camstack 1.2.69 → 1.2.70

package/dist/{chunk-VBTD2AIS.js → chunk-45XQKO4Y.js}

@@ -14522,7 +14522,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-DcA-CgqX.mjs
+// ../types/dist/sleep-BBI0PDUc.mjs
 var WELL_KNOWN_TABS = [
   {
     id: "overview",
@@ -26591,6 +26591,39 @@ var RebuildStatusSchema = external_exports.object({
   /** Present when the pass ended by throwing. */
   error: external_exports.string().nullable()
 });
+var MediaReclaimStartResultSchema = external_exports.object({
+  started: external_exports.boolean(),
+  /** True when a pass was already running; the new request is ignored. */
+  alreadyRunning: external_exports.boolean()
+});
+var MediaReclaimInputSchema = external_exports.object({
+  mode: external_exports.enum(["report", "reclaim"]).default("report"),
+  scopes: external_exports.array(external_exports.enum(["motion-still", "track-filmstrip"])).min(1).optional(),
+  deviceIds: external_exports.array(external_exports.number().int()).min(1).optional(),
+  restart: external_exports.boolean().optional(),
+  pageSize: external_exports.number().int().min(50).max(5e3).optional(),
+  maxRowsPerDevice: external_exports.number().int().min(1).max(5e5).optional(),
+  maxReclaimPerDevice: external_exports.number().int().min(1).max(5e5).optional(),
+  maxBytesPerRun: external_exports.number().int().min(1).optional(),
+  budgetMinutes: external_exports.number().int().min(1).max(720).optional(),
+  throttleBytesPerSec: external_exports.number().int().min(64 * 1024).optional(),
+  graceMinutes: external_exports.number().int().min(1).max(10080).optional()
+});
+var MediaReclaimStatusSchema = external_exports.object({
+  running: external_exports.boolean(),
+  mode: external_exports.enum(["report", "reclaim"]).nullable(),
+  totalExamined: external_exports.number(),
+  totalEligible: external_exports.number(),
+  totalReclaimed: external_exports.number(),
+  totalBytesReclaimed: external_exports.number(),
+  totalRefused: external_exports.number(),
+  /** Device+scope windows finished in this pass. */
+  devicesDone: external_exports.number(),
+  complete: external_exports.boolean().nullable(),
+  startedAtMs: external_exports.number().nullable(),
+  finishedAtMs: external_exports.number().nullable(),
+  error: external_exports.string().nullable()
+});
 var ReplayFrameInputSchema = external_exports.object({
   timestamp: external_exports.number(),
   frame: PipelineRunResultBridge
@@ -27014,6 +27047,20 @@ var pipelineAnalyticsCapability = {
       auth: "admin"
     }),
     /**
+    * Reclaim the standing debug-media backlog (motion-visit stills + track
+    * filmstrips). DETACHED: returns `{ started }` immediately. The pass is
+    * tens of minutes; awaiting it is a timeout, not a verdict. Dry-run unless
+    * `mode: 'reclaim'`. Poll `getMediaReclaimStatus`.
+    */
+    reclaimDebugMedia: method(MediaReclaimInputSchema, MediaReclaimStartResultSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    getMediaReclaimStatus: method(external_exports.object({}), MediaReclaimStatusSchema, {
+      kind: "query",
+      auth: "admin"
+    }),
+    /**
     * The CHEAP QUESTION, asked before any media moves: how big is the dataset
     * the marked (`markForTrain`) tracks would produce?
     *
@@ -42203,6 +42250,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineAnalytics.getMediaReclaimStatus": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
   "pipelineAnalytics.getMotionEvents": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -42377,6 +42430,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "pipelineAnalytics.reclaimDebugMedia": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "create"
+  },
   "pipelineAnalytics.reconcileFromDisk": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -45993,6 +46052,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: true
   }],
+  "pipelineAnalytics.reclaimDebugMedia": [{
+    name: "deviceIds",
+    form: "array",
+    optional: true
+  }],
   "pipelineAnalytics.reconcileFromDisk": [{
     name: "deviceId",
     form: "single",

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-VBTD2AIS.js";
+} from "./chunk-45XQKO4Y.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-INC5TETK.js");
+  await import("./launcher-E2VZZ5O3.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-INC5TETK.js");
+  await import("./launcher-E2VZZ5O3.js");
 }
 
 // src/commands/setup.ts
@@ -1130,7 +1130,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-4S4WTMPM.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-KE6GFVKY.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);

package/dist/{discover-4S4WTMPM.js → discover-KE6GFVKY.js}

@@ -5,7 +5,7 @@ import {
   filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-VBTD2AIS.js";
+} from "./chunk-45XQKO4Y.js";
 import "./chunk-LMMQX4CK.js";
 export {
   DEFAULT_HUB_HTTPS_PORT,

package/dist/{launcher-INC5TETK.js → launcher-E2VZZ5O3.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-B29Skpzo.js
-var require_dist_B29Skpzo = __commonJS({
-  "../system/dist/dist-B29Skpzo.js"(exports) {
+// ../system/dist/dist-BhE8zNfY.js
+var require_dist_BhE8zNfY = __commonJS({
+  "../system/dist/dist-BhE8zNfY.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -37286,6 +37286,39 @@ var require_dist_B29Skpzo = __commonJS({
       /** Present when the pass ended by throwing. */
       error: zod.z.string().nullable()
     });
