@camstack/addon-post-analysis 1.2.208 → 1.2.209

package/dist/pipeline-analytics/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-CoLA3NHh.js");
+const require_dist = require("../dist-BttKNVmP.js");
 let node_fs = require("node:fs");
 node_fs = require_dist.__toESM(node_fs, 1);
 let node_path = require("node:path");
@@ -7520,7 +7520,8 @@ function cooldownKey(rule, subject) {
 	const classKey = keysPerClass(rule, subject) && first !== void 0 ? `:c:${first}` : "";
 	const scopeRef = subject.systemEvent !== void 0 ? systemEventCooldownScope(subject.systemEvent) : `d:${subject.deviceId}`;
 	const kindKey = subject.systemEvent !== void 0 ? `:k:${subject.systemEvent.kind}` : "";
-	return rule.throttle.scope === "rule" ? `r:${rule.id}${kindKey}${classKey}` : `r:${rule.id}:${scopeRef}${classKey}`;
+	const phaseKey = subject.packagePhase !== void 0 ? `:p:${subject.packagePhase}` : "";
+	return rule.throttle.scope === "rule" ? `r:${rule.id}${kindKey}${phaseKey}${classKey}` : `r:${rule.id}:${scopeRef}${phaseKey}${classKey}`;
 }
 /** True when the rule fired within its cooldown window before `now`. */
 function isCoolingDown(rule, lastFiredAt, now) {
@@ -9957,6 +9958,10 @@ var en_default = {
 		"one": "{{count}} other {{classNoun}}",
 		"other": "{{count}} other {{classNoun}}"
 	},
+	"package.delivered.title": "Parcel delivered",
+	"package.delivered.body": "Delivered at {{camera}}{{inZones}}",
+	"package.picked-up.title": "Parcel collected",
+	"package.picked-up.body": "Collected from {{camera}}{{inZones}}",
 	"occupancy.body": "{{scope}} {{op}} ({{count}}/{{capacity}})",
 	"occupancy.op.occupied": "occupied",
 	"occupancy.op.free": "free",
@@ -10208,6 +10213,10 @@ var it_default = {
 		"one": "{{count}} altro {{classNoun}}",
 		"other": "{{count}} altri {{classNoun}}"
 	},
+	"package.delivered.title": "Pacco consegnato",
+	"package.delivered.body": "Consegnato su {{camera}}{{inZones}}",
+	"package.picked-up.title": "Pacco ritirato",
+	"package.picked-up.body": "Ritirato da {{camera}}{{inZones}}",
 	"occupancy.body": "{{scope}} {{op}} ({{count}}/{{capacity}})",
 	"occupancy.op.occupied": "occupata",
 	"occupancy.op.free": "libera",
@@ -12050,6 +12059,7 @@ function bodyKeyFor(entry) {
 	const subject = entry.payload.subject;
 	if (subject.systemEvent !== void 0) return subject.systemEvent.bodyKey ?? "";
 	if (subject.occupancy !== void 0) return "occupancy.body";
+	if (subject.packagePhase !== void 0) return `package.${subject.packagePhase}.body`;
 	if (entry.payload.enhancement === true) return "detection.body.enhanced";
 	return entry.recordKind === "track-end" ? "detection.body.trackEnd" : "detection.body";
 }
@@ -12057,6 +12067,8 @@ function bodyKeyFor(entry) {
 function titleKeyFor(entry) {
 	const systemEvent = entry.payload.subject.systemEvent;
 	if (systemEvent !== void 0) return systemEvent.titleKey ?? "";
+	const packagePhase = entry.payload.subject.packagePhase;
+	if (packagePhase !== void 0) return `package.${packagePhase}.title`;
 	return "detection.title";
 }
 /**
@@ -24856,6 +24868,7 @@ var NotificationCenter = class NotificationCenter {
 					zones: renderedZones,
 					timestamp: subject.timestamp,
 					...subject.occupancy !== void 0 ? { occupancy: frozenOccupancy(rule, subject.occupancy) } : {},
+					...subject.packagePhase !== void 0 ? { packagePhase: subject.packagePhase } : {},
 					...subject.systemEvent !== void 0 ? { systemEvent: subject.systemEvent } : {}
 				}
 			};
@@ -32769,9 +32782,14 @@ var FaceStore = class {
 *    with that person named. High means "this looks like someone we can name",
 *    which is what a mis-enrolment actually looks like.
