@camstack/addon-post-analysis 1.2.286 → 1.2.287

package/dist/pipeline-analytics/index.mjs

@@ -1,4 +1,4 @@
-import { $ as NcRuleSchema, $n as EventCategory, $t as isSourceCap, A as LabelAttributionSchema, An as canonicalHash, At as audioMetricsCapability, B as NC_DEFAULT_SNOOZE_MINUTES, Bt as embeddingRefusalOf, C as EMBEDDING_REQUIREMENTS_FAILED, Cn as systemEventFilterApplies, Ct as TimelapseRuleInputSchema, D as FIRST_LEVEL_MACRO_CLASSES, Dn as vectorDimFromBase64, Dt as addonWidgetsSourceCapability, E as EVENT_OWNER_TYPES, En as templateVarsFor, Et as TrackSourceSchema, F as MOTION_CLOSE_AFTER_MS, Fn as customAction, Ft as deriveRecordingMode, G as NC_TAXONOMY, Gn as discriminatedUnion, Gt as evictionPolicyOfLocation, Hn as _enum, I as MediaFileKindEnum, In as defineCustomActions, It as describeSystemEventDeliveryProblem, J as NcAlarmSettingsPatchSchema, Jn as object, Jt as isDetectionMacroClass, K as NC_TEMPLATE_VARS, Kn as literal, Kt as faceGalleryCapability, L as NC_ALARM_SYSTEM_EVENT_KINDS, Ln as hydrateSchema, Lt as describeSystemEventFamilyProblem, M as MAX_ARCHIVED_DEBUG_NOTES, Mn as CamProfileSchema, Mt as buildEventKindDescriptor, N as MAX_BIRTH_DECISION_RECORDS, Nn as DeviceType, Nt as consumableLowPercentOf, O as FULL_IMAGE_BBOX, On as zoneAnalyticsCapability, Ot as alarmPanelCapability, Pn as createEvent, Pt as cosineSimilarity$1, Q as NcRulePatchSchema, Qn as unknown, Qt as isScheduleActive, R as NC_CONDITION_CATALOG, Rn as isDeviceScopedCap, S as EMBEDDING_MODEL_FAILED, Sn as systemEventFamilyProblems, St as TIMELAPSE_DENSE_FLOOR_SEC, T as EVENT_KIND_BY_CAP, Tn as templateCarriesSummary, Tt as TimelapseRuleSchema, U as NC_SYSTEM_EVENT_KIND_GROUP_SPECS, Un as array, Ut as encodeVectorBase64, V as NC_SENSOR_TRANSITION_KINDS, Vn as sleep$1, W as NC_TANK_SYSTEM_EVENT_KINDS, Wn as boolean, Wt as evaluateSensorEdge, X as NcConditionsSchema, Xn as record, Xt as isKnownTemplateVar, Y as NcConditionDescriptorSchema, Yn as partialRecord, Yt as isEventOwnerType, Z as NcRuleInputSchema, Zn as string, Zt as isMediaOwnerType, _n as sensorRaisedOf, a as CLIP_EMBEDDING_STEP_ID, an as notificationRulesCapability, at as NcSnoozeSuppressedSchema, bn as subKindsOf, bt as SCENE_DIVERGED, c as resolveClusterModelPin, cn as pipelineAnalyticsCapability, ct as NcTemplatePreviewInputSchema, d as ArchivedDebugNoteSchema, dn as readTimelapseGeneratedAt, dt as OpsLogEntrySchema, en as isSystemDelivery, et as NcRuleTargetSchema, f as BaseDevice, fn as resolveClipSearchMinScore, g as DEFAULT_EVENT_COLOR, gn as sceneMonitorCapability, gt as RetrainStatusSchema, h as CoverStateSchema, hn as ruleBelongsToAlarm$1, ht as RebuildObjectEmbeddingsRefusalSchema, in as mayWriteToLocation, it as NcSnoozeSchema, j as LockStateSchema, jn as BaseAddon, jt as audioModeOf, k as FailureCounters, kn as errMsg$1, kt as assertTimelapseCadences, l as AUDIO_MACRO_LABELS, ln as plateGalleryCapability, lt as NcTemplatePreviewSchema, m as COCO_TO_MACRO, mt as RECORDING_SOURCE_CAMSTACK_ADDON, nn as isVectorIndexDimConflict, nt as NcScheduleSchema, o as FACE_EMBEDDING_STEP_ID, on as occupancyScope, ot as NcSystemEventKindSchema, p as BirthDecisionRecordSchema, pn as resolveLocationMode, pt as RECORDING_EXPORT_MAX_READ_BYTES, q as NcAlarmConfigSchema, qn as number, qt as failureContributionCapability, rn as kebabToCamel, rt as NcSnoozeInputSchema, s as readClusterModelPinStrict, st as NcTaxonomySchema, t as BUILTIN_CLIP_MODELS, tn as isSystemEventSummaryRule, tt as NcRuleUpdateInputSchema, u as AlarmArmModeSchema, un as readDeviceStateFrom, ut as NcTemplateVarDescriptorSchema, vn as servedTemplateVars, vt as SCENE_DEFAULT_ANCHOR_THRESHOLD, w as EMBEDDING_REQUIREMENTS_UNAVAILABLE, wn as systemEventSummaryScheduleOf, wt as TimelapseRulePatchSchema, x as DeclaredDevices, xn as systemEventDeliveryProblems, xt as SceneMonitorSchema, y as DETECTION_MACRO_CLASSES, yn as storageOccupancyCapability, yt as SCENE_DEFAULT_UNCOVERED_POLICY, z as NC_CONSUMABLE_SYSTEM_EVENT_KINDS, zn as nodePin } from "../clip-model-registry-D4mC2M7F.mjs";