+    var MediaReclaimStartResultSchema = zod.z.object({
+      started: zod.z.boolean(),
+      /** True when a pass was already running; the new request is ignored. */
+      alreadyRunning: zod.z.boolean()
+    });
+    var MediaReclaimInputSchema = zod.z.object({
+      mode: zod.z.enum(["report", "reclaim"]).default("report"),
+      scopes: zod.z.array(zod.z.enum(["motion-still", "track-filmstrip"])).min(1).optional(),
+      deviceIds: zod.z.array(zod.z.number().int()).min(1).optional(),
+      restart: zod.z.boolean().optional(),
+      pageSize: zod.z.number().int().min(50).max(5e3).optional(),
+      maxRowsPerDevice: zod.z.number().int().min(1).max(5e5).optional(),
+      maxReclaimPerDevice: zod.z.number().int().min(1).max(5e5).optional(),
+      maxBytesPerRun: zod.z.number().int().min(1).optional(),
+      budgetMinutes: zod.z.number().int().min(1).max(720).optional(),
+      throttleBytesPerSec: zod.z.number().int().min(64 * 1024).optional(),
+      graceMinutes: zod.z.number().int().min(1).max(10080).optional()
+    });
+    var MediaReclaimStatusSchema = zod.z.object({
+      running: zod.z.boolean(),
+      mode: zod.z.enum(["report", "reclaim"]).nullable(),
+      totalExamined: zod.z.number(),
+      totalEligible: zod.z.number(),
+      totalReclaimed: zod.z.number(),
+      totalBytesReclaimed: zod.z.number(),
+      totalRefused: zod.z.number(),
+      /** Device+scope windows finished in this pass. */
+      devicesDone: zod.z.number(),
+      complete: zod.z.boolean().nullable(),
+      startedAtMs: zod.z.number().nullable(),
+      finishedAtMs: zod.z.number().nullable(),
+      error: zod.z.string().nullable()
+    });
     var ReplayFrameInputSchema = zod.z.object({
       timestamp: zod.z.number(),
       frame: PipelineRunResultBridge
@@ -37709,6 +37742,20 @@ var require_dist_B29Skpzo = __commonJS({
           auth: "admin"
         }),
         /**
+        * Reclaim the standing debug-media backlog (motion-visit stills + track
+        * filmstrips). DETACHED: returns `{ started }` immediately. The pass is
+        * tens of minutes; awaiting it is a timeout, not a verdict. Dry-run unless
+        * `mode: 'reclaim'`. Poll `getMediaReclaimStatus`.
+        */
+        reclaimDebugMedia: method(MediaReclaimInputSchema, MediaReclaimStartResultSchema, {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        getMediaReclaimStatus: method(zod.z.object({}), MediaReclaimStatusSchema, {
+          kind: "query",
+          auth: "admin"
+        }),
+        /**
         * The CHEAP QUESTION, asked before any media moves: how big is the dataset
         * the marked (`markForTrain`) tracks would produce?
         *
@@ -53519,6 +53566,12 @@ var require_dist_B29Skpzo = __commonJS({
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.getMediaReclaimStatus": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.getMotionEvents": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -53693,6 +53746,12 @@ var require_dist_B29Skpzo = __commonJS({
         addonId: null,
         access: "create"
       },
+      "pipelineAnalytics.reclaimDebugMedia": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "create"
+      },
       "pipelineAnalytics.reconcileFromDisk": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -57309,6 +57368,11 @@ var require_dist_B29Skpzo = __commonJS({
         form: "single",
         optional: true
       }],
+      "pipelineAnalytics.reclaimDebugMedia": [{
+        name: "deviceIds",
+        form: "array",
+        optional: true
+      }],
       "pipelineAnalytics.reconcileFromDisk": [{
         name: "deviceId",
         form: "single",
@@ -59418,7 +59482,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_BhE8zNfY();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -60237,7 +60301,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_BhE8zNfY();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -60331,7 +60395,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_BhE8zNfY();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -61228,11 +61292,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-CRL0qOnU.js
-var require_retired_settings_keys_CRL0qOnU = __commonJS({
-  "../system/dist/retired-settings-keys-CRL0qOnU.js"(exports) {
+// ../system/dist/retired-settings-keys-CqDbI-vK.js
+var require_retired_settings_keys_CqDbI_vK = __commonJS({
+  "../system/dist/retired-settings-keys-CqDbI-vK.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_BhE8zNfY();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -63446,8 +63510,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
-    var require_retired_settings_keys = require_retired_settings_keys_CRL0qOnU();
+    var require_dist10 = require_dist_BhE8zNfY();
+    var require_retired_settings_keys = require_retired_settings_keys_CqDbI_vK();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -64425,6 +64489,9 @@ var require_device_manager_addon = __commonJS({
       for (const f of features) if (DEVICE_FEATURE_VALUES.has(f)) out.push(f);
       return out;
     }
+    function persistedIsCamera(type) {
+      return type === require_dist10.DeviceType.Camera;
+    }
     function buildSourceInfoFromConfig(persistedConfig, stableId, addonId) {
       const id = typeof persistedConfig["entityId"] === "string" ? persistedConfig["entityId"] : void 0;
       const system = typeof persistedConfig["system"] === "string" ? persistedConfig["system"] : void 0;
