@camstack/addon-post-analysis 1.2.641 → 1.2.643

package/dist/pipeline-analytics/index.mjs

@@ -1,4 +1,4 @@
-import { $ as MediaFileKindEnum, $i as CAP_ADVANCE_FIELDS, $n as cloneAlarmSettings, $r as paintHex, $t as OpsLogEntrySchema, A as DeclaredDevices, Aa as EventCategory, Ai as subKindsOf, An as TrackSideSchema, Ar as isAudioClassName, At as NcAlarmSensorsInputSchema, B as FULL_IMAGE_BBOX, Bi as templateCarriesSummary, Bn as applyModeDelaysEdits, Br as isRootSuppliableStepId, Bt as NcRuleUpdateInputSchema, C as ClearTrackRelationResultSchema, Ca as record, Ci as ruleKindOf, Cn as TimelapseRuleInputSchema, Cr as failureContributionCapability, Ct as NC_SNOOZE_MAX_MINUTES, D as DEFAULT_TIMELAPSE_PREVIEW_TEXT, Da as tuple, Di as servedTemplateVars, Dn as TrackPuritySchema, Dr as isAlertEpisodeOpen, Dt as NC_TEMPLATE_VARS, E as DEFAULT_EVENT_COLOR, Ea as templateLiteral, Ei as sensorRaisedOf, En as TrackPlacementSchema, Er as isAlarmControllableCap, Et as NC_TAXONOMY, F as EVENT_DENSITY_BATCH_MAX, Fi as systemEventDeliveryProblems, Fn as alarmPanelCapability, Fr as isEventOwnerType, Ft as NcRuleActionSchema, G as ListTrackRelationsResultSchema, Gi as zoneAnalyticsCapability, Gn as audioMetricsCapability, Gr as kebabToCamel, Gt as NcSnoozeSuppressedSchema, H as LABEL_SUPPLY_MACRO, Hi as vectorDimFromBase64, Hn as applySecureOnArmEdit, Hr as isSystemDelivery, Ht as NcSharedSequenceSchema, I as EVENT_KIND_BY_CAP, Ii as systemEventFamilyProblems, In as alertEpisodeId, Ir as isKnownTemplateVar, It as NcRuleInputSchema, J as MAX_BIRTH_DECISION_RECORDS, Ji as evaluateSensorEdge, Jn as buildSubjectPath, Jr as memoizePinnedFfmpeg, Jt as NcTaxonomySchema, K as LockStateSchema, Ki as DEFAULT_FIRST_SIGHTING_FRESHNESS_MS, Kn as audioModeOf, Kr as linkedStepOf, Kt as NcStateSummarySectionIdSchema, L as EVENT_OWNER_TYPES, Li as systemEventFilterApplies, Ln as alertEpisodeKind, Lr as isLabelSupplyStepId, Lt as NcRulePatchSchema, M as EMBEDDING_MODEL_FAILED, Mi as subjectPathSvgPoints, Mn as activateAlarmProfile, Mr as isDetectionMacroClass, Mt as NcAlarmSettingsPatchSchema, N as EMBEDDING_REQUIREMENTS_FAILED, Ni as summarizeReview, Nn as addonWidgetsSourceCapability, Nr as isDrawableSubjectPath, Nt as NcConditionDescriptorSchema, O as DETECTION_MACRO_CLASSES, Oa as union, Oi as startMoverUnderClearance, On as TrackRelationKindSchema, Or as isAlertEpisodeSeverity, Ot as NcAlarmConfigSchema, P as EMBEDDING_REQUIREMENTS_UNAVAILABLE, Pi as syncActiveAlarmProfileSettings, Pn as alarmDeviceSecureOnArm, Pr as isEventKindLabelKey, Pt as NcConditionsSchema, Q as MOTION_CLOSE_AFTER_MS, Qi as BaseAddon, Qn as classifyRetrainReview, Qr as occupancyScope, Qt as OPS_LOG_DEFAULT_LIMIT, R as EXPORT_DENSE_MAX_RANGES, Ri as systemEventSummaryScheduleOf, Rn as alertEpisodePayload, Rr as isMediaOwnerType, Rt as NcRuleSchema, S as ClearTrackRelationInputSchema, Sa as partialRecord, Si as ruleGroupingApplies, Sn as TRACK_RELATIONS_DEFAULT_LIMIT, Sr as faceGalleryCapability, St as NC_SENSOR_TRANSITION_KINDS, T as DEFAULT_DETAIL_CROP_CONVENTION, Ta as string, Ti as secureActuationFor, Tn as TimelapseRuleSchema, Tr as gifFromMp4Args, Tt as NC_SYSTEM_EVENT_KIND_GROUP_SPECS, U as LabelAttributionSchema, Ui as viewerLinkBaseOf, Un as armRemovalReconcile, Ur as isSystemEventSummaryRule, Ut as NcSnoozeInputSchema, V as FailureCounters, Vi as templateVarsFor, Vn as applyNonBlockingEdit, Vr as isScheduleActive, Vt as NcScheduleSchema, W as ListTrackRelationsInputSchema, Wi as withSystemEventClasses, Wn as assertTimelapseCadences, Wr as isVectorIndexDimConflict, Wt as NcSnoozeSchema, X as MAX_TRACK_PURITIES, Xi as DeviceType, Xn as bundledCamstack, Xr as normalizeNcMediaPolicy, Xt as NcTemplatePreviewSchema, Y as MAX_BIRTH_LATENCY_PROXY_MS, Yi as isSourceCap, Yn as buildViewerLink, Yr as ncMediaPolicyError, Yt as NcTemplatePreviewInputSchema, Z as MAX_TRACK_RELATIONS, Zi as errMsg, Zn as calendarEventLocalSpan, Zr as notificationRulesCapability, Zt as NcTemplateVarDescriptorSchema, _ as BIRTH_DECISION_DEFAULT_LIMIT, _a as discriminatedUnion, _i as retrainRevisionConflictMessage, _n as SceneMonitorSchema, _t as NC_CONSUMABLE_SYSTEM_EVENT_KINDS, a as CLIP_EMBEDDING_STEP_ID, aa as customAction, ai as plateGalleryCapability, an as RetrainDismissedSchema, ar as deleteAlarmProfile, at as NC_ALARM_NOTIFY_FIELDS, b as BucketAccumulator, ba as number, bi as ruleBelongsToAlarm$1, bn as SetTrackRelationInputSchema, br as eventKindLabel, bt as NC_GROUPING_MAX_SEC, c as readClusterModelPinStrict, ca as hydrateSchema, ci as readMotionTriggeredBy, cn as SCENE_CONFIRM_DEFAULT_MAX_IMAGE_PX, cr as deriveRecordingMode, ct as NC_AUDIO_CONFIRM_HITS_DEFAULT, d as APPEARANCE_BLOCKS, di as resolveClipSearchMinScore, dn as SCENE_DEFAULT_CHECK_INTERVAL_SEC, dr as deviceAttentionKind, dt as NC_CLIP_PRE_ROLL_DEFAULT_SEC, ea as CamProfileSchema, ei as paletteResultSchema, en