camstack 1.2.52 → 1.2.54

package/dist/{launcher-7T4UUMOZ.js → launcher-QLUF66FQ.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-B-mBrEz9.js
-var require_dist_B_mBrEz9 = __commonJS({
-  "../system/dist/dist-B-mBrEz9.js"(exports) {
+// ../system/dist/dist-CImxMt5h.js
+var require_dist_CImxMt5h = __commonJS({
+  "../system/dist/dist-CImxMt5h.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -24231,6 +24231,40 @@ var require_dist_B_mBrEz9 = __commonJS({
       deviceSettingsSchema() {
         return null;
       }
+      /**
+      * INTEGRATION-LEVEL SETTINGS — declare which of this addon's global sections
+      * ARE the configuration of its integration.
+      *
+      * Return the `ConfigSection.id`s, from {@link globalSettingsSchema}, that an
+      * operator should find on the addon's integration page (System →
+      * Integrations → <name>) rather than only in the cluster-wide list of every
+      * addon. Empty (the default) means the addon has no integration-level
+      * settings and no such surface is offered — this is opt-in, because whether
+      * an addon's configuration IS its integration's configuration depends on the
+      * nature of the integration.
+      *
+      * WHAT THIS IS NOT. It is not a scope. The selected sections keep living in
+      * the ONE global schema, in the ONE addon store, written by the ONE
+      * `updateGlobalSettings` path. There is deliberately no
+      * `updateIntegrationSettings`: a second write path is how a surface acquires
+      * a second store key, and this repo has shipped that twice (`btmPath@hub`,
+      * D266). Selecting sections cannot introduce a key that selecting cannot.
+      *
+      * WHY IT IS A LIST OF SECTION IDS AND NOT A MARKER ON THE SECTION.
+      * `ConfigFieldBase` used to carry `scope?: 'device' | 'global'` and it was
+      * removed with the reason recorded at
+      * `packages/types/src/interfaces/config-ui.ts:249` — *"a field's scope is
+      * determined by WHICH schema it lives in, not by a field-level marker."* A
+      * marker sprinkled across sections also has to borrow a field that already
+      * means something else; borrowing `section.tab` put the literal word
+      * "integration" into an operator-facing tab bar, because `tab` means "how to
+      * GROUP this visually" and cannot also mean "where this lives" (D269
+      * supersedes D268). One declaration, in one place, next to the schema whose
+      * ids it names.
+      */
+      integrationSettingSections() {
+        return [];
+      }
       async getGlobalSettings(overlay, cap, nodeId) {
         const schema = this.globalSettingsSchema(cap);
         if (!schema) return { sections: [] };
@@ -24241,6 +24275,55 @@ var require_dist_B_mBrEz9 = __commonJS({
         } : projected);
       }
       /**
+      * The integration-level view of this addon's settings: exactly the sections
+      * named by {@link integrationSettingSections}, hydrated from the SAME store
+      * `getGlobalSettings` reads, and narrowed to cluster-scoped fields.
+      *
+      * Returns `null` when the addon declared nothing — an addon that opts out has
+      * no integration settings surface at all, rather than an empty one that reads
+      * as a failed load.
+      *
+      * Three properties hold BY CONSTRUCTION, which is why they are here in core
+      * and not in whichever UI happens to render this:
+      *
+      *  1. **One key.** The payload is a SUBSET of the global schema, so a field
+      *     shown here is the same field, with the same bare key, that the addon's
+      *     own page shows. There is no integration-specific writer — callers save
+      *     through `updateGlobalSettings` — so a second store key is unreachable,
+      *     not merely discouraged.
+      *  2. **No node scope.** `perNode: true` fields are DROPPED. Their store key
+      *     is `<key>@<nodeId>` and an integration is not a node; whichever node
+      *     such a field silently picked would be a wrong answer for the operator
+      *     who opened the page (D266).
+      *  3. **No silent typo.** A declared id that names no section throws. The
+      *     alternative — skip it — turns a rename into a surface that quietly
+      *     empties, which looks exactly like an addon with nothing to configure.
+      */
+      async getIntegrationSettings(nodeId) {
+        const declared = this.integrationSettingSections();
+        if (declared.length === 0) return null;
+        const schema = this.globalSettingsSchema();
+        if (!schema) throw new Error(`${this.constructor.name}: integrationSettingSections() names [${declared.join(", ")}] but globalSettingsSchema() returns null.`);
+        const byId = new Map(schema.sections.map((section) => [section.id, section]));
+        const sections = [];
+        for (const id of declared) {
+          const section = byId.get(id);
+          if (!section) throw new Error(`${this.constructor.name}: integrationSettingSections() names unknown section "${id}". Known sections: [${[...byId.keys()].join(", ")}].`);
+          const fields = dropPerNodeFields(section.fields);
+          if (fields.length === 0) continue;
+          sections.push({
+            ...section,
+            fields
+          });
+        }
+        if (sections.length === 0) return null;
+        const projected = await this.resolveGlobalStore(nodeId);
+        return hydrateSchema({
+          ...schema,
+          sections
+        }, projected);
+      }
+      /**
       * The raw addon store PROJECTED onto the target node's bare per-node keys:
       * every `perNode: true` field carries THAT node's scoped value on its bare
       * key (absent scoped key ⇒ key absent, so the schema `default` wins — no
@@ -24540,6 +24623,33 @@ var require_dist_B_mBrEz9 = __commonJS({
         return {};
       }
     };
+    function dropPerNodeFields(fields) {
+      const kept = [];
+      for (const field of fields) {
+        if (field.type === "group") {
+          const inner = dropPerNodeFields(field.fields);
+          if (inner.length > 0) kept.push({
+            ...field,
+            fields: inner
+          });
+          continue;
+        }
+        if (field.type === "sub-tabs") {
+          const tabs = field.tabs.map((tab) => ({
+            ...tab,
+            fields: dropPerNodeFields(tab.fields)
+          })).filter((tab) => tab.fields.length > 0);
+          if (tabs.length > 0) kept.push({
+            ...field,
+            tabs
+          });
+          continue;
+        }
+        if ("perNode" in field && field.perNode === true) continue;
+        kept.push(field);
+      }
+      return kept;
+    }
     function collectPerNodeFieldKeys(fields) {
       const collected = [];
       for (const field of fields) {
@@ -27528,6 +27638,10 @@ var require_dist_B_mBrEz9 = __commonJS({
           kind: "mutation",
           auth: "admin"
         }),
+        getIntegrationSettings: method(zod.z.object({
+          addonId: zod.z.string(),
+          nodeId: zod.z.string().optional()
+        }), SettingsSchemaWithValuesSchema.nullable()),
         getDeviceSettings: method(zod.z.object({
           addonId: zod.z.string(),
           deviceId: zod.z.number(),
@@ -32240,6 +32354,80 @@ var require_dist_B_mBrEz9 = __commonJS({
       /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
       mount: { kind: "skip" }
     };
+    var FailureReasonCountSchema = zod.z.object({
+      /**
+      * Why the attempt did not land, in the contributor's own vocabulary —
+      * `worker-lease-gone`, `queue-overflow`, `timeout`, `empty-read`. The same
+      * strings that already appear in this repo's logs and, where one exists, the
+      * same string the per-track `previewMissReason` records (D276): a second
+      * vocabulary for the same loss would make the row and the counter
+      * un-joinable.
