camstack 1.2.128 → 1.2.130

package/dist/{chunk-5NJCDSOQ.js → chunk-FK6R4ZJQ.js}

@@ -14522,7 +14522,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-uGNYCvYp.mjs
+// ../types/dist/sleep-DMghvp8F.mjs
 var WELL_KNOWN_TABS = [
   {
     id: "overview",
@@ -15582,6 +15582,147 @@ var CameraSwitchGroupSchema = external_exports.object({
   /** Unix ms when the group was composed server-side. */
   fetchedAt: external_exports.number()
 });
+var BirthDecisionVerdictSchema = external_exports.enum([
+  "confirmed",
+  "suppressed",
+  "exhausted-fallback"
+]);
+var BirthDecisionRecordSchema = external_exports.object({
+  id: external_exports.string(),
+  /** Epoch ms the VERDICT was taken (not the birth instant — see `firstSeen`). */
+  at: external_exports.number().int(),
+  /** The camera. Required: every question here is asked per-camera. */
+  deviceId: external_exports.number().int(),
+  /**
+  * The track the decision was about. PROVENANCE, not ownership — a suppressed
+  * birth has no track at all, and a confirmed one is expected to age out long
+  * before this row does. Named `sourceTrackId` so the retention model's
+  * ownership derivation (`collection-classification.ts`, which keys on a
+  * column literally called `trackId`) cannot reach it.
+  */
+  sourceTrackId: external_exports.string(),
+  /** The candidate's claimed class. The miss rate is asked per class too. */
+  className: external_exports.string(),
+  verdict: BirthDecisionVerdictSchema,
+  /**
+  * The gate's own `ConfirmationReason` (`confirmed`, `suppressed`,
+  * `native-pass`, `no-crop`, `timeout`, `carried-inconclusive`, …), or `null`
+  * when the gate is DISABLED and every birth is waved through. `null` is not
+  * "unknown": it says the gate took no measurement because it was off, which
+  * is a different population and must never be averaged in with the rest.
+  */
+  reason: external_exports.string().nullable(),
+  /** Deferral attempts this birth used. 0 = decided on its first look. */
+  attempts: external_exports.number().int(),
+  /** Ms from the FIRST undecided attempt to this verdict. 0 = never deferred. */
+  deferredForMs: external_exports.number().int(),
+  /**
+  * THE COLUMN THE RE-OFFER DEFECT IS COUNTED IN.
+  *
+  * `true` when the frame the verdict was taken on carried no matched
+  * detection for this track — the tracker was coasting a frozen box and the
+  * subject was not observed. The deferred-birth re-offer pulls the candidate
+  * straight out of `result.tracked` without checking, so this is reachable
+  * today; the question is the RATE, per camera, and whether refusing those
+  * frames would have cost real tracks (cross-read against `verdict` and
+  * `decidedByBirthEvidence`).
+  */
+  decidedOnCoastedFrame: external_exports.boolean(),
+  /** Were D379 birth-instant pixels in hand when this candidate was submitted? */
+  birthEvidenceAvailable: external_exports.boolean(),
+  /**
+  * Did those pixels DECIDE it (`cropSource === 'carried'`)? Available and
+  * deciding are different: the carried crop is confirm-only, so a candidate
+  * can hold evidence, be found inconclusive on it, and be decided by a native
+  * crop of a later instant. A coasted decision backed by carried evidence is
+  * a real observation of the birth instant; one without it is not.
+  */
+  decidedByBirthEvidence: external_exports.boolean(),
+  /** Best class-compatible crop score, or `null` when nothing compatible was
+  *  found — deliberately not 0, which would be a measurement that never was. */
+  bestScore: external_exports.number().nullable(),
+  /** The bar this candidate actually faced (the phantom-cell hook may raise it). */
+  appliedMinConfidence: external_exports.number().nullable(),
+  /**
+  * The track's own `firstSeen` — the candidate's first frame, which is where
+  * the timeline starts. `null` for a suppressed birth, which has no track.
+  */
+  firstSeen: external_exports.number().int().nullable(),
+  /**
+  * The device's most recent motion RISING EDGE at the moment of the decision,
+  * or `null` when there is none, it is older than
+  * {@link MAX_BIRTH_LATENCY_PROXY_MS}, or this runner never saw one.
+  */
+  motionOnsetAt: external_exports.number().int().nullable(),
+  /**
+  * `firstSeen − motionOnsetAt` — THE OPERATOR'S COMPLAINT, IN MILLISECONDS,
+  * AND THE WEAKEST NUMBER IN THIS ROW. Read the error bars before quoting it.
+  *
+  * **Why motion onset and not something else.** Two other proxies were
+  * considered and rejected:
+  *  - *the recording/pipeline session start*: for a camera on
+  *    `detectionMode: 'always'` the session opens at process start, hours
+  *    before any subject. It measures nothing.
+  *  - *the first detection on the device in this burst*: CIRCULAR. A track's
+  *    `firstSeen` IS the first detection of that object, so for the track that
+  *    OPENS a burst — the only one the operator is complaining about — the two
+  *    are the same instant and the latency is 0 by construction.
+  * Motion onset is the only in-process signal produced by a DIFFERENT
+  * mechanism from the object detector, so it is the only one that can precede
+  * it. It is also already maintained per-device at frame rate on this very
+  * node (`handleMotionAnalysis` / `handleOnboardMotion`), which is what makes
+  * it free — and, decisively, the frame path and the motion path are gated to
+  * the SAME designated post-processing node, so the mirror is never empty for
+  * a camera whose births land here.
+  *
+  * **Error bars, all of them.**
+  *  1. *Motion has no class.* A burst opened by rain, a headlight sweeping a
+  *     wall or a branch, and only later joined by the person, OVERSTATES the
+  *     latency without bound. Mitigated, never removed, by
+  *     {@link BirthDecisionRecord.birthIndexInBurst}: only index 0 is a
+  *     candidate for "this burst is this subject", and even then it is a
+  *     candidate, not a fact.
+  *  2. *The sign is not guaranteed.* The analyzer needs a pixel-count and
+  *     intensity threshold. A subject entering slowly at the far edge of the
+  *     frame can clear the detector's confidence floor BEFORE it clears the
+  *     motion floor, making this negative. Negatives are stored as-is and
+  *     never clamped — clamping would fabricate the distribution's left tail,
+  *     which is the half that says the proxy is unreliable.
