camstack 1.2.22 → 1.2.23

package/dist/{chunk-2OGTDEYC.js → chunk-GGJX3DXD.js}

@@ -40771,25 +40771,32 @@ var DETAIL_CROP_PADDING_FIELD = {
 var NativeLeaseAdmissionSchema = external_exports.enum(["all", "inferred"]);
 var NativeLeaseSettingsSchema = external_exports.object({
   /**
-  * How long a retained native frame is served before it counts as a miss.
+  * How many delivered frames the worker HOLDS at once, waiting for each one's
+  * detection result.
   *
-  * Must cover the FULL late-crop horizon: detection inference + the
-  * cross-process inference-result hop to hub post-analysis + tracking + the
-  * tRPC crop round-trip back. Below ~500 ms the busiest cameras' subject crops
-  * outrun it and fall back to the ≤640 detection frame; above ~3 s the resident
-  * RAM per busy camera grows linearly with no measured hit-rate gain.
+  * This replaced a TTL on 2026-08-13, and the replacement is the whole point:
+  * a time window was never related to the event the pixels were waiting for.
+  * A held frame now lives from delivery until the runner has its `FrameResult`
+  * — at which moment the runner cuts the subject tiles it actually wanted and
+  * releases the frame. The bound exists only so a runner that stops answering
+  * cannot pin RAM: above it the OLDEST held frame is dropped and counted.
+  *
+  * Sizing: the steady state is `inferenceLatency × deliveredFps`, measured at
+  * 40-160 ms × ≤25 fps = 1-4 frames. The default leaves headroom for a hiccup
+  * without ever approaching the old resident set (43 frames × 24.9 MB at 4K).
+  * Raising it does not buy hit rate — it buys tolerance for a slow runner, and
+  * `holdOverflow` on the metrics line is what says you need it.
   */
-  ttlMs: external_exports.number().int().min(250).max(1e4),
+  holdFrames: external_exports.number().int().min(1).max(64),
   /**
   * Hard per-decode-worker RAM ceiling for retained native frames, in MB.
   *
-  * Intended as a SAFETY ceiling with the TTL as the effective cap — but check
-  * which one is actually binding before reasoning from that. At the shipped
-  * 1024 MB and a 2 800 ms TTL, a 4K camera hits the CEILING first (~43 frames
-  * at ~24 MB each) and the TTL never gets to expire anything; `leaseMb` /
-  * `leaseFrames` on the metrics line say which. When the ceiling binds, a
-  * change that admits fewer frames buys retention WINDOW at constant RAM
-  * rather than giving RAM back — lower this knob if RAM is what you wanted.
+  * Since 2026-08-13 this is a SAFETY ceiling and nothing else: `holdFrames`
+  * is what decides how much is held, and the ceiling is the number above which
+  * something is wrong. Before that it was the effective cap — at 1024 MB with
+  * a 2 800 ms TTL a 4K camera sat pinned at `leaseMb:1020, leaseFrames:43`
+  * with the TTL expiring nothing, which is exactly the confusion the hold
+  * removes. `leaseMb` / `leaseFrames` still say what is resident.
   * `0` DISABLES the lease entirely and falls the worker back to the tiny
   * leak-prone GPU surface ring (~85% crop miss; that is what the lease exists
   * to replace).
@@ -40815,19 +40822,37 @@ var NativeLeaseSettingsSchema = external_exports.object({
   * there is the signal that some caller names frames outside the inference set
   * and that this must go back to `all`.
   */
-  admission: NativeLeaseAdmissionSchema
+  admission: NativeLeaseAdmissionSchema,
+  /**
+  * RAM ceiling per decode worker, in MB, for the SUBJECT TILES — the
+  * compressed native crops the worker cuts at the moment a frame's detection
+  * result arrives, and keeps long after the frame itself is freed.
+  *
+  * This is the knob that replaced the old retention window, and it buys about
+  * three orders of magnitude more of it: a tile is one subject at native
+  * resolution, JPEG-encoded (~60-120 KB on a 4K person), against ~24.9 MB for
+  * the frame it was cut from. A frame on which nothing was detected costs
+  * nothing at all, which is the real change — the old lease paid per FRAME and
+  * was interrogated per SUBJECT.
+  *
+  * `0` DISABLES tiles, leaving only the hold window and the ≤640 RAM
+  * fallback — i.e. the pre-2026-08-13 miss profile. Set it there only to
+  * reproduce that.