+      */
+      reason: zod.z.string(),
+      count: zod.z.number().int().nonnegative()
+    });
+    var FailureContributionSchema = zod.z.object({
+      /**
+      * The failing path — `enrichment-crop`, `inference`, `plate-ocr`,
+      * `person-over-vehicle`. Free text, for the reason `load-contribution` keeps
+      * `unit` free: the families are owned by different addons and a shared enum
+      * is a central list that rots invisibly.
+      */
+      family: zod.z.string(),
+      /**
+      * The NUMERIC device id — the same value every log line carries as
+      * `tags.deviceId`. Never nullable and never absent: a contributor that
+      * cannot name the camera must not emit the entry, because a fleet total
+      * cannot answer the only question anybody asks of this surface.
+      */
+      deviceId: zod.z.number().int().positive(),
+      /**
+      * A second dimension inside the family: the model / step id for an inference
+      * timeout, so "which camera AND which model" is one read. Absent when the
+      * family has a single variant.
+      */
+      variant: zod.z.string().optional(),
+      /**
+      * Epoch ms this counter started — the INCARNATION MARKER. A consumer
+      * differencing two reads must drop the interval when it changes, because the
+      * counter restarted from zero in a respawned runner. Same discipline as
+      * `LoadContribution.startedAtMs`.
+      */
+      sinceMs: zod.z.number(),
+      /** Epoch ms it was read. `atMs - sinceMs` is the interval this covers. */
+      atMs: zod.z.number(),
+      /**
+      * THE DENOMINATOR — every attempt on this path for this camera in the
+      * window. A failure count published without it is the mistake this schema
+      * exists to make impossible.
+      */
+      attempts: zod.z.number().int().nonnegative(),
+      /** Attempts that landed. `attempts - succeeded` is the loss. */
+      succeeded: zod.z.number().int().nonnegative(),
+      /** The loss, partitioned. Sums to `attempts - succeeded`. */
+      reasons: zod.z.array(FailureReasonCountSchema).readonly()
+    });
+    var failureContributionCapability = {
+      name: "failure-contribution",
+      scope: "system",
+      mode: "collection",
+      internal: true,
+      methods: {
+        /**
+        * This addon's per-camera failure counters, read live from bounded in-RAM
+        * state it already keeps. Inert: no persistence, no sampling, no timer.
+        *
+        * READING NEVER RESETS. The counters are CUMULATIVE since `sinceMs`, and a
+        * consumer that wants a rate differences two reads. A draining read would
+        * make two operators with the page open each destroy half of the other's
+        * numbers, and `load-contribution` already settled the same question the
+        * same way for `cpuSeconds`.
+        */
+        list: method(zod.z.void(), zod.z.array(FailureContributionSchema).readonly())
+      },
+      /** In-process only — enumerated through `addons.listCapabilityProviders`. */
+      mount: { kind: "skip" }
+    };
     var LoadContributionSchema = zod.z.object({
       role: zod.z.enum([
         "decode",
@@ -36226,6 +36414,20 @@ var require_dist_B_mBrEz9 = __commonJS({
       * `=== true` and render nothing otherwise — never infer "no rider".
       */
       hasRider: zod.z.boolean().optional(),
+      /**
+      * WHY this track ended without a NATIVE best-shot tile
+      * ([D276](../decisions/adr-0276-a-stand-in-tile-is-provisional-and-a-close-says-why.md)) —
+      * a composed token line (`no-key-frame capture=keyframe:native-missx4`,
+      * `derive-returned-null tile=standin`, …) written at close and CLEARED by
+      * the late-keyFrame upgrade when a native tile lands after all. The
+      * operator-facing answer to "perché manca l'immagine?" on a track whose
+      * tile is a face/plate stand-in, a raster crop, or an icon.
+      *
+      * **Absent ≠ "missed silently"**: a row written before the column, a hub
+      * that predates the field, and every track whose tile landed native all
+      * omit it. Render nothing when absent.
+      */
+      previewMissReason: zod.z.string().optional(),
       ...TrackFlagFields,
       ...TrackRetrainFields
     });
@@ -47809,6 +48011,7 @@ var require_dist_B_mBrEz9 = __commonJS({
       channels: zod.z.array(LogChannelWindowPatchSchema).readonly().optional()
     });
     var ReportedLoadContributionSchema = LoadContributionSchema.extend({ addonId: zod.z.string() });
+    var ReportedFailureContributionSchema = FailureContributionSchema.extend({ addonId: zod.z.string() });
     var GetLoggingSettingsInputSchema = zod.z.object({
       scopeNodeId: zod.z.string().optional(),
       /**
@@ -47918,6 +48121,28 @@ var require_dist_B_mBrEz9 = __commonJS({
         */
         getLoadContributions: method(zod.z.void(), zod.z.array(ReportedLoadContributionSchema).readonly(), { auth: "admin" }),
         /**
+        * Every `failure-contribution` an addon on this cluster reports — per
+        * camera, per reason, **with the denominator attached**.
+        *
+        * This is the surface the operator asked for on 2026-08-28 (*"possiamo
+        * armare questi errori intanto? Così al prossimo giro ricontrolliamo tutti
+        * questi punti"*). Before it, four live failure modes could only be counted
+        * by grepping Loki and hand-correlating timestamps, which is exactly how a
+        * 22% thumbnail gap and a 3-hour media blackout were diagnosed — twice.
