@camstack/addon-post-analysis 1.2.53 → 1.2.54

package/dist/{dist-DGdY1GSf.js → dist-BJ65Xxa1.js}

@@ -20953,7 +20953,29 @@ var FaceInfoSchema = object({
 	recognizedIdentityId: string().optional(),
 	identityName: string().optional(),
 	assigned: boolean(),
+	/**
+	* The crop, inline, base64.
+	*
+	* **Prefer {@link cropUrl}.** At the 500 rows the Faces view asks for this
+	* field alone is ~2.87 MiB, re-sent in full on every operator assign and
+	* every 30 s poll, base64-inflated over the msgpack socket and held in the
+	* query heap. It stays for callers that have not migrated; `includeCrops:
+	* false` turns it off once they have.
+	*/
 	base64: string().optional(),
+	/**
+	* Same crop, as a data-plane URL for `<img src>` — the move the admin
+	* snapshot surfaces made on 2026-08-08.
+	*
+	* Served by the `event-media` plane, which resolves a raw MediaStore key and
+	* is `access: 'authenticated'`: a bare `<img>` carries the `camstack_session`
+	* cookie, so no header plumbing is needed. The bytes then ride the browser's
+	* HTTP cache with an ETag and `immutable`, instead of the WebSocket.
+	*
+	* Absent when the face has no stored crop, or when the addon has no data
+	* plane — callers fall back to {@link base64}.
+	*/
+	cropUrl: string().optional(),
 	/** Design B: the face bbox (pixel space) on the key frame — lets a detail
 	*  view draw the box over the native `keyFrameMediaKey` frame. Absent on
 	*  legacy rows written before design B. */
@@ -21029,7 +21051,23 @@ var faceGalleryCapability = {
 		}),
 		listRecentFaces: method(object({
 			limit: number().int().positive().optional(),
-			filter: FaceFilterEnum.optional()
+			filter: FaceFilterEnum.optional(),
+			/**
+			* Inline the base64 crop on every row. Default `true` — the existing
+			* behaviour, kept so no caller breaks.
+			*
+			* Set `false` once the caller renders {@link FaceInfo.cropUrl}: that
+			* drops ~2.87 MiB per 500-row page to a few KiB of metadata and lets
+			* the browser cache the images.
+			*
+			* **This is an INPUT field, so it does not reach the addon until the
+			* next train.** The hub router validates cap inputs against its own
+			* compiled Zod, which strips a key it does not know — verified today
+			* on the OUTPUT side, where an additive field DOES arrive immediately
+			* (`Track.hasFace`). Until the train ships, sending `false` is
+			* harmless and simply keeps the crops inline.
+			*/
+			includeCrops: boolean().optional()
 		}).optional(), array(FaceInfoSchema).readonly()),
 		getFaceByTrack: method(object({
 			deviceId: number().int(),

package/dist/{dist-Da97q0x6.mjs → dist-BVOgkikr.mjs}

@@ -20931,7 +20931,29 @@ var FaceInfoSchema = object({
 	recognizedIdentityId: string().optional(),
 	identityName: string().optional(),
 	assigned: boolean(),
+	/**
+	* The crop, inline, base64.
+	*
+	* **Prefer {@link cropUrl}.** At the 500 rows the Faces view asks for this
+	* field alone is ~2.87 MiB, re-sent in full on every operator assign and
+	* every 30 s poll, base64-inflated over the msgpack socket and held in the
+	* query heap. It stays for callers that have not migrated; `includeCrops:
+	* false` turns it off once they have.
+	*/
 	base64: string().optional(),
+	/**
+	* Same crop, as a data-plane URL for `<img src>` — the move the admin
+	* snapshot surfaces made on 2026-08-08.
+	*
+	* Served by the `event-media` plane, which resolves a raw MediaStore key and
+	* is `access: 'authenticated'`: a bare `<img>` carries the `camstack_session`
+	* cookie, so no header plumbing is needed. The bytes then ride the browser's
+	* HTTP cache with an ETag and `immutable`, instead of the WebSocket.
+	*
+	* Absent when the face has no stored crop, or when the addon has no data
+	* plane — callers fall back to {@link base64}.
+	*/
+	cropUrl: string().optional(),
 	/** Design B: the face bbox (pixel space) on the key frame — lets a detail
 	*  view draw the box over the native `keyFrameMediaKey` frame. Absent on
 	*  legacy rows written before design B. */
@@ -21007,7 +21029,23 @@ var faceGalleryCapability = {
 		}),
 		listRecentFaces: method(object({
 			limit: number().int().positive().optional(),
-			filter: FaceFilterEnum.optional()
+			filter: FaceFilterEnum.optional(),
+			/**
+			* Inline the base64 crop on every row. Default `true` — the existing
+			* behaviour, kept so no caller breaks.