+  */
+  tileBudgetMb: external_exports.number().int().min(0).max(1024)
 });
 var DEFAULT_NATIVE_LEASE_SETTINGS = {
-  ttlMs: 1200,
+  holdFrames: 8,
   budgetMb: 1024,
   activityMs: 15e3,
+  tileBudgetMb: 64,
   admission: "inferred"
 };
-var NATIVE_LEASE_TTL_FIELD = {
-  min: 250,
-  max: 1e4,
-  step: 50,
-  default: DEFAULT_NATIVE_LEASE_SETTINGS.ttlMs
+var NATIVE_LEASE_HOLD_FIELD = {
+  min: 1,
+  max: 64,
+  step: 1,
+  default: DEFAULT_NATIVE_LEASE_SETTINGS.holdFrames
 };
 var NATIVE_LEASE_BUDGET_FIELD = {
   min: 0,
@@ -40841,6 +40866,12 @@ var NATIVE_LEASE_ACTIVITY_FIELD = {
   step: 1e3,
   default: DEFAULT_NATIVE_LEASE_SETTINGS.activityMs
 };
+var NATIVE_LEASE_TILE_BUDGET_FIELD = {
+  min: 0,
+  max: 1024,
+  step: 16,
+  default: DEFAULT_NATIVE_LEASE_SETTINGS.tileBudgetMb
+};
 var NATIVE_LEASE_ADMISSION_FIELD = {
   options: [{
     value: "all",

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-2OGTDEYC.js";
+} from "./chunk-GGJX3DXD.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-AG7EDMPV.js");
+  await import("./launcher-SELE3BGC.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-AG7EDMPV.js");
+  await import("./launcher-SELE3BGC.js");
 }
 
 // src/commands/setup.ts
@@ -1130,7 +1130,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-JSQS63TR.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-QCITTX74.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);

package/dist/{discover-JSQS63TR.js → discover-QCITTX74.js}

@@ -5,7 +5,7 @@ import {
   filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-2OGTDEYC.js";
+} from "./chunk-GGJX3DXD.js";
 import "./chunk-LMMQX4CK.js";
 export {
   DEFAULT_HUB_HTTPS_PORT,

package/dist/{launcher-AG7EDMPV.js → launcher-SELE3BGC.js}

@@ -6378,62 +6378,30 @@ var require_first_boot_addon_plan = __commonJS({
   "../../server/backend/dist/first-boot-addon-plan.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
-    exports.resolveWantedVersion = resolveWantedVersion;
-    exports.compareVersions = compareVersions;
-    exports.bootstrapPinsFrom = bootstrapPinsFrom;
     exports.planFirstBootAddons = planFirstBootAddons;
     exports.formatFirstBootPlan = formatFirstBootPlan;
-    var EXACT_VERSION = /^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z-.]+)?$/;
-    function resolveWantedVersion(raw) {
-      if (raw !== void 0 && EXACT_VERSION.test(raw))
-        return { spec: raw, pinned: true };
-      return { spec: "latest", pinned: false };
-    }
-    function compareVersions(a, b) {
-      if (!EXACT_VERSION.test(a) || !EXACT_VERSION.test(b))
-        return null;
-      const parse4 = (v) => v.split(/[-+]/)[0].split(".").map((n) => Number.parseInt(n, 10));
-      const left = parse4(a);
-      const right = parse4(b);
-      for (let i = 0; i < 3; i++) {
-        const l = left[i] ?? 0;
-        const r = right[i] ?? 0;
-        if (l !== r)
-          return l > r ? 1 : -1;
-      }
-      return 0;
-    }
-    function bootstrapPinsFrom(manifest) {
-      const out = {};
-      for (const [name, spec] of Object.entries(manifest.dependencies ?? {})) {
-        if (name.startsWith("@camstack/"))
-          out[name] = spec;
-      }
-      return out;
-    }
     function planFirstBootAddons(input) {
       const provided = new Set(input.closureProvided);
-      const decisions = input.required.map((pkg) => decide(pkg, input.closurePins[pkg], input.installed, provided));
+      const decisions = input.required.map((pkg) => decide(pkg, input.installed, input.closureVersions, provided));
       const wouldInstall = decisions.filter((d) => d.action === "install-npm").map((d) => d.pkg);
       return {
         decisions,
         wouldInstall,
-        unpinned: decisions.filter((d) => d.action === "install-npm" && !d.want.pinned).map((d) => d.pkg),
-        divergent: decisions.filter((d) => d.divergent).map((d) => d.pkg),
+        twoVersions: decisions.filter((d) => d.twoVersions).map((d) => d.pkg),
         needsRegistry: wouldInstall.length > 0
       };
     }
-    function decide(pkg, pin, installed, closureProvided) {
-      const want = resolveWantedVersion(pin);
+    function decide(pkg, installed, closureVersions, closureProvided) {
       const hasEntry = Object.hasOwn(installed, pkg);
       const version = installed[pkg] ?? null;
+      const closureVersion = closureVersions[pkg] ?? null;
       if (closureProvided.has(pkg)) {
         return {
           pkg,
           action: "skip-closure-provided",
-          want,
           installedVersion: version,
-          divergent: false,
+          closureVersion,
+          twoVersions: false,
           reason: "provided by the server closure \u2014 a copy here would shadow it (D15)"
         };
       }
@@ -6441,59 +6409,33 @@ var require_first_boot_addon_plan = __commonJS({
         return {
           pkg,
           action: "install-npm",
-          want,
           installedVersion: null,
-          divergent: false,
-          reason: hasEntry ? `installed copy has an unreadable package.json \u2014 fetching ${want.spec}` : want.pinned ? `absent \u2014 fetch ${want.spec}, the version the running closure pins` : "absent, and the closure carries no pin \u2014 fetching latest"
+          closureVersion,
+          twoVersions: false,
+          reason: hasEntry ? "installed copy has an unreadable package.json \u2014 fetching latest" : "absent \u2014 fetching latest, which is the whole version contract (addons-agnostic)"
         };
       }
+      const twoVersions = closureVersion !== null && closureVersion !== version;
       return {
         pkg,
         action: "adopt-installed",
-        want,
         installedVersion: version,
-        ...adoptionVerdict(version, want)
-      };
-    }
-    function adoptionVerdict(version, want) {
-      if (!want.pinned) {
-        return { divergent: false, reason: `installed ${version}; the closure carries no pin to check` };
-      }
-      const order = compareVersions(version, want.spec);
-      if (order === null) {
-        return { divergent: true, reason: `installed ${version} is not comparable to pin ${want.spec}` };
-      }
-      if (order === 0)
-        return { divergent: false, reason: `installed ${version} matches the pin` };
-      const sameMajor = version.split(".")[0] === want.spec.split(".")[0];
-      if (!sameMajor) {
-        return {
-          divergent: true,
-          reason: `installed ${version} is a different major from the pinned ${want.spec} \u2014 a framework contract, not a version gap`