as PackageLlmVerdictSchema, er as consumableFormOf, et as MotionTriggeredBySchema, f as APPEARANCE_RESOLVES_AMBIGUITY_DEFAULT, fa as sleep$1, fi as resolveLocationMode, fn as SCENE_DEFAULT_OBSERVATION_SPACING_SEC, fr as deviceRemovalHookCapability, ft as NC_CLIP_RETENTION_MAX_SEC, g as ArchivedDebugNoteSchema, ga as boolean, gn as SCENE_RESET_RECAPTURES, gt as NC_CONSUMABLE_LOW_PERCENT_DEFAULT, h as AlarmArmModeSchema, ha as array, hi as resolveNcMediaImage, hn as SCENE_DIVERGED, hr as embeddingRefusalOf, ht as NC_CONFIRM_DEFAULT_TIMEOUT_MS, ia as createEvent, ii as pipelineAnalyticsCapability, in as RebuildObjectEmbeddingsRefusalSchema, ir as createAlarmProfile, it as NC_ALARM_DELAY_MAX_SEC, j as DetectionSourceSchema, ji as subjectPathSampleFromBox, jn as TrackSourceSchema, jr as isDefaultAlarmProfileId, jt as NcAlarmSensorsSchema, k as DETECTION_PIPELINE_CAP_NAME, ka as unknown, ki as storageOccupancyCapability, kn as TrackRelationSchema, kr as isAppLinkBase, kt as NcAlarmPostTriggeredActionSchema, l as resolveClusterModelPin, la as isDeviceScopedCap, li as readTimelapseGeneratedAt, ln as SCENE_CONFIRM_DEFAULT_TIMEOUT_MS, lr as describeSystemEventDeliveryProblem, lt as NC_AUDIO_CONFIRM_WINDOW_SEC_DEFAULT, m as AUDIO_MACRO_LABELS, ma as _enum, mi as resolveModeNotifyPolicy, mn as SCENE_DEFAULT_UNCOVERED_POLICY, mt as NC_CONFIRM_DEFAULT_MAX_IMAGE_PX, na as RECORD_MAX_DATA_BYTES, nn as RECORDING_EXPORT_MAX_READ_BYTES, nr as coreBlockIdFromAddonId, nt as NC_ALARM_DEFAULT_TRIGGERED_DURATION_SEC, o as CLUSTER_MODEL_OWNER_ADDON_ID, oa as defineCustomActions, oi as projectSubjectPath, on as RetrainOriginSchema, or as deriveDetailCropRect, ot as NC_ALARM_SYSTEM_EVENT_KINDS, p as ARCHIVED_DEBUG_NOTES_DEFAULT_LIMIT, pa as ZodObject, pi as resolveModeDelays, pn as SCENE_DEFAULT_QUIET_SECONDS, pt as NC_CONDITION_CATALOG, q as MAX_ARCHIVED_DEBUG_NOTES, qi as canonicalHash, qn as buildEventKindDescriptor, qr as mayWriteToLocation, qt as NcSystemEventKindSchema, ra as RECORD_QUERY_MAX, ri as pickFaceRescoreIntervalMinutes, rn as RECORDING_SOURCE_CAMSTACK_ADDON, rr as cosineSimilarity$1, rt as NC_ALARM_DELAY_FIELDS, s as FACE_EMBEDDING_STEP_ID, sa as defineRecordKinds, si as readDeviceStateFrom, sn as RetrainStatusSchema, sr as derivePostTriggeredAction, st as NC_ALARM_TRIGGERED_MAX_SEC, t as BUILTIN_CLIP_MODELS, ta as InvalidRecordError, ti as parseAlertEpisodePayload, tr as consumableLowPercentOf, tt as NC_ALARM_DEFAULT_PROFILE_ID, u as APPEARANCE_BIN_COUNT, ua as nodePin, ui as renameAlarmProfile, un as SCENE_DEFAULT_ANCHOR_THRESHOLD, ur as describeSystemEventFamilyProblem, ut as NC_CLIP_POST_ROLL_DEFAULT_SEC, v as BaseDevice, va as literal, vi as rootSupplyServes, vn as SetTrackPurityInputSchema, vr as encodeVectorBase64, vt as NC_DEFAULT_SNOOZE_MINUTES, w as CoverStateSchema, wa as strictObject, wi as sceneMonitorCapability, wn as TimelapseRulePatchSchema, wr as gifDeriveSpeed, wt as NC_STATE_SUMMARY_SECTION_IDS, x as COCO_TO_MACRO, xa as object, xi as ruleDeviceCompatCapQueries, xn as TIMELAPSE_DENSE_FLOOR_SEC, xr as evictionPolicyOfLocation, xt as NC_GROUPING_MIN_SEC, y as BirthDecisionRecordSchema, ya as looseObject, yi as ruleAutoTriggersAlarm, yn as SetTrackPurityResultSchema, yr as ensureAlarmProfiles, yt as NC_GROUPING_DEFAULT_SEC, z as FIRST_LEVEL_MACRO_CLASSES, zi as systemEventSummarySplitOf, zn as applyBlockingEdit, zr as isRetiredClearKey, zt as NcRuleTargetSchema } from "../clip-model-registry-Cw7Iy7Qi.mjs";
+import { $ as MediaFileKindEnum, $i as CAP_ADVANCE_FIELDS, $n as cloneAlarmSettings, $r as paintHex, $t as OpsLogEntrySchema, A as DeclaredDevices, Aa as EventCategory, Ai as subKindsOf, An as TrackSideSchema, Ar as isAudioClassName, At as NcAlarmSensorsInputSchema, B as FULL_IMAGE_BBOX, Bi as templateCarriesSummary, Bn as applyModeDelaysEdits, Br as isRootSuppliableStepId, Bt as NcRuleUpdateInputSchema, C as ClearTrackRelationResultSchema, Ca as record, Ci as ruleKindOf, Cn as TimelapseRuleInputSchema, Cr as failureContributionCapability, Ct as NC_SNOOZE_MAX_MINUTES, D as DEFAULT_TIMELAPSE_PREVIEW_TEXT, Da as tuple, Di as servedTemplateVars, Dn as TrackPuritySchema, Dr as isAlertEpisodeOpen, Dt as NC_TEMPLATE_VARS, E as DEFAULT_EVENT_COLOR, Ea as templateLiteral, Ei as sensorRaisedOf, En as TrackPlacementSchema, Er as isAlarmControllableCap, Et as NC_TAXONOMY, F as EVENT_DENSITY_BATCH_MAX, Fi as systemEventDeliveryProblems, Fn as alarmPanelCapability, Fr as isEventOwnerType, Ft as NcRuleActionSchema, G as ListTrackRelationsResultSchema, Gi as zoneAnalyticsCapability, Gn as audioMetricsCapability, Gr as kebabToCamel, Gt as NcSnoozeSuppressedSchema, H as LABEL_SUPPLY_MACRO, Hi as vectorDimFromBase64, Hn as applySecureOnArmEdit, Hr as isSystemDelivery, Ht as NcSharedSequenceSchema, I as EVENT_KIND_BY_CAP, Ii as systemEventFamilyProblems, In as alertEpisodeId, Ir as