@camstack/system 1.2.111 → 1.2.113

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as EventCategory, v as addonPagesCapability, vt as errMsg, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { Gt as EventCategory, v as addonPagesCapability, vt as errMsg, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as EventCategory, b as addonWidgetsCapability, vt as errMsg, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { Gt as EventCategory, b as addonWidgetsCapability, vt as errMsg, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as EventCategory, Mt as createEvent, n as AlertSchema, vt as errMsg, x as alertsCapability, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { Gt as EventCategory, Mt as createEvent, n as AlertSchema, vt as errMsg, x as alertsCapability, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { C as backupCapability, Gt as EventCategory, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { C as backupCapability, Gt as EventCategory, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,4 +1,4 @@
-import { D as coreBlockAddonId, O as coreBlockIdFromAddonId, c as CoreBlockSchema, k as coreBlocksCapability, l as DeclaredDevices, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX, vt as errMsg, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { D as coreBlockAddonId, O as coreBlockIdFromAddonId, c as CoreBlockSchema, k as coreBlocksCapability, l as DeclaredDevices, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX, vt as errMsg, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-DCESas5O.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-CYDGGkyM.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { Ct as DeviceFeature, E as buildStreamParamsConfigSchema, F as deviceStatusCapability, Gt as EventCategory, Lt as isDeviceConfigCap, N as deviceManagerCapability, Ot as WELL_KNOWN_TAB_MAP, P as deviceStateCapability, R as enumerateItemArrayFields, Tt as DeviceType, Wt as sleep, a as CAP_NAMES_WITH_STATUS, at as runtimeStatePolicyFor, et as normalizeUnit, nt as parseStreamParamsFormPatch, p as STREAM_PROFILE_META, t as ALL_CAPABILITY_DEFINITIONS, u as DeviceStatusSchema, vt as errMsg, wt as DeviceRole, yt as BaseAddon, z as enumerateSchemaFields } from "../../dist-CW4Cims4.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-DGgOxOir.mjs";
+import { Ct as DeviceFeature, E as buildStreamParamsConfigSchema, F as deviceStatusCapability, Gt as EventCategory, Lt as isDeviceConfigCap, N as deviceManagerCapability, Ot as WELL_KNOWN_TAB_MAP, P as deviceStateCapability, R as enumerateItemArrayFields, Tt as DeviceType, Wt as sleep, a as CAP_NAMES_WITH_STATUS, at as runtimeStatePolicyFor, et as normalizeUnit, nt as parseStreamParamsFormPatch, p as STREAM_PROFILE_META, t as ALL_CAPABILITY_DEFINITIONS, u as DeviceStatusSchema, vt as errMsg, wt as DeviceRole, yt as BaseAddon, z as enumerateSchemaFields } from "../../dist-Duz_uJSQ.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-BtVT2f6O.mjs";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { G as isSameAddonId, Gt as EventCategory, I as doorbellCapability, Mt as createEvent, Tt as DeviceType, vt as errMsg, w as bareAddonId, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { G as isSameAddonId, Gt as EventCategory, I as doorbellCapability, Mt as createEvent, Tt as DeviceType, vt as errMsg, w as bareAddonId, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as EventCategory, Mt as createEvent, vt as errMsg, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { Gt as EventCategory, Mt as createEvent, vt as errMsg, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { S as authProviderCapability, _ as UserRecordSchema, ht as userManagementCapability, m as ScopedTokenSchema, r as ApiKeyRecordSchema, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { S as authProviderCapability, _ as UserRecordSchema, ht as userManagementCapability, m as ScopedTokenSchema, r as ApiKeyRecordSchema, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 //#region src/builtins/local-network/local-network.addon.ts

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as EventCategory, Y as localNetworkCapability, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { Gt as EventCategory, Y as localNetworkCapability, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 import * as os from "node:os";
 //#region src/builtins/local-network/local-network.addon.ts
 /**