 *
-* `suspicion` combines them so a sample that looks like somebody else outranks
-* one that merely looks like nobody: the first is a fixable error, the second
-* is often just a difficult photograph.
+* `suspicion` is the EXCESS — `bestForeign − selfMean` — because that is the
+* only one of the two that discriminates on real data. Measured on Roberta's
+* 106 samples, 2026-09-08: `selfMean` has a median of 0.188 and a p90 of 0.235,
+* so ANY absolute reading of "does not look like itself" fires on the whole
+* gallery. The first version of this module scored `(1 − selfMean) / 2` and
+* flagged 56 of 106 — a finding that fires on healthy samples means nothing.
+* `bestForeign` on the same gallery: median 0.283, p95 0.376, and one single
+* outlier at 0.612, which is the mis-enrolment.
 *
 * ## What it refuses to do
 *
@@ -32786,8 +32804,20 @@ var FaceStore = class {
 *
 * Pure — the caller loads the vectors and performs the removal.
 */
-/** Above this a row is worth the operator's attention. */
-var SUSPICION_FLAG = .5;
+/**
+* A row is FLAGGED when its best foreign match would auto-assign the face to
+* that other person — i.e. it reaches the recogniser's own
+* `similarityThreshold`.
+*
+* Tied to the live threshold rather than to a constant of its own, because
+* that is what the flag MEANS: this sample can steal a match. A second number
+* invented here would drift from the one the recogniser actually uses, and the
+* panel would accuse samples that cannot hurt anyone while staying quiet about
+* ones that can. On the live gallery (threshold 0.40) it flags 2 of 106.
+*/
+function flaggedCount(rows, autoAssignThreshold) {
+	return rows.filter((row) => (row.bestForeign?.score ?? 0) >= autoAssignThreshold).length;
+}
 /**
 * How far a foreign match has to stand OUT to count as looking like someone
 * else: `bestForeign - selfMean`. A sample that scores 0.6 against a stranger
@@ -32842,8 +32872,7 @@ function auditIdentitySamples(input) {
 		};
 		const selfMean = meanCosine(sample, comparable);
 		const foreign = bestForeignMatch(sample, input.others, input.modelId);
-		const excess = foreignExcess(selfMean, foreign);
-		const suspicion = selfMean === null ? 0 : (1 - selfMean) / 2 + excess;
+		const suspicion = foreignExcess(selfMean, foreign);
 		return {
 			sampleId: sample.sampleId,
 			enrolledAt: sample.enrolledAt,
@@ -32854,12 +32883,15 @@ function auditIdentitySamples(input) {
 			suspicion
 		};
 	});
-	rows.sort((a, b) => b.suspicion - a.suspicion);
+	rows.sort((a, b) => {
+		if (b.suspicion !== a.suspicion) return b.suspicion - a.suspicion;
+		return (a.selfMean ?? Number.POSITIVE_INFINITY) - (b.selfMean ?? Number.POSITIVE_INFINITY);
+	});
 	return {
 		identityId: input.identityId,
 		totalSamples: input.samples.length,
 		comparableSamples: comparable.length,
-		flagged: rows.filter((r) => r.suspicion >= SUSPICION_FLAG).length,
+		flagged: flaggedCount(rows, input.autoAssignThreshold),
 		rows
 	};
 }
@@ -32916,6 +32948,7 @@ var FaceGalleryProvider = class {
 	logger;
 	refreshGallery;
 	resolveClusterModelId;
+	resolveAutoAssignThreshold;
 	eventMediaBaseUrl;
 	eventMediaPathPrefix;
 	emitFaceGalleryChanged;
@@ -32928,6 +32961,7 @@ var FaceGalleryProvider = class {
 		this.logger = deps.logger;
 		this.refreshGallery = deps.refreshGallery;
 		this.resolveClusterModelId = deps.resolveClusterModelId;
