@camstack/addon-post-analysis 1.2.214 → 1.2.217

package/dist/pipeline-analytics/index.mjs

@@ -1,4 +1,4 @@
-import { $ as VISIT_MERGE_GAP_MS, $t as object, A as NcRulePatchSchema, Bt as CamProfileSchema, C as NC_ALARM_SYSTEM_EVENT_KINDS, D as NC_TAXONOMY, Dt as readDeviceStateFrom, Et as plateGalleryCapability, F as NcSnoozeSchema, Ft as vectorDimFromBase64, G as SCENE_DEFAULT_UNCOVERED_POLICY, Gt as nodePin, H as RetrainStatusSchema, Ht as createEvent, I as NcSnoozeSuppressedSchema, It as videoclipsCapability, J as TIMELAPSE_DENSE_FLOOR_SEC, Jt as array, K as SCENE_DIVERGED, Kt as sleep$1, L as NcSystemEventKindSchema, Lt as zoneAnalyticsCapability, M as NcRuleTargetSchema, Mt as storageOccupancyCapability, N as NcScheduleSchema, Nt as subKindsOf, O as NcConditionDescriptorSchema, Ot as readTimelapseGeneratedAt, P as NcSnoozeInputSchema, Pt as systemEventFilterApplies, Q as TrackSourceSchema, Qt as number, R as NcTaxonomySchema, Rt as errMsg$1, S as MediaFileKindEnum, St as notificationRulesCapability, T as NC_DEFAULT_SNOOZE_MINUTES, Tt as pipelineAnalyticsCapability, Ut as hydrateSchema, V as RECORDING_EXPORT_MAX_READ_BYTES, Vt as DeviceType, W as SCENE_DEFAULT_ANCHOR_THRESHOLD, Wt as isDeviceScopedCap, X as TimelapseRulePatchSchema, Xt as discriminatedUnion, Y as TimelapseRuleInputSchema, Yt as boolean, Z as TimelapseRuleSchema, Zt as literal, _ as LabelAttributionSchema, _t as isDetectionMacroClass, a as CLUSTER_MODEL_SCOPED_STEPS, at as buildEventKindDescriptor, b as MAX_BIRTH_DECISION_RECORDS, bt as kebabToCamel, ct as defineCustomActions, dt as encodeVectorBase64, en as partialRecord, et as addonWidgetsSourceCapability, f as DeclaredDevices, ft as evaluateSensorEdge, g as FailureCounters, h as FULL_IMAGE_BBOX, ht as failureContributionCapability, i as BirthDecisionRecordSchema, in as EventCategory, it as audioModeOf, j as NcRuleSchema, jt as sceneMonitorCapability, k as NcRuleInputSchema, kt as resolveLocationMode, lt as deriveRecordingMode, m as EVENT_PAD_MS, mt as faceGalleryCapability, n as ArchivedDebugNoteSchema, nn as string, nt as assertTimelapseCadences, o as COCO_TO_MACRO, ot as cosineSimilarity$1, p as EVENT_KIND_BY_CAP, pt as evictionPolicyOfLocation, q as SceneMonitorSchema, qt as _enum, r as BaseDevice, rn as unknown, rt as audioMetricsCapability, s as DEFAULT_EVENT_COLOR, st as customAction, t as AUDIO_MACRO_LABELS, tn as record, tt as alarmPanelCapability, u as DETECTION_MACRO_CLASSES, v as MACRO_LABELS, vt as isScheduleActive, w as NC_CONDITION_CATALOG, wt as pickClusterStepModels, xt as mayWriteToLocation, y as MAX_ARCHIVED_DEBUG_NOTES, yt as isSourceCap, z as OpsLogEntrySchema, zt as BaseAddon } from "../dist-CT2SouNJ.mjs";
+import { $ as VISIT_MERGE_GAP_MS, $t as object, A as NcRulePatchSchema, Bt as CamProfileSchema, C as NC_ALARM_SYSTEM_EVENT_KINDS, D as NC_TAXONOMY, Dt as readDeviceStateFrom, Et as plateGalleryCapability, F as NcSnoozeSchema, Ft as vectorDimFromBase64, G as SCENE_DEFAULT_UNCOVERED_POLICY, Gt as nodePin, H as RetrainStatusSchema, Ht as createEvent, I as NcSnoozeSuppressedSchema, It as videoclipsCapability, J as TIMELAPSE_DENSE_FLOOR_SEC, Jt as array, K as SCENE_DIVERGED, Kt as sleep$1, L as NcSystemEventKindSchema, Lt as zoneAnalyticsCapability, M as NcRuleTargetSchema, Mt as storageOccupancyCapability, N as NcScheduleSchema, Nt as subKindsOf, O as NcConditionDescriptorSchema, Ot as readTimelapseGeneratedAt, P as NcSnoozeInputSchema, Pt as systemEventFilterApplies, Q as TrackSourceSchema, Qt as number, R as NcTaxonomySchema, Rt as errMsg$1, S as MediaFileKindEnum, St as notificationRulesCapability, T as NC_DEFAULT_SNOOZE_MINUTES, Tt as pipelineAnalyticsCapability, Ut as hydrateSchema, V as RECORDING_EXPORT_MAX_READ_BYTES, Vt as DeviceType, W as SCENE_DEFAULT_ANCHOR_THRESHOLD, Wt as isDeviceScopedCap, X as TimelapseRulePatchSchema, Xt as discriminatedUnion, Y as TimelapseRuleInputSchema, Yt as boolean, Z as TimelapseRuleSchema, Zt as literal, _ as LabelAttributionSchema, _t as isDetectionMacroClass, a as CLUSTER_MODEL_SCOPED_STEPS, at as buildEventKindDescriptor, b as MAX_BIRTH_DECISION_RECORDS, bt as kebabToCamel, ct as defineCustomActions, dt as encodeVectorBase64, en as partialRecord, et as addonWidgetsSourceCapability, f as DeclaredDevices, ft as evaluateSensorEdge, g as FailureCounters, h as FULL_IMAGE_BBOX, ht as failureContributionCapability, i as BirthDecisionRecordSchema, in as EventCategory, it as audioModeOf, j as NcRuleSchema, jt as sceneMonitorCapability, k as NcRuleInputSchema, kt as resolveLocationMode, lt as deriveRecordingMode, m as EVENT_PAD_MS, mt as faceGalleryCapability, n as ArchivedDebugNoteSchema, nn as string, nt as assertTimelapseCadences, o as COCO_TO_MACRO, ot as cosineSimilarity$1, p as EVENT_KIND_BY_CAP, pt as evictionPolicyOfLocation, q as SceneMonitorSchema, qt as _enum, r as BaseDevice, rn as unknown, rt as audioMetricsCapability, s as DEFAULT_EVENT_COLOR, st as customAction, t as AUDIO_MACRO_LABELS, tn as record, tt as alarmPanelCapability, u as DETECTION_MACRO_CLASSES, v as MACRO_LABELS, vt as isScheduleActive, w as NC_CONDITION_CATALOG, wt as pickClusterStepModels, xt as mayWriteToLocation, y as MAX_ARCHIVED_DEBUG_NOTES, yt as isSourceCap, z as OpsLogEntrySchema, zt as BaseAddon } from "../dist-DWZqNymj.mjs";
 import { t as __exportAll } from "../embedding-encoder/index.mjs";
 import * as fs from "node:fs";
 import { promises } from "node:fs";
@@ -14914,7 +14914,7 @@ function buildOccupancyStatus(input) {
 * `this.byId.clear()` happened to sit AFTER the `await` that threw. Nothing
 * said so, and hoisting one line would have silently turned every transient
 * store error into a hub that stops notifying — the reversal behind the D130
-* flood and the `3f9345fc3` occupancy cold-seed loss. The ledger's contract
+* flood and the occupancy cold-seed loss. The ledger's contract
 * rule 2 (a failed load NEVER clears the mirror, deliberately no knob) makes
 * that reversal unexpressible here. `rule-store-load-failure-direction.spec.ts`
 * holds the direction and records what was removed to make it red.
