@camstack/addon-post-analysis 1.2.308 → 1.2.309

package/dist/pipeline-analytics/index.mjs

@@ -1,4 +1,4 @@
-import { $ as NC_AUDIO_CONFIRM_WINDOW_SEC_DEFAULT, $n as ruleDeviceCompatCapQueries, $t as TimelapseRuleInputSchema, A as EMBEDDING_REQUIREMENTS_FAILED, An as isDetectionMacroClass, Ar as ZodObject, At as NcTemplateVarDescriptorSchema, B as ListTrackRelationsInputSchema, Bn as memoizePinnedFfmpeg, Br as record, Bt as SCENE_DEFAULT_ANCHOR_THRESHOLD, C as DEFAULT_EVENT_COLOR, Cn as encodeVectorBase64, Cr as customAction, Ct as NcSnoozeInputSchema, D as DeclaredDevices, Dn as gifDeriveSpeed, Dr as nodePin, Dt as NcTaxonomySchema, E as DETECTION_PIPELINE_CAP_NAME, En as failureContributionCapability, Er as isDeviceScopedCap, Et as NcSystemEventKindSchema, F as EXPORT_DENSE_MAX_RANGES, Fn as isSystemDelivery, Fr as literal, Ft as RECORDING_SOURCE_CAMSTACK_ADDON, G as MAX_BIRTH_LATENCY_PROXY_MS, Gn as plateGalleryCapability, Gr as unknown, Gt as SCENE_DIVERGED, H as LockStateSchema, Hn as occupancyScope, Hr as string, Ht as SCENE_DEFAULT_OBSERVATION_SPACING_SEC, I as FIRST_LEVEL_MACRO_CLASSES, In as isSystemEventSummaryRule, Ir as looseObject, It as RebuildObjectEmbeddingsRefusalSchema, J as MOTION_CLOSE_AFTER_MS, Jn as readTimelapseGeneratedAt, Jt as SetTrackPurityInputSchema, K as MAX_TRACK_PURITIES, Kn as readDeviceStateFrom, Kr as EventCategory, Kt as SCENE_RESET_RECAPTURES, L as FULL_IMAGE_BBOX, Ln as isVectorIndexDimConflict, Lr as number, Lt as RetrainStatusSchema, M as EVENT_DENSITY_BATCH_MAX, Mn as isKnownTemplateVar, Mr as array, Mt as OpsLogEntrySchema, N as EVENT_KIND_BY_CAP, Nn as isMediaOwnerType, Nr as boolean, O as DetectionSourceSchema, On as gifFromMp4Args, Ot as NcTemplatePreviewInputSchema, P as EVENT_OWNER_TYPES, Pn as isScheduleActive, Pr as discriminatedUnion, Pt as RECORDING_EXPORT_MAX_READ_BYTES, Q as NC_AUDIO_CONFIRM_HITS_DEFAULT, Qn as ruleBelongsToAlarm$1, Qt as TRACK_RELATIONS_DEFAULT_LIMIT, R as FailureCounters, Rn as kebabToCamel, Rr as object, Rt as SCENE_CONFIRM_DEFAULT_MAX_IMAGE_PX, S as CoverStateSchema, Sr as createEvent, St as NcScheduleSchema, T as DETECTION_MACRO_CLASSES, Tn as faceGalleryCapability, Tr as hydrateSchema, Tt as NcSnoozeSuppressedSchema, U as MAX_ARCHIVED_DEBUG_NOTES, Ur as tuple, Ut as SCENE_DEFAULT_QUIET_SECONDS, V as ListTrackRelationsResultSchema, Vn as notificationRulesCapability, Vr as strictObject, Vt as SCENE_DEFAULT_CHECK_INTERVAL_SEC, W as MAX_BIRTH_DECISION_RECORDS, Wn as pipelineAnalyticsCapability, Wr as union, Wt as SCENE_DEFAULT_UNCOVERED_POLICY, X as MotionTriggeredBySchema, Xn as resolveLocationMode, Xt as SetTrackRelationInputSchema, Y as MediaFileKindEnum, Yn as resolveClipSearchMinScore, Yt as SetTrackPurityResultSchema, Z as NC_ALARM_SYSTEM_EVENT_KINDS, Zt as TIMELAPSE_DENSE_FLOOR_SEC, _ as BaseDevice, _n as describeSystemEventFamilyProblem, _r as isSourceCap, _t as NcRuleInputSchema, a as CLIP_EMBEDDING_STEP_ID, an as TrackSideSchema, ar as subKindsOf, at as NC_CONSUMABLE_SYSTEM_EVENT_KINDS, b as ClearTrackRelationInputSchema, bn as embeddingRefusalOf, br as BaseAddon, bt as NcRuleTargetSchema, c as resolveClusterModelPin, cn as alarmPanelCapability, cr as systemEventFilterApplies, ct as NC_SNOOZE_MAX_MINUTES, d as APPEARANCE_RESOLVES_AMBIGUITY_DEFAULT, dn as audioModeOf, dr as templateVarsFor, dt as NC_TAXONOMY, en as TimelapseRulePatchSchema, er as ruleKindOf, et as NC_CLIP_POST_ROLL_DEFAULT_SEC, f as ARCHIVED_DEBUG_NOTES_DEFAULT_LIMIT, fn as buildEventKindDescriptor, fr as vectorDimFromBase64, ft as NC_TEMPLATE_VARS, g as BIRTH_DECISION_DEFAULT_LIMIT, gn as describeSystemEventDeliveryProblem, gr as evaluateSensorEdge, gt as NcConditionsSchema, h as ArchivedDebugNoteSchema, hn as deriveRecordingMode, hr as canonicalHash, ht as NcConditionDescriptorSchema, in as TrackRelationSchema, ir as storageOccupancyCapability, it as NC_CONSUMABLE_LOW_PERCENT_DEFAULT, j as EMBEDDING_REQUIREMENTS_UNAVAILABLE, jn as isEventOwnerType, jr as _enum, jt as OPS_LOG_DEFAULT_LIMIT, k as EMBEDDING_MODEL_FAILED, kn as isAudioClassName, kr as sleep$1, kt as NcTemplatePreviewSchema, l as APPEARANCE_BIN_COUNT, ln as assertTimelapseCadences, lr as systemEventSummaryScheduleOf, lt as NC_SYSTEM_EVENT_KIND_GROUP_SPECS, m as AlarmArmModeSchema, mn as cosineSimilarity$1, mr as DEFAULT_FIRST_SIGHTING_FRESHNESS_MS, mt as NcAlarmSettingsPatchSchema, nn as TrackPuritySchema, nr as sensorRaisedOf, nt as NC_CLIP_RETENTION_MAX_SEC, o as FACE_EMBEDDING_STEP_ID, on as TrackSourceSchema, or as systemEventDeliveryProblems, ot as NC_DEFAULT_SNOOZE_MINUTES, p as AUDIO_MACRO_LABELS, pn as consumableLowPercentOf, pr as zoneAnalyticsCapability, pt as NcAlarmConfigSchema, q as MAX_TRACK_RELATIONS, qn as readMotionTriggeredBy, qt as SceneMonitorSchema, rn as TrackRelationKindSchema, rr as servedTemplateVars, rt as NC_CONDITION_CATALOG, s as readClusterModelPinStrict, sn as addonWidgetsSourceCapability, sr as systemEventFamilyProblems, st as NC_SENSOR_TRANSITION_KINDS, t as BUILTIN_CLIP_MODELS, tn as TimelapseRuleSchema, tr as sceneMonitorCapability, tt as NC_CLIP_PRE_ROLL_DEFAULT_SEC, u as APPEARANCE_BLOCKS, un as audioMetricsCapability, ur as templateCarriesSummary, ut as NC_TANK_SYSTEM_EVENT_KINDS, v as BirthDecisionRecordSchema, vr as DeviceType, vt as NcRulePatchSchema, w as DEFAULT_TIMELAPSE_PREVIEW_TEXT, wn as evictionPolicyOfLocation, wr as defineCustomActions, wt as NcSnoozeSchema, x as ClearTrackRelationResultSchema, xr as CamProfileSchema, xt as NcRuleUpdateInputSchema, y as COCO_TO_MACRO, yr as errMsg, yt as NcRuleSchema, z as LabelAttributionSchema, zn as mayWriteToLocation, zr as partialRecord, zt as SCENE_CONFIRM_DEFAULT_TIMEOUT_MS } from "../clip-model-registry-FGOIz3PZ.mjs";
