camstack 1.2.145 → 1.2.146

package/dist/{launcher-LICFWRGL.js → launcher-L5YPTDNE.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-B84YlKAH.js
-var require_dist_B84YlKAH = __commonJS({
-  "../system/dist/dist-B84YlKAH.js"(exports) {
+// ../system/dist/dist-DUSfUAgz.js
+var require_dist_DUSfUAgz = __commonJS({
+  "../system/dist/dist-DUSfUAgz.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -25889,7 +25889,23 @@ var require_dist_B84YlKAH = __commonJS({
         "zerolatency",
         "film",
         "animation"
-      ]).optional()
+      ]).optional(),
+      /**
+      * ONE slice per access unit.
+      *
+      * `-tune zerolatency` turns on x264's sliced threads, and a frame then leaves
+      * the encoder as five NAL slices that share one RTP timestamp and carry one
+      * marker bit. A libwebrtc depacketiser sees five frame-starts and one
+      * frame-end per frame: the first pictures render and the video then freezes
+      * for good while the audio, on its own plane, plays on. Measured on this hub
+      * 2026-09-13 against the Echo, and reduced to one slice by this flag alone.
+      *
+      * A NAMED field and not a raw flag, because {@link EgressEncodeSchema} omits
+      * `outputArgs` on purpose: an opaque array is part of the sharing key, so two
+      * consumers meaning the same thing spelled differently would stop sharing one
+      * child. Absent means "whatever the encoder does" — today's behaviour.
+      */
+      singleSlicePerFrame: zod.z.boolean().optional()
     });
     var AudioEncodeSchema = zod.z.union([zod.z.literal("passthrough"), zod.z.object({
       codec: zod.z.enum([
@@ -25937,7 +25953,7 @@ var require_dist_B84YlKAH = __commonJS({
       audio: "passthrough"
     };
     ({ ...BASE_LIVE_EGRESS_PROFILE }, { ...BASE_LIVE_EGRESS_PROFILE.video });
-    ({ ...BASE_LIVE_EGRESS_PROFILE });
+    ({ ...BASE_LIVE_EGRESS_PROFILE }, { ...BASE_LIVE_EGRESS_PROFILE.video });
     var wiringProbeKindSchema = zod.z.enum([
       "singleton",
       "device",
@@ -38084,13 +38100,91 @@ var require_dist_B84YlKAH = __commonJS({
       deviceIds: zod.z.array(zod.z.number()).min(1),
       since: zod.z.number().optional(),
       until: zod.z.number().optional(),
-      limit: zod.z.number().int().min(1).max(200).default(50)
+      limit: zod.z.number().int().min(1).max(200).default(50),
+      /** The same member-wise filter {@link listRecentSummaries} takes — one
+      *  meaning of "dog" on every summary surface. */
+      classes: zod.z.array(zod.z.string().min(1).max(60)).max(40).optional()
+    });
+    var SummaryMemberSchema = zod.z.object({
+      trackId: zod.z.string(),
+      /**
+      * The track's class at the time it JOINED, or `null` when it was unresolved
+      * and the track no longer exists to fill it.
+      *
+      * The join, not the latest opinion: class voting can re-decide a track's
+      * class afterwards, and a group's composition is the history of who came
+      * together. A consumer counts these to badge a thumbnail — "two people and a
+      * dog" — rather than being handed a second, denormalised tally that would
+      * drift from the members it claims to describe.
+      */
+      className: zod.z.string().nullable(),
+      /** `primary` is the one member that carries the group's identity. */
+      role: zod.z.enum([
+        "primary",
+        "sibling",
+        "child"
+      ]).nullable(),
+      joinedAt: zod.z.number(),
+      /** Tier 1 — the sub-class (`dog`, `van`), resolved from the member's track
+      *  at read time. Absent when nothing resolved, never an empty string. */
+      label: zod.z.string().optional(),
+      /** Tier 2 — the instance: a person's name, a plate. Absent when the pipeline
+      *  recognised nobody, and absent for a member whose track has been pruned —
+      *  a thumbnail that names the wrong person is worse than one naming nobody. */
+      subLabel: zod.z.string().optional()
     });
-    var SummariesPageSchema = zod.z.object({ summaries: zod.z.array(SummarySchema).readonly() });
     var SummaryDetailSchema = zod.z.object({
       summary: SummarySchema,
-      /** Member track ids, in absorption order. */
-      trackIds: zod.z.array(zod.z.string()).readonly()
+      /** Members in absorption order, oldest join first. */
+      members: zod.z.array(SummaryMemberSchema).readonly()
+    });
+    var SummaryListItemSchema = zod.z.object({
+      summary: SummarySchema,
+      /** Class counts, most numerous first; `className: null` is a member whose
+      *  class never resolved, counted so the counts add up to `memberCount`. */
+      classes: zod.z.array(zod.z.object({
+        className: zod.z.string().nullable(),
+        count: zod.z.number().int().positive()
+      })).readonly()
+    });
+    var SummariesPageSchema = zod.z.object({ summaries: zod.z.array(SummaryListItemSchema).readonly() });
+    var RecentSummariesQueryInput = zod.z.object({
+      /** Devices to merge. An empty array yields an empty page. */
+      deviceIds: zod.z.array(zod.z.number()),
+      /** Window lower bound on `lastActiveAt` (inclusive). */
+      since: zod.z.number().optional(),
+      /** Window upper bound on `lastActiveAt` (inclusive). */
+      until: zod.z.number().optional(),
+      limit: zod.z.number().int().min(1).max(500).default(100),
+      /** Opaque continuation cursor from a previous page's `nextCursor`. */
+      cursor: zod.z.string().optional(),
+      /**
+      * Restrict to these classes — THE SAME FIELD `listRecentTracks` takes, and
+      * deliberately the same name: the events filter tree emits one list of ticked
+      * taxonomy nodes, and a summaries feed that called it something else would
+      * make the operator's one filter component produce two shapes.
+      *
+      * A question about the MEMBERS: a group matches when ANY of them does. "Show
+      * me the arrivals with a dog" has to return the group of four people who had
+      * one with them; a filter on the group's own fields could only ever answer
+      * about its primary.
+      *
+      * Matched against all THREE tiers of a member — the class (`animal`), the
+      * sub-class (`dog`) and the instance (a name, a plate) — because which tier a
+      * ticked node lives on is the taxonomy's business, not the caller's. `dog` is
+      * an event kind in the tree and a tier-1 label on an `animal` track; a filter
+      * that read only the class would answer "animal" and never "dog".
+      *
+      * ABSENT or EMPTY means no filter — absent is not a selection of none.