isKnownTemplateVar, It as NcRuleInputSchema, J as MAX_BIRTH_DECISION_RECORDS, Ji as evaluateSensorEdge, Jn as buildSubjectPath, Jr as memoizePinnedFfmpeg, Jt as NcTaxonomySchema, K as LockStateSchema, Ki as DEFAULT_FIRST_SIGHTING_FRESHNESS_MS, Kn as audioModeOf, Kr as linkedStepOf, Kt as NcStateSummarySectionIdSchema, L as EVENT_OWNER_TYPES, Li as systemEventFilterApplies, Ln as alertEpisodeKind, Lr as isLabelSupplyStepId, Lt as NcRulePatchSchema, M as EMBEDDING_MODEL_FAILED, Mi as subjectPathSvgPoints, Mn as activateAlarmProfile, Mr as isDetectionMacroClass, Mt as NcAlarmSettingsPatchSchema, N as EMBEDDING_REQUIREMENTS_FAILED, Ni as summarizeReview, Nn as addonWidgetsSourceCapability, Nr as isDrawableSubjectPath, Nt as NcConditionDescriptorSchema, O as DETECTION_MACRO_CLASSES, Oa as union, Oi as startMoverUnderClearance, On as TrackRelationKindSchema, Or as isAlertEpisodeSeverity, Ot as NcAlarmConfigSchema, P as EMBEDDING_REQUIREMENTS_UNAVAILABLE, Pi as syncActiveAlarmProfileSettings, Pn as alarmDeviceSecureOnArm, Pr as isEventKindLabelKey, Pt as NcConditionsSchema, Q as MOTION_CLOSE_AFTER_MS, Qi as BaseAddon, Qn as classifyRetrainReview, Qr as occupancyScope, Qt as OPS_LOG_DEFAULT_LIMIT, R as EXPORT_DENSE_MAX_RANGES, Ri as systemEventSummaryScheduleOf, Rn as alertEpisodePayload, Rr as isMediaOwnerType, Rt as NcRuleSchema, S as ClearTrackRelationInputSchema, Sa as partialRecord, Si as ruleGroupingApplies, Sn as TRACK_RELATIONS_DEFAULT_LIMIT, Sr as faceGalleryCapability, St as NC_SENSOR_TRANSITION_KINDS, T as DEFAULT_DETAIL_CROP_CONVENTION, Ta as string, Ti as secureActuationFor, Tn as TimelapseRuleSchema, Tr as gifFromMp4Args, Tt as NC_SYSTEM_EVENT_KIND_GROUP_SPECS, U as LabelAttributionSchema, Ui as viewerLinkBaseOf, Un as armRemovalReconcile, Ur as isSystemEventSummaryRule, Ut as NcSnoozeInputSchema, V as FailureCounters, Vi as templateVarsFor, Vn as applyNonBlockingEdit, Vr as isScheduleActive, Vt as NcScheduleSchema, W as ListTrackRelationsInputSchema, Wi as withSystemEventClasses, Wn as assertTimelapseCadences, Wr as isVectorIndexDimConflict, Wt as NcSnoozeSchema, X as MAX_TRACK_PURITIES, Xi as DeviceType, Xn as bundledCamstack, Xr as normalizeNcMediaPolicy, Xt as NcTemplatePreviewSchema, Y as MAX_BIRTH_LATENCY_PROXY_MS, Yi as isSourceCap, Yn as buildViewerLink, Yr as ncMediaPolicyError, Yt as NcTemplatePreviewInputSchema, Z as MAX_TRACK_RELATIONS, Zi as errMsg, Zn as calendarEventLocalSpan, Zr as notificationRulesCapability, Zt as NcTemplateVarDescriptorSchema, _ as BIRTH_DECISION_DEFAULT_LIMIT, _a as discriminatedUnion, _i as retrainRevisionConflictMessage, _n as SceneMonitorSchema, _t as NC_CONSUMABLE_SYSTEM_EVENT_KINDS, a as CLIP_EMBEDDING_STEP_ID, aa as customAction, ai as plateGalleryCapability, an as RetrainDismissedSchema, ar as deleteAlarmProfile, at as NC_ALARM_NOTIFY_FIELDS, b as BucketAccumulator, ba as number, bi as ruleBelongsToAlarm$1, bn as SetTrackRelationInputSchema, br as eventKindLabel, bt as NC_GROUPING_MAX_SEC, c as readClusterModelPinStrict, ca as hydrateSchema, ci as readMotionTriggeredBy, cn as SCENE_CONFIRM_DEFAULT_MAX_IMAGE_PX, cr as deriveRecordingMode, ct as NC_AUDIO_CONFIRM_HITS_DEFAULT, d as APPEARANCE_BLOCKS, di as resolveClipSearchMinScore, dn as SCENE_DEFAULT_CHECK_INTERVAL_SEC, dr as deviceAttentionKind, dt as NC_CLIP_PRE_ROLL_DEFAULT_SEC, ea as CamProfileSchema, ei as paletteResultSchema, en as PackageLlmVerdictSchema, er as consumableFormOf, et as MotionTriggeredBySchema, f as APPEARANCE_RESOLVES_AMBIGUITY_DEFAULT, fa as sleep$1, fi as resolveLocationMode, fn as SCENE_DEFAULT_OBSERVATION_SPACING_SEC, fr as deviceRemovalHookCapability, ft as NC_CLIP_RETENTION_MAX_SEC, g as ArchivedDebugNoteSchema, ga as boolean, gn as SCENE_RESET_RECAPTURES, gt as NC_CONSUMABLE_LOW_PERCENT_DEFAULT, h as AlarmArmModeSchema, ha as array, hi as resolveNcMediaImage, hn as SCENE_DIVERGED, hr as embeddingRefusalOf, ht as NC_CONFIRM_DEFAULT_TIMEOUT_MS, ia as createEvent, ii as pipelineAnalyticsCapability, in as RebuildObjectEmbeddingsRefusalSchema, ir as createAlarmProfile, it as NC_ALARM_DELAY_MAX_SEC, j as DetectionSourceSchema, ji as subjectPathSampleFromBox, jn as TrackSourceSchema, jr as isDefaultAlarmProfileId, jt as NcAlarmSensorsSchema, k as DETECTION_PIPELINE_CAP_NAME, ka as unknown, ki as storageOccupancyCapability, kn as TrackRelationSchema, kr as isAppLinkBase, kt as NcAlarmPostTriggeredActionSchema, l as resolveClusterModelPin, la as isDeviceScopedCap, li as readTimelapseGeneratedAt, ln as SCENE_CONFIRM_DEFAULT_TIMEOUT_MS, lr as describeSystemEventDeliveryProblem, lt as NC_AUDIO_CONFIRM_WINDOW_SEC_DEFAULT, m as AUDIO_MACRO_LABELS, ma as _enum, mi as resolveModeNotifyPolicy, mn as SCENE_DEFAULT_UNCOVERED_POLICY, mt as NC_CONFIRM_DEFAULT_MAX_IMAGE_PX, na as RECORD_MAX_DATA_BYTES, nn as RECORDING_EXPORT_MAX_READ_BYTES, nr as coreBlockIdFromAddonId, nt as