+import { $ as NC_AUDIO_CONFIRM_WINDOW_SEC_DEFAULT, $n as ruleDeviceCompatCapQueries, $t as TimelapseRuleInputSchema, A as EMBEDDING_REQUIREMENTS_FAILED, An as isDetectionMacroClass, Ar as sleep$1, At as NcTemplateVarDescriptorSchema, B as ListTrackRelationsInputSchema, Bn as memoizePinnedFfmpeg, Br as partialRecord, Bt as SCENE_DEFAULT_ANCHOR_THRESHOLD, C as DEFAULT_EVENT_COLOR, Cn as encodeVectorBase64, Cr as createEvent, Ct as NcSnoozeInputSchema, D as DeclaredDevices, Dn as gifDeriveSpeed, Dr as isDeviceScopedCap, Dt as NcTaxonomySchema, E as DETECTION_PIPELINE_CAP_NAME, En as failureContributionCapability, Er as hydrateSchema, Et as NcSystemEventKindSchema, F as EXPORT_DENSE_MAX_RANGES, Fn as isSystemDelivery, Fr as discriminatedUnion, Ft as RECORDING_SOURCE_CAMSTACK_ADDON, G as MAX_BIRTH_LATENCY_PROXY_MS, Gn as plateGalleryCapability, Gr as union, Gt as SCENE_DIVERGED, H as LockStateSchema, Hn as occupancyScope, Hr as strictObject, Ht as SCENE_DEFAULT_OBSERVATION_SPACING_SEC, I as FIRST_LEVEL_MACRO_CLASSES, In as isSystemEventSummaryRule, Ir as literal, It as RebuildObjectEmbeddingsRefusalSchema, J as MOTION_CLOSE_AFTER_MS, Jn as readTimelapseGeneratedAt, Jt as SetTrackPurityInputSchema, K as MAX_TRACK_PURITIES, Kn as readDeviceStateFrom, Kr as unknown, Kt as SCENE_RESET_RECAPTURES, L as FULL_IMAGE_BBOX, Ln as isVectorIndexDimConflict, Lr as looseObject, Lt as RetrainStatusSchema, M as EVENT_DENSITY_BATCH_MAX, Mn as isKnownTemplateVar, Mr as _enum, Mt as OpsLogEntrySchema, N as EVENT_KIND_BY_CAP, Nn as isMediaOwnerType, Nr as array, O as DetectionSourceSchema, On as gifFromMp4Args, Or as nodePin, Ot as NcTemplatePreviewInputSchema, P as EVENT_OWNER_TYPES, Pn as isScheduleActive, Pr as boolean, Pt as RECORDING_EXPORT_MAX_READ_BYTES, Q as NC_AUDIO_CONFIRM_HITS_DEFAULT, Qn as ruleBelongsToAlarm$1, Qt as TRACK_RELATIONS_DEFAULT_LIMIT, R as FailureCounters, Rn as kebabToCamel, Rr as number, Rt as SCENE_CONFIRM_DEFAULT_MAX_IMAGE_PX, S as CoverStateSchema, Sr as CamProfileSchema, St as NcScheduleSchema, T as DETECTION_MACRO_CLASSES, Tn as faceGalleryCapability, Tr as defineCustomActions, Tt as NcSnoozeSuppressedSchema, U as MAX_ARCHIVED_DEBUG_NOTES, Ur as string, Ut as SCENE_DEFAULT_QUIET_SECONDS, V as ListTrackRelationsResultSchema, Vn as notificationRulesCapability, Vr as record, Vt as SCENE_DEFAULT_CHECK_INTERVAL_SEC, W as MAX_BIRTH_DECISION_RECORDS, Wn as pipelineAnalyticsCapability, Wr as tuple, Wt as SCENE_DEFAULT_UNCOVERED_POLICY, X as MotionTriggeredBySchema, Xn as resolveLocationMode, Xt as SetTrackRelationInputSchema, Y as MediaFileKindEnum, Yn as resolveClipSearchMinScore, Yt as SetTrackPurityResultSchema, Z as NC_ALARM_SYSTEM_EVENT_KINDS, Zt as TIMELAPSE_DENSE_FLOOR_SEC, _ as BaseDevice, _n as describeSystemEventFamilyProblem, _r as evaluateSensorEdge, _t as NcRuleInputSchema, a as CLIP_EMBEDDING_STEP_ID, an as TrackSideSchema, ar as subKindsOf, at as NC_CONSUMABLE_SYSTEM_EVENT_KINDS, b as ClearTrackRelationInputSchema, bn as embeddingRefusalOf, br as errMsg, bt as NcRuleTargetSchema, c as resolveClusterModelPin, cn as alarmPanelCapability, cr as systemEventFilterApplies, ct as NC_SNOOZE_MAX_MINUTES, d as APPEARANCE_RESOLVES_AMBIGUITY_DEFAULT, dn as audioModeOf, dr as templateCarriesSummary, dt as NC_TAXONOMY, en as TimelapseRulePatchSchema, er as ruleKindOf, et as NC_CLIP_POST_ROLL_DEFAULT_SEC, f as ARCHIVED_DEBUG_NOTES_DEFAULT_LIMIT, fn as buildEventKindDescriptor, fr as templateVarsFor, ft as NC_TEMPLATE_VARS, g as BIRTH_DECISION_DEFAULT_LIMIT, gn as describeSystemEventDeliveryProblem, gr as canonicalHash, gt as NcConditionsSchema, h as ArchivedDebugNoteSchema, hn as deriveRecordingMode, hr as DEFAULT_FIRST_SIGHTING_FRESHNESS_MS, ht as NcConditionDescriptorSchema, in as TrackRelationSchema, ir as storageOccupancyCapability, it as NC_CONSUMABLE_LOW_PERCENT_DEFAULT, j as EMBEDDING_REQUIREMENTS_UNAVAILABLE, jn as isEventOwnerType, jr as ZodObject, jt as OPS_LOG_DEFAULT_LIMIT, k as EMBEDDING_MODEL_FAILED, kn as isAudioClassName, kt as NcTemplatePreviewSchema, l as APPEARANCE_BIN_COUNT, ln as assertTimelapseCadences, lr as systemEventSummaryScheduleOf, lt as NC_SYSTEM_EVENT_KIND_GROUP_SPECS, m as AlarmArmModeSchema, mn as cosineSimilarity$1, mr as zoneAnalyticsCapability, mt as NcAlarmSettingsPatchSchema, nn as TrackPuritySchema, nr as sensorRaisedOf, nt as NC_CLIP_RETENTION_MAX_SEC, o as FACE_EMBEDDING_STEP_ID, on as TrackSourceSchema, or as systemEventDeliveryProblems, ot as NC_DEFAULT_SNOOZE_MINUTES, p as AUDIO_MACRO_LABELS, pn as consumableLowPercentOf, pr as vectorDimFromBase64, pt as NcAlarmConfigSchema, q as MAX_TRACK_RELATIONS, qn as readMotionTriggeredBy, qr as EventCategory, qt as SceneMonitorSchema, rn as TrackRelationKindSchema, rr as servedTemplateVars, rt as NC_CONDITION_CATALOG, s as readClusterModelPinStrict, sn as addonWidgetsSourceCapability, sr as systemEventFamilyProblems, st as NC_SENSOR_TRANSITION_KINDS, t as BUILTIN_CLIP_MODELS, tn as TimelapseRuleSchema, tr as sceneMonitorCapability, tt as NC_CLIP_PRE_ROLL_DEFAULT_SEC, u as APPEARANCE_BLOCKS, un as audioMetricsCapability, ur as systemEventSummarySplitOf, ut as NC_TANK_SYSTEM_EVENT_KINDS, v as BirthDecisionRecordSchema, vr as isSourceCap, vt as NcRulePatchSchema, w as DEFAULT_TIMELAPSE_PREVIEW_TEXT, wn as evictionPolicyOfLocation, wr as customAction, wt as NcSnoozeSchema, x as ClearTrackRelationResultSchema, xr as BaseAddon, xt as NcRuleUpdateInputSchema, y as COCO_TO_MACRO, yr as DeviceType, yt as NcRuleSchema, z as LabelAttributionSchema, zn as mayWriteToLocation, zr as object, zt as SCENE_CONFIRM_DEFAULT_TIMEOUT_MS } from "../clip-model-registry-CrBn6Qvt.mjs";
 import { t as __exportAll } from "../embedding-encoder/index.mjs";
 import * as fs$1 from "node:fs";
 import { createWriteStream, promises } from "node:fs";
@@ -13484,6 +13484,8 @@ var en_default = {
 	"summary.body.empty": "nothing was seen in this window",
 	"system.state-summary.title": "{{rule}}",
 	"system.state-summary.body": "{{summaryText}}",
+	"system.state-summary.section.title": "{{rule}} — {{summarySection}}",
+	"system.state-summary.section.body": "{{summaryText}}",
 	"summary.section.device-state": "Devices offline or switched off",
 	"summary.section.streams": "Streams offline",
 	"summary.section.battery": "Low batteries",
@@ -13812,6 +13814,8 @@ var it_default = {
 	"summary.body.empty": "nessun evento in questa finestra",
 	"system.state-summary.title": "{{rule}}",
 	"system.state-summary.body": "{{summaryText}}",
+	"system.state-summary.section.title": "{{rule}} — {{summarySection}}",
+	"system.state-summary.section.body": "{{summaryText}}",
 	"summary.section.device-state": "Dispositivi offline o spenti",
 	"summary.section.streams": "Stream offline",
 	"summary.section.battery": "Batterie scariche",
@@ -15757,6 +15761,38 @@ function planRuleTest(input) {
 	};
 }
 //#endregion
+//#region src/notification-center/state-summary/state-summary-test.ts
+/**
+* What TESTING a state-summary rule answers (D698, `nc.testRule`).