+      */
+      classes: zod.z.array(zod.z.string().min(1).max(60)).max(40).optional()
+    });
+    var RecentSummariesPageSchema = zod.z.object({
+      /** Ordered by (`lastActiveAt` DESC, id DESC). Same light item as
+      *  {@link listSummaries} — one list shape, so a card renders the same
+      *  whichever feed drew it. */
+      summaries: zod.z.array(SummaryListItemSchema).readonly(),
+      nextCursor: zod.z.string().nullable()
     });
     var RecentTracksPageSchema = zod.z.object({
       /** Merged page, ordered by (`lastSeen` DESC, `trackId` DESC). */
@@ -38442,6 +38536,11 @@ var require_dist_B84YlKAH = __commonJS({
         listRecentTracks: method(RecentTracksQueryInput, RecentTracksPageSchema),
         /** Newest first by `openedAt`, for a camera set, inside an optional window. */
         listSummaries: method(SummariesQueryInput, SummariesPageSchema),
+        /**
+        * The PAGED feed — the reel and the Events gallery. Same cursor contract as
+        * {@link listRecentTracks}, so one screen cannot hold two ideas of newest.
+        */
+        listRecentSummaries: method(RecentSummariesQueryInput, RecentSummariesPageSchema),
         /** One summary with its member track ids; `null` for an id nobody wrote. */
         getSummary: method(zod.z.object({ id: zod.z.string() }), SummaryDetailSchema.nullable()),
         clearTracks: method(zod.z.object({ deviceId: zod.z.number() }), zod.z.void(), {
@@ -50683,7 +50782,29 @@ var require_dist_B84YlKAH = __commonJS({
       * disarmed the channels it did not mention would make the Levels page and
       * the Diagnostics page fight over the same value.
       */
-      channels: zod.z.array(LogChannelWindowPatchSchema).readonly().optional()
+      channels: zod.z.array(LogChannelWindowPatchSchema).readonly().optional(),
+      /**
+      * How many days the analytics OPS LOG is kept — the audit trail of what
+      * retention actually deleted.
+      *
+      * It lives HERE, on the logging document, and not on the analytics addon's
+      * settings form, on the operator's instruction: every other log-ish window in
+      * this system is configured through this one document, and a retention audit
+      * configured somewhere else is a second place to look when the question is
+      * "what happened to my data".
+      *
+      * That placement has a cost worth stating: this document ships in the
+      * framework closure, so this knob needs a published `@camstack/server` while
+      * the four windows beside it (D485) reach a node on `camstack deploy`.
+      *
+      * `retention-model.ts` argued this one must NOT follow a device window,
+      * because the audit trail is the history of the SWEEP and not of the camera.
+      * That argument stands and is untouched — what changes is that 30 days stops
+      * being a constant nobody can reach. `0` keeps it forever. The floor is 1 day
+      * rather than 0-as-delete: an audit log truncated to nothing is precisely the
+      * state in which the next 9.5 GiB leak cannot be explained.
+      */
+      opsLogRetentionDays: zod.z.number().int().min(0).max(3650).optional()
     });
     var ReportedLoadContributionSchema = LoadContributionSchema.extend({ addonId: zod.z.string() });
     var ReportedFailureContributionSchema = FailureContributionSchema.extend({ addonId: zod.z.string() });
@@ -50722,6 +50843,14 @@ var require_dist_B84YlKAH = __commonJS({
       channels: zod.z.array(LogChannelDescriptorSchema).readonly(),
       /** The channels ARMED right now, each with its deadline. */
       activeChannels: zod.z.array(LogChannelWindowStateSchema).readonly(),
+      /**
+      * The ops-log window in days, as it is in force. `0` = kept forever.
+      *
+      * Reported rather than left to the caller's memory of what it wrote: this is
+      * the value the analytics sweep will actually use, and an operator asking how
+      * long their audit trail lives should not have to infer it from a default.
+      */
+      opsLogRetentionDays: zod.z.number().int().min(0),
       persisted: zod.z.boolean()
     });
     var systemCapability = {
@@ -55851,6 +55980,12 @@ var require_dist_B84YlKAH = __commonJS({
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.listRecentSummaries": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.listRecentTracks": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -59678,6 +59813,11 @@ var require_dist_B84YlKAH = __commonJS({
         form: "single",
         optional: true
       }],
+      "pipelineAnalytics.listRecentSummaries": [{
+        name: "deviceIds",
+        form: "array",
+        optional: false
+      }],
       "pipelineAnalytics.listRecentTracks": [{
         name: "deviceIds",
         form: "array",
@@ -61999,7 +62139,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_DUSfUAgz();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -62818,7 +62958,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_DUSfUAgz();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -62912,7 +63052,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_DUSfUAgz();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -63809,11 +63949,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-Cxgwa0bk.js
-var require_retired_settings_keys_Cxgwa0bk = __commonJS({
-  "../system/dist/retired-settings-keys-Cxgwa0bk.js"(exports) {
+// ../system/dist/retired-settings-keys-D61PxN8L.js
+var require_retired_settings_keys_D61PxN8L = __commonJS({
+  "../system/dist/retired-settings-keys-D61PxN8L.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_DUSfUAgz();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -64093,9 +64233,9 @@ var require_retired_settings_keys_Cxgwa0bk = __commonJS({
   }
 });
 
-// ../types/dist/canonical-hash-DNV8S5ET.js
-var require_canonical_hash_DNV8S5ET = __commonJS({
-  "../types/dist/canonical-hash-DNV8S5ET.js"(exports) {
+// ../types/dist/canonical-hash-9lydiEzx.js
+var require_canonical_hash_9lydiEzx = __commonJS({
+  "../types/dist/canonical-hash-9lydiEzx.js"(exports) {
     "use strict";
     var node_crypto = __require("crypto");
     var AUDIO_ENCODER_BY_CODEC = {
@@ -64182,6 +64322,7 @@ var require_canonical_hash_DNV8S5ET = __commonJS({
       ];
       if (video.preset !== void 0) args.push("-preset", video.preset);
       if (video.tune !== void 0) args.push("-tune", video.tune);
+      if (video.singleSlicePerFrame === true && video.encoder === "libx264") args.push("-x264-params", "sliced-threads=0");
       if (video.profile !== void 0) args.push("-profile:v", video.profile);
       if (video.level !== void 0) args.push("-level", video.level);
       if (video.pixelFormat !== void 0) args.push("-pix_fmt", video.pixelFormat);
@@ -64365,6 +64506,7 @@ var require_canonical_hash_DNV8S5ET = __commonJS({
         scale,
         ...v.preset !== void 0 ? { preset: v.preset } : {},
