@camstack/addon-post-analysis 1.2.363 → 1.2.365

package/dist/pipeline-analytics/index.mjs

@@ -1,4 +1,4 @@
-import { $ as NC_ALARM_DEFAULT_PROFILE_ID, $r as storageOccupancyCapability, $t as RECORDING_EXPORT_MAX_READ_BYTES, A as EMBEDDING_MODEL_FAILED, Ai as array, An as applyBlockingEdit, Ar as occupancyScope, At as NcConditionsSchema, B as LABEL_SUPPLY_MACRO, Bi as string, Bn as consumableLowPercentOf, Br as resolveModeDelays, Bt as NcSharedSequenceSchema, C as DEFAULT_DETAIL_CROP_CONVENTION, Ci as hydrateSchema, Cn as TrackRelationSchema, Cr as isSystemEventSummaryRule, Ct as NC_TEMPLATE_VARS, D as DETECTION_PIPELINE_CAP_NAME, Di as sleep$1, Dn as addonWidgetsSourceCapability, Dr as mayWriteToLocation, Dt as NcAlarmSensorsSchema, E as DETECTION_MACRO_CLASSES, En as activateAlarmProfile, Er as linkedStepOf, Et as NcAlarmSensorsInputSchema, F as EVENT_OWNER_TYPES, Fi as number, Fn as audioMetricsCapability, Fr as readMotionTriggeredBy, Ft as NcRulePatchSchema, G as MAX_ARCHIVED_DEBUG_NOTES, Gi as EventCategory, Gn as deriveDetailCropRect, Gr as ruleBelongsToAlarm$1, Gt as NcSystemEventKindSchema, H as ListTrackRelationsInputSchema, Hi as tuple, Hn as cosineSimilarity$1, Ht as NcSnoozeSchema, I as EXPORT_DENSE_MAX_RANGES, Ii as object, In as audioModeOf, Ir as readTimelapseGeneratedAt, It as NcRuleSchema, J as MAX_TRACK_PURITIES, Jn as describeSystemEventDeliveryProblem, Jr as ruleKindOf, Jt as NcTemplatePreviewSchema, K as MAX_BIRTH_DECISION_RECORDS, Kn as derivePostTriggeredAction, Kr as ruleDeviceCompatCapQueries, Kt as NcTaxonomySchema, L as FIRST_LEVEL_MACRO_CLASSES, Li as partialRecord, Ln as buildEventKindDescriptor, Lr as renameAlarmProfile, Lt as NcRuleTargetSchema, M as EMBEDDING_REQUIREMENTS_UNAVAILABLE, Mi as discriminatedUnion, Mn as applyNonBlockingEdit, Mr as pipelineAnalyticsCapability, Mt as NcRuleActionSchema, N as EVENT_DENSITY_BATCH_MAX, Ni as literal, Nn as applySecureOnArmEdit, Nr as plateGalleryCapability, Nt as NcRuleActionsSchema, O as DeclaredDevices, Oi as ZodObject, On as alarmDeviceSecureOnArm, Or as memoizePinnedFfmpeg, Ot as NcAlarmSettingsPatchSchema, P as EVENT_KIND_BY_CAP, Pi as looseObject, Pn as assertTimelapseCadences, Pr as readDeviceStateFrom, Pt as NcRuleInputSchema, Q as MotionTriggeredBySchema, Qn as embeddingRefusalOf, Qr as servedTemplateVars, R as FULL_IMAGE_BBOX, Ri as record, Rn as buildViewerLink, Rr as resolveClipSearchMinScore, Rt as NcRuleUpdateInputSchema, S as CoverStateSchema, Si as defineCustomActions, Sn as TrackRelationKindSchema, Sr as isSystemDelivery, St as NC_TAXONOMY, T as DEFAULT_TIMELAPSE_PREVIEW_TEXT, Ti as nodePin, Tn as TrackSourceSchema, Tr as kebabToCamel, Tt as NcAlarmPostTriggeredActionSchema, U as ListTrackRelationsResultSchema, Ui as union, Un as createAlarmProfile, Ur as rootSupplyServes, Ut as NcSnoozeSuppressedSchema, V as LabelAttributionSchema, Vi as templateLiteral, Vn as coreBlockIdFromAddonId, Vr as resolveModeNotifyPolicy, Vt as NcSnoozeInputSchema, W as LockStateSchema, Wi as unknown, Wn as deleteAlarmProfile, Wr as ruleAutoTriggersAlarm, Wt as NcStateSummarySectionIdSchema, X as MOTION_CLOSE_AFTER_MS, Xr as secureActuationFor, Xt as OPS_LOG_DEFAULT_LIMIT, Y as MAX_TRACK_RELATIONS, Yn as describeSystemEventFamilyProblem, Yr as sceneMonitorCapability, Yt as NcTemplateVarDescriptorSchema, Z as MediaFileKindEnum, Zr as sensorRaisedOf, Zt as OpsLogEntrySchema, _ as BaseDevice, _i as errMsg, _n as TRACK_RELATIONS_DEFAULT_LIMIT, _r as isLabelSupplyStepId, _t as NC_GROUPING_MIN_SEC, a as CLIP_EMBEDDING_STEP_ID, ai as systemEventSummaryScheduleOf, an as SCENE_DEFAULT_ANCHOR_THRESHOLD, ar as faceGalleryCapability, at as NC_ALARM_TRIGGERED_MAX_SEC, b as ClearTrackRelationInputSchema, bi as createEvent, bn as TimelapseRuleSchema, br as isRootSuppliableStepId, bt as NC_SYSTEM_EVENT_KIND_GROUP_SPECS, c as resolveClusterModelPin, ci as templateVarsFor, cn as SCENE_DEFAULT_QUIET_SECONDS, cr as gifFromMp4Args, ct as NC_CLIP_POST_ROLL_DEFAULT_SEC, d as APPEARANCE_RESOLVES_AMBIGUITY_DEFAULT, di as zoneAnalyticsCapability, dn as SCENE_RESET_RECAPTURES, dr as isAudioClassName, dt as NC_CONDITION_CATALOG, ei as subKindsOf, en as RECORDING_SOURCE_CAMSTACK_ADDON, et as NC_ALARM_DEFAULT_TRIGGERED_DURATION_SEC, f as ARCHIVED_DEBUG_NOTES_DEFAULT_LIMIT, fi as DEFAULT_FIRST_SIGHTING_FRESHNESS_MS, fn as SceneMonitorSchema, fr as isDefaultAlarmProfileId, ft as NC_CONSUMABLE_LOW_PERCENT_DEFAULT, g as BIRTH_DECISION_DEFAULT_LIMIT, gi as DeviceType, gn as TIMELAPSE_DENSE_FLOOR_SEC, gr as isKnownTemplateVar, gt as NC_GROUPING_MAX_SEC, h as ArchivedDebugNoteSchema, hi as isSourceCap, hn as SetTrackRelationInputSchema, hr as isEventOwnerType, ht as NC_GROUPING_DEFAULT_SEC, ii as systemEventFilterApplies, in as SCENE_CONFIRM_DEFAULT_TIMEOUT_MS, ir as evictionPolicyOfLocation, it as NC_ALARM_SYSTEM_EVENT_KINDS, j as EMBEDDING_REQUIREMENTS_FAILED, ji as boolean, jn as applyModeDelaysEdits, jt as NcLegacyRuleActionSequenceSchema, k as DetectionSourceSchema, ki as _enum, kn as alarmPanelCapability, kr as notificationRulesCapability, kt as NcConditionDescriptorSchema, l as APPEARANCE_BIN_COUNT, li as vectorDimFromBase64, ln as SCENE_DEFAULT_UNCOVERED_POLICY, lr as