@camstack/addon-post-analysis 1.2.167 → 1.2.168

package/dist/{dist-dGS8z89L.js → dist-CftJzAHc.js}

@@ -13923,6 +13923,35 @@ method(_void(), array(string()).readonly(), { auth: "admin" }), method(object({
 	auth: "admin"
 });
 /**
+* Transport bounds for AI capability methods.
+*
+* Its own module because `llm.cap.ts` and `llm-runtime.cap.ts` already import
+* each other: declaring the constant in either one hands the other `undefined`
+* at module-init time, and an undefined `timeoutMs` silently falls back to the
+* kernel's 60 s default — the exact failure this constant exists to prevent,
+* reintroduced invisibly. Found by the guard, not by review.
+*/
+/**
+* Ceiling for a cap method that runs inference or loads a model.
+*
+* Deliberately far above anything the AI layer itself may wait for (a summary
+* asks 180 s by default, a rule may ask 600 s), because the TRANSPORT must
+* never be the layer that gives up first: when it does, the failure is
+* reported as a transport error for a model that was still thinking, naming
+* the wrong layer and hiding the real one.
+*
+* Measured 2026-09-03: a 6-image vision request needs 44.8 s warm and ~20 s
+* more on a cold model load. With no declaration every digest failed at
+* exactly 60 s and shipped without its text.
+*
+* A ceiling, not a budget. The AI layer's own timeouts (the rule's `timeoutMs`,
+* the profile's `timeoutMs` / `firstTokenTimeoutMs`) remain the things that
+* decide when to stop, because only they can say WHY.
+*/
+var AI_CAP_TRANSPORT_TIMEOUT_MS = 6e5;
+/** A multi-gigabyte download. An hour is not generous, it is honest. */
+var AI_MODEL_INSTALL_TIMEOUT_MS = 60 * 6e4;
+/**
 * Shared LLM generate contracts — imported by BOTH `llm.cap.ts` (consumer
 * surface) and `llm-runtime.cap.ts` (node-side managed executor) so the two
 * caps stay wire-compatible without a circular cap→cap import.
@@ -14194,16 +14223,19 @@ method(LlmGenerateBaseInputSchema.extend({
 	timeoutMs: number().int().positive().optional()
 }), LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({ runtime: ManagedRuntimeConfigSchema }), LlmRuntimeStatusSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({}), _void(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({}), LlmRuntimeStatusSchema, { auth: "admin" }), method(object({ model: ManagedModelRefSchema }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_MODEL_INSTALL_TIMEOUT_MS
 }), method(object({ file: string() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
@@ -14371,7 +14403,13 @@ var ProfileRefInputSchema = object({
 	addonId: string(),
 	profileId: string()
 });
-method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(object({
+method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(GenerateVisionInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(object({
 	addonId: string().optional(),
 	requestId: string()
 }), _void(), { kind: "mutation" }), method(object({}), array(LlmProfileKindDescriptorSchema)), method(object({}), array(LlmProfileSchema)), method(object({ profile: LlmProfileSchema }), LlmProfileSchema, {
@@ -14382,7 +14420,8 @@ method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }
 	auth: "admin"
 }), method(ProfileRefInputSchema, LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(ProfileRefInputSchema, array(string())), method(object({}), array(LlmDefaultSchema)), method(object({
 	selector: LlmDefaultSelectorSchema,
 	profileId: string().nullable()
@@ -43395,6 +43434,12 @@ function vectorDimFromBase64(encoded) {
 	return Math.floor(Buffer.from(encoded, "base64").byteLength / 4);
 }
 //#endregion
+Object.defineProperty(exports, "AUDIO_MACRO_LABELS", {
+	enumerable: true,
+	get: function() {
+		return AUDIO_MACRO_LABELS;
+	}
+});
 Object.defineProperty(exports, "BaseAddon", {
 	enumerable: true,
 	get: function() {
@@ -43419,6 +43464,12 @@ Object.defineProperty(exports, "COCO_TO_MACRO", {
 		return COCO_TO_MACRO;
 	}
 });
+Object.defineProperty(exports, "CamProfileSchema", {
+	enumerable: true,
+	get: function() {
+		return CamProfileSchema;
+	}
+});
 Object.defineProperty(exports, "DEFAULT_EVENT_COLOR", {
 	enumerable: true,
 	get: function() {

package/dist/{dist-DgOc1kH7.mjs → dist-h9lRw5M-.mjs}

@@ -13892,6 +13892,35 @@ method(_void(), array(string()).readonly(), { auth: "admin" }), method(object({
 	auth: "admin"
 });
 /**
+* Transport bounds for AI capability methods.
+*
+* Its own module because `llm.cap.ts` and `llm-runtime.cap.ts` already import
+* each other: declaring the constant in either one hands the other `undefined`
+* at module-init time, and an undefined `timeoutMs` silently falls back to the
+* kernel's 60 s default — the exact failure this constant exists to prevent,
+* reintroduced invisibly. Found by the guard, not by review.
+*/
+/**
+* Ceiling for a cap method that runs inference or loads a model.
+*
+* Deliberately far above anything the AI layer itself may wait for (a summary
+* asks 180 s by default, a rule may ask 600 s), because the TRANSPORT must
+* never be the layer that gives up first: when it does, the failure is
+* reported as a transport error for a model that was still thinking, naming
+* the wrong layer and hiding the real one.
+*
+* Measured 2026-09-03: a 6-image vision request needs 44.8 s warm and ~20 s
+* more on a cold model load. With no declaration every digest failed at
+* exactly 60 s and shipped without its text.
+*
+* A ceiling, not a budget. The AI layer's own timeouts (the rule's `timeoutMs`,
+* the profile's `timeoutMs` / `firstTokenTimeoutMs`) remain the things that
+* decide when to stop, because only they can say WHY.
+*/
+var AI_CAP_TRANSPORT_TIMEOUT_MS = 6e5;
+/** A multi-gigabyte download. An hour is not generous, it is honest. */
+var AI_MODEL_INSTALL_TIMEOUT_MS = 60 * 6e4;
+/**
 * Shared LLM generate contracts — imported by BOTH `llm.cap.ts` (consumer
 * surface) and `llm-runtime.cap.ts` (node-side managed executor) so the two
 * caps stay wire-compatible without a circular cap→cap import.