+import { $ as NcRuleSchema, $n as EventCategory, $t as isSourceCap, A as LabelAttributionSchema, An as canonicalHash, At as audioMetricsCapability, B as NC_DEFAULT_SNOOZE_MINUTES, Bt as embeddingRefusalOf, C as EMBEDDING_REQUIREMENTS_FAILED, Cn as systemEventFilterApplies, Ct as TimelapseRuleInputSchema, D as FIRST_LEVEL_MACRO_CLASSES, Dn as vectorDimFromBase64, Dt as addonWidgetsSourceCapability, E as EVENT_OWNER_TYPES, En as templateVarsFor, Et as TrackSourceSchema, F as MOTION_CLOSE_AFTER_MS, Fn as customAction, Ft as deriveRecordingMode, G as NC_TAXONOMY, Gn as discriminatedUnion, Gt as evictionPolicyOfLocation, Hn as _enum, I as MediaFileKindEnum, In as defineCustomActions, It as describeSystemEventDeliveryProblem, J as NcAlarmSettingsPatchSchema, Jn as object, Jt as isDetectionMacroClass, K as NC_TEMPLATE_VARS, Kn as literal, Kt as faceGalleryCapability, L as NC_ALARM_SYSTEM_EVENT_KINDS, Ln as hydrateSchema, Lt as describeSystemEventFamilyProblem, M as MAX_ARCHIVED_DEBUG_NOTES, Mn as CamProfileSchema, Mt as buildEventKindDescriptor, N as MAX_BIRTH_DECISION_RECORDS, Nn as DeviceType, Nt as consumableLowPercentOf, O as FULL_IMAGE_BBOX, On as zoneAnalyticsCapability, Ot as alarmPanelCapability, Pn as createEvent, Pt as cosineSimilarity$1, Q as NcRulePatchSchema, Qn as unknown, Qt as isScheduleActive, R as NC_CONDITION_CATALOG, Rn as isDeviceScopedCap, S as EMBEDDING_MODEL_FAILED, Sn as systemEventFamilyProblems, St as TIMELAPSE_DENSE_FLOOR_SEC, T as EVENT_KIND_BY_CAP, Tn as templateCarriesSummary, Tt as TimelapseRuleSchema, U as NC_SYSTEM_EVENT_KIND_GROUP_SPECS, Un as array, Ut as encodeVectorBase64, V as NC_SENSOR_TRANSITION_KINDS, Vn as sleep$1, W as NC_TANK_SYSTEM_EVENT_KINDS, Wn as boolean, Wt as evaluateSensorEdge, X as NcConditionsSchema, Xn as record, Xt as isKnownTemplateVar, Y as NcConditionDescriptorSchema, Yn as partialRecord, Yt as isEventOwnerType, Z as NcRuleInputSchema, Zn as string, Zt as isMediaOwnerType, _n as sensorRaisedOf, a as CLIP_EMBEDDING_STEP_ID, an as notificationRulesCapability, at as NcSnoozeSuppressedSchema, bn as subKindsOf, bt as SCENE_DIVERGED, c as resolveClusterModelPin, cn as pipelineAnalyticsCapability, ct as NcTemplatePreviewInputSchema, d as ArchivedDebugNoteSchema, dn as readTimelapseGeneratedAt, dt as OpsLogEntrySchema, en as isSystemDelivery, et as NcRuleTargetSchema, f as BaseDevice, fn as resolveClipSearchMinScore, g as DEFAULT_EVENT_COLOR, gn as sceneMonitorCapability, gt as RetrainStatusSchema, h as CoverStateSchema, hn as ruleBelongsToAlarm$1, ht as RebuildObjectEmbeddingsRefusalSchema, in as mayWriteToLocation, it as NcSnoozeSchema, j as LockStateSchema, jn as BaseAddon, jt as audioModeOf, k as FailureCounters, kn as errMsg$1, kt as assertTimelapseCadences, l as AUDIO_MACRO_LABELS, ln as plateGalleryCapability, lt as NcTemplatePreviewSchema, m as COCO_TO_MACRO, mt as RECORDING_SOURCE_CAMSTACK_ADDON, nn as isVectorIndexDimConflict, nt as NcScheduleSchema, o as FACE_EMBEDDING_STEP_ID, on as occupancyScope, ot as NcSystemEventKindSchema, p as BirthDecisionRecordSchema, pn as resolveLocationMode, pt as RECORDING_EXPORT_MAX_READ_BYTES, q as NcAlarmConfigSchema, qn as number, qt as failureContributionCapability, rn as kebabToCamel, rt as NcSnoozeInputSchema, s as readClusterModelPinStrict, st as NcTaxonomySchema, t as BUILTIN_CLIP_MODELS, tn as isSystemEventSummaryRule, tt as NcRuleUpdateInputSchema, u as AlarmArmModeSchema, un as readDeviceStateFrom, ut as NcTemplateVarDescriptorSchema, vn as servedTemplateVars, vt as SCENE_DEFAULT_ANCHOR_THRESHOLD, w as EMBEDDING_REQUIREMENTS_UNAVAILABLE, wn as systemEventSummaryScheduleOf, wt as TimelapseRulePatchSchema, x as DeclaredDevices, xn as systemEventDeliveryProblems, xt as SceneMonitorSchema, y as DETECTION_MACRO_CLASSES, yn as storageOccupancyCapability, yt as SCENE_DEFAULT_UNCOVERED_POLICY, z as NC_CONSUMABLE_SYSTEM_EVENT_KINDS, zn as nodePin } from "../clip-model-registry-BRHeTbFV.mjs";
 import { t as __exportAll } from "../embedding-encoder/index.mjs";
 import * as fs from "node:fs";
 import { promises } from "node:fs";
@@ -82,7 +82,7 @@ function motionEpisodeDurationMs(state) {
 }
 //#endregion
 //#region src/pipeline-analytics/motion-episode-tracker.ts
-function keyOf$1(deviceId, source) {
+function keyOf$2(deviceId, source) {
 	return `${deviceId}:${source}`;
 }
 var MotionEpisodeTracker = class {
@@ -98,7 +98,7 @@ var MotionEpisodeTracker = class {
 	* {@link MotionEpisodeInsertInput}.
