@camstack/addon-post-analysis 1.2.304 → 1.2.306

package/dist/{clip-model-registry--qJe8fTH.js → clip-model-registry-C67UM_q_.js}

@@ -11267,6 +11267,28 @@ var FailureCounters = class {
 		this.counters.clear();
 	}
 };
+var APPEARANCE_BIN_COUNT = 96;
+var APPEARANCE_BLOCKS = {
+	upperHs: [0, 32],
+	upperV: [32, 40],
+	upperGrad: [40, 48],
+	lowerHs: [48, 80],
+	lowerV: [80, 88],
+	lowerGrad: [88, 96]
+};
+/**
+* Whether appearance may influence anything at all (D683 §3.2, fix round 1
+* ruling 2026-09-30 on the Task 10 cost-bench STOP): OFF until the
+* descriptor is calibrated on tapes that carry it (Task 23, review M9).
+*
+* This is the ONE authority both addons read — never two settings that
+* could disagree (CLAUDE.md D62). The tracker's `TrackerV2Config.appearanceResolvesAmbiguity`
+* default reads it (`addon-post-analysis/pipeline/tracker-v2/types.ts`); the
+* runner's cost gate reads it too (`addon-pipeline/pipeline-runner/appearance-attach.ts`),
+* short-circuiting BEFORE any crop, resample or descriptor is computed, so a
+* disabled camera costs nothing extra per frame.
+*/
+var APPEARANCE_RESOLVES_AMBIGUITY_DEFAULT = false;
 var ClipModelMetaSchema = object({
 	/** The paired text encoder's catalog id (the embedding-encoder's text catalog). */
 	textModelId: string().min(1),
@@ -20214,10 +20236,12 @@ var NcMediaPolicySchema = object({
 /**
 * Cooldown GRANULARITY over the subject's class — how much a fired
 * notification suppresses.
-*  - `shared` (default, and the absent value) — one window for the whole
-*    rule/scope: a cat silences the next dog for `cooldownSec`.
-*  - `per-class` — an independent window per detected class, so cat→dog fires
-*    at once and cat→cat still waits.
+*  - `per-class` (default, and the absent value since 2026-10-01 — D36) — an
+*    independent window per detected class: cat→dog fires at once, cat→cat
+*    still waits.
+*  - `shared` — one window for the whole rule/scope: a cat silences the next
+*    dog for `cooldownSec`. Only written when an operator picks it; it is no
+*    longer what an unset rule means.
 *
 * AUDIO subjects are ALWAYS per-class regardless of this setting: a scream
 * must not be swallowed by a bark's window (the precedent this generalizes —
@@ -20232,8 +20256,11 @@ var NcThrottleSchema = object({
 	/**
 	* Class granularity of the cooldown key. Optional rather than defaulted:
 	* a Zod default does NOT run on the addon→addon cap path, so a persisted
-	* rule authored before this field simply carries none — and the engine
-	* reads absent as `shared`, the pre-existing behaviour.
+	* rule authored before this field simply carries none. The engine used to
+	* read absent as `shared` (D36); since 2026-10-01 it reads absent as
+	* `per-class` — the operator's default — and only an explicit `shared`
+	* still means `shared`. See `cooldownKey` / `keysPerClass` in the rule
+	* engine, and D36's dated note.
 	*/
 	granularity: NcThrottleGranularitySchema.optional()
 });
@@ -24492,13 +24519,19 @@ var pipelineAnalyticsCapability = {
 		*
 		* Operator-driven from the DI Events page (batch delete). Routes through
 		* the same widened track-deletion cascade (design §5.2).
+		*
+		* `sparedMediaIds` (D683 Task 14): media rows the cascade LEFT because a
+		* live stationary entry vouches for them (its key frame, owned by a track
+		* that moved and was kept). Released when the entry retires. Optional:
+		* absent from a provider that predates it.
 		*/
 		deleteTracks: method(object({
 			deviceId: number(),
 			trackIds: array(string()).min(1)
 		}), object({
 			deleted: number().int(),
-			failed: array(string()).readonly()
+			failed: array(string()).readonly(),
+			sparedMediaIds: array(number().int()).readonly().optional()
 		}), {
 			kind: "mutation",
 			auth: "admin"
@@ -27208,7 +27241,42 @@ var SetCameraSensorsInputSchema = object({
 	/** `null` removes the attachment: the camera goes back to `not-configured`. */
 	config: CameraSensorsConfigSchema.nullable()
 });
-method(StorageMigrationLeaseInputSchema, object({ paused: literal(true) }), {
+/**
+* Why an early occupancy look (D691) was not scheduled.
+*
+* - `unknown-camera` — no session was ever dispatched for it, so there is no
+*   node and no config to attach a burst with.
+* - `out-of-range` — the ask is negative or further out than the orchestrator
+*   will hold a timer for; the parked-object cadence is the answer there.
+* - `no-burst-producer` — this build has no burst producer at all.
+* - `already-looked` — this camera's ONE early look since its last session has
+*   been spent. A look's own burst can re-arm a flickering flip, and a look
+*   per arm would chain a burst every ~30 s forever (review H2); the next
+*   real session re-arms the budget.
+*/
+var OccupancyLookRefusalSchema = _enum([
+	"unknown-camera",
+	"out-of-range",
+	"no-burst-producer",
+	"already-looked"
+]);
+method(object({
+	deviceId: number().int().nonnegative(),
+	/** How long from NOW until the pending flip's sustain window ends. RELATIVE,
+	*  so the caller's clock and the orchestrator's never have to agree. */
+	afterMs: number().finite(),
+	/** Why, for the log. */
+	reason: string()
+}), object({
+	scheduled: boolean(),
+	/** When `scheduled`: how long until the burst is dialled. */
+	dueInMs: number().optional(),
+	/** When not `scheduled`: why. */
+	refusedBecause: OccupancyLookRefusalSchema.optional()
+}), {
+	kind: "mutation",
+	auth: "admin"
+}), method(StorageMigrationLeaseInputSchema, object({ paused: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
 }), method(StorageMigrationLeaseInputSchema, object({ resumed: literal(true) }), {
@@ -27462,6 +27530,8 @@ function buildDescriptor(capName, kind) {
 * contributes one entry per bound cap present in this map.