+			*
+			* Set `false` once the caller renders {@link FaceInfo.cropUrl}: that
+			* drops ~2.87 MiB per 500-row page to a few KiB of metadata and lets
+			* the browser cache the images.
+			*
+			* **This is an INPUT field, so it does not reach the addon until the
+			* next train.** The hub router validates cap inputs against its own
+			* compiled Zod, which strips a key it does not know — verified today
+			* on the OUTPUT side, where an additive field DOES arrive immediately
+			* (`Track.hasFace`). Until the train ships, sending `false` is
+			* harmless and simply keeps the crops inline.
+			*/
+			includeCrops: boolean().optional()
 		}).optional(), array(FaceInfoSchema).readonly()),
 		getFaceByTrack: method(object({
 			deviceId: number().int(),

package/dist/embedding-encoder/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-DGdY1GSf.js");
+const require_dist = require("../dist-BJ65Xxa1.js");
 let node_fs = require("node:fs");
 let node_fs$1 = require_dist.__toESM(node_fs, 1);
 node_fs = require_dist.__toESM(node_fs);
@@ -10,8 +10,11 @@ let node_path = require("node:path");
 let node_path$1 = require_dist.__toESM(node_path, 1);
 node_path = require_dist.__toESM(node_path);
 require("node:crypto");
+let node_util = require("node:util");
+let node_zlib = require("node:zlib");
 let node_child_process = require("node:child_process");
-//#region ../system/dist/model-download-service-D8B-4ktF.mjs
+(0, node_util.promisify)(node_zlib.brotliCompress);
+(0, node_util.promisify)(node_zlib.gzip);
 function isNonEmptyFile(filePath) {
 	return node_fs$1.existsSync(filePath) && node_fs$1.statSync(filePath).size > 0;
 }

package/dist/embedding-encoder/index.mjs

@@ -1,15 +1,17 @@
-import { A as embeddingEncoderCapability, G as BaseAddon, N as hfModelUrl } from "../dist-Da97q0x6.mjs";
+import { A as embeddingEncoderCapability, G as BaseAddon, N as hfModelUrl } from "../dist-BVOgkikr.mjs";
 import { createRequire } from "node:module";
 import * as fs from "node:fs";
 import "node:fs";
 import * as path$1 from "node:path";
 import "node:path";
 import "node:crypto";
+import { promisify } from "node:util";
+import { brotliCompress, gzip } from "node:zlib";
 import { spawn } from "node:child_process";
 //#region \0rolldown/runtime.js
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
-//#endregion
-//#region ../system/dist/model-download-service-D8B-4ktF.mjs
+promisify(brotliCompress);
+promisify(gzip);
 function isNonEmptyFile(filePath) {
 	return fs.existsSync(filePath) && fs.statSync(filePath).size > 0;
 }

package/dist/{node-CpXZkQ6V.js → node-DTrkngzv.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-DGdY1GSf.js");
+const require_dist = require("./dist-BJ65Xxa1.js");
 let node_fs = require("node:fs");
 node_fs = require_dist.__toESM(node_fs, 1);
 let node_path = require("node:path");

package/dist/pipeline-analytics/{_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-tCAuhv5m.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-uW2bbQBi.mjs}

@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.47",
+		version: "1.2.48",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_analytics_widgets",

package/dist/pipeline-analytics/{hostInit-CyLkuQ7j.mjs → hostInit-BC7FXncY.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.2.47",
+				version: "1.2.48",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/pipeline-analytics/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-DGdY1GSf.js");
+const require_dist = require("../dist-BJ65Xxa1.js");
 let node_fs = require("node:fs");
 let node_path = require("node:path");
 node_path = require_dist.__toESM(node_path);
@@ -6771,6 +6771,40 @@ function makeNcActionHandlers(deps) {
 		}
 	};
 }
+//#endregion
+//#region src/pipeline-analytics/data-plane-access.ts
+/**
+* Prefix literals for the export planes, mirrored here so the policy reads as
+* a table without importing three handler modules into the addon's boot path.
+* `data-plane-access.spec.ts` asserts they still match the constants their
+* handlers register with — a mirror nothing checks is a lie waiting to happen.
+*/
+var TRAINING_EXPORT_PREFIX_REF = "training-export";
+var RETRAIN_EXPORT_PREFIX_REF = "retrain-export";
+var DEBUG_EXPORT_PREFIX_REF = "debug-export";
+/**
+* Every data plane this addon serves, and the level the HUB enforces before it
+* proxies. Exhaustive by test: a new plane that forgets to appear here fails
+* `data-plane-access.spec.ts`.