 	*/
 	async observe(deviceId, source, detected, timestamp, regionData) {
-		const key = keyOf$1(deviceId, source);
+		const key = keyOf$2(deviceId, source);
 		const prior = this.signals.get(key);
 		const decision = decideMotionSignal(prior, detected, timestamp);
 		switch (decision.kind) {
@@ -12773,14 +12773,14 @@ var NcPruneRecordSchema = object({
 });
 /** Rules × deleted subjects — small; a generous ceiling. */
 var LOAD_LIMIT$4 = 1e4;
-function keyOf(row) {
+function keyOf$1(row) {
 	return `${row.kind}:${row.ruleId}:${row.field}:${row.subject}`;
 }
 var NC_DEVICE_PRUNES_SPEC = {
 	collection: NC_DEVICE_PRUNES_COLLECTION,
 	columns: [...NC_DEVICE_PRUNES_COLUMNS],
 	writeMode: "write-through",
-	keyOf,
+	keyOf: keyOf$1,
 	toValue: (row) => ({
 		ruleId: row.ruleId,
 		at: row.at,
@@ -12820,7 +12820,7 @@ var NcPruneLedger = class {
 	* {@link isLoaded} as it was — see the module docblock.
 	*/
 	async load() {
-		const heldBefore = new Set(this.ledger.snapshot().map(keyOf));
+		const heldBefore = new Set(this.ledger.snapshot().map(keyOf$1));
 		const startedAt = this.writes;
 		const writtenSince = (key) => (this.writtenAt.get(key) ?? 0) > startedAt;
 		try {
@@ -12831,7 +12831,7 @@ var NcPruneLedger = class {
 			const next = /* @__PURE__ */ new Map();
 			for (const record of records) {
 				const row = NC_DEVICE_PRUNES_SPEC.fromRecord(record.id, record.data);
-				if (row !== null) next.set(keyOf(row), row);
+				if (row !== null) next.set(keyOf$1(row), row);
 			}
 			for (const key of heldBefore) if (!next.has(key) && !writtenSince(key)) this.ledger.evict(key);
 			for (const [key, row] of next) if (!writtenSince(key)) this.ledger.stage(row);
@@ -12861,7 +12861,7 @@ var NcPruneLedger = class {
 	*/
 	async record(notes, source, at) {
 		for (const note of notes) {
-			const held = this.ledger.get(keyOf(note));
+			const held = this.ledger.get(keyOf$1(note));
 			if (held !== void 0 && KEPT_OUTCOMES.has(held.outcome) && !KEPT_OUTCOMES.has(note.outcome)) continue;
 			const row = NcPruneRecordSchema.parse({
 				...note,
@@ -12869,7 +12869,7 @@ var NcPruneLedger = class {
 				source
 			});
 			this.writes += 1;
-			this.writtenAt.set(keyOf(row), this.writes);
+			this.writtenAt.set(keyOf$1(row), this.writes);
 			await this.ledger.put(row);
 		}
 	}
@@ -39685,6 +39685,87 @@ var ReembedFacesInputSchema = object({
 	/** Run every embed on ONE named node instead of rotating the fleet. Data, not a pin. */
 	executeOnNodeId: string().optional()
 });
+/**
+* D658: re-embed each sample's stored template with ONE pinned model and
+* compare with the stored vector — does the stamp say what produced it?
+* Read-only: it reports and writes nothing.
+*/
+var AuditFaceEmbeddingsInputSchema = object({
+	/** The stamp to verify. Omit for `auraface-r100` (the D651 default). */
+	modelId: string().min(1).optional(),
+	/** Only this identity's samples. */
+	identityId: string().min(1).optional(),
+	/** Stop after this many measured samples. */
+	maxSamples: number().int().positive().optional(),
+	/** Run every embed on ONE named node instead of rotating the fleet. Data, not a pin. */
+	executeOnNodeId: string().optional()
+});
+var AuditFaceEmbeddingsResultSchema = object({
+	auditedModelId: string(),
+	total: number(),
+	ok: number(),
+	mismatch: number(),
+	inconclusive: number(),
+	unmeasurable: number(),
+	complete: boolean(),
+	okMinCosine: number(),
+	mismatchMaxCosine: number(),
+	rows: array(object({
+		sampleId: string(),
+		identityId: string(),
+		identityName: string(),
+		stampedModelId: string(),
+		verdict: _enum([
+			"ok",
+			"mismatch",
+			"inconclusive",
+			"unmeasurable"
+		]),
+		cosine: number().optional(),
+		reason: _enum([
+			"stamped-other-model",
+			"no-pixels",
+			"no-stored-vector",
+			"embed-failed",
+			"no-capable-node",
+			"dimension-differs"
+		]).optional(),
+		detail: string().optional()
+	}))
+});
+/**
+* D658: re-embed EXACTLY these samples with ONE pinned model, replacing their
+* vectors even when already stamped with it — the repair for what
+* `faceGallery.auditEmbeddings` accuses. See `face-sample-reembed.ts`.