+		this.resolveAutoAssignThreshold = deps.resolveAutoAssignThreshold;
 		this.eventMediaBaseUrl = deps.eventMediaBaseUrl;
 		this.eventMediaPathPrefix = deps.eventMediaPathPrefix;
 		this.emitFaceGalleryChanged = deps.emitFaceGalleryChanged;
@@ -33019,6 +33053,7 @@ var FaceGalleryProvider = class {
 	async auditIdentitySamples(input) {
 		const modelId = await this.resolveClusterModelId();
 		if (modelId === null) throw new Error("auditIdentitySamples: the cluster face-embedding model could not be resolved");
+		const autoAssignThreshold = await this.resolveAutoAssignThreshold();
 		const identities = await this.identityStore.listIdentities();
 		const target = identities.find((i) => i.id === input.identityId);
 		if (target === void 0) throw new Error(`auditIdentitySamples: no identity ${input.identityId}`);
@@ -33044,7 +33079,8 @@ var FaceGalleryProvider = class {
 				name: identity.name,
 				samples: inputsFor(identity.id)
 			})),
-			modelId
+			modelId,
+			autoAssignThreshold
 		});
 		const meta = new Map((samplesByIdentity.get(input.identityId) ?? []).map((sample) => [sample.id, sample]));
 		return {
@@ -33054,7 +33090,7 @@ var FaceGalleryProvider = class {
 			totalSamples: report.totalSamples,
 			comparableSamples: report.comparableSamples,
 			flagged: report.flagged,
-			flagThreshold: SUSPICION_FLAG,
+			flagThreshold: autoAssignThreshold,
 			rows: report.rows.map((row) => {
 				const sample = meta.get(row.sampleId);
 				return {
@@ -57932,6 +57968,9 @@ async function reconcileGallerySamples(deps, options) {
 	let keyless = 0;
 	let skippedGrace = 0;
 	let stoppedByCeiling = false;
+	let missed = 0;
+	/** Verdicts held until there are enough of them to tell rot from a move. */
+	const held = [];
 	const identities = await deps.listIdentities();
 	for (const identity of identities) {
 		const samples = await deps.listSamples(identity.id);
@@ -57976,6 +58015,43 @@ async function reconcileGallerySamples(deps, options) {
 			}
 			checked += 1;
 			if (state === "exists") continue;
+			missed += 1;
+			const minProbes = options.massMissMinProbes ?? 8;
+			const bar = options.massMissFraction ?? .5;
+			if (checked < minProbes) {
+				held.push({
+					identityId: identity.id,
+					sampleId: sample.id,
+					mediaKey: sample.mediaKey
+				});
+				continue;
+			}
+			if (missed / checked >= bar) {
+				const reason = `mass miss: ${String(missed)} of ${String(checked)} probes found no blob`;
+				deps.logger.warn("gallery reconcile: nearly every blob is missing — that is the volume, not the samples. Aborting and keeping every row; check where the gallery location points.", { meta: {
+					checked,
+					missed,
+					held: held.length,
+					identity: identity.name
+				} });
+				return {
+					checked,
+					reclaimed,
+					keyless,
+					skippedGrace,
+					stoppedByCeiling,
+					aborted: reason
+				};
+			}
+			for (const pending of held.splice(0, held.length)) {
+				await deps.removeSample(pending.identityId, pending.sampleId);
+				reclaimed += 1;
+				deps.logger.warn("gallery reconcile: sample blob is gone from the filesystem — reference removed", { meta: {
+					sampleId: pending.sampleId,
+					mediaKey: pending.mediaKey,
+					state: "missing-blob"
+				} });
+			}
 			await deps.removeSample(identity.id, sample.id);
 			reclaimed += 1;
 			deps.logger.warn("gallery reconcile: sample blob is gone from the filesystem — reference removed", { meta: {
