@camstack/addon-post-analysis 1.2.627 → 1.2.628

package/dist/pipeline-analytics/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_clip_model_registry = require("../clip-model-registry-RSxtlgdN.js");
+const require_clip_model_registry = require("../clip-model-registry-CK0QHBLo.js");
 let node_fs = require("node:fs");
 node_fs = require_clip_model_registry.__toESM(node_fs, 1);
 let node_path = require("node:path");
@@ -9913,7 +9913,6 @@ var SCENE_LATCH_SPEC = {
 	fromRecord: latchFromRecord,
 	deviceIdOf: (row) => row.deviceId
 };
-SCENE_LATCH_SPEC.fromRecord, SCENE_LATCH_SPEC.toValue, SCENE_LATCH_SPEC.deviceIdOf;
 /**
 * The two ledgers behind one façade. Callers never see the split, but they can
 * never accidentally write one when they meant the other either: the config
@@ -22328,6 +22327,8 @@ function proposalOrigin(source, index, facts) {
 		...facts.modelId !== void 0 ? { modelId: facts.modelId } : {}
 	};
 }
+//#endregion
+//#region src/pipeline-analytics/retrain/retrain-taxonomy.ts
 var MACRO_SET = new Set([
 	"person",
 	"vehicle",
@@ -25908,7 +25909,6 @@ var NC_ALERTS_SPEC = {
 	equalFact: (held, incoming) => held.alerting === incoming.alerting,
 	deviceIdOf: (row) => deviceIdOf(row.subject)
 };
-NC_ALERTS_SPEC.fromRecord, NC_ALERTS_SPEC.toValue, NC_ALERTS_SPEC.deviceIdOf;
 /**
 * Which row the boot settle keeps for one subject observed inside the window
 * (D698's rule, applied to the alert ledger).
@@ -30641,7 +30641,6 @@ var NC_DEVICE_PRUNES_SPEC = {
 	deviceIdOf: (row) => row.subjectKind === "device" ? Number(row.subject) : void 0,
 	loadLimit: LOAD_LIMIT$1
 };
-NC_DEVICE_PRUNES_SPEC.fromRecord, NC_DEVICE_PRUNES_SPEC.toValue, NC_DEVICE_PRUNES_SPEC.deviceIdOf;
 /** The outcomes that mean "this last reference was already dealt with". */
 var KEPT_OUTCOMES = new Set(["kept-disabled", "kept"]);
 var NcPruneLedger = class {
@@ -45648,7 +45647,6 @@ var NC_ALERT_EPISODES_SPEC = {
 		};
 	}
 };
-NC_ALERT_EPISODES_SPEC.fromRecord, NC_ALERT_EPISODES_SPEC.toValue;
 var NcAlertEpisodeLedger = class {
 	ledger;
 	constructor(deps) {
@@ -45806,6 +45804,8 @@ function occupancyClassWarning(className) {
 	if (className === void 0 || require_clip_model_registry.isDetectionMacroClass(className)) return null;
 	return `⚠ “${className}” is a sub-type, not a macro class: this counter is always 0 (use ${[...require_clip_model_registry.DETECTION_MACRO_CLASSES].join(" / ")})`;
 }
+//#endregion
+//#region src/notification-center/occupancy-store.ts
 /**
 * The mechanics, declared once.
