@camstack/addon-post-analysis 1.2.333 → 1.2.335

package/dist/pipeline-analytics/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_clip_model_registry = require("../clip-model-registry-BEh9LdQS.js");
+const require_clip_model_registry = require("../clip-model-registry-BxUHFGUg.js");
 let node_fs = require("node:fs");
 node_fs = require_clip_model_registry.__toESM(node_fs, 1);
 let node_path = require("node:path");
@@ -10754,7 +10754,8 @@ var RAW_CLASS_STEP_ID = "detector:raw-class";
 * Choose the label CANDIDATE a detection offers, and nothing more.
 *
 * An enrichment label (identity, plate text, species, sub-class) takes
-* precedence; otherwise the root detector's raw class, when it ships at all.
+* precedence; otherwise the detector's score-0 linked label (D715); otherwise
+* the root detector's raw class, when it ships at all.
 * Whether the candidate may be WRITTEN — and into which slot — is
 * {@link resolveTieredLabelWrite}'s decision, in `label-tier.ts`. This split is
 * deliberate: the macro-class refusal that shipped on 2026-08-07 used to live
@@ -10773,6 +10774,15 @@ function resolveDetectionLabelCandidate(input) {
 		...top.modelId !== void 0 ? { modelId: top.modelId } : {},
 		decidedAt: input.decidedAt
 	};
+	const linked = input.labels?.find((l) => l.score === 0 && require_clip_model_registry.linkedStepOf(l.stepId) !== void 0 && l.label !== input.className);
+	if (linked !== void 0 && linked.stepId !== void 0) return {
+		text: linked.label,
+		...linked.tier !== void 0 ? { tier: linked.tier } : {},
+		score: 0,
+		stepId: linked.stepId,
+		...linked.modelId !== void 0 ? { modelId: linked.modelId } : {},
+		decidedAt: input.decidedAt
+	};
 	const raw = input.originalClass;
 	if (raw === void 0 || raw === input.className) return void 0;
 	return {
@@ -13510,6 +13520,7 @@ function incomingFromSystemEvent(event, lookup) {
 			return update === null ? null : incomingFromAddonUpdates(facts, [update]);
 		}
 		case "system.restart-completed": return incomingFromServerUpdated(facts, data);
+		case "system.restarting": return incomingFromNodeRestarting(facts, data);
 		case "recording.export.completed": return incomingFromExportCompleted(facts, data);
 		case "backup.run-completed": return incomingFromBackupCompleted(facts, data);
 		default: return null;
@@ -13655,7 +13666,7 @@ function incomingFromServerUpdated(facts, data) {
 	const packageName = stringField(data, "packageName") ?? "@camstack/server";
 	const fromVersion = stringField(data, "fromVersion");
 	const toVersion = stringField(data, "toVersion") ?? versionFromRequestedBy(requestedBy);
-	if (!(kind === "framework-update" || kind === "framework-bulk-update" || requestedBy !== void 0 && requestedBy.startsWith("server-update:") && toVersion !== void 0)) return null;
+	if (!restartIsUpdate(kind, requestedBy, toVersion)) return null;
 	const nodeId = stringField(data, "nodeId") ?? "hub";
 	const bodyKey = toVersion === void 0 ? "system.server-updated.body.plain" : fromVersion === void 0 ? "system.server-updated.body.toOnly" : "system.server-updated.body";
 	return systemSubject({
@@ -13676,6 +13687,69 @@ function incomingFromServerUpdated(facts, data) {
 	});
 }
 /**
+* Is this restart marker (`PendingRestartMarkerPayload`) an UPDATE?
+*
+* A PLAIN node restart travels under the same `server-update:` reason prefix
+* (`RootUpdateService.restartNode` → `server-update: manual restart`), so the
+* prefix alone is not evidence of an update — it needs a version, or a kind
+* that says so. Announcing "Server aggiornato" for a restart is a lie the
+* operator cannot check. ONE predicate for both halves of a restart (D723): the
+* `system.restarting` announcement and the `system.restart-completed` landing
+* must never disagree about whether the same marker was an update.
