camstack 1.2.142 → 1.2.144

package/dist/{chunk-I7QELQM5.js → chunk-E3UKNBI7.js}

@@ -15389,6 +15389,25 @@ import { createHash } from "crypto";
 var DEFAULT_MAX_UNIT_BYTES = 16 * 1024 * 1024;
 
 // ../types/dist/index.mjs
+var MEDIA_OWNER_TYPES = [
+  "track",
+  "summary",
+  "face",
+  "identity",
+  "plate",
+  "vehicle",
+  "scene",
+  "motion",
+  "object",
+  "audio"
+];
+var OWNER_TYPES = new Set(MEDIA_OWNER_TYPES);
+var EVENT_OWNER_TYPES = [
+  "motion",
+  "object",
+  "audio"
+];
+var EVENT_OWNER_TYPE_SET = new Set(EVENT_OWNER_TYPES);
 var VideoEncodeSchema = external_exports.object({
   codec: external_exports.enum([
     "h264",
@@ -19991,8 +20010,18 @@ var settingsStoreCapability = {
     insert: method(external_exports.object({
       namespace: external_exports.string().optional(),
       collection: external_exports.string(),
-      record: SettingsRecordSchema
-    }), external_exports.void(), { kind: "mutation" }),
+      record: external_exports.object({
+        id: external_exports.string().optional(),
+        data: external_exports.record(external_exports.string(), external_exports.unknown())
+      })
+    }), external_exports.object({
+      /**
+      * The id the row ACTUALLY got (D473): the one supplied, the UUID minted
+      * for an absent one, or the ROWID SQLite assigned on an `INTEGER`
+      * primary key — which is the only place an auto key is knowable.
+      */
+      id: external_exports.union([external_exports.string(), external_exports.number()])
+    }), { kind: "mutation" }),
     /**
     * Insert MANY records in ONE transaction, returning how many landed.
     *
@@ -20205,8 +20234,18 @@ var dataStoreProviderCapability = {
     insert: method(external_exports.object({
       namespace: external_exports.string().optional(),
       collection: external_exports.string(),
-      record: SettingsRecordSchema
-    }), external_exports.void(), {
+      record: external_exports.object({
+        id: external_exports.string().optional(),
+        data: external_exports.record(external_exports.string(), external_exports.unknown())
+      })
+    }), external_exports.object({
+      /**
+      * The id the row ACTUALLY got (D473): the one supplied, the UUID minted
+      * for an absent one, or the ROWID SQLite assigned on an `INTEGER`
+      * primary key — which is the only place an auto key is knowable.
+      */
+      id: external_exports.union([external_exports.string(), external_exports.number()])
+    }), {
       kind: "mutation",
       auth: "admin"
     }),
@@ -26794,7 +26833,20 @@ var TrackSchema = external_exports.object({
   ...TrackRetrainFields
 });
 var BaseEventFields = {
-  id: external_exports.string(),
+  /**
+  * A SQLite ROWID, assigned by the database (D474).
+  *
+  * Was a 36-character UUID and cost 263 MB of a 1 117 MB database — paid
+  * TWICE per row, in the row and in the primary-key index, across 2.1 million
+  * motion, audio and object events. An `INTEGER PRIMARY KEY` in SQLite **is**
+  * the rowid: the table itself is that B-tree, so the index stops existing
+  * rather than getting smaller. No shorter string does that.
+  *
+  * Defined once here for all three event kinds, which is why they move
+  * together: a per-table migration would have forked this and
+  * `COMMON_BASE_COLUMNS` and reunited them two stages later.
+  */
+  id: external_exports.number().int(),
   deviceId: external_exports.number(),
   timestamp: external_exports.number()
 };
@@ -26813,7 +26865,34 @@ var MotionEventSchema = external_exports.object({
   /** Omitted in slim projection. */
   frameHeight: external_exports.number().optional(),
   /** Populated by B5 (recording playback URL for this event). */
-  mediaUrl: external_exports.string().optional()
+  mediaUrl: external_exports.string().optional(),
+  /**
+  * One row per motion EPISODE, not one per push (D475). `null` while the
+  * episode is still open — a further rising edge extends it in place rather
+  * than inserting a new row. Set once, at close, to `lastOnAt - startedAt`
+  * (the span from the first rising edge to the LAST one, deliberately NOT
+  * `closedAt - startedAt` — the close delay is a quiet CONFIRMATION, not
+  * movement, and folding it in would report `MOTION_CLOSE_AFTER_MS` of
+  * motion for an instantaneous trigger).
+  *
+  * **Absent** (not merely `null`) on a row written before D475 — that means
+  * "closed the old way, before this column existed", never "still open".
+  * Nothing in this codebase may read an absent `durationMs` as an open
+  * episode; only `null` means open.
+  */
+  durationMs: external_exports.number().nullable().optional(),
+  /**
+  * Ms offsets from `timestamp` (the episode's own first rising edge, so the
+  * first entry is always `0`) of every genuine off→on transition the
+  * episode saw — "ogni evento on si deve salvare" (D475). NOT one entry per
+  * push: a firmware source that keepalives at ~1 Hz for the whole burst
+  * (Reolink, Hikvision) produces exactly one edge; a source that reports an
+  * explicit `false` mid-episode and then resumes before the quiet window
+  * elapses produces another. Stored compactly — see `motion-edge-codec.ts`
+  * — and decoded back to this shape on read. Absent/empty on a legacy row,
+  * which must never be read as "no episode happened here".
+  */
+  edges: external_exports.array(external_exports.number()).readonly().optional()
 });
 var DetectionSourceSchema = external_exports.enum(["pipeline", "onboard"]);
 var ZoneCrossingDirectionSchema = external_exports.enum(["enter", "exit"]);
@@ -26844,6 +26923,23 @@ var ObjectEventSchema = external_exports.object({
   * includes it (it is light). Absent on rows written before this field.
   */
   frameId: external_exports.string().optional(),
+  /**
+  * A PRODUCER-chosen key that makes a synthetic event's emission idempotent
+  * (D474).
+  *
+  * Only the package detector writes it, and it exists because the event id
+  * stopped being choosable: the delivery and pick-up rows used to BE their
+  * dedupe key (`pa-pkg-<entryId>-delivered`), which is how "never emit a
+  * second delivery for this entry" survived a restart. An `INTEGER` rowid is
+  * assigned by SQLite, so that key had to move off the primary key rather
+  * than be dropped — a detector that cannot recognise its own row re-delivers
+  * every parcel on every boot.
+  *
+  * Absent on every other object event, and on every row written before this
+  * field. Never a substitute for `id`: it is unique per (producer, occasion),
+  * not per row, and nothing addresses a row by it.