+*
+* A summary rule sends nothing per event (D647), so the per-event test the
+* other rules get — one synthetic event, injected — can never deliver for it.
+* Its test builds the summary NOW and enqueues it; this is the report: the
+* rows it enqueued (one, or one per section) and every section's read, so
+* "nothing to report" is an answer with its reason per section, never a
+* silence.
+*/
+var NcStateSummaryTestSchema = object({
+	/** The test's record id — a per-section row appends `:<sectionId>`. */
+	recordId: string(),
+	split: _enum(["rule", "section"]),
+	/** Nothing open and every section read: nothing was enqueued. */
+	nothingToReport: boolean(),
+	sections: array(object({
+		id: string(),
+		status: _enum(["read", "unavailable"]),
+		items: number().int().nonnegative(),
+		reason: string().optional()
+	})),
+	rows: array(object({
+		recordId: string(),
+		/** The section of a per-section row. */
+		section: string().optional(),
+		enqueued: number().int().nonnegative(),
+		targetIds: array(string())
+	}))
+});
+//#endregion
 //#region src/notification-center/clock-text.ts
 /**
 * `{{time}}` — hours and minutes in the NOTIFICATION language.
@@ -17109,13 +17145,18 @@ var ncActions = defineCustomActions({
 		deviceId: number().int().optional()
 	}), NcTestEventResultSchema.extend({
 		/** The subject kind the rule was tested with — the answer to "why was my
-		*  rule not a candidate". */
+		*  rule not a candidate". `state-summary` for a summary rule (D698). */
 		trigger: string(),
 		/** What the plan could not reproduce (a device-state gate, a polygon). */
 		planNotes: array(object({
 			conditionId: string(),
 			note: string()
-		}))
+		})),
+		/**
+		* A STATE-SUMMARY rule's test (D698): the summary built now and the rows
+		* it enqueued, or why nothing was — absent on every other rule.
+		*/
+		stateSummary: NcStateSummaryTestSchema.optional()
 	}), {
 		kind: "mutation",
 		auth: "admin",
@@ -17474,6 +17515,48 @@ function makeNcActionHandlers(deps) {
 		if (rule.ownerUserId !== void 0 && rule.ownerUserId !== caller.userId) throw new Error(`forbidden: rule not owned: ${ruleId}`);
 		return rule;
 	};
+	/**
+	* TEST a STATE-SUMMARY rule (D698). The per-event injection cannot deliver
+	* for it — a summary rule sends nothing per event (D647), and that test used
+	* to be dropped without a word — so the summary is built NOW and enqueued.
+	* The answer is shaped like every rule test's, plus the summary's own report.
+	*/
+	const testSummaryRule = async (rule, by) => {
+		const test = deps.testStateSummary;
+		if (test === void 0) throw new Error("this node does not host the notification centre — test on the hub");
+		deps.logger.info("rule test requested", { meta: {
+			by,
+			ruleId: rule.id,
+			ruleName: rule.name,
+			trigger: "state-summary",
+			bypassMute: true
+		} });
+		const report = await test(rule);
+		const enqueued = report.rows.reduce((sum, row) => sum + row.enqueued, 0);
+		const notes = ["per-camera notification mute bypassed"];
+		if (report.nothingToReport) notes.push(`nothing to report — ${report.sections.map((section) => `${section.id}: ${section.status === "read" ? `${String(section.items)} open` : "unavailable"}`).join(", ")} — nothing was sent, as the scheduled summary would send nothing`);
+		else if (enqueued === 0) notes.push("the summary was built but no row was enqueued — the rule reaches no target");
+		return {
+			recordId: report.recordId,
+			origin: "synthetic",
+			delivery: rule.delivery,
+			candidates: 1,
+			outcomes: [{
+				ruleId: rule.id,
+				ruleName: rule.name,
+				matched: !report.nothingToReport,
+				cooldown: "bypassed",
+				enqueued,
+				targetIds: [...new Set(report.rows.flatMap((row) => row.targetIds))]
+			}],
+			still: "unattachable",
+			notes,
+			...report.nothingToReport ? { droppedBy: "nothing-to-report" } : {},
+			trigger: "state-summary",
+			planNotes: [],
+			stateSummary: report
+		};
+	};
 	/** The producer half, or an honest refusal. */
 	const requireTimelapse = () => {
 		const tl = deps.timelapse;
@@ -17808,6 +17891,7 @@ function makeNcActionHandlers(deps) {
 			const inject = deps.injectTestEvent;
 			if (inject === void 0) throw new Error("this node does not host the notification centre — test on the hub");
 			const rule = assertRuleVisible(input.ruleId, c);
+			if (isSystemEventSummaryRule(rule)) return testSummaryRule(rule, c.userId);
 			const plan = planRuleTest({
 				rule,
 				now: Date.now(),
@@ -19642,6 +19726,77 @@ var NcDeviceStateCache = class {
 	}
 };
 //#endregion
+//#region src/notification-center/state-summary/state-model.ts
+/**
+* The STATE SUMMARY's vocabulary (D647): its sections, and what one reported
+* item is.
+*
+* A section is one of the D637 kind GROUPS (`NC_SYSTEM_EVENT_KIND_GROUP_SPECS`)
+* — the same grouping both editors list kinds under — so "the rule selected a
+* battery kind" and "the summary has a battery section" are the same fact.
+* `backups-exports` is the one group with no section: a backup or an export is
+* a job that COMPLETED, and the state it leaves behind is not a condition that
+* is still true. The ADR records why it is excluded rather than approximated.
+*/
+var NC_STATE_SUMMARY_SECTION_IDS = [
+	"device-state",
+	"streams",
+	"battery",
+	"consumables",
+	"tanks",
+	"detection-blind",
+	"nodes",
+	"addons",
+	"updates"
+];
+/** The kind groups that have no section, and why — said on the preview. */
+var NC_STATE_SUMMARY_EXCLUDED_GROUPS = { "backups-exports": "a backup or an export is a completed job, not a state that is still true" };
+function isStateSectionId(value) {
+	return NC_STATE_SUMMARY_SECTION_IDS.some((id) => id === value);
+}
+/** The template variable that carries one section's lines (`template-vars.ts`). */
+var NC_STATE_SECTION_VAR = {
+	"device-state": "summaryDevices",
+	streams: "summaryStreams",
+	battery: "summaryBattery",
+	consumables: "summaryConsumables",
+	tanks: "summaryTanks",
+	"detection-blind": "summaryDetection",
+	nodes: "summaryNodes",
+	addons: "summaryAddons",
+	updates: "summaryUpdates"
+};
+/** The kinds of a section — its kind group. */
+function sectionKinds(section) {
+	return NC_SYSTEM_EVENT_KIND_GROUP_SPECS.find((group) => group.id === section)?.kinds ?? [];
+}
+/**
+* The sections a rule reports, in section order: every section whose kind
+* group shares a kind with the rule. A rule that selected only
+* `device-battery-low` still reports the battery STATE — the state has no
+* direction, only the event did.
+*/
+function sectionsOfRule(condition) {
+	return NC_STATE_SUMMARY_SECTION_IDS.filter((section) => sectionKinds(section).some((kind) => condition.kinds.includes(kind)));
+}
+/** The kind groups the rule selected that have no section. */
+function excludedGroupsOfRule(condition) {
+	return NC_SYSTEM_EVENT_KIND_GROUP_SPECS.filter((group) => NC_STATE_SUMMARY_EXCLUDED_GROUPS[group.id] !== void 0 && group.kinds.some((kind) => condition.kinds.includes(kind))).map((group) => group.id);
+}
+/**
+* The condition the summary judges its items with: the rule's own, with its
+* kinds widened to every kind of every section it reports — so a rule that
+* named the raise is not told "not my kind" about the state the raise left
+* behind. Every FILTER is the rule's, untouched.