@@ -14163,16 +14192,19 @@ method(LlmGenerateBaseInputSchema.extend({
 	timeoutMs: number().int().positive().optional()
 }), LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({ runtime: ManagedRuntimeConfigSchema }), LlmRuntimeStatusSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({}), _void(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({}), LlmRuntimeStatusSchema, { auth: "admin" }), method(object({ model: ManagedModelRefSchema }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_MODEL_INSTALL_TIMEOUT_MS
 }), method(object({ file: string() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
@@ -14340,7 +14372,13 @@ var ProfileRefInputSchema = object({
 	addonId: string(),
 	profileId: string()
 });
-method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(object({
+method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(GenerateVisionInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(object({
 	addonId: string().optional(),
 	requestId: string()
 }), _void(), { kind: "mutation" }), method(object({}), array(LlmProfileKindDescriptorSchema)), method(object({}), array(LlmProfileSchema)), method(object({ profile: LlmProfileSchema }), LlmProfileSchema, {
@@ -14351,7 +14389,8 @@ method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }
 	auth: "admin"
 }), method(ProfileRefInputSchema, LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(ProfileRefInputSchema, array(string())), method(object({}), array(LlmDefaultSchema)), method(object({
 	selector: LlmDefaultSelectorSchema,
 	profileId: string().nullable()
@@ -43364,4 +43403,4 @@ function vectorDimFromBase64(encoded) {
 	return Math.floor(Buffer.from(encoded, "base64").byteLength / 4);
 }
 //#endregion
-export { buildEventKindDescriptor as $, NcSnoozeSuppressedSchema as A, DeviceType as At, SCENE_DIVERGED as B, literal as Bt, NcRuleInputSchema as C, subKindsOf as Ct, NcScheduleSchema as D, zoneAnalyticsCapability as Dt, NcRuleTargetSchema as E, videoclipsCapability as Et, RECORDING_EXPORT_MAX_READ_BYTES as F, sleep as Ft, TimelapseRuleSchema as G, string as Gt, TIMELAPSE_DENSE_FLOOR_SEC as H, object as Ht, RetrainStatusSchema as I, _enum as It, addonWidgetsSourceCapability as J, TrackSourceSchema as K, unknown as Kt, SCENE_CONFIRM_DEFAULT_TIMEOUT_MS as L, array as Lt, NcTaxonomySchema as M, hydrateSchema as Mt, OpsLogEntrySchema as N, isDeviceScopedCap as Nt, NcSnoozeInputSchema as O, errMsg as Ot, PoolMemoryWatchdog as P, nodePin as Pt, audioModeOf as Q, SCENE_DEFAULT_ANCHOR_THRESHOLD as R, boolean as Rt, NcConditionDescriptorSchema as S, sceneMonitorCapability as St, NcRuleSchema as T, vectorDimFromBase64 as Tt, TimelapseRuleInputSchema as U, partialRecord as Ut, SceneMonitorSchema as V, number as Vt, TimelapseRulePatchSchema as W, record as Wt, assertTimelapseCadences as X, alarmPanelCapability as Y, audioMetricsCapability as Z, NC_ALARM_SYSTEM_EVENT_KINDS as _, pipelineAnalyticsCapability as _t, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as a, encodeVectorBase64 as at, NC_SNOOZE_MAX_MINUTES as b, readTimelapseGeneratedAt as bt, DETECTION_PIPELINE_CAP_NAME as c, failureContributionCapability as ct, EVENT_PAD_MS as d, isScheduleActive as dt, cosineSimilarity as et, FULL_IMAGE_BBOX as f, isSourceCap as ft, MediaFileKindEnum as g, pickClusterStepModels as gt, MACRO_LABELS as h, parseProcStatus as ht, DEFAULT_EVENT_COLOR as i, embeddingEncoderCapability as it, NcSystemEventKindSchema as j, createEvent as jt, NcSnoozeSchema as k, BaseAddon as kt, DeclaredDevices as l, hfModelUrl as lt, LabelAttributionSchema as m, notificationRulesCapability as mt, CLUSTER_MODEL_SCOPED_STEPS as n, defineCustomActions as nt, DEFAULT_TIMELAPSE_PREVIEW_TEXT as o, evaluateSensorEdge as ot, FailureCounters as p, kebabToCamel as pt, VISIT_MERGE_GAP_MS as q, EventCategory as qt, COCO_TO_MACRO as r, deriveRecordingMode as rt, DETECTION_MACRO_CLASSES as s, faceGalleryCapability as st, BaseDevice as t, customAction as tt, EVENT_KIND_BY_CAP as u, isDetectionMacroClass as ut, NC_CONDITION_CATALOG as v, plateGalleryCapability as vt, NcRulePatchSchema as w, systemEventFilterApplies as wt, NC_TAXONOMY as x, resolvePoolMemoryPolicy as xt, NC_DEFAULT_SNOOZE_MINUTES as y, readDeviceStateFrom as yt, SCENE_DEFAULT_UNCOVERED_POLICY as z, discriminatedUnion as zt };
+export { audioModeOf as $, NcSnoozeSchema as A, BaseAddon as At, SCENE_DEFAULT_UNCOVERED_POLICY as B, boolean as Bt, NcConditionDescriptorSchema as C, sceneMonitorCapability as Ct, NcRuleTargetSchema as D, videoclipsCapability as Dt, NcRuleSchema as E, vectorDimFromBase64 as Et, PoolMemoryWatchdog as F, isDeviceScopedCap as Ft, TimelapseRulePatchSchema as G, partialRecord as Gt, SceneMonitorSchema as H, literal as Ht, RECORDING_EXPORT_MAX_READ_BYTES as I, nodePin as It, VISIT_MERGE_GAP_MS as J, unknown as Jt, TimelapseRuleSchema as K, record as Kt, RetrainStatusSchema as L, sleep as Lt, NcSystemEventKindSchema as M, DeviceType as Mt, NcTaxonomySchema as N, createEvent as Nt, NcScheduleSchema as O, zoneAnalyticsCapability as Ot, OpsLogEntrySchema as P, hydrateSchema as Pt, audioMetricsCapability as Q, SCENE_CONFIRM_DEFAULT_TIMEOUT_MS as R, _enum as Rt, NC_TAXONOMY as S, resolvePoolMemoryPolicy as St, NcRulePatchSchema as T, systemEventFilterApplies as Tt, TIMELAPSE_DENSE_FLOOR_SEC as U, number as Ut, SCENE_DIVERGED as V, discriminatedUnion as Vt, TimelapseRuleInputSchema as W, object as Wt, alarmPanelCapability as X, addonWidgetsSourceCapability as Y, EventCategory as Yt, assertTimelapseCadences as Z, MediaFileKindEnum as _, pickClusterStepModels as _t, DEFAULT_EVENT_COLOR as a, embeddingEncoderCapability as at, NC_DEFAULT_SNOOZE_MINUTES as b, readDeviceStateFrom as bt, DETECTION_MACRO_CLASSES as c, faceGalleryCapability as ct, EVENT_KIND_BY_CAP as d, isDetectionMacroClass as dt, buildEventKindDescriptor as et, EVENT_PAD_MS as f, isScheduleActive as ft, MACRO_LABELS as g, parseProcStatus as gt, LabelAttributionSchema as h, notificationRulesCapability as ht, COCO_TO_MACRO as i, deriveRecordingMode as it, NcSnoozeSuppressedSchema as j, CamProfileSchema as jt, NcSnoozeInputSchema as k, errMsg as kt, DETECTION_PIPELINE_CAP_NAME as l, failureContributionCapability as lt, FailureCounters as m, kebabToCamel as mt, BaseDevice as n, customAction as nt, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as o, encodeVectorBase64 as ot, FULL_IMAGE_BBOX as p, isSourceCap as pt, TrackSourceSchema as q, string as qt, CLUSTER_MODEL_SCOPED_STEPS as r, defineCustomActions as rt, DEFAULT_TIMELAPSE_PREVIEW_TEXT as s, evaluateSensorEdge as st, AUDIO_MACRO_LABELS as t, cosineSimilarity as tt, DeclaredDevices as u, hfModelUrl as ut, NC_ALARM_SYSTEM_EVENT_KINDS as v, pipelineAnalyticsCapability as vt, NcRuleInputSchema as w, subKindsOf as wt, NC_SNOOZE_MAX_MINUTES as x, readTimelapseGeneratedAt as xt, NC_CONDITION_CATALOG as y, plateGalleryCapability as yt, SCENE_DEFAULT_ANCHOR_THRESHOLD as z, array as zt };

