@camstack/addon-post-analysis 1.2.641 → 1.2.642

package/dist/{clip-model-registry-Cw7Iy7Qi.mjs → clip-model-registry-CoH7ORtC.mjs}

@@ -48242,7 +48242,20 @@ var NcRuleInputSchema = object({
 	* save by the hub's grouping guard). `.optional()`, never `.default()`: the addon cap
 	* path does not run Zod defaults.
 	*/
-	groupingSec: number().int().min(5).max(60).optional()
+	groupingSec: number().int().min(5).max(60).optional(),
+	/**
+	* ASK ME TO CONFIRM DETECTIONS (#243): a DETECTION notification of this rule
+	* carries "Correct" / "Wrong" buttons (and, where the channel has room, a
+	* "Wrong, it is a <class>" choice). A tap marks the track for retraining, the
+	* same mark the Library writes, and records whose notification it was and
+	* when. A channel with no buttons gets the same two choices as links.
+	*
+	* `.optional()`, never `.default()` (a Zod default does not run on the addon
+	* cap path): absent and `false` both mean off, which is what every rule
+	* authored before this field meant. An editor turns it off by writing
+	* `false`, so it needs no `clear` key.
+	*/
+	askVerdict: boolean().optional()
 });
 /**
 * Partial patch for `updateRule` — any subset of the input fields, plus the

package/dist/{clip-model-registry-Qr0XipkX.js → clip-model-registry-Dj3lrvL2.js}

@@ -48273,7 +48273,20 @@ var NcRuleInputSchema = object({
 	* save by the hub's grouping guard). `.optional()`, never `.default()`: the addon cap
 	* path does not run Zod defaults.
 	*/
-	groupingSec: number().int().min(5).max(60).optional()
+	groupingSec: number().int().min(5).max(60).optional(),
+	/**
+	* ASK ME TO CONFIRM DETECTIONS (#243): a DETECTION notification of this rule
+	* carries "Correct" / "Wrong" buttons (and, where the channel has room, a
+	* "Wrong, it is a <class>" choice). A tap marks the track for retraining, the
+	* same mark the Library writes, and records whose notification it was and
+	* when. A channel with no buttons gets the same two choices as links.
+	*
+	* `.optional()`, never `.default()` (a Zod default does not run on the addon
+	* cap path): absent and `false` both mean off, which is what every rule
+	* authored before this field meant. An editor turns it off by writing
+	* `false`, so it needs no `clear` key.
+	*/
+	askVerdict: boolean().optional()
 });
 /**
 * Partial patch for `updateRule` — any subset of the input fields, plus the

package/dist/embedding-encoder/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_clip_model_registry = require("../clip-model-registry-Qr0XipkX.js");
+const require_clip_model_registry = require("../clip-model-registry-Dj3lrvL2.js");
 let node_fs = require("node:fs");
 node_fs = require_clip_model_registry.__toESM(node_fs);
 let node_path = require("node:path");

package/dist/embedding-encoder/index.mjs

@@ -1,4 +1,4 @@
-import { Qi as BaseAddon, _r as embeddingRequirementsUnavailableError, a as CLIP_EMBEDDING_STEP_ID, da as normalizeNodeId, gi as resolvePoolMemoryPolicy, gr as embeddingRequirementsFailedError, i as CLIP_TEXT_MODELS, l as resolveClusterModelPin, mr as embeddingModelFailedError, n as DEFAULT_CLIP_MODEL, ni as parseProcStatus, pr as embeddingEncoderCapability, r as CLIP_IMAGE_MODELS, t as BUILTIN_CLIP_MODELS, tn as PoolMemoryWatchdog } from "../clip-model-registry-Cw7Iy7Qi.mjs";
+import { Qi as BaseAddon, _r as embeddingRequirementsUnavailableError, a as CLIP_EMBEDDING_STEP_ID, da as normalizeNodeId, gi as resolvePoolMemoryPolicy, gr as embeddingRequirementsFailedError, i as CLIP_TEXT_MODELS, l as resolveClusterModelPin, mr as embeddingModelFailedError, n as DEFAULT_CLIP_MODEL, ni as parseProcStatus, pr as embeddingEncoderCapability, r as CLIP_IMAGE_MODELS, t as BUILTIN_CLIP_MODELS, tn as PoolMemoryWatchdog } from "../clip-model-registry-CoH7ORtC.mjs";
 import { createRequire } from "node:module";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/pipeline-analytics/{_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-Cct0TMzC.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-Dhan9FH4.mjs}

@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.422",
+		version: "1.2.423",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_analytics_widgets",

package/dist/pipeline-analytics/{hostInit-B9c2FowI.mjs → hostInit-j1gxJvS7.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.2.422",
+				version: "1.2.423",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/pipeline-analytics/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_clip_model_registry = require("../clip-model-registry-Qr0XipkX.js");
+const require_clip_model_registry = require("../clip-model-registry-Dj3lrvL2.js");
 let node_fs = require("node:fs");
 node_fs = require_clip_model_registry.__toESM(node_fs, 1);
 let node_path = require("node:path");
@@ -757,6 +757,8 @@ var DEFAULT_ACTION_TTL_MS = 15 * 6e4;
 * notification that is not fresh.
 */
 var SNOOZE_ACTION_TTL_MS = 60 * 6e4;
+/** How long a Correct / Wrong button stays live: one day. */
+var VERDICT_ACTION_TTL_MS = 1440 * 6e4;
 /**
 * How long a DISARM button stays live: five minutes.
 *
@@ -784,6 +786,7 @@ function actionTtlMs(subject) {
 		case "sequence": return DEFAULT_ACTION_TTL_MS;
 		case "addon-update": return DEFAULT_ACTION_TTL_MS;
 		case "server-update": return DEFAULT_ACTION_TTL_MS;
+		case "detection-verdict": return VERDICT_ACTION_TTL_MS;
 	}
 }
 var NcActionTokenRegistry = class {
@@ -827,6 +830,30 @@ var NcActionTokenRegistry = class {
 			grant: found.grant
 		};
 	}
+	/**
+	* Read the grant without spending it. ONLY the confirm page of a link-only
+	* channel may call this: it exists so a link preview that opens the URL
+	* cannot spend the token, and it never runs anything.
+	*/
+	peek(id) {
+		const found = this.grants.get(id);
+		if (found === void 0) return {
+			ok: false,
+			reason: "unknown"
+		};
+		if (found.used) return {
+			ok: false,
+			reason: "already-used"
+		};
+		if (found.grant.expiresAt <= this.now()) return {
+			ok: false,
+			reason: "expired"
+		};
+		return {
+			ok: true,
+			grant: found.grant
+		};
+	}
 	/** Drop records that can no longer be claimed. Memory hygiene only — an
 	*  expired record is already refused by {@link claim}, so a sweep that never
 	*  ran would cost bytes, never safety. */
@@ -868,6 +895,7 @@ function describeGrant(grant) {
 			return grant.action === "disarm" ? "Alarm disarmed" : `Alarm armed${grant.mode !== void 0 ? ` (${grant.mode})` : ""}`;
 		case "addon-update": return `${grant.packages.length} addon update(s) on ${grant.nodeId}`;
 		case "server-update": return `Server update on ${grant.nodeId}`;
+		case "detection-verdict": return grant.verdict === "correct" ? "Marked correct — kept for retraining" : grant.suggestedClass === void 0 ? "Marked wrong — kept for retraining" : `Marked wrong, it was a ${grant.suggestedClass} — kept for retraining`;
 	}
 }
 /** The audit line's `meta`, per family. A snooze that logged a `sequence` it
@@ -921,6 +949,15 @@ function grantMeta(grant) {
 			...common,
 			nodeId: grant.nodeId
 		};
+		case "detection-verdict": return {
+			...common,
+			ruleId: grant.ruleId,
+			rule: grant.ruleName,
+			userId: grant.userId,
+			trackId: grant.trackId,
+			verdict: grant.verdict,
+			suggestedClass: grant.suggestedClass ?? null
+		};
 	}
 }
 /** What the human standing in front of the page is told. */
@@ -929,6 +966,11 @@ var FAILURE_COPY = {
 	expired: "This button has expired. Open CamStack to do it there.",
 	"already-used": "Already done — this button had been used."
