
-			return;
-		}
-		const next = (this.groupObserveTail.get(deviceId) ?? Promise.resolve()).then(async () => {
-			if (this.groupLive && this.groupSealer && !this.groupLive.isPrimed(deviceId)) await this.groupSealer.recoverCamera(deviceId, this.groupLive);
-			this.groupLive?.observe(snapshot, now);
-		}).catch((err) => {
-			this.ctx.logger.warn("group live observe failed", {
-				tags: { deviceId },
-				meta: { error: String(err) }
-			});
-		});
-		this.groupObserveTail.set(deviceId, next);
-	}
+	enqueueLiveGroup(track, now) {}
 	/** Unified retention (Phase 1): earliest retained footage per device — the
 	*  follow-recordings cutoff source. Cached 10 min: availability answers in
 	*  ~70 ms but the sweep asks once per device per pass. `null` = no footage
@@ -62448,7 +62494,9 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 	runPackageStillness(input) {
 		if (this.packageDropDetector === null) return;
 		const tags = { deviceId: input.deviceId };
-		for (const t of input.tracked) if (!input.packageClasses.has(t.className)) {
+		for (const t of input.tracked) {
+			if (input.packageClasses.has(t.className)) continue;
+			if (!isDelivererInPackageZone(t.zones, input.packageZoneIds)) continue;
 			this.lastNonPackageActivityAt.set(input.deviceId, input.timestamp);
 			break;
 		}
@@ -62495,6 +62543,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 			frameWidth: input.frameWidth,
 			frameHeight: input.frameHeight,
 			timestamp: input.timestamp,
+			minHits: input.settings.packageDropMinFrames,
 			minDwellMs: input.settings.packageDropDwellSec * 1e3,
 			activityWindowMs: input.settings.packageDropActivityWindowSec * 1e3,
 			...lastActivityAt !== void 0 ? { lastActivityAt } : {}
@@ -62598,9 +62647,10 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 		for (const ex of outcome.expired) {
 			const observedDwellMs = ex.lastSeenAt - ex.firstSeenAt;
 			const requiredDwellMs = input.settings.packageDropDwellSec * 1e3;
+			const requiredHits = input.settings.packageDropMinFrames;
 			const reasons = [];
 			if (!ex.activityBackedAtOpen) reasons.push("no-activity-before-open");
-			if (ex.rounds < 2) reasons.push("rounds");
+			if (ex.hits < requiredHits) reasons.push("hits");
 			if (observedDwellMs < requiredDwellMs) reasons.push("dwell");
 			this.ctx.logger.info("package candidate expired without promotion", {
 				tags,
@@ -62608,8 +62658,8 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 					candidateId: ex.id,
 					className: ex.className,
 					bbox: ex.bbox,
-					rounds: ex.rounds,
-					minRounds: 2,
+					hits: ex.hits,
+					minHits: requiredHits,
 					observedDwellMs,
 					requiredDwellMs,
 					activityBackedAtOpen: ex.activityBackedAtOpen,
@@ -62871,6 +62921,15 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 	async listRecentTracks(input) {
 		return this.queryFacade.listRecentTracks(input);
 	}
+	async listGroups(input) {
+		return {
+			groups: [],
+			nextCursor: null
+		};
+	}
+	async getGroup(input) {
+		return null;
+	}
 	/**
 	* Every event kind the device can produce: built-ins (motion + audio),
 	* detection classes actually observed on the device, and sensor kinds
@@ -64015,33 +64074,38 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 	buildFaceRescoreActionHandlers() {
 		return { "face.rescoreTrack": (input) => this.rescoreFaceForTrack(input) };
 	}
-	buildGroupActionHandlers() {
-		const ports = () => {
-			const groupStore = this.groupStore;
-			if (groupStore === null) return null;
-			return {
-				groupStore,
-				loadTrack: async (trackId) => {
-					const tracks = this.trackStore;
-					if (!tracks) return null;
-					return tracks.getActiveByTrack(trackId) ?? await tracks.getPersistedByTrackId(trackId);
-				},
-				eventMediaBaseUrl: () => this.eventMediaBaseUrl
-			};
+	groupQueryPorts() {
+		const groupStore = this.groupStore;
+		if (groupStore === null) return null;
+		return {
+			groupStore,
+			loadTracks: async (trackIds) => {
+				const map = /* @__PURE__ */ new Map();
+				const tracks = this.trackStore;
+				if (!tracks || trackIds.length === 0) return map;
+				const missing = [];
+				for (const id of trackIds) {
+					const active = tracks.getActiveByTrack(id);
+					if (active !== null) map.set(id, trackToLite(active));
+					else missing.push(id);
+				}
+				if (missing.length === 0) return map;
+				for (const persisted of await tracks.getPersistedByTrackIds(missing)) map.set(persisted.trackId, trackToLite(persisted));
+				return map;
+			},
+			eventMediaBaseUrl: () => this.eventMediaBaseUrl
 		};
+	}
+	buildGroupActionHandlers() {
 		return {
 			"analytics.listGroups": async (input) => {
-				const ready = ports();
-				if (ready === null) return {
+				return {
 					groups: [],
 					hasMore: false
 				};
-				return listGroupRecords(ready, input);
 			},
 			"analytics.getGroup": async (input) => {
-				const ready = ports();
-				if (ready === null) return { group: null };
-				return { group: await getGroupDetail(ready, input.groupId) };
+				return { group: null };
 			}
 		};
 	}