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { $ as metricsProviderCapability, Gt as EventCategory, Mt as createEvent, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { $ as metricsProviderCapability, Gt as EventCategory, Mt as createEvent, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 import { execFile, execFileSync } from "node:child_process";
 import { promisify } from "node:util";
 import * as os from "node:os";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { Gt as EventCategory, L as enumerateInferenceDevices, Pt as emitReadiness, ct as scoreRuntimes, rt as platformProbeCapability, vt as errMsg, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { Gt as EventCategory, L as enumerateInferenceDevices, Pt as emitReadiness, ct as scoreRuntimes, rt as platformProbeCapability, vt as errMsg, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import * as os from "node:os";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as EventCategory, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { Gt as EventCategory, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -939,6 +939,24 @@ function pickWarmSnapshotBroker(ranked, devicePrefix) {
 //#endregion
 //#region src/builtins/snapshot/snapshot.addon.ts
 /**
+* States that make a dial pointless — the ladder is skipped entirely.
+*
+* `offline` is deliberately absent: a camera that is never probed can never be
+* observed to come back, and this layer's own capture is one of the two ways a
+* wrong `online:false` gets discovered (the other is the reachability poller
+* that set it).
+*/
+var CAPTURE_BLOCKING_REASONS = [
+	"disabled",
+	"sleeping",
+	"unreachable",
+	"waking"
+];
+/** True when this state must answer WITHOUT touching the camera. */
+function blocksCapture(reason) {
+	return CAPTURE_BLOCKING_REASONS.includes(reason);
+}
+/**
 * How long `getSnapshotLinks` waits for the capture it triggered before minting
 * the link over whatever frame it has.
 *
@@ -1681,7 +1699,7 @@ var SnapshotAddon = class SnapshotAddon extends require_dist.BaseAddon {
 			resolutionMeta.isBattery = isBatteryDevice;
 			delete resolutionMeta.stateReason;
 		}
-		if (state.reason !== void 0 && (!force || state.reason === "disabled" || state.reason === "unreachable" || state.reason === "waking")) {
+		if (state.reason !== void 0 && blocksCapture(state.reason) && (!force || state.reason !== "sleeping")) {
 			if (resolutionMeta) resolutionMeta.stateReason = state.reason;
 			log.debug("snapshot: camera state overrides raw cache", {
 				tags: { deviceId },
@@ -1709,7 +1727,8 @@ var SnapshotAddon = class SnapshotAddon extends require_dist.BaseAddon {
 					isBattery: isBatteryDevice
 				}
 			});
-			return hit ? hit.data : null;
+			if (!hit) return null;
+			return state.reason === "offline" ? await this.offlineImage(deviceId, deviceName, hit, resolutionMeta) : hit.data;
 		}
 		const flightKey = `${deviceId}:${effectiveStreamId ?? "auto"}`;
 		const flight = this.captureFlight.run(flightKey, () => this.captureFresh({
@@ -1722,16 +1741,19 @@ var SnapshotAddon = class SnapshotAddon extends require_dist.BaseAddon {
 		flight.catch(() => void 0);
 		const waitMs = !force && decision.staleFallback && hit !== void 0 ? Math.min(decision.waitMs, staleWaitCapMs) : decision.waitMs;
 		const raced = await raceForResult(flight, Math.min(Math.max(waitMs, minimumCaptureWaitMs), maximumCaptureWaitMs));
-		if (raced.settled) try {
-			const resolved = await this.resolveOutcome(raced.value, deviceId, hit, log);
-			if (resolved !== null) return resolved;
-			return meta?.online === false ? await this.courtesyImage(deviceId, "offline", deviceName) : null;
-		} catch (err) {
-			if (meta?.online === false) {
-				const courtesy = await this.courtesyImage(deviceId, "offline", deviceName);
-				if (courtesy !== null) return courtesy;
+		if (raced.settled) {
+			const captured = raced.value.ok && raced.value.image !== null;
+			try {