-        };
-      }
-      if (order > 0) {
-        return {
-          divergent: false,
-          reason: `installed ${version} is ahead of the pinned ${want.spec} \u2014 a deploy outranks the image (D90)`
-        };
-      }
-      return {
-        divergent: true,
-        reason: `installed ${version} is BEHIND the pinned ${want.spec} \u2014 kept, because replacing it is an un-deploy`
+        closureVersion,
+        twoVersions,
+        reason: twoVersions ? `installed ${version}; this closure carries ${closureVersion} \u2014 the installed copy is what runs (D90)` : `installed ${version} \u2014 kept`
       };
     }
     function formatFirstBootPlan(plan, mode) {
-      const header = `first-boot addon plan (${mode}) \u2014 ${plan.decisions.length} package(s), ${plan.wouldInstall.length} to install, ${plan.divergent.length} divergent`;
+      const header = `first-boot addon plan (${mode}) \u2014 ${plan.decisions.length} package(s), ${plan.wouldInstall.length} to install`;
       const lines = [
         mode === "observe" ? `${header}; nothing was installed from this plan` : header
       ];
       for (const d of plan.decisions) {
-        const target = d.action === "install-npm" ? `@${d.want.spec}` : "";
+        const target = d.action === "install-npm" ? "@latest" : "";
         lines.push(`  ${d.pkg}${target} \u2014 ${d.action}: ${d.reason}`);
       }
-      if (plan.unpinned.length > 0) {
-        lines.push(`  unpinned (would resolve the registry's latest): ${plan.unpinned.join(", ")} \u2014 the running closure declares no exact version for these, so what a node ends up with depends on when it booted`);
+      if (plan.twoVersions.length > 0) {
+        lines.push(`  two versions on this node (installed vs this closure's own copy): ${plan.twoVersions.join(", ")} \u2014 INFO: the installed copy is the one that runs`);
       }
       if (!plan.needsRegistry) {
         lines.push("  no registry access needed \u2014 every required addon is already on disk");
@@ -23689,9 +23631,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-DiScsb8j.js
-var require_dist_DiScsb8j = __commonJS({
-  "../system/dist/dist-DiScsb8j.js"(exports) {
+// ../system/dist/dist-BV5Bug9t.js
+var require_dist_BV5Bug9t = __commonJS({
+  "../system/dist/dist-BV5Bug9t.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -51812,25 +51754,32 @@ var require_dist_DiScsb8j = __commonJS({
     var NativeLeaseAdmissionSchema = zod.z.enum(["all", "inferred"]);
     zod.z.object({
       /**
-      * How long a retained native frame is served before it counts as a miss.
+      * How many delivered frames the worker HOLDS at once, waiting for each one's
+      * detection result.
+      *
+      * This replaced a TTL on 2026-08-13, and the replacement is the whole point:
+      * a time window was never related to the event the pixels were waiting for.
+      * A held frame now lives from delivery until the runner has its `FrameResult`
+      * — at which moment the runner cuts the subject tiles it actually wanted and
+      * releases the frame. The bound exists only so a runner that stops answering
+      * cannot pin RAM: above it the OLDEST held frame is dropped and counted.
       *
-      * Must cover the FULL late-crop horizon: detection inference + the
-      * cross-process inference-result hop to hub post-analysis + tracking + the
-      * tRPC crop round-trip back. Below ~500 ms the busiest cameras' subject crops
-      * outrun it and fall back to the ≤640 detection frame; above ~3 s the resident
-      * RAM per busy camera grows linearly with no measured hit-rate gain.
+      * Sizing: the steady state is `inferenceLatency × deliveredFps`, measured at
+      * 40-160 ms × ≤25 fps = 1-4 frames. The default leaves headroom for a hiccup
+      * without ever approaching the old resident set (43 frames × 24.9 MB at 4K).
+      * Raising it does not buy hit rate — it buys tolerance for a slow runner, and
+      * `holdOverflow` on the metrics line is what says you need it.
       */
-      ttlMs: zod.z.number().int().min(250).max(1e4),
+      holdFrames: zod.z.number().int().min(1).max(64),
       /**
       * Hard per-decode-worker RAM ceiling for retained native frames, in MB.
       *
-      * Intended as a SAFETY ceiling with the TTL as the effective cap — but check
-      * which one is actually binding before reasoning from that. At the shipped
-      * 1024 MB and a 2 800 ms TTL, a 4K camera hits the CEILING first (~43 frames
-      * at ~24 MB each) and the TTL never gets to expire anything; `leaseMb` /
-      * `leaseFrames` on the metrics line say which. When the ceiling binds, a
-      * change that admits fewer frames buys retention WINDOW at constant RAM
-      * rather than giving RAM back — lower this knob if RAM is what you wanted.
+      * Since 2026-08-13 this is a SAFETY ceiling and nothing else: `holdFrames`
+      * is what decides how much is held, and the ceiling is the number above which
+      * something is wrong. Before that it was the effective cap — at 1024 MB with
+      * a 2 800 ms TTL a 4K camera sat pinned at `leaseMb:1020, leaseFrames:43`
+      * with the TTL expiring nothing, which is exactly the confusion the hold
+      * removes. `leaseMb` / `leaseFrames` still say what is resident.
       * `0` DISABLES the lease entirely and falls the worker back to the tiny
       * leak-prone GPU surface ring (~85% crop miss; that is what the lease exists
       * to replace).
@@ -51856,17 +51805,36 @@ var require_dist_DiScsb8j = __commonJS({
       * there is the signal that some caller names frames outside the inference set
       * and that this must go back to `all`.
       */
-      admission: NativeLeaseAdmissionSchema
+      admission: NativeLeaseAdmissionSchema,
+      /**
+      * RAM ceiling per decode worker, in MB, for the SUBJECT TILES — the
+      * compressed native crops the worker cuts at the moment a frame's detection
+      * result arrives, and keeps long after the frame itself is freed.
+      *
+      * This is the knob that replaced the old retention window, and it buys about
+      * three orders of magnitude more of it: a tile is one subject at native
+      * resolution, JPEG-encoded (~60-120 KB on a 4K person), against ~24.9 MB for
+      * the frame it was cut from. A frame on which nothing was detected costs
+      * nothing at all, which is the real change — the old lease paid per FRAME and
+      * was interrogated per SUBJECT.
