@camstack/addon-post-analysis 1.2.653 → 1.2.655

package/dist/pipeline-analytics/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_clip_model_registry = require("../clip-model-registry-Bz1uQvQ8.js");
+const require_clip_model_registry = require("../clip-model-registry-C-en5vSD.js");
 let node_fs = require("node:fs");
 node_fs = require_clip_model_registry.__toESM(node_fs, 1);
 let node_path = require("node:path");
@@ -895,7 +895,9 @@ function describeGrant(grant) {
 			return grant.action === "disarm" ? "Alarm disarmed" : `Alarm armed${grant.mode !== void 0 ? ` (${grant.mode})` : ""}`;
 		case "addon-update": return `${grant.packages.length} addon update(s) on ${grant.nodeId}`;
 		case "server-update": return `Server update on ${grant.nodeId}`;
-		case "detection-verdict": return grant.verdict === "correct" ? "Marked correct — kept for retraining" : grant.suggestedClass === void 0 ? "Marked wrong — kept for retraining" : `Marked wrong, it was a ${grant.suggestedClass} — kept for retraining`;
+		case "detection-verdict":
+			if (grant.verdict === "wrong-label") return "Marked label wrong, class right — kept for retraining";
+			return grant.verdict === "correct" ? "Marked correct — kept for retraining" : grant.suggestedClass === void 0 ? "Marked wrong — kept for retraining" : `Marked wrong, it was a ${grant.suggestedClass} — kept for retraining`;
 	}
 }
 /** The audit line's `meta`, per family. A snooze that logged a `sequence` it
@@ -969,7 +971,7 @@ var FAILURE_COPY = {
 /** The question a link-only channel lands on, answered by a POST form. */
 function confirmPage(url, grant) {
 	const action = `${url.pathname}?exp=${encodeURIComponent(url.searchParams.get("exp") ?? "")}&sig=${encodeURIComponent(url.searchParams.get("sig") ?? "")}&confirm=1`;
-	return `<!doctype html><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Confirm</title><style>body{font:16px/1.5 system-ui,sans-serif;margin:0;min-height:100vh;display:grid;place-items:center;background:#111;color:#eee}main{max-width:24rem;padding:2rem;text-align:center}h1{font-size:1.25rem;margin:0 0 1rem}button{font:inherit;padding:.6rem 1.4rem;border-radius:.5rem;border:0;background:#3b82f6;color:#fff}</style><main><h1>Confirm</h1><p>${grant.verdict === "correct" ? "Mark this detection as correct?" : grant.suggestedClass === void 0 ? "Mark this detection as wrong?" : `Mark this detection as wrong, it was a ${grant.suggestedClass}?`}</p><form method="post" action="${action}"><button type="submit">Confirm</button></form></main>`;
+	return `<!doctype html><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Confirm</title><style>body{font:16px/1.5 system-ui,sans-serif;margin:0;min-height:100vh;display:grid;place-items:center;background:#111;color:#eee}main{max-width:24rem;padding:2rem;text-align:center}h1{font-size:1.25rem;margin:0 0 1rem}button{font:inherit;padding:.6rem 1.4rem;border-radius:.5rem;border:0;background:#3b82f6;color:#fff}</style><main><h1>Confirm</h1><p>${grant.verdict === "wrong-label" ? "Mark the label of this detection as wrong (the class is right)?" : grant.verdict === "correct" ? "Mark this detection as correct?" : grant.suggestedClass === void 0 ? "Mark this detection as wrong?" : `Mark this detection as wrong, it was a ${grant.suggestedClass}?`}</p><form method="post" action="${action}"><button type="submit">Confirm</button></form></main>`;
 }
 function page(title, detail) {
 	return `<!doctype html><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>${title}</title><style>body{font:16px/1.5 system-ui,sans-serif;margin:0;min-height:100vh;display:grid;place-items:center;background:#111;color:#eee}main{max-width:24rem;padding:2rem;text-align:center}h1{font-size:1.25rem;margin:0 0 .5rem}p{margin:0;color:#aaa}</style><main><h1>${title}</h1><p>${detail}</p></main>`;
@@ -2953,7 +2955,6 @@ var NIGHT = "night";
 var IR = "ir";
 var DAWN = "dawn";
 var DUSK = "dusk";
-var DEG = Math.PI / 180;
 /**
 * Mean channel spread below which a frame is judged infrared.
 *
@@ -2975,38 +2976,6 @@ var IR_CHROMA_THRESHOLD = 6;
 * scene reports `unknown` — the honest answer.
 */
 var TWILIGHT_BAND_MS = 2400 * 1e3;
-/** Julian day number for a JS Date (UTC). */
-function toJulian(date) {
-	return date.getTime() / 864e5 + 2440587.5;
-}
-/** Julian day → epoch ms (UTC). */
-function fromJulian(j) {
-	return (j - 2440587.5) * 864e5;
-}
-/**
-* Sunrise/sunset (UTC epoch ms) for a location and date via the standard NOAA
-* sunrise equation. Returns `null` for the polar edge cases (sun never
-* rises/sets that day) so the caller can degrade to the clock split.