         ...v.tune !== void 0 ? { tune: v.tune } : {},
+        ...v.singleSlicePerFrame !== void 0 ? { singleSlicePerFrame: v.singleSlicePerFrame } : {},
         ...v.profile !== void 0 ? { profile: v.profile } : {},
         ...v.level !== void 0 ? { level: v.level } : {},
         ...input.pixelFormat !== void 0 ? { pixelFormat: input.pixelFormat } : {},
@@ -64695,7 +64837,7 @@ var require_node = __commonJS({
       value: mod,
       enumerable: true
     }) : target, mod));
-    var require_canonical_hash = require_canonical_hash_DNV8S5ET();
+    var require_canonical_hash = require_canonical_hash_9lydiEzx();
     var require_err_msg = require_err_msg_COpsHMw2();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
@@ -66048,8 +66190,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
-    var require_retired_settings_keys = require_retired_settings_keys_Cxgwa0bk();
+    var require_dist10 = require_dist_DUSfUAgz();
+    var require_retired_settings_keys = require_retired_settings_keys_D61PxN8L();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -71674,7 +71816,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_DUSfUAgz();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -71811,7 +71953,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_DUSfUAgz();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -72007,7 +72149,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_DUSfUAgz();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -79820,7 +79962,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_DUSfUAgz();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -80407,7 +80549,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_DUSfUAgz();
     var node_fs_promises = __require("fs/promises");
     var node_fs = __require("fs");
     node_fs = require_chunk.__toESM(node_fs);
@@ -83160,7 +83302,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_DUSfUAgz();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -84387,8 +84529,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
-    var require_retired_settings_keys = require_retired_settings_keys_Cxgwa0bk();
+    var require_dist10 = require_dist_DUSfUAgz();
+    var require_retired_settings_keys = require_retired_settings_keys_D61PxN8L();
     var require_wal_checkpoint_policy = require_wal_checkpoint_policy_CCJZngds();
     var node_crypto = __require("crypto");
     var node_path = __require("path");
@@ -87175,7 +87317,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_DUSfUAgz();
     var require_hub_cap_forward = require_hub_cap_forward_DmHNjbB0();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -88520,6 +88662,57 @@ var require_storage_orchestrator_addon = __commonJS({
       const percent = require_dist10.gbToBytes(minFreeGb) / totalBytes * 100;
       return Math.min(100, percent);
     }
+    function unknown(reason) {
+      return {
+        kind: "unknown",
+        reason
+      };
+    }
+    function freePercentOf(capacity) {
+      if (capacity === null || capacity.totalBytes <= 0) return 100;
+      return capacity.availableBytes / capacity.totalBytes * 100;
+    }
+    function volumeTotalBytesOf(capacity) {
+      return capacity === null ? 0 : capacity.totalBytes;
+    }
+    function probePathFor(location, locality, localNodeId, cwd) {
+      if (locality !== true) {
+        const why = locality === false ? `is served by the remote provider "${location.providerId}" (nodeLocal: false) \u2014 its bytes live on the remote host and no local statfs describes them` : `is served by "${location.providerId}", which this node has not classified yet (no getProviderInfo answer) \u2014 a local statfs would be a guess`;
+        return { reason: `location "${location.id}" ${why}` };
+      }
+      if (location.nodeId !== void 0 && location.nodeId !== localNodeId) return { reason: `location "${location.id}" lives on node "${location.nodeId}" and this is "${localNodeId}" \u2014 only the owning node can statfs its own volumes` };
+      const basePath = location.config["basePath"];
+      if (typeof basePath !== "string" || basePath.length === 0) return { reason: `location "${location.id}" declares no basePath to measure` };
+      if (!node_path.default.isAbsolute(basePath)) return { reason: `location "${location.id}" declares a RELATIVE basePath ("${basePath}") \u2014 that is a path inside its provider's own namespace, not on this node's filesystem, and resolving it against "${cwd}" would measure an unrelated volume` };
+      return { path: node_path.default.resolve(basePath) };
+    }
+    async function readLocalVolumeCapacity(location, locality, localNodeId, deps) {
+      const target = probePathFor(location, locality, localNodeId, deps.cwd);
+      if ("reason" in target) return unknown(target.reason);
+      const root = node_path.default.parse(target.path).root;
+      let probed = target.path;
+      for (; ; ) try {
+        await deps.probe.access(probed);
+        break;
+      } catch {
+        const parent = node_path.default.dirname(probed);
+        if (parent === probed) return unknown(`nothing on the path "${target.path}" exists on this node \u2014 the volume is not mounted, so the root filesystem's size is not an answer about it`);
+        probed = parent;
+      }
+      if (probed === root && target.path !== root) return unknown(`only the filesystem root exists on the path "${target.path}" \u2014 the volume is not mounted, so the root filesystem's size is not an answer about it`);
+      try {
+        const st = await deps.probe.statfs(probed);
+        return {
+          kind: "measured",
+          path: probed,
+          totalBytes: st.blocks * st.bsize,
+          availableBytes: st.bavail * st.bsize
+        };
+      } catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        return unknown(`statfs("${probed}") failed: ${reason}`);
+      }
+    }
     var FRAMEWORK_CONFIG_KEYS = /* @__PURE__ */ new Set([
       "basePath",
       "readOnly",
@@ -90572,31 +90765,53 @@ var require_storage_orchestrator_addon = __commonJS({
         } });
         throw new Error(refusal);
       }
-      /** statfs capacity of a location's basePath, walking up to the nearest
-      *  existing ancestor. Null for remote-node locations or unstattable paths. */
+      /**
+      * The volume figures for one location, or `null` when this node cannot take
+      * a measurement that is genuinely about it.
+      *
+      * The decision lives in `location-volume-capacity.ts` — including why a
+      * remote-provider location (the SMB share that was reporting the hub's own
+      * disk) gets nothing rather than a number. Here we only supply the node id,
+      * the provider's declared locality and the real filesystem, and log the
+      * reason once per distinct fault: `listLocations` is on the admin UI's poll,
+      * so a line per call would be a line per second.