+*/
+var PIPELINE_ANALYTICS_PLANE_ACCESS = {
+	/** One stored crop/thumbnail by an unguessable id the caller already holds. */
+	"event-media": "authenticated",
+	/** Self-authenticating single-use action token (D47). */
+	"nc-action": "public",
+	/** Self-authenticating single-use artifact token (D47). */
+	"nc-artifact": "public",
+	/** Every frame behind a marked selection — a corpus, not an item. */
+	[TRAINING_EXPORT_PREFIX_REF]: "admin",
+	[RETRAIN_EXPORT_PREFIX_REF]: "admin",
+	/** Diagnostic bundle: logs, config and frames. */
+	[DEBUG_EXPORT_PREFIX_REF]: "admin"
+};
+/** The declared level for a plane prefix. Typed, so a prefix with no declared
+*  policy is a compile error rather than a silent default. */
+function planeAccess(prefix) {
+	return PIPELINE_ANALYTICS_PLANE_ACCESS[prefix];
+}
 var MAX_EXPORT_BYTES = 256 * 1024 * 1024;
 var DebugFindingSchema = require_dist.object({
 	code: require_dist.string(),
@@ -7129,40 +7163,6 @@ function parseDebugDeviceIds(url) {
 	return out;
 }
 //#endregion
-//#region src/pipeline-analytics/data-plane-access.ts
-/**
-* Prefix literals for the export planes, mirrored here so the policy reads as
-* a table without importing three handler modules into the addon's boot path.
-* `data-plane-access.spec.ts` asserts they still match the constants their
-* handlers register with — a mirror nothing checks is a lie waiting to happen.
-*/
-var TRAINING_EXPORT_PREFIX_REF = "training-export";
-var RETRAIN_EXPORT_PREFIX_REF = "retrain-export";
-var DEBUG_EXPORT_PREFIX_REF = "debug-export";
-/**
-* Every data plane this addon serves, and the level the HUB enforces before it
-* proxies. Exhaustive by test: a new plane that forgets to appear here fails
-* `data-plane-access.spec.ts`.
-*/
-var PIPELINE_ANALYTICS_PLANE_ACCESS = {
-	/** One stored crop/thumbnail by an unguessable id the caller already holds. */
-	"event-media": "authenticated",
-	/** Self-authenticating single-use action token (D47). */
-	"nc-action": "public",
-	/** Self-authenticating single-use artifact token (D47). */
-	"nc-artifact": "public",
-	/** Every frame behind a marked selection — a corpus, not an item. */
-	[TRAINING_EXPORT_PREFIX_REF]: "admin",
-	[RETRAIN_EXPORT_PREFIX_REF]: "admin",
-	/** Diagnostic bundle: logs, config and frames. */
-	[DEBUG_EXPORT_PREFIX_REF]: "admin"
-};
-/** The declared level for a plane prefix. Typed, so a prefix with no declared
-*  policy is a compile error rather than a silent default. */
-function planeAccess(prefix) {
-	return PIPELINE_ANALYTICS_PLANE_ACCESS[prefix];
-}
-//#endregion
 //#region src/pipeline-analytics/debug/debug-export-handler.ts
 /**
 * Pacing. The export is a BACKGROUND job sharing a thread with live decode, so
@@ -7689,6 +7689,25 @@ var embeddingActions = require_dist.defineCustomActions({
 	"embedding.wipe": require_dist.customAction(NoInputSchema, WipeResultSchema, { auth: "admin" })
 });
 //#endregion
+//#region src/pipeline-analytics/map-with-concurrency.ts
+/**
+* Apply `mapper` to every item with at most `limit` in flight at once.
+*
+* A rejecting mapper rejects the whole call (same contract as `Promise.all`);
+* callers that must not fail a page for one bad row catch inside the mapper.
+*/
+async function mapWithConcurrency(items, limit, mapper) {
+	const results = new Array(items.length);
+	if (items.length === 0) return results;
+	const effectiveLimit = Math.max(1, Math.min(Math.trunc(limit), items.length));
+	const entries = items.entries();
+	const worker = async () => {
+		for (const [index, item] of entries) results[index] = await mapper(item, index);
+	};
+	await Promise.all(Array.from({ length: effectiveLimit }, () => worker()));
+	return results;
+}
+//#endregion
 //#region src/pipeline-analytics/pipeline/key-event-scoring.ts
 /**
 * key-event-scoring — the SINGLE deterministic "importance" scorer for a
@@ -7960,6 +7979,16 @@ function clusterByEmbedding(items, threshold = .5) {
 var OPERATOR_FACE_STEP_ID = "operator:face-gallery";
 /** Embedding model id used when enrolling face crops as identity samples. */
 var MODEL_ID = "arcface-r100";
+/**
+* How many face crops `listRecentFaces` resolves at once.
+*
+* Each crop costs a store round-trip plus a disk read, so the page is I/O-bound
+* and the serial form dominated the operator's assign latency. 16 recovers
+* nearly all of the win while leaving the UDS channel — shared with the live
+* detection path — far from saturated; unbounded would trade a slow page for a
+* stalled pipeline.