package/dist/embedding-encoder/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-dGS8z89L.js");
+const require_dist = require("../dist-CftJzAHc.js");
 let node_fs = require("node:fs");
 node_fs = require_dist.__toESM(node_fs);
 let node_path = require("node:path");

package/dist/embedding-encoder/index.mjs

@@ -1,4 +1,4 @@
-import { P as PoolMemoryWatchdog, ht as parseProcStatus, it as embeddingEncoderCapability, kt as BaseAddon, lt as hfModelUrl, xt as resolvePoolMemoryPolicy } from "../dist-DgOc1kH7.mjs";
+import { At as BaseAddon, F as PoolMemoryWatchdog, St as resolvePoolMemoryPolicy, at as embeddingEncoderCapability, gt as parseProcStatus, ut as hfModelUrl } from "../dist-h9lRw5M-.mjs";
 import { createRequire } from "node:module";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/pipeline-analytics/{_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-CUasEI3s.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-C-Iu7OUr.mjs}

@@ -3,7 +3,7 @@ import "./dist-CYZr2fwk.mjs";
 var e = {
 	"@camstack/sdk": {
 		name: "@camstack/sdk",
-		version: "1.2.57",
+		version: "1.2.58",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_analytics_widgets",
@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.137",
+		version: "1.2.138",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_analytics_widgets",
@@ -33,7 +33,7 @@ var e = {
 	},
 	"@camstack/ui-library": {
 		name: "@camstack/ui-library",
-		version: "1.2.103",
+		version: "1.2.104",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_analytics_widgets",

package/dist/pipeline-analytics/{hostInit-DnBMykUz.mjs → hostInit-5MA0-GO5.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.2.137",
+				version: "1.2.138",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -45,7 +45,7 @@ async function r() {
 				}
 			},
 			"@camstack/sdk": {
-				version: "1.2.57",
+				version: "1.2.58",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -81,7 +81,7 @@ async function r() {
 				}
 			},
 			"@camstack/ui-library": {
-				version: "1.2.103",
+				version: "1.2.104",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/pipeline-analytics/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-dGS8z89L.js");
+const require_dist = require("../dist-CftJzAHc.js");
 let node_fs = require("node:fs");
 node_fs = require_dist.__toESM(node_fs, 1);
 let node_path = require("node:path");
@@ -3139,7 +3139,8 @@ var LlmVisionJudge = class {
 			prompt: call.prompt,
 			images,
 			jsonSchema: call.jsonSchema,
-			temperature: 0
+			temperature: 0,
+			timeoutMs: call.timeoutMs
 		}).catch((err) => ({
 			ok: false,
 			message: String(err)
@@ -19705,8 +19706,37 @@ var TimelapseRenderError = class extends Error {
 		this.reason = reason;
 	}
 };
-/** The profile with the most footage over the window; ties broken by name so
-*  the same window always renders from the same source. */
+/**
+* Profiles from cheapest to dearest, so the source is chosen by COST.
+*
+* `CamProfileSchema` is declared dearest-first; this is that order reversed.
+* A name the enum does not know sorts after all of them, alphabetically, so the
+* choice stays deterministic for a fleet with a bespoke profile.
+*/
+var PROFILE_BY_COST = [...require_dist.CamProfileSchema.options].reverse();
+function profileCost(profile) {
+	const i = PROFILE_BY_COST.indexOf(profile);
+	return i === -1 ? PROFILE_BY_COST.length : i;
+}
+/**
+* The CHEAPEST profile that has footage over the window.
+*
+* It used to be the profile with the MOST coverage, ties broken by name — and
+* that is a rule which picks `high` almost every time, because the high band is
+* the one that records continuously. On 2026-09-03 it did: a test render of a
+* ten-hour window chose `profile=high` at 97% coverage, which on this hub means
+* 4K read from a USB spinning disk. Decoding it made the machine stop answering
+* SSH and its own web UI for half an hour, and it had to be power-cycled.
+*
+* A timelapse is watched accelerated. Resolution buys nothing at 12 fps over a
+* night, and the cost difference between the bands is one to two orders of
+* magnitude in both bytes read and frames decoded. So there is no trade to
+* weigh: take the cheapest band that has anything, every time.
+*
+* Coverage no longer decides WHICH — only whether a band qualifies at all. A
+* band with less footage is still the right source; the gaps show as a shorter
+* video, not as a reason to read twenty times the bytes.
+*/
 function pickProfile(ranges, window) {
 	const byProfile = /* @__PURE__ */ new Map();
 	for (const r of ranges) {
@@ -19714,15 +19744,15 @@ function pickProfile(ranges, window) {
 		if (list === void 0) byProfile.set(r.profile, [r]);
 		else list.push(r);
 	}
-	let best = null;
-	for (const [profile, rows] of [...byProfile].sort((a, b) => a[0].localeCompare(b[0]))) {
+	const ordered = [...byProfile].sort((a, b) => profileCost(a[0]) - profileCost(b[0]) || a[0].localeCompare(b[0]));
+	for (const [profile, rows] of ordered) {
 		const coverage = footageCoverage(rows, window.startMs, window.endMs);
-		if (best === null || coverage.coveredMs > best.coverage.coveredMs) best = {
+		if (coverage.coveredMs > 0) return {
 			profile,
 			coverage
 		};
 	}
-	return best;
+	return null;
 }
 /**
 * Is `record` the render this request is about to order?
