@camstack/addon-post-analysis 1.2.248 → 1.2.249

package/dist/{dist-KRjxHIQ4.mjs → dist-C7xHFnGJ.mjs}

@@ -20663,13 +20663,26 @@ var TrackAudioLabelSchema = object({
 *  - `audio` — an audio event on the camera itself that was anomalous for
 *    THAT camera, loud, and heard while nothing visual was happening (D62).
 *
+*  - `onboard` — the CAMERA's own firmware, paired with a decoded frame in
+*    that frame's pixel space. A real root detector and a SPATIAL one: its
+*    boxes are the same kind of fact `pipeline`'s are, produced by a different
+*    detector.
+*
+* `onboard` was missing here while `DetectionSourceSchema` already had it, so
+* a persisted onboard track failed `safeParse` on read and came back with NO
+* source at all — which `isSpatialTrack` then admitted by accident, through the
+* `undefined` arm rather than by anybody's decision, and which `excludeSources`
+* could not name.
+*
 * The spatial subsystems (tracker association, occupancy count, re-id /
 * embedding, resurrection) MUST skip every synthetic source. Test for that
-* with `isSpatialTrack`, which allow-lists `pipeline` — a `!== 'sensor'`
-* check silently readmits every source added after it was written.
+* with `isSpatialTrack`, which allow-lists the spatial sources explicitly — a
+* `!== 'sensor'` check silently readmits every source added after it was
+* written.
 */
 var TrackSourceSchema = _enum([
 	"pipeline",
+	"onboard",
 	"sensor",
 	"audio"
 ]);
@@ -23402,13 +23415,39 @@ var MotionSourceEnum = _enum([
 */
 var MotionSourcesSchema = array(MotionSourceEnum);
 /**
-* Which root detectors a camera runs. Deliberately the SAME vocabulary
-* post-analysis already tags every detection with (`DetectionSource`) rather
-* than a second spelling of the same two ideas — the value an operator picks
-* here is the value that comes back on the track, the overlay and the debug
-* row.
+* Which root detector a camera runs — EXACTLY ONE.
+*
+* Deliberately the SAME vocabulary post-analysis already tags every detection
+* with (`DetectionSource`) rather than a second spelling of the same two
+* ideas: the value an operator picks here is the value that comes back on the
+* track, the overlay and the debug row.
+*
+* ## Why one, and why it is still an array
+*
+* Two roots on one camera is a capability nobody asked for and the operator has
+* since ruled out. It was never free: both planes feed the SAME per-device
+* stationary registry, both can promote the same parked object, and the two
+* detectors disagree about the same box by construction — which is the
+* disagreement D505 had to arbitrate. Removing the case removes the arbitration.
+*
+* The ARRAY shape survives because the stored settings and the attach payload
+* already speak it on every camera of every fleet, and a cap input that
+* suddenly refuses a stored value makes the camera un-attachable — a fail-closed
+* in the one direction that costs an operator their cameras. So the wire stays
+* tolerant and the TYPE is exact: a longer list is truncated to its first
+* element rather than refused, and `max(1)` is what every consumer can then
+* rely on.
+*
+* AT MOST one, not exactly one. The EMPTY list is a legal, deliberate pick —
+* a camera an operator left with no root detector — and `planDetectionSources`
+* has always said so: inventing a root for them is how a default acts without
+* anybody choosing it. Tightening this to `length(1)` broke that, and the
+* suite caught it.
+*
+* Measured before tightening (2026-09-15, this fleet, 6 h of attaches): 3327
+* `["pipeline"]` and 2 `["onboard"]`. Not one camera had two.
 */
-var DetectionSourcesSchema = array(DetectionSourceSchema);
+var DetectionSourcesSchema = preprocess((value) => Array.isArray(value) && value.length > 1 ? value.slice(0, 1) : value, array(DetectionSourceSchema).max(1));
 /**
 * Input shape for `pipeline-runner.reportMotion` cap method. Exported
 * so cap-side consumers (the orchestrator forward, the runner addon's

package/dist/{dist-DmB50uQ-.js → dist-CdLfCStM.js}

@@ -20694,13 +20694,26 @@ var TrackAudioLabelSchema = object({
 *  - `audio` — an audio event on the camera itself that was anomalous for
 *    THAT camera, loud, and heard while nothing visual was happening (D62).
 *
+*  - `onboard` — the CAMERA's own firmware, paired with a decoded frame in
+*    that frame's pixel space. A real root detector and a SPATIAL one: its
+*    boxes are the same kind of fact `pipeline`'s are, produced by a different
+*    detector.
+*
+* `onboard` was missing here while `DetectionSourceSchema` already had it, so
+* a persisted onboard track failed `safeParse` on read and came back with NO
+* source at all — which `isSpatialTrack` then admitted by accident, through the
+* `undefined` arm rather than by anybody's decision, and which `excludeSources`
+* could not name.
+*
 * The spatial subsystems (tracker association, occupancy count, re-id /
 * embedding, resurrection) MUST skip every synthetic source. Test for that
-* with `isSpatialTrack`, which allow-lists `pipeline` — a `!== 'sensor'`
-* check silently readmits every source added after it was written.
