camstack 1.2.39 → 1.2.40

package/dist/{launcher-ZGFW4X34.js → launcher-WS2IUVTL.js}

@@ -23631,9 +23631,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-C2_1HCpW.js
-var require_dist_C2_1HCpW = __commonJS({
-  "../system/dist/dist-C2_1HCpW.js"(exports) {
+// ../system/dist/dist-DnhGRFEn.js
+var require_dist_DnhGRFEn = __commonJS({
+  "../system/dist/dist-DnhGRFEn.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -24111,6 +24111,13 @@ var require_dist_C2_1HCpW = __commonJS({
       _readinessGeneration = typeof crypto !== "undefined" && crypto.randomUUID ? crypto.randomUUID() : Math.random().toString(36).slice(2, 14);
       /** Capability names this addon registered at init — used to emit matching `down` events on shutdown. */
       _registeredCapNames = [];
+      /**
+      * True only after `readAddonStore` actually answered. Constructor
+      * defaults look like stored config when the store is down — a forked
+      * addon that auto-starts from those defaults (cloudflare-tunnel quick
+      * mode, 2026-08-25) is not "the operator chose this".
+      */
+      settingsStoreReady = false;
       /** Default config values. Provided via constructor. */
       defaults;
       constructor(defaults) {
@@ -24516,7 +24523,9 @@ var require_dist_C2_1HCpW = __commonJS({
         ];
         let lastErr;
         for (let attempt = 0; attempt <= delaysMs.length; attempt++) try {
-          return await settings.readAddonStore() ?? {};
+          const stored = await settings.readAddonStore() ?? {};
+          this.settingsStoreReady = true;
+          return stored;
         } catch (err) {
           lastErr = err;
           const msg = err instanceof Error ? err.message : String(err);
@@ -24524,6 +24533,7 @@ var require_dist_C2_1HCpW = __commonJS({
           if (attempt === delaysMs.length) break;
           await new Promise((r) => setTimeout(r, delaysMs[attempt]));
         }
+        this.settingsStoreReady = false;
         this._ctx?.logger?.warn?.("readAddonStore: settings-store unavailable after retries \u2014 using defaults", { meta: { error: lastErr instanceof Error ? lastErr.message : String(lastErr) } });
         return {};
       }
@@ -26318,6 +26328,12 @@ var require_dist_C2_1HCpW = __commonJS({
       */
       resolution: zod.z.number().int().positive().optional()
     });
+    var ModelProviderIdSchema = zod.z.enum([
+      "camstack",
+      "frigate",
+      "scrypted",
+      "custom"
+    ]);
     var ModelCatalogEntrySchema = zod.z.object({
       id: zod.z.string(),
       name: zod.z.string(),
@@ -26415,6 +26431,12 @@ var require_dist_C2_1HCpW = __commonJS({
       */
       group: ModelVariantGroupSchema.optional(),
       /**
+      * Catalog source for the pipeline stepper's provider-first picker. Absent on
+      * built-in CamStack entries (treated as `camstack`) and on registry rows
+      * persisted before this field existed (`inferModelProvider` fills those).
+      */
+      provider: ModelProviderIdSchema.optional(),
+      /**
       * Per-MODEL class map override. Absent ⇒ the step's `StepDefinition.classMap`
       * applies (Frigate / COCO public catalog). Set on a custom model whose raw
       * labels already ARE the CamStack macros (Scrypted identity map).
@@ -33183,14 +33205,22 @@ var require_dist_C2_1HCpW = __commonJS({
       sustainSeconds: zod.z.number().int().min(0).max(3600).default(15)
     });
     var NcAudioConditionSchema = zod.z.object({
-      /** LABEL MODE: audio macro labels. Present ⇒ fires on the first labelled frame. */
+      /** LABEL MODE: audio macro labels. Present ⇒ count-in-window confirm. */
       labels: zod.z.array(zod.z.string().min(1)).min(1).optional(),
       /** LEVEL MODE: floor in dBFS (negative-going, `0` = full scale). */
       dbThreshold: zod.z.number().min(-96).max(0).optional(),
       /** LEVEL MODE ONLY: percentage of the window's samples that must be hits (1–100). */
       hitPercent: zod.z.number().int().min(1).max(100).default(60),
       /** LEVEL MODE ONLY: length of the sampling window in seconds. */
-      samplingSeconds: zod.z.number().int().min(1).max(300).default(10)
+      samplingSeconds: zod.z.number().int().min(1).max(300).default(10),
+      /**
+      * LABEL MODE: how many labelled frames must land inside
+      * {@link NcAudioConditionSchema.shape.confirmWindowSec} before dispatch.
+      * Absent ⇒ 2 (the matcher default). `1` is first-frame fire.
+      */
+      confirmHits: zod.z.number().int().min(1).max(20).optional(),
+      /** LABEL MODE: the window those frames must share, in seconds. Absent ⇒ 5. */
+      confirmWindowSec: zod.z.number().int().min(1).max(60).optional()
     });
     var NcCrossingSchema = zod.z.enum([
       "enter",
@@ -35008,6 +35038,46 @@ var require_dist_C2_1HCpW = __commonJS({
       /** Cursor for the next page, or null when this page is the last. */
       nextCursor: zod.z.string().nullable()
     });
+    var LIST_GROUPS_DEFAULT_LIMIT = 40;
+    var LIST_GROUPS_MAX_LIMIT = 100;
+    var AnalyticsGroupRecordSchema = zod.z.object({
+      id: zod.z.string(),
+      deviceId: zod.z.number().int(),
+      openedAt: zod.z.number().int(),
+      closedAt: zod.z.number().int(),
+      timestamp: zod.z.number().int(),
+      memberCount: zod.z.number().int(),
+      memberTrackIds: zod.z.array(zod.z.string()).readonly(),
+      className: zod.z.string(),
+      classes: zod.z.array(zod.z.string()).readonly(),
+      /** Relative event-media path, or null when the group has no picture yet. */
+      mediaUrl: zod.z.string().nullable(),
+      singleton: zod.z.boolean()
+    });
+    var AnalyticsGroupMemberSchema = zod.z.object({
+      trackId: zod.z.string(),
+      deviceId: zod.z.number().int(),
+      className: zod.z.string(),
+      firstSeen: zod.z.number().int(),
+      lastSeen: zod.z.number().int(),
+      mediaUrl: zod.z.string().nullable()
+    });
+    var AnalyticsGroupDetailSchema = AnalyticsGroupRecordSchema.extend({ members: zod.z.array(AnalyticsGroupMemberSchema).readonly() });
+    var ListGroupsQueryInput = zod.z.object({
+      /** Devices to merge. An empty array yields `{ groups: [], nextCursor: null }`. */
+      deviceIds: zod.z.array(zod.z.number()),
+      /** Window lower bound on `closedAt` (inclusive). */
+      since: zod.z.number().optional(),
+      /** Window upper bound on `openedAt` (inclusive). */
+      until: zod.z.number().optional(),
+      limit: zod.z.number().int().min(1).max(LIST_GROUPS_MAX_LIMIT).default(LIST_GROUPS_DEFAULT_LIMIT),
+      /** Opaque continuation cursor from a previous page's `nextCursor`. */
+      cursor: zod.z.string().optional()
+    });
+    var ListGroupsPageSchema = zod.z.object({
+      groups: zod.z.array(AnalyticsGroupRecordSchema).readonly(),
+      nextCursor: zod.z.string().nullable()
+    });
     var KeyEventQueryInput = zod.z.object({
       deviceId: zod.z.number(),
       /** Window lower bound (track firstSeen ≥ since). */
@@ -35083,7 +35153,9 @@ var require_dist_C2_1HCpW = __commonJS({
       /** Unassigned plate reads removed (best-effort; plate leg deferred to plate-intelligence). */
       plates: zod.z.number().int(),
       /** Per-track CLIP search vectors removed (best-effort). */
-      embeddings: zod.z.number().int()
+      embeddings: zod.z.number().int(),
+      /** Group membership + group rows removed with their last member (best-effort). */
+      groups: zod.z.number().int()
     });
     var DiskReconcileCountsSchema = zod.z.object({
       mediaDropped: zod.z.number().int(),
@@ -35225,6 +35297,16 @@ var require_dist_C2_1HCpW = __commonJS({
         * are not included (same contract as `listTracks`).
         */
         listRecentTracks: method(RecentTracksQueryInput, RecentTracksPageSchema),
+        /**
+        * Batched co-moving group listing — the Groups feed. Same merge/cursor
+        * contract as {@link listRecentTracks}. A group is a sealed partition of
+        * one session; `getGroup` is the detail with members.
+        */
+        listGroups: method(ListGroupsQueryInput, ListGroupsPageSchema),
+        getGroup: method(zod.z.object({
+          deviceId: zod.z.number(),
+          groupId: zod.z.string().min(1)
+        }), AnalyticsGroupDetailSchema.nullable()),
         clearTracks: method(zod.z.object({ deviceId: zod.z.number() }), zod.z.void(), {
           kind: "mutation",
           auth: "admin"
@@ -35906,7 +35988,8 @@ var require_dist_C2_1HCpW = __commonJS({
         sizeMB: zod.z.number()
       })),
       group: ModelVariantGroupSchema.optional(),
-      legacy: zod.z.boolean().optional()
+      legacy: zod.z.boolean().optional(),
+      provider: ModelProviderIdSchema.optional()
     });
     var ConfigFieldBridge = zod.z.custom();
     var PipelineAddonSchemaSchema = zod.z.object({
@@ -44215,7 +44298,12 @@ var require_dist_C2_1HCpW = __commonJS({
       plateBbox: BoundingBoxSchema.optional(),
       /** keyFrame parity: MediaStore key of the track's native-resolution key frame. */
       keyFrameMediaKey: zod.z.string().optional(),
-      base64: zod.z.string().optional()
+      base64: zod.z.string().optional(),
+      /**
+      * Same crop as a data-plane URL. `getPlateByTrack` returns this and
+      * never inlines JPEG; `listPlates` still inlines for the admin-ui.