+        *
+        * Read it as a RATIO, never as a count. `attempts` is on every entry
+        * because the count on its own lies: `enrichment crop native miss` read as
+        * "35x worse than yesterday" and was flat across twelve hours once divided
+        * by the successes on the same path.
+        *
+        * The counters are CUMULATIVE since each entry's `sinceMs`. Reading does
+        * not reset them, and `sinceMs` changing means the reporting runner
+        * respawned — a consumer differencing two reads drops that interval.
+        *
+        * Admin-only: the rows name cameras and the paths that fail on them.
+        */
+        getFailureContributions: method(zod.z.void(), zod.z.array(ReportedFailureContributionSchema).readonly(), { auth: "admin" }),
+        /**
         * The logging settings document — levels and armed diagnostics — resolved
         * for `nodeId`, or for the cluster when `nodeId` is absent.
         *
@@ -49322,6 +49547,7 @@ var require_dist_B_mBrEz9 = __commonJS({
       eventEmitterCapability,
       eventsCapability,
       faceGalleryCapability,
+      failureContributionCapability,
       fanControlCapability,
       featureProbeCapability,
       filesystemBrowseCapability,
@@ -49658,6 +49884,12 @@ var require_dist_B_mBrEz9 = __commonJS({
         addonId: null,
         access: "view"
       },
+      "addonSettings.getIntegrationSettings": {
+        capName: "addon-settings",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "addonSettings.updateDeviceSettings": {
         capName: "addon-settings",
         capScope: "system",
@@ -51320,6 +51552,12 @@ var require_dist_B_mBrEz9 = __commonJS({
         addonId: null,
         access: "create"
       },
+      "failureContribution.list": {
+        capName: "failure-contribution",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "fanControl.setDirection": {
         capName: "fan-control",
         capScope: "device",
@@ -54626,6 +54864,12 @@ var require_dist_B_mBrEz9 = __commonJS({
         addonId: null,
         access: "create"
       },
+      "system.getFailureContributions": {
+        capName: "system",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "system.getLoadContributions": {
         capName: "system",
         capScope: "system",
@@ -58395,7 +58639,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B_mBrEz9();
+    var require_dist10 = require_dist_CImxMt5h();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -59214,7 +59458,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B_mBrEz9();
+    var require_dist10 = require_dist_CImxMt5h();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -59308,7 +59552,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B_mBrEz9();
+    var require_dist10 = require_dist_CImxMt5h();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -60205,28 +60449,88 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-Davtjo5p.js
-var require_retired_settings_keys_Davtjo5p = __commonJS({
-  "../system/dist/retired-settings-keys-Davtjo5p.js"(exports) {
+// ../system/dist/retired-settings-keys-C7gLUS3x.js
+var require_retired_settings_keys_C7gLUS3x = __commonJS({
+  "../system/dist/retired-settings-keys-C7gLUS3x.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_B_mBrEz9();
+    var require_dist10 = require_dist_CImxMt5h();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
     }
-    var RETIRED_SETTINGS_KEYS = [{
-      namespace: "detection-pipeline",
-      collection: "addon-settings",
-      row: "root",
-      keys: ["pipelineSteps", "pipelineEngine"],
-      perNodeKeys: [
-        "engineRuntime",
-        "engineBackend",
-        "engineDevice",
-        "probedBestEngine"
-      ],
-      reason: "global step/engine seed and the per-node engine cascade \u2014 both removed; the live per-camera dispatch path never read either"
-    }];
+    var RETIRED_SETTINGS_KEYS = [
+      {
+        namespace: "detection-pipeline",
+        collection: "addon-settings",
+        row: "root",
+        keys: ["pipelineSteps", "pipelineEngine"],
+        perNodeKeys: [
+          "engineRuntime",
+          "engineBackend",
+          "engineDevice",
+          "probedBestEngine"
+        ],
+        reason: "global step/engine seed and the per-node engine cascade \u2014 both removed; the live per-camera dispatch path never read either"
+      },
+      {
+        namespace: "pipeline-orchestrator",
+        collection: "addon-settings",
+        row: "root",
+        keys: [
+          "enabledNodes",
+          "enabledDecoderNodes",
+          "enabledAudioNodes",
+          "remoteSourcingNodes",
+          "nativeLeaseTtlMs"
+        ],
+        perNodeKeys: ["backend"],
+        reason: 'the pre-singleton "enabled nodes" role model (node capability now lives per node in agent-settings and is derived by NodeTopology.refresh, never read from this row), `nativeLeaseTtlMs` superseded by `nativeLeaseActivityMs`, and the decoder `backend` selector whose resolver returns DEFAULT_DECODER_BACKEND unconditionally (decoder-backend.ts)'
+      },
+      {
+        namespace: "stream-broker",
+        collection: "addon-settings",
+        row: "root",
+        keys: [
+          "maxDecodeFps",
+          "initialReconnectDelayMs",
+          "maxReconnectDelayMs"
+        ],
+        perNodeKeys: [],
+        reason: "three form knobs deleted 2026-08-28 (D272): nothing capped decode fps, and the reconnect ladder has always run on the INITIAL/MAX_RECONNECT_DELAY_MS constants"
+      },
+      {
+        namespace: "embedding-encoder",
+        collection: "addon-settings",
+        row: "root",
+        keys: ["runtime", "backend"],
+        perNodeKeys: [],
+        reason: "two selects deleted 2026-08-28 (D272); their only reference was a withTags log field, and the CUDA/CoreML options named acceleration that has never existed \u2014 embedding inference is always ONNX in the embedded Python"
+      },
+      {
+        namespace: "audio-analyzer",
+        collection: "addon-settings",
+        row: "root",
+        keys: ["selectedAudioModel", "probedBestAudioBackend"],
+        perNodeKeys: [],
+        reason: "`selectedAudioModel` deleted 2026-08-28 (D272) \u2014 createAudioPipeline takes a backend and no model id, so it never reached inference; the BARE `probedBestAudioBackend` is pre-perNode residue that projectStore already drops (no bare fallback), so no node can ever read it"
+      },
+      {
+        namespace: "decoder-nodeav",
+        collection: "addon-settings",
+        row: "root",
+        keys: ["probedBestHwaccel"],
+        perNodeKeys: [],
+        reason: "bare pre-perNode residue \u2014 the live probe result is `probedBestHwaccel@<nodeId>` and `projectStore` deliberately drops the bare key, so nothing can read it"
+      },
+      {
+        namespace: "pipeline-analytics",
+        collection: "addon-settings",
+        row: "root",
+        keys: ["mediaAttachPolicy"],
+        perNodeKeys: [],
