camstack 1.2.144 → 1.2.146

package/dist/{chunk-E3UKNBI7.js → chunk-F3AFDVKF.js}

@@ -14522,7 +14522,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-BnujYGPe.mjs
+// ../types/dist/sleep-DBKu2-U5.mjs
 var AUDIO_CHUNK_FORMATS = [
   "f32le",
   "pcmu",
@@ -15384,7 +15384,7 @@ function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, Math.max(0, ms)));
 }
 
-// ../types/dist/canonical-hash-rO1sRmEK.mjs
+// ../types/dist/canonical-hash-Ch5bSjFG.mjs
 import { createHash } from "crypto";
 var DEFAULT_MAX_UNIT_BYTES = 16 * 1024 * 1024;
 
@@ -15399,7 +15399,8 @@ var MEDIA_OWNER_TYPES = [
   "scene",
   "motion",
   "object",
-  "audio"
+  "audio",
+  "mosaic"
 ];
 var OWNER_TYPES = new Set(MEDIA_OWNER_TYPES);
 var EVENT_OWNER_TYPES = [
@@ -15407,6 +15408,7 @@ var EVENT_OWNER_TYPES = [
   "object",
   "audio"
 ];
+var EventOwnerTypeSchema = external_exports.enum(EVENT_OWNER_TYPES);
 var EVENT_OWNER_TYPE_SET = new Set(EVENT_OWNER_TYPES);
 var VideoEncodeSchema = external_exports.object({
   codec: external_exports.enum([
@@ -15445,7 +15447,23 @@ var VideoEncodeSchema = external_exports.object({
     "zerolatency",
     "film",
     "animation"
-  ]).optional()
+  ]).optional(),
+  /**
+  * ONE slice per access unit.
+  *
+  * `-tune zerolatency` turns on x264's sliced threads, and a frame then leaves
+  * the encoder as five NAL slices that share one RTP timestamp and carry one
+  * marker bit. A libwebrtc depacketiser sees five frame-starts and one
+  * frame-end per frame: the first pictures render and the video then freezes
+  * for good while the audio, on its own plane, plays on. Measured on this hub
+  * 2026-09-13 against the Echo, and reduced to one slice by this flag alone.
+  *
+  * A NAMED field and not a raw flag, because {@link EgressEncodeSchema} omits
+  * `outputArgs` on purpose: an opaque array is part of the sharing key, so two
+  * consumers meaning the same thing spelled differently would stop sharing one
+  * child. Absent means "whatever the encoder does" — today's behaviour.
+  */
+  singleSlicePerFrame: external_exports.boolean().optional()
 });
 var AudioEncodeSchema = external_exports.union([external_exports.literal("passthrough"), external_exports.object({
   codec: external_exports.enum([
@@ -15504,7 +15522,11 @@ var WEBRTC_EGRESS_PROFILE = {
 };
 var ALEXA_EGRESS_PROFILE = {
   ...BASE_LIVE_EGRESS_PROFILE,
-  audio: { codec: "opus" }
+  audio: { codec: "opus" },
+  video: {
+    ...BASE_LIVE_EGRESS_PROFILE.video,
+    singleSlicePerFrame: true
+  }
 };
 var wiringProbeKindSchema = external_exports.enum([
   "singleton",
@@ -20006,6 +20028,60 @@ var settingsStoreCapability = {
       filter: QueryFilterSchema.optional(),
       columns: external_exports.array(external_exports.string()).readonly().optional()
     }), external_exports.array(SettingsRecordSchema).readonly()),
+    /**
+    * Make a SLOT hold this row — insert it, or update whatever already
+    * occupies the slot — and answer with the id the row HAS.
+    *
+    * ## Why the store needed this
+    *
+    * {@link set} is already an upsert, but its slot is the PRIMARY KEY: the
+    * caller has to know the id to address the row. That is exactly what a
+    * collection keyed by an `INTEGER` rowid alias cannot do — SQLite assigns
+    * the id, so a writer whose uniqueness rule is "one row per
+    * `(ownerKind, ownerId, kind, slot)`" has no id to name and no way to
+    * express the rule. {@link insert} can express it (a UNIQUE index
+    * arbitrates) but only by THROWING at the loser of a race, and the loser
+    * here is a legitimate re-capture, not an error.