@@ -43985,6 +44015,36 @@ var AnalyticsQueryFacade = class {
 //#region src/pipeline-analytics/audio-detection-settings.ts
 var AudioDetectionSettingsSchema = require_dist.object({
 	classificationMinScore: require_dist.number().min(0).max(1).default(.6),
+	/**
+	* Macro classes allowed to produce an audio EVENT on this camera. Empty =
+	* no policy, every class passes — so an upgrade changes nothing until an
+	* operator states a policy.
+	*
+	* This belongs to the event generator, NOT to the classifier: the analyzer
+	* keeps classifying everything it hears, `audioLabels` on the track keeps
+	* carrying the full picture, and only the decision to MATERIALIZE an event
+	* is narrowed. Raising a threshold inside the classifier would instead make
+	* the sound invisible to every consumer at once.
+	*/
+	audioAllowedClasses: require_dist.array(require_dist.string()).default([]),
+	/**
+	* Corroboration window on the EVENT, per class: this many occurrences of
+	* the same sound must land inside `audioConfirmWindowSec` before it becomes
+	* an event. `1` = no window.
+	*
+	* Default 2-in-10s, set by the operator on 2026-09-03 after measuring 26
+	* audio tracks in 24 h: the single-frame classification is the dominant
+	* false positive, and a sound that is real is heard again within ten
+	* seconds. A camera that wants every occurrence sets `1`.
+	*
+	* The Notification Center already has this exact brake for audio RULES
+	* (`confirmHits` / `confirmWindowSec`). This is the same idea one level
+	* earlier, so a camera can stop MAKING the single-frame events instead of
+	* only declining to notify about them.
+	*/
+	audioConfirmHits: require_dist.number().int().min(1).default(2),
+	/** Width of the corroboration window. Ignored when `audioConfirmHits` is 1. */
+	audioConfirmWindowSec: require_dist.number().positive().default(10),
 	levelDeviationDb: require_dist.number().positive().default(10),
 	levelWindowSec: require_dist.number().positive().default(10),
 	levelMaxWaitSec: require_dist.number().positive().default(20),
@@ -44025,8 +44085,17 @@ var AudioDetectionSettingsSchema = require_dist.object({
 	audioEpisodeOpenHoldSec: require_dist.number().nonnegative().default(1.5),
 	/** Class must be absent this long before the episode closes. */
 	audioEpisodeCloseGapSec: require_dist.number().positive().default(12),
-	/** After close, the same class cannot reopen until this elapses. */
-	audioEpisodeCooldownSec: require_dist.number().nonnegative().default(30)
+	/** After close, the same class cannot reopen until this elapses.
+	*
+	*  This is the minimum spacing between two SYNTHETIC EVENTS (the episode's
+	*  event + timeline track) of the same sound on one camera — NOT a
+	*  notification floor. Notification spacing is the rule's own
+	*  `throttle.cooldownSec`, which already defaults to 60 s and is keyed
+	*  per-device; the two are independent brakes on different objects.
+	*
+	*  Raised 30 → 60 s on 2026-09-03 by the operator, alongside the 2-in-10s
+	*  corroboration window above. */
+	audioEpisodeCooldownSec: require_dist.number().nonnegative().default(60)
 });
 var AUDIO_DETECTION_DEFAULTS = AudioDetectionSettingsSchema.parse({});
 /**
@@ -44203,14 +44272,45 @@ function observeAudioEpisode(state, sample, knobs) {
 	};
 }
 //#endregion
+//#region src/pipeline-analytics/audio-confirm-window.ts
+function emptyAudioConfirmState() {
+	return { hitsByClass: /* @__PURE__ */ new Map() };
+}
+function observeAudioConfirm(state, input, cfg) {
+	if (cfg.confirmHits <= 1) return {
+		confirmed: true,
+		nextState: state
+	};
+	const cutoff = input.timestampMs - cfg.confirmWindowSec * 1e3;
+	const kept = [...(state.hitsByClass.get(input.className) ?? []).filter((at) => at > cutoff), input.timestampMs];
+	const next = new Map(state.hitsByClass);
+	if (kept.length < cfg.confirmHits) {
+		next.set(input.className, kept);
+		return {
+			confirmed: false,
+			nextState: { hitsByClass: next }
+		};
+	}
+	next.delete(input.className);
+	return {
+		confirmed: true,
+		nextState: { hitsByClass: next }
+	};
+}
+//#endregion
 //#region src/pipeline-analytics/audio-event-router.ts
 /**
 * Decide whether an audio frame is a (meaningful) classification event or a
 * level event. `silence` is never a classification — it falls to the level
 * path so only a genuine loudness peak/heartbeat can surface it.
+*
+* A class the operator did not allow takes the SAME route as a class that
+* failed the score: the level path. Both mean "not a classification event on
+* this camera", and giving the allowlist its own harder outcome (a silent
+* drop) would be a second arithmetic for one question.