+*/
+function summaryCondition(condition) {
+	const kinds = sectionsOfRule(condition).flatMap((section) => sectionKinds(section));
+	return {
+		...condition,
+		kinds: [...new Set([...condition.kinds, ...kinds])]
+	};
+}
+//#endregion
 //#region src/notification-center/state-summary/state-summary-delivery.ts
 /**
 * A state summary as an ORDINARY system-event subject (D647), so it reaches the
@@ -19650,7 +19805,9 @@ var NcDeviceStateCache = class {
 * which renders the rule's own template with the summary's variables.
 *
 * - `recordId` is `state-summary:<ruleId>:<windowEndMs>` — the outbox dedup
-*   key, so a restart can never enqueue one window twice.
+*   key, so a restart can never enqueue one window twice. Split per SECTION
+*   (D698), each row is `state-summary:<ruleId>:<windowEndMs>:<sectionId>`:
+*   the same guarantee, per section.
 * - The row files under the system device (0): a summary spans devices.
 *   `targetUsers` therefore reach admins only — a user whose grant is
 *   narrower than the whole installation must not be sent the names of
@@ -19664,20 +19821,37 @@ var NcDeviceStateCache = class {
 */
 var NC_STATE_SUMMARY_TITLE_KEY = "system.state-summary.title";
 var NC_STATE_SUMMARY_BODY_KEY = "system.state-summary.body";
+/** A per-section row's title and body (D698): the rule's name and the section's. */
+var NC_STATE_SUMMARY_SECTION_TITLE_KEY = "system.state-summary.section.title";
+var NC_STATE_SUMMARY_SECTION_BODY_KEY = "system.state-summary.section.body";
 function stateSummaryRecordId(ruleId, windowEndMs) {
 	return `state-summary:${ruleId}:${String(windowEndMs)}`;
 }
+/**
+* The record id of a TEST of the rule (D698, `nc.testRule`): its own prefix,
+* so a test can never take — or be swallowed by — a real window's dedup key.
+*/
+function stateSummaryTestRecordId(ruleId, nowMs) {
+	return `state-summary-test:${ruleId}:${String(nowMs)}`;
+}
+/** One section's row: the record id of the whole, plus `:<sectionId>` — the per-section dedup key. */
+function sectionRecordId(base, sectionId) {
+	return `${base}:${sectionId}`;
+}
 /** Is this system-event data the data of a state-summary row? */
 function isStateSummaryData(data) {
 	return data["stateSummary"] === true;
 }
+function recordBaseOf(input) {
+	return input.recordBase ?? stateSummaryRecordId(input.rule.id, input.window.endMs);
+}
 /** `null` when the rule has no system-event condition (the guard refuses that). */
 function stateSummarySubject(input) {
 	const kind = input.rule.conditions.systemEvent?.kinds[0];
 	if (kind === void 0) return null;
 	return {
 		kind: "system-event",
-		recordId: stateSummaryRecordId(input.rule.id, input.window.endMs),
+		recordId: recordBaseOf(input),
 		deviceId: NC_SYSTEM_DEVICE_ID$1,
 		timestamp: input.window.endMs,
 		classNames: [],
@@ -19690,6 +19864,7 @@ function stateSummarySubject(input) {
 			textParams: {
 				summaryText: input.text.text,
 				summaryCount: String(input.text.count),
+				summarySection: input.text.sections.map((section) => section.title).join(", "),
 				...input.text.sectionVars
 			},
 			textCount: input.text.count,
@@ -19707,13 +19882,82 @@ function stateSummarySubject(input) {
 	};
 }
 /**
+* The rows one summary window sends. `rule`: the one D647 row. `section`: one
+* row per section with something to say — its items, or the sentence that it
+* is UNAVAILABLE, exactly as the combined text words it. A section with
+* nothing open sends nothing; neither does a summary with nothing at all.
+*/
+function stateSummarySubjects(input) {
+	if (input.split === "rule") {
+		const subject = stateSummarySubject(input);
+		return subject === null ? [] : [subject];
+	}
+	const kind = input.rule.conditions.systemEvent?.kinds[0];
+	if (kind === void 0) return [];
+	return input.text.sections.map((section) => sectionSubject(input, kind, section));
+}
+function sectionSubject(input, kind, section) {
+	const sectionVars = {};
+	for (const name of Object.keys(input.text.sectionVars)) sectionVars[name] = "";
+	sectionVars[NC_STATE_SECTION_VAR[section.id]] = section.text;
+	return {
+		kind: "system-event",
+		recordId: sectionRecordId(recordBaseOf(input), section.id),
+		deviceId: NC_SYSTEM_DEVICE_ID$1,
+		timestamp: input.window.endMs,
+		classNames: [],
+		zones: [],
+		systemEvent: {
+			kind,
+			subject: `state-summary:${input.rule.id}:${section.id}`,
+			titleKey: NC_STATE_SUMMARY_SECTION_TITLE_KEY,
+			bodyKey: NC_STATE_SUMMARY_SECTION_BODY_KEY,
+			textParams: {
+				summaryText: section.body,
+				summaryCount: String(section.count),
+				summarySection: section.title,
+				...sectionVars
+			},
+			textCount: section.count,
+			data: {
+				stateSummary: true,
+				section: section.id,
+				windowStartMs: input.window.startMs,
+				windowEndMs: input.window.endMs,
+				sections: [{
+					id: section.id,
+					status: section.status,
+					items: section.count
+				}]
+			}
+		}
+	};
+}
+/** The section a per-section row is about (`data.section`), or `undefined` on a combined row. */
+function stateSummarySectionOf(subject) {
+	const section = subject.systemEvent?.data["section"];
+	return typeof section === "string" && isStateSectionId(section) ? section : void 0;
+}
+/** Does a body name `{{summaryText}}` or this section's own variable? */
+function bodyCarriesSection(body, section) {
+	return new RegExp(`\\{\\{\\s*(?:summaryText|${NC_STATE_SECTION_VAR[section]})\\s*\\}\\}`).test(body);
+}
+/**
 * The rule as its summary is ENQUEUED: a custom body that carries none of the
 * summary's content gets `{{summaryText}}` appended on its own line, so an
 * operator's body never sends an empty summary (review M3). `null` = unchanged.
+*
+* On a per-SECTION row (D698 review M3) the content is THIS section's: a body
+* naming only `{{summaryBattery}}` carries the battery row and nothing on the
+* streams row, so every other section's row gets `{{summaryText}}` — its own
+* lines — appended.
 */
-function withSummaryBody(rule) {
+function withSummaryBody(rule, section) {
 	const body = rule.template?.body;
-	if (templateCarriesSummary(body)) return null;
+	if (templateCarriesSummary(body)) {
+		if (section === void 0 || body === void 0 || body.trim().length === 0) return null;
+		if (bodyCarriesSection(body, section)) return null;
+	}
 	return {
 		...rule,
 		template: {
@@ -23762,6 +24006,120 @@ function withTimeout$3(promise, ms, what) {
 	});
 }
 //#endregion
+//#region src/notification-center/boot-window-rows.ts
+var BootWindowRows = class {
+	deps;
+	window = /* @__PURE__ */ new Map();
+	/** Deferred closes, keyed so a repeat (one per detection) replaces rather than grows. */
+	deferred = /* @__PURE__ */ new Map();
+	settled = false;
+	constructor(deps) {
+		this.deps = deps;
+	}
+	/** Is the ledger still inside its boot window (not settled after an answered load)? */
+	open() {
+		return !this.settled;
+	}
+	/** Stage a row that would be CREATED inside the window — mirror only, never persisted. */
+	stageProvisional(row) {
+		this.deps.ledger.stage(row);
+		this.window.set(this.deps.keyOf(row), {
+			kind: "provisional",
+			row
+		});
+	}
+	/** A row the ledger persisted inside the window: the load must not regress it. */
+	noteWritten(row) {
+		this.window.set(this.deps.keyOf(row), {
+			kind: "written",
+			row
+		});
+	}
+	/** A key the ledger removed inside the window: the load must not resurrect it. */
+	noteRemoved(key) {
+		this.window.set(key, { kind: "removed" });
+	}
+	/**
+	* While the window is open, keep `replay` to run against the LOADED rows at
+	* the settle; once settled, nothing — the caller's own pass already saw every
+	* row (review LOW-5: no allocation per detection after boot). `key` names the
+	* close: the same key deferred twice runs once, at the place it was first
+	* deferred. `replay` answers how many rows it closed.