+* with `isSpatialTrack`, which allow-lists the spatial sources explicitly — a
+* `!== 'sensor'` check silently readmits every source added after it was
+* written.
 */
 var TrackSourceSchema = _enum([
 	"pipeline",
+	"onboard",
 	"sensor",
 	"audio"
 ]);
@@ -23433,13 +23446,39 @@ var MotionSourceEnum = _enum([
 */
 var MotionSourcesSchema = array(MotionSourceEnum);
 /**
-* Which root detectors a camera runs. Deliberately the SAME vocabulary
-* post-analysis already tags every detection with (`DetectionSource`) rather
-* than a second spelling of the same two ideas — the value an operator picks
-* here is the value that comes back on the track, the overlay and the debug
-* row.
+* Which root detector a camera runs — EXACTLY ONE.
+*
+* Deliberately the SAME vocabulary post-analysis already tags every detection
+* with (`DetectionSource`) rather than a second spelling of the same two
+* ideas: the value an operator picks here is the value that comes back on the
+* track, the overlay and the debug row.
+*
+* ## Why one, and why it is still an array
+*
+* Two roots on one camera is a capability nobody asked for and the operator has
+* since ruled out. It was never free: both planes feed the SAME per-device
+* stationary registry, both can promote the same parked object, and the two
+* detectors disagree about the same box by construction — which is the
+* disagreement D505 had to arbitrate. Removing the case removes the arbitration.
+*
+* The ARRAY shape survives because the stored settings and the attach payload
+* already speak it on every camera of every fleet, and a cap input that
+* suddenly refuses a stored value makes the camera un-attachable — a fail-closed
+* in the one direction that costs an operator their cameras. So the wire stays
+* tolerant and the TYPE is exact: a longer list is truncated to its first
+* element rather than refused, and `max(1)` is what every consumer can then
+* rely on.
+*
+* AT MOST one, not exactly one. The EMPTY list is a legal, deliberate pick —
+* a camera an operator left with no root detector — and `planDetectionSources`
+* has always said so: inventing a root for them is how a default acts without
+* anybody choosing it. Tightening this to `length(1)` broke that, and the
+* suite caught it.
+*
+* Measured before tightening (2026-09-15, this fleet, 6 h of attaches): 3327
+* `["pipeline"]` and 2 `["onboard"]`. Not one camera had two.
 */
-var DetectionSourcesSchema = array(DetectionSourceSchema);
+var DetectionSourcesSchema = preprocess((value) => Array.isArray(value) && value.length > 1 ? value.slice(0, 1) : value, array(DetectionSourceSchema).max(1));
 /**
 * Input shape for `pipeline-runner.reportMotion` cap method. Exported
 * so cap-side consumers (the orchestrator forward, the runner addon's

package/dist/embedding-encoder/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-DmB50uQ-.js");
+const require_dist = require("../dist-CdLfCStM.js");
 let node_fs = require("node:fs");
 node_fs = require_dist.__toESM(node_fs);
 let node_path = require("node:path");

package/dist/embedding-encoder/index.mjs

@@ -1,4 +1,4 @@
-import { Et as parseProcStatus, H as PoolMemoryWatchdog, Ht as BaseAddon, Nt as resolvePoolMemoryPolicy, gt as hfModelUrl, ut as embeddingEncoderCapability } from "../dist-KRjxHIQ4.mjs";
+import { Et as parseProcStatus, H as PoolMemoryWatchdog, Ht as BaseAddon, Nt as resolvePoolMemoryPolicy, gt as hfModelUrl, ut as embeddingEncoderCapability } from "../dist-C7xHFnGJ.mjs";
 import { createRequire } from "node:module";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/pipeline-analytics/{_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-DaT9RhCO.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-DJ9dpbgD.mjs}

@@ -3,7 +3,7 @@ import "./dist-CYZr2fwk.mjs";
 var e = {
 	"@camstack/sdk": {
 		name: "@camstack/sdk",
-		version: "1.2.106",
+		version: "1.2.107",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_analytics_widgets",
@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.200",
+		version: "1.2.201",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_analytics_widgets",
@@ -33,7 +33,7 @@ var e = {
 	},
 	"@camstack/ui-library": {
 		name: "@camstack/ui-library",
-		version: "1.2.165",
+		version: "1.2.166",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_analytics_widgets",

package/dist/pipeline-analytics/{hostInit-B2MVHHLi.mjs → hostInit-gS_O2jp5.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.2.200",
+				version: "1.2.201",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -45,7 +45,7 @@ async function r() {
 				}
 			},
 			"@camstack/sdk": {
-				version: "1.2.106",
+				version: "1.2.107",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -81,7 +81,7 @@ async function r() {
 				}
 			},
 			"@camstack/ui-library": {
-				version: "1.2.165",
+				version: "1.2.166",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/pipeline-analytics/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-DmB50uQ-.js");
+const require_dist = require("../dist-CdLfCStM.js");
 let node_fs = require("node:fs");
 node_fs = require_dist.__toESM(node_fs, 1);
 let node_path = require("node:path");
@@ -15088,20 +15088,23 @@ var OccupancyWatcher = class {
 	* this tick (usually none). Every watched key is evaluated for `deviceId`;
 	* fail-closed keys (absent zone) are skipped and hold no state.