+      */
+      cropUrl: zod.z.string().optional()
     });
     var MediaFileLiteSchema = zod.z.object({
       key: zod.z.string(),
@@ -50934,6 +51022,12 @@ var require_dist_C2_1HCpW = __commonJS({
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.getGroup": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.getKeyEvents": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -51018,6 +51112,12 @@ var require_dist_C2_1HCpW = __commonJS({
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.listGroups": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.listOpsLog": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -54437,6 +54537,11 @@ var require_dist_C2_1HCpW = __commonJS({
         form: "single",
         optional: false
       }],
+      "pipelineAnalytics.getGroup": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "pipelineAnalytics.getKeyEvents": [{
         name: "deviceId",
         form: "single",
@@ -54492,6 +54597,11 @@ var require_dist_C2_1HCpW = __commonJS({
         form: "array",
         optional: false
       }],
+      "pipelineAnalytics.listGroups": [{
+        name: "deviceIds",
+        form: "array",
+        optional: false
+      }],
       "pipelineAnalytics.listOpsLog": [{
         name: "deviceId",
         form: "single",
@@ -56510,7 +56620,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C2_1HCpW();
+    var require_dist10 = require_dist_DnhGRFEn();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -57329,7 +57439,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C2_1HCpW();
+    var require_dist10 = require_dist_DnhGRFEn();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -57423,7 +57533,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C2_1HCpW();
+    var require_dist10 = require_dist_DnhGRFEn();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -58320,11 +58430,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-DHRXLMPn.js
-var require_retired_settings_keys_DHRXLMPn = __commonJS({
-  "../system/dist/retired-settings-keys-DHRXLMPn.js"(exports) {
+// ../system/dist/retired-settings-keys-D6Jy_SsO.js
+var require_retired_settings_keys_D6Jy_SsO = __commonJS({
+  "../system/dist/retired-settings-keys-D6Jy_SsO.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_C2_1HCpW();
+    var require_dist10 = require_dist_DnhGRFEn();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -60367,8 +60477,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C2_1HCpW();
-    var require_retired_settings_keys = require_retired_settings_keys_DHRXLMPn();
+    var require_dist10 = require_dist_DnhGRFEn();
+    var require_retired_settings_keys = require_retired_settings_keys_D6Jy_SsO();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -64695,7 +64805,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C2_1HCpW();
+    var require_dist10 = require_dist_DnhGRFEn();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -64832,7 +64942,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C2_1HCpW();
+    var require_dist10 = require_dist_DnhGRFEn();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -65022,7 +65132,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C2_1HCpW();
+    var require_dist10 = require_dist_DnhGRFEn();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -72706,7 +72816,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C2_1HCpW();
+    var require_dist10 = require_dist_DnhGRFEn();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -73271,7 +73381,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C2_1HCpW();
+    var require_dist10 = require_dist_DnhGRFEn();
     var node_child_process = __require("child_process");
     var node_util = __require("util");
     var node_os = __require("os");
@@ -74213,7 +74323,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C2_1HCpW();
+    var require_dist10 = require_dist_DnhGRFEn();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -75329,8 +75439,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C2_1HCpW();
-    var require_retired_settings_keys = require_retired_settings_keys_DHRXLMPn();
+    var require_dist10 = require_dist_DnhGRFEn();
+    var require_retired_settings_keys = require_retired_settings_keys_D6Jy_SsO();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -76674,6 +76784,17 @@ var require_sqlite_settings_addon = __commonJS({
       constructor() {
         super({});
       }
+      /**
+      * The engine behind `settings-store` cannot read that door during
+      * `initialize()`. `BaseAddon` always `await`s `resolveConfig()` first;
+      * on an isolated sqlite that round-trip is a UDS call to the parent,
+      * and the parent is waiting for THIS child's post-init handshake before
+      * it builds the door (D233). Live 1.2.152: 30 s hang, timeout, every
+      * in-process builtin skipped, then this addon finished one second later.
+      * Constructor defaults (`{}`) are the whole config this addon has.
+      */
+      async resolveConfig() {
+      }
       async onInitialize() {
         const addonId = require_dist10.bareAddonId(this.ctx.id);
         const path = await import("path");
@@ -76789,6 +76910,7 @@ var require_sqlite_settings_addon = __commonJS({
     exports.WAL_IDLE_QUIET_MS = WAL_IDLE_QUIET_MS;
     exports.WAL_MAINTENANCE_INTERVAL_MS = WAL_MAINTENANCE_INTERVAL_MS;
     exports.WalMaintenance = WalMaintenance;
+    exports.prefixRange = prefixRange;
   }
 });
 
@@ -76874,7 +76996,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C2_1HCpW();
+    var require_dist10 = require_dist_DnhGRFEn();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -78753,7 +78875,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C2_1HCpW();
+    var require_dist10 = require_dist_DnhGRFEn();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -96814,7 +96936,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C2_1HCpW();
+    var require_dist10 = require_dist_DnhGRFEn();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -98011,9 +98133,9 @@ var require_event_category_EY0GNjV9 = __commonJS({
   }
 });
 
-// ../types/dist/sleep-C2XhJhkd.js
-var require_sleep_C2XhJhkd = __commonJS({
-  "../types/dist/sleep-C2XhJhkd.js"(exports) {
+// ../types/dist/sleep-CizGYrCD.js
+var require_sleep_CizGYrCD = __commonJS({
+  "../types/dist/sleep-CizGYrCD.js"(exports) {
     "use strict";
     var require_event_category = require_event_category_EY0GNjV9();
     var zod = require_zod();
@@ -98384,6 +98506,13 @@ var require_sleep_C2XhJhkd = __commonJS({
       _readinessGeneration = typeof crypto !== "undefined" && crypto.randomUUID ? crypto.randomUUID() : Math.random().toString(36).slice(2, 14);
       /** Capability names this addon registered at init — used to emit matching `down` events on shutdown. */
       _registeredCapNames = [];
+      /**
+      * True only after `readAddonStore` actually answered. Constructor
+      * defaults look like stored config when the store is down — a forked
+      * addon that auto-starts from those defaults (cloudflare-tunnel quick
+      * mode, 2026-08-25) is not "the operator chose this".
+      */
+      settingsStoreReady = false;
       /** Default config values. Provided via constructor. */
       defaults;
       constructor(defaults) {
@@ -98789,7 +98918,9 @@ var require_sleep_C2XhJhkd = __commonJS({
         ];
         let lastErr;
         for (let attempt = 0; attempt <= delaysMs.length; attempt++) try {
-          return await settings.readAddonStore() ?? {};
+          const stored = await settings.readAddonStore() ?? {};
+          this.settingsStoreReady = true;
+          return stored;
         } catch (err) {
           lastErr = err;
           const msg = err instanceof Error ? err.message : String(err);
@@ -98797,6 +98928,7 @@ var require_sleep_C2XhJhkd = __commonJS({
           if (attempt === delaysMs.length) break;
           await new Promise((r) => setTimeout(r, delaysMs[attempt]));
         }
+        this.settingsStoreReady = false;
         this._ctx?.logger?.warn?.("readAddonStore: settings-store unavailable after retries \u2014 using defaults", { meta: { error: lastErr instanceof Error ? lastErr.message : String(lastErr) } });
         return {};
       }
@@ -100055,6 +100187,73 @@ var require_sleep_C2XhJhkd = __commonJS({
         }
       };
     }
+    function createEventBusSliceSource(deps) {
+      const { eventBus, api } = deps;
+      const cache2 = /* @__PURE__ */ new Map();
+      const listeners = /* @__PURE__ */ new Map();
+      let offBus = null;
+      const keyOf = (deviceId, capName) => `${deviceId}:${capName}`;
+      const fanOut = (deviceId, capName, slice) => {
+        const k = keyOf(deviceId, capName);
+        cache2.set(k, slice);
+        const set = listeners.get(k);
+        if (!set) return;
+        for (const cb of set) try {
+          cb(slice);
+        } catch {
+        }
+      };
+      const ensureBridge = () => {
+        if (offBus) return;
+        offBus = eventBus.subscribe({ category: DEVICE_STATE_EVENT_CATEGORY }, (event2) => {
+          const data = event2.data;
+          if (typeof data !== "object" || data === null) return;
+          const deviceId = Reflect.get(data, "deviceId");
+          const capName = Reflect.get(data, "capName");
+          if (typeof deviceId !== "number" || typeof capName !== "string") return;
+          fanOut(deviceId, capName, Reflect.get(data, "slice"));
+        });
+      };
+      const closeBridgeIfIdle = () => {
+        if (offBus === null) return;
+        if (listeners.size > 0) return;
+        offBus();
+        offBus = null;
+      };
+      return {
+        read(deviceId, capName) {
+          return cache2.get(keyOf(deviceId, capName));
+        },
+        async refresh(deviceId, capName) {
+          fanOut(deviceId, capName, await api.deviceState.getCapSlice.query({
+            deviceId,
+            capName
+          }) ?? void 0);
+        },
+        watch(deviceId, capName, cb) {
+          const k = keyOf(deviceId, capName);
+          let set = listeners.get(k);
+          if (!set) {
+            set = /* @__PURE__ */ new Set();
+            listeners.set(k, set);
+          }
+          set.add(cb);
+          ensureBridge();
+          return () => {
+            set.delete(cb);
+            if (set.size === 0) listeners.delete(k);
+            closeBridgeIfIdle();
+          };
+        },
+        async write(deviceId, capName, slice) {
+          await api.deviceState.setCapSlice.mutate({
+            deviceId,
+            capName,
+            slice
+          });
+        }
+      };
+    }
     function createMirrorSource(mirror, listeners, api) {
       const keyOf = (deviceId, capName) => `${deviceId}:${capName}`;
       return {