+    *
+    * Getting there without this method means read-then-write: query the slot,
+    * then `insert` or `update`. Two statements instead of one, a race between
+    * them, and a recovery path that has to recognise a UNIQUE violation by its
+    * MESSAGE — across a process boundary, because the store lives behind an
+    * RPC door. A string match would be the whole gate, and a store that
+    * rephrased its error would lose the row silently. One statement has no
+    * such gate (D482).
+    *
+    * ## The contract
+    *
+    * `conflict` names the DECLARED columns that identify the slot. They must
+    * be covered by a UNIQUE index on the collection — SQLite resolves an
+    * `ON CONFLICT` target against its indexes and REFUSES the statement when
+    * none matches, so a wrong list is a loud error on the first write, never a
+    * silently duplicated row. An empty list is refused rather than passed on:
+    * `ON CONFLICT()` is not valid SQL, and the intent it would most likely
+    * encode ("no slot, just insert") is {@link insert}.
+    *
+    * Row shape is {@link insert}'s: `record.id` is used when the collection
+    * needs a supplied key and IGNORED when the primary key is an `INTEGER`
+    * rowid alias — exactly as `insert` and `insertMany` already treat it.
+    *
+    * Returns the id either way: the one SQLite assigned on an insert, or the
+    * one the row it updated already had. A caller cannot tell which happened,
+    * and deliberately — every caller wants the slot's id, and one that needed
+    * to distinguish creation from replacement would have to read first anyway.
+    */
+    upsert: method(external_exports.object({
+      namespace: external_exports.string().optional(),
+      collection: external_exports.string(),
+      /** Declared columns identifying the slot; must be covered by a UNIQUE
+      *  index on the collection. Never empty. */
+      conflict: external_exports.array(external_exports.string()).readonly(),
+      record: BulkRecordSchema
+    }), external_exports.object({
+      /** The id the row HAS: assigned by SQLite on an insert, or the existing
+      *  row's own id on an update. */
+      id: external_exports.union([external_exports.string(), external_exports.number()])
+    }), { kind: "mutation" }),
     /** Insert a new record. */
     insert: method(external_exports.object({
       namespace: external_exports.string().optional(),
@@ -20249,6 +20325,20 @@ var dataStoreProviderCapability = {
       kind: "mutation",
       auth: "admin"
     }),
+    /**
+    * Make a slot hold this row, and answer with the id the row HAS. The
+    * engine half of `settings-store.upsert` — read that docblock for why the
+    * store needed a slot that is not the primary key (D482).
+    */
+    upsert: method(external_exports.object({
+      namespace: external_exports.string().optional(),
+      collection: external_exports.string(),
+      conflict: external_exports.array(external_exports.string()).readonly(),
+      record: BulkRecordSchema
+    }), external_exports.object({ id: external_exports.union([external_exports.string(), external_exports.number()]) }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
     /** Insert many records in ONE transaction. All or nothing. */
     insertMany: method(external_exports.object({
       namespace: external_exports.string().optional(),
@@ -26551,8 +26641,8 @@ var TrackPositionSchema = external_exports.object({
 var TrackSnapshotSchema = external_exports.object({
   timestamp: external_exports.number(),
   position: TrackPositionSchema,
-  /** MediaStore key; resolve via `getTrackMedia({ trackId })`. */
-  mediaKey: external_exports.string()
+  /** The snapshot's media row id (D482); resolve via `listTrackMedia({ trackId })`. */
+  mediaId: external_exports.number().int()
 });
 var TrackEnvelopeSchema = external_exports.object({
   minX: external_exports.number(),
@@ -26991,14 +27081,14 @@ var ObjectEventSchema = external_exports.object({
   *  pixel-space `bbox` onto a displayed image. Omitted in slim projection. */
   frameWidth: external_exports.number().optional(),
