@camstack/addon-post-analysis 1.2.65 → 1.2.66

package/dist/{dist-DTClXZLm.js → dist-DKsqvmSl.js}

@@ -8001,6 +8001,21 @@ var StorageLocationSchema = object({
 	nodeId: string().optional(),
 	isDefault: boolean().default(false),
 	isSystem: boolean().default(false),
+	/**
+	* Operator opt-in: whether consumers that BALANCE across several locations
+	* of a type may write here. Recordings reads it today; event media and
+	* backups are the next consumers, which is why the flag lives on the
+	* location rather than in any one addon's store — nothing has to be
+	* extended to add the next consumer.
+	*
+	* OPTIONAL, and ABSENT MEANS ACTIVE. Every location persisted before the
+	* flag existed reads back with no flag and keeps working exactly as before;
+	* that is the whole compat story, and it is why no migration ships with it.
+	* A newly CREATED sibling is stamped `false` by the orchestrator (creating a
+	* disk must not silently start writing to it); the default of a type is
+	* always stamped `true`.
+	*/
+	enabled: boolean().optional(),
 	/** COMPUTED at read time by the orchestrator (statfs of the backing volume
 	*  for node-local locations it can reach) — never persisted, absent when the
 	*  volume is remote/unreachable. The single capacity truth every UI reads. */
@@ -12540,7 +12555,8 @@ var embeddingEncoderCapability = {
 };
 /**
 * filesystem-browse — per-node capability for browsing the node's local
-* filesystem, sandboxed to operator-configured allowed roots. Used by the
+* filesystem. Reads are unconfined (whole filesystem, from `/` down); WRITES
+* are sandboxed to operator-configured allowed roots (D115). Used by the
 * admin "Add filesystem location" flow to pick a node + path. `mode:'per-node'`
 * (one provider per node); the hub calls it with `{nodeId}` so the codegen
 * routes to that exact node (default `nodeIdMode:'routing'`).
@@ -25999,7 +26015,7 @@ method(object({
 	auth: "admin"
 });
 /**
-* `recordingExport` cap — render a footage time range into a single downloadable
+* `recording-export` cap — render a footage time range into a single downloadable
 * MP4 (regular / accelerated / decelerated / timelapse, ± audio), kept for a
 * bounded lifetime with a durable history, auto-expiry, and optional
 * delete-after-download.
@@ -33023,43 +33039,43 @@ Object.freeze({
 		access: "create"
 	},
 	"recordingExport.cancelExport": {
-		capName: "recordingExport",
+		capName: "recording-export",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
 	"recordingExport.createExport": {
-		capName: "recordingExport",
+		capName: "recording-export",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
 	"recordingExport.deleteExport": {
-		capName: "recordingExport",
+		capName: "recording-export",
 		capScope: "system",
 		addonId: null,
 		access: "delete"
 	},
 	"recordingExport.getDownloadUrl": {
-		capName: "recordingExport",
+		capName: "recording-export",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
 	"recordingExport.getExport": {
-		capName: "recordingExport",
+		capName: "recording-export",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
 	"recordingExport.listExports": {
-		capName: "recordingExport",
+		capName: "recording-export",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
 	"recordingExport.readExportBytes": {
-		capName: "recordingExport",
+		capName: "recording-export",
 		capScope: "system",
 		addonId: null,
 		access: "view"