@@ -18131,7 +18131,7 @@ function clockOf$2(atMs) {
 *
 * ## The `.partial()` trap this file exists to avoid
 *
-* Commit `e0921ac6e`, found in production 2026-08-12: `NcRulePatchSchema` was
+* Found in production 2026-08-12: `NcRulePatchSchema` was
 * `NcRuleInputSchema.partial()`, and Zod 4 `.partial()` KEEPS the inner
 * `.default()`. Parsing `{ name: 'x' }` therefore materialised every defaulted
 * key, and `{ ...existing, ...patch }` wrote them over the rule — a camera- and
@@ -34881,6 +34881,8 @@ var SortTracker = class SortTracker {
 	refusalSampler = new SpawnRefusalSampler();
 	/** Sink for dropped-detection diagnostics — see {@link setSpawnRefusalObserver}. */
 	spawnRefusalObserver = null;
+	/** Unsampled copy for the frame path — see `setSpawnRefusalSink`. */
+	refusalSink = null;
 	/** Per-reason counters behind the sampled spawn-beside-coasting diagnostics. */
 	spawnBesideSampler = new SpawnBesideCoastingSampler();
 	/** Sink for fragmentation diagnostics — see {@link setSpawnBesideCoastingObserver}. */
@@ -34993,11 +34995,7 @@ var SortTracker = class SortTracker {
 	}
 	/** Emit one dropped-detection record, subject to the refusal sampler. */
 	reportRefusal(reason, det, extra = {}) {
-		const observer = this.spawnRefusalObserver;
-		if (!observer) return;
-		const refusalCount = this.refusalSampler.next(reason);
-		if (refusalCount === void 0) return;
-		observer({
+		const base = {
 			reason,
 			detClass: det.class,
 			detScore: det.score,
@@ -35009,13 +35007,31 @@ var SortTracker = class SortTracker {
 				againstTrackId: extra.against.id,
 				againstTrackClass: extra.against.class
 			} : {},
-			refusalCount,
-			sampledEvery: 10,
 			...extra.droppedTrackId !== void 0 ? { droppedTrackId: extra.droppedTrackId } : {},
 			...extra.trackLifeMs !== void 0 ? { trackLifeMs: extra.trackLifeMs } : {}
+		};
+		this.refusalSink?.(base);
+		const observer = this.spawnRefusalObserver;
+		if (!observer) return;
+		const refusalCount = this.refusalSampler.next(reason);
+		if (refusalCount === void 0) return;
+		observer({
+			...base,
+			refusalCount,
+			sampledEvery: 10
 		});
 	}
 	/**
+	* Wire the UNSAMPLED refusal sink — the frame path's copy.
+	*
+	* Separate from {@link setSpawnRefusalObserver} because the two want
+	* different things from the same record: the observer wants a readable log
+	* and accepts a sample; this decides whether an EVENT exists.
+	*/
+	setSpawnRefusalSink(sink) {
+		this.refusalSink = sink;
+	}
+	/**
 	* Report a TRACK that ends having emitted nothing — the last silent branch
 	* on the detection→position path (D391).
 	*
@@ -36050,6 +36066,17 @@ function mapObjectStateToTrackState(s) {
 		default: return "new";
 	}
 }
+/**
+* How long an identical refusal stays collapsed. A stationary subject is
+* refused on every analysed frame; at ~2 fps of analysis, 60 s turns a parked
+* car's 120 lines into one and still reports a subject that comes back later.
+*/
+var ZONE_REFUSAL_THROTTLE_MS = 6e4;
+/** Box quantisation for the collapse key: a subject that moves less than this
+*  is the same sighting for diagnostic purposes. */
+var ZONE_REFUSAL_BOX_CELL_PX = 64;
+/** Bound on the collapse map; stale keys are swept when it is exceeded. */
+var ZONE_REFUSAL_KEY_LIMIT = 512;
 var FrameProcessor = class {
 	deviceId;
 	/** Detection source this processor handles (`pipeline` | `onboard`).
@@ -36109,6 +36136,23 @@ var FrameProcessor = class {
 	/** Sink + sampler for the drops this stage owns (the detection-stage zone
 	*  filter). Shares the tracker's vocabulary — see {@link SpawnRefusalReason}. */
 	spawnRefusalObserver = null;
+	/** Where a collected refusal is forwarded for LOGGING, when anyone asked. */
+	spawnRefusalForward = null;
+	/**
+	* The spawn refusals of the frame being processed.
+	*
+	* Filled by the same sink that feeds the diagnostic log, and drained at the
+	* end of `process`. It exists because a refused detection inside a watched
+	* zone still has to become an EVENT: an immediate zone rule asks "is there an
+	* animal in the flowerbed now?", which does not need "is it the same animal
+	* as before?" answered first. See `zone-detection-emits-without-a-track`.
+	*/
+	refusalsThisFrame = [];
+	/** Running count of refusals-in-zone SEEN — never the throttled number. */
+	zoneRefusalEventCount = 0;
+	zoneRefusalObserver = null;
+	/** Last report time per collapsed key, for {@link ZONE_REFUSAL_THROTTLE_MS}. */
+	zoneRefusalLastReport = /* @__PURE__ */ new Map();
 	zoneRefusalSampler = new SpawnRefusalSampler();
 	/** Optional stationary-object gate (parked-object suppression). Null until
 	*  the addon wires it via {@link setStationaryGate}. */
@@ -36123,6 +36167,9 @@ var FrameProcessor = class {
 		this.deviceId = deviceId;
 		this.source = source;
 		this.tracker = new SortTracker(trackerConfig);
+		this.tracker.setSpawnRefusalSink((record) => {
+			this.refusalsThisFrame.push(record);
+		});
 		this.stateAnalyzer = new StateAnalyzer(stateConfig);
 		this.eventEmitter = new DetectionEventEmitter(emitterConfig);
 		this.zones = [];
@@ -36206,6 +36253,14 @@ var FrameProcessor = class {
 		this.tracker.setSpawnRefusalObserver(observer);
 		this.spawnRefusalObserver = observer;
 	}
+	/**
+	* Where a refused-inside-a-zone detection goes. Diagnostics only: this is
+	* deliberately NOT the event stream, so nothing downstream can alert on a
+	* box the confirmation gate threw away (D426).
+	*/
+	setZoneRefusalObserver(observer) {
+		this.zoneRefusalObserver = observer;
+	}
 	setBindObserver(observer) {
 		this.tracker.setBindObserver(observer);
 	}
@@ -36229,6 +36284,88 @@ var FrameProcessor = class {
 	* ate it. Sampled like every other refusal: an excluded box is excluded on
 	* every frame of a passage.
 	*/
+	/**
+	* Turn this frame's refused spawns into events, but only those inside a zone.
+	*
+	* Drains {@link refusalsThisFrame}. Each surviving record becomes an
+	* `object.detected` event with NO track — carrying the zones it fell in, the
+	* percentage of the box inside each, and the refusal reason so a consumer can
+	* tell it apart from a track whose media went missing.
+	*
+	* `zone-filtered` refusals are excluded on purpose: that reason means the
+	* operator's own detection rules already said the box does not count on this
+	* camera, and re-admitting it here would overrule a decision they made.
+	*/
+	/**
+	* Report every detection the tracker refused that fell INSIDE a watched
+	* zone. Diagnostics only — see the spec
+	* `zone-refusal-is-observed-never-notified` for the ten hours of production
+	* that decided this: 1473 of 1511 such refusals were one stationary parcel
+	* re-offered every frame, and both notifications this path ever produced
+	* were phantoms the confirmation gate had correctly rejected.
+	*
+	* Drains {@link refusalsThisFrame}. `zone-filtered` is skipped: a box the
+	* zone filter already removed was never in a zone.