   frameHeight: external_exports.number().optional(),
-  /** MediaStore key for the crop attached to this event (if any). */
-  mediaKey: external_exports.string().optional(),
-  /** Design B: MediaStore key of the track's native-resolution key frame (the
+  /** Media row id of the crop attached to this event (if any) — D482. */
+  mediaId: external_exports.number().int().optional(),
+  /** Design B: media row id of the track's native-resolution key frame (the
   *  best-detection full frame). Resolve via the event-media data-plane
-  *  (`/addon/<addonId>/event-media/<keyFrameMediaKey>`) for a detail view that
+  *  (`/addon/<addonId>/event-media/m/<keyFrameMediaId>`) for a detail view that
   *  draws `bbox` over the native frame. Absent on legacy rows / non-decoded
-  *  sources — consumers fall back to `mediaKey` (the tight crop). */
-  keyFrameMediaKey: external_exports.string().optional(),
+  *  sources — consumers fall back to `mediaId` (the tight crop). */
+  keyFrameMediaId: external_exports.number().int().optional(),
   /** Populated by B5 (recording playback URL for this event). */
   mediaUrl: external_exports.string().optional(),
   /** The parent track's key-event importance [0,1], propagated to every object
@@ -27035,7 +27125,19 @@ var MediaFileKindEnum = external_exports.enum([
   "sceneFrame"
 ]);
 var MediaFileRefSchema = external_exports.object({
-  key: external_exports.string(),
+  /**
+  * The media row's OWN id — the rowid SQLite assigned it (D482).
+  *
+  * It used to be the row's composite key, `<ownerType>:<ownerId>:<fileKind>
+  * [:<timestampMs>]`, which embedded a FOREIGN id. D474 made event ids
+  * per-table rowid aliases, so `object:101314` and `motion:101314` are two
+  * different rows that spell the same number, and a track whose
+  * `bestEventId` was an object event was served a motion event's snapshot —
+  * a night-time thumbnail on an afternoon track, with no error anywhere. A
+  * surrogate id cannot name the wrong row's owner, because it names no owner
+  * at all.
+  */
+  mediaId: external_exports.number().int(),
   kind: MediaFileKindEnum,
   sizeBytes: external_exports.number(),
   timestamp: external_exports.number()
@@ -27103,7 +27205,7 @@ var RetrainTrackSchema = external_exports.object({
   annotationCount: external_exports.number().int()
 });
 var RetrainFrameCandidateSchema = external_exports.object({
-  mediaKey: external_exports.string(),
+  mediaId: external_exports.number().int(),
   kind: MediaFileKindEnum,
   timestamp: external_exports.number(),
   sizeBytes: external_exports.number().int(),
@@ -27116,7 +27218,7 @@ var RetrainFrameSchema = external_exports.object({
   deviceId: external_exports.number(),
   trackId: external_exports.string(),
   /** Provenance only. It may already point at nothing — that is expected. */
-  sourceMediaKey: external_exports.string(),
+  sourceMediaId: external_exports.number().int(),
   sourceKind: MediaFileKindEnum,
   sizeBytes: external_exports.number().int(),
   width: external_exports.number().int(),
@@ -27131,7 +27233,7 @@ var RetrainCopyRefusalSchema = external_exports.enum([
 var RetrainFrameSelectionSchema = external_exports.object({
   copied: external_exports.array(RetrainFrameSchema).readonly(),
   refused: external_exports.array(external_exports.object({
-    sourceMediaKey: external_exports.string(),
+    sourceMediaId: external_exports.number().int(),
     reason: RetrainCopyRefusalSchema
   })).readonly()
 });
@@ -27139,7 +27241,7 @@ var RetrainFrameListSchema = external_exports.object({
   candidates: external_exports.array(RetrainFrameCandidateSchema).readonly(),
   copies: external_exports.array(RetrainFrameSchema).readonly(),
   /** What the page pre-selects — the native key frame when one survives. */
-  autoPickMediaKey: external_exports.string().optional()
+  autoPickMediaId: external_exports.number().int().optional()
 });
 var RetrainAssistSubjectSchema = external_exports.discriminatedUnion("kind", [external_exports.object({
   kind: external_exports.literal("package"),
@@ -27232,19 +27334,97 @@ var SummarySchema = external_exports.object({