+  */
+  idempotencyKey: external_exports.string().optional(),
   /** Omitted in slim projection. */
   trackId: external_exports.string().optional(),
   className: external_exports.string(),
@@ -35859,9 +35955,54 @@ var MotionStatusSchema = external_exports.object({
   /** Ms epoch of the last detected-true observation. Null if never detected. */
   lastDetectedAt: external_exports.number().nullable(),
   /**
-  * Ms after which `detected` auto-reverts to false if no fresh push
-  * arrives. Null means the provider leaves detected state until a
-  * native "clear" event.
+  * `MOTION_CLOSE_AFTER_MS` while `detected: true` on a `Camera` device,
+  * `null` while false and on every `Sensor` device (D475) — see that
+  * constant's doc for the one-authority rule.
+  *
+  * ## Reading this field still arms nothing
+  *
+  * It reads like an instruction to the consumer ("revert after N ms if
+  * no fresh push arrives") and it is not one: nothing in this repo reads
+  * the LIVE cap value to drive a timer. `pipeline-analytics`'s motion-episode
+  * close DOES now use the same number — `MOTION_CLOSE_AFTER_MS` — but as an
+  * imported constant, not as a read of `device.state.motion.value`, so this
+  * field stays what it always was: DESCRIPTIVE output, mirroring an answer
+  * computed elsewhere. Building a self-clear timer out of a READ of this
+  * field would add a second falling-edge authority beside whichever one
+  * already owns the device, and two that can disagree are worse than one.
+  * Consumers that need a falling edge SHAPED differently — held open across
+  * a flapping source — debounce on their own side and say so, as
+  * `addon-export-alexa/src/motion-clear-hold.ts` and
+  * `addon-export-hap`'s `RESET_DEBOUNCE_MS` both do.
+  *
+  * ## Who writes it
+  *
+  * - **Cameras** — the runner's phase machine, `active → watching` on
+  *   `cooldown_expired`, which then writes this slice with
+  *   `detected: false` (`handlePhaseChanged` in
+  *   `pipeline-runner/index.ts`). It produces the FALLING edge, which
+  *   matters most for the sources that only ever push a rising one:
+  *   Reolink emits `MotionOnMotionChanged { detected: true }` and never
+  *   a false.
+  * - **Sensors** (Home Assistant binary sensors, Homematic) — the
+  *   provider pushes the false itself, from the upstream system's own
+  *   state change. No phase machine is involved.
+  *
+  * ### The phase machine is CANONICAL, not sole — and that is a defect
+  *
+  * An earlier revision of this docblock (mine, 2026-09-12) claimed the
+  * phase machine is the sole writer for a camera. It is not.
+  * `hikvision-camera.ts:3464` and `amcrest-camera.ts:445` both call
+  * `setCapSlice(motionCapability, …)` on their own rising edge, and
+  * Hikvision's comment says why: it read THIS docblock, agreed the
+  * runner is canonical, and wrote anyway to avoid per-tick churn. So
+  * two authorities can disagree about one slice, which this repo
+  * forbids, and the doc said otherwise — which is worse than saying
+  * nothing, because it reads as verification.
+  *
+  * This predates D475 and is not fixed there: the fix touches every
+  * camera provider. Recorded in D475's Consequences. Do not restore the
+  * "sole writer" wording without also removing the other writers.
   */
   autoClearAfterMs: external_exports.number().nullable()
 });
@@ -35927,7 +36068,11 @@ var motionCapability = {
   */
   runtimeState: MotionStatusSchema,
   /**
-  * Runtime-state durability: **session** — self-clearing by construction (`autoClearAfterMs`); a restored `detected: true` is a frozen event, and the next frame re-publishes the real one.
+  * Runtime-state durability: **session** — every writer of this slice
+  * writes only on an EDGE, so a restored `detected: true` would stay
+  * frozen until the next one instead of being corrected. The next edge
+  * re-publishes the real state. (On who the writers are, and why there
+  * is more than one, see `autoClearAfterMs` above.)
   *
   * See `RuntimeStateDurability`. Enforced by
   * `scripts/check-runtime-state-durability.ts`.

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-I7QELQM5.js";
+} from "./chunk-E3UKNBI7.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-7S4JDW34.js");
+  await import("./launcher-25V2QKN6.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-7S4JDW34.js");
+  await import("./launcher-25V2QKN6.js");
 }
 
 // src/commands/setup.ts
@@ -1140,7 +1140,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-ELE6KHU4.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-YH7C75RI.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);

package/dist/{discover-ELE6KHU4.js → discover-YH7C75RI.js}

@@ -5,7 +5,7 @@ import {
   filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-I7QELQM5.js";
+} from "./chunk-E3UKNBI7.js";
 import "./chunk-LMMQX4CK.js";
 export {
   DEFAULT_HUB_HTTPS_PORT,

package/dist/{launcher-7S4JDW34.js → launcher-25V2QKN6.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-0sWJNwme.js
-var require_dist_0sWJNwme = __commonJS({
-  "../system/dist/dist-0sWJNwme.js"(exports) {
+// ../system/dist/dist-DdRxWA7g.js
+var require_dist_DdRxWA7g = __commonJS({
+  "../system/dist/dist-DdRxWA7g.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -30743,8 +30743,18 @@ var require_dist_0sWJNwme = __commonJS({
         insert: method(zod.z.object({
           namespace: zod.z.string().optional(),
           collection: zod.z.string(),
-          record: SettingsRecordSchema
-        }), zod.z.void(), { kind: "mutation" }),
+          record: zod.z.object({
+            id: zod.z.string().optional(),
+            data: zod.z.record(zod.z.string(), zod.z.unknown())
+          })
+        }), zod.z.object({
+          /**
+          * The id the row ACTUALLY got (D473): the one supplied, the UUID minted
+          * for an absent one, or the ROWID SQLite assigned on an `INTEGER`
+          * primary key — which is the only place an auto key is knowable.
+          */
+          id: zod.z.union([zod.z.string(), zod.z.number()])
+        }), { kind: "mutation" }),
         /**
         * Insert MANY records in ONE transaction, returning how many landed.
         *
@@ -30957,8 +30967,18 @@ var require_dist_0sWJNwme = __commonJS({
         insert: method(zod.z.object({
           namespace: zod.z.string().optional(),
           collection: zod.z.string(),
-          record: SettingsRecordSchema
-        }), zod.z.void(), {
+          record: zod.z.object({
+            id: zod.z.string().optional(),
+            data: zod.z.record(zod.z.string(), zod.z.unknown())
+          })
+        }), zod.z.object({
+          /**
+          * The id the row ACTUALLY got (D473): the one supplied, the UUID minted
+          * for an absent one, or the ROWID SQLite assigned on an `INTEGER`
+          * primary key — which is the only place an auto key is knowable.
+          */
+          id: zod.z.union([zod.z.string(), zod.z.number()])
+        }), {
           kind: "mutation",
           auth: "admin"
         }),
@@ -37573,7 +37593,20 @@ var require_dist_0sWJNwme = __commonJS({
       ...TrackRetrainFields
     });
     var BaseEventFields = {
-      id: zod.z.string(),
+      /**
+      * A SQLite ROWID, assigned by the database (D474).
