camstack 1.2.131 → 1.2.134

package/dist/{chunk-FK6R4ZJQ.js → chunk-LMISNMUF.js}

@@ -14522,7 +14522,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-DMghvp8F.mjs
+// ../types/dist/sleep-ox21Ig4I.mjs
 var WELL_KNOWN_TABS = [
   {
     id: "overview",
@@ -20299,7 +20299,7 @@ var detectionPipelineCapability = {
 var SourceInfoSchema = external_exports.object({
   /** Live dispatch key — mutable when the source system allows rename. */
   id: external_exports.string(),
-  /** Source system tag — e.g. 'homeassistant' | 'reolink' | 'frigate'. */
+  /** Source system tag — e.g. 'homeassistant' | 'reolink' | 'onvif'. */
   system: external_exports.string(),
   /** Immutable upstream identifier when available (HA `unique_id`, … ).
   *  Used to detect rename when `id` changes. */
@@ -24872,7 +24872,7 @@ var NcRuleInputSchema = external_exports.object({
   * The measured seven-person arrival on device 590 spans 110 s with every
   * internal gap under 30 s. A 12 s fixed window cuts it into three groups; an
   * idle cutoff holds it as one and ends it when the arrival actually ends.
-  * 30 is Frigate's shipped value for the same decision.
+  * 30 s is a widely shipped value for the same decision.
   *
   * ### What it replaces
   *
@@ -26729,6 +26729,12 @@ var ZoneCrossingSchema = external_exports.object({
   /** Zone display name at crossing time (falls back to the id). */
   zoneName: external_exports.string().optional()
 });
+var ZoneOverlapSchema = external_exports.object({
+  zoneId: external_exports.string(),
+  zoneName: external_exports.string().optional(),
+  /** Percentage of the BOX area inside the zone, 0–100. */
+  overlapPct: external_exports.number()
+});
 var ObjectEventSchema = external_exports.object({
   ...BaseEventFields,
   kind: external_exports.literal("object"),
@@ -26753,6 +26759,35 @@ var ObjectEventSchema = external_exports.object({
   bbox: BoundingBoxSchema.optional(),
   /** Heavy JSON — omitted in slim projection. */
   zones: external_exports.array(external_exports.string()).readonly().optional(),
+  /**
+  * How far inside each stamped zone the box actually was, as a percentage of
+  * the BOX area.
+  *
+  * Membership alone cannot express "at least a third of it inside", which is
+  * the bar an operator argues with — and the number already existed: the
+  * engine computed it, the pipeline logged it, and then discarded it. It
+  * matters most on the events that carry no track, where a rule has nothing
+  * else to judge by.
+  */
+  zoneOverlaps: external_exports.array(ZoneOverlapSchema).readonly().optional(),
+  /**
+  * Present when this event describes a detection the TRACKER refused, so it
+  * has no track and never will.
+  *
+  * A zone-scoped immediate rule asks "is there an animal in the flowerbed
+  * NOW?"; tracking answers a different question ("is this the same subject as
+  * before?") whose confirmation threshold presumes continuity. On 2026-09-09 a
+  * dog at 0.7729, 100% inside a watched zone, was refused three times in six
+  * seconds with three different candidate ids — seven analysed frames in the
+  * window, the subject in a handful of them, metres apart — and produced no
+  * event at all.
+  *
+  * It is NAMED rather than merely implied by a missing `trackId`: an event
+  * with no track and no reason is indistinguishable from a track whose media
+  * went missing, and a consumer that asks this one for a best shot or a
+  * history is asking for something that never existed.
+  */
+  spawnRefused: external_exports.string().optional(),
   /** Omitted in slim projection. */
   state: TrackStateSchema.optional(),
   /**
@@ -28232,6 +28267,35 @@ var NativeCropResultSchema = external_exports.object({
   */
   tier: external_exports.enum(["native", "ram-fullframe"]).optional()
 });
+var ParkedFrameKindSchema = external_exports.enum(["keyFrame", "thumbnail"]);
+var ParkRefusalSchema = external_exports.enum(["handle-gone", "encode-failed"]);
+var ParkTrackFrameResultSchema = external_exports.discriminatedUnion("parked", [external_exports.object({
+  parked: external_exports.literal(true),
+  /** The node holding the parcel — what a later retrieval must be pinned to. */
+  nodeId: external_exports.string(),
+  width: external_exports.number().int().positive(),
+  height: external_exports.number().int().positive(),
+  /** JPEG bytes the parcel costs on the node. */
+  bytes: external_exports.number().int().nonnegative(),
+  /** Whether this park replaced a parcel already held for the key. */
+  replaced: external_exports.boolean()
+}), external_exports.object({
+  parked: external_exports.literal(false),
+  nodeId: external_exports.string(),
+  reason: ParkRefusalSchema,
+  /** Age of the handle at the park, on the runner's clock; null if unknown. */
+  handleAgeMs: external_exports.number().nullable(),
+  detail: external_exports.string().optional()
+})]);
+var ParkedTrackFrameSchema = external_exports.object({
+  jpeg: external_exports.string(),
+  width: external_exports.number().int().positive(),
+  height: external_exports.number().int().positive(),
+  /** The frame instant the parcel shows (the caller's clock, echoed back). */
+  timestamp: external_exports.number(),
+  /** When the node stored it (the node's clock). */
+  parkedAt: external_exports.number()
+});
 var DetailParentSchema = external_exports.object({
   bbox: NativeCropBboxSchema,
   className: external_exports.string()
@@ -28477,7 +28541,7 @@ var RunnerCameraConfigSchema = external_exports.object({
   * - `analyzer`: ML/frame-diff motion detection (motion-wasm or other
   *   analyzer providers) running on decoded frames in this runner.
   * - `onboard`: camera-native motion pushes (Reolink Baichuan, ONVIF
-  *   analytics, Frigate motion). The provider emits ProviderMotion
+  *   analytics). The provider emits ProviderMotion
   *   events; the orchestrator forwards to `reportMotion`.
   */
   motionSources: MotionSourcesSchema.default(["analyzer"]),
@@ -29008,7 +29072,60 @@ var pipelineRunnerCapability = {
       className: external_exports.string(),
       /** Camera the pixels came from. Diagnostics + log tags ONLY — never routing. */
       sourceDeviceId: external_exports.number()
-    }), RunStatelessStepResultSchema, { kind: "mutation" })
+    }), RunStatelessStepResultSchema, { kind: "mutation" }),
+    /**
+    * PARK a frame for a track at the instant it is judged to matter
+    * ([D422](../../../docs/decisions/adr-0422-a-relevant-frame-is-parked-when-it-becomes-relevant.md)).