@@ -100474,6 +100673,8 @@ var require_sleep_C2XhJhkd = __commonJS({
           getTrack: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getTrack", "query", input),
           listTracks: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listTracks", "query", input),
           listRecentTracks: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listRecentTracks", "query", input),
+          listGroups: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listGroups", "query", input),
+          getGroup: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getGroup", "query", input),
           clearTracks: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "clearTracks", "mutation", input),
           getMotionEvents: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getMotionEvents", "query", input),
           getObjectEvents: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getObjectEvents", "query", input),
@@ -101252,6 +101453,12 @@ var require_sleep_C2XhJhkd = __commonJS({
         return createEvent;
       }
     });
+    Object.defineProperty(exports, "createEventBusSliceSource", {
+      enumerable: true,
+      get: function() {
+        return createEventBusSliceSource;
+      }
+    });
     Object.defineProperty(exports, "createLazyTrpcSource", {
       enumerable: true,
       get: function() {
@@ -101453,7 +101660,7 @@ var require_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_EY0GNjV9();
-    var require_sleep = require_sleep_C2XhJhkd();
+    var require_sleep = require_sleep_CizGYrCD();
     var require_err_msg = require_err_msg_COpsHMw2();
     var CAP_INPUT_DEFAULTS = Object.freeze({
       "addons": { "getLogs": { "limit": 100 } },
@@ -101566,6 +101773,7 @@ var require_addon = __commonJS({
         "getMotionEvents": { "limit": 1e3 },
         "getObjectEvents": { "limit": 1e3 },
         "getSensorEvents": { "limit": 1e3 },
+        "listGroups": { "limit": 40 },
         "listRecentTracks": { "limit": 200 },
         "searchObjectEvents": {
           "limit": 50,
@@ -101773,6 +101981,7 @@ var require_addon = __commonJS({
     exports.asJsonObject = require_sleep.asJsonObject;
     exports.asString = require_sleep.asString;
     exports.createDeviceProxy = require_sleep.createDeviceProxy;
+    exports.createEventBusSliceSource = require_sleep.createEventBusSliceSource;
     exports.deviceOpsCapability = require_sleep.deviceOpsCapability;
     exports.emitReadiness = require_sleep.emitReadiness;
     exports.errMsg = require_err_msg.errMsg;
@@ -108327,9 +108536,9 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/manifest-python-deps-CwBbX4Ut.js
-var require_manifest_python_deps_CwBbX4Ut = __commonJS({
-  "../system/dist/manifest-python-deps-CwBbX4Ut.js"(exports) {
+// ../system/dist/manifest-python-deps-B3_4YiDK.js
+var require_manifest_python_deps_B3_4YiDK = __commonJS({
+  "../system/dist/manifest-python-deps-B3_4YiDK.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
     var node_crypto = __require("crypto");
@@ -108345,6 +108554,7 @@ var require_manifest_python_deps_CwBbX4Ut = __commonJS({
     var node_fs = __require("fs");
     node_fs = require_chunk.__toESM(node_fs);
     var node_http = __require("http");
+    var node_perf_hooks = __require("perf_hooks");
     var node_v8 = __require("v8");
     node_v8 = require_chunk.__toESM(node_v8);
     var node_vm = __require("vm");
@@ -108362,6 +108572,41 @@ var require_manifest_python_deps_CwBbX4Ut = __commonJS({
     }
     var HEAP_RECLAIM_TRIGGER_MB = 1024;
     var HEAP_RECLAIM_MIN_INTERVAL_MS = 12e4;
+    var ZERO_LOOP_DELAY = {
+      p50Ms: 0,
+      p99Ms: 0,
+      maxMs: 0
+    };
+    function createLoopDelayMeter(resolutionMs = 20) {
+      try {
+        const histogram = (0, node_perf_hooks.monitorEventLoopDelay)({ resolution: resolutionMs });
+        histogram.enable();
+        return {
+          read: () => {
+            try {
+              if (histogram.count === 0) return ZERO_LOOP_DELAY;
+              const sample = {
+                p50Ms: Math.round(histogram.percentile(50) / 1e6),
+                p99Ms: Math.round(histogram.percentile(99) / 1e6),
+                maxMs: Math.round(histogram.max / 1e6)
+              };
+              histogram.reset();
+              return sample;
+            } catch {
+              return ZERO_LOOP_DELAY;
+            }
+          },
+          stop: () => {
+            histogram.disable();
+          }
+        };
+      } catch {
+        return;
+      }
+    }
+    function heapCeilingOrigin(execArgv = process.execArgv) {
+      return execArgv.some((arg) => /^--max[-_]old[-_]space[-_]size(=|$)/.test(arg)) ? "explicit" : "v8-default";
+    }
     var MB = (bytes) => Math.round(bytes / 1048576);
     function buildHeapSample(mem, heapLimitBytes, warnRatio = HEAP_WATCH_WARN_RATIO) {
       const usedRatio = heapLimitBytes > 0 ? mem.heapUsed / heapLimitBytes : 0;
@@ -108403,10 +108648,12 @@ var require_manifest_python_deps_CwBbX4Ut = __commonJS({
         return;
       }
     }
-    function format2(label, s) {
-      return `[mem] ${label} rss=${s.rssMb}MB heapUsed=${s.heapUsedMb}MB heapTotal=${s.heapTotalMb}MB heapLimit=${s.heapLimitMb}MB used=${Math.round(s.usedRatio * 100)}% external=${s.externalMb}MB arrayBuffers=${s.arrayBuffersMb}MB`;
+    function format2(label, s, loop) {
+      const line = `[mem] ${label} rss=${s.rssMb}MB heapUsed=${s.heapUsedMb}MB heapTotal=${s.heapTotalMb}MB heapLimit=${s.heapLimitMb}MB used=${Math.round(s.usedRatio * 100)}% external=${s.externalMb}MB arrayBuffers=${s.arrayBuffersMb}MB`;
+      if (loop === void 0) return line;
+      return `${line} loopP50=${loop.p50Ms}ms loopP99=${loop.p99Ms}ms loopMax=${loop.maxMs}ms`;
     }
-    function startHeapWatch(label = "hub-main", sink = consoleSink, intervalMs = HEAP_WATCH_INTERVAL_MS, reclaimOptions) {
+    function startHeapWatch(label = "hub-main", sink = consoleSink, intervalMs = HEAP_WATCH_INTERVAL_MS, reclaimOptions, loopDelay = createLoopDelayMeter(), execArgv = process.execArgv) {
       const readMemory = reclaimOptions?.readMemory ?? (() => process.memoryUsage());
       const now = reclaimOptions?.now ?? (() => Date.now());
       const triggerMb = reclaimOptions?.triggerMb ?? 1024;
@@ -108415,14 +108662,22 @@ var require_manifest_python_deps_CwBbX4Ut = __commonJS({
       const escalateRatio = reclaimOptions?.escalateRatio ?? 0.7;
       const deescalateRatio = reclaimOptions?.deescalateRatio ?? 0.6;
       let lastReclaimAt = Number.NEGATIVE_INFINITY;
+      let passesAtFloor = 0;
+      let steadyStateAnnounced = false;
       const read = () => {
         const limit = reclaimOptions?.heapLimitBytes ?? node_v8.getHeapStatistics().heap_size_limit;
         return buildHeapSample(readMemory(), limit);
       };
       const maybeReclaim = (sample) => {
         if (reclaimOptions === void 0) return;
-        if (!shouldReclaim(sample, triggerMb)) return;
-        if (now() - lastReclaimAt < minIntervalMs) return;
+        if (!shouldReclaim(sample, triggerMb)) {
+          passesAtFloor = 0;
+          steadyStateAnnounced = false;
+          return;
+        }
+        const sinceLast = now() - lastReclaimAt;
+        if (sinceLast < minIntervalMs) return;
+        passesAtFloor = sinceLast <= minIntervalMs * 2 ? passesAtFloor + 1 : 1;
         lastReclaimAt = now();
         const startedAt = now();
         try {
@@ -108433,6 +108688,10 @@ var require_manifest_python_deps_CwBbX4Ut = __commonJS({
         }
         const after = read();
         sink.info(`[mem] reclaim ${label} stranded=${strandedMb(sample)}MB rss=${sample.rssMb}MB\u2192${after.rssMb}MB freed=${sample.rssMb - after.rssMb}MB arrayBuffers=${sample.arrayBuffersMb}MB\u2192${after.arrayBuffersMb}MB took=${now() - startedAt}ms`);
+        if (passesAtFloor >= 6 && !steadyStateAnnounced) {
+          steadyStateAnnounced = true;
+          sink.warn(`[mem] reclaim ${label} has run at the floor for ${passesAtFloor} consecutive passes (every ${minIntervalMs}ms) \u2014 the stop-the-world is now STEADY STATE, not a rescue. The allocation source is what needs the fix; this pass only bounds its peak.`);
+        }
       };
       let mode = "steady";
       let lastLoggedAt = Number.NEGATIVE_INFINITY;
@@ -108446,7 +108705,7 @@ var require_manifest_python_deps_CwBbX4Ut = __commonJS({
           const due = at - lastLoggedAt >= intervalMs;
           if (mode === "escalated" || due) {
             lastLoggedAt = at;
-            const line = format2(label, sample);
+            const line = format2(label, sample, loopDelay?.read());
             if (sample.nearLimit) sink.warn(`${line} \u2014 APPROACHING HEAP LIMIT`);
             else if (mode === "escalated") sink.warn(`${line} \u2014 heap elevated, sampling every ${probeIntervalMs}ms`);
             else sink.info(line);
@@ -108459,11 +108718,13 @@ var require_manifest_python_deps_CwBbX4Ut = __commonJS({
       const timer = setInterval(tick, probeIntervalMs);
       timer.unref?.();
       tick();
+      if (heapCeilingOrigin(execArgv) === "v8-default") sink.info(`[mem] ${label} heap ceiling is V8's DEFAULT (${read().heapLimitMb}MB) \u2014 no --max-old-space-size on argv. Nothing here CHOSE that number; it is derived from host RAM and moves with it.`);
       let stopped = false;
       return () => {
         if (stopped) return;
         stopped = true;
         clearInterval(timer);
+        loopDelay?.stop();
       };
     }
     var RUNNER_HEAP_WATCH_INTERVAL_MS = 3e5;
@@ -109555,6 +109816,10 @@ var require_manifest_python_deps_CwBbX4Ut = __commonJS({
     }
     function createBrokerDeviceManagerApi(opts) {
       const { api, addonId, nodeId, eventBus, registry } = opts;
+      const deviceSliceSource = (0, _camstack_types_addon.createEventBusSliceSource)({
+        eventBus,
+        api
+      });
       let selfApi;
       const deviceRebuildFactories = /* @__PURE__ */ new Map();
       const buildContext = (stableId, id, parentDeviceId = null, initialRuntimeState = {}, persistedConfig = {}, deviceMeta = null) => {
@@ -109599,7 +109864,7 @@ var require_manifest_python_deps_CwBbX4Ut = __commonJS({
             metadata: null
           },
           fetchDevice: async (deviceId) => {
-            return (0, _camstack_types_addon.createDeviceProxy)(api, await api.deviceManager.getBindings.query({ deviceId }));
+            return (0, _camstack_types_addon.createDeviceProxy)(api, await api.deviceManager.getBindings.query({ deviceId }), { stateSource: deviceSliceSource });
           },
           get devices() {
             return selfApi;
@@ -114498,6 +114763,10 @@ var require_manifest_python_deps_CwBbX4Ut = __commonJS({
       const api = (0, _trpc_client.createTRPCClient)({ links });