@@ -64571,7 +64638,7 @@ var require_device_manager_addon = __commonJS({
           online: pctx.host.resolveDeviceOnline(m.id, pctx.registry !== null),
           probed: pctx.host.resolveDeviceProbed(m.id),
           features: persistedFeatures(m.features),
-          isCamera: persistedType === require_dist10.DeviceType.Camera,
+          isCamera: persistedIsCamera(persistedType),
           config: persistedConfig ?? {},
           metadata,
           ...m.integrationId !== void 0 ? { integrationId: m.integrationId } : {},
@@ -64616,7 +64683,7 @@ var require_device_manager_addon = __commonJS({
         online: pctx.host.resolveDeviceOnline(deviceId, true),
         probed: pctx.host.resolveDeviceProbed(deviceId),
         features: persistedFeatures(m.features),
-        isCamera: false,
+        isCamera: persistedIsCamera(m.type),
         config: persistedConfig ?? {},
         metadata,
         ...m.integrationId !== void 0 ? { integrationId: m.integrationId } : {},
@@ -64664,7 +64731,7 @@ var require_device_manager_addon = __commonJS({
           online: pctx.host.resolveDeviceOnline(m.id, pctx.registry !== null),
           probed: pctx.host.resolveDeviceProbed(m.id),
           features: persistedFeatures(m.features),
-          isCamera: false,
+          isCamera: persistedIsCamera(m.type),
           config: persistedConfig,
           metadata,
           ...m.integrationId !== void 0 ? { integrationId: m.integrationId } : {},
@@ -68260,7 +68327,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_BhE8zNfY();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -68397,7 +68464,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_BhE8zNfY();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -68587,7 +68654,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_BhE8zNfY();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -76400,7 +76467,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_BhE8zNfY();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -76965,7 +77032,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_BhE8zNfY();
     var node_fs_promises = __require("fs/promises");
     var node_child_process = __require("child_process");
     var node_util = __require("util");
@@ -79587,7 +79654,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_BhE8zNfY();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -80703,8 +80770,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
-    var require_retired_settings_keys = require_retired_settings_keys_CRL0qOnU();
+    var require_dist10 = require_dist_BhE8zNfY();
+    var require_retired_settings_keys = require_retired_settings_keys_CqDbI_vK();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -80740,6 +80807,14 @@ var require_sqlite_settings_addon = __commonJS({
     var SQLITE_PROFILE_REPORT_INTERVAL_MS = 6e4;
     var SQLITE_PROFILE_REPORT_FLOOR_MS = 250;
     var SQLITE_PROFILE_TOP_N = 5;
+    var SQLITE_ENGINE_STORM_WALL_SHARE = 0.5;
+    function sqliteEngineStorm(stats, windowMs) {
+      if (windowMs <= 0) return null;
+      const top = stats[0];
+      if (top === void 0) return null;
+      if (top.totalMs / windowMs < 0.5) return null;
+      return top;
+    }
     function rowsOf(value) {
       if (Array.isArray(value)) return value.length;
       if (value === void 0 || value === null) return 0;
@@ -80874,21 +80949,39 @@ var require_sqlite_settings_addon = __commonJS({
         const stats = this.drain();
         const busyMs = stats.reduce((acc, s) => acc + s.totalMs, 0);
         if (busyMs < this.reportFloorMs) return;
+        const busyPct = Math.round(busyMs / windowMs * 100);
+        const calls = stats.reduce((acc, s) => acc + s.calls, 0);
+        const top = stats.slice(0, this.topN).map((s) => ({
+          op: s.op,
+          collection: s.collection,
+          ...s.owner === void 0 ? {} : { owner: s.owner },
+          ...s.shape === void 0 ? {} : { shape: s.shape },
+          calls: s.calls,
+          totalMs: Math.round(s.totalMs),
+          maxMs: Math.round(s.maxMs),
+          rows: s.rows
+        }));
         this.logger.info("sqlite engine busy", { meta: {
           busyMs: Math.round(busyMs),
           windowMs: Math.round(windowMs),
-          busyPct: Math.round(busyMs / windowMs * 100),
-          calls: stats.reduce((acc, s) => acc + s.calls, 0),
-          top: stats.slice(0, this.topN).map((s) => ({
-            op: s.op,
-            collection: s.collection,
-            ...s.owner === void 0 ? {} : { owner: s.owner },
-            ...s.shape === void 0 ? {} : { shape: s.shape },
-            calls: s.calls,
-            totalMs: Math.round(s.totalMs),
-            maxMs: Math.round(s.maxMs),
-            rows: s.rows
-          }))
+          busyPct,
+          calls,
+          top
+        } });
+        const storm = sqliteEngineStorm(stats, windowMs);
+        if (storm !== null) this.logger.warn("sqlite engine storm", { meta: {
+          busyMs: Math.round(busyMs),
+          windowMs: Math.round(windowMs),
+          busyPct,
+          wallPct: Math.round(storm.totalMs / windowMs * 100),
+          op: storm.op,
+          collection: storm.collection,
+          ...storm.owner === void 0 ? {} : { owner: storm.owner },
+          ...storm.shape === void 0 ? {} : { shape: storm.shape },
+          calls: storm.calls,
+          totalMs: Math.round(storm.totalMs),