package/dist/{dist-4dhFDogy.mjs → dist-DPzTTt9R.mjs}

@@ -7970,6 +7970,21 @@ var StorageLocationSchema = object({
 	nodeId: string().optional(),
 	isDefault: boolean().default(false),
 	isSystem: boolean().default(false),
+	/**
+	* Operator opt-in: whether consumers that BALANCE across several locations
+	* of a type may write here. Recordings reads it today; event media and
+	* backups are the next consumers, which is why the flag lives on the
+	* location rather than in any one addon's store — nothing has to be
+	* extended to add the next consumer.
+	*
+	* OPTIONAL, and ABSENT MEANS ACTIVE. Every location persisted before the
+	* flag existed reads back with no flag and keeps working exactly as before;
+	* that is the whole compat story, and it is why no migration ships with it.
+	* A newly CREATED sibling is stamped `false` by the orchestrator (creating a
+	* disk must not silently start writing to it); the default of a type is
+	* always stamped `true`.
+	*/
+	enabled: boolean().optional(),
 	/** COMPUTED at read time by the orchestrator (statfs of the backing volume
 	*  for node-local locations it can reach) — never persisted, absent when the
 	*  volume is remote/unreachable. The single capacity truth every UI reads. */
@@ -12509,7 +12524,8 @@ var embeddingEncoderCapability = {
 };
 /**
 * filesystem-browse — per-node capability for browsing the node's local
-* filesystem, sandboxed to operator-configured allowed roots. Used by the
+* filesystem. Reads are unconfined (whole filesystem, from `/` down); WRITES
+* are sandboxed to operator-configured allowed roots (D115). Used by the
 * admin "Add filesystem location" flow to pick a node + path. `mode:'per-node'`
 * (one provider per node); the hub calls it with `{nodeId}` so the codegen
 * routes to that exact node (default `nodeIdMode:'routing'`).
@@ -25968,7 +25984,7 @@ method(object({
 	auth: "admin"
 });
 /**
-* `recordingExport` cap — render a footage time range into a single downloadable
+* `recording-export` cap — render a footage time range into a single downloadable
 * MP4 (regular / accelerated / decelerated / timelapse, ± audio), kept for a
 * bounded lifetime with a durable history, auto-expiry, and optional
 * delete-after-download.
@@ -32992,43 +33008,43 @@ Object.freeze({
 		access: "create"
 	},
 	"recordingExport.cancelExport": {
-		capName: "recordingExport",
+		capName: "recording-export",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
 	"recordingExport.createExport": {
-		capName: "recordingExport",
+		capName: "recording-export",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
 	"recordingExport.deleteExport": {
-		capName: "recordingExport",
+		capName: "recording-export",
 		capScope: "system",
 		addonId: null,
 		access: "delete"
 	},
 	"recordingExport.getDownloadUrl": {
-		capName: "recordingExport",
+		capName: "recording-export",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
 	"recordingExport.getExport": {
-		capName: "recordingExport",
+		capName: "recording-export",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
 	"recordingExport.listExports": {
-		capName: "recordingExport",
+		capName: "recording-export",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
 	"recordingExport.readExportBytes": {
-		capName: "recordingExport",
+		capName: "recording-export",
 		capScope: "system",
 		addonId: null,
 		access: "view"

package/dist/embedding-encoder/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-DTClXZLm.js");
+const require_dist = require("../dist-DKsqvmSl.js");
 let node_fs = require("node:fs");
 let node_fs$1 = require_dist.__toESM(node_fs, 1);
 node_fs = require_dist.__toESM(node_fs);

package/dist/embedding-encoder/index.mjs

@@ -1,4 +1,4 @@
-import { I as hfModelUrl, N as embeddingEncoderCapability, Y as BaseAddon } from "../dist-4dhFDogy.mjs";
+import { I as hfModelUrl, N as embeddingEncoderCapability, Y as BaseAddon } from "../dist-DPzTTt9R.mjs";
 import { createRequire } from "node:module";
 import * as fs from "node:fs";
 import "node:fs";

package/dist/pipeline-analytics/{_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-Ck9Z2cZR.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-BdNH8u64.mjs}

@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.61",
+		version: "1.2.63",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_analytics_widgets",