@@ -57986,6 +58062,14 @@ async function reconcileGallerySamples(deps, options) {
 			} });
 		}
 	}
+	for (const pending of held.splice(0, held.length)) {
+		if (reclaimed >= options.maxReclaimPerRun) {
+			stoppedByCeiling = true;
+			break;
+		}
+		await deps.removeSample(pending.identityId, pending.sampleId);
+		reclaimed += 1;
+	}
 	if (reclaimed > 0) deps.logger.info("gallery reconcile: dead references removed", { meta: {
 		checked,
 		reclaimed,
@@ -71964,6 +72048,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_dist.B
 			eventStore: stores.eventStore,
 			logger: this.ctx.logger,
 			refreshGallery: () => this.faceRecognizer?.refreshGallery(),
+			resolveAutoAssignThreshold: async () => (await this.readDeviceSettings(0, resolveFaceSettings)).similarityThreshold,
 			resolveClusterModelId: async () => {
 				const api = this.ctx.api;
 				if (!api) return null;

package/dist/pipeline-analytics/index.mjs

@@ -1,4 +1,4 @@
-import { $ as audioModeOf, $t as EventCategory, A as NcSnoozeSchema, At as vectorDimFromBase64, B as SCENE_DEFAULT_UNCOVERED_POLICY, Bt as nodePin, C as NcConditionDescriptorSchema, Ct as readTimelapseGeneratedAt, D as NcRuleTargetSchema, Dt as storageOccupancyCapability, E as NcRuleSchema, Et as sceneMonitorCapability, Ft as CamProfileSchema, G as TimelapseRulePatchSchema, Gt as discriminatedUnion, H as SceneMonitorSchema, Ht as _enum, I as RECORDING_EXPORT_MAX_READ_BYTES, It as DeviceType, J as VISIT_MERGE_GAP_MS, Jt as object, K as TimelapseRuleSchema, Kt as literal, L as RetrainStatusSchema, Lt as createEvent, M as NcSystemEventKindSchema, Mt as zoneAnalyticsCapability, N as NcTaxonomySchema, Nt as errMsg$1, O as NcScheduleSchema, Ot as subKindsOf, P as OpsLogEntrySchema, Pt as BaseAddon, Q as audioMetricsCapability, Qt as unknown, Rt as hydrateSchema, S as NC_TAXONOMY, St as readDeviceStateFrom, T as NcRulePatchSchema, U as TIMELAPSE_DENSE_FLOOR_SEC, Ut as array, V as SCENE_DIVERGED, Vt as sleep$1, W as TimelapseRuleInputSchema, Wt as boolean, X as alarmPanelCapability, Xt as record, Y as addonWidgetsSourceCapability, Yt as partialRecord, Z as assertTimelapseCadences, Zt as string, _ as MediaFileKindEnum, _t as notificationRulesCapability, a as DEFAULT_EVENT_COLOR, b as NC_DEFAULT_SNOOZE_MINUTES, bt as pipelineAnalyticsCapability, c as DETECTION_MACRO_CLASSES, ct as evictionPolicyOfLocation, d as EVENT_KIND_BY_CAP, et as buildEventKindDescriptor, f as EVENT_PAD_MS, ft as isDetectionMacroClass, g as MACRO_LABELS, gt as mayWriteToLocation, h as LabelAttributionSchema, ht as kebabToCamel, i as COCO_TO_MACRO, it as deriveRecordingMode, j as NcSnoozeSuppressedSchema, jt as videoclipsCapability, k as NcSnoozeInputSchema, kt as systemEventFilterApplies, lt as faceGalleryCapability, m as FailureCounters, mt as isSourceCap, n as BaseDevice, nt as customAction, ot as encodeVectorBase64, p as FULL_IMAGE_BBOX, pt as isScheduleActive, q as TrackSourceSchema, qt as number, r as CLUSTER_MODEL_SCOPED_STEPS, rt as defineCustomActions, st as evaluateSensorEdge, t as AUDIO_MACRO_LABELS, tt as cosineSimilarity$1, u as DeclaredDevices, ut as failureContributionCapability, v as NC_ALARM_SYSTEM_EVENT_KINDS, w as NcRuleInputSchema, wt as resolveLocationMode, xt as plateGalleryCapability, y as NC_CONDITION_CATALOG, yt as pickClusterStepModels, z as SCENE_DEFAULT_ANCHOR_THRESHOLD, zt as isDeviceScopedCap } from "../dist-WxrHfFRz.mjs";