+        reason: "deleted 2026-08-28 (D272) \u2014 absent from MediaSettingsSchema, so the value was never even resolved, let alone read"
+      }
+    ];
     var RETIRED_SETTINGS_ROWS = [
       {
         collection: "addon-settings",
@@ -62363,8 +62667,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B_mBrEz9();
-    var require_retired_settings_keys = require_retired_settings_keys_Davtjo5p();
+    var require_dist10 = require_dist_CImxMt5h();
+    var require_retired_settings_keys = require_retired_settings_keys_C7gLUS3x();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -67113,7 +67417,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B_mBrEz9();
+    var require_dist10 = require_dist_CImxMt5h();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -67250,7 +67554,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B_mBrEz9();
+    var require_dist10 = require_dist_CImxMt5h();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -67440,7 +67744,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B_mBrEz9();
+    var require_dist10 = require_dist_CImxMt5h();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -75253,7 +75557,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B_mBrEz9();
+    var require_dist10 = require_dist_CImxMt5h();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -75818,7 +76122,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B_mBrEz9();
+    var require_dist10 = require_dist_CImxMt5h();
     var node_fs_promises = __require("fs/promises");
     var node_child_process = __require("child_process");
     var node_util = __require("util");
@@ -77775,7 +78079,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B_mBrEz9();
+    var require_dist10 = require_dist_CImxMt5h();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -78891,8 +79195,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B_mBrEz9();
-    var require_retired_settings_keys = require_retired_settings_keys_Davtjo5p();
+    var require_dist10 = require_dist_CImxMt5h();
+    var require_retired_settings_keys = require_retired_settings_keys_C7gLUS3x();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -81171,7 +81475,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B_mBrEz9();
+    var require_dist10 = require_dist_CImxMt5h();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -83052,7 +83356,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B_mBrEz9();
+    var require_dist10 = require_dist_CImxMt5h();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -101113,7 +101417,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B_mBrEz9();
+    var require_dist10 = require_dist_CImxMt5h();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -103056,9 +103360,9 @@ var require_event_category_BaEgqJNv = __commonJS({
   }
 });
 
-// ../types/dist/sleep-9d8tJRbO.js
-var require_sleep_9d8tJRbO = __commonJS({
-  "../types/dist/sleep-9d8tJRbO.js"(exports) {
+// ../types/dist/sleep-DUxF5DdC.js
+var require_sleep_DUxF5DdC = __commonJS({
+  "../types/dist/sleep-DUxF5DdC.js"(exports) {
     "use strict";
     var require_event_category = require_event_category_BaEgqJNv();
     var zod = require_zod();
@@ -103547,6 +103851,40 @@ var require_sleep_9d8tJRbO = __commonJS({
       deviceSettingsSchema() {
         return null;
       }
+      /**
+      * INTEGRATION-LEVEL SETTINGS — declare which of this addon's global sections
+      * ARE the configuration of its integration.
+      *
+      * Return the `ConfigSection.id`s, from {@link globalSettingsSchema}, that an
+      * operator should find on the addon's integration page (System →
+      * Integrations → <name>) rather than only in the cluster-wide list of every
+      * addon. Empty (the default) means the addon has no integration-level
+      * settings and no such surface is offered — this is opt-in, because whether
+      * an addon's configuration IS its integration's configuration depends on the
+      * nature of the integration.
+      *
+      * WHAT THIS IS NOT. It is not a scope. The selected sections keep living in
+      * the ONE global schema, in the ONE addon store, written by the ONE
+      * `updateGlobalSettings` path. There is deliberately no
+      * `updateIntegrationSettings`: a second write path is how a surface acquires
+      * a second store key, and this repo has shipped that twice (`btmPath@hub`,
+      * D266). Selecting sections cannot introduce a key that selecting cannot.
+      *
+      * WHY IT IS A LIST OF SECTION IDS AND NOT A MARKER ON THE SECTION.
+      * `ConfigFieldBase` used to carry `scope?: 'device' | 'global'` and it was
+      * removed with the reason recorded at
+      * `packages/types/src/interfaces/config-ui.ts:249` — *"a field's scope is
+      * determined by WHICH schema it lives in, not by a field-level marker."* A
+      * marker sprinkled across sections also has to borrow a field that already
+      * means something else; borrowing `section.tab` put the literal word
+      * "integration" into an operator-facing tab bar, because `tab` means "how to
+      * GROUP this visually" and cannot also mean "where this lives" (D269
+      * supersedes D268). One declaration, in one place, next to the schema whose
+      * ids it names.
+      */
+      integrationSettingSections() {
+        return [];
+      }
       async getGlobalSettings(overlay, cap, nodeId) {
         const schema = this.globalSettingsSchema(cap);
         if (!schema) return { sections: [] };
@@ -103557,6 +103895,55 @@ var require_sleep_9d8tJRbO = __commonJS({
         } : projected);
       }
       /**
+      * The integration-level view of this addon's settings: exactly the sections
+      * named by {@link integrationSettingSections}, hydrated from the SAME store
+      * `getGlobalSettings` reads, and narrowed to cluster-scoped fields.
+      *
+      * Returns `null` when the addon declared nothing — an addon that opts out has
+      * no integration settings surface at all, rather than an empty one that reads
+      * as a failed load.
+      *
+      * Three properties hold BY CONSTRUCTION, which is why they are here in core
+      * and not in whichever UI happens to render this:
+      *
+      *  1. **One key.** The payload is a SUBSET of the global schema, so a field
+      *     shown here is the same field, with the same bare key, that the addon's
+      *     own page shows. There is no integration-specific writer — callers save
+      *     through `updateGlobalSettings` — so a second store key is unreachable,
+      *     not merely discouraged.
+      *  2. **No node scope.** `perNode: true` fields are DROPPED. Their store key
+      *     is `<key>@<nodeId>` and an integration is not a node; whichever node
+      *     such a field silently picked would be a wrong answer for the operator
+      *     who opened the page (D266).
+      *  3. **No silent typo.** A declared id that names no section throws. The
+      *     alternative — skip it — turns a rename into a surface that quietly
+      *     empties, which looks exactly like an addon with nothing to configure.
