@camstack/addon-post-analysis 1.2.131 → 1.2.132

package/dist/{dist-B8_nKey5.js → dist-BB-Ol201.js}

@@ -29876,17 +29876,60 @@ var SetSiteLocationInputSchema = object({
 	longitude: number().min(-180).max(180)
 }).nullable();
 /**
-* One `(procedure, user-agent, ip, principal)` tuple of the HTTP request
+* The TRANSPORT a call arrived on.
+*
+* Every counted call carries exactly one of these, and `unknown` is a PLANE
+* rather than a gap: a plane that cannot attribute a call declares it here, so
+* the call lands in a named bucket instead of vanishing. `planes` summing to
+* `procedureCalls` is what makes "the sum of the planes explains the total"
+* checkable rather than asserted.
+*
+*  - `http`  — the Fastify tRPC plugin (`/trpc/*`), one context per request.
+*  - `ws`    — `applyWSSHandler`, counted per OPERATION rather than per
+*              connection; the viewer talks to the hub over `wsLink`
+*              exclusively, so this is the plane the HTTP census could not see.
+*  - `mesh`  — the in-process `$core-caps` bridge (`createCaller`), which
+*              never touches a socket and therefore never touched a census.
+*  - `unknown` — counted, plane undecidable. No hook produces it today, and
+*    that is exactly what its `0` asserts: every plane the hub has can name
+*    itself. It is an output bucket, never a knob — a call that arrives on a
+*    plane nobody instrumented lands here instead of vanishing from the total.
+*/
+var TransportPlaneSchema = _enum([
+	"http",
+	"ws",
+	"mesh",
+	"unknown"
+]);
+/**
+* Calls per plane. Every key is always present, `0` included — an absent plane
+* reads as "not instrumented", which is the one thing this census must never
+* make an operator wonder about.
+*/
+var TransportPlaneCountsSchema = object({
+	http: number(),
+	ws: number(),
+	mesh: number(),
+	unknown: number()
+});
+/**
+* One `(plane, procedure, user-agent, ip, principal)` tuple of the transport
 * census. `principal` is the DERIVED identity (`apocaliss92 (admin)`,
 * `scoped:1a2b3c4d (scoped-token)`, `anonymous`) that the tRPC error log
 * already prints - never a token, never an `Authorization` header.
+*
+* `subscriptions` is counted APART from `calls`: a subscription is opened once
+* and lives for hours, so folding it into a call count makes one long-lived
+* stream look like a storm.
 */
 var RequestCensusGroupSchema = object({
+	plane: TransportPlaneSchema,
 	procedure: string(),
 	userAgent: string(),
 	ip: string(),
 	principal: string(),
 	calls: number(),
+	subscriptions: number(),
 	perMin: number()
 });
 /**
@@ -29899,6 +29942,14 @@ var RequestCensusGroupSchema = object({
 var RequestCensusProcedureSchema = object({
 	procedure: string(),
 	calls: number(),
+	/**
+	* The same total, split by transport. THIS is the row that answers the
+	* question the census exists for: one look at `deviceManager.listAll` says
+	* which plane carried the 4 960, without joining two log lines by eye.
+	*/
+	planes: TransportPlaneCountsSchema,
+	/** Subscription STARTS on this procedure. Never folded into `calls`. */
+	subscriptions: number(),
 	perMin: number()
 });
 /**
@@ -29926,14 +29977,45 @@ var RequestCensusStatusSchema = object({
 	*/
 	procedureCalls: number(),
 	/**
+	* `procedureCalls` split by transport. The four keys sum to
+	* `procedureCalls` by construction - {@link RequestCensusSnapshotSchema}'s
+	* `planesExplainTotal` is that identity, checked rather than assumed.
+	*/
+	planes: TransportPlaneCountsSchema,
+	/**
+	* True iff `planes` sums to `procedureCalls`. False means a call was counted
+	* on no plane at all - which is a RESULT (a plane is missing from the
+	* instrument), not a failure, and it has to be visible to be read as one.
+	*/
+	planesExplainTotal: boolean(),
+	/**
 	* tRPC WebSocket connections opened during the window. NOT calls - the WS
-	* transport resolves one context per connection - but the number that says
-	* whether a plane this census cannot see was busy while HTTP was quiet.
+	* adapter resolves one context per connection - kept because a plane's call
+	* count of zero against 37 open connections says something different from a
+	* plane with no connections at all.
 	*/
 	wsConnections: number(),
+	/**
+	* Client frames the WS plane looked at. `wsMessages` far above
+	* `planes.ws + subscriptions` means most traffic is not operations
+	* (keepalives, connection params) - which is itself an answer.
+	*/
+	wsMessages: number(),
+	/**
+	* Subscription STARTS across every plane, excluded from `procedureCalls` on
+	* purpose: one live-events stream opened at boot and held for six hours is
+	* one subscription, and counting it as a call would let a quiet plane
+	* masquerade as the storm.
+	*/
+	subscriptions: number(),
+	/** `subscription.stop` frames. Starts minus stops is what is still open. */
+	subscriptionStops: number(),
 	distinctGroups: number(),
-	/** Calls counted in the totals whose group attribution was shed at the
-	*  cardinality bound. */
+	/**
+	* Operations counted in the totals whose CALLER attribution was shed at the
+	* cardinality bound. Unrelated to the `unknown` PLANE: these calls know
+	* which transport they arrived on, they just lost their group row.