+      *
+      * Was a 36-character UUID and cost 263 MB of a 1 117 MB database — paid
+      * TWICE per row, in the row and in the primary-key index, across 2.1 million
+      * motion, audio and object events. An `INTEGER PRIMARY KEY` in SQLite **is**
+      * the rowid: the table itself is that B-tree, so the index stops existing
+      * rather than getting smaller. No shorter string does that.
+      *
+      * Defined once here for all three event kinds, which is why they move
+      * together: a per-table migration would have forked this and
+      * `COMMON_BASE_COLUMNS` and reunited them two stages later.
+      */
+      id: zod.z.number().int(),
       deviceId: zod.z.number(),
       timestamp: zod.z.number()
     };
@@ -37592,7 +37625,34 @@ var require_dist_0sWJNwme = __commonJS({
       /** Omitted in slim projection. */
       frameHeight: zod.z.number().optional(),
       /** Populated by B5 (recording playback URL for this event). */
-      mediaUrl: zod.z.string().optional()
+      mediaUrl: zod.z.string().optional(),
+      /**
+      * One row per motion EPISODE, not one per push (D475). `null` while the
+      * episode is still open — a further rising edge extends it in place rather
+      * than inserting a new row. Set once, at close, to `lastOnAt - startedAt`
+      * (the span from the first rising edge to the LAST one, deliberately NOT
+      * `closedAt - startedAt` — the close delay is a quiet CONFIRMATION, not
+      * movement, and folding it in would report `MOTION_CLOSE_AFTER_MS` of
+      * motion for an instantaneous trigger).
+      *
+      * **Absent** (not merely `null`) on a row written before D475 — that means
+      * "closed the old way, before this column existed", never "still open".
+      * Nothing in this codebase may read an absent `durationMs` as an open
+      * episode; only `null` means open.
+      */
+      durationMs: zod.z.number().nullable().optional(),
+      /**
+      * Ms offsets from `timestamp` (the episode's own first rising edge, so the
+      * first entry is always `0`) of every genuine off→on transition the
+      * episode saw — "ogni evento on si deve salvare" (D475). NOT one entry per
+      * push: a firmware source that keepalives at ~1 Hz for the whole burst
+      * (Reolink, Hikvision) produces exactly one edge; a source that reports an
+      * explicit `false` mid-episode and then resumes before the quiet window
+      * elapses produces another. Stored compactly — see `motion-edge-codec.ts`
+      * — and decoded back to this shape on read. Absent/empty on a legacy row,
+      * which must never be read as "no episode happened here".
+      */
+      edges: zod.z.array(zod.z.number()).readonly().optional()
     });
     var DetectionSourceSchema = zod.z.enum(["pipeline", "onboard"]);
     var ZoneCrossingDirectionSchema = zod.z.enum(["enter", "exit"]);
@@ -37623,6 +37683,23 @@ var require_dist_0sWJNwme = __commonJS({
       * includes it (it is light). Absent on rows written before this field.
       */
       frameId: zod.z.string().optional(),
+      /**
+      * A PRODUCER-chosen key that makes a synthetic event's emission idempotent
+      * (D474).
+      *
+      * Only the package detector writes it, and it exists because the event id
+      * stopped being choosable: the delivery and pick-up rows used to BE their
+      * dedupe key (`pa-pkg-<entryId>-delivered`), which is how "never emit a
+      * second delivery for this entry" survived a restart. An `INTEGER` rowid is
+      * assigned by SQLite, so that key had to move off the primary key rather
+      * than be dropped — a detector that cannot recognise its own row re-delivers
+      * every parcel on every boot.
+      *
+      * Absent on every other object event, and on every row written before this
+      * field. Never a substitute for `id`: it is unique per (producer, occasion),
+      * not per row, and nothing addresses a row by it.
+      */
+      idempotencyKey: zod.z.string().optional(),
       /** Omitted in slim projection. */
       trackId: zod.z.string().optional(),
       className: zod.z.string(),
@@ -46462,9 +46539,54 @@ var require_dist_0sWJNwme = __commonJS({
       /** Ms epoch of the last detected-true observation. Null if never detected. */
       lastDetectedAt: zod.z.number().nullable(),
       /**
-      * Ms after which `detected` auto-reverts to false if no fresh push
-      * arrives. Null means the provider leaves detected state until a
-      * native "clear" event.
+      * `MOTION_CLOSE_AFTER_MS` while `detected: true` on a `Camera` device,
+      * `null` while false and on every `Sensor` device (D475) — see that
+      * constant's doc for the one-authority rule.
+      *
+      * ## Reading this field still arms nothing
+      *
+      * It reads like an instruction to the consumer ("revert after N ms if
+      * no fresh push arrives") and it is not one: nothing in this repo reads
+      * the LIVE cap value to drive a timer. `pipeline-analytics`'s motion-episode
+      * close DOES now use the same number — `MOTION_CLOSE_AFTER_MS` — but as an
+      * imported constant, not as a read of `device.state.motion.value`, so this
+      * field stays what it always was: DESCRIPTIVE output, mirroring an answer
+      * computed elsewhere. Building a self-clear timer out of a READ of this
+      * field would add a second falling-edge authority beside whichever one
+      * already owns the device, and two that can disagree are worse than one.
+      * Consumers that need a falling edge SHAPED differently — held open across
+      * a flapping source — debounce on their own side and say so, as
+      * `addon-export-alexa/src/motion-clear-hold.ts` and
+      * `addon-export-hap`'s `RESET_DEBOUNCE_MS` both do.
+      *
+      * ## Who writes it
+      *
+      * - **Cameras** — the runner's phase machine, `active → watching` on
+      *   `cooldown_expired`, which then writes this slice with
+      *   `detected: false` (`handlePhaseChanged` in
+      *   `pipeline-runner/index.ts`). It produces the FALLING edge, which
+      *   matters most for the sources that only ever push a rising one:
+      *   Reolink emits `MotionOnMotionChanged { detected: true }` and never
+      *   a false.
+      * - **Sensors** (Home Assistant binary sensors, Homematic) — the
+      *   provider pushes the false itself, from the upstream system's own
+      *   state change. No phase machine is involved.
+      *
+      * ### The phase machine is CANONICAL, not sole — and that is a defect
+      *
+      * An earlier revision of this docblock (mine, 2026-09-12) claimed the
+      * phase machine is the sole writer for a camera. It is not.
+      * `hikvision-camera.ts:3464` and `amcrest-camera.ts:445` both call
+      * `setCapSlice(motionCapability, …)` on their own rising edge, and
+      * Hikvision's comment says why: it read THIS docblock, agreed the
+      * runner is canonical, and wrote anyway to avoid per-tick churn. So
+      * two authorities can disagree about one slice, which this repo
+      * forbids, and the doc said otherwise — which is worse than saying
+      * nothing, because it reads as verification.