+import { $ as audioModeOf, $t as EventCategory, A as NcSnoozeSchema, At as vectorDimFromBase64, B as SCENE_DEFAULT_UNCOVERED_POLICY, Bt as nodePin, C as NcConditionDescriptorSchema, Ct as readTimelapseGeneratedAt, D as NcRuleTargetSchema, Dt as storageOccupancyCapability, E as NcRuleSchema, Et as sceneMonitorCapability, Ft as CamProfileSchema, G as TimelapseRulePatchSchema, Gt as discriminatedUnion, H as SceneMonitorSchema, Ht as _enum, I as RECORDING_EXPORT_MAX_READ_BYTES, It as DeviceType, J as VISIT_MERGE_GAP_MS, Jt as object, K as TimelapseRuleSchema, Kt as literal, L as RetrainStatusSchema, Lt as createEvent, M as NcSystemEventKindSchema, Mt as zoneAnalyticsCapability, N as NcTaxonomySchema, Nt as errMsg$1, O as NcScheduleSchema, Ot as subKindsOf, P as OpsLogEntrySchema, Pt as BaseAddon, Q as audioMetricsCapability, Qt as unknown, Rt as hydrateSchema, S as NC_TAXONOMY, St as readDeviceStateFrom, T as NcRulePatchSchema, U as TIMELAPSE_DENSE_FLOOR_SEC, Ut as array, V as SCENE_DIVERGED, Vt as sleep$1, W as TimelapseRuleInputSchema, Wt as boolean, X as alarmPanelCapability, Xt as record, Y as addonWidgetsSourceCapability, Yt as partialRecord, Z as assertTimelapseCadences, Zt as string, _ as MediaFileKindEnum, _t as notificationRulesCapability, a as DEFAULT_EVENT_COLOR, b as NC_DEFAULT_SNOOZE_MINUTES, bt as pipelineAnalyticsCapability, c as DETECTION_MACRO_CLASSES, ct as evictionPolicyOfLocation, d as EVENT_KIND_BY_CAP, et as buildEventKindDescriptor, f as EVENT_PAD_MS, ft as isDetectionMacroClass, g as MACRO_LABELS, gt as mayWriteToLocation, h as LabelAttributionSchema, ht as kebabToCamel, i as COCO_TO_MACRO, it as deriveRecordingMode, j as NcSnoozeSuppressedSchema, jt as videoclipsCapability, k as NcSnoozeInputSchema, kt as systemEventFilterApplies, lt as faceGalleryCapability, m as FailureCounters, mt as isSourceCap, n as BaseDevice, nt as customAction, ot as encodeVectorBase64, p as FULL_IMAGE_BBOX, pt as isScheduleActive, q as TrackSourceSchema, qt as number, r as CLUSTER_MODEL_SCOPED_STEPS, rt as defineCustomActions, st as evaluateSensorEdge, t as AUDIO_MACRO_LABELS, tt as cosineSimilarity$1, u as DeclaredDevices, ut as failureContributionCapability, v as NC_ALARM_SYSTEM_EVENT_KINDS, w as NcRuleInputSchema, wt as resolveLocationMode, xt as plateGalleryCapability, y as NC_CONDITION_CATALOG, yt as pickClusterStepModels, z as SCENE_DEFAULT_ANCHOR_THRESHOLD, zt as isDeviceScopedCap } from "../dist-BV15Z8DR.mjs";
 import { t as __exportAll } from "../embedding-encoder/index.mjs";
 import * as fs from "node:fs";
 import { promises } from "node:fs";
@@ -7513,7 +7513,8 @@ function cooldownKey(rule, subject) {
 	const classKey = keysPerClass(rule, subject) && first !== void 0 ? `:c:${first}` : "";
 	const scopeRef = subject.systemEvent !== void 0 ? systemEventCooldownScope(subject.systemEvent) : `d:${subject.deviceId}`;
 	const kindKey = subject.systemEvent !== void 0 ? `:k:${subject.systemEvent.kind}` : "";
-	return rule.throttle.scope === "rule" ? `r:${rule.id}${kindKey}${classKey}` : `r:${rule.id}:${scopeRef}${classKey}`;
+	const phaseKey = subject.packagePhase !== void 0 ? `:p:${subject.packagePhase}` : "";
+	return rule.throttle.scope === "rule" ? `r:${rule.id}${kindKey}${phaseKey}${classKey}` : `r:${rule.id}:${scopeRef}${phaseKey}${classKey}`;
 }