+      *
+      * `0` DISABLES tiles, leaving only the hold window and the ≤640 RAM
+      * fallback — i.e. the pre-2026-08-13 miss profile. Set it there only to
+      * reproduce that.
+      */
+      tileBudgetMb: zod.z.number().int().min(0).max(1024)
     });
     var DEFAULT_NATIVE_LEASE_SETTINGS = {
-      ttlMs: 1200,
+      holdFrames: 8,
       budgetMb: 1024,
       activityMs: 15e3,
+      tileBudgetMb: 64,
       admission: "inferred"
     };
-    DEFAULT_NATIVE_LEASE_SETTINGS.ttlMs;
+    DEFAULT_NATIVE_LEASE_SETTINGS.holdFrames;
     DEFAULT_NATIVE_LEASE_SETTINGS.budgetMb;
     DEFAULT_NATIVE_LEASE_SETTINGS.activityMs;
+    DEFAULT_NATIVE_LEASE_SETTINGS.tileBudgetMb;
     DEFAULT_NATIVE_LEASE_SETTINGS.admission;
     var ADDON_ID_PREFIX = "addon:";
     function bareAddonId(id) {
@@ -52563,7 +52531,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DiScsb8j();
+    var require_dist10 = require_dist_BV5Bug9t();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -53376,7 +53344,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DiScsb8j();
+    var require_dist10 = require_dist_BV5Bug9t();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -53470,7 +53438,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DiScsb8j();
+    var require_dist10 = require_dist_BV5Bug9t();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -56168,7 +56136,7 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DiScsb8j();
+    var require_dist10 = require_dist_BV5Bug9t();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -60050,7 +60018,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DiScsb8j();
+    var require_dist10 = require_dist_BV5Bug9t();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -60187,7 +60155,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DiScsb8j();
+    var require_dist10 = require_dist_BV5Bug9t();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -60377,7 +60345,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DiScsb8j();
+    var require_dist10 = require_dist_BV5Bug9t();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -68061,7 +68029,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DiScsb8j();
+    var require_dist10 = require_dist_BV5Bug9t();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -68626,7 +68594,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DiScsb8j();
+    var require_dist10 = require_dist_BV5Bug9t();
     var node_child_process = __require("child_process");
     var node_util = __require("util");
     var node_os = __require("os");
@@ -69568,7 +69536,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DiScsb8j();
+    var require_dist10 = require_dist_BV5Bug9t();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -70684,7 +70652,7 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DiScsb8j();
+    var require_dist10 = require_dist_BV5Bug9t();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -72199,7 +72167,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DiScsb8j();
+    var require_dist10 = require_dist_BV5Bug9t();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -74040,7 +74008,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DiScsb8j();
+    var require_dist10 = require_dist_BV5Bug9t();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -92101,7 +92069,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DiScsb8j();
+    var require_dist10 = require_dist_BV5Bug9t();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -114114,7 +114082,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DiScsb8j();
+    var require_dist10 = require_dist_BV5Bug9t();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -117666,23 +117634,15 @@ var require_dist3 = __commonJS({
       * installs from the admin UI go through `install()` instead, which
       * defaults to npm in production.
       *
-      * @param packages — optional custom package list (default: REQUIRED_PACKAGES)
-      * @param pins — optional `name → exact version` map. A named package is
-      *   fetched at THAT version instead of the registry's `latest`.
-      *
-      *   Preparation for [D45](../../../../docs/decisions/adr-0045.md) task 32: the
-      *   image seed answers first today, so `latest` has never been the version a
-      *   node actually got. Once the image stops baking an addon tree under `/opt`
-      *   this call IS the answer, and it has to be the version the running closure was
-      *   published with — otherwise a node fetches latest-of-everything and its
-      *   addon set depends on the minute it first booted. Passing nothing keeps
-      *   exactly today's behaviour, and `launcher.ts` passes nothing yet.
+      * There is no version argument and there is deliberately no pin: the system is
+      * addons-agnostic and `latest` is the whole contract at first boot (operator,
+      * 2026-08-13). A copy already under the addon root is never replaced either —
+      * bootstrap is seed-only, and overwriting a deployed bundle would be an
+      * un-deploy ([D90](../../../../docs/decisions/adr-0090.md)).
       *
-      *   A pin never triggers a re-install: bootstrap stays seed-only, so a copy
-      *   already under the addon root is left alone whatever its version. Replacing
-      *   it would be an un-deploy ([D90](../../../../docs/decisions/adr-0090.md)).