+*/
+var FACE_CROP_FETCH_CONCURRENCY = 16;
 var FaceGalleryProvider = class {
 	identityStore;
 	faceStore;
@@ -7968,6 +7997,7 @@ var FaceGalleryProvider = class {
 	eventStore;
 	logger;
 	refreshGallery;
+	eventMediaBaseUrl;
 	emitFaceGalleryChanged;
 	constructor(deps) {
 		this.identityStore = deps.identityStore;
@@ -7977,6 +8007,7 @@ var FaceGalleryProvider = class {
 		this.eventStore = deps.eventStore;
 		this.logger = deps.logger;
 		this.refreshGallery = deps.refreshGallery;
+		this.eventMediaBaseUrl = deps.eventMediaBaseUrl;
 		this.emitFaceGalleryChanged = deps.emitFaceGalleryChanged;
 	}
 	/** Best-effort emit — never allowed to fail the mutation it follows. */
@@ -8068,6 +8099,21 @@ var FaceGalleryProvider = class {
 		const media = await this.mediaStore.listByOwner("face", face.id);
 		return media.length > 0 ? media[0].base64 : void 0;
 	}
+	/**
+	* The crop as a data-plane URL, or undefined when there is no stored key or
+	* no plane to serve it.
+	*
+	* The `event-media` plane resolves a raw MediaStore key (any id containing
+	* `:` goes to `getByKey`), so a face crop needs NO new plane and no new
+	* access decision — the same `authenticated` level already serves the track
+	* thumbnails the same operator is looking at.
+	*/
+	cropUrlFor(face) {
+		if (face.mediaKey === void 0 || face.mediaKey === "") return void 0;
+		const base = this.eventMediaBaseUrl();
+		if (base === null) return void 0;
+		return `${base}/${encodeURIComponent(face.mediaKey)}`;
+	}
 	async listRecentFaces(input) {
 		const faces = await this.faceStore.listAllRecentFaces({
 			limit: input?.limit,
@@ -8075,11 +8121,12 @@ var FaceGalleryProvider = class {
 		});
 		const identities = await this.identityStore.listIdentities();
 		const nameMap = new Map(identities.map((i) => [i.id, i.name]));
-		const result = [];
-		for (const face of faces) {
-			const base64 = await this.faceCropBase64(face);
+		const includeCrops = input?.includeCrops ?? true;
+		return mapWithConcurrency(faces, FACE_CROP_FETCH_CONCURRENCY, async (face) => {
+			const base64 = includeCrops ? await this.faceCropBase64(face) : void 0;
+			const cropUrl = this.cropUrlFor(face);
 			const identityName = face.recognizedIdentityId ? nameMap.get(face.recognizedIdentityId) : void 0;
-			result.push({
+			return {
 				faceId: face.id,
 				deviceId: face.deviceId,
 				trackId: face.trackId,
@@ -8088,15 +8135,15 @@ var FaceGalleryProvider = class {
 				...identityName !== void 0 ? { identityName } : {},
 				assigned: face.assigned,
 				...base64 !== void 0 ? { base64 } : {},
+				...cropUrl !== void 0 ? { cropUrl } : {},
 				...face.faceBbox !== void 0 ? { faceBbox: face.faceBbox } : {},
 				...face.keyFrameMediaKey !== void 0 ? { keyFrameMediaKey: face.keyFrameMediaKey } : {},
 				...face.bestMatchScore != null ? { bestMatchScore: face.bestMatchScore } : {},
 				...face.nativeFaceShortSidePx != null ? { nativeFaceShortSidePx: face.nativeFaceShortSidePx } : {},
 				...face.suggestedIdentityId != null ? { suggestedIdentityId: face.suggestedIdentityId } : {},
 				...face.suggestedMatchScore != null ? { suggestedMatchScore: face.suggestedMatchScore } : {}
-			});
-		}
-		return result;
+			};
+		});
 	}
 	/**
 	* Get a face by deviceId + trackId. Returns null if not found or if
@@ -20124,6 +20171,21 @@ var PlateRecognizer = class {
 	}
 };
 //#endregion
+//#region src/pipeline-analytics/read-slice.ts
+/**
+* The loaded slice, or `undefined` when it has never loaded and the one
+* permitted refresh also failed to produce it.
+*
+* A failing refresh is swallowed deliberately: every caller degrades to "no
+* zones / no rules", and a zone read must never take down the frame that asked.