-*/
-function sunTimes(lat, lng, date) {
-	const jDate = toJulian(date);
-	const jStar = Math.round(jDate - 2451545 + 8e-4) - lng / 360;
-	const m = (357.5291 + .98560028 * jStar) % 360;
-	const mRad = m * DEG;
-	const lambda = (m + (1.9148 * Math.sin(mRad) + .02 * Math.sin(2 * mRad) + 3e-4 * Math.sin(3 * mRad)) + 180 + 102.9372) % 360 * DEG;
-	const jTransit = 2451545 + jStar + .0053 * Math.sin(mRad) - .0069 * Math.sin(2 * lambda);
-	const declination = Math.asin(Math.sin(lambda) * Math.sin(23.44 * DEG));
-	const latRad = lat * DEG;
-	const cosOmega = (Math.sin(-.833 * DEG) - Math.sin(latRad) * Math.sin(declination)) / (Math.cos(latRad) * Math.cos(declination));
-	if (cosOmega > 1 || cosOmega < -1) return null;
-	const omega = Math.acos(cosOmega) / DEG;
-	const jRise = jTransit - omega / 360;
-	const jSet = jTransit + omega / 360;
-	return {
-		rise: fromJulian(jRise),
-		set: fromJulian(jSet)
-	};
-}
 /** Coarse UTC clock split — day between 06:00 and 20:00 UTC. Deterministic
 *  last resort when no coordinates let us compute real sun-times. */
 function clockCondition(now) {
@@ -3047,7 +3016,7 @@ function resolveConditionDetailed(input) {
 		source: "ir-chroma"
 	};
 	if (input.coordinates) {
-		const times = sunTimes(input.coordinates.lat, input.coordinates.lng, input.now);
+		const times = require_clip_model_registry.sunTimes(input.coordinates.lat, input.coordinates.lng, input.now);
 		if (times) {
 			const t = input.now.getTime();
 			if (Math.abs(t - times.rise) <= TWILIGHT_BAND_MS) return {
@@ -9289,6 +9258,7 @@ var en_default = {
 	"button.verdict.correct": "Correct",
 	"button.verdict.wrong": "Wrong",
 	"button.verdict.wrongAs": "Wrong: it is {{class}}",
+	"button.verdict.wrongLabel": "Wrong label, class OK",
 	"action.server-update.title": "Server update",
 	"action.server-update.started": "Updating server on {{nodeId}}…",
 	"action.server-update.restarting": "Server update staged on {{nodeId}} — the node is restarting. You will hear when it comes back.",
@@ -9694,6 +9664,7 @@ var it_default = {
 	"button.verdict.correct": "Corretto",
 	"button.verdict.wrong": "Sbagliato",
 	"button.verdict.wrongAs": "Sbagliato: è {{class}}",
+	"button.verdict.wrongLabel": "Etichetta sbagliata, classe giusta",
 	"action.server-update.title": "Aggiornamento server",
 	"action.server-update.started": "Aggiornamento server su {{nodeId}}…",
 	"action.server-update.restarting": "Aggiornamento server predisposto su {{nodeId}} — il nodo si riavvia. Ti avviseremo quando torna.",
@@ -39079,6 +39050,11 @@ function rowIsDurableRetrainCopy(data) {
 *  audit resolves ownership from INDEX rows, but a future filesystem-side tool
 *  must be able to tell the two corpora apart by path alone. */
 var RETRAIN_PATH_PREFIX = "retrain";
+/** The stored verdict subject, validated; anything unreadable reads as absent. */
+function narrowVerdictSubject(value) {
+	const parsed = require_clip_model_registry.RetrainVerdictSubjectSchema.safeParse(value);
+	return parsed.success ? { verdictSubject: parsed.data } : {};
+}
 /** Ids per `IN (…)` page in {@link RetrainFrameStore.getMany}. */
 var GET_MANY_PAGE = 500;
 /**
@@ -39162,7 +39138,8 @@ var RetrainFrameStore = class {
 			complete: data["complete"] === true || data["complete"] === 1,
 			...finiteNumber(data["epochMs"]) !== void 0 ? { epochMs: finiteNumber(data["epochMs"]) } : {},
 			revision: finiteNumber(data["revision"]) ?? 0,
-			dismissed: narrowDismissed(data["dismissed"])
+			dismissed: narrowDismissed(data["dismissed"]),
+			...narrowVerdictSubject(data["verdictSubject"])
 		};
 	}
 	/** The copies with these ids, in the order given; unknown ids are skipped. */
@@ -39515,7 +39492,8 @@ var RetrainFrameStore = class {
 			capturedAt: input.epochMs,
 			...chromaSpread !== void 0 ? { chromaSpread } : {},
 			complete: false,
-			epochMs: input.epochMs
+			epochMs: input.epochMs,
+			...input.verdictSubject !== void 0 ? { verdictSubject: input.verdictSubject } : {}
 		};
 		const path = framePath(frame);
 		const persist = async () => {
@@ -39539,7 +39517,8 @@ var RetrainFrameStore = class {
 				chromaSpread: frame.chromaSpread ?? null,
 				complete: false,
 				origin: "recording",
-				epochMs: input.epochMs
+				epochMs: input.epochMs,
+				...input.verdictSubject !== void 0 ? { verdictSubject: input.verdictSubject } : {}
 			});
 			await this.ledger.transact([row, ...withRow]);
 		};
@@ -39576,6 +39555,22 @@ var RetrainFrameStore = class {
 		};
 	}
 	/**
+	* Record the verdict subject on a still that already existed (the moment was
+	* in the dataset before the operator tapped). The latest answer wins, like
+	* the verdict ledger.
+	*
+	* @returns the updated frame, or `null` when no such copy exists.
+	*/
+	async setVerdictSubject(frameId, verdictSubject) {
+		const existing = await this.get(frameId);
+		if (existing === null) return null;
+		await this.ledger.update(frameId, { verdictSubject });
+		return {
+			...existing,
+			verdictSubject
+		};
+	}
+	/**
 	* The operator's "every subject in this frame is boxed" (D785 context: an
 	* unboxed subject is a false positive to a detector evaluation). Only the
 	* operator sets it; nothing derives it from the annotation count, because a
@@ -54723,6 +54718,12 @@ var FrameState = class {
 	*  per 5 minutes, not one per governor round (the wedge re-sights all
 	*  night; ~300 identical lines would bury the log it exists to serve). */
 	packageOversizeLogAt = /* @__PURE__ */ new Map();
+	/**
+	* The newest frame the package path held per camera — the picture a parcel
+	* promoted from a raw look is stored from (`package-still-capture.ts`). The
+	* scene path concludes without a frame of its own, so it reads this.
+	*/
+	packageLookFrames = /* @__PURE__ */ new Map();
 	/** Reasons logged on the previous package look — episode helper for drops. */
 	packageLookDropReasons = /* @__PURE__ */ new Map();
 };
@@ -59027,6 +59028,89 @@ function sweepOne(deps, deviceId) {
 	if (outcome.departed.length > 0 || outcome.departedWithoutActivity.length > 0 || outcome.expired.length > 0) deps.onOutcome(deviceId, outcome, deps.now);
 }
 //#endregion
+//#region src/pipeline-analytics/pipeline/package/package-still-capture.ts
+/** A held look frame older than this is not the parcel's picture any more. */
+var PACKAGE_LOOK_FRAME_MAX_AGE_MS = 15e3;
+async function jpegOf(reply) {
+	if (reply.tier === "ram-fullframe") return "preview-only";
+	if (reply.jpegBytes !== void 0 && reply.jpegBytes.byteLength > 0) return reply.jpegBytes;
+	if (reply.bytes !== void 0 && reply.bytes.length === reply.width * reply.height * 3) return encodeRgbCropToJpeg(reply.bytes, reply.width, reply.height);
+	return "empty-frame";
+}
+/**
+* The entry carrying its still's `keyFrameMediaId`, or the entry unchanged when
+* it already had one or none could be stored (said, with the reason).
+*/
+async function withParcelStill(input) {
+	const { entry, logger } = input;
+	if (entry.keyFrameMediaId !== void 0) return entry;
+	const miss = (reason, detail) => {
+		logger.warn("package still NOT stored — the delivery ships without a picture of the parcel", {
+			tags: { deviceId: entry.deviceId },
+			meta: {
+				entryId: entry.id,
+				reason,
+				...detail !== void 0 ? { error: detail } : {}
+			}
+		});
+		return entry;
+	};
+	if (input.handle === null) return miss("no-frame-handle");
+	if (input.writer === null) return miss("no-media-store");
+	try {
+		const reply = await input.query({
+			handle: input.handle,
+			bbox: {
+				x: 0,
+				y: 0,
+				w: entry.frameWidth,
+				h: entry.frameHeight
+			},
+			acceptJpegBytes: true,
+			encodeJpeg: true,
+			pin: require_clip_model_registry.nodePin(input.handle.nodeId)
+		});
+		if (reply === null) return miss("native-miss");
+		const jpeg = await jpegOf(reply);
+		if (typeof jpeg === "string") return miss(jpeg);
+		const keyFrameMediaId = await input.writer.putReplacing({
+			deviceId: entry.deviceId,
+			ownerKind: "track",
+			ownerId: entry.id,
+			kind: "keyFrame",
+			timestamp: input.timestamp,
+			data: Buffer.from(jpeg),
+			subjectBox: {
+				x: entry.bbox.x,
+				y: entry.bbox.y,
+				w: entry.bbox.w,
+				h: entry.bbox.h,
+				frameWidth: entry.frameWidth,
+				frameHeight: entry.frameHeight
+			}
+		});
+		return {
+			...entry,
+			keyFrameMediaId
+		};
+	} catch (err) {
+		return miss("write-failed", require_clip_model_registry.errMsg(err));
+	}
+}
+/**
+* One promotion, in the order that matters: the still is stored FIRST, then the
+* detector emits `delivered` — the notification centre reads the still when the
+* event arrives, so a picture written after it is a picture nobody sees.