 	*/
-	observe(deviceId, snapshot, now) {
+	observe(deviceId, snapshot, now, evidence = "scene") {
 		const edges = [];
 		for (const spec of this.watched.values()) {
 			const resolved = resolveOccupancyScope(snapshot, spec);
 			if (resolved === null) continue;
 			const key = occupancyKey(deviceId, spec.zoneId, spec.className, spec.threshold);
 			this.reportImpossibleScope(deviceId, key, spec);
+			const blindCensus = evidence === "census" && resolved.count < spec.threshold;
 			const existing = this.states.get(key);
 			if (existing === void 0) {
+				if (blindCensus) continue;
 				const state = seedState(deviceId, spec, resolved, now);
 				this.states.set(key, state);
 				this.seeded.set(key, stateToRow(key, state, now));
 				continue;
 			}
+			if (blindCensus) continue;
 			const edge = step(existing, spec, resolved, now);
 			if (edge !== null) edges.push(edge);
 		}
@@ -24730,12 +24733,12 @@ var NotificationCenter = class NotificationCenter {
 	* COMMITTED edge is persisted (rare — only on a confirmed flip, never
 	* per-frame) and routed to {@link onOccupancyEdge}.
 	*/
-	observeOccupancy(deviceId, snapshot) {
+	observeOccupancy(deviceId, snapshot, evidence = "scene") {
 		if (!this.evaluationActive || !this.occupancyEnabled) return;
 		const now = this.now();
 		let edges;
 		try {
-			edges = this.occupancyWatcher.observe(deviceId, snapshot, now);
+			edges = this.occupancyWatcher.observe(deviceId, snapshot, now, evidence);
 		} catch (err) {
 			this.logger.debug("occupancy observe failed", {
 				tags: { deviceId },
@@ -24756,7 +24759,8 @@ var NotificationCenter = class NotificationCenter {
 					previousCount: edge.previousCount,
 					occupied: edge.occupied,
 					observedAt: edge.observedAt ?? -1,
-					observedLagMs: edge.observedAt !== void 0 ? edge.timestamp - edge.observedAt : -1
+					observedLagMs: edge.observedAt !== void 0 ? edge.timestamp - edge.observedAt : -1,
+					committedBy: evidence
 				}
 			});
 			this.persistOccupancyEdge(edge, now);
@@ -61830,6 +61834,49 @@ function hasKeyFrame(source) {
 	return source.keyFrame !== null && source.bbox !== null;
 }
 //#endregion
+//#region src/pipeline-analytics/pipeline/stationary-planes.ts
+/**
+* WHICH detection planes carry the stationary machinery.
+*
+* A plane qualifies when it produces OBJECT BOXES on decoded frames — because
+* that is what the registry needs to decide an object is parked: a box, a
+* class, and an observed clock that only advances while frames flow.
+*
+* Both root detectors qualify. `pipeline` is the ML tree; `onboard` is the
+* camera's own firmware, and the boxes it produces are paired with a decoded
+* frame in that frame's pixel space — the same plane, entered by a different
+* door. `sensor` and `audio` do not: they carry no geometry to park.
+*
+* It used to be `source === 'pipeline'`, in five places, each explaining that
+* the gate "runs on that plane". The reason given was WHERE the flood it was
+* written for had been measured (617, the ML plane), never an argument that the
+* firmware's boxes were unfit. The cost of the accident, on device 640: a still
+* object is never promoted, so it holds `hasLiveTrack` true for as long as it
+* sits there, and every detection session runs to its 120 s cap instead of
+* closing on cooldown — `closed at the max-hold cap with a subject still
+* present`. The camera's lazy stream is then torn down and rebuilt on the next
+* detection, on a battery camera.
+*
+* One predicate and not five comparisons, because five copies of a rule drift:
+* this repo has already paid for that with two authorities on one function
+* (D62).
+*/
+/** Does this detection plane run the stationary registry, gate and promotion? */
+function planeRunsStationary(source) {
+	return source === "pipeline" || source === "onboard";
+}
+//#endregion
+//#region src/pipeline-analytics/pipeline/onboard-birth-authority.ts
+/**
+* May a suppression verdict RETRACT this birth?
+*
+* `false` means hold: keep the track, log the held verdict, and let the
+* ordinary lifetime decide. It never means "confirmed".
+*/
+function suppressionMayRetract(source) {
+	return source !== "onboard";
+}
+//#endregion
 //#region src/pipeline-analytics/rebuild-source-loader.ts
 /**
 * Assemble one track's rebuild inputs, reading at most ONE blob.
@@ -65600,9 +65647,10 @@ var PlateStore = class {
 	* `PlateColumnPatch` widens the nullable media columns to accept `null`,
 	* which is how a caller CLEARS one (`assignPlate` nulls a crop whose blob it
 	* just deleted, so the reown that follows cannot try to move a resource that
-	* is gone). It used to be expressed as `null as unknown as string` at the
-	* call site — a cast that stopped being even nominally true when the column
-	* became a number (D482), and which the type can simply say instead.