NC_ALARM_DEFAULT_TRIGGERED_DURATION_SEC, o as CLUSTER_MODEL_OWNER_ADDON_ID, oa as defineCustomActions, oi as projectSubjectPath, on as RetrainOriginSchema, or as deriveDetailCropRect, ot as NC_ALARM_SYSTEM_EVENT_KINDS, p as ARCHIVED_DEBUG_NOTES_DEFAULT_LIMIT, pa as ZodObject, pi as resolveModeDelays, pn as SCENE_DEFAULT_QUIET_SECONDS, pt as NC_CONDITION_CATALOG, q as MAX_ARCHIVED_DEBUG_NOTES, qi as canonicalHash, qn as buildEventKindDescriptor, qr as mayWriteToLocation, qt as NcSystemEventKindSchema, ra as RECORD_QUERY_MAX, ri as pickFaceRescoreIntervalMinutes, rn as RECORDING_SOURCE_CAMSTACK_ADDON, rr as cosineSimilarity$1, rt as NC_ALARM_DELAY_FIELDS, s as FACE_EMBEDDING_STEP_ID, sa as defineRecordKinds, si as readDeviceStateFrom, sn as RetrainStatusSchema, sr as derivePostTriggeredAction, st as NC_ALARM_TRIGGERED_MAX_SEC, t as BUILTIN_CLIP_MODELS, ta as InvalidRecordError, ti as parseAlertEpisodePayload, tr as consumableLowPercentOf, tt as NC_ALARM_DEFAULT_PROFILE_ID, u as APPEARANCE_BIN_COUNT, ua as nodePin, ui as renameAlarmProfile, un as SCENE_DEFAULT_ANCHOR_THRESHOLD, ur as describeSystemEventFamilyProblem, ut as NC_CLIP_POST_ROLL_DEFAULT_SEC, v as BaseDevice, va as literal, vi as rootSupplyServes, vn as SetTrackPurityInputSchema, vr as encodeVectorBase64, vt as NC_DEFAULT_SNOOZE_MINUTES, w as CoverStateSchema, wa as strictObject, wi as sceneMonitorCapability, wn as TimelapseRulePatchSchema, wr as gifDeriveSpeed, wt as NC_STATE_SUMMARY_SECTION_IDS, x as COCO_TO_MACRO, xa as object, xi as ruleDeviceCompatCapQueries, xn as TIMELAPSE_DENSE_FLOOR_SEC, xr as evictionPolicyOfLocation, xt as NC_GROUPING_MIN_SEC, y as BirthDecisionRecordSchema, ya as looseObject, yi as ruleAutoTriggersAlarm, yn as SetTrackPurityResultSchema, yr as ensureAlarmProfiles, yt as NC_GROUPING_DEFAULT_SEC, z as FIRST_LEVEL_MACRO_CLASSES, zi as systemEventSummarySplitOf, zn as applyBlockingEdit, zr as isRetiredClearKey, zt as NcRuleTargetSchema } from "../clip-model-registry-DdgT3gdf.mjs";
 import { t as __exportAll } from "../embedding-encoder/index.mjs";
 import * as fs$1 from "node:fs";
 import { createWriteStream, promises } from "node:fs";
@@ -750,6 +750,8 @@ var DEFAULT_ACTION_TTL_MS = 15 * 6e4;
 * notification that is not fresh.
 */
 var SNOOZE_ACTION_TTL_MS = 60 * 6e4;
+/** How long a Correct / Wrong button stays live: one day. */
+var VERDICT_ACTION_TTL_MS = 1440 * 6e4;
 /**
 * How long a DISARM button stays live: five minutes.
 *
@@ -777,6 +779,7 @@ function actionTtlMs(subject) {
 		case "sequence": return DEFAULT_ACTION_TTL_MS;
 		case "addon-update": return DEFAULT_ACTION_TTL_MS;
 		case "server-update": return DEFAULT_ACTION_TTL_MS;
+		case "detection-verdict": return VERDICT_ACTION_TTL_MS;
 	}
 }
 var NcActionTokenRegistry = class {
@@ -820,6 +823,30 @@ var NcActionTokenRegistry = class {
 			grant: found.grant
 		};
 	}
+	/**
+	* Read the grant without spending it. ONLY the confirm page of a link-only
+	* channel may call this: it exists so a link preview that opens the URL
+	* cannot spend the token, and it never runs anything.
+	*/
+	peek(id) {
+		const found = this.grants.get(id);
+		if (found === void 0) return {
+			ok: false,
+			reason: "unknown"
+		};
+		if (found.used) return {
+			ok: false,
+			reason: "already-used"
+		};
+		if (found.grant.expiresAt <= this.now()) return {
+			ok: false,
+			reason: "expired"
+		};
+		return {
+			ok: true,
+			grant: found.grant
+		};
+	}
 	/** Drop records that can no longer be claimed. Memory hygiene only — an
 	*  expired record is already refused by {@link claim}, so a sweep that never
 	*  ran would cost bytes, never safety. */
@@ -861,6 +888,7 @@ function describeGrant(grant) {
 			return grant.action === "disarm" ? "Alarm disarmed" : `Alarm armed${grant.mode !== void 0 ? ` (${grant.mode})` : ""}`;
 		case "addon-update": return `${grant.packages.length} addon update(s) on ${grant.nodeId}`;
 		case "server-update": return `Server update on ${grant.nodeId}`;
+		case "detection-verdict": return grant.verdict === "correct" ? "Marked correct — kept for retraining" : grant.suggestedClass === void 0 ? "Marked wrong — kept for retraining" : `Marked wrong, it was a ${grant.suggestedClass} — kept for retraining`;
 	}
 }
 /** The audit line's `meta`, per family. A snooze that logged a `sequence` it
@@ -914,6 +942,15 @@ function grantMeta(grant) {
 			...common,
 			nodeId: grant.nodeId
 		};
+		case "detection-verdict": return {
+			...common,
+			ruleId: grant.ruleId,
+			rule: grant.ruleName,
+			userId: grant.userId,
+			trackId: grant.trackId,
+			verdict: grant.verdict,
+			suggestedClass: grant.suggestedClass ?? null
+		};
 	}
 }
 /** What the human standing in front of the page is told. */
@@ -922,6 +959,11 @@ var FAILURE_COPY = {
 	expired: "This button has expired. Open CamStack to do it there.",
 	"already-used": "Already done — this button had been used."