+  *  3. *Onboard motion carries firmware latency of unknown, per-model offset*
+  *     (hundreds of ms), plus camera-vs-hub clock skew on top. Numbers are
+  *     therefore comparable WITHIN a camera and not across cameras of
+  *     different motion sources. The motion source is deliberately not copied
+  *     here — it belongs to the addon that owns the device (D224) and this is
+  *     a write on the frame path — so group by `deviceId`, which is how the
+  *     question is always asked anyway.
+  *  4. *Continuous motion.* On a busy scene the burst never closes and the
+  *     onset is minutes old. Bounded by {@link MAX_BIRTH_LATENCY_PROXY_MS};
+  *     past it this is `null`.
+  *  5. *No motion signal at all* — analyzer off, onboard-only camera not
+  *     reporting, or nothing since boot: `null`. Which is the truth about a
+  *     camera nobody has a reference instant for.
+  *
+  * So this is a per-camera DISTRIBUTION over index-0 births, and it is honest
+  * as such. It is not a per-track fact and must never be shown as one.
+  */
+  birthLatencyMs: external_exports.number().int().nullable(),
+  /**
+  * How many births this device has already decided since that motion onset.
+  * 0 = the first, i.e. the only index at which the burst plausibly belongs to
+  * this subject. `null` when there is no usable onset.
+  */
+  birthIndexInBurst: external_exports.number().int().nullable()
+});
+var BirthDecisionQueryInputSchema = external_exports.object({
+  /** Restrict to a single camera; omit for every row. */
+  deviceId: external_exports.number().int().optional(),
+  /** Only decisions at or after this epoch ms. */
+  since: external_exports.number().int().optional(),
+  /** Restrict to one verdict — the miss rate is read one population at a time. */
+  verdict: BirthDecisionVerdictSchema.optional(),
+  /** Max rows returned, newest-first. */
+  limit: external_exports.number().int().min(1).max(5e3).optional()
+});
 var ArchivedDebugNoteSchema = external_exports.object({
   /** Archive row id. Derived from `(sourceTrackId, note)`, so re-archiving the
   *  same sentence about the same track lands on the row already there. */
@@ -27482,6 +27623,26 @@ var pipelineAnalyticsCapability = {
     */
     listArchivedDebugNotes: method(ArchivedDebugNoteQueryInputSchema, external_exports.array(ArchivedDebugNoteSchema).readonly(), { kind: "query" }),
     /**
+    * Birth decisions — one row per resolved confirmation-gate verdict (D409).
+    *
+    * The READ half of a measurement, and only that: it gates nothing and no
+    * runtime path consults it. It exists because the two questions the
+    * operator's "traccia partita in ritardo" marks raised are both multi-day
+    * and `logs.query` holds under an hour of fleet traffic —
+    *   • how often is a birth DECIDED on a frame the subject was not observed
+    *     in (`decidedOnCoastedFrame`), and did D379's carried pixels make it a
+    *     real observation anyway (`decidedByBirthEvidence`);
+    *   • how long after the camera's motion onset does a track's `firstSeen`
+    *     land (`birthLatencyMs` — read its error bars in
+    *     `BirthDecisionRecordSchema` before quoting it).
+    *
+    * Newest-first, capped by `limit` (default
+    * {@link BIRTH_DECISION_DEFAULT_LIMIT}), optionally scoped to one camera,
+    * one verdict, or a `since`. The table is bounded by row count, not age —
+    * see {@link MAX_BIRTH_DECISION_RECORDS}.
+    */
+    listBirthDecisions: method(BirthDecisionQueryInputSchema, external_exports.array(BirthDecisionRecordSchema).readonly(), { kind: "query" }),
+    /**
     * Durable event-store footprint for the management UI: event rows
     * (motion + object + audio) counted per camera + total, plus the
     * event-owned media bytes on disk per camera + total. Stat/count-based,
@@ -28201,6 +28362,12 @@ var occupancyRecheckFramesField = {
   default: 4,
   step: 1
 };
+var preRollInferenceFramesField = {
+  min: 0,
+  max: 30,
+  default: 12,
+  step: 1
+};
 var MotionSourceEnum = external_exports.enum([
   "onboard",
   "analyzer",
@@ -28362,6 +28529,31 @@ var RunnerCameraConfigSchema = external_exports.object({
   * to every occupancy rule until something moved in front of it. The churn is
   * now paid on the interval instead — see `occupancyRecheckSecField`.
   */
+  /**
+  * Infer the session's PRE-ROLL — the retained history the restreamer replays
+  * at session open — instead of decoding it and throwing it away.
+  *
+  * DEFAULT `true`, and the default is the argument. This is not a new
+  * capability being offered cautiously: the pre-roll is ALREADY requested,
+  * already served, already decoded and already paid for on every on-motion
+  * detection session that asks for history. What shipped was a last-moment
+  * discard — `FrameSlot`'s throttle compares wall clocks, and ~4 s of media
+  * arriving inside a few hundred ms of wall clock looks to it like one frame's
+  * worth. Device 617, 2026-09-08: a re-run of the SAME model over the stored
+  * recording scored the subject `vehicle 0.5669` — above the 0.50 floor —
+  * 1.68 s BEFORE the live track was born, on a frame that was in the pre-roll,
+  * was decoded, and was freed.
+  *
+  * Shipping that as opt-in would ship the bug: an operator cannot discover a
+  * setting whose absence looks exactly like a camera that noticed the cyclist
+  * late. What makes ON safe is not a switch but the BOUND —
+  * `preRollInferenceFrames`, a wall-clock ceiling, and a lane that never takes
+  * the last inference permit — so the switch exists for the camera where the
+  * history is worthless (a doorbell whose subject is always already at the
+  * door), not as a hedge against the feature.