+	*/
 	unattributedCalls: number(),
 	procedures: array(RequestCensusProcedureSchema).readonly(),
 	groups: array(RequestCensusGroupSchema).readonly()

package/dist/{dist-C8JUWFmR.mjs → dist-XrPlCmxK.mjs}

@@ -29845,17 +29845,60 @@ var SetSiteLocationInputSchema = object({
 	longitude: number().min(-180).max(180)
 }).nullable();
 /**
-* One `(procedure, user-agent, ip, principal)` tuple of the HTTP request
+* The TRANSPORT a call arrived on.
+*
+* Every counted call carries exactly one of these, and `unknown` is a PLANE
+* rather than a gap: a plane that cannot attribute a call declares it here, so
+* the call lands in a named bucket instead of vanishing. `planes` summing to
+* `procedureCalls` is what makes "the sum of the planes explains the total"
+* checkable rather than asserted.
+*
+*  - `http`  — the Fastify tRPC plugin (`/trpc/*`), one context per request.
+*  - `ws`    — `applyWSSHandler`, counted per OPERATION rather than per
+*              connection; the viewer talks to the hub over `wsLink`
+*              exclusively, so this is the plane the HTTP census could not see.
+*  - `mesh`  — the in-process `$core-caps` bridge (`createCaller`), which
+*              never touches a socket and therefore never touched a census.
+*  - `unknown` — counted, plane undecidable. No hook produces it today, and
+*    that is exactly what its `0` asserts: every plane the hub has can name
+*    itself. It is an output bucket, never a knob — a call that arrives on a
+*    plane nobody instrumented lands here instead of vanishing from the total.
+*/
+var TransportPlaneSchema = _enum([
+	"http",
+	"ws",
+	"mesh",
+	"unknown"
+]);
+/**
+* Calls per plane. Every key is always present, `0` included — an absent plane
+* reads as "not instrumented", which is the one thing this census must never
+* make an operator wonder about.
+*/
+var TransportPlaneCountsSchema = object({
+	http: number(),
+	ws: number(),
+	mesh: number(),
+	unknown: number()
+});
+/**
+* One `(plane, procedure, user-agent, ip, principal)` tuple of the transport
 * census. `principal` is the DERIVED identity (`apocaliss92 (admin)`,
 * `scoped:1a2b3c4d (scoped-token)`, `anonymous`) that the tRPC error log
 * already prints - never a token, never an `Authorization` header.
+*
+* `subscriptions` is counted APART from `calls`: a subscription is opened once
+* and lives for hours, so folding it into a call count makes one long-lived
+* stream look like a storm.
 */
 var RequestCensusGroupSchema = object({
+	plane: TransportPlaneSchema,
 	procedure: string(),
 	userAgent: string(),
 	ip: string(),
 	principal: string(),
 	calls: number(),
+	subscriptions: number(),
 	perMin: number()
 });
 /**
@@ -29868,6 +29911,14 @@ var RequestCensusGroupSchema = object({
 var RequestCensusProcedureSchema = object({
 	procedure: string(),
 	calls: number(),
+	/**
+	* The same total, split by transport. THIS is the row that answers the
+	* question the census exists for: one look at `deviceManager.listAll` says
+	* which plane carried the 4 960, without joining two log lines by eye.
+	*/
+	planes: TransportPlaneCountsSchema,
+	/** Subscription STARTS on this procedure. Never folded into `calls`. */
+	subscriptions: number(),
 	perMin: number()
 });
 /**
@@ -29895,14 +29946,45 @@ var RequestCensusStatusSchema = object({
 	*/
 	procedureCalls: number(),
 	/**
+	* `procedureCalls` split by transport. The four keys sum to
+	* `procedureCalls` by construction - {@link RequestCensusSnapshotSchema}'s
+	* `planesExplainTotal` is that identity, checked rather than assumed.
+	*/
+	planes: TransportPlaneCountsSchema,
+	/**
+	* True iff `planes` sums to `procedureCalls`. False means a call was counted
+	* on no plane at all - which is a RESULT (a plane is missing from the
+	* instrument), not a failure, and it has to be visible to be read as one.
+	*/
+	planesExplainTotal: boolean(),
+	/**
 	* tRPC WebSocket connections opened during the window. NOT calls - the WS
-	* transport resolves one context per connection - but the number that says
-	* whether a plane this census cannot see was busy while HTTP was quiet.
+	* adapter resolves one context per connection - kept because a plane's call
+	* count of zero against 37 open connections says something different from a
+	* plane with no connections at all.
 	*/
 	wsConnections: number(),
+	/**
+	* Client frames the WS plane looked at. `wsMessages` far above
+	* `planes.ws + subscriptions` means most traffic is not operations
+	* (keepalives, connection params) - which is itself an answer.
+	*/
+	wsMessages: number(),
+	/**
+	* Subscription STARTS across every plane, excluded from `procedureCalls` on
+	* purpose: one live-events stream opened at boot and held for six hours is
+	* one subscription, and counting it as a call would let a quiet plane
+	* masquerade as the storm.
+	*/
+	subscriptions: number(),
+	/** `subscription.stop` frames. Starts minus stops is what is still open. */
+	subscriptionStops: number(),
 	distinctGroups: number(),
-	/** Calls counted in the totals whose group attribution was shed at the
-	*  cardinality bound. */
+	/**
+	* Operations counted in the totals whose CALLER attribution was shed at the
+	* cardinality bound. Unrelated to the `unknown` PLANE: these calls know
+	* which transport they arrived on, they just lost their group row.