       const scopedLogger = options?.createLogger?.(addonId) ?? (runtime.mode === "broker" ? createRemoteLogger(runtime.broker, addonId) : createUdsLogger(runtime.client, addonId, nodeId));
       const scopedEventBus = runtime.mode === "broker" ? createBrokerEventBus(runtime.broker, addonId) : createUdsEventBus(runtime.client, addonId);
+      const deviceSliceSource = (0, _camstack_types_addon.createEventBusSliceSource)({
+        eventBus: scopedEventBus,
+        api
+      });
       const workerDisposerChain = new _camstack_types_addon.DisposerChain({ onError: (err, index) => {
         scopedLogger.error(`Disposer #${index} threw during teardown`, { meta: { error: err instanceof Error ? err.message : String(err) } });
       } });
@@ -114733,10 +115002,10 @@ var require_manifest_python_deps_CwBbX4Ut = __commonJS({
         },
         fetchDevice: async (deviceId) => {
           const cached = bindingCache.get(deviceId);
-          if (cached) return (0, _camstack_types_addon.createDeviceProxy)(api, cached);
+          if (cached) return (0, _camstack_types_addon.createDeviceProxy)(api, cached, { stateSource: deviceSliceSource });
           const binding = await api.deviceManager.getBindings.query({ deviceId });
           bindingCache.set(deviceId, binding);
-          return (0, _camstack_types_addon.createDeviceProxy)(api, binding);
+          return (0, _camstack_types_addon.createDeviceProxy)(api, binding, { stateSource: deviceSliceSource });
         },
         useCapability(capName, scope = { type: "global" }) {
           return getOrCreateHandle(capName, scope, Number.POSITIVE_INFINITY);
@@ -119879,7 +120148,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C2_1HCpW();
+    var require_dist10 = require_dist_DnhGRFEn();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -119904,7 +120173,7 @@ var require_dist3 = __commonJS({
     require_system_config();
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_file_data_plane = require_file_data_plane_DO8KbxCe();
-    var require_manifest_python_deps = require_manifest_python_deps_CwBbX4Ut();
+    var require_manifest_python_deps = require_manifest_python_deps_B3_4YiDK();
     var require_resource_monitor = require_resource_monitor_CdnzxBLP();
     var require_lan_http_bind = require_lan_http_bind_DmgpFP6();
     var require_custom_action_registry = require_custom_action_registry_jY0NOZK8();
@@ -122128,7 +122397,7 @@ var require_dist3 = __commonJS({
       if (missing.length > 0) throw new Error(`${options.addonName} \u2014 required native module(s) missing a compiled .node after install (bundled-copy + prebuild-fetch both failed): ${missing.join(", ")}`);
       return results;
     }
-    function isRecord$1(value) {
+    function isRecord$2(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     var PACKAGE_JSON_LOOKUP_DEPTH = 4;
@@ -122168,9 +122437,9 @@ var require_dist3 = __commonJS({
       return import(`${(0, node_url.pathToFileURL)(entryPath).href}?v=${encodeURIComponent(bust)}`);
     }
     function toAddonPackageManifest(value) {
-      if (!isRecord$1(value)) return void 0;
+      if (!isRecord$2(value)) return void 0;
       if (!Array.isArray(value.addons)) return void 0;
-      if (!value.addons.every((a) => isRecord$1(a) && typeof a.id === "string")) return void 0;
+      if (!value.addons.every((a) => isRecord$2(a) && typeof a.id === "string")) return void 0;
       return value;
     }
     var noopLogger$1 = {
@@ -122312,7 +122581,7 @@ var require_dist3 = __commonJS({
         }
         if (!node_fs.existsSync(entryPath)) throw new Error(`Entry not found: ${entryPath}`);
         const modUnknown = await importAddonModuleFresh(entryPath);
-        const mod = isRecord$1(modUnknown) ? modUnknown : {};
+        const mod = isRecord$2(modUnknown) ? modUnknown : {};
         const AddonClass = require_manifest_python_deps.resolveAddonClass(mod);
         if (!AddonClass) throw new Error(`No addon class in ${entryPath}`);
         this.addons.set(declaration.id, {
@@ -122328,7 +122597,7 @@ var require_dist3 = __commonJS({
       /** Load addon from a direct path (for development/testing) */
       async loadFromPath(addonId, modulePath, packageName, declaration, packageVersion = "0.0.0") {
         const modUnknown = await importAddonModuleFresh(modulePath);
-        const mod = isRecord$1(modUnknown) ? modUnknown : {};
+        const mod = isRecord$2(modUnknown) ? modUnknown : {};
         const AddonClass = require_manifest_python_deps.resolveAddonClass(mod);
         if (!AddonClass) throw new Error(`Module ${modulePath} has no default export`);
         this.addons.set(addonId, {
@@ -125691,6 +125960,143 @@ var require_dist3 = __commonJS({
     function isInfraCapability(name2) {
       return infraNames.has(name2);
     }
+    var INFRA_NAMES = new Set(INFRA_CAPABILITIES.map((c) => c.name));
+    function isolatedBuiltinPhase(capabilities) {
+      return capabilities.some((c) => INFRA_NAMES.has(c.name)) ? "infra" : "consumer";
+    }
+    function partitionIsolatedBuiltinIds(ids, capabilitiesOf) {
+      const infra = [];
+      const consumers = [];
+      for (const id of ids) if (isolatedBuiltinPhase(capabilitiesOf(id)) === "infra") infra.push(id);
+      else consumers.push(id);
+      return {
+        infra,
+        consumers
+      };
+    }
+    async function waitUntilReady(isReady, options) {
+      const deadline = Date.now() + options.timeoutMs;
+      for (; ; ) {
+        if (isReady()) return;
+        if (Date.now() >= deadline) throw new Error(`Timed out waiting for ${options.what}`);
+        await new Promise((resolve) => {
+          setTimeout(resolve, options.intervalMs);
+        });
+      }
+    }
+    async function runHubAddonBoot(steps) {
+      await steps.spawnIsolatedInfra();
+      await steps.waitForDataStoreProvider();
+      await steps.bootInProcessInfra();
+      await steps.spawnForkedAddons();
+      await steps.bootInProcessConsumers();
+      await steps.spawnIsolatedConsumers();
+    }
+    function isRecord$1(value) {
+      return typeof value === "object" && value !== null && !Array.isArray(value);
+    }
+    function asBlob(value) {
+      return isRecord$1(value) ? value : {};
+    }
+    function unwrapValue(parsed) {
+      if (!isRecord$1(parsed) || !("value" in parsed)) return parsed;
+      return parsed.value;
+    }
+    async function loadPrefixed(door, collection, prefix) {
+      const range = require_builtins_sqlite_storage_sqlite_settings_addon.prefixRange(prefix);
+      const rows = await door.query({
+        collection,
+        ...range !== null ? { filter: { whereBetween: { id: [range.lo, range.hi] } } } : {}
+      });
+      const result = {};
+      for (const row of rows) {
+        if (range !== null && (row.id < range.lo || row.id >= range.hi)) continue;
+        if (!row.id.startsWith(prefix)) continue;
+        result[row.id.slice(prefix.length)] = unwrapValue(row.data);
+      }
+      return result;
+    }
+    async function replacePrefixed(door, collection, prefix, values, wrap3) {
+      const range = require_builtins_sqlite_storage_sqlite_settings_addon.prefixRange(prefix);
+      if (range !== null) await door.deleteWhere({
+        collection,
+        filter: { whereBetween: { id: [range.lo, range.hi] } }
+      });
+      for (const [key, value] of Object.entries(values)) {
+        if (value === void 0) continue;
+        await door.set({
+          collection,
+          key: `${prefix}${key}`,
+          value: wrap3(key, value)
+        });
+      }
+    }
+    function createDoorSettingsView(addonId, door, sections) {
+      const addonPrefix = `${addonId}.`;
+      return {
+        async readAddonStore() {
+          return loadPrefixed(door, "addon-settings", addonPrefix);
+        },
+        async writeAddonStore(patch) {
+          await replacePrefixed(door, "addon-settings", addonPrefix, {
+            ...await loadPrefixed(door, "addon-settings", addonPrefix),
+            ...patch
+          }, (key, value) => ({
+            addonId,
+            key,
+            value
+          }));
+        },
+        async readDeviceStore(deviceId) {
+          return loadPrefixed(door, "addon-device-settings", `${addonId}:${String(deviceId)}.`);
+        },
+        async writeDeviceStore(deviceId, patch) {
+          const scope = `${addonId}:${String(deviceId)}.`;
+          await replacePrefixed(door, "addon-device-settings", scope, {
+            ...await loadPrefixed(door, "addon-device-settings", scope),
+            ...patch
+          }, (key, value) => ({
+            addonId,
+            deviceId: String(deviceId),
+            key,
+            value
+          }));
+        },
+        async clearDeviceStore(deviceId) {
+          const range = require_builtins_sqlite_storage_sqlite_settings_addon.prefixRange(`${addonId}:${String(deviceId)}.`);
+          if (range === null) return;
+          await door.deleteWhere({
+            collection: "addon-device-settings",
+            filter: { whereBetween: { id: [range.lo, range.hi] } }
+          });
+        },
+        async readDeviceRuntimeState(deviceId) {
+          return asBlob(await door.get({
+            collection: "device-runtime-state",
+            key: String(deviceId)
+          }));
+        },
+        async writeDeviceRuntimeState(deviceId, data) {
+          await door.set({
+            collection: "device-runtime-state",
+            key: String(deviceId),
+            value: data
+          });
+        },
+        async clearDeviceRuntimeState(deviceId) {
+          await door.delete({
+            collection: "device-runtime-state",
+            key: String(deviceId)
+          });
+        },
+        async getSection(section) {
+          return sections.getSection(section);
+        },
+        async setSection(section, patch) {
+          await sections.setSection(section, patch);
+        }
+      };
+    }
     var __create = Object.create;
     var __defProp = Object.defineProperty;
     var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -128170,6 +128576,7 @@ var require_dist3 = __commonJS({
       configPath;
       bootstrapConfig;
       settingsStore = null;
+      settingsDoor = null;
       runtimeState;
       runtimeStatePath;
       constructor(configPath) {
@@ -128190,6 +128597,14 @@ var require_dist3 = __commonJS({
       setSettingsStore(store) {
         this.settingsStore = store;
       }
+      /**
+      * Wire the async `settings-store` door. Used when the engine is isolated
+      * (no sync `ISettingsStore` handle on hub-main). {@link createSettingsView}
+      * prefers the sync store when both are present.