   lastActiveAt: external_exports.number(),
   sealedAt: external_exports.number().nullable(),
   memberCount: external_exports.number().int().nonnegative(),
-  groupShotKey: external_exports.string().nullable()
+  groupShotMediaId: external_exports.number().int().nullable()
 });
 var SummariesQueryInput = external_exports.object({
   deviceIds: external_exports.array(external_exports.number()).min(1),
   since: external_exports.number().optional(),
   until: external_exports.number().optional(),
-  limit: external_exports.number().int().min(1).max(200).default(50)
+  limit: external_exports.number().int().min(1).max(200).default(50),
+  /** The same member-wise filter {@link listRecentSummaries} takes — one
+  *  meaning of "dog" on every summary surface. */
+  classes: external_exports.array(external_exports.string().min(1).max(60)).max(40).optional()
+});
+var SummaryMemberSchema = external_exports.object({
+  trackId: external_exports.string(),
+  /**
+  * The track's class at the time it JOINED, or `null` when it was unresolved
+  * and the track no longer exists to fill it.
+  *
+  * The join, not the latest opinion: class voting can re-decide a track's
+  * class afterwards, and a group's composition is the history of who came
+  * together. A consumer counts these to badge a thumbnail — "two people and a
+  * dog" — rather than being handed a second, denormalised tally that would
+  * drift from the members it claims to describe.
+  */
+  className: external_exports.string().nullable(),
+  /** `primary` is the one member that carries the group's identity. */
+  role: external_exports.enum([
+    "primary",
+    "sibling",
+    "child"
+  ]).nullable(),
+  joinedAt: external_exports.number(),
+  /** Tier 1 — the sub-class (`dog`, `van`), resolved from the member's track
+  *  at read time. Absent when nothing resolved, never an empty string. */
+  label: external_exports.string().optional(),
+  /** Tier 2 — the instance: a person's name, a plate. Absent when the pipeline
+  *  recognised nobody, and absent for a member whose track has been pruned —
+  *  a thumbnail that names the wrong person is worse than one naming nobody. */
+  subLabel: external_exports.string().optional()
 });
-var SummariesPageSchema = external_exports.object({ summaries: external_exports.array(SummarySchema).readonly() });
 var SummaryDetailSchema = external_exports.object({
   summary: SummarySchema,
-  /** Member track ids, in absorption order. */
-  trackIds: external_exports.array(external_exports.string()).readonly()
+  /** Members in absorption order, oldest join first. */
+  members: external_exports.array(SummaryMemberSchema).readonly()
+});
+var SummaryListItemSchema = external_exports.object({
+  summary: SummarySchema,
+  /** Class counts, most numerous first; `className: null` is a member whose
+  *  class never resolved, counted so the counts add up to `memberCount`. */
+  classes: external_exports.array(external_exports.object({
+    className: external_exports.string().nullable(),
+    count: external_exports.number().int().positive()
+  })).readonly()
+});
+var SummariesPageSchema = external_exports.object({ summaries: external_exports.array(SummaryListItemSchema).readonly() });
+var RecentSummariesQueryInput = external_exports.object({
+  /** Devices to merge. An empty array yields an empty page. */
+  deviceIds: external_exports.array(external_exports.number()),
+  /** Window lower bound on `lastActiveAt` (inclusive). */
+  since: external_exports.number().optional(),
+  /** Window upper bound on `lastActiveAt` (inclusive). */
+  until: external_exports.number().optional(),
+  limit: external_exports.number().int().min(1).max(500).default(100),
+  /** Opaque continuation cursor from a previous page's `nextCursor`. */
+  cursor: external_exports.string().optional(),
+  /**
+  * Restrict to these classes — THE SAME FIELD `listRecentTracks` takes, and
+  * deliberately the same name: the events filter tree emits one list of ticked
+  * taxonomy nodes, and a summaries feed that called it something else would
+  * make the operator's one filter component produce two shapes.