+*/
+async function promoteWithStill(input) {
+	const entry = await withParcelStill(input);
+	await input.detector.onStationaryChange({
+		phase: "appeared",
+		entry,
+		timestamp: input.entry.becameStationaryAt
+	});
+}
+//#endregion
 //#region src/pipeline-analytics/pipeline/person-over-vehicle.ts
 /**
 * How much of the PERSON box must sit inside a vehicle box to be counted.
@@ -68426,6 +68510,7 @@ function wireSubscriptions(deps) {
 			deps.onClusterTopology(nodes);
 		}));
 		for (const category of NC_SYSTEM_EVENT_CATEGORIES) unsubs.push(deps.eventBus.subscribe({ category }, (ev) => deps.onSystemEvent(ev)));
+		for (const category of require_clip_model_registry.ACTION_TARGET_INVALIDATION_EVENTS) unsubs.push(deps.eventBus.subscribe({ category }, () => deps.onDeviceRegistryChange()));
 	}
 	unsubs.push(deps.eventBus.subscribe({ category: require_clip_model_registry.EventCategory.DeviceBindingsChanged }, (ev) => {
 		deps.onBindingsChanged(ev.data);
@@ -68987,6 +69072,12 @@ async function composeEventKindsForDevices(deviceIds, composeOne, onError) {
 *    nearest one is normally the same detection; the delta is reported so a
 *    reviewer can see how far it was.
 *
+* 0. **The subject a notification verdict froze** (a recording still landed by
+*    a verdict whose track was already gone). It is the one subject the
+*    operator answered about, so it comes FIRST and is the own box; the
+*    neighbours below stay secondary. Its box is normalised against the full
+*    frame already, so it is used as is — never re-scaled.
+*
 * Every OTHER track alive on the camera at that instant contributes its own
 * nearest position the same way — a frame with three people is three boxes,
 * and a recording still (no track of its own) gets everything the pipeline
@@ -69041,6 +69132,18 @@ function toRetrainClassTiers(className, label) {
 		label: kept
 	} : { macroClass };
 }
+/** A verdict on the wire: the operator's class split into tiers once, here. */
+function toRetrainVerdict(input) {
+	const tiers = input.suggestedClass !== void 0 ? toRetrainClassTiers(input.suggestedClass, void 0) : null;
+	return {
+		verdict: input.verdict,
+		trackId: input.trackId,
+		...input.suggestedClass !== void 0 ? { suggestedClass: input.suggestedClass } : {},
+		...tiers !== null ? { suggestedMacroClass: tiers.macroClass } : {},
+		...tiers?.label !== void 0 ? { suggestedLabel: tiers.label } : {},
+		...input.at !== void 0 ? { at: input.at } : {}
+	};
+}
 /** A pixel box as a clamped normalised one, or `null` when nothing is left. */
 function normalise(box, frameWidth, frameHeight) {
 	if (frameWidth === void 0 || frameHeight === void 0) return null;
@@ -69098,6 +69201,22 @@ function boxFor(track, bbox, basis, deltaMs, score) {
 		deltaMs
 	};
 }
+/** The box a notification verdict froze, or `null` when the event carried none. */
+function boxOfVerdict(subject) {
+	const box = subject.bbox;
+	if (box === void 0) return null;
+	const clamped = normalise(box, 1, 1);
+	if (clamped === null) return null;
+	const tiers = toRetrainClassTiers(subject.className, subject.label);
+	return {
+		bbox: clamped,
+		macroClass: tiers.macroClass,
+		...tiers.label !== void 0 ? { label: tiers.label } : {},
+		trackId: subject.trackId,
+		basis: "verdict",
+		deltaMs: 0
+	};
+}
 /** The own track's box: the recorded subject box first, the nearest position second. */
 function ownBox(input, tolerance) {
 	const track = input.ownTrack;
@@ -69120,10 +69239,13 @@ function pipelineBoxesForFrame(input) {
 	const out = [];
 	const own = ownBox(input, tolerance);
 	if (own !== null) out.push(own);
+	const verdictBox = input.verdictSubject !== void 0 ? boxOfVerdict(input.verdictSubject) : null;
+	if (verdictBox !== null) out.push(verdictBox);
 	const at = input.frame.capturedAt;
 	if (at === void 0) return out;
 	const ownId = input.frame.trackId;
 	const seen = new Set(ownId !== void 0 ? [ownId] : []);
+	if (input.verdictSubject !== void 0) seen.add(input.verdictSubject.trackId);
 	for (const track of input.neighbours) {
 		if (seen.has(track.trackId) || track.deviceId !== input.frame.deviceId) continue;
 		seen.add(track.trackId);
@@ -70516,7 +70638,12 @@ Object.freeze({
 		"listSupportedEntityKinds"
 	],
 	"device-extension": ["listSlots", "listSources"],
-	"device-provider": ["discoverDevices", "getDevices"],
+	"device-provider": [
+		"classifyDiscoveryHits",
+		"discoverDevices",
+		"getDevices",
+		"getDiscoveryModes"
+	],
 	"device-removal-hook": ["listDeviceData"],
 	"failure-contribution": ["list"],
 	"llm": [
@@ -82368,10 +82495,18 @@ function parseActions(raw) {
 	for (const entry of raw) {
 		const parsed = require_clip_model_registry.NcRuleActionSchema.safeParse(entry);
 		if (!parsed.success) return null;
-		out.push(parsed.data);
+		out.push(require_clip_model_registry.normalizeNcAction(parsed.data));
 	}
 	return out;
 }
+/** Does a stored row still carry a pre-D983 cap step (`deviceId`, no `target`)? */
+function hasLegacyTarget(raw) {
+	if (!Array.isArray(raw)) return false;
+	return raw.some((entry) => {
+		const parsed = require_clip_model_registry.NcRuleActionSchema.safeParse(entry);
+		return parsed.success && parsed.data.kind === "cap" && parsed.data.target === void 0;
+	});
+}
 function rowToSequence(id, body) {
 	const actions = parseActions(body.actions);
 	if (actions === null) return null;
@@ -82410,6 +82545,7 @@ var NcSequenceStore = class NcSequenceStore {
 		try {
 			const { records } = await this.kind.query({ limit: 1e4 });
 			const next = /* @__PURE__ */ new Map();
+			const legacyRows = [];
 			let skipped = 0;
 			for (const row of records) {
 				const sequence = rowToSequence(row.id, row.data);
@@ -82418,9 +82554,11 @@ var NcSequenceStore = class NcSequenceStore {
 					continue;
 				}
 				next.set(sequence.id, sequence);
+				if (hasLegacyTarget(row.data.actions)) legacyRows.push(row.id);
 			}
 			this.byId.clear();
 			for (const [id, seq] of next) this.byId.set(id, seq);
+			await this.rewriteLegacyRows(legacyRows, records);
 			if (skipped > 0) this.logger.warn("sequence rows skipped as malformed — bindings to them will miss", { meta: { skipped } });
 		} catch (err) {
 			this.logger.warn("sequence load failed — keeping the sequences already in memory", { meta: {
@@ -82429,6 +82567,28 @@ var NcSequenceStore = class NcSequenceStore {
 			} });
 		}
 	}
+	/**
+	* One-shot, idempotent (D983): a row whose steps still carry `deviceId` is
+	* stored again in the target shape. A failed write leaves the row as it was —
+	* it is still READ as the new shape — and is on the record.
