camstack 1.2.154 → 1.2.156

package/dist/{launcher-ZQZHWQ6F.js → launcher-OPKFHSZH.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-DaSCLJVH.js
-var require_dist_DaSCLJVH = __commonJS({
-  "../system/dist/dist-DaSCLJVH.js"(exports) {
+// ../system/dist/dist-C6JIhqS6.js
+var require_dist_C6JIhqS6 = __commonJS({
+  "../system/dist/dist-C6JIhqS6.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -29471,6 +29471,21 @@ var require_dist_DaSCLJVH = __commonJS({
       mode: "singleton",
       deviceTypes: Object.values(DeviceType),
       runtimeState: StreamSignalsStatusSchema,
+      /**
+      * Runtime-state durability: **session** — mirrored in RAM, never written.
+      *
+      * The slice holds what the DEVICE says it can emit. That is a probed fact,
+      * not an operator choice: the provider re-declares it on every registration,
+      * so losing it loses nothing and persisting it would freeze an answer the
+      * camera is entitled to change. Measured the same day on the sibling case —
+      * `native-object-detection.supportedClasses` was persisted, and a firmware
+      * class the camera really detected stayed missing for the life of the row
+      * because the fix could not reach it.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session",
       methods: {
         /**
         * What this device can emit. Empty is a valid and common answer — most
@@ -30735,16 +30750,6 @@ var require_dist_DaSCLJVH = __commonJS({
         })) }), { auth: "admin" })
       }
     };
-    function describeCustomActions(catalog) {
-      const out = {};
-      for (const [name, spec] of Object.entries(catalog)) out[name] = {
-        kind: spec.kind,
-        auth: spec.auth,
-        scope: spec.scope,
-        ...spec.caller === "required" ? { caller: "required" } : {}
-      };
-      return out;
-    }
     var CustomModelDescriptorSchema = zod.z.object({
       stepId: zod.z.string(),
       entry: ModelCatalogEntrySchema
@@ -36354,6 +36359,29 @@ var require_dist_DaSCLJVH = __commonJS({
       settings: NcAlarmSettingsSchema,
       coverage: zod.z.array(NcAlarmModeCoverageSchema)
     });
+    var NcClipRetentionAskSchema = zod.z.object({
+      /**
+      * The camera this ask is about. **Absent = every camera**, which is what a
+      * rule with no `conditions.devices` means: it can fire anywhere, so it is
+      * asking everywhere.
+      */
+      deviceId: zod.z.number().int().nonnegative().optional(),
+      /** Seconds of history the rule needs held for it. Never zero — a rule that
+      *  needs nothing produces no ask at all. */
+      seconds: zod.z.number().min(0).max(60),
+      /** The profile the rule cuts from, when it named one. Absent = the cheapest
+      *  assigned, which is what the cut defaults to. */
+      profile: CamProfileSchema.optional(),
+      /** Who is asking — so a retention the operator did not expect names a rule. */
+      ruleId: zod.z.string(),
+      ruleName: zod.z.string(),
+      /** Why this many seconds: the rule's own window, or the occupancy ceiling. */
+      reason: zod.z.enum(["window", "occupancy"])
+    });
+    var NcClipRetentionPlanSchema = zod.z.object({
+      rulesLoaded: zod.z.boolean(),
+      asks: zod.z.array(NcClipRetentionAskSchema).readonly()
+    });
     var notificationRulesCapability = {
       name: "notification-rules",
       scope: "system",
@@ -36386,6 +36414,23 @@ var require_dist_DaSCLJVH = __commonJS({
           auth: "admin"
         }),
         /**
+        * WHAT THE RULES ACTUALLY ASK the stream broker to retain, per camera.
+        *
+        * The notification centre owns the rules, so it is the only thing that can
+        * say how much history a camera's notifications will ever reach back for.
+        * Before this the broker guessed — a flat minute on every camera — and
+        * learned the PROFILE reactively, after the first clip had already been cut
+        * from the wrong one. This is the same ask stated once, in front.
+        *
+        * A QUERY, pulled by each node's broker, not a push: brokers are per node
+        * (a camera's ring lives wherever its stream is ingested) while this cap is
+        * a singleton, so a push would have to enumerate the cluster. The pull also
+        * makes the failure mode right — a broker that cannot reach the centre
+        * keeps the plan it has, and a plan that has never arrived is UNKNOWN
+        * rather than empty (D49: a read that fails changes nothing).
+        */
+        getClipRetentionAsks: method(zod.z.object({}), NcClipRetentionPlanSchema, { auth: "admin" }),
+        /**
         * PERMANENT per-camera mute — the notifications half of the per-camera
         * function switch group ([D61](../../../../docs/decisions/adr-0067.md)).
         *
@@ -37545,6 +37590,7 @@ var require_dist_DaSCLJVH = __commonJS({
     });
     var TrackSourceSchema = zod.z.enum([
       "pipeline",
+      "onboard",
       "sensor",
       "audio"
     ]);
@@ -38594,6 +38640,20 @@ var require_dist_DaSCLJVH = __commonJS({
       framesMatched: zod.z.number().int()
     });
     var RunReplayFrameProcessorResultSchema = zod.z.object({ tracks: zod.z.array(ReplayTrackSchema).readonly() });
+    var AnalyticsLtsSeriesSchema = zod.z.enum([
+      "motion",
+      "audio-dbfs",
+      "battery",
+      "occupancy"
+    ]);
+    var LtsBucketSchema = zod.z.object({
+      scope: zod.z.string(),
+      bucketStart: zod.z.number().int(),
+      samples: zod.z.number().int().nonnegative(),
+      sum: zod.z.number(),
+      min: zod.z.number(),
+      max: zod.z.number()
+    });
     var pipelineAnalyticsCapability = {
       name: "pipeline-analytics",
       scope: "device",
@@ -38737,6 +38797,30 @@ var require_dist_DaSCLJVH = __commonJS({
         getKeyEventsBatch: method(KeyEventBatchQueryInput, zod.z.array(KeyEventsForDeviceSchema).readonly()),
         /** Server-side bucketed event counts for the 24-hour timeline.
         *  Returns one entry per non-empty bucket; empty buckets are omitted. */
+        /**
+        * Read one camera's long-term series — 5-minute buckets, kept for a year.
+        *
+        * This is the history surface for every chart that used to be served from a
+        * RAM ring: the ring dies with the process, cannot answer about last night,
+        * and had a 60-minute horizon, while these rows are ~60 bytes and already
+        * written. `scope` is the series' own dimension — for `occupancy`, spell it
+        * with {@link occupancyScope} rather than by hand, and omit it to get every
+        * scope back at once (the caller then groups with
+        * {@link parseOccupancyScope}).
+        *
+        * Bounds are inclusive on the BUCKET START, so a range that ends mid-bucket
+        * still returns the bucket it lands in — the alternative is a chart whose
+        * last column silently disappears for five minutes out of every five.