package/dist/pipeline-analytics/{hostInit-DvCGVFX8.mjs → hostInit-D8a3hjwW.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.2.61",
+				version: "1.2.63",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/pipeline-analytics/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-DTClXZLm.js");
+const require_dist = require("../dist-DKsqvmSl.js");
 let node_fs = require("node:fs");
 node_fs = require_dist.__toESM(node_fs, 1);
 let node_path = require("node:path");
@@ -5346,8 +5346,20 @@ function applyTemplatePatch(merged, template) {
 	const { template: _cleared, ...withoutTemplate } = merged;
 	return withoutTemplate;
 }
+/** Narrowing guard — the persisted `rule` column is `unknown` until parsed. */
+function isRecord$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
 var TimelapseStore = class {
 	byId = /* @__PURE__ */ new Map();
+	/**
+	* Birth stamps synthesised for LEGACY rows (see {@link withCreatedAt}), kept
+	* so a repeated `load()` re-uses the FIRST one. Without it the synthesised
+	* `createdAt` would advance to "now" on every refresh, and the scheduler's
+	* eligibility floor — which is `max(stamp, createdAt)` — would creep past
+	* every window such a rule was ever offered, silently producing nothing.
+	*/
+	synthesisedCreatedAt = /* @__PURE__ */ new Map();
 	store;
 	logger;
 	now;
@@ -5379,8 +5391,11 @@ var TimelapseStore = class {
 			});
 			this.byId.clear();
 			let skipped = 0;
+			let synthesised = 0;
 			for (const row of rows) {
-				const parsed = require_dist.TimelapseRuleSchema.safeParse(row.data["rule"]);
+				const raw = this.withCreatedAt(row.id, row.data["rule"]);
+				if (raw !== row.data["rule"]) synthesised += 1;
+				const parsed = require_dist.TimelapseRuleSchema.safeParse(raw);
 				if (!parsed.success) {
 					skipped += 1;
 					continue;
@@ -5389,12 +5404,40 @@ var TimelapseStore = class {
 			}
 			this.logger.debug("timelapse rules loaded", { meta: {
 				rules: this.byId.size,
-				...skipped > 0 ? { skippedInvalid: skipped } : {}
+				...skipped > 0 ? { skippedInvalid: skipped } : {},
+				...synthesised > 0 ? { synthesisedCreatedAt: synthesised } : {}
 			} });
 		} catch (err) {
 			this.logger.warn("timelapse rules load failed", { meta: { error: String(err) } });
 		}
 	}
+	/**
+	* Give a persisted blob a `createdAt` if it has none, WITHOUT persisting
+	* anything: the rule reads as born at this load.
+	*
+	* `createdAt` has always been required by `TimelapseRuleSchema`, so a row
+	* without one is a pre-schema artefact — and before this it was dropped
+	* outright at load (a silently vanished rule). Reading it as "born now" is
+	* the conservative choice in BOTH directions that matter: the rule survives,
+	* and the scheduler's eligibility floor stops it back-filling a window that
+	* closed years before anyone looked at it. The cost is one skipped window if
+	* a legacy rule is loaded between a close and its settle — a bounded miss,
+	* against an unbounded retry of a window no footage can satisfy.
+	*
+	* The synthesised value is remembered per rule id so a later refresh does not
+	* move the floor, and the first `update`/`markGenerated` writes it through —
+	* after which the row is no longer legacy.
+	*/
+	withCreatedAt(rowId, raw) {
+		if (!isRecord$1(raw)) return raw;
+		if (typeof raw["createdAt"] === "number") return raw;
+		const stamped = this.synthesisedCreatedAt.get(rowId) ?? this.now();
+		this.synthesisedCreatedAt.set(rowId, stamped);