isAlarmControllableCap, lt as NC_CLIP_PRE_ROLL_DEFAULT_SEC, m as AlarmArmModeSchema, mi as evaluateSensorEdge, mn as SetTrackPurityResultSchema, mr as isEventKindLabelKey, mt as NC_DEFAULT_SNOOZE_MINUTES, ni as systemEventDeliveryProblems, nn as RetrainStatusSchema, nr as ensureAlarmProfiles, nt as NC_ALARM_DELAY_MAX_SEC, o as FACE_EMBEDDING_STEP_ID, oi as systemEventSummarySplitOf, on as SCENE_DEFAULT_CHECK_INTERVAL_SEC, or as failureContributionCapability, ot as NC_AUDIO_CONFIRM_HITS_DEFAULT, p as AUDIO_MACRO_LABELS, pi as canonicalHash, pn as SetTrackPurityInputSchema, pr as isDetectionMacroClass, pt as NC_CONSUMABLE_SYSTEM_EVENT_KINDS, q as MAX_BIRTH_LATENCY_PROXY_MS, qn as deriveRecordingMode, qr as ruleGroupingApplies, qt as NcTemplatePreviewInputSchema, ri as systemEventFamilyProblems, rn as SCENE_CONFIRM_DEFAULT_MAX_IMAGE_PX, rr as eventKindLabel, rt as NC_ALARM_NOTIFY_FIELDS, s as readClusterModelPinStrict, si as templateCarriesSummary, sn as SCENE_DEFAULT_OBSERVATION_SPACING_SEC, sr as gifDeriveSpeed, st as NC_AUDIO_CONFIRM_WINDOW_SEC_DEFAULT, t as BUILTIN_CLIP_MODELS, ti as syncActiveAlarmProfileSettings, tn as RebuildObjectEmbeddingsRefusalSchema, tr as encodeVectorBase64, tt as NC_ALARM_DELAY_FIELDS, u as APPEARANCE_BLOCKS, ui as viewerLinkBaseOf, un as SCENE_DIVERGED, ur as isAppLinkBase, ut as NC_CLIP_RETENTION_MAX_SEC, v as BirthDecisionRecordSchema, vi as BaseAddon, vn as TimelapseRuleInputSchema, vr as isMediaOwnerType, vt as NC_SENSOR_TRANSITION_KINDS, w as DEFAULT_EVENT_COLOR, wi as isDeviceScopedCap, wn as TrackSideSchema, wr as isVectorIndexDimConflict, wt as NcAlarmConfigSchema, x as ClearTrackRelationResultSchema, xi as customAction, xn as TrackPuritySchema, xr as isScheduleActive, xt as NC_TANK_SYSTEM_EVENT_KINDS, y as COCO_TO_MACRO, yi as CamProfileSchema, yn as TimelapseRulePatchSchema, yr as isRetiredClearKey, yt as NC_SNOOZE_MAX_MINUTES, z as FailureCounters, zi as strictObject, zn as cloneAlarmSettings, zr as resolveLocationMode, zt as NcScheduleSchema } from "../clip-model-registry-B69Mktce.mjs";
+import { $ as NC_ALARM_DEFAULT_PROFILE_ID, $r as sceneMonitorCapability, $t as RECORDING_EXPORT_MAX_READ_BYTES, A as EMBEDDING_MODEL_FAILED, Ai as nodePin, An as alarmDeviceSecureOnArm, Ar as mayWriteToLocation, At as NcConditionsSchema, B as LABEL_SUPPLY_MACRO, Bi as number, Bn as buildViewerLink, Br as renameAlarmProfile, Bt as NcSharedSequenceSchema, C as DEFAULT_DETAIL_CROP_CONVENTION, Ci as BaseAddon, Cn as TrackPuritySchema, Cr as isRootSuppliableStepId, Ct as NC_TEMPLATE_VARS, D as DETECTION_PIPELINE_CAP_NAME, Di as defineCustomActions, Dn as TrackSourceSchema, Dr as isVectorIndexDimConflict, Dt as NcAlarmSensorsSchema, E as DETECTION_MACRO_CLASSES, Ei as customAction, En as TrackSideSchema, Er as isSystemEventSummaryRule, Et as NcAlarmSensorsInputSchema, F as EVENT_OWNER_TYPES, Fi as array, Fn as applySecureOnArmEdit, Fr as pipelineAnalyticsCapability, Ft as NcRulePatchSchema, G as MAX_ARCHIVED_DEBUG_NOTES, Gi as string, Gn as cosineSimilarity$1, Gt as NcSystemEventKindSchema, H as ListTrackRelationsInputSchema, Hi as partialRecord, Hn as cloneAlarmSettings, Hr as resolveLocationMode, Ht as NcSnoozeSchema, I as EXPORT_DENSE_MAX_RANGES, Ii as boolean, In as assertTimelapseCadences, Ir as plateGalleryCapability, It as NcRuleSchema, J as MAX_TRACK_PURITIES, Ji as union, Jn as deriveDetailCropRect, Jr as ruleAutoTriggersAlarm, Jt as NcTemplatePreviewSchema, K as MAX_BIRTH_DECISION_RECORDS, Ki as templateLiteral, Kn as createAlarmProfile, Kr as retrainRevisionConflictMessage, Kt as NcTaxonomySchema, L as FIRST_LEVEL_MACRO_CLASSES, Li as discriminatedUnion, Ln as audioMetricsCapability, Lr as readDeviceStateFrom, Lt as NcRuleTargetSchema, M as EMBEDDING_REQUIREMENTS_UNAVAILABLE, Mi as sleep$1, Mn as applyBlockingEdit, Mr as notificationRulesCapability, Mt as NcRuleActionSchema, N as EVENT_DENSITY_BATCH_MAX, Ni as ZodObject, Nn as applyModeDelaysEdits, Nr as occupancyScope, Nt as NcRuleActionsSchema, O as DeclaredDevices, Oi as hydrateSchema, On as activateAlarmProfile, Or as kebabToCamel, Ot as NcAlarmSettingsPatchSchema, P as EVENT_KIND_BY_CAP, Pi as _enum, Pn as applyNonBlockingEdit, Pt as NcRuleInputSchema, Q as MotionTriggeredBySchema, Qn as describeSystemEventFamilyProblem, Qr as ruleKindOf, R as FULL_IMAGE_BBOX, Ri as literal, Rn as audioModeOf, Rr as readMotionTriggeredBy, Rt as NcRuleUpdateInputSchema, S as CoverStateSchema, Si as errMsg, Sn as TimelapseRuleSchema, Sr as isRetiredClearKey, St as NC_TAXONOMY, T as DEFAULT_TIMELAPSE_PREVIEW_TEXT, Ti as createEvent, Tn as TrackRelationSchema, Tr as isSystemDelivery, Tt as NcAlarmPostTriggeredActionSchema, U as ListTrackRelationsResultSchema, Ui as record, Un as consumableLowPercentOf, Ur as resolveModeDelays, Ut as NcSnoozeSuppressedSchema, V as LabelAttributionSchema, Vi as object, Vn as classifyRetrainReview, Vr as resolveClipSearchMinScore, Vt as NcSnoozeInputSchema, W as LockStateSchema, Wi as strictObject, Wn as coreBlockIdFromAddonId, Wr as resolveModeNotifyPolicy, Wt as NcStateSummarySectionIdSchema, X as MOTION_CLOSE_AFTER_MS, Xi as EventCategory, Xn as deriveRecordingMode, Xr as ruleDeviceCompatCapQueries, Xt as OPS_LOG_DEFAULT_LIMIT, Y as