+  */
+  preRollInferenceEnabled: external_exports.boolean().default(true),
+  preRollInferenceFrames: external_exports.number().min(preRollInferenceFramesField.min).max(preRollInferenceFramesField.max).default(preRollInferenceFramesField.default),
   occupancyRecheckEnabled: external_exports.boolean().default(true),
   occupancyRecheckSec: external_exports.number().min(occupancyRecheckSecField.min).max(occupancyRecheckSecField.max).default(occupancyRecheckSecField.default),
   occupancyRecheckFrames: external_exports.number().min(occupancyRecheckFramesField.min).max(occupancyRecheckFramesField.max).default(occupancyRecheckFramesField.default),
@@ -28501,6 +28693,29 @@ var RunnerCameraDeviceUIFields = [
       includes: "onboard"
     }
   },
+  {
+    key: "preRollInferenceEnabled",
+    type: "boolean",
+    style: "checkbox",
+    label: "Detect in the pre-roll",
+    description: "Run detection over the few seconds of footage the camera had already buffered when motion fired, so a subject that was in view before the trigger is found at the moment it appeared rather than seconds later. The burst is bounded and never delays live detection.",
+    default: true
+  },
+  {
+    key: "preRollInferenceFrames",
+    type: "slider",
+    label: "Pre-roll frames",
+    description: "How many frames of buffered history may be detected on, per session. Higher samples the history more densely; 0 disables the pass.",
+    min: preRollInferenceFramesField.min,
+    max: preRollInferenceFramesField.max,
+    step: preRollInferenceFramesField.step,
+    default: preRollInferenceFramesField.default,
+    showValue: true,
+    showWhen: {
+      field: "preRollInferenceEnabled",
+      equals: true
+    }
+  },
   {
     key: "occupancyRecheckEnabled",
     type: "boolean",
@@ -43557,6 +43772,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineAnalytics.listBirthDecisions": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
   "pipelineAnalytics.listEventKinds": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -47349,6 +47570,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: true
   }],
+  "pipelineAnalytics.listBirthDecisions": [{
+    name: "deviceId",
+    form: "single",
+    optional: true
+  }],
   "pipelineAnalytics.listEventKinds": [{
     name: "deviceId",
     form: "single",

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-5NJCDSOQ.js";
+} from "./chunk-FK6R4ZJQ.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-BSFU3OHE.js");
+  await import("./launcher-O4PI5LJI.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-BSFU3OHE.js");
+  await import("./launcher-O4PI5LJI.js");
 }
 
 // src/commands/setup.ts
@@ -1130,7 +1130,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-7JKBAMMQ.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-Q75B3UUE.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);

package/dist/{discover-7JKBAMMQ.js → discover-Q75B3UUE.js}

@@ -5,7 +5,7 @@ import {
   filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-5NJCDSOQ.js";
+} from "./chunk-FK6R4ZJQ.js";
 import "./chunk-LMMQX4CK.js";
 export {
   DEFAULT_HUB_HTTPS_PORT,

package/dist/{launcher-BSFU3OHE.js → launcher-O4PI5LJI.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-C5xJy-uL.js
-var require_dist_C5xJy_uL = __commonJS({
-  "../system/dist/dist-C5xJy-uL.js"(exports) {
+// ../system/dist/dist-9GQQ9F3s.js
+var require_dist_9GQQ9F3s = __commonJS({
+  "../system/dist/dist-9GQQ9F3s.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -26065,6 +26065,147 @@ var require_dist_C5xJy_uL = __commonJS({
         for (const tab of tabs) for (const child of fieldsOf(tab)) walkField(child, out);
       }
     }
+    var BirthDecisionVerdictSchema = zod.z.enum([
+      "confirmed",
+      "suppressed",
+      "exhausted-fallback"
+    ]);
+    var BirthDecisionRecordSchema = zod.z.object({
+      id: zod.z.string(),
+      /** Epoch ms the VERDICT was taken (not the birth instant — see `firstSeen`). */
+      at: zod.z.number().int(),
+      /** The camera. Required: every question here is asked per-camera. */
+      deviceId: zod.z.number().int(),
+      /**
+      * The track the decision was about. PROVENANCE, not ownership — a suppressed
+      * birth has no track at all, and a confirmed one is expected to age out long
+      * before this row does. Named `sourceTrackId` so the retention model's
+      * ownership derivation (`collection-classification.ts`, which keys on a
+      * column literally called `trackId`) cannot reach it.
+      */
+      sourceTrackId: zod.z.string(),
+      /** The candidate's claimed class. The miss rate is asked per class too. */
+      className: zod.z.string(),
+      verdict: BirthDecisionVerdictSchema,
+      /**
+      * The gate's own `ConfirmationReason` (`confirmed`, `suppressed`,
+      * `native-pass`, `no-crop`, `timeout`, `carried-inconclusive`, …), or `null`
+      * when the gate is DISABLED and every birth is waved through. `null` is not
+      * "unknown": it says the gate took no measurement because it was off, which
+      * is a different population and must never be averaged in with the rest.
+      */
+      reason: zod.z.string().nullable(),
+      /** Deferral attempts this birth used. 0 = decided on its first look. */
+      attempts: zod.z.number().int(),
+      /** Ms from the FIRST undecided attempt to this verdict. 0 = never deferred. */
+      deferredForMs: zod.z.number().int(),
+      /**
+      * THE COLUMN THE RE-OFFER DEFECT IS COUNTED IN.
+      *
+      * `true` when the frame the verdict was taken on carried no matched
+      * detection for this track — the tracker was coasting a frozen box and the
+      * subject was not observed. The deferred-birth re-offer pulls the candidate
+      * straight out of `result.tracked` without checking, so this is reachable
+      * today; the question is the RATE, per camera, and whether refusing those
+      * frames would have cost real tracks (cross-read against `verdict` and
+      * `decidedByBirthEvidence`).
+      */
+      decidedOnCoastedFrame: zod.z.boolean(),
+      /** Were D379 birth-instant pixels in hand when this candidate was submitted? */
+      birthEvidenceAvailable: zod.z.boolean(),
+      /**
+      * Did those pixels DECIDE it (`cropSource === 'carried'`)? Available and
+      * deciding are different: the carried crop is confirm-only, so a candidate
+      * can hold evidence, be found inconclusive on it, and be decided by a native
+      * crop of a later instant. A coasted decision backed by carried evidence is
+      * a real observation of the birth instant; one without it is not.
+      */
+      decidedByBirthEvidence: zod.z.boolean(),
+      /** Best class-compatible crop score, or `null` when nothing compatible was
+      *  found — deliberately not 0, which would be a measurement that never was. */
+      bestScore: zod.z.number().nullable(),
+      /** The bar this candidate actually faced (the phantom-cell hook may raise it). */
+      appliedMinConfidence: zod.z.number().nullable(),
+      /**
+      * The track's own `firstSeen` — the candidate's first frame, which is where
+      * the timeline starts. `null` for a suppressed birth, which has no track.
+      */
+      firstSeen: zod.z.number().int().nullable(),
+      /**
+      * The device's most recent motion RISING EDGE at the moment of the decision,
+      * or `null` when there is none, it is older than
+      * {@link MAX_BIRTH_LATENCY_PROXY_MS}, or this runner never saw one.
+      */
+      motionOnsetAt: zod.z.number().int().nullable(),
+      /**
+      * `firstSeen − motionOnsetAt` — THE OPERATOR'S COMPLAINT, IN MILLISECONDS,
+      * AND THE WEAKEST NUMBER IN THIS ROW. Read the error bars before quoting it.