+      * @param packages — optional custom package list (default: REQUIRED_PACKAGES)
       */
-      async ensureRequiredPackages(packages, pins) {
+      async ensureRequiredPackages(packages) {
         const pkgList = packages ?? AddonInstaller2.REQUIRED_PACKAGES;
         ensureDir(this.addonsDir);
         const isLocal = this.installSource !== "npm" && this.workspaceDir != null;
@@ -117710,7 +117670,7 @@ var require_dist3 = __commonJS({
               }
               this.logger.info(`${packageName} \u2014 not found locally, trying npm`);
             }
-            await this.installFromNpm(packageName, pins?.[packageName]);
+            await this.installFromNpm(packageName);
           } catch (err) {
             const msg = require_dist10.errMsg(err);
             if (packageName === "@camstack/system") throw new Error(`Required package ${packageName} failed to install: ${msg}`, { cause: err });
@@ -233137,6 +233097,271 @@ var require_agent_http = __commonJS({
   }
 });
 
+// ../../server/backend/dist/single-copy-cleanup.js
+var require_single_copy_cleanup = __commonJS({
+  "../../server/backend/dist/single-copy-cleanup.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.CLOSURE_PROVIDED_PACKAGES = void 0;
+    exports.planSingleCopyCleanup = planSingleCopyCleanup;
+    exports.executeSingleCopyCleanup = executeSingleCopyCleanup;
+    exports.formatCleanupPlan = formatCleanupPlan;
+    exports.discoverRedundantCopies = discoverRedundantCopies;
+    exports.isCleanupEnabled = isCleanupEnabled;
+    var IMAGE_PREFIX = "/opt/";
+    function planSingleCopyCleanup(input) {
+      const blockedReason = nodeWideBlock(input);
+      if (blockedReason !== null) {
+        return {
+          remove: [],
+          keep: input.candidates.map((candidate) => ({ candidate, reason: blockedReason })),
+          blocked: true,
+          blockedReason
+        };
+      }
+      const remove = [];
+      const keep = [];
+      for (const candidate of input.candidates) {
+        const refusal = perCandidateRefusal(candidate, input);
+        if (refusal === null)
+          remove.push(candidate);
+        else
+          keep.push({ candidate, reason: refusal });
+      }
+      return { remove, keep, blocked: false, blockedReason: null };
+    }
+    function nodeWideBlock(input) {
+      if (!input.bootHealthy) {
+        return "this boot is not confirmed healthy \u2014 the redundant copies are the recovery path and stay";
+      }
+      if (input.activeRoot === null) {
+        return "baked mode: there is no active closure, so the node is running FROM the fallback tree";
+      }
+      if (input.closureResolvedFrom === null) {
+        return "the process resolved no @camstack/system at all \u2014 nothing here is safe to remove";
+      }
+      if (!isInside(input.closureResolvedFrom, input.activeRoot)) {
+        return `@camstack/system resolved from ${input.closureResolvedFrom}, which is OUTSIDE the active closure \u2014 the copy being removed could be the one in memory`;
+      }
+      return null;
+    }
+    function perCandidateRefusal(candidate, input) {
+      if (input.activeRoot !== null && isInside(candidate.path, input.activeRoot)) {
+        return "inside the active closure \u2014 this is the copy that runs, not a redundant one";
+      }
+      if (candidate.path.startsWith(IMAGE_PREFIX)) {
+        return "an image tree \u2014 the operator keeps it as the first-boot and fallback source";
+      }
+      const onNodePath = input.nodePathEntries.some((entry) => entry === candidate.path || isInside(entry, candidate.path));
+      if (onNodePath) {
+        return "still on NODE_PATH \u2014 a live resolution path, whatever the boot mode says";
+      }
+      return null;
+    }
+    function isInside(child, parent) {
+      const normalise = (p2) => p2.endsWith("/") ? p2.slice(0, -1) : p2;
+      const c = normalise(child);
+      const p = normalise(parent);
+      return c === p || c.startsWith(`${p}/`);
+    }
+    async function executeSingleCopyCleanup(plan, fs, log) {
+      if (plan.blocked) {
+        log(`single-copy cleanup REFUSED \u2014 ${plan.blockedReason ?? "blocked"}`);
+        return { removed: [], failed: [], refused: true };
+      }
+      const removed = [];
+      const failed = [];
+      for (const candidate of plan.remove) {
+        if (!fs.exists(candidate.path))
+          continue;
+        const label = `${candidate.pkg ?? candidate.kind} ${candidate.version ?? "<unknown version>"}`;
+        const aside = `${candidate.path}.removing-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}`;
+        try {
+          await fs.rename(candidate.path, aside);
+        } catch (err) {
+          failed.push(candidate.path);
+          log(`single-copy cleanup \u2014 could NOT remove ${candidate.path} (${label}): ${errMsg(err)}`);
+          continue;
+        }
+        removed.push(candidate.path);
+        log(`single-copy cleanup \u2014 removed ${candidate.path} (${label})`);
+        try {
+          await fs.remove(aside);
+        } catch (err) {
+          log(`single-copy cleanup \u2014 ${aside} still on disk (held open?): ${errMsg(err)}`);
+        }
+      }
+      return { removed, failed, refused: false };
+    }
+    function errMsg(err) {
+      return err instanceof Error ? err.message : String(err);
+    }
+    function formatCleanupPlan(plan) {
+      const lines = [];
+      if (plan.blocked) {
+        lines.push(`single-copy cleanup blocked \u2014 ${plan.blockedReason ?? "unknown reason"}; ${plan.keep.length} copy(ies) kept`);
+      } else {
+        lines.push(`single-copy cleanup \u2014 ${plan.remove.length} copy(ies) to remove`);
+      }
+      for (const c of plan.remove) {
+        lines.push(`  remove ${c.path} \u2014 ${c.pkg ?? c.kind} ${c.version ?? "<unknown version>"}`);
+      }
+      for (const k of plan.keep) {
+        lines.push(`  keep   ${k.candidate.path} \u2014 ${k.candidate.pkg ?? k.candidate.kind} ${k.candidate.version ?? "<unknown version>"}: ${k.reason}`);
+      }
+      return lines;
+    }
+    exports.CLOSURE_PROVIDED_PACKAGES = [
+      "@camstack/system",
+      "@camstack/types",
+      "@camstack/sdk",
+      "@camstack/shm-ring",
+      "@camstack/ui-library"