+	*/
+	reportRefusedDetectionsInZones(timestamp, frameWidth, frameHeight) {
+		const refusals = this.refusalsThisFrame;
+		this.refusalsThisFrame = [];
+		if (refusals.length === 0 || this.zones.length === 0) return;
+		const observer = this.zoneRefusalObserver;
+		if (observer === null) return;
+		for (const r of refusals) {
+			if (r.reason === "zone-filtered") continue;
+			const { memberships } = this.zoneEngine.splitDetectionZones(r.bbox, this.zones, frameWidth, frameHeight, void 0, void 0, void 0, this.zoneMembershipMinOverlap);
+			if (memberships.length === 0) continue;
+			this.zoneRefusalEventCount += 1;
+			if (!this.shouldReportZoneRefusal(r, memberships, timestamp)) continue;
+			observer({
+				deviceId: this.deviceId,
+				timestamp,
+				className: r.detClass,
+				confidence: r.detScore,
+				bbox: r.bbox,
+				reason: r.reason,
+				zones: memberships.map((m) => ({
+					zoneId: m.zoneId,
+					...m.zoneName === void 0 ? {} : { zoneName: m.zoneName },
+					overlapPct: Math.round(m.overlap * 1e3) / 10
+				})),
+				seenSoFar: this.zoneRefusalEventCount
+			});
+		}
+	}
+	/**
+	* Collapse identical refusals. A refused box is refused on EVERY analysed
+	* frame, so a subject that does not leave — the parcel at the door, the
+	* parked car — is an unbounded emitter. The key includes a coarse box, so a
+	* subject that actually moves keeps reporting while a stationary one does
+	* not.
+	*/
+	shouldReportZoneRefusal(r, memberships, timestamp) {
+		const cell = (v) => Math.round(v / ZONE_REFUSAL_BOX_CELL_PX);
+		const key = [
+			r.detClass,
+			r.reason,
+			memberships.map((m) => m.zoneId).join("+"),
+			cell(r.bbox.x),
+			cell(r.bbox.y),
+			cell(r.bbox.width),
+			cell(r.bbox.height)
+		].join("|");
+		const last = this.zoneRefusalLastReport.get(key);
+		if (last !== void 0 && timestamp - last < ZONE_REFUSAL_THROTTLE_MS) return false;
+		this.zoneRefusalLastReport.set(key, timestamp);
+		if (this.zoneRefusalLastReport.size > ZONE_REFUSAL_KEY_LIMIT) {
+			for (const [k, t] of this.zoneRefusalLastReport) if (timestamp - t >= ZONE_REFUSAL_THROTTLE_MS) this.zoneRefusalLastReport.delete(k);
+		}
+		return true;
+	}
+	/** How many refusals-in-zone this processor has SEEN — the measure that says
+	*  whether this path is a trickle or a storm, before any throttling. */
+	zoneRefusalEventsEmitted() {
+		return this.zoneRefusalEventCount;
+	}
 	reportZoneFiltered(excluded) {
 		const observer = this.spawnRefusalObserver;
 		if (!observer || excluded.length === 0) return;
@@ -36630,6 +36767,7 @@ var FrameProcessor = class {
 				frameHeight
 			};
 		};
+		this.reportRefusedDetectionsInZones(timestamp, frameWidth, frameHeight);
 		const withTrackId = rawEvents.filter((e) => e.detection.trackId);
 		const objectEvents = withTrackId.filter((e) => e.type !== "object.detected").map((e) => toObjectEvent(e));
 		const appearanceEvents = withTrackId.filter((e) => e.type === "object.detected").map((e) => toObjectEvent(e, "entered"));
@@ -47246,6 +47384,7 @@ var TrackDetailDispatcher = class {
 		if (!dev) return;
 		dev.scheduler.onTrackEnded(trackId);
 		dev.tracks.delete(trackId);
+		dev.parcelEnriched.delete(trackId);
 		dev.candidateBest.delete(trackId);
 		if (dev.tracks.size === 0) this.clearTimer(dev);
 	}
@@ -47255,6 +47394,7 @@ var TrackDetailDispatcher = class {
 			this.clearTimer(dev);
 			dev.queue.length = 0;
 			dev.tracks.clear();
+			dev.parcelEnriched.clear();
 			dev.candidateBest.clear();
 		}
 		this.devices.clear();
@@ -47265,6 +47405,7 @@ var TrackDetailDispatcher = class {
 			dev = {
 				scheduler: new DetailScheduler(),
 				tracks: /* @__PURE__ */ new Map(),
+				parcelEnriched: /* @__PURE__ */ new Map(),
 				candidateBest: new BestDetectionTracker(CANDIDATE_IMPROVE_POLICY),
 				queue: [],
 				coastedFramesIgnored: 0,
@@ -47381,19 +47522,21 @@ var TrackDetailDispatcher = class {
 	*
 	* 1. `frameHandle` — cheapest when it hits: no payload moves and the runner's
 	*    leaf children re-cut their ROI at native resolution. Tried first, always.
-	* 2. `frameJpeg` — the freshest frame's FULL raster, fetched from the node that
-	*    owns the handle and handed to the runner UNCUT, so the rectangle still
-	*    comes from the single derivation (D52). This rung exists because rung 1 is
-	*    structurally unreachable for most dispatches: the decode worker's native
-	*    lease is 1.2 s and a tick + inference routinely lands outside it, while
-	*    the retained store holds the frame for 3 s.
+	* 2. `frameJpeg` — the track's PARKED key frame (D422): the full native frame
+	*    the owning node copied at the best instant, retrieved by track and handed
+	*    to the runner UNCUT, so the rectangle still comes from the single
+	*    derivation (D52). This rung exists because rung 1 is structurally
+	*    unreachable for most dispatches — a tick + inference routinely lands
+	*    outside the lease — and it cannot miss on age. It runs ONCE per parcel
+	*    per step; a dispatch that finds the same parcel already enriched skips
+	*    it, so a coasting track does not re-embed the same image every second.
 	* 3. `cropJpeg` — the pre-cut tile. Last, because the caller decided its
 	*    rectangle and because in practice the same native miss that emptied rung 1
 	*    empties this one too.
 	*
-	* On D9/D18: the payload that crosses in rung 2 is a COMPRESSED JPEG fetched on
-	* demand, per TRACK per dispatch (≤2 in flight per device, ~1 Hz) and only after
-	* rung 1 missed — never a frame-rate stream, and never raw pixels.
+	* On D9/D18: the payload that crosses in rung 2 is a COMPRESSED JPEG retrieved
+	* on demand, per TRACK per dispatch (≤2 in flight per device, ~1 Hz) and only
+	* after rung 1 missed — never a frame-rate stream, and never raw pixels.
 	*
 	* ONE outcome stops the ladder cold: the runner's typed `not-attached`
 	* refusal (`detail-refusal.ts`). It names the camera's SESSION state, not
@@ -47431,34 +47574,39 @@ var TrackDetailDispatcher = class {
 				}
 			});
 		}
-		if (this.deps.captureFullFrameBase64 !== void 0 && frame.frameHandle !== void 0) try {
-			const full = await this.deps.captureFullFrameBase64(frame);
-			if (full !== null) if (full.width !== frame.frameWidth || full.height !== frame.frameHeight) this.deps.logger.warn("detail full-frame fallback refused — frame is not the bbox scale", {
+		if (this.deps.captureParkedFrame !== void 0) try {
+			const parked = await this.deps.captureParkedFrame(deviceId, req.trackId);
+			if (parked !== null) if (dev.parcelEnriched.get(req.trackId)?.get(req.stepId) === parked.timestamp) this.deps.logger.debug("detail parcel already enriched for this step — skipping", {
 				tags: { deviceId },
 				meta: {
 					trackId: req.trackId,
 					stepId: req.stepId,
-					frameWidth: full.width,
-					frameHeight: full.height,
-					bboxFrameWidth: frame.frameWidth,
-					bboxFrameHeight: frame.frameHeight
+					parkedTimestamp: parked.timestamp
 				}
 			});
 			else {
 				const derived = await this.deps.runDetailSubtree({
 					deviceId,
-					frameJpeg: full.base64,
-					parent,
+					frameJpeg: parked.base64,
+					parent: {
+						bbox: { ...parked.bbox },
+						className: frame.className
+					},
 					steps
-				}, frame.nodeId);
-				if (derived !== null) return derived.details;
+				}, parked.nodeId);
+				if (derived !== null) {
+					const perStep = dev.parcelEnriched.get(req.trackId) ?? /* @__PURE__ */ new Map();
+					perStep.set(req.stepId, parked.timestamp);
+					dev.parcelEnriched.set(req.trackId, perStep);
+					return derived.details;
+				}
 			}
 		} catch (err) {
 			if (isDetailNotAttachedRefusal(err)) {
 				this.warnNotAttachedThrottled(deviceId, dev, req);
 				return null;
 			}
-			this.deps.logger.debug("detail full-frame fallback call failed", {
+			this.deps.logger.debug("detail parked-frame rung failed", {
 				tags: { deviceId },
 				meta: {
 					trackId: req.trackId,
@@ -47525,7 +47673,7 @@ var TrackDetailDispatcher = class {
 				trackId: req.trackId,
 				stepId: req.stepId,
 				reason: req.reason,
-				triedFullFrame: this.deps.captureFullFrameBase64 !== void 0,
+				triedParkedFrame: this.deps.captureParkedFrame !== void 0,
 				triedCropJpeg: this.deps.captureCropBase64 !== void 0
 			}
 		});
@@ -53890,6 +54038,17 @@ async function encodeKeyFrameVariants(native) {
 		})
 	};
 }
+/**
+* The web companion from the PARKED key frame's own JPEG (D422): the parcel is
+* stored verbatim as `keyFrame`, and `keyFrameSmall` is this — the same bytes
+* downscaled to {@link KEYFRAME_SMALL_MAX_WIDTH}. One decode, one encode,
+* never a second fetch; `withoutEnlargement` never upscales a sub-960 frame.