+	*/
+	async rewriteLegacyRows(ids, records) {
+		for (const id of ids) {
+			const sequence = this.byId.get(id) ?? null;
+			const row = records.find((r) => r.id === id);
+			if (sequence === null || row === void 0) continue;
+			try {
+				const createdAt = row.data.createdAt;
+				await this.persist(sequence, typeof createdAt === "number" && Number.isFinite(createdAt) ? createdAt : this.now(), this.now());
+				this.logger.info("notification sequence rewritten to the target shape", { meta: { sequenceId: id } });
+			} catch (err) {
+				this.logger.warn("notification sequence could not be rewritten — it is still read as the target shape", { meta: {
+					sequenceId: id,
+					error: String(err)
+				} });
+			}
+		}
+	}
 	list() {
 		return [...this.byId.values()].toSorted((a, b) => a.name.localeCompare(b.name));
 	}
@@ -82448,7 +82608,7 @@ var NcSequenceStore = class NcSequenceStore {
 			id: (0, node_crypto.randomUUID)(),
 			name: input.name,
 			...input.minDelaySec !== void 0 ? { minDelaySec: input.minDelaySec } : {},
-			actions: [...input.actions]
+			actions: input.actions.map(require_clip_model_registry.normalizeNcAction)
 		};
 		await this.persist(sequence, now, now);
 		this.byId.set(sequence.id, sequence);
@@ -82464,7 +82624,7 @@ var NcSequenceStore = class NcSequenceStore {
 			id: sequence.id,
 			name: sequence.name,
 			...sequence.minDelaySec !== void 0 ? { minDelaySec: sequence.minDelaySec } : {},
-			actions: [...sequence.actions]
+			actions: sequence.actions.map(require_clip_model_registry.normalizeNcAction)
 		};
 		await this.persist(stored, now, now);
 		this.byId.set(stored.id, stored);
@@ -82477,7 +82637,7 @@ var NcSequenceStore = class NcSequenceStore {
 			id: sequenceId,
 			name: input.name,
 			...input.minDelaySec !== void 0 ? { minDelaySec: input.minDelaySec } : {},
-			actions: [...input.actions]
+			actions: input.actions.map(require_clip_model_registry.normalizeNcAction)
 		};
 		const createdAt = await this.readCreatedAt(sequenceId, now);
 		await this.persist(sequence, createdAt, now);
@@ -82545,7 +82705,11 @@ var NC_DETECTION_VERDICTS_COLUMNS = [
 var NcDetectionVerdictRecordSchema = require_clip_model_registry.object({
 	trackId: require_clip_model_registry.string().min(1),
 	deviceId: require_clip_model_registry.number().int(),
-	verdict: require_clip_model_registry._enum(["correct", "wrong"]),
+	verdict: require_clip_model_registry._enum([
+		"correct",
+		"wrong",
+		"wrong-label"
+	]),
 	/** The class the operator said it really was. Only with `wrong`. */
 	suggestedClass: require_clip_model_registry.string().min(1).optional(),
 	/** Whose notification it was (the token's frozen owner), NOT who tapped. */
@@ -82580,6 +82744,16 @@ var NcDetectionVerdictLedger = class {
 			logger: deps.logger
 		});
 	}
+	/** The answers recorded for these tracks (a track nobody answered is absent).
+	*  Reads the in-memory mirror: no I/O, so a listing never waits on it. */
+	forTracks(trackIds) {
+		const out = /* @__PURE__ */ new Map();
+		for (const id of trackIds) {
+			const row = this.ledger.get(id);
+			if (row !== void 0) out.set(id, row);
+		}
+		return out;
+	}
 	/** Write-through; throws on a failed write so the tap reports it. */
 	async record(row) {
 		await this.ledger.put(NcDetectionVerdictRecordSchema.parse(row));
@@ -82713,10 +82887,33 @@ function pruneHookBindings(bindings, field, isDead, notes) {
 			kept.push(binding);
 			continue;
 		}
-		if (binding.action.kind === "cap" && isDead(binding.action.deviceId)) {
-			changed = true;
-			notes.removed(field, deviceSubjects([binding.action.deviceId]), "binding-removed");
-			continue;
+		if (binding.action.kind === "cap") {
+			const { target } = require_clip_model_registry.normalizeNcCapTarget(binding.action);
+			if (target.kind === "devices") {
+				const dead = target.ids.filter(isDead);
+				if (dead.length === target.ids.length) {
+					changed = true;
+					notes.removed(field, deviceSubjects(dead), "binding-removed");
+					continue;
+				}
+				if (dead.length > 0) {
+					changed = true;
+					notes.removed(field, deviceSubjects(dead), "binding-removed");
+					const alive = target.ids.filter((id) => !isDead(id));
+					kept.push({
+						...binding,
+						action: require_clip_model_registry.normalizeNcAction({
+							...binding.action,
+							deviceId: void 0,
+							target: {
+								kind: "devices",
+								ids: alive
+							}
+						})
+					});
+					continue;
+				}
+			}
 		}
 		kept.push(binding);
 	}
@@ -82872,7 +83069,11 @@ function referencedDeviceIds(snapshot) {
 		add(c.systemEvent?.deviceIds);
 		if (c.deviceState !== void 0) ids.add(c.deviceState.deviceId);
 		if (c.scene?.deviceId !== void 0) ids.add(c.scene.deviceId);
-		for (const binding of [...rule.actions?.onTrigger ?? [], ...rule.actions?.onTriggerOff ?? []]) if (binding.kind === "do" && binding.action.kind === "cap") ids.add(binding.action.deviceId);
+		for (const binding of [...rule.actions?.onTrigger ?? [], ...rule.actions?.onTriggerOff ?? []]) {
+			if (binding.kind !== "do" || binding.action.kind !== "cap") continue;
+			const { target } = require_clip_model_registry.normalizeNcCapTarget(binding.action);
+			if (target.kind === "devices") add(target.ids);
+		}
 	}
 	for (const rule of snapshot.timelapse) add(rule.deviceIds);
 	for (const rule of snapshot.summary) add(rule.deviceIds);
@@ -83543,6 +83744,8 @@ var NcDeviceStateCache = class {
 //#region src/notification-center/detection-verdict-buttons.ts
 var VERDICT_CORRECT_ID = "detection-verdict-correct";
 var VERDICT_WRONG_ID = "detection-verdict-wrong";
+/** Wrong LABEL, right class — only for a subject that has a label. */
+var VERDICT_WRONG_LABEL_ID = "detection-verdict-wrong-label";
 /** `detection-verdict-wrong:<class>` — Wrong, and what it really was. */
 var VERDICT_WRONG_AS_PREFIX = "detection-verdict-wrong:";
 /** The macro classes offered as "it was really…". Short on purpose. */
@@ -83559,6 +83762,15 @@ function verdictButtonRefusal(subject) {
 	if (subject.ownerUserId === void 0) return "unowned-target";
 	return null;
 }
+/**
+* Does the notified subject carry a label below its macro class — a sub-class
+* (`dog` under `animal`), a recognised name, a plate? The same tier split the
+* retrain annotations use, so "has a label" means one thing in both places.