+				const resolved = await this.resolveOutcome(raced.value, deviceId, hit, log);
+				if (resolved !== null) return captured || state.reason !== "offline" ? resolved : await this.offlineImage(deviceId, deviceName, hit, resolutionMeta);
+				return state.reason === "offline" ? await this.offlineImage(deviceId, deviceName, void 0, resolutionMeta) : null;
+			} catch (err) {
+				if (state.reason === "offline") {
+					const stateFrame = await this.offlineImage(deviceId, deviceName, hit, resolutionMeta);
+					if (stateFrame !== null) return stateFrame;
+				}
+				throw err;
 			}
-			throw err;
 		}
 		if (decision.staleFallback && hit) {
 			if (prefs.snapshotDebug) log.debug("snapshot: SWR — returning stale frame; refresh continues in background", {
@@ -1741,11 +1763,11 @@ var SnapshotAddon = class SnapshotAddon extends require_dist.BaseAddon {
 					waitMs: decision.waitMs
 				}
 			});
-			return hit.data;
+			return state.reason === "offline" ? await this.offlineImage(deviceId, deviceName, hit, resolutionMeta) : hit.data;
 		}
-		if (meta?.online === false) {
-			const courtesy = await this.courtesyImage(deviceId, "offline", deviceName);
-			if (courtesy !== null) return courtesy;
+		if (state.reason === "offline") {
+			const stateFrame = await this.offlineImage(deviceId, deviceName, void 0, resolutionMeta);
+			if (stateFrame !== null) return stateFrame;
 		}
 		return null;
 	}
@@ -2104,7 +2126,12 @@ var SnapshotAddon = class SnapshotAddon extends require_dist.BaseAddon {
 				meta: { error: require_dist.errMsg(err) }
 			});
 		}
-		if (!(meta?.isBattery === true || batteryStatus !== null || waking)) return { isBattery: false };
+		const isBattery = meta?.isBattery === true || batteryStatus !== null || waking;
+		const unreachableVerdict = meta?.online === false ? {
+			isBattery,
+			reason: "offline"
+		} : null;
+		if (!isBattery) return unreachableVerdict ?? { isBattery: false };
 		if (waking) return {
 			isBattery: true,
 			reason: "waking"
@@ -2113,10 +2140,11 @@ var SnapshotAddon = class SnapshotAddon extends require_dist.BaseAddon {
 			status: batteryStatus,
 			nowMs: Date.now()
 		});
-		return presence === "awake" ? { isBattery: true } : {
+		if (presence !== "awake") return {
 			isBattery: true,
 			reason: presence
 		};
+		return unreachableVerdict ?? { isBattery: true };
 	}
 	isDeviceWaking(deviceId) {
 		const startedAt = this.wakingDevices.get(deviceId);
@@ -2299,6 +2327,32 @@ var SnapshotAddon = class SnapshotAddon extends require_dist.BaseAddon {
 		};
 	}
 	/**
+	* The answer for a camera the hub cannot reach: its last good frame, with
+	* `Offline` painted over it, and `offline` stamped on the response identity.
+	*
+	* Called only AFTER the ladder has run (offline is not in
+	* {@link CAPTURE_BLOCKING_REASONS}), so this dresses a frame that could not be
+	* refreshed — never one that just landed.
+	*
+	* The `stateReason` is set FIRST and unconditionally, because it is what a
+	* surface labels the tile from and what puts `offline` in the ETag: a client
+	* holding the live frame has to see a new identity the moment the camera
+	* drops, or it paints the unlabelled photograph until the camera comes back.
+	* A failed render therefore degrades to the raw frame rather than to nothing —
+	* the metadata still says offline, so the tile is still honest.
+	*/
+	async offlineImage(deviceId, deviceName, hit, resolutionMeta) {
+		if (resolutionMeta) resolutionMeta.stateReason = "offline";
+		this.ctx.logger.debug("snapshot: serving the offline treatment", {
+			tags: { deviceId },
+			meta: {
+				hasCache: hit !== void 0,
+				ageMs: hit ? Date.now() - hit.ts : null
+			}
+		});
+		return await this.stateImage(deviceId, "offline", deviceName, hit) ?? hit?.data ?? null;
+	}
+	/**
 	* Render a state-labelled answer. A cached real frame is the background, not
 	* the answer by itself; if it cannot be decoded, fall back to the generated
 	* courtesy background rather than leaking an unlabelled stale frame.