+	*/
+	deferWhileOpen(key, replay) {
+		if (this.open()) this.deferred.set(key, replay);
+	}
+	/**
+	* Close the window — call right after the ledger's `load`. A load that did
+	* not answer leaves the window open and returns `null`.
+	*/
+	settle() {
+		if (this.settled) return null;
+		if (!this.deps.ledger.hasAnswered()) {
+			this.deps.logger.warn("boot window NOT settled — the load did not answer", { meta: {
+				collection: this.deps.ledger.collection,
+				pendingCloses: this.deferred.size,
+				provisionalRows: this.window.size
+			} });
+			return null;
+		}
+		this.settled = true;
+		const ledger = this.deps.ledger;
+		let replayed = 0;
+		for (const replay of this.deferred.values()) replayed += replay();
+		this.deferred.clear();
+		let keptStored = 0;
+		let written = 0;
+		for (const [key, entry] of this.window) {
+			if (entry.kind === "removed") {
+				ledger.forget(key);
+				continue;
+			}
+			if (entry.kind === "written") {
+				ledger.stage(entry.row);
+				continue;
+			}
+			const mirrored = ledger.get(key);
+			const stored = mirrored === entry.row ? void 0 : mirrored;
+			const held = this.deps.merge(stored, entry.row);
+			const deviceId = this.deps.deviceIdOf(entry.row);
+			const tags = deviceId !== void 0 ? { tags: { deviceId } } : {};
+			if (stored !== void 0 && held === stored) {
+				keptStored += 1;
+				this.deps.logger.debug("boot-window row kept as stored — the restart learned nothing new", {
+					...tags,
+					meta: {
+						collection: ledger.collection,
+						key
+					}
+				});
+				continue;
+			}
+			ledger.put(held);
+			written += 1;
+			this.deps.logger.debug("boot-window row written at load", {
+				...tags,
+				meta: {
+					collection: ledger.collection,
+					key,
+					stored: stored !== void 0
+				}
+			});
+		}
+		this.window.clear();
+		const merge = {
+			keptStored,
+			written,
+			replayed
+		};
+		this.deps.logger.info("boot window settled", { meta: {
+			collection: ledger.collection,
+			...merge
+		} });
+		return merge;
+	}
+};
+//#endregion
 //#region src/notification-center/liveness-ledger.ts
 /**
 * @durable class=ledger owner=notification-center
@@ -23872,12 +24230,26 @@ var NC_LIVENESS_SPEC = {
 };
 var NcLivenessLedger = class {
 	ledger;
+	/**
+	* What was observed before the boot load answered (D698) — see
+	* `boot-window-rows.ts`. A stored row holding the same STATE keeps its own
+	* `updatedAt`: a restart that re-hears "offline" learned nothing about WHEN
+	* the device went offline, and `updatedAt` is the state summary's "since".
+	*/
+	bootWindow;
 	constructor(deps) {
 		this.ledger = new DurableLedger({
 			spec: NC_LIVENESS_SPEC,
 			store: deps.store,
 			logger: deps.logger
 		});
+		this.bootWindow = new BootWindowRows({
+			ledger: this.ledger,
+			keyOf: (row) => row.subject,
+			deviceIdOf: (row) => row.deviceId,
+			logger: deps.logger,
+			merge: (stored, provisional) => stored !== void 0 && stored.state === provisional.state ? stored : provisional
+		});
 	}
 	static declare(store) {
 		return DurableLedger.declare(store, NC_LIVENESS_SPEC);
@@ -23892,7 +24264,9 @@ var NcLivenessLedger = class {
 	* flood, so no error path may do it on purpose.
 	*/
 	async load() {
-		return (await this.ledger.load()).length;
+		const loaded = (await this.ledger.load()).length;
+		this.bootWindow.settle();
+		return loaded;
 	}
 	/** Has a load READ the store once? Until then the mirror is not the truth (D647 reads it). */
 	hasAnswered() {
@@ -23985,13 +24359,21 @@ var NcLivenessLedger = class {
 	* spoke". That is the timestamp anyone reading the table wants.
 	*/
 	observe(observation, now) {
-		return this.ledger.observe({
+		const row = {
 			subject: observation.subject,
 			state: observation.state,
 			kind: observation.kind,
 			...observation.deviceId !== void 0 ? { deviceId: observation.deviceId } : {},
 			updatedAt: now
-		});
+		};
+		if (!this.bootWindow.open()) return this.ledger.observe(row);
+		if (this.ledger.get(row.subject) === void 0) {
+			this.bootWindow.stageProvisional(row);
+			return "seeded";
+		}
+		const verdict = this.ledger.observe(row);
+		if (verdict === "flip") this.bootWindow.noteWritten(row);
+		return verdict;
 	}
 };
 /** The persisted column map (the `subject` PK is passed separately). */
@@ -30526,74 +30908,6 @@ function stateSources(ports) {
 	return { read: (section, nowMs) => readSection(section, ports, nowMs) };
 }
 //#endregion
-//#region src/notification-center/state-summary/state-model.ts
-/**
-* The STATE SUMMARY's vocabulary (D647): its sections, and what one reported
-* item is.
-*
-* A section is one of the D637 kind GROUPS (`NC_SYSTEM_EVENT_KIND_GROUP_SPECS`)
-* — the same grouping both editors list kinds under — so "the rule selected a
-* battery kind" and "the summary has a battery section" are the same fact.
-* `backups-exports` is the one group with no section: a backup or an export is
-* a job that COMPLETED, and the state it leaves behind is not a condition that
-* is still true. The ADR records why it is excluded rather than approximated.
-*/
-var NC_STATE_SUMMARY_SECTION_IDS = [
-	"device-state",
-	"streams",
-	"battery",
-	"consumables",
-	"tanks",
-	"detection-blind",
-	"nodes",
-	"addons",
-	"updates"
-];
-/** The kind groups that have no section, and why — said on the preview. */
-var NC_STATE_SUMMARY_EXCLUDED_GROUPS = { "backups-exports": "a backup or an export is a completed job, not a state that is still true" };
-/** The template variable that carries one section's lines (`template-vars.ts`). */
-var NC_STATE_SECTION_VAR = {
-	"device-state": "summaryDevices",
-	streams: "summaryStreams",
-	battery: "summaryBattery",
-	consumables: "summaryConsumables",
-	tanks: "summaryTanks",
-	"detection-blind": "summaryDetection",
-	nodes: "summaryNodes",
-	addons: "summaryAddons",
-	updates: "summaryUpdates"
-};
-/** The kinds of a section — its kind group. */
-function sectionKinds(section) {
-	return NC_SYSTEM_EVENT_KIND_GROUP_SPECS.find((group) => group.id === section)?.kinds ?? [];
-}
-/**
-* The sections a rule reports, in section order: every section whose kind
-* group shares a kind with the rule. A rule that selected only
-* `device-battery-low` still reports the battery STATE — the state has no
-* direction, only the event did.
-*/
-function sectionsOfRule(condition) {
-	return NC_STATE_SUMMARY_SECTION_IDS.filter((section) => sectionKinds(section).some((kind) => condition.kinds.includes(kind)));
-}
-/** The kind groups the rule selected that have no section. */
-function excludedGroupsOfRule(condition) {
-	return NC_SYSTEM_EVENT_KIND_GROUP_SPECS.filter((group) => NC_STATE_SUMMARY_EXCLUDED_GROUPS[group.id] !== void 0 && group.kinds.some((kind) => condition.kinds.includes(kind))).map((group) => group.id);
-}
-/**
-* The condition the summary judges its items with: the rule's own, with its
-* kinds widened to every kind of every section it reports — so a rule that
-* named the raise is not told "not my kind" about the state the raise left
-* behind. Every FILTER is the rule's, untouched.