+	*/
 	unattributedCalls: number(),
 	procedures: array(RequestCensusProcedureSchema).readonly(),
 	groups: array(RequestCensusGroupSchema).readonly()

package/dist/embedding-encoder/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-B8_nKey5.js");
+const require_dist = require("../dist-BB-Ol201.js");
 let node_fs = require("node:fs");
 let node_fs$1 = require_dist.__toESM(node_fs, 1);
 node_fs = require_dist.__toESM(node_fs);

package/dist/embedding-encoder/index.mjs

@@ -1,4 +1,4 @@
-import { M as PoolMemoryWatchdog, at as hfModelUrl, gt as resolvePoolMemoryPolicy, nt as embeddingEncoderCapability, ut as parseProcStatus, wt as BaseAddon } from "../dist-C8JUWFmR.mjs";
+import { M as PoolMemoryWatchdog, at as hfModelUrl, gt as resolvePoolMemoryPolicy, nt as embeddingEncoderCapability, ut as parseProcStatus, wt as BaseAddon } from "../dist-XrPlCmxK.mjs";
 import { createRequire } from "node:module";
 import * as fs from "node:fs";
 import "node:fs";

package/dist/pipeline-analytics/{_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-CaoDYCwF.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-_ZUR9O1b.mjs}

@@ -3,7 +3,7 @@ import "./dist-CYZr2fwk.mjs";
 var e = {
 	"@camstack/sdk": {
 		name: "@camstack/sdk",
-		version: "1.2.35",
+		version: "1.2.36",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_analytics_widgets",
@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.113",
+		version: "1.2.114",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_analytics_widgets",
@@ -33,7 +33,7 @@ var e = {
 	},
 	"@camstack/ui-library": {
 		name: "@camstack/ui-library",
-		version: "1.2.76",
+		version: "1.2.77",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_analytics_widgets",

package/dist/pipeline-analytics/{hostInit-c_jfj7E4.mjs → hostInit-BrwrIFi_.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.2.113",
+				version: "1.2.114",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -45,7 +45,7 @@ async function r() {
 				}
 			},
 			"@camstack/sdk": {
-				version: "1.2.35",
+				version: "1.2.36",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -81,7 +81,7 @@ async function r() {
 				}
 			},
 			"@camstack/ui-library": {
-				version: "1.2.76",
+				version: "1.2.77",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/pipeline-analytics/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-B8_nKey5.js");
+const require_dist = require("../dist-BB-Ol201.js");
 let node_fs = require("node:fs");
 node_fs = require_dist.__toESM(node_fs, 1);
 let node_path = require("node:path");
@@ -15365,33 +15365,95 @@ function remainingSummaryCandidates(kept, taken, rank) {
 /**
 * The media a tile is drawn from, best first.
 *
-* First-level group crop only (`groupCrop`), then the group's native-frame
-* pointer, then a member's clean full frame. Member `thumbnail` / plate /
-* face crops stay off this ladder: a successful plate read overwrites the
-* vehicle first-level crop under the same `thumbnail` kind, and a digest
-* tile of a targa is the wrong picture. Boxed frames stay absent: a drawn
-* rectangle is a permanent lie in a digest tile. Duplicate driveways from
-* tracker ID churn are collapsed by `frameDedupeKey`, not by hiding the
-* full-frame fallback.
+* A digest tile is a SUBJECT, so the crops come first: the group's first-level
+* crop (`groupCrop`), the group's native-frame pointer, then the TRACK's own
+* subject crop (`thumbnail`, then its `thumbnailSmall` downscale), and only
+* then the clean whole scene (`keyFrame` → `keyFrameSmall` → `fullFrame`).
+*
+* ⚠ The whole-scene rungs are a FALLBACK and stay on the ladder. Measured on
+* 60 real tracks (615/617, 24 h): 52 carry a crop, 43 carry a scene rung, and
+* 2 carry a scene rung and NO crop — dropping the fallback would delete those
+* two tiles for nothing. A track with neither is dropped, never drawn as an
+* empty cell (see `NcSummaryProducer.loadTiles`).
+*
+* ## Why `thumbnail` is back (2026-08-27)
+*
+* It was removed on 2026-08-24 (160200681) because a successful plate read
+* overwrites the vehicle first-level crop under the same `thumbnail` kind.
+* **That collision belongs to the GROUP entity**: the sealer is what writes
+* `ownerKind: 'group', kind: 'thumbnail'` (`group/group-sealer.ts`), and the
+* group process is OFF (`GROUPS_PROCESS_ENABLED`, `group/group-enabled.ts`).
+* On a TRACK, plates live under `ownerKind: 'plate'` / `kind: 'plateCrop'` and
+* never touch `thumbnail`. The same commit turned the group process off, so
+* `groupCrop` and `nativeFrame` became unreachable and every digest tile fell
+* through to `keyFrame` — a whole frame — for three days.
+* `scripts/check-summary-ladder-reachable.ts` is the guard that refuses that
+* shape now.
+*
+* Boxed frames stay absent: a drawn rectangle is a permanent lie in a digest
+* tile. Plate and face crops stay absent: a digest tile of a targa is the
+* wrong picture. Duplicate driveways from tracker ID churn are collapsed by
+* `frameDedupeKey`, not by hiding the whole-scene fallback.
 */
 var SUMMARY_MEDIA_LADDER = [
 	"groupCrop",
 	"nativeFrame",
+	"thumbnail",
+	"thumbnailSmall",
 	"keyFrame",
 	"keyFrameSmall",
 	"fullFrame"
 ];
 /**
+* The floor below which a `thumbnail` row is NOT a subject crop.
+*
+* `copyFaceCropIfTrackHasNoThumbnail` (`pipeline-analytics/copy-face-crop-preview.ts`)
+* copies the persisted face crop onto a track that has no preview of its own,
+* and it stores it under `kind: 'thumbnail'` — so an ArcFace **112×112**
+* alignment template lands on the ladder wearing the same kind as a real
+* subject crop. Measured: 3 of 52 track thumbnails (5.8%) are 3–10 KB
+* templates. Delivering one is a face in a digest of passages.