 };
+/** The question a link-only channel lands on, answered by a POST form. */
+function confirmPage(url, grant) {
+	const action = `${url.pathname}?exp=${encodeURIComponent(url.searchParams.get("exp") ?? "")}&amp;sig=${encodeURIComponent(url.searchParams.get("sig") ?? "")}&amp;confirm=1`;
+	return `<!doctype html><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Confirm</title><style>body{font:16px/1.5 system-ui,sans-serif;margin:0;min-height:100vh;display:grid;place-items:center;background:#111;color:#eee}main{max-width:24rem;padding:2rem;text-align:center}h1{font-size:1.25rem;margin:0 0 1rem}button{font:inherit;padding:.6rem 1.4rem;border-radius:.5rem;border:0;background:#3b82f6;color:#fff}</style><main><h1>Confirm</h1><p>${grant.verdict === "correct" ? "Mark this detection as correct?" : grant.suggestedClass === void 0 ? "Mark this detection as wrong?" : `Mark this detection as wrong, it was a ${grant.suggestedClass}?`}</p><form method="post" action="${action}"><button type="submit">Confirm</button></form></main>`;
+}
 function page(title, detail) {
 	return `<!doctype html><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>${title}</title><style>body{font:16px/1.5 system-ui,sans-serif;margin:0;min-height:100vh;display:grid;place-items:center;background:#111;color:#eee}main{max-width:24rem;padding:2rem;text-align:center}h1{font-size:1.25rem;margin:0 0 .5rem}p{margin:0;color:#aaa}</style><main><h1>${title}</h1><p>${detail}</p></main>`;
 }
@@ -942,7 +984,8 @@ var NcActionPlane = class {
 	handler = async (req, res) => {
 		const url = new URL(req.url ?? "/", "http://placeholder");
 		const id = decodeURIComponent(url.pathname.split("/").filter(Boolean).pop() ?? "");
-		const background = (req.method ?? "GET").toUpperCase() === "POST";
+		const posted = (req.method ?? "GET").toUpperCase() === "POST";
+		const background = posted && url.searchParams.get("confirm") !== "1";
 		if (!verifyActionSignature({
 			secret: this.deps.secret,
 			id,
@@ -954,6 +997,13 @@ var NcActionPlane = class {
 			this.reply(res, background, 404, "Not found", "This link is not valid.");
 			return;
 		}
+		if (!posted) {
+			const peeked = this.deps.registry.peek(id);
+			if (peeked.ok && peeked.grant.kind === "detection-verdict" && peeked.grant.viaLink === true) {
+				this.sendBody(res, 200, "text/html; charset=utf-8", confirmPage(url, peeked.grant));
+				return;
+			}
+		}
 		const claim = this.deps.registry.claim(id);
 		if (!claim.ok) {
 			this.deps.logger.info("nc action callback not claimable", { meta: {
@@ -1099,6 +1149,7 @@ var ncDurableRecordKinds = require_clip_model_registry.defineRecordKinds({
 	"state-summary-stamps": ledger("digest delivery stamps per rule kind"),
 	meta: ledger("outbox boot-reconcile watermark and other single-key meta rows", "settings", { none: "one fixed key (watermark), overwritten in place, never deleted" }),
 	snoozes: ledger("operator opens or closes a snooze window (write-through)"),
+	"detection-verdicts": ledger("operator taps Correct or Wrong on a detection notification; one row per track"),
 	"snooze-suppressed": {
 		...QUERIED,
 		class: "ledger",
@@ -9234,6 +9285,9 @@ var en_default = {
 	"action.addon-update.uptodate": "Already up to date on {{nodeId}} — nothing to do",
 	"action.addon-update.unknown": "Could not read what needs updating on {{nodeId}} — nothing was changed. Open CamStack.",
 	"button.server-update.apply": "Update server on {{nodeId}}",
+	"button.verdict.correct": "Correct",
+	"button.verdict.wrong": "Wrong",
+	"button.verdict.wrongAs": "Wrong: it is {{class}}",
 	"action.server-update.title": "Server update",
 	"action.server-update.started": "Updating server on {{nodeId}}…",
 	"action.server-update.restarting": "Server update staged on {{nodeId}} — the node is restarting. You will hear when it comes back.",
@@ -9635,6 +9689,9 @@ var it_default = {
 	"action.addon-update.uptodate": "Già aggiornato su {{nodeId}} — niente da fare",
 	"action.addon-update.unknown": "Non è stato possibile leggere cosa aggiornare su {{nodeId}} — non è stato cambiato nulla. Apri CamStack.",
 	"button.server-update.apply": "Aggiorna server su {{nodeId}}",
+	"button.verdict.correct": "Corretto",
+	"button.verdict.wrong": "Sbagliato",
+	"button.verdict.wrongAs": "Sbagliato: è {{class}}",
 	"action.server-update.title": "Aggiornamento server",
 	"action.server-update.started": "Aggiornamento server su {{nodeId}}…",
 	"action.server-update.restarting": "Aggiornamento server predisposto su {{nodeId}} — il nodo si riavvia. Ti avviseremo quando torna.",
@@ -59797,6 +59854,25 @@ var TrackAlreadyTrainedError = class extends Error {
 	}
 };
 /**
+* Classify a failed `setTrackFlags` as one of the lifecycle's DELIBERATE
+* refusals, or `null` when it is a failure of the call itself.
+*
+* Needed because the caller that matters (a notification button) reaches the
+* method over `ctx.api`, where the error class does not survive the hop and
+* only the message does. The class check comes first; the message check is the
+* transported form, and `track-flags.spec.ts` pins it against the real
+* messages so a reworded refusal cannot silently turn into a generic failure.
+*/
+function retrainRefusalReason(err) {
+	if (err instanceof TrackAlreadyTrainedError) return "trained";
+	if (err instanceof StagingBudgetExceededError) return "budget";
+	const message = err instanceof Error ? err.message : "";
+	if (message.includes("is already trained")) return "trained";
+	if (message.includes("in retrain staging")) return "budget";
+	if (message.includes("unknown track")) return "unknown-track";
+	return null;
+}
+/**
 * The `debugNote` half of the patch — `{}` when nothing should be written.
 *
 * The note is not an independent column: it is the operator's sentence about
@@ -81938,6 +82014,10 @@ var NC_DEVICE_ROW_KINDS = [
 	{
 		key: "nc-artifacts",
 		kind: ncDurableRecordKinds.artifacts
+	},
+	{
+		key: "nc-detection-verdicts",
+		kind: ncDurableRecordKinds["detection-verdicts"]
 	}
 ];
 /**
@@ -82357,6 +82437,82 @@ var NcSequenceStore = class NcSequenceStore {
 	}
 };
 //#endregion
+//#region src/notification-center/detection-verdict-ledger.ts
+/**
+* @durable class=ledger owner=notification-center
+*   write="the operator taps Correct / Wrong on a detection notification; one row per track, the latest answer replaces the earlier one"
+*   retention="none — bounded by the tracks a rule asked about; deleted with the camera by the device-removal hook"
+*/
+var NC_DETECTION_VERDICTS_COLLECTION = "notification-center:detection-verdicts";
+var NC_DETECTION_VERDICTS_COLUMNS = [
+	{
+		name: "id",
+		type: "TEXT",
+		primaryKey: true,
+		notNull: true
+	},
+	{
+		name: "ruleId",
+		type: "TEXT",
+		notNull: true
+	},
+	{
+		name: "at",
+		type: "INTEGER",
+		notNull: true
+	},
+	(
+	/** The FULL row (Zod-validated on read). */
+	{
+		name: "row",
+		type: "JSON",
+		notNull: true
+	})
+];
+var NcDetectionVerdictRecordSchema = require_clip_model_registry.object({
+	trackId: require_clip_model_registry.string().min(1),
+	deviceId: require_clip_model_registry.number().int(),
+	verdict: require_clip_model_registry._enum(["correct", "wrong"]),
+	/** The class the operator said it really was. Only with `wrong`. */
+	suggestedClass: require_clip_model_registry.string().min(1).optional(),
+	/** Whose notification it was (the token's frozen owner), NOT who tapped. */
+	userId: require_clip_model_registry.string().min(1),
+	ruleId: require_clip_model_registry.string().min(1),
+	ruleName: require_clip_model_registry.string(),
+	at: require_clip_model_registry.number()
+});
+var NC_DETECTION_VERDICTS_SPEC = {
+	collection: NC_DETECTION_VERDICTS_COLLECTION,
+	columns: [...NC_DETECTION_VERDICTS_COLUMNS],
+	writeMode: "write-through",
+	keyOf: (row) => row.trackId,
+	toValue: (row) => ({
+		ruleId: row.ruleId,
+		at: row.at,
+		row
+	}),
+	fromRecord: (_key, data) => {
+		const parsed = NcDetectionVerdictRecordSchema.safeParse(data["row"]);
+		return parsed.success ? parsed.data : null;
+	},
+	deviceIdOf: (row) => row.deviceId,
+	loadLimit: 1e4
+};
+var NcDetectionVerdictLedger = class {
+	ledger;
+	constructor(deps) {
+		this.ledger = new DurableLedger({
+			spec: NC_DETECTION_VERDICTS_SPEC,
+			kind: deps.records.kind(ncDurableRecordKinds["detection-verdicts"]),
+			logger: deps.logger
+		});
+	}
+	/** Write-through; throws on a failed write so the tap reports it. */
+	async record(row) {
+		await this.ledger.put(NcDetectionVerdictRecordSchema.parse(row));
+	}
+};
+//#endregion
 //#region src/notification-center/device-prune.ts
 function judgeList(list, isDead) {
 	const dead = list.filter(isDead);
@@ -83311,6 +83467,64 @@ var NcDeviceStateCache = class {
 	}
 };
 //#endregion
+//#region src/notification-center/detection-verdict-buttons.ts
+var VERDICT_CORRECT_ID = "detection-verdict-correct";
+var VERDICT_WRONG_ID = "detection-verdict-wrong";
+/** `detection-verdict-wrong:<class>` — Wrong, and what it really was. */
+var VERDICT_WRONG_AS_PREFIX = "detection-verdict-wrong:";
+/** The macro classes offered as "it was really…". Short on purpose. */
+var VERDICT_CLASS_CHOICES = [
+	"person",
+	"vehicle",
+	"animal"
+];
+/** At most this many class buttons, and only when the channel has room. */
+var VERDICT_MAX_CLASS_CHOICES = 2;
+function verdictButtonRefusal(subject) {
+	if (!subject.askVerdict) return "rule-off";
+	if (subject.trackId === void 0) return "no-track";
+	if (subject.ownerUserId === void 0) return "unowned-target";
+	return null;
+}
+/** The classes worth offering for a subject of `className`. */
+function verdictClassChoices(className) {
+	return VERDICT_CLASS_CHOICES.filter((c) => c !== className).slice(0, VERDICT_MAX_CLASS_CHOICES);
+}
+/**
+* Which buttons a channel with `maxActions` slots gets. `maxActions` absent
+* (the kind catalog did not answer) is treated as the common floor of three:
+* the two plain choices, never the class ones. The class choices appear only
+* when the channel declared room for a fourth button.
+*/
+function verdictButtonSpecs(input) {
+	const base = [{
+		actionId: VERDICT_CORRECT_ID,
+		verdict: "correct"
+	}, {
+		actionId: VERDICT_WRONG_ID,
+		verdict: "wrong"
+	}];
+	if (input.maxActions === void 0 || input.maxActions <= 3) return base;
+	const room = input.maxActions - base.length;
+	const extra = verdictClassChoices(input.className).slice(0, room).map((suggestedClass) => ({
+		actionId: `${VERDICT_WRONG_AS_PREFIX}${suggestedClass}`,
+		verdict: "wrong",
+		suggestedClass
+	}));
+	return [...base, ...extra];
+}
+/** Is this one of our buttons (so a link-only channel can lift it into the body)? */
+function isVerdictAction(action) {
+	return action.id === VERDICT_CORRECT_ID || action.id.startsWith(VERDICT_WRONG_ID);
+}
+/**
+* The body lines that carry the verdict choices on a channel with no buttons.
+* A bare URL per line: every chat and mail client linkifies it.