+		return {
+			...raw,
+			createdAt: stamped
+		};
+	}
 	/** Every rule, newest-first (admin path). */
 	list() {
 		return [...this.byId.values()].sort((a, b) => b.updatedAt - a.updatedAt);
@@ -6027,6 +6070,35 @@ function findLastClosedWindow(input) {
 	};
 	return null;
 }
+/**
+* The earliest window CLOSE a (rule, device) pair may ever be offered.
+*
+* `max(this device's last generation, the rule's birth)`:
+*  - the per-device stamp is the re-generation guard — a window already
+*    produced for THIS camera is done (and a sibling camera's success says
+*    nothing about it, hence `readTimelapseGeneratedAt` and not the rule-wide
+*    field);
+*  - `createdAt` is what stops a brand-new rule mining the past. Without it an
+*    unstamped pair is indistinguishable from one the hub was down for, and
+*    the back-fill happily reaches back a full lookback for footage no rule was
+*    ever recording against.
+*
+* The comparison is against the window's CLOSE, matching the stamp guard: a
+* rule created mid-window still gets that window (its footage exists), a rule
+* created after the close never does.
+*
+* RULE-LEVEL, deliberately. `TimelapseRule.deviceIds` is a plain array that a
+* patch replaces wholesale, so there is no per-device add time to floor
+* against; a camera added to an old rule may therefore be offered the one
+* window that closed before it joined. That over-produces at most a single
+* video, whereas the defect this function exists to stop is unbounded — an
+* every-minute retry of a window nothing can satisfy. If a per-device add time
+* is ever persisted, raise the floor to `max(…, addedAt)` here and nowhere
+* else.
+*/
+function timelapseEligibilityFloor(rule, deviceId) {
+	return Math.max(require_dist.readTimelapseGeneratedAt(rule, deviceId), rule.createdAt);
+}
 var TimelapseScheduler = class {
 	deps;
 	timer = null;
@@ -6064,6 +6136,7 @@ var TimelapseScheduler = class {
 			produced: 0,
 			waiting: 0,
 			alreadyDone: 0,
+			beforeFloor: 0,
 			failed: 0,
 			idle: 0
 		};
@@ -6072,6 +6145,7 @@ var TimelapseScheduler = class {
 			produced: 0,
 			waiting: 0,
 			alreadyDone: 0,
+			beforeFloor: 0,
 			failed: 0,
 			idle: 0
 		};
@@ -6096,6 +6170,19 @@ var TimelapseScheduler = class {
 						report.alreadyDone += 1;
 						continue;
 					}
+					if (timelapseEligibilityFloor(rule, deviceId) >= window.endMs) {
+						report.beforeFloor += 1;
+						this.deps.logger.debug("timelapse window predates the rule — not attempted", {
+							tags: { deviceId },
+							meta: {
+								ruleId: rule.id,
+								windowStart: window.startMs,
+								windowEnd: window.endMs,
+								createdAt: rule.createdAt
+							}
+						});
+						continue;
+					}
 					if ((await this.produce(rule, deviceId, window, { stamp: true })).produced > 0) report.produced += 1;
 					else report.failed += 1;
 				}
@@ -6113,6 +6200,11 @@ var TimelapseScheduler = class {
 	* test that stops short of the notifier does not test the thing that breaks.
 	* It deliberately does NOT stamp: pressing Test at noon must not cancel
 	* tonight's scheduled run.
+	*
+	* It also ignores the eligibility floor. The floor exists to stop an
+	* UNATTENDED loop mining the past; an operator who presses Test on a rule
+	* created an hour ago is asking exactly that question, and gets the honest
+	* answer (`no footage …`) once, not every minute.
 	*/
 	async runNow(input) {
 		const rule = this.deps.store.get(input.ruleId);