+      */
+      async getIntegrationSettings(nodeId) {
+        const declared = this.integrationSettingSections();
+        if (declared.length === 0) return null;
+        const schema = this.globalSettingsSchema();
+        if (!schema) throw new Error(`${this.constructor.name}: integrationSettingSections() names [${declared.join(", ")}] but globalSettingsSchema() returns null.`);
+        const byId = new Map(schema.sections.map((section) => [section.id, section]));
+        const sections = [];
+        for (const id of declared) {
+          const section = byId.get(id);
+          if (!section) throw new Error(`${this.constructor.name}: integrationSettingSections() names unknown section "${id}". Known sections: [${[...byId.keys()].join(", ")}].`);
+          const fields = dropPerNodeFields(section.fields);
+          if (fields.length === 0) continue;
+          sections.push({
+            ...section,
+            fields
+          });
+        }
+        if (sections.length === 0) return null;
+        const projected = await this.resolveGlobalStore(nodeId);
+        return hydrateSchema({
+          ...schema,
+          sections
+        }, projected);
+      }
+      /**
       * The raw addon store PROJECTED onto the target node's bare per-node keys:
       * every `perNode: true` field carries THAT node's scoped value on its bare
       * key (absent scoped key ⇒ key absent, so the schema `default` wins — no
@@ -103856,6 +104243,33 @@ var require_sleep_9d8tJRbO = __commonJS({
         return {};
       }
     };
+    function dropPerNodeFields(fields) {
+      const kept = [];
+      for (const field of fields) {
+        if (field.type === "group") {
+          const inner = dropPerNodeFields(field.fields);
+          if (inner.length > 0) kept.push({
+            ...field,
+            fields: inner
+          });
+          continue;
+        }
+        if (field.type === "sub-tabs") {
+          const tabs = field.tabs.map((tab) => ({
+            ...tab,
+            fields: dropPerNodeFields(tab.fields)
+          })).filter((tab) => tab.fields.length > 0);
+          if (tabs.length > 0) kept.push({
+            ...field,
+            tabs
+          });
+          continue;
+        }
+        if ("perNode" in field && field.perNode === true) continue;
+        kept.push(field);
+      }
+      return kept;
+    }
     function collectPerNodeFieldKeys(fields) {
       const collected = [];
       for (const field of fields) {
@@ -106612,7 +107026,7 @@ var require_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_9d8tJRbO();
+    var require_sleep = require_sleep_DUxF5DdC();
     var require_err_msg = require_err_msg_COpsHMw2();
     var CAP_INPUT_DEFAULTS = Object.freeze({
       "addons": { "getLogs": { "limit": 100 } },
@@ -106891,6 +107305,7 @@ var require_addon = __commonJS({
       "data-store-provider": ["histogram", "query"],
       "device-export": ["listExposedDevices", "listSupportedDeviceKinds"],
       "device-provider": ["discoverDevices", "getDevices"],
+      "failure-contribution": ["list"],
       "llm": [
         "getDefaults",
         "getUsage",
@@ -113490,12 +113905,12 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/manifest-python-deps-BV_Cy99l.js
-var require_manifest_python_deps_BV_Cy99l = __commonJS({
-  "../system/dist/manifest-python-deps-BV_Cy99l.js"(exports) {
+// ../system/dist/manifest-python-deps-BaVekjRY.js
+var require_manifest_python_deps_BaVekjRY = __commonJS({
+  "../system/dist/manifest-python-deps-BaVekjRY.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    require_dist_B_mBrEz9();
+    require_dist_CImxMt5h();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var _camstack_types_node = require_node();
@@ -124610,7 +125025,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B_mBrEz9();
+    var require_dist10 = require_dist_CImxMt5h();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -124636,7 +125051,7 @@ var require_dist3 = __commonJS({
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_file_data_plane = require_file_data_plane_DO8KbxCe();
     var require_tls$1 = require_tls_u8QCJCFE();
-    var require_manifest_python_deps = require_manifest_python_deps_BV_Cy99l();
+    var require_manifest_python_deps = require_manifest_python_deps_BaVekjRY();
     var require_resource_monitor = require_resource_monitor_CdnzxBLP();
     var require_custom_action_registry = require_custom_action_registry_jY0NOZK8();
     var zod = require_zod();
@@ -205352,7 +205767,7 @@ var require_dist4 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_9d8tJRbO();
+    var require_sleep = require_sleep_DUxF5DdC();
     var require_canonical_hash = require_canonical_hash_DNV8S5ET();
     var require_enums2 = require_enums();
     var require_err_msg = require_err_msg_COpsHMw2();
@@ -207228,6 +207643,97 @@ var require_dist4 = __commonJS({
       }
       return [...buckets.values()].toSorted((a, b) => a.atMs - b.atMs);
     }
+    var MAX_REASONS_PER_KEY = 16;
+    var MAX_KEYS = 1024;
+    var OVERFLOW_REASON = "other";
+    function counterKey(deviceId, family, variant) {
+      return variant === void 0 ? `${deviceId}\0${family}` : `${deviceId}\0${family}\0${variant}`;
+    }
+    var FailureCounters = class {
+      maxKeys;
+      maxReasons;
+      counters = /* @__PURE__ */ new Map();
+      refused = 0;
+      constructor(maxKeys = MAX_KEYS, maxReasons = 16) {
+        this.maxKeys = maxKeys;
+        this.maxReasons = maxReasons;
+      }
+      /**
+      * Counters refused because {@link MAX_KEYS} was already held.
+      *
+      * Cumulative for the life of the instance: a bound that bit is a fact about
+      * the deployment, and a surface that hid it would under-report a fleet
+      * precisely when the fleet got large enough to matter.
+      */
+      get keysRefused() {
+        return this.refused;
+      }
+      /** Counters currently held. */
+      get size() {
+        return this.counters.size;
+      }
+      /**
+      * Fold one observation in.
+      *
+      * A non-positive or non-integer `deviceId` is REFUSED rather than bucketed:
+      * see the module docblock — an entry that cannot name its camera is worse
+      * than no entry.
