camstack 1.2.53 → 1.2.54

package/dist/{chunk-P6IF6IX5.js → chunk-NEA5DJLZ.js}

@@ -21687,6 +21687,80 @@ var logDestinationCapability = {
   /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
   mount: { kind: "skip" }
 };
+var FailureReasonCountSchema = external_exports.object({
+  /**
+  * Why the attempt did not land, in the contributor's own vocabulary —
+  * `worker-lease-gone`, `queue-overflow`, `timeout`, `empty-read`. The same
+  * strings that already appear in this repo's logs and, where one exists, the
+  * same string the per-track `previewMissReason` records (D276): a second
+  * vocabulary for the same loss would make the row and the counter
+  * un-joinable.
+  */
+  reason: external_exports.string(),
+  count: external_exports.number().int().nonnegative()
+});
+var FailureContributionSchema = external_exports.object({
+  /**
+  * The failing path — `enrichment-crop`, `inference`, `plate-ocr`,
+  * `person-over-vehicle`. Free text, for the reason `load-contribution` keeps
+  * `unit` free: the families are owned by different addons and a shared enum
+  * is a central list that rots invisibly.
+  */
+  family: external_exports.string(),
+  /**
+  * The NUMERIC device id — the same value every log line carries as
+  * `tags.deviceId`. Never nullable and never absent: a contributor that
+  * cannot name the camera must not emit the entry, because a fleet total
+  * cannot answer the only question anybody asks of this surface.
+  */
+  deviceId: external_exports.number().int().positive(),
+  /**
+  * A second dimension inside the family: the model / step id for an inference
+  * timeout, so "which camera AND which model" is one read. Absent when the
+  * family has a single variant.
+  */
+  variant: external_exports.string().optional(),
+  /**
+  * Epoch ms this counter started — the INCARNATION MARKER. A consumer
+  * differencing two reads must drop the interval when it changes, because the
+  * counter restarted from zero in a respawned runner. Same discipline as
+  * `LoadContribution.startedAtMs`.
+  */
+  sinceMs: external_exports.number(),
+  /** Epoch ms it was read. `atMs - sinceMs` is the interval this covers. */
+  atMs: external_exports.number(),
+  /**
+  * THE DENOMINATOR — every attempt on this path for this camera in the
+  * window. A failure count published without it is the mistake this schema
+  * exists to make impossible.
+  */
+  attempts: external_exports.number().int().nonnegative(),
+  /** Attempts that landed. `attempts - succeeded` is the loss. */
+  succeeded: external_exports.number().int().nonnegative(),
+  /** The loss, partitioned. Sums to `attempts - succeeded`. */
+  reasons: external_exports.array(FailureReasonCountSchema).readonly()
+});
+var failureContributionCapability = {
+  name: "failure-contribution",
+  scope: "system",
+  mode: "collection",
+  internal: true,
+  methods: {
+    /**
+    * This addon's per-camera failure counters, read live from bounded in-RAM
+    * state it already keeps. Inert: no persistence, no sampling, no timer.
+    *
+    * READING NEVER RESETS. The counters are CUMULATIVE since `sinceMs`, and a
+    * consumer that wants a rate differences two reads. A draining read would
+    * make two operators with the page open each destroy half of the other's
+    * numbers, and `load-contribution` already settled the same question the
+    * same way for `cpuSeconds`.
+    */
+    list: method(external_exports.void(), external_exports.array(FailureContributionSchema).readonly())
+  },
+  /** In-process only — enumerated through `addons.listCapabilityProviders`. */
+  mount: { kind: "skip" }
+};
 var LOAD_CONTRIBUTION_ROLES = [
   "decode",
   "transcode",
@@ -25679,6 +25753,20 @@ var TrackSchema = external_exports.object({
   * `=== true` and render nothing otherwise — never infer "no rider".
   */
   hasRider: external_exports.boolean().optional(),
+  /**
+  * WHY this track ended without a NATIVE best-shot tile
+  * ([D276](../decisions/adr-0276-a-stand-in-tile-is-provisional-and-a-close-says-why.md)) —
+  * a composed token line (`no-key-frame capture=keyframe:native-missx4`,
+  * `derive-returned-null tile=standin`, …) written at close and CLEARED by
+  * the late-keyFrame upgrade when a native tile lands after all. The
+  * operator-facing answer to "perché manca l'immagine?" on a track whose
+  * tile is a face/plate stand-in, a raster crop, or an icon.
+  *
+  * **Absent ≠ "missed silently"**: a row written before the column, a hub
+  * that predates the field, and every track whose tile landed native all
+  * omit it. Render nothing when absent.