+    *
+    * The hub's `BestDetectionTracker` — the single "best per track" policy —
+    * concludes a frame is a track's best and calls this on the node that
+    * owns `handle` (`nodePin(handle.nodeId)`), while the handle is young. The
+    * runner cuts `bbox` from the native surface it already holds (a full
+    * frame for `keyFrame`, the caller's subject window for `thumbnail`),
+    * encodes ONE JPEG, and keeps it under `(deviceId, trackId, kind)`. Every
+    * later consumer retrieves by that key (`getParkedTrackFrame`) — a lookup
+    * that cannot miss on age. D52 holds: the rectangle is cut by the runner,
+    * never a pre-cut tile the caller decided. D9/D18 hold: one compressed
+    * encode at a decision point, never a stream.
+    *
+    * Idempotent per `(trackId, kind)`: a later park replaces (the ranking is
+    * the hub's; this adds no second opinion), an out-of-order older instant
+    * is ignored. Bounded per device and per node on the runner
+    * (`parked-frame-store.ts`), oldest-first eviction, never a refusal for
+    * space. A refusal names its reason and is logged on the runner with the
+    * handle's measured age — it is never retried into a loop.
+    */
+    parkTrackFrame: method(external_exports.object({
+      deviceId: external_exports.number(),
+      /** Opaque to the runner — the hub's track id. */
+      trackId: external_exports.string(),
+      kind: ParkedFrameKindSchema,
+      handle: FrameHandleSchema,
+      /** Normalized [0,1] window to cut. `{0,0,1,1}` for a full frame. */
+      bbox: NativeCropBboxSchema,
+      /** Width cap for a full-frame park (the `keyFrame` native cap). */
+      maxWidth: external_exports.number().int().positive().optional(),
+      /** The frame instant (caller's clock) — orders parks for one key. */
+      timestamp: external_exports.number()
+    }), ParkTrackFrameResultSchema, { kind: "mutation" }),
+    /**
+    * Retrieve a parked parcel by `(deviceId, trackId, kind)`. Pinned to the
+    * node that answered the park (`ParkTrackFrameResult.nodeId`). `null` means
+    * nothing was parked under that key on this node — never "too old".
+    */
+    getParkedTrackFrame: method(external_exports.object({
+      deviceId: external_exports.number(),
+      trackId: external_exports.string(),
+      kind: ParkedFrameKindSchema
+    }), ParkedTrackFrameSchema.nullable()),
+    /**
+    * Drop every parcel of a track — the hub closed it. Idempotent. A track
+    * whose release is lost ages out on the runner under a hard ceiling.
+    */
+    releaseParkedTrackFrames: method(external_exports.object({
+      deviceId: external_exports.number(),
+      trackId: external_exports.string()
+    }), external_exports.object({ released: external_exports.number().int().nonnegative() }), { kind: "mutation" })
   }
 };
 var CameraPipelineConfigSchema = external_exports.object({
@@ -32606,8 +32723,8 @@ var batteryCapability = {
   /**
   * Runtime-state slice — every provider that registers this cap
   * stores the same shape under `device.runtimeState[battery]`.
-  * Cross-provider uniformity: a Reolink Argus, a Frigate sensor
-  * proxy, an ONVIF battery cam all read/write the same keys.
+  * Cross-provider uniformity: a Reolink Argus, a sensor proxy,
+  * an ONVIF battery cam all read/write the same keys.
   * Consumers (BatteryBadge, snapshot wrapper sleep gate) read once
   * via `device.runtimeState.getCapState('battery')` regardless of
   * the underlying driver.
@@ -34460,7 +34577,7 @@ var AvailableIntegrationTypeSchema = external_exports.object({
   * Which integration-marker cap the addon declared, so the wizard can
   * branch on CAP — never on addon name. `device-adoption` integrations
   * (Home Assistant, …) route through the broker step (Approach A);
-  * `device-provider` integrations (Reolink/Frigate/ONVIF) keep the
+  * `device-provider` integrations (Reolink/ONVIF) keep the
   * legacy config → discovery flow.
   */
   kind: external_exports.enum(["device-adoption", "device-provider"]),
@@ -37714,9 +37831,11 @@ var RecordingManifestSchema = external_exports.object({
 });
 var RecordingDeviceUsageSchema = external_exports.object({
   deviceId: external_exports.number(),
+  /** Bytes the ARCHIVE holds for this camera on this node's resolvable
+  *  recordings locations. */
   usedBytes: external_exports.number(),
   /**
-  * Start of this camera's OLDEST indexed segment, across every profile and
+  * Start of this camera's OLDEST ARCHIVED segment, across every profile and
   * location — the "Oldest footage" column in Recordings → Storage, and the
   * only honest answer to "is retention actually holding?" per camera.
   *
@@ -37726,7 +37845,24 @@ var RecordingDeviceUsageSchema = external_exports.object({
   * (types) and the addon ship on different trains, and the addon is usually
   * the later of the two.
   */
-  oldestMs: external_exports.number().nullable().optional()
+  oldestMs: external_exports.number().nullable().optional(),
+  /** Segments the archive holds for this camera — the "M" beside `usedBytes`.
+  *  OPTIONAL for the same train-skew reason as `oldestMs`. */
+  segments: external_exports.number().optional(),
+  /**
+  * RESIDENCY, not the archive: bytes the recorder process currently holds in
+  * its RAM index — the live tail plus the hours a reader hydrated.
+  *
+  * It answers "what can be served without touching the disk", never "how much
+  * footage this camera has". A UI that renders it must label it as such, and
+  * must never total it as storage. OPTIONAL: a recorder predating D418 omits
+  * it, and so does a node whose ledger could not answer.
+  */
+  residentBytes: external_exports.number().optional(),
+  /** The residency counterpart of `oldestMs` — the oldest segment currently in
+  *  RAM, which on a healthy recorder is minutes ago and means nothing about
+  *  retention. `null` = nothing resident. */
+  residentOldestMs: external_exports.number().nullable().optional()
 });
 var RecordingLocationUsageSchema = external_exports.object({
   /** StorageLocation id; null for the legacy/degraded single-root fallback. */
@@ -37760,6 +37896,17 @@ var RecordingStorageUsageSchema = external_exports.object({
   totalUsedBytes: external_exports.number(),
   devices: external_exports.array(RecordingDeviceUsageSchema),
   /**
+  * WHERE `devices[]` came from, so an empty table is never mistaken for empty
+  * disks (D418).
+  *
+  * `archive` = the durable hour ledger answered. `unavailable` = this node
+  * declared no ledger and the recorder REFUSED rather than answering the
+  * question with the resident index (D295 rule 3) — the rows are UNKNOWN, not
+  * zero, and a UI must say so. OPTIONAL: a recorder predating D418 omits it,
+  * and its rows are residency.