+*/
+function restartIsUpdate(kind, requestedBy, toVersion) {
+	return kind === "framework-update" || kind === "framework-bulk-update" || requestedBy !== void 0 && requestedBy.startsWith("server-update:") && toVersion !== void 0;
+}
+/**
+* A node announcing its OWN restart, before it exits (D723).
+*
+* The same `system.restarting` payload becomes one of two kinds, split by
+* {@link restartIsUpdate}: `node-updating` names the node and both versions
+* (when known), `node-restarting` names only the node — a plain restart comes
+* back as it was. A payload without `nodeId` is the hub's own (the hub's
+* emit predates the field, exactly as `system.restart-completed` defaults).
+*
+* The `node-updating` subject is keyed like `server-updated`'s
+* (`<node>:<toVersion>`): it is what the delivery gate compares to decide that
+* an announcement which drained only AFTER the landing is stale
+* (`restart-supersede.ts`).
+*/
+function incomingFromNodeRestarting(facts, data) {
+	const kind = stringField(data, "kind");
+	const requestedBy = stringField(data, "requestedBy");
+	const nodeId = stringField(data, "nodeId") ?? "hub";
+	const toVersion = stringField(data, "toVersion") ?? versionFromRequestedBy(requestedBy);
+	if (!restartIsUpdate(kind, requestedBy, toVersion)) return systemSubject({
+		facts,
+		kind: "node-restarting",
+		subject: `node-restart:${nodeId}:${numberField(data, "requestedAt") ?? facts.timestamp}`,
+		titleKey: "system.node-restarting.title",
+		bodyKey: "system.node-restarting.body",
+		textParams: { nodeId },
+		nodeId,
+		nodeIds: [nodeId]
+	});
+	const packageName = stringField(data, "packageName") ?? "@camstack/server";
+	const fromVersion = stringField(data, "fromVersion");
+	const bodyKey = toVersion === void 0 ? "system.node-updating.body.plain" : fromVersion === void 0 ? "system.node-updating.body.toOnly" : "system.node-updating.body";
+	return systemSubject({
+		facts,
+		kind: "node-updating",
+		subject: `node-updating:${nodeId}:${toVersion ?? "unknown"}`,
+		titleKey: "system.node-updating.title",
+		bodyKey,
+		textParams: {
+			packageName,
+			nodeId,
+			...fromVersion !== void 0 ? { fromVersion } : {},
+			...toVersion !== void 0 ? { toVersion } : {}
+		},
+		packageName,
+		nodeId,
+		nodeIds: [nodeId]
+	});
+}
+/**
 * A finished backup RUN.
 *
 * Subject is the run, not the destination: `backup.completed` fires once per
@@ -15504,6 +15578,12 @@ var en_default = {
 	"system.server-updated.body": "{{packageName}} on {{nodeId}} is now {{toVersion}} (was {{fromVersion}})",
 	"system.server-updated.body.toOnly": "{{packageName}} on {{nodeId}} is now {{toVersion}}",
 	"system.server-updated.body.plain": "{{packageName}} on {{nodeId}} was updated",
+	"system.node-restarting.title": "Node restarting — {{nodeId}}",
+	"system.node-restarting.body": "{{nodeId}} is restarting and will be back shortly",
+	"system.node-updating.title": "Node updating — {{nodeId}}",
+	"system.node-updating.body": "{{packageName}} on {{nodeId}} is updating {{fromVersion}} → {{toVersion}} and restarts now",
+	"system.node-updating.body.toOnly": "{{packageName}} on {{nodeId}} is updating to {{toVersion}} and restarts now",