+*/
+async function readSliceOnce(handle) {
+	const loaded = handle.value;
+	if (loaded !== void 0) return loaded;
+	await handle.refresh().catch(() => void 0);
+	return handle.value;
+}
+//#endregion
 //#region src/pipeline-analytics/rebuild-detail-request.ts
 /** The one step a rebuild runs. */
 var REBUILD_DETAIL_STEP_ID = "clip-embedding";
@@ -31305,7 +31367,7 @@ var PipelineAnalyticsAddon = class extends require_dist.BaseAddon {
 		let storage = this.ctx.kernel.storage;
 		const mediaRoot = process.env.CAMSTACK_MEDIA_ROOT?.trim();
 		if (mediaRoot) {
-			const { FilesystemStorageProvider } = await Promise.resolve().then(() => require("../node-CpXZkQ6V.js"));
+			const { FilesystemStorageProvider } = await Promise.resolve().then(() => require("../node-DTrkngzv.js"));
 			storage = new FilesystemStorageProvider(mediaRoot, { eventMedia: mediaRoot });
 			logger.info("pipeline-analytics: event media rooted at CAMSTACK_MEDIA_ROOT", { meta: { mediaRoot } });
 		}
@@ -32316,6 +32378,7 @@ var PipelineAnalyticsAddon = class extends require_dist.BaseAddon {
 			eventStore: stores.eventStore,
 			logger: this.ctx.logger,
 			refreshGallery: () => this.faceRecognizer?.refreshGallery(),
+			eventMediaBaseUrl: () => this.eventMediaBaseUrl,
 			emitFaceGalleryChanged: (payload) => this.emitFaceGalleryChanged(payload)
 		});
 		const plateGallery = new PlateGalleryProvider({
@@ -33327,10 +33390,7 @@ var PipelineAnalyticsAddon = class extends require_dist.BaseAddon {
 	async resolveDevicePackageRules(deviceId) {
 		const proxy = await this.ensureProxy(deviceId);
 		if (!proxy) return [];
-		const cached = proxy.state.zoneRules.value?.package;
-		if (cached && cached.length > 0) return cached;
-		await proxy.state.zoneRules.refresh().catch(() => void 0);
-		return proxy.state.zoneRules.value?.package ?? [];
+		return (await readSliceOnce(proxy.state.zoneRules))?.package ?? [];
 	}
 	/**
 	* Route one track's `runDetailSubtree` results (two-plane detail dispatch)
@@ -34638,10 +34698,7 @@ var PipelineAnalyticsAddon = class extends require_dist.BaseAddon {
 	async resolveDeviceZones(deviceId) {
 		const proxy = await this.ensureProxy(deviceId);
 		if (!proxy) return [];
-		const cached = proxy.state.zones.value?.zones;
-		if (cached && cached.length > 0) return cached;
-		await proxy.state.zones.refresh().catch(() => void 0);
-		return proxy.state.zones.value?.zones ?? [];
+		return (await readSliceOnce(proxy.state.zones))?.zones ?? [];
 	}
 	releaseProxy(deviceId) {
 		const unsubs = this.proxyUnsubs.get(deviceId);

package/dist/pipeline-analytics/index.mjs

@@ -1,4 +1,4 @@
-import { $ as array, B as subKindsOf, C as addonWidgetsSourceCapability, D as cosineSimilarity, E as buildEventKindDescriptor, F as kebabToCamel, G as BaseAddon, H as videoclipsCapability, I as notificationRulesCapability, J as hydrateSchema, K as DeviceType, L as pipelineAnalyticsCapability, M as faceGalleryCapability, O as customAction, P as isScheduleActive, Q as _enum, R as plateGalleryCapability, S as TrackSourceSchema, T as audioMetricsCapability, U as zoneAnalyticsCapability, V as vectorDimFromBase64, W as errMsg, X as nodePin, Y as isDeviceScopedCap, Z as sleep, _ as NcTaxonomySchema, a as EVENT_PAD_MS, at as string, b as TimelapseRuleInputSchema, c as NC_CONDITION_CATALOG, d as NcRuleInputSchema, et as boolean, f as NcRulePatchSchema, g as NcSnoozeSuppressedSchema, h as NcSnoozeSchema, i as EVENT_KIND_BY_CAP, it as record, j as encodeVectorBase64, k as defineCustomActions, l as NC_TAXONOMY, m as NcSnoozeInputSchema, n as DEFAULT_EVENT_COLOR, nt as number, o as LabelAttributionSchema, ot as unknown, p as NcRuleSchema, q as createEvent, r as DeclaredDevices, rt as object, s as MACRO_LABELS, st as EventCategory, t as BaseDevice, tt as literal, u as NcConditionDescriptorSchema, v as OpsLogEntrySchema, w as alarmPanelCapability, x as TimelapseRuleSchema, y as RetrainStatusSchema, z as readDeviceStateFrom } from "../dist-Da97q0x6.mjs";