 */
 var EVENT_KIND_BY_CAP = Object.freeze(Object.fromEntries(Object.entries(CAP_TO_KIND).map(([capName, kind]) => [capName, buildDescriptor(capName, kind)])));
+/** The cap names covered by the taxonomy (for the anti-drift guard). */
+var EVENTFUL_CAP_NAMES = Object.keys(CAP_TO_KIND);
 /**
 * Build a full `EventKindDescriptor` for a taxonomy `kind`, stamping the
 * per-device `source`. Returns null when `kind` is not in the taxonomy.
@@ -48370,6 +48440,12 @@ Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"pipelineOrchestrator.requestOccupancyLook": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.resetNodePipelineDefaults": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -52162,6 +52238,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"pipelineOrchestrator.requestOccupancyLook": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"pipelineOrchestrator.resolvePipeline": [{
 		name: "deviceId",
 		form: "single",
@@ -53240,6 +53321,13 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 function systemEventKindsOfFamily(family) {
 	return NC_SYSTEM_EVENT_KIND_GROUP_SPECS.filter((g) => g.family === family).flatMap((g) => g.kinds);
 }
+/** The kind names on an UNTYPED condition, or `undefined` when it has none. */
+function systemEventKindNamesOf(condition) {
+	if (typeof condition !== "object" || condition === null || !("kinds" in condition)) return void 0;
+	const kinds = condition.kinds;
+	if (!Array.isArray(kinds)) return void 0;
+	return kinds.filter((kind) => typeof kind === "string");
+}
 /**
 * One family, or `mixed`. Mixed covers kinds that span families, a legacy kind,
 * a kind this build does not know (it fails toward read-only and never toward
@@ -53324,6 +53412,102 @@ var NC_SYSTEM_DELIVERY = "system-event";
 function isSystemDelivery(delivery) {
 	return delivery === NC_SYSTEM_DELIVERY;
 }
+/**
+* Which capability a device must carry to be OFFERED on a rule of this kind's
+* device-scope picker (operator ruling, 2026-10-01). `null` means "no
+* capability filter for this kind" — either every device applies (the system
+* families, each already a separate concern; see
+* `docs/architecture/notifications.md`'s D637 `deviceIds` table) or `mixed`,
+* which authors nothing.
+*
+* DERIVED, never a hand-picked list:
+*  - `sensor` reads `EVENTFUL_CAP_NAMES` — the SAME cap table the engine
+*    itself turns a linked device's bound caps into sensor event kinds with
+*    (`EVENT_KIND_BY_CAP`). A device this picker offers for a sensor rule is
+*    exactly a device the rule's `sensorKinds` condition could ever name.
+*  - `detection` (which a package-event rule is — there is no separate
+*    `package` kind, D637) / `occupancy` read the one pipeline cap a camera
+*    needs to produce the detections / counts / parcels those kinds match on.
+*  - `sound` reads the one cap a device needs to produce the audio metrics a
+*    sound rule's sampling window is built from.
+*  - `device-events` / `system` / `alarm` / `mixed` are `null`: a device
+*    event rule's `deviceIds` legitimately spans every device type (liveness,
+*    battery, consumable, `detection-blind`), a system rule has no device
+*    scope at all (dropped from the editor's tabs), and `alarm`'s `deviceIds`
+*    is a reference to whichever camera's rule set it off — not a scope this
+*    picker authors.
+*
+* Callers resolve the ids via `deviceManager.listDeviceIdsByCaps` (max 16
+* names — `EVENTFUL_CAP_NAMES` is exactly 16) and must treat an unanswered
+* read as "unknown", never as "no devices" (D315): this function only names
+* WHICH caps to ask for, not what to show while the answer is pending.
+*/
+function ruleDeviceCompatCapNames(kind) {
+	switch (kind) {
+		case "sensor": return EVENTFUL_CAP_NAMES;
+		case "detection":
+		case "occupancy": return ["detection-pipeline"];
+		case "sound": return ["audio-metrics"];
+		case "device-events":
+		case "system":
+		case "alarm":
+		case "mixed": return null;
+	}
+}
+/**
+* The capability every CAMERA carries: `camera-streams` is a `defaultActive`
+* wrapper bound to every `Camera`-type device (`camera-streams.cap.ts`).
+* Named once, because a sensor rule's compatible set needs it (below).
+*/
+var NC_CAMERA_SCOPE_CAP_NAME = "camera-streams";
+/**
+* Every capability QUERY whose union is the set of devices a rule of this kind
+* may be SCOPED to (`conditions.devices`) — what the save-time guard and the
+* admin's Devices tab ask `deviceManager.listDeviceIdsByCaps`, one call per
+* entry. `null` exactly where {@link ruleDeviceCompatCapNames} is `null`.
+*
+* Several queries rather than one list because `listDeviceIdsByCaps` takes at
+* most 16 names and `EVENTFUL_CAP_NAMES` is already exactly 16.
+*
+* A `sensor` rule's set is the eventful devices PLUS every camera (fix round
+* 1, 2026-10-01): the engine matches a sensor rule scoped to a CAMERA — a
+* per-camera row carries the camera's id, and a linked set matches on
+* `rowCameraIds` (D630 §6) — so a camera-scoped sensor rule is legitimate and
+* a guard that refused it would make every such stored rule un-editable.
+*/
+function ruleDeviceCompatCapQueries(kind) {
+	const primary = ruleDeviceCompatCapNames(kind);
+	if (primary === null) return null;
+	return kind === "sensor" ? [primary, [NC_CAMERA_SCOPE_CAP_NAME]] : [primary];
+}
+/**
+* Which kind of rule is this?
+*
+* The CONDITION wins over the delivery wherever the engine says it does, and
+* the order below is the engine's own: `evaluateRule` checks the system branch
+* first, then the occupancy and audio gates. Takes a plain `delivery` string so
+* a trigger this build does not know still classifies (as `detection`, which is
+* the read-only path's own fallback). A system rule classifies by the FAMILY of
+* its event kinds (D637) — see {@link systemRuleKindOf}.