+	"system.node-updating.body.plain": "{{packageName}} on {{nodeId}} is updating and restarts now",
 	"system.export-completed.title": "Export ready",
 	"system.export-completed.body": "The footage export is ready",
 	"system.export-completed.body.titled": "{{title}} is ready",
@@ -15860,6 +15940,12 @@ var it_default = {
 	"system.server-updated.body": "{{packageName}} sul nodo {{nodeId}} è ora {{toVersion}} (era {{fromVersion}})",
 	"system.server-updated.body.toOnly": "{{packageName}} sul nodo {{nodeId}} è ora {{toVersion}}",
 	"system.server-updated.body.plain": "{{packageName}} sul nodo {{nodeId}} è stato aggiornato",
+	"system.node-restarting.title": "Nodo in riavvio — {{nodeId}}",
+	"system.node-restarting.body": "{{nodeId}} si sta riavviando e tornerà a breve",
+	"system.node-updating.title": "Nodo in aggiornamento — {{nodeId}}",
+	"system.node-updating.body": "{{packageName}} sul nodo {{nodeId}} si aggiorna da {{fromVersion}} a {{toVersion}} e si riavvia ora",
+	"system.node-updating.body.toOnly": "{{packageName}} sul nodo {{nodeId}} si aggiorna a {{toVersion}} e si riavvia ora",
+	"system.node-updating.body.plain": "{{packageName}} sul nodo {{nodeId}} si sta aggiornando e si riavvia ora",
 	"system.export-completed.title": "Export pronto",
 	"system.export-completed.body": "L'export del filmato è pronto",
 	"system.export-completed.body.titled": "{{title}} è pronto",
@@ -18312,6 +18398,8 @@ function systemEventSubject(kind, scope) {
 	if (kind === "wrapper-update-available") return `wrapper:${scope.nodeId ?? "hub"}`;
 	if (kind === "addon-updated") return `packages:addon-updated:${scope.packageName ?? "pkg"}`;
 	if (kind === "server-updated") return `server-updated:${scope.nodeId ?? "hub"}`;
+	if (kind === "node-restarting") return `node-restart:${scope.nodeId ?? "hub"}:test`;
+	if (kind === "node-updating") return `node-updating:${scope.nodeId ?? "hub"}:1.0.1`;
 	if (kind === "export-completed") return `export:${scope.deviceId ?? 0}`;
 	if (kind === "backup-completed") return "backup:test";
 	return `alarm:${scope.deviceId ?? 0}`;
@@ -29418,6 +29506,11 @@ function recordToRow$1(key, data) {
 */
 var NC_OUTBOX_COLLECTION = "notification-center:outbox";
 /**
+* The bound on one recent-rows read (`tryQueryRecentPersisted`: the boot hydration and the
+* cooldown reseed). Newest first, so a read that hits it drops the OLDEST rows — and says so.
+*/
+var NC_OUTBOX_RECENT_QUERY_LIMIT = 1e4;
+/**
 * @durable class=ledger owner=notification-center
 *   write="one row, key `watermark`: the boot-reconcile cursor. Advanced to `now` at the
 *     end of every `reconcile()` (each boot) and every 15th drain tick (~30 s) while
@@ -29427,11 +29520,6 @@ var NC_OUTBOX_COLLECTION = "notification-center:outbox";
 *     a bounded re-scan: the reconcile falls back to the 15-minute window and the replay
 *     is idempotent through the outbox dedup id."
 */
-/**
-* The bound on one recent-rows read (`tryQueryRecentPersisted`: the boot hydration and the
-* cooldown reseed). Newest first, so a read that hits it drops the OLDEST rows — and says so.