+import { $ as array, B as subKindsOf, C as addonWidgetsSourceCapability, D as cosineSimilarity, E as buildEventKindDescriptor, F as kebabToCamel, G as BaseAddon, H as videoclipsCapability, I as notificationRulesCapability, J as hydrateSchema, K as DeviceType, L as pipelineAnalyticsCapability, M as faceGalleryCapability, O as customAction, P as isScheduleActive, Q as _enum, R as plateGalleryCapability, S as TrackSourceSchema, T as audioMetricsCapability, U as zoneAnalyticsCapability, V as vectorDimFromBase64, W as errMsg, X as nodePin, Y as isDeviceScopedCap, Z as sleep, _ as NcTaxonomySchema, a as EVENT_PAD_MS, at as string, b as TimelapseRuleInputSchema, c as NC_CONDITION_CATALOG, d as NcRuleInputSchema, et as boolean, f as NcRulePatchSchema, g as NcSnoozeSuppressedSchema, h as NcSnoozeSchema, i as EVENT_KIND_BY_CAP, it as record, j as encodeVectorBase64, k as defineCustomActions, l as NC_TAXONOMY, m as NcSnoozeInputSchema, n as DEFAULT_EVENT_COLOR, nt as number, o as LabelAttributionSchema, ot as unknown, p as NcRuleSchema, q as createEvent, r as DeclaredDevices, rt as object, s as MACRO_LABELS, st as EventCategory, t as BaseDevice, tt as literal, u as NcConditionDescriptorSchema, v as OpsLogEntrySchema, w as alarmPanelCapability, x as TimelapseRuleSchema, y as RetrainStatusSchema, z as readDeviceStateFrom } from "../dist-BVOgkikr.mjs";
 import { promises } from "node:fs";
 import path from "node:path";
 import { createHash, createHmac, randomUUID, timingSafeEqual } from "node:crypto";
@@ -6757,6 +6757,40 @@ function makeNcActionHandlers(deps) {
 		}
 	};
 }
+//#endregion
+//#region src/pipeline-analytics/data-plane-access.ts
+/**
+* Prefix literals for the export planes, mirrored here so the policy reads as
+* a table without importing three handler modules into the addon's boot path.
+* `data-plane-access.spec.ts` asserts they still match the constants their
+* handlers register with — a mirror nothing checks is a lie waiting to happen.
+*/
+var TRAINING_EXPORT_PREFIX_REF = "training-export";
+var RETRAIN_EXPORT_PREFIX_REF = "retrain-export";
+var DEBUG_EXPORT_PREFIX_REF = "debug-export";
+/**
+* Every data plane this addon serves, and the level the HUB enforces before it
+* proxies. Exhaustive by test: a new plane that forgets to appear here fails
+* `data-plane-access.spec.ts`.
+*/
+var PIPELINE_ANALYTICS_PLANE_ACCESS = {
+	/** One stored crop/thumbnail by an unguessable id the caller already holds. */
+	"event-media": "authenticated",
+	/** Self-authenticating single-use action token (D47). */
+	"nc-action": "public",
+	/** Self-authenticating single-use artifact token (D47). */
+	"nc-artifact": "public",
+	/** Every frame behind a marked selection — a corpus, not an item. */
+	[TRAINING_EXPORT_PREFIX_REF]: "admin",
+	[RETRAIN_EXPORT_PREFIX_REF]: "admin",
+	/** Diagnostic bundle: logs, config and frames. */
+	[DEBUG_EXPORT_PREFIX_REF]: "admin"
+};
+/** The declared level for a plane prefix. Typed, so a prefix with no declared
+*  policy is a compile error rather than a silent default. */
+function planeAccess(prefix) {
+	return PIPELINE_ANALYTICS_PLANE_ACCESS[prefix];
+}
 var MAX_EXPORT_BYTES = 256 * 1024 * 1024;
 var DebugFindingSchema = object({
 	code: string(),
@@ -7115,40 +7149,6 @@ function parseDebugDeviceIds(url) {
 	return out;
 }
 //#endregion
-//#region src/pipeline-analytics/data-plane-access.ts
-/**
-* Prefix literals for the export planes, mirrored here so the policy reads as
-* a table without importing three handler modules into the addon's boot path.
-* `data-plane-access.spec.ts` asserts they still match the constants their
-* handlers register with — a mirror nothing checks is a lie waiting to happen.
-*/
-var TRAINING_EXPORT_PREFIX_REF = "training-export";
-var RETRAIN_EXPORT_PREFIX_REF = "retrain-export";
-var DEBUG_EXPORT_PREFIX_REF = "debug-export";
-/**
-* Every data plane this addon serves, and the level the HUB enforces before it
-* proxies. Exhaustive by test: a new plane that forgets to appear here fails
-* `data-plane-access.spec.ts`.