MAX_TRACK_RELATIONS, Yi as unknown, Yn as derivePostTriggeredAction, Yr as ruleBelongsToAlarm$1, Yt as NcTemplateVarDescriptorSchema, Z as MediaFileKindEnum, Zn as describeSystemEventDeliveryProblem, Zr as ruleGroupingApplies, Zt as OpsLogEntrySchema, _ as BaseDevice, _i as DEFAULT_FIRST_SIGHTING_FRESHNESS_MS, _n as SetTrackRelationInputSchema, _r as isEventKindLabelKey, _t as NC_GROUPING_MIN_SEC, a as CLIP_EMBEDDING_STEP_ID, ai as summarizeReview, an as SCENE_CONFIRM_DEFAULT_MAX_IMAGE_PX, ar as ensureAlarmProfiles, at as NC_ALARM_TRIGGERED_MAX_SEC, b as ClearTrackRelationInputSchema, bi as isSourceCap, bn as TimelapseRuleInputSchema, br as isLabelSupplyStepId, bt as NC_SYSTEM_EVENT_KIND_GROUP_SPECS, c as resolveClusterModelPin, ci as systemEventFamilyProblems, cn as SCENE_DEFAULT_CHECK_INTERVAL_SEC, cr as faceGalleryCapability, ct as NC_CLIP_POST_ROLL_DEFAULT_SEC, d as APPEARANCE_RESOLVES_AMBIGUITY_DEFAULT, di as systemEventSummarySplitOf, dn as SCENE_DEFAULT_UNCOVERED_POLICY, dr as gifFromMp4Args, dt as NC_CONDITION_CATALOG, ei as secureActuationFor, en as RECORDING_SOURCE_CAMSTACK_ADDON, et as NC_ALARM_DEFAULT_TRIGGERED_DURATION_SEC, f as ARCHIVED_DEBUG_NOTES_DEFAULT_LIMIT, fi as templateCarriesSummary, fn as SCENE_DIVERGED, fr as isAlarmControllableCap, ft as NC_CONSUMABLE_LOW_PERCENT_DEFAULT, g as BIRTH_DECISION_DEFAULT_LIMIT, gi as zoneAnalyticsCapability, gn as SetTrackPurityResultSchema, gr as isDetectionMacroClass, gt as NC_GROUPING_MAX_SEC, h as ArchivedDebugNoteSchema, hi as viewerLinkBaseOf, hn as SetTrackPurityInputSchema, hr as isDefaultAlarmProfileId, ht as NC_GROUPING_DEFAULT_SEC, ii as subKindsOf, in as RetrainStatusSchema, ir as encodeVectorBase64, it as NC_ALARM_SYSTEM_EVENT_KINDS, j as EMBEDDING_REQUIREMENTS_FAILED, jn as alarmPanelCapability, jr as memoizePinnedFfmpeg, jt as NcLegacyRuleActionSequenceSchema, k as DetectionSourceSchema, ki as isDeviceScopedCap, kn as addonWidgetsSourceCapability, kr as linkedStepOf, kt as NcConditionDescriptorSchema, l as APPEARANCE_BIN_COUNT, li as systemEventFilterApplies, ln as SCENE_DEFAULT_OBSERVATION_SPACING_SEC, lr as failureContributionCapability, lt as NC_CLIP_PRE_ROLL_DEFAULT_SEC, m as AlarmArmModeSchema, mi as vectorDimFromBase64, mn as SceneMonitorSchema, mr as isAudioClassName, mt as NC_DEFAULT_SNOOZE_MINUTES, ni as servedTemplateVars, nn as RetrainDismissedSchema, nt as NC_ALARM_DELAY_MAX_SEC, o as FACE_EMBEDDING_STEP_ID, oi as syncActiveAlarmProfileSettings, on as SCENE_CONFIRM_DEFAULT_TIMEOUT_MS, or as eventKindLabel, ot as NC_AUDIO_CONFIRM_HITS_DEFAULT, p as AUDIO_MACRO_LABELS, pi as templateVarsFor, pn as SCENE_RESET_RECAPTURES, pr as isAppLinkBase, pt as NC_CONSUMABLE_SYSTEM_EVENT_KINDS, q as MAX_BIRTH_LATENCY_PROXY_MS, qi as tuple, qn as deleteAlarmProfile, qr as rootSupplyServes, qt as NcTemplatePreviewInputSchema, ri as storageOccupancyCapability, rn as RetrainOriginSchema, rt as NC_ALARM_NOTIFY_FIELDS, s as readClusterModelPinStrict, si as systemEventDeliveryProblems, sn as SCENE_DEFAULT_ANCHOR_THRESHOLD, sr as evictionPolicyOfLocation, st as NC_AUDIO_CONFIRM_WINDOW_SEC_DEFAULT, t as BUILTIN_CLIP_MODELS, ti as sensorRaisedOf, tn as RebuildObjectEmbeddingsRefusalSchema, tr as embeddingRefusalOf, tt as NC_ALARM_DELAY_FIELDS, u as APPEARANCE_BLOCKS, ui as systemEventSummaryScheduleOf, un as SCENE_DEFAULT_QUIET_SECONDS, ur as gifDeriveSpeed, ut as NC_CLIP_RETENTION_MAX_SEC, v as BirthDecisionRecordSchema, vi as canonicalHash, vn as TIMELAPSE_DENSE_FLOOR_SEC, vr as isEventOwnerType, vt as NC_SENSOR_TRANSITION_KINDS, w as DEFAULT_EVENT_COLOR, wi as CamProfileSchema, wn as TrackRelationKindSchema, wr as isScheduleActive, wt as NcAlarmConfigSchema, x as ClearTrackRelationResultSchema, xi as DeviceType, xn as TimelapseRulePatchSchema, xr as isMediaOwnerType, xt as NC_TANK_SYSTEM_EVENT_KINDS, y as COCO_TO_MACRO, yi as evaluateSensorEdge, yn as TRACK_RELATIONS_DEFAULT_LIMIT, yr as isKnownTemplateVar, yt as NC_SNOOZE_MAX_MINUTES, z as FailureCounters, zi as looseObject, zn as buildEventKindDescriptor, zr as readTimelapseGeneratedAt, zt as NcScheduleSchema } from "../clip-model-registry-BRXTB6Qa.mjs";
 import { t as __exportAll } from "../embedding-encoder/index.mjs";
 import * as fs$1 from "node:fs";
 import { createWriteStream, promises } from "node:fs";
@@ -48379,6 +48379,7 @@ function startAlarmPanelConvergence(ports) {
 var NC_ARTIFACT_READ_PREFIX_REF = NC_ARTIFACT_READ_PREFIX;
 var TRAINING_EXPORT_PREFIX_REF = "training-export";
 var RETRAIN_EXPORT_PREFIX_REF = "retrain-export";
+var RETRAIN_FRAME_PREFIX_REF = "retrain-frame";
 var DEBUG_EXPORT_PREFIX_REF = "debug-export";
 var TAPE_EXPORT_PREFIX_REF = "tape-export";
 /**
@@ -48404,6 +48405,13 @@ var PIPELINE_ANALYTICS_PLANE_ACCESS = {
 	/** Every frame behind a marked selection — a corpus, not an item. */
 	[TRAINING_EXPORT_PREFIX_REF]: "admin",
 	[RETRAIN_EXPORT_PREFIX_REF]: "admin",
+	/**
+	* One copied retrain frame by its id. `admin`, not `authenticated`: the item
+	* is single, but the cap that served the same bytes (`getRetrainFrameImage`)
+	* is `auth: 'admin'` and the surface is admin curation — widening the bytes
+	* beyond the method they replace would be a policy change nobody asked for.