 */
 function classifyAudioFrame(top, cfg) {
-	if (top && top.className !== "silence" && top.score >= cfg.classificationMinScore) return {
+	if ((cfg.allowedClasses.length === 0 || cfg.allowedClasses.includes(top?.className ?? "")) && top && top.className !== "silence" && top.score >= cfg.classificationMinScore) return {
 		kind: "classification",
 		className: top.className,
 		score: top.score
@@ -63076,6 +63176,36 @@ function buildGlobalSettingsSchema(cap) {
 					step: .05,
 					default: AUDIO_DETECTION_DEFAULTS.classificationMinScore
 				},
+				{
+					type: "multiselect",
+					key: "audioAllowedClasses",
+					label: "Event classes",
+					description: "Which sounds may become an event on this camera. Leave empty to allow every class. The classifier is untouched — it keeps hearing and labelling everything; this only narrows what is worth an event and a notification here.",
+					options: require_dist.AUDIO_MACRO_LABELS.filter((l) => l.id !== "silence").map((l) => ({
+						value: l.id,
+						label: l.name
+					})),
+					default: AUDIO_DETECTION_DEFAULTS.audioAllowedClasses
+				},
+				{
+					type: "number",
+					key: "audioConfirmHits",
+					label: "Occurrences to confirm",
+					description: "How many times the same sound must be heard inside the window below before it becomes an event. 1 disables the window — every occurrence is an event.",
+					min: 1,
+					step: 1,
+					default: AUDIO_DETECTION_DEFAULTS.audioConfirmHits
+				},
+				{
+					type: "number",
+					key: "audioConfirmWindowSec",
+					label: "Confirmation window",
+					description: "Width of the corroboration window. Occurrences are counted per class, so two different sounds never confirm each other. Ignored when occurrences is 1.",
+					min: 1,
+					step: 1,
+					default: AUDIO_DETECTION_DEFAULTS.audioConfirmWindowSec,
+					unit: "s"
+				},
 				{
 					type: "number",
 					key: "levelDeviationDb",
@@ -65922,6 +66052,10 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 	lastAudioInsertByDevice = /* @__PURE__ */ new Map();
 	lastMotionInsertByDevice = /* @__PURE__ */ new Map();
 	levelStateByDevice = /* @__PURE__ */ new Map();
+	/** Per-device corroboration window for classified audio (see
+	*  `audio-confirm-window.ts`). Torn down wherever `levelStateByDevice` is —
+	*  a stale window on a removed device would confirm on its first frame back. */
+	audioConfirmByDevice = /* @__PURE__ */ new Map();
 	/**
 	* Last ms a spatial track was alive on a device, any plane. Written on the
 	* frame path (one `Map.set` per processed frame), read O(1) by the audio-
@@ -67436,7 +67570,8 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 						mimeType: i.mimeType
 					})),
 					jsonSchema: request.jsonSchema,
-					temperature: request.temperature
+					temperature: request.temperature,
+					...request.timeoutMs !== void 0 ? { timeoutMs: request.timeoutMs } : {}
 				});
 				return result.ok ? {
 					ok: true,
@@ -68342,6 +68477,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 			this.overlaySynthesisWarnAt.delete(data.deviceId);
 			this.forgetDeviceProcessors(data.deviceId);
 			this.levelStateByDevice.delete(data.deviceId);
+			this.audioConfirmByDevice.delete(data.deviceId);
 			this.settingsCaches.clearDevice(data.deviceId);
 			this.rawDeviceBlobMirror.invalidate(data.deviceId);
 		}
@@ -68360,6 +68496,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 		this.overlaySynthesisWarnAt.delete(deviceId);
 		this.forgetDeviceProcessors(deviceId);
 		this.levelStateByDevice.delete(deviceId);
+		this.audioConfirmByDevice.delete(deviceId);
 		this.lastTrackActivityMs.delete(deviceId);
 		this.motionEventSnapshots?.forgetDevice(deviceId);
 		this.audioEpisodeByDevice.delete(deviceId);
@@ -68576,7 +68713,8 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 						mimeType: image.mimeType
 					})),
 					jsonSchema: i.jsonSchema,
-					temperature: i.temperature
+					temperature: i.temperature,
+					...i.timeoutMs !== void 0 ? { timeoutMs: i.timeoutMs } : {}
 				}),
 				cancelVision: async (requestId) => {
 					await api.llm.cancel.mutate({ requestId });
@@ -68871,6 +69009,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 		this.nodeLiveness.clear();
 		this.gatedNodeByDevice.clear();
 		this.levelStateByDevice.clear();
+		this.audioConfirmByDevice.clear();
 		this.settingsCaches.clearAll();
 		this.rawDeviceBlobMirror.invalidateAll();
 		this.rawGlobalStoreMirror.invalidate();
@@ -70885,12 +71024,15 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 		this.notificationCenter?.observeAudio(deviceId, {
 			timestampMs: timestamp,
 			...level?.dbfs !== void 0 ? { dbfs: level.dbfs } : {},
-			labels: (frame.detections ?? []).filter((d) => d.score >= settings.classificationMinScore).map((d) => d.macroClass)
+			labels: (frame.detections ?? []).filter((d) => d.score >= settings.classificationMinScore).map((d) => d.macroClass).filter((macroClass) => settings.audioAllowedClasses.length === 0 || settings.audioAllowedClasses.includes(macroClass))
 		});
 		const route = classifyAudioFrame(topClassification ? {
 			className: topClassification.macroClass,
 			score: topClassification.score
-		} : void 0, { classificationMinScore: settings.classificationMinScore });
+		} : void 0, {
+			classificationMinScore: settings.classificationMinScore,
+			allowedClasses: settings.audioAllowedClasses
+		});
 		if (route.kind === "classification") {
 			if (!topClassification) {
 				this.ctx.logger.warn("classifyAudioFrame returned classification but topClassification is null", {
@@ -70899,6 +71041,26 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 				});
 				return;
 			}
+			const confirm = observeAudioConfirm(this.audioConfirmByDevice.get(deviceId) ?? emptyAudioConfirmState(), {
+				className: route.className,
+				timestampMs: timestamp
+			}, {
+				confirmHits: settings.audioConfirmHits,
+				confirmWindowSec: settings.audioConfirmWindowSec
+			});
+			this.audioConfirmByDevice.set(deviceId, confirm.nextState);
+			if (!confirm.confirmed) {
+				this.ctx.logger.debug("audio event held for corroboration", {
+					tags: { deviceId },
+					meta: {
+						deviceId,
+						className: route.className,
+						confirmHits: settings.audioConfirmHits,
+						confirmWindowSec: settings.audioConfirmWindowSec
+					}
+				});
+				return;
+			}
 			const classified = {
 				deviceId,