 };
+/** The question a link-only channel lands on, answered by a POST form. */
+function confirmPage(url, grant) {
+	const action = `${url.pathname}?exp=${encodeURIComponent(url.searchParams.get("exp") ?? "")}&amp;sig=${encodeURIComponent(url.searchParams.get("sig") ?? "")}&amp;confirm=1`;
+	return `<!doctype html><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Confirm</title><style>body{font:16px/1.5 system-ui,sans-serif;margin:0;min-height:100vh;display:grid;place-items:center;background:#111;color:#eee}main{max-width:24rem;padding:2rem;text-align:center}h1{font-size:1.25rem;margin:0 0 1rem}button{font:inherit;padding:.6rem 1.4rem;border-radius:.5rem;border:0;background:#3b82f6;color:#fff}</style><main><h1>Confirm</h1><p>${grant.verdict === "correct" ? "Mark this detection as correct?" : grant.suggestedClass === void 0 ? "Mark this detection as wrong?" : `Mark this detection as wrong, it was a ${grant.suggestedClass}?`}</p><form method="post" action="${action}"><button type="submit">Confirm</button></form></main>`;
+}
 function page(title, detail) {
 	return `<!doctype html><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>${title}</title><style>body{font:16px/1.5 system-ui,sans-serif;margin:0;min-height:100vh;display:grid;place-items:center;background:#111;color:#eee}main{max-width:24rem;padding:2rem;text-align:center}h1{font-size:1.25rem;margin:0 0 .5rem}p{margin:0;color:#aaa}</style><main><h1>${title}</h1><p>${detail}</p></main>`;
 }
@@ -935,7 +977,8 @@ var NcActionPlane = class {
 	handler = async (req, res) => {
 		const url = new URL(req.url ?? "/", "http://placeholder");
 		const id = decodeURIComponent(url.pathname.split("/").filter(Boolean).pop() ?? "");
-		const background = (req.method ?? "GET").toUpperCase() === "POST";
+		const posted = (req.method ?? "GET").toUpperCase() === "POST";
+		const background = posted && url.searchParams.get("confirm") !== "1";
 		if (!verifyActionSignature({
 			secret: this.deps.secret,
 			id,
@@ -947,6 +990,13 @@ var NcActionPlane = class {
 			this.reply(res, background, 404, "Not found", "This link is not valid.");
 			return;
 		}
+		if (!posted) {
+			const peeked = this.deps.registry.peek(id);
+			if (peeked.ok && peeked.grant.kind === "detection-verdict" && peeked.grant.viaLink === true) {
+				this.sendBody(res, 200, "text/html; charset=utf-8", confirmPage(url, peeked.grant));
+				return;
+			}
+		}
 		const claim = this.deps.registry.claim(id);
 		if (!claim.ok) {
 			this.deps.logger.info("nc action callback not claimable", { meta: {
@@ -1092,6 +1142,7 @@ var ncDurableRecordKinds = defineRecordKinds({
 	"state-summary-stamps": ledger("digest delivery stamps per rule kind"),
 	meta: ledger("outbox boot-reconcile watermark and other single-key meta rows", "settings", { none: "one fixed key (watermark), overwritten in place, never deleted" }),
 	snoozes: ledger("operator opens or closes a snooze window (write-through)"),
+	"detection-verdicts": ledger("operator taps Correct or Wrong on a detection notification; one row per track"),
 	"snooze-suppressed": {
 		...QUERIED,
 		class: "ledger",
@@ -9226,6 +9277,9 @@ var en_default = {
 	"action.addon-update.uptodate": "Already up to date on {{nodeId}} — nothing to do",
 	"action.addon-update.unknown": "Could not read what needs updating on {{nodeId}} — nothing was changed. Open CamStack.",
 	"button.server-update.apply": "Update server on {{nodeId}}",
+	"button.verdict.correct": "Correct",
+	"button.verdict.wrong": "Wrong",
+	"button.verdict.wrongAs": "Wrong: it is {{class}}",
 	"action.server-update.title": "Server update",
 	"action.server-update.started": "Updating server on {{nodeId}}…",
 	"action.server-update.restarting": "Server update staged on {{nodeId}} — the node is restarting. You will hear when it comes back.",
@@ -9627,6 +9681,9 @@ var it_default = {
 	"action.addon-update.uptodate": "Già aggiornato su {{nodeId}} — niente da fare",
 	"action.addon-update.unknown": "Non è stato possibile leggere cosa aggiornare su {{nodeId}} — non è stato cambiato nulla. Apri CamStack.",
 	"button.server-update.apply": "Aggiorna server su {{nodeId}}",
+	"button.verdict.correct": "Corretto",
+	"button.verdict.wrong": "Sbagliato",
+	"button.verdict.wrongAs": "Sbagliato: è {{class}}",
 	"action.server-update.title": "Aggiornamento server",
 	"action.server-update.started": "Aggiornamento server su {{nodeId}}…",
 	"action.server-update.restarting": "Aggiornamento server predisposto su {{nodeId}} — il nodo si riavvia. Ti avviseremo quando torna.",
@@ -53035,6 +53092,15 @@ var SESSION_STILLNESS_MIN_POINTS = 4;
 *  long (object removed while unobserved, or a long occlusion) → retire it. */
 var ENTRY_TTL_MS = 5 * 6e4;
 /**
+* The most one gap between two consecutive processed frames counts toward an
+* entry's WATCHED unconfirmed time. Frames inside a motion session arrive every
+* 0.2-2 s; the silence between on-motion sessions is tens of seconds to hours.
+* 10 s sits above any real in-session cadence (a slower frame still counts
+* nearly in full) and far below a session gap, so a gap contributes at most
+* one bound, never its length. Under-counting only delays a retirement.
+*/
+var WATCHED_GAP_CAP_MS = 1e4;
+/**
 * How far apart the two reads of a departure must be before the second one
 * counts as CONFIRMING the first.
 *
@@ -59702,6 +59768,25 @@ var TrackAlreadyTrainedError = class extends Error {
 	}
 };
 /**
+* Classify a failed `setTrackFlags` as one of the lifecycle's DELIBERATE
+* refusals, or `null` when it is a failure of the call itself.
+*
+* Needed because the caller that matters (a notification button) reaches the
+* method over `ctx.api`, where the error class does not survive the hop and
+* only the message does. The class check comes first; the message check is the
+* transported form, and `track-flags.spec.ts` pins it against the real
+* messages so a reworded refusal cannot silently turn into a generic failure.
+*/
+function retrainRefusalReason(err) {
+	if (err instanceof TrackAlreadyTrainedError) return "trained";
+	if (err instanceof StagingBudgetExceededError) return "budget";
+	const message = err instanceof Error ? err.message : "";
+	if (message.includes("is already trained")) return "trained";
+	if (message.includes("in retrain staging")) return "budget";
+	if (message.includes("unknown track")) return "unknown-track";
+	return null;
+}
+/**
 * The `debugNote` half of the patch — `{}` when nothing should be written.
 *
 * The note is not an independent column: it is the operator's sentence about
@@ -62265,6 +62350,19 @@ var StationaryObjectRegistry = class {
 	*  so quiet minutes must not age the entries (see {@link sweep}). */
 	lastFrameAtByDevice = /* @__PURE__ */ new Map();
 	/**
+	* WATCHED time each entry has gone unconfirmed, in ms. Entry expiry is judged
+	* on this, never on the span between two frame timestamps: a session-dispatch
+	* camera's silence between motion sessions would otherwise be counted in full
+	* the moment the next session's first frame arrives (measured: a car parked
+	* 3.3 h was retired after seconds of watching, 316 s after its last
+	* confirmation). Each frame adds its delta from the previous one, capped at
+	* {@link WATCHED_GAP_CAP_MS}; a confirmation resets it. `confirmedAt` is the
+	* `lastConfirmedAt` the counter was last reset for, so a changed value (any of
+	* the places that confirm an entry) restarts the count without a hook at each.
+	* An entry that was just hydrated has no record here and starts at zero.
+	*/
+	unconfirmedWatched = /* @__PURE__ */ new Map();
+	/**
 	* Entries carrying ONE unconfirmed departure read, per device (D49, D174,
 	* D279).