 *
@@ -45957,7 +45957,6 @@ function recordToRow(key, data) {
 		updatedAt
 	};
 }
-NC_OCCUPANCY_SPEC.fromRecord, NC_OCCUPANCY_SPEC.toValue, NC_OCCUPANCY_SPEC.deviceIdOf;
 //#endregion
 //#region src/notification-center/outbox.ts
 /**
@@ -48428,7 +48427,6 @@ var NC_SNOOZES_SPEC = {
 	},
 	loadLimit: 1e3
 };
-NC_SNOOZES_SPEC.fromRecord, NC_SNOOZES_SPEC.toValue;
 var NcSnoozeStore = class {
 	windows;
 	/** The `snooze-suppressed` records kind (events.db): the counters. */
@@ -52526,7 +52524,6 @@ var NC_SYSTEM_STATE_SPEC = {
 	},
 	deviceIdOf: (row) => row.deviceId
 };
-NC_SYSTEM_STATE_SPEC.fromRecord, NC_SYSTEM_STATE_SPEC.toValue, NC_SYSTEM_STATE_SPEC.deviceIdOf;
 /** The hub's own node id when an update row names none. */
 var HUB_NODE = "hub";
 function isUpdateTarget(value) {
@@ -53612,6 +53609,8 @@ var NcStateSummaryScheduler = class {
 		}
 	}
 };
+//#endregion
+//#region src/notification-center/state-summary/state-summary-stamps.ts
 var SPEC = {
 	collection: "notification-center:state-summary-stamps",
 	columns: [
@@ -53659,7 +53658,6 @@ var SPEC = {
 	},
 	loadLimit: 1e4
 };
-SPEC.fromRecord, SPEC.toValue;
 var NcStateSummaryStampStore = class {
 	ledger;
 	constructor(deps) {
@@ -74888,8 +74886,8 @@ var TrackCloser = class {
 			}
 		});
 	}
-	/** Emit the deprecated thin `TrackEnded` alias + the unified lifecycle
-	*  `end` event (the FULL final summary — fires ONCE per real track). */
+	/** Emit the thin `TrackEnded` event + the unified lifecycle `end` event
+	*  (the FULL final summary — fires ONCE per real track). */
 	emitEndEvents(t, duration, trackerPeakConfidence, keyFrameMediaId, summary) {
 		this.deps.emitTrackEnded({
 			deviceId: t.deviceId,
@@ -79215,22 +79213,22 @@ function buildTapeDeleteDeps(src) {
 		removeFile: src.removeFile
 	};
 }
-function unavailable(reason) {
+function unavailable$1(reason) {
 	return {
 		status: "unavailable",
 		reason
 	};
 }
 async function releaseOrUnavailable(deps, tapeId, queue) {
-	if (typeof deps === "string") return unavailable(deps);
+	if (typeof deps === "string") return unavailable$1(deps);
 	return queue.run((signal) => releaseTape(deps, tapeId, signal), { name: "release" });
 }
 async function deleteOrUnavailable(deps, tapeId, queue) {
-	if (typeof deps === "string") return unavailable(deps);
+	if (typeof deps === "string") return unavailable$1(deps);
 	return queue.run((signal) => deleteTape(deps, tapeId, signal), { name: "delete" });
 }
 async function reconcileOrUnavailable(deps, queue) {
-	if (typeof deps === "string") return unavailable(deps);
+	if (typeof deps === "string") return unavailable$1(deps);
 	return queue.run((signal) => reconcileTapePins(deps, signal), { name: "reconcile" });
 }
 /**
@@ -83794,6 +83792,9 @@ function isConfirmationCompatible(trackClassName, detectionMacroClass) {
 	if (track === "other" || det === "other") return true;
 	return track === det;
 }
+function isSessionDetectorUnavailable(answer) {
+	return answer !== null && "unavailable" in answer;
+}
 var undecided = (candidate, reason) => ({
 	trackId: candidate.trackId,
 	verdict: "undecided",
@@ -83816,7 +83817,7 @@ async function runConfirmation(candidate, config, deps, exhausted) {
 	const carried = candidate.evidenceCrop ?? null;
 	if (carried) {
 		const verdict = await measure(candidate, carried, config, deps, "carried");
-		if (verdict.verdict === "confirmed" || verdict.reason === "redetect-error") return verdict;
+		if (verdict.verdict === "confirmed" || verdict.reason === "redetect-error" || verdict.reason === "session-device-unavailable") return verdict;
 	}
 	let crop = await deps.fetchCrop(candidate);
 	let cropSource = "native";
@@ -83838,32 +83839,26 @@ async function measure(candidate, crop, config, deps, cropSource) {
 	deps.keepCrop?.(candidate, crop, cropSource);
 	const detections = await deps.redetect(crop);
 	if (detections === null) return undecided(candidate, "redetect-error");
+	if (isSessionDetectorUnavailable(detections)) return undecided(candidate, "session-device-unavailable");