+	* is gone). It used to be expressed at the call site as a `null` double-cast
+	* through `unknown` to `string` — a cast that stopped being even nominally
+	* true when the column became a number (D482), and which the type can simply
+	* say instead.
 	*/
 	async update(plateId, data) {
 		try {
@@ -74803,7 +74851,7 @@ var ZoneAnalyticsProvider = class {
 		this.snapshots.set(input.deviceId, snapshot);
 		this.noteLtsSamples(input.deviceId, snapshot, input.timestamp);
 		this.appendHistory(input.deviceId, snapshot);
-		this.emitSnapshot(input.deviceId, snapshot);
+		this.emitSnapshot(input.deviceId, snapshot, "scene");
 		this.sliceThrottle.push(input.deviceId, snapshot);
 	}
 	/** Drop a device's snapshot + history. Called on device removal. */
@@ -74869,7 +74917,7 @@ var ZoneAnalyticsProvider = class {
 			if (snapshot) {
 				this.appendHistory(deviceId, snapshot);
 				this.noteLtsSamples(deviceId, snapshot, now);
-				this.emitSnapshot(deviceId, snapshot);
+				this.emitSnapshot(deviceId, snapshot, "census");
 				this.sliceThrottle.push(deviceId, snapshot);
 			}
 		}
@@ -74898,10 +74946,10 @@ var ZoneAnalyticsProvider = class {
 	}
 	/** Push one snapshot to the occupancy tap, isolating any consumer throw from
 	*  the frame path (occupancy notifications must never break analytics). */
-	emitSnapshot(deviceId, snapshot) {
+	emitSnapshot(deviceId, snapshot, evidence) {
 		if (!this.ctx.onSnapshot) return;
 		try {
-			this.ctx.onSnapshot(deviceId, snapshot);
+			this.ctx.onSnapshot(deviceId, snapshot, evidence);
 		} catch (err) {
 			this.ctx.logger.debug("zone-analytics occupancy tap failed", {
 				tags: { deviceId },
@@ -77521,7 +77569,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 			listStationaryObjects: (deviceId) => this.stationaryRegistry?.listViews(deviceId) ?? [],
 			listStationaryDeviceIds: () => this.stationaryRegistry?.deviceIds() ?? [],
 			resolveZones: (deviceId) => this.resolveDeviceZones(deviceId),
-			onSnapshot: (deviceId, snapshot) => this.notificationCenter?.observeOccupancy(deviceId, snapshot)
+			onSnapshot: (deviceId, snapshot, evidence) => this.notificationCenter?.observeOccupancy(deviceId, snapshot, evidence)
 		});
 		this.zoneAnalytics = zoneAnalytics;
 		const audioMetrics = new AudioMetricsProvider({
@@ -79362,7 +79410,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 			return;
 		}
 		this.dropoutSkipsByKey.set(key, 0);
-		if (source === "pipeline" && this.stationaryRegistry) {
+		if (planeRunsStationary(source) && this.stationaryRegistry) {
 			await this.resolveDeviceStationarySettings(deviceId);
 			await this.resolveDevicePackageDropSettings(deviceId);
 			await this.resolveDeviceSummarySettings(deviceId);
@@ -79422,7 +79470,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 			});
 			this.trackStore?.markRiderFolded(fold.trackId);
 		}
-		if (source === "pipeline") this.stationaryRegistry?.noteFrame(deviceId, result.timestamp);
+		if (planeRunsStationary(source)) this.stationaryRegistry?.noteFrame(deviceId, result.timestamp);
 		if (this.stationaryRegistry && (result.stationaryConfirmed.length > 0 || result.stationaryWoken.length > 0)) this.stationaryRegistry.applyFrameOutcome({
 			deviceId,
 			confirmed: result.stationaryConfirmed,
@@ -79596,8 +79644,20 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 				firstSeen: this.trackStore?.peekActive(id)?.firstSeen ?? null
 			});
 			if (!outcome.confirmed.has(id)) {
+				if (!suppressionMayRetract(source)) {
+					log.info("birth suppression held — the gate is not this root detector", {
+						tags: { deviceId },
+						meta: {
+							trackId: id,
+							className: t.className,
+							source
+						}
+					});
+					continue;
+				}
 				this.suppressedBirths.reject(key, id);
 				this.trackStore?.dropActive(id);
+				this.clearLiveTrackState(deviceId, id);
 				log.info("birth suppressed — track record retracted", { meta: {
 					trackId: id,
 					className: t.className,
@@ -79727,7 +79787,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 		const stationarySettings = this.stationarySettingsFromCache(deviceId);