+          maxMs: Math.round(storm.maxMs),
+          rows: storm.rows
         } });
       }
       start() {
@@ -82968,6 +83061,7 @@ var require_sqlite_settings_addon = __commonJS({
         return this.vectorIndex;
       }
     };
+    exports.SQLITE_ENGINE_STORM_WALL_SHARE = SQLITE_ENGINE_STORM_WALL_SHARE;
     exports.SQLITE_JOURNAL_SIZE_LIMIT_BYTES = SQLITE_JOURNAL_SIZE_LIMIT_BYTES;
     exports.SQLITE_MMAP_CEILING_BYTES = SQLITE_MMAP_CEILING_BYTES;
     exports.SQLITE_MMAP_FLOOR_BYTES = SQLITE_MMAP_FLOOR_BYTES;
@@ -82987,6 +83081,7 @@ var require_sqlite_settings_addon = __commonJS({
     exports.WAL_MAINTENANCE_INTERVAL_MS = WAL_MAINTENANCE_INTERVAL_MS;
     exports.WalMaintenance = WalMaintenance;
     exports.prefixRange = prefixRange;
+    exports.sqliteEngineStorm = sqliteEngineStorm;
     exports.sqliteMmapSizeFor = sqliteMmapSizeFor;
     exports.sqlitePageCacheKibFor = sqlitePageCacheKibFor;
   }
@@ -83051,6 +83146,7 @@ var require_sqlite_storage = __commonJS({
     exports.DeviceStore$1 = DeviceStore;
     exports.FilesystemStorageAddon = require_builtins_sqlite_storage_filesystem_storage_addon.FilesystemStorageAddon;
     exports.FilesystemStorageProvider = require_builtins_sqlite_storage_filesystem_storage_addon.FilesystemStorageProvider;
+    exports.SQLITE_ENGINE_STORM_WALL_SHARE = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_ENGINE_STORM_WALL_SHARE;
     exports.SQLITE_JOURNAL_SIZE_LIMIT_BYTES = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_JOURNAL_SIZE_LIMIT_BYTES;
     exports.SQLITE_MMAP_CEILING_BYTES = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_MMAP_CEILING_BYTES;
     exports.SQLITE_MMAP_FLOOR_BYTES = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_MMAP_FLOOR_BYTES;
@@ -83069,6 +83165,7 @@ var require_sqlite_storage = __commonJS({
     exports.WAL_MAINTENANCE_INTERVAL_MS = require_builtins_sqlite_storage_sqlite_settings_addon.WAL_MAINTENANCE_INTERVAL_MS;
     exports.WalMaintenance = require_builtins_sqlite_storage_sqlite_settings_addon.WalMaintenance;
     exports.default = require_builtins_sqlite_storage_filesystem_storage_addon.FilesystemStorageAddon;
+    exports.sqliteEngineStorm = require_builtins_sqlite_storage_sqlite_settings_addon.sqliteEngineStorm;
     exports.sqliteMmapSizeFor = require_builtins_sqlite_storage_sqlite_settings_addon.sqliteMmapSizeFor;
     exports.sqlitePageCacheKibFor = require_builtins_sqlite_storage_sqlite_settings_addon.sqlitePageCacheKibFor;
   }
@@ -83083,7 +83180,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_BhE8zNfY();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -83267,17 +83364,13 @@ var require_storage_orchestrator_addon = __commonJS({
       "recordings",
       "recordingsLow",
       "eventMedia",
-      "backups",
-      "galleryMedia"
+      "backups"
     ];
     var MOVER_CLASSES = [
       "recordings",
       "recordingsLow",
-      "eventMedia",
-      "galleryMedia"
+      "eventMedia"
     ];
-    var BLOCKING_ONLY_CLASSES = ["galleryMedia"];
-    var GALLERY_FORBIDDEN_NEIGHBOUR_TYPES = ["recordings", "recordingsLow"];
     var MOVE_LANES = ["media", "footage"];
     var PARTICIPANTS = [
       "pipeline",
@@ -83302,6 +83395,7 @@ var require_storage_orchestrator_addon = __commonJS({
         this.deps = deps;
       }
       async plan(input) {
+        refuseRetiredGalleryClass(input.destinations);
         const mode = input.mode ?? "blocking";
         const moves = [];
         const findings = [];
@@ -83315,8 +83409,6 @@ var require_storage_orchestrator_addon = __commonJS({
           if (target.type !== storageClass) throw new Error(`Storage location "${targetId}" is type "${target.type}", expected "${storageClass}"`);
           if (source.id === target.id) throw new Error(`Storage location "${targetId}" is already the "${storageClass}" default`);
           if (!MOVER_CLASSES.includes(storageClass)) throw new Error(`No mover owns "${storageClass}" \u2014 the migration can repoint its default but cannot move its bytes. Move it by hand, then repoint the default with upsertLocation.`);
-          if (mode === "nonBlocking" && BLOCKING_ONLY_CLASSES.includes(storageClass)) throw new Error(`"${storageClass}" is a single-cardinality storage class: it can never exist at two locations at once, so it cannot be repointed first and drained behind. Use mode "blocking".`);
-          await this.refuseGalleryOntoRecordingsVolume(storageClass, targetId);
           moves.push({
             storageClass,
             fromLocationId: source.id,
@@ -83326,11 +83418,6 @@ var require_storage_orchestrator_addon = __commonJS({
             error: null,
             progress: null
           });
-          if (BLOCKING_ONLY_CLASSES.includes(storageClass)) findings.push({
-            code: "blockingOnly",
-            storageClass,
-            message: `"${storageClass}" is single-cardinality: this move is stop-the-world for its whole duration, in every mode. It is a few KB per enrolled sample, which is why that is acceptable.`
-          });
           findings.push(...await this.deviceFindings(storageClass, source.id, target.id));
         }
         if (moves.length === 0) throw new Error("select at least one storage class");
@@ -83365,29 +83452,6 @@ var require_storage_orchestrator_addon = __commonJS({
           findings
         };
       }
-      /**
-      * HARD refusal: `galleryMedia` onto a volume a recordings class lives on.