+*
+* 20 KiB is chosen as the smallest number that is unambiguous in BOTH
+* directions: it is 2× the largest template observed (10 KB) and above the
+* theoretical ceiling of a 112×112 JPEG at any quality, while a native-
+* resolution subject crop measures in the hundreds of KB. The second reason
+* the number is safe: a genuine crop small enough to fall under it is a
+* subject a few dozen pixels across, which is a smear in a mosaic cell — the
+* whole-scene rung below is the better picture either way.
+*
+* The check costs NOTHING: `MediaFileInfo.sizeBytes` is already on the index
+* row, so no blob is fetched and nothing is decoded to apply it.
+*/
+var SUMMARY_THUMBNAIL_MIN_BYTES = 20480;
+/** The rungs {@link SUMMARY_THUMBNAIL_MIN_BYTES} is applied to. */
+var SUMMARY_SIZE_GATED_RUNGS = new Set(["thumbnail"]);
+/**
+* Is this row a picture, or a template wearing a picture's kind?
+*
+* Only a size the index REPORTED can demote a row. A `null` size is unknown,
+* and demoting on unknown would silently delete every group-owned pointer.
+*/
+function rowClearsSizeFloor(row, rung) {
+	if (!SUMMARY_SIZE_GATED_RUNGS.has(rung)) return true;
+	if (typeof row.sizeBytes !== "number") return true;
+	return row.sizeBytes >= SUMMARY_THUMBNAIL_MIN_BYTES;
+}
+/**
 * Pick ONE media row for a track — the cheap question first (index rows only),
 * so exactly one blob is ever read.
 *
 * Within a rung the row CLOSEST to the track's peak is chosen; a member may
 * carry more than one full-frame still, so "the first one" would systematically
 * pick the moment the subject entered rather than the moment it was best seen.
+*
+* A `thumbnail` under {@link SUMMARY_THUMBNAIL_MIN_BYTES} DESCENDS to the next
+* rung rather than being drawn — see that constant for the face template it
+* exists to catch.
 */
 function pickSummaryMedia(rows, aroundMs) {
 	for (const rung of SUMMARY_MEDIA_LADDER) {
-		const matches = rows.filter((row) => row.kind === rung);
+		const matches = rows.filter((row) => row.kind === rung && rowClearsSizeFloor(row, rung));
 		if (matches.length === 0) continue;
 		return matches.reduce((best, row) => Math.abs(row.timestamp - aroundMs) < Math.abs(best.timestamp - aroundMs) ? row : best);
 	}
@@ -15703,12 +15765,13 @@ var NcSummaryProducer = class {
 					droppedStationary: filtered.droppedStationary
 				};
 			}
-			const loaded = await this.loadTiles({
+			const tileLoad = await this.loadTiles({
 				rule,
 				preferred: selection.tiles,
 				refill: remainingSummaryCandidates(filtered.kept, selection.tiles, rule.rank),
 				maxTiles: rule.maxTiles
 			});
+			const loaded = tileLoad.tiles;
 			const detections = countDetections({ tracks: selection.tiles.map((t) => ({
 				firstSeen: t.firstSeen,
 				lastSeen: t.lastSeen,
@@ -15766,7 +15829,8 @@ var NcSummaryProducer = class {
 				tiles: loaded.length,
 				cameras: new Set(loaded.map((t) => t.candidate.deviceId)).size,
 				camerasDropped: selection.camerasDropped,
-				droppedNoMedia: Math.max(0, rule.maxTiles - loaded.length),
+				droppedNoMedia: tileLoad.droppedNoMedia,
+				droppedDuplicateFrame: tileLoad.droppedDuplicateFrame,
 				mosaicBytes: mosaic.bytes,
 				mosaicPublished: mosaic.ref !== null,
 				enqueued,
@@ -15832,14 +15896,20 @@ var NcSummaryProducer = class {
 	}
 	/** One blob per tile — the cheap question (index rows) always first.
 	*  Duplicate camera-seconds are skipped so tracker ID churn cannot paint
-	*  the same driveway eleven times; leftover ranked candidates refill. */
+	*  the same driveway eleven times; leftover ranked candidates refill.