+  */
+  previewMissReason: external_exports.string().optional(),
   ...TrackFlagFields,
   ...TrackRetrainFields
 });
@@ -37178,6 +37266,7 @@ var LoggingSettingsPatchSchema = external_exports.object({
   channels: external_exports.array(LogChannelWindowPatchSchema).readonly().optional()
 });
 var ReportedLoadContributionSchema = LoadContributionSchema.extend({ addonId: external_exports.string() });
+var ReportedFailureContributionSchema = FailureContributionSchema.extend({ addonId: external_exports.string() });
 var GetLoggingSettingsInputSchema = external_exports.object({
   scopeNodeId: external_exports.string().optional(),
   /**
@@ -37287,6 +37376,28 @@ var systemCapability = {
     */
     getLoadContributions: method(external_exports.void(), external_exports.array(ReportedLoadContributionSchema).readonly(), { auth: "admin" }),
     /**
+    * Every `failure-contribution` an addon on this cluster reports — per
+    * camera, per reason, **with the denominator attached**.
+    *
+    * This is the surface the operator asked for on 2026-08-28 (*"possiamo
+    * armare questi errori intanto? Così al prossimo giro ricontrolliamo tutti
+    * questi punti"*). Before it, four live failure modes could only be counted
+    * by grepping Loki and hand-correlating timestamps, which is exactly how a
+    * 22% thumbnail gap and a 3-hour media blackout were diagnosed — twice.
+    *
+    * Read it as a RATIO, never as a count. `attempts` is on every entry
+    * because the count on its own lies: `enrichment crop native miss` read as
+    * "35x worse than yesterday" and was flat across twelve hours once divided
+    * by the successes on the same path.
+    *
+    * The counters are CUMULATIVE since each entry's `sinceMs`. Reading does
+    * not reset them, and `sinceMs` changing means the reporting runner
+    * respawned — a consumer differencing two reads drops that interval.
+    *
+    * Admin-only: the rows name cameras and the paths that fail on them.
+    */
+    getFailureContributions: method(external_exports.void(), external_exports.array(ReportedFailureContributionSchema).readonly(), { auth: "admin" }),
+    /**
     * The logging settings document — levels and armed diagnostics — resolved
     * for `nodeId`, or for the cluster when `nodeId` is absent.
     *
@@ -40159,6 +40270,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "failureContribution.list": {
+    capName: "failure-contribution",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "fanControl.setDirection": {
     capName: "fan-control",
     capScope: "device",
@@ -43465,6 +43582,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "system.getFailureContributions": {
+    capName: "system",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "system.getLoadContributions": {
     capName: "system",
     capScope: "system",

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-P6IF6IX5.js";
+} from "./chunk-NEA5DJLZ.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-3YAJ644E.js");
+  await import("./launcher-QLUF66FQ.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-3YAJ644E.js");
+  await import("./launcher-QLUF66FQ.js");
 }
 
 // src/commands/setup.ts
@@ -1130,7 +1130,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-255INDLH.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-2O7WGGRD.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);

package/dist/{discover-255INDLH.js → discover-2O7WGGRD.js}

@@ -5,7 +5,7 @@ import {
   filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-P6IF6IX5.js";
+} from "./chunk-NEA5DJLZ.js";
 import "./chunk-LMMQX4CK.js";
 export {
   DEFAULT_HUB_HTTPS_PORT,

package/dist/{launcher-3YAJ644E.js → launcher-QLUF66FQ.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-DdEXjTDo.js
-var require_dist_DdEXjTDo = __commonJS({
-  "../system/dist/dist-DdEXjTDo.js"(exports) {
+// ../system/dist/dist-CImxMt5h.js
+var require_dist_CImxMt5h = __commonJS({
+  "../system/dist/dist-CImxMt5h.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -32354,6 +32354,80 @@ var require_dist_DdEXjTDo = __commonJS({
       /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
       mount: { kind: "skip" }
     };
+    var FailureReasonCountSchema = zod.z.object({
+      /**
+      * Why the attempt did not land, in the contributor's own vocabulary —
+      * `worker-lease-gone`, `queue-overflow`, `timeout`, `empty-read`. The same
+      * strings that already appear in this repo's logs and, where one exists, the
+      * same string the per-track `previewMissReason` records (D276): a second
+      * vocabulary for the same loss would make the row and the counter
+      * un-joinable.
+      */
+      reason: zod.z.string(),
+      count: zod.z.number().int().nonnegative()
+    });
+    var FailureContributionSchema = zod.z.object({
+      /**
+      * The failing path — `enrichment-crop`, `inference`, `plate-ocr`,
+      * `person-over-vehicle`. Free text, for the reason `load-contribution` keeps
+      * `unit` free: the families are owned by different addons and a shared enum
+      * is a central list that rots invisibly.
+      */
+      family: zod.z.string(),
+      /**
+      * The NUMERIC device id — the same value every log line carries as
+      * `tags.deviceId`. Never nullable and never absent: a contributor that
+      * cannot name the camera must not emit the entry, because a fleet total
+      * cannot answer the only question anybody asks of this surface.