+*/
+function verdictLinkLines(actions) {
+	return actions.filter(isVerdictAction).map((a) => `${a.label}: ${a.url ?? ""}`).join("\n");
+}
+//#endregion
 //#region src/notification-center/state-summary/state-model.ts
 /**
 * The STATE SUMMARY's vocabulary (D647): its sections, and what one reported
@@ -87019,6 +87233,8 @@ var NcDispatcher = class {
 				targetId: target.id,
 				...target.ownerUserId !== void 0 ? { ownerUserId: target.ownerUserId } : {},
 				...entry.payload.subject.className !== void 0 ? { className: entry.payload.subject.className } : {},
+				...entry.payload.subject.trackId !== void 0 ? { trackId: entry.payload.subject.trackId } : {},
+				...target.maxActions !== void 0 ? { maxActions: target.maxActions } : {},
 				...entry.payload.subject.systemEvent !== void 0 ? { systemEvent: entry.payload.subject.systemEvent } : {}
 			});
 		} catch (err) {
@@ -87114,9 +87330,13 @@ var NcDispatcher = class {
 				...summarySectionOf(systemEvent.data)
 			} } : {}
 		}) : null;
-		const actions = await this.mintActions(entry, target);
+		const minted = await this.mintActions(entry, target);
+		const linkOnly = target.maxActions === 0;
+		const verdictLinks = linkOnly ? verdictLinkLines(minted) : "";
+		const actions = linkOnly ? minted.filter((a) => !isVerdictAction(a)) : minted;
+		const withLinks = (text) => verdictLinks === "" ? text : `${text}\n\n${verdictLinks}`;
 		const notification = {
-			body,
+			body: withLinks(body),
 			title,
 			priority: clampPriority(paramNumber(entry.payload.params, "priority") ?? entry.payload.priority),
 			...params,
@@ -87138,7 +87358,7 @@ var NcDispatcher = class {
 			grouped: resolved.grouped,
 			withAiText: (aiText) => ({
 				...notification,
-				body: renderBody(aiText)
+				body: withLinks(renderBody(aiText))
 			})
 		};
 	}
@@ -99751,6 +99971,55 @@ async function mintButtons(host, input) {
 	const announcement = stored === null && input.ruleId === NC_ALARM_ANNOUNCE_RULE_ID;
 	if (stored === null && !announcement) return [];
 	const drafts = [];
+	const verdictRefusal = verdictButtonRefusal({
+		askVerdict: stored?.askVerdict === true,
+		...input.trackId !== void 0 ? { trackId: input.trackId } : {},
+		...input.ownerUserId !== void 0 ? { ownerUserId: input.ownerUserId } : {}
+	});
+	if (stored?.askVerdict === true && verdictRefusal !== null) host.logger.info("detection notification carries no verdict buttons", {
+		tags: { deviceId: input.deviceId },
+		meta: {
+			ruleId: input.ruleId,
+			reason: verdictRefusal,
+			targetId: input.targetId
+		}
+	});
+	const verdictTrackId = input.trackId;
+	const verdictOwner = input.ownerUserId;
+	const verdictButtons = verdictRefusal !== null || verdictTrackId === void 0 || verdictOwner === void 0 ? [] : verdictButtonSpecs({
+		className: input.className,
+		maxActions: input.maxActions
+	}).map((spec) => {
+		const id = (0, node_crypto.randomUUID)();
+		drafts.push({
+			id,
+			ttlMs: actionTtlMs({ kind: "detection-verdict" }),
+			grant: (expiresAt) => ({
+				kind: "detection-verdict",
+				id,
+				verdict: spec.verdict,
+				trackId: verdictTrackId,
+				ruleId: input.ruleId,
+				ruleName: input.ruleName,
+				userId: verdictOwner,
+				...spec.suggestedClass !== void 0 ? { suggestedClass: spec.suggestedClass } : {},
+				...input.maxActions === 0 ? { viaLink: true } : {},
+				deviceId: input.deviceId,
+				actionId: spec.actionId,
+				targetId: input.targetId,
+				expiresAt
+			})
+		});
+		return {
+			id: spec.actionId,
+			label: spec.suggestedClass === void 0 ? host.texts.text({ key: spec.verdict === "correct" ? "button.verdict.correct" : "button.verdict.wrong" }) : host.texts.text({
+				key: "button.verdict.wrongAs",
+				vars: { class: spec.suggestedClass }
+			}),
+			url: id,
+			mode: "background"
+		};
+	});
 	const sequenceButtons = host.actionRunner === null || stored === null ? [] : buildActionButtons({
 		actions: stored.actions,
 		knownSequenceIds: host.sequences.knownIds(),
@@ -99963,6 +100232,7 @@ async function mintButtons(host, input) {
 		}
 	});
 	const out = [
+		...verdictButtons,
 		...sequenceButtons,
 		...snoozeButtons,
 		...alarmButtons,
@@ -100186,8 +100456,53 @@ async function runGrantedAction(host, grant) {
 		case "sequence": return host.runGrantedSequence(grant);
 		case "addon-update": return host.applyGrantedAddonUpdate(grant);
 		case "server-update": return host.applyGrantedServerUpdate(grant);
+		case "detection-verdict": return host.applyGrantedDetectionVerdict(grant);
 	}
 }
+/** What a person is told when the retrain lifecycle refuses the mark. */
+var VERDICT_REFUSAL_COPY = {
+	trained: "This track was already used for training — nothing was changed",
+	budget: "This camera already holds as many tracks for retraining as it may — nothing was changed",
+	"unknown-track": "This track is no longer available — nothing was changed"
+};
+/**
+* Mark the track one notification reported for retraining, and record who was
+* asked and when.
+*
+* Order matters. The MARK goes first and is the authority: a refusal ("already
+* trained", "budget full") means the operator's answer changed nothing, so no
+* ledger row is written for an answer that was not applied. The token is
+* already spent (D47) — the refusal is shown as the reason, not a retry.
+*/
+async function applyGrantedDetectionVerdict(host, grant) {
+	const mark = host.deps.markTrackForRetrain;
+	if (mark === void 0) throw new Error("no retrain mark is wired on this node");
+	const outcome = await mark({
+		deviceId: grant.deviceId,
+		trackId: grant.trackId
+	});
+	if (!outcome.ok) {
+		host.logger.info("detection verdict changed nothing — the retrain flow refused the mark", {
+			tags: { deviceId: grant.deviceId },
+			meta: {
+				trackId: grant.trackId,
+				reason: outcome.reason,
+				verdict: grant.verdict
+			}
+		});
+		throw new NcActionRefusedError(VERDICT_REFUSAL_COPY[outcome.reason]);
+	}
+	await host.verdicts.record({
+		trackId: grant.trackId,
+		deviceId: grant.deviceId,
+		verdict: grant.verdict,
+		...grant.suggestedClass !== void 0 ? { suggestedClass: grant.suggestedClass } : {},
+		userId: grant.userId,
+		ruleId: grant.ruleId,
+		ruleName: grant.ruleName,
+		at: host.now()
+	});
+}
 /**
 * Apply the addon updates one notification was about.
 *
@@ -105364,6 +105679,7 @@ var NotificationCenter = class {
 	* evaluating one.
 	*/
 	pruneLedger;
+	verdicts;
 	/** D905: which rules cannot work, announced once per distinct reason. */
 	ruleHealth = new NcRuleHealthMonitor();
 	/** The prune itself — see `device-prune-runner.ts`. */
@@ -105592,6 +105908,11 @@ var NotificationCenter = class {
 			applyGrantedArmAnyway: (panel, grant) => self.applyGrantedArmAnyway(panel, grant),
 			applyGrantedBypassInput: (panel, grant) => self.applyGrantedBypassInput(panel, grant),
 			applyGrantedServerUpdate: (grant) => self.applyGrantedServerUpdate(grant),
+			applyGrantedDetectionVerdict: (grant) => self.applyGrantedDetectionVerdict(grant),
+			now: self.now,
+			get verdicts() {
+				return self.verdicts;
+			},
 			applyGrantedSnooze: (grant) => self.applyGrantedSnooze(grant),
 			get deps() {
 				return self.deps;
@@ -105642,6 +105963,9 @@ var NotificationCenter = class {
 	async applyGrantedAddonUpdate(grant) {
 		return applyGrantedAddonUpdate(this.grantedActionsHost(), grant);
 	}
+	async applyGrantedDetectionVerdict(grant) {
+		return applyGrantedDetectionVerdict(this.grantedActionsHost(), grant);
+	}
 	async applyGrantedServerUpdate(grant) {
 		return applyGrantedServerUpdate(this.grantedActionsHost(), grant);
 	}
@@ -105881,6 +106205,10 @@ var NotificationCenter = class {
 		}
 		this.summaryRules = NcSummaryStore.of(deps.records, this.logger.child("summary"), deps.now);
 		this.calendarEventsRules = NcCalendarEventsStore.of(deps.records, this.logger.child("calendar-events"), deps.now);
+		this.verdicts = new NcDetectionVerdictLedger({
+			...durableStore,
+			logger: this.logger.child("detection-verdicts")
+		});
 		this.pruneLedger = new NcPruneLedger({
 			...durableStore,
 			logger: this.logger.child("device-prune")
@@ -108488,6 +108816,23 @@ var BuildNotificationCenter = class extends BuildNotificationCenterBase {
 					};
 				}
 			},
+			markTrackForRetrain: async ({ deviceId, trackId }) => {
+				try {
+					await this.ctx.api.pipelineAnalytics.setTrackFlags.mutate({
+						deviceId,
+						trackId,
+						flags: { markForTrain: true }
+					});
+					return { ok: true };
+				} catch (err) {
+					const reason = retrainRefusalReason(err);