+* The by-handle twin ({@link encodeKeyFrameVariants}) remains for the
+* summary group shot, which still fetches a native surface by handle.
+*/
+async function deriveKeyFrameSmall(keyFrameJpeg) {
+	return sharp(keyFrameJpeg).resize(960, null, { withoutEnlargement: true }).jpeg({ quality: 88 }).toBuffer();
+}
 //#endregion
 //#region src/pipeline-analytics/pipeline/key-frame-metrics.ts
 var DEFAULT_FLUSH_INTERVAL_MS = 6e4;
@@ -53915,11 +54074,8 @@ var KeyFrameCaptureLog = class {
 					w.landed += 1;
 					if (sample.retry) w.retryLanded += 1;
 					break;
-				case "native-miss":
-					w.nativeMiss += 1;
-					break;
-				case "ram-tier":
-					w.ramTier += 1;
+				case "parcel-missing":
+					w.parcelMissing += 1;
 					break;
 				case "error":
 					w.error += 1;
@@ -53948,8 +54104,7 @@ var KeyFrameCaptureLog = class {
 			landed: 0,
 			retryAttempts: 0,
 			retryLanded: 0,
-			nativeMiss: 0,
-			ramTier: 0,
+			parcelMissing: 0,
 			error: 0,
 			skippedNodeOffline: 0
 		};
@@ -53964,8 +54119,7 @@ var KeyFrameCaptureLog = class {
 			landed: w.landed,
 			retryAttempts: w.retryAttempts,
 			retryLanded: w.retryLanded,
-			nativeMiss: w.nativeMiss,
-			ramTier: w.ramTier,
+			parcelMissing: w.parcelMissing,
 			error: w.error,
 			skippedNodeOffline: w.skippedNodeOffline
 		};
@@ -53974,63 +54128,44 @@ var KeyFrameCaptureLog = class {
 //#endregion
 //#region src/pipeline-analytics/pipeline/key-frame-persist.ts
 /**
-* Fetch, encode and store one track's key frame + its 960 companion.
+* Read, derive and store one track's key frame + its web companion.
 *
-* NATIVE-OR-NOTHING: a miss writes nothing and the caller's bounded retry
-* re-fires later. The `keyFrame` write lands FIRST and its key is what the
-* outcome carries — a `keyFrameSmall` failure afterwards must not re-arm a
+* PARCEL-OR-NOTHING: no parcel writes nothing and the caller's bounded retry
+* parks a later frame. The `keyFrame` write lands FIRST and its key is what
+* the outcome carries — a `keyFrameSmall` failure afterwards must not re-arm a
 * retry that would re-shoot a key frame the rebuild can already read.
 */
 async function persistTrackKeyFrame(deps, input) {
-	const { deviceId, trackId, frameHandle, retry } = input;
+	const { deviceId, trackId, retry } = input;
 	const drop = {
 		tags: { deviceId },
 		meta: {
 			trackId,
-			nodeId: frameHandle.nodeId,
 			retry
 		}
 	};
 	try {
-		const result = await deps.fetchNativeFullFrame(frameHandle, input.maxWidth);
-		const native = result?.frame;
-		if (!native || native.format !== "rgb" || native.width <= 0 || native.height <= 0) {
-			deps.logger.error("key-frame native miss — no upscale, will retry while budget remains", {
-				...drop,
-				meta: {
-					...drop.meta,
-					shmId: frameHandle.shmId
-				}
-			});
-			return { kind: "native-miss" };
-		}
-		if (!keyFrameAcceptsTier(result.tier)) {
-			deps.logger.warn("keyFrame native miss — RAM tier rejected, will retry while budget remains", {
-				...drop,
-				meta: {
-					...drop.meta,
-					shmId: frameHandle.shmId,
-					tier: result.tier
-				}
-			});
-			return { kind: "ram-tier" };
+		const parcel = await deps.fetchParkedKeyFrame(deviceId, trackId);
+		if (parcel === null || parcel.jpeg.byteLength === 0) {
+			deps.logger.error("key-frame parcel missing — nothing to write, retry parks a later frame", { ...drop });
+			return { kind: "parcel-missing" };
 		}
-		const { keyFrame, keyFrameSmall } = await deps.encodeVariants(native);
 		const keyFrameKey = await deps.media.putReplacing({
 			deviceId,
 			ownerKind: "track",
 			ownerId: trackId,
 			kind: "keyFrame",
-			timestamp: input.timestamp,
-			data: keyFrame
+			timestamp: parcel.timestamp,
+			data: parcel.jpeg
 		});
 		try {
+			const keyFrameSmall = await deps.deriveSmall(parcel.jpeg);
 			await deps.media.putReplacing({
 				deviceId,
 				ownerKind: "track",
 				ownerId: trackId,
 				kind: "keyFrameSmall",
-				timestamp: input.timestamp,
+				timestamp: parcel.timestamp,
 				data: keyFrameSmall
 			});
 		} catch (err) {
@@ -54038,17 +54173,29 @@ async function persistTrackKeyFrame(deps, input) {
 				...drop,
 				meta: {
 					...drop.meta,
+					nodeId: parcel.nodeId,
 					error: errMsg$1(err)
 				}
 			});
 		}
+		deps.logger.debug("key frame written from the parked parcel", {
+			...drop,
+			meta: {
+				...drop.meta,
+				nodeId: parcel.nodeId,
+				width: parcel.width,
+				height: parcel.height,
+				bytes: parcel.jpeg.byteLength,
+				parkedTimestamp: parcel.timestamp
+			}
+		});
 		return {
 			kind: "landed",
 			keyFrameKey
 		};
 	} catch (err) {
 		const error = errMsg$1(err);
-		deps.logger.warn("key-frame capture failed", {
+		deps.logger.warn("key-frame write failed", {
 			...drop,
 			meta: {
 				...drop.meta,
@@ -54235,6 +54382,61 @@ function createKeyFrameCrop(deps) {
 	};
 }
 //#endregion
+//#region src/pipeline-analytics/pipeline/track-park.ts
+/** The whole frame — what a `keyFrame` park cuts. */
+var FULL_FRAME = {
+	x: 0,
+	y: 0,
+	w: 1,
+	h: 1
+};
+/** The two parcels a best-frame decision orders, in a fixed order. */
+function buildParkOrders(decision) {
+	const subject = {
+		bbox: { ...decision.bbox },
+		frameWidth: decision.frameWidth,
+		frameHeight: decision.frameHeight
+	};
+	const layout = deliveredWideCentralSquareLayout(decision.bbox, {
+		W: decision.frameWidth,
+		H: decision.frameHeight
+	});
+	const base = {
+		deviceId: decision.deviceId,
+		trackId: decision.trackId,
+		handle: decision.frameHandle,
+		timestamp: decision.timestamp,
+		subject
+	};
+	return [{
+		...base,
+		kind: "keyFrame",
+		bbox: FULL_FRAME,
+		maxWidth: KEYFRAME_NATIVE_MAX_WIDTH
+	}, {
+		...base,
+		kind: "thumbnail",
+		bbox: layout.fetch,
+		layout
+	}];
+}
+/**
+* The subject's box in the PARCEL's pixel space. The box was measured on the
+* ≤640 detection raster; the parcel is native-resolution. Both show the same
+* scene at the same aspect, so a uniform per-axis scale places the box on the
+* parcel — the runner then derives the crop rectangle from it (D52).