+      */
+      deviceId: zod.z.number().int().positive(),
+      /**
+      * A second dimension inside the family: the model / step id for an inference
+      * timeout, so "which camera AND which model" is one read. Absent when the
+      * family has a single variant.
+      */
+      variant: zod.z.string().optional(),
+      /**
+      * Epoch ms this counter started — the INCARNATION MARKER. A consumer
+      * differencing two reads must drop the interval when it changes, because the
+      * counter restarted from zero in a respawned runner. Same discipline as
+      * `LoadContribution.startedAtMs`.
+      */
+      sinceMs: zod.z.number(),
+      /** Epoch ms it was read. `atMs - sinceMs` is the interval this covers. */
+      atMs: zod.z.number(),
+      /**
+      * THE DENOMINATOR — every attempt on this path for this camera in the
+      * window. A failure count published without it is the mistake this schema
+      * exists to make impossible.
+      */
+      attempts: zod.z.number().int().nonnegative(),
+      /** Attempts that landed. `attempts - succeeded` is the loss. */
+      succeeded: zod.z.number().int().nonnegative(),
+      /** The loss, partitioned. Sums to `attempts - succeeded`. */
+      reasons: zod.z.array(FailureReasonCountSchema).readonly()
+    });
+    var failureContributionCapability = {
+      name: "failure-contribution",
+      scope: "system",
+      mode: "collection",
+      internal: true,
+      methods: {
+        /**
+        * This addon's per-camera failure counters, read live from bounded in-RAM
+        * state it already keeps. Inert: no persistence, no sampling, no timer.
+        *
+        * READING NEVER RESETS. The counters are CUMULATIVE since `sinceMs`, and a
+        * consumer that wants a rate differences two reads. A draining read would
+        * make two operators with the page open each destroy half of the other's
+        * numbers, and `load-contribution` already settled the same question the
+        * same way for `cpuSeconds`.
+        */
+        list: method(zod.z.void(), zod.z.array(FailureContributionSchema).readonly())
+      },
+      /** In-process only — enumerated through `addons.listCapabilityProviders`. */
+      mount: { kind: "skip" }
+    };
     var LoadContributionSchema = zod.z.object({
       role: zod.z.enum([
         "decode",
@@ -36340,6 +36414,20 @@ var require_dist_DdEXjTDo = __commonJS({
       * `=== true` and render nothing otherwise — never infer "no rider".
       */
       hasRider: zod.z.boolean().optional(),
+      /**
+      * WHY this track ended without a NATIVE best-shot tile
+      * ([D276](../decisions/adr-0276-a-stand-in-tile-is-provisional-and-a-close-says-why.md)) —
+      * a composed token line (`no-key-frame capture=keyframe:native-missx4`,
+      * `derive-returned-null tile=standin`, …) written at close and CLEARED by
+      * the late-keyFrame upgrade when a native tile lands after all. The
+      * operator-facing answer to "perché manca l'immagine?" on a track whose
+      * tile is a face/plate stand-in, a raster crop, or an icon.
+      *
+      * **Absent ≠ "missed silently"**: a row written before the column, a hub
+      * that predates the field, and every track whose tile landed native all
+      * omit it. Render nothing when absent.
+      */
+      previewMissReason: zod.z.string().optional(),
       ...TrackFlagFields,
       ...TrackRetrainFields
     });
@@ -47923,6 +48011,7 @@ var require_dist_DdEXjTDo = __commonJS({
       channels: zod.z.array(LogChannelWindowPatchSchema).readonly().optional()
     });
     var ReportedLoadContributionSchema = LoadContributionSchema.extend({ addonId: zod.z.string() });
+    var ReportedFailureContributionSchema = FailureContributionSchema.extend({ addonId: zod.z.string() });
     var GetLoggingSettingsInputSchema = zod.z.object({
       scopeNodeId: zod.z.string().optional(),
       /**
@@ -48032,6 +48121,28 @@ var require_dist_DdEXjTDo = __commonJS({
         */
         getLoadContributions: method(zod.z.void(), zod.z.array(ReportedLoadContributionSchema).readonly(), { auth: "admin" }),
         /**
+        * Every `failure-contribution` an addon on this cluster reports — per
+        * camera, per reason, **with the denominator attached**.
+        *
+        * This is the surface the operator asked for on 2026-08-28 (*"possiamo
+        * armare questi errori intanto? Così al prossimo giro ricontrolliamo tutti
+        * questi punti"*). Before it, four live failure modes could only be counted
+        * by grepping Loki and hand-correlating timestamps, which is exactly how a
+        * 22% thumbnail gap and a 3-hour media blackout were diagnosed — twice.
+        *
+        * Read it as a RATIO, never as a count. `attempts` is on every entry
+        * because the count on its own lies: `enrichment crop native miss` read as
+        * "35x worse than yesterday" and was flat across twelve hours once divided
+        * by the successes on the same path.