+	*
+	*  It COUNTS what it drops, per reason, because only this loop knows: the
+	*  caller sees tiles and has no way to tell a track that had no picture from
+	*  a rule whose quota was simply larger than the night. */
 	async loadTiles(input) {
-		const out = [];
+		const tiles = [];
 		const seenFrames = /* @__PURE__ */ new Set();
 		const seenIds = /* @__PURE__ */ new Set();
+		let droppedNoMedia = 0;
+		let droppedDuplicateFrame = 0;
 		const queue = [...input.preferred, ...input.refill];
 		for (const candidate of queue) {
-			if (out.length >= input.maxTiles) break;
+			if (tiles.length >= input.maxTiles) break;
 			if (seenIds.has(candidate.trackId)) continue;
 			seenIds.add(candidate.trackId);
 			const tags = { deviceId: candidate.deviceId };
@@ -15847,19 +15917,22 @@ var NcSummaryProducer = class {
 				const rows = await this.deps.listMediaInfo(candidate.trackId);
 				const picked = pickSummaryMedia(rows, (candidate.firstSeen + candidate.lastSeen) / 2);
 				if (picked === null) {
-					this.deps.logger.debug("summary tile dropped: the track carries no clean media", {
+					droppedNoMedia += 1;
+					this.deps.logger.info("summary tile dropped: the track carries no clean media", {
 						tags,
 						meta: {
 							ruleId: input.rule.id,
 							trackId: candidate.trackId,
-							mediaRows: rows.length
+							mediaRows: rows.length,
+							mediaKinds: [...new Set(rows.map((row) => row.kind))].sort()
 						}
 					});
 					continue;
 				}
 				const frameKey = frameDedupeKey(candidate.deviceId, picked.timestamp);
 				if (seenFrames.has(frameKey)) {
-					this.deps.logger.debug("summary tile dropped: same frame as an earlier tile", {
+					droppedDuplicateFrame += 1;
+					this.deps.logger.info("summary tile dropped: same frame as an earlier tile", {
 						tags,
 						meta: {
 							ruleId: input.rule.id,
@@ -15871,22 +15944,25 @@ var NcSummaryProducer = class {
 				}
 				const jpeg = await this.deps.readMedia(picked.key);
 				if (jpeg === null || jpeg.byteLength === 0) {
-					this.deps.logger.debug("summary tile dropped: the media blob could not be read", {
+					droppedNoMedia += 1;
+					this.deps.logger.info("summary tile dropped: the media blob could not be read", {
 						tags,
 						meta: {
 							ruleId: input.rule.id,
 							trackId: candidate.trackId,
-							mediaKey: picked.key
+							mediaKey: picked.key,
+							mediaKind: picked.kind
 						}
 					});
 					continue;
 				}
 				seenFrames.add(frameKey);
-				out.push({
+				tiles.push({
 					candidate,
 					jpeg
 				});
 			} catch (err) {
+				droppedNoMedia += 1;
 				this.deps.logger.warn("summary tile dropped: reading its media threw", {
 					tags,
 					meta: {
@@ -15897,7 +15973,11 @@ var NcSummaryProducer = class {
 				});
 			}
 		}
-		return out;
+		return {
+			tiles,
+			droppedNoMedia,
+			droppedDuplicateFrame
+		};
 	}
 	/**
 	* Render the mosaic, file it where event media lives, and mint the public
@@ -41300,12 +41380,14 @@ function digestMediaRows(input) {
 	if (input.mediaKey !== null && input.mediaKey.length > 0) owned.push({
 		key: input.mediaKey,
 		kind: "groupCrop",
-		timestamp: input.timestamp
+		timestamp: input.timestamp,
+		sizeBytes: null
 	});
 	if (input.nativeKey !== null && input.nativeKey.length > 0) owned.push({
 		key: input.nativeKey,
 		kind: "nativeFrame",
-		timestamp: input.timestamp
+		timestamp: input.timestamp,
+		sizeBytes: null
 	});
 	if (owned.length > 0) return owned;
 	return input.memberRows.filter((row) => DIGEST_MEMBER_FALLBACK_KINDS.has(row.kind));
@@ -60568,7 +60650,8 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 					const memberRows = (await Promise.all(members.map((m) => stores.mediaStore.listInfoByOwner("track", m.trackId)))).flatMap((rows) => rows.map((r) => ({
 						key: r.key,
 						kind: r.kind,
-						timestamp: r.timestamp
+						timestamp: r.timestamp,
+						sizeBytes: r.sizeBytes
 					})));
 					return digestMediaRows({
 						mediaKey: group.mediaKey,
@@ -60580,7 +60663,8 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 				return (await stores.mediaStore.listInfoByOwner("track", id)).map((r) => ({
 					key: r.key,
 					kind: r.kind,
-					timestamp: r.timestamp
+					timestamp: r.timestamp,
+					sizeBytes: r.sizeBytes
 				}));
 			},
 			readMedia: async (key) => {

package/dist/pipeline-analytics/index.mjs

@@ -1,4 +1,4 @@
-import { $ as customAction, A as NcTaxonomySchema, At as sleep, B as TIMELAPSE_DENSE_FLOOR_SEC, Bt as string, C as NcRuleSchema, Ct as errMsg, D as NcSnoozeSchema, Dt as hydrateSchema, E as NcSnoozeInputSchema, Et as createEvent, Ft as literal, G as VISIT_MERGE_GAP_MS, H as TimelapseRulePatchSchema, Ht as EventCategory, I as SCENE_DEFAULT_ANCHOR_THRESHOLD, It as number, J as assertTimelapseCadences, K as addonWidgetsSourceCapability, L as SCENE_DEFAULT_UNCOVERED_POLICY, Lt as object, Mt as array, N as RECORDING_EXPORT_MAX_READ_BYTES, Nt as boolean, O as NcSnoozeSuppressedSchema, Ot as isDeviceScopedCap, P as RetrainStatusSchema, Pt as discriminatedUnion, Q as cosineSimilarity$1, R as SCENE_DIVERGED, Rt as partialRecord, S as NcRulePatchSchema, St as zoneAnalyticsCapability, T as NcScheduleSchema, Tt as DeviceType, U as TimelapseRuleSchema, V