 	let best;
 	let bestIncompatible;
-	let bestRefused;
-	for (const d of detections) {
-		const compatible = isConfirmationCompatible(candidate.className, d.macroClass);
-		if (d.refusedByDetectorFloor === true) {
-			if (compatible && (!bestRefused || d.score > bestRefused.score)) bestRefused = d;
-			continue;
-		}
-		if (compatible) {
-			if (!best || d.score > best.score) best = d;
-		} else if (!bestIncompatible || d.score > bestIncompatible.score) bestIncompatible = d;
+	for (const d of detections) if (isConfirmationCompatible(candidate.className, d.macroClass)) {
+		if (!best || d.score > best.score) best = d;
+	} else if (d.refusedByDetectorFloor !== true) {
+		if (!bestIncompatible || d.score > bestIncompatible.score) bestIncompatible = d;
 	}
 	const bar = barFor(candidate, config, deps);
 	const confirmed = best !== void 0 && best.score >= bar;
 	if (!confirmed && cropSource !== "native") return undecided(candidate, cropSource === "fallback" ? "fallback-inconclusive" : "carried-inconclusive");
 	const secondary = bestIncompatible ? promoteSecondary(candidate, bestIncompatible, bar, deps) : null;
-	const scored = best ?? bestRefused;
 	return {
 		trackId: candidate.trackId,
 		verdict: confirmed ? "confirmed" : "suppressed",
-		reason: confirmed ? "confirmed" : suppressionReason(best, bestRefused, bestIncompatible),
+		reason: confirmed ? "confirmed" : suppressionReason(best, bestIncompatible),
 		className: candidate.className,
 		appliedMinConfidence: bar,
 		cropSource,
-		...scored ? { bestScore: scored.score } : {},
+		...best ? { bestScore: best.score } : {},
 		...bestIncompatible ? {
 			bestIncompatibleClass: bestIncompatible.macroClass,
 			bestIncompatibleScore: bestIncompatible.score
@@ -83871,10 +83866,13 @@ async function measure(candidate, crop, config, deps, cropSource) {
 		...secondary ? { secondary } : {}
 	};
 }
-/** Why a measured native crop said no — first matching rule wins (D922). */
-function suppressionReason(best, bestRefused, bestIncompatible) {
-	if (best !== void 0) return "scored-below-threshold";
-	if (bestRefused !== void 0) return "below-detector-floor";
+/**
+* Why a measured native crop said no — first matching rule wins (D922). The
+* best compatible box is under the gate's bar either way; `below-detector-floor`
+* says the detector's own floor had refused it too (D925).
+*/
+function suppressionReason(best, bestIncompatible) {
+	if (best !== void 0) return best.refusedByDetectorFloor === true ? "below-detector-floor" : "scored-below-threshold";
 	if (bestIncompatible !== void 0) return "incompatible-class";
 	return "no-detection";
 }
@@ -86624,11 +86622,9 @@ function faceSizeScore(detectionFrameShortSidePx) {
 	return detectionFrameShortSidePx / FACE_SIZE_SCORE_REFERENCE_PX;
 }
 //#endregion
-//#region src/pipeline-analytics/face-identity-retraction.ts
+//#region src/pipeline-analytics/face-recognizer.ts
 /** The recognizer's step id — the attribution a face identity label carries. */
 var FACE_RECOGNIZER_STEP_ID = "face-recognizer";
-//#endregion
-//#region src/pipeline-analytics/face-recognizer.ts
 /** At most one "dropping imageless track" log per this interval, per recognizer. */
 var FACE_IMAGELESS_LOG_THROTTLE_MS = 6e4;
 /** At most one 'embedding magnitude' sample line per device per this interval. */
@@ -93068,6 +93064,9 @@ function buildBirthDecisionRecord(input) {
 		bestScore: input.bestScore ?? null,
 		appliedMinConfidence: input.appliedMinConfidence ?? null,
 		cropSource: input.cropSource ?? null,
+		detectorModelId: input.detector?.modelId ?? null,
+		detectorDeviceKey: input.detector?.deviceKey ?? null,
+		detectorNodeId: input.detector?.nodeId ?? null,
 		firstSeen,
 		...latency
 	};
@@ -93098,6 +93097,85 @@ function toConfirmationDetections(result) {
 	return [...kept, ...refused];
 }
 //#endregion
+//#region src/pipeline-analytics/confirmation-session-detector.ts
+/**
+* The detector the birth confirmation gate re-judges a birth WITH: the
+* session's own (D925).