 		const packageSettings = this.packageDropSettingsFromCache(deviceId);
 		const packageClasses = new Set(packageSettings.packageDropClassFilter);
-		if (source === "pipeline" && this.stationaryRegistry && this.stationaryEvidence && stationarySettings.enabled) {
+		if (planeRunsStationary(source) && this.stationaryRegistry && this.stationaryEvidence && stationarySettings.enabled) {
 			const evidence = this.stationaryEvidence;
 			for (const t of result.tracked) {
 				if (packageClasses.has(t.className)) continue;
@@ -79761,7 +79821,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 			}
 			evidence.retainTracks(deviceId, currentTrackIds);
 		}
-		if (source === "pipeline") this.runPackageStillness({
+		if (planeRunsStationary(source)) this.runPackageStillness({
 			deviceId,
 			tracked: result.tracked,
 			packageClasses,
@@ -83019,7 +83079,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 					...active.subLabelMeta !== void 0 ? { subLabelMeta: active.subLabelMeta } : {}
 				} : void 0;
 			});
-			if (source === "pipeline" && this.stationaryRegistry) {
+			if (planeRunsStationary(source) && this.stationaryRegistry) {
 				const registry = this.stationaryRegistry;
 				p.setStationaryGate({ filter: (input) => {
 					const s = this.stationarySettingsFromCache(deviceId);

package/dist/pipeline-analytics/index.mjs

@@ -1,4 +1,4 @@
-import { $ as TimelapseRuleSchema, $t as array, A as NcConditionDescriptorSchema, At as readDeviceStateFrom, B as NcTaxonomySchema, Bt as zoneAnalyticsCapability, C as MOTION_CLOSE_AFTER_MS, Ct as mayWriteToLocation, D as NC_DEFAULT_SNOOZE_MINUTES, Dt as pickClusterStepModels, E as NC_CONDITION_CATALOG, F as NcScheduleSchema, Ft as storageOccupancyCapability, Gt as createEvent, Ht as BaseAddon, I as NcSnoozeInputSchema, It as subKindsOf, J as SCENE_DIVERGED, Jt as hydrateSchema, K as SCENE_DEFAULT_ANCHOR_THRESHOLD, Kt as customAction, L as NcSnoozeSchema, Lt as systemEventFilterApplies, M as NcRulePatchSchema, Mt as resolveLocationMode, N as NcRuleSchema, Ot as pipelineAnalyticsCapability, P as NcRuleTargetSchema, Pt as sceneMonitorCapability, Q as TimelapseRulePatchSchema, Qt as _enum, R as NcSnoozeSuppressedSchema, Rt as vectorDimFromBase64, St as kebabToCamel, T as NC_ALARM_SYSTEM_EVENT_KINDS, Tt as occupancyScope, U as RECORDING_EXPORT_MAX_READ_BYTES, Ut as CamProfileSchema, V as OpsLogEntrySchema, Vt as errMsg$1, W as RetrainStatusSchema, Wt as DeviceType, X as TIMELAPSE_DENSE_FLOOR_SEC, Xt as nodePin, Y as SceneMonitorSchema, Yt as isDeviceScopedCap, Z as TimelapseRuleInputSchema, Zt as sleep$1, _ as FULL_IMAGE_BBOX, _t as isDetectionMacroClass, a as CLUSTER_MODEL_SCOPED_STEPS, an as partialRecord, at as audioMetricsCapability, b as MAX_ARCHIVED_DEBUG_NOTES, bt as isScheduleActive, cn as unknown, ct as cosineSimilarity$1, dt as encodeVectorBase64, en as boolean, et as TrackSourceSchema, f as DeclaredDevices, ft as evaluateSensorEdge, g as FIRST_LEVEL_MACRO_CLASSES, h as EVENT_PAD_MS, ht as failureContributionCapability, i as BirthDecisionRecordSchema, in as object, it as assertTimelapseCadences, j as NcRuleInputSchema, jt as readTimelapseGeneratedAt, k as NC_TAXONOMY, kt as plateGalleryCapability, ln as EventCategory, lt as deriveRecordingMode, m as EVENT_OWNER_TYPES, mt as faceGalleryCapability, n as ArchivedDebugNoteSchema, nn as literal, nt as addonWidgetsSourceCapability, o as COCO_TO_MACRO, on as record, ot as audioModeOf, p as EVENT_KIND_BY_CAP, pt as evictionPolicyOfLocation, q as SCENE_DEFAULT_UNCOVERED_POLICY, qt as defineCustomActions, r as BaseDevice, rn as number, rt as alarmPanelCapability, s as DEFAULT_EVENT_COLOR, sn as string, st as buildEventKindDescriptor, t as AUDIO_MACRO_LABELS, tn as discriminatedUnion, tt as VISIT_MERGE_GAP_MS, u as DETECTION_MACRO_CLASSES, v as FailureCounters, vt as isEventOwnerType, w as MediaFileKindEnum, wt as notificationRulesCapability, x as MAX_BIRTH_DECISION_RECORDS, xt as isSourceCap, y as LabelAttributionSchema, yt as isMediaOwnerType, z as NcSystemEventKindSchema, zt as videoclipsCapability } from "../dist-KRjxHIQ4.mjs";