+*/
+var ReembedSamplesInputSchema = object({
+	sampleIds: array(string().min(1)).min(1).max(200),
+	modelId: string().min(1),
+	/** Run every embed on ONE named node instead of rotating the fleet. Data, not a pin. */
+	executeOnNodeId: string().optional()
+});
+var ReembedSamplesResultSchema = object({
+	pinnedModelId: string(),
+	requested: number(),
+	reembedded: number(),
+	failed: number(),
+	rows: array(object({
+		sampleId: string(),
+		outcome: _enum([
+			"reembedded",
+			"not-found",
+			"duplicate",
+			"no-pixels",
+			"embed-failed",
+			"no-capable-node",
+			"no-model-stamp",
+			"not-landed"
+		]),
+		previousModelId: string().optional(),
+		modelId: string().optional(),
+		detail: string().optional()
+	}))
+});
 /** Mirrors `FaceReembedResult` (`face-reembed-pass.ts`) minus the sample-id set. */
 var ReembedFacesResultSchema = object({
 	targetModelId: string(),
@@ -39936,11 +40017,256 @@ var embeddingActions = defineCustomActions({
 	"embedding.faceAlignmentStatus": customAction(NoInputSchema$1, FaceAlignmentStatusSchema),
 	"embedding.backfillPhotoSources": customAction(BackfillPhotoSourcesInputSchema, BackfillPhotoSourcesResultSchema, { auth: "admin" }),
 	"faceGallery.sourceFrameStats": customAction(NoInputSchema$1, SourceFrameStatsSchema),
+	"faceGallery.reembedSamples": customAction(ReembedSamplesInputSchema, ReembedSamplesResultSchema, {
+		kind: "mutation",
+		auth: "admin"
+	}),
+	"faceGallery.auditEmbeddings": customAction(AuditFaceEmbeddingsInputSchema, AuditFaceEmbeddingsResultSchema, { auth: "admin" }),
 	"faceGallery.resetToCore": customAction(ResetToCoreInputSchema, ResetToCoreResultSchema, {
 		kind: "mutation",
 		auth: "admin"
 	})
 });
+async function reembedOne(deps, sample, pinned) {
+	const base = {
+		sampleId: sample.sampleId,
+		previousModelId: sample.modelId
+	};
+	const crop = await deps.loadAlignedCrop(sample);
+	if (crop === null) return {
+		...base,
+		outcome: "no-pixels"
+	};
+	const outcome = await deps.embed(sample, crop);
+	if (outcome.kind === "failed") return {
+		...base,
+		outcome: "embed-failed",
+		detail: outcome.reason
+	};
+	if (outcome.kind === "no-capable-node") return {
+		...base,
+		outcome: "no-capable-node",
+		detail: outcome.reason
+	};
+	if (outcome.modelId === void 0 || outcome.modelId === "") return {
+		...base,
+		outcome: "no-model-stamp",
+		detail: "the embed answered no model id"
+	};
+	if (outcome.modelId !== pinned) return {
+		...base,
+		outcome: "embed-failed",
+		detail: `ran "${outcome.modelId}" for a call pinned to "${pinned}"`
+	};
+	const write = await deps.store(sample, outcome.embedding, outcome.modelId, outcome.dim);
+	if (!write.landed) return {
+		...base,
+		outcome: "not-landed",
+		detail: write.reason ?? "the write did not land"
+	};
+	return {
+		...base,
+		outcome: "reembedded",
+		modelId: outcome.modelId
+	};
+}
+async function reembedFaceSamples(deps, options) {
+	const pinned = options.modelId;
+	const byId = new Map((await deps.listSamples()).map((s) => [s.sampleId, s]));
+	const pacingMs = options.pacingMs ?? 25;
+	const seen = /* @__PURE__ */ new Set();
+	const rows = [];
+	let noNode = null;
+	deps.logger.info("face sample re-embed starting", { meta: {
+		pinnedModelId: pinned,
+		requested: options.sampleIds.length
+	} });
+	for (const sampleId of options.sampleIds) {
+		if (seen.has(sampleId)) {
+			rows.push({
+				sampleId,
+				outcome: "duplicate"
+			});
+			continue;
+		}
+		seen.add(sampleId);
+		const sample = byId.get(sampleId);
+		if (sample === void 0) {
+			rows.push({
+				sampleId,
+				outcome: "not-found"
+			});
+			continue;
+		}
+		if (noNode !== null) {
+			rows.push({
+				sampleId,
+				previousModelId: sample.modelId,
+				outcome: "no-capable-node",
+				detail: noNode
+			});
+			continue;
+		}
+		const row = await reembedOne(deps, sample, pinned);
+		if (row.outcome === "no-capable-node") noNode = row.detail ?? "no capable node";
+		if (row.outcome !== "reembedded") deps.logger.warn("face sample re-embed: sample NOT re-embedded", { meta: {
+			sampleId,
+			outcome: row.outcome,
+			detail: row.detail ?? null,
+			pinnedModelId: pinned
+		} });
+		rows.push(row);
+		await deps.pause(pacingMs);
+	}
+	const reembedded = rows.filter((r) => r.outcome === "reembedded").length;
+	deps.logger.info("face sample re-embed finished", { meta: {
+		pinnedModelId: pinned,
+		requested: options.sampleIds.length,
+		reembedded,
+		failed: rows.length - reembedded
+	} });
+	return {
+		pinnedModelId: pinned,
+		requested: options.sampleIds.length,
+		reembedded,
+		failed: rows.length - reembedded,
+		rows
+	};
+}
+//#endregion
+//#region src/pipeline-analytics/face-embedding-audit.ts
+/** At or above: the stored vector is this model's. */
+var AUDIT_OK_MIN_COSINE = .98;
+/** Below: the stored vector is NOT this model's. Between the two: inconclusive. */
+var AUDIT_MISMATCH_MAX_COSINE = .9;
+/** Cosine of two vectors of equal length; `null` when either has no length. */
+function cosine(a, b) {
+	let dot = 0;
+	let na = 0;
+	let nb = 0;
+	for (let i = 0; i < a.length; i++) {
+		const x = a[i] ?? 0;
+		const y = b[i] ?? 0;
+		dot += x * y;
+		na += x * x;
+		nb += y * y;