+*
+* A birth is a claim made by one detector — the root model of the session that
+* produced the frame, on the inference-device pool it ran on. The gate asks
+* whether that claim holds on better pixels, so it must ask the SAME detector:
+* a different model has a different score scale and a different floor, and its
+* "no" says nothing about the claim. It used to ask the node's global default
+* (`getGlobalSteps`), which on a Coral node meant a CPU `yolov9t` re-judging an
+* `edgetpu` model's births.
+*
+* The identity rides the frame result (`rootStepId` / `rootModelId` /
+* `rootDeviceKey`, stamped by the executor with what it RAN), and the node is
+* the frame handle's — the same node the crop is cut on, so no new bytes cross
+* anywhere.
+*
+* When that detector cannot answer — no identity on the frame (an onboard
+* detector), the device in backoff or failed, or the executor running anything
+* other than exactly that model on exactly that pool — the answer is
+* `session-device-unavailable`: NO measurement. The gate defers the birth and
+* admits it once the deferral is exhausted. Another model is never asked.
+*
+* PURE apart from the injected `run`, so the matrix is testable without an
+* executor.
+*/
+/** The session detector named by a frame, or `null` when the frame names none in full. */
+function sessionDetectorOf(frame, nodeId) {
+	const { rootStepId, rootModelId, rootDeviceKey } = frame;
+	if (!rootStepId || !rootModelId || !rootDeviceKey || !nodeId) return null;
+	return {
+		stepId: rootStepId,
+		modelId: rootModelId,
+		deviceKey: rootDeviceKey,
+		nodeId
+	};
+}
+/**
+* The executor's refusal of a device it will not dispatch to: the liveness
+* refusal (`InferenceDeviceUnusableError`), a device key whose backend this
+* node does not know, or a pinned pool that cannot serve. Read from the
+* message because the error crosses a process boundary without its class.
+*/
+var DEVICE_REFUSAL = /inference device ".+" is (failed|backoff)|unknown backend|device-not-servable|model-not-servable/;
+/** Re-detect a crop with the session detector, or say why it could not. */
+async function redetectWithSessionDetector(detector, cropJpeg, deviceId, run) {
+	if (detector === null) return unavailable("the frame names no session detector");
+	let result;
+	try {
+		result = await run({
+			steps: [{
+				addonId: detector.stepId,
+				modelId: detector.modelId,
+				enabled: true
+			}],
+			image: new Uint8Array(cropJpeg),
+			deviceId,
+			plane: "frame",
+			deviceKey: detector.deviceKey
+		}, detector.nodeId);
+	} catch (err) {
+		const message = require_clip_model_registry.errMsg(err);
+		if (DEVICE_REFUSAL.test(message)) return unavailable(message);
+		return {
+			answer: null,
+			error: message
+		};
+	}
+	if (result !== null && (result.rootModelId !== detector.modelId || result.rootDeviceKey !== detector.deviceKey)) return unavailable(`ran ${result.rootModelId ?? "an unnamed model"} on ${result.rootDeviceKey ?? "an unnamed pool"}, not ${detector.modelId} on ${detector.deviceKey}`);
+	return { answer: toConfirmationDetections(result) };
+}
+function unavailable(detail) {
+	return { answer: {
+		unavailable: "session-device-unavailable",
+		detail
+	} };
+}
+//#endregion
 //#region src/pipeline-analytics/pipeline/birth-evidence-store.ts
 /**
 * The pixels a birth arrived with, held for as long as its deferral can last —
@@ -94007,7 +94085,6 @@ var PHANTOM_CELLS_SPEC = {
 	},
 	deviceIdOf: (row) => row.deviceId
 };
-PHANTOM_CELLS_SPEC.fromRecord, PHANTOM_CELLS_SPEC.toValue, PHANTOM_CELLS_SPEC.deviceIdOf;
 /**
 * The durable cell memory. Reads answer from RAM only (D49) — a gate that
 * consulted SQLite would be a gate that fails when SQLite is slow.