+      *
+      * This predates D475 and is not fixed there: the fix touches every
+      * camera provider. Recorded in D475's Consequences. Do not restore the
+      * "sole writer" wording without also removing the other writers.
       */
       autoClearAfterMs: zod.z.number().nullable()
     });
@@ -46530,7 +46652,11 @@ var require_dist_0sWJNwme = __commonJS({
       */
       runtimeState: MotionStatusSchema,
       /**
-      * Runtime-state durability: **session** — self-clearing by construction (`autoClearAfterMs`); a restored `detected: true` is a frozen event, and the next frame re-publishes the real one.
+      * Runtime-state durability: **session** — every writer of this slice
+      * writes only on an EDGE, so a restored `detected: true` would stay
+      * frozen until the next one instead of being corrected. The next edge
+      * re-publishes the real state. (On who the writers are, and why there
+      * is more than one, see `autoClearAfterMs` above.)
       *
       * See `RuntimeStateDurability`. Enforced by
       * `scripts/check-runtime-state-durability.ts`.
@@ -61739,7 +61865,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_0sWJNwme();
+    var require_dist10 = require_dist_DdRxWA7g();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -62558,7 +62684,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_0sWJNwme();
+    var require_dist10 = require_dist_DdRxWA7g();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -62652,7 +62778,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_0sWJNwme();
+    var require_dist10 = require_dist_DdRxWA7g();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -63549,11 +63675,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-Dh-XMfFx.js
-var require_retired_settings_keys_Dh_XMfFx = __commonJS({
-  "../system/dist/retired-settings-keys-Dh-XMfFx.js"(exports) {
+// ../system/dist/retired-settings-keys-C-jOWHI0.js
+var require_retired_settings_keys_C_jOWHI0 = __commonJS({
+  "../system/dist/retired-settings-keys-C-jOWHI0.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_0sWJNwme();
+    var require_dist10 = require_dist_DdRxWA7g();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -65788,8 +65914,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_0sWJNwme();
-    var require_retired_settings_keys = require_retired_settings_keys_Dh_XMfFx();
+    var require_dist10 = require_dist_DdRxWA7g();
+    var require_retired_settings_keys = require_retired_settings_keys_C_jOWHI0();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -71414,7 +71540,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_0sWJNwme();
+    var require_dist10 = require_dist_DdRxWA7g();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -71551,7 +71677,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_0sWJNwme();
+    var require_dist10 = require_dist_DdRxWA7g();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -71747,7 +71873,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_0sWJNwme();
+    var require_dist10 = require_dist_DdRxWA7g();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -79560,7 +79686,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_0sWJNwme();
+    var require_dist10 = require_dist_DdRxWA7g();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -80147,7 +80273,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_0sWJNwme();
+    var require_dist10 = require_dist_DdRxWA7g();
     var node_fs_promises = __require("fs/promises");
     var node_fs = __require("fs");
     node_fs = require_chunk.__toESM(node_fs);
@@ -82900,7 +83026,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_0sWJNwme();
+    var require_dist10 = require_dist_DdRxWA7g();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -84127,8 +84253,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_0sWJNwme();
-    var require_retired_settings_keys = require_retired_settings_keys_Dh_XMfFx();
+    var require_dist10 = require_dist_DdRxWA7g();
+    var require_retired_settings_keys = require_retired_settings_keys_C_jOWHI0();
     var require_wal_checkpoint_policy = require_wal_checkpoint_policy_CCJZngds();
     var node_crypto = __require("crypto");
     var node_path = __require("path");
@@ -84948,11 +85074,12 @@ var require_sqlite_settings_addon = __commonJS({
       async insert({ namespace, collection, record }) {
         const scoped = this.scopedName(namespace, collection);
         const decl = this.requireDeclared(scoped);
-        const id = record.id || (0, node_crypto.randomUUID)();
-        const row = { [decl.primaryKey]: id };
+        const suppliedOrMinted = decl.autoPrimaryKey ? null : record.id || (0, node_crypto.randomUUID)();
+        const row = decl.autoPrimaryKey ? {} : { [decl.primaryKey]: suppliedOrMinted };
         if (decl.columns.size === 1 && decl.columns.has("data")) row["data"] = JSON.stringify(record.data);
         else for (const [k, v] of Object.entries(record.data)) if (decl.columns.has(k)) row[k] = this.serializeColumnValue(v);
-        await this.tableInsert(scoped, row);
+        const rowid = await this.tableInsert(scoped, row);
+        return { id: suppliedOrMinted ?? Number(rowid) };
       }
       /**
       * Insert a batch in ONE transaction, on ONE prepared statement.
@@ -85829,6 +85956,8 @@ var require_sqlite_settings_addon = __commonJS({
         this.declaredCollections.delete(table);
         return { rows };
       }
+      /** Returns SQLite's `lastInsertRowid` — the only place an auto-assigned key
+      *  is knowable (D473). */
       async tableInsert(table, row) {
         const keys = Object.keys(row);
         const cols = keys.map((k) => `"${k}"`).join(", ");
@@ -85837,7 +85966,7 @@ var require_sqlite_settings_addon = __commonJS({
           const v = row[k];
           return typeof v === "object" && v !== null ? JSON.stringify(v) : v;
         });
-        this.getDb().prepare(`INSERT INTO "${table}" (${cols}) VALUES (${placeholders})`).run(...values);
+        return this.getDb().prepare(`INSERT INTO "${table}" (${cols}) VALUES (${placeholders})`).run(...values).lastInsertRowid;
       }
       async tableUpdate(table, filter, updates) {
         const setClauses = [];
@@ -86864,7 +86993,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_0sWJNwme();
+    var require_dist10 = require_dist_DdRxWA7g();
     var require_hub_cap_forward = require_hub_cap_forward_DmHNjbB0();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -90514,7 +90643,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_0sWJNwme();
+    var require_dist10 = require_dist_DdRxWA7g();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -108575,7 +108704,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_0sWJNwme();
+    var require_dist10 = require_dist_DdRxWA7g();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -121311,9 +121440,9 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/manifest-system-deps-YYKKCKSF.js