+	*/
+	[RETRAIN_FRAME_PREFIX_REF]: "admin",
 	/** Diagnostic bundle: logs, config and frames. */
 	[DEBUG_EXPORT_PREFIX_REF]: "admin",
 	/** A promoted tracking tape and its ground truth (D681) — a corpus, not an item. */
@@ -70911,6 +70919,67 @@ var TrackStore = class {
 	}
 };
 //#endregion
+//#region src/pipeline-analytics/retrain/retrain-origin.ts
+/**
+* Reading the two JSON columns the review rests on — an annotation's `origin`
+* and a frame's `dismissed` set — back into typed values.
+*
+* Parsed with the cap's own schemas rather than cast: a column written by
+* something that bypassed the guard reads as "no origin" / "nothing dismissed",
+* which is the safe direction (a missing snapshot makes a verdict approximate;
+* it never invents one).
+*/
+function parseJsonIfText(value) {
+	if (typeof value !== "string") return value;
+	try {
+		return JSON.parse(value);
+	} catch {
+		return null;
+	}
+}
+/** The stored origin snapshot, or `null` (legacy row / unreadable value). */
+function narrowOrigin(value) {
+	const parsed = RetrainOriginSchema.safeParse(parseJsonIfText(value));
+	return parsed.success ? parsed.data : null;
+}
+/** The stored dismissed set, or an empty list. */
+function narrowDismissed(value) {
+	const parsed = RetrainDismissedSchema.array().safeParse(parseJsonIfText(value));
+	return parsed.success ? parsed.data : [];
+}
+/**
+* The stable name of a pipeline box inside its frame. One live track draws one
+* box on a frame, and the track id survives a re-derivation, which is what lets
+* a dismissal made today still match tomorrow's list.
+*/
+function pipelineOriginRef(trackId) {
+	return `pipeline:${trackId}`;
+}
+/** A re-derived pipeline box as the snapshot an annotation or dismissal keeps. */
+function pipelineBoxOrigin(box) {
+	return {
+		source: "pipeline",
+		ref: pipelineOriginRef(box.trackId),
+		bbox: box.bbox,
+		macroClass: box.macroClass,
+		...box.label !== void 0 ? { label: box.label } : {},
+		...box.score !== void 0 ? { score: box.score } : {},
+		...box.modelId !== void 0 ? { modelId: box.modelId } : {}
+	};
+}
+/** The n-th proposal of a detector (`assist`) or vision-LLM (`llm`) run. */
+function proposalOrigin(source, index, facts) {
+	return {
+		source,
+		ref: `${source}:${String(index)}`,
+		bbox: facts.bbox,
+		macroClass: facts.macroClass,
+		...facts.label !== void 0 ? { label: facts.label } : {},
+		...facts.score !== void 0 ? { score: facts.score } : {},
+		...facts.modelId !== void 0 ? { modelId: facts.modelId } : {}
+	};
+}
+//#endregion
 //#region src/pipeline-analytics/retrain/retrain-frame-store.ts
 /**
 * RetrainFrameStore — the COPIES the retrain dataset owns.
@@ -71080,6 +71149,22 @@ var RETRAIN_FRAME_COLUMNS = [
 	{
 		name: "epochMs",
 		type: "INTEGER"
+	}),
+	(
+	/** Bumped by every annotation save; the compare-and-set a save is guarded
+	*  by. The column default makes a pre-revision row read `0`. */
+	{
+		name: "revision",
+		type: "INTEGER",
+		notNull: true,
+		defaultValue: 0
+	}),
+	(
+	/** The proposals the operator deleted (`RetrainDismissed[]`), so a deleted
+	*  pipeline box is not offered again. NULL = none. */
+	{
+		name: "dismissed",
+		type: "JSON"
 	})
 ];
 var RETRAIN_FRAME_INDEXES = [
@@ -71193,7 +71278,9 @@ var RetrainFrameStore = class {
 			...finiteNumber(data["capturedAt"]) !== void 0 ? { capturedAt: finiteNumber(data["capturedAt"]) } : {},
 			...finiteNumber(data["chromaSpread"]) !== void 0 ? { chromaSpread: finiteNumber(data["chromaSpread"]) } : {},
 			complete: data["complete"] === true || data["complete"] === 1,
-			...finiteNumber(data["epochMs"]) !== void 0 ? { epochMs: finiteNumber(data["epochMs"]) } : {}
+			...finiteNumber(data["epochMs"]) !== void 0 ? { epochMs: finiteNumber(data["epochMs"]) } : {},
+			revision: finiteNumber(data["revision"]) ?? 0,
+			dismissed: narrowDismissed(data["dismissed"])
 		};
 	}
 	/** The copies with these ids, in the order given; unknown ids are skipped. */
@@ -80715,7 +80802,7 @@ async function ensureTrackHierarchyMedia(deps, input) {
 }
 //#endregion
 //#region src/pipeline-analytics/event-media-handler.ts
-var CACHE_CONTROL = "public, max-age=31536000, immutable";
+var CACHE_CONTROL$1 = "public, max-age=31536000, immutable";
 /** Default / clamp bounds for the `thumb` variant edge (px). Mirrors
 *  `shared/frame/square-thumb.ts`; kept here so query parsing stays pure. */
 var THUMB_DEFAULT_SIZE = 160;
@@ -80900,14 +80987,14 @@ function createEventMediaHandler(deps) {
 		if (req.headers["if-none-match"] === etag) {
 			res.writeHead(304, {
 				etag,
-				"cache-control": CACHE_CONTROL,
+				"cache-control": CACHE_CONTROL$1,
 				"server-timing": serverTiming
 			}).end();
 			return;
 		}
 		res.writeHead(200, {
 			"content-type": "image/jpeg",
-			"cache-control": CACHE_CONTROL,
+			"cache-control": CACHE_CONTROL$1,
 			etag,
 			"content-length": String(media.bytes.byteLength),
 			"server-timing": serverTiming
@@ -82837,6 +82924,13 @@ var RETRAIN_ANNOTATION_COLUMNS = [
 		name: "assistScore",
 		type: "REAL"
 	},
+	(
+	/** The proposal the box started from (`RetrainOrigin`), snapshotted at
+	*  accept time. NULL on a row saved before origins existed. */
+	{
+		name: "origin",
+		type: "JSON"
+	}),
 	{
 		name: "exportedInBatch",
 		type: "TEXT"
@@ -82920,6 +83014,7 @@ var RetrainAnnotationStore = class {
 			source: narrowSource(data["source"]),
 			assistModelId: optionalString(data["assistModelId"]),
 			assistScore: typeof score === "number" ? score : void 0,
+			origin: narrowOrigin(data["origin"]),
 			exportedInBatch: optionalString(data["exportedInBatch"]),
 			createdAt: Number(data["createdAt"] ?? 0)
 		};
@@ -82937,12 +83032,14 @@ var RetrainAnnotationStore = class {
 			source: a.source,
 			assistModelId: a.assistModelId ?? null,
 			assistScore: a.assistScore ?? null,
+			origin: a.origin ?? null,
 			exportedInBatch: a.exportedInBatch ?? null,
 			createdAt: a.createdAt
 		};
 	}
 	/**
-	* Replace EVERY annotation on one frame with the supplied set.