+  */
+  devicesRead: external_exports.enum(["archive", "unavailable"]).optional(),
+  /**
   * Per-physical-volume capacity. OPTIONAL, and consumers must render the rest
   * of the payload without it: the hub serves this method through a BAKED
   * router, so a hub whose framework train predates a change to this array
@@ -44528,6 +44675,24 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineRunner.getParkedTrackFrame": {
+    capName: "pipeline-runner",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "pipelineRunner.parkTrackFrame": {
+    capName: "pipeline-runner",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "pipelineRunner.releaseParkedTrackFrames": {
+    capName: "pipeline-runner",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "pipelineRunner.reportMotion": {
     capName: "pipeline-runner",
     capScope: "system",
@@ -47805,6 +47970,21 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
+  "pipelineRunner.getParkedTrackFrame": [{
+    name: "deviceId",
+    form: "single",
+    optional: false
+  }],
+  "pipelineRunner.parkTrackFrame": [{
+    name: "deviceId",
+    form: "single",
+    optional: false
+  }],
+  "pipelineRunner.releaseParkedTrackFrames": [{
+    name: "deviceId",
+    form: "single",
+    optional: false
+  }],
   "pipelineRunner.reportMotion": [{
     name: "deviceId",
     form: "single",

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-FK6R4ZJQ.js";
+} from "./chunk-LMISNMUF.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-XH2NRTWF.js");
+  await import("./launcher-CGCHY5QF.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-XH2NRTWF.js");
+  await import("./launcher-CGCHY5QF.js");
 }
 
 // src/commands/setup.ts
@@ -1130,7 +1130,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-Q75B3UUE.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-R4IJGYTA.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);

package/dist/{discover-Q75B3UUE.js → discover-R4IJGYTA.js}

@@ -5,7 +5,7 @@ import {
   filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-FK6R4ZJQ.js";
+} from "./chunk-LMISNMUF.js";
 import "./chunk-LMMQX4CK.js";
 export {
   DEFAULT_HUB_HTTPS_PORT,

package/dist/{launcher-XH2NRTWF.js → launcher-CGCHY5QF.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-9GQQ9F3s.js
-var require_dist_9GQQ9F3s = __commonJS({
-  "../system/dist/dist-9GQQ9F3s.js"(exports) {
+// ../system/dist/dist-DYWqXngV.js
+var require_dist_DYWqXngV = __commonJS({
+  "../system/dist/dist-DYWqXngV.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -23768,7 +23768,6 @@ var require_dist_9GQQ9F3s = __commonJS({
       EventCategory2["PipelineAnalyticsPackagePickedUp"] = "pipeline-analytics.package-picked-up";
       EventCategory2["PipelineAnalyticsFaceGalleryChanged"] = "pipeline-analytics.face-gallery-changed";
       EventCategory2["PipelineAnalyticsPlateGalleryChanged"] = "pipeline-analytics.plate-gallery-changed";
-      EventCategory2["FrigateLiveEvent"] = "frigate.live-event";
       EventCategory2["CameraStreamsProfileSlotsChanged"] = "camera-streams.onProfileSlotsChanged";
       EventCategory2["StreamOnline"] = "stream.online";
       EventCategory2["StreamOffline"] = "stream.offline";
@@ -31042,7 +31041,7 @@ var require_dist_9GQQ9F3s = __commonJS({
     var SourceInfoSchema = zod.z.object({
       /** Live dispatch key — mutable when the source system allows rename. */
       id: zod.z.string(),
-      /** Source system tag — e.g. 'homeassistant' | 'reolink' | 'frigate'. */
+      /** Source system tag — e.g. 'homeassistant' | 'reolink' | 'onvif'. */
       system: zod.z.string(),
       /** Immutable upstream identifier when available (HA `unique_id`, … ).
       *  Used to detect rename when `id` changes. */
@@ -35642,7 +35641,7 @@ var require_dist_9GQQ9F3s = __commonJS({
       * The measured seven-person arrival on device 590 spans 110 s with every
       * internal gap under 30 s. A 12 s fixed window cuts it into three groups; an
       * idle cutoff holds it as one and ends it when the arrival actually ends.
-      * 30 is Frigate's shipped value for the same decision.
+      * 30 s is a widely shipped value for the same decision.
       *
       * ### What it replaces
       *
@@ -37499,6 +37498,12 @@ var require_dist_9GQQ9F3s = __commonJS({
       /** Zone display name at crossing time (falls back to the id). */
       zoneName: zod.z.string().optional()
     });
+    var ZoneOverlapSchema = zod.z.object({
+      zoneId: zod.z.string(),
+      zoneName: zod.z.string().optional(),
+      /** Percentage of the BOX area inside the zone, 0–100. */
+      overlapPct: zod.z.number()
+    });
     var ObjectEventSchema = zod.z.object({
       ...BaseEventFields,
       kind: zod.z.literal("object"),
@@ -37523,6 +37528,35 @@ var require_dist_9GQQ9F3s = __commonJS({
       bbox: BoundingBoxSchema.optional(),
       /** Heavy JSON — omitted in slim projection. */
       zones: zod.z.array(zod.z.string()).readonly().optional(),
+      /**
+      * How far inside each stamped zone the box actually was, as a percentage of
+      * the BOX area.
+      *
+      * Membership alone cannot express "at least a third of it inside", which is
+      * the bar an operator argues with — and the number already existed: the
+      * engine computed it, the pipeline logged it, and then discarded it. It
+      * matters most on the events that carry no track, where a rule has nothing
+      * else to judge by.
+      */
+      zoneOverlaps: zod.z.array(ZoneOverlapSchema).readonly().optional(),
+      /**
+      * Present when this event describes a detection the TRACKER refused, so it
+      * has no track and never will.
+      *
+      * A zone-scoped immediate rule asks "is there an animal in the flowerbed
+      * NOW?"; tracking answers a different question ("is this the same subject as
+      * before?") whose confirmation threshold presumes continuity. On 2026-09-09 a
+      * dog at 0.7729, 100% inside a watched zone, was refused three times in six
+      * seconds with three different candidate ids — seven analysed frames in the
+      * window, the subject in a handful of them, metres apart — and produced no
+      * event at all.
+      *
+      * It is NAMED rather than merely implied by a missing `trackId`: an event
+      * with no track and no reason is indistinguishable from a track whose media
+      * went missing, and a consumer that asks this one for a best shot or a
+      * history is asking for something that never existed.