-var require_manifest_system_deps_YYKKCKSF = __commonJS({
-  "../system/dist/manifest-system-deps-YYKKCKSF.js"(exports) {
+// ../system/dist/manifest-system-deps-8x1jgPz_.js
+var require_manifest_system_deps_8x1jgPz = __commonJS({
+  "../system/dist/manifest-system-deps-8x1jgPz_.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
     require_hub_cap_forward_DmHNjbB0();
@@ -121812,7 +121941,7 @@ var require_manifest_system_deps_YYKKCKSF = __commonJS({
     }
     function formatMeshQueue(peers) {
       if (peers === void 0) return "";
-      const total = peers.reduce((sum, p) => sum + p.queuedBytes, 0);
+      const total = peers.reduce((sum2, p) => sum2 + p.queuedBytes, 0);
       const top = peers.filter((p) => p.queuedBytes > 0).toSorted((a, b) => b.queuedBytes - a.queuedBytes || a.nodeId.localeCompare(b.nodeId)).slice(0, 3).map((p) => `${p.nodeId}:${kb(p.queuedBytes)}`).join(",");
       return ` meshQueued=${kb(total)}kB` + (top.length === 0 ? "" : ` meshQueuedTop=${top}`);
     }
@@ -122165,6 +122294,98 @@ var require_manifest_system_deps_YYKKCKSF = __commonJS({
       const perMin = (n) => window2.windowMs <= 0 ? "?" : (n / (window2.windowMs / 6e4)).toFixed(1);
       return ` gc=maj${window2.majors}/min${window2.minors}/inc${window2.incrementals}@${Math.round(window2.windowMs / 1e3)}s gcMajPerMin=${perMin(window2.majors)} gcPauseMs=${Math.round(window2.pauseMs)}`;
     }
+    function createProcessCpuCensus(options) {
+      let windowStart = options.startedAt;
+      let cpuAtStart = options.cpuUsageUs();
+      let tasksAtStart = options.readTasks();
+      return { read: (at) => {
+        const windowMs = at - windowStart;
+        if (windowMs < 1e3) return null;
+        const cpuNow = options.cpuUsageUs();
+        const tasksNow = options.readTasks();
+        const cpuUs = cpuNow - cpuAtStart;
+        const percentOfCore = cpuUs <= 0 ? 0 : round1(cpuUs / 1e3 / windowMs * 100);
+        const reading = {
+          percentOfCore,
+          windowMs,
+          v8Workers: shareOfWorkers(tasksAtStart, tasksNow, percentOfCore)
+        };
+        windowStart = at;
+        cpuAtStart = cpuNow;
+        tasksAtStart = tasksNow;
+        return reading;
+      } };
+    }
+    function shareOfWorkers(before, after, percentOfCore) {
+      if (before === null || after === null) return null;
+      const b = sum(before);
+      const a = sum(after);
+      const workerTicks = a.worker - b.worker;
+      const totalTicks = a.total - b.total;
+      if (workerTicks < 0 || totalTicks <= 0 || workerTicks > totalTicks) return null;
+      return {
+        percentOfCore: round1(percentOfCore * (workerTicks / totalTicks)),
+        threads: a.workerThreads
+      };
+    }
+    var V8_WORKER_COMM = "V8Worker";
+    function sum(tasks) {
+      let worker2 = 0;
+      let total = 0;
+      let workerThreads = 0;
+      for (const t of tasks) {
+        total += t.ticks;
+        if (t.comm === V8_WORKER_COMM) {
+          worker2 += t.ticks;
+          workerThreads += 1;
+        }
+      }
+      return {
+        worker: worker2,
+        total,
+        workerThreads
+      };
+    }
+    function round1(n) {
+      return Math.round(n * 10) / 10;
+    }
+    function readSelfTaskTicks() {
+      try {
+        const tids = (0, node_fs.readdirSync)("/proc/self/task");
+        const out = [];
+        for (const tid of tids) {
+          const parsed = parseTaskStat(tid);
+          if (parsed !== null) out.push(parsed);
+        }
+        return out.length === 0 ? null : out;
+      } catch {
+        return null;
+      }
+    }
+    function parseTaskStat(tid) {
+      try {
+        const raw = (0, node_fs.readFileSync)(`/proc/self/task/${tid}/stat`, "utf8");
+        const close = raw.lastIndexOf(") ");
+        const open = raw.indexOf(" (");
+        if (close < 0 || open < 0 || close <= open) return null;
+        const comm = raw.slice(open + 2, close);
+        const fields = raw.slice(close + 2).split(" ");
+        const utime = Number(fields[11]);
+        const stime = Number(fields[12]);
+        if (!Number.isFinite(utime) || !Number.isFinite(stime)) return null;
+        return {
+          comm,
+          ticks: utime + stime
+        };
+      } catch {
+        return null;
+      }
+    }
+    function formatProcessCpu(reading) {
+      if (reading === null || reading === void 0) return "";
+      const workers = reading.v8Workers;
+      return ` procCpu=${reading.percentOfCore.toFixed(1)}%` + (workers === null ? "" : ` v8WorkerCpu=${workers.percentOfCore.toFixed(1)}%/${workers.threads}thr`);
+    }
     var HUB_MAIN_HEAP_WATCH_LABEL = "hub-main";
     var HEAP_WATCH_INTERVAL_MS = 6e4;
     var HEAP_WATCH_WARN_RATIO = 0.8;
@@ -122335,6 +122556,15 @@ var require_manifest_system_deps_YYKKCKSF = __commonJS({
       const now = reclaimOptions?.now ?? (() => Date.now());
       const gcObserver = probes?.gcObserver ?? nodeGcObserver();
       const gcCensus = createGcCensus(gcObserver.install, gcObserver.kinds, now());
+      const cpuProbe = probes?.processCpu;
+      const processCpu = createProcessCpuCensus({
+        cpuUsageUs: cpuProbe?.cpuUsageUs ?? (() => {
+          const u = process.cpuUsage();
+          return u.user + u.system;
+        }),
+        readTasks: cpuProbe?.readTasks ?? readSelfTaskTicks,
+        startedAt: now()
+      });
       const triggerMb = reclaimOptions?.triggerMb ?? 1024;
       const minIntervalMs = reclaimOptions?.minIntervalMs ?? 12e4;
       const steadyStateIntervalMs = reclaimOptions?.steadyStateIntervalMs ?? 6e5;
@@ -122410,7 +122640,7 @@ var require_manifest_system_deps_YYKKCKSF = __commonJS({
           const due = at - lastLoggedAt >= intervalMs;
           if (mode === "escalated" || due) {
             lastLoggedAt = at;
-            const line = format2(label, sample, loopDelay?.read(), budgetMb, `${formatHeapSpaces(readSpaces())}${formatEventPlane(eventPlane?.read())}` + formatSocketPlane(socketPlane?.read()) + formatMeshQueue(meshQueue?.()) + formatGcCensus(gcCensus?.read(at)));
+            const line = format2(label, sample, loopDelay?.read(), budgetMb, `${formatHeapSpaces(readSpaces())}${formatEventPlane(eventPlane?.read())}` + formatSocketPlane(socketPlane?.read()) + formatMeshQueue(meshQueue?.()) + formatGcCensus(gcCensus?.read(at)) + formatProcessCpu(processCpu.read(at)));
             if (sample.nearLimit) sink.warn(`${line} \u2014 APPROACHING HEAP LIMIT`);
             else if (mode === "escalated") sink.warn(`${line} \u2014 heap elevated, sampling every ${probeIntervalMs}ms`);
             else sink.info(line);
@@ -130734,11 +130964,11 @@ var require_manifest_system_deps_YYKKCKSF = __commonJS({
   }
 });
 
-// ../system/dist/custom-action-registry-DvVMHLfJ.js