+      */
+      setSettingsDoor(door) {
+        this.settingsDoor = door;
+      }
       get(configPath) {
         return this.resolveConfigValue(configPath);
       }
@@ -128210,8 +128625,21 @@ var require_dist3 = __commonJS({
       * Throws if the settings store is not yet wired.
       */
       set(key, value) {
-        if (this.settingsStore === null) throw new Error("[ConfigManager] SettingsStore not initialized -- call setSettingsStore() first");
-        this.settingsStore.setSystem(key, value);
+        if (this.settingsStore !== null) {
+          this.settingsStore.setSystem(key, value);
+          return;
+        }
+        if (this.settingsDoor !== null) {
+          this.settingsDoor.set({
+            collection: "system-settings",
+            key,
+            value
+          }).catch((err) => {
+            console.error("[ConfigManager] isolated settings-store write failed", err);
+          });
+          return;
+        }
+        throw new Error("[ConfigManager] SettingsStore not initialized -- call setSettingsStore() first");
       }
       /**
       * Bulk-read all keys that belong to a logical section.
@@ -128332,6 +128760,19 @@ var require_dist3 = __commonJS({
         this.settingsStore.clearDeviceRuntimeState(deviceId);
       }
       createSettingsView(addonId) {
+        if (this.settingsStore === null && this.settingsDoor !== null) {
+          const door = this.settingsDoor;
+          return createDoorSettingsView(addonId, door, {
+            getSection: (section) => this.getSection(section),
+            setSection: async (section, patch) => {
+              for (const [key, value] of Object.entries(patch)) await door.set({
+                collection: "system-settings",
+                key: `${section}.${key}`,
+                value
+              });
+            }
+          });
+        }
         const cm = this;
         return {
           async readAddonStore() {
@@ -200115,6 +200556,7 @@ globstar while`, t, d, e, f, m), this.matchOne(t.slice(d), e.slice(f), s)) retur
     exports.createBroker = createBroker2;
     exports.createBrokerDeviceManagerApi = require_manifest_python_deps.createBrokerDeviceManagerApi;
     exports.createCoreCapService = createCoreCapService;
+    exports.createDoorSettingsView = createDoorSettingsView;
     exports.createFileDataPlaneHandler = require_file_data_plane.createFileDataPlaneHandler;
     exports.createHubCapForwardService = require_manifest_python_deps.createHubCapForwardService;
     exports.createHubService = createHubService;
@@ -200234,6 +200676,7 @@ globstar while`, t, d, e, f, m), this.matchOne(t.slice(d), e.slice(f), s)) retur
     exports.isInfraCapability = isInfraCapability;
     exports.isModelDownloaded = require_file_data_plane.isModelDownloaded;
     exports.isSourceNewer = isSourceNewer;
+    exports.isolatedBuiltinPhase = isolatedBuiltinPhase;
     exports.loadTlsCert = require_lan_http_bind.loadTlsCert;
     exports.localEndpointPath = require_manifest_python_deps.localEndpointPath;
     exports.localProviderLink = require_manifest_python_deps.localProviderLink;
@@ -200241,6 +200684,7 @@ globstar while`, t, d, e, f, m), this.matchOne(t.slice(d), e.slice(f), s)) retur
     exports.parseCapAction = require_manifest_python_deps.parseCapAction;
     exports.parseRangeHeader = require_file_data_plane.parseRangeHeader;
     exports.parseTokenizedUrl = require_file_data_plane.parseTokenizedUrl;
+    exports.partitionIsolatedBuiltinIds = partitionIsolatedBuiltinIds;
     exports.proxyToUpstream = proxyToUpstream;
     exports.quarantineAddonResidue = quarantineAddonResidue;
     exports.readExtraSans = require_lan_http_bind.readExtraSans;
@@ -200255,6 +200699,7 @@ globstar while`, t, d, e, f, m), this.matchOne(t.slice(d), e.slice(f), s)) retur
     exports.resolveFilePath = require_file_data_plane.resolveFilePath;
     exports.resolveHwAccel = require_manifest_python_deps.resolveHwAccel;
     exports.resolveNpmInvocation = require_manifest_python_deps.resolveNpmInvocation;
+    exports.runHubAddonBoot = runHubAddonBoot;
     exports.runNpm = require_manifest_python_deps.runNpm;
     exports.scheduleSelfRestart = scheduleSelfRestart;
     exports.scopeKey = require_dist10.scopeKey;
@@ -200273,6 +200718,7 @@ globstar while`, t, d, e, f, m), this.matchOne(t.slice(d), e.slice(f), s)) retur
     exports.udsChildLogToWorkerEntry = require_manifest_python_deps.udsChildLogToWorkerEntry;
     exports.validateProviderRegistrations = require_manifest_python_deps.validateProviderRegistrations;
     exports.validateUploadedTls = require_lan_http_bind.validateUploadedTls;
+    exports.waitUntilReady = waitUntilReady;
     exports.writeExtraSans = require_lan_http_bind.writeExtraSans;
     exports.writePendingRestart = writePendingRestart;
     exports.writeTlsMode = require_lan_http_bind.writeTlsMode;
@@ -238964,7 +239410,7 @@ var require_dist9 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_EY0GNjV9();
-    var require_sleep = require_sleep_C2XhJhkd();
+    var require_sleep = require_sleep_CizGYrCD();
     var require_canonical_hash = require_canonical_hash_DNV8S5ET();
     var require_enums2 = require_enums();
     var require_err_msg = require_err_msg_COpsHMw2();
@@ -240673,6 +241119,20 @@ var require_dist9 = __commonJS({
       */
       resolution: zod.z.number().int().positive().optional()
     });
+    var MODEL_PROVIDER_IDS = [
+      "camstack",
+      "frigate",
+      "scrypted",
+      "custom"
+    ];
+    var ModelProviderIdSchema = zod.z.enum(MODEL_PROVIDER_IDS);
+    function inferModelProvider(entry) {
+      if (entry.provider !== void 0) return entry.provider;
+      const haystack = `${entry.id} ${entry.description ?? ""}`;
+      if (/scrypted/i.test(haystack)) return "scrypted";
+      if (/frigate/i.test(haystack)) return "frigate";
+      return "custom";
+    }
     var ModelCatalogEntrySchema = zod.z.object({
       id: zod.z.string(),
       name: zod.z.string(),
@@ -240770,6 +241230,12 @@ var require_dist9 = __commonJS({
       */
       group: ModelVariantGroupSchema.optional(),
       /**
+      * Catalog source for the pipeline stepper's provider-first picker. Absent on
+      * built-in CamStack entries (treated as `camstack`) and on registry rows
+      * persisted before this field existed (`inferModelProvider` fills those).
+      */
+      provider: ModelProviderIdSchema.optional(),
+      /**
       * Per-MODEL class map override. Absent ⇒ the step's `StepDefinition.classMap`
       * applies (Frigate / COCO public catalog). Set on a custom model whose raw
       * labels already ARE the CamStack macros (Scrypted identity map).