+  *
+  * A question about the MEMBERS: a group matches when ANY of them does. "Show
+  * me the arrivals with a dog" has to return the group of four people who had
+  * one with them; a filter on the group's own fields could only ever answer
+  * about its primary.
+  *
+  * Matched against all THREE tiers of a member — the class (`animal`), the
+  * sub-class (`dog`) and the instance (a name, a plate) — because which tier a
+  * ticked node lives on is the taxonomy's business, not the caller's. `dog` is
+  * an event kind in the tree and a tier-1 label on an `animal` track; a filter
+  * that read only the class would answer "animal" and never "dog".
+  *
+  * ABSENT or EMPTY means no filter — absent is not a selection of none.
+  */
+  classes: external_exports.array(external_exports.string().min(1).max(60)).max(40).optional()
+});
+var RecentSummariesPageSchema = external_exports.object({
+  /** Ordered by (`lastActiveAt` DESC, id DESC). Same light item as
+  *  {@link listSummaries} — one list shape, so a card renders the same
+  *  whichever feed drew it. */
+  summaries: external_exports.array(SummaryListItemSchema).readonly(),
+  nextCursor: external_exports.string().nullable()
 });
 var RecentTracksPageSchema = external_exports.object({
   /** Merged page, ordered by (`lastSeen` DESC, `trackId` DESC). */
@@ -27596,6 +27776,11 @@ var pipelineAnalyticsCapability = {
     listRecentTracks: method(RecentTracksQueryInput, RecentTracksPageSchema),
     /** Newest first by `openedAt`, for a camera set, inside an optional window. */
     listSummaries: method(SummariesQueryInput, SummariesPageSchema),
+    /**
+    * The PAGED feed — the reel and the Events gallery. Same cursor contract as
+    * {@link listRecentTracks}, so one screen cannot hold two ideas of newest.
+    */
+    listRecentSummaries: method(RecentSummariesQueryInput, RecentSummariesPageSchema),
     /** One summary with its member track ids; `null` for an id nobody wrote. */
     getSummary: method(external_exports.object({ id: external_exports.string() }), SummaryDetailSchema.nullable()),
     clearTracks: method(external_exports.object({ deviceId: external_exports.number() }), external_exports.void(), {
@@ -28125,7 +28310,7 @@ var pipelineAnalyticsCapability = {
     selectRetrainFrames: method(external_exports.object({
       deviceId: external_exports.number(),
       trackId: external_exports.string(),
-      mediaKeys: external_exports.array(external_exports.string()).min(1)
+      mediaIds: external_exports.array(external_exports.number().int()).min(1)
     }), RetrainFrameSelectionSchema, {
       kind: "mutation",
       auth: "admin"
@@ -28289,8 +28474,29 @@ var pipelineAnalyticsCapability = {
       kind: "query",
       auth: "admin"
     }),
+    /**
+    * The media an EVENT owns.
+    *
+    * `ownerType` is REQUIRED, and that is the whole correction (D482). An
+    * event is a row in ONE of three tables, and since D474 each numbers from
+    * 1 independently: `motion:101314` and `object:101314` both exist. This
+    * method took a bare `eventId` and the provider probed motion → object →
+    * audio, stopping at the first hit — so on the live hub, where object
+    * events own no media of their own and 299 883 of 300 559 media rows are
+    * motion-owned, EVERY object event resolved to its motion namesake. A
+    * track from 17:34 on camera 615 was served a snapshot from 22:35 eleven
+    * days earlier, silently.
+    *
+    * D476 had already disambiguated the KEY (`motion:` vs `object:`); this is
+    * the API catching up to it. Naming the table is not a "qualification" of
+    * the ambiguity — a listing BY OWNER has no address to make surrogate: the
+    * owner IS (table, id), and half of it is not a question.
