camstack 1.2.68 → 1.2.70

package/dist/{launcher-H2LQYCEY.js → launcher-E2VZZ5O3.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-CCIBlacf.js
-var require_dist_CCIBlacf = __commonJS({
-  "../system/dist/dist-CCIBlacf.js"(exports) {
+// ../system/dist/dist-BhE8zNfY.js
+var require_dist_BhE8zNfY = __commonJS({
+  "../system/dist/dist-BhE8zNfY.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -26274,6 +26274,20 @@ var require_dist_CCIBlacf = __commonJS({
       * in its row, not in its name, so `MediaRelocateEngine` never reconciles one.
       */
       rowsReconciled: zod.z.number().int().nonnegative().optional(),
+      /**
+      * Rows this run FORGOT because the file they name is not on disk.
+      *
+      * The mover derived the path from the row's own fields and `stat`ed it; an
+      * ENOENT there is a per-path confirmation that the segment is gone (D296),
+      * and the durable row is dropped through the same channel eviction uses. It
+      * is reported for the same reason `rowsReconciled` is: this is a durable
+      * mutation nobody asked for, and a migration that quietly erases hour rows is
+      * the same failure as one that quietly skips them (D295).
+      *
+      * The production drain of 2026-08-30 would have reported 11 074 here — the
+      * ledger claimed 5.65 GB of footage that no longer existed.
+      */
+      rowsForgotten: zod.z.number().int().nonnegative().optional(),
       startedAt: zod.z.number(),
       finishedAt: zod.z.number().nullable(),
       error: zod.z.string().nullable()
@@ -26481,6 +26495,71 @@ var require_dist_CCIBlacf = __commonJS({
       segments: zod.z.number().int().nonnegative(),
       bytes: zod.z.number().int().nonnegative()
     }).nullable();
+    var LedgerWalkInputSchema = zod.z.object({
+      locationId: zod.z.string().min(1),
+      /** Forget the confirmed-absent rows, rather than only counting them. */
+      apply: zod.z.boolean().optional(),
+      /** Narrow to one camera. */
+      deviceId: zod.z.number().int().positive().optional(),
+      /** Narrow to these recording profiles; empty/absent = every profile. */
+      profiles: zod.z.array(zod.z.string().min(1)).optional()
+    });
+    var LedgerWalkRefusalSchema = zod.z.enum([
+      "location-unknown",
+      "source-writable",
+      "no-ledger",
+      "archive-unreadable",
+      "anchor-absent",
+      "anchor-unreadable",
+      "anchor-moved"
+    ]);
+    zod.z.enum([
+      "live-tail",
+      "listing-error",
+      "path-mismatch",
+      "durable-refused"
+    ]);
+    var LedgerWalkSkipCountsSchema = zod.z.object({
+      "live-tail": zod.z.number().int().nonnegative(),
+      "listing-error": zod.z.number().int().nonnegative(),
+      "path-mismatch": zod.z.number().int().nonnegative(),
+      "durable-refused": zod.z.number().int().nonnegative()
+    });
+    var LedgerWalkDeviceReportSchema = zod.z.object({
+      deviceId: zod.z.number().int(),
+      hoursWalked: zod.z.number().int().nonnegative(),
+      hoursMissing: zod.z.number().int().nonnegative(),
+      ghostSegments: zod.z.number().int().nonnegative(),
+      ghostBytes: zod.z.number().int().nonnegative(),
+      forgottenSegments: zod.z.number().int().nonnegative(),
+      orphanFiles: zod.z.number().int().nonnegative()
+    });
+    var LedgerWalkReportSchema = zod.z.object({
+      locationId: zod.z.string(),
+      applied: zod.z.boolean(),
+      refused: LedgerWalkRefusalSchema.nullable(),
+      archiveSegments: zod.z.number().int().nonnegative().nullable(),
+      archiveBytes: zod.z.number().int().nonnegative().nullable(),
+      hoursClaimed: zod.z.number().int().nonnegative(),
+      hoursWalked: zod.z.number().int().nonnegative(),
+      hoursMissing: zod.z.number().int().nonnegative(),
+      /** `readdir` calls issued — the cost, stated in the unit that is paid. */
+      listings: zod.z.number().int().nonnegative(),
+      segmentsClaimed: zod.z.number().int().nonnegative(),
+      ghostSegments: zod.z.number().int().nonnegative(),
+      ghostBytes: zod.z.number().int().nonnegative(),
+      ghostHoursWhole: zod.z.number().int().nonnegative(),
+      forgottenSegments: zod.z.number().int().nonnegative(),
+      forgottenBytes: zod.z.number().int().nonnegative(),
+      /** Files under a claimed hour that no durable row names. Never deleted. */
+      orphanFiles: zod.z.number().int().nonnegative(),
+      orphanSample: zod.z.array(zod.z.string()).readonly(),
+      hoursSkipped: zod.z.number().int().nonnegative(),
+      skippedByReason: LedgerWalkSkipCountsSchema,
+      /** The walk stopped at its per-pass hour bound with claims unwalked. */
+      bounded: zod.z.boolean(),
+      byDevice: zod.z.array(LedgerWalkDeviceReportSchema).readonly()
+    });
     var RelocatableMediaCountSchema = zod.z.object({ rows: zod.z.number().int().nonnegative() }).nullable();
     var RelocatableMediaCountInputSchema = zod.z.object({
       toLocationId: zod.z.string().min(1),
@@ -36998,13 +37077,15 @@ var require_dist_CCIBlacf = __commonJS({
       groups: zod.z.array(AnalyticsGroupRecordSchema).readonly(),
       nextCursor: zod.z.string().nullable()
     });
+    var KEY_EVENTS_DEFAULT_LIMIT = 50;
+    var KEY_EVENTS_MAX_LIMIT = 200;
     var KeyEventQueryInput = zod.z.object({
       deviceId: zod.z.number(),
       /** Window lower bound (track firstSeen ≥ since). */
       since: zod.z.number(),
       /** Window upper bound (track firstSeen ≤ until). */
       until: zod.z.number(),
-      limit: zod.z.number().int().min(1).max(200).default(50),
+      limit: zod.z.number().int().min(1).max(KEY_EVENTS_MAX_LIMIT).default(KEY_EVENTS_DEFAULT_LIMIT),
       /** Drop tracks scoring below this importance. */
       minImportance: zod.z.number().min(0).max(1).optional(),
       /** Restrict to a single class (e.g. 'person'). */
@@ -37026,6 +37107,21 @@ var require_dist_CCIBlacf = __commonJS({
       ...TrackFlagFields,
       ...TrackRetrainFields
     });
+    var KeyEventBatchQueryInput = zod.z.object({
+      deviceIds: zod.z.array(zod.z.number()).min(1).max(200),
+      since: zod.z.number(),
+      until: zod.z.number(),
+      /** Applied PER CAMERA, exactly as `getKeyEvents.limit` is — never a total
+      *  across the set, which would let a busy camera starve a quiet one of its
+      *  rows and change what the merged feed contains. */
+      limit: zod.z.number().int().min(1).max(KEY_EVENTS_MAX_LIMIT).default(KEY_EVENTS_DEFAULT_LIMIT),
+      minImportance: zod.z.number().min(0).max(1).optional(),
+      classFilter: zod.z.string().optional()
+    });
+    var KeyEventsForDeviceSchema = zod.z.object({
+      deviceId: zod.z.number(),
+      events: zod.z.array(KeyEventSchema).readonly()
+    });
     zod.z.object({
       trackId: zod.z.string(),
       className: zod.z.string(),
@@ -37190,6 +37286,39 @@ var require_dist_CCIBlacf = __commonJS({
       /** Present when the pass ended by throwing. */
       error: zod.z.string().nullable()
     });
+    var MediaReclaimStartResultSchema = zod.z.object({
+      started: zod.z.boolean(),
+      /** True when a pass was already running; the new request is ignored. */
+      alreadyRunning: zod.z.boolean()
+    });
+    var MediaReclaimInputSchema = zod.z.object({
+      mode: zod.z.enum(["report", "reclaim"]).default("report"),
+      scopes: zod.z.array(zod.z.enum(["motion-still", "track-filmstrip"])).min(1).optional(),
+      deviceIds: zod.z.array(zod.z.number().int()).min(1).optional(),
+      restart: zod.z.boolean().optional(),
+      pageSize: zod.z.number().int().min(50).max(5e3).optional(),
+      maxRowsPerDevice: zod.z.number().int().min(1).max(5e5).optional(),
+      maxReclaimPerDevice: zod.z.number().int().min(1).max(5e5).optional(),
+      maxBytesPerRun: zod.z.number().int().min(1).optional(),
+      budgetMinutes: zod.z.number().int().min(1).max(720).optional(),
+      throttleBytesPerSec: zod.z.number().int().min(64 * 1024).optional(),
+      graceMinutes: zod.z.number().int().min(1).max(10080).optional()
+    });
+    var MediaReclaimStatusSchema = zod.z.object({
+      running: zod.z.boolean(),
+      mode: zod.z.enum(["report", "reclaim"]).nullable(),
+      totalExamined: zod.z.number(),
+      totalEligible: zod.z.number(),
+      totalReclaimed: zod.z.number(),
+      totalBytesReclaimed: zod.z.number(),
+      totalRefused: zod.z.number(),
+      /** Device+scope windows finished in this pass. */
+      devicesDone: zod.z.number(),
+      complete: zod.z.boolean().nullable(),
+      startedAtMs: zod.z.number().nullable(),
+      finishedAtMs: zod.z.number().nullable(),
+      error: zod.z.string().nullable()
+    });
     var ReplayFrameInputSchema = zod.z.object({
       timestamp: zod.z.number(),
       frame: PipelineRunResultBridge
@@ -37320,6 +37449,21 @@ var require_dist_CCIBlacf = __commonJS({
         * scored on-read (no write). Degrades to `[]` on error.
         */
         getKeyEvents: method(KeyEventQueryInput, zod.z.array(KeyEventSchema).readonly()),
+        /**
+        * The same ranking, for a SET of cameras, in one round trip.
+        *
+        * The Detection Intelligence events feed asks this of every selected
+        * camera and re-asks on a 30s timer. Fanned out client-side that is N
+        * round trips — browser → hub → post-analysis — for N independent,
+        * already-indexed store queries. Batched, the queries are unchanged and
+        * run concurrently INSIDE the owner; only the transport collapses.
+        *
+        * Deliberately per-device rather than pre-merged: `limit` stays per
+        * camera (a total would let a busy camera starve a quiet one), and a
+        * caller that renders one camera's lane needs to know which camera a row
+        * came from. `getKeyEvents` stays for single-device callers.
+        */
+        getKeyEventsBatch: method(KeyEventBatchQueryInput, zod.z.array(KeyEventsForDeviceSchema).readonly()),
         /** Server-side bucketed event counts for the 24-hour timeline.