+        *
+        * The counters are CUMULATIVE since each entry's `sinceMs`. Reading does
+        * not reset them, and `sinceMs` changing means the reporting runner
+        * respawned — a consumer differencing two reads drops that interval.
+        *
+        * Admin-only: the rows name cameras and the paths that fail on them.
+        */
+        getFailureContributions: method(zod.z.void(), zod.z.array(ReportedFailureContributionSchema).readonly(), { auth: "admin" }),
+        /**
         * The logging settings document — levels and armed diagnostics — resolved
         * for `nodeId`, or for the cluster when `nodeId` is absent.
         *
@@ -49436,6 +49547,7 @@ var require_dist_DdEXjTDo = __commonJS({
       eventEmitterCapability,
       eventsCapability,
       faceGalleryCapability,
+      failureContributionCapability,
       fanControlCapability,
       featureProbeCapability,
       filesystemBrowseCapability,
@@ -51440,6 +51552,12 @@ var require_dist_DdEXjTDo = __commonJS({
         addonId: null,
         access: "create"
       },
+      "failureContribution.list": {
+        capName: "failure-contribution",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "fanControl.setDirection": {
         capName: "fan-control",
         capScope: "device",
@@ -54746,6 +54864,12 @@ var require_dist_DdEXjTDo = __commonJS({
         addonId: null,
         access: "create"
       },
+      "system.getFailureContributions": {
+        capName: "system",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "system.getLoadContributions": {
         capName: "system",
         capScope: "system",
@@ -58515,7 +58639,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DdEXjTDo();
+    var require_dist10 = require_dist_CImxMt5h();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -59334,7 +59458,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DdEXjTDo();
+    var require_dist10 = require_dist_CImxMt5h();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -59428,7 +59552,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DdEXjTDo();
+    var require_dist10 = require_dist_CImxMt5h();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -60325,11 +60449,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-BXaTgLyZ.js
-var require_retired_settings_keys_BXaTgLyZ = __commonJS({
-  "../system/dist/retired-settings-keys-BXaTgLyZ.js"(exports) {
+// ../system/dist/retired-settings-keys-C7gLUS3x.js
+var require_retired_settings_keys_C7gLUS3x = __commonJS({
+  "../system/dist/retired-settings-keys-C7gLUS3x.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_DdEXjTDo();
+    var require_dist10 = require_dist_CImxMt5h();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -62543,8 +62667,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DdEXjTDo();
-    var require_retired_settings_keys = require_retired_settings_keys_BXaTgLyZ();
+    var require_dist10 = require_dist_CImxMt5h();
+    var require_retired_settings_keys = require_retired_settings_keys_C7gLUS3x();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -67293,7 +67417,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DdEXjTDo();
+    var require_dist10 = require_dist_CImxMt5h();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -67430,7 +67554,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DdEXjTDo();
+    var require_dist10 = require_dist_CImxMt5h();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -67620,7 +67744,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DdEXjTDo();
+    var require_dist10 = require_dist_CImxMt5h();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -75433,7 +75557,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DdEXjTDo();
+    var require_dist10 = require_dist_CImxMt5h();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -75998,7 +76122,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DdEXjTDo();
+    var require_dist10 = require_dist_CImxMt5h();
     var node_fs_promises = __require("fs/promises");
     var node_child_process = __require("child_process");
     var node_util = __require("util");
@@ -77955,7 +78079,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DdEXjTDo();
+    var require_dist10 = require_dist_CImxMt5h();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -79071,8 +79195,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DdEXjTDo();
-    var require_retired_settings_keys = require_retired_settings_keys_BXaTgLyZ();
+    var require_dist10 = require_dist_CImxMt5h();
+    var require_retired_settings_keys = require_retired_settings_keys_C7gLUS3x();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -81351,7 +81475,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DdEXjTDo();
+    var require_dist10 = require_dist_CImxMt5h();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -83232,7 +83356,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DdEXjTDo();
+    var require_dist10 = require_dist_CImxMt5h();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -101293,7 +101417,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DdEXjTDo();
+    var require_dist10 = require_dist_CImxMt5h();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -107181,6 +107305,7 @@ var require_addon = __commonJS({
       "data-store-provider": ["histogram", "query"],
       "device-export": ["listExposedDevices", "listSupportedDeviceKinds"],
       "device-provider": ["discoverDevices", "getDevices"],
+      "failure-contribution": ["list"],
       "llm": [
         "getDefaults",
         "getUsage",