as TimelapseRuleInputSchema, Vt as unknown, W as TrackSourceSchema, X as audioModeOf, Y as audioMetricsCapability, Z as buildEventKindDescriptor, _ as NC_DEFAULT_SNOOZE_MINUTES, _t as sceneMonitorCapability, a as DEFAULT_EVENT_COLOR, b as NcConditionDescriptorSchema, bt as vectorDimFromBase64, ct as kebabToCamel, d as EVENT_PAD_MS, dt as pickClusterStepModels, et as defineCustomActions, f as FULL_IMAGE_BBOX, ft as pipelineAnalyticsCapability, g as NC_CONDITION_CATALOG, h as NC_ALARM_SYSTEM_EVENT_KINDS, ht as readTimelapseGeneratedAt, i as CLUSTER_MODEL_SCOPED_STEPS, it as faceGalleryCapability, j as OpsLogEntrySchema, jt as _enum, k as NcSystemEventKindSchema, kt as nodePin, l as DeclaredDevices, lt as notificationRulesCapability, m as MACRO_LABELS, mt as readDeviceStateFrom, n as AnalyticsGroupRecordSchema, ot as isDetectionMacroClass, p as LabelAttributionSchema, pt as plateGalleryCapability, q as alarmPanelCapability, r as BaseDevice, rt as encodeVectorBase64, s as DETECTION_MACRO_CLASSES, st as isScheduleActive, t as AnalyticsGroupDetailSchema, tt as deriveRecordingMode, u as EVENT_KIND_BY_CAP, vt as subKindsOf, w as NcRuleTargetSchema, wt as BaseAddon, x as NcRuleInputSchema, xt as videoclipsCapability, y as NC_TAXONOMY, yt as systemEventFilterApplies, z as SceneMonitorSchema, zt as record } from "../dist-C8JUWFmR.mjs";
+import { $ as customAction, A as NcTaxonomySchema, At as sleep, B as TIMELAPSE_DENSE_FLOOR_SEC, Bt as string, C as NcRuleSchema, Ct as errMsg, D as NcSnoozeSchema, Dt as hydrateSchema, E as NcSnoozeInputSchema, Et as createEvent, Ft as literal, G as VISIT_MERGE_GAP_MS, H as TimelapseRulePatchSchema, Ht as EventCategory, I as SCENE_DEFAULT_ANCHOR_THRESHOLD, It as number, J as assertTimelapseCadences, K as addonWidgetsSourceCapability, L as SCENE_DEFAULT_UNCOVERED_POLICY, Lt as object, Mt as array, N as RECORDING_EXPORT_MAX_READ_BYTES, Nt as boolean, O as NcSnoozeSuppressedSchema, Ot as isDeviceScopedCap, P as RetrainStatusSchema, Pt as discriminatedUnion, Q as cosineSimilarity$1, R as SCENE_DIVERGED, Rt as partialRecord, S as NcRulePatchSchema, St as zoneAnalyticsCapability, T as NcScheduleSchema, Tt as DeviceType, U as TimelapseRuleSchema, V as TimelapseRuleInputSchema, Vt as unknown, W as TrackSourceSchema, X as audioModeOf, Y as audioMetricsCapability, Z as buildEventKindDescriptor, _ as NC_DEFAULT_SNOOZE_MINUTES, _t as sceneMonitorCapability, a as DEFAULT_EVENT_COLOR, b as NcConditionDescriptorSchema, bt as vectorDimFromBase64, ct as kebabToCamel, d as EVENT_PAD_MS, dt as pickClusterStepModels, et as defineCustomActions, f as FULL_IMAGE_BBOX, ft as pipelineAnalyticsCapability, g as NC_CONDITION_CATALOG, h as NC_ALARM_SYSTEM_EVENT_KINDS, ht as readTimelapseGeneratedAt, i as CLUSTER_MODEL_SCOPED_STEPS, it as faceGalleryCapability, j as OpsLogEntrySchema, jt as _enum, k as NcSystemEventKindSchema, kt as nodePin, l as DeclaredDevices, lt as notificationRulesCapability, m as MACRO_LABELS, mt as readDeviceStateFrom, n as AnalyticsGroupRecordSchema, ot as isDetectionMacroClass, p as LabelAttributionSchema, pt as plateGalleryCapability, q as alarmPanelCapability, r as BaseDevice, rt as encodeVectorBase64, s as DETECTION_MACRO_CLASSES, st as isScheduleActive, t as AnalyticsGroupDetailSchema, tt as deriveRecordingMode, u as EVENT_KIND_BY_CAP, vt as subKindsOf, w as NcRuleTargetSchema, wt as BaseAddon, x as NcRuleInputSchema, xt as videoclipsCapability, y as NC_TAXONOMY, yt as systemEventFilterApplies, z as SceneMonitorSchema, zt as record } from "../dist-XrPlCmxK.mjs";
 import { t as __exportAll } from "../embedding-encoder/index.mjs";
 import * as fs from "node:fs";
 import { promises } from "node:fs";
@@ -15358,33 +15358,95 @@ function remainingSummaryCandidates(kept, taken, rank) {
 /**
 * The media a tile is drawn from, best first.
 *
-* First-level group crop only (`groupCrop`), then the group's native-frame
-* pointer, then a member's clean full frame. Member `thumbnail` / plate /
-* face crops stay off this ladder: a successful plate read overwrites the
-* vehicle first-level crop under the same `thumbnail` kind, and a digest
-* tile of a targa is the wrong picture. Boxed frames stay absent: a drawn
-* rectangle is a permanent lie in a digest tile. Duplicate driveways from
-* tracker ID churn are collapsed by `frameDedupeKey`, not by hiding the
-* full-frame fallback.
+* A digest tile is a SUBJECT, so the crops come first: the group's first-level
+* crop (`groupCrop`), the group's native-frame pointer, then the TRACK's own
+* subject crop (`thumbnail`, then its `thumbnailSmall` downscale), and only
+* then the clean whole scene (`keyFrame` → `keyFrameSmall` → `fullFrame`).
+*
+* ⚠ The whole-scene rungs are a FALLBACK and stay on the ladder. Measured on
+* 60 real tracks (615/617, 24 h): 52 carry a crop, 43 carry a scene rung, and
+* 2 carry a scene rung and NO crop — dropping the fallback would delete those
+* two tiles for nothing. A track with neither is dropped, never drawn as an
+* empty cell (see `NcSummaryProducer.loadTiles`).
+*
+* ## Why `thumbnail` is back (2026-08-27)
+*
+* It was removed on 2026-08-24 (160200681) because a successful plate read
+* overwrites the vehicle first-level crop under the same `thumbnail` kind.