+    */
     getEventMedia: method(external_exports.object({
-      eventId: external_exports.string(),
+      /** Which of the three event tables owns the row. */
+      ownerType: EventOwnerTypeSchema,
+      /** The event's rowid in that table (D474: an event id is a number). */
+      eventId: external_exports.number().int(),
       kind: MediaFileKindEnum.optional(),
       deviceId: external_exports.number()
     }), external_exports.array(MediaFileSchema).readonly()),
@@ -28335,11 +28541,14 @@ var pipelineAnalyticsCapability = {
     * the live hub: one event's `fullFrameBoxed` is 2 824 077 B, base64'd to
     * ~3.8 MB, allocated whole in hub-main's heap, for a list of keys.
     *
-    * Same `deviceId` authorization subject as `getEventMedia`, and the same
-    * rows — this is a projection of that method, never a different question.
+    * Same `deviceId` authorization subject as `getEventMedia`, the same
+    * REQUIRED `ownerType` (read that method's docblock for the night-time
+    * thumbnail this closes — D482), and the same rows: this is a projection
+    * of that method, never a different question.
     */
     listEventMedia: method(external_exports.object({
-      eventId: external_exports.string(),
+      ownerType: EventOwnerTypeSchema,
+      eventId: external_exports.number().int(),
       deviceId: external_exports.number()
     }), external_exports.array(MediaFileInfoSchema).readonly()),
     /**
@@ -34018,8 +34227,8 @@ var IdentitySchema = external_exports.object({
   id: external_exports.string(),
   name: external_exports.string(),
   sampleCount: external_exports.number().int().nonnegative(),
-  coverMediaKey: external_exports.string().optional(),
-  /** Inline base64 of the cover sample's crop, resolved from `coverMediaKey`.
+  coverMediaId: external_exports.number().int().optional(),
+  /** Inline base64 of the cover sample's crop, resolved from `coverMediaId`.
   *  Lets the UI render the person's face avatar instead of a placeholder icon. */
   coverBase64: external_exports.string().optional()
 });
@@ -34035,8 +34244,8 @@ var IdentitySampleAuditRowSchema = external_exports.object({
   enrolledAt: external_exports.number().int(),
   deviceId: external_exports.number().int().optional(),
   source: external_exports.enum(["detected", "photo"]),
-  /** The enrolled crop's media key, so the panel can show the evidence. */
-  mediaKey: external_exports.string().optional(),
+  /** The enrolled crop's media row id, so the panel can show the evidence. */
+  mediaId: external_exports.number().int().optional(),
   /**
   * False = the sample is stamped with a DIFFERENT face model, and a cosine
   * across feature spaces is a well-formed float with no meaning. Every number
@@ -34105,15 +34314,15 @@ var FaceInfoSchema = external_exports.object({
   */
   cropUrl: external_exports.string().optional(),
   /** Design B: the face bbox (pixel space) on the key frame — lets a detail
-  *  view draw the box over the native `keyFrameMediaKey` frame. Absent on
+  *  view draw the box over the native `keyFrameMediaId` frame. Absent on
   *  legacy rows written before design B. */
   faceBbox: BoundingBoxSchema.optional(),
   /** Design B: MediaStore key of the track's native-resolution key frame.
   *  Fetch the native JPEG via the event-media data-plane
-  *  (`/addon/<addonId>/event-media/<keyFrameMediaKey>`). Absent when the
+  *  (`/addon/<addonId>/event-media/m/<keyFrameMediaId>`). Absent when the
   *  track produced no key frame (e.g. native/onboard source) — the UI falls
   *  back to the inline `base64` face crop. */
-  keyFrameMediaKey: external_exports.string().optional(),
+  keyFrameMediaId: external_exports.number().int().optional(),
   /** Winning identity-match cosine (0..1) for this face's track, when an
   *  identity was auto-confirmed. Lets the UI surface WHY a face was assigned
   *  (confidence badge / low-confidence audit). Absent on legacy rows and on
@@ -34151,7 +34360,9 @@ var FaceClusterSchema = external_exports.object({
   cohesion: external_exports.number()
 });
 var MediaFileLiteSchema$1 = external_exports.object({
-  key: external_exports.string(),
+  /** The media row's own id — the same address `MediaFileRef.mediaId` carries
+  *  (D482). It was the row's composite key, which embedded the owner. */
+  mediaId: external_exports.number().int(),
   kind: external_exports.string(),
   url: external_exports.string(),
   sizeBytes: external_exports.number(),
@@ -34173,7 +34384,7 @@ var faceGalleryCapability = {
       * covers inline, ~10 KB of base64 per row, on a query this UI mounts
       * four times and the viewer holds at `staleTime: 30_000`.