+	* Replace EVERY annotation on one frame with the supplied set — atomically,
+	* and only if the frame is still at the revision the caller saw.
 	*
 	* Whole-frame replacement rather than per-box upsert, deliberately: the unit
 	* of ground truth is the frame, and "the operator deleted a box" and "the
@@ -82950,38 +83047,113 @@ var RetrainAnnotationStore = class {
 	* patch API would let a frame keep a box the operator removed on a surface
 	* that only knew about the boxes it sent.
 	*
+	* The old rows' deletion, the new rows, the frame's `dismissed` set and its
+	* bumped `revision` are ONE `settingsStore.transact`, guarded by
+	* `commit.fromRevision`: a crash leaves the frame as it was, a concurrent
+	* save leaves one winner and one `conflict` — never a blend, never a frame
+	* blanked between a delete and an insert.
+	*
 	* Returns the persisted rows so the caller renders ids it can address.
 	*/
-	async replaceForFrame(mediaKey, drafts) {
-		const existing = await this.listByFrame(mediaKey);
+	async replaceForFrame(mediaKey, drafts, commit) {
 		const createdAt = this.now();
 		const rows = drafts.map((d) => ({
 			...d,
+			origin: d.origin ?? null,
 			id: this.newId(),
 			createdAt,
 			mediaKey
 		}));
-		for (const row of rows) await this.store.set.mutate({
-			collection: RETRAIN_ANNOTATIONS_COLLECTION,
-			key: row.id,
-			value: this.toRecord(row)
+		const nextRevision = commit.fromRevision + 1;
+		const result = await this.store.transact.mutate({
+			guard: {
+				collection: RETRAIN_FRAMES_COLLECTION,
+				key: mediaKey,
+				column: "revision",
+				equals: commit.fromRevision
+			},
+			ops: [
+				{
+					op: "deleteWhere",
+					collection: RETRAIN_ANNOTATIONS_COLLECTION,
+					filter: { where: { mediaKey } }
+				},
+				{
+					op: "insertMany",
+					collection: RETRAIN_ANNOTATIONS_COLLECTION,
+					records: rows.map((row) => ({
+						id: row.id,
+						data: this.toRecord(row)
+					}))
+				},
+				{
+					op: "update",
+					collection: RETRAIN_FRAMES_COLLECTION,
+					id: mediaKey,
+					data: {
+						revision: nextRevision,
+						...commit.dismissed !== void 0 ? { dismissed: [...commit.dismissed] } : {}
+					}
+				}
+			]
 		});
-		for (const old of existing) try {
-			await this.store.delete.mutate({
+		if (!result.applied) {
+			const current = result.current;
+			return {
+				kind: "conflict",
+				currentRevision: typeof current === "number" ? current : null
+			};
+		}
+		return {
+			kind: "saved",
+			rows,
+			revision: nextRevision
+		};
+	}
+	/**
+	* Set `origin` on rows that have none, in one guarded transaction with a
+	* revision bump. Rows that already carry an origin, or are not on this frame,
+	* are left untouched and not counted. No eligible row ⇒ no write at all.
+	*/
+	async setOrigins(mediaKey, origins, commit) {
+		const eligible = (await this.listByFrame(mediaKey)).filter((row) => !row.origin && origins.has(row.id));
+		if (eligible.length === 0) return {
+			kind: "updated",
+			updated: 0,
+			revision: commit.fromRevision
+		};
+		const nextRevision = commit.fromRevision + 1;
+		const result = await this.store.transact.mutate({
+			guard: {
+				collection: RETRAIN_FRAMES_COLLECTION,
+				key: mediaKey,
+				column: "revision",
+				equals: commit.fromRevision
+			},
+			ops: [...eligible.map((row) => ({
+				op: "update",
 				collection: RETRAIN_ANNOTATIONS_COLLECTION,
-				key: old.id
-			});
-		} catch (err) {
-			this.logger.warn("retrain annotation replace: stale row delete failed", {
-				tags: { deviceId: old.deviceId },
-				meta: {
-					annotationId: old.id,
-					mediaKey,
-					error: String(err)
-				}
-			});
+				id: row.id,
+				data: { origin: origins.get(row.id) ?? null }
+			})), {
+				op: "update",
+				collection: RETRAIN_FRAMES_COLLECTION,
+				id: mediaKey,
+				data: { revision: nextRevision }
+			}]
+		});
+		if (!result.applied) {
+			const current = result.current;
+			return {
+				kind: "conflict",
+				currentRevision: typeof current === "number" ? current : null
+			};
 		}
-		return rows;
+		return {
+			kind: "updated",
+			updated: eligible.length,
+			revision: nextRevision
+		};
 	}
 	async listByFrame(mediaKey) {
 		return this.queryWhere({ mediaKey }, `frame ${mediaKey}`);
@@ -84101,7 +84273,14 @@ var RetrainLlmAssistService = class {
 			profileId: profile.id,
 			model: answer.model,
 			leftHouse: leavesHouse,
-			proposals: parsed.objects.map((o) => ({
+			proposals: parsed.objects.map((o, index) => ({
+				origin: proposalOrigin("llm", index, {
+					bbox: o.bbox,
+					macroClass: o.macroClass,
+					...o.label !== void 0 ? { label: o.label } : {},
+					score: o.confidence,
+					modelId: answer.model
+				}),
 				bbox: o.bbox,
 				macroClass: o.macroClass,
 				...o.label !== void 0 ? { label: o.label } : {},
@@ -84446,6 +84625,87 @@ async function serveRetrainArchive(_req, res, writeArchive) {
 	}
 }
 //#endregion
+//#region src/pipeline-analytics/retrain/retrain-frame-handler.ts
+var RETRAIN_FRAME_PREFIX = "retrain-frame";
+/** Longest side of a `size=thumb` response. */
+var RETRAIN_THUMB_MAX_SIDE = 480;