+      */
       async localCapacityOf(loc) {
-        const localNode = this.service?.getLocalNodeId() ?? "hub";
-        if (loc.nodeId !== void 0 && loc.nodeId !== localNode) return null;
-        const bp = loc.config["basePath"];
-        if (typeof bp !== "string" || bp.length === 0) return null;
-        try {
-          let target = node_path.resolve(bp);
-          for (; ; ) try {
-            await node_fs_promises.access(target);
-            break;
-          } catch {
-            const parent = node_path.dirname(target);
-            if (!parent || parent === target) return null;
-            target = parent;
-          }
-          const st = await node_fs_promises.statfs(target);
-          return {
-            totalBytes: st.blocks * st.bsize,
-            availableBytes: st.bavail * st.bsize
-          };
-        } catch {
+        const localNode = this.service?.getLocalNodeId() ?? HUB_NODE_ID;
+        const result = await readLocalVolumeCapacity(loc, this.providerIsNodeLocal(loc), localNode, {
+          probe: {
+            access: (target) => node_fs_promises.access(target),
+            statfs: async (target) => node_fs_promises.statfs(target)
+          },
+          cwd: node_path.resolve(".")
+        });
+        if (result.kind === "unknown") {
+          this.logCapacityUnknownOnce(loc.id, result.reason);
           return null;
         }
+        this.clearCapacityUnknown(loc.id, result.path);
+        return {
+          totalBytes: result.totalBytes,
+          availableBytes: result.availableBytes
+        };
+      }
+      /** locationId → the last unmeasurable reason logged for it. */
+      capacityUnknownLogged = /* @__PURE__ */ new Map();
+      logCapacityUnknownOnce(locationId, reason) {
+        if (this.capacityUnknownLogged.get(locationId) === reason) return;
+        this.capacityUnknownLogged.set(locationId, reason);
+        this.ctx.logger.warn("storage-orchestrator: capacity is UNKNOWN for a location \u2014 reporting nothing rather than another volume\u2019s figures", { meta: {
+          locationId,
+          reason
+        } });
+      }
+      clearCapacityUnknown(locationId, measuredPath) {
+        if (!this.capacityUnknownLogged.has(locationId)) return;
+        this.capacityUnknownLogged.delete(locationId);
+        this.ctx.logger.info("storage-orchestrator: capacity is measurable again", { meta: {
+          locationId,
+          measuredPath
+        } });
       }
       /** Per-location cap on EVICTABLE bytes (`config.maxUsedGb`): the operator's
       *  "recordings may use at most N GB in total" — enforced by the pressure
@@ -90685,28 +90900,30 @@ var require_storage_orchestrator_addon = __commonJS({
         } });
         return occupancy;
       }
-      /** Free capacity (%) on a location's volume via `statfs`; 100 (guard inert) when unstattable. */
+      /**
+      * The pressure guard's two readings come from the SAME probe the UI's
+      * capacity does — one capacity truth per location, not two.
+      *
+      * They used to `statfs` the raw `basePath` themselves, which on this node
+      * answers for whatever local path happens to carry that name: a location
+      * owned by another node, or served by a remote provider, could decide
+      * eviction from the hub's own disk. Both now degrade exactly as they did
+      * when the path was unstattable — `100` (guard inert) and `0` (no byte
+      * target) — but they do so for every reading that is not ABOUT the location,
+      * not only for the ones that threw.
+      */
+      async volumeCapacityOf(locationId) {
+        const loc = this.service?.listLocations().find((l) => l.id === locationId);
+        if (!loc) return null;
+        return this.localCapacityOf(loc);
+      }
+      /** Free capacity (%) on a location's volume; 100 (guard inert) when unmeasurable. */
       async locationFreePercent(locationId) {
-        const bp = this.locationBasePath(locationId);
-        if (!bp) return 100;
-        try {
-          const st = await node_fs_promises.statfs(bp);
-          if (st.blocks <= 0) return 100;
-          return st.bavail / st.blocks * 100;
-        } catch {
-          return 100;
-        }
+        return freePercentOf(await this.volumeCapacityOf(locationId));
       }
-      /** Total bytes on a location's volume via `statfs`; 0 when unstattable. */
+      /** Total bytes on a location's volume; 0 when unmeasurable. */
       async locationVolumeTotalBytes(locationId) {
-        const bp = this.locationBasePath(locationId);
-        if (!bp) return 0;
-        try {
-          const st = await node_fs_promises.statfs(bp);
-          return st.blocks * st.bsize;
-        } catch {
-          return 0;
-        }
+        return volumeTotalBytesOf(await this.volumeCapacityOf(locationId));
       }
       /**
       * Seed default storage locations from the addon-declared
@@ -90827,7 +91044,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_DUSfUAgz();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -108888,7 +109105,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_DUSfUAgz();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -110925,9 +111142,9 @@ var require_event_category_yW4s1MGD = __commonJS({
   }
 });
 
-// ../types/dist/sleep-CfDqEZrs.js
-var require_sleep_CfDqEZrs = __commonJS({
-  "../types/dist/sleep-CfDqEZrs.js"(exports) {
+// ../types/dist/sleep-DXsYD0RX.js
+var require_sleep_DXsYD0RX = __commonJS({
+  "../types/dist/sleep-DXsYD0RX.js"(exports) {
     "use strict";
     var require_event_category = require_event_category_yW4s1MGD();
     var zod = require_zod();
@@ -113706,6 +113923,7 @@ var require_sleep_CfDqEZrs = __commonJS({
           listTracks: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listTracks", "query", input),
           listRecentTracks: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listRecentTracks", "query", input),
           listSummaries: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listSummaries", "query", input),
+          listRecentSummaries: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listRecentSummaries", "query", input),
           getSummary: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getSummary", "query", input),
           clearTracks: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "clearTracks", "mutation", input),
           getMotionEvents: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getMotionEvents", "query", input),
@@ -114759,7 +114977,7 @@ var require_addon = __commonJS({
   "../types/dist/addon.js"(exports) {