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Ct as DeviceFeature, Gt as EventCategory, M as deriveBatteryPresence, Rt as nodePin, T as batteryCapability, Tt as DeviceType, i as BatteryStatusSchema, mt as streamQualityLabel, ut as snapshotCapability, vt as errMsg, w as bareAddonId, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { Ct as DeviceFeature, Gt as EventCategory, M as deriveBatteryPresence, Rt as nodePin, T as batteryCapability, Tt as DeviceType, i as BatteryStatusSchema, mt as streamQualityLabel, ut as snapshotCapability, vt as errMsg, w as bareAddonId, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { signExpiringUrl, verifyExpiringUrl } from "@camstack/types/node";
@@ -933,6 +933,24 @@ function pickWarmSnapshotBroker(ranked, devicePrefix) {
 //#endregion
 //#region src/builtins/snapshot/snapshot.addon.ts
 /**
+* States that make a dial pointless — the ladder is skipped entirely.
+*
+* `offline` is deliberately absent: a camera that is never probed can never be
+* observed to come back, and this layer's own capture is one of the two ways a
+* wrong `online:false` gets discovered (the other is the reachability poller
+* that set it).
+*/
+var CAPTURE_BLOCKING_REASONS = [
+	"disabled",
+	"sleeping",
+	"unreachable",
+	"waking"
+];
+/** True when this state must answer WITHOUT touching the camera. */
+function blocksCapture(reason) {
+	return CAPTURE_BLOCKING_REASONS.includes(reason);
+}
+/**
 * How long `getSnapshotLinks` waits for the capture it triggered before minting
 * the link over whatever frame it has.
 *
@@ -1675,7 +1693,7 @@ var SnapshotAddon = class SnapshotAddon extends BaseAddon {
 			resolutionMeta.isBattery = isBatteryDevice;
 			delete resolutionMeta.stateReason;
 		}
-		if (state.reason !== void 0 && (!force || state.reason === "disabled" || state.reason === "unreachable" || state.reason === "waking")) {
+		if (state.reason !== void 0 && blocksCapture(state.reason) && (!force || state.reason !== "sleeping")) {
 			if (resolutionMeta) resolutionMeta.stateReason = state.reason;
 			log.debug("snapshot: camera state overrides raw cache", {
 				tags: { deviceId },
@@ -1703,7 +1721,8 @@ var SnapshotAddon = class SnapshotAddon extends BaseAddon {
 					isBattery: isBatteryDevice
 				}
 			});
-			return hit ? hit.data : null;
+			if (!hit) return null;
+			return state.reason === "offline" ? await this.offlineImage(deviceId, deviceName, hit, resolutionMeta) : hit.data;
 		}
 		const flightKey = `${deviceId}:${effectiveStreamId ?? "auto"}`;
 		const flight = this.captureFlight.run(flightKey, () => this.captureFresh({
@@ -1716,16 +1735,19 @@ var SnapshotAddon = class SnapshotAddon extends BaseAddon {
 		flight.catch(() => void 0);
 		const waitMs = !force && decision.staleFallback && hit !== void 0 ? Math.min(decision.waitMs, staleWaitCapMs) : decision.waitMs;
 		const raced = await raceForResult(flight, Math.min(Math.max(waitMs, minimumCaptureWaitMs), maximumCaptureWaitMs));
-		if (raced.settled) try {
-			const resolved = await this.resolveOutcome(raced.value, deviceId, hit, log);
-			if (resolved !== null) return resolved;
-			return meta?.online === false ? await this.courtesyImage(deviceId, "offline", deviceName) : null;
-		} catch (err) {
-			if (meta?.online === false) {
-				const courtesy = await this.courtesyImage(deviceId, "offline", deviceName);
-				if (courtesy !== null) return courtesy;
+		if (raced.settled) {
+			const captured = raced.value.ok && raced.value.image !== null;
+			try {
+				const resolved = await this.resolveOutcome(raced.value, deviceId, hit, log);
+				if (resolved !== null) return captured || state.reason !== "offline" ? resolved : await this.offlineImage(deviceId, deviceName, hit, resolutionMeta);
+				return state.reason === "offline" ? await this.offlineImage(deviceId, deviceName, void 0, resolutionMeta) : null;
+			} catch (err) {
+				if (state.reason === "offline") {
+					const stateFrame = await this.offlineImage(deviceId, deviceName, hit, resolutionMeta);
+					if (stateFrame !== null) return stateFrame;
+				}
+				throw err;
 			}
-			throw err;
 		}
 		if (decision.staleFallback && hit) {
 			if (prefs.snapshotDebug) log.debug("snapshot: SWR — returning stale frame; refresh continues in background", {
@@ -1735,11 +1757,11 @@ var SnapshotAddon = class SnapshotAddon extends BaseAddon {
 					waitMs: decision.waitMs
 				}
 			});
-			return hit.data;
+			return state.reason === "offline" ? await this.offlineImage(deviceId, deviceName, hit, resolutionMeta) : hit.data;
 		}
-		if (meta?.online === false) {
-			const courtesy = await this.courtesyImage(deviceId, "offline", deviceName);
-			if (courtesy !== null) return courtesy;
+		if (state.reason === "offline") {
+			const stateFrame = await this.offlineImage(deviceId, deviceName, void 0, resolutionMeta);
+			if (stateFrame !== null) return stateFrame;
 		}
 		return null;
 	}
@@ -2098,7 +2120,12 @@ var SnapshotAddon = class SnapshotAddon extends BaseAddon {
 				meta: { error: errMsg(err) }
 			});
 		}
-		if (!(meta?.isBattery === true || batteryStatus !== null || waking)) return { isBattery: false };
+		const isBattery = meta?.isBattery === true || batteryStatus !== null || waking;
+		const unreachableVerdict = meta?.online === false ? {
+			isBattery,
+			reason: "offline"
+		} : null;
+		if (!isBattery) return unreachableVerdict ?? { isBattery: false };
 		if (waking) return {
 			isBattery: true,
 			reason: "waking"
@@ -2107,10 +2134,11 @@ var SnapshotAddon = class SnapshotAddon extends BaseAddon {
 			status: batteryStatus,
 			nowMs: Date.now()
 		});
-		return presence === "awake" ? { isBattery: true } : {
+		if (presence !== "awake") return {
 			isBattery: true,
 			reason: presence
 		};
+		return unreachableVerdict ?? { isBattery: true };
 	}
 	isDeviceWaking(deviceId) {
 		const startedAt = this.wakingDevices.get(deviceId);
@@ -2293,6 +2321,32 @@ var SnapshotAddon = class SnapshotAddon extends BaseAddon {
 		};
 	}
 	/**
+	* The answer for a camera the hub cannot reach: its last good frame, with
+	* `Offline` painted over it, and `offline` stamped on the response identity.
+	*
+	* Called only AFTER the ladder has run (offline is not in
+	* {@link CAPTURE_BLOCKING_REASONS}), so this dresses a frame that could not be
+	* refreshed — never one that just landed.
+	*
+	* The `stateReason` is set FIRST and unconditionally, because it is what a
+	* surface labels the tile from and what puts `offline` in the ETag: a client
+	* holding the live frame has to see a new identity the moment the camera
+	* drops, or it paints the unlabelled photograph until the camera comes back.
+	* A failed render therefore degrades to the raw frame rather than to nothing —
+	* the metadata still says offline, so the tile is still honest.
+	*/
+	async offlineImage(deviceId, deviceName, hit, resolutionMeta) {
+		if (resolutionMeta) resolutionMeta.stateReason = "offline";
+		this.ctx.logger.debug("snapshot: serving the offline treatment", {
+			tags: { deviceId },
+			meta: {
+				hasCache: hit !== void 0,
+				ageMs: hit ? Date.now() - hit.ts : null
+			}
+		});
+		return await this.stateImage(deviceId, "offline", deviceName, hit) ?? hit?.data ?? null;
+	}
+	/**
 	* Render a state-labelled answer. A cached real frame is the background, not
 	* the answer by itself; if it cannot be decoded, fall back to the generated
 	* courtesy background rather than leaking an unlabelled stale frame.