+*/
+function ruleKindOf(rule) {
+	if (isSystemDelivery(rule.delivery)) return systemRuleKindOf(rule.conditions.systemEvent);
+	if (rule.conditions.occupancy !== void 0 && rule.delivery === "device-event") return "occupancy";
+	if (rule.conditions.audio !== void 0 && rule.delivery === "immediate") return "sound";
+	if (rule.delivery === "device-event") return "sensor";
+	return "detection";
+}
+/**
+* A system rule's kind: its one family, or `mixed` (D637).
+*
+* Takes the UNTYPED condition for the same reason {@link NcRuleConditionsSubject}
+* is structural. `mixed` covers kinds across families, a legacy or unknown kind,
+* and no kinds at all — it fails toward read-only, never toward editable.
+*/
+function systemRuleKindOf(condition) {
+	const verdict = systemEventFamilyOf(systemEventKindNamesOf(condition) ?? []);
+	return verdict.kind === "family" ? verdict.family : "mixed";
+}
 NC_AUDIO_DEFAULTS.hitPercent, NC_AUDIO_DEFAULTS.samplingSeconds;
 var WEEKDAY_TO_DAY = {
 	Sun: 0,
@@ -55812,6 +55996,24 @@ function buildClipModelRegistry(entries) {
 /** The built-in catalog's registry. */
 var BUILTIN_CLIP_MODELS = buildClipModelRegistry(CLIP_IMAGE_MODELS);
 //#endregion
+Object.defineProperty(exports, "APPEARANCE_BIN_COUNT", {
+	enumerable: true,
+	get: function() {
+		return APPEARANCE_BIN_COUNT;
+	}
+});
+Object.defineProperty(exports, "APPEARANCE_BLOCKS", {
+	enumerable: true,
+	get: function() {
+		return APPEARANCE_BLOCKS;
+	}
+});
+Object.defineProperty(exports, "APPEARANCE_RESOLVES_AMBIGUITY_DEFAULT", {
+	enumerable: true,
+	get: function() {
+		return APPEARANCE_RESOLVES_AMBIGUITY_DEFAULT;
+	}
+});
 Object.defineProperty(exports, "ARCHIVED_DEBUG_NOTES_DEFAULT_LIMIT", {
 	enumerable: true,
 	get: function() {
@@ -56496,6 +56698,12 @@ Object.defineProperty(exports, "TrackSourceSchema", {
 		return TrackSourceSchema;
 	}
 });
+Object.defineProperty(exports, "ZodObject", {
+	enumerable: true,
+	get: function() {
+		return ZodObject;
+	}
+});
 Object.defineProperty(exports, "__exportAll", {
 	enumerable: true,
 	get: function() {
@@ -56784,6 +56992,12 @@ Object.defineProperty(exports, "literal", {
 		return literal;
 	}
 });
+Object.defineProperty(exports, "looseObject", {
+	enumerable: true,
+	get: function() {
+		return looseObject;
+	}
+});
 Object.defineProperty(exports, "mayWriteToLocation", {
 	enumerable: true,
 	get: function() {
@@ -56916,6 +57130,18 @@ Object.defineProperty(exports, "ruleBelongsToAlarm", {
 		return ruleBelongsToAlarm;
 	}
 });
+Object.defineProperty(exports, "ruleDeviceCompatCapQueries", {
+	enumerable: true,
+	get: function() {
+		return ruleDeviceCompatCapQueries;
+	}
+});
+Object.defineProperty(exports, "ruleKindOf", {
+	enumerable: true,
+	get: function() {
+		return ruleKindOf;
+	}
+});
 Object.defineProperty(exports, "sceneMonitorCapability", {
 	enumerable: true,
 	get: function() {

package/dist/{clip-model-registry-DBKCbXPJ.mjs → clip-model-registry-C9Aw4qkh.mjs}

@@ -11236,6 +11236,28 @@ var FailureCounters = class {
 		this.counters.clear();
 	}
 };
+var APPEARANCE_BIN_COUNT = 96;
+var APPEARANCE_BLOCKS = {
+	upperHs: [0, 32],
+	upperV: [32, 40],
+	upperGrad: [40, 48],
+	lowerHs: [48, 80],
+	lowerV: [80, 88],
+	lowerGrad: [88, 96]
+};
+/**
+* Whether appearance may influence anything at all (D683 §3.2, fix round 1
+* ruling 2026-09-30 on the Task 10 cost-bench STOP): OFF until the
+* descriptor is calibrated on tapes that carry it (Task 23, review M9).
+*
+* This is the ONE authority both addons read — never two settings that
+* could disagree (CLAUDE.md D62). The tracker's `TrackerV2Config.appearanceResolvesAmbiguity`
+* default reads it (`addon-post-analysis/pipeline/tracker-v2/types.ts`); the
+* runner's cost gate reads it too (`addon-pipeline/pipeline-runner/appearance-attach.ts`),
+* short-circuiting BEFORE any crop, resample or descriptor is computed, so a
+* disabled camera costs nothing extra per frame.
+*/
+var APPEARANCE_RESOLVES_AMBIGUITY_DEFAULT = false;
 var ClipModelMetaSchema = object({
 	/** The paired text encoder's catalog id (the embedding-encoder's text catalog). */
 	textModelId: string().min(1),
@@ -20183,10 +20205,12 @@ var NcMediaPolicySchema = object({
 /**
 * Cooldown GRANULARITY over the subject's class — how much a fired
 * notification suppresses.
-*  - `shared` (default, and the absent value) — one window for the whole
-*    rule/scope: a cat silences the next dog for `cooldownSec`.
-*  - `per-class` — an independent window per detected class, so cat→dog fires
-*    at once and cat→cat still waits.
+*  - `per-class` (default, and the absent value since 2026-10-01 — D36) — an
+*    independent window per detected class: cat→dog fires at once, cat→cat
+*    still waits.