-var require_custom_action_registry_DvVMHLfJ = __commonJS({
-  "../system/dist/custom-action-registry-DvVMHLfJ.js"(exports) {
+// ../system/dist/custom-action-registry-BTB-LgGN.js
+var require_custom_action_registry_BTB_LgGN = __commonJS({
+  "../system/dist/custom-action-registry-BTB-LgGN.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_0sWJNwme();
+    var require_dist10 = require_dist_DdRxWA7g();
     var CustomActionRegistry = class {
       byAddon = /* @__PURE__ */ new Map();
       registerAddon(addonId, catalog, handler) {
@@ -134552,7 +134782,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_0sWJNwme();
+    var require_dist10 = require_dist_DdRxWA7g();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -134579,9 +134809,9 @@ var require_dist3 = __commonJS({
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_event_loop_stall_monitor = require_event_loop_stall_monitor_CAsHdMwP();
     var require_tls$1 = require_tls_BFs4PzoW();
-    var require_manifest_system_deps = require_manifest_system_deps_YYKKCKSF();
+    var require_manifest_system_deps = require_manifest_system_deps_8x1jgPz();
     var require_resource_monitor = require_resource_monitor_LVE1BoLs();
-    var require_custom_action_registry = require_custom_action_registry_DvVMHLfJ();
+    var require_custom_action_registry = require_custom_action_registry_BTB_LgGN();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
@@ -215695,6 +215925,56 @@ var require_dist4 = __commonJS({
     var require_enums2 = require_enums();
     var require_err_msg = require_err_msg_COpsHMw2();
     var zod = require_zod();
+    var MEDIA_OWNER_TYPES = [
+      "track",
+      "summary",
+      "face",
+      "identity",
+      "plate",
+      "vehicle",
+      "scene",
+      "motion",
+      "object",
+      "audio"
+    ];
+    var OWNER_TYPES = new Set(MEDIA_OWNER_TYPES);
+    var DIGITS = /^\d+$/;
+    function isOwnerType(value) {
+      return OWNER_TYPES.has(value);
+    }
+    function parseMediaOwnerKey(key) {
+      const parts = key.split(":");
+      if (parts.length !== 3 && parts.length !== 4) return null;
+      const [ownerType, ownerId, fileKind, timestamp] = parts;
+      if (ownerType === void 0 || !isOwnerType(ownerType)) return null;
+      if (ownerId === void 0 || ownerId.length === 0) return null;
+      if (fileKind === void 0 || fileKind.length === 0) return null;
+      if (timestamp === void 0) return {
+        ownerType,
+        ownerId,
+        fileKind
+      };
+      if (!DIGITS.test(timestamp)) return null;
+      return {
+        ownerType,
+        ownerId,
+        fileKind,
+        timestampMs: Number(timestamp)
+      };
+    }
+    function formatMediaOwnerKey(key) {
+      const head = `${key.ownerType}:${key.ownerId}:${key.fileKind}`;
+      return key.timestampMs === void 0 ? head : `${head}:${key.timestampMs}`;
+    }
+    var EVENT_OWNER_TYPES = [
+      "motion",
+      "object",
+      "audio"
+    ];
+    var EVENT_OWNER_TYPE_SET = new Set(EVENT_OWNER_TYPES);
+    function isEventOwnerType(ownerType) {
+      return EVENT_OWNER_TYPE_SET.has(ownerType);
+    }
     function buildAddonRouteProvider(id, routes) {
       return {
         id,
@@ -222599,8 +222879,18 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         insert: require_sleep.method(zod.z.object({
           namespace: zod.z.string().optional(),
           collection: zod.z.string(),
-          record: SettingsRecordSchema
-        }), zod.z.void(), { kind: "mutation" }),
+          record: zod.z.object({
+            id: zod.z.string().optional(),
+            data: zod.z.record(zod.z.string(), zod.z.unknown())
+          })
+        }), zod.z.object({
+          /**
+          * The id the row ACTUALLY got (D473): the one supplied, the UUID minted
+          * for an absent one, or the ROWID SQLite assigned on an `INTEGER`
+          * primary key — which is the only place an auto key is knowable.
+          */
+          id: zod.z.union([zod.z.string(), zod.z.number()])
+        }), { kind: "mutation" }),
         /**
         * Insert MANY records in ONE transaction, returning how many landed.
         *
@@ -222813,8 +223103,18 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         insert: require_sleep.method(zod.z.object({
           namespace: zod.z.string().optional(),
           collection: zod.z.string(),
-          record: SettingsRecordSchema
-        }), zod.z.void(), {
+          record: zod.z.object({
+            id: zod.z.string().optional(),
+            data: zod.z.record(zod.z.string(), zod.z.unknown())
+          })
+        }), zod.z.object({
+          /**
+          * The id the row ACTUALLY got (D473): the one supplied, the UUID minted
+          * for an absent one, or the ROWID SQLite assigned on an `INTEGER`
+          * primary key — which is the only place an auto key is knowable.
+          */
+          id: zod.z.union([zod.z.string(), zod.z.number()])
+        }), {
           kind: "mutation",
           auth: "admin"
         }),
@@ -230330,7 +230630,20 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       ...TrackRetrainFields
     });
     var BaseEventFields = {
-      id: zod.z.string(),
+      /**
+      * A SQLite ROWID, assigned by the database (D474).
+      *
+      * Was a 36-character UUID and cost 263 MB of a 1 117 MB database — paid
+      * TWICE per row, in the row and in the primary-key index, across 2.1 million
+      * motion, audio and object events. An `INTEGER PRIMARY KEY` in SQLite **is**
+      * the rowid: the table itself is that B-tree, so the index stops existing
+      * rather than getting smaller. No shorter string does that.
+      *
+      * Defined once here for all three event kinds, which is why they move
+      * together: a per-table migration would have forked this and
+      * `COMMON_BASE_COLUMNS` and reunited them two stages later.
+      */
+      id: zod.z.number().int(),
       deviceId: zod.z.number(),
       timestamp: zod.z.number()
     };
@@ -230349,7 +230662,34 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       /** Omitted in slim projection. */
       frameHeight: zod.z.number().optional(),
       /** Populated by B5 (recording playback URL for this event). */
-      mediaUrl: zod.z.string().optional()
+      mediaUrl: zod.z.string().optional(),
+      /**
+      * One row per motion EPISODE, not one per push (D475). `null` while the
+      * episode is still open — a further rising edge extends it in place rather
+      * than inserting a new row. Set once, at close, to `lastOnAt - startedAt`
+      * (the span from the first rising edge to the LAST one, deliberately NOT
+      * `closedAt - startedAt` — the close delay is a quiet CONFIRMATION, not
+      * movement, and folding it in would report `MOTION_CLOSE_AFTER_MS` of
+      * motion for an instantaneous trigger).