         *  Returns one entry per non-empty bucket; empty buckets are omitted. */
         getEventDensity: method(zod.z.object({
@@ -37598,6 +37742,20 @@ var require_dist_CCIBlacf = __commonJS({
           auth: "admin"
         }),
         /**
+        * Reclaim the standing debug-media backlog (motion-visit stills + track
+        * filmstrips). DETACHED: returns `{ started }` immediately. The pass is
+        * tens of minutes; awaiting it is a timeout, not a verdict. Dry-run unless
+        * `mode: 'reclaim'`. Poll `getMediaReclaimStatus`.
+        */
+        reclaimDebugMedia: method(MediaReclaimInputSchema, MediaReclaimStartResultSchema, {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        getMediaReclaimStatus: method(zod.z.object({}), MediaReclaimStatusSchema, {
+          kind: "query",
+          auth: "admin"
+        }),
+        /**
         * The CHEAP QUESTION, asked before any media moves: how big is the dataset
         * the marked (`markForTrain`) tracks would produce?
         *
@@ -47264,6 +47422,23 @@ var require_dist_CCIBlacf = __commonJS({
           kind: "query",
           auth: "admin"
         }),
+        /**
+        * Does this location's LEDGER tell the truth about its disk? (D319)
+        *
+        * One `readdir` per claimed hour, diffed both ways: durable rows whose file
+        * is not there, and files no durable row names. `apply` defaults to FALSE —
+        * the report is the product, and the dry run is how an operator
+        * sanity-checks the destructive run before authorising it.
+        *
+        * REFUSES a source that is still a write target: a listing of a live
+        * location is a lower bound, which is not the strong evidence that lets
+        * this pass forget without a budget. A live location is reconciled by the
+        * mover, under D318's bound.
+        */
+        reconcileLedgerAgainstDisk: method(LedgerWalkInputSchema, LedgerWalkReportSchema, {
+          kind: "mutation",
+          auth: "admin"
+        }),
         /** Cancel a running or queued relocate job. A queued job never runs. */
         cancelRelocateJob: method(zod.z.object({ jobId: zod.z.string() }), zod.z.object({ cancelled: zod.z.boolean() }), {
           kind: "mutation",
@@ -47561,6 +47736,10 @@ var require_dist_CCIBlacf = __commonJS({
       monitors: zod.z.array(SceneMonitorSchema),
       lastFetchedAt: zod.z.number()
     });
+    var SceneMonitorStatusForDeviceSchema = zod.z.object({
+      deviceId: zod.z.number(),
+      status: SceneMonitorStatusSchema.nullable()
+    });
     var sceneMonitorCapability = {
       name: "scene-monitor",
       scope: "device",
@@ -47570,6 +47749,22 @@ var require_dist_CCIBlacf = __commonJS({
       deviceTypes: [DeviceType.Camera],
       methods: {
         listScenes: method(zod.z.object({ deviceId: zod.z.number() }), SceneMonitorStatusSchema),
+        /**
+        * The same answer, for a SET of cameras, in one round trip.
+        *
+        * `/scenes` renders every camera and re-reads them on a 30s safety-net
+        * poll behind the push slice. Fanned out client-side that was one query
+        * per camera — 29 round trips through the browser, the hub and the
+        * post-analysis runner every 30 seconds to read an in-memory map the
+        * owner had already merged. The work is unchanged (`statusFor` per
+        * device, all in-process at the owner); what collapses is the transport.
+        *
+        * A camera that cannot answer still gets a row, with `status: null` —
+        * see {@link SceneMonitorStatusForDeviceSchema}. Never fewer rows than
+        * ids: a caller that asked for twenty-nine and got twenty-seven cannot
+        * tell which two are missing, or that any are.
+        */
+        listScenesBatch: method(zod.z.object({ deviceIds: zod.z.array(zod.z.number()).min(1).max(200) }), zod.z.array(SceneMonitorStatusForDeviceSchema).readonly()),
         createScene: method(zod.z.object({
           deviceId: zod.z.number(),
           label: zod.z.string(),
@@ -49370,6 +49565,11 @@ var require_dist_CCIBlacf = __commonJS({
       *  than as repeated tracks/events. */
       stationaryObjects: zod.z.array(StationaryObjectSchema).readonly().optional()
     });
+    var CameraOccupancySnapshotForDeviceSchema = zod.z.object({
+      deviceId: zod.z.number(),
+      read: zod.z.enum(["read", "unreadable"]),
+      snapshot: CameraOccupancySnapshotSchema.nullable()
+    });
     var HistoryResolutionEnum = zod.z.enum([
       "minute",
       "5min",
@@ -49399,6 +49599,20 @@ var require_dist_CCIBlacf = __commonJS({
         *  (no inference result emitted since boot or since binding was
         *  activated). */
         getCurrentSnapshot: method(zod.z.object({ deviceId: zod.z.number() }), CameraOccupancySnapshotSchema.nullable()),
+        /**
+        * The same snapshot, for a SET of cameras, in one round trip.
+        *
+        * The Events page's Stationary section polls this every 15s for every
+        * selected camera. Fanned out client-side that is one query per camera to
+        * read a `Map.get` at the owner — the answer costs nothing, the round trip
+        * costs everything. Batched, N transports become one and the per-device
+        * work is unchanged.
+        *
+        * Every requested deviceId gets a row, tagged `read` — see
+        * {@link CameraOccupancySnapshotForDeviceSchema}. A camera the owner could
+        * not answer for is `'unreadable'`, never an empty reading.
+        */
+        getCurrentSnapshotBatch: method(zod.z.object({ deviceIds: zod.z.array(zod.z.number()).min(1).max(200) }), zod.z.array(CameraOccupancySnapshotForDeviceSchema).readonly()),
         /** Time-series object count inside one zone. `className` optional —
         *  omit to count every class in the zone. */
         getZoneHistory: method(zod.z.object({
@@ -53346,6 +53560,18 @@ var require_dist_CCIBlacf = __commonJS({
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.getKeyEventsBatch": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
+      "pipelineAnalytics.getMediaReclaimStatus": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.getMotionEvents": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -53520,6 +53746,12 @@ var require_dist_CCIBlacf = __commonJS({
         addonId: null,
         access: "create"
       },
+      "pipelineAnalytics.reclaimDebugMedia": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "create"
+      },
       "pipelineAnalytics.reconcileFromDisk": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -54522,6 +54754,12 @@ var require_dist_CCIBlacf = __commonJS({
         addonId: null,
         access: "view"
       },
+      "recording.reconcileLedgerAgainstDisk": {
+        capName: "recording",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "recording.refreshStorageLocationsForMigration": {
         capName: "recording",
         capScope: "system",
@@ -54648,6 +54886,12 @@ var require_dist_CCIBlacf = __commonJS({
         addonId: null,
         access: "view"
       },
+      "sceneMonitor.listScenesBatch": {
+        capName: "scene-monitor",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "sceneMonitor.recheckNow": {
         capName: "scene-monitor",
         capScope: "device",
@@ -56004,6 +56248,12 @@ var require_dist_CCIBlacf = __commonJS({
         addonId: null,
         access: "view"
       },
+      "zoneAnalytics.getCurrentSnapshotBatch": {
+        capName: "zone-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "zoneAnalytics.getUnzonedHistory": {
         capName: "zone-analytics",
         capScope: "device",
@@ -57008,6 +57258,11 @@ var require_dist_CCIBlacf = __commonJS({
         form: "single",
         optional: false
       }],
+      "pipelineAnalytics.getKeyEventsBatch": [{
+        name: "deviceIds",
+        form: "array",
+        optional: false
+      }],
       "pipelineAnalytics.getMotionEvents": [{
         name: "deviceId",
         form: "single",
@@ -57113,6 +57368,11 @@ var require_dist_CCIBlacf = __commonJS({
         form: "single",
         optional: true
       }],
+      "pipelineAnalytics.reclaimDebugMedia": [{
+        name: "deviceIds",
+        form: "array",
+        optional: true
+      }],
       "pipelineAnalytics.reconcileFromDisk": [{
         name: "deviceId",
         form: "single",
@@ -57448,6 +57708,11 @@ var require_dist_CCIBlacf = __commonJS({
         form: "single",
         optional: false
       }],
+      "recording.reconcileLedgerAgainstDisk": [{
+        name: "deviceId",
+        form: "single",
+        optional: true
+      }],
       "recording.relocateFootage": [{
         name: "deviceId",
         form: "single",
@@ -57513,6 +57778,11 @@ var require_dist_CCIBlacf = __commonJS({
         form: "single",
         optional: false
       }],
+      "sceneMonitor.listScenesBatch": [{
+        name: "deviceIds",
+        form: "array",
+        optional: false
+      }],
       "sceneMonitor.recheckNow": [{
         name: "deviceId",
         form: "single",
@@ -57774,6 +58044,11 @@ var require_dist_CCIBlacf = __commonJS({
         form: "single",
         optional: false
       }],
+      "zoneAnalytics.getCurrentSnapshotBatch": [{
+        name: "deviceIds",
+        form: "array",
+        optional: false
+      }],
       "zoneAnalytics.getUnzonedHistory": [{
         name: "deviceId",
         form: "single",
@@ -59207,7 +59482,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CCIBlacf();
+    var require_dist10 = require_dist_BhE8zNfY();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -60026,7 +60301,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CCIBlacf();
+    var require_dist10 = require_dist_BhE8zNfY();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -60120,7 +60395,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CCIBlacf();
+    var require_dist10 = require_dist_BhE8zNfY();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -61017,11 +61292,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-BxV3e2Km.js
-var require_retired_settings_keys_BxV3e2Km = __commonJS({
-  "../system/dist/retired-settings-keys-BxV3e2Km.js"(exports) {
+// ../system/dist/retired-settings-keys-CqDbI-vK.js
+var require_retired_settings_keys_CqDbI_vK = __commonJS({
+  "../system/dist/retired-settings-keys-CqDbI-vK.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_CCIBlacf();
+    var require_dist10 = require_dist_BhE8zNfY();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -63235,8 +63510,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CCIBlacf();
-    var require_retired_settings_keys = require_retired_settings_keys_BxV3e2Km();
+    var require_dist10 = require_dist_BhE8zNfY();
+    var require_retired_settings_keys = require_retired_settings_keys_CqDbI_vK();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -64214,6 +64489,9 @@ var require_device_manager_addon = __commonJS({
       for (const f of features) if (DEVICE_FEATURE_VALUES.has(f)) out.push(f);
       return out;
     }
+    function persistedIsCamera(type) {
+      return type === require_dist10.DeviceType.Camera;
+    }
     function buildSourceInfoFromConfig(persistedConfig, stableId, addonId) {
       const id = typeof persistedConfig["entityId"] === "string" ? persistedConfig["entityId"] : void 0;