+var CACHE_CONTROL = "private, max-age=31536000, immutable";
+/** The path `getRetrainFrameUrl`-style callers compose for a frame. */
+function retrainFramePath$1(addonId, frameId, size) {
+	return `/addon/${addonId}/${RETRAIN_FRAME_PREFIX}/${encodeURIComponent(frameId)}?size=${size}`;
+}
+/** `{ frameId, size }` from the request URL (path after the prefix), or `null`. */
+function parseRetrainFrameRequest(url) {
+	const queryAt = url.indexOf("?");
+	const rawPath = queryAt === -1 ? url : url.slice(0, queryAt);
+	const query = queryAt === -1 ? "" : url.slice(queryAt + 1);
+	const segment = rawPath.replace(/^\/+/, "");
+	if (segment === "" || segment.includes("/")) return null;
+	let frameId;
+	try {
+		frameId = decodeURIComponent(segment);
+	} catch {
+		return null;
+	}
+	if (frameId === "") return null;
+	const size = new URLSearchParams(query).get("size");
+	if (size !== null && size !== "thumb" && size !== "full") return null;
+	return {
+		frameId,
+		size: size ?? "full"
+	};
+}
+function createRetrainFrameHandler(deps) {
+	return async (req, res) => {
+		const method = req.method ?? "GET";
+		if (method !== "GET" && method !== "HEAD") {
+			res.writeHead(405, { allow: "GET, HEAD" });
+			res.end();
+			return;
+		}
+		const request = parseRetrainFrameRequest(req.url ?? "");
+		if (request === null) {
+			res.writeHead(404);
+			res.end();
+			return;
+		}
+		const etag = `"${request.frameId}:${request.size}"`;
+		if (req.headers["if-none-match"] === etag) {
+			res.writeHead(304, {
+				etag,
+				"cache-control": CACHE_CONTROL
+			});
+			res.end();
+			return;
+		}
+		try {
+			const stored = await deps.readFrame(request.frameId);
+			if (stored === null) {
+				res.writeHead(404);
+				res.end();
+				return;
+			}
+			const body = request.size === "thumb" ? await deps.resize(stored, RETRAIN_THUMB_MAX_SIDE) : stored;
+			res.writeHead(200, {
+				"content-type": "image/jpeg",
+				"content-length": String(body.byteLength),
+				"cache-control": CACHE_CONTROL,
+				etag
+			});
+			if (method === "HEAD") res.end();
+			else res.end(body);
+		} catch (err) {
+			deps.logger.warn("retrain frame read failed", { meta: {
+				frameId: request.frameId,
+				size: request.size,
+				error: String(err)
+			} });
+			res.writeHead(500, { "content-type": "text/plain" });
+			res.end("retrain frame read failed");
+		}
+	};
+}
+//#endregion
 //#region src/pipeline-analytics/retrain/retrain-crop-cut.ts
 /**
 * The `crops` layout's cutter: one subject crop from a retrain frame copy.
@@ -84480,6 +84740,15 @@ function retrainCropWindow(input) {
 		height: bottom - top
 	};
 }
+/** A frame re-encoded to a JPEG whose longest side is at most `maxSide` (grid thumbnails). */
+async function resizeRetrainJpeg(bytes, maxSide) {
+	return sharp(bytes).resize({
+		width: maxSide,
+		height: maxSide,
+		fit: "inside",
+		withoutEnlargement: true
+	}).jpeg({ quality: 80 }).toBuffer();
+}
 async function cutRetrainCrop(input) {
 	const window = retrainCropWindow(input);
 	if (window === null) return null;
@@ -85582,9 +85851,27 @@ async function restageRetrainTrack(deps, input) {
 }
 //#endregion
 //#region src/pipeline-analytics/retrain/retrain-service.ts
+/**
+* RetrainService — the bodies behind the eleven `pipelineAnalytics.*Retrain*`
+* cap methods.
+*
+* It exists as a service rather than as eleven more methods on a 7,500-line
+* addon class for the reason `analytics-query-facade.ts` and `track-flags.ts`
+* already exist: the interesting parts (the copy ordering, the assist plan, the
+* lifecycle preconditions) are decidable from injected contracts alone, and a
+* test that had to boot the addon to reach them would not be written.
+*
+* Everything durable lives in two collections and one blob prefix:
+* `pipeline-analytics:retrain-frames` (the copies),
+* `pipeline-analytics:retrain-annotations` (the ground truth), and
+* `retrain/<deviceId>/<trackId>/…` (the pixels). No age sweep and no owner
+* cascade walks any of them — that is the whole point of copying.
+*/
 /** Default page size for the staging worklist. Staging is bounded at 500 per
 *  camera (D81), so this is a page, not a ceiling. */
 var DEFAULT_STAGING_LIMIT = 100;
+/** Tries a last-write-wins save gets when it keeps losing the revision race. */
+var LAST_WRITE_WINS_ATTEMPTS = 3;
 /** A macro class that failed validation — the write is refused, never coerced. */
 var RetrainAnnotationError = class extends Error {};
 /** A store frame on the wire. A recording still carries no track and no
@@ -85605,7 +85892,31 @@ function toWireFrame(f) {
 		height: f.height,
 		copiedAt: f.copiedAt,
 		...f.capturedAt !== void 0 ? { capturedAt: f.capturedAt } : {},
-		complete: f.complete
+		complete: f.complete,
+		revision: f.revision ?? 0,
+		dismissed: f.dismissed ?? []
+	};
+}
+/**
+* What the operator did with the proposals on a frame (`retrain-review.ts`).
+*
+* A frame whose rows predate origins is judged against the pipeline boxes
+* re-derived now, and a proposal nobody kept is reported `removed` — both
+* flagged approximate. A frame with snapshots is judged on them alone.