 	*
@@ -62378,7 +62476,27 @@ var StationaryObjectRegistry = class {
 	/** Record that a frame was processed for a device — advances the OBSERVED
 	*  clock that drives entry expiry in {@link sweep}. */
 	noteFrame(deviceId, timestamp) {
-		if (timestamp > (this.lastFrameAtByDevice.get(deviceId) ?? 0)) this.lastFrameAtByDevice.set(deviceId, timestamp);
+		const known = this.lastFrameAtByDevice.get(deviceId);
+		if (timestamp <= (known ?? 0)) return;
+		this.lastFrameAtByDevice.set(deviceId, timestamp);
+		const ids = this.idsByDevice.get(deviceId);
+		if (!ids) return;
+		const delta = known === void 0 ? 0 : Math.min(timestamp - known, WATCHED_GAP_CAP_MS);
+		for (const id of ids) {
+			const e = this.ledger.get(id);
+			if (!e) continue;
+			const rec = this.unconfirmedWatched.get(id);
+			if (!rec || rec.confirmedAt !== e.lastConfirmedAt) this.unconfirmedWatched.set(id, {
+				confirmedAt: e.lastConfirmedAt,
+				ms: 0
+			});
+			else rec.ms += delta;
+		}
+	}
+	/** Watched ms an entry has gone unconfirmed (0 when not yet tracked). */
+	watchedUnconfirmedMs(e) {
+		const rec = this.unconfirmedWatched.get(e.id);
+		return rec && rec.confirmedAt === e.lastConfirmedAt ? rec.ms : 0;
 	}
 	/**
 	* Per-frame gate: partition this frame's detections against the device's
@@ -62623,12 +62741,14 @@ var StationaryObjectRegistry = class {
 	* logged by `MacMiniAgent.localdomain` and by `agent-a`, the same
 	* rows, seven seconds apart.
 	*
-	* Expiry is measured against the device's latest processed-frame timestamp
-	* ({@link noteFrame}), NOT the wall clock: a session-dispatch camera emits
-	* no frames between motion sessions, and that silence says nothing about
-	* the object. Only when the camera has actually been WATCHING for `ttl`
+	* Expiry is measured in WATCHED time ({@link noteFrame}): the sum of the
+	* gaps between consecutive processed frames, each capped at
+	* {@link WATCHED_GAP_CAP_MS}, since the entry's last confirmation. Neither the
+	* wall clock nor the span between frame timestamps: a session-dispatch
+	* camera emits no frames between motion sessions, and a silent gap must not
+	* age the object. Only when the camera has actually been WATCHING for `ttl`
 	* beyond the last confirmation (frames flowed, object never matched) is the
-	* object considered removed. A device with no recorded frame yet never
+	* object considered removed. A freshly hydrated entry starts at zero. A device with no recorded frame yet never
 	* expires its entries. `now` only stamps the departed telemetry.
 	*/
 	async sweep(now) {
@@ -62647,9 +62767,10 @@ var StationaryObjectRegistry = class {
 					ids.delete(id);
 					continue;
 				}
-				const overdue = observedAt - e.lastConfirmedAt > ttl;
+				const watchedMs = this.watchedUnconfirmedMs(e);
+				const overdue = watchedMs > ttl;
 				const proven = this.detectorProvedItself(e);
-				const unprovenBackstop = observedAt - e.lastConfirmedAt > ttl * 12;
+				const unprovenBackstop = watchedMs > ttl * 12;
 				if (overdue && !proven && !unprovenBackstop) {
 					this.bumpStrikeCounters(deviceId, { ttlHeldUnproven: 1 });
 					continue;
@@ -62665,7 +62786,8 @@ var StationaryObjectRegistry = class {
 							className: e.className,
 							reason: proven ? "ttl" : "ttl-unproven",
 							ttlMs: ttl,
-							unconfirmedForMs: observedAt - e.lastConfirmedAt,
+							unconfirmedForMs: watchedMs,
+							wallGapMs: observedAt - e.lastConfirmedAt,
 							parkedForMs: observedAt - e.becameStationaryAt
 						}
 					});
@@ -62749,6 +62871,7 @@ var StationaryObjectRegistry = class {
 		for (const id of ids) {
 			this.dirty.delete(id);
 			this.weakRuns.delete(id);
+			this.unconfirmedWatched.delete(id);
 			this.ledger.evict(id);
 		}
 		this.idsByDevice.delete(deviceId);
@@ -62936,6 +63059,7 @@ var StationaryObjectRegistry = class {
 		return at !== void 0 && at > entry.lastConfirmedAt;
 	}
 	dropEntry(deviceId, id) {
+		this.unconfirmedWatched.delete(id);
 		const dropped = this.ledger.get(id);
 		this.idsByDevice.get(deviceId)?.delete(id);
 		this.dirty.delete(id);
@@ -81843,6 +81967,10 @@ var NC_DEVICE_ROW_KINDS = [
 	{
 		key: "nc-artifacts",
 		kind: ncDurableRecordKinds.artifacts
+	},
+	{
+		key: "nc-detection-verdicts",
+		kind: ncDurableRecordKinds["detection-verdicts"]
 	}
 ];
 /**
@@ -82262,6 +82390,82 @@ var NcSequenceStore = class NcSequenceStore {
 	}
 };
 //#endregion
+//#region src/notification-center/detection-verdict-ledger.ts
+/**
+* @durable class=ledger owner=notification-center
+*   write="the operator taps Correct / Wrong on a detection notification; one row per track, the latest answer replaces the earlier one"
+*   retention="none — bounded by the tracks a rule asked about; deleted with the camera by the device-removal hook"
+*/
+var NC_DETECTION_VERDICTS_COLLECTION = "notification-center:detection-verdicts";
+var NC_DETECTION_VERDICTS_COLUMNS = [
+	{
+		name: "id",
+		type: "TEXT",
+		primaryKey: true,
+		notNull: true
+	},
+	{
+		name: "ruleId",
+		type: "TEXT",
+		notNull: true
+	},
+	{
+		name: "at",
+		type: "INTEGER",
+		notNull: true
+	},
+	(
+	/** The FULL row (Zod-validated on read). */
+	{
+		name: "row",
+		type: "JSON",
+		notNull: true
+	})
+];
+var NcDetectionVerdictRecordSchema = object({
+	trackId: string().min(1),
+	deviceId: number().int(),
+	verdict: _enum(["correct", "wrong"]),
+	/** The class the operator said it really was. Only with `wrong`. */
+	suggestedClass: string().min(1).optional(),
+	/** Whose notification it was (the token's frozen owner), NOT who tapped. */
+	userId: string().min(1),
+	ruleId: string().min(1),
+	ruleName: string(),
+	at: number()
+});
+var NC_DETECTION_VERDICTS_SPEC = {
+	collection: NC_DETECTION_VERDICTS_COLLECTION,
+	columns: [...NC_DETECTION_VERDICTS_COLUMNS],
+	writeMode: "write-through",
+	keyOf: (row) => row.trackId,
+	toValue: (row) => ({
+		ruleId: row.ruleId,
+		at: row.at,
+		row
+	}),
+	fromRecord: (_key, data) => {
+		const parsed = NcDetectionVerdictRecordSchema.safeParse(data["row"]);
+		return parsed.success ? parsed.data : null;
+	},
+	deviceIdOf: (row) => row.deviceId,
+	loadLimit: 1e4
+};
+var NcDetectionVerdictLedger = class {
+	ledger;
+	constructor(deps) {
+		this.ledger = new DurableLedger({
+			spec: NC_DETECTION_VERDICTS_SPEC,
+			kind: deps.records.kind(ncDurableRecordKinds["detection-verdicts"]),
+			logger: deps.logger
+		});
+	}
+	/** Write-through; throws on a failed write so the tap reports it. */
+	async record(row) {
+		await this.ledger.put(NcDetectionVerdictRecordSchema.parse(row));
+	}
+};
+//#endregion
 //#region src/notification-center/device-prune.ts
 function judgeList(list, isDead) {
 	const dead = list.filter(isDead);
@@ -83216,6 +83420,64 @@ var NcDeviceStateCache = class {
 	}
 };
 //#endregion
+//#region src/notification-center/detection-verdict-buttons.ts
+var VERDICT_CORRECT_ID = "detection-verdict-correct";
+var VERDICT_WRONG_ID = "detection-verdict-wrong";
+/** `detection-verdict-wrong:<class>` — Wrong, and what it really was. */
+var VERDICT_WRONG_AS_PREFIX = "detection-verdict-wrong:";
+/** The macro classes offered as "it was really…". Short on purpose. */
+var VERDICT_CLASS_CHOICES = [
+	"person",
+	"vehicle",
+	"animal"
+];
+/** At most this many class buttons, and only when the channel has room. */
+var VERDICT_MAX_CLASS_CHOICES = 2;
+function verdictButtonRefusal(subject) {
+	if (!subject.askVerdict) return "rule-off";
+	if (subject.trackId === void 0) return "no-track";
+	if (subject.ownerUserId === void 0) return "unowned-target";
+	return null;
+}
+/** The classes worth offering for a subject of `className`. */
+function verdictClassChoices(className) {
+	return VERDICT_CLASS_CHOICES.filter((c) => c !== className).slice(0, VERDICT_MAX_CLASS_CHOICES);
+}
+/**
+* Which buttons a channel with `maxActions` slots gets. `maxActions` absent
+* (the kind catalog did not answer) is treated as the common floor of three:
+* the two plain choices, never the class ones. The class choices appear only
+* when the channel declared room for a fourth button.