+    ];
+    function discoverRedundantCopies(input, fs) {
+      const found = [];
+      const legacyFramework = `${trimSlash(input.dataDir)}/framework`;
+      if (fs.exists(legacyFramework)) {
+        found.push({
+          kind: "legacy-framework-tree",
+          path: legacyFramework,
+          pkg: null,
+          version: fs.readVersion(`${legacyFramework}/node_modules/@camstack/system`)
+        });
+      }
+      for (const pkg of exports.CLOSURE_PROVIDED_PACKAGES) {
+        if (!input.closureProvides(pkg))
+          continue;
+        const dir = `${trimSlash(input.addonRoot)}/${pkg}`;
+        if (!fs.exists(dir))
+          continue;
+        found.push({
+          kind: "addon-root-closure-copy",
+          path: dir,
+          pkg,
+          version: fs.readVersion(dir)
+        });
+      }
+      return found;
+    }
+    function trimSlash(p) {
+      return p.endsWith("/") ? p.slice(0, -1) : p;
+    }
+    function isCleanupEnabled(env) {
+      const raw = env["CAMSTACK_SINGLE_COPY_CLEANUP"]?.trim().toLowerCase();
+      return raw !== "off" && raw !== "0" && raw !== "false";
+    }
+  }
+});
+
+// ../../server/backend/dist/single-copy-cleanup-runner.js
+var require_single_copy_cleanup_runner = __commonJS({
+  "../../server/backend/dist/single-copy-cleanup-runner.js"(exports) {
+    "use strict";
+    var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m, k);
+      if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    }) : (function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m[k];
+    }));
+    var __setModuleDefault = exports && exports.__setModuleDefault || (Object.create ? (function(o, v) {
+      Object.defineProperty(o, "default", { enumerable: true, value: v });
+    }) : function(o, v) {
+      o["default"] = v;
+    });
+    var __importStar = exports && exports.__importStar || /* @__PURE__ */ (function() {
+      var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function(o2) {
+          var ar = [];
+          for (var k in o2) if (Object.prototype.hasOwnProperty.call(o2, k)) ar[ar.length] = k;
+          return ar;
+        };
+        return ownKeys(o);
+      };
+      return function(mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) {
+          for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        }
+        __setModuleDefault(result, mod);
+        return result;
+      };
+    })();
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.runSingleCopyCleanup = runSingleCopyCleanup;
+    var fs = __importStar(__require("fs"));
+    var path = __importStar(__require("path"));
+    var single_copy_cleanup_js_1 = require_single_copy_cleanup();
+    var EMPTY_RESULT = { removed: [], failed: [], refused: true };
+    async function runSingleCopyCleanup(opts) {
+      try {
+        if (!(0, single_copy_cleanup_js_1.isCleanupEnabled)(process.env)) {
+          opts.log("single-copy cleanup disabled by CAMSTACK_SINGLE_COPY_CLEANUP \u2014 nothing removed");
+          return EMPTY_RESULT;
+        }
+        const candidates = (0, single_copy_cleanup_js_1.discoverRedundantCopies)({
+          dataDir: opts.dataDir,
+          addonRoot: opts.addonRoot,
+          closureProvides: (pkg) => {
+            try {
+              __require.resolve(`${pkg}/package.json`);
+              return true;
+            } catch {
+              return false;
+            }
+          }
+        }, {
+          exists: (p) => fs.existsSync(p),
+          readVersion: (dir) => readVersion(dir)
+        });
+        const plan = (0, single_copy_cleanup_js_1.planSingleCopyCleanup)({
+          activeRoot: process.env["CAMSTACK_SERVER_ACTIVE_ROOT"] ?? null,
+          closureResolvedFrom: resolveSystemPath(),
+          bootHealthy: true,
+          nodePathEntries: (process.env["NODE_PATH"] ?? "").split(process.platform === "win32" ? ";" : ":").map((entry) => entry.trim()).filter((entry) => entry.length > 0),
+          candidates
+        });
+        for (const line of (0, single_copy_cleanup_js_1.formatCleanupPlan)(plan))
+          opts.log(line);
+        return await (0, single_copy_cleanup_js_1.executeSingleCopyCleanup)(plan, {
+          exists: (p) => fs.existsSync(p),
+          rename: (from, to) => fs.renameSync(from, to),
+          remove: async (p) => {
+            await fs.promises.rm(p, { recursive: true, force: true });
+          }
+        }, opts.log);
+      } catch (err) {
+        opts.log(`single-copy cleanup failed: ${err instanceof Error ? err.message : String(err)} \u2014 nothing was removed`);
+        return EMPTY_RESULT;
+      }
+    }
+    function resolveSystemPath() {
+      try {
+        return __require.resolve("@camstack/system/package.json");
+      } catch {
+        return null;
+      }
+    }
+    function readVersion(packageDir) {
+      try {
+        const raw = JSON.parse(fs.readFileSync(path.join(packageDir, "package.json"), "utf-8"));
+        const version = typeof raw === "object" && raw !== null ? raw.version : void 0;
+        return typeof version === "string" ? version : null;
+      } catch {
+        return null;
+      }
+    }
+  }
+});
+
 // ../types/dist/enums.js
 var require_enums = __commonJS({
   "../types/dist/enums.js"(exports) {
@@ -266086,32 +266311,40 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       };
     }
     var NATIVE_LEASE_SECTION_ID = "native-lease";
-    var NATIVE_LEASE_TTL_KEY = "nativeLeaseTtlMs";
+    var NATIVE_LEASE_HOLD_KEY = "nativeLeaseHoldFrames";
     var NATIVE_LEASE_BUDGET_KEY = "nativeLeaseBudgetMb";
     var NATIVE_LEASE_ACTIVITY_KEY = "nativeLeaseActivityMs";
     var NATIVE_LEASE_ADMISSION_KEY = "nativeLeaseAdmission";
+    var NATIVE_LEASE_TILE_BUDGET_KEY = "nativeTileBudgetMb";
     var NativeLeaseAdmissionSchema = zod.z.enum(["all", "inferred"]);
     var NativeLeaseSettingsSchema = zod.z.object({
       /**
-      * How long a retained native frame is served before it counts as a miss.
+      * How many delivered frames the worker HOLDS at once, waiting for each one's
+      * detection result.
+      *
+      * This replaced a TTL on 2026-08-13, and the replacement is the whole point:
+      * a time window was never related to the event the pixels were waiting for.