+*/
+function scaleSubjectIntoParcel(subject, parcelWidth, parcelHeight) {
+	const sx = parcelWidth / subject.frameWidth;
+	const sy = parcelHeight / subject.frameHeight;
+	return {
+		x: subject.bbox.x * sx,
+		y: subject.bbox.y * sy,
+		w: subject.bbox.w * sx,
+		h: subject.bbox.h * sy
+	};
+}
+//#endregion
 //#region src/pipeline-analytics/pipeline/native-detection.ts
 /**
 * Nominal frame size used to denormalize native `[0,1]` boxes when a
@@ -58765,7 +58967,28 @@ async function reconcileGallerySamples(deps, options) {
 }
 //#endregion
 //#region src/pipeline-analytics/summary/summary-store.ts
+/**
+* @durable class=ledger owner=pipeline-analytics
+*   write="one row per SUMMARY — a window of co-present tracks on one camera
+*     group. Opened by `openOrAbsorb` when the first member arrives, updated
+*     in place while the window absorbs more, and finalised by `seal` when the
+*     window closes. Per WINDOW, never per frame or per track: the sealed
+*     summary is what a notification rule reads."
+*   retention="age-keyed on `sealedAt`, swept with the rest of the analytics
+*     retention. An unsealed row belongs to a window still open and is never
+*     swept by age — it is closed or cascaded away with its members."
+*/
 var SUMMARIES_COLLECTION = "pipeline-analytics:summaries";
+/**
+* @durable class=ledger owner=pipeline-analytics
+*   write="one row per (summary, track) membership, written as a window
+*     absorbs a track. The join that lets a sealed summary name its subjects
+*     without re-reading the track store."
+*   retention="cascaded — a member dies with its summary (`delete-track-cascade`
+*     counts them as leaves) or with the track it names. It carries no clock of
+*     its own: an age sweep here could outlive or predecease the summary the
+*     row only means anything inside of."
+*/
 var SUMMARY_MEMBERS_COLLECTION = "pipeline-analytics:summary-members";
 var SUMMARIES_COLUMNS = [
 	{
@@ -63593,35 +63816,6 @@ function createNativeFrameTransport(deps) {
 	const getRemoteFrame = async (handle) => requestNativeCrop(handle, FULL_FRAME_BBOX, handle.width, replyToFullFrame);
 	const fetchNativeFullFrameTiered = async (handle, maxWidth) => requestNativeCrop(handle, FULL_FRAME_BBOX, maxWidth, replyToTieredFullFrame);
 	const getNativeFullFrameRgb = async (handle, maxWidth) => (await fetchNativeFullFrameTiered(handle, maxWidth))?.frame ?? null;
-	const getFullFrameJpegBase64 = async (handle, maxWidth) => {
-		if (!pipelineRunnerApi?.getNativeCrop) return null;
-		try {
-			const full = await pipelineRunnerApi.getNativeCrop.query({
-				handle,
-				bbox: {
-					x: 0,
-					y: 0,
-					w: 1,
-					h: 1
-				},
-				maxWidth,
-				encodeJpeg: true
-			}, nodePin(handle.nodeId));
-			if (!full?.jpeg || full.width <= 0 || full.height <= 0) return null;
-			return {
-				base64: full.jpeg,
-				width: full.width,
-				height: full.height,
-				tier: full.tier === "ram-fullframe" ? "ram-fullframe" : "native"
-			};
-		} catch (err) {
-			logger.debug("full-frame jpeg fetch failed", { meta: {
-				nodeId: handle.nodeId,
-				error: errMsg$1(err)
-			} });
-			return null;
-		}
-	};
 	const cropMetricLogger = logger.child("NativeCrop");
 	let nativeHits = 0;
 	let nativeFallbacks = 0;
@@ -63701,7 +63895,6 @@ function createNativeFrameTransport(deps) {
 		getRemoteFrame,
 		getNativeFullFrameRgb,
 		getNativeKeyFrameRgb: fetchNativeFullFrameTiered,
-		getFullFrameJpegBase64,
 		getNativeCropJpeg,
 		captureCrop: createCaptureCrop({
 			tryNativeCrop,
@@ -63812,6 +64005,233 @@ function parseTopologySnapshotNodes(data) {
 	return parsed;
 }
 //#endregion
+//#region src/pipeline-analytics/runtime/parked-frame-client.ts
+/**
+* Bound on the mirror. A track's record leaves at release; this is the
+* backstop for a lost close. At the busiest measured hub (~12 sessions,
+* a few tracks each) 4 096 is an hour of tracks, past which the OLDEST record
+* is forgotten — its parcel still ages out on the node on its own.
+*/
+var MAX_MIRRORED_TRACKS = 4096;
+/** One "runner has no park method" line per camera per minute. */
+var SKEW_WARN_THROTTLE_MS = 6e4;
+function inFlightKey(trackId, kind) {
+	return `${trackId} ${kind}`;
+}
+/** Strip the hub-side context off an order: only the wire fields travel. */
+function toWireInput(order) {
+	return {
+		deviceId: order.deviceId,
+		trackId: order.trackId,
+		kind: order.kind,
+		handle: order.handle,
+		bbox: order.bbox,
+		...order.maxWidth !== void 0 ? { maxWidth: order.maxWidth } : {},
+		timestamp: order.timestamp
+	};
+}
+function createParkedFrameClient(deps) {
+	const { api, logger } = deps;
+	const now = deps.now ?? Date.now;
+	/** trackId → kind → what the hub kept beside the parcel. */
+	const mirror = /* @__PURE__ */ new Map();
+	const inFlight = /* @__PURE__ */ new Map();
+	const skewWarnedAt = /* @__PURE__ */ new Map();
+	const remember = (order, answer) => {
+		let kinds = mirror.get(order.trackId);
+		if (kinds === void 0) {
+			kinds = /* @__PURE__ */ new Map();
+			mirror.set(order.trackId, kinds);
+			while (mirror.size > MAX_MIRRORED_TRACKS) {
+				const oldest = mirror.keys().next().value;
+				if (oldest === void 0) break;
+				mirror.delete(oldest);
+			}
+		}
+		kinds.set(order.kind, {
+			nodeId: answer.nodeId,
+			deviceId: order.deviceId,
+			kind: order.kind,
+			timestamp: order.timestamp,
+			width: answer.width,
+			height: answer.height,
+			subject: order.subject,
+			...order.layout !== void 0 ? { layout: order.layout } : {}
+		});
+	};
+	const warnSkew = (order) => {
+		const at = skewWarnedAt.get(order.deviceId) ?? 0;
+		if (now() - at < SKEW_WARN_THROTTLE_MS) return;
+		skewWarnedAt.set(order.deviceId, now());
+		logger.warn("track frame park impossible — the runner api has no park method (version skew)", {
+			tags: { deviceId: order.deviceId },
+			meta: {
+				trackId: order.trackId,
+				kind: order.kind,
+				nodeId: order.handle.nodeId
+			}
+		});
+	};
+	const sendPark = async (order) => {
+		if (api === void 0) {
+			warnSkew(order);
+			return false;
+		}
+		if (deps.isNodeOffline?.(order.handle.nodeId) === true) {
+			logger.debug("track frame park skipped — the owning node is offline in the registry", {
+				tags: { deviceId: order.deviceId },
+				meta: {
+					trackId: order.trackId,
+					kind: order.kind,
+					nodeId: order.handle.nodeId
+				}
+			});
+			return false;
+		}
+		const meta = {
+			trackId: order.trackId,
+			kind: order.kind,
+			nodeId: order.handle.nodeId,
+			handle: `${order.handle.shmId}#${order.handle.slot}#${order.handle.seq}`
+		};
+		try {
+			const answer = await api.parkTrackFrame.mutate(toWireInput(order), nodePin(order.handle.nodeId));
+			if (answer.parked) {
+				remember(order, answer);
+				logger.debug("track frame parked", {
+					tags: { deviceId: order.deviceId },
+					meta: {
+						...meta,
+						bytes: answer.bytes,
+						replaced: answer.replaced
+					}
+				});
+				return true;
+			}
+			logger.warn("track frame park refused by the owning node", {
+				tags: { deviceId: order.deviceId },
+				meta: {
+					...meta,
+					reason: answer.reason,
+					handleAgeMs: answer.handleAgeMs,
+					...answer.detail !== void 0 ? { detail: answer.detail } : {}
+				}
+			});
+			return false;