+*/
+function verdictButtonSpecs(input) {
+	const base = [{
+		actionId: VERDICT_CORRECT_ID,
+		verdict: "correct"
+	}, {
+		actionId: VERDICT_WRONG_ID,
+		verdict: "wrong"
+	}];
+	if (input.maxActions === void 0 || input.maxActions <= 3) return base;
+	const room = input.maxActions - base.length;
+	const extra = verdictClassChoices(input.className).slice(0, room).map((suggestedClass) => ({
+		actionId: `${VERDICT_WRONG_AS_PREFIX}${suggestedClass}`,
+		verdict: "wrong",
+		suggestedClass
+	}));
+	return [...base, ...extra];
+}
+/** Is this one of our buttons (so a link-only channel can lift it into the body)? */
+function isVerdictAction(action) {
+	return action.id === VERDICT_CORRECT_ID || action.id.startsWith(VERDICT_WRONG_ID);
+}
+/**
+* The body lines that carry the verdict choices on a channel with no buttons.
+* A bare URL per line: every chat and mail client linkifies it.
+*/
+function verdictLinkLines(actions) {
+	return actions.filter(isVerdictAction).map((a) => `${a.label}: ${a.url ?? ""}`).join("\n");
+}
+//#endregion
 //#region src/notification-center/state-summary/state-model.ts
 /**
 * The STATE SUMMARY's vocabulary (D647): its sections, and what one reported
@@ -86924,6 +87186,8 @@ var NcDispatcher = class {
 				targetId: target.id,
 				...target.ownerUserId !== void 0 ? { ownerUserId: target.ownerUserId } : {},
 				...entry.payload.subject.className !== void 0 ? { className: entry.payload.subject.className } : {},
+				...entry.payload.subject.trackId !== void 0 ? { trackId: entry.payload.subject.trackId } : {},
+				...target.maxActions !== void 0 ? { maxActions: target.maxActions } : {},
 				...entry.payload.subject.systemEvent !== void 0 ? { systemEvent: entry.payload.subject.systemEvent } : {}
 			});
 		} catch (err) {
@@ -87019,9 +87283,13 @@ var NcDispatcher = class {
 				...summarySectionOf(systemEvent.data)
 			} } : {}
 		}) : null;
-		const actions = await this.mintActions(entry, target);
+		const minted = await this.mintActions(entry, target);
+		const linkOnly = target.maxActions === 0;
+		const verdictLinks = linkOnly ? verdictLinkLines(minted) : "";
+		const actions = linkOnly ? minted.filter((a) => !isVerdictAction(a)) : minted;
+		const withLinks = (text) => verdictLinks === "" ? text : `${text}\n\n${verdictLinks}`;
 		const notification = {
-			body,
+			body: withLinks(body),
 			title,
 			priority: clampPriority(paramNumber(entry.payload.params, "priority") ?? entry.payload.priority),
 			...params,
@@ -87043,7 +87311,7 @@ var NcDispatcher = class {
 			grouped: resolved.grouped,
 			withAiText: (aiText) => ({
 				...notification,
-				body: renderBody(aiText)
+				body: withLinks(renderBody(aiText))
 			})
 		};
 	}
@@ -99656,6 +99924,55 @@ async function mintButtons(host, input) {
 	const announcement = stored === null && input.ruleId === NC_ALARM_ANNOUNCE_RULE_ID;
 	if (stored === null && !announcement) return [];
 	const drafts = [];
+	const verdictRefusal = verdictButtonRefusal({
+		askVerdict: stored?.askVerdict === true,
+		...input.trackId !== void 0 ? { trackId: input.trackId } : {},
+		...input.ownerUserId !== void 0 ? { ownerUserId: input.ownerUserId } : {}
+	});
+	if (stored?.askVerdict === true && verdictRefusal !== null) host.logger.info("detection notification carries no verdict buttons", {
+		tags: { deviceId: input.deviceId },
+		meta: {
+			ruleId: input.ruleId,
+			reason: verdictRefusal,
+			targetId: input.targetId
+		}
+	});
+	const verdictTrackId = input.trackId;
+	const verdictOwner = input.ownerUserId;
+	const verdictButtons = verdictRefusal !== null || verdictTrackId === void 0 || verdictOwner === void 0 ? [] : verdictButtonSpecs({
+		className: input.className,
+		maxActions: input.maxActions
+	}).map((spec) => {
+		const id = randomUUID();
+		drafts.push({
+			id,
+			ttlMs: actionTtlMs({ kind: "detection-verdict" }),
+			grant: (expiresAt) => ({
+				kind: "detection-verdict",
+				id,
+				verdict: spec.verdict,
+				trackId: verdictTrackId,
+				ruleId: input.ruleId,
+				ruleName: input.ruleName,
+				userId: verdictOwner,
+				...spec.suggestedClass !== void 0 ? { suggestedClass: spec.suggestedClass } : {},
+				...input.maxActions === 0 ? { viaLink: true } : {},
+				deviceId: input.deviceId,
+				actionId: spec.actionId,
+				targetId: input.targetId,
+				expiresAt
+			})
+		});
+		return {
+			id: spec.actionId,
+			label: spec.suggestedClass === void 0 ? host.texts.text({ key: spec.verdict === "correct" ? "button.verdict.correct" : "button.verdict.wrong" }) : host.texts.text({
+				key: "button.verdict.wrongAs",
+				vars: { class: spec.suggestedClass }
+			}),
+			url: id,
+			mode: "background"
+		};
+	});
 	const sequenceButtons = host.actionRunner === null || stored === null ? [] : buildActionButtons({
 		actions: stored.actions,
 		knownSequenceIds: host.sequences.knownIds(),
@@ -99868,6 +100185,7 @@ async function mintButtons(host, input) {
 		}
 	});
 	const out = [
+		...verdictButtons,
 		...sequenceButtons,
 		...snoozeButtons,
 		...alarmButtons,
@@ -100091,8 +100409,53 @@ async function runGrantedAction(host, grant) {
 		case "sequence": return host.runGrantedSequence(grant);
 		case "addon-update": return host.applyGrantedAddonUpdate(grant);
 		case "server-update": return host.applyGrantedServerUpdate(grant);
+		case "detection-verdict": return host.applyGrantedDetectionVerdict(grant);
 	}
 }
+/** What a person is told when the retrain lifecycle refuses the mark. */
+var VERDICT_REFUSAL_COPY = {
+	trained: "This track was already used for training — nothing was changed",
+	budget: "This camera already holds as many tracks for retraining as it may — nothing was changed",
+	"unknown-track": "This track is no longer available — nothing was changed"
+};
+/**
+* Mark the track one notification reported for retraining, and record who was
+* asked and when.