package/dist/pipeline-analytics/index.mjs

@@ -1,4 +1,4 @@
-import { $ as isDeviceScopedCap, A as customAction, B as pipelineAnalyticsCapability, C as TimelapseRuleSchema, D as audioMetricsCapability, E as alarmPanelCapability, F as faceGalleryCapability, G as vectorDimFromBase64, H as readDeviceStateFrom, J as errMsg, K as videoclipsCapability, L as isScheduleActive, M as deriveRecordingMode, O as buildEventKindDescriptor, P as encodeVectorBase64, Q as hydrateSchema, R as kebabToCamel, S as TimelapseRulePatchSchema, T as addonWidgetsSourceCapability, U as readTimelapseGeneratedAt, V as plateGalleryCapability, W as subKindsOf, X as DeviceType, Y as BaseAddon, Z as createEvent, _ as NcTaxonomySchema, a as EVENT_PAD_MS, at as literal, b as RetrainStatusSchema, c as NC_CONDITION_CATALOG, ct as record, d as NcRuleInputSchema, dt as EventCategory, et as nodePin, f as NcRulePatchSchema, g as NcSnoozeSuppressedSchema, h as NcSnoozeSchema, i as EVENT_KIND_BY_CAP, it as boolean, j as defineCustomActions, k as cosineSimilarity, l as NC_TAXONOMY, lt as string, m as NcSnoozeInputSchema, n as DEFAULT_EVENT_COLOR, nt as _enum, o as LabelAttributionSchema, ot as number, p as NcRuleSchema, q as zoneAnalyticsCapability, r as DeclaredDevices, rt as array, s as MACRO_LABELS, st as object, t as BaseDevice, tt as sleep, u as NcConditionDescriptorSchema, ut as unknown, v as OpsLogEntrySchema, w as TrackSourceSchema, x as TimelapseRuleInputSchema, y as RECORDING_EXPORT_MAX_READ_BYTES, z as notificationRulesCapability } from "../dist-4dhFDogy.mjs";
+import { $ as isDeviceScopedCap, A as customAction, B as pipelineAnalyticsCapability, C as TimelapseRuleSchema, D as audioMetricsCapability, E as alarmPanelCapability, F as faceGalleryCapability, G as vectorDimFromBase64, H as readDeviceStateFrom, J as errMsg, K as videoclipsCapability, L as isScheduleActive, M as deriveRecordingMode, O as buildEventKindDescriptor, P as encodeVectorBase64, Q as hydrateSchema, R as kebabToCamel, S as TimelapseRulePatchSchema, T as addonWidgetsSourceCapability, U as readTimelapseGeneratedAt, V as plateGalleryCapability, W as subKindsOf, X as DeviceType, Y as BaseAddon, Z as createEvent, _ as NcTaxonomySchema, a as EVENT_PAD_MS, at as literal, b as RetrainStatusSchema, c as NC_CONDITION_CATALOG, ct as record, d as NcRuleInputSchema, dt as EventCategory, et as nodePin, f as NcRulePatchSchema, g as NcSnoozeSuppressedSchema, h as NcSnoozeSchema, i as EVENT_KIND_BY_CAP, it as boolean, j as defineCustomActions, k as cosineSimilarity, l as NC_TAXONOMY, lt as string, m as NcSnoozeInputSchema, n as DEFAULT_EVENT_COLOR, nt as _enum, o as LabelAttributionSchema, ot as number, p as NcRuleSchema, q as zoneAnalyticsCapability, r as DeclaredDevices, rt as array, s as MACRO_LABELS, st as object, t as BaseDevice, tt as sleep, u as NcConditionDescriptorSchema, ut as unknown, v as OpsLogEntrySchema, w as TrackSourceSchema, x as TimelapseRuleInputSchema, y as RECORDING_EXPORT_MAX_READ_BYTES, z as notificationRulesCapability } from "../dist-DPzTTt9R.mjs";
 import { t as __exportAll } from "../embedding-encoder/index.mjs";
 import * as fs from "node:fs";
 import { promises } from "node:fs";
@@ -5333,8 +5333,20 @@ function applyTemplatePatch(merged, template) {
 	const { template: _cleared, ...withoutTemplate } = merged;
 	return withoutTemplate;
 }
+/** Narrowing guard — the persisted `rule` column is `unknown` until parsed. */
+function isRecord$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
 var TimelapseStore = class {
 	byId = /* @__PURE__ */ new Map();
+	/**
+	* Birth stamps synthesised for LEGACY rows (see {@link withCreatedAt}), kept
+	* so a repeated `load()` re-uses the FIRST one. Without it the synthesised
+	* `createdAt` would advance to "now" on every refresh, and the scheduler's
+	* eligibility floor — which is `max(stamp, createdAt)` — would creep past
+	* every window such a rule was ever offered, silently producing nothing.
+	*/
+	synthesisedCreatedAt = /* @__PURE__ */ new Map();
 	store;
 	logger;
 	now;
@@ -5366,8 +5378,11 @@ var TimelapseStore = class {
 			});
 			this.byId.clear();
 			let skipped = 0;
+			let synthesised = 0;
 			for (const row of rows) {
-				const parsed = TimelapseRuleSchema.safeParse(row.data["rule"]);
+				const raw = this.withCreatedAt(row.id, row.data["rule"]);
+				if (raw !== row.data["rule"]) synthesised += 1;
+				const parsed = TimelapseRuleSchema.safeParse(raw);
 				if (!parsed.success) {
 					skipped += 1;
 					continue;
@@ -5376,12 +5391,40 @@ var TimelapseStore = class {
 			}
 			this.logger.debug("timelapse rules loaded", { meta: {
 				rules: this.byId.size,
-				...skipped > 0 ? { skippedInvalid: skipped } : {}
+				...skipped > 0 ? { skippedInvalid: skipped } : {},
+				...synthesised > 0 ? { synthesisedCreatedAt: synthesised } : {}
 			} });
 		} catch (err) {
 			this.logger.warn("timelapse rules load failed", { meta: { error: String(err) } });
 		}
 	}
+	/**
+	* Give a persisted blob a `createdAt` if it has none, WITHOUT persisting