+*  - `shared` — one window for the whole rule/scope: a cat silences the next
+*    dog for `cooldownSec`. Only written when an operator picks it; it is no
+*    longer what an unset rule means.
 *
 * AUDIO subjects are ALWAYS per-class regardless of this setting: a scream
 * must not be swallowed by a bark's window (the precedent this generalizes —
@@ -20201,8 +20225,11 @@ var NcThrottleSchema = object({
 	/**
 	* Class granularity of the cooldown key. Optional rather than defaulted:
 	* a Zod default does NOT run on the addon→addon cap path, so a persisted
-	* rule authored before this field simply carries none — and the engine
-	* reads absent as `shared`, the pre-existing behaviour.
+	* rule authored before this field simply carries none. The engine used to
+	* read absent as `shared` (D36); since 2026-10-01 it reads absent as
+	* `per-class` — the operator's default — and only an explicit `shared`
+	* still means `shared`. See `cooldownKey` / `keysPerClass` in the rule
+	* engine, and D36's dated note.
 	*/
 	granularity: NcThrottleGranularitySchema.optional()
 });
@@ -24461,13 +24488,19 @@ var pipelineAnalyticsCapability = {
 		*
 		* Operator-driven from the DI Events page (batch delete). Routes through
 		* the same widened track-deletion cascade (design §5.2).
+		*
+		* `sparedMediaIds` (D683 Task 14): media rows the cascade LEFT because a
+		* live stationary entry vouches for them (its key frame, owned by a track
+		* that moved and was kept). Released when the entry retires. Optional:
+		* absent from a provider that predates it.
 		*/
 		deleteTracks: method(object({
 			deviceId: number(),
 			trackIds: array(string()).min(1)
 		}), object({
 			deleted: number().int(),
-			failed: array(string()).readonly()
+			failed: array(string()).readonly(),
+			sparedMediaIds: array(number().int()).readonly().optional()
 		}), {
 			kind: "mutation",
 			auth: "admin"
@@ -27177,7 +27210,42 @@ var SetCameraSensorsInputSchema = object({
 	/** `null` removes the attachment: the camera goes back to `not-configured`. */
 	config: CameraSensorsConfigSchema.nullable()
 });
-method(StorageMigrationLeaseInputSchema, object({ paused: literal(true) }), {
+/**
+* Why an early occupancy look (D691) was not scheduled.
+*
+* - `unknown-camera` — no session was ever dispatched for it, so there is no
+*   node and no config to attach a burst with.
+* - `out-of-range` — the ask is negative or further out than the orchestrator
+*   will hold a timer for; the parked-object cadence is the answer there.
+* - `no-burst-producer` — this build has no burst producer at all.
+* - `already-looked` — this camera's ONE early look since its last session has
+*   been spent. A look's own burst can re-arm a flickering flip, and a look
+*   per arm would chain a burst every ~30 s forever (review H2); the next
+*   real session re-arms the budget.
+*/
+var OccupancyLookRefusalSchema = _enum([
+	"unknown-camera",
+	"out-of-range",
+	"no-burst-producer",
+	"already-looked"
+]);
+method(object({
+	deviceId: number().int().nonnegative(),
+	/** How long from NOW until the pending flip's sustain window ends. RELATIVE,
+	*  so the caller's clock and the orchestrator's never have to agree. */
+	afterMs: number().finite(),
+	/** Why, for the log. */
+	reason: string()
+}), object({
+	scheduled: boolean(),
+	/** When `scheduled`: how long until the burst is dialled. */
+	dueInMs: number().optional(),
+	/** When not `scheduled`: why. */
+	refusedBecause: OccupancyLookRefusalSchema.optional()
+}), {
+	kind: "mutation",
+	auth: "admin"
+}), method(StorageMigrationLeaseInputSchema, object({ paused: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
 }), method(StorageMigrationLeaseInputSchema, object({ resumed: literal(true) }), {
@@ -27431,6 +27499,8 @@ function buildDescriptor(capName, kind) {
 * contributes one entry per bound cap present in this map.
 */
 var EVENT_KIND_BY_CAP = Object.freeze(Object.fromEntries(Object.entries(CAP_TO_KIND).map(([capName, kind]) => [capName, buildDescriptor(capName, kind)])));
+/** The cap names covered by the taxonomy (for the anti-drift guard). */
+var EVENTFUL_CAP_NAMES = Object.keys(CAP_TO_KIND);
 /**
 * Build a full `EventKindDescriptor` for a taxonomy `kind`, stamping the
 * per-device `source`. Returns null when `kind` is not in the taxonomy.
@@ -48339,6 +48409,12 @@ Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"pipelineOrchestrator.requestOccupancyLook": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.resetNodePipelineDefaults": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -52131,6 +52207,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"pipelineOrchestrator.requestOccupancyLook": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"pipelineOrchestrator.resolvePipeline": [{
 		name: "deviceId",
 		form: "single",
@@ -53209,6 +53290,13 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 function systemEventKindsOfFamily(family) {
 	return NC_SYSTEM_EVENT_KIND_GROUP_SPECS.filter((g) => g.family === family).flatMap((g) => g.kinds);
 }
+/** The kind names on an UNTYPED condition, or `undefined` when it has none. */
+function systemEventKindNamesOf(condition) {
+	if (typeof condition !== "object" || condition === null || !("kinds" in condition)) return void 0;
+	const kinds = condition.kinds;
+	if (!Array.isArray(kinds)) return void 0;
+	return kinds.filter((kind) => typeof kind === "string");
+}
 /**
 * One family, or `mixed`. Mixed covers kinds that span families, a legacy kind,
 * a kind this build does not know (it fails toward read-only and never toward
@@ -53293,6 +53381,102 @@ var NC_SYSTEM_DELIVERY = "system-event";
 function isSystemDelivery(delivery) {
 	return delivery === NC_SYSTEM_DELIVERY;
 }
+/**
+* Which capability a device must carry to be OFFERED on a rule of this kind's
+* device-scope picker (operator ruling, 2026-10-01). `null` means "no
+* capability filter for this kind" — either every device applies (the system
+* families, each already a separate concern; see
+* `docs/architecture/notifications.md`'s D637 `deviceIds` table) or `mixed`,
+* which authors nothing.