       const system = typeof persistedConfig["system"] === "string" ? persistedConfig["system"] : void 0;
@@ -64360,7 +64638,7 @@ var require_device_manager_addon = __commonJS({
           online: pctx.host.resolveDeviceOnline(m.id, pctx.registry !== null),
           probed: pctx.host.resolveDeviceProbed(m.id),
           features: persistedFeatures(m.features),
-          isCamera: persistedType === require_dist10.DeviceType.Camera,
+          isCamera: persistedIsCamera(persistedType),
           config: persistedConfig ?? {},
           metadata,
           ...m.integrationId !== void 0 ? { integrationId: m.integrationId } : {},
@@ -64405,7 +64683,7 @@ var require_device_manager_addon = __commonJS({
         online: pctx.host.resolveDeviceOnline(deviceId, true),
         probed: pctx.host.resolveDeviceProbed(deviceId),
         features: persistedFeatures(m.features),
-        isCamera: false,
+        isCamera: persistedIsCamera(m.type),
         config: persistedConfig ?? {},
         metadata,
         ...m.integrationId !== void 0 ? { integrationId: m.integrationId } : {},
@@ -64453,7 +64731,7 @@ var require_device_manager_addon = __commonJS({
           online: pctx.host.resolveDeviceOnline(m.id, pctx.registry !== null),
           probed: pctx.host.resolveDeviceProbed(m.id),
           features: persistedFeatures(m.features),
-          isCamera: false,
+          isCamera: persistedIsCamera(m.type),
           config: persistedConfig,
           metadata,
           ...m.integrationId !== void 0 ? { integrationId: m.integrationId } : {},
@@ -68049,7 +68327,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CCIBlacf();
+    var require_dist10 = require_dist_BhE8zNfY();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -68186,7 +68464,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CCIBlacf();
+    var require_dist10 = require_dist_BhE8zNfY();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -68376,7 +68654,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CCIBlacf();
+    var require_dist10 = require_dist_BhE8zNfY();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -76189,7 +76467,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CCIBlacf();
+    var require_dist10 = require_dist_BhE8zNfY();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -76754,7 +77032,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CCIBlacf();
+    var require_dist10 = require_dist_BhE8zNfY();
     var node_fs_promises = __require("fs/promises");
     var node_child_process = __require("child_process");
     var node_util = __require("util");
@@ -79376,7 +79654,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CCIBlacf();
+    var require_dist10 = require_dist_BhE8zNfY();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -80492,8 +80770,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CCIBlacf();
-    var require_retired_settings_keys = require_retired_settings_keys_BxV3e2Km();
+    var require_dist10 = require_dist_BhE8zNfY();
+    var require_retired_settings_keys = require_retired_settings_keys_CqDbI_vK();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -80529,6 +80807,14 @@ var require_sqlite_settings_addon = __commonJS({
     var SQLITE_PROFILE_REPORT_INTERVAL_MS = 6e4;
     var SQLITE_PROFILE_REPORT_FLOOR_MS = 250;
     var SQLITE_PROFILE_TOP_N = 5;
+    var SQLITE_ENGINE_STORM_WALL_SHARE = 0.5;
+    function sqliteEngineStorm(stats, windowMs) {
+      if (windowMs <= 0) return null;
+      const top = stats[0];
+      if (top === void 0) return null;
+      if (top.totalMs / windowMs < 0.5) return null;
+      return top;
+    }
     function rowsOf(value) {
       if (Array.isArray(value)) return value.length;
       if (value === void 0 || value === null) return 0;
@@ -80663,21 +80949,39 @@ var require_sqlite_settings_addon = __commonJS({
         const stats = this.drain();
         const busyMs = stats.reduce((acc, s) => acc + s.totalMs, 0);
         if (busyMs < this.reportFloorMs) return;
+        const busyPct = Math.round(busyMs / windowMs * 100);
+        const calls = stats.reduce((acc, s) => acc + s.calls, 0);
+        const top = stats.slice(0, this.topN).map((s) => ({
+          op: s.op,
+          collection: s.collection,
+          ...s.owner === void 0 ? {} : { owner: s.owner },
+          ...s.shape === void 0 ? {} : { shape: s.shape },
+          calls: s.calls,
+          totalMs: Math.round(s.totalMs),
+          maxMs: Math.round(s.maxMs),
+          rows: s.rows
+        }));
         this.logger.info("sqlite engine busy", { meta: {
           busyMs: Math.round(busyMs),
           windowMs: Math.round(windowMs),
-          busyPct: Math.round(busyMs / windowMs * 100),
-          calls: stats.reduce((acc, s) => acc + s.calls, 0),
-          top: stats.slice(0, this.topN).map((s) => ({
-            op: s.op,
-            collection: s.collection,
-            ...s.owner === void 0 ? {} : { owner: s.owner },
-            ...s.shape === void 0 ? {} : { shape: s.shape },
-            calls: s.calls,
-            totalMs: Math.round(s.totalMs),
-            maxMs: Math.round(s.maxMs),
-            rows: s.rows
-          }))
+          busyPct,
+          calls,
+          top
+        } });
+        const storm = sqliteEngineStorm(stats, windowMs);
+        if (storm !== null) this.logger.warn("sqlite engine storm", { meta: {
+          busyMs: Math.round(busyMs),
+          windowMs: Math.round(windowMs),
+          busyPct,
+          wallPct: Math.round(storm.totalMs / windowMs * 100),
+          op: storm.op,
+          collection: storm.collection,
+          ...storm.owner === void 0 ? {} : { owner: storm.owner },
+          ...storm.shape === void 0 ? {} : { shape: storm.shape },
+          calls: storm.calls,
+          totalMs: Math.round(storm.totalMs),
+          maxMs: Math.round(storm.maxMs),
+          rows: storm.rows
         } });
       }
       start() {
@@ -82757,6 +83061,7 @@ var require_sqlite_settings_addon = __commonJS({
         return this.vectorIndex;
       }
     };
+    exports.SQLITE_ENGINE_STORM_WALL_SHARE = SQLITE_ENGINE_STORM_WALL_SHARE;
     exports.SQLITE_JOURNAL_SIZE_LIMIT_BYTES = SQLITE_JOURNAL_SIZE_LIMIT_BYTES;
     exports.SQLITE_MMAP_CEILING_BYTES = SQLITE_MMAP_CEILING_BYTES;
     exports.SQLITE_MMAP_FLOOR_BYTES = SQLITE_MMAP_FLOOR_BYTES;
@@ -82776,6 +83081,7 @@ var require_sqlite_settings_addon = __commonJS({
     exports.WAL_MAINTENANCE_INTERVAL_MS = WAL_MAINTENANCE_INTERVAL_MS;
     exports.WalMaintenance = WalMaintenance;
     exports.prefixRange = prefixRange;
+    exports.sqliteEngineStorm = sqliteEngineStorm;
     exports.sqliteMmapSizeFor = sqliteMmapSizeFor;
     exports.sqlitePageCacheKibFor = sqlitePageCacheKibFor;
   }
@@ -82840,6 +83146,7 @@ var require_sqlite_storage = __commonJS({
     exports.DeviceStore$1 = DeviceStore;
     exports.FilesystemStorageAddon = require_builtins_sqlite_storage_filesystem_storage_addon.FilesystemStorageAddon;
     exports.FilesystemStorageProvider = require_builtins_sqlite_storage_filesystem_storage_addon.FilesystemStorageProvider;
+    exports.SQLITE_ENGINE_STORM_WALL_SHARE = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_ENGINE_STORM_WALL_SHARE;
     exports.SQLITE_JOURNAL_SIZE_LIMIT_BYTES = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_JOURNAL_SIZE_LIMIT_BYTES;
     exports.SQLITE_MMAP_CEILING_BYTES = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_MMAP_CEILING_BYTES;
     exports.SQLITE_MMAP_FLOOR_BYTES = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_MMAP_FLOOR_BYTES;
@@ -82858,6 +83165,7 @@ var require_sqlite_storage = __commonJS({
     exports.WAL_MAINTENANCE_INTERVAL_MS = require_builtins_sqlite_storage_sqlite_settings_addon.WAL_MAINTENANCE_INTERVAL_MS;
     exports.WalMaintenance = require_builtins_sqlite_storage_sqlite_settings_addon.WalMaintenance;
     exports.default = require_builtins_sqlite_storage_filesystem_storage_addon.FilesystemStorageAddon;
+    exports.sqliteEngineStorm = require_builtins_sqlite_storage_sqlite_settings_addon.sqliteEngineStorm;
     exports.sqliteMmapSizeFor = require_builtins_sqlite_storage_sqlite_settings_addon.sqliteMmapSizeFor;
     exports.sqlitePageCacheKibFor = require_builtins_sqlite_storage_sqlite_settings_addon.sqlitePageCacheKibFor;
   }
@@ -82872,7 +83180,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CCIBlacf();
+    var require_dist10 = require_dist_BhE8zNfY();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -83056,17 +83364,13 @@ var require_storage_orchestrator_addon = __commonJS({
       "recordings",
       "recordingsLow",
       "eventMedia",
-      "backups",
-      "galleryMedia"
+      "backups"
     ];
     var MOVER_CLASSES = [
       "recordings",
       "recordingsLow",
-      "eventMedia",
-      "galleryMedia"
+      "eventMedia"
     ];
-    var BLOCKING_ONLY_CLASSES = ["galleryMedia"];
-    var GALLERY_FORBIDDEN_NEIGHBOUR_TYPES = ["recordings", "recordingsLow"];
     var MOVE_LANES = ["media", "footage"];
     var PARTICIPANTS = [
       "pipeline",
@@ -83091,6 +83395,7 @@ var require_storage_orchestrator_addon = __commonJS({
         this.deps = deps;
       }
       async plan(input) {
+        refuseRetiredGalleryClass(input.destinations);
         const mode = input.mode ?? "blocking";
         const moves = [];
         const findings = [];
@@ -83104,8 +83409,6 @@ var require_storage_orchestrator_addon = __commonJS({
           if (target.type !== storageClass) throw new Error(`Storage location "${targetId}" is type "${target.type}", expected "${storageClass}"`);
           if (source.id === target.id) throw new Error(`Storage location "${targetId}" is already the "${storageClass}" default`);
           if (!MOVER_CLASSES.includes(storageClass)) throw new Error(`No mover owns "${storageClass}" \u2014 the migration can repoint its default but cannot move its bytes. Move it by hand, then repoint the default with upsertLocation.`);
-          if (mode === "nonBlocking" && BLOCKING_ONLY_CLASSES.includes(storageClass)) throw new Error(`"${storageClass}" is a single-cardinality storage class: it can never exist at two locations at once, so it cannot be repointed first and drained behind. Use mode "blocking".`);
-          await this.refuseGalleryOntoRecordingsVolume(storageClass, targetId);
           moves.push({
             storageClass,
             fromLocationId: source.id,
@@ -83115,11 +83418,6 @@ var require_storage_orchestrator_addon = __commonJS({
             error: null,
             progress: null
           });
-          if (BLOCKING_ONLY_CLASSES.includes(storageClass)) findings.push({
-            code: "blockingOnly",
-            storageClass,
-            message: `"${storageClass}" is single-cardinality: this move is stop-the-world for its whole duration, in every mode. It is a few KB per enrolled sample, which is why that is acceptable.`
-          });
           findings.push(...await this.deviceFindings(storageClass, source.id, target.id));
         }
         if (moves.length === 0) throw new Error("select at least one storage class");
@@ -83154,29 +83452,6 @@ var require_storage_orchestrator_addon = __commonJS({
           findings
         };
       }
-      /**
-      * HARD refusal: `galleryMedia` onto a volume a recordings class lives on.