-*/
-function summaryCondition(condition) {
-	const kinds = sectionsOfRule(condition).flatMap((section) => sectionKinds(section));
-	return {
-		...condition,
-		kinds: [...new Set([...condition.kinds, ...kinds])]
-	};
-}
-//#endregion
 //#region src/notification-center/state-summary/state-summary.ts
 /** Nothing to say: no item, and every section READ. Such a summary is not sent. */
 function isEmptyStateSummary(summary) {
@@ -30694,28 +31008,50 @@ function lineOf(input, item) {
 		}
 	});
 }
-function blockOf(input, section) {
-	const title = input.texts.text({ key: `summary.section.${section.id}` });
-	if (section.status === "unavailable") return input.texts.text({
-		key: "summary.section.unavailable",
-		vars: { section: title }
-	});
+function sectionTitle(input, section) {
+	return input.texts.text({ key: `summary.section.${section.id}` });
+}
+/** A section's words: its block, and the body a per-section row sends. `null` = nothing to say. */
+function wordsOf(input, section) {
+	const title = sectionTitle(input, section);
+	if (section.status === "unavailable") {
+		const sentence = input.texts.text({
+			key: "summary.section.unavailable",
+			vars: { section: title }
+		});
+		return {
+			block: sentence,
+			body: sentence
+		};
+	}
 	if (section.items.length === 0) return null;
-	const lines = section.items.map((item) => `• ${lineOf(input, item)}`);
-	return [`${title}:`, ...lines].join("\n");
+	const lines = section.items.map((item) => `• ${lineOf(input, item)}`).join("\n");
+	return {
+		block: `${title}:\n${lines}`,
+		body: lines
+	};
 }
 function stateSummaryText(input) {
 	const sectionVars = {};
-	const blocks = [];
+	const sections = [];
 	for (const section of input.summary.sections) {
-		const block = blockOf(input, section);
-		sectionVars[NC_STATE_SECTION_VAR[section.id]] = block ?? "";
-		if (block !== null) blocks.push(block);
+		const words = wordsOf(input, section);
+		sectionVars[NC_STATE_SECTION_VAR[section.id]] = words?.block ?? "";
+		if (words === null) continue;
+		sections.push({
+			id: section.id,
+			title: sectionTitle(input, section),
+			text: words.block,
+			body: words.body,
+			count: section.items.length,
+			status: section.status
+		});
 	}
 	return {
-		text: blocks.join("\n"),
+		text: sections.map((section) => section.text).join("\n"),
 		count: input.summary.itemCount,
-		sectionVars
+		sectionVars,
+		sections
 	};
 }
 //#endregion
@@ -31152,6 +31488,40 @@ var NcStateSummaryStampStore = class {
 //#endregion
 //#region src/notification-center/state-summary/system-state-ledger.ts
 /**
+* NcSystemStateLedger — what is STILL TRUE among the event-driven system facts
+* no other ledger holds (D647).
+*
+* Battery, consumable and tank episodes already have a durable row
+* (`alert-store.ts`), and device/node liveness has its own
+* (`liveness-ledger.ts`). The rest of the summarisable kinds are EVENTS the
+* centre hears once — a stream going offline, a device switched off, a camera
+* detecting nothing, an update becoming available — and nothing remembered
+* that they were still true. A state summary is a claim about now, so this
+* ledger keeps one row per OPEN state, fed by the same intake the instant
+* rules read, and removes it when the closing event arrives:
+*
+* | opens | closes |
+* | --- | --- |
+* | `stream-offline` | `stream-online` (same subject) |
+* | `device-disabled` | `device-enabled` (same subject) |
+* | `detection-blind` | a DETECTION on that camera — the only evidence of recovery there is |
+* | `node-inference-unavailable`, `addon-crash-loop` | the node's next liveness edge, or a server update on it |
+* | `addon-update-available` (per package, per node) | `addon.updated` for that package on that node |
+* | `server-` / `wrapper-update-available` | `server-updated` on that node |
+*
+* Two kinds have no recovery event at all (`node-inference-unavailable`,
+* `addon-crash-loop`): the orchestrator drops such a node until it comes back,
+* and a crash-looped runner stays down until something respawns it — a node
+* restart or an update. The closing edges above are those respawns. A newer
+* `update-available` for the same package REPLACES the row.
+*
+* Durable (write-behind), so a restart does not forget an outage it heard
+* about. It is fed only on the evaluating node, like the liveness ledger. The
+* summary reads the RAM mirror only — never SQLite on its schedule (D447) —
+* and a mirror that has not loaded answers `null`: the sections it feeds say
+* "unavailable", never "none" (D49).
+*/
+/**
 * @durable class=ledger owner=notification-center
 *   write="a system state the centre accepted OPENING (a stream offline, a device switched off, a camera detecting nothing, an update available, a node that cannot infer, a crash-looped runner); its closing event deletes the row"
 *   retention="none — a row lives exactly as long as its state is open. Bounded by the installation: streams, devices, nodes and installed packages."
@@ -31313,9 +31683,7 @@ var NcSystemStateLedger = class {
 	}
 	/** A detection on a camera: it is not blind. Called for every detection — a Map lookup. */
 	observeDetection(deviceId) {
-		const key = `detection-blind:${String(deviceId)}`;
-		if (this.deps.rows.get(key) === void 0) return;
-		this.close(key, "detection");
+		this.close(`detection-blind:${String(deviceId)}`, "detection");
 	}
 	/**
 	* Any `stream.online`, whatever its reason (D647 review I1). The intake gate
@@ -31330,7 +31698,7 @@ var NcSystemStateLedger = class {
 		const keep = new Set(list.rows.map((pkg) => updateStateKey(list.target, pkg.nodeId, pkg.packageName)));
 		for (const nodeId of list.nodeIds) {
 			const prefix = `update:${list.target}:${nodeId}:`;
-			for (const row of this.deps.rows.all()) if (row.key.startsWith(prefix) && !keep.has(row.key)) this.close(row.key, "update-list");
+			this.closeWhere(`update-list:${list.target}:${nodeId}`, (row) => row.key.startsWith(prefix) && !keep.has(row.key), "update-list");
 		}
 		for (const pkg of list.rows) this.openUpdate(list.target, pkg, atMs);
 	}
@@ -31340,11 +31708,7 @@ var NcSystemStateLedger = class {
 	* on that node.
 	*/
 	observeAddonStarted(addonId, nodeId) {
-		for (const row of this.deps.rows.all()) {
-			if (row.kind !== "addon-crash-loop") continue;
-			if (row.nodeId !== nodeId) continue;
-			if ((row.params["addons"] ?? "").split(",").map((id) => id.trim()).includes(addonId)) this.close(row.key, "addon-started");
-		}
+		this.closeWhere(`addon-started:${nodeId}:${addonId}`, (row) => row.kind === "addon-crash-loop" && row.nodeId === nodeId && (row.params["addons"] ?? "").split(",").map((id) => id.trim()).includes(addonId), "addon-started");
 	}
 	/**
 	* The balancer placed a camera on a node (not pinned): placement skips a
@@ -31400,11 +31764,31 @@ var NcSystemStateLedger = class {
 			}
 		});
 	}
+	/**
+	* Close one state: the row held now (a loaded one, or one opened in the boot
+	* window), and — deferred while the boot window is open — the STORED row
+	* the window cannot see yet (D698 review H1).
+	*/
 	close(key, by) {
+		this.closeIfHeld(key, by, false);
+		this.deps.rows.deferWhileOpen(`close:${key}`, () => this.closeIfHeld(key, by, true) ? 1 : 0);
+	}
+	/** {@link close} for every row a predicate names — now, and against the loaded rows. */
+	closeWhere(key, names, by) {
+		const run = (replayed) => {
+			let closed = 0;
+			for (const row of this.deps.rows.all()) if (names(row) && this.closeIfHeld(row.key, by, replayed)) closed += 1;
+			return closed;
+		};
+		run(false);
+		this.deps.rows.deferWhileOpen(`where:${key}`, () => run(true));
+	}
+	/** Close the row if one is held; `true` when it was. */
+	closeIfHeld(key, by, replayed) {
 		const held = this.deps.rows.get(key);
-		if (held === void 0) return;
+		if (held === void 0) return false;
 		this.deps.rows.remove(key);
-		this.deps.logger?.debug("system state closed", {
+		const line = {
 			...held.deviceId !== void 0 ? { tags: { deviceId: held.deviceId } } : {},
 			meta: {
 				key,
@@ -31412,49 +31796,78 @@ var NcSystemStateLedger = class {
 				by,
 				since: held.since
 			}
-		});
+		};
+		if (replayed) {
+			this.deps.logger?.info("system state closed by an event heard before the load", line);
+			return true;
+		}
+		this.deps.logger?.debug("system state closed", line);
+		return true;
 	}
 	closeNodeFaults(nodeId, by) {
-		for (const row of this.deps.rows.all()) {
-			if (row.nodeId !== nodeId) continue;
-			if (row.kind === "node-inference-unavailable" || row.kind === "addon-crash-loop") this.close(row.key, by);
-		}
+		this.closeWhere(`node-faults:${nodeId}`, (row) => row.nodeId === nodeId && (row.kind === "node-inference-unavailable" || row.kind === "addon-crash-loop"), by);
 	}
 	closeServerUpdate(nodeId) {
-		for (const row of this.deps.rows.all()) {
-			if ((row.nodeId ?? HUB_NODE) !== nodeId) continue;
-			if (row.kind === "server-update-available" || row.kind === "wrapper-update-available" || row.kind === "addon-crash-loop" || row.kind === "node-inference-unavailable") this.close(row.key, "server-updated");
-		}
+		this.closeWhere(`server-update:${nodeId}`, (row) => (row.nodeId ?? HUB_NODE) === nodeId && (row.kind === "server-update-available" || row.kind === "wrapper-update-available" || row.kind === "addon-crash-loop" || row.kind === "node-inference-unavailable"), "server-updated");
 	}
 };
 /** The durable home of the rows. */
 var NcSystemStateStore = class {
 	ledger;
+	/**
+	* What the intake opened or closed before the boot load answered (D698,
+	* `boot-window-rows.ts`). A stored row of the same KIND keeps its own
+	* `since`: a stream re-announced offline at boot was not offline "since the
+	* restart".