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-    var require_sleep = require_sleep_CfDqEZrs();
+    var require_sleep = require_sleep_DXsYD0RX();
     var require_event_category = require_event_category_yW4s1MGD();
     var require_err_msg = require_err_msg_COpsHMw2();
     var CAP_INPUT_DEFAULTS = Object.freeze({
@@ -114880,6 +115098,7 @@ var require_addon = __commonJS({
         "getMotionEvents": { "limit": 1e3 },
         "getObjectEvents": { "limit": 1e3 },
         "getSensorEvents": { "limit": 1e3 },
+        "listRecentSummaries": { "limit": 100 },
         "listRecentTracks": { "limit": 200 },
         "listSummaries": { "limit": 50 },
         "reclaimDebugMedia": { "mode": "report" },
@@ -121624,9 +121843,9 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/manifest-system-deps-8x1jgPz_.js
-var require_manifest_system_deps_8x1jgPz = __commonJS({
-  "../system/dist/manifest-system-deps-8x1jgPz_.js"(exports) {
+// ../system/dist/manifest-system-deps-CrSP0Kkp.js
+var require_manifest_system_deps_CrSP0Kkp = __commonJS({
+  "../system/dist/manifest-system-deps-CrSP0Kkp.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
     require_hub_cap_forward_DmHNjbB0();
@@ -123070,6 +123289,19 @@ var require_manifest_system_deps_8x1jgPz = __commonJS({
       });
       return cachedInvocation;
     }
+    function buildNpmChildEnv(env, execPath) {
+      const nodeDir = node_path.dirname(execPath);
+      const current = env["PATH"];
+      if (current === void 0 || current.length === 0) return {
+        ...env,
+        PATH: nodeDir
+      };
+      if (current === nodeDir || current.startsWith(`${nodeDir}${node_path.delimiter}`)) return { ...env };
+      return {
+        ...env,
+        PATH: `${nodeDir}${node_path.delimiter}${current}`
+      };
+    }
     async function runNpm(args, options) {
       const invocation = await resolveNpmInvocation({
         cacheDir: options.cacheDir,
@@ -123078,7 +123310,8 @@ var require_manifest_system_deps_8x1jgPz = __commonJS({
       });
       return execFileAsync$2(invocation.command, [...invocation.argsPrefix, ...args], {
         ...options.cwd !== void 0 ? { cwd: options.cwd } : {},
-        timeout: options.timeout ?? 3e5
+        timeout: options.timeout ?? 3e5,
+        env: buildNpmChildEnv(options.env ?? process.env, process.execPath)
       });
     }
     async function resolveUncached(options) {
@@ -130581,6 +130814,12 @@ var require_manifest_system_deps_8x1jgPz = __commonJS({
         return buildNativeCapProxy;
       }
     });
+    Object.defineProperty(exports, "buildNpmChildEnv", {
+      enumerable: true,
+      get: function() {
+        return buildNpmChildEnv;
+      }
+    });
     Object.defineProperty(exports, "buildUdsNativeCapProxy", {
       enumerable: true,
       get: function() {
@@ -131148,11 +131387,11 @@ var require_manifest_system_deps_8x1jgPz = __commonJS({
   }
 });
 
-// ../system/dist/custom-action-registry-DwaSEiji.js
-var require_custom_action_registry_DwaSEiji = __commonJS({
-  "../system/dist/custom-action-registry-DwaSEiji.js"(exports) {
+// ../system/dist/custom-action-registry-DAFhWd0h.js
+var require_custom_action_registry_DAFhWd0h = __commonJS({
+  "../system/dist/custom-action-registry-DAFhWd0h.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_DUSfUAgz();
     var CustomActionRegistry = class {
       byAddon = /* @__PURE__ */ new Map();
       registerAddon(addonId, catalog, handler) {
@@ -134966,7 +135205,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_DUSfUAgz();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -134993,9 +135232,9 @@ var require_dist3 = __commonJS({
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_event_loop_stall_monitor = require_event_loop_stall_monitor_CAsHdMwP();
     var require_tls$1 = require_tls_BFs4PzoW();
-    var require_manifest_system_deps = require_manifest_system_deps_8x1jgPz();
+    var require_manifest_system_deps = require_manifest_system_deps_CrSP0Kkp();
     var require_resource_monitor = require_resource_monitor_LVE1BoLs();
-    var require_custom_action_registry = require_custom_action_registry_DwaSEiji();
+    var require_custom_action_registry = require_custom_action_registry_DAFhWd0h();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
@@ -215841,6 +216080,7 @@ globstar while`, t, d, e, f, m), this.matchOne(t.slice(d), e.slice(f), s)) retur
     exports.buildLinkChain = require_manifest_system_deps.buildLinkChain;
     exports.buildNativeCapProxy = require_manifest_system_deps.buildNativeCapProxy;
     exports.buildNodeManifest = buildNodeManifest;
+    exports.buildNpmChildEnv = require_manifest_system_deps.buildNpmChildEnv;
     exports.buildStorageLocationRegistry = require_builtins_storage_orchestrator_storage_orchestrator_addon.buildStorageLocationRegistry;
     exports.buildUdsNativeCapProxy = require_manifest_system_deps.buildUdsNativeCapProxy;
     exports.builderMountedCapNames = builderMountedCapNames;
@@ -216103,9 +216343,9 @@ var require_dist4 = __commonJS({
   "../types/dist/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-    var require_sleep = require_sleep_CfDqEZrs();
+    var require_sleep = require_sleep_DXsYD0RX();
     var require_event_category = require_event_category_yW4s1MGD();
-    var require_canonical_hash = require_canonical_hash_DNV8S5ET();
+    var require_canonical_hash = require_canonical_hash_9lydiEzx();
     var require_enums2 = require_enums();
     var require_err_msg = require_err_msg_COpsHMw2();
     var zod = require_zod();
@@ -216285,7 +216525,23 @@ var require_dist4 = __commonJS({
         "zerolatency",
         "film",
         "animation"
-      ]).optional()
+      ]).optional(),
+      /**
+      * ONE slice per access unit.
+      *
+      * `-tune zerolatency` turns on x264's sliced threads, and a frame then leaves
+      * the encoder as five NAL slices that share one RTP timestamp and carry one
+      * marker bit. A libwebrtc depacketiser sees five frame-starts and one
+      * frame-end per frame: the first pictures render and the video then freezes
+      * for good while the audio, on its own plane, plays on. Measured on this hub
+      * 2026-09-13 against the Echo, and reduced to one slice by this flag alone.
+      *
+      * A NAMED field and not a raw flag, because {@link EgressEncodeSchema} omits
+      * `outputArgs` on purpose: an opaque array is part of the sharing key, so two
+      * consumers meaning the same thing spelled differently would stop sharing one
+      * child. Absent means "whatever the encoder does" — today's behaviour.