+      */
+      note(observation, nowMs) {
+        if (!Number.isInteger(observation.deviceId) || observation.deviceId <= 0) return;
+        const key = counterKey(observation.deviceId, observation.family, observation.variant);
+        let counter = this.counters.get(key);
+        if (counter === void 0) {
+          if (this.counters.size >= this.maxKeys) {
+            this.refused += 1;
+            return;
+          }
+          counter = {
+            deviceId: observation.deviceId,
+            family: observation.family,
+            variant: observation.variant,
+            sinceMs: nowMs,
+            attempts: 0,
+            succeeded: 0,
+            reasons: /* @__PURE__ */ new Map()
+          };
+          this.counters.set(key, counter);
+        }
+        counter.attempts += 1;
+        if (observation.reason === void 0) {
+          counter.succeeded += 1;
+          return;
+        }
+        const reason = counter.reasons.has(observation.reason) || counter.reasons.size < this.maxReasons ? observation.reason : OVERFLOW_REASON;
+        counter.reasons.set(reason, (counter.reasons.get(reason) ?? 0) + 1);
+      }
+      /** Read every counter. Never mutates — see the module docblock. */
+      snapshot(nowMs) {
+        const out = [];
+        for (const counter of this.counters.values()) out.push({
+          deviceId: counter.deviceId,
+          family: counter.family,
+          ...counter.variant !== void 0 ? { variant: counter.variant } : {},
+          sinceMs: counter.sinceMs,
+          atMs: nowMs,
+          attempts: counter.attempts,
+          succeeded: counter.succeeded,
+          reasons: [...counter.reasons.entries()].map(([reason, count]) => ({
+            reason,
+            count
+          })).toSorted((a, b) => b.count - a.count)
+        });
+        return out;
+      }
+      /** Drop everything (host disposal). */
+      clear() {
+        this.counters.clear();
+      }
+    };
+    function failureRate(sample) {
+      if (sample.attempts <= 0) return null;
+      return (sample.attempts - sample.succeeded) / sample.attempts;
+    }
     var FORMAT_KEYS = [
       "onnx",
       "coreml",
@@ -209005,6 +209511,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           kind: "mutation",
           auth: "admin"
         }),
+        getIntegrationSettings: require_sleep.method(zod.z.object({
+          addonId: zod.z.string(),
+          nodeId: zod.z.string().optional()
+        }), SettingsSchemaWithValuesSchema.nullable()),
         getDeviceSettings: require_sleep.method(zod.z.object({
           addonId: zod.z.string(),
           deviceId: zod.z.number(),
@@ -209284,8 +209794,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     ];
     var DEFAULT_AUDIO_ANALYZER_CONFIG = {
       audioBackend: "auto",
-      probedBestAudioBackend: "",
-      selectedAudioModel: ""
+      probedBestAudioBackend: ""
     };
     var audioAnalyzerCapability = {
       name: "audio-analyzer",
@@ -213853,6 +214362,80 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
       mount: { kind: "skip" }
     };
+    var FailureReasonCountSchema = zod.z.object({
+      /**
+      * Why the attempt did not land, in the contributor's own vocabulary —
+      * `worker-lease-gone`, `queue-overflow`, `timeout`, `empty-read`. The same
+      * strings that already appear in this repo's logs and, where one exists, the
+      * same string the per-track `previewMissReason` records (D276): a second
+      * vocabulary for the same loss would make the row and the counter
+      * un-joinable.
+      */
+      reason: zod.z.string(),
+      count: zod.z.number().int().nonnegative()
+    });
+    var FailureContributionSchema = zod.z.object({
+      /**
+      * The failing path — `enrichment-crop`, `inference`, `plate-ocr`,
+      * `person-over-vehicle`. Free text, for the reason `load-contribution` keeps
+      * `unit` free: the families are owned by different addons and a shared enum
+      * is a central list that rots invisibly.
+      */
+      family: zod.z.string(),
+      /**
+      * The NUMERIC device id — the same value every log line carries as
+      * `tags.deviceId`. Never nullable and never absent: a contributor that
+      * cannot name the camera must not emit the entry, because a fleet total
+      * cannot answer the only question anybody asks of this surface.
+      */
+      deviceId: zod.z.number().int().positive(),
+      /**
+      * A second dimension inside the family: the model / step id for an inference
+      * timeout, so "which camera AND which model" is one read. Absent when the
+      * family has a single variant.
+      */
+      variant: zod.z.string().optional(),
+      /**
+      * Epoch ms this counter started — the INCARNATION MARKER. A consumer
+      * differencing two reads must drop the interval when it changes, because the
+      * counter restarted from zero in a respawned runner. Same discipline as
+      * `LoadContribution.startedAtMs`.
+      */
+      sinceMs: zod.z.number(),
+      /** Epoch ms it was read. `atMs - sinceMs` is the interval this covers. */
+      atMs: zod.z.number(),
+      /**
+      * THE DENOMINATOR — every attempt on this path for this camera in the
+      * window. A failure count published without it is the mistake this schema
+      * exists to make impossible.
+      */
+      attempts: zod.z.number().int().nonnegative(),
+      /** Attempts that landed. `attempts - succeeded` is the loss. */
+      succeeded: zod.z.number().int().nonnegative(),
+      /** The loss, partitioned. Sums to `attempts - succeeded`. */
+      reasons: zod.z.array(FailureReasonCountSchema).readonly()
+    });
+    var failureContributionCapability = {
+      name: "failure-contribution",
+      scope: "system",
+      mode: "collection",
+      internal: true,
+      methods: {
+        /**
+        * This addon's per-camera failure counters, read live from bounded in-RAM
+        * state it already keeps. Inert: no persistence, no sampling, no timer.
+        *
+        * READING NEVER RESETS. The counters are CUMULATIVE since `sinceMs`, and a
+        * consumer that wants a rate differences two reads. A draining read would
+        * make two operators with the page open each destroy half of the other's
+        * numbers, and `load-contribution` already settled the same question the
+        * same way for `cpuSeconds`.
+        */
+        list: require_sleep.method(zod.z.void(), zod.z.array(FailureContributionSchema).readonly())
+      },
+      /** In-process only — enumerated through `addons.listCapabilityProviders`. */
+      mount: { kind: "skip" }
+    };
     var LOAD_CONTRIBUTION_ROLES = [
       "decode",
       "transcode",
@@ -218644,6 +219227,20 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * `=== true` and render nothing otherwise — never infer "no rider".
       */
       hasRider: zod.z.boolean().optional(),
+      /**
+      * WHY this track ended without a NATIVE best-shot tile
+      * ([D276](../decisions/adr-0276-a-stand-in-tile-is-provisional-and-a-close-says-why.md)) —
+      * a composed token line (`no-key-frame capture=keyframe:native-missx4`,
+      * `derive-returned-null tile=standin`, …) written at close and CLEARED by
+      * the late-keyFrame upgrade when a native tile lands after all. The
+      * operator-facing answer to "perché manca l'immagine?" on a track whose
+      * tile is a face/plate stand-in, a raster crop, or an icon.