+      *
+      * **Why motion onset and not something else.** Two other proxies were
+      * considered and rejected:
+      *  - *the recording/pipeline session start*: for a camera on
+      *    `detectionMode: 'always'` the session opens at process start, hours
+      *    before any subject. It measures nothing.
+      *  - *the first detection on the device in this burst*: CIRCULAR. A track's
+      *    `firstSeen` IS the first detection of that object, so for the track that
+      *    OPENS a burst — the only one the operator is complaining about — the two
+      *    are the same instant and the latency is 0 by construction.
+      * Motion onset is the only in-process signal produced by a DIFFERENT
+      * mechanism from the object detector, so it is the only one that can precede
+      * it. It is also already maintained per-device at frame rate on this very
+      * node (`handleMotionAnalysis` / `handleOnboardMotion`), which is what makes
+      * it free — and, decisively, the frame path and the motion path are gated to
+      * the SAME designated post-processing node, so the mirror is never empty for
+      * a camera whose births land here.
+      *
+      * **Error bars, all of them.**
+      *  1. *Motion has no class.* A burst opened by rain, a headlight sweeping a
+      *     wall or a branch, and only later joined by the person, OVERSTATES the
+      *     latency without bound. Mitigated, never removed, by
+      *     {@link BirthDecisionRecord.birthIndexInBurst}: only index 0 is a
+      *     candidate for "this burst is this subject", and even then it is a
+      *     candidate, not a fact.
+      *  2. *The sign is not guaranteed.* The analyzer needs a pixel-count and
+      *     intensity threshold. A subject entering slowly at the far edge of the
+      *     frame can clear the detector's confidence floor BEFORE it clears the
+      *     motion floor, making this negative. Negatives are stored as-is and
+      *     never clamped — clamping would fabricate the distribution's left tail,
+      *     which is the half that says the proxy is unreliable.
+      *  3. *Onboard motion carries firmware latency of unknown, per-model offset*
+      *     (hundreds of ms), plus camera-vs-hub clock skew on top. Numbers are
+      *     therefore comparable WITHIN a camera and not across cameras of
+      *     different motion sources. The motion source is deliberately not copied
+      *     here — it belongs to the addon that owns the device (D224) and this is
+      *     a write on the frame path — so group by `deviceId`, which is how the
+      *     question is always asked anyway.
+      *  4. *Continuous motion.* On a busy scene the burst never closes and the
+      *     onset is minutes old. Bounded by {@link MAX_BIRTH_LATENCY_PROXY_MS};
+      *     past it this is `null`.
+      *  5. *No motion signal at all* — analyzer off, onboard-only camera not
+      *     reporting, or nothing since boot: `null`. Which is the truth about a
+      *     camera nobody has a reference instant for.
+      *
+      * So this is a per-camera DISTRIBUTION over index-0 births, and it is honest
+      * as such. It is not a per-track fact and must never be shown as one.
+      */
+      birthLatencyMs: zod.z.number().int().nullable(),
+      /**
+      * How many births this device has already decided since that motion onset.
+      * 0 = the first, i.e. the only index at which the burst plausibly belongs to
+      * this subject. `null` when there is no usable onset.
+      */
+      birthIndexInBurst: zod.z.number().int().nullable()
+    });
+    var BirthDecisionQueryInputSchema = zod.z.object({
+      /** Restrict to a single camera; omit for every row. */
+      deviceId: zod.z.number().int().optional(),
+      /** Only decisions at or after this epoch ms. */
+      since: zod.z.number().int().optional(),
+      /** Restrict to one verdict — the miss rate is read one population at a time. */
+      verdict: BirthDecisionVerdictSchema.optional(),
+      /** Max rows returned, newest-first. */
+      limit: zod.z.number().int().min(1).max(5e3).optional()
+    });
     var ArchivedDebugNoteSchema = zod.z.object({
       /** Archive row id. Derived from `(sourceTrackId, note)`, so re-archiving the
       *  same sentence about the same track lands on the row already there. */
@@ -38251,6 +38392,26 @@ var require_dist_C5xJy_uL = __commonJS({
         */
         listArchivedDebugNotes: method(ArchivedDebugNoteQueryInputSchema, zod.z.array(ArchivedDebugNoteSchema).readonly(), { kind: "query" }),
         /**
+        * Birth decisions — one row per resolved confirmation-gate verdict (D409).
+        *
+        * The READ half of a measurement, and only that: it gates nothing and no
+        * runtime path consults it. It exists because the two questions the
+        * operator's "traccia partita in ritardo" marks raised are both multi-day
+        * and `logs.query` holds under an hour of fleet traffic —
+        *   • how often is a birth DECIDED on a frame the subject was not observed
+        *     in (`decidedOnCoastedFrame`), and did D379's carried pixels make it a
+        *     real observation anyway (`decidedByBirthEvidence`);
+        *   • how long after the camera's motion onset does a track's `firstSeen`
+        *     land (`birthLatencyMs` — read its error bars in
+        *     `BirthDecisionRecordSchema` before quoting it).
+        *
+        * Newest-first, capped by `limit` (default
+        * {@link BIRTH_DECISION_DEFAULT_LIMIT}), optionally scoped to one camera,
+        * one verdict, or a `since`. The table is bounded by row count, not age —
+        * see {@link MAX_BIRTH_DECISION_RECORDS}.
+        */
+        listBirthDecisions: method(BirthDecisionQueryInputSchema, zod.z.array(BirthDecisionRecordSchema).readonly(), { kind: "query" }),
+        /**
         * Durable event-store footprint for the management UI: event rows
         * (motion + object + audio) counted per camera + total, plus the
         * event-owned media bytes on disk per camera + total. Stat/count-based,
@@ -38970,6 +39131,12 @@ var require_dist_C5xJy_uL = __commonJS({
       default: 4,
       step: 1
     };
+    var preRollInferenceFramesField = {
+      min: 0,
+      max: 30,
+      default: 12,
+      step: 1
+    };
     var MotionSourceEnum = zod.z.enum([
       "onboard",
       "analyzer",
@@ -39131,6 +39298,31 @@ var require_dist_C5xJy_uL = __commonJS({
       * to every occupancy rule until something moved in front of it. The churn is
       * now paid on the interval instead — see `occupancyRecheckSecField`.
       */
+      /**
+      * Infer the session's PRE-ROLL — the retained history the restreamer replays
+      * at session open — instead of decoding it and throwing it away.