+*/
+function subjectHasLabel(className, label) {
+	if (className === void 0) return false;
+	return toRetrainClassTiers(className, label).label !== void 0;
+}
 /** The classes worth offering for a subject of `className`. */
 function verdictClassChoices(className) {
 	return VERDICT_CLASS_CHOICES.filter((c) => c !== className).slice(0, VERDICT_MAX_CLASS_CHOICES);
@@ -83570,13 +83782,17 @@ function verdictClassChoices(className) {
 * when the channel declared room for a fourth button.
 */
 function verdictButtonSpecs(input) {
-	const base = [{
+	const plain = [{
 		actionId: VERDICT_CORRECT_ID,
 		verdict: "correct"
 	}, {
 		actionId: VERDICT_WRONG_ID,
 		verdict: "wrong"
 	}];
+	const base = subjectHasLabel(input.className, input.label) ? [...plain, {
+		actionId: VERDICT_WRONG_LABEL_ID,
+		verdict: "wrong-label"
+	}] : plain;
 	if (input.maxActions === void 0 || input.maxActions <= 3) return base;
 	const room = input.maxActions - base.length;
 	const extra = verdictClassChoices(input.className).slice(0, room).map((suggestedClass) => ({
@@ -87307,6 +87523,8 @@ var NcDispatcher = class {
 				...target.ownerUserId !== void 0 ? { ownerUserId: target.ownerUserId } : {},
 				...entry.payload.subject.className !== void 0 ? { className: entry.payload.subject.className } : {},
 				...entry.payload.subject.trackId !== void 0 ? { trackId: entry.payload.subject.trackId } : {},
+				...entry.payload.subject.label !== void 0 ? { label: entry.payload.subject.label } : {},
+				...entry.payload.subject.bbox !== void 0 ? { bbox: entry.payload.subject.bbox } : {},
 				eventAtMs: entry.payload.subject.timestamp,
 				...target.maxActions !== void 0 ? { maxActions: target.maxActions } : {},
 				...entry.payload.subject.systemEvent !== void 0 ? { systemEvent: entry.payload.subject.systemEvent } : {}
@@ -91670,7 +91888,7 @@ var NcRuleActionRunner = class {
 		if (sequence.throttle) this.lastRunAt.set(sequence.id, now);
 		let stepsRun = 0;
 		for (const [index, action] of sequence.actions.entries()) try {
-			await this.step(action, input.origin);
+			await this.step(action, input.origin, sequence.id);
 			stepsRun += 1;
 		} catch (err) {
 			this.deps.logger.warn("rule action failed — stopping the sequence", {
@@ -91710,20 +91928,28 @@ var NcRuleActionRunner = class {
 			stepsRun
 		};
 	}
-	async step(action, origin) {
+	async step(action, origin, owner) {
 		if (action.kind === "wait") {
 			await this.sleep(action.seconds * 1e3);
 			return;
 		}
 		if (!this.deps.isDeviceScoped(action.cap)) throw new Error(`rule action refused: "${action.cap}" is not a device capability — only devices can be actuated`);
-		await this.deps.actuate({
-			deviceId: action.deviceId,
+		const { target, actionId } = require_clip_model_registry.normalizeNcCapTarget(action);
+		const deviceIds = await this.devicesOf(target, actionId, owner);
+		for (const deviceId of deviceIds) await this.deps.actuate({
+			deviceId,
 			cap: action.cap,
 			method: action.method,
 			args: action.args ?? {},
 			...origin !== void 0 ? { origin } : {}
 		});
 	}
+	async devicesOf(target, actionId, owner) {
+		if (target.kind === "devices") return target.ids;
+		if (target.kind === "var") throw new Error("rule action refused: a sequence has no variables to resolve a target from");
+		if (this.deps.resolveTarget === void 0) throw new Error("rule action refused: this node cannot resolve a domain target");
+		return (await this.deps.resolveTarget(target, actionId, owner)).deviceIds;
+	}
 };
 /** Force-enable a shared sequence for a button tap (always runs, still throttled). */
 function asForcedSequence(sequence) {
@@ -97314,6 +97540,15 @@ var NcSystemStateLedger = class {
 	closeLegacyStreamKeys() {
 		this.closeWhere("legacy-stream-keys", (row) => row.key.startsWith("stream:") && !DEVICE_STREAM_KEY.test(row.key), "legacy-stream-key");
 	}
+	/**
+	* Is this device switched off RIGHT NOW (an open `device-disabled` row)?
+	* D62: the switch outranks the device's liveness and its streams — a device
+	* somebody turned off is reported off, never as offline. `false` while the
+	* store has never answered (unknown is never "disabled").
+	*/
+	isDeviceDisabled(deviceId) {
+		return (this.openRows() ?? []).some((row) => row.kind === "device-disabled" && row.deviceId === deviceId);
+	}
 	/** The open rows, or `null` while the store has never answered. */
 	openRows() {
 		return this.deps.rows.answered() ? this.deps.rows.all() : null;
@@ -97820,6 +98055,7 @@ function readRaw(section, ports, nowMs) {
 		reason: UNREAD_STATE
 	};
 	const items = [];
+	const switchedOff = new Set(state.flatMap((row) => row.kind === "device-disabled" && row.deviceId !== void 0 ? [row.deviceId] : []));
 	if (section === "device-state" || section === "nodes") {
 		const liveness = ports.liveness();
 		if (liveness === null) return {
@@ -97829,10 +98065,14 @@ function readRaw(section, ports, nowMs) {
 		for (const row of liveness) {
 			if (row.state !== "offline" || nowMs - row.updatedAt < ports.livenessHoldoffMs) continue;
 			const item = livenessItem(row, ports.lookup);
-			if (item !== null && item.section === section) items.push(item);
+			if (item === null || item.section !== section) continue;
+			const id = item.subject.deviceId;
+			if (id !== void 0 && switchedOff.has(id)) continue;
+			items.push(item);
 		}
 	}
 	for (const row of state) {
+		if (row.kind === "stream-offline" && row.deviceId !== void 0 && switchedOff.has(row.deviceId)) continue;
 		const item = stateItem(row, ports.lookup, ports.nodes);
 		if (item.section === section) items.push(item);
 	}
@@ -100097,6 +100337,12 @@ function rowRefusalId(systemEvent) {
 	const value = systemEvent?.data["refusalId"];
 	return typeof value === "string" && value.length > 0 ? value : void 0;
 }
+/** The text-catalog key of each verdict button. */
+var VERDICT_LABEL_KEY = {
+	correct: "button.verdict.correct",
+	wrong: "button.verdict.wrong",
+	"wrong-label": "button.verdict.wrongLabel"
+};
 /**
 * The tap-through buttons for ONE delivery, each with its own single-use
 * token.