+					if (reason === null) throw err;
+					return {
+						ok: false,
+						reason
+					};
+				}
+			},
 			readDeviceStates: async (ids) => {
 				const out = /* @__PURE__ */ new Map();
 				for (const id of ids) try {
@@ -108559,9 +108904,11 @@ var BuildNotificationCenter = class extends BuildNotificationCenterBase {
 					const targets = await api.notificationOutput.listTargets.query({});
 					const kinds = await api.notificationOutput.listTargetKinds.query({}).catch(() => []);
 					const bodyMaxLenByKind = new Map(kinds.map((k) => [k.kind, k.caps.bodyMaxLen]));
+					const maxActionsByKind = new Map(kinds.map((k) => [k.kind, k.caps.actions]));
 					return targets.map((t) => {
 						const owner = t.config["ownerUserId"];
 						const bodyMaxLen = bodyMaxLenByKind.get(t.kind);
+						const maxActions = maxActionsByKind.get(t.kind);
 						return {
 							id: t.id,
 							addonId: t.addonId,
@@ -108569,7 +108916,8 @@ var BuildNotificationCenter = class extends BuildNotificationCenterBase {
 							kind: t.kind,
 							enabled: t.enabled,
 							...typeof owner === "string" && owner.length > 0 ? { ownerUserId: owner } : {},
-							...typeof bodyMaxLen === "number" ? { bodyMaxLen } : {}
+							...typeof bodyMaxLen === "number" ? { bodyMaxLen } : {},
+							...typeof maxActions === "number" ? { maxActions } : {}
 						};
 					});
 				},

package/dist/pipeline-analytics/index.mjs

@@ -1,4 +1,4 @@
-import { $ as MediaFileKindEnum, $i as CAP_ADVANCE_FIELDS, $n as cloneAlarmSettings, $r as paintHex, $t as OpsLogEntrySchema, A as DeclaredDevices, Aa as EventCategory, Ai as subKindsOf, An as TrackSideSchema, Ar as isAudioClassName, At as NcAlarmSensorsInputSchema, B as FULL_IMAGE_BBOX, Bi as templateCarriesSummary, Bn as applyModeDelaysEdits, Br as isRootSuppliableStepId, Bt as NcRuleUpdateInputSchema, C as ClearTrackRelationResultSchema, Ca as record, Ci as ruleKindOf, Cn as TimelapseRuleInputSchema, Cr as failureContributionCapability, Ct as NC_SNOOZE_MAX_MINUTES, D as DEFAULT_TIMELAPSE_PREVIEW_TEXT, Da as tuple, Di as servedTemplateVars, Dn as TrackPuritySchema, Dr as isAlertEpisodeOpen, Dt as NC_TEMPLATE_VARS, E as DEFAULT_EVENT_COLOR, Ea as templateLiteral, Ei as sensorRaisedOf, En as TrackPlacementSchema, Er as isAlarmControllableCap, Et as NC_TAXONOMY, F as EVENT_DENSITY_BATCH_MAX, Fi as systemEventDeliveryProblems, Fn as alarmPanelCapability, Fr as isEventOwnerType, Ft as NcRuleActionSchema, G as ListTrackRelationsResultSchema, Gi as zoneAnalyticsCapability, Gn as audioMetricsCapability, Gr as kebabToCamel, Gt as NcSnoozeSuppressedSchema, H as LABEL_SUPPLY_MACRO, Hi as vectorDimFromBase64, Hn as applySecureOnArmEdit, Hr as isSystemDelivery, Ht as NcSharedSequenceSchema, I as EVENT_KIND_BY_CAP, Ii as systemEventFamilyProblems, In as alertEpisodeId, Ir as isKnownTemplateVar, It as NcRuleInputSchema, J as MAX_BIRTH_DECISION_RECORDS, Ji as evaluateSensorEdge, Jn as buildSubjectPath, Jr as memoizePinnedFfmpeg, Jt as NcTaxonomySchema, K as LockStateSchema, Ki as DEFAULT_FIRST_SIGHTING_FRESHNESS_MS, Kn as audioModeOf, Kr as linkedStepOf, Kt as NcStateSummarySectionIdSchema, L as EVENT_OWNER_TYPES, Li as systemEventFilterApplies, Ln as alertEpisodeKind, Lr as isLabelSupplyStepId, Lt as NcRulePatchSchema, M as EMBEDDING_MODEL_FAILED, Mi as subjectPathSvgPoints, Mn as activateAlarmProfile, Mr as isDetectionMacroClass, Mt as NcAlarmSettingsPatchSchema, N as EMBEDDING_REQUIREMENTS_FAILED, Ni as summarizeReview, Nn as addonWidgetsSourceCapability, Nr as isDrawableSubjectPath, Nt as NcConditionDescriptorSchema, O as DETECTION_MACRO_CLASSES, Oa as union, Oi as startMoverUnderClearance, On as TrackRelationKindSchema, Or as isAlertEpisodeSeverity, Ot as NcAlarmConfigSchema, P as EMBEDDING_REQUIREMENTS_UNAVAILABLE, Pi as syncActiveAlarmProfileSettings, Pn as alarmDeviceSecureOnArm, Pr as isEventKindLabelKey, Pt as NcConditionsSchema, Q as MOTION_CLOSE_AFTER_MS, Qi as BaseAddon, Qn as classifyRetrainReview, Qr as occupancyScope, Qt as OPS_LOG_DEFAULT_LIMIT, R as EXPORT_DENSE_MAX_RANGES, Ri as systemEventSummaryScheduleOf, Rn as alertEpisodePayload, Rr as isMediaOwnerType, Rt as NcRuleSchema, S as ClearTrackRelationInputSchema, Sa as partialRecord, Si as ruleGroupingApplies, Sn as TRACK_RELATIONS_DEFAULT_LIMIT, Sr as faceGalleryCapability, St as NC_SENSOR_TRANSITION_KINDS, T as DEFAULT_DETAIL_CROP_CONVENTION, Ta as string, Ti as secureActuationFor, Tn as TimelapseRuleSchema, Tr as gifFromMp4Args, Tt as NC_SYSTEM_EVENT_KIND_GROUP_SPECS, U as LabelAttributionSchema, Ui as viewerLinkBaseOf, Un as armRemovalReconcile, Ur as isSystemEventSummaryRule, Ut as NcSnoozeInputSchema, V as FailureCounters, Vi as templateVarsFor, Vn as applyNonBlockingEdit, Vr as isScheduleActive, Vt as NcScheduleSchema, W as ListTrackRelationsInputSchema, Wi as withSystemEventClasses, Wn as assertTimelapseCadences, Wr as isVectorIndexDimConflict, Wt as NcSnoozeSchema, X as MAX_TRACK_PURITIES, Xi as DeviceType, Xn as bundledCamstack, Xr as normalizeNcMediaPolicy, Xt as NcTemplatePreviewSchema, Y as MAX_BIRTH_LATENCY_PROXY_MS, Yi as isSourceCap, Yn as buildViewerLink, Yr as ncMediaPolicyError, Yt as NcTemplatePreviewInputSchema, Z as MAX_TRACK_RELATIONS, Zi as errMsg, Zn as calendarEventLocalSpan, Zr as notificationRulesCapability, Zt as NcTemplateVarDescriptorSchema, _ as BIRTH_DECISION_DEFAULT_LIMIT, _a as discriminatedUnion, _i as retrainRevisionConflictMessage, _n as SceneMonitorSchema, _t as NC_CONSUMABLE_SYSTEM_EVENT_KINDS, a as CLIP_EMBEDDING_STEP_ID, aa as customAction, ai as plateGalleryCapability, an as RetrainDismissedSchema, ar as deleteAlarmProfile, at as NC_ALARM_NOTIFY_FIELDS, b as BucketAccumulator, ba as number, bi as ruleBelongsToAlarm$1, bn as SetTrackRelationInputSchema, br as eventKindLabel, bt as NC_GROUPING_MAX_SEC, c as readClusterModelPinStrict, ca as hydrateSchema, ci as readMotionTriggeredBy, cn as SCENE_CONFIRM_DEFAULT_MAX_IMAGE_PX, cr as deriveRecordingMode, ct as NC_AUDIO_CONFIRM_HITS_DEFAULT, d as APPEARANCE_BLOCKS, di as resolveClipSearchMinScore, dn as SCENE_DEFAULT_CHECK_INTERVAL_SEC, dr as deviceAttentionKind, dt as NC_CLIP_PRE_ROLL_DEFAULT_SEC, ea as CamProfileSchema, ei as paletteResultSchema, en as PackageLlmVerdictSchema, er as consumableFormOf, et as MotionTriggeredBySchema, f as APPEARANCE_RESOLVES_AMBIGUITY_DEFAULT, fa as sleep$1, fi as resolveLocationMode, fn as SCENE_DEFAULT_OBSERVATION_SPACING_SEC, fr as deviceRemovalHookCapability, ft as NC_CLIP_RETENTION_MAX_SEC, g as ArchivedDebugNoteSchema, ga as boolean, gn as SCENE_RESET_RECAPTURES, gt as NC_CONSUMABLE_LOW_PERCENT_DEFAULT, h as AlarmArmModeSchema, ha as array, hi as resolveNcMediaImage, hn as SCENE_DIVERGED, hr as embeddingRefusalOf, ht as NC_CONFIRM_DEFAULT_TIMEOUT_MS, ia as createEvent, ii as pipelineAnalyticsCapability, in as RebuildObjectEmbeddingsRefusalSchema, ir as createAlarmProfile, it as NC_ALARM_DELAY_MAX_SEC, j as DetectionSourceSchema, ji as subjectPathSampleFromBox, jn as TrackSourceSchema, jr as isDefaultAlarmProfileId, jt as NcAlarmSensorsSchema, k as DETECTION_PIPELINE_CAP_NAME, ka as unknown, ki as storageOccupancyCapability, kn as TrackRelationSchema, kr as isAppLinkBase, kt as NcAlarmPostTriggeredActionSchema, l as resolveClusterModelPin, la as isDeviceScopedCap, li as readTimelapseGeneratedAt, ln as SCENE_CONFIRM_DEFAULT_TIMEOUT_MS, lr as describeSystemEventDeliveryProblem, lt as NC_AUDIO_CONFIRM_WINDOW_SEC_DEFAULT, m as AUDIO_MACRO_LABELS, ma as _enum, mi as resolveModeNotifyPolicy, mn as SCENE_DEFAULT_UNCOVERED_POLICY, mt as NC_CONFIRM_DEFAULT_MAX_IMAGE_PX, na as RECORD_MAX_DATA_BYTES, nn as RECORDING_EXPORT_MAX_READ_BYTES, nr as coreBlockIdFromAddonId, nt as NC_ALARM_DEFAULT_TRIGGERED_DURATION_SEC, o as CLUSTER_MODEL_OWNER_ADDON_ID, oa as defineCustomActions, oi as projectSubjectPath, on as RetrainOriginSchema, or as deriveDetailCropRect, ot as NC_ALARM_SYSTEM_EVENT_KINDS, p as ARCHIVED_DEBUG_NOTES_DEFAULT_LIMIT, pa as ZodObject, pi as resolveModeDelays, pn as SCENE_DEFAULT_QUIET_SECONDS, pt as NC_CONDITION_CATALOG, q as MAX_ARCHIVED_DEBUG_NOTES, qi as canonicalHash, qn as buildEventKindDescriptor, qr as mayWriteToLocation, qt as NcSystemEventKindSchema, ra as RECORD_QUERY_MAX, ri as pickFaceRescoreIntervalMinutes, rn as RECORDING_SOURCE_CAMSTACK_ADDON, rr as cosineSimilarity$1, rt as NC_ALARM_DELAY_FIELDS, s as FACE_EMBEDDING_STEP_ID, sa as defineRecordKinds, si as readDeviceStateFrom, sn as RetrainStatusSchema, sr as derivePostTriggeredAction, st as NC_ALARM_TRIGGERED_MAX_SEC, t as BUILTIN_CLIP_MODELS, ta as InvalidRecordError, ti as parseAlertEpisodePayload, tr as consumableLowPercentOf, tt as NC_ALARM_DEFAULT_PROFILE_ID, u as APPEARANCE_BIN_COUNT, ua as nodePin, ui as renameAlarmProfile, un as SCENE_DEFAULT_ANCHOR_THRESHOLD, ur as describeSystemEventFamilyProblem, ut as NC_CLIP_POST_ROLL_DEFAULT_SEC, v as BaseDevice, va as literal, vi as rootSupplyServes, vn as SetTrackPurityInputSchema, vr as encodeVectorBase64, vt as NC_DEFAULT_SNOOZE_MINUTES, w as CoverStateSchema, wa as strictObject, wi as sceneMonitorCapability, wn as TimelapseRulePatchSchema, wr as gifDeriveSpeed, wt as NC_STATE_SUMMARY_SECTION_IDS, x as COCO_TO_MACRO, xa as object, xi as ruleDeviceCompatCapQueries, xn as TIMELAPSE_DENSE_FLOOR_SEC, xr as evictionPolicyOfLocation, xt as NC_GROUPING_MIN_SEC, y as BirthDecisionRecordSchema, ya as looseObject, yi as ruleAutoTriggersAlarm, yn as SetTrackPurityResultSchema, yr as ensureAlarmProfiles, yt as NC_GROUPING_DEFAULT_SEC, z as FIRST_LEVEL_MACRO_CLASSES, zi as systemEventSummarySplitOf, zn as applyBlockingEdit, zr as isRetiredClearKey, zt as NcRuleTargetSchema } from "../clip-model-registry-Cw7Iy7Qi.mjs";