@@ -248632,14 +249098,22 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     });
     var NC_AUDIO_DBFS_FLOOR = -96;
     var NcAudioConditionSchema = zod.z.object({
-      /** LABEL MODE: audio macro labels. Present ⇒ fires on the first labelled frame. */
+      /** LABEL MODE: audio macro labels. Present ⇒ count-in-window confirm. */
       labels: zod.z.array(zod.z.string().min(1)).min(1).optional(),
       /** LEVEL MODE: floor in dBFS (negative-going, `0` = full scale). */
       dbThreshold: zod.z.number().min(-96).max(0).optional(),
       /** LEVEL MODE ONLY: percentage of the window's samples that must be hits (1–100). */
       hitPercent: zod.z.number().int().min(1).max(100).default(60),
       /** LEVEL MODE ONLY: length of the sampling window in seconds. */
-      samplingSeconds: zod.z.number().int().min(1).max(300).default(10)
+      samplingSeconds: zod.z.number().int().min(1).max(300).default(10),
+      /**
+      * LABEL MODE: how many labelled frames must land inside
+      * {@link NcAudioConditionSchema.shape.confirmWindowSec} before dispatch.
+      * Absent ⇒ 2 (the matcher default). `1` is first-frame fire.
+      */
+      confirmHits: zod.z.number().int().min(1).max(20).optional(),
+      /** LABEL MODE: the window those frames must share, in seconds. Absent ⇒ 5. */
+      confirmWindowSec: zod.z.number().int().min(1).max(60).optional()
     });
     var NcCrossingSchema = zod.z.enum([
       "enter",
@@ -250899,6 +251373,46 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       /** Cursor for the next page, or null when this page is the last. */
       nextCursor: zod.z.string().nullable()
     });
+    var LIST_GROUPS_DEFAULT_LIMIT = 40;
+    var LIST_GROUPS_MAX_LIMIT = 100;
+    var AnalyticsGroupRecordSchema = zod.z.object({
+      id: zod.z.string(),
+      deviceId: zod.z.number().int(),
+      openedAt: zod.z.number().int(),
+      closedAt: zod.z.number().int(),
+      timestamp: zod.z.number().int(),
+      memberCount: zod.z.number().int(),
+      memberTrackIds: zod.z.array(zod.z.string()).readonly(),
+      className: zod.z.string(),
+      classes: zod.z.array(zod.z.string()).readonly(),
+      /** Relative event-media path, or null when the group has no picture yet. */
+      mediaUrl: zod.z.string().nullable(),
+      singleton: zod.z.boolean()
+    });
+    var AnalyticsGroupMemberSchema = zod.z.object({
+      trackId: zod.z.string(),
+      deviceId: zod.z.number().int(),
+      className: zod.z.string(),
+      firstSeen: zod.z.number().int(),
+      lastSeen: zod.z.number().int(),
+      mediaUrl: zod.z.string().nullable()
+    });
+    var AnalyticsGroupDetailSchema = AnalyticsGroupRecordSchema.extend({ members: zod.z.array(AnalyticsGroupMemberSchema).readonly() });
+    var ListGroupsQueryInput = zod.z.object({
+      /** Devices to merge. An empty array yields `{ groups: [], nextCursor: null }`. */
+      deviceIds: zod.z.array(zod.z.number()),
+      /** Window lower bound on `closedAt` (inclusive). */
+      since: zod.z.number().optional(),
+      /** Window upper bound on `openedAt` (inclusive). */
+      until: zod.z.number().optional(),
+      limit: zod.z.number().int().min(1).max(LIST_GROUPS_MAX_LIMIT).default(LIST_GROUPS_DEFAULT_LIMIT),
+      /** Opaque continuation cursor from a previous page's `nextCursor`. */
+      cursor: zod.z.string().optional()
+    });
+    var ListGroupsPageSchema = zod.z.object({
+      groups: zod.z.array(AnalyticsGroupRecordSchema).readonly(),
+      nextCursor: zod.z.string().nullable()
+    });
     var KeyEventQueryInput = zod.z.object({
       deviceId: zod.z.number(),
       /** Window lower bound (track firstSeen ≥ since). */
@@ -250974,7 +251488,9 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       /** Unassigned plate reads removed (best-effort; plate leg deferred to plate-intelligence). */
       plates: zod.z.number().int(),
       /** Per-track CLIP search vectors removed (best-effort). */
-      embeddings: zod.z.number().int()
+      embeddings: zod.z.number().int(),
+      /** Group membership + group rows removed with their last member (best-effort). */
+      groups: zod.z.number().int()
     });
     var DiskReconcileCountsSchema = zod.z.object({
       mediaDropped: zod.z.number().int(),
@@ -251116,6 +251632,16 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         * are not included (same contract as `listTracks`).
         */
         listRecentTracks: require_sleep.method(RecentTracksQueryInput, RecentTracksPageSchema),
+        /**
+        * Batched co-moving group listing — the Groups feed. Same merge/cursor
+        * contract as {@link listRecentTracks}. A group is a sealed partition of
+        * one session; `getGroup` is the detail with members.
+        */
+        listGroups: require_sleep.method(ListGroupsQueryInput, ListGroupsPageSchema),
+        getGroup: require_sleep.method(zod.z.object({
+          deviceId: zod.z.number(),
+          groupId: zod.z.string().min(1)
+        }), AnalyticsGroupDetailSchema.nullable()),
         clearTracks: require_sleep.method(zod.z.object({ deviceId: zod.z.number() }), zod.z.void(), {
           kind: "mutation",
           auth: "admin"
@@ -251797,7 +252323,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         sizeMB: zod.z.number()
       })),
       group: ModelVariantGroupSchema.optional(),
-      legacy: zod.z.boolean().optional()
+      legacy: zod.z.boolean().optional(),
+      provider: ModelProviderIdSchema.optional()
     });
     var ConfigFieldBridge = zod.z.custom();
     var PipelineAddonSchemaSchema = zod.z.object({
@@ -260275,7 +260802,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       plateBbox: BoundingBoxSchema.optional(),
       /** keyFrame parity: MediaStore key of the track's native-resolution key frame. */
       keyFrameMediaKey: zod.z.string().optional(),
-      base64: zod.z.string().optional()
+      base64: zod.z.string().optional(),
+      /**
+      * Same crop as a data-plane URL. `getPlateByTrack` returns this and
+      * never inlines JPEG; `listPlates` still inlines for the admin-ui.
+      */
+      cropUrl: zod.z.string().optional()
     });
     var MediaFileLiteSchema = zod.z.object({
       key: zod.z.string(),
@@ -269917,6 +270449,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.getGroup": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.getKeyEvents": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -270001,6 +270539,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.listGroups": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.listOpsLog": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -273672,6 +274216,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: false
       }],
+      "pipelineAnalytics.getGroup": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "pipelineAnalytics.getKeyEvents": [{
         name: "deviceId",
         form: "single",
@@ -273727,6 +274276,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "array",
         optional: false
       }],
+      "pipelineAnalytics.listGroups": [{
+        name: "deviceIds",
+        form: "array",
+        optional: false
+      }],
       "pipelineAnalytics.listOpsLog": [{
         name: "deviceId",
         form: "single",
@@ -275613,6 +276167,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     var NC_AUDIO_HIT_PERCENT_MAX = 100;
     var NC_AUDIO_SAMPLING_MIN_SEC = 1;
     var NC_AUDIO_SAMPLING_MAX_SEC = 300;
+    var NC_AUDIO_CONFIRM_HITS_DEFAULT = 2;
+    var NC_AUDIO_CONFIRM_WINDOW_SEC_DEFAULT = 5;
+    var NC_AUDIO_CONFIRM_HITS_MIN = 1;
+    var NC_AUDIO_CONFIRM_HITS_MAX = 20;
+    var NC_AUDIO_CONFIRM_WINDOW_MIN_SEC = 1;
+    var NC_AUDIO_CONFIRM_WINDOW_MAX_SEC = 60;
     var NC_AUDIO_DEFAULTS = {
       hitPercent: 60,
       samplingSeconds: 10
@@ -275649,7 +276209,15 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         ...labels !== void 0 ? { labels: [...labels] } : {},
         ...dbThreshold !== void 0 ? { dbThreshold: clampInt(dbThreshold, NC_AUDIO_DB_MIN, 0) } : {},
         hitPercent: clampInt(patch.hitPercent ?? base.hitPercent, 1, 100),
-        samplingSeconds: clampInt(patch.samplingSeconds ?? base.samplingSeconds, 1, 300)
+        samplingSeconds: clampInt(patch.samplingSeconds ?? base.samplingSeconds, 1, 300),
+        ...(() => {
+          const hits = has(patch, "confirmHits") ? patch.confirmHits : base.confirmHits;
+          const windowSec = has(patch, "confirmWindowSec") ? patch.confirmWindowSec : base.confirmWindowSec;
+          return {
+            ...hits !== void 0 ? { confirmHits: clampInt(hits, 1, 20) } : {},
+            ...windowSec !== void 0 ? { confirmWindowSec: clampInt(windowSec, 1, 60) } : {}
+          };
+        })()
       };
     }
     function audioLabelChoices(taxonomy, selected) {
@@ -278233,6 +278801,9 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.AlertSourceSchema = AlertSourceSchema;
     exports.AlertStatusSchema = AlertStatusSchema;
     exports.AmbientLightSensorStatusSchema = AmbientLightSensorStatusSchema;
+    exports.AnalyticsGroupDetailSchema = AnalyticsGroupDetailSchema;
+    exports.AnalyticsGroupMemberSchema = AnalyticsGroupMemberSchema;
+    exports.AnalyticsGroupRecordSchema = AnalyticsGroupRecordSchema;
     exports.ApiKeyRecordSchema = ApiKeyRecordSchema;
     exports.ApiKeySummarySchema = ApiKeySummarySchema;
     exports.ArchiveEntrySchema = ArchiveEntrySchema;
@@ -278576,6 +279147,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.LawnMowerControlStatusSchema = LawnMowerControlStatusSchema;
     exports.LinkedDeviceSchema = LinkedDeviceSchema;
     exports.LinkedDevicesModeSchema = LinkedDevicesModeSchema;
+    exports.ListGroupsPageSchema = ListGroupsPageSchema;
+    exports.ListGroupsQueryInput = ListGroupsQueryInput;