@@ -100133,6 +100379,7 @@ async function mintButtons(host, input) {
 	const verdictOwner = input.ownerUserId;
 	const verdictButtons = verdictRefusal !== null || verdictTrackId === void 0 || verdictOwner === void 0 ? [] : verdictButtonSpecs({
 		className: input.className,
+		label: input.label,
 		maxActions: input.maxActions
 	}).map((spec) => {
 		const id = (0, node_crypto.randomUUID)();
@@ -100150,6 +100397,11 @@ async function mintButtons(host, input) {
 				...spec.suggestedClass !== void 0 ? { suggestedClass: spec.suggestedClass } : {},
 				...input.maxActions === 0 ? { viaLink: true } : {},
 				...input.eventAtMs !== void 0 ? { eventAtMs: input.eventAtMs } : {},
+				...input.className !== void 0 ? { subject: {
+					className: input.className,
+					...input.label !== void 0 ? { label: input.label } : {},
+					...input.bbox !== void 0 ? { bbox: input.bbox } : {}
+				} } : {},
 				deviceId: input.deviceId,
 				actionId: spec.actionId,
 				targetId: input.targetId,
@@ -100158,7 +100410,7 @@ async function mintButtons(host, input) {
 		});
 		return {
 			id: spec.actionId,
-			label: spec.suggestedClass === void 0 ? host.texts.text({ key: spec.verdict === "correct" ? "button.verdict.correct" : "button.verdict.wrong" }) : host.texts.text({
+			label: spec.suggestedClass === void 0 ? host.texts.text({ key: VERDICT_LABEL_KEY[spec.verdict] }) : host.texts.text({
 				key: "button.verdict.wrongAs",
 				vars: { class: spec.suggestedClass }
 			}),
@@ -100617,6 +100869,18 @@ var VERDICT_FRAME_REFUSAL_COPY = {
 	"still-busy": "The track is gone and the recorder is busy — nothing was changed, try again later",
 	failed: "The track is gone and its frame could not be saved — nothing was changed"
 };
+/** The grant's frozen subject, in the shape the retrain still stores it in. */
+function verdictSubjectOf(grant, subject, at) {
+	return {
+		trackId: grant.trackId,
+		className: subject.className,
+		...subject.label !== void 0 ? { label: subject.label } : {},
+		...subject.bbox !== void 0 ? { bbox: subject.bbox } : {},
+		verdict: grant.verdict,
+		...grant.suggestedClass !== void 0 ? { suggestedClass: grant.suggestedClass } : {},
+		at
+	};
+}
 /**
 * The track is gone (aged out, or discarded as a still object): the camera's
 * RECORDING still covers the instant, so the verdict lands a frame there
@@ -100639,7 +100903,8 @@ async function landFrameFromRecording(host, grant) {
 	}
 	const landed = await addFrame({
 		deviceId: grant.deviceId,
-		epochMs: grant.eventAtMs
+		epochMs: grant.eventAtMs,
+		...grant.subject !== void 0 ? { subject: verdictSubjectOf(grant, grant.subject, host.now()) } : {}
 	});
 	if (!landed.ok) {
 		host.logger.warn("detection verdict dropped — the track is gone and the recording refused", {
@@ -101600,6 +101865,7 @@ function buildEntries(host, rule, subject, kind, matchedOn, userTargets = [], or
 				...alarmSource?.eventId !== void 0 ? { eventId: alarmSource.eventId } : hasEventMedia ? { eventId: subject.recordId } : {},
 				className: subject.classNames[0] ?? subject.sensorKind ?? "event",
 				...subject.label !== void 0 ? { label: subject.label } : {},
+				...subject.bbox !== void 0 ? { bbox: subject.bbox } : {},
 				...subject.labelKind !== void 0 ? { labelKind: subject.labelKind } : {},
 				...subject.confidence !== void 0 ? { confidence: subject.confidence } : {},
 				zones: renderedZones,
@@ -101997,16 +102263,37 @@ function onSystemEvent(host, event) {
 			return;
 		}
 		if (isDeviceLivenessKind(observation.kind)) {
+			if (dropSwitchedOff(host, system)) return;
 			holdoff.arm(observation.subject, incoming);
 			return;
 		}
 	} else if (system !== void 0 && (system.kind.startsWith("device-") || system.kind.startsWith("stream-"))) {
 		if (host.lastSystemLiveness.get(system.subject) === system.kind) return;
 		host.lastSystemLiveness.set(system.subject, system.kind);
+		if (dropSwitchedOff(host, system)) return;
 	}
 	host.consumeEvent(incoming);
 }
 /**
+* D62: a device the operator switched off is reported off, never offline. Its
+* `device-offline` / `stream-offline` is dropped (and said) while an open
+* `device-disabled` row exists — the broker of a disabled device stopping is
+* the switch working, not an outage. The memory of the flip is already kept.