+import { $ as MediaFileKindEnum, $i as CAP_ADVANCE_FIELDS, $n as cloneAlarmSettings, $r as paintHex, $t as OpsLogEntrySchema, A as DeclaredDevices, Aa as EventCategory, Ai as subKindsOf, An as TrackSideSchema, Ar as isAudioClassName, At as NcAlarmSensorsInputSchema, B as FULL_IMAGE_BBOX, Bi as templateCarriesSummary, Bn as applyModeDelaysEdits, Br as isRootSuppliableStepId, Bt as NcRuleUpdateInputSchema, C as ClearTrackRelationResultSchema, Ca as record, Ci as ruleKindOf, Cn as TimelapseRuleInputSchema, Cr as failureContributionCapability, Ct as NC_SNOOZE_MAX_MINUTES, D as DEFAULT_TIMELAPSE_PREVIEW_TEXT, Da as tuple, Di as servedTemplateVars, Dn as TrackPuritySchema, Dr as isAlertEpisodeOpen, Dt as NC_TEMPLATE_VARS, E as DEFAULT_EVENT_COLOR, Ea as templateLiteral, Ei as sensorRaisedOf, En as TrackPlacementSchema, Er as isAlarmControllableCap, Et as NC_TAXONOMY, F as EVENT_DENSITY_BATCH_MAX, Fi as systemEventDeliveryProblems, Fn as alarmPanelCapability, Fr as isEventOwnerType, Ft as NcRuleActionSchema, G as ListTrackRelationsResultSchema, Gi as zoneAnalyticsCapability, Gn as audioMetricsCapability, Gr as kebabToCamel, Gt as NcSnoozeSuppressedSchema, H as LABEL_SUPPLY_MACRO, Hi as vectorDimFromBase64, Hn as applySecureOnArmEdit, Hr as isSystemDelivery, Ht as NcSharedSequenceSchema, I as EVENT_KIND_BY_CAP, Ii as systemEventFamilyProblems, In as alertEpisodeId, Ir as isKnownTemplateVar, It as NcRuleInputSchema, J as MAX_BIRTH_DECISION_RECORDS, Ji as evaluateSensorEdge, Jn as buildSubjectPath, Jr as memoizePinnedFfmpeg, Jt as NcTaxonomySchema, K as LockStateSchema, Ki as DEFAULT_FIRST_SIGHTING_FRESHNESS_MS, Kn as audioModeOf, Kr as linkedStepOf, Kt as NcStateSummarySectionIdSchema, L as EVENT_OWNER_TYPES, Li as systemEventFilterApplies, Ln as alertEpisodeKind, Lr as isLabelSupplyStepId, Lt as NcRulePatchSchema, M as EMBEDDING_MODEL_FAILED, Mi as subjectPathSvgPoints, Mn as activateAlarmProfile, Mr as isDetectionMacroClass, Mt as NcAlarmSettingsPatchSchema, N as EMBEDDING_REQUIREMENTS_FAILED, Ni as summarizeReview, Nn as addonWidgetsSourceCapability, Nr as isDrawableSubjectPath, Nt as NcConditionDescriptorSchema, O as DETECTION_MACRO_CLASSES, Oa as union, Oi as startMoverUnderClearance, On as TrackRelationKindSchema, Or as isAlertEpisodeSeverity, Ot as NcAlarmConfigSchema, P as EMBEDDING_REQUIREMENTS_UNAVAILABLE, Pi as syncActiveAlarmProfileSettings, Pn as alarmDeviceSecureOnArm, Pr as isEventKindLabelKey, Pt as NcConditionsSchema, Q as MOTION_CLOSE_AFTER_MS, Qi as BaseAddon, Qn as classifyRetrainReview, Qr as occupancyScope, Qt as OPS_LOG_DEFAULT_LIMIT, R as EXPORT_DENSE_MAX_RANGES, Ri as systemEventSummaryScheduleOf, Rn as alertEpisodePayload, Rr as isMediaOwnerType, Rt as NcRuleSchema, S as ClearTrackRelationInputSchema, Sa as partialRecord, Si as ruleGroupingApplies, Sn as TRACK_RELATIONS_DEFAULT_LIMIT, Sr as faceGalleryCapability, St as NC_SENSOR_TRANSITION_KINDS, T as DEFAULT_DETAIL_CROP_CONVENTION, Ta as string, Ti as secureActuationFor, Tn as TimelapseRuleSchema, Tr as gifFromMp4Args, Tt as NC_SYSTEM_EVENT_KIND_GROUP_SPECS, U as LabelAttributionSchema, Ui as viewerLinkBaseOf, Un as armRemovalReconcile, Ur as isSystemEventSummaryRule, Ut as NcSnoozeInputSchema, V as FailureCounters, Vi as templateVarsFor, Vn as applyNonBlockingEdit, Vr as isScheduleActive, Vt as NcScheduleSchema, W as ListTrackRelationsInputSchema, Wi as withSystemEventClasses, Wn as assertTimelapseCadences, Wr as isVectorIndexDimConflict, Wt as NcSnoozeSchema, X as MAX_TRACK_PURITIES, Xi as DeviceType, Xn as bundledCamstack, Xr as normalizeNcMediaPolicy, Xt as NcTemplatePreviewSchema, Y as MAX_BIRTH_LATENCY_PROXY_MS, Yi as isSourceCap, Yn as buildViewerLink, Yr as ncMediaPolicyError, Yt as NcTemplatePreviewInputSchema, Z as MAX_TRACK_RELATIONS, Zi as errMsg, Zn as calendarEventLocalSpan, Zr as notificationRulesCapability, Zt as NcTemplateVarDescriptorSchema, _ as BIRTH_DECISION_DEFAULT_LIMIT, _a as discriminatedUnion, _i as retrainRevisionConflictMessage, _n as SceneMonitorSchema, _t as NC_CONSUMABLE_SYSTEM_EVENT_KINDS, a as CLIP_EMBEDDING_STEP_ID, aa as customAction, ai as plateGalleryCapability, an as RetrainDismissedSchema, ar as deleteAlarmProfile, at as NC_ALARM_NOTIFY_FIELDS, b as BucketAccumulator, ba as number, bi as ruleBelongsToAlarm$1, bn as SetTrackRelationInputSchema, br as eventKindLabel, bt as NC_GROUPING_MAX_SEC, c as readClusterModelPinStrict, ca as hydrateSchema, ci as readMotionTriggeredBy, cn as SCENE_CONFIRM_DEFAULT_MAX_IMAGE_PX, cr as deriveRecordingMode, ct as NC_AUDIO_CONFIRM_HITS_DEFAULT, d as APPEARANCE_BLOCKS, di as resolveClipSearchMinScore, dn as SCENE_DEFAULT_CHECK_INTERVAL_SEC, dr as deviceAttentionKind, dt as NC_CLIP_PRE_ROLL_DEFAULT_SEC, ea as CamProfileSchema, ei as paletteResultSchema, en as PackageLlmVerdictSchema, er as consumableFormOf, et as MotionTriggeredBySchema, f as APPEARANCE_RESOLVES_AMBIGUITY_DEFAULT, fa as sleep$1, fi as resolveLocationMode, fn as SCENE_DEFAULT_OBSERVATION_SPACING_SEC, fr as deviceRemovalHookCapability, ft as NC_CLIP_RETENTION_MAX_SEC, g as ArchivedDebugNoteSchema, ga as boolean, gn as SCENE_RESET_RECAPTURES, gt as NC_CONSUMABLE_LOW_PERCENT_DEFAULT, h as AlarmArmModeSchema, ha as array, hi as resolveNcMediaImage, hn as SCENE_DIVERGED, hr as embeddingRefusalOf, ht as NC_CONFIRM_DEFAULT_TIMEOUT_MS, ia as createEvent, ii as pipelineAnalyticsCapability, in as RebuildObjectEmbeddingsRefusalSchema, ir as createAlarmProfile, it as NC_ALARM_DELAY_MAX_SEC, j as DetectionSourceSchema, ji as subjectPathSampleFromBox, jn as TrackSourceSchema, jr as isDefaultAlarmProfileId, jt as NcAlarmSensorsSchema, k as DETECTION_PIPELINE_CAP_NAME, ka as unknown, ki as storageOccupancyCapability, kn as TrackRelationSchema, kr as isAppLinkBase, kt as NcAlarmPostTriggeredActionSchema, l as resolveClusterModelPin, la as isDeviceScopedCap, li as readTimelapseGeneratedAt, ln as SCENE_CONFIRM_DEFAULT_TIMEOUT_MS, lr as describeSystemEventDeliveryProblem, lt as NC_AUDIO_CONFIRM_WINDOW_SEC_DEFAULT, m as AUDIO_MACRO_LABELS, ma as _enum, mi as resolveModeNotifyPolicy, mn as SCENE_DEFAULT_UNCOVERED_POLICY, mt as NC_CONFIRM_DEFAULT_MAX_IMAGE_PX, na as RECORD_MAX_DATA_BYTES, nn as RECORDING_EXPORT_MAX_READ_BYTES, nr as coreBlockIdFromAddonId, nt as NC_ALARM_DEFAULT_TRIGGERED_DURATION_SEC, o as CLUSTER_MODEL_OWNER_ADDON_ID, oa as defineCustomActions, oi as projectSubjectPath, on as RetrainOriginSchema, or as deriveDetailCropRect, ot as NC_ALARM_SYSTEM_EVENT_KINDS, p as ARCHIVED_DEBUG_NOTES_DEFAULT_LIMIT, pa as ZodObject, pi as resolveModeDelays, pn as SCENE_DEFAULT_QUIET_SECONDS, pt as NC_CONDITION_CATALOG, q as MAX_ARCHIVED_DEBUG_NOTES, qi as canonicalHash, qn as buildEventKindDescriptor, qr as mayWriteToLocation, qt as NcSystemEventKindSchema, ra as RECORD_QUERY_MAX, ri as pickFaceRescoreIntervalMinutes, rn as RECORDING_SOURCE_CAMSTACK_ADDON, rr as cosineSimilarity$1, rt as NC_ALARM_DELAY_FIELDS, s as FACE_EMBEDDING_STEP_ID, sa as defineRecordKinds, si as readDeviceStateFrom, sn as RetrainStatusSchema, sr as derivePostTriggeredAction, st as NC_ALARM_TRIGGERED_MAX_SEC, t as BUILTIN_CLIP_MODELS, ta as InvalidRecordError, ti as parseAlertEpisodePayload, tr as consumableLowPercentOf, tt as NC_ALARM_DEFAULT_PROFILE_ID, u as APPEARANCE_BIN_COUNT, ua as nodePin, ui as renameAlarmProfile, un as SCENE_DEFAULT_ANCHOR_THRESHOLD, ur as describeSystemEventFamilyProblem, ut as NC_CLIP_POST_ROLL_DEFAULT_SEC, v as BaseDevice, va as literal, vi as rootSupplyServes, vn as SetTrackPurityInputSchema, vr as encodeVectorBase64, vt as NC_DEFAULT_SNOOZE_MINUTES, w as CoverStateSchema, wa as strictObject, wi as sceneMonitorCapability, wn as TimelapseRulePatchSchema, wr as gifDeriveSpeed, wt as NC_STATE_SUMMARY_SECTION_IDS, x as COCO_TO_MACRO, xa as object, xi as ruleDeviceCompatCapQueries, xn as TIMELAPSE_DENSE_FLOOR_SEC, xr as evictionPolicyOfLocation, xt as NC_GROUPING_MIN_SEC, y as BirthDecisionRecordSchema, ya as looseObject, yi as ruleAutoTriggersAlarm, yn as SetTrackPurityResultSchema, yr as ensureAlarmProfiles, yt as NC_GROUPING_DEFAULT_SEC, z as FIRST_LEVEL_MACRO_CLASSES, zi as systemEventSummarySplitOf, zn as applyBlockingEdit, zr as isRetiredClearKey, zt as NcRuleTargetSchema } from "../clip-model-registry-CoH7ORtC.mjs";