+        */
+        readLongTermSeries: method(zod.z.object({
+          deviceId: zod.z.number(),
+          series: AnalyticsLtsSeriesSchema,
+          /** Omit for EVERY scope of this series in the range. */
+          scope: zod.z.string().optional(),
+          from: zod.z.number(),
+          to: zod.z.number(),
+          limit: zod.z.number().int().positive().optional()
+        }), zod.z.array(LtsBucketSchema).readonly()),
         getEventDensity: method(zod.z.object({
           deviceId: zod.z.number(),
           since: zod.z.number(),
@@ -39745,7 +39829,7 @@ var require_dist_DaSCLJVH = __commonJS({
       "device-activity"
     ]);
     var MotionSourcesSchema = zod.z.array(MotionSourceEnum);
-    var DetectionSourcesSchema = zod.z.array(DetectionSourceSchema);
+    var DetectionSourcesSchema = zod.z.preprocess((value) => Array.isArray(value) && value.length > 1 ? value.slice(0, 1) : value, zod.z.array(DetectionSourceSchema).max(1));
     var ReportMotionInputSchema = zod.z.object({
       deviceId: zod.z.number(),
       detected: zod.z.boolean(),
@@ -40053,6 +40137,12 @@ var require_dist_DaSCLJVH = __commonJS({
       queueDepth: zod.z.number(),
       frameLazy: FrameLazyMetricsSchema.optional()
     });
+    var OccupancyBurstRefusalSchema = zod.z.enum([
+      "not-attached",
+      "battery-asleep",
+      "not-watching",
+      "already-bursting"
+    ]);
     var pipelineRunnerCapability = {
       name: "pipeline-runner",
       scope: "system",
@@ -40089,6 +40179,50 @@ var require_dist_DaSCLJVH = __commonJS({
         /** List the deviceIds currently attached to this runner. */
         getLocalCameras: method(zod.z.void(), zod.z.array(zod.z.number()).readonly()),
         /**
+        * Look at a camera NOW, out of band, because something just happened that
+        * only a fresh look can settle.
+        *
+        * The periodic recheck (`occupancyRecheckSec`, 300 s) exists to watch a
+        * still scene. It is the wrong instrument for a QUESTION that has just been
+        * asked: on device 617 a parked car's departure was observed, a departure
+        * strike was armed — and then the motion session ended, the strike decayed
+        * after its 30 s TTL, and the next periodic look arrived up to five minutes
+        * later with nothing left to confirm. Every one of those departures was
+        * settled by the entry ageing out 6 to 10 minutes of observed time later,
+        * and the notification's clip showed an empty space with nothing leaving
+        * it.
+        *
+        * Two numbers make the ask specific, and a caller that ignores them wastes
+        * the burst: a confirmation must land at least
+        * `DEPARTURE_CONFIRM_MIN_GAP_MS` (3 s) after the read that armed the
+        * strike — before that it is the same optical event and is refused — and
+        * `DEPARTURE_ABSENCE_MIN_READS` (5) consecutive unassociated frames are
+        * needed, while `occupancyRecheckFrames` defaults to FOUR. A burst of four
+        * can never confirm an absence; that is why two periodic looks were always
+        * required.
+        *
+        * The runner answers whether it actually started one. A refusal is NAMED,
+        * never a silent `false`: a camera that is asleep on battery (D173 — this
+        * must not become a self-initiated wake), detached, mid-session or already
+        * bursting are four different facts, and a caller told only "no" cannot
+        * tell a protection from a bug.
+        */
+        requestOccupancyBurst: method(zod.z.object({
+          deviceId: zod.z.number(),
+          /** How many frames to collect. The caller sizes this against what its
+          *  own confirmation needs; the runner clamps it to the field's range. */
+          frames: zod.z.number().int().positive().optional(),
+          /** Why, for the log. A burst nobody can attribute is a cost nobody can
+          *  defend — the periodic one at least has a timer to point at. */
+          reason: zod.z.string()
+        }), zod.z.object({
+          started: zod.z.boolean(),
+          refusedBecause: OccupancyBurstRefusalSchema.optional()
+        }), {
+          auth: "admin",
+          kind: "mutation"
+        }),
+        /**
         * Best-effort NATIVE-resolution crop of a retention-ring frame. Given the
         * `FrameHandle` that rode an inference-result event and a normalized `bbox`,
         * the runner asks the decode worker still holding that frame's NATIVE
@@ -51841,7 +51975,28 @@ var require_dist_DaSCLJVH = __commonJS({
       /** Total tracked objects in this scope (frame / zone / unzoned). */
       totalObjects: zod.z.number().int().nonnegative(),
       /** Per-class count. Keys are macro class names (e.g. `person`, `car`). */
-      byClass: zod.z.record(zod.z.string(), zod.z.number().int().nonnegative())
+      byClass: zod.z.record(zod.z.string(), zod.z.number().int().nonnegative()),
+      /**
+      * Of `totalObjects`, how many are STANDING — objects the census holds,
+      * present but not going anywhere (a parked car, a bin, a statue).
+      *
+      * The operator's question about a scene has two halves and they answer
+      * different things: "what is parked here" is stable for hours and must not
+      * flap, while "who is walking through" is the thing an alert is about. One
+      * number could only serve one of them, and `totalObjects` served the first
+      * badly — a passer-by moved it and every occupancy rule saw a change.
+      *
+      * `standing + transient === totalObjects`, always. The total keeps its old
+      * meaning exactly, so no rule written against it changes behaviour.
+      *
+      * ABSENT means UNKNOWN, never zero (D393): a snapshot from a node older than
+      * this field cannot say, and a reader that folds absence in as 0 reports "no
+      * parked objects here" about a camera whose lot is full.