+*/
+function reviewOfFrame(annotations, pipelineBoxes, dismissed) {
+	const legacy = annotations.some((a) => !a.origin);
+	const review = classifyRetrainReview(annotations.map((a) => ({
+		id: a.id,
+		bbox: a.bbox,
+		macroClass: a.macroClass,
+		...a.label !== void 0 ? { label: a.label } : {},
+		kind: a.kind,
+		origin: a.origin ?? null
+	})), pipelineBoxes.map(pipelineBoxOrigin), dismissed, { inferRemoved: legacy });
+	return {
+		boxes: review.boxes,
+		summary: summarizeReview(review)
 	};
 }
 function toWireAnnotation(a) {
@@ -85622,6 +85933,7 @@ function toWireAnnotation(a) {
 		source: a.source,
 		...a.assistModelId !== void 0 ? { assistModelId: a.assistModelId } : {},
 		...a.assistScore !== void 0 ? { assistScore: a.assistScore } : {},
+		origin: a.origin ?? null,
 		...a.exportedInBatch !== void 0 ? { exportedInBatch: a.exportedInBatch } : {},
 		createdAt: a.createdAt
 	};
@@ -85703,16 +86015,24 @@ var RetrainService = class {
 		const evidence = this.deps.pipelineEvidence;
 		const ownTracks = /* @__PURE__ */ new Map();
 		const subjectBoxes = /* @__PURE__ */ new Map();
+		const annotationsByFrame = await this.annotationsByFrame(copies);
 		const out = [];
 		for (const copy of copies) {
 			const wire = toWireFrame(copy);
 			const collectionIds = collections?.get(copy.frameId);
-			const withCollections = collections !== null ? {
-				...wire,
-				collectionIds: collectionIds ?? []
-			} : wire;
+			const withCollections = {
+				...collections !== null ? {
+					...wire,
+					collectionIds: collectionIds ?? []
+				} : wire,
+				...this.frameUrls(copy.frameId)
+			};
+			const reviewOf = (boxes) => reviewOfFrame(annotationsByFrame.get(copy.frameId) ?? [], boxes, copy.dismissed ?? []);
 			if (evidence === void 0) {
-				out.push(withCollections);
+				out.push({
+					...withCollections,
+					review: reviewOf([])
+				});
 				continue;
 			}
 			const trackId = copy.origin === "track" ? copy.trackId : "";
@@ -85733,11 +86053,32 @@ var RetrainService = class {
 			});
 			out.push({
 				...withCollections,
-				pipelineBoxes
+				pipelineBoxes,
+				review: reviewOf(pipelineBoxes)
 			});
 		}
 		return out;
 	}
+	/** The URLs of a frame's pixels, when a data plane is served for them. */
+	frameUrls(frameId) {
+		const frameUrl = this.deps.frameUrl;
+		if (frameUrl === void 0) return {};
+		return {
+			imageUrl: frameUrl(frameId, "full"),
+			thumbnailUrl: frameUrl(frameId, "thumb")
+		};
+	}
+	/** The saved annotations of these frames, grouped by frame. */
+	async annotationsByFrame(copies) {
+		const grouped = /* @__PURE__ */ new Map();
+		if (copies.length === 0) return grouped;
+		for (const a of await this.deps.annotations.listByFrames(copies.map((c) => c.frameId))) {
+			const list = grouped.get(a.mediaKey);
+			if (list === void 0) grouped.set(a.mediaKey, [a]);
+			else list.push(a);
+		}
+		return grouped;
+	}
 	/**
 	* The frame a frame-scoped call names, or a refusal. The frame is the
 	* authority: its camera must be the caller's, and a `trackId`, when the
@@ -85824,7 +86165,10 @@ var RetrainService = class {
 				sourceKind: kindOf.get(mediaId) ?? "keyFrame",
 				...capturedAtOf.has(mediaId) ? { capturedAt: capturedAtOf.get(mediaId) } : {}
 			});
-			if (result.kind === "copied") copied.push(toWireFrame(result.frame));
+			if (result.kind === "copied") copied.push({
+				...toWireFrame(result.frame),
+				...this.frameUrls(result.frame.frameId)
+			});
 			else refused.push({
 				sourceMediaId: result.sourceMediaId,
 				reason: result.reason
@@ -85851,7 +86195,10 @@ var RetrainService = class {
 				complete: input.complete
 			}
 		});
-		return toWireFrame(updated);
+		return {
+			...toWireFrame(updated),
+			...this.frameUrls(updated.frameId)
+		};
 	}
 	/** Un-select: annotations first, then the copy. Never the other way round —
 	*  an annotation whose frame is gone is unopenable and unfixable. The frame's
@@ -85992,9 +86339,16 @@ var RetrainService = class {
 			modelId: result.modelId,
 			stepId: plan.stepId,
 			minScore: plan.minScore,
-			proposals: mapping.proposals.map((p) => {
+			proposals: mapping.proposals.map((p, index) => {
 				const draft = proposalToDraft(p, owner);
 				return {
+					origin: proposalOrigin("assist", index, {
+						bbox: draft.bbox,
+						macroClass: draft.macroClass,
+						...draft.label !== void 0 ? { label: draft.label } : {},
+						...draft.assistScore !== void 0 ? { score: draft.assistScore } : {},
+						...draft.assistModelId !== void 0 ? { modelId: draft.assistModelId } : {}
+					}),
 					bbox: draft.bbox,
 					macroClass: draft.macroClass,
 					...draft.label !== void 0 ? { label: draft.label } : {},
@@ -86041,9 +86395,12 @@ var RetrainService = class {
 			kind: a.kind,
 			source: a.source,
 			...a.assistModelId !== void 0 ? { assistModelId: a.assistModelId } : {},
-			...a.assistScore !== void 0 ? { assistScore: a.assistScore } : {}
+			...a.assistScore !== void 0 ? { assistScore: a.assistScore } : {},
+			origin: a.origin ?? null
 		}));
-		const saved = await this.deps.annotations.replaceForFrame(input.frameId, drafts);
+		const keptRefs = new Set(drafts.flatMap((d) => d.origin ? [d.origin.ref] : []));
+		const dismissed = input.dismissed !== void 0 ? input.dismissed.filter((d) => !keptRefs.has(d.ref)) : void 0;
+		const saved = await this.replaceGuarded(frame, input, drafts, dismissed);
 		const errors = saved.filter((a) => a.kind === "model_error").length;
 		this.deps.logger.info("retrain annotations saved", {
 			tags: { deviceId: input.deviceId },
@@ -86052,12 +86409,99 @@ var RetrainService = class {
 				trackId: frame.trackId,
 				frameId: input.frameId,
 				subjects: saved.length - errors,
-				modelErrors: errors
+				modelErrors: errors,
+				dismissed: dismissed?.length
 			}
 		});
 		return saved.map(toWireAnnotation);
 	}
 	/**
+	* The guarded replace. A caller that names the revision it saw gets exactly
+	* one attempt: a different current revision is a conflict, never a retry —
+	* the point is that it must look again. A caller that names none asked for
+	* last-write-wins, so a race lost between our read and the transaction is
+	* retried on the fresh revision, a bounded number of times.
+	*/
+	async replaceGuarded(frame, input, drafts, dismissed) {
+		return await this.underRevision(frame, input, async (revision) => {
+			const result = await this.deps.annotations.replaceForFrame(input.frameId, drafts, {
+				fromRevision: revision,
+				...dismissed !== void 0 ? { dismissed } : {}
+			});
+			return result.kind === "saved" ? {
+				kind: "done",
+				value: result.rows
+			} : {
+				kind: "conflict",
+				currentRevision: result.currentRevision
+			};
+		});
+	}
+	/**
+	* Run one revision-guarded write. `attempt` is handed the revision to guard
+	* on and reports `done` or `conflict` (the frame moved; `null` = it is gone).