-*/
-var NC_OUTBOX_RECENT_QUERY_LIMIT = 1e4;
 var NC_META_COLLECTION = "notification-center:meta";
 var NC_WATERMARK_KEY = "watermark";
 var NC_OUTBOX_COLUMNS = [
@@ -31714,6 +31802,50 @@ function buildServerUpdateButtons(input) {
 	}];
 }
 //#endregion
+//#region src/notification-center/restart-supersede.ts
+/** How many landings are remembered — one per node per update, so a fleet's worth. */
+var NC_UPDATE_LANDINGS_MAX = 256;
+function landingKey(nodeId, toVersion) {
+	return `${nodeId}\u0000${toVersion}`;
+}
+var NcUpdateLandings = class {
+	max;
+	/** Insertion-ordered: the oldest landing is the first one evicted. */
+	landed = /* @__PURE__ */ new Map();
+	constructor(max = NC_UPDATE_LANDINGS_MAX) {
+		this.max = max;
+	}
+	/** Feed every system subject the intake accepted; only `server-updated` is kept. */
+	observe(system, atMs) {
+		if (system.kind !== "server-updated") return;
+		const nodeId = system.nodeId;
+		const toVersion = system.textParams?.["toVersion"];
+		if (nodeId === void 0 || toVersion === void 0) return;
+		const key = landingKey(nodeId, toVersion);
+		this.landed.delete(key);
+		this.landed.set(key, atMs);
+		while (this.landed.size > this.max) {
+			const oldest = this.landed.keys().next();
+			if (oldest.done === true) break;
+			this.landed.delete(oldest.value);
+		}
+	}
+	/** The landing that makes this row stale, or `null` when it should be sent. */
+	supersedes(entry) {
+		const system = entry.payload.subject.systemEvent;
+		if (system === void 0 || system.kind !== "node-updating") return null;
+		const nodeId = system.nodeId;
+		const toVersion = system.textParams?.["toVersion"];
+		if (nodeId === void 0 || toVersion === void 0) return null;
+		const landedAt = this.landed.get(landingKey(nodeId, toVersion));
+		return landedAt === void 0 ? null : {
+			nodeId,
+			toVersion,
+			landedAt
+		};
+	}
+};
+//#endregion
 //#region src/notification-center/snooze-digest.ts
 /** `14:03` in the node's local zone — a digest is read by a person, at home. */
 function clock(ms) {
@@ -38690,6 +38822,8 @@ var NotificationCenter = class {
 	deviceAlerts;
 	/** The scheduled STATE SUMMARY of system rules (D647): its ledgers and its tick. */
 	stateSummary;
+	/** Every `server-updated` heard, so a stale `node-updating` is not sent after it (D723). */
+	updateLandings = new NcUpdateLandings();
 	/** States the `deviceState` rule gate reads. Refreshed on the reload tick;
 	*  read with no I/O on the persist hook. */
 	deviceStates;
@@ -39709,7 +39843,7 @@ var NotificationCenter = class {
 		this.outbox = new NcOutbox({
 			store: deps.store,
 			logger: this.logger.child("outbox"),
-			deliver: (entry) => this.dispatcher.deliver(entry),
+			deliver: (entry) => this.deliverUnlessSuperseded(entry),
 			...deps.now !== void 0 ? { now: deps.now } : {}
 		});
 		this.timelapseRules = new TimelapseStore({
@@ -41135,6 +41269,7 @@ var NotificationCenter = class {
 		}
 		const system = incoming.subject.systemEvent;
 		if (system !== void 0) this.stateSummary.observeSystem(system, this.now());
+		if (system !== void 0) this.updateLandings.observe(system, this.now());
 		const observation = system !== void 0 ? ledgeredLiveness(system) : null;
 		if (observation !== null) {
 			const previous = this.liveness.stateOf(observation.subject);
@@ -41170,6 +41305,29 @@ var NotificationCenter = class {
 		}
 		this.consumeEvent(incoming);
 	}
+	/**
+	* The outbox's executor: the dispatcher, unless the row is a `node-updating`
+	* whose update has already LANDED (D723, `restart-supersede.ts`). Such a row
+	* drained after the hub's own reboot and would read "about to update" next to
+	* "updated". Dropped benignly (the row ends `sent`, like a snooze), and said.