+      */
+      singleSlicePerFrame: zod.z.boolean().optional()
     });
     var AudioEncodeSchema = zod.z.union([zod.z.literal("passthrough"), zod.z.object({
       codec: zod.z.enum([
@@ -216358,7 +216614,11 @@ var require_dist4 = __commonJS({
     };
     var ALEXA_EGRESS_PROFILE = {
       ...BASE_LIVE_EGRESS_PROFILE,
-      audio: { codec: "opus" }
+      audio: { codec: "opus" },
+      video: {
+        ...BASE_LIVE_EGRESS_PROFILE.video,
+        singleSlicePerFrame: true
+      }
     };
     var RATE_CONTROL_TIGHT = {
       kind: "cbr",
@@ -216446,7 +216706,8 @@ var require_dist4 = __commonJS({
         gopFrames: video.gopFrames ?? -1,
         bf: video.bf ?? -1,
         preset: video.preset ?? UNSET,
-        tune: video.tune ?? UNSET
+        tune: video.tune ?? UNSET,
+        singleSlicePerFrame: video.singleSlicePerFrame === void 0 ? UNSET : String(video.singleSlicePerFrame)
       };
     }
     function canonicalAudio(audio) {
@@ -231303,13 +231564,91 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       deviceIds: zod.z.array(zod.z.number()).min(1),
       since: zod.z.number().optional(),
       until: zod.z.number().optional(),
-      limit: zod.z.number().int().min(1).max(200).default(50)
+      limit: zod.z.number().int().min(1).max(200).default(50),
+      /** The same member-wise filter {@link listRecentSummaries} takes — one
+      *  meaning of "dog" on every summary surface. */
+      classes: zod.z.array(zod.z.string().min(1).max(60)).max(40).optional()
+    });
+    var SummaryMemberSchema = zod.z.object({
+      trackId: zod.z.string(),
+      /**
+      * The track's class at the time it JOINED, or `null` when it was unresolved
+      * and the track no longer exists to fill it.
+      *
+      * The join, not the latest opinion: class voting can re-decide a track's
+      * class afterwards, and a group's composition is the history of who came
+      * together. A consumer counts these to badge a thumbnail — "two people and a
+      * dog" — rather than being handed a second, denormalised tally that would
+      * drift from the members it claims to describe.
+      */
+      className: zod.z.string().nullable(),
+      /** `primary` is the one member that carries the group's identity. */
+      role: zod.z.enum([
+        "primary",
+        "sibling",
+        "child"
+      ]).nullable(),
+      joinedAt: zod.z.number(),
+      /** Tier 1 — the sub-class (`dog`, `van`), resolved from the member's track
+      *  at read time. Absent when nothing resolved, never an empty string. */
+      label: zod.z.string().optional(),
+      /** Tier 2 — the instance: a person's name, a plate. Absent when the pipeline
+      *  recognised nobody, and absent for a member whose track has been pruned —
+      *  a thumbnail that names the wrong person is worse than one naming nobody. */
+      subLabel: zod.z.string().optional()
     });
-    var SummariesPageSchema = zod.z.object({ summaries: zod.z.array(SummarySchema).readonly() });
     var SummaryDetailSchema = zod.z.object({
       summary: SummarySchema,
-      /** Member track ids, in absorption order. */
-      trackIds: zod.z.array(zod.z.string()).readonly()
+      /** Members in absorption order, oldest join first. */
+      members: zod.z.array(SummaryMemberSchema).readonly()
+    });
+    var SummaryListItemSchema = zod.z.object({
+      summary: SummarySchema,
+      /** Class counts, most numerous first; `className: null` is a member whose
+      *  class never resolved, counted so the counts add up to `memberCount`. */
+      classes: zod.z.array(zod.z.object({
+        className: zod.z.string().nullable(),
+        count: zod.z.number().int().positive()
+      })).readonly()
+    });
+    var SummariesPageSchema = zod.z.object({ summaries: zod.z.array(SummaryListItemSchema).readonly() });
+    var RecentSummariesQueryInput = zod.z.object({
+      /** Devices to merge. An empty array yields an empty page. */
+      deviceIds: zod.z.array(zod.z.number()),
+      /** Window lower bound on `lastActiveAt` (inclusive). */
+      since: zod.z.number().optional(),
+      /** Window upper bound on `lastActiveAt` (inclusive). */
+      until: zod.z.number().optional(),
+      limit: zod.z.number().int().min(1).max(500).default(100),
+      /** Opaque continuation cursor from a previous page's `nextCursor`. */
+      cursor: zod.z.string().optional(),
+      /**
+      * Restrict to these classes — THE SAME FIELD `listRecentTracks` takes, and
+      * deliberately the same name: the events filter tree emits one list of ticked
+      * taxonomy nodes, and a summaries feed that called it something else would
+      * make the operator's one filter component produce two shapes.
+      *
+      * A question about the MEMBERS: a group matches when ANY of them does. "Show
+      * me the arrivals with a dog" has to return the group of four people who had
+      * one with them; a filter on the group's own fields could only ever answer
+      * about its primary.
+      *
+      * Matched against all THREE tiers of a member — the class (`animal`), the
+      * sub-class (`dog`) and the instance (a name, a plate) — because which tier a
+      * ticked node lives on is the taxonomy's business, not the caller's. `dog` is
+      * an event kind in the tree and a tier-1 label on an `animal` track; a filter
+      * that read only the class would answer "animal" and never "dog".
+      *
+      * ABSENT or EMPTY means no filter — absent is not a selection of none.
+      */
+      classes: zod.z.array(zod.z.string().min(1).max(60)).max(40).optional()
+    });
+    var RecentSummariesPageSchema = zod.z.object({
+      /** Ordered by (`lastActiveAt` DESC, id DESC). Same light item as
+      *  {@link listSummaries} — one list shape, so a card renders the same
+      *  whichever feed drew it. */
+      summaries: zod.z.array(SummaryListItemSchema).readonly(),
+      nextCursor: zod.z.string().nullable()
     });
     var RecentTracksPageSchema = zod.z.object({
       /** Merged page, ordered by (`lastSeen` DESC, `trackId` DESC). */
@@ -231662,6 +232001,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         listRecentTracks: require_sleep.method(RecentTracksQueryInput, RecentTracksPageSchema),
         /** Newest first by `openedAt`, for a camera set, inside an optional window. */
         listSummaries: require_sleep.method(SummariesQueryInput, SummariesPageSchema),
+        /**
+        * The PAGED feed — the reel and the Events gallery. Same cursor contract as
+        * {@link listRecentTracks}, so one screen cannot hold two ideas of newest.
+        */
+        listRecentSummaries: require_sleep.method(RecentSummariesQueryInput, RecentSummariesPageSchema),
         /** One summary with its member track ids; `null` for an id nobody wrote. */
         getSummary: require_sleep.method(zod.z.object({ id: zod.z.string() }), SummaryDetailSchema.nullable()),
         clearTracks: require_sleep.method(zod.z.object({ deviceId: zod.z.number() }), zod.z.void(), {
@@ -244265,7 +244609,29 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * disarmed the channels it did not mention would make the Levels page and
       * the Diagnostics page fight over the same value.
       */
-      channels: zod.z.array(LogChannelWindowPatchSchema).readonly().optional()
+      channels: zod.z.array(LogChannelWindowPatchSchema).readonly().optional(),
+      /**
+      * How many days the analytics OPS LOG is kept — the audit trail of what
+      * retention actually deleted.