 /** True when the rule fired within its cooldown window before `now`. */
 function isCoolingDown(rule, lastFiredAt, now) {
@@ -9950,6 +9951,10 @@ var en_default = {
 		"one": "{{count}} other {{classNoun}}",
 		"other": "{{count}} other {{classNoun}}"
 	},
+	"package.delivered.title": "Parcel delivered",
+	"package.delivered.body": "Delivered at {{camera}}{{inZones}}",
+	"package.picked-up.title": "Parcel collected",
+	"package.picked-up.body": "Collected from {{camera}}{{inZones}}",
 	"occupancy.body": "{{scope}} {{op}} ({{count}}/{{capacity}})",
 	"occupancy.op.occupied": "occupied",
 	"occupancy.op.free": "free",
@@ -10201,6 +10206,10 @@ var it_default = {
 		"one": "{{count}} altro {{classNoun}}",
 		"other": "{{count}} altri {{classNoun}}"
 	},
+	"package.delivered.title": "Pacco consegnato",
+	"package.delivered.body": "Consegnato su {{camera}}{{inZones}}",
+	"package.picked-up.title": "Pacco ritirato",
+	"package.picked-up.body": "Ritirato da {{camera}}{{inZones}}",
 	"occupancy.body": "{{scope}} {{op}} ({{count}}/{{capacity}})",
 	"occupancy.op.occupied": "occupata",
 	"occupancy.op.free": "libera",
@@ -12043,6 +12052,7 @@ function bodyKeyFor(entry) {
 	const subject = entry.payload.subject;
 	if (subject.systemEvent !== void 0) return subject.systemEvent.bodyKey ?? "";
 	if (subject.occupancy !== void 0) return "occupancy.body";
+	if (subject.packagePhase !== void 0) return `package.${subject.packagePhase}.body`;
 	if (entry.payload.enhancement === true) return "detection.body.enhanced";
 	return entry.recordKind === "track-end" ? "detection.body.trackEnd" : "detection.body";
 }
@@ -12050,6 +12060,8 @@ function bodyKeyFor(entry) {
 function titleKeyFor(entry) {
 	const systemEvent = entry.payload.subject.systemEvent;
 	if (systemEvent !== void 0) return systemEvent.titleKey ?? "";
+	const packagePhase = entry.payload.subject.packagePhase;
+	if (packagePhase !== void 0) return `package.${packagePhase}.title`;
 	return "detection.title";
 }
 /**
@@ -24834,6 +24846,7 @@ var NotificationCenter = class NotificationCenter {
 					zones: renderedZones,
 					timestamp: subject.timestamp,
 					...subject.occupancy !== void 0 ? { occupancy: frozenOccupancy(rule, subject.occupancy) } : {},
+					...subject.packagePhase !== void 0 ? { packagePhase: subject.packagePhase } : {},
 					...subject.systemEvent !== void 0 ? { systemEvent: subject.systemEvent } : {}
 				}
 			};
@@ -32746,9 +32759,14 @@ var FaceStore = class {
 *    with that person named. High means "this looks like someone we can name",
 *    which is what a mis-enrolment actually looks like.
 *
-* `suspicion` combines them so a sample that looks like somebody else outranks
-* one that merely looks like nobody: the first is a fixable error, the second
-* is often just a difficult photograph.
+* `suspicion` is the EXCESS — `bestForeign − selfMean` — because that is the
+* only one of the two that discriminates on real data. Measured on Roberta's
+* 106 samples, 2026-09-08: `selfMean` has a median of 0.188 and a p90 of 0.235,
+* so ANY absolute reading of "does not look like itself" fires on the whole
+* gallery. The first version of this module scored `(1 − selfMean) / 2` and
+* flagged 56 of 106 — a finding that fires on healthy samples means nothing.
+* `bestForeign` on the same gallery: median 0.283, p95 0.376, and one single
+* outlier at 0.612, which is the mis-enrolment.