+      */
+      spawnRefused: zod.z.string().optional(),
       /** Omitted in slim projection. */
       state: TrackStateSchema.optional(),
       /**
@@ -39001,6 +39035,35 @@ var require_dist_9GQQ9F3s = __commonJS({
       */
       tier: zod.z.enum(["native", "ram-fullframe"]).optional()
     });
+    var ParkedFrameKindSchema = zod.z.enum(["keyFrame", "thumbnail"]);
+    var ParkRefusalSchema = zod.z.enum(["handle-gone", "encode-failed"]);
+    var ParkTrackFrameResultSchema = zod.z.discriminatedUnion("parked", [zod.z.object({
+      parked: zod.z.literal(true),
+      /** The node holding the parcel — what a later retrieval must be pinned to. */
+      nodeId: zod.z.string(),
+      width: zod.z.number().int().positive(),
+      height: zod.z.number().int().positive(),
+      /** JPEG bytes the parcel costs on the node. */
+      bytes: zod.z.number().int().nonnegative(),
+      /** Whether this park replaced a parcel already held for the key. */
+      replaced: zod.z.boolean()
+    }), zod.z.object({
+      parked: zod.z.literal(false),
+      nodeId: zod.z.string(),
+      reason: ParkRefusalSchema,
+      /** Age of the handle at the park, on the runner's clock; null if unknown. */
+      handleAgeMs: zod.z.number().nullable(),
+      detail: zod.z.string().optional()
+    })]);
+    var ParkedTrackFrameSchema = zod.z.object({
+      jpeg: zod.z.string(),
+      width: zod.z.number().int().positive(),
+      height: zod.z.number().int().positive(),
+      /** The frame instant the parcel shows (the caller's clock, echoed back). */
+      timestamp: zod.z.number(),
+      /** When the node stored it (the node's clock). */
+      parkedAt: zod.z.number()
+    });
     var DetailParentSchema = zod.z.object({
       bbox: NativeCropBboxSchema,
       className: zod.z.string()
@@ -39246,7 +39309,7 @@ var require_dist_9GQQ9F3s = __commonJS({
       * - `analyzer`: ML/frame-diff motion detection (motion-wasm or other
       *   analyzer providers) running on decoded frames in this runner.
       * - `onboard`: camera-native motion pushes (Reolink Baichuan, ONVIF
-      *   analytics, Frigate motion). The provider emits ProviderMotion
+      *   analytics). The provider emits ProviderMotion
       *   events; the orchestrator forwards to `reportMotion`.
       */
       motionSources: MotionSourcesSchema.default(["analyzer"]),
@@ -39604,7 +39667,60 @@ var require_dist_9GQQ9F3s = __commonJS({
           className: zod.z.string(),
           /** Camera the pixels came from. Diagnostics + log tags ONLY — never routing. */
           sourceDeviceId: zod.z.number()
-        }), RunStatelessStepResultSchema, { kind: "mutation" })
+        }), RunStatelessStepResultSchema, { kind: "mutation" }),
+        /**
+        * PARK a frame for a track at the instant it is judged to matter
+        * ([D422](../../../docs/decisions/adr-0422-a-relevant-frame-is-parked-when-it-becomes-relevant.md)).
+        *
+        * The hub's `BestDetectionTracker` — the single "best per track" policy —
+        * concludes a frame is a track's best and calls this on the node that
+        * owns `handle` (`nodePin(handle.nodeId)`), while the handle is young. The
+        * runner cuts `bbox` from the native surface it already holds (a full
+        * frame for `keyFrame`, the caller's subject window for `thumbnail`),
+        * encodes ONE JPEG, and keeps it under `(deviceId, trackId, kind)`. Every
+        * later consumer retrieves by that key (`getParkedTrackFrame`) — a lookup
+        * that cannot miss on age. D52 holds: the rectangle is cut by the runner,
+        * never a pre-cut tile the caller decided. D9/D18 hold: one compressed
+        * encode at a decision point, never a stream.
+        *
+        * Idempotent per `(trackId, kind)`: a later park replaces (the ranking is
+        * the hub's; this adds no second opinion), an out-of-order older instant
+        * is ignored. Bounded per device and per node on the runner
+        * (`parked-frame-store.ts`), oldest-first eviction, never a refusal for
+        * space. A refusal names its reason and is logged on the runner with the
+        * handle's measured age — it is never retried into a loop.
+        */
+        parkTrackFrame: method(zod.z.object({
+          deviceId: zod.z.number(),
+          /** Opaque to the runner — the hub's track id. */
+          trackId: zod.z.string(),
+          kind: ParkedFrameKindSchema,
+          handle: FrameHandleSchema,
+          /** Normalized [0,1] window to cut. `{0,0,1,1}` for a full frame. */
+          bbox: NativeCropBboxSchema,
+          /** Width cap for a full-frame park (the `keyFrame` native cap). */
+          maxWidth: zod.z.number().int().positive().optional(),
+          /** The frame instant (caller's clock) — orders parks for one key. */
+          timestamp: zod.z.number()
+        }), ParkTrackFrameResultSchema, { kind: "mutation" }),
+        /**
+        * Retrieve a parked parcel by `(deviceId, trackId, kind)`. Pinned to the
+        * node that answered the park (`ParkTrackFrameResult.nodeId`). `null` means
+        * nothing was parked under that key on this node — never "too old".
+        */
+        getParkedTrackFrame: method(zod.z.object({
+          deviceId: zod.z.number(),
+          trackId: zod.z.string(),
+          kind: ParkedFrameKindSchema
+        }), ParkedTrackFrameSchema.nullable()),
+        /**
+        * Drop every parcel of a track — the hub closed it. Idempotent. A track
+        * whose release is lost ages out on the runner under a hard ceiling.
+        */
+        releaseParkedTrackFrames: method(zod.z.object({
+          deviceId: zod.z.number(),
+          trackId: zod.z.string()
+        }), zod.z.object({ released: zod.z.number().int().nonnegative() }), { kind: "mutation" })
       }
     };
     var CameraPipelineConfigSchema = zod.z.object({
@@ -43200,8 +43316,8 @@ var require_dist_9GQQ9F3s = __commonJS({
       /**
       * Runtime-state slice — every provider that registers this cap
       * stores the same shape under `device.runtimeState[battery]`.
-      * Cross-provider uniformity: a Reolink Argus, a Frigate sensor
-      * proxy, an ONVIF battery cam all read/write the same keys.
+      * Cross-provider uniformity: a Reolink Argus, a sensor proxy,
+      * an ONVIF battery cam all read/write the same keys.
       * Consumers (BatteryBadge, snapshot wrapper sleep gate) read once
       * via `device.runtimeState.getCapState('battery')` regardless of
       * the underlying driver.
@@ -45054,7 +45170,7 @@ var require_dist_9GQQ9F3s = __commonJS({
       * Which integration-marker cap the addon declared, so the wizard can
       * branch on CAP — never on addon name. `device-adoption` integrations
       * (Home Assistant, …) route through the broker step (Approach A);
-      * `device-provider` integrations (Reolink/Frigate/ONVIF) keep the
+      * `device-provider` integrations (Reolink/ONVIF) keep the
       * legacy config → discovery flow.
       */
       kind: zod.z.enum(["device-adoption", "device-provider"]),
@@ -48306,9 +48422,11 @@ var require_dist_9GQQ9F3s = __commonJS({
     });
     var RecordingDeviceUsageSchema = zod.z.object({
       deviceId: zod.z.number(),
+      /** Bytes the ARCHIVE holds for this camera on this node's resolvable
+      *  recordings locations. */
       usedBytes: zod.z.number(),
       /**
-      * Start of this camera's OLDEST indexed segment, across every profile and
+      * Start of this camera's OLDEST ARCHIVED segment, across every profile and
       * location — the "Oldest footage" column in Recordings → Storage, and the
       * only honest answer to "is retention actually holding?" per camera.
       *
@@ -48318,7 +48436,24 @@ var require_dist_9GQQ9F3s = __commonJS({
       * (types) and the addon ship on different trains, and the addon is usually
       * the later of the two.