+import { $ as TimelapseRuleSchema, $t as array, A as NcConditionDescriptorSchema, At as readDeviceStateFrom, B as NcTaxonomySchema, Bt as zoneAnalyticsCapability, C as MOTION_CLOSE_AFTER_MS, Ct as mayWriteToLocation, D as NC_DEFAULT_SNOOZE_MINUTES, Dt as pickClusterStepModels, E as NC_CONDITION_CATALOG, F as NcScheduleSchema, Ft as storageOccupancyCapability, Gt as createEvent, Ht as BaseAddon, I as NcSnoozeInputSchema, It as subKindsOf, J as SCENE_DIVERGED, Jt as hydrateSchema, K as SCENE_DEFAULT_ANCHOR_THRESHOLD, Kt as customAction, L as NcSnoozeSchema, Lt as systemEventFilterApplies, M as NcRulePatchSchema, Mt as resolveLocationMode, N as NcRuleSchema, Ot as pipelineAnalyticsCapability, P as NcRuleTargetSchema, Pt as sceneMonitorCapability, Q as TimelapseRulePatchSchema, Qt as _enum, R as NcSnoozeSuppressedSchema, Rt as vectorDimFromBase64, St as kebabToCamel, T as NC_ALARM_SYSTEM_EVENT_KINDS, Tt as occupancyScope, U as RECORDING_EXPORT_MAX_READ_BYTES, Ut as CamProfileSchema, V as OpsLogEntrySchema, Vt as errMsg$1, W as RetrainStatusSchema, Wt as DeviceType, X as TIMELAPSE_DENSE_FLOOR_SEC, Xt as nodePin, Y as SceneMonitorSchema, Yt as isDeviceScopedCap, Z as TimelapseRuleInputSchema, Zt as sleep$1, _ as FULL_IMAGE_BBOX, _t as isDetectionMacroClass, a as CLUSTER_MODEL_SCOPED_STEPS, an as partialRecord, at as audioMetricsCapability, b as MAX_ARCHIVED_DEBUG_NOTES, bt as isScheduleActive, cn as unknown, ct as cosineSimilarity$1, dt as encodeVectorBase64, en as boolean, et as TrackSourceSchema, f as DeclaredDevices, ft as evaluateSensorEdge, g as FIRST_LEVEL_MACRO_CLASSES, h as EVENT_PAD_MS, ht as failureContributionCapability, i as BirthDecisionRecordSchema, in as object, it as assertTimelapseCadences, j as NcRuleInputSchema, jt as readTimelapseGeneratedAt, k as NC_TAXONOMY, kt as plateGalleryCapability, ln as EventCategory, lt as deriveRecordingMode, m as EVENT_OWNER_TYPES, mt as faceGalleryCapability, n as ArchivedDebugNoteSchema, nn as literal, nt as addonWidgetsSourceCapability, o as COCO_TO_MACRO, on as record, ot as audioModeOf, p as EVENT_KIND_BY_CAP, pt as evictionPolicyOfLocation, q as SCENE_DEFAULT_UNCOVERED_POLICY, qt as defineCustomActions, r as BaseDevice, rn as number, rt as alarmPanelCapability, s as DEFAULT_EVENT_COLOR, sn as string, st as buildEventKindDescriptor, t as AUDIO_MACRO_LABELS, tn as discriminatedUnion, tt as VISIT_MERGE_GAP_MS, u as DETECTION_MACRO_CLASSES, v as FailureCounters, vt as isEventOwnerType, w as MediaFileKindEnum, wt as notificationRulesCapability, x as MAX_BIRTH_DECISION_RECORDS, xt as isSourceCap, y as LabelAttributionSchema, yt as isMediaOwnerType, z as NcSystemEventKindSchema, zt as videoclipsCapability } from "../dist-C7xHFnGJ.mjs";
 import { t as __exportAll } from "../embedding-encoder/index.mjs";
 import * as fs from "node:fs";
 import { promises } from "node:fs";
@@ -15081,20 +15081,23 @@ var OccupancyWatcher = class {
 	* this tick (usually none). Every watched key is evaluated for `deviceId`;
 	* fail-closed keys (absent zone) are skipped and hold no state.
 	*/
-	observe(deviceId, snapshot, now) {
+	observe(deviceId, snapshot, now, evidence = "scene") {
 		const edges = [];
 		for (const spec of this.watched.values()) {
 			const resolved = resolveOccupancyScope(snapshot, spec);
 			if (resolved === null) continue;
 			const key = occupancyKey(deviceId, spec.zoneId, spec.className, spec.threshold);
 			this.reportImpossibleScope(deviceId, key, spec);
+			const blindCensus = evidence === "census" && resolved.count < spec.threshold;
 			const existing = this.states.get(key);
 			if (existing === void 0) {
+				if (blindCensus) continue;
 				const state = seedState(deviceId, spec, resolved, now);
 				this.states.set(key, state);
 				this.seeded.set(key, stateToRow(key, state, now));
 				continue;
 			}
+			if (blindCensus) continue;
 			const edge = step(existing, spec, resolved, now);
 			if (edge !== null) edges.push(edge);
 		}
@@ -24708,12 +24711,12 @@ var NotificationCenter = class NotificationCenter {
 	* COMMITTED edge is persisted (rare — only on a confirmed flip, never
 	* per-frame) and routed to {@link onOccupancyEdge}.