 import { t as __exportAll } from "../embedding-encoder/index.mjs";
 import * as fs$1 from "node:fs";
 import { createWriteStream, promises } from "node:fs";
@@ -750,6 +750,8 @@ var DEFAULT_ACTION_TTL_MS = 15 * 6e4;
 * notification that is not fresh.
 */
 var SNOOZE_ACTION_TTL_MS = 60 * 6e4;
+/** How long a Correct / Wrong button stays live: one day. */
+var VERDICT_ACTION_TTL_MS = 1440 * 6e4;
 /**
 * How long a DISARM button stays live: five minutes.
 *
@@ -777,6 +779,7 @@ function actionTtlMs(subject) {
 		case "sequence": return DEFAULT_ACTION_TTL_MS;
 		case "addon-update": return DEFAULT_ACTION_TTL_MS;
 		case "server-update": return DEFAULT_ACTION_TTL_MS;
+		case "detection-verdict": return VERDICT_ACTION_TTL_MS;
 	}
 }
 var NcActionTokenRegistry = class {
@@ -820,6 +823,30 @@ var NcActionTokenRegistry = class {
 			grant: found.grant
 		};
 	}
+	/**
+	* Read the grant without spending it. ONLY the confirm page of a link-only
+	* channel may call this: it exists so a link preview that opens the URL
+	* cannot spend the token, and it never runs anything.
+	*/
+	peek(id) {
+		const found = this.grants.get(id);
+		if (found === void 0) return {
+			ok: false,
+			reason: "unknown"
+		};
+		if (found.used) return {
+			ok: false,
+			reason: "already-used"
+		};
+		if (found.grant.expiresAt <= this.now()) return {
+			ok: false,
+			reason: "expired"
+		};
+		return {
+			ok: true,
+			grant: found.grant
+		};
+	}
 	/** Drop records that can no longer be claimed. Memory hygiene only — an
 	*  expired record is already refused by {@link claim}, so a sweep that never
 	*  ran would cost bytes, never safety. */
@@ -861,6 +888,7 @@ function describeGrant(grant) {
 			return grant.action === "disarm" ? "Alarm disarmed" : `Alarm armed${grant.mode !== void 0 ? ` (${grant.mode})` : ""}`;
 		case "addon-update": return `${grant.packages.length} addon update(s) on ${grant.nodeId}`;
 		case "server-update": return `Server update on ${grant.nodeId}`;
+		case "detection-verdict": return grant.verdict === "correct" ? "Marked correct — kept for retraining" : grant.suggestedClass === void 0 ? "Marked wrong — kept for retraining" : `Marked wrong, it was a ${grant.suggestedClass} — kept for retraining`;
 	}
 }
 /** The audit line's `meta`, per family. A snooze that logged a `sequence` it
@@ -914,6 +942,15 @@ function grantMeta(grant) {
 			...common,
 			nodeId: grant.nodeId
 		};
+		case "detection-verdict": return {
+			...common,
+			ruleId: grant.ruleId,
+			rule: grant.ruleName,
+			userId: grant.userId,
+			trackId: grant.trackId,
+			verdict: grant.verdict,
+			suggestedClass: grant.suggestedClass ?? null
+		};
 	}
 }
 /** What the human standing in front of the page is told. */
@@ -922,6 +959,11 @@ var FAILURE_COPY = {
 	expired: "This button has expired. Open CamStack to do it there.",
 	"already-used": "Already done — this button had been used."
 };
+/** The question a link-only channel lands on, answered by a POST form. */
+function confirmPage(url, grant) {
+	const action = `${url.pathname}?exp=${encodeURIComponent(url.searchParams.get("exp") ?? "")}&amp;sig=${encodeURIComponent(url.searchParams.get("sig") ?? "")}&amp;confirm=1`;
+	return `<!doctype html><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Confirm</title><style>body{font:16px/1.5 system-ui,sans-serif;margin:0;min-height:100vh;display:grid;place-items:center;background:#111;color:#eee}main{max-width:24rem;padding:2rem;text-align:center}h1{font-size:1.25rem;margin:0 0 1rem}button{font:inherit;padding:.6rem 1.4rem;border-radius:.5rem;border:0;background:#3b82f6;color:#fff}</style><main><h1>Confirm</h1><p>${grant.verdict === "correct" ? "Mark this detection as correct?" : grant.suggestedClass === void 0 ? "Mark this detection as wrong?" : `Mark this detection as wrong, it was a ${grant.suggestedClass}?`}</p><form method="post" action="${action}"><button type="submit">Confirm</button></form></main>`;
+}
 function page(title, detail) {
 	return `<!doctype html><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>${title}</title><style>body{font:16px/1.5 system-ui,sans-serif;margin:0;min-height:100vh;display:grid;place-items:center;background:#111;color:#eee}main{max-width:24rem;padding:2rem;text-align:center}h1{font-size:1.25rem;margin:0 0 .5rem}p{margin:0;color:#aaa}</style><main><h1>${title}</h1><p>${detail}</p></main>`;
 }
@@ -935,7 +977,8 @@ var NcActionPlane = class {
 	handler = async (req, res) => {
 		const url = new URL(req.url ?? "/", "http://placeholder");
 		const id = decodeURIComponent(url.pathname.split("/").filter(Boolean).pop() ?? "");
-		const background = (req.method ?? "GET").toUpperCase() === "POST";
+		const posted = (req.method ?? "GET").toUpperCase() === "POST";
+		const background = posted && url.searchParams.get("confirm") !== "1";
 		if (!verifyActionSignature({
 			secret: this.deps.secret,
 			id,
@@ -947,6 +990,13 @@ var NcActionPlane = class {
 			this.reply(res, background, 404, "Not found", "This link is not valid.");
 			return;
 		}
+		if (!posted) {
+			const peeked = this.deps.registry.peek(id);
+			if (peeked.ok && peeked.grant.kind === "detection-verdict" && peeked.grant.viaLink === true) {
+				this.sendBody(res, 200, "text/html; charset=utf-8", confirmPage(url, peeked.grant));
+				return;
+			}
+		}
 		const claim = this.deps.registry.claim(id);
 		if (!claim.ok) {
 			this.deps.logger.info("nc action callback not claimable", { meta: {
@@ -1092,6 +1142,7 @@ var ncDurableRecordKinds = defineRecordKinds({
 	"state-summary-stamps": ledger("digest delivery stamps per rule kind"),
 	meta: ledger("outbox boot-reconcile watermark and other single-key meta rows", "settings", { none: "one fixed key (watermark), overwritten in place, never deleted" }),
 	snoozes: ledger("operator opens or closes a snooze window (write-through)"),
+	"detection-verdicts": ledger("operator taps Correct or Wrong on a detection notification; one row per track"),
 	"snooze-suppressed": {
 		...QUERIED,
 		class: "ledger",
@@ -9226,6 +9277,9 @@ var en_default = {
 	"action.addon-update.uptodate": "Already up to date on {{nodeId}} — nothing to do",
 	"action.addon-update.unknown": "Could not read what needs updating on {{nodeId}} — nothing was changed. Open CamStack.",
 	"button.server-update.apply": "Update server on {{nodeId}}",
+	"button.verdict.correct": "Correct",
+	"button.verdict.wrong": "Wrong",
+	"button.verdict.wrongAs": "Wrong: it is {{class}}",
 	"action.server-update.title": "Server update",
 	"action.server-update.started": "Updating server on {{nodeId}}…",
 	"action.server-update.restarting": "Server update staged on {{nodeId}} — the node is restarting. You will hear when it comes back.",
@@ -9627,6 +9681,9 @@ var it_default = {
 	"action.addon-update.uptodate": "Già aggiornato su {{nodeId}} — niente da fare",
 	"action.addon-update.unknown": "Non è stato possibile leggere cosa aggiornare su {{nodeId}} — non è stato cambiato nulla. Apri CamStack.",
 	"button.server-update.apply": "Aggiorna server su {{nodeId}}",
+	"button.verdict.correct": "Corretto",
+	"button.verdict.wrong": "Sbagliato",
+	"button.verdict.wrongAs": "Sbagliato: è {{class}}",
 	"action.server-update.title": "Aggiornamento server",
 	"action.server-update.started": "Aggiornamento server su {{nodeId}}…",
 	"action.server-update.restarting": "Aggiornamento server predisposto su {{nodeId}} — il nodo si riavvia. Ti avviseremo quando torna.",
@@ -59702,6 +59759,25 @@ var TrackAlreadyTrainedError = class extends Error {
 	}
 };
 /**
+* Classify a failed `setTrackFlags` as one of the lifecycle's DELIBERATE
+* refusals, or `null` when it is a failure of the call itself.