+*
+* DERIVED, never a hand-picked list:
+*  - `sensor` reads `EVENTFUL_CAP_NAMES` — the SAME cap table the engine
+*    itself turns a linked device's bound caps into sensor event kinds with
+*    (`EVENT_KIND_BY_CAP`). A device this picker offers for a sensor rule is
+*    exactly a device the rule's `sensorKinds` condition could ever name.
+*  - `detection` (which a package-event rule is — there is no separate
+*    `package` kind, D637) / `occupancy` read the one pipeline cap a camera
+*    needs to produce the detections / counts / parcels those kinds match on.
+*  - `sound` reads the one cap a device needs to produce the audio metrics a
+*    sound rule's sampling window is built from.
+*  - `device-events` / `system` / `alarm` / `mixed` are `null`: a device
+*    event rule's `deviceIds` legitimately spans every device type (liveness,
+*    battery, consumable, `detection-blind`), a system rule has no device
+*    scope at all (dropped from the editor's tabs), and `alarm`'s `deviceIds`
+*    is a reference to whichever camera's rule set it off — not a scope this
+*    picker authors.
+*
+* Callers resolve the ids via `deviceManager.listDeviceIdsByCaps` (max 16
+* names — `EVENTFUL_CAP_NAMES` is exactly 16) and must treat an unanswered
+* read as "unknown", never as "no devices" (D315): this function only names
+* WHICH caps to ask for, not what to show while the answer is pending.
+*/
+function ruleDeviceCompatCapNames(kind) {
+	switch (kind) {
+		case "sensor": return EVENTFUL_CAP_NAMES;
+		case "detection":
+		case "occupancy": return ["detection-pipeline"];
+		case "sound": return ["audio-metrics"];
+		case "device-events":
+		case "system":
+		case "alarm":
+		case "mixed": return null;
+	}
+}
+/**
+* The capability every CAMERA carries: `camera-streams` is a `defaultActive`
+* wrapper bound to every `Camera`-type device (`camera-streams.cap.ts`).
+* Named once, because a sensor rule's compatible set needs it (below).
+*/
+var NC_CAMERA_SCOPE_CAP_NAME = "camera-streams";
+/**
+* Every capability QUERY whose union is the set of devices a rule of this kind
+* may be SCOPED to (`conditions.devices`) — what the save-time guard and the
+* admin's Devices tab ask `deviceManager.listDeviceIdsByCaps`, one call per
+* entry. `null` exactly where {@link ruleDeviceCompatCapNames} is `null`.
+*
+* Several queries rather than one list because `listDeviceIdsByCaps` takes at
+* most 16 names and `EVENTFUL_CAP_NAMES` is already exactly 16.
+*
+* A `sensor` rule's set is the eventful devices PLUS every camera (fix round
+* 1, 2026-10-01): the engine matches a sensor rule scoped to a CAMERA — a
+* per-camera row carries the camera's id, and a linked set matches on
+* `rowCameraIds` (D630 §6) — so a camera-scoped sensor rule is legitimate and
+* a guard that refused it would make every such stored rule un-editable.
+*/
+function ruleDeviceCompatCapQueries(kind) {
+	const primary = ruleDeviceCompatCapNames(kind);
+	if (primary === null) return null;
+	return kind === "sensor" ? [primary, [NC_CAMERA_SCOPE_CAP_NAME]] : [primary];
+}
+/**
+* Which kind of rule is this?
+*
+* The CONDITION wins over the delivery wherever the engine says it does, and
+* the order below is the engine's own: `evaluateRule` checks the system branch
+* first, then the occupancy and audio gates. Takes a plain `delivery` string so
+* a trigger this build does not know still classifies (as `detection`, which is
+* the read-only path's own fallback). A system rule classifies by the FAMILY of
+* its event kinds (D637) — see {@link systemRuleKindOf}.
+*/
+function ruleKindOf(rule) {
+	if (isSystemDelivery(rule.delivery)) return systemRuleKindOf(rule.conditions.systemEvent);
+	if (rule.conditions.occupancy !== void 0 && rule.delivery === "device-event") return "occupancy";
+	if (rule.conditions.audio !== void 0 && rule.delivery === "immediate") return "sound";
+	if (rule.delivery === "device-event") return "sensor";
+	return "detection";
+}
+/**
+* A system rule's kind: its one family, or `mixed` (D637).
+*
+* Takes the UNTYPED condition for the same reason {@link NcRuleConditionsSubject}
+* is structural. `mixed` covers kinds across families, a legacy or unknown kind,
+* and no kinds at all — it fails toward read-only, never toward editable.