 *
 * ## What it refuses to do
 *
@@ -32763,8 +32781,20 @@ var FaceStore = class {
 *
 * Pure — the caller loads the vectors and performs the removal.
 */
-/** Above this a row is worth the operator's attention. */
-var SUSPICION_FLAG = .5;
+/**
+* A row is FLAGGED when its best foreign match would auto-assign the face to
+* that other person — i.e. it reaches the recogniser's own
+* `similarityThreshold`.
+*
+* Tied to the live threshold rather than to a constant of its own, because
+* that is what the flag MEANS: this sample can steal a match. A second number
+* invented here would drift from the one the recogniser actually uses, and the
+* panel would accuse samples that cannot hurt anyone while staying quiet about
+* ones that can. On the live gallery (threshold 0.40) it flags 2 of 106.
+*/
+function flaggedCount(rows, autoAssignThreshold) {
+	return rows.filter((row) => (row.bestForeign?.score ?? 0) >= autoAssignThreshold).length;
+}
 /**
 * How far a foreign match has to stand OUT to count as looking like someone
 * else: `bestForeign - selfMean`. A sample that scores 0.6 against a stranger
@@ -32819,8 +32849,7 @@ function auditIdentitySamples(input) {
 		};
 		const selfMean = meanCosine(sample, comparable);
 		const foreign = bestForeignMatch(sample, input.others, input.modelId);
-		const excess = foreignExcess(selfMean, foreign);
-		const suspicion = selfMean === null ? 0 : (1 - selfMean) / 2 + excess;
+		const suspicion = foreignExcess(selfMean, foreign);
 		return {
 			sampleId: sample.sampleId,
 			enrolledAt: sample.enrolledAt,
@@ -32831,12 +32860,15 @@ function auditIdentitySamples(input) {
 			suspicion
 		};
 	});
-	rows.sort((a, b) => b.suspicion - a.suspicion);
+	rows.sort((a, b) => {
+		if (b.suspicion !== a.suspicion) return b.suspicion - a.suspicion;
+		return (a.selfMean ?? Number.POSITIVE_INFINITY) - (b.selfMean ?? Number.POSITIVE_INFINITY);
+	});
 	return {
 		identityId: input.identityId,
 		totalSamples: input.samples.length,
 		comparableSamples: comparable.length,
-		flagged: rows.filter((r) => r.suspicion >= SUSPICION_FLAG).length,
+		flagged: flaggedCount(rows, input.autoAssignThreshold),
 		rows
 	};
 }
@@ -32893,6 +32925,7 @@ var FaceGalleryProvider = class {
 	logger;
 	refreshGallery;
 	resolveClusterModelId;
+	resolveAutoAssignThreshold;
 	eventMediaBaseUrl;
 	eventMediaPathPrefix;
 	emitFaceGalleryChanged;
@@ -32905,6 +32938,7 @@ var FaceGalleryProvider = class {
 		this.logger = deps.logger;
 		this.refreshGallery = deps.refreshGallery;
 		this.resolveClusterModelId = deps.resolveClusterModelId;
+		this.resolveAutoAssignThreshold = deps.resolveAutoAssignThreshold;
 		this.eventMediaBaseUrl = deps.eventMediaBaseUrl;
 		this.eventMediaPathPrefix = deps.eventMediaPathPrefix;
 		this.emitFaceGalleryChanged = deps.emitFaceGalleryChanged;
@@ -32996,6 +33030,7 @@ var FaceGalleryProvider = class {
 	async auditIdentitySamples(input) {
 		const modelId = await this.resolveClusterModelId();
 		if (modelId === null) throw new Error("auditIdentitySamples: the cluster face-embedding model could not be resolved");
+		const autoAssignThreshold = await this.resolveAutoAssignThreshold();
 		const identities = await this.identityStore.listIdentities();
 		const target = identities.find((i) => i.id === input.identityId);
 		if (target === void 0) throw new Error(`auditIdentitySamples: no identity ${input.identityId}`);
@@ -33021,7 +33056,8 @@ var FaceGalleryProvider = class {
 				name: identity.name,
 				samples: inputsFor(identity.id)
 			})),
-			modelId
+			modelId,
+			autoAssignThreshold
 		});
 		const meta = new Map((samplesByIdentity.get(input.identityId) ?? []).map((sample) => [sample.id, sample]));