+      *
+      * DEFAULT `true`, and the default is the argument. This is not a new
+      * capability being offered cautiously: the pre-roll is ALREADY requested,
+      * already served, already decoded and already paid for on every on-motion
+      * detection session that asks for history. What shipped was a last-moment
+      * discard — `FrameSlot`'s throttle compares wall clocks, and ~4 s of media
+      * arriving inside a few hundred ms of wall clock looks to it like one frame's
+      * worth. Device 617, 2026-09-08: a re-run of the SAME model over the stored
+      * recording scored the subject `vehicle 0.5669` — above the 0.50 floor —
+      * 1.68 s BEFORE the live track was born, on a frame that was in the pre-roll,
+      * was decoded, and was freed.
+      *
+      * Shipping that as opt-in would ship the bug: an operator cannot discover a
+      * setting whose absence looks exactly like a camera that noticed the cyclist
+      * late. What makes ON safe is not a switch but the BOUND —
+      * `preRollInferenceFrames`, a wall-clock ceiling, and a lane that never takes
+      * the last inference permit — so the switch exists for the camera where the
+      * history is worthless (a doorbell whose subject is always already at the
+      * door), not as a hedge against the feature.
+      */
+      preRollInferenceEnabled: zod.z.boolean().default(true),
+      preRollInferenceFrames: zod.z.number().min(preRollInferenceFramesField.min).max(preRollInferenceFramesField.max).default(preRollInferenceFramesField.default),
       occupancyRecheckEnabled: zod.z.boolean().default(true),
       occupancyRecheckSec: zod.z.number().min(occupancyRecheckSecField.min).max(occupancyRecheckSecField.max).default(occupancyRecheckSecField.default),
       occupancyRecheckFrames: zod.z.number().min(occupancyRecheckFramesField.min).max(occupancyRecheckFramesField.max).default(occupancyRecheckFramesField.default),
@@ -39159,7 +39351,7 @@ var require_dist_C5xJy_uL = __commonJS({
       */
       inferenceDevices: zod.z.array(RunnerInferenceDeviceSchema).readonly().optional()
     });
-    motionFpsField.min, motionFpsField.max, motionFpsField.step, motionFpsField.default, detectionFpsField.min, detectionFpsField.max, detectionFpsField.step, detectionFpsField.default, motionCooldownMsField.min, motionCooldownMsField.max, motionCooldownMsField.step, motionCooldownMsField.default, maxSessionHoldMsField.min, maxSessionHoldMsField.max, maxSessionHoldMsField.step, maxSessionHoldMsField.default, audioMotionWindowMsField.min, audioMotionWindowMsField.max, audioMotionWindowMsField.step, audioMotionWindowMsField.default, occupancyRecheckSecField.min, occupancyRecheckSecField.max, occupancyRecheckSecField.step, occupancyRecheckSecField.default, occupancyRecheckFramesField.min, occupancyRecheckFramesField.max, occupancyRecheckFramesField.step, occupancyRecheckFramesField.default;
+    motionFpsField.min, motionFpsField.max, motionFpsField.step, motionFpsField.default, detectionFpsField.min, detectionFpsField.max, detectionFpsField.step, detectionFpsField.default, motionCooldownMsField.min, motionCooldownMsField.max, motionCooldownMsField.step, motionCooldownMsField.default, maxSessionHoldMsField.min, maxSessionHoldMsField.max, maxSessionHoldMsField.step, maxSessionHoldMsField.default, audioMotionWindowMsField.min, audioMotionWindowMsField.max, audioMotionWindowMsField.step, audioMotionWindowMsField.default, preRollInferenceFramesField.min, preRollInferenceFramesField.max, preRollInferenceFramesField.step, preRollInferenceFramesField.default, occupancyRecheckSecField.min, occupancyRecheckSecField.max, occupancyRecheckSecField.step, occupancyRecheckSecField.default, occupancyRecheckFramesField.min, occupancyRecheckFramesField.max, occupancyRecheckFramesField.step, occupancyRecheckFramesField.default;
     var RunnerLocalLoadSchema = zod.z.object({
       /** Moleculer node id of this runner instance. */
       nodeId: zod.z.string(),
@@ -55001,6 +55193,12 @@ var require_dist_C5xJy_uL = __commonJS({
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.listBirthDecisions": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.listEventKinds": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -58793,6 +58991,11 @@ var require_dist_C5xJy_uL = __commonJS({
         form: "single",
         optional: true
       }],
+      "pipelineAnalytics.listBirthDecisions": [{
+        name: "deviceId",
+        form: "single",
+        optional: true
+      }],
       "pipelineAnalytics.listEventKinds": [{
         name: "deviceId",
         form: "single",
@@ -61105,7 +61308,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C5xJy_uL();
+    var require_dist10 = require_dist_9GQQ9F3s();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -61924,7 +62127,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C5xJy_uL();
+    var require_dist10 = require_dist_9GQQ9F3s();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -62018,7 +62221,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C5xJy_uL();
+    var require_dist10 = require_dist_9GQQ9F3s();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -62915,11 +63118,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-CONISA8J.js
-var require_retired_settings_keys_CONISA8J = __commonJS({
-  "../system/dist/retired-settings-keys-CONISA8J.js"(exports) {
+// ../system/dist/retired-settings-keys-DfdSH46H.js
+var require_retired_settings_keys_DfdSH46H = __commonJS({
+  "../system/dist/retired-settings-keys-DfdSH46H.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_C5xJy_uL();
+    var require_dist10 = require_dist_9GQQ9F3s();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -65154,8 +65357,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C5xJy_uL();
-    var require_retired_settings_keys = require_retired_settings_keys_CONISA8J();
+    var require_dist10 = require_dist_9GQQ9F3s();
+    var require_retired_settings_keys = require_retired_settings_keys_DfdSH46H();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -70780,7 +70983,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C5xJy_uL();
+    var require_dist10 = require_dist_9GQQ9F3s();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -70917,7 +71120,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C5xJy_uL();
+    var require_dist10 = require_dist_9GQQ9F3s();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -71113,7 +71316,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C5xJy_uL();
+    var require_dist10 = require_dist_9GQQ9F3s();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -78926,7 +79129,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C5xJy_uL();
+    var require_dist10 = require_dist_9GQQ9F3s();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -79491,7 +79694,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C5xJy_uL();
+    var require_dist10 = require_dist_9GQQ9F3s();
     var node_fs_promises = __require("fs/promises");
     var node_child_process = __require("child_process");
     var node_util = __require("util");