 				timestamp,

package/dist/pipeline-analytics/index.mjs

@@ -1,4 +1,4 @@
-import { $ as buildEventKindDescriptor, A as NcSnoozeSuppressedSchema, At as DeviceType, B as SCENE_DIVERGED, Bt as literal, C as NcRuleInputSchema, Ct as subKindsOf, D as NcScheduleSchema, Dt as zoneAnalyticsCapability, E as NcRuleTargetSchema, Et as videoclipsCapability, F as RECORDING_EXPORT_MAX_READ_BYTES, Ft as sleep$1, G as TimelapseRuleSchema, Gt as string, H as TIMELAPSE_DENSE_FLOOR_SEC, Ht as object, I as RetrainStatusSchema, It as _enum, J as addonWidgetsSourceCapability, K as TrackSourceSchema, Kt as unknown, Lt as array, M as NcTaxonomySchema, Mt as hydrateSchema, N as OpsLogEntrySchema, Nt as isDeviceScopedCap, O as NcSnoozeInputSchema, Ot as errMsg, Pt as nodePin, Q as audioModeOf, R as SCENE_DEFAULT_ANCHOR_THRESHOLD, Rt as boolean, S as NcConditionDescriptorSchema, St as sceneMonitorCapability, T as NcRuleSchema, Tt as vectorDimFromBase64, U as TimelapseRuleInputSchema, Ut as partialRecord, V as SceneMonitorSchema, Vt as number, W as TimelapseRulePatchSchema, Wt as record, X as assertTimelapseCadences, Y as alarmPanelCapability, Z as audioMetricsCapability, _ as NC_ALARM_SYSTEM_EVENT_KINDS, _t as pipelineAnalyticsCapability, at as encodeVectorBase64, bt as readTimelapseGeneratedAt, ct as failureContributionCapability, d as EVENT_PAD_MS, dt as isScheduleActive, et as cosineSimilarity$1, f as FULL_IMAGE_BBOX, ft as isSourceCap, g as MediaFileKindEnum, gt as pickClusterStepModels, h as MACRO_LABELS, i as DEFAULT_EVENT_COLOR, j as NcSystemEventKindSchema, jt as createEvent, k as NcSnoozeSchema, kt as BaseAddon, l as DeclaredDevices, m as LabelAttributionSchema, mt as notificationRulesCapability, n as CLUSTER_MODEL_SCOPED_STEPS, nt as defineCustomActions, ot as evaluateSensorEdge, p as FailureCounters, pt as kebabToCamel, q as VISIT_MERGE_GAP_MS, qt as EventCategory, r as COCO_TO_MACRO, rt as deriveRecordingMode, s as DETECTION_MACRO_CLASSES, st as faceGalleryCapability, t as BaseDevice, tt as customAction, u as EVENT_KIND_BY_CAP, ut as isDetectionMacroClass, v as NC_CONDITION_CATALOG, vt as plateGalleryCapability, w as NcRulePatchSchema, wt as systemEventFilterApplies, x as NC_TAXONOMY, y as NC_DEFAULT_SNOOZE_MINUTES, yt as readDeviceStateFrom, z as SCENE_DEFAULT_UNCOVERED_POLICY, zt as discriminatedUnion } from "../dist-DgOc1kH7.mjs";
+import { $ as audioModeOf, A as NcSnoozeSchema, At as BaseAddon, B as SCENE_DEFAULT_UNCOVERED_POLICY, Bt as boolean, C as NcConditionDescriptorSchema, Ct as sceneMonitorCapability, D as NcRuleTargetSchema, Dt as videoclipsCapability, E as NcRuleSchema, Et as vectorDimFromBase64, Ft as isDeviceScopedCap, G as TimelapseRulePatchSchema, Gt as partialRecord, H as SceneMonitorSchema, Ht as literal, I as RECORDING_EXPORT_MAX_READ_BYTES, It as nodePin, J as VISIT_MERGE_GAP_MS, Jt as unknown, K as TimelapseRuleSchema, Kt as record, L as RetrainStatusSchema, Lt as sleep$1, M as NcSystemEventKindSchema, Mt as DeviceType, N as NcTaxonomySchema, Nt as createEvent, O as NcScheduleSchema, Ot as zoneAnalyticsCapability, P as OpsLogEntrySchema, Pt as hydrateSchema, Q as audioMetricsCapability, Rt as _enum, S as NC_TAXONOMY, T as NcRulePatchSchema, Tt as systemEventFilterApplies, U as TIMELAPSE_DENSE_FLOOR_SEC, Ut as number, V as SCENE_DIVERGED, Vt as discriminatedUnion, W as TimelapseRuleInputSchema, Wt as object, X as alarmPanelCapability, Y as addonWidgetsSourceCapability, Yt as EventCategory, Z as assertTimelapseCadences, _ as MediaFileKindEnum, _t as pickClusterStepModels, a as DEFAULT_EVENT_COLOR, b as NC_DEFAULT_SNOOZE_MINUTES, bt as readDeviceStateFrom, c as DETECTION_MACRO_CLASSES, ct as faceGalleryCapability, d as EVENT_KIND_BY_CAP, dt as isDetectionMacroClass, et as buildEventKindDescriptor, f as EVENT_PAD_MS, ft as isScheduleActive, g as MACRO_LABELS, h as LabelAttributionSchema, ht as notificationRulesCapability, i as COCO_TO_MACRO, it as deriveRecordingMode, j as NcSnoozeSuppressedSchema, jt as CamProfileSchema, k as NcSnoozeInputSchema, kt as errMsg, lt as failureContributionCapability, m as FailureCounters, mt as kebabToCamel, n as BaseDevice, nt as customAction, ot as encodeVectorBase64, p as FULL_IMAGE_BBOX, pt as isSourceCap, q as TrackSourceSchema, qt as string, r as CLUSTER_MODEL_SCOPED_STEPS, rt as defineCustomActions, st as evaluateSensorEdge, t as AUDIO_MACRO_LABELS, tt as cosineSimilarity$1, u as DeclaredDevices, v as NC_ALARM_SYSTEM_EVENT_KINDS, vt as pipelineAnalyticsCapability, w as NcRuleInputSchema, wt as subKindsOf, xt as readTimelapseGeneratedAt, y as NC_CONDITION_CATALOG, yt as plateGalleryCapability, z as SCENE_DEFAULT_ANCHOR_THRESHOLD, zt as array } from "../dist-h9lRw5M-.mjs";
 import { t as __exportAll } from "../embedding-encoder/index.mjs";
 import * as fs from "node:fs";
 import { promises } from "node:fs";
@@ -3132,7 +3132,8 @@ var LlmVisionJudge = class {
 			prompt: call.prompt,
 			images,
 			jsonSchema: call.jsonSchema,
-			temperature: 0
+			temperature: 0,
+			timeoutMs: call.timeoutMs
 		}).catch((err) => ({
 			ok: false,
 			message: String(err)
@@ -19683,8 +19684,37 @@ var TimelapseRenderError = class extends Error {
 		this.reason = reason;
 	}
 };
-/** The profile with the most footage over the window; ties broken by name so
-*  the same window always renders from the same source. */
+/**
+* Profiles from cheapest to dearest, so the source is chosen by COST.
+*
+* `CamProfileSchema` is declared dearest-first; this is that order reversed.
+* A name the enum does not know sorts after all of them, alphabetically, so the
+* choice stays deterministic for a fleet with a bespoke profile.
+*/
+var PROFILE_BY_COST = [...CamProfileSchema.options].reverse();
+function profileCost(profile) {
+	const i = PROFILE_BY_COST.indexOf(profile);
+	return i === -1 ? PROFILE_BY_COST.length : i;
+}
+/**
+* The CHEAPEST profile that has footage over the window.
+*
+* It used to be the profile with the MOST coverage, ties broken by name — and
+* that is a rule which picks `high` almost every time, because the high band is
+* the one that records continuously. On 2026-09-03 it did: a test render of a
+* ten-hour window chose `profile=high` at 97% coverage, which on this hub means
+* 4K read from a USB spinning disk. Decoding it made the machine stop answering
+* SSH and its own web UI for half an hour, and it had to be power-cycled.