-      *
-      * This is the one same-device case that is a refusal rather than a finding,
-      * because its consequence is silent and arrives months later — the gallery is
-      * wiped by the next footage wipe, quota eviction or recordings disk swap, and
-      * nothing at that moment points back at this migration.
-      *
-      * It can only refuse what it can SEE. `deviceKeyOf` is a realpath, so it
-      * catches a symlink, a bind mount and a literally-shared directory — and
-      * misses two distinct directories on one filesystem, and any location pinned
-      * to another node. Those come back `null`/distinct and produce a
-      * `deviceIdentityUnknown` finding instead.
-      */
-      async refuseGalleryOntoRecordingsVolume(storageClass, targetId) {
-        if (storageClass !== "galleryMedia") return;
-        const targetKey = await this.deviceKey(targetId);
-        if (targetKey === null) return;
-        for (const type of GALLERY_FORBIDDEN_NEIGHBOUR_TYPES) for (const neighbour of this.deps.locations.listLocations({ type })) {
-          if (await this.deviceKey(neighbour.id) !== targetKey) continue;
-          throw new Error(`Storage location "${targetId}" shares a volume with "${neighbour.id}" (${type}). galleryMedia is deliberately NOT on the recordings volume: enrolment images survive every retention sweep, so they must also survive a footage wipe, a quota eviction and a recordings disk swap. Choose a destination on another volume.`);
-        }
-      }
       /** Same-device observations that are reported, not refused. */
       async deviceFindings(storageClass, sourceId, targetId) {
         if (this.deps.deviceKeyOf === void 0) return [];
@@ -83519,7 +83583,7 @@ var require_storage_orchestrator_addon = __commonJS({
           if (laneOf(storageClass) === "media") {
             const count = await unanswerable(this.deps.participants.analytics.residue({
               toLocationId: target.id,
-              mode: storageClass === "galleryMedia" ? "gallery" : "move"
+              mode: "move"
             }));
             if (count !== null && count.rows === 0) continue;
             out.push({
@@ -83799,9 +83863,7 @@ var require_storage_orchestrator_addon = __commonJS({
       *
       * Two lanes — the recorder's footage engine and post-analysis's media engine
       * — run in parallel with each other and strictly FIFO within themselves.
-      * `galleryMedia` shares the media lane with `eventMedia` because it shares
-      * the same `MediaRelocateEngine`, which refuses a second running job; starting
-      * both would fail the second one instantly.
+      * `eventMedia` is the only class on the media lane.
       */
       async startOrResumeMoves(job) {
         if (job.cancelRequested) return;
@@ -83931,7 +83993,7 @@ var require_storage_orchestrator_addon = __commonJS({
           const input2 = {
             toLocationId: move.toLocationId,
             throttleMbps: job.throttleMbps,
-            mode: move.storageClass === "galleryMedia" ? "gallery" : "move"
+            mode: "move"
           };
           return (unleased ? await this.deps.participants.analytics.startDrain(input2) : await this.deps.participants.analytics.startMove({
             ...input2,
@@ -83992,7 +84054,11 @@ var require_storage_orchestrator_addon = __commonJS({
       return job.phase === "done" || job.phase === "failed" || job.phase === "cancelled";
     }
     function laneOf(storageClass) {
-      return storageClass === "eventMedia" || storageClass === "galleryMedia" ? "media" : "footage";
+      return storageClass === "eventMedia" ? "media" : "footage";
+    }
+    function refuseRetiredGalleryClass(destinations) {
+      if (destinations.galleryMedia === void 0) return;
+      throw new Error("galleryMedia is no longer a storage class. Enrolled gallery lives in the pipeline-analytics addon data directory, not a location the operator places.");
     }
     function runsUnleased(job) {
       if (job.phase === "sealing" || job.phase === "draining") return true;
@@ -84263,14 +84329,13 @@ var require_storage_orchestrator_addon = __commonJS({
       /**
       * Shout about a persisted row that is BOTH the type default and disabled.