+*/
+function dropSwitchedOff(host, system) {
+	if (system === void 0 || system.deviceId === void 0) return false;
+	if (system.kind !== "device-offline" && system.kind !== "stream-offline") return false;
+	if (!host.stateSummary.ledger.isDeviceDisabled(system.deviceId)) return false;
+	host.logger.debug("offline not notified — the device is switched off (D62)", {
+		tags: { deviceId: system.deviceId },
+		meta: {
+			kind: system.kind,
+			subject: system.subject
+		}
+	});
+	return true;
+}
+/**
 * Arm a node liveness flip. An OFFLINE of a node that announced an update is
 * held for the whole planned-update window and worded as such if it is still
 * sent; the node's return inside the window is logged and sends nothing (the
@@ -105899,6 +106186,8 @@ var NotificationCenter = class {
 	zoneOwners;
 	/** Runs a matched rule's action sequences. Null when no actuator is wired. */
 	actionRunner;
+	/** Domain action targets read from the registry (D983); null without a directory. */
+	actionTargets;
 	/** Grants behind the tap-through buttons. In-process and single-use — read
 	*  `action-token.ts` before assuming anything about what a tap proves. */
 	actionTokens = new NcActionTokenRegistry();
@@ -106306,9 +106595,15 @@ var NotificationCenter = class {
 		});
 		this.livenessHoldoff = new DeviceLivenessHoldoff((event) => this.consumeEvent(event), { delayMs: deps.livenessHoldoffMs ?? (process.env.VITEST ? 0 : DEVICE_LIVENESS_HOLDOFF_MS) });
 		this.nodeLivenessHoldoff = new DeviceLivenessHoldoff((event, timing) => this.consumeNodeLiveness(event, timing), { delayMs: deps.nodeLivenessHoldoffMs ?? (process.env.VITEST ? 0 : NODE_LIVENESS_HOLDOFF_MS) });
+		const targets = deps.actionTargetDirectory !== void 0 ? new require_clip_model_registry.ActionTargetResolver(deps.actionTargetDirectory, this.logger.child("actions")) : null;
+		this.actionTargets = targets;
 		this.actionRunner = deps.actuate !== void 0 && deps.isCapDeviceScoped !== void 0 ? new NcRuleActionRunner({
 			logger: this.logger.child("actions"),
 			actuate: (input) => this.actuateWithAttribution(input),
+			...targets !== null ? { resolveTarget: (target, actionId, owner) => targets.resolve(target, actionId, {}, {
+				actionId,
+				owner
+			}) } : {},
 			isDeviceScoped: deps.isCapDeviceScoped,
 			...deps.now !== void 0 ? { now: deps.now } : {}
 		}) : null;
@@ -107098,6 +107393,21 @@ var NotificationCenter = class {
 			}
 		};
 	}
+	/**
+	* What the operator answered to the "was this detection right?" buttons, for
+	* the retrain page: by track, the latest answer wins. A track nobody answered
+	* is absent.
+	*/
+	detectionVerdictsOf(trackIds) {
+		const out = /* @__PURE__ */ new Map();
+		for (const [trackId, row] of this.verdicts.forTracks(trackIds)) out.set(trackId, toRetrainVerdict({
+			verdict: row.verdict,
+			trackId,
+			at: row.at,
+			suggestedClass: row.suggestedClass
+		}));
+		return out;
+	}
 	observeOccupancy(deviceId, snapshot, evidence = "scene") {
 		return observeOccupancy(this.occupancyWatchHost(), deviceId, snapshot, evidence);
 	}
@@ -107273,6 +107583,10 @@ var NotificationCenter = class {
 			}
 		};
 	}
+	/** The device registry changed: a cached domain action target is stale (D983). */
+	invalidateActionTargets() {
+		this.actionTargets?.invalidate();
+	}
 	onSystemEvent(event) {
 		return onSystemEvent(this.systemEventsHost(), event);
 	}
@@ -108746,7 +109060,9 @@ async function addVerdictFrameFromRecording(api, logger, input) {
 	}
 	const result = await api.addRetrainFrameFromRecording({
 		collectionId,
-		...input
+		deviceId: input.deviceId,
+		epochMs: input.epochMs,
+		...input.subject !== void 0 ? { verdictSubject: input.subject } : {}
 	});
 	if (result.kind === "added") return { ok: true };
 	return {
@@ -109033,6 +109349,20 @@ var BuildNotificationCenter = class extends BuildNotificationCenterBase {
 				});
 			},
 			isCapDeviceScoped: require_clip_model_registry.isDeviceScopedCap,
+			actionTargetDirectory: {
+				listDeviceIdsByCaps: (capNames) => api.deviceManager.listDeviceIdsByCaps.query({ capNames: [...capNames] }),
+				listDevices: async (deviceIds) => {
+					return (await api.deviceManager.listAll.query({
+						deviceIds: [...deviceIds],
+						projection: "slim"
+					})).map((d) => ({
+						id: d.id,
+						type: d.type,
+						location: d.location,
+						disabled: d.disabled
+					}));
+				}
+			},
 			generateVision: async (request) => {
 				const result = await api.llm.generateVision.mutate({
 					...request.profileId !== void 0 ? { profileId: request.profileId } : {},
@@ -113197,7 +113527,10 @@ var PackageDropDetector = class {
 		}
 		if (outcome.kind === "yes") {
 			this.reportLlmSilence(this.llmSilence.noteAnswered(entry.deviceId), tags);
-			return { packageLlmVerdict: outcome.verdict };
+			return {
+				packageLlmVerdict: outcome.verdict,
+				confirmElapsedMs: latencyMs
+			};
 		}
 		this.dropUncertain(entry, tags, outcome.reason, latencyMs);
 		return null;
@@ -113389,10 +113722,12 @@ var PackageDropDetector = class {
 		}
 		const llm = await this.llmFields(entry, rules, hitZones, tags);
 		if (llm === null) return;
+		const { confirmElapsedMs, ...llmRowFields } = llm;
+		const rowTimestamp = timestamp + (confirmElapsedMs ?? 0);
 		const draft = {
 			kind: "object",
 			deviceId: entry.deviceId,
-			timestamp,
+			timestamp: rowTimestamp,
 			source: "pipeline",
 			idempotencyKey,
 			trackId: entry.sourceTrackId ?? entry.id,
@@ -113411,7 +113746,7 @@ var PackageDropDetector = class {
 			frameHeight: entry.frameHeight,
 			...entry.keyFrameMediaId !== void 0 ? { mediaId: entry.keyFrameMediaId } : {},
 			importance: PACKAGE_IMPORTANCE,
-			...llm
+			...llmRowFields
 		};
 		const rowId = await this.deps.events.insertObject(draft);
 		if (rowId === null) {
@@ -113442,7 +113777,7 @@ var PackageDropDetector = class {
 				w: entry.bbox.w,
 				h: entry.bbox.h
 			},
-			timestamp
+			timestamp: rowTimestamp
 		});
 		this.deps.logger.info("package delivered — all 5 gates passed", {
 			tags: { deviceId: entry.deviceId },
@@ -113453,6 +113788,7 @@ var PackageDropDetector = class {
 				zoneIds: hitZones,
 				dwellMs,
 				areaFrac: Number(minAreaFrac.toFixed(5)),
+				...confirmElapsedMs !== void 0 ? { footageAnchorShiftMs: confirmElapsedMs } : {},
 				...entry.confidence !== void 0 ? { confidence: entry.confidence } : {}
 			}
 		});
@@ -113652,7 +113988,7 @@ var RetrainCollectionService = class {
 			frameId: recordingFrameId(input.deviceId, input.epochMs),
 			deviceId: input.deviceId
 		});