-      *
-      * This is the one same-device case that is a refusal rather than a finding,
-      * because its consequence is silent and arrives months later — the gallery is
-      * wiped by the next footage wipe, quota eviction or recordings disk swap, and
-      * nothing at that moment points back at this migration.
-      *
-      * It can only refuse what it can SEE. `deviceKeyOf` is a realpath, so it
-      * catches a symlink, a bind mount and a literally-shared directory — and
-      * misses two distinct directories on one filesystem, and any location pinned
-      * to another node. Those come back `null`/distinct and produce a
-      * `deviceIdentityUnknown` finding instead.
-      */
-      async refuseGalleryOntoRecordingsVolume(storageClass, targetId) {
-        if (storageClass !== "galleryMedia") return;
-        const targetKey = await this.deviceKey(targetId);
-        if (targetKey === null) return;
-        for (const type of GALLERY_FORBIDDEN_NEIGHBOUR_TYPES) for (const neighbour of this.deps.locations.listLocations({ type })) {
-          if (await this.deviceKey(neighbour.id) !== targetKey) continue;
-          throw new Error(`Storage location "${targetId}" shares a volume with "${neighbour.id}" (${type}). galleryMedia is deliberately NOT on the recordings volume: enrolment images survive every retention sweep, so they must also survive a footage wipe, a quota eviction and a recordings disk swap. Choose a destination on another volume.`);
-        }
-      }
       /** Same-device observations that are reported, not refused. */
       async deviceFindings(storageClass, sourceId, targetId) {
         if (this.deps.deviceKeyOf === void 0) return [];
@@ -83308,7 +83583,7 @@ var require_storage_orchestrator_addon = __commonJS({
           if (laneOf(storageClass) === "media") {
             const count = await unanswerable(this.deps.participants.analytics.residue({
               toLocationId: target.id,
-              mode: storageClass === "galleryMedia" ? "gallery" : "move"
+              mode: "move"
             }));
             if (count !== null && count.rows === 0) continue;
             out.push({
@@ -83588,9 +83863,7 @@ var require_storage_orchestrator_addon = __commonJS({
       *
       * Two lanes — the recorder's footage engine and post-analysis's media engine
       * — run in parallel with each other and strictly FIFO within themselves.
-      * `galleryMedia` shares the media lane with `eventMedia` because it shares
-      * the same `MediaRelocateEngine`, which refuses a second running job; starting
-      * both would fail the second one instantly.
+      * `eventMedia` is the only class on the media lane.
       */
       async startOrResumeMoves(job) {
         if (job.cancelRequested) return;
@@ -83720,7 +83993,7 @@ var require_storage_orchestrator_addon = __commonJS({
           const input2 = {
             toLocationId: move.toLocationId,
             throttleMbps: job.throttleMbps,
-            mode: move.storageClass === "galleryMedia" ? "gallery" : "move"
+            mode: "move"
           };
           return (unleased ? await this.deps.participants.analytics.startDrain(input2) : await this.deps.participants.analytics.startMove({
             ...input2,
@@ -83781,7 +84054,11 @@ var require_storage_orchestrator_addon = __commonJS({
       return job.phase === "done" || job.phase === "failed" || job.phase === "cancelled";
     }
     function laneOf(storageClass) {
-      return storageClass === "eventMedia" || storageClass === "galleryMedia" ? "media" : "footage";
+      return storageClass === "eventMedia" ? "media" : "footage";
+    }
+    function refuseRetiredGalleryClass(destinations) {
+      if (destinations.galleryMedia === void 0) return;
+      throw new Error("galleryMedia is no longer a storage class. Enrolled gallery lives in the pipeline-analytics addon data directory, not a location the operator places.");
     }
     function runsUnleased(job) {
       if (job.phase === "sealing" || job.phase === "draining") return true;
@@ -84052,14 +84329,13 @@ var require_storage_orchestrator_addon = __commonJS({
       /**
       * Shout about a persisted row that is BOTH the type default and disabled.
       *
-      * `upsertLocation` cannot produce this (`resolveEnabled` force-enables a
-      * default) and neither can `setDefaultLocations` — but hydrate writes rows
-      * straight into the map without either, so a hand-edited store, a partial
-      * migration or a row written by another build can. It matters because every
-      * bare-type ref resolves through {@link getDefaultLocation}: on such a row
+      * `upsertLocation` can now produce this (enabled is the write set; `isDefault`
+      * is store residue). Hydrate also writes rows straight into the map, so a
+      * hand-edited store or a row written by another build can too. It matters
+      * because every bare-type ref still resolves through {@link getDefaultLocation}
+      * until Stage 5 of the enabled-write-set design: on such a row
       * `storage.write({ location: 'eventMedia' })` and the migration coordinator's
-      * drain destination both point at a disk the operator turned off. That is the
-      * one thing this model must never do silently.
+      * drain destination both point at a disk the operator turned off.
       *
       * Reported, never repaired: flipping an operator's flag back on at boot would
       * be the system overruling the switch instead of obeying it. The coordinator
@@ -84344,6 +84620,7 @@ var require_storage_orchestrator_addon = __commonJS({
           createdAt: existing?.createdAt ?? now,
           updatedAt: now
         };
+        refuseLastWriteTargetDisabled(existing, next, this.locations.values());
         const demoted = [];
         if (next.isDefault) {
           for (const [otherId, otherLoc] of this.locations) if (otherLoc.type === next.type && otherLoc.id !== next.id && otherLoc.isDefault) {
@@ -84638,9 +84915,20 @@ var require_storage_orchestrator_addon = __commonJS({
         if (existing) return {};
         return { enabled: input.isDefault || !typeAlreadyHasLocation };
       }
-      if (input.isDefault && requested === false) return { enabled: true };
       return { enabled: requested };
     }
+    var OPTIONAL_WRITE_TYPES = /* @__PURE__ */ new Set(["backups"]);
+    function refuseLastWriteTargetDisabled(existing, next, locations) {
+      if (OPTIONAL_WRITE_TYPES.has(next.type)) return;
+      if (next.enabled !== false) return;
+      if (existing === void 0) return;
+      if (existing.enabled === false) return;
+      for (const loc of locations) {
+        if (loc.id === next.id || loc.type !== next.type) continue;
+        if (loc.enabled !== false) return;
+      }
+      throw new Error(`Cannot disable "${next.id}": it is the last enabled location of type "${next.type}". Enable another location of this type first.`);
+    }
     var DEFAULT_MAX_ROUNDS = 8;
     var DEFAULT_HYSTERESIS_PERCENT = 1;
     var StoragePressureManager = class {
@@ -85469,7 +85757,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CCIBlacf();
+    var require_dist10 = require_dist_BhE8zNfY();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -103530,7 +103818,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CCIBlacf();
+    var require_dist10 = require_dist_BhE8zNfY();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -105473,9 +105761,9 @@ var require_event_category_BaEgqJNv = __commonJS({
   }
 });
 
-// ../types/dist/sleep-D5821NGq.js
-var require_sleep_D5821NGq = __commonJS({
-  "../types/dist/sleep-D5821NGq.js"(exports) {
+// ../types/dist/sleep-CqVyhcl-.js
+var require_sleep_CqVyhcl = __commonJS({
+  "../types/dist/sleep-CqVyhcl-.js"(exports) {
     "use strict";
     var require_event_category = require_event_category_BaEgqJNv();
     var zod = require_zod();
@@ -108158,6 +108446,7 @@ var require_sleep_D5821NGq = __commonJS({
           listEventKindsBatch: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listEventKindsBatch", "query", input),
           getSensorEvents: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getSensorEvents", "query", input),
           getKeyEvents: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getKeyEvents", "query", input),
+          getKeyEventsBatch: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getKeyEventsBatch", "query", input),
           getEventDensity: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getEventDensity", "query", input),
           pruneEventsBefore: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "pruneEventsBefore", "mutation", input),
           pruneTracksBefore: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "pruneTracksBefore", "mutation", input),
@@ -108181,6 +108470,8 @@ var require_sleep_D5821NGq = __commonJS({
           listRelocateMediaJobs: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listRelocateMediaJobs", "query", input),
           cancelRelocateMedia: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "cancelRelocateMedia", "mutation", input),
           listOpsLog: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listOpsLog", "query", input),
+          reclaimDebugMedia: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "reclaimDebugMedia", "mutation", input),
+          getMediaReclaimStatus: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getMediaReclaimStatus", "query", input),
           getTrainingExportSummary: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getTrainingExportSummary", "query", input),
           getTrainingExportUrl: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getTrainingExportUrl", "query", input),
           listRetrainStaging: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listRetrainStaging", "query", input),
@@ -108239,6 +108530,7 @@ var require_sleep_D5821NGq = __commonJS({
         reboot: { reboot: (input) => dispatch("reboot", "reboot", "reboot", "mutation", input) },
         sceneMonitor: {
           listScenes: (input) => dispatch("scene-monitor", "sceneMonitor", "listScenes", "query", input),
+          listScenesBatch: (input) => dispatch("scene-monitor", "sceneMonitor", "listScenesBatch", "query", input),
           createScene: (input) => dispatch("scene-monitor", "sceneMonitor", "createScene", "mutation", input),
           updateScene: (input) => dispatch("scene-monitor", "sceneMonitor", "updateScene", "mutation", input),
           deleteScene: (input) => dispatch("scene-monitor", "sceneMonitor", "deleteScene", "mutation", input),
@@ -108323,6 +108615,7 @@ var require_sleep_D5821NGq = __commonJS({
         },
         zoneAnalytics: {
           getCurrentSnapshot: (input) => dispatch("zone-analytics", "zoneAnalytics", "getCurrentSnapshot", "query", input),
+          getCurrentSnapshotBatch: (input) => dispatch("zone-analytics", "zoneAnalytics", "getCurrentSnapshotBatch", "query", input),
           getZoneHistory: (input) => dispatch("zone-analytics", "zoneAnalytics", "getZoneHistory", "query", input),
           getCameraHistory: (input) => dispatch("zone-analytics", "zoneAnalytics", "getCameraHistory", "query", input),
           getUnzonedHistory: (input) => dispatch("zone-analytics", "zoneAnalytics", "getUnzonedHistory", "query", input)
@@ -109143,7 +109436,7 @@ var require_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_D5821NGq();
+    var require_sleep = require_sleep_CqVyhcl();
     var require_err_msg = require_err_msg_COpsHMw2();
     var CAP_INPUT_DEFAULTS = Object.freeze({
       "addons": { "getLogs": { "limit": 100 } },
@@ -109253,11 +109546,13 @@ var require_addon = __commonJS({