@@ -94207,7 +94284,6 @@ var PACKAGE_BACKGROUND_SPEC = {
 	},
 	deviceIdOf: (row) => row.deviceId
 };
-PACKAGE_BACKGROUND_SPEC.fromRecord, PACKAGE_BACKGROUND_SPEC.toValue, PACKAGE_BACKGROUND_SPEC.deviceIdOf;
 /**
 * The durable ghost-cycle memory. Reads answer from RAM only (D49); writes go
 * write-behind — a lost write costs one under-counted cycle, which is the
@@ -96772,7 +96848,6 @@ var STATIONARY_EVIDENCE_SPEC = {
 	},
 	deviceIdOf: (row) => row.deviceId
 };
-STATIONARY_EVIDENCE_SPEC.fromRecord, STATIONARY_EVIDENCE_SPEC.toValue, STATIONARY_EVIDENCE_SPEC.deviceIdOf;
 var StationaryEvidenceLedger = class {
 	ledger;
 	spec = STATIONARY_EVIDENCE_SPEC;
@@ -97307,7 +97382,6 @@ var STATIONARY_SPEC = {
 	fromRecord: rowToEntry,
 	deviceIdOf: (entry) => entry.deviceId
 };
-STATIONARY_SPEC.fromRecord, STATIONARY_SPEC.toValue, STATIONARY_SPEC.deviceIdOf;
 var StationaryObjectRegistry = class {
 	/** Entry ids per device — an INDEX over the ledger's mirror, not a second
 	*  copy of it. The entries themselves live in exactly one place. */
@@ -113388,9 +113462,6 @@ var KEYFRAME_CROP_MIN_SUBJECT_IOU = .5;
 *  evidence" and the temporal bound takes over. */
 var KEYFRAME_CROP_MAX_SAMPLE_GAP_MS = 1e3;
 var SETTINGS_CACHE_TTL_MS = 5e3;
-/** TTL for the per-node confirmation-gate detector-step cache (the node's
-*  default object-detector step rarely changes). */
-var CONFIRMATION_DETECTOR_CACHE_TTL_MS = 6e4;
 /** Padding applied to a birth box before re-detecting it — a little context
 *  around the subject improves the confirmation detector's recall. */
 var CONFIRMATION_CROP_PADDING = .15;
@@ -114178,11 +114249,6 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 	trackingSettingsCache = this.settingsCaches.registerDeviceCache("tracking", SETTINGS_CACHE_TTL_MS);
 	/** Per-device confirmation-gate settings cache (default off), TTL-mirrored. */
 	confirmationGateSettingsCache = this.settingsCaches.registerDeviceCache("confirmation-gate", SETTINGS_CACHE_TTL_MS);
-	/** Per-node detector-step cache for the confirmation gate's re-detection —
-	*  the node's default root object-detector reduced to a single childless
-	*  step, resolved lazily from `pipelineExecutor.getGlobalSteps` and reused.