       */
-      oldestMs: zod.z.number().nullable().optional()
+      oldestMs: zod.z.number().nullable().optional(),
+      /** Segments the archive holds for this camera — the "M" beside `usedBytes`.
+      *  OPTIONAL for the same train-skew reason as `oldestMs`. */
+      segments: zod.z.number().optional(),
+      /**
+      * RESIDENCY, not the archive: bytes the recorder process currently holds in
+      * its RAM index — the live tail plus the hours a reader hydrated.
+      *
+      * It answers "what can be served without touching the disk", never "how much
+      * footage this camera has". A UI that renders it must label it as such, and
+      * must never total it as storage. OPTIONAL: a recorder predating D418 omits
+      * it, and so does a node whose ledger could not answer.
+      */
+      residentBytes: zod.z.number().optional(),
+      /** The residency counterpart of `oldestMs` — the oldest segment currently in
+      *  RAM, which on a healthy recorder is minutes ago and means nothing about
+      *  retention. `null` = nothing resident. */
+      residentOldestMs: zod.z.number().nullable().optional()
     });
     var RecordingLocationUsageSchema = zod.z.object({
       /** StorageLocation id; null for the legacy/degraded single-root fallback. */
@@ -48352,6 +48487,17 @@ var require_dist_9GQQ9F3s = __commonJS({
       totalUsedBytes: zod.z.number(),
       devices: zod.z.array(RecordingDeviceUsageSchema),
       /**
+      * WHERE `devices[]` came from, so an empty table is never mistaken for empty
+      * disks (D418).
+      *
+      * `archive` = the durable hour ledger answered. `unavailable` = this node
+      * declared no ledger and the recorder REFUSED rather than answering the
+      * question with the resident index (D295 rule 3) — the rows are UNKNOWN, not
+      * zero, and a UI must say so. OPTIONAL: a recorder predating D418 omits it,
+      * and its rows are residency.
+      */
+      devicesRead: zod.z.enum(["archive", "unavailable"]).optional(),
+      /**
       * Per-physical-volume capacity. OPTIONAL, and consumers must render the rest
       * of the payload without it: the hub serves this method through a BAKED
       * router, so a hub whose framework train predates a change to this array
@@ -55949,6 +56095,24 @@ var require_dist_9GQQ9F3s = __commonJS({
         addonId: null,
         access: "view"
       },
+      "pipelineRunner.getParkedTrackFrame": {
+        capName: "pipeline-runner",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
+      "pipelineRunner.parkTrackFrame": {
+        capName: "pipeline-runner",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
+      "pipelineRunner.releaseParkedTrackFrames": {
+        capName: "pipeline-runner",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "pipelineRunner.reportMotion": {
         capName: "pipeline-runner",
         capScope: "system",
@@ -59226,6 +59390,21 @@ var require_dist_9GQQ9F3s = __commonJS({
         form: "single",
         optional: false
       }],
+      "pipelineRunner.getParkedTrackFrame": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
+      "pipelineRunner.parkTrackFrame": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
+      "pipelineRunner.releaseParkedTrackFrames": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "pipelineRunner.reportMotion": [{
         name: "deviceId",
         form: "single",
@@ -61308,7 +61487,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_9GQQ9F3s();
+    var require_dist10 = require_dist_DYWqXngV();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -62127,7 +62306,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_9GQQ9F3s();
+    var require_dist10 = require_dist_DYWqXngV();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -62221,7 +62400,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_9GQQ9F3s();
+    var require_dist10 = require_dist_DYWqXngV();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -63118,11 +63297,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-DfdSH46H.js
-var require_retired_settings_keys_DfdSH46H = __commonJS({
-  "../system/dist/retired-settings-keys-DfdSH46H.js"(exports) {
+// ../system/dist/retired-settings-keys-CXLIB19R.js
+var require_retired_settings_keys_CXLIB19R = __commonJS({
+  "../system/dist/retired-settings-keys-CXLIB19R.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_9GQQ9F3s();
+    var require_dist10 = require_dist_DYWqXngV();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -65357,8 +65536,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_9GQQ9F3s();
-    var require_retired_settings_keys = require_retired_settings_keys_DfdSH46H();
+    var require_dist10 = require_dist_DYWqXngV();
+    var require_retired_settings_keys = require_retired_settings_keys_CXLIB19R();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -70983,7 +71162,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_9GQQ9F3s();
+    var require_dist10 = require_dist_DYWqXngV();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -71120,7 +71299,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_9GQQ9F3s();
+    var require_dist10 = require_dist_DYWqXngV();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -71316,7 +71495,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_9GQQ9F3s();
+    var require_dist10 = require_dist_DYWqXngV();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -79129,7 +79308,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_9GQQ9F3s();
+    var require_dist10 = require_dist_DYWqXngV();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -79694,7 +79873,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_9GQQ9F3s();
+    var require_dist10 = require_dist_DYWqXngV();
     var node_fs_promises = __require("fs/promises");
     var node_child_process = __require("child_process");
     var node_util = __require("util");
@@ -82278,7 +82457,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_9GQQ9F3s();
+    var require_dist10 = require_dist_DYWqXngV();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -83394,8 +83573,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_9GQQ9F3s();
-    var require_retired_settings_keys = require_retired_settings_keys_DfdSH46H();
+    var require_dist10 = require_dist_DYWqXngV();
+    var require_retired_settings_keys = require_retired_settings_keys_CXLIB19R();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -85899,7 +86078,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_9GQQ9F3s();
+    var require_dist10 = require_dist_DYWqXngV();
     var require_hub_cap_forward = require_hub_cap_forward_DmHNjbB0();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -89549,7 +89728,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_9GQQ9F3s();
+    var require_dist10 = require_dist_DYWqXngV();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -107610,7 +107789,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_9GQQ9F3s();
+    var require_dist10 = require_dist_DYWqXngV();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -109479,9 +109658,9 @@ ${(0, node_fs.readFileSync)(ca.caCertPath, "utf-8").trimEnd()}
   }
 });
 
-// ../types/dist/event-category-BVo6ta6_.js
-var require_event_category_BVo6ta6 = __commonJS({
-  "../types/dist/event-category-BVo6ta6_.js"(exports) {
+// ../types/dist/event-category-BNJ9EE5B.js
+var require_event_category_BNJ9EE5B = __commonJS({
+  "../types/dist/event-category-BNJ9EE5B.js"(exports) {