       "pipeline-analytics": {
         "getAudioEvents": { "limit": 1e3 },
         "getKeyEvents": { "limit": 50 },
+        "getKeyEventsBatch": { "limit": 50 },
         "getMotionEvents": { "limit": 1e3 },
         "getObjectEvents": { "limit": 1e3 },
         "getSensorEvents": { "limit": 1e3 },
         "listGroups": { "limit": 40 },
         "listRecentTracks": { "limit": 200 },
+        "reclaimDebugMedia": { "mode": "report" },
         "searchObjectEvents": {
           "limit": 50,
           "minScore": 0.2
@@ -116025,12 +116320,12 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/manifest-system-deps-alrkBKVQ.js
-var require_manifest_system_deps_alrkBKVQ = __commonJS({
-  "../system/dist/manifest-system-deps-alrkBKVQ.js"(exports) {
+// ../system/dist/manifest-system-deps-uflHvHDB.js
+var require_manifest_system_deps_uflHvHDB = __commonJS({
+  "../system/dist/manifest-system-deps-uflHvHDB.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    require_dist_CCIBlacf();
+    require_dist_BhE8zNfY();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var _camstack_types_node = require_node();
@@ -123315,6 +123610,93 @@ var require_manifest_system_deps_alrkBKVQ = __commonJS({
       }
       await deps.installPythonRequirements(reqAbs);
     }
+    var DISTRO_PACKAGE_ALLOWLIST = {
+      apt: ["smbclient"],
+      apk: ["samba-client"],
+      dnf: ["samba-client"]
+    };
+    function packageIsAllowlisted(manager, packageName) {
+      if (manager === "brew") return true;
+      if (packageName.length === 0) return false;
+      if (!/^[a-zA-Z0-9][a-zA-Z0-9+._-]*$/.test(packageName)) return false;
+      return DISTRO_PACKAGE_ALLOWLIST[manager].includes(packageName);
+    }
+    function decidePackageInstall(input) {
+      if (input.manager === "brew") return { kind: "local" };
+      if (!packageIsAllowlisted(input.manager, input.packageName)) return {
+        kind: "refuse",
+        reason: "not-allowlisted"
+      };
+      if (!input.helperAvailable) return {
+        kind: "refuse",
+        reason: "helper-unavailable"
+      };
+      return { kind: "helper" };
+    }
+    function pkgdSocketPath() {
+      return process.env["CAMSTACK_PKGD_SOCKET"] ?? "/run/camstack/pkgd.sock";
+    }
+    function privilegedHelperAvailable(socketPath = pkgdSocketPath()) {
+      return (0, node_fs.existsSync)(socketPath);
+    }
+    function requestPrivilegedInstall(req, socketPath = pkgdSocketPath(), timeoutMs = 360 * 1e3) {
+      return new Promise((resolve) => {
+        const socket = (0, node_net.createConnection)({ path: socketPath });
+        const chunks = [];
+        const finish = (result) => {
+          socket.destroy();
+          resolve(result);
+        };
+        const timer = setTimeout(() => {
+          finish({
+            ok: false,
+            error: `privileged helper timed out after ${timeoutMs}ms`
+          });
+        }, timeoutMs);
+        socket.on("connect", () => {
+          socket.write(`${JSON.stringify({
+            v: 1,
+            ...req
+          })}
+`);
+        });
+        socket.on("data", (data) => {
+          chunks.push(data);
+          const text = Buffer.concat(chunks).toString("utf8");
+          const nl = text.indexOf("\n");
+          if (nl === -1) return;
+          clearTimeout(timer);
+          try {
+            const parsed = JSON.parse(text.slice(0, nl));
+            finish({
+              ok: parsed.ok === true,
+              ...parsed.error !== void 0 ? { error: parsed.error } : {}
+            });
+          } catch (err) {
+            finish({
+              ok: false,
+              error: err instanceof Error ? err.message : String(err)
+            });
+          }
+        });
+        socket.on("error", (err) => {
+          clearTimeout(timer);
+          finish({
+            ok: false,
+            error: err.message
+          });
+        });
+        socket.on("end", () => {
+          if (chunks.length === 0) {
+            clearTimeout(timer);
+            finish({
+              ok: false,
+              error: "privileged helper closed without a reply"
+            });
+          }
+        });
+      });
+    }
     var execFileAsync = (0, node_util.promisify)(node_child_process.execFile);
     var INSTALL_TIMEOUT_MS = 300 * 1e3;
     var PROBE_TIMEOUT_MS = 1e4;
@@ -123325,12 +123707,16 @@ var require_manifest_system_deps_alrkBKVQ = __commonJS({
       const detectManager = options.detectManager ?? defaultDetectManager;
       const run = options.run ?? defaultRun;
       const platform = options.platform ?? process.platform;
+      const helperAvailable = options.helperAvailable ?? (async () => privilegedHelperAvailable());
+      const requestInstall = options.requestInstall ?? ((req) => requestPrivilegedInstall(req));
       for (const dep of deps) try {
         await satisfyOne(dep, declaration.id, {
           hasBinary,
           detectManager,
           run,
-          platform
+          platform,
+          helperAvailable,
+          requestInstall
         }, logger);
       } catch (err) {
         logger.warn("system dependency step failed", { meta: {
@@ -123368,15 +123754,43 @@ var require_manifest_system_deps_alrkBKVQ = __commonJS({
         } });
         return;
       }
-      const plan = planFor(manager, packageName);
+      const decision = decidePackageInstall({
+        manager,
+        packageName,
+        helperAvailable: await rt.helperAvailable()
+      });
+      if (decision.kind === "refuse") {
+        const message = decision.reason === "helper-unavailable" ? "system dependency missing and the privileged helper is not running \u2014 apt cannot run as uid 1001" : "system dependency missing and the package is not on the helper allowlist";
+        logger.warn(message, { meta: {
+          addonId,
+          binary: dep.binary,
+          manager,
+          package: packageName,
+          reason: decision.reason,
+          ...dep.reason !== void 0 ? { reason: dep.reason } : {}
+        } });
+        return;
+      }
       logger.info("installing system dependency", { meta: {
         addonId,
         binary: dep.binary,
         manager,
-        package: packageName
+        package: packageName,
+        via: decision.kind
       } });
       try {
-        for (const [command, args] of plan.steps) await rt.run(command, args);
+        if (decision.kind === "helper") {
+          const result = await rt.requestInstall({
+            addonId,
+            binary: dep.binary,
+            manager,
+            packageName
+          });
+          if (!result.ok) throw new Error(result.error ?? "privileged helper refused");
+        } else {
+          const plan = planFor(manager, packageName);
+          for (const [command, args] of plan.steps) await rt.run(command, args);
+        }
       } catch (err) {
         logger.warn("system dependency install failed \u2014 the addon loads, its capability must refuse", { meta: {
           addonId,
@@ -128059,7 +128473,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CCIBlacf();
+    var require_dist10 = require_dist_BhE8zNfY();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -128085,7 +128499,7 @@ var require_dist3 = __commonJS({
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_file_data_plane = require_file_data_plane_DO8KbxCe();
     var require_tls$1 = require_tls_BxQlomxd();
-    var require_manifest_system_deps = require_manifest_system_deps_alrkBKVQ();
+    var require_manifest_system_deps = require_manifest_system_deps_uflHvHDB();
     var require_resource_monitor = require_resource_monitor_CdnzxBLP();
     var require_custom_action_registry = require_custom_action_registry_jY0NOZK8();
     var zod = require_zod();
@@ -133973,19 +134387,37 @@ var require_dist3 = __commonJS({
       if (!isRecord$1(parsed) || !("value" in parsed)) return parsed;
       return parsed.value;
     }
+    var PREFIX_PAGE_ROWS = 1e3;
+    var PREFIX_PAGE_BUDGET = 512;
     async function loadPrefixed(door, collection, prefix) {
       const range = require_builtins_sqlite_storage_sqlite_settings_addon.prefixRange(prefix);
-      const rows = await door.query({
-        collection,
-        ...range !== null ? { filter: { whereBetween: { id: [range.lo, range.hi] } } } : {}
-      });
       const result = {};
-      for (const row of rows) {
-        if (range !== null && (row.id < range.lo || row.id >= range.hi)) continue;
-        if (!row.id.startsWith(prefix)) continue;
-        result[row.id.slice(prefix.length)] = unwrapValue(row.data);
+      let cursor = range?.lo ?? null;
+      for (let page = 0; ; page++) {
+        if (page >= PREFIX_PAGE_BUDGET) throw new Error(`settings door: reading "${prefix}" from "${collection}" exceeded ${PREFIX_PAGE_BUDGET} pages of ${PREFIX_PAGE_ROWS} rows. Refusing to return the part that was read \u2014 a partial scope read is indistinguishable from an empty one.`);
+        const rows = await door.query({
+          collection,
+          filter: {
+            ...range !== null && cursor !== null ? { whereBetween: { id: [cursor, range.hi] } } : {},
+            orderBy: {
+              field: "id",
+              direction: "asc"
+            },
+            limit: PREFIX_PAGE_ROWS
+          }
+        });
+        for (const row of rows) {
+          if (range !== null && (row.id < range.lo || row.id >= range.hi)) continue;
+          if (!row.id.startsWith(prefix)) continue;
+          result[row.id.slice(prefix.length)] = unwrapValue(row.data);
+        }
+        if (rows.length < PREFIX_PAGE_ROWS) return result;
+        const last = rows[rows.length - 1];
+        if (last === void 0) return result;
+        if (range === null) throw new Error(`settings door: prefix "${prefix}" on "${collection}" cannot be expressed as an id range, and the unfiltered read filled a page \u2014 the answer would be partial. Use an ASCII, non-empty prefix.`);
+        if (last.id === cursor) throw new Error(`settings door: reading "${prefix}" from "${collection}" made no progress at id "${last.id}" \u2014 ids under a prefix must be unique.`);
+        cursor = last.id;
       }
-      return result;
     }
     async function replacePrefixed(door, collection, prefix, values, wrap3) {
       const range = require_builtins_sqlite_storage_sqlite_settings_addon.prefixRange(prefix);
@@ -208909,7 +209341,7 @@ var require_dist4 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_D5821NGq();
+    var require_sleep = require_sleep_CqVyhcl();
     var require_canonical_hash = require_canonical_hash_DNV8S5ET();
     var require_enums2 = require_enums();
     var require_err_msg = require_err_msg_COpsHMw2();
@@ -210256,6 +210688,20 @@ var require_dist4 = __commonJS({
       * in its row, not in its name, so `MediaRelocateEngine` never reconciles one.
       */
       rowsReconciled: zod.z.number().int().nonnegative().optional(),
+      /**
+      * Rows this run FORGOT because the file they name is not on disk.
+      *
+      * The mover derived the path from the row's own fields and `stat`ed it; an
+      * ENOENT there is a per-path confirmation that the segment is gone (D296),
+      * and the durable row is dropped through the same channel eviction uses. It
+      * is reported for the same reason `rowsReconciled` is: this is a durable
+      * mutation nobody asked for, and a migration that quietly erases hour rows is
+      * the same failure as one that quietly skips them (D295).
+      *
+      * The production drain of 2026-08-30 would have reported 11 074 here — the
+      * ledger claimed 5.65 GB of footage that no longer existed.