+	*/
+	async underRevision(frame, input, attempt) {
+		let revision = frame.revision ?? 0;
+		for (let tries = 0; tries < LAST_WRITE_WINS_ATTEMPTS; tries += 1) {
+			if (input.expectedRevision !== void 0 && input.expectedRevision !== revision) this.refuseStale(input, revision, input.expectedRevision);
+			const result = await attempt(revision);
+			if (result.kind === "done") return result.value;
+			if (result.currentRevision === null) throw new RetrainAnnotationError(`retrain frame ${input.frameId} vanished`);
+			revision = result.currentRevision;
+			if (input.expectedRevision !== void 0) this.refuseStale(input, revision, input.expectedRevision);
+		}
+		throw new RetrainAnnotationError(`retrain frame ${input.frameId} kept changing under the save — try again`);
+	}
+	/**
+	* Give rows saved before origins existed the origin a caller reconstructed
+	* for them — and touch nothing else (ids, creation time and the export stamp
+	* of the row stay). Only rows that have NO origin yet are written; a row that
+	* already has one is skipped, because a snapshot taken at accept time is
+	* evidence and a reconstruction must never overwrite it.
+	*/
+	async backfillOrigins(input) {
+		const frame = await this.requireFrame(input, "backfill-origins");
+		const wanted = new Map(input.origins.map((o) => [o.annotationId, o.origin]));
+		const result = await this.underRevision(frame, input, async (revision) => {
+			const outcome = await this.deps.annotations.setOrigins(input.frameId, wanted, { fromRevision: revision });
+			return outcome.kind === "updated" ? {
+				kind: "done",
+				value: outcome
+			} : {
+				kind: "conflict",
+				currentRevision: outcome.currentRevision
+			};
+		});
+		this.deps.logger.info("retrain origins backfilled", {
+			tags: { deviceId: input.deviceId },
+			meta: {
+				frameId: input.frameId,
+				updated: result.updated,
+				skipped: input.origins.length - result.updated
+			}
+		});
+		return {
+			updated: result.updated,
+			skipped: input.origins.length - result.updated,
+			revision: result.revision
+		};
+	}
+	refuseStale(input, current, expected) {
+		this.deps.logger.warn("retrain annotations save refused — the frame moved on", {
+			tags: { deviceId: input.deviceId },
+			meta: {
+				frameId: input.frameId,
+				currentRevision: current,
+				expectedRevision: expected
+			}
+		});
+		throw new RetrainAnnotationError(retrainRevisionConflictMessage(input.frameId, {
+			currentRevision: current,
+			expectedRevision: expected
+		}));
+	}
+	/**
 	* Paginated corpus list for the Frames grid. Index reads only — copies,
 	* annotation counts/classes, collection membership; no JPEG.
 	*/
@@ -111256,6 +111700,8 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 	trainingExportDataPlane = null;
 	/** Handle for the retrain-export data-plane listener (dispose on shutdown). */
 	retrainExportDataPlane = null;
+	/** Handle for the retrain-frame data-plane listener (dispose on shutdown). */
+	retrainFrameDataPlane = null;
 	/** Handle for the debug-export data-plane listener (dispose on shutdown). */
 	debugExportDataPlane = null;
 	/** Handle for the tape-export data-plane listener (dispose on shutdown). */
@@ -113353,7 +113799,8 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 				}),
 				subjectBoxes: (trackId, deviceId) => mediaStore.listSubjectBoxesByOwner("track", trackId, deviceId)
 			},
-			memberships: retrainCollectionStore
+			memberships: retrainCollectionStore,
+			frameUrl: (frameId, size) => retrainFramePath$1(this.ctx.id, frameId, size)
 		});
 		this.retrain = retrain;
 		const retrainStills = new RecordedStillService(buildRecordedStillPorts({
@@ -114457,6 +114904,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 			await this.serveNcArtifactPlane();
 			await this.serveTrainingExportPlane();
 			await this.serveRetrainExportPlane();
+			await this.serveRetrainFramePlane();
 			await this.serveDebugExportPlane();
 			await this.serveTapeExportPlane();
 			this.ctx.logger.info("event-media data-plane served", { meta: {
@@ -114608,6 +115056,9 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 	async saveRetrainAnnotations(input) {
 		return this.requireRetrain().saveAnnotations(input);
 	}
+	async backfillRetrainOrigins(input) {
+		return this.requireRetrain().backfillOrigins(input);
+	}
 	async completeRetrainTrack(input) {
 		return this.requireRetrain().complete(input);
 	}
@@ -115088,6 +115539,31 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 		}
 	}
 	/**
+	* The retrain-frame data plane: one copied frame's JPEG (`?size=thumb|full`).
+	* Admin-only like the cap that used to serve it as base64 (D613).
+	*/
+	async serveRetrainFramePlane() {
+		try {
+			const handler = createRetrainFrameHandler({
+				readFrame: async (frameId) => {
+					const frames = this.retrainFrames;
+					if (frames === null) return null;
+					const frame = await frames.get(frameId);
+					return frame === null ? null : frames.readFrame(frame);
+				},
+				resize: resizeRetrainJpeg,
+				logger: this.ctx.logger
+			});
+			this.retrainFrameDataPlane = await this.ctx.dataPlane?.serve({
+				prefix: RETRAIN_FRAME_PREFIX,
+				access: planeAccess("retrain-frame"),
+				handler
+			}) ?? null;
+		} catch (err) {
+			this.ctx.logger.warn("retrain-frame data-plane failed to serve", { meta: { error: errMsg(err) } });
+		}
+	}
+	/**
 	* Plan the annotated export — INDEX READS ONLY, no blob touched.
 	*
 	* The zone used for the `zoneCrop` derivation is the bounding box of the
@@ -115869,6 +116345,8 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 		this.trainingExportDataPlane = null;
 		await this.retrainExportDataPlane?.dispose();
 		this.retrainExportDataPlane = null;
+		await this.retrainFrameDataPlane?.dispose();
+		this.retrainFrameDataPlane = null;
 		await this.debugExportDataPlane?.dispose();
 		this.debugExportDataPlane = null;
 		await this.tapeExportDataPlane?.dispose();
@@ -116469,6 +116947,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 				positionsCount: positionsCountById.get(id) ?? 1
 			});
 			if (this.startedBirths.hasStarted(key, id)) continue;
+			if (this.suppressedBirths.isRejected(key, id)) continue;
 			if (appearance === "resurrection") {
 				log.info("track resumed", {
 					tags: { deviceId },
@@ -116492,6 +116971,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 		}
 		for (const id of this.deferredBirths.deferredIds(key)) {
 			if (bornCandidates.some((c) => c.id === id)) continue;
+			if (this.suppressedBirths.isRejected(key, id)) continue;
 			const t = result.tracked.find((x) => x.trackId === id);
 			if (t) bornCandidates.push({
 				id,
@@ -116553,6 +117033,19 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends BaseAddon {
 				} });
 				continue;
 			}
+			if (this.suppressedBirths.isRejected(key, id)) {
+				this.deferredBirths.resolve(key, id);
+				this.birthEvidence.resolve(key, id);
+				log.info("late birth verdict ignored — the birth was already suppressed", {
+					tags: { deviceId },
+					meta: {
+						trackId: id,
+						className: t.className,
+						verdict: outcome.confirmed.has(id) ? "confirmed" : "suppressed"
+					}
+				});
+				continue;
+			}
 			this.recordBirthDecision({
 				deviceId,
 				trackId: id,