       *
-      * Nothing loses its avatar: `coverMediaKey` is already on every row and
+      * Nothing loses its avatar: `coverMediaId` is already on every row and
       * the `event-media` plane serves that key `immutable` with an ETag.
       *
       * **This is an INPUT field, so it does not reach the addon until the
@@ -37303,8 +37514,8 @@ var VehicleSchema = external_exports.object({
   id: external_exports.string(),
   name: external_exports.string(),
   sampleCount: external_exports.number().int().nonnegative(),
-  coverMediaKey: external_exports.string().optional(),
-  /** Inline base64 of the cover sample's plate crop, resolved from `coverMediaKey`. */
+  coverMediaId: external_exports.number().int().optional(),
+  /** Inline base64 of the cover sample's plate crop, resolved from `coverMediaId`. */
   coverBase64: external_exports.string().optional()
 });
 var VehicleSampleInfoSchema = external_exports.object({
@@ -37337,7 +37548,7 @@ var PlateInfoSchema = external_exports.object({
   /** keyFrame parity: the plate bbox (pixel space) on the native key frame. */
   plateBbox: BoundingBoxSchema.optional(),
   /** keyFrame parity: MediaStore key of the track's native-resolution key frame. */
-  keyFrameMediaKey: external_exports.string().optional(),
+  keyFrameMediaId: external_exports.number().int().optional(),
   base64: external_exports.string().optional(),
   /**
   * Same crop as a data-plane URL, always present when the plate has a stored
@@ -37348,7 +37559,9 @@ var PlateInfoSchema = external_exports.object({
   cropUrl: external_exports.string().optional()
 });
 var MediaFileLiteSchema = external_exports.object({
-  key: external_exports.string(),
+  /** The media row's own id — the same address `MediaFileRef.mediaId` carries
+  *  (D482). It was the row's composite key, which embedded the owner. */
+  mediaId: external_exports.number().int(),
   kind: external_exports.string(),
   url: external_exports.string(),
   sizeBytes: external_exports.number(),
@@ -37422,7 +37635,7 @@ var plateGalleryCapability = {
     listVehicles: method(external_exports.object({
       /** Inline {@link VehicleSchema.coverBase64} on every row. Default
       *  `false` — the vehicle twin of `faceGallery.listIdentities`'s
-      *  option; `coverMediaKey` + the `event-media` plane carry the picture.
+      *  option; `coverMediaId` + the `event-media` plane carry the picture.
       *  INPUT field: stripped by the hub router until the train ships, which
       *  resolves to `false` and is exactly the intended default. */
       includeCrops: external_exports.boolean().optional()
@@ -38920,7 +39133,14 @@ var SceneReferenceSchema = external_exports.object({
   modelId: external_exports.string(),
   condition: SceneConditionSchema,
   capturedAt: external_exports.number(),
-  thumbnailMediaId: external_exports.string().optional(),
+  /**
+  * The reference thumbnail's media ROW id (D482).
+  *
+  * The name already said `mediaId` while the value was the row's composite
+  * key — a leftover that read as done and was not. It is the row's own id
+  * now, addressed at `/addon/<addonId>/event-media/m/<id>`.
+  */
+  thumbnailMediaId: external_exports.number().int().optional(),
   /** Whole-frame (downscaled) embedding captured alongside the ROI crop. The
   *  anti-view-shift anchor: a bumped camera, a PTZ preset or a re-aim makes the
   *  normalized rect frame a different piece of world, and the scene would
@@ -39750,7 +39970,29 @@ var LoggingSettingsPatchSchema = external_exports.object({
   * disarmed the channels it did not mention would make the Levels page and
   * the Diagnostics page fight over the same value.