+      */
+      rowsForgotten: zod.z.number().int().nonnegative().optional(),
       startedAt: zod.z.number(),
       finishedAt: zod.z.number().nullable(),
       error: zod.z.string().nullable()
@@ -210463,6 +210909,71 @@ var require_dist4 = __commonJS({
       segments: zod.z.number().int().nonnegative(),
       bytes: zod.z.number().int().nonnegative()
     }).nullable();
+    var LedgerWalkInputSchema = zod.z.object({
+      locationId: zod.z.string().min(1),
+      /** Forget the confirmed-absent rows, rather than only counting them. */
+      apply: zod.z.boolean().optional(),
+      /** Narrow to one camera. */
+      deviceId: zod.z.number().int().positive().optional(),
+      /** Narrow to these recording profiles; empty/absent = every profile. */
+      profiles: zod.z.array(zod.z.string().min(1)).optional()
+    });
+    var LedgerWalkRefusalSchema = zod.z.enum([
+      "location-unknown",
+      "source-writable",
+      "no-ledger",
+      "archive-unreadable",
+      "anchor-absent",
+      "anchor-unreadable",
+      "anchor-moved"
+    ]);
+    var LedgerWalkSkipReasonSchema = zod.z.enum([
+      "live-tail",
+      "listing-error",
+      "path-mismatch",
+      "durable-refused"
+    ]);
+    var LedgerWalkSkipCountsSchema = zod.z.object({
+      "live-tail": zod.z.number().int().nonnegative(),
+      "listing-error": zod.z.number().int().nonnegative(),
+      "path-mismatch": zod.z.number().int().nonnegative(),
+      "durable-refused": zod.z.number().int().nonnegative()
+    });
+    var LedgerWalkDeviceReportSchema = zod.z.object({
+      deviceId: zod.z.number().int(),
+      hoursWalked: zod.z.number().int().nonnegative(),
+      hoursMissing: zod.z.number().int().nonnegative(),
+      ghostSegments: zod.z.number().int().nonnegative(),
+      ghostBytes: zod.z.number().int().nonnegative(),
+      forgottenSegments: zod.z.number().int().nonnegative(),
+      orphanFiles: zod.z.number().int().nonnegative()
+    });
+    var LedgerWalkReportSchema = zod.z.object({
+      locationId: zod.z.string(),
+      applied: zod.z.boolean(),
+      refused: LedgerWalkRefusalSchema.nullable(),
+      archiveSegments: zod.z.number().int().nonnegative().nullable(),
+      archiveBytes: zod.z.number().int().nonnegative().nullable(),
+      hoursClaimed: zod.z.number().int().nonnegative(),
+      hoursWalked: zod.z.number().int().nonnegative(),
+      hoursMissing: zod.z.number().int().nonnegative(),
+      /** `readdir` calls issued — the cost, stated in the unit that is paid. */
+      listings: zod.z.number().int().nonnegative(),
+      segmentsClaimed: zod.z.number().int().nonnegative(),
+      ghostSegments: zod.z.number().int().nonnegative(),
+      ghostBytes: zod.z.number().int().nonnegative(),
+      ghostHoursWhole: zod.z.number().int().nonnegative(),
+      forgottenSegments: zod.z.number().int().nonnegative(),
+      forgottenBytes: zod.z.number().int().nonnegative(),
+      /** Files under a claimed hour that no durable row names. Never deleted. */
+      orphanFiles: zod.z.number().int().nonnegative(),
+      orphanSample: zod.z.array(zod.z.string()).readonly(),
+      hoursSkipped: zod.z.number().int().nonnegative(),
+      skippedByReason: LedgerWalkSkipCountsSchema,
+      /** The walk stopped at its per-pass hour bound with claims unwalked. */
+      bounded: zod.z.boolean(),
+      byDevice: zod.z.array(LedgerWalkDeviceReportSchema).readonly()
+    });
     var RelocatableMediaCountSchema = zod.z.object({ rows: zod.z.number().int().nonnegative() }).nullable();
     var RelocatableMediaCountInputSchema = zod.z.object({
       toLocationId: zod.z.string().min(1),
@@ -222962,13 +223473,15 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       groups: zod.z.array(AnalyticsGroupRecordSchema).readonly(),
       nextCursor: zod.z.string().nullable()
     });
+    var KEY_EVENTS_DEFAULT_LIMIT = 50;
+    var KEY_EVENTS_MAX_LIMIT = 200;
     var KeyEventQueryInput = zod.z.object({
       deviceId: zod.z.number(),
       /** Window lower bound (track firstSeen ≥ since). */
       since: zod.z.number(),
       /** Window upper bound (track firstSeen ≤ until). */
       until: zod.z.number(),
-      limit: zod.z.number().int().min(1).max(200).default(50),
+      limit: zod.z.number().int().min(1).max(KEY_EVENTS_MAX_LIMIT).default(KEY_EVENTS_DEFAULT_LIMIT),
       /** Drop tracks scoring below this importance. */
       minImportance: zod.z.number().min(0).max(1).optional(),
       /** Restrict to a single class (e.g. 'person'). */
@@ -222990,6 +223503,21 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       ...TrackFlagFields,
       ...TrackRetrainFields
     });
+    var KeyEventBatchQueryInput = zod.z.object({
+      deviceIds: zod.z.array(zod.z.number()).min(1).max(200),
+      since: zod.z.number(),
+      until: zod.z.number(),
+      /** Applied PER CAMERA, exactly as `getKeyEvents.limit` is — never a total
+      *  across the set, which would let a busy camera starve a quiet one of its
+      *  rows and change what the merged feed contains. */
+      limit: zod.z.number().int().min(1).max(KEY_EVENTS_MAX_LIMIT).default(KEY_EVENTS_DEFAULT_LIMIT),
+      minImportance: zod.z.number().min(0).max(1).optional(),
+      classFilter: zod.z.string().optional()
+    });
+    var KeyEventsForDeviceSchema = zod.z.object({
+      deviceId: zod.z.number(),
+      events: zod.z.array(KeyEventSchema).readonly()
+    });
     var TrackedDetectionSchema = zod.z.object({
       trackId: zod.z.string(),
       className: zod.z.string(),
@@ -223154,6 +223682,39 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       /** Present when the pass ended by throwing. */
       error: zod.z.string().nullable()
     });
+    var MediaReclaimStartResultSchema = zod.z.object({
+      started: zod.z.boolean(),
+      /** True when a pass was already running; the new request is ignored. */
+      alreadyRunning: zod.z.boolean()
+    });
+    var MediaReclaimInputSchema = zod.z.object({
+      mode: zod.z.enum(["report", "reclaim"]).default("report"),
+      scopes: zod.z.array(zod.z.enum(["motion-still", "track-filmstrip"])).min(1).optional(),
+      deviceIds: zod.z.array(zod.z.number().int()).min(1).optional(),
+      restart: zod.z.boolean().optional(),
+      pageSize: zod.z.number().int().min(50).max(5e3).optional(),
+      maxRowsPerDevice: zod.z.number().int().min(1).max(5e5).optional(),
+      maxReclaimPerDevice: zod.z.number().int().min(1).max(5e5).optional(),
+      maxBytesPerRun: zod.z.number().int().min(1).optional(),
+      budgetMinutes: zod.z.number().int().min(1).max(720).optional(),
+      throttleBytesPerSec: zod.z.number().int().min(64 * 1024).optional(),
+      graceMinutes: zod.z.number().int().min(1).max(10080).optional()
+    });
+    var MediaReclaimStatusSchema = zod.z.object({
+      running: zod.z.boolean(),
+      mode: zod.z.enum(["report", "reclaim"]).nullable(),
+      totalExamined: zod.z.number(),
+      totalEligible: zod.z.number(),
+      totalReclaimed: zod.z.number(),
+      totalBytesReclaimed: zod.z.number(),
+      totalRefused: zod.z.number(),
+      /** Device+scope windows finished in this pass. */
+      devicesDone: zod.z.number(),
+      complete: zod.z.boolean().nullable(),
+      startedAtMs: zod.z.number().nullable(),
+      finishedAtMs: zod.z.number().nullable(),
+      error: zod.z.string().nullable()
+    });
     var ReplayFrameInputSchema = zod.z.object({
       timestamp: zod.z.number(),
       frame: PipelineRunResultBridge
@@ -223284,6 +223845,21 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         * scored on-read (no write). Degrades to `[]` on error.
         */
         getKeyEvents: require_sleep.method(KeyEventQueryInput, zod.z.array(KeyEventSchema).readonly()),
+        /**
+        * The same ranking, for a SET of cameras, in one round trip.
+        *
+        * The Detection Intelligence events feed asks this of every selected
+        * camera and re-asks on a 30s timer. Fanned out client-side that is N
+        * round trips — browser → hub → post-analysis — for N independent,
+        * already-indexed store queries. Batched, the queries are unchanged and
+        * run concurrently INSIDE the owner; only the transport collapses.
+        *
+        * Deliberately per-device rather than pre-merged: `limit` stays per
+        * camera (a total would let a busy camera starve a quiet one), and a
+        * caller that renders one camera's lane needs to know which camera a row
+        * came from. `getKeyEvents` stays for single-device callers.
+        */
+        getKeyEventsBatch: require_sleep.method(KeyEventBatchQueryInput, zod.z.array(KeyEventsForDeviceSchema).readonly()),
         /** Server-side bucketed event counts for the 24-hour timeline.
         *  Returns one entry per non-empty bucket; empty buckets are omitted. */
         getEventDensity: require_sleep.method(zod.z.object({
@@ -223562,6 +224138,20 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           auth: "admin"
         }),
         /**
+        * Reclaim the standing debug-media backlog (motion-visit stills + track
+        * filmstrips). DETACHED: returns `{ started }` immediately. The pass is
+        * tens of minutes; awaiting it is a timeout, not a verdict. Dry-run unless
+        * `mode: 'reclaim'`. Poll `getMediaReclaimStatus`.
+        */
+        reclaimDebugMedia: require_sleep.method(MediaReclaimInputSchema, MediaReclaimStartResultSchema, {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        getMediaReclaimStatus: require_sleep.method(zod.z.object({}), MediaReclaimStatusSchema, {
+          kind: "query",
+          auth: "admin"
+        }),
+        /**
         * The CHEAP QUESTION, asked before any media moves: how big is the dataset
         * the marked (`markForTrain`) tracks would produce?
         *
@@ -233401,6 +233991,23 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           kind: "query",
           auth: "admin"
         }),
+        /**
+        * Does this location's LEDGER tell the truth about its disk? (D319)
+        *
+        * One `readdir` per claimed hour, diffed both ways: durable rows whose file
+        * is not there, and files no durable row names. `apply` defaults to FALSE —
+        * the report is the product, and the dry run is how an operator
+        * sanity-checks the destructive run before authorising it.
+        *
+        * REFUSES a source that is still a write target: a listing of a live
+        * location is a lower bound, which is not the strong evidence that lets
+        * this pass forget without a budget. A live location is reconciled by the
+        * mover, under D318's bound.