       *
-      * `upsertLocation` cannot produce this (`resolveEnabled` force-enables a
-      * default) and neither can `setDefaultLocations` — but hydrate writes rows
-      * straight into the map without either, so a hand-edited store, a partial
-      * migration or a row written by another build can. It matters because every
-      * bare-type ref resolves through {@link getDefaultLocation}: on such a row
+      * `upsertLocation` can now produce this (enabled is the write set; `isDefault`
+      * is store residue). Hydrate also writes rows straight into the map, so a
+      * hand-edited store or a row written by another build can too. It matters
+      * because every bare-type ref still resolves through {@link getDefaultLocation}
+      * until Stage 5 of the enabled-write-set design: on such a row
       * `storage.write({ location: 'eventMedia' })` and the migration coordinator's
-      * drain destination both point at a disk the operator turned off. That is the
-      * one thing this model must never do silently.
+      * drain destination both point at a disk the operator turned off.
       *
       * Reported, never repaired: flipping an operator's flag back on at boot would
       * be the system overruling the switch instead of obeying it. The coordinator
@@ -84555,6 +84620,7 @@ var require_storage_orchestrator_addon = __commonJS({
           createdAt: existing?.createdAt ?? now,
           updatedAt: now
         };
+        refuseLastWriteTargetDisabled(existing, next, this.locations.values());
         const demoted = [];
         if (next.isDefault) {
           for (const [otherId, otherLoc] of this.locations) if (otherLoc.type === next.type && otherLoc.id !== next.id && otherLoc.isDefault) {
@@ -84849,9 +84915,20 @@ var require_storage_orchestrator_addon = __commonJS({
         if (existing) return {};
         return { enabled: input.isDefault || !typeAlreadyHasLocation };
       }
-      if (input.isDefault && requested === false) return { enabled: true };
       return { enabled: requested };
     }
+    var OPTIONAL_WRITE_TYPES = /* @__PURE__ */ new Set(["backups"]);
+    function refuseLastWriteTargetDisabled(existing, next, locations) {
+      if (OPTIONAL_WRITE_TYPES.has(next.type)) return;
+      if (next.enabled !== false) return;
+      if (existing === void 0) return;
+      if (existing.enabled === false) return;
+      for (const loc of locations) {
+        if (loc.id === next.id || loc.type !== next.type) continue;
+        if (loc.enabled !== false) return;
+      }
+      throw new Error(`Cannot disable "${next.id}": it is the last enabled location of type "${next.type}". Enable another location of this type first.`);
+    }
     var DEFAULT_MAX_ROUNDS = 8;
     var DEFAULT_HYSTERESIS_PERCENT = 1;
     var StoragePressureManager = class {
@@ -85680,7 +85757,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_BhE8zNfY();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -103741,7 +103818,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_BhE8zNfY();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -105684,9 +105761,9 @@ var require_event_category_BaEgqJNv = __commonJS({
   }
 });
 
-// ../types/dist/sleep-DIg3xuEw.js
-var require_sleep_DIg3xuEw = __commonJS({
-  "../types/dist/sleep-DIg3xuEw.js"(exports) {
+// ../types/dist/sleep-CqVyhcl-.js
+var require_sleep_CqVyhcl = __commonJS({
+  "../types/dist/sleep-CqVyhcl-.js"(exports) {
     "use strict";
     var require_event_category = require_event_category_BaEgqJNv();
     var zod = require_zod();
@@ -108393,6 +108470,8 @@ var require_sleep_DIg3xuEw = __commonJS({
           listRelocateMediaJobs: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listRelocateMediaJobs", "query", input),
           cancelRelocateMedia: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "cancelRelocateMedia", "mutation", input),
           listOpsLog: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listOpsLog", "query", input),
+          reclaimDebugMedia: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "reclaimDebugMedia", "mutation", input),
+          getMediaReclaimStatus: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getMediaReclaimStatus", "query", input),
           getTrainingExportSummary: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getTrainingExportSummary", "query", input),
           getTrainingExportUrl: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getTrainingExportUrl", "query", input),
           listRetrainStaging: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listRetrainStaging", "query", input),
@@ -109357,7 +109436,7 @@ var require_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_DIg3xuEw();
+    var require_sleep = require_sleep_CqVyhcl();
     var require_err_msg = require_err_msg_COpsHMw2();
     var CAP_INPUT_DEFAULTS = Object.freeze({
       "addons": { "getLogs": { "limit": 100 } },
@@ -109473,6 +109552,7 @@ var require_addon = __commonJS({
         "getSensorEvents": { "limit": 1e3 },
         "listGroups": { "limit": 40 },
         "listRecentTracks": { "limit": 200 },
+        "reclaimDebugMedia": { "mode": "report" },
         "searchObjectEvents": {
           "limit": 50,
           "minScore": 0.2
@@ -116240,12 +116320,12 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/manifest-system-deps-DBje540e.js
-var require_manifest_system_deps_DBje540e = __commonJS({
-  "../system/dist/manifest-system-deps-DBje540e.js"(exports) {
+// ../system/dist/manifest-system-deps-uflHvHDB.js