 	*/
-	observeOccupancy(deviceId, snapshot) {
+	observeOccupancy(deviceId, snapshot, evidence = "scene") {
 		if (!this.evaluationActive || !this.occupancyEnabled) return;
 		const now = this.now();
 		let edges;
 		try {
-			edges = this.occupancyWatcher.observe(deviceId, snapshot, now);
+			edges = this.occupancyWatcher.observe(deviceId, snapshot, now, evidence);
 		} catch (err) {
 			this.logger.debug("occupancy observe failed", {
 				tags: { deviceId },
@@ -24734,7 +24737,8 @@ var NotificationCenter = class NotificationCenter {
 					previousCount: edge.previousCount,
 					occupied: edge.occupied,
 					observedAt: edge.observedAt ?? -1,
-					observedLagMs: edge.observedAt !== void 0 ? edge.timestamp - edge.observedAt : -1
+					observedLagMs: edge.observedAt !== void 0 ? edge.timestamp - edge.observedAt : -1,
+					committedBy: evidence
 				}
 			});
 			this.persistOccupancyEdge(edge, now);
@@ -61756,6 +61760,49 @@ function hasKeyFrame(source) {
 	return source.keyFrame !== null && source.bbox !== null;
 }
 //#endregion
+//#region src/pipeline-analytics/pipeline/stationary-planes.ts
+/**
+* WHICH detection planes carry the stationary machinery.
+*
+* A plane qualifies when it produces OBJECT BOXES on decoded frames — because
+* that is what the registry needs to decide an object is parked: a box, a
+* class, and an observed clock that only advances while frames flow.
+*
+* Both root detectors qualify. `pipeline` is the ML tree; `onboard` is the
+* camera's own firmware, and the boxes it produces are paired with a decoded
+* frame in that frame's pixel space — the same plane, entered by a different
+* door. `sensor` and `audio` do not: they carry no geometry to park.
+*
+* It used to be `source === 'pipeline'`, in five places, each explaining that
+* the gate "runs on that plane". The reason given was WHERE the flood it was
+* written for had been measured (617, the ML plane), never an argument that the
+* firmware's boxes were unfit. The cost of the accident, on device 640: a still
+* object is never promoted, so it holds `hasLiveTrack` true for as long as it
+* sits there, and every detection session runs to its 120 s cap instead of
+* closing on cooldown — `closed at the max-hold cap with a subject still
+* present`. The camera's lazy stream is then torn down and rebuilt on the next
+* detection, on a battery camera.
+*
+* One predicate and not five comparisons, because five copies of a rule drift:
+* this repo has already paid for that with two authorities on one function
+* (D62).
+*/
+/** Does this detection plane run the stationary registry, gate and promotion? */
+function planeRunsStationary(source) {
+	return source === "pipeline" || source === "onboard";
+}
+//#endregion
+//#region src/pipeline-analytics/pipeline/onboard-birth-authority.ts
+/**
+* May a suppression verdict RETRACT this birth?
+*
+* `false` means hold: keep the track, log the held verdict, and let the
+* ordinary lifetime decide. It never means "confirmed".
+*/
+function suppressionMayRetract(source) {
+	return source !== "onboard";
+}
+//#endregion
 //#region src/pipeline-analytics/rebuild-source-loader.ts
 /**
 * Assemble one track's rebuild inputs, reading at most ONE blob.
@@ -65526,9 +65573,10 @@ var PlateStore = class {
 	* `PlateColumnPatch` widens the nullable media columns to accept `null`,
 	* which is how a caller CLEARS one (`assignPlate` nulls a crop whose blob it
 	* just deleted, so the reown that follows cannot try to move a resource that
-	* is gone). It used to be expressed as `null as unknown as string` at the
-	* call site — a cast that stopped being even nominally true when the column
-	* became a number (D482), and which the type can simply say instead.
+	* is gone). It used to be expressed at the call site as a `null` double-cast
+	* through `unknown` to `string` — a cast that stopped being even nominally
+	* true when the column became a number (D482), and which the type can simply
+	* say instead.