     "use strict";
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
       EventCategory2["SystemBoot"] = "system.boot";
@@ -109613,7 +109792,6 @@ var require_event_category_BVo6ta6 = __commonJS({
       EventCategory2["PipelineAnalyticsPackagePickedUp"] = "pipeline-analytics.package-picked-up";
       EventCategory2["PipelineAnalyticsFaceGalleryChanged"] = "pipeline-analytics.face-gallery-changed";
       EventCategory2["PipelineAnalyticsPlateGalleryChanged"] = "pipeline-analytics.plate-gallery-changed";
-      EventCategory2["FrigateLiveEvent"] = "frigate.live-event";
       EventCategory2["CameraStreamsProfileSlotsChanged"] = "camera-streams.onProfileSlotsChanged";
       EventCategory2["StreamOnline"] = "stream.online";
       EventCategory2["StreamOffline"] = "stream.offline";
@@ -109648,11 +109826,11 @@ var require_event_category_BVo6ta6 = __commonJS({
   }
 });
 
-// ../types/dist/sleep-Bo9cUOXp.js
-var require_sleep_Bo9cUOXp = __commonJS({
-  "../types/dist/sleep-Bo9cUOXp.js"(exports) {
+// ../types/dist/sleep-CTHjJilA.js
+var require_sleep_CTHjJilA = __commonJS({
+  "../types/dist/sleep-CTHjJilA.js"(exports) {
     "use strict";
-    var require_event_category = require_event_category_BVo6ta6();
+    var require_event_category = require_event_category_BNJ9EE5B();
     var zod = require_zod();
     var WELL_KNOWN_TABS = [
       {
@@ -112672,7 +112850,10 @@ var require_sleep_Bo9cUOXp = __commonJS({
         pipelineRunner: {
           detachCamera: (input) => dispatchSystem("pipelineRunner", "detachCamera", "mutation", input),
           getCameraMetrics: (input) => dispatchSystem("pipelineRunner", "getCameraMetrics", "query", input),
-          runDetailSubtree: (input) => dispatchSystem("pipelineRunner", "runDetailSubtree", "mutation", input)
+          runDetailSubtree: (input) => dispatchSystem("pipelineRunner", "runDetailSubtree", "mutation", input),
+          parkTrackFrame: (input) => dispatchSystem("pipelineRunner", "parkTrackFrame", "mutation", input),
+          getParkedTrackFrame: (input) => dispatchSystem("pipelineRunner", "getParkedTrackFrame", "query", input),
+          releaseParkedTrackFrames: (input) => dispatchSystem("pipelineRunner", "releaseParkedTrackFrames", "mutation", input)
         },
         plateGallery: {
           listPlates: (input) => dispatchSystem("plateGallery", "listPlates", "query", input),
@@ -113383,8 +113564,8 @@ var require_addon = __commonJS({
   "../types/dist/addon.js"(exports) {
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-    var require_event_category = require_event_category_BVo6ta6();
-    var require_sleep = require_sleep_Bo9cUOXp();
+    var require_event_category = require_event_category_BNJ9EE5B();
+    var require_sleep = require_sleep_CTHjJilA();
     var require_err_msg = require_err_msg_COpsHMw2();
     var CAP_INPUT_DEFAULTS = Object.freeze({
       "addons": { "getLogs": { "limit": 100 } },
@@ -132317,7 +132498,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_9GQQ9F3s();
+    var require_dist10 = require_dist_DYWqXngV();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -213417,7 +213598,7 @@ var require_enums = __commonJS({
   "../types/dist/enums.js"(exports) {
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-    var require_event_category = require_event_category_BVo6ta6();
+    var require_event_category = require_event_category_BNJ9EE5B();
     var EventSourceType = /* @__PURE__ */ (function(EventSourceType2) {
       EventSourceType2["Addon"] = "addon";
       EventSourceType2["Core"] = "core";
@@ -213437,8 +213618,8 @@ var require_dist4 = __commonJS({
   "../types/dist/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-    var require_event_category = require_event_category_BVo6ta6();
-    var require_sleep = require_sleep_Bo9cUOXp();
+    var require_event_category = require_event_category_BNJ9EE5B();
+    var require_sleep = require_sleep_CTHjJilA();
     var require_canonical_hash = require_canonical_hash_DNV8S5ET();
     var require_enums2 = require_enums();
     var require_err_msg = require_err_msg_COpsHMw2();
@@ -220746,7 +220927,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     var SourceInfoSchema = zod.z.object({
       /** Live dispatch key — mutable when the source system allows rename. */
       id: zod.z.string(),
-      /** Source system tag — e.g. 'homeassistant' | 'reolink' | 'frigate'. */
+      /** Source system tag — e.g. 'homeassistant' | 'reolink' | 'onvif'. */
       system: zod.z.string(),
       /** Immutable upstream identifier when available (HA `unique_id`, … ).
       *  Used to detect rename when `id` changes. */
@@ -225747,7 +225928,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * The measured seven-person arrival on device 590 spans 110 s with every
       * internal gap under 30 s. A 12 s fixed window cuts it into three groups; an
       * idle cutoff holds it as one and ends it when the arrival actually ends.
-      * 30 is Frigate's shipped value for the same decision.
+      * 30 s is a widely shipped value for the same decision.
       *
       * ### What it replaces
       *
@@ -228046,6 +228227,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       /** Zone display name at crossing time (falls back to the id). */
       zoneName: zod.z.string().optional()
     });
+    var ZoneOverlapSchema = zod.z.object({
+      zoneId: zod.z.string(),
+      zoneName: zod.z.string().optional(),
+      /** Percentage of the BOX area inside the zone, 0–100. */
+      overlapPct: zod.z.number()
+    });
     var ObjectEventSchema = zod.z.object({
       ...BaseEventFields,
       kind: zod.z.literal("object"),
@@ -228070,6 +228257,35 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       bbox: BoundingBoxSchema.optional(),
       /** Heavy JSON — omitted in slim projection. */
       zones: zod.z.array(zod.z.string()).readonly().optional(),
+      /**
+      * How far inside each stamped zone the box actually was, as a percentage of
+      * the BOX area.
+      *
+      * Membership alone cannot express "at least a third of it inside", which is
+      * the bar an operator argues with — and the number already existed: the
+      * engine computed it, the pipeline logged it, and then discarded it. It
+      * matters most on the events that carry no track, where a rule has nothing
+      * else to judge by.
+      */
+      zoneOverlaps: zod.z.array(ZoneOverlapSchema).readonly().optional(),
+      /**
+      * Present when this event describes a detection the TRACKER refused, so it
+      * has no track and never will.
+      *
+      * A zone-scoped immediate rule asks "is there an animal in the flowerbed
+      * NOW?"; tracking answers a different question ("is this the same subject as
+      * before?") whose confirmation threshold presumes continuity. On 2026-09-09 a
+      * dog at 0.7729, 100% inside a watched zone, was refused three times in six
+      * seconds with three different candidate ids — seven analysed frames in the
+      * window, the subject in a handful of them, metres apart — and produced no
+      * event at all.
+      *
+      * It is NAMED rather than merely implied by a missing `trackId`: an event
+      * with no track and no reason is indistinguishable from a track whose media
+      * went missing, and a consumer that asks this one for a best shot or a
+      * history is asking for something that never existed.