+*
+* Needed because the caller that matters (a notification button) reaches the
+* method over `ctx.api`, where the error class does not survive the hop and
+* only the message does. The class check comes first; the message check is the
+* transported form, and `track-flags.spec.ts` pins it against the real
+* messages so a reworded refusal cannot silently turn into a generic failure.
+*/
+function retrainRefusalReason(err) {
+	if (err instanceof TrackAlreadyTrainedError) return "trained";
+	if (err instanceof StagingBudgetExceededError) return "budget";
+	const message = err instanceof Error ? err.message : "";
+	if (message.includes("is already trained")) return "trained";
+	if (message.includes("in retrain staging")) return "budget";
+	if (message.includes("unknown track")) return "unknown-track";
+	return null;
+}
+/**
 * The `debugNote` half of the patch — `{}` when nothing should be written.
 *
 * The note is not an independent column: it is the operator's sentence about
@@ -81843,6 +81919,10 @@ var NC_DEVICE_ROW_KINDS = [
 	{
 		key: "nc-artifacts",
 		kind: ncDurableRecordKinds.artifacts
+	},
+	{
+		key: "nc-detection-verdicts",
+		kind: ncDurableRecordKinds["detection-verdicts"]
 	}
 ];
 /**
@@ -82262,6 +82342,82 @@ var NcSequenceStore = class NcSequenceStore {
 	}
 };
 //#endregion
+//#region src/notification-center/detection-verdict-ledger.ts
+/**
+* @durable class=ledger owner=notification-center
+*   write="the operator taps Correct / Wrong on a detection notification; one row per track, the latest answer replaces the earlier one"
+*   retention="none — bounded by the tracks a rule asked about; deleted with the camera by the device-removal hook"
+*/
+var NC_DETECTION_VERDICTS_COLLECTION = "notification-center:detection-verdicts";
+var NC_DETECTION_VERDICTS_COLUMNS = [
+	{
+		name: "id",
+		type: "TEXT",
+		primaryKey: true,
+		notNull: true
+	},
+	{
+		name: "ruleId",
+		type: "TEXT",
+		notNull: true
+	},
+	{
+		name: "at",
+		type: "INTEGER",
+		notNull: true
+	},
+	(
+	/** The FULL row (Zod-validated on read). */
+	{
+		name: "row",
+		type: "JSON",
+		notNull: true
+	})
+];
+var NcDetectionVerdictRecordSchema = object({
+	trackId: string().min(1),
+	deviceId: number().int(),
+	verdict: _enum(["correct", "wrong"]),
+	/** The class the operator said it really was. Only with `wrong`. */
+	suggestedClass: string().min(1).optional(),
+	/** Whose notification it was (the token's frozen owner), NOT who tapped. */
+	userId: string().min(1),
+	ruleId: string().min(1),
+	ruleName: string(),
+	at: number()
+});
+var NC_DETECTION_VERDICTS_SPEC = {
+	collection: NC_DETECTION_VERDICTS_COLLECTION,
+	columns: [...NC_DETECTION_VERDICTS_COLUMNS],
+	writeMode: "write-through",
+	keyOf: (row) => row.trackId,
+	toValue: (row) => ({
+		ruleId: row.ruleId,
+		at: row.at,
+		row
+	}),
+	fromRecord: (_key, data) => {
+		const parsed = NcDetectionVerdictRecordSchema.safeParse(data["row"]);
+		return parsed.success ? parsed.data : null;
+	},
+	deviceIdOf: (row) => row.deviceId,
+	loadLimit: 1e4
+};
+var NcDetectionVerdictLedger = class {
+	ledger;
+	constructor(deps) {
+		this.ledger = new DurableLedger({
+			spec: NC_DETECTION_VERDICTS_SPEC,
+			kind: deps.records.kind(ncDurableRecordKinds["detection-verdicts"]),
+			logger: deps.logger
+		});
+	}
+	/** Write-through; throws on a failed write so the tap reports it. */
+	async record(row) {
+		await this.ledger.put(NcDetectionVerdictRecordSchema.parse(row));
+	}
+};
+//#endregion
 //#region src/notification-center/device-prune.ts
 function judgeList(list, isDead) {
 	const dead = list.filter(isDead);
@@ -83216,6 +83372,64 @@ var NcDeviceStateCache = class {
 	}
 };
 //#endregion
+//#region src/notification-center/detection-verdict-buttons.ts
+var VERDICT_CORRECT_ID = "detection-verdict-correct";
+var VERDICT_WRONG_ID = "detection-verdict-wrong";
+/** `detection-verdict-wrong:<class>` — Wrong, and what it really was. */
+var VERDICT_WRONG_AS_PREFIX = "detection-verdict-wrong:";
+/** The macro classes offered as "it was really…". Short on purpose. */
+var VERDICT_CLASS_CHOICES = [
+	"person",
+	"vehicle",
+	"animal"
+];
+/** At most this many class buttons, and only when the channel has room. */
+var VERDICT_MAX_CLASS_CHOICES = 2;
+function verdictButtonRefusal(subject) {
+	if (!subject.askVerdict) return "rule-off";
+	if (subject.trackId === void 0) return "no-track";
+	if (subject.ownerUserId === void 0) return "unowned-target";
+	return null;
+}
+/** The classes worth offering for a subject of `className`. */
+function verdictClassChoices(className) {
+	return VERDICT_CLASS_CHOICES.filter((c) => c !== className).slice(0, VERDICT_MAX_CLASS_CHOICES);
+}
+/**
+* Which buttons a channel with `maxActions` slots gets. `maxActions` absent
+* (the kind catalog did not answer) is treated as the common floor of three:
+* the two plain choices, never the class ones. The class choices appear only
+* when the channel declared room for a fourth button.
+*/
+function verdictButtonSpecs(input) {
+	const base = [{
+		actionId: VERDICT_CORRECT_ID,
+		verdict: "correct"
+	}, {
+		actionId: VERDICT_WRONG_ID,
+		verdict: "wrong"
+	}];
+	if (input.maxActions === void 0 || input.maxActions <= 3) return base;
+	const room = input.maxActions - base.length;
+	const extra = verdictClassChoices(input.className).slice(0, room).map((suggestedClass) => ({
+		actionId: `${VERDICT_WRONG_AS_PREFIX}${suggestedClass}`,
+		verdict: "wrong",
+		suggestedClass
+	}));
+	return [...base, ...extra];
+}
+/** Is this one of our buttons (so a link-only channel can lift it into the body)? */
+function isVerdictAction(action) {
+	return action.id === VERDICT_CORRECT_ID || action.id.startsWith(VERDICT_WRONG_ID);
+}
+/**
+* The body lines that carry the verdict choices on a channel with no buttons.
+* A bare URL per line: every chat and mail client linkifies it.