+      * A held frame now lives from delivery until the runner has its `FrameResult`
+      * — at which moment the runner cuts the subject tiles it actually wanted and
+      * releases the frame. The bound exists only so a runner that stops answering
+      * cannot pin RAM: above it the OLDEST held frame is dropped and counted.
       *
-      * Must cover the FULL late-crop horizon: detection inference + the
-      * cross-process inference-result hop to hub post-analysis + tracking + the
-      * tRPC crop round-trip back. Below ~500 ms the busiest cameras' subject crops
-      * outrun it and fall back to the ≤640 detection frame; above ~3 s the resident
-      * RAM per busy camera grows linearly with no measured hit-rate gain.
+      * Sizing: the steady state is `inferenceLatency × deliveredFps`, measured at
+      * 40-160 ms × ≤25 fps = 1-4 frames. The default leaves headroom for a hiccup
+      * without ever approaching the old resident set (43 frames × 24.9 MB at 4K).
+      * Raising it does not buy hit rate — it buys tolerance for a slow runner, and
+      * `holdOverflow` on the metrics line is what says you need it.
       */
-      ttlMs: zod.z.number().int().min(250).max(1e4),
+      holdFrames: zod.z.number().int().min(1).max(64),
       /**
       * Hard per-decode-worker RAM ceiling for retained native frames, in MB.
       *
-      * Intended as a SAFETY ceiling with the TTL as the effective cap — but check
-      * which one is actually binding before reasoning from that. At the shipped
-      * 1024 MB and a 2 800 ms TTL, a 4K camera hits the CEILING first (~43 frames
-      * at ~24 MB each) and the TTL never gets to expire anything; `leaseMb` /
-      * `leaseFrames` on the metrics line say which. When the ceiling binds, a
-      * change that admits fewer frames buys retention WINDOW at constant RAM
-      * rather than giving RAM back — lower this knob if RAM is what you wanted.
+      * Since 2026-08-13 this is a SAFETY ceiling and nothing else: `holdFrames`
+      * is what decides how much is held, and the ceiling is the number above which
+      * something is wrong. Before that it was the effective cap — at 1024 MB with
+      * a 2 800 ms TTL a 4K camera sat pinned at `leaseMb:1020, leaseFrames:43`
+      * with the TTL expiring nothing, which is exactly the confusion the hold
+      * removes. `leaseMb` / `leaseFrames` still say what is resident.
       * `0` DISABLES the lease entirely and falls the worker back to the tiny
       * leak-prone GPU surface ring (~85% crop miss; that is what the lease exists
       * to replace).
@@ -266137,19 +266370,37 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * there is the signal that some caller names frames outside the inference set
       * and that this must go back to `all`.
       */
-      admission: NativeLeaseAdmissionSchema
+      admission: NativeLeaseAdmissionSchema,
+      /**
+      * RAM ceiling per decode worker, in MB, for the SUBJECT TILES — the
+      * compressed native crops the worker cuts at the moment a frame's detection
+      * result arrives, and keeps long after the frame itself is freed.
+      *
+      * This is the knob that replaced the old retention window, and it buys about
+      * three orders of magnitude more of it: a tile is one subject at native
+      * resolution, JPEG-encoded (~60-120 KB on a 4K person), against ~24.9 MB for
+      * the frame it was cut from. A frame on which nothing was detected costs
+      * nothing at all, which is the real change — the old lease paid per FRAME and
+      * was interrogated per SUBJECT.
+      *
+      * `0` DISABLES tiles, leaving only the hold window and the ≤640 RAM
+      * fallback — i.e. the pre-2026-08-13 miss profile. Set it there only to
+      * reproduce that.
+      */
+      tileBudgetMb: zod.z.number().int().min(0).max(1024)
     });
     var DEFAULT_NATIVE_LEASE_SETTINGS = {
-      ttlMs: 1200,
+      holdFrames: 8,
       budgetMb: 1024,
       activityMs: 15e3,
+      tileBudgetMb: 64,
       admission: "inferred"
     };
-    var NATIVE_LEASE_TTL_FIELD = {
-      min: 250,
-      max: 1e4,
-      step: 50,
-      default: DEFAULT_NATIVE_LEASE_SETTINGS.ttlMs
+    var NATIVE_LEASE_HOLD_FIELD = {
+      min: 1,
+      max: 64,
+      step: 1,
+      default: DEFAULT_NATIVE_LEASE_SETTINGS.holdFrames
     };
     var NATIVE_LEASE_BUDGET_FIELD = {
       min: 0,
@@ -266163,6 +266414,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       step: 1e3,
       default: DEFAULT_NATIVE_LEASE_SETTINGS.activityMs
     };
+    var NATIVE_LEASE_TILE_BUDGET_FIELD = {
+      min: 0,
+      max: 1024,
+      step: 16,
+      default: DEFAULT_NATIVE_LEASE_SETTINGS.tileBudgetMb
+    };
     var NATIVE_LEASE_ADMISSION_FIELD = {
       options: [{
         value: "all",
@@ -266184,25 +266441,28 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       return parsed.data === DEFAULT_NATIVE_LEASE_SETTINGS.admission ? null : parsed.data;
     }
     function readNativeLeaseOverride(config) {
-      const ttlMs = readKnob("ttlMs", config[NATIVE_LEASE_TTL_KEY]);
+      const holdFrames = readKnob("holdFrames", config[NATIVE_LEASE_HOLD_KEY]);
       const budgetMb = readKnob("budgetMb", config[NATIVE_LEASE_BUDGET_KEY]);