+* **That collision belongs to the GROUP entity**: the sealer is what writes
+* `ownerKind: 'group', kind: 'thumbnail'` (`group/group-sealer.ts`), and the
+* group process is OFF (`GROUPS_PROCESS_ENABLED`, `group/group-enabled.ts`).
+* On a TRACK, plates live under `ownerKind: 'plate'` / `kind: 'plateCrop'` and
+* never touch `thumbnail`. The same commit turned the group process off, so
+* `groupCrop` and `nativeFrame` became unreachable and every digest tile fell
+* through to `keyFrame` — a whole frame — for three days.
+* `scripts/check-summary-ladder-reachable.ts` is the guard that refuses that
+* shape now.
+*
+* Boxed frames stay absent: a drawn rectangle is a permanent lie in a digest
+* tile. Plate and face crops stay absent: a digest tile of a targa is the
+* wrong picture. Duplicate driveways from tracker ID churn are collapsed by
+* `frameDedupeKey`, not by hiding the whole-scene fallback.
 */
 var SUMMARY_MEDIA_LADDER = [
 	"groupCrop",
 	"nativeFrame",
+	"thumbnail",
+	"thumbnailSmall",
 	"keyFrame",
 	"keyFrameSmall",
 	"fullFrame"
 ];
 /**
+* The floor below which a `thumbnail` row is NOT a subject crop.
+*
+* `copyFaceCropIfTrackHasNoThumbnail` (`pipeline-analytics/copy-face-crop-preview.ts`)
+* copies the persisted face crop onto a track that has no preview of its own,
+* and it stores it under `kind: 'thumbnail'` — so an ArcFace **112×112**
+* alignment template lands on the ladder wearing the same kind as a real
+* subject crop. Measured: 3 of 52 track thumbnails (5.8%) are 3–10 KB
+* templates. Delivering one is a face in a digest of passages.
+*
+* 20 KiB is chosen as the smallest number that is unambiguous in BOTH
+* directions: it is 2× the largest template observed (10 KB) and above the
+* theoretical ceiling of a 112×112 JPEG at any quality, while a native-
+* resolution subject crop measures in the hundreds of KB. The second reason
+* the number is safe: a genuine crop small enough to fall under it is a
+* subject a few dozen pixels across, which is a smear in a mosaic cell — the
+* whole-scene rung below is the better picture either way.
+*
+* The check costs NOTHING: `MediaFileInfo.sizeBytes` is already on the index
+* row, so no blob is fetched and nothing is decoded to apply it.
+*/
+var SUMMARY_THUMBNAIL_MIN_BYTES = 20480;
+/** The rungs {@link SUMMARY_THUMBNAIL_MIN_BYTES} is applied to. */
+var SUMMARY_SIZE_GATED_RUNGS = new Set(["thumbnail"]);
+/**
+* Is this row a picture, or a template wearing a picture's kind?
+*
+* Only a size the index REPORTED can demote a row. A `null` size is unknown,
+* and demoting on unknown would silently delete every group-owned pointer.
+*/
+function rowClearsSizeFloor(row, rung) {
+	if (!SUMMARY_SIZE_GATED_RUNGS.has(rung)) return true;
+	if (typeof row.sizeBytes !== "number") return true;
+	return row.sizeBytes >= SUMMARY_THUMBNAIL_MIN_BYTES;
+}
+/**
 * Pick ONE media row for a track — the cheap question first (index rows only),
 * so exactly one blob is ever read.
 *
 * Within a rung the row CLOSEST to the track's peak is chosen; a member may
 * carry more than one full-frame still, so "the first one" would systematically
 * pick the moment the subject entered rather than the moment it was best seen.
+*
+* A `thumbnail` under {@link SUMMARY_THUMBNAIL_MIN_BYTES} DESCENDS to the next
+* rung rather than being drawn — see that constant for the face template it
+* exists to catch.
 */
 function pickSummaryMedia(rows, aroundMs) {
 	for (const rung of SUMMARY_MEDIA_LADDER) {
-		const matches = rows.filter((row) => row.kind === rung);
+		const matches = rows.filter((row) => row.kind === rung && rowClearsSizeFloor(row, rung));
 		if (matches.length === 0) continue;
 		return matches.reduce((best, row) => Math.abs(row.timestamp - aroundMs) < Math.abs(best.timestamp - aroundMs) ? row : best);
 	}
@@ -15696,12 +15758,13 @@ var NcSummaryProducer = class {
 					droppedStationary: filtered.droppedStationary
 				};
 			}
-			const loaded = await this.loadTiles({
+			const tileLoad = await this.loadTiles({
 				rule,
 				preferred: selection.tiles,
 				refill: remainingSummaryCandidates(filtered.kept, selection.tiles, rule.rank),
 				maxTiles: rule.maxTiles
 			});
+			const loaded = tileLoad.tiles;
 			const detections = countDetections({ tracks: selection.tiles.map((t) => ({
 				firstSeen: t.firstSeen,
 				lastSeen: t.lastSeen,
@@ -15759,7 +15822,8 @@ var NcSummaryProducer = class {
 				tiles: loaded.length,
 				cameras: new Set(loaded.map((t) => t.candidate.deviceId)).size,
 				camerasDropped: selection.camerasDropped,
-				droppedNoMedia: Math.max(0, rule.maxTiles - loaded.length),
+				droppedNoMedia: tileLoad.droppedNoMedia,
+				droppedDuplicateFrame: tileLoad.droppedDuplicateFrame,
 				mosaicBytes: mosaic.bytes,
 				mosaicPublished: mosaic.ref !== null,
 				enqueued,
@@ -15825,14 +15889,20 @@ var NcSummaryProducer = class {
 	}
 	/** One blob per tile — the cheap question (index rows) always first.