+		} catch (err) {
+			logger.warn("track frame park failed — the order did not reach the node", {
+				tags: { deviceId: order.deviceId },
+				meta: {
+					...meta,
+					error: errMsg$1(err)
+				}
+			});
+			return false;
+		}
+	};
+	const park = (order) => {
+		const key = inFlightKey(order.trackId, order.kind);
+		const pending = inFlight.get(key);
+		if (pending !== void 0) return pending;
+		const run = sendPark(order).finally(() => {
+			if (inFlight.get(key) === run) inFlight.delete(key);
+		});
+		inFlight.set(key, run);
+		return run;
+	};
+	const awaitPark = async (trackId, kind) => {
+		const pending = inFlight.get(inFlightKey(trackId, kind));
+		if (pending !== void 0) await pending;
+	};
+	const info = (trackId, kind) => mirror.get(trackId)?.get(kind);
+	const fetch = async (trackId, kind) => {
+		const known = info(trackId, kind);
+		if (known === void 0 || api === void 0) return null;
+		if (deps.isNodeOffline?.(known.nodeId) === true) {
+			logger.warn("parked frame retrieval skipped — the holding node is offline in the registry", {
+				tags: { deviceId: known.deviceId },
+				meta: {
+					trackId,
+					kind,
+					nodeId: known.nodeId
+				}
+			});
+			return null;
+		}
+		try {
+			const parcel = await api.getParkedTrackFrame.query({
+				deviceId: known.deviceId,
+				trackId,
+				kind
+			}, nodePin(known.nodeId));
+			if (parcel === null) {
+				logger.warn("parked frame gone at retrieval — the node no longer holds it", {
+					tags: { deviceId: known.deviceId },
+					meta: {
+						trackId,
+						kind,
+						nodeId: known.nodeId,
+						parkedTimestamp: known.timestamp
+					}
+				});
+				return null;
+			}
+			return {
+				jpeg: Buffer.from(parcel.jpeg, "base64"),
+				width: parcel.width,
+				height: parcel.height,
+				timestamp: parcel.timestamp,
+				info: known
+			};
+		} catch (err) {
+			logger.warn("parked frame retrieval failed", {
+				tags: { deviceId: known.deviceId },
+				meta: {
+					trackId,
+					kind,
+					nodeId: known.nodeId,
+					error: errMsg$1(err)
+				}
+			});
+			return null;
+		}
+	};
+	const release = (trackId) => {
+		const kinds = mirror.get(trackId);
+		if (kinds === void 0) return;
+		mirror.delete(trackId);
+		if (api === void 0) return;
+		const targets = /* @__PURE__ */ new Map();
+		for (const record of kinds.values()) targets.set(record.nodeId, record.deviceId);
+		for (const [nodeId, deviceId] of targets) api.releaseParkedTrackFrames.mutate({
+			deviceId,
+			trackId
+		}, nodePin(nodeId)).catch((err) => {
+			logger.debug("parked frame release did not reach the node", {
+				tags: { deviceId },
+				meta: {
+					trackId,
+					nodeId,
+					error: errMsg$1(err)
+				}
+			});
+		});
+	};
+	const dispose = () => {
+		mirror.clear();
+		inFlight.clear();
+		skewWarnedAt.clear();
+	};
+	return {
+		park,
+		awaitPark,
+		info,
+		fetch,
+		release,
+		dispose
+	};
+}
+//#endregion
 //#region src/pipeline-analytics/runtime/widget-manifest.ts
 /** The remote-module coordinates shared by every analytics widget. */
 var REMOTE_NAME = "addon_pipeline_analytics_widgets";
@@ -64913,7 +65333,8 @@ function isUniformRgbFrame(data, width, height) {
 * frame downscaled to {@link SNAPSHOT_MAX_WIDTH} (960) with ONLY the track's own
 * box burned in, falling back to the ≤640 detection frame (honest lower res,
 * never an upscale) on a native miss. The best `thumbnail` stays a clean,
-* uncapped native subject crop (native-or-nothing).
+* uncapped native subject crop — read from the track's PARKED slab, by track
+* (D422), never by handle.
 *
 * The detection frame is resolved ONCE per call (blank-frame guard); native full
 * frames + subject crops are fetched per target by handle. Frames recycle in
@@ -65181,10 +65602,10 @@ var EventMediaDispatcher = class {
 		if (sn.rollingLastFrame && boxed) lastFrameWritten = await this.replaceKind(deviceId, sn.trackId, "lastFrame", sn.timestamp, boxed);
 		let thumbnailWritten = false;
 		if (sn.bestThumbnail) {
-			const variants = await this.cropSubjectVariants(deviceId, sn.trackId, frameHandle, fw, fh, sn.bbox);
+			const variants = await this.cropSubjectVariants(deviceId, sn.trackId);
 			if (variants) {
-				thumbnailWritten = await this.replaceKind(deviceId, sn.trackId, "thumbnail", sn.timestamp, variants.thumbnail, "native");
-				await this.replaceKind(deviceId, sn.trackId, "thumbnailSmall", sn.timestamp, variants.thumbnailSmall, "native");
+				thumbnailWritten = await this.replaceKind(deviceId, sn.trackId, "thumbnail", variants.timestamp, variants.thumbnail, "native");
+				await this.replaceKind(deviceId, sn.trackId, "thumbnailSmall", variants.timestamp, variants.thumbnailSmall, "native");
 			}
 		}
 		return {
@@ -65262,81 +65683,49 @@ var EventMediaDispatcher = class {
 	}
 	/**
 	* The best-shot subject crop as its TWO persisted variants (best-crop
-	* fast-load, 2026-07-21; 16:9 central-square reframe, 2026-07-22). ONE native
-	* fetch: the in-frame slab of the 16:9 central-square WINDOW
-	* ({@link wideCentralSquareLayout} — a `side × 16/9` window whose middle square
-	* of side `max(w,h)×1.2` fully contains the subject, clamped/anchored so the
-	* subject stays in that central square at every frame edge) is requested from
-	* the runner's retained native surface with NO `maxWidth` (uncapped TRUE
-	* native). It is composed into the full 16:9 window (lateral letterbox only for
-	* the part outside the frame) → the `thumbnail`. The `thumbnailSmall` is
-	* DERIVED by downscaling that SAME window to the 480 long-side cap (480×270) —
-	* never a second `getNativeCropJpeg`, never upscaled ({@link deriveThumbnailSmall}
-	* never upscales a smaller window).
-	*
-	* Both variants share the SAME framing + central-square containment guarantee:
-	* wide consumers use the 16:9 image as-is (subject centered, no cut); square
-	* consumers center-crop the middle square (subject always inside it).
-	*
-	* NATIVE-OR-NOTHING: any miss/error (or a runner without the method) returns
-	* `null` after a loud `logger.warn`; the caller SKIPS the write and the
-	* per-frame retry lands a real native crop later. Never a local resize
-	* upscale of a ≤640 tile (a blurred lie).
-	*/
-	async cropSubjectVariants(deviceId, trackId, frameHandle, fw, fh, bbox) {
-		if (!this.deps.getNativeCropJpeg) {
-			this.deps.logger.warn("native subject crop miss — will retry, no upscale", {
-				tags: { deviceId },
-				meta: {
-					shmId: frameHandle.shmId,
-					reason: "no-native-cap"
-				}
-			});
-			this.deps.onSubjectCropMiss?.(deviceId, trackId, "no-native-cap");
-			return null;
-		}
+	* fast-load, 2026-07-21; 16:9 central-square reframe, 2026-07-22), from the
+	* track's PARKED slab (D422). ONE read, by `(deviceId, trackId)`: the
+	* in-frame slab of the 16:9 central-square WINDOW
+	* ({@link wideCentralSquareLayout}) the runner cut at uncapped native
+	* resolution the instant the track's best was decided. It is composed into
+	* the full 16:9 window (lateral letterbox only for the part outside the
+	* frame) → the `thumbnail`. The `thumbnailSmall` is DERIVED by downscaling
+	* that SAME window to the 480 long-side cap — never a second read, never
+	* upscaled ({@link deriveThumbnailSmall} never upscales a smaller window).