-*/
-var PIPELINE_ANALYTICS_PLANE_ACCESS = {
-	/** One stored crop/thumbnail by an unguessable id the caller already holds. */
-	"event-media": "authenticated",
-	/** Self-authenticating single-use action token (D47). */
-	"nc-action": "public",
-	/** Self-authenticating single-use artifact token (D47). */
-	"nc-artifact": "public",
-	/** Every frame behind a marked selection — a corpus, not an item. */
-	[TRAINING_EXPORT_PREFIX_REF]: "admin",
-	[RETRAIN_EXPORT_PREFIX_REF]: "admin",
-	/** Diagnostic bundle: logs, config and frames. */
-	[DEBUG_EXPORT_PREFIX_REF]: "admin"
-};
-/** The declared level for a plane prefix. Typed, so a prefix with no declared
-*  policy is a compile error rather than a silent default. */
-function planeAccess(prefix) {
-	return PIPELINE_ANALYTICS_PLANE_ACCESS[prefix];
-}
-//#endregion
 //#region src/pipeline-analytics/debug/debug-export-handler.ts
 /**
 * Pacing. The export is a BACKGROUND job sharing a thread with live decode, so
@@ -7675,6 +7675,25 @@ var embeddingActions = defineCustomActions({
 	"embedding.wipe": customAction(NoInputSchema, WipeResultSchema, { auth: "admin" })
 });
 //#endregion
+//#region src/pipeline-analytics/map-with-concurrency.ts
+/**
+* Apply `mapper` to every item with at most `limit` in flight at once.
+*
+* A rejecting mapper rejects the whole call (same contract as `Promise.all`);
+* callers that must not fail a page for one bad row catch inside the mapper.
+*/
+async function mapWithConcurrency(items, limit, mapper) {
+	const results = new Array(items.length);
+	if (items.length === 0) return results;
+	const effectiveLimit = Math.max(1, Math.min(Math.trunc(limit), items.length));
+	const entries = items.entries();
+	const worker = async () => {
+		for (const [index, item] of entries) results[index] = await mapper(item, index);
+	};
+	await Promise.all(Array.from({ length: effectiveLimit }, () => worker()));
+	return results;
+}
+//#endregion
 //#region src/pipeline-analytics/pipeline/key-event-scoring.ts
 /**
 * key-event-scoring — the SINGLE deterministic "importance" scorer for a
@@ -7946,6 +7965,16 @@ function clusterByEmbedding(items, threshold = .5) {
 var OPERATOR_FACE_STEP_ID = "operator:face-gallery";
 /** Embedding model id used when enrolling face crops as identity samples. */
 var MODEL_ID = "arcface-r100";
+/**
+* How many face crops `listRecentFaces` resolves at once.
+*
+* Each crop costs a store round-trip plus a disk read, so the page is I/O-bound
+* and the serial form dominated the operator's assign latency. 16 recovers
+* nearly all of the win while leaving the UDS channel — shared with the live
+* detection path — far from saturated; unbounded would trade a slow page for a
+* stalled pipeline.
+*/
+var FACE_CROP_FETCH_CONCURRENCY = 16;
 var FaceGalleryProvider = class {
 	identityStore;
 	faceStore;
@@ -7954,6 +7983,7 @@ var FaceGalleryProvider = class {
 	eventStore;
 	logger;
 	refreshGallery;
+	eventMediaBaseUrl;
 	emitFaceGalleryChanged;
 	constructor(deps) {
 		this.identityStore = deps.identityStore;
@@ -7963,6 +7993,7 @@ var FaceGalleryProvider = class {
 		this.eventStore = deps.eventStore;
 		this.logger = deps.logger;
 		this.refreshGallery = deps.refreshGallery;
+		this.eventMediaBaseUrl = deps.eventMediaBaseUrl;
 		this.emitFaceGalleryChanged = deps.emitFaceGalleryChanged;
 	}
 	/** Best-effort emit — never allowed to fail the mutation it follows. */
@@ -8054,6 +8085,21 @@ var FaceGalleryProvider = class {
 		const media = await this.mediaStore.listByOwner("face", face.id);
 		return media.length > 0 ? media[0].base64 : void 0;
 	}
+	/**
+	* The crop as a data-plane URL, or undefined when there is no stored key or
+	* no plane to serve it.
+	*
+	* The `event-media` plane resolves a raw MediaStore key (any id containing
+	* `:` goes to `getByKey`), so a face crop needs NO new plane and no new
+	* access decision — the same `authenticated` level already serves the track
+	* thumbnails the same operator is looking at.