+        */
+        reconcileLedgerAgainstDisk: require_sleep.method(LedgerWalkInputSchema, LedgerWalkReportSchema, {
+          kind: "mutation",
+          auth: "admin"
+        }),
         /** Cancel a running or queued relocate job. A queued job never runs. */
         cancelRelocateJob: require_sleep.method(zod.z.object({ jobId: zod.z.string() }), zod.z.object({ cancelled: zod.z.boolean() }), {
           kind: "mutation",
@@ -233715,6 +234322,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       monitors: zod.z.array(SceneMonitorSchema),
       lastFetchedAt: zod.z.number()
     });
+    var SceneMonitorStatusForDeviceSchema = zod.z.object({
+      deviceId: zod.z.number(),
+      status: SceneMonitorStatusSchema.nullable()
+    });
     var sceneMonitorCapability = {
       name: "scene-monitor",
       scope: "device",
@@ -233724,6 +234335,22 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       deviceTypes: [require_sleep.DeviceType.Camera],
       methods: {
         listScenes: require_sleep.method(zod.z.object({ deviceId: zod.z.number() }), SceneMonitorStatusSchema),
+        /**
+        * The same answer, for a SET of cameras, in one round trip.
+        *
+        * `/scenes` renders every camera and re-reads them on a 30s safety-net
+        * poll behind the push slice. Fanned out client-side that was one query
+        * per camera — 29 round trips through the browser, the hub and the
+        * post-analysis runner every 30 seconds to read an in-memory map the
+        * owner had already merged. The work is unchanged (`statusFor` per
+        * device, all in-process at the owner); what collapses is the transport.
+        *
+        * A camera that cannot answer still gets a row, with `status: null` —
+        * see {@link SceneMonitorStatusForDeviceSchema}. Never fewer rows than
+        * ids: a caller that asked for twenty-nine and got twenty-seven cannot
+        * tell which two are missing, or that any are.
+        */
+        listScenesBatch: require_sleep.method(zod.z.object({ deviceIds: zod.z.array(zod.z.number()).min(1).max(200) }), zod.z.array(SceneMonitorStatusForDeviceSchema).readonly()),
         createScene: require_sleep.method(zod.z.object({
           deviceId: zod.z.number(),
           label: zod.z.string(),
@@ -235525,6 +236152,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       *  than as repeated tracks/events. */
       stationaryObjects: zod.z.array(StationaryObjectSchema).readonly().optional()
     });
+    var CameraOccupancySnapshotForDeviceSchema = zod.z.object({
+      deviceId: zod.z.number(),
+      read: zod.z.enum(["read", "unreadable"]),
+      snapshot: CameraOccupancySnapshotSchema.nullable()
+    });
     var HistoryResolutionEnum = zod.z.enum([
       "minute",
       "5min",
@@ -235554,6 +236186,20 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         *  (no inference result emitted since boot or since binding was
         *  activated). */
         getCurrentSnapshot: require_sleep.method(zod.z.object({ deviceId: zod.z.number() }), CameraOccupancySnapshotSchema.nullable()),
+        /**
+        * The same snapshot, for a SET of cameras, in one round trip.
+        *
+        * The Events page's Stationary section polls this every 15s for every
+        * selected camera. Fanned out client-side that is one query per camera to
+        * read a `Map.get` at the owner — the answer costs nothing, the round trip
+        * costs everything. Batched, N transports become one and the per-device
+        * work is unchanged.
+        *
+        * Every requested deviceId gets a row, tagged `read` — see
+        * {@link CameraOccupancySnapshotForDeviceSchema}. A camera the owner could
+        * not answer for is `'unreadable'`, never an empty reading.
+        */
+        getCurrentSnapshotBatch: require_sleep.method(zod.z.object({ deviceIds: zod.z.array(zod.z.number()).min(1).max(200) }), zod.z.array(CameraOccupancySnapshotForDeviceSchema).readonly()),
         /** Time-series object count inside one zone. `className` optional —
         *  omit to count every class in the zone. */
         getZoneHistory: require_sleep.method(zod.z.object({
@@ -242419,6 +243065,18 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.getKeyEventsBatch": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
+      "pipelineAnalytics.getMediaReclaimStatus": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.getMotionEvents": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -242593,6 +243251,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "pipelineAnalytics.reclaimDebugMedia": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "create"
+      },
       "pipelineAnalytics.reconcileFromDisk": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -243595,6 +244259,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "recording.reconcileLedgerAgainstDisk": {
+        capName: "recording",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "recording.refreshStorageLocationsForMigration": {
         capName: "recording",
         capScope: "system",
@@ -243721,6 +244391,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "sceneMonitor.listScenesBatch": {
+        capName: "scene-monitor",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "sceneMonitor.recheckNow": {
         capName: "scene-monitor",
         capScope: "device",
@@ -245077,6 +245753,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "zoneAnalytics.getCurrentSnapshotBatch": {
+        capName: "zone-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "zoneAnalytics.getUnzonedHistory": {
         capName: "zone-analytics",
         capScope: "device",
@@ -246339,6 +247021,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: false
       }],
+      "pipelineAnalytics.getKeyEventsBatch": [{
+        name: "deviceIds",
+        form: "array",
+        optional: false
+      }],
       "pipelineAnalytics.getMotionEvents": [{
         name: "deviceId",
         form: "single",
@@ -246444,6 +247131,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: true
       }],
+      "pipelineAnalytics.reclaimDebugMedia": [{
+        name: "deviceIds",
+        form: "array",
+        optional: true
+      }],
       "pipelineAnalytics.reconcileFromDisk": [{
         name: "deviceId",
         form: "single",
@@ -246779,6 +247471,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: false
       }],
+      "recording.reconcileLedgerAgainstDisk": [{
+        name: "deviceId",
+        form: "single",
+        optional: true
+      }],
       "recording.relocateFootage": [{
         name: "deviceId",
         form: "single",
@@ -246844,6 +247541,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: false
       }],
+      "sceneMonitor.listScenesBatch": [{
+        name: "deviceIds",
+        form: "array",
+        optional: false
+      }],
       "sceneMonitor.recheckNow": [{
         name: "deviceId",
         form: "single",
@@ -247105,6 +247807,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: false
       }],
+      "zoneAnalytics.getCurrentSnapshotBatch": [{
+        name: "deviceIds",
+        form: "array",
+        optional: false
+      }],
       "zoneAnalytics.getUnzonedHistory": [{
         name: "deviceId",
         form: "single",
@@ -247257,6 +247964,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "recording.readGopBytes",
       "recording.readSegmentBytes",
       "recording.readWindowBytes",
+      "recording.reconcileLedgerAgainstDisk",
       "recording.relocateFootage",
       "recording.renderClip",
       "recording.renderGif",
@@ -248142,6 +248850,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           relocateFootage: (input) => dispatch("recording", "relocateFootage", "mutation", input),
           listRelocateJobs: (input) => dispatch("recording", "listRelocateJobs", "query", input),
           getRelocateResidue: (input) => dispatch("recording", "getRelocateResidue", "query", input),
+          reconcileLedgerAgainstDisk: (input) => dispatch("recording", "reconcileLedgerAgainstDisk", "mutation", input),
           cancelRelocateJob: (input) => dispatch("recording", "cancelRelocateJob", "mutation", input),
           planStorageRebalance: (input) => dispatch("recording", "planStorageRebalance", "query", input),
           startStorageRebalance: (input) => dispatch("recording", "startStorageRebalance", "mutation", input)
@@ -251102,6 +251811,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.CameraMetricsSchema = CameraMetricsSchema;
     exports.CameraMetricsWithDeviceIdSchema = CameraMetricsWithDeviceIdSchema;
     exports.CameraMotionStatusSchema = CameraMotionStatusSchema;
+    exports.CameraOccupancySnapshotForDeviceSchema = CameraOccupancySnapshotForDeviceSchema;
     exports.CameraRecordingModeSchema = CameraRecordingModeSchema;
     exports.CameraRecordingStatusSchema = CameraRecordingStatusSchema;
     exports.CameraSourceStatusSchema = CameraSourceStatusSchema;
@@ -251352,6 +252062,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.LabelTierSchema = LabelTierSchema;
     exports.LawnMowerActivitySchema = LawnMowerActivitySchema;
     exports.LawnMowerControlStatusSchema = LawnMowerControlStatusSchema;
+    exports.LedgerWalkDeviceReportSchema = LedgerWalkDeviceReportSchema;
+    exports.LedgerWalkInputSchema = LedgerWalkInputSchema;
+    exports.LedgerWalkRefusalSchema = LedgerWalkRefusalSchema;
+    exports.LedgerWalkReportSchema = LedgerWalkReportSchema;
+    exports.LedgerWalkSkipCountsSchema = LedgerWalkSkipCountsSchema;
+    exports.LedgerWalkSkipReasonSchema = LedgerWalkSkipReasonSchema;
     exports.LinkedDeviceSchema = LinkedDeviceSchema;
     exports.LinkedDevicesModeSchema = LinkedDevicesModeSchema;
     exports.ListGroupsPageSchema = ListGroupsPageSchema;
@@ -251773,6 +252489,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.SceneConfirmSchema = SceneConfirmSchema;
     exports.SceneMonitorSchema = SceneMonitorSchema;
     exports.SceneMonitorStateSchema = SceneMonitorStateSchema;
+    exports.SceneMonitorStatusForDeviceSchema = SceneMonitorStatusForDeviceSchema;
     exports.SceneMonitorStatusSchema = SceneMonitorStatusSchema;
     exports.SceneReferenceSchema = SceneReferenceSchema;
     exports.SceneUnavailableSchema = SceneUnavailableSchema;
@@ -410593,6 +411310,7 @@ var require_cap_providers = __commonJS({
     exports.buildSettingsStoreGateway = buildSettingsStoreGateway;
     exports.buildNetworkQualityProvider = buildNetworkQualityProvider;
     exports.buildToastProvider = buildToastProvider;
+    exports.computeTopologyPass = computeTopologyPass;
     exports.computeTopology = computeTopology;
     exports.createNodeRootPackageLookup = createNodeRootPackageLookup;
     exports.buildNodesProvider = buildNodesProvider;
@@ -410741,9 +411459,19 @@ var require_cap_providers = __commonJS({
       }
       return ips;
     }
+    async function computeTopologyPass(agentRegistry, addonRegistry, getNodeRootPackage) {
+      const [nodes, liveNodes] = await computeTopologyInternal(agentRegistry, addonRegistry, getNodeRootPackage);
+      return { nodes, liveNodes };
+    }
     async function computeTopology(agentRegistry, addonRegistry, getNodeRootPackage) {
-      const nodes = await agentRegistry.listNodes();
-      const history = await agentRegistry.getClusterNodeHistory();
+      const [nodes] = await computeTopologyInternal(agentRegistry, addonRegistry, getNodeRootPackage);
+      return nodes;
+    }
+    async function computeTopologyInternal(agentRegistry, addonRegistry, getNodeRootPackage) {
+      const [nodes, history] = await Promise.all([
+        agentRegistry.listNodes(),
+        agentRegistry.getClusterNodeHistory()
+      ]);
       const historyById = new Map(history.map((h) => [h.id, h]));
       const liveIds = new Set(nodes.map((n) => n.info.id));
       const allAddons = addonRegistry?.listAddons() ?? [];
@@ -410898,7 +411626,7 @@ var require_cap_providers = __commonJS({
         categories: [],
         rootPackage: null
       }));
-      return [...liveNodes, ...offlineNodes];
+      return [[...liveNodes, ...offlineNodes], nodes];
     }
     function createNodeRootPackageLookup(moleculer, serverUpdate) {
       return (nodeId, isHub) => {
@@ -420624,6 +421352,19 @@ var require_agent_registry_service = __commonJS({
         addonIds: [...entry.agentAddons ?? []]
       };
     }
+    function toSubProcess(p) {
+      return {
+        pid: p.pid ?? 0,
+        name: p.name ?? "",
+        command: "moleculer-service",
+        state: p.state ?? "running",
+        cpuPercent: p.cpuPercent ?? 0,
+        memoryRss: p.memoryRss ?? 0,
+        uptimeSeconds: p.uptimeSeconds ?? 0,
+        addonIds: p.addonIds ?? [],
+        groupId: p.groupId ?? null
+      };
+    }
     var AgentRegistryService = class {
       eventBus;
       moleculer;
@@ -421150,107 +421891,113 @@ var require_agent_registry_service = __commonJS({
         return toNodeLiveness(this.moleculer.broker.registry.getNodeList({ onlyAvailable: false }));
       }
       async listNodes() {
-        let hubProcesses = [];
+        const registry = this.moleculer.broker.registry;
+        const nodes = registry?.getNodeList?.({ onlyAvailable: false }) ?? [];
+        const remoteTargets = nodes.filter((node) => typeof node.id === "string" && node.id !== "hub" && !node.id.includes("/"));
+        const [hubEntry, remoteEntries] = await Promise.all([
+          this.listHubProcesses().then((procs) => this.buildHubEntry(procs)),
+          Promise.all(remoteTargets.map((node) => node.available ? (
+            // Online: one wave of `$agent.status` + `$process.list`.