+*
+* Order matters. The MARK goes first and is the authority: a refusal ("already
+* trained", "budget full") means the operator's answer changed nothing, so no
+* ledger row is written for an answer that was not applied. The token is
+* already spent (D47) — the refusal is shown as the reason, not a retry.
+*/
+async function applyGrantedDetectionVerdict(host, grant) {
+	const mark = host.deps.markTrackForRetrain;
+	if (mark === void 0) throw new Error("no retrain mark is wired on this node");
+	const outcome = await mark({
+		deviceId: grant.deviceId,
+		trackId: grant.trackId
+	});
+	if (!outcome.ok) {
+		host.logger.info("detection verdict changed nothing — the retrain flow refused the mark", {
+			tags: { deviceId: grant.deviceId },
+			meta: {
+				trackId: grant.trackId,
+				reason: outcome.reason,
+				verdict: grant.verdict
+			}
+		});
+		throw new NcActionRefusedError(VERDICT_REFUSAL_COPY[outcome.reason]);
+	}
+	await host.verdicts.record({
+		trackId: grant.trackId,
+		deviceId: grant.deviceId,
+		verdict: grant.verdict,
+		...grant.suggestedClass !== void 0 ? { suggestedClass: grant.suggestedClass } : {},
+		userId: grant.userId,
+		ruleId: grant.ruleId,
+		ruleName: grant.ruleName,
+		at: host.now()
+	});
+}
 /**
 * Apply the addon updates one notification was about.
 *
@@ -105269,6 +105632,7 @@ var NotificationCenter = class {
 	* evaluating one.
 	*/
 	pruneLedger;
+	verdicts;
 	/** D905: which rules cannot work, announced once per distinct reason. */
 	ruleHealth = new NcRuleHealthMonitor();
 	/** The prune itself — see `device-prune-runner.ts`. */
@@ -105497,6 +105861,11 @@ var NotificationCenter = class {
 			applyGrantedArmAnyway: (panel, grant) => self.applyGrantedArmAnyway(panel, grant),
 			applyGrantedBypassInput: (panel, grant) => self.applyGrantedBypassInput(panel, grant),
 			applyGrantedServerUpdate: (grant) => self.applyGrantedServerUpdate(grant),
+			applyGrantedDetectionVerdict: (grant) => self.applyGrantedDetectionVerdict(grant),
+			now: self.now,
+			get verdicts() {
+				return self.verdicts;
+			},
 			applyGrantedSnooze: (grant) => self.applyGrantedSnooze(grant),
 			get deps() {
 				return self.deps;
@@ -105547,6 +105916,9 @@ var NotificationCenter = class {
 	async applyGrantedAddonUpdate(grant) {
 		return applyGrantedAddonUpdate(this.grantedActionsHost(), grant);
 	}
+	async applyGrantedDetectionVerdict(grant) {
+		return applyGrantedDetectionVerdict(this.grantedActionsHost(), grant);
+	}
 	async applyGrantedServerUpdate(grant) {
 		return applyGrantedServerUpdate(this.grantedActionsHost(), grant);
 	}
@@ -105786,6 +106158,10 @@ var NotificationCenter = class {
 		}
 		this.summaryRules = NcSummaryStore.of(deps.records, this.logger.child("summary"), deps.now);
 		this.calendarEventsRules = NcCalendarEventsStore.of(deps.records, this.logger.child("calendar-events"), deps.now);
+		this.verdicts = new NcDetectionVerdictLedger({
+			...durableStore,
+			logger: this.logger.child("detection-verdicts")
+		});
 		this.pruneLedger = new NcPruneLedger({
 			...durableStore,
 			logger: this.logger.child("device-prune")
@@ -108393,6 +108769,23 @@ var BuildNotificationCenter = class extends BuildNotificationCenterBase {
 					};
 				}
 			},
+			markTrackForRetrain: async ({ deviceId, trackId }) => {
+				try {
+					await this.ctx.api.pipelineAnalytics.setTrackFlags.mutate({
+						deviceId,
+						trackId,
+						flags: { markForTrain: true }
+					});
+					return { ok: true };
+				} catch (err) {
+					const reason = retrainRefusalReason(err);
+					if (reason === null) throw err;
+					return {
+						ok: false,
+						reason
+					};
+				}
+			},
 			readDeviceStates: async (ids) => {
 				const out = /* @__PURE__ */ new Map();
 				for (const id of ids) try {
@@ -108464,9 +108857,11 @@ var BuildNotificationCenter = class extends BuildNotificationCenterBase {
 					const targets = await api.notificationOutput.listTargets.query({});
 					const kinds = await api.notificationOutput.listTargetKinds.query({}).catch(() => []);
 					const bodyMaxLenByKind = new Map(kinds.map((k) => [k.kind, k.caps.bodyMaxLen]));
+					const maxActionsByKind = new Map(kinds.map((k) => [k.kind, k.caps.actions]));
 					return targets.map((t) => {
 						const owner = t.config["ownerUserId"];
 						const bodyMaxLen = bodyMaxLenByKind.get(t.kind);
+						const maxActions = maxActionsByKind.get(t.kind);
 						return {
 							id: t.id,
 							addonId: t.addonId,
@@ -108474,7 +108869,8 @@ var BuildNotificationCenter = class extends BuildNotificationCenterBase {
 							kind: t.kind,
 							enabled: t.enabled,
 							...typeof owner === "string" && owner.length > 0 ? { ownerUserId: owner } : {},
-							...typeof bodyMaxLen === "number" ? { bodyMaxLen } : {}
+							...typeof bodyMaxLen === "number" ? { bodyMaxLen } : {},
+							...typeof maxActions === "number" ? { maxActions } : {}
 						};
 					});
 				},