+      *
+      * **Absent ≠ "missed silently"**: a row written before the column, a hub
+      * that predates the field, and every track whose tile landed native all
+      * omit it. Render nothing when absent.
+      */
+      previewMissReason: zod.z.string().optional(),
       ...TrackFlagFields,
       ...TrackRetrainFields
     });
@@ -230418,6 +231015,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       channels: zod.z.array(LogChannelWindowPatchSchema).readonly().optional()
     });
     var ReportedLoadContributionSchema = LoadContributionSchema.extend({ addonId: zod.z.string() });
+    var ReportedFailureContributionSchema = FailureContributionSchema.extend({ addonId: zod.z.string() });
     var GetLoggingSettingsInputSchema = zod.z.object({
       scopeNodeId: zod.z.string().optional(),
       /**
@@ -230527,6 +231125,28 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         */
         getLoadContributions: require_sleep.method(zod.z.void(), zod.z.array(ReportedLoadContributionSchema).readonly(), { auth: "admin" }),
         /**
+        * Every `failure-contribution` an addon on this cluster reports — per
+        * camera, per reason, **with the denominator attached**.
+        *
+        * This is the surface the operator asked for on 2026-08-28 (*"possiamo
+        * armare questi errori intanto? Così al prossimo giro ricontrolliamo tutti
+        * questi punti"*). Before it, four live failure modes could only be counted
+        * by grepping Loki and hand-correlating timestamps, which is exactly how a
+        * 22% thumbnail gap and a 3-hour media blackout were diagnosed — twice.
+        *
+        * Read it as a RATIO, never as a count. `attempts` is on every entry
+        * because the count on its own lies: `enrichment crop native miss` read as
+        * "35x worse than yesterday" and was flat across twelve hours once divided
+        * by the successes on the same path.
+        *
+        * The counters are CUMULATIVE since each entry's `sinceMs`. Reading does
+        * not reset them, and `sinceMs` changing means the reporting runner
+        * respawned — a consumer differencing two reads drops that interval.
+        *
+        * Admin-only: the rows name cameras and the paths that fail on them.
+        */
+        getFailureContributions: require_sleep.method(zod.z.void(), zod.z.array(ReportedFailureContributionSchema).readonly(), { auth: "admin" }),
+        /**
         * The logging settings document — levels and armed diagnostics — resolved
         * for `nodeId`, or for the cluster when `nodeId` is absent.
         *
@@ -234085,6 +234705,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       eventEmitter: "event-emitter",
       events: "events",
       faceGallery: "face-gallery",
+      failureContribution: "failure-contribution",
       fanControl: "fan-control",
       featureProbe: "feature-probe",
       filesystemBrowse: "filesystem-browse",
@@ -234409,6 +235030,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         key: "faceGallery",
         name: "face-gallery"
       },
+      {
+        key: "failureContribution",
+        name: "failure-contribution"
+      },
       {
         key: "fanControl",
         name: "fan-control"
@@ -234844,6 +235469,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       eventEmitterCapability,
       eventsCapability,
       faceGalleryCapability,
+      failureContributionCapability,
       fanControlCapability,
       featureProbeCapability,
       filesystemBrowseCapability,
@@ -235180,6 +235806,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "addonSettings.getIntegrationSettings": {
+        capName: "addon-settings",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "addonSettings.updateDeviceSettings": {
         capName: "addon-settings",
         capScope: "system",
@@ -236842,6 +237474,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "failureContribution.list": {
+        capName: "failure-contribution",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "fanControl.setDirection": {
         capName: "fan-control",
         capScope: "device",
@@ -240148,6 +240786,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "system.getFailureContributions": {
+        capName: "system",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "system.getLoadContributions": {
         capName: "system",
         capScope: "system",
@@ -240837,6 +241481,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "embedding-encoder",
       "events",
       "face-gallery",
+      "failure-contribution",
       "fan-control",
       "filesystem-browse",
       "humidifier",
@@ -241001,6 +241646,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "device-state",
       "embedding-encoder",
       "face-gallery",
+      "failure-contribution",
       "filesystem-browse",
       "integrations",
       "llm",
@@ -243382,7 +244028,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         },
         addonSettings: {
           getGlobalSettings: (input) => dispatch("addonSettings", "getGlobalSettings", "query", input),
-          updateGlobalSettings: (input) => dispatch("addonSettings", "updateGlobalSettings", "mutation", input)
+          updateGlobalSettings: (input) => dispatch("addonSettings", "updateGlobalSettings", "mutation", input),
+          getIntegrationSettings: (input) => dispatch("addonSettings", "getIntegrationSettings", "query", input)
         },
         addonWidgets: { listWidgets: (input) => dispatch("addonWidgets", "listWidgets", "query", input) },
         alerts: {
@@ -243899,6 +244546,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           detectSiteLocation: (input) => dispatch("system", "detectSiteLocation", "mutation", input),
           getRequestCensus: (input) => dispatch("system", "getRequestCensus", "query", input),
           getLoadContributions: (input) => dispatch("system", "getLoadContributions", "query", input),
+          getFailureContributions: (input) => dispatch("system", "getFailureContributions", "query", input),
           getLoggingSettings: (input) => dispatch("system", "getLoggingSettings", "query", input),
           setLoggingSettings: (input) => dispatch("system", "setLoggingSettings", "mutation", input)
         },
@@ -246941,6 +247589,9 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.ExpressionSourceSchema = ExpressionSourceSchema;
     exports.FIRST_LEVEL_MACRO_CLASSES = FIRST_LEVEL_MACRO_CLASSES;
     exports.FULL_IMAGE_BBOX = FULL_IMAGE_BBOX;
+    exports.FailureContributionSchema = FailureContributionSchema;