 		return {
@@ -33031,7 +33067,7 @@ var FaceGalleryProvider = class {
 			totalSamples: report.totalSamples,
 			comparableSamples: report.comparableSamples,
 			flagged: report.flagged,
-			flagThreshold: SUSPICION_FLAG,
+			flagThreshold: autoAssignThreshold,
 			rows: report.rows.map((row) => {
 				const sample = meta.get(row.sampleId);
 				return {
@@ -57858,6 +57894,9 @@ async function reconcileGallerySamples(deps, options) {
 	let keyless = 0;
 	let skippedGrace = 0;
 	let stoppedByCeiling = false;
+	let missed = 0;
+	/** Verdicts held until there are enough of them to tell rot from a move. */
+	const held = [];
 	const identities = await deps.listIdentities();
 	for (const identity of identities) {
 		const samples = await deps.listSamples(identity.id);
@@ -57902,6 +57941,43 @@ async function reconcileGallerySamples(deps, options) {
 			}
 			checked += 1;
 			if (state === "exists") continue;
+			missed += 1;
+			const minProbes = options.massMissMinProbes ?? 8;
+			const bar = options.massMissFraction ?? .5;
+			if (checked < minProbes) {
+				held.push({
+					identityId: identity.id,
+					sampleId: sample.id,
+					mediaKey: sample.mediaKey
+				});
+				continue;
+			}
+			if (missed / checked >= bar) {
+				const reason = `mass miss: ${String(missed)} of ${String(checked)} probes found no blob`;
+				deps.logger.warn("gallery reconcile: nearly every blob is missing — that is the volume, not the samples. Aborting and keeping every row; check where the gallery location points.", { meta: {
+					checked,
+					missed,
+					held: held.length,
+					identity: identity.name
+				} });
+				return {
+					checked,
+					reclaimed,
+					keyless,
+					skippedGrace,
+					stoppedByCeiling,
+					aborted: reason
+				};
+			}
+			for (const pending of held.splice(0, held.length)) {
+				await deps.removeSample(pending.identityId, pending.sampleId);
+				reclaimed += 1;
+				deps.logger.warn("gallery reconcile: sample blob is gone from the filesystem — reference removed", { meta: {
+					sampleId: pending.sampleId,
+					mediaKey: pending.mediaKey,
+					state: "missing-blob"
+				} });
+			}
 			await deps.removeSample(identity.id, sample.id);
 			reclaimed += 1;
 			deps.logger.warn("gallery reconcile: sample blob is gone from the filesystem — reference removed", { meta: {
@@ -57912,6 +57988,14 @@ async function reconcileGallerySamples(deps, options) {
 			} });
 		}
 	}
+	for (const pending of held.splice(0, held.length)) {
+		if (reclaimed >= options.maxReclaimPerRun) {
+			stoppedByCeiling = true;
+			break;
+		}
+		await deps.removeSample(pending.identityId, pending.sampleId);
+		reclaimed += 1;
+	}
 	if (reclaimed > 0) deps.logger.info("gallery reconcile: dead references removed", { meta: {
 		checked,
 		reclaimed,
@@ -71890,6 +71974,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 			eventStore: stores.eventStore,
 			logger: this.ctx.logger,
 			refreshGallery: () => this.faceRecognizer?.refreshGallery(),
+			resolveAutoAssignThreshold: async () => (await this.readDeviceSettings(0, resolveFaceSettings)).similarityThreshold,
 			resolveClusterModelId: async () => {
 				const api = this.ctx.api;
 				if (!api) return null;

package/dist/pipeline-analytics/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-CHmvWGlL.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-DCfZE21-.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-post-analysis",
-  "version": "1.2.208",
+  "version": "1.2.209",
   "description": "Post-Analysis bundle — enrichment, embedding-encoder, pipeline-analytics. Multi-entry npm package shipping addons that consume pipeline output.",
   "keywords": [
     "camstack",