+      */
+      standingObjects: zod.z.number().int().nonnegative().optional(),
+      /** Of `totalObjects`, how many are passing through. See `standingObjects` —
+      *  same absence rule. */
+      transientObjects: zod.z.number().int().nonnegative().optional()
     });
     var ZoneScopeBreakdownSchema = PerScopeBreakdownSchema.extend({
       zoneId: zod.z.string(),
@@ -55763,6 +55918,12 @@ var require_dist_DaSCLJVH = __commonJS({
         addonId: null,
         access: "view"
       },
+      "notificationRules.getClipRetentionAsks": {
+        capName: "notification-rules",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "notificationRules.getConditionCatalog": {
         capName: "notification-rules",
         capScope: "system",
@@ -56273,6 +56434,12 @@ var require_dist_DaSCLJVH = __commonJS({
         addonId: null,
         access: "create"
       },
+      "pipelineAnalytics.readLongTermSeries": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.rebuildObjectEmbeddings": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -56945,6 +57112,12 @@ var require_dist_DaSCLJVH = __commonJS({
         addonId: null,
         access: "create"
       },
+      "pipelineRunner.requestOccupancyBurst": {
+        capName: "pipeline-runner",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "pipelineRunner.runDetailSubtree": {
         capName: "pipeline-runner",
         capScope: "system",
@@ -60089,6 +60262,11 @@ var require_dist_DaSCLJVH = __commonJS({
         form: "single",
         optional: false
       }],
+      "pipelineAnalytics.readLongTermSeries": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "pipelineAnalytics.rebuildObjectEmbeddings": [{
         name: "deviceId",
         form: "single",
@@ -60279,6 +60457,11 @@ var require_dist_DaSCLJVH = __commonJS({
         form: "single",
         optional: false
       }],
+      "pipelineRunner.requestOccupancyBurst": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "pipelineRunner.runDetailSubtree": [{
         name: "deviceId",
         form: "single",
@@ -61947,12 +62130,6 @@ var require_dist_DaSCLJVH = __commonJS({
         return deriveBatteryPresence;
       }
     });
-    Object.defineProperty(exports, "describeCustomActions", {
-      enumerable: true,
-      get: function() {
-        return describeCustomActions;
-      }
-    });
     Object.defineProperty(exports, "deviceManagerCapability", {
       enumerable: true,
       get: function() {
@@ -62379,7 +62556,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DaSCLJVH();
+    var require_dist10 = require_dist_C6JIhqS6();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -63198,7 +63375,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DaSCLJVH();
+    var require_dist10 = require_dist_C6JIhqS6();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -63292,7 +63469,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DaSCLJVH();
+    var require_dist10 = require_dist_C6JIhqS6();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -64189,11 +64366,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-CZISf623.js
-var require_retired_settings_keys_CZISf623 = __commonJS({
-  "../system/dist/retired-settings-keys-CZISf623.js"(exports) {
+// ../system/dist/retired-settings-keys-C53Y2Q1C.js
+var require_retired_settings_keys_C53Y2Q1C = __commonJS({
+  "../system/dist/retired-settings-keys-C53Y2Q1C.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_DaSCLJVH();
+    var require_dist10 = require_dist_C6JIhqS6();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -66430,8 +66607,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DaSCLJVH();
-    var require_retired_settings_keys = require_retired_settings_keys_CZISf623();
+    var require_dist10 = require_dist_C6JIhqS6();
+    var require_retired_settings_keys = require_retired_settings_keys_C53Y2Q1C();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -72141,7 +72318,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DaSCLJVH();
+    var require_dist10 = require_dist_C6JIhqS6();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -72278,7 +72455,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DaSCLJVH();
+    var require_dist10 = require_dist_C6JIhqS6();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -72474,7 +72651,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DaSCLJVH();
+    var require_dist10 = require_dist_C6JIhqS6();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -80287,7 +80464,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DaSCLJVH();
+    var require_dist10 = require_dist_C6JIhqS6();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -80874,7 +81051,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DaSCLJVH();
+    var require_dist10 = require_dist_C6JIhqS6();
     var node_fs_promises = __require("fs/promises");
     var node_fs = __require("fs");
     node_fs = require_chunk.__toESM(node_fs);
@@ -83627,7 +83804,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DaSCLJVH();
+    var require_dist10 = require_dist_C6JIhqS6();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -84854,8 +85031,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DaSCLJVH();
-    var require_retired_settings_keys = require_retired_settings_keys_CZISf623();
+    var require_dist10 = require_dist_C6JIhqS6();
+    var require_retired_settings_keys = require_retired_settings_keys_C53Y2Q1C();
     var require_wal_checkpoint_policy = require_wal_checkpoint_policy_CCJZngds();
     var node_crypto = __require("crypto");
     var node_path = __require("path");
@@ -87642,7 +87819,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DaSCLJVH();
+    var require_dist10 = require_dist_C6JIhqS6();
     var require_hub_cap_forward = require_hub_cap_forward_DmHNjbB0();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -91369,7 +91546,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DaSCLJVH();
+    var require_dist10 = require_dist_C6JIhqS6();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -109430,7 +109607,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DaSCLJVH();
+    var require_dist10 = require_dist_C6JIhqS6();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -111468,9 +111645,9 @@ var require_event_category_BVfsrBYA = __commonJS({
   }
 });
 
-// ../types/dist/sleep-B8nfmQ8a.js
-var require_sleep_B8nfmQ8a = __commonJS({
-  "../types/dist/sleep-B8nfmQ8a.js"(exports) {
+// ../types/dist/sleep-DqtlfkSS.js
+var require_sleep_DqtlfkSS = __commonJS({
+  "../types/dist/sleep-DqtlfkSS.js"(exports) {
     "use strict";
     var require_event_category = require_event_category_BVfsrBYA();
     var zod = require_zod();
@@ -113548,6 +113725,41 @@ var require_sleep_B8nfmQ8a = __commonJS({
       DeviceRole2["GenericNotifier"] = "generic-notifier";
       return DeviceRole2;
     })({});
+    function defineCustomActions(spec) {
+      return spec;
+    }
+    function customAction(input, output, options) {
+      return {
+        input,
+        output,
+        kind: options?.kind ?? "query",
+        auth: options?.auth ?? "protected",
+        scope: options?.scope ?? { kind: "system" },
+        ...options?.caller ? { caller: "required" } : {}
+      };
+    }
+    function deviceCustomAction(input, output, options) {
+      return {
+        input,
+        output,
+        kind: options?.kind ?? "query",
+        auth: options?.auth ?? "protected",
+        scope: {
+          kind: "device",
+          ...options?.deviceTypes ? { deviceTypes: options.deviceTypes } : {}
+        }
+      };
+    }
+    function describeCustomActions(catalog) {
+      const out = {};
+      for (const [name, spec] of Object.entries(catalog)) out[name] = {
+        kind: spec.kind,
+        auth: spec.auth,
+        scope: spec.scope,
+        ...spec.caller === "required" ? { caller: "required" } : {}
+      };
+      return out;
+    }
     var DEVICE_CHILDREN_BATCH_MAX = 256;
     var StaticDirOutputSchema = zod.z.object({ staticDir: zod.z.string() });
     var VersionOutputSchema = zod.z.object({ version: zod.z.string() });
@@ -114211,6 +114423,7 @@ var require_sleep_B8nfmQ8a = __commonJS({
           updateRule: (input) => dispatch("notification-rules", "notificationRules", "updateRule", "mutation", input),
           deleteRule: (input) => dispatch("notification-rules", "notificationRules", "deleteRule", "mutation", input),
           setRuleEnabled: (input) => dispatch("notification-rules", "notificationRules", "setRuleEnabled", "mutation", input),
+          getClipRetentionAsks: (input) => dispatch("notification-rules", "notificationRules", "getClipRetentionAsks", "query", input),