package/dist/builtins/snapshot/snapshot.addon.d.ts

@@ -464,6 +464,22 @@ export declare class SnapshotAddon extends BaseAddon<SnapshotAddonConfig> {
     private courtesyFrame;
     /** A courtesy frame shaped as the cap's response, or null when unrenderable. */
     private courtesyImage;
+    /**
+     * The answer for a camera the hub cannot reach: its last good frame, with
+     * `Offline` painted over it, and `offline` stamped on the response identity.
+     *
+     * Called only AFTER the ladder has run (offline is not in
+     * {@link CAPTURE_BLOCKING_REASONS}), so this dresses a frame that could not be
+     * refreshed — never one that just landed.
+     *
+     * The `stateReason` is set FIRST and unconditionally, because it is what a
+     * surface labels the tile from and what puts `offline` in the ETag: a client
+     * holding the live frame has to see a new identity the moment the camera
+     * drops, or it paints the unlabelled photograph until the camera comes back.
+     * A failed render therefore degrades to the raw frame rather than to nothing —
+     * the metadata still says offline, so the tile is still honest.
+     */
+    private offlineImage;
     /**
      * Render a state-labelled answer. A cached real frame is the background, not
      * the answer by itself; if it cannot be decoded, fall back to the generated

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { V as filesystemBrowseCapability, pt as storageProviderCapability, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { V as filesystemBrowseCapability, pt as storageProviderCapability, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-DCESas5O.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-CYDGGkyM.js");
 let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
 let node_module = require("node:module");

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,5 +1,5 @@
-import { A as dataStoreProviderCapability, Bt as parseJsonUnknown, _t as vectorStoreCapability, f as RUNTIME_DEFAULTS, gt as vectorDimFromBase64, j as decodeVectorBase64, kt as asJsonObject, vt as errMsg, w as bareAddonId, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
-import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-DGgOxOir.mjs";
+import { A as dataStoreProviderCapability, Bt as parseJsonUnknown, _t as vectorStoreCapability, f as RUNTIME_DEFAULTS, gt as vectorDimFromBase64, j as decodeVectorBase64, kt as asJsonObject, vt as errMsg, w as bareAddonId, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
+import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-BtVT2f6O.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { statSync } from "node:fs";

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { dt as storageCapability, ft as storageMigrationCapability, g as StorageMigrationJobSchema, h as StorageLocationTypeSchema, lt as settingsStoreCapability, yt as BaseAddon, zt as parseJsonObject } from "../../dist-CW4Cims4.mjs";
+import { dt as storageCapability, ft as storageMigrationCapability, g as StorageMigrationJobSchema, h as StorageLocationTypeSchema, lt as settingsStoreCapability, yt as BaseAddon, zt as parseJsonObject } from "../../dist-Duz_uJSQ.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { It as hydrateSchema, vt as errMsg, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { It as hydrateSchema, vt as errMsg, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CQkr5Kw0.js");
+const require_dist = require("../../dist-B2CtwVW2.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-CW4Cims4.mjs";
+import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-Duz_uJSQ.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{dist-CQkr5Kw0.js → dist-B2CtwVW2.js}