+	*
+	* Both variants share the SAME framing + central-square containment
+	* guarantee: wide consumers use the 16:9 image as-is; square consumers
+	* center-crop the middle square (subject always inside it).
+	*
+	* PARCEL-OR-NOTHING: no parcel (or a throw) returns `null` after a loud
+	* `logger.warn`; the caller SKIPS the write and the per-frame retry parks a
+	* later frame. Never a by-handle crop, never a local upscale of a ≤640 tile.
+	*/
+	async cropSubjectVariants(deviceId, trackId) {
 		try {
-			const layout = deliveredWideCentralSquareLayout(bbox, {
-				W: fw,
-				H: fh
-			});
-			if (centralSquareContainmentFraction(bbox, {
-				W: fw,
-				H: fh
-			}) < .5) this.deps.logger.info("best-shot delivered via contained square layout (edge subject)", {
-				tags: { deviceId },
-				meta: {
-					bbox,
-					frameW: fw,
-					frameH: fh
-				}
-			});
-			const askedAt = Date.now();
-			const slab = await this.deps.getNativeCropJpeg(frameHandle, layout.fetch, void 0, deviceId);
-			if (!slab) {
-				this.deps.logger.warn("native subject crop miss — will retry, no upscale", {
+			const parked = await this.deps.getParkedSubjectSlab(deviceId, trackId);
+			if (!parked) {
+				this.deps.logger.warn("best-shot parcel missing — no thumbnail this frame, will retry", {
 					tags: { deviceId },
 					meta: {
-						shmId: frameHandle.shmId,
-						handle: `${frameHandle.shmId}#${frameHandle.slot}#${frameHandle.seq}`,
-						handleNodeId: frameHandle.nodeId,
-						roundTripMs: Date.now() - askedAt,
-						reason: "native-miss"
+						trackId,
+						reason: "parcel-missing"
 					}
 				});
-				this.deps.onSubjectCropMiss?.(deviceId, trackId, "native-miss");
+				this.deps.onSubjectCropMiss?.(deviceId, trackId, "parcel-missing");
 				return null;
 			}
-			const thumbnail = await composeWideCentralSquareThumbnail(slab, layout);
+			const thumbnail = await composeWideCentralSquareThumbnail(parked.slab, parked.layout);
 			return {
 				thumbnail,
-				thumbnailSmall: await deriveThumbnailSmall(thumbnail)
+				thumbnailSmall: await deriveThumbnailSmall(thumbnail),
+				timestamp: parked.timestamp
 			};
 		} catch (err) {
-			this.deps.logger.warn("native subject crop miss — will retry, no upscale", {
+			this.deps.logger.warn("best-shot parcel read failed — no thumbnail this frame, will retry", {
 				tags: { deviceId },
 				meta: {
-					shmId: frameHandle.shmId,
+					trackId,
 					reason: "threw",
 					error: err instanceof Error ? err.message : String(err)
 				}
@@ -70627,7 +71016,17 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 	*  the FULL cleanup litany on every teardown path (and cancels the track's
 	*  queued captures via the onClose hook) and `closeDevice` finally clears
 	*  per-track state on device removal (the two documented leaks). */
-	residents = new TrackResidentState({ onClose: (trackId) => this.captureScheduler.cancelForTrack(trackId) });
+	residents = new TrackResidentState({ onClose: (trackId) => {
+		this.captureScheduler.cancelForTrack(trackId);
+		this.parkedFrames?.release(trackId);
+	} });
+	/**
+	* The hub's side of a PARK (D422): orders the owning node to keep a track's
+	* best frame the instant `BestDetectionTracker` accepts it, and answers the
+	* keyFrame writer, the best-shot thumbnail and the detail plane's full-frame
+	* rung by `(deviceId, trackId, kind)` — never by handle. Null until init.
+	*/
+	parkedFrames = null;
 	/** Defence in depth for the 2026-08-21 `b50e09f7` incident: a row the track
 	*  store has already CLOSED never earns another media target, whatever the
 	*  tracker keeps handing back. Reads the store's in-RAM close record only —
@@ -71022,17 +71421,23 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 			noteCropOutcome: (deviceId, reason) => this.failureReport.noteEnrichmentCrop(deviceId, reason)
 		});
 		this.getNativeKeyFrameRgb = transport.getNativeKeyFrameRgb;
+		this.parkedFrames = createParkedFrameClient({
+			api: api.pipelineRunner,
+			logger: logger.child("ParkedFrames"),
+			isNodeOffline: (nodeId) => this.nodeLiveness.isKnownOffline(nodeId, Date.now())
+		});
 		this.captureCrop = transport.captureCrop;
 		this.eventMediaDispatcher = new EventMediaDispatcher({
 			getRemoteFrame: transport.getRemoteFrame,
 			getNativeCropJpeg: transport.getNativeCropJpeg,
 			getNativeFullFrameRgb: transport.getNativeFullFrameRgb,
+			getParkedSubjectSlab: (deviceId, trackId) => this.fetchParkedSubjectSlab(deviceId, trackId),
 			mediaStore: stores.mediaStore,
 			logger: logger.child("EventMediaDispatcher"),
 			onSubjectCropMiss: (deviceId, trackId, reason) => this.residents.notePreviewCaptureMiss(deviceId, trackId, `thumbnail:${reason}`)
 		});
 		this.buildRecognizers(api, logger, stores, transport);
-		this.buildDetailDispatcher(api, logger, transport);
+		this.buildDetailDispatcher(api, logger);
 		const capProviders = this.buildAnalyticsProviders(api, logger);
 		await step("buildNotificationCenter", () => this.buildNotificationCenter(api, logger, stores));
 		await step("serveEventMediaDataPlane", () => this.serveEventMediaDataPlane());
@@ -71862,7 +72267,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 	*  demand via `pipelineRunner.runDetailSubtree`. The dispatcher owns the
 	*  per-device schedulers, concurrency cap, and 1 s tick; result routing +
 	*  the pinned call + crop fallback are injected here. */
-	buildDetailDispatcher(api, logger, transport) {
+	buildDetailDispatcher(api, logger) {
 		const runnerApi = api.pipelineRunner;
 		this.detailDispatcher = new TrackDetailDispatcher({
 			logger: logger.child("DetailDispatcher"),
@@ -71872,13 +72277,16 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 				return runnerApi.runDetailSubtree.mutate(input);
 			},
 			routeResults: (deviceId, trackId, details, frame) => this.routeDetailResults(deviceId, trackId, details, frame),
-			captureFullFrameBase64: async (frame) => {
-				if (frame.frameHandle === void 0) return null;
-				const full = await transport.getFullFrameJpegBase64(frame.frameHandle, frame.frameWidth);
-				return full === null ? null : {
-					base64: full.base64,
-					width: full.width,
-					height: full.height
+			captureParkedFrame: async (_deviceId, trackId) => {
+				const parcel = await this.fetchParkedParcel(trackId, "keyFrame");
+				if (parcel === null) return null;
+				return {
+					base64: parcel.jpeg.toString("base64"),
+					width: parcel.width,
+					height: parcel.height,
+					bbox: scaleSubjectIntoParcel(parcel.info.subject, parcel.width, parcel.height),
+					nodeId: parcel.info.nodeId,
+					timestamp: parcel.timestamp
 				};
 			},
 			captureCropBase64: async (frame) => {
@@ -73520,6 +73928,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 		this.audioMarkers?.flush(Date.now());
 		this.detailDispatcher?.dispose();
 		this.detailDispatcher = null;
+		this.parkedFrames?.dispose();
 		this.overlayState.clear();
 		this.overlaySynthesisWarnAt.clear();
 		this.processors.clear();
@@ -74178,7 +74587,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 			let plateCrops = 0;
 			for (const crops of childCropsByEvent.values()) for (const c of crops) if (c.kind === "faceCrop") faceCrops += 1;
 			else plateCrops += 1;
-			const snapshotTargets = this.buildSnapshotTargets(deviceId, result.tracked, result.timestamp, mediaSettings, result.frameWidth, result.frameHeight);
+			const snapshotTargets = this.buildSnapshotTargets(deviceId, result.tracked, result.timestamp, mediaSettings, result.frameWidth, result.frameHeight, frameHandle);
 			this.offerGroupShot(deviceId, result, frameHandle);
 			for (const retry of this.collectFirstFrameRetries(deviceId, result.tracked, result.timestamp, firstFrameTargets)) firstFrameTargets.push(retry);
 			const targetedThisFrame = new Set([...firstFrameTargets.map((t) => t.trackId), ...snapshotTargets.map((s) => s.trackId)]);
@@ -74297,7 +74706,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 				}).catch(() => {});
 			}
 			const keyFrameCaptures = selectKeyFrameCaptures(snapshotTargets);
-			if (keyFrameCaptures.length > 0) this.persistKeyFrames(deviceId, result.timestamp, keyFrameCaptures, frameHandle);
+			if (keyFrameCaptures.length > 0) this.persistKeyFrames(deviceId, result.timestamp, keyFrameCaptures);
 		}
 		if (this.faceRecognizer && faceGloballyEnabled && faceSettings) this.faceRecognizer.processFrame({
 			deviceId,
@@ -75227,10 +75636,46 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 			});
 		}).catch(() => {});
 	}
-	async persistKeyFrames(deviceId, timestamp, captures, frameHandle) {
-		const getNative = this.getNativeKeyFrameRgb;
+	/**
+	* Order the parcels a best-frame decision wants (D422). Skipped entirely at
+	* a node the registry already called offline (D58) — logged on the
+	* transition by `noteCapturesGated`, counted in the key-frame window.