+      *
+      * It lives HERE, on the logging document, and not on the analytics addon's
+      * settings form, on the operator's instruction: every other log-ish window in
+      * this system is configured through this one document, and a retention audit
+      * configured somewhere else is a second place to look when the question is
+      * "what happened to my data".
+      *
+      * That placement has a cost worth stating: this document ships in the
+      * framework closure, so this knob needs a published `@camstack/server` while
+      * the four windows beside it (D485) reach a node on `camstack deploy`.
+      *
+      * `retention-model.ts` argued this one must NOT follow a device window,
+      * because the audit trail is the history of the SWEEP and not of the camera.
+      * That argument stands and is untouched — what changes is that 30 days stops
+      * being a constant nobody can reach. `0` keeps it forever. The floor is 1 day
+      * rather than 0-as-delete: an audit log truncated to nothing is precisely the
+      * state in which the next 9.5 GiB leak cannot be explained.
+      */
+      opsLogRetentionDays: zod.z.number().int().min(0).max(3650).optional()
     });
     var ReportedLoadContributionSchema = LoadContributionSchema.extend({ addonId: zod.z.string() });
     var ReportedFailureContributionSchema = FailureContributionSchema.extend({ addonId: zod.z.string() });
@@ -244304,6 +244670,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       channels: zod.z.array(LogChannelDescriptorSchema).readonly(),
       /** The channels ARMED right now, each with its deadline. */
       activeChannels: zod.z.array(LogChannelWindowStateSchema).readonly(),
+      /**
+      * The ops-log window in days, as it is in force. `0` = kept forever.
+      *
+      * Reported rather than left to the caller's memory of what it wrote: this is
+      * the value the analytics sweep will actually use, and an operator asking how
+      * long their audit trail lives should not have to infer it from a default.
+      */
+      opsLogRetentionDays: zod.z.number().int().min(0),
       persisted: zod.z.boolean()
     });
     var systemCapability = {
@@ -252782,6 +253156,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.listRecentSummaries": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.listRecentTracks": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -256873,6 +257253,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: true
       }],
+      "pipelineAnalytics.listRecentSummaries": [{
+        name: "deviceIds",
+        form: "array",
+        optional: false
+      }],
       "pipelineAnalytics.listRecentTracks": [{
         name: "deviceIds",
         form: "array",
@@ -264680,6 +265065,15 @@ var require_server_root = __commonJS({
         __name(buildNpmRegistryArgs, "buildNpmRegistryArgs");
         var NPM_VIEW_TIMEOUT_MS = 2e4;
         var NPM_INSTALL_TIMEOUT_MS = 15 * 6e4;
+        var CLOSURE_ALLOW_SCRIPTS = {
+          "@camstack/server": true,
+          "better-sqlite3": true,
+          "node-av": true,
+          "node-pty": true,
+          ssh2: true,
+          "cpu-features": true,
+          esbuild: true
+        };
         var RESTART_REASON_PREFIX = "server-update";
         var STALE_TRANSIENT_MS = 24 * 60 * 60 * 1e3;
         function readWrapperProbes() {
@@ -264727,6 +265121,7 @@ var require_server_root = __commonJS({
           dataDir;
           execNpm;
           ensureNativePrebuildsFn;
+          applyClosurePatchesFn;
           env;
           readWrapperProbesFn;
           now;
@@ -264755,6 +265150,7 @@ var require_server_root = __commonJS({
               };
             });
             this.ensureNativePrebuildsFn = options.ensureNativePrebuilds ?? (async () => void 0);
+            this.applyClosurePatchesFn = options.applyClosurePatches ?? (async () => void 0);
             this.env = options.env ?? process.env;
             this.readWrapperProbesFn = options.readWrapperProbes ?? readWrapperProbes;
             this.now = options.now ?? Date.now;
@@ -265070,7 +265466,8 @@ var require_server_root = __commonJS({
               } else {
                 fs6.writeFileSync(path6.join(stagingDir, "package.json"), JSON.stringify({
                   name: "camstack-node-root",
-                  private: true
+                  private: true,
+                  allowScripts: CLOSURE_ALLOW_SCRIPTS
                 }, null, 2), "utf-8");
                 await this.execNpm([
                   ...installArgs,
@@ -265103,6 +265500,15 @@ var require_server_root = __commonJS({
               if (missingNatives.length > 0) {
                 throw new Error(`staged closure missing native prebuilds: ${missingNatives.join(", ")} \u2014 refusing to arm a swap that would break the forked runners`);
               }
+              try {
+                await this.applyClosurePatchesFn(stagingDir);
+              } catch (err) {
+                this.logger.warn("closure-patch apply step failed \u2014 validator will decide", {
+                  meta: {
+                    error: err instanceof Error ? err.message : String(err)
+                  }
+                });
+              }
               const unpatched = findUnappliedClosurePatches(stagingDir);
               if (unpatched.length > 0) {
                 throw new Error(`staged closure did not apply its shipped patches: ${unpatched.join(", ")} \u2014 refusing to arm a swap into an unpatched closure`);
@@ -265150,6 +265556,7 @@ var require_server_root = __commonJS({
             return {
               name: "camstack-node-root",
               private: true,
+              allowScripts: CLOSURE_ALLOW_SCRIPTS,
               dependencies: {
                 [this.spec.packageName]: fileRef(rootTgz)
               },
@@ -396107,6 +396514,78 @@ var require_system_ensure_prebuilds = __commonJS({
   }
 });
 
+// ../../server/backend/dist/core/server-update/system-apply-closure-patches.js
+var require_system_apply_closure_patches = __commonJS({
+  "../../server/backend/dist/core/server-update/system-apply-closure-patches.js"(exports) {
+    "use strict";
+    var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m, k);
+      if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    }) : (function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m[k];
+    }));
+    var __setModuleDefault = exports && exports.__setModuleDefault || (Object.create ? (function(o, v) {
+      Object.defineProperty(o, "default", { enumerable: true, value: v });
+    }) : function(o, v) {
+      o["default"] = v;
+    });
+    var __importStar = exports && exports.__importStar || /* @__PURE__ */ (function() {
+      var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function(o2) {
+          var ar = [];