-	*  NOT part of the settings-cache hub: node-keyed, not device-keyed. */
-	confirmationDetectorStepByNode = /* @__PURE__ */ new Map();
 	faceSettingsCache = this.settingsCaches.registerDeviceCache("face", SETTINGS_CACHE_TTL_MS);
 	/** GLOBAL face-recognition master switch (addon store), TTL-cached. */
 	faceGlobalEnabledCache = this.settingsCaches.registerGlobalCache("face-global-enabled", SETTINGS_CACHE_TTL_MS);
@@ -118452,7 +118518,6 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 		this.settingsCaches.clearAll();
 		this.rawDeviceBlobMirror.invalidateAll();
 		this.rawGlobalStoreMirror.invalidate();
-		this.confirmationDetectorStepByNode.clear();
 		this.trackStore?.clearAll();
 		this.stationaryRegistry = null;
 		this.bindingCache?.clearAll();
@@ -119110,6 +119175,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 			this.birthEvidence.remember(key, id, Buffer.from(t.birthEvidence.jpegBase64, "base64"), exhaustionNowMs);
 		}
 		const withBirthEvidence = /* @__PURE__ */ new Set();
+		const sessionDetector = frameHandle ? sessionDetectorOf(frame, frameHandle.nodeId) : null;
 		const run = await this.confirmTrackBirths(bornCandidates.map(({ id, t }) => {
 			const evidenceCrop = this.birthEvidence.get(key, id, exhaustionNowMs);
 			if (evidenceCrop !== null) withBirthEvidence.add(id);
@@ -119125,7 +119191,9 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 			source,
 			frameHandle,
 			frameWidth: result.frameWidth,
-			frameHeight: result.frameHeight
+			frameHeight: result.frameHeight,
+			sessionDetector,
+			attemptsFor: (trackId) => this.deferredBirths.attemptsFor(key, trackId)
 		}, exhaustedIds);
 		const outcome = run.outcome;
 		const gateNowMs = Date.now();
@@ -119180,6 +119248,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 				matchedThisFrame: t.matchedThisFrame,
 				birthEvidenceAvailable: withBirthEvidence.has(id),
 				decision: run.decisions.get(id),
+				sessionDetector,
 				decidedAtMs: gateNowMs,
 				firstSeen: this.trackStore?.peekActive(id)?.firstSeen ?? null
 			});
@@ -119949,74 +120018,30 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 		return this.confirmationGateSettingsCache.get(deviceId, (id) => this.readDeviceSettings(id, resolveConfirmationGateSettings));
 	}
 	/**
-	* Narrowed, version-skew-safe handle onto the `pipelineExecutor` cap — same
-	* structural-cast pattern as the `pipelineRunner` handle above. A node whose
-	* executor predates these methods simply yields `undefined`, and the
-	* confirmation gate then fails open (allows the birth).
-	*/
-	pipelineExecutorApi() {
-		const api = this.ctx?.api;
-		if (!api) return void 0;
-		return api.pipelineExecutor;
-	}
-	/**
-	* Resolve (and cache) the confirmation gate's re-detection step for a node:
-	* the node's DEFAULT root object-detector (from `getGlobalSteps`) reduced to a
-	* single CHILDLESS step, so the confirmation run does detection ONLY — no
-	* crop/classifier subtree. Cached per node (TTL) since the node default rarely
-	* changes. `null` ⇒ no detector available ⇒ the gate fails open.
+	* Re-run object detection on a confirmation crop JPEG with the SESSION'S
+	* detector (D925): the root model the birth's frame ran, on the device pool
+	* it ran on, pinned to that frame's node — the node the crop is cut on, so
+	* no new bytes cross anywhere. A session detector that cannot answer is
+	* `session-device-unavailable` (no measurement, the birth defers); another
+	* model is never asked. An inference failure is `null` (`redetect-error`).
 	*/
-	async resolveConfirmationDetectorStep(nodeId) {
-		const now = Date.now();
-		const cached = this.confirmationDetectorStepByNode.get(nodeId);
-		if (cached && now < cached.expiresAt) return cached.step;
-		let step = null;
-		const executor = this.pipelineExecutorApi();
-		if (executor?.getGlobalSteps) try {
-			const steps = await executor.getGlobalSteps.query(void 0, require_clip_model_registry.nodePin(nodeId));
-			const detector = steps?.find((s) => s.slot === "detector" && s.enabled) ?? steps?.find((s) => s.slot === "detector");
-			if (detector) step = {
-				addonId: detector.addonId,
-				...detector.modelId ? { modelId: detector.modelId } : {},
-				enabled: true
-			};
-		} catch (err) {
-			this.ctx.logger.debug("confirmation gate: getGlobalSteps failed", { meta: {
-				nodeId,
-				error: require_clip_model_registry.errMsg(err)
-			} });
-		}
-		this.confirmationDetectorStepByNode.set(nodeId, {
-			step,
-			expiresAt: now + CONFIRMATION_DETECTOR_CACHE_TTL_MS
+	async redetectCropForConfirmation(detector, deviceId, cropJpeg) {
+		const outcome = await redetectWithSessionDetector(detector, cropJpeg, deviceId, (request, nodeId) => this.ctx.api.pipelineExecutor.runPipeline.mutate({
+			...request,
+			steps: [...request.steps]
+		}, require_clip_model_registry.nodePin(nodeId)));
+		if (outcome.error !== void 0) this.ctx.logger.warn("confirmation gate: re-detection failed — birth deferred", {
+			tags: { deviceId },
+			meta: {
+				error: outcome.error,
+				...detector !== null ? {
+					modelId: detector.modelId,
+					deviceKey: detector.deviceKey,
+					node: detector.nodeId
+				} : {}
+			}
 		});
-		return step;
-	}
-	/**
-	* Re-run object detection on a confirmation crop JPEG via the frame-owning
-	* node's `pipelineExecutor` (pinned by `nodeId`, matching the native-crop
-	* fetch). Returns the crop's detections, or `null` on any unavailability /
-	* error so the gate fails open.