+      *
+      * **Absent** (not merely `null`) on a row written before D475 — that means
+      * "closed the old way, before this column existed", never "still open".
+      * Nothing in this codebase may read an absent `durationMs` as an open
+      * episode; only `null` means open.
+      */
+      durationMs: zod.z.number().nullable().optional(),
+      /**
+      * Ms offsets from `timestamp` (the episode's own first rising edge, so the
+      * first entry is always `0`) of every genuine off→on transition the
+      * episode saw — "ogni evento on si deve salvare" (D475). NOT one entry per
+      * push: a firmware source that keepalives at ~1 Hz for the whole burst
+      * (Reolink, Hikvision) produces exactly one edge; a source that reports an
+      * explicit `false` mid-episode and then resumes before the quiet window
+      * elapses produces another. Stored compactly — see `motion-edge-codec.ts`
+      * — and decoded back to this shape on read. Absent/empty on a legacy row,
+      * which must never be read as "no episode happened here".
+      */
+      edges: zod.z.array(zod.z.number()).readonly().optional()
     });
     var DetectionSourceSchema = zod.z.enum(["pipeline", "onboard"]);
     var ZoneCrossingDirectionSchema = zod.z.enum(["enter", "exit"]);
@@ -230380,6 +230720,23 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * includes it (it is light). Absent on rows written before this field.
       */
       frameId: zod.z.string().optional(),
+      /**
+      * A PRODUCER-chosen key that makes a synthetic event's emission idempotent
+      * (D474).
+      *
+      * Only the package detector writes it, and it exists because the event id
+      * stopped being choosable: the delivery and pick-up rows used to BE their
+      * dedupe key (`pa-pkg-<entryId>-delivered`), which is how "never emit a
+      * second delivery for this entry" survived a restart. An `INTEGER` rowid is
+      * assigned by SQLite, so that key had to move off the primary key rather
+      * than be dropped — a detector that cannot recognise its own row re-delivers
+      * every parcel on every boot.
+      *
+      * Absent on every other object event, and on every row written before this
+      * field. Never a substitute for `id`: it is unique per (producer, occasion),
+      * not per row, and nothing addresses a row by it.
+      */
+      idempotencyKey: zod.z.string().optional(),
       /** Omitted in slim projection. */
       trackId: zod.z.string().optional(),
       className: zod.z.string(),
@@ -239415,14 +239772,60 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         }), { kind: "mutation" })
       }
     };
+    var MOTION_CLOSE_AFTER_MS = 15e3;
     var MotionStatusSchema = zod.z.object({
       detected: zod.z.boolean(),
       /** Ms epoch of the last detected-true observation. Null if never detected. */
       lastDetectedAt: zod.z.number().nullable(),
       /**
-      * Ms after which `detected` auto-reverts to false if no fresh push
-      * arrives. Null means the provider leaves detected state until a
-      * native "clear" event.
+      * `MOTION_CLOSE_AFTER_MS` while `detected: true` on a `Camera` device,
+      * `null` while false and on every `Sensor` device (D475) — see that
+      * constant's doc for the one-authority rule.
+      *
+      * ## Reading this field still arms nothing
+      *
+      * It reads like an instruction to the consumer ("revert after N ms if
+      * no fresh push arrives") and it is not one: nothing in this repo reads
+      * the LIVE cap value to drive a timer. `pipeline-analytics`'s motion-episode
+      * close DOES now use the same number — `MOTION_CLOSE_AFTER_MS` — but as an
+      * imported constant, not as a read of `device.state.motion.value`, so this
+      * field stays what it always was: DESCRIPTIVE output, mirroring an answer
+      * computed elsewhere. Building a self-clear timer out of a READ of this
+      * field would add a second falling-edge authority beside whichever one
+      * already owns the device, and two that can disagree are worse than one.
+      * Consumers that need a falling edge SHAPED differently — held open across
+      * a flapping source — debounce on their own side and say so, as
+      * `addon-export-alexa/src/motion-clear-hold.ts` and
+      * `addon-export-hap`'s `RESET_DEBOUNCE_MS` both do.
+      *
+      * ## Who writes it
+      *
+      * - **Cameras** — the runner's phase machine, `active → watching` on
+      *   `cooldown_expired`, which then writes this slice with
+      *   `detected: false` (`handlePhaseChanged` in
+      *   `pipeline-runner/index.ts`). It produces the FALLING edge, which
+      *   matters most for the sources that only ever push a rising one:
+      *   Reolink emits `MotionOnMotionChanged { detected: true }` and never
+      *   a false.
+      * - **Sensors** (Home Assistant binary sensors, Homematic) — the
+      *   provider pushes the false itself, from the upstream system's own
+      *   state change. No phase machine is involved.
+      *
+      * ### The phase machine is CANONICAL, not sole — and that is a defect
+      *
+      * An earlier revision of this docblock (mine, 2026-09-12) claimed the
+      * phase machine is the sole writer for a camera. It is not.
+      * `hikvision-camera.ts:3464` and `amcrest-camera.ts:445` both call
+      * `setCapSlice(motionCapability, …)` on their own rising edge, and
+      * Hikvision's comment says why: it read THIS docblock, agreed the
+      * runner is canonical, and wrote anyway to avoid per-tick churn. So
+      * two authorities can disagree about one slice, which this repo
+      * forbids, and the doc said otherwise — which is worse than saying
+      * nothing, because it reads as verification.
+      *
+      * This predates D475 and is not fixed there: the fix touches every
+      * camera provider. Recorded in D475's Consequences. Do not restore the
+      * "sole writer" wording without also removing the other writers.
       */
       autoClearAfterMs: zod.z.number().nullable()
     });
@@ -239488,7 +239891,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       */
       runtimeState: MotionStatusSchema,
       /**
-      * Runtime-state durability: **session** — self-clearing by construction (`autoClearAfterMs`); a restored `detected: true` is a frozen event, and the next frame re-publishes the real one.
+      * Runtime-state durability: **session** — every writer of this slice
+      * writes only on an EDGE, so a restored `detected: true` would stay
+      * frozen until the next one instead of being corrected. The next edge
+      * re-publishes the real state. (On who the writers are, and why there
+      * is more than one, see `autoClearAfterMs` above.)
       *
       * See `RuntimeStateDurability`. Enforced by
       * `scripts/check-runtime-state-durability.ts`.