           listDeviceMutes: (input) => dispatch("notification-rules", "notificationRules", "listDeviceMutes", "query", input),
           setDeviceMuted: (input) => dispatch("notification-rules", "notificationRules", "setDeviceMuted", "mutation", input),
           testRule: (input) => dispatch("notification-rules", "notificationRules", "testRule", "mutation", input),
@@ -114263,6 +114476,7 @@ var require_sleep_B8nfmQ8a = __commonJS({
           getSensorEvents: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getSensorEvents", "query", input),
           getKeyEvents: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getKeyEvents", "query", input),
           getKeyEventsBatch: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getKeyEventsBatch", "query", input),
+          readLongTermSeries: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "readLongTermSeries", "query", input),
           getEventDensity: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getEventDensity", "query", input),
           getEventDensityBatch: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getEventDensityBatch", "query", input),
           pruneEventsBefore: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "pruneEventsBefore", "mutation", input),
@@ -114563,6 +114777,7 @@ var require_sleep_B8nfmQ8a = __commonJS({
         pipelineRunner: {
           detachCamera: (input) => dispatchSystem("pipelineRunner", "detachCamera", "mutation", input),
           getCameraMetrics: (input) => dispatchSystem("pipelineRunner", "getCameraMetrics", "query", input),
+          requestOccupancyBurst: (input) => dispatchSystem("pipelineRunner", "requestOccupancyBurst", "mutation", input),
           runDetailSubtree: (input) => dispatchSystem("pipelineRunner", "runDetailSubtree", "mutation", input),
           parkTrackFrame: (input) => dispatchSystem("pipelineRunner", "parkTrackFrame", "mutation", input),
           getParkedTrackFrame: (input) => dispatchSystem("pipelineRunner", "getParkedTrackFrame", "query", input),
@@ -115115,6 +115330,30 @@ var require_sleep_B8nfmQ8a = __commonJS({
         return createSliceHandle;
       }
     });
+    Object.defineProperty(exports, "customAction", {
+      enumerable: true,
+      get: function() {
+        return customAction;
+      }
+    });
+    Object.defineProperty(exports, "defineCustomActions", {
+      enumerable: true,
+      get: function() {
+        return defineCustomActions;
+      }
+    });
+    Object.defineProperty(exports, "describeCustomActions", {
+      enumerable: true,
+      get: function() {
+        return describeCustomActions;
+      }
+    });
+    Object.defineProperty(exports, "deviceCustomAction", {
+      enumerable: true,
+      get: function() {
+        return deviceCustomAction;
+      }
+    });
     Object.defineProperty(exports, "deviceOpsCapability", {
       enumerable: true,
       get: function() {
@@ -115309,7 +115548,7 @@ var require_addon = __commonJS({
   "../types/dist/addon.js"(exports) {
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-    var require_sleep = require_sleep_B8nfmQ8a();
+    var require_sleep = require_sleep_DqtlfkSS();
     var require_event_category = require_event_category_BVfsrBYA();
     var require_err_msg = require_err_msg_COpsHMw2();
     var CAP_INPUT_DEFAULTS = Object.freeze({
@@ -115622,6 +115861,7 @@ var require_addon = __commonJS({
     exports.asString = require_sleep.asString;
     exports.createDeviceProxy = require_sleep.createDeviceProxy;
     exports.createEventBusSliceSource = require_sleep.createEventBusSliceSource;
+    exports.describeCustomActions = require_sleep.describeCustomActions;
     exports.deviceOpsCapability = require_sleep.deviceOpsCapability;
     exports.emitReadiness = require_sleep.emitReadiness;
     exports.errMsg = require_err_msg.errMsg;
@@ -122176,9 +122416,9 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/manifest-system-deps-CrSP0Kkp.js
-var require_manifest_system_deps_CrSP0Kkp = __commonJS({
-  "../system/dist/manifest-system-deps-CrSP0Kkp.js"(exports) {
+// ../system/dist/manifest-system-deps-CzyjTMcO.js
+var require_manifest_system_deps_CzyjTMcO = __commonJS({
+  "../system/dist/manifest-system-deps-CzyjTMcO.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
     require_hub_cap_forward_DmHNjbB0();
@@ -127283,10 +127523,104 @@ var require_manifest_system_deps_CrSP0Kkp = __commonJS({
     function __resetCapUsageRegistryForTests() {
       singleton = null;
     }
+    var MIRROR_REASON_BY_CATEGORY = new Map([
+      {
+        category: "device.state-changed",
+        reason: "Device runtime-state mirror, 69.1 % of fleet traffic. Each event is a snapshot of the slice AFTER the change; the superseded snapshot describes a state the device is no longer in, and every consumer (SystemMirror, DeviceStateHandle) reads the latest one only."
+      },
+      {
+        category: "camera-streams.onCamStreamsChanged",
+        reason: "Full stream-list snapshot per camera, 20.1 % of fleet traffic. The payload is the complete current list, not a delta, so an older list is strictly less true than the newer one."
+      },
+      {
+        category: "system.ready-state",
+        reason: "Readiness is a LEVEL, not an edge: the event reports whether a capability is ready right now. Declared for the case where it carries a deviceId; when it does not it stays in the global ring like any other unattributed event."
+      }
+    ].map((m) => [m.category, m.reason]));
+    function isMirrorCategory(category) {
+      return MIRROR_REASON_BY_CATEGORY.has(category);
+    }
+    var MAX_DEVICE_RING_EVENTS = 2e3;
+    function serializePayload(data) {
+      try {
+        const json = JSON.stringify(data);
+        if (typeof json !== "string") return null;
+        return {
+          json,
+          bytes: Buffer.byteLength(json, "utf8")
+        };
+      } catch {
+        return null;
+      }
+    }
+    function capEventData(event) {
+      const serialized = serializePayload(event.data);
+      if (serialized !== null && serialized.bytes <= 256) return event;
+      const truncated = {
+        __truncated: true,
+        __originalBytes: serialized?.bytes ?? null,
+        __preview: serialized === null ? "" : serialized.json.slice(0, 160)
+      };
+      return {
+        ...event,
+        data: truncated
+      };
+    }
+    function eventDeviceId(event) {
+      const explicit = event.source.deviceId;
+      if (explicit !== void 0) return Number.isFinite(explicit) ? explicit : void 0;
+      if (event.source.type !== "device") return void 0;
+      const asNumber = Number(event.source.id);
+      return Number.isFinite(asNumber) ? asNumber : void 0;
+    }
+    function createDeviceEventRings() {
+      return { byDevice: /* @__PURE__ */ new Map() };
+    }
+    function ringFor(rings, deviceId) {
+      const existing = rings.byDevice.get(deviceId);
+      if (existing !== void 0) {
+        rings.byDevice.delete(deviceId);
+        rings.byDevice.set(deviceId, existing);
+        return existing;
+      }
+      const created = {
+        history: [],
+        mirrors: /* @__PURE__ */ new Map()
+      };
+      rings.byDevice.set(deviceId, created);
+      while (rings.byDevice.size > 512) {
+        const oldest = rings.byDevice.keys().next();
+        if (oldest.done === true) break;
+        rings.byDevice.delete(oldest.value);
+      }
+      return created;
+    }
+    function recordDeviceEvent(rings, event) {
+      const deviceId = eventDeviceId(event);
+      if (deviceId === void 0) return void 0;
+      const ring = ringFor(rings, deviceId);
+      const retained = capEventData(event);
+      if (isMirrorCategory(event.category)) {
+        ring.mirrors.set(event.category, retained);
+        return deviceId;
+      }
+      ring.history.push(retained);
+      if (ring.history.length > 2e3) ring.history.splice(0, ring.history.length - MAX_DEVICE_RING_EVENTS);
+      return deviceId;
+    }
+    function getDeviceRecent(rings, deviceId) {
+      const ring = rings.byDevice.get(deviceId);
+      if (ring === void 0) return [];
+      if (ring.mirrors.size === 0) return ring.history;
+      const merged = [...ring.history, ...ring.mirrors.values()];
+      merged.sort((a, b) => a.timestamp.getTime() - b.timestamp.getTime());
+      return merged;
+    }
     function createSharedBusState(retainRecent = false) {
       return {
         handlers: /* @__PURE__ */ new Map(),
         recent: [],
+        deviceRings: createDeviceEventRings(),
         retainRecent
       };
     }