-	*/
-	async redetectCropForConfirmation(nodeId, deviceId, cropJpeg) {
-		const step = await this.resolveConfirmationDetectorStep(nodeId);
-		if (!step) return null;
-		const executor = this.pipelineExecutorApi();
-		if (!executor?.runPipeline) return null;
-		try {
-			return toConfirmationDetections(await executor.runPipeline.mutate({
-				steps: [step],
-				image: new Uint8Array(cropJpeg),
-				deviceId,
-				plane: "frame"
-			}, require_clip_model_registry.nodePin(nodeId)));
-		} catch (err) {
-			this.ctx.logger.debug("confirmation gate: re-detection failed — fail-open", {
-				tags: { deviceId },
-				meta: { error: require_clip_model_registry.errMsg(err) }
-			});
-			return null;
-		}
+		return outcome.answer;
 	}
 	/**
 	* Confirm a batch of track-birth candidates before they are created. Returns
@@ -120071,6 +120096,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 			bestScore: decision?.bestScore ?? null,
 			appliedMinConfidence: decision?.appliedMinConfidence ?? null,
 			cropSource: decision?.cropSource ?? null,
+			detector: decision !== void 0 && (decision.cropSource !== void 0 || decision.reason === "session-device-unavailable") ? input.sessionDetector ?? null : null,
 			decidedAtMs: input.decidedAtMs,
 			firstSeen: input.firstSeen,
 			motionOnsetAtMs,
@@ -120108,7 +120134,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 			});
 			return allConfirmed();
 		}
-		const nodeId = frameHandle.nodeId;
+		const { sessionDetector } = params;
 		const candidateNativeRecovery = /* @__PURE__ */ new Map();
 		for (const c of candidates) if (c.nativeRecovery !== void 0) candidateNativeRecovery.set(c.trackId, c.nativeRecovery);
 		return {
@@ -120135,7 +120161,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 						h: candidate.bbox.h
 					}, frameWidth, frameHeight, CONFIRMATION_CROP_PADDING, candidate.trackId, CONFIRMATION_CROP_MAX_WIDTH);
 				},
-				redetect: (cropJpeg) => this.redetectCropForConfirmation(nodeId, deviceId, cropJpeg),
+				redetect: (cropJpeg) => this.redetectCropForConfirmation(sessionDetector, deviceId, cropJpeg),
 				keepCrop: (candidate, cropJpeg) => {
 					offeredCrops.set(candidate.trackId, cropJpeg);
 				},
@@ -120160,6 +120186,12 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 						reason: decision.reason,
 						className: decision.className,
 						...decision.bestScore !== void 0 ? { bestScore: decision.bestScore } : {},
+						...sessionDetector !== null ? {
+							modelId: sessionDetector.modelId,
+							deviceKey: sessionDetector.deviceKey,
+							node: sessionDetector.nodeId
+						} : {},
+						attempts: params.attemptsFor(decision.trackId),
 						...decision.bestIncompatibleClass !== void 0 ? {
 							bestIncompatibleClass: decision.bestIncompatibleClass,
 							bestIncompatibleScore: decision.bestIncompatibleScore