+*
+* A timelapse is watched accelerated. Resolution buys nothing at 12 fps over a
+* night, and the cost difference between the bands is one to two orders of
+* magnitude in both bytes read and frames decoded. So there is no trade to
+* weigh: take the cheapest band that has anything, every time.
+*
+* Coverage no longer decides WHICH — only whether a band qualifies at all. A
+* band with less footage is still the right source; the gaps show as a shorter
+* video, not as a reason to read twenty times the bytes.
+*/
 function pickProfile(ranges, window) {
 	const byProfile = /* @__PURE__ */ new Map();
 	for (const r of ranges) {
@@ -19692,15 +19722,15 @@ function pickProfile(ranges, window) {
 		if (list === void 0) byProfile.set(r.profile, [r]);
 		else list.push(r);
 	}
-	let best = null;
-	for (const [profile, rows] of [...byProfile].sort((a, b) => a[0].localeCompare(b[0]))) {
+	const ordered = [...byProfile].sort((a, b) => profileCost(a[0]) - profileCost(b[0]) || a[0].localeCompare(b[0]));
+	for (const [profile, rows] of ordered) {
 		const coverage = footageCoverage(rows, window.startMs, window.endMs);
-		if (best === null || coverage.coveredMs > best.coverage.coveredMs) best = {
+		if (coverage.coveredMs > 0) return {
 			profile,
 			coverage
 		};
 	}
-	return best;
+	return null;
 }
 /**
 * Is `record` the render this request is about to order?
@@ -43911,6 +43941,36 @@ var AnalyticsQueryFacade = class {
 //#region src/pipeline-analytics/audio-detection-settings.ts
 var AudioDetectionSettingsSchema = object({
 	classificationMinScore: number().min(0).max(1).default(.6),
+	/**
+	* Macro classes allowed to produce an audio EVENT on this camera. Empty =
+	* no policy, every class passes — so an upgrade changes nothing until an
+	* operator states a policy.
+	*
+	* This belongs to the event generator, NOT to the classifier: the analyzer
+	* keeps classifying everything it hears, `audioLabels` on the track keeps
+	* carrying the full picture, and only the decision to MATERIALIZE an event
+	* is narrowed. Raising a threshold inside the classifier would instead make
+	* the sound invisible to every consumer at once.
+	*/
+	audioAllowedClasses: array(string()).default([]),
+	/**
+	* Corroboration window on the EVENT, per class: this many occurrences of
+	* the same sound must land inside `audioConfirmWindowSec` before it becomes
+	* an event. `1` = no window.
+	*
+	* Default 2-in-10s, set by the operator on 2026-09-03 after measuring 26
+	* audio tracks in 24 h: the single-frame classification is the dominant
+	* false positive, and a sound that is real is heard again within ten
+	* seconds. A camera that wants every occurrence sets `1`.
+	*
+	* The Notification Center already has this exact brake for audio RULES
+	* (`confirmHits` / `confirmWindowSec`). This is the same idea one level
+	* earlier, so a camera can stop MAKING the single-frame events instead of
+	* only declining to notify about them.
+	*/
+	audioConfirmHits: number().int().min(1).default(2),
+	/** Width of the corroboration window. Ignored when `audioConfirmHits` is 1. */
+	audioConfirmWindowSec: number().positive().default(10),
 	levelDeviationDb: number().positive().default(10),
 	levelWindowSec: number().positive().default(10),
 	levelMaxWaitSec: number().positive().default(20),
@@ -43951,8 +44011,17 @@ var AudioDetectionSettingsSchema = object({
 	audioEpisodeOpenHoldSec: number().nonnegative().default(1.5),
 	/** Class must be absent this long before the episode closes. */
 	audioEpisodeCloseGapSec: number().positive().default(12),
-	/** After close, the same class cannot reopen until this elapses. */
-	audioEpisodeCooldownSec: number().nonnegative().default(30)
+	/** After close, the same class cannot reopen until this elapses.
+	*
+	*  This is the minimum spacing between two SYNTHETIC EVENTS (the episode's
+	*  event + timeline track) of the same sound on one camera — NOT a
+	*  notification floor. Notification spacing is the rule's own
+	*  `throttle.cooldownSec`, which already defaults to 60 s and is keyed
+	*  per-device; the two are independent brakes on different objects.
+	*
+	*  Raised 30 → 60 s on 2026-09-03 by the operator, alongside the 2-in-10s
+	*  corroboration window above. */
+	audioEpisodeCooldownSec: number().nonnegative().default(60)
 });
 var AUDIO_DETECTION_DEFAULTS = AudioDetectionSettingsSchema.parse({});
 /**
@@ -44129,14 +44198,45 @@ function observeAudioEpisode(state, sample, knobs) {
 	};
 }
 //#endregion
+//#region src/pipeline-analytics/audio-confirm-window.ts
+function emptyAudioConfirmState() {
+	return { hitsByClass: /* @__PURE__ */ new Map() };
+}
+function observeAudioConfirm(state, input, cfg) {
+	if (cfg.confirmHits <= 1) return {
+		confirmed: true,
+		nextState: state
+	};
+	const cutoff = input.timestampMs - cfg.confirmWindowSec * 1e3;
+	const kept = [...(state.hitsByClass.get(input.className) ?? []).filter((at) => at > cutoff), input.timestampMs];
+	const next = new Map(state.hitsByClass);
+	if (kept.length < cfg.confirmHits) {
+		next.set(input.className, kept);
+		return {
+			confirmed: false,
+			nextState: { hitsByClass: next }
+		};
+	}
+	next.delete(input.className);
+	return {
+		confirmed: true,
+		nextState: { hitsByClass: next }
+	};
+}
+//#endregion
 //#region src/pipeline-analytics/audio-event-router.ts
 /**
 * Decide whether an audio frame is a (meaningful) classification event or a
 * level event. `silence` is never a classification — it falls to the level
 * path so only a genuine loudness peak/heartbeat can surface it.
+*
+* A class the operator did not allow takes the SAME route as a class that
+* failed the score: the level path. Both mean "not a classification event on
+* this camera", and giving the allowlist its own harder outcome (a silent
+* drop) would be a second arithmetic for one question.