@@ -113780,12 +113905,12 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/manifest-python-deps-CivtrAha.js
-var require_manifest_python_deps_CivtrAha = __commonJS({
-  "../system/dist/manifest-python-deps-CivtrAha.js"(exports) {
+// ../system/dist/manifest-python-deps-BaVekjRY.js
+var require_manifest_python_deps_BaVekjRY = __commonJS({
+  "../system/dist/manifest-python-deps-BaVekjRY.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    require_dist_DdEXjTDo();
+    require_dist_CImxMt5h();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var _camstack_types_node = require_node();
@@ -124900,7 +125025,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_DdEXjTDo();
+    var require_dist10 = require_dist_CImxMt5h();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -124926,7 +125051,7 @@ var require_dist3 = __commonJS({
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_file_data_plane = require_file_data_plane_DO8KbxCe();
     var require_tls$1 = require_tls_u8QCJCFE();
-    var require_manifest_python_deps = require_manifest_python_deps_CivtrAha();
+    var require_manifest_python_deps = require_manifest_python_deps_BaVekjRY();
     var require_resource_monitor = require_resource_monitor_CdnzxBLP();
     var require_custom_action_registry = require_custom_action_registry_jY0NOZK8();
     var zod = require_zod();
@@ -207518,6 +207643,97 @@ var require_dist4 = __commonJS({
       }
       return [...buckets.values()].toSorted((a, b) => a.atMs - b.atMs);
     }
+    var MAX_REASONS_PER_KEY = 16;
+    var MAX_KEYS = 1024;
+    var OVERFLOW_REASON = "other";
+    function counterKey(deviceId, family, variant) {
+      return variant === void 0 ? `${deviceId}\0${family}` : `${deviceId}\0${family}\0${variant}`;
+    }
+    var FailureCounters = class {
+      maxKeys;
+      maxReasons;
+      counters = /* @__PURE__ */ new Map();
+      refused = 0;
+      constructor(maxKeys = MAX_KEYS, maxReasons = 16) {
+        this.maxKeys = maxKeys;
+        this.maxReasons = maxReasons;
+      }
+      /**
+      * Counters refused because {@link MAX_KEYS} was already held.
+      *
+      * Cumulative for the life of the instance: a bound that bit is a fact about
+      * the deployment, and a surface that hid it would under-report a fleet
+      * precisely when the fleet got large enough to matter.
+      */
+      get keysRefused() {
+        return this.refused;
+      }
+      /** Counters currently held. */
+      get size() {
+        return this.counters.size;
+      }
+      /**
+      * Fold one observation in.
+      *
+      * A non-positive or non-integer `deviceId` is REFUSED rather than bucketed:
+      * see the module docblock — an entry that cannot name its camera is worse
+      * than no entry.
+      */
+      note(observation, nowMs) {
+        if (!Number.isInteger(observation.deviceId) || observation.deviceId <= 0) return;
+        const key = counterKey(observation.deviceId, observation.family, observation.variant);
+        let counter = this.counters.get(key);
+        if (counter === void 0) {
+          if (this.counters.size >= this.maxKeys) {
+            this.refused += 1;
+            return;
+          }
+          counter = {
+            deviceId: observation.deviceId,
+            family: observation.family,
+            variant: observation.variant,
+            sinceMs: nowMs,
+            attempts: 0,
+            succeeded: 0,
+            reasons: /* @__PURE__ */ new Map()
+          };
+          this.counters.set(key, counter);
+        }
+        counter.attempts += 1;
+        if (observation.reason === void 0) {
+          counter.succeeded += 1;
+          return;
+        }
+        const reason = counter.reasons.has(observation.reason) || counter.reasons.size < this.maxReasons ? observation.reason : OVERFLOW_REASON;
+        counter.reasons.set(reason, (counter.reasons.get(reason) ?? 0) + 1);
+      }
+      /** Read every counter. Never mutates — see the module docblock. */
+      snapshot(nowMs) {
+        const out = [];
+        for (const counter of this.counters.values()) out.push({
+          deviceId: counter.deviceId,
+          family: counter.family,
+          ...counter.variant !== void 0 ? { variant: counter.variant } : {},
+          sinceMs: counter.sinceMs,
+          atMs: nowMs,
+          attempts: counter.attempts,
+          succeeded: counter.succeeded,
+          reasons: [...counter.reasons.entries()].map(([reason, count]) => ({
+            reason,
+            count
+          })).toSorted((a, b) => b.count - a.count)
+        });
+        return out;
+      }
+      /** Drop everything (host disposal). */
+      clear() {
+        this.counters.clear();
+      }
+    };
+    function failureRate(sample) {
+      if (sample.attempts <= 0) return null;
+      return (sample.attempts - sample.succeeded) / sample.attempts;
+    }
     var FORMAT_KEYS = [
       "onnx",
       "coreml",
@@ -214146,6 +214362,80 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
       mount: { kind: "skip" }
     };
+    var FailureReasonCountSchema = zod.z.object({
+      /**
+      * Why the attempt did not land, in the contributor's own vocabulary —
+      * `worker-lease-gone`, `queue-overflow`, `timeout`, `empty-read`. The same
+      * strings that already appear in this repo's logs and, where one exists, the
+      * same string the per-track `previewMissReason` records (D276): a second
+      * vocabulary for the same loss would make the row and the counter
+      * un-joinable.