       const activityMs = readKnob("activityMs", config[NATIVE_LEASE_ACTIVITY_KEY]);
       const admission = readAdmissionKnob(config[NATIVE_LEASE_ADMISSION_KEY]);
+      const tileBudgetMb = readKnob("tileBudgetMb", config[NATIVE_LEASE_TILE_BUDGET_KEY]);
       return {
-        ...ttlMs === null ? {} : { ttlMs },
+        ...holdFrames === null ? {} : { holdFrames },
         ...budgetMb === null ? {} : { budgetMb },
         ...activityMs === null ? {} : { activityMs },
-        ...admission === null ? {} : { admission }
+        ...admission === null ? {} : { admission },
+        ...tileBudgetMb === null ? {} : { tileBudgetMb }
       };
     }
     function isHydratedField(entry) {
       return typeof entry === "object" && entry !== null && "key" in entry;
     }
     var LEASE_KEYS = [
-      NATIVE_LEASE_TTL_KEY,
+      NATIVE_LEASE_HOLD_KEY,
       NATIVE_LEASE_BUDGET_KEY,
       NATIVE_LEASE_ACTIVITY_KEY,
-      NATIVE_LEASE_ADMISSION_KEY
+      NATIVE_LEASE_ADMISSION_KEY,
+      NATIVE_LEASE_TILE_BUDGET_KEY
     ];
     function pickNativeLeaseOverride(view) {
       if (view === null) return {};
@@ -267611,9 +267871,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.NATIVE_LEASE_ADMISSION_KEY = NATIVE_LEASE_ADMISSION_KEY;
     exports.NATIVE_LEASE_BUDGET_FIELD = NATIVE_LEASE_BUDGET_FIELD;
     exports.NATIVE_LEASE_BUDGET_KEY = NATIVE_LEASE_BUDGET_KEY;
+    exports.NATIVE_LEASE_HOLD_FIELD = NATIVE_LEASE_HOLD_FIELD;
+    exports.NATIVE_LEASE_HOLD_KEY = NATIVE_LEASE_HOLD_KEY;
     exports.NATIVE_LEASE_SECTION_ID = NATIVE_LEASE_SECTION_ID;
-    exports.NATIVE_LEASE_TTL_FIELD = NATIVE_LEASE_TTL_FIELD;
-    exports.NATIVE_LEASE_TTL_KEY = NATIVE_LEASE_TTL_KEY;
+    exports.NATIVE_LEASE_TILE_BUDGET_FIELD = NATIVE_LEASE_TILE_BUDGET_FIELD;
+    exports.NATIVE_LEASE_TILE_BUDGET_KEY = NATIVE_LEASE_TILE_BUDGET_KEY;
     exports.NC_ALARM_SYSTEM_EVENT_KINDS = NC_ALARM_SYSTEM_EVENT_KINDS;
     exports.NC_AUDIO_DBFS_FLOOR = NC_AUDIO_DBFS_FLOOR;
     exports.NC_AUTHORABLE_SYSTEM_EVENT_KINDS = NC_AUTHORABLE_SYSTEM_EVENT_KINDS;
@@ -362585,6 +362847,7 @@ var require_main2 = __commonJS({
     var fs = __importStar(__require("fs"));
     var path = __importStar(__require("path"));
     var agent_http_js_1 = require_agent_http();
+    var single_copy_cleanup_runner_js_1 = require_single_copy_cleanup_runner();
     var derive_hub_url_js_1 = require_derive_hub_url();
     var system_1 = require_dist3();
     var types_1 = require_dist9();
@@ -362805,6 +363068,11 @@ var require_main2 = __commonJS({
         } catch (err) {
           consoleLogger.warn(`agent root boot confirmation failed: ${err instanceof Error ? err.message : String(err)}`);
         }
+        void (0, single_copy_cleanup_runner_js_1.runSingleCopyCleanup)({
+          dataDir: config.dataDir,
+          addonRoot: config.addonsDir,
+          log: (line) => consoleLogger.info(line)
+        });
       };
       const loggerFactory = (addonId) => agentLogManager.createLogger().withTags({ addonId });
       const agentServiceSchema = (0, agent_service_js_1.createAgentService)({
@@ -397832,6 +398100,7 @@ var require_main4 = __commonJS({
     var fs = __importStar(__require("fs"));
     var path = __importStar(__require("path"));
     var node_child_process_1 = __require("child_process");
+    var single_copy_cleanup_runner_js_1 = require_single_copy_cleanup_runner();
     var logging_service_1 = require_logging_service();
     var event_bus_service_1 = require_event_bus_service();
     var config_service_1 = require_config_service();
@@ -398684,6 +398953,11 @@ var require_main4 = __commonJS({
           meta: { error: err instanceof Error ? err.message : String(err) }
         });
       }
+      void (0, single_copy_cleanup_runner_js_1.runSingleCopyCleanup)({
+        dataDir: dataPath,
+        addonRoot: process.env["CAMSTACK_ADDONS_DIR"] ?? path.join(dataPath, "addons"),
+        log: (line) => logger.info(line)
+      });
       try {
         const dmForBackfill = capabilityRegistry.getSingleton("device-manager");
         const integrationRegistry = addonRegistry.getIntegrationRegistry();
@@ -398982,11 +399256,11 @@ var require_launcher = __commonJS({
       const bootstrapRequired = readBootstrapRequiredAddons(dataDir, bootstrapSchema) ?? roleDefaultBootstrap;
       console.log(`[launcher] bootstrap (${role}): ${bootstrapRequired.length} required package(s)`);
       try {
-        const ownManifest = readOwnManifest();
+        const closureNodeModules = path.resolve(__dirname, "..", "node_modules");
         const plan = (0, first_boot_addon_plan_js_1.planFirstBootAddons)({
           required: bootstrapRequired,
-          closurePins: ownManifest === null ? {} : (0, first_boot_addon_plan_js_1.bootstrapPinsFrom)(ownManifest),
           installed: readInstalledAddonVersions(addonsDir, bootstrapRequired),
+          closureVersions: readInstalledAddonVersions(closureNodeModules, bootstrapRequired),
           // Mirrors `shouldSkipClosureProvidedSeed`: only `@camstack/system`, and
           // only while it actually resolves.
           closureProvided: (() => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.2.22",
+  "version": "1.2.23",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",