+          for (var k in o2) if (Object.prototype.hasOwnProperty.call(o2, k)) ar[ar.length] = k;
+          return ar;
+        };
+        return ownKeys(o);
+      };
+      return function(mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) {
+          for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        }
+        __setModuleDefault(result, mod);
+        return result;
+      };
+    })();
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.buildSystemApplyClosurePatches = buildSystemApplyClosurePatches;
+    var node_child_process_1 = __require("child_process");
+    var fs = __importStar(__require("fs"));
+    var path = __importStar(__require("path"));
+    var node_util_1 = __require("util");
+    var execFileAsync = (0, node_util_1.promisify)(node_child_process_1.execFile);
+    var APPLIER_REL = ["node_modules", "@camstack", "server", "scripts", "closure-postinstall.mjs"];
+    var APPLY_TIMEOUT_MS = 6e4;
+    function buildSystemApplyClosurePatches(logger) {
+      return async (closureDir) => {
+        const applier = path.join(closureDir, ...APPLIER_REL);
+        if (!fs.existsSync(applier)) {
+          logger.debug("closure ships no patch applier \u2014 nothing to apply", {
+            meta: { applier }
+          });
+          return;
+        }
+        const { stdout, stderr } = await execFileAsync(process.execPath, [applier], {
+          cwd: path.dirname(path.dirname(applier)),
+          timeout: APPLY_TIMEOUT_MS
+        });
+        const output = `${stdout}${stderr}`.trim();
+        if (output.length > 0) {
+          logger.info("closure patches applied", { meta: { output } });
+        }
+      };
+    }
+  }
+});
+
 // ../../server/backend/dist/core/server-update/system-exec-npm.js
 var require_system_exec_npm = __commonJS({
   "../../server/backend/dist/core/server-update/system-exec-npm.js"(exports) {
@@ -396494,6 +396973,7 @@ var require_agent_update_service = __commonJS({
     var system_1 = require_dist3();
     var types_1 = require_dist4();
     var system_ensure_prebuilds_js_1 = require_system_ensure_prebuilds();
+    var system_apply_closure_patches_js_1 = require_system_apply_closure_patches();
     var system_exec_npm_js_1 = require_system_exec_npm();
     var update_availability_emitter_js_1 = require_update_availability_emitter();
     var update_availability_store_js_1 = require_update_availability_store();
@@ -396582,6 +397062,11 @@ var require_agent_update_service = __commonJS({
           // ships the identical bare Node, so its `applyServerUpdate` staging would
           // hit the same source-only `better-sqlite3` miss without this.
           ensureNativePrebuilds: options.ensureNativePrebuilds ?? (0, system_ensure_prebuilds_js_1.buildSystemEnsureNativePrebuilds)(options.logger),
+          // Apply the closure patches ourselves. npm 12 blocks the root package's
+          // postinstall by default, and a silently-unpatched closure is refused by
+          // the validator — an update that can never apply. Idempotent, so this
+          // costs nothing where npm did run the lifecycle.
+          applyClosurePatches: options.applyClosurePatches ?? (0, system_apply_closure_patches_js_1.buildSystemApplyClosurePatches)(options.logger),
           env: options.env,
           now: options.now
         });
@@ -421021,7 +421506,7 @@ var require_logging_settings = __commonJS({
   "../../server/backend/dist/api/core/logging-settings.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
-    exports.LoggingSettingsService = exports.MAX_CHANNEL_WINDOW_MS = exports.EMPTY_LOG_CHANNEL_PLANE = exports.HUB_NODE_ID = exports.LOGGING_SETTINGS_KEY = void 0;
+    exports.LoggingSettingsService = exports.MAX_CHANNEL_WINDOW_MS = exports.EMPTY_LOG_CHANNEL_PLANE = exports.OPS_LOG_RETENTION_DEFAULT_DAYS = exports.HUB_NODE_ID = exports.LOGGING_SETTINGS_KEY = void 0;
     exports.buildLogChannelPlane = buildLogChannelPlane;
     exports.toLoggingSettingsRecord = toLoggingSettingsRecord;
     exports.resolveLevel = resolveLevel;
@@ -421037,6 +421522,7 @@ var require_logging_settings = __commonJS({
     var SYSTEM_SETTINGS_COLLECTION = "system-settings";
     exports.HUB_NODE_ID = "hub";
     var LOG_LEVELS = ["debug", "info", "warn", "error"];
+    exports.OPS_LOG_RETENTION_DEFAULT_DAYS = 30;
     exports.EMPTY_LOG_CHANNEL_PLANE = {
       declarations: async () => [],
       apply: async () => {
@@ -421118,6 +421604,9 @@ var require_logging_settings = __commonJS({
         if (levelChanged) {
           next = mergeLevel(next, scope, component, patch.level ?? null, this.now());
         }
+        if (patch.opsLogRetentionDays !== void 0) {
+          next = { ...next, opsLogRetentionDays: patch.opsLogRetentionDays, updatedAt: this.now() };
+        }
         if (channelsChanged) {
           const declared = await this.channels.declarations();
           const rejected = validateChannelPatch(patch.channels ?? [], declared);
@@ -421207,6 +421696,7 @@ var require_logging_settings = __commonJS({
           activeWindows: await this.describeWindows(),
           channels: await this.declaredChannels(),
           activeChannels: describeChannelWindows(record ?? {}, this.now()),
+          opsLogRetentionDays: record?.opsLogRetentionDays ?? exports.OPS_LOG_RETENTION_DEFAULT_DAYS,
           persisted: record !== null
         };
       }
@@ -434655,6 +435145,7 @@ var require_server_update_service = __commonJS({
     var index_js_1 = require_server_root();
     var update_availability_emitter_js_1 = require_update_availability_emitter();
     var system_ensure_prebuilds_js_1 = require_system_ensure_prebuilds();
+    var system_apply_closure_patches_js_1 = require_system_apply_closure_patches();
     var system_exec_npm_js_1 = require_system_exec_npm();
     var ServerUpdateService = class extends index_js_1.RootUpdateService {
       updateAvailability;
@@ -434688,6 +435179,11 @@ var require_server_update_service = __commonJS({
           // native-prebuild validator refuses the swap (toolchain-less packaged
           // desktop). No-op on docker where the install already carried it.
           ensureNativePrebuilds: options.ensureNativePrebuilds ?? (0, system_ensure_prebuilds_js_1.buildSystemEnsureNativePrebuilds)(options.logger),
+          // Apply the closure patches ourselves. npm 12 blocks the root package's
+          // postinstall by default, and a silently-unpatched closure is refused by
+          // the validator — an update that can never apply. Idempotent, so this
+          // costs nothing where npm did run the lifecycle.
+          applyClosurePatches: options.applyClosurePatches ?? (0, system_apply_closure_patches_js_1.buildSystemApplyClosurePatches)(options.logger),
           env: options.env,
           now: options.now
         });