+	* `onlyIfMissing` is the retry rule: a later frame may fill a kind that has
+	* no parcel, never replace one the ranking preferred.
+	*/
+	issueParkOrders(decision, kinds, onlyIfMissing) {
+		const client = this.parkedFrames;
+		if (client === null) return;
+		if (this.nodeLiveness.isKnownOffline(decision.frameHandle.nodeId, Date.now())) {
+			this.noteCapturesGated(decision.deviceId, decision.frameHandle.nodeId);
+			return;
+		}
+		for (const order of buildParkOrders(decision)) {
+			if (!kinds.includes(order.kind)) continue;
+			if (onlyIfMissing && client.info(order.trackId, order.kind) !== void 0) continue;
+			client.park(order);
+		}
+	}
+	/** A parcel by track, after any park in flight for it has landed. */
+	async fetchParkedParcel(trackId, kind) {
+		const client = this.parkedFrames;
+		if (client === null) return null;
+		await client.awaitPark(trackId, kind);
+		return client.fetch(trackId, kind);
+	}
+	/** The best-shot slab for the dispatcher: the parcel plus the layout the hub kept. */
+	async fetchParkedSubjectSlab(_deviceId, trackId) {
+		const parcel = await this.fetchParkedParcel(trackId, "thumbnail");
+		if (parcel === null || parcel.info.layout === void 0) return null;
+		return {
+			slab: parcel.jpeg,
+			layout: parcel.info.layout,
+			timestamp: parcel.timestamp
+		};
+	}
+	async persistKeyFrames(deviceId, timestamp, captures) {
 		const mediaStore = this.mediaStore;
-		if (!getNative || !mediaStore) return;
+		if (this.parkedFrames === null || !mediaStore) return;
 		await Promise.all(captures.map((capture) => this.captureScheduler.request({
 			deviceId,
 			trackId: capture.trackId,
@@ -75240,16 +75685,23 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 			exec: async () => {
 				this.residents.noteKeyFrameAttempt(deviceId, capture.trackId, timestamp, capture.retry);
 				const outcome = await persistTrackKeyFrame({
-					fetchNativeFullFrame: getNative,
-					encodeVariants: encodeKeyFrameVariants,
+					fetchParkedKeyFrame: async (parcelDeviceId, trackId) => {
+						const parcel = await this.fetchParkedParcel(trackId, "keyFrame");
+						if (parcel === null || parcel.info.deviceId !== parcelDeviceId) return null;
+						return {
+							jpeg: parcel.jpeg,
+							width: parcel.width,
+							height: parcel.height,
+							timestamp: parcel.timestamp,
+							nodeId: parcel.info.nodeId
+						};
+					},
+					deriveSmall: deriveKeyFrameSmall,
 					media: mediaStore,
 					logger: this.ctx.logger
 				}, {
 					deviceId,
 					trackId: capture.trackId,
-					timestamp,
-					frameHandle,
-					maxWidth: KEYFRAME_NATIVE_MAX_WIDTH,
 					retry: capture.retry
 				});
 				if (outcome.kind === "landed") {
@@ -75329,10 +75781,19 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 			isKeyFrameLanded: (trackId) => this.residents.keyFrameCapture(trackId).landed,
 			captureBodyThumbnail: (req) => this.captureHierarchyBodyThumbnail(req),
 			captureKeyFrame: async (req) => {
+				this.issueParkOrders({
+					deviceId: req.deviceId,
+					trackId: req.trackId,
+					timestamp: req.timestamp,
+					frameHandle: req.frameHandle,
+					bbox: { ...req.bodyBbox },
+					frameWidth: req.frameWidth,
+					frameHeight: req.frameHeight
+				}, ["keyFrame"], true);
 				await this.persistKeyFrames(req.deviceId, req.timestamp, [{
 					trackId: req.trackId,
 					retry: false
-				}], req.frameHandle);
+				}]);
 			}
 		}, input);
 	}
@@ -75386,10 +75847,19 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 	*  (coalescing, per-device budget and land-only bookkeeping identical). */
 	captureSemanticBestShot(request) {
 		const { deviceId, trackId, timestamp, bbox, frameHandle } = request;
+		this.issueParkOrders({
+			deviceId,
+			trackId,
+			timestamp,
+			frameHandle,
+			bbox: { ...bbox },
+			frameWidth: request.frameWidth,
+			frameHeight: request.frameHeight
+		}, ["keyFrame", "thumbnail"], false);
 		this.persistKeyFrames(deviceId, timestamp, [{
 			trackId,
 			retry: false
-		}], frameHandle);
+		}]);
 		const dispatcher = this.eventMediaDispatcher;
 		if (!dispatcher) return;
 		if (this.captureScheduler.isKeyActive(captureCoalesceKey(deviceId, "thumbnail", trackId))) {
@@ -75540,7 +76010,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 		}
 		return retries;
 	}
-	buildSnapshotTargets(deviceId, tracked, timestamp, media, frameWidth, frameHeight) {
+	buildSnapshotTargets(deviceId, tracked, timestamp, media, frameWidth, frameHeight, frameHandle) {
 		const targets = [];
 		for (const t of tracked) {
 			if (t.matchedThisFrame === false) continue;
@@ -75626,6 +76096,29 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 				state: this.residents.keyFrameCapture(t.trackId),
 				now: timestamp
 			}).kind;
+			if (frameHandle !== void 0 && plausibleBox) {
+				const decision = {
+					deviceId,
+					trackId: t.trackId,
+					timestamp,
+					frameHandle,
+					bbox: {
+						x: t.bbox.x,
+						y: t.bbox.y,
+						w: t.bbox.w,
+						h: t.bbox.h
+					},
+					frameWidth,
+					frameHeight
+				};
+				if (isNewBest) this.issueParkOrders(decision, ["keyFrame", "thumbnail"], false);
+				else {
+					const retryKinds = [];
+					if (keyFrame === "retry") retryKinds.push("keyFrame");
+					if (bestThumbnail) retryKinds.push("thumbnail");
+					if (retryKinds.length > 0) this.issueParkOrders(decision, retryKinds, true);
+				}
+			}
 			const suppressedBy = (() => {
 				if (skipParkedThumb) return "parked-thumbnail";
 				if (!isNewBest || bestThumbnail) return void 0;
@@ -77041,6 +77534,15 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 					}
 				});
 			});
+			p.setZoneRefusalObserver((observation) => {
+				this.ctx.logger.info("detection refused inside a watched zone — not notified", {
+					tags: { deviceId },
+					meta: {
+						source,
+						...observation
+					}
+				});
+			});
 			p.setSpawnBesideCoastingObserver((record) => {
 				this.ctx.logger.info("tracker: new id minted beside a live coasting track", {
 					tags: { deviceId },