+      */
+      reason: zod.z.string(),
+      count: zod.z.number().int().nonnegative()
+    });
+    var FailureContributionSchema = zod.z.object({
+      /**
+      * The failing path — `enrichment-crop`, `inference`, `plate-ocr`,
+      * `person-over-vehicle`. Free text, for the reason `load-contribution` keeps
+      * `unit` free: the families are owned by different addons and a shared enum
+      * is a central list that rots invisibly.
+      */
+      family: zod.z.string(),
+      /**
+      * The NUMERIC device id — the same value every log line carries as
+      * `tags.deviceId`. Never nullable and never absent: a contributor that
+      * cannot name the camera must not emit the entry, because a fleet total
+      * cannot answer the only question anybody asks of this surface.
+      */
+      deviceId: zod.z.number().int().positive(),
+      /**
+      * A second dimension inside the family: the model / step id for an inference
+      * timeout, so "which camera AND which model" is one read. Absent when the
+      * family has a single variant.
+      */
+      variant: zod.z.string().optional(),
+      /**
+      * Epoch ms this counter started — the INCARNATION MARKER. A consumer
+      * differencing two reads must drop the interval when it changes, because the
+      * counter restarted from zero in a respawned runner. Same discipline as
+      * `LoadContribution.startedAtMs`.
+      */
+      sinceMs: zod.z.number(),
+      /** Epoch ms it was read. `atMs - sinceMs` is the interval this covers. */
+      atMs: zod.z.number(),
+      /**
+      * THE DENOMINATOR — every attempt on this path for this camera in the
+      * window. A failure count published without it is the mistake this schema
+      * exists to make impossible.
+      */
+      attempts: zod.z.number().int().nonnegative(),
+      /** Attempts that landed. `attempts - succeeded` is the loss. */
+      succeeded: zod.z.number().int().nonnegative(),
+      /** The loss, partitioned. Sums to `attempts - succeeded`. */
+      reasons: zod.z.array(FailureReasonCountSchema).readonly()
+    });
+    var failureContributionCapability = {
+      name: "failure-contribution",
+      scope: "system",
+      mode: "collection",
+      internal: true,
+      methods: {
+        /**
+        * This addon's per-camera failure counters, read live from bounded in-RAM
+        * state it already keeps. Inert: no persistence, no sampling, no timer.
+        *
+        * READING NEVER RESETS. The counters are CUMULATIVE since `sinceMs`, and a
+        * consumer that wants a rate differences two reads. A draining read would
+        * make two operators with the page open each destroy half of the other's
+        * numbers, and `load-contribution` already settled the same question the
+        * same way for `cpuSeconds`.
+        */
+        list: require_sleep.method(zod.z.void(), zod.z.array(FailureContributionSchema).readonly())
+      },
+      /** In-process only — enumerated through `addons.listCapabilityProviders`. */
+      mount: { kind: "skip" }
+    };
     var LOAD_CONTRIBUTION_ROLES = [
       "decode",
       "transcode",
@@ -218937,6 +219227,20 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * `=== true` and render nothing otherwise — never infer "no rider".
       */
       hasRider: zod.z.boolean().optional(),
+      /**
+      * WHY this track ended without a NATIVE best-shot tile
+      * ([D276](../decisions/adr-0276-a-stand-in-tile-is-provisional-and-a-close-says-why.md)) —
+      * a composed token line (`no-key-frame capture=keyframe:native-missx4`,
+      * `derive-returned-null tile=standin`, …) written at close and CLEARED by
+      * the late-keyFrame upgrade when a native tile lands after all. The
+      * operator-facing answer to "perché manca l'immagine?" on a track whose
+      * tile is a face/plate stand-in, a raster crop, or an icon.
+      *
+      * **Absent ≠ "missed silently"**: a row written before the column, a hub
+      * that predates the field, and every track whose tile landed native all
+      * omit it. Render nothing when absent.
+      */
+      previewMissReason: zod.z.string().optional(),
       ...TrackFlagFields,
       ...TrackRetrainFields
     });
@@ -230711,6 +231015,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       channels: zod.z.array(LogChannelWindowPatchSchema).readonly().optional()
     });
     var ReportedLoadContributionSchema = LoadContributionSchema.extend({ addonId: zod.z.string() });
+    var ReportedFailureContributionSchema = FailureContributionSchema.extend({ addonId: zod.z.string() });
     var GetLoggingSettingsInputSchema = zod.z.object({
       scopeNodeId: zod.z.string().optional(),
       /**
@@ -230820,6 +231125,28 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         */
         getLoadContributions: require_sleep.method(zod.z.void(), zod.z.array(ReportedLoadContributionSchema).readonly(), { auth: "admin" }),
         /**
+        * Every `failure-contribution` an addon on this cluster reports — per
+        * camera, per reason, **with the denominator attached**.