+var require_manifest_system_deps_uflHvHDB = __commonJS({
+  "../system/dist/manifest-system-deps-uflHvHDB.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    require_dist_B29Skpzo();
+    require_dist_BhE8zNfY();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var _camstack_types_node = require_node();
@@ -123530,6 +123610,93 @@ var require_manifest_system_deps_DBje540e = __commonJS({
       }
       await deps.installPythonRequirements(reqAbs);
     }
+    var DISTRO_PACKAGE_ALLOWLIST = {
+      apt: ["smbclient"],
+      apk: ["samba-client"],
+      dnf: ["samba-client"]
+    };
+    function packageIsAllowlisted(manager, packageName) {
+      if (manager === "brew") return true;
+      if (packageName.length === 0) return false;
+      if (!/^[a-zA-Z0-9][a-zA-Z0-9+._-]*$/.test(packageName)) return false;
+      return DISTRO_PACKAGE_ALLOWLIST[manager].includes(packageName);
+    }
+    function decidePackageInstall(input) {
+      if (input.manager === "brew") return { kind: "local" };
+      if (!packageIsAllowlisted(input.manager, input.packageName)) return {
+        kind: "refuse",
+        reason: "not-allowlisted"
+      };
+      if (!input.helperAvailable) return {
+        kind: "refuse",
+        reason: "helper-unavailable"
+      };
+      return { kind: "helper" };
+    }
+    function pkgdSocketPath() {
+      return process.env["CAMSTACK_PKGD_SOCKET"] ?? "/run/camstack/pkgd.sock";
+    }
+    function privilegedHelperAvailable(socketPath = pkgdSocketPath()) {
+      return (0, node_fs.existsSync)(socketPath);
+    }
+    function requestPrivilegedInstall(req, socketPath = pkgdSocketPath(), timeoutMs = 360 * 1e3) {
+      return new Promise((resolve) => {
+        const socket = (0, node_net.createConnection)({ path: socketPath });
+        const chunks = [];
+        const finish = (result) => {
+          socket.destroy();
+          resolve(result);
+        };
+        const timer = setTimeout(() => {
+          finish({
+            ok: false,
+            error: `privileged helper timed out after ${timeoutMs}ms`
+          });
+        }, timeoutMs);
+        socket.on("connect", () => {
+          socket.write(`${JSON.stringify({
+            v: 1,
+            ...req
+          })}
+`);
+        });
+        socket.on("data", (data) => {
+          chunks.push(data);
+          const text = Buffer.concat(chunks).toString("utf8");
+          const nl = text.indexOf("\n");
+          if (nl === -1) return;
+          clearTimeout(timer);
+          try {
+            const parsed = JSON.parse(text.slice(0, nl));
+            finish({
+              ok: parsed.ok === true,
+              ...parsed.error !== void 0 ? { error: parsed.error } : {}
+            });
+          } catch (err) {
+            finish({
+              ok: false,
+              error: err instanceof Error ? err.message : String(err)
+            });
+          }
+        });
+        socket.on("error", (err) => {
+          clearTimeout(timer);
+          finish({
+            ok: false,
+            error: err.message
+          });
+        });
+        socket.on("end", () => {
+          if (chunks.length === 0) {
+            clearTimeout(timer);
+            finish({
+              ok: false,
+              error: "privileged helper closed without a reply"
+            });
+          }
+        });
+      });
+    }
     var execFileAsync = (0, node_util.promisify)(node_child_process.execFile);
     var INSTALL_TIMEOUT_MS = 300 * 1e3;
     var PROBE_TIMEOUT_MS = 1e4;
@@ -123540,12 +123707,16 @@ var require_manifest_system_deps_DBje540e = __commonJS({
       const detectManager = options.detectManager ?? defaultDetectManager;
       const run = options.run ?? defaultRun;
       const platform = options.platform ?? process.platform;
+      const helperAvailable = options.helperAvailable ?? (async () => privilegedHelperAvailable());
+      const requestInstall = options.requestInstall ?? ((req) => requestPrivilegedInstall(req));
       for (const dep of deps) try {
         await satisfyOne(dep, declaration.id, {
           hasBinary,
           detectManager,
           run,
-          platform
+          platform,
+          helperAvailable,
+          requestInstall
         }, logger);
       } catch (err) {
         logger.warn("system dependency step failed", { meta: {
@@ -123583,15 +123754,43 @@ var require_manifest_system_deps_DBje540e = __commonJS({
         } });
         return;
       }
-      const plan = planFor(manager, packageName);
+      const decision = decidePackageInstall({
+        manager,
+        packageName,
+        helperAvailable: await rt.helperAvailable()
+      });
+      if (decision.kind === "refuse") {
+        const message = decision.reason === "helper-unavailable" ? "system dependency missing and the privileged helper is not running \u2014 apt cannot run as uid 1001" : "system dependency missing and the package is not on the helper allowlist";
+        logger.warn(message, { meta: {
+          addonId,
+          binary: dep.binary,
+          manager,
+          package: packageName,
+          reason: decision.reason,
+          ...dep.reason !== void 0 ? { reason: dep.reason } : {}
+        } });
+        return;
+      }
       logger.info("installing system dependency", { meta: {
         addonId,
         binary: dep.binary,
         manager,
-        package: packageName
+        package: packageName,
+        via: decision.kind
       } });
       try {
-        for (const [command, args] of plan.steps) await rt.run(command, args);