 	*/
 	async update(plateId, data) {
 		try {
@@ -74729,7 +74777,7 @@ var ZoneAnalyticsProvider = class {
 		this.snapshots.set(input.deviceId, snapshot);
 		this.noteLtsSamples(input.deviceId, snapshot, input.timestamp);
 		this.appendHistory(input.deviceId, snapshot);
-		this.emitSnapshot(input.deviceId, snapshot);
+		this.emitSnapshot(input.deviceId, snapshot, "scene");
 		this.sliceThrottle.push(input.deviceId, snapshot);
 	}
 	/** Drop a device's snapshot + history. Called on device removal. */
@@ -74795,7 +74843,7 @@ var ZoneAnalyticsProvider = class {
 			if (snapshot) {
 				this.appendHistory(deviceId, snapshot);
 				this.noteLtsSamples(deviceId, snapshot, now);
-				this.emitSnapshot(deviceId, snapshot);
+				this.emitSnapshot(deviceId, snapshot, "census");
 				this.sliceThrottle.push(deviceId, snapshot);
 			}
 		}
@@ -74824,10 +74872,10 @@ var ZoneAnalyticsProvider = class {
 	}
 	/** Push one snapshot to the occupancy tap, isolating any consumer throw from
 	*  the frame path (occupancy notifications must never break analytics). */
-	emitSnapshot(deviceId, snapshot) {
+	emitSnapshot(deviceId, snapshot, evidence) {
 		if (!this.ctx.onSnapshot) return;
 		try {
-			this.ctx.onSnapshot(deviceId, snapshot);
+			this.ctx.onSnapshot(deviceId, snapshot, evidence);
 		} catch (err) {
 			this.ctx.logger.debug("zone-analytics occupancy tap failed", {
 				tags: { deviceId },
@@ -77447,7 +77495,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 			listStationaryObjects: (deviceId) => this.stationaryRegistry?.listViews(deviceId) ?? [],
 			listStationaryDeviceIds: () => this.stationaryRegistry?.deviceIds() ?? [],
 			resolveZones: (deviceId) => this.resolveDeviceZones(deviceId),
-			onSnapshot: (deviceId, snapshot) => this.notificationCenter?.observeOccupancy(deviceId, snapshot)
+			onSnapshot: (deviceId, snapshot, evidence) => this.notificationCenter?.observeOccupancy(deviceId, snapshot, evidence)
 		});
 		this.zoneAnalytics = zoneAnalytics;
 		const audioMetrics = new AudioMetricsProvider({
@@ -79288,7 +79336,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 			return;
 		}
 		this.dropoutSkipsByKey.set(key, 0);
-		if (source === "pipeline" && this.stationaryRegistry) {
+		if (planeRunsStationary(source) && this.stationaryRegistry) {
 			await this.resolveDeviceStationarySettings(deviceId);
 			await this.resolveDevicePackageDropSettings(deviceId);
 			await this.resolveDeviceSummarySettings(deviceId);
@@ -79348,7 +79396,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 			});
 			this.trackStore?.markRiderFolded(fold.trackId);
 		}
-		if (source === "pipeline") this.stationaryRegistry?.noteFrame(deviceId, result.timestamp);
+		if (planeRunsStationary(source)) this.stationaryRegistry?.noteFrame(deviceId, result.timestamp);
 		if (this.stationaryRegistry && (result.stationaryConfirmed.length > 0 || result.stationaryWoken.length > 0)) this.stationaryRegistry.applyFrameOutcome({
 			deviceId,
 			confirmed: result.stationaryConfirmed,
@@ -79522,8 +79570,20 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 				firstSeen: this.trackStore?.peekActive(id)?.firstSeen ?? null
 			});
 			if (!outcome.confirmed.has(id)) {
+				if (!suppressionMayRetract(source)) {
+					log.info("birth suppression held — the gate is not this root detector", {
+						tags: { deviceId },
+						meta: {
+							trackId: id,
+							className: t.className,
+							source
+						}
+					});
+					continue;
+				}
 				this.suppressedBirths.reject(key, id);
 				this.trackStore?.dropActive(id);
+				this.clearLiveTrackState(deviceId, id);
 				log.info("birth suppressed — track record retracted", { meta: {
 					trackId: id,
 					className: t.className,
@@ -79653,7 +79713,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 		const stationarySettings = this.stationarySettingsFromCache(deviceId);
 		const packageSettings = this.packageDropSettingsFromCache(deviceId);
 		const packageClasses = new Set(packageSettings.packageDropClassFilter);
-		if (source === "pipeline" && this.stationaryRegistry && this.stationaryEvidence && stationarySettings.enabled) {
+		if (planeRunsStationary(source) && this.stationaryRegistry && this.stationaryEvidence && stationarySettings.enabled) {
 			const evidence = this.stationaryEvidence;
 			for (const t of result.tracked) {
 				if (packageClasses.has(t.className)) continue;
@@ -79687,7 +79747,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 			}
 			evidence.retainTracks(deviceId, currentTrackIds);
 		}
-		if (source === "pipeline") this.runPackageStillness({
+		if (planeRunsStationary(source)) this.runPackageStillness({
 			deviceId,
 			tracked: result.tracked,
 			packageClasses,
@@ -82945,7 +83005,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 					...active.subLabelMeta !== void 0 ? { subLabelMeta: active.subLabelMeta } : {}
 				} : void 0;
 			});
-			if (source === "pipeline" && this.stationaryRegistry) {
+			if (planeRunsStationary(source) && this.stationaryRegistry) {
 				const registry = this.stationaryRegistry;
 				p.setStationaryGate({ filter: (input) => {
 					const s = this.stationarySettingsFromCache(deviceId);

package/dist/pipeline-analytics/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-DaT9RhCO.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-DJ9dpbgD.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-post-analysis",
-  "version": "1.2.248",
+  "version": "1.2.249",
   "description": "Post-Analysis bundle — enrichment, embedding-encoder, pipeline-analytics. Multi-entry npm package shipping addons that consume pipeline output.",
   "keywords": [
     "camstack",