 	*  Duplicate camera-seconds are skipped so tracker ID churn cannot paint
-	*  the same driveway eleven times; leftover ranked candidates refill. */
+	*  the same driveway eleven times; leftover ranked candidates refill.
+	*
+	*  It COUNTS what it drops, per reason, because only this loop knows: the
+	*  caller sees tiles and has no way to tell a track that had no picture from
+	*  a rule whose quota was simply larger than the night. */
 	async loadTiles(input) {
-		const out = [];
+		const tiles = [];
 		const seenFrames = /* @__PURE__ */ new Set();
 		const seenIds = /* @__PURE__ */ new Set();
+		let droppedNoMedia = 0;
+		let droppedDuplicateFrame = 0;
 		const queue = [...input.preferred, ...input.refill];
 		for (const candidate of queue) {
-			if (out.length >= input.maxTiles) break;
+			if (tiles.length >= input.maxTiles) break;
 			if (seenIds.has(candidate.trackId)) continue;
 			seenIds.add(candidate.trackId);
 			const tags = { deviceId: candidate.deviceId };
@@ -15840,19 +15910,22 @@ var NcSummaryProducer = class {
 				const rows = await this.deps.listMediaInfo(candidate.trackId);
 				const picked = pickSummaryMedia(rows, (candidate.firstSeen + candidate.lastSeen) / 2);
 				if (picked === null) {
-					this.deps.logger.debug("summary tile dropped: the track carries no clean media", {
+					droppedNoMedia += 1;
+					this.deps.logger.info("summary tile dropped: the track carries no clean media", {
 						tags,
 						meta: {
 							ruleId: input.rule.id,
 							trackId: candidate.trackId,
-							mediaRows: rows.length
+							mediaRows: rows.length,
+							mediaKinds: [...new Set(rows.map((row) => row.kind))].sort()
 						}
 					});
 					continue;
 				}
 				const frameKey = frameDedupeKey(candidate.deviceId, picked.timestamp);
 				if (seenFrames.has(frameKey)) {
-					this.deps.logger.debug("summary tile dropped: same frame as an earlier tile", {
+					droppedDuplicateFrame += 1;
+					this.deps.logger.info("summary tile dropped: same frame as an earlier tile", {
 						tags,
 						meta: {
 							ruleId: input.rule.id,
@@ -15864,22 +15937,25 @@ var NcSummaryProducer = class {
 				}
 				const jpeg = await this.deps.readMedia(picked.key);
 				if (jpeg === null || jpeg.byteLength === 0) {
-					this.deps.logger.debug("summary tile dropped: the media blob could not be read", {
+					droppedNoMedia += 1;
+					this.deps.logger.info("summary tile dropped: the media blob could not be read", {
 						tags,
 						meta: {
 							ruleId: input.rule.id,
 							trackId: candidate.trackId,
-							mediaKey: picked.key
+							mediaKey: picked.key,
+							mediaKind: picked.kind
 						}
 					});
 					continue;
 				}
 				seenFrames.add(frameKey);
-				out.push({
+				tiles.push({
 					candidate,
 					jpeg
 				});
 			} catch (err) {
+				droppedNoMedia += 1;
 				this.deps.logger.warn("summary tile dropped: reading its media threw", {
 					tags,
 					meta: {
@@ -15890,7 +15966,11 @@ var NcSummaryProducer = class {
 				});
 			}
 		}
-		return out;
+		return {
+			tiles,
+			droppedNoMedia,
+			droppedDuplicateFrame
+		};
 	}
 	/**
 	* Render the mosaic, file it where event media lives, and mint the public
@@ -41237,12 +41317,14 @@ function digestMediaRows(input) {
 	if (input.mediaKey !== null && input.mediaKey.length > 0) owned.push({
 		key: input.mediaKey,
 		kind: "groupCrop",
-		timestamp: input.timestamp
+		timestamp: input.timestamp,
+		sizeBytes: null
 	});
 	if (input.nativeKey !== null && input.nativeKey.length > 0) owned.push({
 		key: input.nativeKey,
 		kind: "nativeFrame",
-		timestamp: input.timestamp
+		timestamp: input.timestamp,
+		sizeBytes: null
 	});
 	if (owned.length > 0) return owned;
 	return input.memberRows.filter((row) => DIGEST_MEMBER_FALLBACK_KINDS.has(row.kind));
@@ -60505,7 +60587,8 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 					const memberRows = (await Promise.all(members.map((m) => stores.mediaStore.listInfoByOwner("track", m.trackId)))).flatMap((rows) => rows.map((r) => ({
 						key: r.key,
 						kind: r.kind,
-						timestamp: r.timestamp
+						timestamp: r.timestamp,
+						sizeBytes: r.sizeBytes
 					})));
 					return digestMediaRows({
 						mediaKey: group.mediaKey,
@@ -60517,7 +60600,8 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 				return (await stores.mediaStore.listInfoByOwner("track", id)).map((r) => ({
 					key: r.key,
 					kind: r.kind,
-					timestamp: r.timestamp
+					timestamp: r.timestamp,
+					sizeBytes: r.sizeBytes
 				}));
 			},
 			readMedia: async (key) => {

package/dist/pipeline-analytics/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-CaoDYCwF.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-_ZUR9O1b.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-post-analysis",
-  "version": "1.2.131",
+  "version": "1.2.132",
   "description": "Post-Analysis bundle — enrichment, embedding-encoder, pipeline-analytics. Multi-entry npm package shipping addons that consume pipeline output.",
   "keywords": [
     "camstack",