+	* anything: the rule reads as born at this load.
+	*
+	* `createdAt` has always been required by `TimelapseRuleSchema`, so a row
+	* without one is a pre-schema artefact — and before this it was dropped
+	* outright at load (a silently vanished rule). Reading it as "born now" is
+	* the conservative choice in BOTH directions that matter: the rule survives,
+	* and the scheduler's eligibility floor stops it back-filling a window that
+	* closed years before anyone looked at it. The cost is one skipped window if
+	* a legacy rule is loaded between a close and its settle — a bounded miss,
+	* against an unbounded retry of a window no footage can satisfy.
+	*
+	* The synthesised value is remembered per rule id so a later refresh does not
+	* move the floor, and the first `update`/`markGenerated` writes it through —
+	* after which the row is no longer legacy.
+	*/
+	withCreatedAt(rowId, raw) {
+		if (!isRecord$1(raw)) return raw;
+		if (typeof raw["createdAt"] === "number") return raw;
+		const stamped = this.synthesisedCreatedAt.get(rowId) ?? this.now();
+		this.synthesisedCreatedAt.set(rowId, stamped);
+		return {
+			...raw,
+			createdAt: stamped
+		};
+	}
 	/** Every rule, newest-first (admin path). */
 	list() {
 		return [...this.byId.values()].sort((a, b) => b.updatedAt - a.updatedAt);
@@ -6014,6 +6057,35 @@ function findLastClosedWindow(input) {
 	};
 	return null;
 }
+/**
+* The earliest window CLOSE a (rule, device) pair may ever be offered.
+*
+* `max(this device's last generation, the rule's birth)`:
+*  - the per-device stamp is the re-generation guard — a window already
+*    produced for THIS camera is done (and a sibling camera's success says
+*    nothing about it, hence `readTimelapseGeneratedAt` and not the rule-wide
+*    field);
+*  - `createdAt` is what stops a brand-new rule mining the past. Without it an
+*    unstamped pair is indistinguishable from one the hub was down for, and
+*    the back-fill happily reaches back a full lookback for footage no rule was
+*    ever recording against.
+*
+* The comparison is against the window's CLOSE, matching the stamp guard: a
+* rule created mid-window still gets that window (its footage exists), a rule
+* created after the close never does.
+*
+* RULE-LEVEL, deliberately. `TimelapseRule.deviceIds` is a plain array that a
+* patch replaces wholesale, so there is no per-device add time to floor
+* against; a camera added to an old rule may therefore be offered the one
+* window that closed before it joined. That over-produces at most a single
+* video, whereas the defect this function exists to stop is unbounded — an
+* every-minute retry of a window nothing can satisfy. If a per-device add time
+* is ever persisted, raise the floor to `max(…, addedAt)` here and nowhere
+* else.
+*/
+function timelapseEligibilityFloor(rule, deviceId) {
+	return Math.max(readTimelapseGeneratedAt(rule, deviceId), rule.createdAt);
+}
 var TimelapseScheduler = class {
 	deps;
 	timer = null;
@@ -6051,6 +6123,7 @@ var TimelapseScheduler = class {
 			produced: 0,
 			waiting: 0,
 			alreadyDone: 0,
+			beforeFloor: 0,
 			failed: 0,
 			idle: 0
 		};
@@ -6059,6 +6132,7 @@ var TimelapseScheduler = class {
 			produced: 0,
 			waiting: 0,
 			alreadyDone: 0,
+			beforeFloor: 0,
 			failed: 0,
 			idle: 0
 		};
@@ -6083,6 +6157,19 @@ var TimelapseScheduler = class {
 						report.alreadyDone += 1;
 						continue;
 					}
+					if (timelapseEligibilityFloor(rule, deviceId) >= window.endMs) {
+						report.beforeFloor += 1;
+						this.deps.logger.debug("timelapse window predates the rule — not attempted", {
+							tags: { deviceId },
+							meta: {
+								ruleId: rule.id,
+								windowStart: window.startMs,
+								windowEnd: window.endMs,
+								createdAt: rule.createdAt
+							}
+						});
+						continue;
+					}
 					if ((await this.produce(rule, deviceId, window, { stamp: true })).produced > 0) report.produced += 1;
 					else report.failed += 1;
 				}
@@ -6100,6 +6187,11 @@ var TimelapseScheduler = class {
 	* test that stops short of the notifier does not test the thing that breaks.
 	* It deliberately does NOT stamp: pressing Test at noon must not cancel
 	* tonight's scheduled run.
+	*
+	* It also ignores the eligibility floor. The floor exists to stop an
+	* UNATTENDED loop mining the past; an operator who presses Test on a rule
+	* created an hour ago is asking exactly that question, and gets the honest
+	* answer (`no footage …`) once, not every minute.
 	*/
 	async runNow(input) {
 		const rule = this.deps.store.get(input.ruleId);

package/dist/pipeline-analytics/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-Ck9Z2cZR.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-BdNH8u64.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-post-analysis",
-  "version": "1.2.65",
+  "version": "1.2.66",
   "description": "Post-Analysis bundle — enrichment, embedding-encoder, pipeline-analytics. Multi-entry npm package shipping addons that consume pipeline output.",
   "keywords": [
     "camstack",