@@ -3669,7 +3669,7 @@ var RecordingBandSchema = zod.z.object({
 	postBufferSec: zod.z.number().min(0).optional()
 });
 ({
-	preBufferSec: 10,
+	preBufferSec: 15,
 	postBufferSec: 30
 }).postBufferSec * 1e3;
 /**
@@ -14363,7 +14363,7 @@ var TrackEnvelopeSchema = zod.z.object({
 * `snapshots[]` references — megabytes across a page of tracks. `slim`
 * keeps every scalar the list surfaces actually render (ids, class(es),
 * label / audioLabels / importance enrichment, firstSeen/lastSeen, state,
-* zonesVisited, bestEventId, envelope, hasFace, hasRider) and returns `positions` /
+* zonesVisited, bestEventId, envelope, hasFace, hasEmbeddedFace, hasRider) and returns `positions` /
 * `snapshots` as EMPTY arrays — detail views re-fetch the full row via
 * `getTrack`. Mirrors the event-store `projection` convention
 * (`getObjectEvents` et al.).
@@ -14658,6 +14658,35 @@ var TrackSchema = zod.z.object({
 	*/
 	hasFace: zod.z.boolean().optional(),
 	/**
+	* This track has a face row IN THE GALLERY: a crop **and** an embedding — a
+	* face an operator could ASSIGN to an identity.
+	*
+	* The STRICT twin of {@link hasFace}, and the pair only earns its keep
+	* because the two disagree. `hasFace` is stamped at the TOP of the face
+	* branch, before every gate, and means no more than "a face detector produced
+	* a face detail". This one is stamped at the single moment the gallery row
+	* LANDS — after `FaceRecognizer.onTrackEnd` successfully persists it, i.e.
+	* past the embedding-magnitude verdict, the `minFacePx` detection gate, the
+	* candidate gate, the imageless-track drop (no crop was ever captured) and
+	* the crop-store drop. Everything between the detector and that insert can
+	* legitimately refuse the face, so a flag written any earlier promises the
+	* operator something to assign and delivers nothing.
+	*
+	* **Independent of recognition.** A face collected but never auto-matched is
+	* still assignable — it is in fact the face an operator most wants to reach —
+	* so this is NOT gated on `recognizedIdentityId`. Recognition lands in
+	* `subLabel`; this says only that the raw material exists.
+	*
+	* **Set once, never cleared.** A track that produced a gallery row produced
+	* one; deleting the row later is the gallery's business, not this flag's.
+	*
+	* **Absent ≠ false**, the same rule as {@link hasFace}: every row written
+	* before the column omits it, and so does every server that predates the
+	* field. A consumer must test `=== true` and render nothing otherwise —
+	* never infer "no assignable face".
+	*/
+	hasEmbeddedFace: zod.z.boolean().optional(),
+	/**
 	* This subject CONTAINS a folded rider — a person the rider-pairing step
 	* ([D34](../decisions/adr-0034.md)) removed from the frame BEFORE the tracker,
 	* so the passage is tracked once and as a VEHICLE.
@@ -16615,6 +16644,26 @@ var DetailResultSchema = zod.z.object({
 	* the consuming gate treats as accept — never as reject.
 	*/
 	embeddingMagnitude: zod.z.number().optional(),
+	/**
+	* Model that produced `embedding` — the SAME contract `labelModelId` has for
+	* `label`, and for the same reason: the producing node is the only side that
+	* knows which model actually ran, and re-deriving it downstream is exactly
+	* the inference this model exists to forbid.
+	*
+	* Additive and optional, so a runner that predates it degrades to
+	* "unmeasurable" rather than to a wrong answer — the consumer falls back to
+	* its previous assumption instead of refusing.
+	*
+	* Its absence was not cosmetic. `FaceRecognizer` needs the probe's model id
+	* to use `face-matcher`'s same-model gate (`sample.modelId !== probe.modelId`);
+	* with nothing on the wire it took the id from the GALLERY, so the gate
+	* compared the gallery against itself and could never fire. That turned the
+	* one guard protecting the face feature space into a tautology, and it is
+	* why swapping `face-embedding`'s model would NOT have stranded the enrolled
+	* gallery as the catalog comment predicts — it would have scored the new
+	* model's vectors against the old model's samples in one cosine space.
+	*/
+	embeddingModelId: zod.z.string().optional(),
 	label: zod.z.string().optional(),
 	/**
 	* The tier `label` occupies, copied VERBATIM from the producing step's
@@ -18629,6 +18678,7 @@ var snapshotCapability = {
 				isBattery: zod.z.boolean(),
 				reason: zod.z.enum([
 					"disabled",
+					"offline",
 					"sleeping",
 					"unreachable",
 					"waking"
@@ -18718,9 +18768,17 @@ targets: zod.z.array(zod.z.object({
 			sleeping: zod.z.boolean(),
 			/** Current device state rendered over the cached frame. State images
 			*  remain authoritative even when their photographic background is
-			*  old; null means the link must carry a current camera frame. */
+			*  old; null means the link must carry a current camera frame.
+			*
+			*  **This is the ONLY source a surface may derive an inactive tile
+			*  from.** A client that reads a device's `online`/`disabled` flags and
+			*  draws its own verdict will disagree with the pixels it is painting
+			*  — the frame comes from here, and so must the sentence over it
+			*  (D190). Pair with `ageMs` for the age of the photograph behind the
+			*  state. */
 			stateReason: zod.z.enum([
 				"disabled",
+				"offline",
 				"sleeping",
 				"unreachable",
 				"waking"
@@ -37998,6 +38056,39 @@ TimelapseRuleInputSchema.extend({
 	createdAt: zod.z.number(),
 	updatedAt: zod.z.number()
 });
+Object.freeze(Object.fromEntries([{
+	stepId: "face-embedding",
+	label: "Face recognition model",
+	defaultModelId: "arcface-r100",
+	indexName: "the enrolled face gallery",
+	options: [
+		{
+			id: "arcface-r100",
+			label: "ArcFace (ResNet34)"
+		},
+		{
+			id: "auraface-r100",
+			label: "AuraFace R100"
+		},
+		{
+			id: "inception-resnet-v1",
+			label: "Inception ResNet V1"
+		}
+	]
+}, {
+	stepId: "clip-embedding",
+	label: "Semantic search model",
+	defaultModelId: "mobileclip-s1",
+	indexName: "the object semantic-search index",
+	options: [{
+		id: "mobileclip-s1",
+		label: "MobileCLIP S1"
+	}, {
+		id: "mobileclip-s2",
+		label: "MobileCLIP S2"
+	}]
+}].map((s) => [s.stepId, s.defaultModelId])));
+zod.z.string().min(1);
 zod.z.object({
 	/**
 	* Fraction of the box's own size added on EACH side before cutting.
@@ -38018,10 +38109,21 @@ zod.z.object({
 	*/
 	square: zod.z.boolean()
 });
-({
+/**
+* The convention in force when nobody has configured one — byte-for-byte the
+* behaviour of the pre-unification LIVE path (`DETAIL_CROP_PADDING_RATIO`).
+*/
+var DEFAULT_DETAIL_CROP_CONVENTION = {
 	paddingRatio: .15,
 	square: false
-}).paddingRatio;
+};
+Object.freeze({
+	x: 0,
+	y: 0,
+	w: 1,
+	h: 1
+});
+DEFAULT_DETAIL_CROP_CONVENTION.paddingRatio;
 /**
 * WHICH delivered frames the decode worker retains a native copy of.
 *