+*/
+function systemRuleKindOf(condition) {
+	const verdict = systemEventFamilyOf(systemEventKindNamesOf(condition) ?? []);
+	return verdict.kind === "family" ? verdict.family : "mixed";
+}
 NC_AUDIO_DEFAULTS.hitPercent, NC_AUDIO_DEFAULTS.samplingSeconds;
 var WEEKDAY_TO_DAY = {
 	Sun: 0,
@@ -55781,4 +55965,4 @@ function buildClipModelRegistry(entries) {
 /** The built-in catalog's registry. */
 var BUILTIN_CLIP_MODELS = buildClipModelRegistry(CLIP_IMAGE_MODELS);
 //#endregion
-export { NC_CLIP_RETENTION_MAX_SEC as $, storageOccupancyCapability as $n, TrackPuritySchema as $t, EVENT_KIND_BY_CAP as A, isMediaOwnerType as An, number as Ar, PoolMemoryWatchdog as At, MAX_ARCHIVED_DEBUG_NOTES as B, parseProcStatus as Bn, SCENE_DEFAULT_QUIET_SECONDS as Bt, DETECTION_PIPELINE_CAP_NAME as C, failureContributionCapability as Cn, normalizeNodeId as Cr, NcSystemEventKindSchema as Ct, EMBEDDING_REQUIREMENTS_FAILED as D, isDetectionMacroClass as Dn, boolean as Dr, NcTemplateVarDescriptorSchema as Dt, EMBEDDING_MODEL_FAILED as E, isAudioClassName as En, array as Er, NcTemplatePreviewSchema as Et, FailureCounters as F, kebabToCamel as Fn, string as Fr, SCENE_CONFIRM_DEFAULT_MAX_IMAGE_PX as Ft, MOTION_CLOSE_AFTER_MS as G, readTimelapseGeneratedAt as Gn, SetTrackPurityInputSchema as Gt, MAX_BIRTH_LATENCY_PROXY_MS as H, plateGalleryCapability as Hn, SCENE_DIVERGED as Ht, LabelAttributionSchema as I, mayWriteToLocation as In, tuple as Ir, SCENE_CONFIRM_DEFAULT_TIMEOUT_MS as It, NC_ALARM_SYSTEM_EVENT_KINDS as J, resolvePoolMemoryPolicy as Jn, TIMELAPSE_DENSE_FLOOR_SEC as Jt, MediaFileKindEnum as K, resolveClipSearchMinScore as Kn, SetTrackPurityResultSchema as Kt, ListTrackRelationsInputSchema as L, memoizePinnedFfmpeg as Ln, union as Lr, SCENE_DEFAULT_ANCHOR_THRESHOLD as Lt, EXPORT_DENSE_MAX_RANGES as M, isSystemDelivery as Mn, partialRecord as Mr, RECORDING_SOURCE_CAMSTACK_ADDON as Mt, FIRST_LEVEL_MACRO_CLASSES as N, isSystemEventSummaryRule as Nn, record as Nr, RebuildObjectEmbeddingsRefusalSchema as Nt, EMBEDDING_REQUIREMENTS_UNAVAILABLE as O, isEventOwnerType as On, discriminatedUnion as Or, OPS_LOG_DEFAULT_LIMIT as Ot, FULL_IMAGE_BBOX as P, isVectorIndexDimConflict as Pn, strictObject as Pr, RetrainStatusSchema as Pt, NC_CLIP_PRE_ROLL_DEFAULT_SEC as Q, servedTemplateVars as Qn, TimelapseRuleSchema as Qt, ListTrackRelationsResultSchema as R, notificationRulesCapability as Rn, unknown as Rr, SCENE_DEFAULT_CHECK_INTERVAL_SEC as Rt, DETECTION_MACRO_CLASSES as S, faceGalleryCapability as Sn, nodePin as Sr, NcSnoozeSuppressedSchema as St, DetectionSourceSchema as T, gifFromMp4Args as Tn, _enum as Tr, NcTemplatePreviewInputSchema as Tt, MAX_TRACK_PURITIES as U, readDeviceStateFrom as Un, SCENE_RESET_RECAPTURES as Ut, MAX_BIRTH_DECISION_RECORDS as V, pipelineAnalyticsCapability as Vn, SCENE_DEFAULT_UNCOVERED_POLICY as Vt, MAX_TRACK_RELATIONS as W, readMotionTriggeredBy as Wn, SceneMonitorSchema as Wt, NC_AUDIO_CONFIRM_WINDOW_SEC_DEFAULT as X, sceneMonitorCapability as Xn, TimelapseRuleInputSchema as Xt, NC_AUDIO_CONFIRM_HITS_DEFAULT as Y, ruleBelongsToAlarm as Yn, TRACK_RELATIONS_DEFAULT_LIMIT as Yt, NC_CLIP_POST_ROLL_DEFAULT_SEC as Z, sensorRaisedOf as Zn, TimelapseRulePatchSchema as Zt, ClearTrackRelationInputSchema as _, embeddingRefusalOf as _n, createEvent as _r, NcRuleTargetSchema as _t, CLIP_EMBEDDING_STEP_ID as a, alarmPanelCapability as an, templateCarriesSummary as ar, NC_SNOOZE_MAX_MINUTES as at, DEFAULT_EVENT_COLOR as b, encodeVectorBase64 as bn, hydrateSchema as br, NcSnoozeInputSchema as bt, resolveClusterModelPin as c, audioModeOf as cn, zoneAnalyticsCapability as cr, NC_TAXONOMY as ct, AlarmArmModeSchema as d, cosineSimilarity as dn, evaluateSensorEdge as dr, NcAlarmSettingsPatchSchema as dt, TrackRelationKindSchema as en, subKindsOf as er, NC_CONDITION_CATALOG as et, ArchivedDebugNoteSchema as f, deriveRecordingMode as fn, isSourceCap as fr, NcConditionDescriptorSchema as ft, COCO_TO_MACRO as g, embeddingModelFailedError as gn, CamProfileSchema as gr, NcRuleSchema as gt, BirthDecisionRecordSchema as h, embeddingEncoderCapability as hn, BaseAddon as hr, NcRulePatchSchema as ht, CLIP_TEXT_MODELS as i, addonWidgetsSourceCapability as in, systemEventSummaryScheduleOf as ir, NC_SENSOR_TRANSITION_KINDS as it, EVENT_OWNER_TYPES as j, isScheduleActive as jn, object as jr, RECORDING_EXPORT_MAX_READ_BYTES as jt, EVENT_DENSITY_BATCH_MAX as k, isKnownTemplateVar as kn, literal as kr, OpsLogEntrySchema as kt, ARCHIVED_DEBUG_NOTES_DEFAULT_LIMIT as l, buildEventKindDescriptor