+	*/
+	bootWindow;
 	constructor(deps) {
 		this.ledger = new DurableLedger({
 			spec: NC_SYSTEM_STATE_SPEC,
 			store: deps.store,
 			logger: deps.logger
 		});
+		this.bootWindow = new BootWindowRows({
+			ledger: this.ledger,
+			keyOf: (row) => row.key,
+			deviceIdOf: (row) => row.deviceId,
+			logger: deps.logger,
+			merge: (stored, provisional) => {
+				if (stored === void 0 || stored.kind !== provisional.kind) return provisional;
+				const merged = {
+					...provisional,
+					since: stored.since
+				};
+				return isDeepStrictEqual(merged, stored) ? stored : merged;
+			}
+		});
 	}
 	static declare(store) {
 		return DurableLedger.declare(store, NC_SYSTEM_STATE_SPEC);
 	}
 	/** Boot reseed. A failed load keeps the mirror and leaves `answered` false. */
 	async load() {
-		return (await this.ledger.load()).length;
+		const loaded = (await this.ledger.load()).length;
+		this.bootWindow.settle();
+		return loaded;
 	}
 	port() {
 		return {
 			get: (key) => this.ledger.get(key),
 			put: (row) => {
+				if (this.bootWindow.open()) {
+					this.bootWindow.stageProvisional(row);
+					return;
+				}
 				this.ledger.put(row).catch(() => void 0);
 			},
 			remove: (key) => {
+				if (this.bootWindow.open()) this.bootWindow.noteRemoved(key);
 				this.ledger.forget(key);
 			},
 			all: () => this.ledger.snapshot(),
-			answered: () => this.ledger.hasAnswered()
+			answered: () => this.ledger.hasAnswered(),
+			deferWhileOpen: (key, replay) => this.bootWindow.deferWhileOpen(key, replay)
 		};
 	}
 };
@@ -31579,8 +31992,21 @@ var NcStateSummaryService = class {
 		const nowMs = this.deps.now();
 		const summary = await this.collect(rule, nowMs);
 		const text = this.word(summary, nowMs);
+		const split = systemEventSummarySplitOf(rule);
+		const empty = isEmptyStateSummary(summary);
 		return {
-			empty: summary.itemCount === 0 && summary.unavailableCount === 0,
+			empty,
+			split,
+			rows: empty ? [] : split === "section" ? text.sections.map((section) => ({
+				section: section.id,
+				title: section.title,
+				text: section.body,
+				count: section.count
+			})) : [{
+				title: text.sections.map((section) => section.title).join(", "),
+				text: text.text,
+				count: text.count
+			}],
 			count: text.count,
 			text: text.text,
 			sections: summary.sections.map((section) => ({
@@ -31593,12 +32019,84 @@ var NcStateSummaryService = class {
 			excludedGroups: [...summary.excludedGroups]
 		};
 	}
-	async collect(rule, nowMs) {
+	/**
+	* TEST the rule (D698, `nc.testRule`): the summary it would send NOW,
+	* ENQUEUED through the ordinary outbox under a test record id — split as the
+	* rule is. The per-camera mute is bypassed, as every rule test bypasses it,
+	* and a summary has no cooldown to bypass. Nothing to report sends nothing
+	* and SAYS so, per section.
+	*/
+	async test(rule) {
+		const nowMs = this.deps.now();
+		const summary = await this.collect(rule, nowMs, () => false);
+		const split = systemEventSummarySplitOf(rule);
+		const recordId = stateSummaryTestRecordId(rule.id, nowMs);
+		const sections = summary.sections.map((section) => ({
+			id: section.id,
+			status: section.status,
+			items: section.items.length,
+			...section.reason !== void 0 ? { reason: section.reason } : {}
+		}));
+		const meta = {
+			ruleId: rule.id,
+			rule: rule.name,
+			split,
+			bypassMute: true
+		};
+		if (isEmptyStateSummary(summary)) {
+			this.deps.logger.info("state summary TEST has nothing to report — not sent", { meta: {
+				...meta,
+				dropped: summary.dropped
+			} });
+			return {
+				recordId,
+				split,
+				nothingToReport: true,
+				sections,
+				rows: []
+			};
+		}
+		const subjects = stateSummarySubjects({
+			rule,
+			summary,
+			text: this.word(summary, nowMs),
+			window: {
+				startMs: nowMs,
+				endMs: nowMs
+			},
+			split,
+			recordBase: recordId
+		});
+		const rows = [];
+		for (const subject of subjects) {
+			const enqueued = await this.deps.enqueue(rule, subject, "synthetic");
+			const section = subject.systemEvent?.data["section"];
+			rows.push({
+				recordId: subject.recordId,
+				...typeof section === "string" ? { section } : {},
+				enqueued: enqueued.inserted,
+				targetIds: [...enqueued.targetIds]
+			});
+		}
+		this.deps.logger.info("state summary TEST enqueued", { meta: {
+			...meta,
+			items: summary.itemCount,
+			rows: rows.map((row) => `${row.recordId}:${String(row.enqueued)}`)
+		} });
+		return {
+			recordId,
+			split,
+			nothingToReport: false,
+			sections,
+			rows
+		};
+	}
+	async collect(rule, nowMs, isMuted = this.deps.isMuted) {
 		const nodes = await this.nodeView();
 		return collectStateSummary({
 			rule,
 			nowMs,
-			isMuted: this.deps.isMuted,
+			isMuted,
 			sources: stateSources({
 				alerts: this.deps.alerts,
 				liveness: this.deps.liveness,
@@ -31634,17 +32132,24 @@ var NcStateSummaryService = class {
 		});
 	}
 	async deliver(rule, summary, window) {
-		const subject = stateSummarySubject({
+		const text = this.word(summary, window.endMs);
+		const subjects = stateSummarySubjects({
 			rule,
 			summary,
-			text: this.word(summary, window.endMs),
-			window
+			text,
+			window,
+			split: systemEventSummarySplitOf(rule)
 		});
-		if (subject === null) {
-			this.deps.logger.warn("state summary rule has no system-event condition — not sent", { meta: { ruleId: rule.id } });
+		if (subjects.length === 0) {
+			this.deps.logger.warn("state summary produced no row — not sent", { meta: {
+				ruleId: rule.id,
+				sections: text.sections.length
+			} });
 			return 0;
 		}
-		return this.deps.enqueue(rule, subject);
+		let inserted = 0;
+		for (const subject of subjects) inserted += (await this.deps.enqueue(rule, subject, "system")).inserted;
+		return inserted;
 	}
 };
 //#endregion
@@ -33370,7 +33875,7 @@ var NotificationCenter = class NotificationCenter {
 			livenessHoldoffMs: deps.livenessHoldoffMs ?? DEVICE_LIVENESS_HOLDOFF_MS,
 			isMuted: (deviceId) => this.deviceMutes.isMuted(deviceId),
 			texts: () => this.texts,
-			enqueue: (rule, subject) => this.enqueueStateSummary(rule, subject)
+			enqueue: (rule, subject, origin) => this.enqueueStateSummary(rule, subject, origin)
 		});
 		this.confirmGate = deps.generateVision !== void 0 ? new NcConfirmGate({
 			logger: this.logger.child("confirm"),
@@ -35911,30 +36416,42 @@ var NotificationCenter = class NotificationCenter {
 		await this.enqueuePickerTargets(event, reached, outcomes);
 		return report({ candidates: candidates.length });
 	}
+	/** TEST a state-summary rule (D698, `nc.testRule`) — see `NcStateSummaryService.test`. */
+	testStateSummary(rule) {
+		return this.stateSummary.test(rule);
+	}
 	/**
-	* Enqueue ONE state summary (D647) through the rule's ordinary rows: its
+	* Enqueue ONE state summary row (D647) through the rule's ordinary rows: its
 	* targets, its users (admins only — the row files under the system device),
 	* its template, and the drain's snooze gate and retries. The record id is
-	* the dedup key, so a window is enqueued once whatever the restarts.