 */
 function classifyAudioFrame(top, cfg) {
-	if (top && top.className !== "silence" && top.score >= cfg.classificationMinScore) return {
+	if ((cfg.allowedClasses.length === 0 || cfg.allowedClasses.includes(top?.className ?? "")) && top && top.className !== "silence" && top.score >= cfg.classificationMinScore) return {
 		kind: "classification",
 		className: top.className,
 		score: top.score
@@ -63002,6 +63102,36 @@ function buildGlobalSettingsSchema(cap) {
 					step: .05,
 					default: AUDIO_DETECTION_DEFAULTS.classificationMinScore
 				},
+				{
+					type: "multiselect",
+					key: "audioAllowedClasses",
+					label: "Event classes",
+					description: "Which sounds may become an event on this camera. Leave empty to allow every class. The classifier is untouched — it keeps hearing and labelling everything; this only narrows what is worth an event and a notification here.",
+					options: AUDIO_MACRO_LABELS.filter((l) => l.id !== "silence").map((l) => ({
+						value: l.id,
+						label: l.name
+					})),
+					default: AUDIO_DETECTION_DEFAULTS.audioAllowedClasses
+				},
+				{
+					type: "number",
+					key: "audioConfirmHits",
+					label: "Occurrences to confirm",
+					description: "How many times the same sound must be heard inside the window below before it becomes an event. 1 disables the window — every occurrence is an event.",
+					min: 1,
+					step: 1,
+					default: AUDIO_DETECTION_DEFAULTS.audioConfirmHits
+				},
+				{
+					type: "number",
+					key: "audioConfirmWindowSec",
+					label: "Confirmation window",
+					description: "Width of the corroboration window. Occurrences are counted per class, so two different sounds never confirm each other. Ignored when occurrences is 1.",
+					min: 1,
+					step: 1,
+					default: AUDIO_DETECTION_DEFAULTS.audioConfirmWindowSec,
+					unit: "s"
+				},
 				{
 					type: "number",
 					key: "levelDeviationDb",
@@ -65848,6 +65978,10 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 	lastAudioInsertByDevice = /* @__PURE__ */ new Map();
 	lastMotionInsertByDevice = /* @__PURE__ */ new Map();
 	levelStateByDevice = /* @__PURE__ */ new Map();
+	/** Per-device corroboration window for classified audio (see
+	*  `audio-confirm-window.ts`). Torn down wherever `levelStateByDevice` is —
+	*  a stale window on a removed device would confirm on its first frame back. */
+	audioConfirmByDevice = /* @__PURE__ */ new Map();
 	/**
 	* Last ms a spatial track was alive on a device, any plane. Written on the
 	* frame path (one `Map.set` per processed frame), read O(1) by the audio-
@@ -67362,7 +67496,8 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 						mimeType: i.mimeType
 					})),
 					jsonSchema: request.jsonSchema,
-					temperature: request.temperature
+					temperature: request.temperature,
+					...request.timeoutMs !== void 0 ? { timeoutMs: request.timeoutMs } : {}
 				});
 				return result.ok ? {
 					ok: true,
@@ -68268,6 +68403,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 			this.overlaySynthesisWarnAt.delete(data.deviceId);
 			this.forgetDeviceProcessors(data.deviceId);
 			this.levelStateByDevice.delete(data.deviceId);
+			this.audioConfirmByDevice.delete(data.deviceId);
 			this.settingsCaches.clearDevice(data.deviceId);
 			this.rawDeviceBlobMirror.invalidate(data.deviceId);
 		}
@@ -68286,6 +68422,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 		this.overlaySynthesisWarnAt.delete(deviceId);
 		this.forgetDeviceProcessors(deviceId);
 		this.levelStateByDevice.delete(deviceId);
+		this.audioConfirmByDevice.delete(deviceId);
 		this.lastTrackActivityMs.delete(deviceId);
 		this.motionEventSnapshots?.forgetDevice(deviceId);
 		this.audioEpisodeByDevice.delete(deviceId);
@@ -68502,7 +68639,8 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 						mimeType: image.mimeType
 					})),
 					jsonSchema: i.jsonSchema,
-					temperature: i.temperature
+					temperature: i.temperature,
+					...i.timeoutMs !== void 0 ? { timeoutMs: i.timeoutMs } : {}
 				}),
 				cancelVision: async (requestId) => {
 					await api.llm.cancel.mutate({ requestId });
@@ -68797,6 +68935,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 		this.nodeLiveness.clear();
 		this.gatedNodeByDevice.clear();
 		this.levelStateByDevice.clear();
+		this.audioConfirmByDevice.clear();
 		this.settingsCaches.clearAll();
 		this.rawDeviceBlobMirror.invalidateAll();
 		this.rawGlobalStoreMirror.invalidate();
@@ -70811,12 +70950,15 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 		this.notificationCenter?.observeAudio(deviceId, {
 			timestampMs: timestamp,
 			...level?.dbfs !== void 0 ? { dbfs: level.dbfs } : {},
-			labels: (frame.detections ?? []).filter((d) => d.score >= settings.classificationMinScore).map((d) => d.macroClass)
+			labels: (frame.detections ?? []).filter((d) => d.score >= settings.classificationMinScore).map((d) => d.macroClass).filter((macroClass) => settings.audioAllowedClasses.length === 0 || settings.audioAllowedClasses.includes(macroClass))
 		});
 		const route = classifyAudioFrame(topClassification ? {
 			className: topClassification.macroClass,
 			score: topClassification.score
-		} : void 0, { classificationMinScore: settings.classificationMinScore });
+		} : void 0, {
+			classificationMinScore: settings.classificationMinScore,
+			allowedClasses: settings.audioAllowedClasses
+		});
 		if (route.kind === "classification") {
 			if (!topClassification) {
 				this.ctx.logger.warn("classifyAudioFrame returned classification but topClassification is null", {
@@ -70825,6 +70967,26 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 				});
 				return;
 			}
+			const confirm = observeAudioConfirm(this.audioConfirmByDevice.get(deviceId) ?? emptyAudioConfirmState(), {
+				className: route.className,
+				timestampMs: timestamp
+			}, {
+				confirmHits: settings.audioConfirmHits,
+				confirmWindowSec: settings.audioConfirmWindowSec
+			});
+			this.audioConfirmByDevice.set(deviceId, confirm.nextState);
+			if (!confirm.confirmed) {
+				this.ctx.logger.debug("audio event held for corroboration", {
+					tags: { deviceId },
+					meta: {
+						deviceId,
+						className: route.className,
+						confirmHits: settings.audioConfirmHits,
+						confirmWindowSec: settings.audioConfirmWindowSec
+					}
+				});
+				return;
+			}
 			const classified = {
 				deviceId,
 				timestamp,

package/dist/pipeline-analytics/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-CUasEI3s.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-C-Iu7OUr.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-post-analysis",
-  "version": "1.2.167",
+  "version": "1.2.168",
   "description": "Post-Analysis bundle — enrichment, embedding-encoder, pipeline-analytics. Multi-entry npm package shipping addons that consume pipeline output.",
   "keywords": [
     "camstack",