@@ -261124,6 +261531,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.EVENTFUL_CAP_NAMES = EVENTFUL_CAP_NAMES;
     exports.EVENT_DENSITY_BATCH_MAX = EVENT_DENSITY_BATCH_MAX;
     exports.EVENT_KIND_BY_CAP = EVENT_KIND_BY_CAP;
+    exports.EVENT_OWNER_TYPES = EVENT_OWNER_TYPES;
     exports.EVENT_PAD_MS = EVENT_PAD_MS;
     exports.EVENT_TAXONOMY = EVENT_TAXONOMY;
     exports.EXPORT_DENSE_MAX_RANGES = EXPORT_DENSE_MAX_RANGES;
@@ -261314,10 +261722,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.MAX_REASONS_PER_KEY = MAX_REASONS_PER_KEY;
     exports.MAX_SENSOR_TRIGGER_DEVICES = MAX_SENSOR_TRIGGER_DEVICES;
     exports.MAX_TRACK_DEBUG_NOTE_LEN = MAX_TRACK_DEBUG_NOTE_LEN;
+    exports.MEDIA_OWNER_TYPES = MEDIA_OWNER_TYPES;
     exports.METHOD_ACCESS_MAP = METHOD_ACCESS_MAP;
     exports.METHOD_DEVICE_SELECTORS = METHOD_DEVICE_SELECTORS;
     exports.MODEL_FORMATS = MODEL_FORMATS;
     exports.MODEL_PROVIDER_IDS = MODEL_PROVIDER_IDS;
+    exports.MOTION_CLOSE_AFTER_MS = MOTION_CLOSE_AFTER_MS;
     exports.MOTION_TRIGGER_FEATURE = MOTION_TRIGGER_FEATURE;
     exports.ManagedModelCatalogEntrySchema = ManagedModelCatalogEntrySchema;
     exports.ManagedModelExtraFileSchema = ManagedModelExtraFileSchema;
@@ -262089,6 +262499,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.foldSnapshotByFunction = foldSnapshotByFunction;
     exports.formatForBackend = formatForBackend;
     exports.formatForRuntime = formatForRuntime;
+    exports.formatMediaOwnerKey = formatMediaOwnerKey;
     exports.gasCapability = gasCapability;
     exports.gbToBytes = gbToBytes;
     exports.generateAutomationBlock = generateAutomationBlock;
@@ -262124,6 +262535,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.isDeviceConfigCap = require_sleep.isDeviceConfigCap;
     exports.isDeviceScopedCap = require_sleep.isDeviceScopedCap;
     exports.isEvent = require_sleep.isEvent;
+    exports.isEventOwnerType = isEventOwnerType;
     exports.isFirstLevelMacroClass = isFirstLevelMacroClass;
     exports.isIsolatedBuiltin = isIsolatedBuiltin;
     exports.isLocationEnabled = isLocationEnabled;
@@ -262211,6 +262623,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.parseJsonArray = require_sleep.parseJsonArray;
     exports.parseJsonObject = require_sleep.parseJsonObject;
     exports.parseJsonUnknown = require_sleep.parseJsonUnknown;
+    exports.parseMediaOwnerKey = parseMediaOwnerKey;
     exports.parseProcStatus = parseProcStatus;
     exports.parseProfileBrokerId = require_sleep.parseProfileBrokerId;
     exports.parseRuleSection = parseRuleSection;
@@ -262981,6 +263394,7 @@ var require_server_root = __commonJS({
           devUploadsDir: /* @__PURE__ */ __name(() => devUploadsDir, "devUploadsDir"),
           emptyServerRootState: /* @__PURE__ */ __name(() => emptyServerRootState, "emptyServerRootState"),
           findMissingNativePrebuilds: /* @__PURE__ */ __name(() => findMissingNativePrebuilds, "findMissingNativePrebuilds"),
+          findUnappliedClosurePatches: /* @__PURE__ */ __name(() => findUnappliedClosurePatches, "findUnappliedClosurePatches"),
           isDevChannelVersion: /* @__PURE__ */ __name(() => isDevChannelVersion, "isDevChannelVersion"),
           isHostExternal: /* @__PURE__ */ __name(() => isHostExternal, "isHostExternal"),
           isServerRootState: /* @__PURE__ */ __name(() => isServerRootState, "isServerRootState"),
@@ -263385,6 +263799,58 @@ var require_server_root = __commonJS({
           return missing;
         }
         __name(findMissingNativePrebuilds, "findMissingNativePrebuilds");
+        var CLOSURE_PATCH_PAYLOAD = [
+          "node_modules",
+          "@camstack",
+          "server",
+          "dist",
+          "closure-patches"
+        ];
+        var CLOSURE_PATCH_MANIFEST = "patch-reach.json";
+        function fileContains(file, marker) {
+          try {
+            return fs3.readFileSync(file, "utf-8").includes(marker);
+          } catch {
+            return false;
+          }
+        }
+        __name(fileContains, "fileContains");
+        function findUnappliedClosurePatches(closureDir) {
+          const payloadDir = path3.join(closureDir, ...CLOSURE_PATCH_PAYLOAD);
+          let manifest;
+          try {
+            const raw = JSON.parse(fs3.readFileSync(path3.join(payloadDir, CLOSURE_PATCH_MANIFEST), "utf-8"));
+            if (typeof raw !== "object" || raw === null) return [];
+            manifest = raw;
+          } catch {
+            return [];
+          }
+          if (!Array.isArray(manifest.patches)) return [];
+          const nm = path3.join(closureDir, "node_modules");
+          const missing = [];
+          for (const raw of manifest.patches) {
+            if (raw.reach !== "closure-postinstall") continue;
+            const pkg = raw.package;
+            const markers = raw.markers;
+            if (typeof pkg !== "string" || typeof markers !== "object" || markers === null) continue;
+            const pkgDir = path3.join(nm, pkg);
+            if (!fs3.existsSync(pkgDir)) {
+              continue;
+            }
+            for (const [rel, list] of Object.entries(markers)) {
+              if (!Array.isArray(list)) continue;
+              const target = path3.join(pkgDir, ...rel.split("/"));
+              for (const marker of list) {
+                if (typeof marker !== "string") continue;
+                if (!fileContains(target, marker)) {
+                  missing.push(`${pkg}/${rel}: ${marker}`);
+                }
+              }
+            }
+          }
+          return missing;
+        }
+        __name(findUnappliedClosurePatches, "findUnappliedClosurePatches");
         function rmrf(target) {
           try {
             fs3.rmSync(target, {
@@ -264321,6 +264787,10 @@ var require_server_root = __commonJS({
               if (missingNatives.length > 0) {
                 throw new Error(`staged closure missing native prebuilds: ${missingNatives.join(", ")} \u2014 refusing to arm a swap that would break the forked runners`);
               }
+              const unpatched = findUnappliedClosurePatches(stagingDir);
+              if (unpatched.length > 0) {
+                throw new Error(`staged closure did not apply its shipped patches: ${unpatched.join(", ")} \u2014 refusing to arm a swap into an unpatched closure`);
+              }
               return stagingDir;
             } catch (err) {
               await fs6.promises.rm(stagingDir, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.2.142",
+  "version": "1.2.144",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",