@@ -127394,6 +127728,7 @@ var require_manifest_system_deps_CrSP0Kkp = __commonJS({
       if (state.retainRecent && !isHighFrequencyCategory(event.category)) {
         state.recent.push(event);
         if (state.recent.length > 1e3) state.recent.splice(0, state.recent.length - MAX_RECENT_EVENTS);
+        recordDeviceEvent(state.deviceRings, event);
       }
       const delivered = /* @__PURE__ */ new Set();
       for (const [pattern, set] of state.handlers) {
@@ -129788,14 +130123,15 @@ var require_manifest_system_deps_CrSP0Kkp = __commonJS({
           });
         },
         getRecent(filter, limit) {
-          const filtered = filter ? state.recent.filter((e) => {
+          const source = filter?.deviceId !== void 0 ? getDeviceRecent(state.deviceRings, filter.deviceId) : state.recent;
+          const filtered = filter ? source.filter((e) => {
             const cat = filter.category;
             if (cat) {
               const categories = typeof cat === "string" ? [cat] : Array.isArray(cat) ? cat : [];
               if (categories.length > 0 && !categories.some((c) => matchesPattern(String(c), e.category))) return false;
             }
             return matchesEventFilter(e, filter);
-          }) : state.recent;
+          }) : source;
           return limit !== void 0 ? filtered.slice(-limit) : filtered;
         }
       };
@@ -131720,11 +132056,11 @@ var require_manifest_system_deps_CrSP0Kkp = __commonJS({
   }
 });
 
-// ../system/dist/custom-action-registry-DG-QIWxd.js
-var require_custom_action_registry_DG_QIWxd = __commonJS({
-  "../system/dist/custom-action-registry-DG-QIWxd.js"(exports) {
+// ../system/dist/custom-action-registry-acBY3mHA.js
+var require_custom_action_registry_acBY3mHA = __commonJS({
+  "../system/dist/custom-action-registry-acBY3mHA.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_DaSCLJVH();
+    var _camstack_types_addon = require_addon();
     var CustomActionRegistry = class {
       byAddon = /* @__PURE__ */ new Map();
       registerAddon(addonId, catalog, handler) {
@@ -131765,7 +132101,7 @@ var require_custom_action_registry_DG_QIWxd = __commonJS({
         for (const [addonId, actions] of this.byAddon) {
           const catalog = {};
           for (const [name, entry] of actions) catalog[name] = entry.spec;
-          out[addonId] = require_dist10.describeCustomActions(catalog);
+          out[addonId] = (0, _camstack_types_addon.describeCustomActions)(catalog);
         }
         return out;
       }
@@ -135538,7 +135874,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DaSCLJVH();
+    var require_dist10 = require_dist_C6JIhqS6();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -135565,9 +135901,9 @@ var require_dist3 = __commonJS({
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_event_loop_stall_monitor = require_event_loop_stall_monitor_CAsHdMwP();
     var require_tls$1 = require_tls_BFs4PzoW();
-    var require_manifest_system_deps = require_manifest_system_deps_CrSP0Kkp();
+    var require_manifest_system_deps = require_manifest_system_deps_CzyjTMcO();
     var require_resource_monitor = require_resource_monitor_LVE1BoLs();
-    var require_custom_action_registry = require_custom_action_registry_DG_QIWxd();
+    var require_custom_action_registry = require_custom_action_registry_acBY3mHA();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
@@ -216676,7 +217012,7 @@ var require_dist4 = __commonJS({
   "../types/dist/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-    var require_sleep = require_sleep_B8nfmQ8a();
+    var require_sleep = require_sleep_DqtlfkSS();
     var require_event_category = require_event_category_BVfsrBYA();
     var require_canonical_hash = require_canonical_hash_9lydiEzx();
     var require_enums2 = require_enums();
@@ -219486,6 +219822,49 @@ var require_dist4 = __commonJS({
         pixels: entry.resolution.width * entry.resolution.height
       }])].sort((a, b) => compareToTarget(a.pixels, b.pixels, targetPixels))[0]?.entry;
     }
+    var OVERLAY_LAYERS = [
+      "motion",
+      "objects",
+      "discarded",
+      "stationary"
+    ];
+    var DEFAULT_OVERLAY_LAYERS = [
+      "motion",
+      "objects",
+      "stationary"
+    ];
+    var STATIONARY_OVERLAY_STYLE = {
+      /** Border width in px, at the surface's own scale. */
+      borderWidth: 2,
+      /** Dashed, not solid — the census is not a live detection. */
+      dashed: true,
+      /** Dash on/off lengths in px, for a renderer that needs them explicitly
+      *  (React Native cannot express `border-dashed` without them). */
+      dashPattern: [6, 4],
+      /**
+      * FULL opacity, deliberately.
+      *
+      * This was 0.7, to make a parked car quieter than a live subject. It made it
+      * quieter by lying about its colour: a class hue at 70% over a dark frame
+      * reads as a different hue, and the operator saw the census boxes as the
+      * wrong colour — which they effectively were.
+      *
+      * The dash already says "censused", and it says it without touching the
+      * hue. Two signals for one fact was one too many, and the one that had to go
+      * is the one that corrupts a value the rest of the system agrees on: the
+      * class colour comes from `EVENT_TAXONOMY` and must reach the screen intact
+      * on every surface, or the palette is shared in name only.
+      */
+      opacity: 1,
+      /** Corner radius in px. */
+      borderRadius: 2
+    };
+    function formatParkedFor(ms) {
+      if (!Number.isFinite(ms) || ms <= 0) return "0 s";
+      if (ms < 6e4) return `${String(Math.round(ms / 1e3))} s`;
+      if (ms < 36e5) return `${String(Math.round(ms / 6e4))} min`;
+      return `${String(Math.round(ms / 36e5))} h`;
+    }
     var FORMAT_KEYS = [
       "onnx",
       "coreml",
@@ -222370,6 +222749,21 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       mode: "singleton",
       deviceTypes: Object.values(require_sleep.DeviceType),
       runtimeState: StreamSignalsStatusSchema,
+      /**
+      * Runtime-state durability: **session** — mirrored in RAM, never written.
+      *
+      * The slice holds what the DEVICE says it can emit. That is a probed fact,
+      * not an operator choice: the provider re-declares it on every registration,
+      * so losing it loses nothing and persisting it would freeze an answer the
+      * camera is entitled to change. Measured the same day on the sibling case —
+      * `native-object-detection.supportedClasses` was persisted, and a firmware
+      * class the camera really detected stayed missing for the life of the row
+      * because the fix could not reach it.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session",
       methods: {
         /**
         * What this device can emit. Empty is a valid and common answer — most
@@ -223634,41 +224028,6 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         })) }), { auth: "admin" })
       }
     };
-    function defineCustomActions(spec) {
-      return spec;
-    }
-    function customAction(input, output, options) {
-      return {
-        input,
-        output,
-        kind: options?.kind ?? "query",
-        auth: options?.auth ?? "protected",
-        scope: options?.scope ?? { kind: "system" },
-        ...options?.caller ? { caller: "required" } : {}
-      };
-    }
-    function deviceCustomAction(input, output, options) {
-      return {
-        input,
-        output,
-        kind: options?.kind ?? "query",
-        auth: options?.auth ?? "protected",
-        scope: {
-          kind: "device",
-          ...options?.deviceTypes ? { deviceTypes: options.deviceTypes } : {}
-        }
-      };
-    }
-    function describeCustomActions(catalog) {
-      const out = {};
-      for (const [name, spec] of Object.entries(catalog)) out[name] = {
-        kind: spec.kind,
-        auth: spec.auth,
-        scope: spec.scope,
-        ...spec.caller === "required" ? { caller: "required" } : {}
-      };
-      return out;
-    }
     var CustomModelDescriptorSchema = zod.z.object({
       stepId: zod.z.string(),
       entry: ModelCatalogEntrySchema
@@ -230190,6 +230549,30 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       settings: NcAlarmSettingsSchema,
       coverage: zod.z.array(NcAlarmModeCoverageSchema)
     });
+    var NC_CLIP_RETENTION_MAX_SEC = 60;
+    var NcClipRetentionAskSchema = zod.z.object({
+      /**
+      * The camera this ask is about. **Absent = every camera**, which is what a
+      * rule with no `conditions.devices` means: it can fire anywhere, so it is
+      * asking everywhere.