package/dist/{dist-CW4Cims4.mjs → dist-Duz_uJSQ.mjs}

@@ -3669,7 +3669,7 @@ var RecordingBandSchema = z.object({
 	postBufferSec: z.number().min(0).optional()
 });
 ({
-	preBufferSec: 10,
+	preBufferSec: 15,
 	postBufferSec: 30
 }).postBufferSec * 1e3;
 /**
@@ -14363,7 +14363,7 @@ var TrackEnvelopeSchema = z.object({
 * `snapshots[]` references — megabytes across a page of tracks. `slim`
 * keeps every scalar the list surfaces actually render (ids, class(es),
 * label / audioLabels / importance enrichment, firstSeen/lastSeen, state,
-* zonesVisited, bestEventId, envelope, hasFace, hasRider) and returns `positions` /
+* zonesVisited, bestEventId, envelope, hasFace, hasEmbeddedFace, hasRider) and returns `positions` /
 * `snapshots` as EMPTY arrays — detail views re-fetch the full row via
 * `getTrack`. Mirrors the event-store `projection` convention
 * (`getObjectEvents` et al.).
@@ -14658,6 +14658,35 @@ var TrackSchema = z.object({
 	*/
 	hasFace: z.boolean().optional(),
 	/**
+	* This track has a face row IN THE GALLERY: a crop **and** an embedding — a
+	* face an operator could ASSIGN to an identity.
+	*
+	* The STRICT twin of {@link hasFace}, and the pair only earns its keep
+	* because the two disagree. `hasFace` is stamped at the TOP of the face
+	* branch, before every gate, and means no more than "a face detector produced
+	* a face detail". This one is stamped at the single moment the gallery row
+	* LANDS — after `FaceRecognizer.onTrackEnd` successfully persists it, i.e.
+	* past the embedding-magnitude verdict, the `minFacePx` detection gate, the
+	* candidate gate, the imageless-track drop (no crop was ever captured) and
+	* the crop-store drop. Everything between the detector and that insert can
+	* legitimately refuse the face, so a flag written any earlier promises the
+	* operator something to assign and delivers nothing.
+	*
+	* **Independent of recognition.** A face collected but never auto-matched is
+	* still assignable — it is in fact the face an operator most wants to reach —
+	* so this is NOT gated on `recognizedIdentityId`. Recognition lands in
+	* `subLabel`; this says only that the raw material exists.
+	*
+	* **Set once, never cleared.** A track that produced a gallery row produced
+	* one; deleting the row later is the gallery's business, not this flag's.
+	*
+	* **Absent ≠ false**, the same rule as {@link hasFace}: every row written
+	* before the column omits it, and so does every server that predates the
+	* field. A consumer must test `=== true` and render nothing otherwise —
+	* never infer "no assignable face".
+	*/
+	hasEmbeddedFace: z.boolean().optional(),
+	/**
 	* This subject CONTAINS a folded rider — a person the rider-pairing step
 	* ([D34](../decisions/adr-0034.md)) removed from the frame BEFORE the tracker,
 	* so the passage is tracked once and as a VEHICLE.
@@ -16615,6 +16644,26 @@ var DetailResultSchema = z.object({
 	* the consuming gate treats as accept — never as reject.
 	*/
 	embeddingMagnitude: z.number().optional(),
+	/**
+	* Model that produced `embedding` — the SAME contract `labelModelId` has for
+	* `label`, and for the same reason: the producing node is the only side that
+	* knows which model actually ran, and re-deriving it downstream is exactly
+	* the inference this model exists to forbid.
+	*
+	* Additive and optional, so a runner that predates it degrades to
+	* "unmeasurable" rather than to a wrong answer — the consumer falls back to
+	* its previous assumption instead of refusing.
+	*
+	* Its absence was not cosmetic. `FaceRecognizer` needs the probe's model id
+	* to use `face-matcher`'s same-model gate (`sample.modelId !== probe.modelId`);
+	* with nothing on the wire it took the id from the GALLERY, so the gate
+	* compared the gallery against itself and could never fire. That turned the
+	* one guard protecting the face feature space into a tautology, and it is
+	* why swapping `face-embedding`'s model would NOT have stranded the enrolled
+	* gallery as the catalog comment predicts — it would have scored the new
+	* model's vectors against the old model's samples in one cosine space.
+	*/
+	embeddingModelId: z.string().optional(),
 	label: z.string().optional(),
 	/**
 	* The tier `label` occupies, copied VERBATIM from the producing step's
@@ -18629,6 +18678,7 @@ var snapshotCapability = {
 				isBattery: z.boolean(),
 				reason: z.enum([
 					"disabled",
+					"offline",
 					"sleeping",
 					"unreachable",
 					"waking"
@@ -18718,9 +18768,17 @@ targets: z.array(z.object({
 			sleeping: z.boolean(),
 			/** Current device state rendered over the cached frame. State images
 			*  remain authoritative even when their photographic background is
-			*  old; null means the link must carry a current camera frame. */
+			*  old; null means the link must carry a current camera frame.
+			*
+			*  **This is the ONLY source a surface may derive an inactive tile
+			*  from.** A client that reads a device's `online`/`disabled` flags and
+			*  draws its own verdict will disagree with the pixels it is painting
+			*  — the frame comes from here, and so must the sentence over it
+			*  (D190). Pair with `ageMs` for the age of the photograph behind the
+			*  state. */
 			stateReason: z.enum([
 				"disabled",
+				"offline",
 				"sleeping",
 				"unreachable",
 				"waking"
@@ -37998,6 +38056,39 @@ TimelapseRuleInputSchema.extend({
 	createdAt: z.number(),
 	updatedAt: z.number()
 });
+Object.freeze(Object.fromEntries([{
+	stepId: "face-embedding",
+	label: "Face recognition model",
+	defaultModelId: "arcface-r100",
+	indexName: "the enrolled face gallery",
+	options: [
+		{
+			id: "arcface-r100",
+			label: "ArcFace (ResNet34)"
+		},
+		{
+			id: "auraface-r100",
+			label: "AuraFace R100"
+		},
+		{
+			id: "inception-resnet-v1",
+			label: "Inception ResNet V1"
+		}
+	]
+}, {
+	stepId: "clip-embedding",
+	label: "Semantic search model",
+	defaultModelId: "mobileclip-s1",
+	indexName: "the object semantic-search index",
+	options: [{
+		id: "mobileclip-s1",
+		label: "MobileCLIP S1"
+	}, {
+		id: "mobileclip-s2",
+		label: "MobileCLIP S2"
+	}]
+}].map((s) => [s.stepId, s.defaultModelId])));
+z.string().min(1);
 z.object({
 	/**
 	* Fraction of the box's own size added on EACH side before cutting.
@@ -38018,10 +38109,21 @@ z.object({
 	*/
 	square: z.boolean()
 });
-({
+/**
+* The convention in force when nobody has configured one — byte-for-byte the
+* behaviour of the pre-unification LIVE path (`DETAIL_CROP_PADDING_RATIO`).
+*/
+var DEFAULT_DETAIL_CROP_CONVENTION = {
 	paddingRatio: .15,
 	square: false
-}).paddingRatio;
+};
+Object.freeze({
+	x: 0,
+	y: 0,
+	w: 1,
+	h: 1
+});
+DEFAULT_DETAIL_CROP_CONVENTION.paddingRatio;
 /**
 * WHICH delivered frames the decode worker retains a native copy of.
 *