@@ -82075,7 +82278,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C5xJy_uL();
+    var require_dist10 = require_dist_9GQQ9F3s();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -83191,8 +83394,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C5xJy_uL();
-    var require_retired_settings_keys = require_retired_settings_keys_CONISA8J();
+    var require_dist10 = require_dist_9GQQ9F3s();
+    var require_retired_settings_keys = require_retired_settings_keys_DfdSH46H();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -85696,7 +85899,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C5xJy_uL();
+    var require_dist10 = require_dist_9GQQ9F3s();
     var require_hub_cap_forward = require_hub_cap_forward_DmHNjbB0();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -89346,7 +89549,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C5xJy_uL();
+    var require_dist10 = require_dist_9GQQ9F3s();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -107407,7 +107610,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C5xJy_uL();
+    var require_dist10 = require_dist_9GQQ9F3s();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -109352,9 +109555,9 @@ var require_event_category_BVo6ta6 = __commonJS({
   }
 });
 
-// ../types/dist/sleep-IjLtwkO5.js
-var require_sleep_IjLtwkO5 = __commonJS({
-  "../types/dist/sleep-IjLtwkO5.js"(exports) {
+// ../types/dist/sleep-Bo9cUOXp.js
+var require_sleep_Bo9cUOXp = __commonJS({
+  "../types/dist/sleep-Bo9cUOXp.js"(exports) {
     "use strict";
     var require_event_category = require_event_category_BVo6ta6();
     var zod = require_zod();
@@ -112087,6 +112290,7 @@ var require_sleep_IjLtwkO5 = __commonJS({
           deleteTracks: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "deleteTracks", "mutation", input),
           setTrackFlags: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "setTrackFlags", "mutation", input),
           listArchivedDebugNotes: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listArchivedDebugNotes", "query", input),
+          listBirthDecisions: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listBirthDecisions", "query", input),
           getEventStoreFootprint: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getEventStoreFootprint", "query", input),
           getEventMediaFootprintByKind: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getEventMediaFootprintByKind", "query", input),
           pruneEvents: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "pruneEvents", "mutation", input),
@@ -113087,7 +113291,7 @@ var require_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BVo6ta6();
-    var require_sleep = require_sleep_IjLtwkO5();
+    var require_sleep = require_sleep_Bo9cUOXp();
     var require_err_msg = require_err_msg_COpsHMw2();
     var CAP_INPUT_DEFAULTS = Object.freeze({
       "addons": { "getLogs": { "limit": 100 } },
@@ -113220,6 +113424,8 @@ var require_addon = __commonJS({
           "pipelineEnabled": true,
           "zones": [],
           "onboardMotionDrivesAnalyzer": true,
+          "preRollInferenceEnabled": true,
+          "preRollInferenceFrames": 12,
           "occupancyRecheckEnabled": true,
           "occupancyRecheckSec": 300,
           "occupancyRecheckFrames": 4,
@@ -132018,7 +132224,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C5xJy_uL();
+    var require_dist10 = require_dist_9GQQ9F3s();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -213135,7 +213341,7 @@ var require_dist4 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BVo6ta6();
-    var require_sleep = require_sleep_IjLtwkO5();
+    var require_sleep = require_sleep_Bo9cUOXp();
     var require_canonical_hash = require_canonical_hash_DNV8S5ET();
     var require_enums2 = require_enums();
     var require_err_msg = require_err_msg_COpsHMw2();
@@ -213888,6 +214094,150 @@ var require_dist4 = __commonJS({
         for (const tab of tabs) for (const child of fieldsOf(tab)) walkField(child, out);
       }
     }
+    var MAX_BIRTH_DECISION_RECORDS = 3e4;
+    var BIRTH_DECISION_DEFAULT_LIMIT = 500;
+    var MAX_BIRTH_LATENCY_PROXY_MS = 6e4;
+    var BirthDecisionVerdictSchema = zod.z.enum([
+      "confirmed",
+      "suppressed",
+      "exhausted-fallback"
+    ]);
+    var BirthDecisionRecordSchema = zod.z.object({
+      id: zod.z.string(),
+      /** Epoch ms the VERDICT was taken (not the birth instant — see `firstSeen`). */
+      at: zod.z.number().int(),
+      /** The camera. Required: every question here is asked per-camera. */
+      deviceId: zod.z.number().int(),
+      /**
+      * The track the decision was about. PROVENANCE, not ownership — a suppressed
+      * birth has no track at all, and a confirmed one is expected to age out long
+      * before this row does. Named `sourceTrackId` so the retention model's
+      * ownership derivation (`collection-classification.ts`, which keys on a
+      * column literally called `trackId`) cannot reach it.
+      */
+      sourceTrackId: zod.z.string(),
+      /** The candidate's claimed class. The miss rate is asked per class too. */
+      className: zod.z.string(),
+      verdict: BirthDecisionVerdictSchema,
+      /**
+      * The gate's own `ConfirmationReason` (`confirmed`, `suppressed`,
+      * `native-pass`, `no-crop`, `timeout`, `carried-inconclusive`, …), or `null`
+      * when the gate is DISABLED and every birth is waved through. `null` is not
+      * "unknown": it says the gate took no measurement because it was off, which
+      * is a different population and must never be averaged in with the rest.
+      */
+      reason: zod.z.string().nullable(),
+      /** Deferral attempts this birth used. 0 = decided on its first look. */
+      attempts: zod.z.number().int(),
+      /** Ms from the FIRST undecided attempt to this verdict. 0 = never deferred. */
+      deferredForMs: zod.z.number().int(),
+      /**
+      * THE COLUMN THE RE-OFFER DEFECT IS COUNTED IN.
+      *
+      * `true` when the frame the verdict was taken on carried no matched
+      * detection for this track — the tracker was coasting a frozen box and the
+      * subject was not observed. The deferred-birth re-offer pulls the candidate
+      * straight out of `result.tracked` without checking, so this is reachable
+      * today; the question is the RATE, per camera, and whether refusing those
+      * frames would have cost real tracks (cross-read against `verdict` and
+      * `decidedByBirthEvidence`).
+      */
+      decidedOnCoastedFrame: zod.z.boolean(),
+      /** Were D379 birth-instant pixels in hand when this candidate was submitted? */
+      birthEvidenceAvailable: zod.z.boolean(),
+      /**
+      * Did those pixels DECIDE it (`cropSource === 'carried'`)? Available and
+      * deciding are different: the carried crop is confirm-only, so a candidate
+      * can hold evidence, be found inconclusive on it, and be decided by a native
+      * crop of a later instant. A coasted decision backed by carried evidence is
+      * a real observation of the birth instant; one without it is not.