+      */
+      deviceId: zod.z.number().int().nonnegative().optional(),
+      /** Seconds of history the rule needs held for it. Never zero — a rule that
+      *  needs nothing produces no ask at all. */
+      seconds: zod.z.number().min(0).max(60),
+      /** The profile the rule cuts from, when it named one. Absent = the cheapest
+      *  assigned, which is what the cut defaults to. */
+      profile: require_sleep.CamProfileSchema.optional(),
+      /** Who is asking — so a retention the operator did not expect names a rule. */
+      ruleId: zod.z.string(),
+      ruleName: zod.z.string(),
+      /** Why this many seconds: the rule's own window, or the occupancy ceiling. */
+      reason: zod.z.enum(["window", "occupancy"])
+    });
+    var NcClipRetentionPlanSchema = zod.z.object({
+      rulesLoaded: zod.z.boolean(),
+      asks: zod.z.array(NcClipRetentionAskSchema).readonly()
+    });
     var notificationRulesCapability = {
       name: "notification-rules",
       scope: "system",
@@ -230222,6 +230605,23 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           auth: "admin"
         }),
         /**
+        * WHAT THE RULES ACTUALLY ASK the stream broker to retain, per camera.
+        *
+        * The notification centre owns the rules, so it is the only thing that can
+        * say how much history a camera's notifications will ever reach back for.
+        * Before this the broker guessed — a flat minute on every camera — and
+        * learned the PROFILE reactively, after the first clip had already been cut
+        * from the wrong one. This is the same ask stated once, in front.
+        *
+        * A QUERY, pulled by each node's broker, not a push: brokers are per node
+        * (a camera's ring lives wherever its stream is ingested) while this cap is
+        * a singleton, so a push would have to enumerate the cluster. The pull also
+        * makes the failure mode right — a broker that cannot reach the centre
+        * keeps the plan it has, and a plan that has never arrived is UNKNOWN
+        * rather than empty (D49: a read that fails changes nothing).
+        */
+        getClipRetentionAsks: require_sleep.method(zod.z.object({}), NcClipRetentionPlanSchema, { auth: "admin" }),
+        /**
         * PERMANENT per-camera mute — the notifications half of the per-camera
         * function switch group ([D61](../../../../docs/decisions/adr-0067.md)).
         *
@@ -231381,6 +231781,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     });
     var TrackSourceSchema = zod.z.enum([
       "pipeline",
+      "onboard",
       "sensor",
       "audio"
     ]);
@@ -232435,6 +232836,33 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       framesMatched: zod.z.number().int()
     });
     var RunReplayFrameProcessorResultSchema = zod.z.object({ tracks: zod.z.array(ReplayTrackSchema).readonly() });
+    var AnalyticsLtsSeriesSchema = zod.z.enum([
+      "motion",
+      "audio-dbfs",
+      "battery",
+      "occupancy"
+    ]);
+    var LTS_SCOPE_CLASS_SEPARATOR = "|";
+    function occupancyScope(zoneId, className) {
+      const place = zoneId ?? "";
+      return className === void 0 ? place : `${place}|${className}`;
+    }
+    function parseOccupancyScope(scope) {
+      const at = scope.indexOf("|");
+      if (at < 0) return { zoneId: scope };
+      return {
+        zoneId: scope.slice(0, at),
+        className: scope.slice(at + 1)
+      };
+    }
+    var LtsBucketSchema = zod.z.object({
+      scope: zod.z.string(),
+      bucketStart: zod.z.number().int(),
+      samples: zod.z.number().int().nonnegative(),
+      sum: zod.z.number(),
+      min: zod.z.number(),
+      max: zod.z.number()
+    });
     var pipelineAnalyticsCapability = {
       name: "pipeline-analytics",
       scope: "device",
@@ -232578,6 +233006,30 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         getKeyEventsBatch: require_sleep.method(KeyEventBatchQueryInput, zod.z.array(KeyEventsForDeviceSchema).readonly()),
         /** Server-side bucketed event counts for the 24-hour timeline.
         *  Returns one entry per non-empty bucket; empty buckets are omitted. */
+        /**
+        * Read one camera's long-term series — 5-minute buckets, kept for a year.
+        *
+        * This is the history surface for every chart that used to be served from a
+        * RAM ring: the ring dies with the process, cannot answer about last night,
+        * and had a 60-minute horizon, while these rows are ~60 bytes and already
+        * written. `scope` is the series' own dimension — for `occupancy`, spell it
+        * with {@link occupancyScope} rather than by hand, and omit it to get every
+        * scope back at once (the caller then groups with
+        * {@link parseOccupancyScope}).
+        *
+        * Bounds are inclusive on the BUCKET START, so a range that ends mid-bucket
+        * still returns the bucket it lands in — the alternative is a chart whose
+        * last column silently disappears for five minutes out of every five.
+        */
+        readLongTermSeries: require_sleep.method(zod.z.object({
+          deviceId: zod.z.number(),
+          series: AnalyticsLtsSeriesSchema,
+          /** Omit for EVERY scope of this series in the range. */
+          scope: zod.z.string().optional(),
+          from: zod.z.number(),
+          to: zod.z.number(),
+          limit: zod.z.number().int().positive().optional()
+        }), zod.z.array(LtsBucketSchema).readonly()),
         getEventDensity: require_sleep.method(zod.z.object({
           deviceId: zod.z.number(),
           since: zod.z.number(),
@@ -233586,7 +234038,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "device-activity"
     ]);
     var MotionSourcesSchema = zod.z.array(MotionSourceEnum);
-    var DetectionSourcesSchema = zod.z.array(DetectionSourceSchema);
+    var DetectionSourcesSchema = zod.z.preprocess((value) => Array.isArray(value) && value.length > 1 ? value.slice(0, 1) : value, zod.z.array(DetectionSourceSchema).max(1));
     var ReportMotionInputSchema = zod.z.object({
       deviceId: zod.z.number(),
       detected: zod.z.boolean(),
@@ -234080,6 +234532,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       queueDepth: zod.z.number(),
       frameLazy: FrameLazyMetricsSchema.optional()
     });
+    var OccupancyBurstRefusalSchema = zod.z.enum([
+      "not-attached",
+      "battery-asleep",
+      "not-watching",
+      "already-bursting"
+    ]);
     var pipelineRunnerCapability = {
       name: "pipeline-runner",
       scope: "system",
@@ -234116,6 +234574,50 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         /** List the deviceIds currently attached to this runner. */
         getLocalCameras: require_sleep.method(zod.z.void(), zod.z.array(zod.z.number()).readonly()),
         /**
+        * Look at a camera NOW, out of band, because something just happened that
+        * only a fresh look can settle.