as ln, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as lr, NC_TEMPLATE_VARS as lt, BaseDevice as m, describeSystemEventFamilyProblem as mn, errMsg as mr, NcRuleInputSchema as mt, DEFAULT_CLIP_MODEL as n, TrackSideSchema as nn, systemEventFamilyProblems as nr, NC_CONSUMABLE_SYSTEM_EVENT_KINDS as nt, FACE_EMBEDDING_STEP_ID as o, assertTimelapseCadences as on, templateVarsFor as or, NC_SYSTEM_EVENT_KIND_GROUP_SPECS as ot, BIRTH_DECISION_DEFAULT_LIMIT as p, describeSystemEventDeliveryProblem as pn, DeviceType as pr, NcConditionsSchema as pt, MotionTriggeredBySchema as q, resolveLocationMode as qn, SetTrackRelationInputSchema as qt, CLIP_IMAGE_MODELS as r, TrackSourceSchema as rn, systemEventFilterApplies as rr, NC_DEFAULT_SNOOZE_MINUTES as rt, readClusterModelPinStrict as s, audioMetricsCapability as sn, vectorDimFromBase64 as sr, NC_TANK_SYSTEM_EVENT_KINDS as st, BUILTIN_CLIP_MODELS as t, TrackRelationSchema as tn, systemEventDeliveryProblems as tr, NC_CONSUMABLE_LOW_PERCENT_DEFAULT as tt, AUDIO_MACRO_LABELS as u, consumableLowPercentOf as un, canonicalHash as ur, NcAlarmConfigSchema as ut, ClearTrackRelationResultSchema as v, embeddingRequirementsFailedError as vn, customAction as vr, NcRuleUpdateInputSchema as vt, DeclaredDevices as w, gifDeriveSpeed as wn, sleep as wr, NcTaxonomySchema as wt, DEFAULT_TIMELAPSE_PREVIEW_TEXT as x, evictionPolicyOfLocation as xn, isDeviceScopedCap as xr, NcSnoozeSchema as xt, CoverStateSchema as y, embeddingRequirementsUnavailableError as yn, defineCustomActions as yr, NcScheduleSchema as yt, LockStateSchema as z, occupancyScope as zn, EventCategory as zr, SCENE_DEFAULT_OBSERVATION_SPACING_SEC as zt };
+export { NC_AUDIO_CONFIRM_WINDOW_SEC_DEFAULT as $, ruleDeviceCompatCapQueries as $n, TimelapseRuleInputSchema as $t, EMBEDDING_REQUIREMENTS_FAILED as A, isDetectionMacroClass as An, ZodObject as Ar, NcTemplateVarDescriptorSchema as At, ListTrackRelationsInputSchema as B, memoizePinnedFfmpeg as Bn, record as Br, SCENE_DEFAULT_ANCHOR_THRESHOLD as Bt, DEFAULT_EVENT_COLOR as C, encodeVectorBase64 as Cn, customAction as Cr, NcSnoozeInputSchema as Ct, DeclaredDevices as D, gifDeriveSpeed as Dn, nodePin as Dr, NcTaxonomySchema as Dt, DETECTION_PIPELINE_CAP_NAME as E, failureContributionCapability as En, isDeviceScopedCap as Er, NcSystemEventKindSchema as Et, EXPORT_DENSE_MAX_RANGES as F, isSystemDelivery as Fn, literal as Fr, RECORDING_SOURCE_CAMSTACK_ADDON as Ft, MAX_BIRTH_LATENCY_PROXY_MS as G, plateGalleryCapability as Gn, unknown as Gr, SCENE_DIVERGED as Gt, LockStateSchema as H, occupancyScope as Hn, string as Hr, SCENE_DEFAULT_OBSERVATION_SPACING_SEC as Ht, FIRST_LEVEL_MACRO_CLASSES as I, isSystemEventSummaryRule as In, looseObject as Ir, RebuildObjectEmbeddingsRefusalSchema as It, MOTION_CLOSE_AFTER_MS as J, readTimelapseGeneratedAt as Jn, SetTrackPurityInputSchema as Jt, MAX_TRACK_PURITIES as K, readDeviceStateFrom as Kn, EventCategory as Kr, SCENE_RESET_RECAPTURES as Kt, FULL_IMAGE_BBOX as L, isVectorIndexDimConflict as Ln, number as Lr, RetrainStatusSchema as Lt, EVENT_DENSITY_BATCH_MAX as M, isKnownTemplateVar as Mn, array as Mr, OpsLogEntrySchema as Mt, EVENT_KIND_BY_CAP as N, isMediaOwnerType as Nn, boolean as Nr, PoolMemoryWatchdog as Nt, DetectionSourceSchema as O, gifFromMp4Args as On, normalizeNodeId as Or, NcTemplatePreviewInputSchema as Ot, EVENT_OWNER_TYPES as P, isScheduleActive as Pn, discriminatedUnion as Pr, RECORDING_EXPORT_MAX_READ_BYTES as Pt, NC_AUDIO_CONFIRM_HITS_DEFAULT as Q, ruleBelongsToAlarm as Qn, TRACK_RELATIONS_DEFAULT_LIMIT as Qt, FailureCounters as R, kebabToCamel as Rn, object as Rr, SCENE_CONFIRM_DEFAULT_MAX_IMAGE_PX as Rt, CoverStateSchema as S, embeddingRequirementsUnavailableError as Sn, createEvent as Sr, NcScheduleSchema as St, DETECTION_MACRO_CLASSES as T, faceGalleryCapability as Tn, hydrateSchema as Tr, NcSnoozeSuppressedSchema as Tt, MAX_ARCHIVED_DEBUG_NOTES as U, parseProcStatus as Un, tuple as Ur, SCENE_DEFAULT_QUIET_SECONDS as Ut, ListTrackRelationsResultSchema as V, notificationRulesCapability as Vn, strictObject as Vr, SCENE_DEFAULT_CHECK_INTERVAL_SEC as Vt, MAX_BIRTH_DECISION_RECORDS as W, pipelineAnalyticsCapability as Wn, union as Wr, SCENE_DEFAULT_UNCOVERED_POLICY as Wt, MotionTriggeredBySchema as X, resolveLocationMode as Xn, SetTrackRelationInputSchema as Xt, MediaFileKindEnum as Y, resolveClipSearchMinScore as Yn, SetTrackPurityResultSchema as Yt, NC_ALARM_SYSTEM_EVENT_KINDS as Z, resolvePoolMemoryPolicy as Zn, TIMELAPSE_DENSE_FLOOR_SEC as Zt, BaseDevice as _, describeSystemEventFamilyProblem as _n, isSourceCap as _r, NcRuleInputSchema as _t, CLIP_EMBEDDING_STEP_ID as a, TrackSideSchema as an, subKindsOf as ar, NC_CONSUMABLE_SYSTEM_EVENT_KINDS as at, ClearTrackRelationInputSchema as b, embeddingRefusalOf as bn, BaseAddon as br, NcRuleTargetSchema as bt, resolveClusterModelPin as c, alarmPanelCapability as cn, systemEventFilterApplies as cr, NC_SNOOZE_MAX_MINUTES as ct, APPEARANCE_RESOLVES_AMBIGUITY_DEFAULT as d, audioModeOf as dn, templateVarsFor as dr, NC_TAXONOMY as dt, TimelapseRulePatchSchema as en, ruleKindOf as er, NC_CLIP_POST_ROLL_DEFAULT_SEC as et, ARCHIVED_DEBUG_NOTES_DEFAULT_LIMIT as f, buildEventKindDescriptor as fn, vectorDimFromBase64 as fr, NC_TEMPLATE_VARS as ft, BIRTH_DECISION_DEFAULT_LIMIT as g, describeSystemEventDeliveryProblem as gn, evaluateSensorEdge as gr, NcConditionsSchema as gt, ArchivedDebugNoteSchema as h, deriveRecordingMode as hn, canonicalHash as hr, NcConditionDescriptorSchema as ht, CLIP_TEXT_MODELS as i, TrackRelationSchema as in, storageOccupancyCapability as ir, NC_CONSUMABLE_LOW_PERCENT_DEFAULT as it, EMBEDDING_REQUIREMENTS_UNAVAILABLE as j, isEventOwnerType as jn, _enum as jr, OPS_LOG_DEFAULT_LIMIT as jt, EMBEDDING_MODEL_FAILED as k, isAudioClassName as kn, sleep as kr, NcTemplatePreviewSchema as kt, APPEARANCE_BIN_COUNT as l, assertTimelapseCadences as ln, systemEventSummaryScheduleOf as lr, NC_SYSTEM_EVENT_KIND_GROUP_SPECS as lt, AlarmArmModeSchema as m, cosineSimilarity as mn, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as mr, NcAlarmSettingsPatchSchema as mt, DEFAULT_CLIP_MODEL as n, TrackPuritySchema as nn, sensorRaisedOf as nr, NC_CLIP_RETENTION_MAX_SEC as nt, FACE_EMBEDDING_STEP_ID as o, TrackSourceSchema as on, systemEventDeliveryProblems as or, NC_DEFAULT_SNOOZE_MINUTES as ot, AUDIO_MACRO_LABELS as p, consumableLowPercentOf as pn, zoneAnalyticsCapability as pr, NcAlarmConfigSchema as pt, MAX_TRACK_RELATIONS as q, readMotionTriggeredBy as qn, SceneMonitorSchema as qt, CLIP_IMAGE_MODELS as r, TrackRelationKindSchema as rn, servedTemplateVars as rr, NC_CONDITION_CATALOG as rt, readClusterModelPinStrict as s, addonWidgetsSourceCapability as sn, systemEventFamilyProblems as sr, NC_SENSOR_TRANSITION_KINDS as st, BUILTIN_CLIP_MODELS as t, TimelapseRuleSchema as tn, sceneMonitorCapability as tr, NC_CLIP_PRE_ROLL_DEFAULT_SEC as tt, APPEARANCE_BLOCKS as u, audioMetricsCapability as un, templateCarriesSummary as ur, NC_TANK_SYSTEM_EVENT_KINDS as ut, BirthDecisionRecordSchema as v, embeddingEncoderCapability as vn, DeviceType as vr, NcRulePatchSchema as vt, DEFAULT_TIMELAPSE_PREVIEW_TEXT as w, evictionPolicyOfLocation as wn, defineCustomActions as wr, NcSnoozeSchema as wt, ClearTrackRelationResultSchema as x, embeddingRequirementsFailedError as xn, CamProfileSchema as xr, NcRuleUpdateInputSchema as xt, COCO_TO_MACRO as y, embeddingModelFailedError as yn, errMsg as yr, NcRuleSchema as yt, LabelAttributionSchema as z, mayWriteToLocation as zn, partialRecord as zr, SCENE_CONFIRM_DEFAULT_TIMEOUT_MS as zt };

package/dist/embedding-encoder/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_clip_model_registry = require("../clip-model-registry--qJe8fTH.js");
+const require_clip_model_registry = require("../clip-model-registry-C67UM_q_.js");
 let node_fs = require("node:fs");
 node_fs = require_clip_model_registry.__toESM(node_fs);
 let node_path = require("node:path");

package/dist/embedding-encoder/index.mjs

@@ -1,4 +1,4 @@
-import { At as PoolMemoryWatchdog, Bn as parseProcStatus, Cr as normalizeNodeId, Jn as resolvePoolMemoryPolicy, a as CLIP_EMBEDDING_STEP_ID, c as resolveClusterModelPin, gn as embeddingModelFailedError, hn as embeddingEncoderCapability, hr as BaseAddon, i as CLIP_TEXT_MODELS, n as DEFAULT_CLIP_MODEL, r as CLIP_IMAGE_MODELS, t as BUILTIN_CLIP_MODELS, vn as embeddingRequirementsFailedError, yn as embeddingRequirementsUnavailableError } from "../clip-model-registry-DBKCbXPJ.mjs";
+import { Nt as PoolMemoryWatchdog, Or as normalizeNodeId, Sn as embeddingRequirementsUnavailableError, Un as parseProcStatus, Zn as resolvePoolMemoryPolicy, a as CLIP_EMBEDDING_STEP_ID, br as BaseAddon, c as resolveClusterModelPin, i as CLIP_TEXT_MODELS, n as DEFAULT_CLIP_MODEL, r as CLIP_IMAGE_MODELS, t as BUILTIN_CLIP_MODELS, vn as embeddingEncoderCapability, xn as embeddingRequirementsFailedError, yn as embeddingModelFailedError } from "../clip-model-registry-C9Aw4qkh.mjs";
 import { createRequire } from "node:module";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";