+	}
+	if (na === 0 || nb === 0) return null;
+	return dot / Math.sqrt(na * nb);
+}
+/** The verdict a measured cosine earns. Pure. */
+function verdictOf(c) {
+	if (c >= .98) return "ok";
+	if (c < .9) return "mismatch";
+	return "inconclusive";
+}
+function rowBase(s) {
+	return {
+		sampleId: s.sampleId,
+		identityId: s.identityId,
+		identityName: s.identityName,
+		stampedModelId: s.modelId
+	};
+}
+async function measure$2(deps, sample, stored) {
+	const base = rowBase(sample);
+	if (stored === void 0) return {
+		...base,
+		verdict: "unmeasurable",
+		reason: "no-stored-vector"
+	};
+	const crop = await deps.loadAlignedCrop(sample);
+	if (crop === null) return {
+		...base,
+		verdict: "unmeasurable",
+		reason: "no-pixels"
+	};
+	const outcome = await deps.embed(sample, crop);
+	if (outcome.kind === "failed") return {
+		...base,
+		verdict: "unmeasurable",
+		reason: "embed-failed",
+		detail: outcome.reason
+	};
+	if (outcome.kind === "no-capable-node") return {
+		...base,
+		verdict: "unmeasurable",
+		reason: "no-capable-node",
+		detail: outcome.reason
+	};
+	if (outcome.embedding.length !== stored.length) return {
+		...base,
+		verdict: "unmeasurable",
+		reason: "dimension-differs",
+		detail: `stored ${stored.length}-d, re-embedded ${outcome.embedding.length}-d`
+	};
+	const c = cosine(outcome.embedding, stored);
+	if (c === null) return {
+		...base,
+		verdict: "unmeasurable",
+		reason: "no-stored-vector",
+		detail: "zero vector"
+	};
+	return {
+		...base,
+		verdict: verdictOf(c),
+		cosine: Math.round(c * 1e4) / 1e4
+	};
+}
+/**
+* Audit every sample stamped with `auditedModelId`. Read-only; bounded by
+* `maxSamples`; a pass-terminal `no-capable-node` stops measuring and reports
+* the rest as unmeasurable rather than asking again per sample.
+*/
+async function auditFaceEmbeddings(deps, options) {
+	const all = await deps.listSamples();
+	const samples = options.identityId === void 0 ? all : all.filter((s) => s.identityId === options.identityId);
+	const inSpace = samples.filter((s) => s.modelId === options.auditedModelId);
+	const stored = await deps.loadStoredVectors(inSpace.map((s) => s.sampleId));
+	const budget = options.maxSamples ?? Number.POSITIVE_INFINITY;
+	const rows = [];
+	let measured = 0;
+	let complete = true;
+	let noNode = null;
+	for (const sample of samples) {
+		if (sample.modelId !== options.auditedModelId) {
+			rows.push({
+				...rowBase(sample),
+				verdict: "unmeasurable",
+				reason: "stamped-other-model"
+			});
+			continue;
+		}
+		if (measured >= budget) {
+			complete = false;
+			continue;
+		}
+		if (noNode !== null) {
+			rows.push({
+				...rowBase(sample),
+				verdict: "unmeasurable",
+				reason: "no-capable-node",
+				detail: noNode
+			});
+			continue;
+		}
+		const row = await measure$2(deps, sample, stored.get(sample.sampleId));
+		if (row.reason === "no-capable-node") noNode = row.detail ?? "no capable node";
+		if (row.cosine !== void 0) measured += 1;
+		rows.push(row);
+	}
+	const count = (v) => rows.filter((r) => r.verdict === v).length;
+	return {
+		auditedModelId: options.auditedModelId,
+		total: samples.length,
+		ok: count("ok"),
+		mismatch: count("mismatch"),
+		inconclusive: count("inconclusive"),
+		unmeasurable: count("unmeasurable"),
+		complete,
+		rows
+	};
+}
 //#endregion
 //#region src/pipeline-analytics/face-alignment-version.ts
 /**
@@ -65931,7 +66257,8 @@ var FaceReembedEmbedder = class {
 			return {
 				kind: "embedded",
 				embedding: vector,
-				dim: vector.length
+				dim: vector.length,
+				modelId: result.modelId
 			};
 		}
 	}
@@ -84222,6 +84549,79 @@ async function resolveSubjectShot(ports, trackId, deviceId, aroundMs) {
 		frameHeight: dims.h
 	};
 }
+var MESSAGES = {
+	"dimension-mismatch": "object embeddings refused — their length is not their model's dimension",
+	"no-clip-metadata": "object embeddings refused — the model has no CLIP metadata",
+	"no-model-id": "object embeddings refused — the result names no model"
+};
+function keyOf(r) {
+	return `${String(r.deviceId)}|${r.modelId ?? ""}|${r.reason}`;
+}
+var EmbeddingRefusalReport = class {
+	logger;
+	intervalMs;
+	now;
+	keys = /* @__PURE__ */ new Map();
+	constructor(options) {
+		this.logger = options.logger;
+		this.intervalMs = options.intervalMs ?? 3e5;
+		this.now = options.now ?? (() => Date.now());
+	}
+	/** Count one refusal; write a line if this key is new or its interval passed. */
+	note(refusal) {
+		const key = keyOf(refusal);
+		const at = this.now();
+		const held = this.keys.get(key);
+		const pending = (held?.pending ?? 0) + 1;
+		if (held === void 0 || at - held.lastLineAtMs >= this.intervalMs) {
+			this.write(refusal, pending, held === void 0 ? "first" : "interval");
+			this.keys = new Map(this.keys).set(key, {
+				last: refusal,
+				pending: 0,
+				lastLineAtMs: at
+			});
+			return;
+		}
+		this.keys = new Map(this.keys).set(key, {
+			...held,
+			last: refusal,
+			pending
+		});
+	}
+	/** Report every key whose interval passed with refusals still pending. */
+	sweep() {
+		const at = this.now();
+		for (const [key, held] of this.keys) {
+			if (held.pending === 0 || at - held.lastLineAtMs < this.intervalMs) continue;