+	*/
+	cropUrlFor(face) {
+		if (face.mediaKey === void 0 || face.mediaKey === "") return void 0;
+		const base = this.eventMediaBaseUrl();
+		if (base === null) return void 0;
+		return `${base}/${encodeURIComponent(face.mediaKey)}`;
+	}
 	async listRecentFaces(input) {
 		const faces = await this.faceStore.listAllRecentFaces({
 			limit: input?.limit,
@@ -8061,11 +8107,12 @@ var FaceGalleryProvider = class {
 		});
 		const identities = await this.identityStore.listIdentities();
 		const nameMap = new Map(identities.map((i) => [i.id, i.name]));
-		const result = [];
-		for (const face of faces) {
-			const base64 = await this.faceCropBase64(face);
+		const includeCrops = input?.includeCrops ?? true;
+		return mapWithConcurrency(faces, FACE_CROP_FETCH_CONCURRENCY, async (face) => {
+			const base64 = includeCrops ? await this.faceCropBase64(face) : void 0;
+			const cropUrl = this.cropUrlFor(face);
 			const identityName = face.recognizedIdentityId ? nameMap.get(face.recognizedIdentityId) : void 0;
-			result.push({
+			return {
 				faceId: face.id,
 				deviceId: face.deviceId,
 				trackId: face.trackId,
@@ -8074,15 +8121,15 @@ var FaceGalleryProvider = class {
 				...identityName !== void 0 ? { identityName } : {},
 				assigned: face.assigned,
 				...base64 !== void 0 ? { base64 } : {},
+				...cropUrl !== void 0 ? { cropUrl } : {},
 				...face.faceBbox !== void 0 ? { faceBbox: face.faceBbox } : {},
 				...face.keyFrameMediaKey !== void 0 ? { keyFrameMediaKey: face.keyFrameMediaKey } : {},
 				...face.bestMatchScore != null ? { bestMatchScore: face.bestMatchScore } : {},
 				...face.nativeFaceShortSidePx != null ? { nativeFaceShortSidePx: face.nativeFaceShortSidePx } : {},
 				...face.suggestedIdentityId != null ? { suggestedIdentityId: face.suggestedIdentityId } : {},
 				...face.suggestedMatchScore != null ? { suggestedMatchScore: face.suggestedMatchScore } : {}
-			});
-		}
-		return result;
+			};
+		});
 	}
 	/**
 	* Get a face by deviceId + trackId. Returns null if not found or if
@@ -20110,6 +20157,21 @@ var PlateRecognizer = class {
 	}
 };
 //#endregion
+//#region src/pipeline-analytics/read-slice.ts
+/**
+* The loaded slice, or `undefined` when it has never loaded and the one
+* permitted refresh also failed to produce it.
+*
+* A failing refresh is swallowed deliberately: every caller degrades to "no
+* zones / no rules", and a zone read must never take down the frame that asked.
+*/
+async function readSliceOnce(handle) {
+	const loaded = handle.value;
+	if (loaded !== void 0) return loaded;
+	await handle.refresh().catch(() => void 0);
+	return handle.value;
+}
+//#endregion
 //#region src/pipeline-analytics/rebuild-detail-request.ts
 /** The one step a rebuild runs. */
 var REBUILD_DETAIL_STEP_ID = "clip-embedding";
@@ -32302,6 +32364,7 @@ var PipelineAnalyticsAddon = class extends BaseAddon {
 			eventStore: stores.eventStore,
 			logger: this.ctx.logger,
 			refreshGallery: () => this.faceRecognizer?.refreshGallery(),
+			eventMediaBaseUrl: () => this.eventMediaBaseUrl,
 			emitFaceGalleryChanged: (payload) => this.emitFaceGalleryChanged(payload)
 		});
 		const plateGallery = new PlateGalleryProvider({
@@ -33313,10 +33376,7 @@ var PipelineAnalyticsAddon = class extends BaseAddon {
 	async resolveDevicePackageRules(deviceId) {
 		const proxy = await this.ensureProxy(deviceId);
 		if (!proxy) return [];
-		const cached = proxy.state.zoneRules.value?.package;
-		if (cached && cached.length > 0) return cached;
-		await proxy.state.zoneRules.refresh().catch(() => void 0);
-		return proxy.state.zoneRules.value?.package ?? [];
+		return (await readSliceOnce(proxy.state.zoneRules))?.package ?? [];
 	}
 	/**
 	* Route one track's `runDetailSubtree` results (two-plane detail dispatch)
@@ -34624,10 +34684,7 @@ var PipelineAnalyticsAddon = class extends BaseAddon {
 	async resolveDeviceZones(deviceId) {
 		const proxy = await this.ensureProxy(deviceId);
 		if (!proxy) return [];
-		const cached = proxy.state.zones.value?.zones;
-		if (cached && cached.length > 0) return cached;
-		await proxy.state.zones.refresh().catch(() => void 0);
-		return proxy.state.zones.value?.zones ?? [];
+		return (await readSliceOnce(proxy.state.zones))?.zones ?? [];
 	}
 	releaseProxy(deviceId) {
 		const unsubs = this.proxyUnsubs.get(deviceId);

package/dist/pipeline-analytics/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-tCAuhv5m.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-uW2bbQBi.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-post-analysis",
-  "version": "1.2.53",
+  "version": "1.2.54",
   "description": "Post-Analysis bundle — enrichment, embedding-encoder, pipeline-analytics. Multi-entry npm package shipping addons that consume pipeline output.",
   "keywords": [
     "camstack",