+        *
+        * The periodic recheck (`occupancyRecheckSec`, 300 s) exists to watch a
+        * still scene. It is the wrong instrument for a QUESTION that has just been
+        * asked: on device 617 a parked car's departure was observed, a departure
+        * strike was armed — and then the motion session ended, the strike decayed
+        * after its 30 s TTL, and the next periodic look arrived up to five minutes
+        * later with nothing left to confirm. Every one of those departures was
+        * settled by the entry ageing out 6 to 10 minutes of observed time later,
+        * and the notification's clip showed an empty space with nothing leaving
+        * it.
+        *
+        * Two numbers make the ask specific, and a caller that ignores them wastes
+        * the burst: a confirmation must land at least
+        * `DEPARTURE_CONFIRM_MIN_GAP_MS` (3 s) after the read that armed the
+        * strike — before that it is the same optical event and is refused — and
+        * `DEPARTURE_ABSENCE_MIN_READS` (5) consecutive unassociated frames are
+        * needed, while `occupancyRecheckFrames` defaults to FOUR. A burst of four
+        * can never confirm an absence; that is why two periodic looks were always
+        * required.
+        *
+        * The runner answers whether it actually started one. A refusal is NAMED,
+        * never a silent `false`: a camera that is asleep on battery (D173 — this
+        * must not become a self-initiated wake), detached, mid-session or already
+        * bursting are four different facts, and a caller told only "no" cannot
+        * tell a protection from a bug.
+        */
+        requestOccupancyBurst: require_sleep.method(zod.z.object({
+          deviceId: zod.z.number(),
+          /** How many frames to collect. The caller sizes this against what its
+          *  own confirmation needs; the runner clamps it to the field's range. */
+          frames: zod.z.number().int().positive().optional(),
+          /** Why, for the log. A burst nobody can attribute is a cost nobody can
+          *  defend — the periodic one at least has a timer to point at. */
+          reason: zod.z.string()
+        }), zod.z.object({
+          started: zod.z.boolean(),
+          refusedBecause: OccupancyBurstRefusalSchema.optional()
+        }), {
+          auth: "admin",
+          kind: "mutation"
+        }),
+        /**
         * Best-effort NATIVE-resolution crop of a retention-ring frame. Given the
         * `FrameHandle` that rode an inference-result event and a normalized `bbox`,
         * the runner asks the decode worker still holding that frame's NATIVE
@@ -246057,7 +246559,28 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       /** Total tracked objects in this scope (frame / zone / unzoned). */
       totalObjects: zod.z.number().int().nonnegative(),
       /** Per-class count. Keys are macro class names (e.g. `person`, `car`). */
-      byClass: zod.z.record(zod.z.string(), zod.z.number().int().nonnegative())
+      byClass: zod.z.record(zod.z.string(), zod.z.number().int().nonnegative()),
+      /**
+      * Of `totalObjects`, how many are STANDING — objects the census holds,
+      * present but not going anywhere (a parked car, a bin, a statue).
+      *
+      * The operator's question about a scene has two halves and they answer
+      * different things: "what is parked here" is stable for hours and must not
+      * flap, while "who is walking through" is the thing an alert is about. One
+      * number could only serve one of them, and `totalObjects` served the first
+      * badly — a passer-by moved it and every occupancy rule saw a change.
+      *
+      * `standing + transient === totalObjects`, always. The total keeps its old
+      * meaning exactly, so no rule written against it changes behaviour.
+      *
+      * ABSENT means UNKNOWN, never zero (D393): a snapshot from a node older than
+      * this field cannot say, and a reader that folds absence in as 0 reports "no
+      * parked objects here" about a camera whose lot is full.
+      */
+      standingObjects: zod.z.number().int().nonnegative().optional(),
+      /** Of `totalObjects`, how many are passing through. See `standingObjects` —
+      *  same absence rule. */
+      transientObjects: zod.z.number().int().nonnegative().optional()
     });
     var ZoneScopeBreakdownSchema = PerScopeBreakdownSchema.extend({
       zoneId: zod.z.string(),
@@ -253334,6 +253857,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "notificationRules.getClipRetentionAsks": {
+        capName: "notification-rules",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "notificationRules.getConditionCatalog": {
         capName: "notification-rules",
         capScope: "system",
@@ -253844,6 +254373,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "pipelineAnalytics.readLongTermSeries": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.rebuildObjectEmbeddings": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -254516,6 +255051,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "pipelineRunner.requestOccupancyBurst": {
+        capName: "pipeline-runner",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "pipelineRunner.runDetailSubtree": {
         capName: "pipeline-runner",
         capScope: "system",
@@ -257926,6 +258467,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: false
       }],
+      "pipelineAnalytics.readLongTermSeries": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "pipelineAnalytics.rebuildObjectEmbeddings": [{
         name: "deviceId",
         form: "single",
@@ -258116,6 +258662,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: false
       }],
+      "pipelineRunner.requestOccupancyBurst": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "pipelineRunner.runDetailSubtree": [{
         name: "deviceId",
         form: "single",
@@ -258799,6 +259350,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "pipelineRunner.parkTrackFrame",
       "pipelineRunner.releaseParkedTrackFrames",
       "pipelineRunner.reportMotion",
+      "pipelineRunner.requestOccupancyBurst",
       "pipelineRunner.runDetailSubtree",
       "pipelineRunner.runStatelessStep",
       "plateGallery.getPlateByTrack",
@@ -262607,6 +263159,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.AlertSourceSchema = AlertSourceSchema;
     exports.AlertStatusSchema = AlertStatusSchema;
     exports.AmbientLightSensorStatusSchema = AmbientLightSensorStatusSchema;
+    exports.AnalyticsLtsSeriesSchema = AnalyticsLtsSeriesSchema;
     exports.ApiKeyRecordSchema = ApiKeyRecordSchema;
     exports.ApiKeySummarySchema = ApiKeySummarySchema;
     exports.ArchiveEntrySchema = ArchiveEntrySchema;
@@ -262801,6 +263354,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.DEFAULT_FIRST_SIGHTING_FRESHNESS_MS = DEFAULT_FIRST_SIGHTING_FRESHNESS_MS;