+			this.write(held.last, held.pending, "interval");
+			this.keys = new Map(this.keys).set(key, {
+				...held,
+				pending: 0,
+				lastLineAtMs: at
+			});
+		}
+	}
+	/** Report every pending count now, whatever its interval (shutdown). */
+	flush() {
+		for (const held of this.keys.values()) if (held.pending > 0) this.write(held.last, held.pending, "flush");
+		this.keys = /* @__PURE__ */ new Map();
+	}
+	write(r, refused, closing) {
+		this.logger.warn(MESSAGES[r.reason], {
+			tags: { deviceId: r.deviceId },
+			meta: {
+				reason: r.reason,
+				modelId: r.modelId,
+				refused,
+				windowMs: this.intervalMs,
+				closing,
+				lastTrackId: r.trackId,
+				...r.dim !== void 0 ? { dim: r.dim } : {},
+				...r.expected !== void 0 ? { expected: r.expected } : {}
+			}
+		});
+	}
+};
 //#endregion
 //#region src/pipeline-analytics/store/object-embedding-store.ts
 /**
@@ -84284,10 +84684,33 @@ var ObjectEmbeddingStore = class {
 	clipModels;
 	/** index → the dim this process declared it at. Per index, per process. */
 	declaredDims = /* @__PURE__ */ new Map();
+	/**
+	* Refused writes, COUNTED per (camera, model, reason). A refusal is systemic
+	* — a runner stamping the wrong model refuses every vector it sends — so a
+	* per-track WARN was a flood that hid the one fact that mattered (D658).
+	*/
+	refusals;
 	constructor(deps) {
 		this.vectorStore = deps.vectorStore;
 		this.logger = deps.logger;
 		this.clipModels = deps.clipModels;
+		this.refusals = new EmbeddingRefusalReport({
+			logger: deps.logger,
+			...deps.refusalReportIntervalMs !== void 0 ? { intervalMs: deps.refusalReportIntervalMs } : {},
+			...deps.now !== void 0 ? { now: deps.now } : {}
+		});
+	}
+	/**
+	* Count a write refused BEFORE it reached this store — a detail whose result
+	* named no model (D658). Same report, same rate limit, as the refusals the
+	* store makes itself.
+	*/
+	noteRefused(refusal) {
+		this.refusals.note(refusal);
+	}
+	/** Report every refusal count still pending (shutdown). */
+	flushRefusals() {
+		this.refusals.flush();
 	}
 	/** Every index a delete, scan or wipe must reach. */
 	indexes() {
@@ -84385,19 +84808,28 @@ var ObjectEmbeddingStore = class {
 	* and dropped", because a counter that cannot reads as verification.
 	*/
 	async upsertIfBetter(input) {
+		this.refusals.sweep();
 		const vector = resolveVectorPayload(input);
 		if (vector === null) return "failed";
-		const space = this.spaceOrWarn(input.modelId, "upsert", input.deviceId);
-		if (space === null) return "failed";
+		const space = this.clipModels.spaceFor(input.modelId);
+		if (space === null) {
+			this.refusals.note({
+				deviceId: input.deviceId,
+				modelId: input.modelId,
+				reason: "no-clip-metadata",
+				trackId: input.trackId,
+				dim: vector.dim
+			});
+			return "failed";
+		}
 		if (vector.dim !== space.dim) {
-			this.logger.warn("object embedding refused — its length is not its model's dimension", {
-				tags: { deviceId: input.deviceId },
-				meta: {
-					trackId: input.trackId,
-					modelId: input.modelId,
-					dim: vector.dim,
-					expected: space.dim
-				}
+			this.refusals.note({
+				deviceId: input.deviceId,
+				modelId: input.modelId,
+				reason: "dimension-mismatch",
+				trackId: input.trackId,
+				dim: vector.dim,
+				expected: space.dim
 			});
 			return "failed";
 		}
@@ -84871,6 +85303,30 @@ function rowFromMetadata(id, metadata) {
 	};
 }
 //#endregion
+//#region src/pipeline-analytics/clip-detail-route.ts
+async function routeClipDetailToStore(store, input) {
+	const modelId = input.embeddingModelId;
+	if (modelId === void 0 || modelId === "") {
+		store.noteRefused({
+			deviceId: input.deviceId,
+			modelId: null,
+			reason: "no-model-id",
+			trackId: input.trackId
+		});
+		return "failed";
+	}
+	return store.upsertIfBetter({
+		trackId: input.trackId,
+		deviceId: input.deviceId,
+		timestamp: input.timestamp,
+		className: input.className,
+		embeddingBase64: input.embeddingBase64,
+		modelId,
+		confidence: input.score,
+		...input.keyFrameMediaId !== void 0 ? { keyFrameMediaId: input.keyFrameMediaId } : {}
+	});
+}
+//#endregion
 //#region src/pipeline-analytics/clip-space-plan.ts
 /**
 * Which CLIP feature space a search reads and a rebuild fills — decided in one
@@ -87082,9 +87538,6 @@ var KEYFRAME_CROP_MIN_SUBJECT_IOU = .5;
 *  covers a healthy trail many times over; past it the honest answer is "no
 *  evidence" and the temporal bound takes over. */
 var KEYFRAME_CROP_MAX_SAMPLE_GAP_MS = 1e3;
-/** How long the active CLIP model id (from the embedding-encoder) is cached
-*  before re-reading. */
-var CLIP_MODEL_ID_CACHE_TTL_MS = 6e4;
 var SETTINGS_CACHE_TTL_MS = 5e3;
 /** TTL for the per-node confirmation-gate detector-step cache (the node's
 *  default object-detector step rarely changes). */
@@ -87375,10 +87828,6 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 	overlayState = new OverlayDetailStateStore();
 	/** Throttle state for the "overlay synthesis failed" warn, one per device. */
 	overlaySynthesisWarnAt = /* @__PURE__ */ new Map();
-	/** Active CLIP image-embedding model id (== the text encoder's), TTL-cached.