+        if (decision.kind === "helper") {
+          const result = await rt.requestInstall({
+            addonId,
+            binary: dep.binary,
+            manager,
+            packageName
+          });
+          if (!result.ok) throw new Error(result.error ?? "privileged helper refused");
+        } else {
+          const plan = planFor(manager, packageName);
+          for (const [command, args] of plan.steps) await rt.run(command, args);
+        }
       } catch (err) {
         logger.warn("system dependency install failed \u2014 the addon loads, its capability must refuse", { meta: {
           addonId,
@@ -128274,7 +128473,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_BhE8zNfY();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -128300,7 +128499,7 @@ var require_dist3 = __commonJS({
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_file_data_plane = require_file_data_plane_DO8KbxCe();
     var require_tls$1 = require_tls_BxQlomxd();
-    var require_manifest_system_deps = require_manifest_system_deps_DBje540e();
+    var require_manifest_system_deps = require_manifest_system_deps_uflHvHDB();
     var require_resource_monitor = require_resource_monitor_CdnzxBLP();
     var require_custom_action_registry = require_custom_action_registry_jY0NOZK8();
     var zod = require_zod();
@@ -209142,7 +209341,7 @@ var require_dist4 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_DIg3xuEw();
+    var require_sleep = require_sleep_CqVyhcl();
     var require_canonical_hash = require_canonical_hash_DNV8S5ET();
     var require_enums2 = require_enums();
     var require_err_msg = require_err_msg_COpsHMw2();
@@ -223483,6 +223682,39 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       /** Present when the pass ended by throwing. */
       error: zod.z.string().nullable()
     });
+    var MediaReclaimStartResultSchema = zod.z.object({
+      started: zod.z.boolean(),
+      /** True when a pass was already running; the new request is ignored. */
+      alreadyRunning: zod.z.boolean()
+    });
+    var MediaReclaimInputSchema = zod.z.object({
+      mode: zod.z.enum(["report", "reclaim"]).default("report"),
+      scopes: zod.z.array(zod.z.enum(["motion-still", "track-filmstrip"])).min(1).optional(),
+      deviceIds: zod.z.array(zod.z.number().int()).min(1).optional(),
+      restart: zod.z.boolean().optional(),
+      pageSize: zod.z.number().int().min(50).max(5e3).optional(),
+      maxRowsPerDevice: zod.z.number().int().min(1).max(5e5).optional(),
+      maxReclaimPerDevice: zod.z.number().int().min(1).max(5e5).optional(),
+      maxBytesPerRun: zod.z.number().int().min(1).optional(),
+      budgetMinutes: zod.z.number().int().min(1).max(720).optional(),
+      throttleBytesPerSec: zod.z.number().int().min(64 * 1024).optional(),
+      graceMinutes: zod.z.number().int().min(1).max(10080).optional()
+    });
+    var MediaReclaimStatusSchema = zod.z.object({
+      running: zod.z.boolean(),
+      mode: zod.z.enum(["report", "reclaim"]).nullable(),
+      totalExamined: zod.z.number(),
+      totalEligible: zod.z.number(),
+      totalReclaimed: zod.z.number(),
+      totalBytesReclaimed: zod.z.number(),
+      totalRefused: zod.z.number(),
+      /** Device+scope windows finished in this pass. */
+      devicesDone: zod.z.number(),
+      complete: zod.z.boolean().nullable(),
+      startedAtMs: zod.z.number().nullable(),
+      finishedAtMs: zod.z.number().nullable(),
+      error: zod.z.string().nullable()
+    });
     var ReplayFrameInputSchema = zod.z.object({
       timestamp: zod.z.number(),
       frame: PipelineRunResultBridge
@@ -223906,6 +224138,20 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           auth: "admin"
         }),
         /**
+        * Reclaim the standing debug-media backlog (motion-visit stills + track
+        * filmstrips). DETACHED: returns `{ started }` immediately. The pass is
+        * tens of minutes; awaiting it is a timeout, not a verdict. Dry-run unless
+        * `mode: 'reclaim'`. Poll `getMediaReclaimStatus`.
+        */
+        reclaimDebugMedia: require_sleep.method(MediaReclaimInputSchema, MediaReclaimStartResultSchema, {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        getMediaReclaimStatus: require_sleep.method(zod.z.object({}), MediaReclaimStatusSchema, {
+          kind: "query",
+          auth: "admin"
+        }),
+        /**
         * The CHEAP QUESTION, asked before any media moves: how big is the dataset
         * the marked (`markForTrain`) tracks would produce?
         *
@@ -242825,6 +243071,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.getMediaReclaimStatus": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.getMotionEvents": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -242999,6 +243251,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "pipelineAnalytics.reclaimDebugMedia": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "create"
+      },
       "pipelineAnalytics.reconcileFromDisk": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -246873,6 +247131,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: true
       }],
+      "pipelineAnalytics.reclaimDebugMedia": [{
+        name: "deviceIds",
+        form: "array",
+        optional: true
+      }],
       "pipelineAnalytics.reconcileFromDisk": [{
         name: "deviceId",
         form: "single",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.2.69",
+  "version": "1.2.70",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",