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-CQkr5Kw0.js");
+const require_dist = require("./dist-B2CtwVW2.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { At as asNumber, B as extractNestedAddonId, Bt as parseJsonUnknown$1, Dt as ReadinessTimeoutError, Et as ReadinessRegistry, Ft as expandCapMethods, Gt as EventCategory$1, H as isArrayOutputSchema, Ht as resolveCapMount, J as lifecycleJobSchema, K as isVoidInput, Mt as createEvent, Nt as emitDownForOwnedCaps, Q as looseSchema, St as DEVICE_STATUS_METHOD, U as isCollectionArrayMethod, Ut as scopeKey, Vt as readinessKey, W as isObjectInput, Z as logLevelAtMost, bt as DATAPLANE_SECRET_HEADER$1, d as METHOD_ACCESS_MAP, f as RUNTIME_DEFAULTS, it as procedureAuthKey, jt as asString$1, kt as asJsonObject$1, ot as scopesAllowAddon, q as kebabToCamel, st as scopesAllowDeviceCap, t as ALL_CAPABILITY_DEFINITIONS, tt as objectInputDeclaresAddonId, vt as errMsg$1, xt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, y as addonSettingsCapability, zt as parseJsonObject } from "./dist-CW4Cims4.mjs";
+import { At as asNumber, B as extractNestedAddonId, Bt as parseJsonUnknown$1, Dt as ReadinessTimeoutError, Et as ReadinessRegistry, Ft as expandCapMethods, Gt as EventCategory$1, H as isArrayOutputSchema, Ht as resolveCapMount, J as lifecycleJobSchema, K as isVoidInput, Mt as createEvent, Nt as emitDownForOwnedCaps, Q as looseSchema, St as DEVICE_STATUS_METHOD, U as isCollectionArrayMethod, Ut as scopeKey, Vt as readinessKey, W as isObjectInput, Z as logLevelAtMost, bt as DATAPLANE_SECRET_HEADER$1, d as METHOD_ACCESS_MAP, f as RUNTIME_DEFAULTS, it as procedureAuthKey, jt as asString$1, kt as asJsonObject$1, ot as scopesAllowAddon, q as kebabToCamel, st as scopesAllowDeviceCap, t as ALL_CAPABILITY_DEFINITIONS, tt as objectInputDeclaresAddonId, vt as errMsg$1, xt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, y as addonSettingsCapability, zt as parseJsonObject } from "./dist-Duz_uJSQ.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";

package/dist/{retired-settings-keys-DGgOxOir.mjs → retired-settings-keys-BtVT2f6O.mjs}

@@ -1,4 +1,4 @@
-import { kt as asJsonObject } from "./dist-CW4Cims4.mjs";
+import { kt as asJsonObject } from "./dist-Duz_uJSQ.mjs";
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/dist/{retired-settings-keys-DCESas5O.js → retired-settings-keys-CYDGGkyM.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-CQkr5Kw0.js");
+const require_dist = require("./dist-B2CtwVW2.js");
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.111",
+  "version": "1.2.113",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",