     exports.DEFAULT_MIN_LANDMARK_FACE_SIZE_PX = DEFAULT_MIN_LANDMARK_FACE_SIZE_PX;
     exports.DEFAULT_NATIVE_LEASE_SETTINGS = DEFAULT_NATIVE_LEASE_SETTINGS;
+    exports.DEFAULT_OVERLAY_LAYERS = DEFAULT_OVERLAY_LAYERS;
     exports.DEFAULT_POOL_MEMORY_POLICY = DEFAULT_POOL_MEMORY_POLICY;
     exports.DEFAULT_RECORDING_PROFILES = DEFAULT_RECORDING_PROFILES;
     exports.DEFAULT_RETENTION = DEFAULT_RETENTION;
@@ -262984,6 +263538,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.LOAD_CONTRIBUTION_ROLES = LOAD_CONTRIBUTION_ROLES;
     exports.LOG_CHANNEL_TICK_MS = LOG_CHANNEL_TICK_MS;
     exports.LOG_LEVEL_RANK = LOG_LEVEL_RANK;
+    exports.LTS_SCOPE_CLASS_SEPARATOR = LTS_SCOPE_CLASS_SEPARATOR;
     exports.LabelAttributionSchema = LabelAttributionSchema;
     exports.LabelDefinitionSchema = LabelDefinitionSchema;
     exports.LabelTierSchema = LabelTierSchema;
@@ -263044,6 +263599,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.LoggingSettingsStateSchema = LoggingSettingsStateSchema;
     exports.LoginMethodContributionSchema = LoginMethodContributionSchema;
     exports.LoginStageEnum = LoginStageEnum;
+    exports.LtsBucketSchema = LtsBucketSchema;
     exports.MACRO_LABELS = MACRO_LABELS;
     exports.MAX_ARCHIVED_DEBUG_NOTES = MAX_ARCHIVED_DEBUG_NOTES;
     exports.MAX_BIRTH_DECISION_RECORDS = MAX_BIRTH_DECISION_RECORDS;
@@ -263157,6 +263713,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.NC_AUDIO_SEED = NC_AUDIO_SEED;
     exports.NC_AUTHORABLE_SYSTEM_EVENT_KINDS = NC_AUTHORABLE_SYSTEM_EVENT_KINDS;
     exports.NC_BASE_CONDITION_KEYS = NC_BASE_CONDITION_KEYS;
+    exports.NC_CLIP_RETENTION_MAX_SEC = NC_CLIP_RETENTION_MAX_SEC;
     exports.NC_CONDITION_CATALOG = NC_CONDITION_CATALOG;
     exports.NC_CONFIRM_DEFAULT_MAX_IMAGE_PX = NC_CONFIRM_DEFAULT_MAX_IMAGE_PX;
     exports.NC_CONFIRM_DEFAULT_TIMEOUT_MS = NC_CONFIRM_DEFAULT_TIMEOUT_MS;
@@ -263205,6 +263762,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.NcAlarmSkipReasonSchema = NcAlarmSkipReasonSchema;
     exports.NcAlarmSkippedDeviceSchema = NcAlarmSkippedDeviceSchema;
     exports.NcAudioConditionSchema = NcAudioConditionSchema;
+    exports.NcClipRetentionAskSchema = NcClipRetentionAskSchema;
+    exports.NcClipRetentionPlanSchema = NcClipRetentionPlanSchema;
     exports.NcConditionDescriptorSchema = NcConditionDescriptorSchema;
     exports.NcConditionsSchema = NcConditionsSchema;
     exports.NcConfirmExpectSchema = NcConfirmExpectSchema;
@@ -263258,8 +263817,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.OPS_LOG_DEFAULT_LIMIT = OPS_LOG_DEFAULT_LIMIT;
     exports.OPS_LOG_RING_DEFAULT_MAX = OPS_LOG_RING_DEFAULT_MAX;
     exports.OVERFLOW_REASON = OVERFLOW_REASON;
+    exports.OVERLAY_LAYERS = OVERLAY_LAYERS;
     exports.OauthIntegrationDescriptorSchema = OauthIntegrationDescriptorSchema;
     exports.ObjectEventSchema = ObjectEventSchema;
+    exports.OccupancyBurstRefusalSchema = OccupancyBurstRefusalSchema;
     exports.OpsLogDomainSchema = OpsLogDomainSchema;
     exports.OpsLogEntrySchema = OpsLogEntrySchema;
     exports.OpsLogOpSchema = OpsLogOpSchema;
@@ -263443,6 +264004,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.SOURCE_CAP_CHANGED_AT_FIELD = SOURCE_CAP_CHANGED_AT_FIELD;
     exports.SOURCE_DEVICE_TYPES = SOURCE_DEVICE_TYPES;
     exports.SOURCE_INFO_METADATA_KEY = SOURCE_INFO_METADATA_KEY;
+    exports.STATIONARY_OVERLAY_STYLE = STATIONARY_OVERLAY_STYLE;
     exports.STORAGE_ACCESS_FALLBACK = STORAGE_ACCESS_FALLBACK;
     exports.STORAGE_BYTES_PER_GB = STORAGE_BYTES_PER_GB;
     exports.STORAGE_LOCATION_MODES = STORAGE_LOCATION_MODES;
@@ -263775,7 +264337,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.createRuntimeStateBridge = createRuntimeStateBridge;
     exports.createSliceHandle = require_sleep.createSliceHandle;
     exports.createSystemProxy = createSystemProxy;
-    exports.customAction = customAction;
+    exports.customAction = require_sleep.customAction;
     exports.customModelRegistryCapability = customModelRegistryCapability;
     exports.dataStoreProviderCapability = dataStoreProviderCapability;
     exports.dayNightCapability = dayNightCapability;
@@ -263785,18 +264347,18 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.decoderCapability = decoderCapability;
     exports.defaultDeliveryForSection = defaultDeliveryForSection;
     exports.defaultDeviceFor = defaultDeviceFor;
-    exports.defineCustomActions = defineCustomActions;
+    exports.defineCustomActions = require_sleep.defineCustomActions;
     exports.deriveBatteryPresence = deriveBatteryPresence;
     exports.deriveCameraSwitches = deriveCameraSwitches;
     exports.deriveDetailCropRect = deriveDetailCropRect;
     exports.deriveRecordingMode = deriveRecordingMode;
-    exports.describeCustomActions = describeCustomActions;
+    exports.describeCustomActions = require_sleep.describeCustomActions;
     exports.describeModelVariant = describeModelVariant;
     exports.detectAccessRole = detectAccessRole;
     exports.detectionPipelineCapability = detectionPipelineCapability;
     exports.deviceAdoptionCapability = deviceAdoptionCapability;
     exports.deviceBackendToFormat = deviceBackendToFormat;
-    exports.deviceCustomAction = deviceCustomAction;
+    exports.deviceCustomAction = require_sleep.deviceCustomAction;
     exports.deviceDiscoveryCapability = deviceDiscoveryCapability;
     exports.deviceExportCapability = deviceExportCapability;
     exports.deviceManagerCapability = deviceManagerCapability;
@@ -263846,6 +264408,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.formatForBackend = formatForBackend;
     exports.formatForRuntime = formatForRuntime;
     exports.formatMediaOwnerKey = formatMediaOwnerKey;
+    exports.formatParkedFor = formatParkedFor;
     exports.gasCapability = gasCapability;
     exports.gbToBytes = gbToBytes;
     exports.generateAutomationBlock = generateAutomationBlock;
@@ -263962,6 +264525,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.numericSensorCapability = numericSensorCapability;
     exports.oauthIntegrationCapability = oauthIntegrationCapability;
     exports.objectInputDeclaresAddonId = objectInputDeclaresAddonId;
+    exports.occupancyScope = occupancyScope;
     exports.osdCapability = osdCapability;
     exports.osdManagerCapability = osdManagerCapability;
     exports.overlayClusterStepSettings = overlayClusterStepSettings;
@@ -263971,6 +264535,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.parseJsonObject = require_sleep.parseJsonObject;
     exports.parseJsonUnknown = require_sleep.parseJsonUnknown;
     exports.parseMediaOwnerKey = parseMediaOwnerKey;
+    exports.parseOccupancyScope = parseOccupancyScope;
     exports.parseProcStatus = parseProcStatus;
     exports.parseProfileBrokerId = require_sleep.parseProfileBrokerId;
     exports.parseRuleSection = parseRuleSection;