+            this.buildRemoteEntry(node.id)
+          ) : (
+            // Offline: skip the RPC fan-out entirely (the node is unreachable —
+            // those calls would just time out) and surface a minimal,
+            // honestly-degraded row instead.
+            Promise.resolve(this.buildOfflineEntry(node))
+          )))
+        ]);
+        return [hubEntry, ...remoteEntries.filter((entry) => entry !== null)];
+      }
+      /** The hub's own runner subprocesses (`$process.list`, hub-local). */
+      async listHubProcesses() {
         try {
           const processes = await this.broker.call("$process.list");
-          hubProcesses = processes.map((p) => ({
-            pid: p.pid ?? 0,
-            name: p.name ?? "",
-            command: "moleculer-service",
-            state: p.state ?? "running",
-            cpuPercent: p.cpuPercent ?? 0,
-            memoryRss: p.memoryRss ?? 0,
-            uptimeSeconds: p.uptimeSeconds ?? 0,
-            addonIds: p.addonIds ?? [],
-            groupId: p.groupId ?? null
-          }));
+          return processes.map(toSubProcess);
         } catch {
+          return [];
         }
-        const hubEntry = await this.buildHubEntry(hubProcesses);
-        const remoteEntries = [];
-        const registry = this.moleculer.broker.registry;
-        const nodes = registry?.getNodeList?.({ onlyAvailable: false }) ?? [];
-        for (const node of nodes) {
-          const nodeId = node.id;
-          if (typeof nodeId !== "string" || nodeId === "hub" || nodeId.includes("/"))
-            continue;
-          if (!node.available) {
-            remoteEntries.push(this.buildOfflineEntry(node));
-            continue;
-          }
-          try {
-            const status = await this.broker.call("$agent.status", {}, {
-              nodeID: nodeId,
-              timeout: 5e3
-            });
-            let subProcesses = [];
-            try {
-              const processes = await this.broker.call("$process.list", {}, {
-                nodeID: nodeId,
-                timeout: 5e3
-              });
-              subProcesses = processes.map((p) => ({
-                pid: p.pid ?? 0,
-                name: p.name ?? "",
-                command: "moleculer-service",
-                state: p.state ?? "running",
-                cpuPercent: p.cpuPercent ?? 0,
-                memoryRss: p.memoryRss ?? 0,
-                uptimeSeconds: p.uptimeSeconds ?? 0,
-                addonIds: p.addonIds ?? [],
-                groupId: p.groupId ?? null
-              }));
-            } catch {
-              subProcesses = status.addons?.map((a) => ({
-                pid: 0,
-                name: a.id ?? "",
-                command: "moleculer-service",
-                state: a.status ?? "running",
-                cpuPercent: 0,
-                memoryRss: 0,
-                uptimeSeconds: 0
-              })) ?? [];
-            }
-            const agentAddons = status.addons?.map((a) => a.id) ?? [];
-            const hostname = typeof status.hostname === "string" ? status.hostname : null;
-            const agentName = typeof status.name === "string" ? status.name : nodeId;
-            remoteEntries.push({
-              info: {
-                id: nodeId,
-                name: agentName,
-                hostname: hostname ?? nodeId,
-                capabilities: [],
-                platform: status.platform ?? "unknown",
-                arch: status.arch ?? "unknown",
-                cpuCores: status.cpuCores ?? 0,
-                memoryMB: status.totalMemoryMB ?? 0,
-                cpuModel: status.cpuModel
-              },
-              localIps: Array.isArray(status.localIps) ? status.localIps : [],
-              status: {
-                activeCameras: 0,
-                cpuPercent: status.cpuPercent ?? 0,
-                memoryPercent: status.memoryPercent ?? 0,
-                fps: {},
-                errors: []
-              },
-              connectedSince: typeof status.uptime === "number" ? Date.now() - status.uptime * 1e3 : Date.now(),
-              isHub: false,
-              subProcesses,
-              agentAddons
-            });
-          } catch {
-          }
-        }
-        await this.snapshotOnlineNodes([hubEntry, ...remoteEntries]);
-        return [hubEntry, ...remoteEntries];
       }
       /**
-       * Best-effort upsert of every online entry's descriptor into the history
-       * store. Never throws — the store swallows its own errors and this awaits
-       * `allSettled` so a storage hiccup can never fail `listNodes()`.
+       * One online agent's row: `$agent.status` for the descriptor + live metrics,
+       * `$process.list` for real sub-process stats. `null` when the node has no
+       * `$agent` service (it is then simply absent from the list, as before).
+       *
+       * The two calls are ONE wave, not two: `$process.list` never reads anything
+       * from `$agent.status` — only its FALLBACK does, and the fallback is applied
+       * after both have settled.
+       */
+      async buildRemoteEntry(nodeId) {
+        const [statusResult, processResult] = await Promise.allSettled([
+          this.broker.call("$agent.status", {}, { nodeID: nodeId, timeout: 5e3 }),
+          this.broker.call("$process.list", {}, { nodeID: nodeId, timeout: 5e3 })
+        ]);
+        if (statusResult.status === "rejected")
+          return null;
+        const status = statusResult.value;
+        const subProcesses = processResult.status === "fulfilled" ? processResult.value.map(toSubProcess) : (
+          // Fall back to the addon list from $agent.status (no stats)
+          status.addons?.map((a) => ({
+            pid: 0,
+            name: a.id ?? "",
+            command: "moleculer-service",
+            state: a.status ?? "running",
+            cpuPercent: 0,
+            memoryRss: 0,
+            uptimeSeconds: 0
+          })) ?? []
+        );
+        const agentAddons = status.addons?.map((a) => a.id) ?? [];
+        const hostname = typeof status.hostname === "string" ? status.hostname : null;
+        const agentName = typeof status.name === "string" ? status.name : nodeId;
+        return {
+          info: {
+            id: nodeId,
+            name: agentName,
+            hostname: hostname ?? nodeId,
+            capabilities: [],
+            platform: status.platform ?? "unknown",
+            arch: status.arch ?? "unknown",
+            cpuCores: status.cpuCores ?? 0,
+            memoryMB: status.totalMemoryMB ?? 0,
+            cpuModel: status.cpuModel
+          },
+          localIps: Array.isArray(status.localIps) ? status.localIps : [],
+          status: {
+            activeCameras: 0,
+            cpuPercent: status.cpuPercent ?? 0,
+            memoryPercent: status.memoryPercent ?? 0,
+            fps: {},
+            errors: []
+          },
+          connectedSince: typeof status.uptime === "number" ? Date.now() - status.uptime * 1e3 : Date.now(),
+          isHub: false,
+          subProcesses,
+          agentAddons
+        };
+      }
+      /**
+       * A1 (R2 capture point): snapshot every ONLINE node's static descriptor +
+       * last-known addon roster into the durable, routing-blind history store.
+       * This is the ONLY place cpuModel/cores/memory/localIps are resolved from a
+       * live `$agent.status`, so it is where an offline row's descriptor must be
+       * captured while the node is still reachable. Offline entries are NOT
+       * re-snapshotted — their `lastActive` is stamped on `$node.disconnected`
+       * instead. This is a separate durable store, never a `knownAgents`-style
+       * shadow of `HubNodeRegistry` (which stays the ephemeral live cap authority).
+       *
+       * **It belongs to the PERIODIC PASS, not to a read** (D317). It used to run
+       * at the tail of `listNodes()`, which made every operator poll of
+       * `nodes.topology` perform one durable read-back — and, past the five-minute
+       * heartbeat, one durable write — per online node, in a phase that had to
+       * finish before the history read could even start. Measured on the live hub
+       * on 2026-08-31: one settings-store round trip cost 14.8–18.3 s and
+       * `nodes.topology` cost exactly two of them, 30.5 s. `TopologyEmitterService`
+       * already recomputes this picture every 30 s; the capture is its work.
+       *
+       * Never throws — the store swallows its own errors and this awaits
+       * `allSettled` so a storage hiccup can never fail the pass.
        */
-      async snapshotOnlineNodes(entries) {
+      async captureNodeHistory(entries) {
         if (!this.historyStore)
           return;
         const online = entries.filter((e) => e.isOnline !== false);
@@ -423900,7 +424647,7 @@ var require_topology_emitter_service = __commonJS({
           return;
         this.emitting = true;
         try {
-          const nodes = await (0, cap_providers_1.computeTopology)(this.agentRegistry, this.addonRegistry, this.getNodeRootPackage);
+          const { nodes, liveNodes } = await (0, cap_providers_1.computeTopologyPass)(this.agentRegistry, this.addonRegistry, this.getNodeRootPackage);
           this.eventBus.emit({
             id: (0, node_crypto_1.randomUUID)(),
             timestamp: /* @__PURE__ */ new Date(),
@@ -423908,6 +424655,7 @@ var require_topology_emitter_service = __commonJS({
             category: types_1.EventCategory.ClusterTopologySnapshot,
             data: { nodes, timestamp: Date.now() }
           });
+          await this.agentRegistry.captureNodeHistory(liveNodes);
         } catch {
         } finally {
           this.emitting = false;