+        *
+        * This is the surface the operator asked for on 2026-08-28 (*"possiamo
+        * armare questi errori intanto? Così al prossimo giro ricontrolliamo tutti
+        * questi punti"*). Before it, four live failure modes could only be counted
+        * by grepping Loki and hand-correlating timestamps, which is exactly how a
+        * 22% thumbnail gap and a 3-hour media blackout were diagnosed — twice.
+        *
+        * Read it as a RATIO, never as a count. `attempts` is on every entry
+        * because the count on its own lies: `enrichment crop native miss` read as
+        * "35x worse than yesterday" and was flat across twelve hours once divided
+        * by the successes on the same path.
+        *
+        * The counters are CUMULATIVE since each entry's `sinceMs`. Reading does
+        * not reset them, and `sinceMs` changing means the reporting runner
+        * respawned — a consumer differencing two reads drops that interval.
+        *
+        * Admin-only: the rows name cameras and the paths that fail on them.
+        */
+        getFailureContributions: require_sleep.method(zod.z.void(), zod.z.array(ReportedFailureContributionSchema).readonly(), { auth: "admin" }),
+        /**
         * The logging settings document — levels and armed diagnostics — resolved
         * for `nodeId`, or for the cluster when `nodeId` is absent.
         *
@@ -234378,6 +234705,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       eventEmitter: "event-emitter",
       events: "events",
       faceGallery: "face-gallery",
+      failureContribution: "failure-contribution",
       fanControl: "fan-control",
       featureProbe: "feature-probe",
       filesystemBrowse: "filesystem-browse",
@@ -234702,6 +235030,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         key: "faceGallery",
         name: "face-gallery"
       },
+      {
+        key: "failureContribution",
+        name: "failure-contribution"
+      },
       {
         key: "fanControl",
         name: "fan-control"
@@ -235137,6 +235469,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       eventEmitterCapability,
       eventsCapability,
       faceGalleryCapability,
+      failureContributionCapability,
       fanControlCapability,
       featureProbeCapability,
       filesystemBrowseCapability,
@@ -237141,6 +237474,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "failureContribution.list": {
+        capName: "failure-contribution",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "fanControl.setDirection": {
         capName: "fan-control",
         capScope: "device",
@@ -240447,6 +240786,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "system.getFailureContributions": {
+        capName: "system",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "system.getLoadContributions": {
         capName: "system",
         capScope: "system",
@@ -241136,6 +241481,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "embedding-encoder",
       "events",
       "face-gallery",
+      "failure-contribution",
       "fan-control",
       "filesystem-browse",
       "humidifier",
@@ -241300,6 +241646,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "device-state",
       "embedding-encoder",
       "face-gallery",
+      "failure-contribution",
       "filesystem-browse",
       "integrations",
       "llm",
@@ -244199,6 +244546,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           detectSiteLocation: (input) => dispatch("system", "detectSiteLocation", "mutation", input),
           getRequestCensus: (input) => dispatch("system", "getRequestCensus", "query", input),
           getLoadContributions: (input) => dispatch("system", "getLoadContributions", "query", input),
+          getFailureContributions: (input) => dispatch("system", "getFailureContributions", "query", input),
           getLoggingSettings: (input) => dispatch("system", "getLoggingSettings", "query", input),
           setLoggingSettings: (input) => dispatch("system", "setLoggingSettings", "mutation", input)
         },
@@ -247241,6 +247589,9 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.ExpressionSourceSchema = ExpressionSourceSchema;
     exports.FIRST_LEVEL_MACRO_CLASSES = FIRST_LEVEL_MACRO_CLASSES;
     exports.FULL_IMAGE_BBOX = FULL_IMAGE_BBOX;
+    exports.FailureContributionSchema = FailureContributionSchema;
+    exports.FailureCounters = FailureCounters;
+    exports.FailureReasonCountSchema = FailureReasonCountSchema;
     exports.FanControlStatusSchema = FanControlStatusSchema;
     exports.FanDirectionSchema = FanDirectionSchema;
     exports.FeatureManifestSchema = FeatureManifestSchema;
@@ -247356,6 +247707,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.MAX_EXPRESSION_CALL_ARGS = MAX_EXPRESSION_CALL_ARGS;
     exports.MAX_EXPRESSION_EVAL_STEPS = MAX_EXPRESSION_EVAL_STEPS;
     exports.MAX_EXPRESSION_SOURCE_LENGTH = MAX_EXPRESSION_SOURCE_LENGTH;
+    exports.MAX_KEYS = MAX_KEYS;
+    exports.MAX_REASONS_PER_KEY = MAX_REASONS_PER_KEY;