+	* the dedup key, so a window — or each section of it (D698) — is enqueued
+	* once whatever the restarts. A TEST's rows carry the `synthetic` origin, so
+	* they are marked as a test exactly like every other rule test's.
 	*/
-	async enqueueStateSummary(rule, subject) {
-		const appended = withSummaryBody(rule);
+	async enqueueStateSummary(rule, subject, origin) {
+		const appended = withSummaryBody(rule, stateSummarySectionOf(subject));
 		if (appended !== null) this.logger.warn("state summary rule body names no summary content — {{summaryText}} appended", { meta: {
 			ruleId: rule.id,
 			rule: rule.name
 		} });
 		const sent = appended ?? rule;
 		const userTargets = await this.resolveUserTargets(sent, subject.deviceId);
-		const entries = this.buildEntries(sent, subject, "system-event", ["systemEvent"], userTargets, "system");
+		const entries = this.buildEntries(sent, subject, "system-event", ["systemEvent"], userTargets, origin);
 		if (entries.length === 0) {
 			this.logger.warn("state summary reached NO target — its users are not admins, and it has no targets", { meta: {
 				ruleId: rule.id,
 				rule: rule.name,
 				targetUsers: rule.targetUsers ?? []
 			} });
-			return 0;
+			return {
+				inserted: 0,
+				targetIds: []
+			};
 		}
-		return this.outbox.enqueue(entries);
+		return {
+			inserted: await this.outbox.enqueue(entries),
+			targetIds: entries.map((entry) => entry.targetId)
+		};
 	}
 	/**
 	* The rules a trigger may fire, which is `listEnabled(delivery)` plus and
@@ -36648,9 +37165,11 @@ var NotificationCenter = class NotificationCenter {
 	*
 	* A seed is INFO and a repeat is DEBUG on purpose: seeding happens once per
 	* subject per lifetime of the ledger, and it is exactly what an operator
-	* reading the logs after a restart needs to see ("it recorded them, it did
-	* not announce them"). A no-flip is ordinary bus chatter — two categories
-	* describing one edge — and would be noise at info.
+	* reading the logs after a restart needs to see ("it did not announce
+	* them"). A seed heard BEFORE the boot load is provisional (D698): the load
+	* keeps the stored row when it holds the same state, and its `boot window
+	* settled` line says how many it kept and wrote. A no-flip is ordinary bus
+	* chatter — two categories describing one edge — and would be noise at info.
 	*/
 	reportLivenessDrop(incoming, verdict) {
 		const dropped = discardedLivenessEvent(incoming, verdict);
@@ -88133,6 +88652,18 @@ function isRecord(x) {
 }
 //#endregion
 //#region src/pipeline-analytics/store/track-alias-store.ts
+/**
+* The alias collection.
+*
+* @durable class=ledger owner=pipeline-analytics
+*   write="one row per fused piece (D683): aliasId = the absorbed provisional
+*     id, trackId = its survivor; rewritten when the survivor is itself
+*     absorbed by a later fusion"
+*   retention="TRACK-OWNED by its survivor through the declared `trackId`
+*     column: aliases leave with the survivor in the retention cascade, and
+*     widen that cascade (`expandLeafIds`) to rows still keyed by an
+*     absorbed id"
+*/
 var TRACK_ALIASES_COLLECTION = "pipeline-analytics:track-aliases";
 var TRACK_ALIAS_COLUMNS = [
 	{
@@ -88315,6 +88846,20 @@ var TrackAliasStore = class {
 			dropped: 0
 		}];
 	}
+	/**
+	* The orphan audit's reclaim of ONE alias row: the row AND the `recent`
+	* entry that would otherwise keep resolving it for up to an hour. `true`
+	* only when a row was actually deleted. (`misses` needs nothing: a deleted
+	* alias IS a non-alias, which is what a miss records.)
+	*/
+	async deleteAlias(aliasId) {
+		const { deleted } = await this.store.deleteWhere.mutate({
+			collection: TRACK_ALIASES_COLLECTION,
+			filter: { where: { id: aliasId } }
+		});
+		this.recent.delete(aliasId);
+		return deleted > 0;
+	}
 	async deleteByTracks(trackIds) {
 		const { deleted } = await this.store.deleteWhere.mutate({
 			collection: TRACK_ALIASES_COLLECTION,
@@ -89241,7 +89786,8 @@ async function auditScope(scope, deps, limits, cursor) {
 		stoppedBy,
 		nextCursor: offset
 	} });
-	if (limits.mode === "reclaim" && tally.orphans > 0 && tally.bytesReclaimed === 0) deps.logger.warn("orphan audit: reclaim pass freed no bytes against a standing backlog", { meta: {
+	const freedNothing = scope.sizeField === null ? tally.reclaimed === 0 : tally.bytesReclaimed === 0;
+	if (limits.mode === "reclaim" && tally.orphans > 0 && freedNothing) deps.logger.warn("orphan audit: reclaim pass freed no bytes against a standing backlog", { meta: {
 		collection: scope.collection,
 		shard: scope.shard?.value ?? null,
 		orphans: tally.orphans,
@@ -89355,6 +89901,40 @@ var ORPHAN_AUDIT_DEFAULTS = {
 	pageSize: OrphanAuditPageSizeSchema.parse(void 0)
 };
 var RAW_DELETE_COLLECTIONS = new Set(["pipeline-analytics:object-events", "pipeline-analytics:plates"]);
+/**
+* The `deleteRow` port: ONE row by its primary key `id` (what every
+* raw-delete collection above declares), answering whether a row went.
+*
+* Through `deleteWhere`, because it is the delete that SAYS: `delete`'s output
+* is `z.void()`, and reading it as `!== undefined` answered `false` for every
+* row it really deleted — the audit counted every plates/object-events reclaim
+* as "found nothing", and the per-scope reclaim ceiling never tripped.
+*/
+function settingsRowDeleter(store) {
+	return async (collection, key) => {
+		const { deleted } = await store.deleteWhere.mutate({
+			collection,
+			filter: { where: { id: key } }
+		});
+		return deleted > 0;
+	};
+}
+/**
+* The `deleteRow` port AS PRODUCTION WIRES IT: {@link settingsRowDeleter} over
+* a store that may not be bound yet. Unbound THROWS — the engine counts that as
+* `reclaimFailed` and keeps the row — rather than answering "nothing deleted",
+* which is indistinguishable from a row already gone. A named factory so the
+* wiring itself is under test (D695 T7 review M1: the inline wiring could be
+* reverted to the original bug with every spec green);
+* `scripts/check-orphan-reclaimers.ts` checks `index.ts` uses it.
+*/
+function settingsRowDeleterOf(getStore) {
+	return async (collection, key) => {
+		const store = getStore();
+		if (store === null) throw new Error("orphan audit: settings store not bound");
+		return await settingsRowDeleter(store)(collection, key);
+	};
+}
 function buildOrphanReclaimer(ports) {
 	return async (collection, key) => {
 		if (collection === MEDIA_COLLECTION) {
@@ -89378,6 +89958,10 @@ function buildOrphanReclaimer(ports) {
 				bytes: null
 			};
 		}
+		if (collection === TRACK_ALIASES_COLLECTION) return {
+			rows: await ports.deleteTrackAlias(key) ? 1 : 0,
+			bytes: null
+		};
 		if (RAW_DELETE_COLLECTIONS.has(collection)) return {
 			rows: await ports.deleteRow(collection, key) ? 1 : 0,
 			bytes: null
@@ -99747,6 +100331,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 			},
 			listTrackGroups: (query) => center.listTrackGroups(query),
 			injectTestEvent: (input) => center.injectTestEvent(input, { getSnapshot: (deviceId) => api.snapshot.getSnapshot.query({ deviceId }) }),
+			testStateSummary: (rule) => center.testStateSummary(rule),
 			timelapse: {
 				store: center.timelapseStore,
 				getRecordingConfig: (deviceId) => api.recordingArchive.getDeviceConfig.query({ deviceId }).catch(() => null),
@@ -107505,10 +108090,12 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 							bytes: count.bytes
 						};
 					},
-					deleteRow: async (collection, key) => await this.settingsStore?.delete.mutate({
-						collection,
-						key
-					}) !== void 0,
+					deleteTrackAlias: async (aliasId) => {
+						const aliasStore = this.trackAliasStore;
+						if (aliasStore === null) throw new Error("track alias store not bound");
+						return await aliasStore.deleteAlias(aliasId);
+					},
+					deleteRow: settingsRowDeleterOf(() => this.settingsStore),
 					logger: this.ctx.logger
 				}),
 				now: () => Date.now(),