+	*/
+	deliverUnlessSuperseded(entry) {
+		const superseded = this.updateLandings.supersedes(entry);
+		if (superseded === null) return this.dispatcher.deliver(entry);
+		this.logger.info("node-updating not sent — the update already landed", {
+			tags: { deviceId: entry.deviceId },
+			meta: {
+				nodeId: superseded.nodeId,
+				toVersion: superseded.toVersion,
+				landedAt: superseded.landedAt,
+				ruleId: entry.ruleId,
+				targetId: entry.targetId,
+				outboxId: entry.id,
+				createdAt: entry.createdAt
+			}
+		});
+		return Promise.resolve({ ok: true });
+	}
 	buildProvider() {
 		return {
 			listRules: async () => ({ rules: [...this.rules.list()] }),
@@ -48935,7 +49093,10 @@ function analyseDebugTrack(inventory) {
 		}
 	}
 	if (closed && facts.bestEventId === void 0) out.push(finding("NO_BEST_EVENT", "info", "No representative event was chosen for this track."));
+	const linkedStep = require_clip_model_registry.linkedStepOf(facts.labelStepId);
 	if (facts.labelStepId === RAW_CLASS_STEP_ID) out.push(finding("UNSCORED_LABEL", "info", `The label is the detector's raw class (${facts.label ?? facts.className}) — no scored classifier answered for this track.`));
+	else if (linkedStep !== void 0 && (facts.labelScore ?? 0) === 0) out.push(finding("UNSCORED_LABEL", "info", `The label is the root detector's linked label for ${linkedStep} (${facts.label ?? facts.className}), held as a score-0 fallback — ${linkedStep} runs for this camera and no scored answer of it landed.`));
+	else if (linkedStep !== void 0 && facts.labelScore !== void 0 && facts.labelScore < LOW_BEST_SCORE) out.push(finding("LOW_BEST_SCORE", "info", `The label came from the root detector standing in for ${linkedStep}; its score ${facts.labelScore.toFixed(2)} is the DETECTION's confidence, under ${String(LOW_BEST_SCORE)} — a ${linkedStep} threshold has no part in it.`));
 	else if (facts.labelScore !== void 0 && facts.labelScore < LOW_BEST_SCORE) out.push(finding("LOW_BEST_SCORE", "info", `Best label score ${facts.labelScore.toFixed(2)} is under ${String(LOW_BEST_SCORE)}.`));
 	if (thumbnailProvenance === "standin") out.push(finding("BEST_SHOT_STANDIN", "warn", "Best shot is a stand-in: a face/plate detail crop copied in because no frame of the subject was captured."));
 	if (thumbnailProvenance === "raster") out.push(finding("BEST_SHOT_RASTER", "info", "Best shot is a sub-native raster crop of the subject, not a native capture."));
@@ -60844,6 +61005,15 @@ function isIdleTrackerStats(stats) {
 }
 /** Shared empty — a fold is rare and every other frame would allocate. */
 var EMPTY_RIDER_FOLDS = [];
+/** The steps a detection's linked labels stand in for (D715), or `undefined` for none. */
+function linkedStepsOf(labels) {
+	if (labels === void 0) return void 0;
+	const steps = labels.flatMap((l) => {
+		const step = require_clip_model_registry.linkedStepOf(l.stepId);
+		return step === void 0 ? [] : [step];
+	});
+	return steps.length > 0 ? steps : void 0;
+}
 /** The tape observation of a dropped frame: no gate verdict, nothing bound. */
 var DROPPED_FRAME_OBSERVATION = {
 	gate: {
@@ -61751,6 +61921,7 @@ var FrameProcessor = class {
 			const sourceDetectionId = sourceIdByBbox.get(td.bbox);
 			const nativeRecovery = td.matchedThisFrame !== false ? nativeRecoveryByBbox.get(td.bbox) : void 0;
 			const birthEvidence = td.matchedThisFrame !== false ? birthEvidenceByBbox.get(td.bbox) : void 0;
+			const linkedSteps = td.matchedThisFrame !== false ? linkedStepsOf(labelsByBbox.get(td.bbox)) : void 0;
 			return {
 				trackId: td.trackId,
 				...sourceDetectionId !== void 0 ? { sourceDetectionId } : {},
@@ -61776,7 +61947,8 @@ var FrameProcessor = class {
 					plateBbox: plate.bbox
 				} : {},
 				...nativeRecovery !== void 0 ? { nativeRecovery } : {},
-				...birthEvidence !== void 0 ? { birthEvidence } : {}
+				...birthEvidence !== void 0 ? { birthEvidence } : {},
+				...linkedSteps !== void 0 ? { linkedSteps } : {}
 			};
 		});
 		this.lastLabelWriteRefusals = refusals;
@@ -78104,6 +78276,24 @@ var DetailScheduler = class {
 		}
 		if (this.underMaxPerTrack(state)) state.retryPending = true;
 	}
+	/**
+	* The root model the announce says fills this (track, step), if any (D715).
+	* Read from the announce the track was scheduled with.
+	*/
+	filledBy(trackId, stepId) {
+		return this.tracks.get(trackId)?.get(stepId)?.announce.filledBy;
+	}
+	/**
+	* The detector already produced this step's effect for the track (D715):
+	* the step is settled for the track's life — no retry, improve or periodic
+	* re-fire. Same terminal state as a confident result.