+*/
+function verdictLinkLines(actions) {
+	return actions.filter(isVerdictAction).map((a) => `${a.label}: ${a.url ?? ""}`).join("\n");
+}
+//#endregion
 //#region src/notification-center/state-summary/state-model.ts
 /**
 * The STATE SUMMARY's vocabulary (D647): its sections, and what one reported
@@ -86924,6 +87138,8 @@ var NcDispatcher = class {
 				targetId: target.id,
 				...target.ownerUserId !== void 0 ? { ownerUserId: target.ownerUserId } : {},
 				...entry.payload.subject.className !== void 0 ? { className: entry.payload.subject.className } : {},
+				...entry.payload.subject.trackId !== void 0 ? { trackId: entry.payload.subject.trackId } : {},
+				...target.maxActions !== void 0 ? { maxActions: target.maxActions } : {},
 				...entry.payload.subject.systemEvent !== void 0 ? { systemEvent: entry.payload.subject.systemEvent } : {}
 			});
 		} catch (err) {
@@ -87019,9 +87235,13 @@ var NcDispatcher = class {
 				...summarySectionOf(systemEvent.data)
 			} } : {}
 		}) : null;
-		const actions = await this.mintActions(entry, target);
+		const minted = await this.mintActions(entry, target);
+		const linkOnly = target.maxActions === 0;
+		const verdictLinks = linkOnly ? verdictLinkLines(minted) : "";
+		const actions = linkOnly ? minted.filter((a) => !isVerdictAction(a)) : minted;
+		const withLinks = (text) => verdictLinks === "" ? text : `${text}\n\n${verdictLinks}`;
 		const notification = {
-			body,
+			body: withLinks(body),
 			title,
 			priority: clampPriority(paramNumber(entry.payload.params, "priority") ?? entry.payload.priority),
 			...params,
@@ -87043,7 +87263,7 @@ var NcDispatcher = class {
 			grouped: resolved.grouped,
 			withAiText: (aiText) => ({
 				...notification,
-				body: renderBody(aiText)
+				body: withLinks(renderBody(aiText))
 			})
 		};
 	}
@@ -99656,6 +99876,55 @@ async function mintButtons(host, input) {
 	const announcement = stored === null && input.ruleId === NC_ALARM_ANNOUNCE_RULE_ID;
 	if (stored === null && !announcement) return [];
 	const drafts = [];
+	const verdictRefusal = verdictButtonRefusal({
+		askVerdict: stored?.askVerdict === true,
+		...input.trackId !== void 0 ? { trackId: input.trackId } : {},
+		...input.ownerUserId !== void 0 ? { ownerUserId: input.ownerUserId } : {}
+	});
+	if (stored?.askVerdict === true && verdictRefusal !== null) host.logger.info("detection notification carries no verdict buttons", {
+		tags: { deviceId: input.deviceId },
+		meta: {
+			ruleId: input.ruleId,
+			reason: verdictRefusal,
+			targetId: input.targetId
+		}
+	});
+	const verdictTrackId = input.trackId;
+	const verdictOwner = input.ownerUserId;
+	const verdictButtons = verdictRefusal !== null || verdictTrackId === void 0 || verdictOwner === void 0 ? [] : verdictButtonSpecs({
+		className: input.className,
+		maxActions: input.maxActions
+	}).map((spec) => {
+		const id = randomUUID();
+		drafts.push({
+			id,
+			ttlMs: actionTtlMs({ kind: "detection-verdict" }),
+			grant: (expiresAt) => ({
+				kind: "detection-verdict",
+				id,
+				verdict: spec.verdict,
+				trackId: verdictTrackId,
+				ruleId: input.ruleId,
+				ruleName: input.ruleName,
+				userId: verdictOwner,
+				...spec.suggestedClass !== void 0 ? { suggestedClass: spec.suggestedClass } : {},
+				...input.maxActions === 0 ? { viaLink: true } : {},
+				deviceId: input.deviceId,
+				actionId: spec.actionId,
+				targetId: input.targetId,
+				expiresAt
+			})
+		});
+		return {
+			id: spec.actionId,
+			label: spec.suggestedClass === void 0 ? host.texts.text({ key: spec.verdict === "correct" ? "button.verdict.correct" : "button.verdict.wrong" }) : host.texts.text({
+				key: "button.verdict.wrongAs",
+				vars: { class: spec.suggestedClass }
+			}),
+			url: id,
+			mode: "background"
+		};
+	});
 	const sequenceButtons = host.actionRunner === null || stored === null ? [] : buildActionButtons({
 		actions: stored.actions,
 		knownSequenceIds: host.sequences.knownIds(),
@@ -99868,6 +100137,7 @@ async function mintButtons(host, input) {
 		}
 	});
 	const out = [
+		...verdictButtons,
 		...sequenceButtons,
 		...snoozeButtons,
 		...alarmButtons,
@@ -100091,8 +100361,53 @@ async function runGrantedAction(host, grant) {
 		case "sequence": return host.runGrantedSequence(grant);
 		case "addon-update": return host.applyGrantedAddonUpdate(grant);
 		case "server-update": return host.applyGrantedServerUpdate(grant);
+		case "detection-verdict": return host.applyGrantedDetectionVerdict(grant);
 	}
 }
+/** What a person is told when the retrain lifecycle refuses the mark. */
+var VERDICT_REFUSAL_COPY = {
+	trained: "This track was already used for training — nothing was changed",
+	budget: "This camera already holds as many tracks for retraining as it may — nothing was changed",
+	"unknown-track": "This track is no longer available — nothing was changed"
+};
+/**
+* Mark the track one notification reported for retraining, and record who was
+* asked and when.
+*
+* Order matters. The MARK goes first and is the authority: a refusal ("already
+* trained", "budget full") means the operator's answer changed nothing, so no
+* ledger row is written for an answer that was not applied. The token is
+* already spent (D47) — the refusal is shown as the reason, not a retry.
+*/
+async function applyGrantedDetectionVerdict(host, grant) {
+	const mark = host.deps.markTrackForRetrain;
+	if (mark === void 0) throw new Error("no retrain mark is wired on this node");
+	const outcome = await mark({
+		deviceId: grant.deviceId,
+		trackId: grant.trackId
+	});
+	if (!outcome.ok) {
+		host.logger.info("detection verdict changed nothing — the retrain flow refused the mark", {
+			tags: { deviceId: grant.deviceId },
+			meta: {
+				trackId: grant.trackId,
+				reason: outcome.reason,
+				verdict: grant.verdict
+			}
+		});
+		throw new NcActionRefusedError(VERDICT_REFUSAL_COPY[outcome.reason]);
+	}
+	await host.verdicts.record({
+		trackId: grant.trackId,
+		deviceId: grant.deviceId,
+		verdict: grant.verdict,
+		...grant.suggestedClass !== void 0 ? { suggestedClass: grant.suggestedClass } : {},
+		userId: grant.userId,
+		ruleId: grant.ruleId,
+		ruleName: grant.ruleName,
+		at: host.now()
+	});
+}
 /**
 * Apply the addon updates one notification was about.
 *
@@ -105269,6 +105584,7 @@ var NotificationCenter = class {
 	* evaluating one.
 	*/
 	pruneLedger;
+	verdicts;
 	/** D905: which rules cannot work, announced once per distinct reason. */
 	ruleHealth = new NcRuleHealthMonitor();
 	/** The prune itself — see `device-prune-runner.ts`. */
@@ -105497,6 +105813,11 @@ var NotificationCenter = class {
 			applyGrantedArmAnyway: (panel, grant) => self.applyGrantedArmAnyway(panel, grant),
 			applyGrantedBypassInput: (panel, grant) => self.applyGrantedBypassInput(panel, grant),
 			applyGrantedServerUpdate: (grant) => self.applyGrantedServerUpdate(grant),
+			applyGrantedDetectionVerdict: (grant) => self.applyGrantedDetectionVerdict(grant),
+			now: self.now,
+			get verdicts() {
+				return self.verdicts;
+			},
 			applyGrantedSnooze: (grant) => self.applyGrantedSnooze(grant),
 			get deps() {
 				return self.deps;
@@ -105547,6 +105868,9 @@ var NotificationCenter = class {
 	async applyGrantedAddonUpdate(grant) {
 		return applyGrantedAddonUpdate(this.grantedActionsHost(), grant);
 	}
+	async applyGrantedDetectionVerdict(grant) {
+		return applyGrantedDetectionVerdict(this.grantedActionsHost(), grant);
+	}
 	async applyGrantedServerUpdate(grant) {
 		return applyGrantedServerUpdate(this.grantedActionsHost(), grant);
 	}
@@ -105786,6 +106110,10 @@ var NotificationCenter = class {
 		}
 		this.summaryRules = NcSummaryStore.of(deps.records, this.logger.child("summary"), deps.now);
 		this.calendarEventsRules = NcCalendarEventsStore.of(deps.records, this.logger.child("calendar-events"), deps.now);
+		this.verdicts = new NcDetectionVerdictLedger({
+			...durableStore,
+			logger: this.logger.child("detection-verdicts")
+		});
 		this.pruneLedger = new NcPruneLedger({
 			...durableStore,
 			logger: this.logger.child("device-prune")
@@ -108393,6 +108721,23 @@ var BuildNotificationCenter = class extends BuildNotificationCenterBase {
 					};
 				}
 			},
+			markTrackForRetrain: async ({ deviceId, trackId }) => {
+				try {
+					await this.ctx.api.pipelineAnalytics.setTrackFlags.mutate({
+						deviceId,
+						trackId,
+						flags: { markForTrain: true }
+					});
+					return { ok: true };
+				} catch (err) {
+					const reason = retrainRefusalReason(err);
+					if (reason === null) throw err;
+					return {
+						ok: false,
+						reason
+					};
+				}
+			},
 			readDeviceStates: async (ids) => {
 				const out = /* @__PURE__ */ new Map();
 				for (const id of ids) try {
@@ -108464,9 +108809,11 @@ var BuildNotificationCenter = class extends BuildNotificationCenterBase {
 					const targets = await api.notificationOutput.listTargets.query({});
 					const kinds = await api.notificationOutput.listTargetKinds.query({}).catch(() => []);
 					const bodyMaxLenByKind = new Map(kinds.map((k) => [k.kind, k.caps.bodyMaxLen]));
+					const maxActionsByKind = new Map(kinds.map((k) => [k.kind, k.caps.actions]));
 					return targets.map((t) => {
 						const owner = t.config["ownerUserId"];
 						const bodyMaxLen = bodyMaxLenByKind.get(t.kind);
+						const maxActions = maxActionsByKind.get(t.kind);
 						return {
 							id: t.id,
 							addonId: t.addonId,
@@ -108474,7 +108821,8 @@ var BuildNotificationCenter = class extends BuildNotificationCenterBase {
 							kind: t.kind,
 							enabled: t.enabled,
 							...typeof owner === "string" && owner.length > 0 ? { ownerUserId: owner } : {},
-							...typeof bodyMaxLen === "number" ? { bodyMaxLen } : {}
+							...typeof bodyMaxLen === "number" ? { bodyMaxLen } : {},
+							...typeof maxActions === "number" ? { maxActions } : {}
 						};
 					});
 				},

package/dist/pipeline-analytics/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-Cct0TMzC.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-Dhan9FH4.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-post-analysis",
-  "version": "1.2.641",
+  "version": "1.2.642",
   "description": "Post-Analysis bundle — enrichment, embedding-encoder, pipeline-analytics. Multi-entry npm package shipping addons that consume pipeline output.",
   "keywords": [
     "camstack",