+    exports.FailureCounters = FailureCounters;
+    exports.FailureReasonCountSchema = FailureReasonCountSchema;
     exports.FanControlStatusSchema = FanControlStatusSchema;
     exports.FanDirectionSchema = FanDirectionSchema;
     exports.FeatureManifestSchema = FeatureManifestSchema;
@@ -247056,6 +247707,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.MAX_EXPRESSION_CALL_ARGS = MAX_EXPRESSION_CALL_ARGS;
     exports.MAX_EXPRESSION_EVAL_STEPS = MAX_EXPRESSION_EVAL_STEPS;
     exports.MAX_EXPRESSION_SOURCE_LENGTH = MAX_EXPRESSION_SOURCE_LENGTH;
+    exports.MAX_KEYS = MAX_KEYS;
+    exports.MAX_REASONS_PER_KEY = MAX_REASONS_PER_KEY;
     exports.MAX_SENSOR_TRIGGER_DEVICES = MAX_SENSOR_TRIGGER_DEVICES;
     exports.METHOD_ACCESS_MAP = METHOD_ACCESS_MAP;
     exports.METHOD_DEVICE_SELECTORS = METHOD_DEVICE_SELECTORS;
@@ -247226,6 +247879,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.OPERATOR_WRITTEN_STALE_MS = OPERATOR_WRITTEN_STALE_MS;
     exports.OPS_LOG_DEFAULT_LIMIT = OPS_LOG_DEFAULT_LIMIT;
     exports.OPS_LOG_RING_DEFAULT_MAX = OPS_LOG_RING_DEFAULT_MAX;
+    exports.OVERFLOW_REASON = OVERFLOW_REASON;
     exports.OauthIntegrationDescriptorSchema = OauthIntegrationDescriptorSchema;
     exports.ObjectEventSchema = ObjectEventSchema;
     exports.OpsLogDomainSchema = OpsLogDomainSchema;
@@ -247347,6 +248001,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.RelocateMediaInputSchema = RelocateMediaInputSchema;
     exports.RenderedAsSchema = RenderedAsSchema;
     exports.ReportMotionInputSchema = ReportMotionInputSchema;
+    exports.ReportedFailureContributionSchema = ReportedFailureContributionSchema;
     exports.ReportedLoadContributionSchema = ReportedLoadContributionSchema;
     exports.RequestCensusGroupSchema = RequestCensusGroupSchema;
     exports.RequestCensusProcedureSchema = RequestCensusProcedureSchema;
@@ -247745,6 +248400,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.extractNestedAddonId = extractNestedAddonId;
     exports.extractSourceInfoFromMetadata = extractSourceInfoFromMetadata;
     exports.faceGalleryCapability = faceGalleryCapability;
+    exports.failureContributionCapability = failureContributionCapability;
+    exports.failureRate = failureRate;
     exports.fanControlCapability = fanControlCapability;
     exports.featureProbeCapability = featureProbeCapability;
     exports.filesystemBrowseCapability = filesystemBrowseCapability;
@@ -405102,6 +405759,37 @@ var require_collection_preference = __commonJS({
   }
 });
 
+// ../../server/backend/dist/api/core/failure-contributions.js
+var require_failure_contributions = __commonJS({
+  "../../server/backend/dist/api/core/failure-contributions.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.EMPTY_FAILURE_CONTRIBUTION_PLANE = void 0;
+    exports.buildFailureContributionPlane = buildFailureContributionPlane;
+    var types_1 = require_dist4();
+    exports.EMPTY_FAILURE_CONTRIBUTION_PLANE = {
+      contributions: async () => []
+    };
+    function buildFailureContributionPlane(source, onProviderError) {
+      return {
+        contributions: async () => {
+          const out = [];
+          for (const [addonId, provider] of source.entries()) {
+            try {
+              for (const entry of await provider.list()) {
+                out.push({ ...entry, addonId });
+              }
+            } catch (err) {
+              onProviderError?.(addonId, (0, types_1.errMsg)(err));
+            }
+          }
+          return out;
+        }
+      };
+    }
+  }
+});
+
 // ../../server/backend/dist/api/core/load-contributions.js
 var require_load_contributions = __commonJS({
   "../../server/backend/dist/api/core/load-contributions.js"(exports) {
@@ -406174,6 +406862,7 @@ var require_cap_providers = __commonJS({
     var agent_installed_packages_js_1 = require_agent_installed_packages();
     var http_request_census_singleton_js_1 = require_http_request_census_singleton();
     var collection_preference_js_1 = require_collection_preference();
+    var failure_contributions_js_1 = require_failure_contributions();
     var load_contributions_js_1 = require_load_contributions();
     var logging_settings_js_1 = require_logging_settings();
     var request_census_settings_js_1 = require_request_census_settings();
@@ -406195,6 +406884,9 @@ var require_cap_providers = __commonJS({
       const loadContributions = (0, load_contributions_js_1.buildLoadContributionPlane)({ entries: () => registry?.getCollectionEntries("load-contribution") ?? [] }, (addonId, error) => {
         logger?.warn("load-contribution provider unreachable", { meta: { addonId, error } });
       });
+      const failureContributions = (0, failure_contributions_js_1.buildFailureContributionPlane)({ entries: () => registry?.getCollectionEntries("failure-contribution") ?? [] }, (addonId, error) => {
+        logger?.warn("failure-contribution provider unreachable", { meta: { addonId, error } });
+      });
       const loggingSettings = new logging_settings_js_1.LoggingSettingsService({
         store,
         gate: (0, system_1.getLoggingGate)(),
@@ -406222,6 +406914,7 @@ var require_cap_providers = __commonJS({
           return result;
         },
         getLoadContributions: async () => loadContributions.contributions(),
+        getFailureContributions: async () => failureContributions.contributions(),
         getRetentionConfig: async () => getRetention(registry)?.getConfig() ?? null,
         setRetentionConfig: async (input) => {
           getRetention(registry)?.setConfig(input);
@@ -412451,6 +413144,16 @@ var require_addon_settings_provider = __commonJS({
           }
           return forkedUpdate(input.addonId, "updateGlobalSettings", { patch: input.patch, ...input.nodeId ? { nodeId: input.nodeId } : {} }, input.nodeId);
         },
+        async getIntegrationSettings(input) {
+          if (gateway.isInProcess(input.addonId, input.nodeId)) {
+            const addon = getAddon(input.addonId);
+            if (!addon || typeof addon.getIntegrationSettings !== "function")
+              return null;
+            const result = await addon.getIntegrationSettings(input.nodeId);
+            return result ? reshapeForOutput(result) : null;
+          }
+          return forkedGet(input.addonId, "getIntegrationSettings", { ...input.nodeId ? { nodeId: input.nodeId } : {} }, input.nodeId);
+        },
         async getDeviceSettings(input) {
           if (gateway.isInProcess(input.addonId, input.nodeId)) {
             const addon = getAddon(input.addonId);