   */
-  channels: external_exports.array(LogChannelWindowPatchSchema).readonly().optional()
+  channels: external_exports.array(LogChannelWindowPatchSchema).readonly().optional(),
+  /**
+  * How many days the analytics OPS LOG is kept — the audit trail of what
+  * retention actually deleted.
+  *
+  * It lives HERE, on the logging document, and not on the analytics addon's
+  * settings form, on the operator's instruction: every other log-ish window in
+  * this system is configured through this one document, and a retention audit
+  * configured somewhere else is a second place to look when the question is
+  * "what happened to my data".
+  *
+  * That placement has a cost worth stating: this document ships in the
+  * framework closure, so this knob needs a published `@camstack/server` while
+  * the four windows beside it (D485) reach a node on `camstack deploy`.
+  *
+  * `retention-model.ts` argued this one must NOT follow a device window,
+  * because the audit trail is the history of the SWEEP and not of the camera.
+  * That argument stands and is untouched — what changes is that 30 days stops
+  * being a constant nobody can reach. `0` keeps it forever. The floor is 1 day
+  * rather than 0-as-delete: an audit log truncated to nothing is precisely the
+  * state in which the next 9.5 GiB leak cannot be explained.
+  */
+  opsLogRetentionDays: external_exports.number().int().min(0).max(3650).optional()
 });
 var ReportedLoadContributionSchema = LoadContributionSchema.extend({ addonId: external_exports.string() });
 var ReportedFailureContributionSchema = FailureContributionSchema.extend({ addonId: external_exports.string() });
@@ -39789,6 +40031,14 @@ var LoggingSettingsStateSchema = external_exports.object({
   channels: external_exports.array(LogChannelDescriptorSchema).readonly(),
   /** The channels ARMED right now, each with its deadline. */
   activeChannels: external_exports.array(LogChannelWindowStateSchema).readonly(),
+  /**
+  * The ops-log window in days, as it is in force. `0` = kept forever.
+  *
+  * Reported rather than left to the caller's memory of what it wrote: this is
+  * the value the analytics sweep will actually use, and an operator asking how
+  * long their audit trail lives should not have to infer it from a default.
+  */
+  opsLogRetentionDays: external_exports.number().int().min(0),
   persisted: external_exports.boolean()
 });
 var systemCapability = {
@@ -40612,7 +40862,7 @@ var StationaryObjectSchema = external_exports.object({
   /** Enrichment label carried from the source track (identity / plate). */
   label: external_exports.string().optional(),
   /** Native-resolution key-frame media key for the parked object's best image. */
-  keyFrameMediaKey: external_exports.string().optional()
+  keyFrameMediaId: external_exports.number().int().optional()
 });
 var CameraOccupancySnapshotSchema = external_exports.object({
   /** Frame timestamp of the inference result that produced this snapshot. */
@@ -41876,6 +42126,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "dataStoreProvider.upsert": {
+    capName: "data-store-provider",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "dayNight.getOptions": {
     capName: "day-night",
     capScope: "device",
@@ -44312,6 +44568,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineAnalytics.listRecentSummaries": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
   "pipelineAnalytics.listRecentTracks": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -45740,6 +46002,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "settingsStore.upsert": {
+    capName: "settings-store",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "smtpProvider.getStatus": {
     capName: "smtp-provider",
     capScope: "system",
@@ -48133,6 +48401,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: true
   }],
+  "pipelineAnalytics.listRecentSummaries": [{
+    name: "deviceIds",
+    form: "array",
+    optional: false
+  }],
   "pipelineAnalytics.listRecentTracks": [{
     name: "deviceIds",
     form: "array",

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-E3UKNBI7.js";
+} from "./chunk-F3AFDVKF.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-25V2QKN6.js");
+  await import("./launcher-L5YPTDNE.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-25V2QKN6.js");
+  await import("./launcher-L5YPTDNE.js");
 }
 
 // src/commands/setup.ts
@@ -1140,7 +1140,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-YH7C75RI.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-CLO7P5ID.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);