+	*/
+	markFilled(trackId, stepId) {
+		const state = this.tracks.get(trackId)?.get(stepId);
+		if (state === void 0) return;
+		state.sticky = true;
+		state.retryPending = false;
+	}
 	onTrackEnded(trackId) {
 		this.tracks.delete(trackId);
 	}
@@ -78329,9 +78519,37 @@ var TrackDetailDispatcher = class {
 	}
 	enqueue(deviceId, dev, requests) {
 		if (requests.length === 0) return;
-		for (const r of requests) dev.queue.push(r);
+		for (const r of requests) {
+			if (this.skipFilled(deviceId, dev, r)) continue;
+			dev.queue.push(r);
+		}
 		this.pump(deviceId, dev);
 	}
+	/**
+	* D715: the root model fills this step (the announce's `filledBy`) and the
+	* detector named THIS subject for it (a linked label on the track's frame) —
+	* the step's effect already exists, so it is not dispatched. The step is
+	* settled for the track, which is what makes the line below fire once per
+	* (track, step): a settled step is never requested again. A track the
+	* detector did not name (a class outside its vocabulary) is dispatched as
+	* before.
+	*/
+	skipFilled(deviceId, dev, req) {
+		const filledBy = dev.scheduler.filledBy(req.trackId, req.stepId);
+		if (filledBy === void 0) return false;
+		if (dev.tracks.get(req.trackId)?.linkedSteps?.includes(req.stepId) !== true) return false;
+		dev.scheduler.markFilled(req.trackId, req.stepId);
+		this.deps.logger.info("detail step skipped — the root detector already filled it", {
+			tags: { deviceId },
+			meta: {
+				trackId: req.trackId,
+				stepId: req.stepId,
+				filledBy,
+				reason: req.reason
+			}
+		});
+		return true;
+	}
 	pump(deviceId, dev) {
 		while (dev.inFlight < this.maxInFlight && dev.queue.length > 0) {
 			const req = dev.queue.shift();
@@ -96851,6 +97069,13 @@ var ANALYTICS_COLLECTIONS = [
 			why: "the frame COPIES the dataset owns outright, under a `retrain` prefix no owner cascade and no age sweep walks (D81). Also declares `trackId` as provenance. Rows go only through `deleteFrame`, after their annotations, on operator deselection. NOTE: nothing caps this table or the disk it consumes — that is a deliberate decision, not an oversight, and it is the one collection here whose bound is an operator's habit."
 		}
 	},
+	{
+		collection: RETRAIN_COLLECTIONS_COLLECTION,
+		classification: {
+			kind: "never-orphaned",
+			why: "the named training corpora an operator CREATES from playback — one metadata row per collection (id, name, timestamps), keyed by nothing that can expire: no trackId, no event id, no device. There is no owner to go away, and no age clock applies, because a collection the operator built and has not opened since is not stale, it is kept. Rows leave only through an explicit operator delete."
+		}
+	},
 	{
 		collection: SCENE_COLLECTION,
 		classification: {
@@ -99243,6 +99468,7 @@ var NC_SYSTEM_EVENT_CATEGORIES = [
 	require_clip_model_registry.EventCategory.UpdateAvailable,
 	require_clip_model_registry.EventCategory.AddonUpdated,
 	require_clip_model_registry.EventCategory.SystemRestartCompleted,
+	require_clip_model_registry.EventCategory.SystemRestarting,
 	require_clip_model_registry.EventCategory.RecordingExportCompleted,
 	require_clip_model_registry.EventCategory.BackupRunCompleted
 ];
@@ -111471,7 +111697,8 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 					...frameHandle !== void 0 ? {
 						frameHandle,
 						nodeId: frameHandle.nodeId
-					} : {}
+					} : {},
+					...t.linkedSteps !== void 0 ? { linkedSteps: t.linkedSteps } : {}
 				};
 				if (prevIds.has(t.trackId)) dispatcher.onFrame(deviceId, t.trackId, steps, detailFrame, result.timestamp);
 				else dispatcher.onTrackStarted(deviceId, t.trackId, t.className, steps, detailFrame, result.timestamp);