+      */
+      decidedByBirthEvidence: zod.z.boolean(),
+      /** Best class-compatible crop score, or `null` when nothing compatible was
+      *  found — deliberately not 0, which would be a measurement that never was. */
+      bestScore: zod.z.number().nullable(),
+      /** The bar this candidate actually faced (the phantom-cell hook may raise it). */
+      appliedMinConfidence: zod.z.number().nullable(),
+      /**
+      * The track's own `firstSeen` — the candidate's first frame, which is where
+      * the timeline starts. `null` for a suppressed birth, which has no track.
+      */
+      firstSeen: zod.z.number().int().nullable(),
+      /**
+      * The device's most recent motion RISING EDGE at the moment of the decision,
+      * or `null` when there is none, it is older than
+      * {@link MAX_BIRTH_LATENCY_PROXY_MS}, or this runner never saw one.
+      */
+      motionOnsetAt: zod.z.number().int().nullable(),
+      /**
+      * `firstSeen − motionOnsetAt` — THE OPERATOR'S COMPLAINT, IN MILLISECONDS,
+      * AND THE WEAKEST NUMBER IN THIS ROW. Read the error bars before quoting it.
+      *
+      * **Why motion onset and not something else.** Two other proxies were
+      * considered and rejected:
+      *  - *the recording/pipeline session start*: for a camera on
+      *    `detectionMode: 'always'` the session opens at process start, hours
+      *    before any subject. It measures nothing.
+      *  - *the first detection on the device in this burst*: CIRCULAR. A track's
+      *    `firstSeen` IS the first detection of that object, so for the track that
+      *    OPENS a burst — the only one the operator is complaining about — the two
+      *    are the same instant and the latency is 0 by construction.
+      * Motion onset is the only in-process signal produced by a DIFFERENT
+      * mechanism from the object detector, so it is the only one that can precede
+      * it. It is also already maintained per-device at frame rate on this very
+      * node (`handleMotionAnalysis` / `handleOnboardMotion`), which is what makes
+      * it free — and, decisively, the frame path and the motion path are gated to
+      * the SAME designated post-processing node, so the mirror is never empty for
+      * a camera whose births land here.
+      *
+      * **Error bars, all of them.**
+      *  1. *Motion has no class.* A burst opened by rain, a headlight sweeping a
+      *     wall or a branch, and only later joined by the person, OVERSTATES the
+      *     latency without bound. Mitigated, never removed, by
+      *     {@link BirthDecisionRecord.birthIndexInBurst}: only index 0 is a
+      *     candidate for "this burst is this subject", and even then it is a
+      *     candidate, not a fact.
+      *  2. *The sign is not guaranteed.* The analyzer needs a pixel-count and
+      *     intensity threshold. A subject entering slowly at the far edge of the
+      *     frame can clear the detector's confidence floor BEFORE it clears the
+      *     motion floor, making this negative. Negatives are stored as-is and
+      *     never clamped — clamping would fabricate the distribution's left tail,
+      *     which is the half that says the proxy is unreliable.
+      *  3. *Onboard motion carries firmware latency of unknown, per-model offset*
+      *     (hundreds of ms), plus camera-vs-hub clock skew on top. Numbers are
+      *     therefore comparable WITHIN a camera and not across cameras of
+      *     different motion sources. The motion source is deliberately not copied
+      *     here — it belongs to the addon that owns the device (D224) and this is
+      *     a write on the frame path — so group by `deviceId`, which is how the
+      *     question is always asked anyway.
+      *  4. *Continuous motion.* On a busy scene the burst never closes and the
+      *     onset is minutes old. Bounded by {@link MAX_BIRTH_LATENCY_PROXY_MS};
+      *     past it this is `null`.
+      *  5. *No motion signal at all* — analyzer off, onboard-only camera not
+      *     reporting, or nothing since boot: `null`. Which is the truth about a
+      *     camera nobody has a reference instant for.
+      *
+      * So this is a per-camera DISTRIBUTION over index-0 births, and it is honest
+      * as such. It is not a per-track fact and must never be shown as one.
+      */
+      birthLatencyMs: zod.z.number().int().nullable(),
+      /**
+      * How many births this device has already decided since that motion onset.
+      * 0 = the first, i.e. the only index at which the burst plausibly belongs to
+      * this subject. `null` when there is no usable onset.
+      */
+      birthIndexInBurst: zod.z.number().int().nullable()
+    });
+    var BirthDecisionQueryInputSchema = zod.z.object({
+      /** Restrict to a single camera; omit for every row. */
+      deviceId: zod.z.number().int().optional(),
+      /** Only decisions at or after this epoch ms. */
+      since: zod.z.number().int().optional(),
+      /** Restrict to one verdict — the miss rate is read one population at a time. */
+      verdict: BirthDecisionVerdictSchema.optional(),
+      /** Max rows returned, newest-first. */
+      limit: zod.z.number().int().min(1).max(5e3).optional()
+    });
     var MAX_ARCHIVED_DEBUG_NOTES = 5e3;
     var ARCHIVED_DEBUG_NOTES_DEFAULT_LIMIT = 200;
     var ArchivedDebugNoteSchema = zod.z.object({
@@ -228496,6 +228846,26 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         */
         listArchivedDebugNotes: require_sleep.method(ArchivedDebugNoteQueryInputSchema, zod.z.array(ArchivedDebugNoteSchema).readonly(), { kind: "query" }),
         /**
+        * Birth decisions — one row per resolved confirmation-gate verdict (D409).
+        *
+        * The READ half of a measurement, and only that: it gates nothing and no
+        * runtime path consults it. It exists because the two questions the
+        * operator's "traccia partita in ritardo" marks raised are both multi-day
+        * and `logs.query` holds under an hour of fleet traffic —
+        *   • how often is a birth DECIDED on a frame the subject was not observed
+        *     in (`decidedOnCoastedFrame`), and did D379's carried pixels make it a
+        *     real observation anyway (`decidedByBirthEvidence`);
+        *   • how long after the camera's motion onset does a track's `firstSeen`
+        *     land (`birthLatencyMs` — read its error bars in
+        *     `BirthDecisionRecordSchema` before quoting it).
+        *
+        * Newest-first, capped by `limit` (default
+        * {@link BIRTH_DECISION_DEFAULT_LIMIT}), optionally scoped to one camera,
+        * one verdict, or a `since`. The table is bounded by row count, not age —
+        * see {@link MAX_BIRTH_DECISION_RECORDS}.