     exports.MAX_SENSOR_TRIGGER_DEVICES = MAX_SENSOR_TRIGGER_DEVICES;
     exports.METHOD_ACCESS_MAP = METHOD_ACCESS_MAP;
     exports.METHOD_DEVICE_SELECTORS = METHOD_DEVICE_SELECTORS;
@@ -247526,6 +247879,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.OPERATOR_WRITTEN_STALE_MS = OPERATOR_WRITTEN_STALE_MS;
     exports.OPS_LOG_DEFAULT_LIMIT = OPS_LOG_DEFAULT_LIMIT;
     exports.OPS_LOG_RING_DEFAULT_MAX = OPS_LOG_RING_DEFAULT_MAX;
+    exports.OVERFLOW_REASON = OVERFLOW_REASON;
     exports.OauthIntegrationDescriptorSchema = OauthIntegrationDescriptorSchema;
     exports.ObjectEventSchema = ObjectEventSchema;
     exports.OpsLogDomainSchema = OpsLogDomainSchema;
@@ -247647,6 +248001,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.RelocateMediaInputSchema = RelocateMediaInputSchema;
     exports.RenderedAsSchema = RenderedAsSchema;
     exports.ReportMotionInputSchema = ReportMotionInputSchema;
+    exports.ReportedFailureContributionSchema = ReportedFailureContributionSchema;
     exports.ReportedLoadContributionSchema = ReportedLoadContributionSchema;
     exports.RequestCensusGroupSchema = RequestCensusGroupSchema;
     exports.RequestCensusProcedureSchema = RequestCensusProcedureSchema;
@@ -248045,6 +248400,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.extractNestedAddonId = extractNestedAddonId;
     exports.extractSourceInfoFromMetadata = extractSourceInfoFromMetadata;
     exports.faceGalleryCapability = faceGalleryCapability;
+    exports.failureContributionCapability = failureContributionCapability;
+    exports.failureRate = failureRate;
     exports.fanControlCapability = fanControlCapability;
     exports.featureProbeCapability = featureProbeCapability;
     exports.filesystemBrowseCapability = filesystemBrowseCapability;
@@ -405402,6 +405759,37 @@ var require_collection_preference = __commonJS({
   }
 });
 
+// ../../server/backend/dist/api/core/failure-contributions.js
+var require_failure_contributions = __commonJS({
+  "../../server/backend/dist/api/core/failure-contributions.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.EMPTY_FAILURE_CONTRIBUTION_PLANE = void 0;
+    exports.buildFailureContributionPlane = buildFailureContributionPlane;
+    var types_1 = require_dist4();
+    exports.EMPTY_FAILURE_CONTRIBUTION_PLANE = {
+      contributions: async () => []
+    };
+    function buildFailureContributionPlane(source, onProviderError) {
+      return {
+        contributions: async () => {
+          const out = [];
+          for (const [addonId, provider] of source.entries()) {
+            try {
+              for (const entry of await provider.list()) {
+                out.push({ ...entry, addonId });
+              }
+            } catch (err) {
+              onProviderError?.(addonId, (0, types_1.errMsg)(err));
+            }
+          }
+          return out;
+        }
+      };
+    }
+  }
+});
+
 // ../../server/backend/dist/api/core/load-contributions.js
 var require_load_contributions = __commonJS({
   "../../server/backend/dist/api/core/load-contributions.js"(exports) {
@@ -406474,6 +406862,7 @@ var require_cap_providers = __commonJS({
     var agent_installed_packages_js_1 = require_agent_installed_packages();
     var http_request_census_singleton_js_1 = require_http_request_census_singleton();
     var collection_preference_js_1 = require_collection_preference();
+    var failure_contributions_js_1 = require_failure_contributions();
     var load_contributions_js_1 = require_load_contributions();
     var logging_settings_js_1 = require_logging_settings();
     var request_census_settings_js_1 = require_request_census_settings();
@@ -406495,6 +406884,9 @@ var require_cap_providers = __commonJS({
       const loadContributions = (0, load_contributions_js_1.buildLoadContributionPlane)({ entries: () => registry?.getCollectionEntries("load-contribution") ?? [] }, (addonId, error) => {
         logger?.warn("load-contribution provider unreachable", { meta: { addonId, error } });
       });
+      const failureContributions = (0, failure_contributions_js_1.buildFailureContributionPlane)({ entries: () => registry?.getCollectionEntries("failure-contribution") ?? [] }, (addonId, error) => {
+        logger?.warn("failure-contribution provider unreachable", { meta: { addonId, error } });
+      });
       const loggingSettings = new logging_settings_js_1.LoggingSettingsService({
         store,
         gate: (0, system_1.getLoggingGate)(),
@@ -406522,6 +406914,7 @@ var require_cap_providers = __commonJS({
           return result;
         },
         getLoadContributions: async () => loadContributions.contributions(),
+        getFailureContributions: async () => failureContributions.contributions(),
         getRetentionConfig: async () => getRetention(registry)?.getConfig() ?? null,
         setRetentionConfig: async (input) => {
           getRetention(registry)?.setConfig(input);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.2.53",
+  "version": "1.2.54",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",