     exports.LlmDefaultSchema = LlmDefaultSchema;
     exports.LlmDefaultSelectorSchema = LlmDefaultSelectorSchema;
     exports.LlmDownloadProgressSchema = LlmDownloadProgressSchema;
@@ -278619,6 +279192,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.METHOD_ACCESS_MAP = METHOD_ACCESS_MAP;
     exports.METHOD_DEVICE_SELECTORS = METHOD_DEVICE_SELECTORS;
     exports.MODEL_FORMATS = MODEL_FORMATS;
+    exports.MODEL_PROVIDER_IDS = MODEL_PROVIDER_IDS;
     exports.MOTION_TRIGGER_FEATURE = MOTION_TRIGGER_FEATURE;
     exports.ManagedModelCatalogEntrySchema = ManagedModelCatalogEntrySchema;
     exports.ManagedModelExtraFileSchema = ManagedModelExtraFileSchema;
@@ -278649,6 +279223,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.ModelExtraFileSchema = ModelExtraFileSchema;
     exports.ModelFormatEntrySchema = ModelFormatEntrySchema;
     exports.ModelFormatsSchema = ModelFormatsSchema;
+    exports.ModelProviderIdSchema = ModelProviderIdSchema;
     exports.ModelSubstitutionSchema = ModelSubstitutionSchema;
     exports.ModelVariantGroupSchema = ModelVariantGroupSchema;
     exports.MotionAnalysisResultSchema = MotionAnalysisResultSchema;
@@ -278678,6 +279253,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.NATIVE_LEASE_TILE_BUDGET_FIELD = NATIVE_LEASE_TILE_BUDGET_FIELD;
     exports.NATIVE_LEASE_TILE_BUDGET_KEY = NATIVE_LEASE_TILE_BUDGET_KEY;
     exports.NC_ALARM_SYSTEM_EVENT_KINDS = NC_ALARM_SYSTEM_EVENT_KINDS;
+    exports.NC_AUDIO_CONFIRM_HITS_DEFAULT = NC_AUDIO_CONFIRM_HITS_DEFAULT;
+    exports.NC_AUDIO_CONFIRM_HITS_MAX = NC_AUDIO_CONFIRM_HITS_MAX;
+    exports.NC_AUDIO_CONFIRM_HITS_MIN = NC_AUDIO_CONFIRM_HITS_MIN;
+    exports.NC_AUDIO_CONFIRM_WINDOW_MAX_SEC = NC_AUDIO_CONFIRM_WINDOW_MAX_SEC;
+    exports.NC_AUDIO_CONFIRM_WINDOW_MIN_SEC = NC_AUDIO_CONFIRM_WINDOW_MIN_SEC;
+    exports.NC_AUDIO_CONFIRM_WINDOW_SEC_DEFAULT = NC_AUDIO_CONFIRM_WINDOW_SEC_DEFAULT;
     exports.NC_AUDIO_DBFS_FLOOR = NC_AUDIO_DBFS_FLOOR;
     exports.NC_AUDIO_DB_MAX = NC_AUDIO_DB_MAX;
     exports.NC_AUDIO_DB_MIN = NC_AUDIO_DB_MIN;
@@ -279216,6 +279797,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.createDeviceProxy = require_sleep.createDeviceProxy;
     exports.createDurableState = require_sleep.createDurableState;
     exports.createEvent = require_sleep.createEvent;
+    exports.createEventBusSliceSource = require_sleep.createEventBusSliceSource;
     exports.createExpressionScope = createExpressionScope;
     exports.createHwAccelCache = createHwAccelCache;
     exports.createLazyTrpcSource = require_sleep.createLazyTrpcSource;
@@ -279298,6 +279880,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.hydrateSchema = require_sleep.hydrateSchema;
     exports.imageCapability = imageCapability;
     exports.imageSettingsCapability = imageSettingsCapability;
+    exports.inferModelProvider = inferModelProvider;
     exports.initialPoolMemoryState = initialPoolMemoryState;
     exports.integrationsCapability = integrationsCapability;
     exports.intercomCapability = intercomCapability;
@@ -404548,90 +405131,127 @@ var require_addon_registry_service = __commonJS({
           return entry?.packageName === "@camstack/system" && entry.declaration !== void 0 && (0, types_1.isIsolatedBuiltin)(entry.declaration);
         });
         const isolatedBuiltins = new Set(isolatedBuiltinIds);
-        await spawnRunnerPlan(this.buildAddonGroupPlan(allIds.filter((id) => !isolatedBuiltins.has(id))));
+        const { infra: isolatedInfraIds, consumers: isolatedConsumerIds } = (0, system_1.partitionIsolatedBuiltinIds)(isolatedBuiltinIds, (id) => {
+          const entry = this.addonEntries.get(id);
+          return entry?.declaredCapabilities ?? [];
+        });
         const isCoreBuiltin = (id) => this.addonEntries.get(id)?.packageName === "@camstack/system" && !isolatedBuiltins.has(id);
-        for (const infra of system_1.INFRA_CAPABILITIES) {
-          const addonId = this.findAddonForCapability(infra.name, allIds);
-          if (addonId) {
-            const entry = this.addonEntries.get(addonId);
-            if (!entry || entry.initialized || !isCoreBuiltin(addonId))
-              continue;
+        await (0, system_1.runHubAddonBoot)({
+          spawnIsolatedInfra: async () => {
+            if (isolatedInfraIds.length === 0)
+              return;
+            this.logger.info("Spawning isolated infrastructure builtins", {
+              meta: { addonIds: isolatedInfraIds }
+            });
+            await spawnRunnerPlan(this.buildAddonGroupPlan(isolatedInfraIds));
+          },
+          waitForDataStoreProvider: async () => {
+            if (isolatedInfraIds.length === 0)
+              return;
             try {
-              await this.initializeAddon(addonId);
-              this.wireCapabilities(addonId);
-            } catch (error) {
-              const msg = (0, types_1.errMsg)(error);
-              this.emitAddonLifecycleEvent("addon.error", addonId, {
-                error: msg,
-                phase: "init"
+              await (0, system_1.waitUntilReady)(() => this.capabilityRegistry.getCollection("data-store-provider").length > 0, {
+                timeoutMs: 3e4,
+                intervalMs: 50,
+                what: "isolated data-store-provider engine"
               });
-              if (infra.required) {
-                throw new Error(`Required infrastructure addon "${addonId}" failed: ${msg}`, {
-                  cause: error
-                });
-              }
-              this.logger.warn("Optional infra addon failed -- continuing", {
-                tags: { addonId },
-                meta: { error: msg }
+            } catch (err) {
+              this.logger.error("Isolated data-store-provider engine did not register in time", {
+                meta: { error: (0, types_1.errMsg)(err), addonIds: isolatedInfraIds }
               });
             }
-          } else if (infra.required) {
-            throw new Error(`No addon provides required infrastructure capability "${infra.name}"`);
-          }
-        }
-        const bootOrder = this.capabilityRegistry.getBootOrder();
-        const infraNames = new Set(system_1.INFRA_CAPABILITIES.map((c) => c.name));
-        for (const capName of bootOrder) {
-          if (infraNames.has(capName))
-            continue;
-          for (const id of allIds) {
-            const entry = this.addonEntries.get(id);
-            if (!entry || entry.initialized || !isCoreBuiltin(id))
-              continue;
-            const provides = this.getAddonCapabilities(entry.addon);
-            if (!provides.some((c) => c.name === capName))
-              continue;
-            try {
-              await this.initializeAddon(id);
-              this.wireCapabilities(id);
-            } catch (error) {
-              const msg = (0, types_1.errMsg)(error);
-              this.emitAddonLifecycleEvent("addon.error", id, {
-                error: msg,
-                phase: "init"
-              });
-              this.logger.error("Core builtin failed to initialize -- skipping", {
-                tags: { addonId: id },
-                meta: { error: msg }
-              });
+          },
+          bootInProcessInfra: async () => {
+            for (const infra of system_1.INFRA_CAPABILITIES) {
+              const addonId = this.findAddonForCapability(infra.name, allIds);
+              if (addonId) {
+                const entry = this.addonEntries.get(addonId);
+                if (!entry || entry.initialized || !isCoreBuiltin(addonId))
+                  continue;
+                try {
+                  await this.initializeAddon(addonId);
+                  this.wireCapabilities(addonId);
+                } catch (error) {
+                  const msg = (0, types_1.errMsg)(error);
+                  this.emitAddonLifecycleEvent("addon.error", addonId, {
+                    error: msg,
+                    phase: "init"
+                  });
+                  if (infra.required) {
+                    throw new Error(`Required infrastructure addon "${addonId}" failed: ${msg}`, {
+                      cause: error
+                    });
+                  }
+                  this.logger.warn("Optional infra addon failed -- continuing", {
+                    tags: { addonId },
+                    meta: { error: msg }
+                  });
+                }
+              } else if (infra.required) {
+                throw new Error(`No addon provides required infrastructure capability "${infra.name}"`);
+              }
             }
-          }
-        }
-        for (const id of allIds) {
-          const entry = this.addonEntries.get(id);
-          if (entry && !entry.initialized && isCoreBuiltin(id)) {
-            try {
-              await this.initializeAddon(id);
-              this.wireCapabilities(id);
-            } catch (error) {
-              const msg = (0, types_1.errMsg)(error);
-              this.emitAddonLifecycleEvent("addon.error", id, {
-                error: msg,
-                phase: "init"
-              });
-              this.logger.error("Core builtin failed to initialize -- skipping", {
-                tags: { addonId: id },
-                meta: { error: msg }
-              });
+          },
+          spawnForkedAddons: async () => {
+            await spawnRunnerPlan(this.buildAddonGroupPlan(allIds.filter((id) => !isolatedBuiltins.has(id))));
+          },
+          bootInProcessConsumers: async () => {
+            const bootOrder = this.capabilityRegistry.getBootOrder();
+            const infraNames = new Set(system_1.INFRA_CAPABILITIES.map((c) => c.name));
+            for (const capName of bootOrder) {
+              if (infraNames.has(capName))
+                continue;
+              for (const id of allIds) {
+                const entry = this.addonEntries.get(id);