+        */
+        listBirthDecisions: require_sleep.method(BirthDecisionQueryInputSchema, zod.z.array(BirthDecisionRecordSchema).readonly(), { kind: "query" }),
+        /**
         * Durable event-store footprint for the management UI: event rows
         * (motion + object + audio) counted per camera + total, plus the
         * event-owned media bytes on disk per camera + total. Stat/count-based,
@@ -229215,6 +229585,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       default: 4,
       step: 1
     };
+    var preRollInferenceFramesField = {
+      min: 0,
+      max: 30,
+      default: 12,
+      step: 1
+    };
     var MotionSourceEnum = zod.z.enum([
       "onboard",
       "analyzer",
@@ -229376,6 +229752,31 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * to every occupancy rule until something moved in front of it. The churn is
       * now paid on the interval instead — see `occupancyRecheckSecField`.
       */
+      /**
+      * Infer the session's PRE-ROLL — the retained history the restreamer replays
+      * at session open — instead of decoding it and throwing it away.
+      *
+      * DEFAULT `true`, and the default is the argument. This is not a new
+      * capability being offered cautiously: the pre-roll is ALREADY requested,
+      * already served, already decoded and already paid for on every on-motion
+      * detection session that asks for history. What shipped was a last-moment
+      * discard — `FrameSlot`'s throttle compares wall clocks, and ~4 s of media
+      * arriving inside a few hundred ms of wall clock looks to it like one frame's
+      * worth. Device 617, 2026-09-08: a re-run of the SAME model over the stored
+      * recording scored the subject `vehicle 0.5669` — above the 0.50 floor —
+      * 1.68 s BEFORE the live track was born, on a frame that was in the pre-roll,
+      * was decoded, and was freed.
+      *
+      * Shipping that as opt-in would ship the bug: an operator cannot discover a
+      * setting whose absence looks exactly like a camera that noticed the cyclist
+      * late. What makes ON safe is not a switch but the BOUND —
+      * `preRollInferenceFrames`, a wall-clock ceiling, and a lane that never takes
+      * the last inference permit — so the switch exists for the camera where the
+      * history is worthless (a doorbell whose subject is always already at the
+      * door), not as a hedge against the feature.
+      */
+      preRollInferenceEnabled: zod.z.boolean().default(true),
+      preRollInferenceFrames: zod.z.number().min(preRollInferenceFramesField.min).max(preRollInferenceFramesField.max).default(preRollInferenceFramesField.default),
       occupancyRecheckEnabled: zod.z.boolean().default(true),
       occupancyRecheckSec: zod.z.number().min(occupancyRecheckSecField.min).max(occupancyRecheckSecField.max).default(occupancyRecheckSecField.default),
       occupancyRecheckFrames: zod.z.number().min(occupancyRecheckFramesField.min).max(occupancyRecheckFramesField.max).default(occupancyRecheckFramesField.default),
@@ -229515,6 +229916,29 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           includes: "onboard"
         }
       },
+      {
+        key: "preRollInferenceEnabled",
+        type: "boolean",
+        style: "checkbox",
+        label: "Detect in the pre-roll",
+        description: "Run detection over the few seconds of footage the camera had already buffered when motion fired, so a subject that was in view before the trigger is found at the moment it appeared rather than seconds later. The burst is bounded and never delays live detection.",
+        default: true
+      },
+      {
+        key: "preRollInferenceFrames",
+        type: "slider",
+        label: "Pre-roll frames",
+        description: "How many frames of buffered history may be detected on, per session. Higher samples the history more densely; 0 disables the pass.",
+        min: preRollInferenceFramesField.min,
+        max: preRollInferenceFramesField.max,
+        step: preRollInferenceFramesField.step,
+        default: preRollInferenceFramesField.default,
+        showValue: true,
+        showWhen: {
+          field: "preRollInferenceEnabled",
+          equals: true
+        }
+      },
       {
         key: "occupancyRecheckEnabled",
         type: "boolean",
@@ -248933,6 +249357,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.listBirthDecisions": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.listEventKinds": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -252989,6 +253419,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: true
       }],
+      "pipelineAnalytics.listBirthDecisions": [{
+        name: "deviceId",
+        form: "single",
+        optional: true
+      }],
       "pipelineAnalytics.listEventKinds": [{
         name: "deviceId",
         form: "single",
@@ -257720,6 +258155,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.BASE_LIVE_EGRESS_PROFILE = BASE_LIVE_EGRESS_PROFILE;
     exports.BATTERY_DEVICE_PROFILE = BATTERY_DEVICE_PROFILE;
     exports.BATTERY_UNREACHABLE_AFTER_MS = BATTERY_UNREACHABLE_AFTER_MS;
+    exports.BIRTH_DECISION_DEFAULT_LIMIT = BIRTH_DECISION_DEFAULT_LIMIT;
     exports.BOOT_RECOVERY_BACKOFF_MS = require_sleep.BOOT_RECOVERY_BACKOFF_MS;
     exports.BacklightModeSchema = BacklightModeSchema;
     exports.BackupDestinationInfoSchema = BackupDestinationInfoSchema;
@@ -257733,6 +258169,9 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.BaseDeviceProvider = BaseDeviceProvider;
     exports.BatteryStatusSchema = BatteryStatusSchema;
     exports.BinaryStatusSchema = BinaryStatusSchema;
+    exports.BirthDecisionQueryInputSchema = BirthDecisionQueryInputSchema;
+    exports.BirthDecisionRecordSchema = BirthDecisionRecordSchema;
+    exports.BirthDecisionVerdictSchema = BirthDecisionVerdictSchema;
     exports.BoundingBoxSchema = BoundingBoxSchema;
     exports.BrightnessStatusSchema = BrightnessStatusSchema;
     exports.BrokerAddInputSchema = AddInputSchema;
@@ -258109,6 +258548,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.LoginStageEnum = LoginStageEnum;
     exports.MACRO_LABELS = MACRO_LABELS;
     exports.MAX_ARCHIVED_DEBUG_NOTES = MAX_ARCHIVED_DEBUG_NOTES;
+    exports.MAX_BIRTH_DECISION_RECORDS = MAX_BIRTH_DECISION_RECORDS;
+    exports.MAX_BIRTH_LATENCY_PROXY_MS = MAX_BIRTH_LATENCY_PROXY_MS;
     exports.MAX_CLIP_EVENT_IDS = MAX_CLIP_EVENT_IDS;
     exports.MAX_CLIP_LABELS = MAX_CLIP_LABELS;
     exports.MAX_CONDITION_DEPTH = MAX_CONDITION_DEPTH;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.2.128",
+  "version": "1.2.130",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",