-	*  Stamped on object-embedding rows from the detail plane so semantic search's
-	*  same-model gate keeps matching. */
-	clipModelIdCache = null;
 	/** Frame-based event/track media (crop + boxed full-frame) from the
 	*  detection-pipeline DECODED frame — the ONLY image source (never the
 	*  snapshot cap). Null when shm frame access is unavailable. */
@@ -91254,6 +91703,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 		await Promise.all([this.drainSensorHandlers(), this.motionEpisodes?.closeAll("addon-shutdown")]);
 		await this.embeddingDispatcher?.stop();
 		this.embeddingDispatcher = null;
+		this.objectEmbeddingStore?.flushRefusals();
 		await this.notificationCenter?.stop();
 		this.notificationCenter = null;
 		for (const id of this.proxies.keys()) this.releaseProxy(id);
@@ -92936,31 +93386,19 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 		});
 	}
 	/** CLIP object-embedding detail → the object-embedding store (semantic
-	*  search). Stamps the active encoder's model id so the same-model search
-	*  gate keeps matching. */
+	*  search), under the model the RUNNER stamped — never a guess (D658). */
 	async routeClipDetail(deviceId, trackId, detail, timestamp) {
 		const store = this.objectEmbeddingStore;
 		if (!store || detail.embedding === void 0) return;
-		const modelId = detail.embeddingModelId ?? await this.resolveClipModelId();
-		if (modelId === null) {
-			this.ctx.logger.debug("clip detail dropped — no active embedding model id", {
-				tags: { deviceId },
-				meta: {
-					trackId,
-					stepId: detail.stepId
-				}
-			});
-			return;
-		}
 		const keyFrameMediaId = this.residents.keyFrameMediaId(trackId);
-		await store.upsertIfBetter({
-			trackId,
+		await routeClipDetailToStore(store, {
 			deviceId,
+			trackId,
 			timestamp,
 			className: detail.className,
-			embedding: decodeEmbeddingBase64(detail.embedding),
-			modelId,
-			confidence: detail.score,
+			score: detail.score,
+			embeddingBase64: detail.embedding,
+			embeddingModelId: detail.embeddingModelId,
 			...keyFrameMediaId !== void 0 ? { keyFrameMediaId } : {}
 		});
 	}
@@ -92989,23 +93427,6 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 			...identityId !== void 0 ? { identityId } : {}
 		});
 	}
-	/** Active CLIP image-embedding model id (== the text encoder's), TTL-cached.
-	*  Returns null when the embedding-encoder cap is unavailable. */
-	async resolveClipModelId() {
-		const now = Date.now();
-		if (this.clipModelIdCache && now < this.clipModelIdCache.expiresAt) return this.clipModelIdCache.value;
-		let value = null;
-		try {
-			value = (await this.ctx.api.embeddingEncoder.getInfo.query())?.modelId ?? null;
-		} catch (err) {
-			this.ctx.logger.debug("resolveClipModelId: getInfo failed", { meta: { error: errMsg$1(err) } });
-		}
-		this.clipModelIdCache = {
-			value,
-			expiresAt: now + CLIP_MODEL_ID_CACHE_TTL_MS
-		};
-		return value;
-	}
 	/**
 	* §5 — decide which active tracks need periodic media THIS frame. Pure over
 	* TrackStore.lastSnapshotAt + the per-track best-confidence map:
@@ -96931,6 +97352,126 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 		}
 	}
 	/**
+	* D658: re-embed EXACTLY the named samples with ONE pinned model, forced
+	* (`face-sample-reembed.ts`) — the repair for what the audit accuses. Shares
+	* the gallery-job exclusion with the re-embed pass, the photo pass and the
+	* reset, and reloads the matcher's gallery when anything landed.