+      */
+      spawnRefused: zod.z.string().optional(),
       /** Omitted in slim projection. */
       state: TrackStateSchema.optional(),
       /**
@@ -229552,6 +229768,35 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       */
       tier: zod.z.enum(["native", "ram-fullframe"]).optional()
     });
+    var ParkedFrameKindSchema = zod.z.enum(["keyFrame", "thumbnail"]);
+    var ParkRefusalSchema = zod.z.enum(["handle-gone", "encode-failed"]);
+    var ParkTrackFrameResultSchema = zod.z.discriminatedUnion("parked", [zod.z.object({
+      parked: zod.z.literal(true),
+      /** The node holding the parcel — what a later retrieval must be pinned to. */
+      nodeId: zod.z.string(),
+      width: zod.z.number().int().positive(),
+      height: zod.z.number().int().positive(),
+      /** JPEG bytes the parcel costs on the node. */
+      bytes: zod.z.number().int().nonnegative(),
+      /** Whether this park replaced a parcel already held for the key. */
+      replaced: zod.z.boolean()
+    }), zod.z.object({
+      parked: zod.z.literal(false),
+      nodeId: zod.z.string(),
+      reason: ParkRefusalSchema,
+      /** Age of the handle at the park, on the runner's clock; null if unknown. */
+      handleAgeMs: zod.z.number().nullable(),
+      detail: zod.z.string().optional()
+    })]);
+    var ParkedTrackFrameSchema = zod.z.object({
+      jpeg: zod.z.string(),
+      width: zod.z.number().int().positive(),
+      height: zod.z.number().int().positive(),
+      /** The frame instant the parcel shows (the caller's clock, echoed back). */
+      timestamp: zod.z.number(),
+      /** When the node stored it (the node's clock). */
+      parkedAt: zod.z.number()
+    });
     var DetailParentSchema = zod.z.object({
       bbox: NativeCropBboxSchema,
       className: zod.z.string()
@@ -229797,7 +230042,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * - `analyzer`: ML/frame-diff motion detection (motion-wasm or other
       *   analyzer providers) running on decoded frames in this runner.
       * - `onboard`: camera-native motion pushes (Reolink Baichuan, ONVIF
-      *   analytics, Frigate motion). The provider emits ProviderMotion
+      *   analytics). The provider emits ProviderMotion
       *   events; the orchestrator forwards to `reportMotion`.
       */
       motionSources: MotionSourcesSchema.default(["analyzer"]),
@@ -230328,7 +230573,60 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           className: zod.z.string(),
           /** Camera the pixels came from. Diagnostics + log tags ONLY — never routing. */
           sourceDeviceId: zod.z.number()
-        }), RunStatelessStepResultSchema, { kind: "mutation" })
+        }), RunStatelessStepResultSchema, { kind: "mutation" }),
+        /**
+        * PARK a frame for a track at the instant it is judged to matter
+        * ([D422](../../../docs/decisions/adr-0422-a-relevant-frame-is-parked-when-it-becomes-relevant.md)).
+        *
+        * The hub's `BestDetectionTracker` — the single "best per track" policy —
+        * concludes a frame is a track's best and calls this on the node that
+        * owns `handle` (`nodePin(handle.nodeId)`), while the handle is young. The
+        * runner cuts `bbox` from the native surface it already holds (a full
+        * frame for `keyFrame`, the caller's subject window for `thumbnail`),
+        * encodes ONE JPEG, and keeps it under `(deviceId, trackId, kind)`. Every
+        * later consumer retrieves by that key (`getParkedTrackFrame`) — a lookup
+        * that cannot miss on age. D52 holds: the rectangle is cut by the runner,
+        * never a pre-cut tile the caller decided. D9/D18 hold: one compressed
+        * encode at a decision point, never a stream.
+        *
+        * Idempotent per `(trackId, kind)`: a later park replaces (the ranking is
+        * the hub's; this adds no second opinion), an out-of-order older instant
+        * is ignored. Bounded per device and per node on the runner
+        * (`parked-frame-store.ts`), oldest-first eviction, never a refusal for
+        * space. A refusal names its reason and is logged on the runner with the
+        * handle's measured age — it is never retried into a loop.
+        */
+        parkTrackFrame: require_sleep.method(zod.z.object({
+          deviceId: zod.z.number(),
+          /** Opaque to the runner — the hub's track id. */
+          trackId: zod.z.string(),
+          kind: ParkedFrameKindSchema,
+          handle: require_sleep.FrameHandleSchema,
+          /** Normalized [0,1] window to cut. `{0,0,1,1}` for a full frame. */
+          bbox: NativeCropBboxSchema,
+          /** Width cap for a full-frame park (the `keyFrame` native cap). */
+          maxWidth: zod.z.number().int().positive().optional(),
+          /** The frame instant (caller's clock) — orders parks for one key. */
+          timestamp: zod.z.number()
+        }), ParkTrackFrameResultSchema, { kind: "mutation" }),
+        /**
+        * Retrieve a parked parcel by `(deviceId, trackId, kind)`. Pinned to the
+        * node that answered the park (`ParkTrackFrameResult.nodeId`). `null` means
+        * nothing was parked under that key on this node — never "too old".
+        */
+        getParkedTrackFrame: require_sleep.method(zod.z.object({
+          deviceId: zod.z.number(),
+          trackId: zod.z.string(),
+          kind: ParkedFrameKindSchema
+        }), ParkedTrackFrameSchema.nullable()),
+        /**
+        * Drop every parcel of a track — the hub closed it. Idempotent. A track
+        * whose release is lost ages out on the runner under a hard ceiling.
+        */
+        releaseParkedTrackFrames: require_sleep.method(zod.z.object({
+          deviceId: zod.z.number(),
+          trackId: zod.z.string()
+        }), zod.z.object({ released: zod.z.number().int().nonnegative() }), { kind: "mutation" })
       }
     };
     var CameraPipelineConfigSchema = zod.z.object({
@@ -233947,8 +234245,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       /**
       * Runtime-state slice — every provider that registers this cap
       * stores the same shape under `device.runtimeState[battery]`.
-      * Cross-provider uniformity: a Reolink Argus, a Frigate sensor
-      * proxy, an ONVIF battery cam all read/write the same keys.
+      * Cross-provider uniformity: a Reolink Argus, a sensor proxy,
+      * an ONVIF battery cam all read/write the same keys.
       * Consumers (BatteryBadge, snapshot wrapper sleep gate) read once
       * via `device.runtimeState.getCapState('battery')` regardless of
       * the underlying driver.
@@ -235802,7 +236100,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * Which integration-marker cap the addon declared, so the wizard can
       * branch on CAP — never on addon name. `device-adoption` integrations
       * (Home Assistant, …) route through the broker step (Approach A);
-      * `device-provider` integrations (Reolink/Frigate/ONVIF) keep the
+      * `device-provider` integrations (Reolink/ONVIF) keep the
       * legacy config → discovery flow.