+                if (!entry || entry.initialized || !isCoreBuiltin(id))
+                  continue;
+                const provides = this.getAddonCapabilities(entry.addon);
+                if (!provides.some((c) => c.name === capName))
+                  continue;
+                try {
+                  await this.initializeAddon(id);
+                  this.wireCapabilities(id);
+                } catch (error) {
+                  const msg = (0, types_1.errMsg)(error);
+                  this.emitAddonLifecycleEvent("addon.error", id, {
+                    error: msg,
+                    phase: "init"
+                  });
+                  this.logger.error("Core builtin failed to initialize -- skipping", {
+                    tags: { addonId: id },
+                    meta: { error: msg }
+                  });
+                }
+              }
+            }
+            for (const id of allIds) {
+              const entry = this.addonEntries.get(id);
+              if (entry && !entry.initialized && isCoreBuiltin(id)) {
+                try {
+                  await this.initializeAddon(id);
+                  this.wireCapabilities(id);
+                } catch (error) {
+                  const msg = (0, types_1.errMsg)(error);
+                  this.emitAddonLifecycleEvent("addon.error", id, {
+                    error: msg,
+                    phase: "init"
+                  });
+                  this.logger.error("Core builtin failed to initialize -- skipping", {
+                    tags: { addonId: id },
+                    meta: { error: msg }
+                  });
+                }
+              }
             }
+          },
+          spawnIsolatedConsumers: async () => {
+            if (isolatedConsumerIds.length === 0)
+              return;
+            this.logger.info("Spawning isolated system builtins", {
+              meta: { addonIds: isolatedConsumerIds }
+            });
+            await spawnRunnerPlan(this.buildAddonGroupPlan(isolatedConsumerIds));
           }
-        }
-        if (isolatedBuiltinIds.length > 0) {
-          this.logger.info("Spawning isolated system builtins", {
-            meta: { addonIds: isolatedBuiltinIds }
-          });
-          await spawnRunnerPlan(this.buildAddonGroupPlan(isolatedBuiltinIds));
-        }
+        });
         const initializedIds = [...this.addonEntries.entries()].filter(([, e]) => e.initialized).map(([id]) => id);
         this.logger.info("Addons initialized", {
           meta: { initializedCount: initializedIds.length, totalCount: this.addonEntries.size }
@@ -405894,12 +406514,13 @@ var require_addon_registry_service = __commonJS({
               if (syncStore) {
                 this.configService.setSettingsStore(syncStore);
               } else {
-                this.logger.error("settings-store provider does not implement the sync ConfigManager surface and no data-store-provider engine does either \u2014 every addon store reads empty, devices will NOT be restored", { meta: { addonId, phase: "v2" } });
+                this.logger.info("settings-store engine is isolated \u2014 ConfigManager uses the async door, not a sync ISettingsStore", { meta: { addonId, phase: "v2" } });
               }
               this.storageService.setSettingsBackend(provider);
               const store = this.capabilityRegistry.getProviderByAddon("settings-store", addonId);
               if (!store)
                 return;
+              this.configService.setSettingsDoor(store);
               this.integrationRegistry = new system_1.IntegrationRegistry(store);
               void this.integrationRegistry.initialize().then(() => {
                 this.logger.info("IntegrationRegistry initialized", { meta: { phase: "v2" } });
@@ -408373,15 +408994,15 @@ var require_moleculer_service = __commonJS({
   "../../server/backend/dist/core/moleculer/moleculer.service.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
-    exports.MoleculerService = void 0;
+    exports.ChildManifestGate = exports.CHILD_MANIFEST_SKIP_SAMPLE = exports.MoleculerService = void 0;
     exports.childOwnerToken = childOwnerToken;
     exports.buildChildUdsManifest = buildChildUdsManifest;
     var node_crypto_1 = __require("crypto");
     var system_1 = require_dist3();
     var types_1 = require_dist9();
-    var agent_readiness_pull_js_1 = require_agent_readiness_pull();
     var cap_router_runtime_js_1 = require_cap_router_runtime();
     var core_cap_bridge_js_1 = require_core_cap_bridge();
+    var agent_readiness_pull_js_1 = require_agent_readiness_pull();
     var cap_call_fn_js_1 = require_cap_call_fn();
     var cap_route_authority_js_1 = require_cap_route_authority();
     var MoleculerService = class _MoleculerService {
@@ -408416,6 +409037,12 @@ var require_moleculer_service = __commonJS({
        * See `docs/decisions/adr-0188-an-unregister-carries-proof-of-ownership.md`.
        */
       nodeOwners = /* @__PURE__ */ new Map();
+      /**
+       * Skips the manifest rebuild for a child re-register that carries nothing new
+       * — 246 of them in 30 minutes with zero respawns, measured live 2026-08-25.
+       * See {@link ChildManifestGate}.
+       */
+      childManifestGate = new ChildManifestGate();
       /**
        * Fixed-period agent-readiness snapshot sweep (D8 reconcile) — repairs
        * agent-origin readiness deltas lost while the agent stayed connected.
@@ -408737,6 +409364,19 @@ var require_moleculer_service = __commonJS({
             const hubNodeId = this.brokerSafe.nodeID;
             const childNodeId = `${hubNodeId}/${child.childId}`;
             const params = buildChildUdsManifest(childNodeId, child.childId, child.caps);
+            if (!this.childManifestGate.shouldApply(child.childId, child.incarnation, params)) {
+              if (this.childManifestGate.sampleDue()) {
+                logger.debug("UDS child re-registered with an unchanged manifest \u2014 skipped", {
+                  meta: {
+                    nodeId: childNodeId,
+                    incarnation: child.incarnation,
+                    skipped: this.childManifestGate.skippedSince(),
+                    sampleEvery: exports.CHILD_MANIFEST_SKIP_SAMPLE
+                  }
+                });
+              }
+              return;
+            }
             this.onRegisterNode(params, childOwnerToken(childNodeId, child.incarnation));
             logger.info("UDS child registered \u2014 manifest applied", {
               meta: { nodeId: childNodeId, incarnation: child.incarnation }
@@ -408745,6 +409385,7 @@ var require_moleculer_service = __commonJS({
           registry.onChildGone((childId, incarnation) => {
             const hubNodeId = this.brokerSafe.nodeID;
             const childNodeId = `${hubNodeId}/${childId}`;
+            this.childManifestGate.forget(childId);
             logger.info("UDS child gone \u2014 removing from registry", {
               meta: { childId, incarnation }
             });
@@ -408979,12 +409620,13 @@ var require_moleculer_service = __commonJS({
         if (!registry)
           return;
         const registryKeyFor = (addonId) => isLocalChild ? addonId : `${addonId}@${nodeId}`;
+        const skipInfraFromRemote = (capName) => (0, system_1.isInfraCapability)(capName) && !isLocalChild;
         const appliedKeys = (manifest) => {
           const keys = /* @__PURE__ */ new Map();
           for (const addon of manifest) {
             const registryKey = registryKeyFor(addon.addonId);
             for (const capName of addon.capabilities) {
-              if ((0, system_1.isInfraCapability)(capName))
+              if (skipInfraFromRemote(capName))
                 continue;
               const capDef = registry.getDefinition(capName);
               if (!capDef)
@@ -409275,6 +409917,48 @@ var require_moleculer_service = __commonJS({
     function childOwnerToken(childNodeId, incarnation) {
       return `${childNodeId}#${incarnation}`;
     }
+    exports.CHILD_MANIFEST_SKIP_SAMPLE = 25;
+    function childManifestFingerprint(params) {
+      const addons = params.addons.map((addon) => `${addon.addonId}:${[...addon.capabilities].sort().join(",")}`).sort();
+      return `${params.nodeId}|${addons.join("|")}`;
+    }
+    var ChildManifestGate = class {
+      applied = /* @__PURE__ */ new Map();
+      skipped = 0;
+      sinceSample = 0;
+      /** True when this registration carries something the registry does not have. */
+      shouldApply(childId, incarnation, params) {
+        const fingerprint = childManifestFingerprint(params);
+        const previous = this.applied.get(childId);
+        if (previous !== void 0 && previous.incarnation === incarnation) {
+          if (previous.fingerprint === fingerprint) {
+            this.skipped += 1;
+            this.sinceSample += 1;
+            return false;
+          }
+        }
+        this.applied.set(childId, { incarnation, fingerprint });
+        return true;
+      }
+      /** Drop a child's record — its next register is a first register again. */
+      forget(childId) {
+        this.applied.delete(childId);
+      }
+      /** How many have been skipped since the last call. Reading RESETS it. */
+      skippedSince() {
+        const n = this.skipped;
+        this.skipped = 0;
+        return n;
+      }
+      /** True once every {@link CHILD_MANIFEST_SKIP_SAMPLE} skips. */
+      sampleDue() {
+        if (this.sinceSample < exports.CHILD_MANIFEST_SKIP_SAMPLE)
+          return false;
+        this.sinceSample = 0;
+        return true;
+      }
+    };
+    exports.ChildManifestGate = ChildManifestGate;
     function buildChildUdsManifest(nodeId, childId, caps) {
       const capsByAddon = /* @__PURE__ */ new Map();
       for (const cap of caps) {