+	*/
+	async reembedFaceGallerySamples(input) {
+		const api = this.ctx.api;
+		if (!api) throw new Error("faceGallery.reembedSamples: the addon API is not available");
+		const identityStore = this.identityStore;
+		if (!identityStore) throw new Error("faceGallery.reembedSamples: the identity store is not ready");
+		const mediaStore = this.mediaStore;
+		if (!mediaStore) throw new Error("faceGallery.reembedSamples: the media store is not ready");
+		if (this.faceReembedRunning) throw new Error("faceGallery.reembedSamples: a face re-embed pass is already running");
+		if (this.faceAlignmentJobs?.isPhotoPassRunning === true) throw new Error("faceGallery.reembedSamples: a photo re-enrol pass is running (D643)");
+		if (this.faceAlignmentJobs?.isResetRunning === true) throw new Error("faceGallery.reembedSamples: a face gallery reset is running (D644)");
+		this.faceReembedRunning = true;
+		try {
+			const embedder = new FaceReembedEmbedder({
+				runStatelessStep: (nodeId, stepInput) => this.runRebuildStepOn(nodeId, stepInput),
+				logger: { warn: (m, e) => this.ctx.logger.warn(m, e) }
+			}, await this.resolveRebuildNodes(api, input.executeOnNodeId), input.modelId);
+			const result = await reembedFaceSamples({
+				listSamples: () => identityStore.listSamplesForReembed(),
+				loadAlignedCrop: async (sample) => {
+					if (sample.mediaId === void 0) return null;
+					try {
+						const file = await mediaStore.getById(sample.mediaId);
+						return file === null ? null : Buffer.from(file.base64, "base64");
+					} catch (err) {
+						this.ctx.logger.warn("face sample re-embed: aligned crop read threw", { meta: {
+							sampleId: sample.sampleId,
+							error: String(err)
+						} });
+						return null;
+					}
+				},
+				embed: (sample, crop) => embedder.embed(sample, crop),
+				store: (sample, embedding, modelId, dim) => identityStore.restampSample({
+					sampleId: sample.sampleId,
+					identityId: sample.identityId,
+					embedding,
+					modelId,
+					dim
+				}),
+				pause: (ms) => new Promise((resolve) => setTimeout(resolve, ms)),
+				logger: {
+					info: (m, e) => this.ctx.logger.info(m, e),
+					warn: (m, e) => this.ctx.logger.warn(m, e)
+				}
+			}, {
+				sampleIds: input.sampleIds,
+				modelId: input.modelId
+			});
+			if (result.reembedded > 0) await this.faceRecognizer?.refreshGallery();
+			return {
+				...result,
+				rows: [...result.rows]
+			};
+		} finally {
+			this.faceReembedRunning = false;
+		}
+	}
+	/**
+	* D658: re-embed each sample's stored template with ONE pinned model and
+	* compare with its stored vector (`face-embedding-audit.ts`). READ-ONLY —
+	* nothing is restamped, re-embedded or removed. The pass pins the model the
+	* caller names (default `auraface-r100`), not the cluster row: the question
+	* is whether a STAMP is true, whatever the cluster runs today.
+	*/
+	async auditFaceGalleryEmbeddings(input) {
+		const api = this.ctx.api;
+		if (!api) throw new Error("faceGallery.auditEmbeddings: the addon API is not available");
+		const identityStore = this.identityStore;
+		if (!identityStore) throw new Error("faceGallery.auditEmbeddings: the identity store is not ready");
+		const mediaStore = this.mediaStore;
+		if (!mediaStore) throw new Error("faceGallery.auditEmbeddings: the media store is not ready");
+		const auditedModelId = input.modelId ?? "auraface-r100";
+		const embedder = new FaceReembedEmbedder({
+			runStatelessStep: (nodeId, stepInput) => this.runRebuildStepOn(nodeId, stepInput),
+			logger: { warn: (m, e) => this.ctx.logger.warn(m, e) }
+		}, await this.resolveRebuildNodes(api, input.executeOnNodeId), auditedModelId);
+		const report = await auditFaceEmbeddings({
+			listSamples: () => identityStore.listSamplesForReembed(),
+			loadStoredVectors: (ids) => identityStore.loadSampleVectors(ids),
+			loadAlignedCrop: async (sample) => {
+				if (sample.mediaId === void 0) return null;
+				try {
+					const file = await mediaStore.getById(sample.mediaId);
+					return file === null ? null : Buffer.from(file.base64, "base64");
+				} catch (err) {
+					this.ctx.logger.warn("face embedding audit: aligned crop read threw", { meta: {
+						sampleId: sample.sampleId,
+						error: String(err)
+					} });
+					return null;
+				}
+			},
+			embed: (sample, crop) => embedder.embed(sample, crop)
+		}, {
+			auditedModelId,
+			...input.identityId !== void 0 ? { identityId: input.identityId } : {},
+			...input.maxSamples !== void 0 ? { maxSamples: input.maxSamples } : {}
+		});
+		this.ctx.logger.info("face embedding audit finished", { meta: {
+			auditedModelId,
+			total: report.total,
+			ok: report.ok,
+			mismatch: report.mismatch,
+			inconclusive: report.inconclusive,
+			unmeasurable: report.unmeasurable,
+			complete: report.complete
+		} });
+		return {
+			...report,
+			okMinCosine: AUDIT_OK_MIN_COSINE,
+			mismatchMaxCosine: AUDIT_MISMATCH_MAX_COSINE,
+			rows: [...report.rows]
+		};
+	}
+	/**
 	* The server-side half of "change the model from any UI and the gallery
 	* follows": if a sample sits outside the cluster space and a pass could
 	* still bring it in, start one. Runs on a timer; converges and goes quiet.
@@ -97453,6 +97994,8 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 					samples: [...result.samples]
 				};
 			},
+			"faceGallery.reembedSamples": async (input) => this.reembedFaceGallerySamples(input),
+			"faceGallery.auditEmbeddings": async (input) => this.auditFaceGalleryEmbeddings(input),
 			"faceGallery.sourceFrameStats": async () => ({ devices: this.faceSourceStats.snapshot().map((d) => ({
 				...d,
 				dropped: { ...d.dropped }