       */
       kind: zod.z.enum(["device-adoption", "device-provider"]),
@@ -239200,9 +239498,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     });
     var RecordingDeviceUsageSchema = zod.z.object({
       deviceId: zod.z.number(),
+      /** Bytes the ARCHIVE holds for this camera on this node's resolvable
+      *  recordings locations. */
       usedBytes: zod.z.number(),
       /**
-      * Start of this camera's OLDEST indexed segment, across every profile and
+      * Start of this camera's OLDEST ARCHIVED segment, across every profile and
       * location — the "Oldest footage" column in Recordings → Storage, and the
       * only honest answer to "is retention actually holding?" per camera.
       *
@@ -239212,7 +239512,24 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * (types) and the addon ship on different trains, and the addon is usually
       * the later of the two.
       */
-      oldestMs: zod.z.number().nullable().optional()
+      oldestMs: zod.z.number().nullable().optional(),
+      /** Segments the archive holds for this camera — the "M" beside `usedBytes`.
+      *  OPTIONAL for the same train-skew reason as `oldestMs`. */
+      segments: zod.z.number().optional(),
+      /**
+      * RESIDENCY, not the archive: bytes the recorder process currently holds in
+      * its RAM index — the live tail plus the hours a reader hydrated.
+      *
+      * It answers "what can be served without touching the disk", never "how much
+      * footage this camera has". A UI that renders it must label it as such, and
+      * must never total it as storage. OPTIONAL: a recorder predating D418 omits
+      * it, and so does a node whose ledger could not answer.
+      */
+      residentBytes: zod.z.number().optional(),
+      /** The residency counterpart of `oldestMs` — the oldest segment currently in
+      *  RAM, which on a healthy recorder is minutes ago and means nothing about
+      *  retention. `null` = nothing resident. */
+      residentOldestMs: zod.z.number().nullable().optional()
     });
     var RecordingLocationUsageSchema = zod.z.object({
       /** StorageLocation id; null for the legacy/degraded single-root fallback. */
@@ -239246,6 +239563,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       totalUsedBytes: zod.z.number(),
       devices: zod.z.array(RecordingDeviceUsageSchema),
       /**
+      * WHERE `devices[]` came from, so an empty table is never mistaken for empty
+      * disks (D418).
+      *
+      * `archive` = the durable hour ledger answered. `unavailable` = this node
+      * declared no ledger and the recorder REFUSED rather than answering the
+      * question with the resident index (D295 rule 3) — the rows are UNKNOWN, not
+      * zero, and a UI must say so. OPTIONAL: a recorder predating D418 omits it,
+      * and its rows are residency.
+      */
+      devicesRead: zod.z.enum(["archive", "unavailable"]).optional(),
+      /**
       * Per-physical-volume capacity. OPTIONAL, and consumers must render the rest
       * of the payload without it: the hub serves this method through a BAKED
       * router, so a hub whose framework train predates a change to this array
@@ -250210,6 +250538,24 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "pipelineRunner.getParkedTrackFrame": {
+        capName: "pipeline-runner",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
+      "pipelineRunner.parkTrackFrame": {
+        capName: "pipeline-runner",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
+      "pipelineRunner.releaseParkedTrackFrames": {
+        capName: "pipeline-runner",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "pipelineRunner.reportMotion": {
         capName: "pipeline-runner",
         capScope: "system",
@@ -253751,6 +254097,21 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: false
       }],
+      "pipelineRunner.getParkedTrackFrame": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
+      "pipelineRunner.parkTrackFrame": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
+      "pipelineRunner.releaseParkedTrackFrames": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "pipelineRunner.reportMotion": [{
         name: "deviceId",
         form: "single",
@@ -254428,6 +254789,9 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "pipelineRunner.attachCamera",
       "pipelineRunner.detachCamera",
       "pipelineRunner.getCameraMetrics",
+      "pipelineRunner.getParkedTrackFrame",
+      "pipelineRunner.parkTrackFrame",
+      "pipelineRunner.releaseParkedTrackFrames",
       "pipelineRunner.reportMotion",
       "pipelineRunner.runDetailSubtree",
       "pipelineRunner.runStatelessStep",
@@ -258881,6 +259245,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.PYTHON_SCRIPT = PYTHON_SCRIPT;
     exports.PackageUpdateSchema = PackageUpdateSchema;
     exports.PackageVersionInfoSchema = PackageVersionInfoSchema;
+    exports.ParkRefusalSchema = ParkRefusalSchema;
+    exports.ParkTrackFrameResultSchema = ParkTrackFrameResultSchema;
+    exports.ParkedFrameKindSchema = ParkedFrameKindSchema;
+    exports.ParkedTrackFrameSchema = ParkedTrackFrameSchema;
     exports.PasskeyLoginMethodSchema = PasskeyLoginMethodSchema;
     exports.PasskeySummarySchema = PasskeySummarySchema;
     exports.PcmSampleFormatSchema = PcmSampleFormatSchema;
@@ -416420,6 +416788,32 @@ var require_spa_mount = __commonJS({
   }
 });
 
+// ../../server/backend/dist/api/static/frame-policy.js
+var require_frame_policy = __commonJS({
+  "../../server/backend/dist/api/static/frame-policy.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.FRAME_ANCESTORS_POLICY = void 0;
+    exports.isFramePolicyTarget = isFramePolicyTarget;
+    exports.registerFramePolicy = registerFramePolicy;
+    exports.FRAME_ANCESTORS_POLICY = "frame-ancestors 'self'";
+    var CSP_HEADER = "content-security-policy";
+    function isFramePolicyTarget(contentType) {
+      return typeof contentType === "string" && contentType.trim().toLowerCase().startsWith("text/html");
+    }
+    function registerFramePolicy(fastify) {
+      fastify.addHook("onSend", async (_request, reply, payload) => {
+        if (!isFramePolicyTarget(reply.getHeader("content-type")))
+          return payload;
+        if (reply.getHeader(CSP_HEADER) !== void 0)
+          return payload;
+        reply.header(CSP_HEADER, exports.FRAME_ANCESTORS_POLICY);
+        return payload;
+      });
+    }
+  }
+});
+
 // ../../server/backend/dist/boot/integration-id-backfill.js
 var require_integration_id_backfill = __commonJS({
   "../../server/backend/dist/boot/integration-id-backfill.js"(exports) {
@@ -432042,6 +432436,7 @@ var require_main4 = __commonJS({
     var precompressed_asset_js_1 = require_precompressed_asset();
     var spa_static_1 = require_spa_static();
     var spa_mount_1 = require_spa_mount();
+    var frame_policy_1 = require_frame_policy();
     var cap_providers_1 = require_cap_providers();
     var logging_settings_1 = require_logging_settings();
     var request_census_settings_1 = require_request_census_settings();
@@ -432193,6 +432588,7 @@ var require_main4 = __commonJS({
       app.enableCors();
       const fastify = app.getHttpAdapter().getInstance();
       await fastify.register(cookie_1.default);
+      (0, frame_policy_1.registerFramePolicy)(fastify);
       fastify.addHook("onRequest", async (request) => {
         (0, sse_no_compression_js_1.markSseRequestNoCompression)(request);
       });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.2.131",
+  "version": "1.2.134",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",