-		const stored = await this.storeStill(input.deviceId, input.epochMs, membershipOp === null ? [] : [membershipOp]);
+		const stored = await this.storeStill(input.deviceId, input.epochMs, membershipOp === null ? [] : [membershipOp], input.verdictSubject);
 		if (stored.kind === "refused") {
 			this.deps.logger.info("retrain collection add refused", {
 				tags,
@@ -113664,11 +114000,15 @@ var RetrainCollectionService = class {
 			});
 			return stored;
 		}
-		if (stored.reused) await this.deps.collections.addFrame({
-			collectionId: input.collectionId,
-			frameId: stored.frame.frameId,
-			deviceId: input.deviceId
-		});
+		let storedFrame = stored.frame;
+		if (stored.reused) {
+			await this.deps.collections.addFrame({
+				collectionId: input.collectionId,
+				frameId: stored.frame.frameId,
+				deviceId: input.deviceId
+			});
+			if (input.verdictSubject !== void 0) storedFrame = await this.deps.frames.setVerdictSubject(stored.frame.frameId, input.verdictSubject) ?? stored.frame;
+		}
 		this.deps.logger.info("retrain frame added to a collection from the recording", {
 			tags,
 			meta: {
@@ -113678,7 +114018,7 @@ var RetrainCollectionService = class {
 				reused: stored.reused
 			}
 		});
-		const [wire] = await this.deps.retrain.toWireFrames([stored.frame]);
+		const [wire] = await this.deps.retrain.toWireFrames([storedFrame]);
 		if (wire === void 0) throw new Error("retrain: a stored still produced no wire frame");
 		return {
 			kind: "added",
@@ -113729,7 +114069,7 @@ var RetrainCollectionService = class {
 		const ids = await this.deps.collections.listFrameIds(input.collectionId);
 		return this.deps.retrain.toWireFrames(await this.deps.frames.getMany(ids));
 	}
-	async storeStill(deviceId, epochMs, withRow) {
+	async storeStill(deviceId, epochMs, withRow, verdictSubject) {
 		const existing = await this.deps.frames.get(recordingFrameId(deviceId, epochMs));
 		if (existing !== null) return {
 			kind: "stored",
@@ -113748,7 +114088,8 @@ var RetrainCollectionService = class {
 		const stored = await this.deps.frames.storeRecordingStill({
 			deviceId,
 			epochMs,
-			bytes: still.jpeg
+			bytes: still.jpeg,
+			...verdictSubject !== void 0 ? { verdictSubject } : {}
 		}, withRow);
 		return stored.kind === "copied" ? {
 			kind: "stored",
@@ -114534,6 +114875,14 @@ function toWireFrame(f) {
 		dismissed: f.dismissed ?? []
 	};
 }
+/** The answer on a frame: a track copy asks the ledger, a still carries the
+*  subject the notification froze. */
+function verdictOfFrame(copy, verdicts) {
+	if (copy.origin === "track") return verdicts.get(copy.trackId);
+	const s = copy.verdictSubject;
+	if (s === void 0) return void 0;
+	return toRetrainVerdict(s);
+}
 /**
 * What the operator did with the proposals on a frame (`retrain-review.ts`).
 *
@@ -114594,7 +114943,11 @@ var RetrainService = class {
 		const tracks = [];
 		for (const deviceId of devices) tracks.push(...await this.deps.tracks.listStaging(deviceId, limit));
 		const ids = tracks.map((t) => t.trackId);
-		const [frameCounts, annotationCounts] = await Promise.all([this.deps.frames.countsByTrack(ids), this.deps.annotations.countsByTrack(ids)]);
+		const [frameCounts, annotationCounts, verdicts] = await Promise.all([
+			this.deps.frames.countsByTrack(ids),
+			this.deps.annotations.countsByTrack(ids),
+			this.verdictsOfTracks(ids)
+		]);
 		return tracks.map((t) => ({
 			trackId: t.trackId,
 			deviceId: t.deviceId,
@@ -114603,7 +114956,8 @@ var RetrainService = class {
 			firstSeen: t.firstSeen,
 			lastSeen: t.lastSeen,
 			frameCount: frameCounts.get(t.trackId) ?? 0,
-			annotationCount: annotationCounts.get(t.trackId) ?? 0
+			annotationCount: annotationCounts.get(t.trackId) ?? 0,
+			...verdicts.has(t.trackId) ? { verdict: verdicts.get(t.trackId) } : {}
 		}));
 	}
 	/**
@@ -114653,9 +115007,14 @@ var RetrainService = class {
 		const ownTracks = /* @__PURE__ */ new Map();
 		const subjectBoxes = /* @__PURE__ */ new Map();
 		const annotationsByFrame = await this.annotationsByFrame(copies);
+		const verdicts = await this.verdictsOf(copies);
 		const out = [];
 		for (const copy of copies) {
-			const wire = toWireFrame(copy);
+			const verdict = verdictOfFrame(copy, verdicts);
+			const wire = {
+				...toWireFrame(copy),
+				...verdict !== void 0 ? { verdict } : {}
+			};
 			const collectionIds = collections?.get(copy.frameId);
 			const withCollections = {
 				...collections !== null ? {
@@ -114686,7 +115045,8 @@ var RetrainService = class {
 				},
 				ownTrack: trackId !== "" ? ownTracks.get(trackId) ?? null : null,
 				ownSubjectBox: trackId !== "" ? subjectBoxes.get(trackId)?.get(copy.sourceMediaId) ?? null : null,
-				neighbours
+				neighbours,
+				...copy.verdictSubject !== void 0 ? { verdictSubject: copy.verdictSubject } : {}
 			});
 			out.push({
 				...withCollections,
@@ -114696,6 +115056,22 @@ var RetrainService = class {
 		}
 		return out;
 	}
+	/** The verdicts of the tracks these frames were copied from. */
+	async verdictsOf(copies) {
+		return this.verdictsOfTracks(copies.flatMap((c) => c.origin === "track" ? [c.trackId] : []));
+	}
+	async verdictsOfTracks(trackIds) {
+		const port = this.deps.verdicts;
+		const ids = [...new Set(trackIds)];
+		if (port === void 0 || ids.length === 0) return /* @__PURE__ */ new Map();
+		return port.forTracks(ids).catch((err) => {
+			this.deps.logger.warn("retrain frames: verdicts unreadable", { meta: {
+				tracks: ids.length,
+				error: String(err)
+			} });
+			return /* @__PURE__ */ new Map();
+		});
+	}
 	/** The URLs of a frame's pixels, when a data plane is served for them. */
 	frameUrls(frameId) {
 		const frameUrl = this.deps.frameUrl;
@@ -116812,6 +117188,7 @@ var BuildStores = class extends BuildStoresBase {
 				subjectBoxes: (trackId, deviceId) => mediaStore.listSubjectBoxesByOwner("track", trackId, deviceId)
 			},
 			memberships: retrainCollectionStore,
+			verdicts: { forTracks: async (trackIds) => this.notificationCenter?.detectionVerdictsOf(trackIds) ?? /* @__PURE__ */ new Map() },
 			frameUrl: (frameId, size) => retrainFramePath(this.ctx.id, frameId, size)
 		});
 		this.retrain = retrain;
@@ -122523,7 +122900,8 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 			onBindingsChanged: (data) => this.handleBindingsChangedEvent(data),
 			onDeviceUnregistered: (deviceId) => this.handleDeviceUnregisteredEvent(deviceId),
 			onClusterTopology: (nodes) => this.nodeLiveness.applySnapshot(nodes, Date.now()),
-			onSystemEvent: (event) => this.notificationCenter?.onSystemEvent(event)
+			onSystemEvent: (event) => this.notificationCenter?.onSystemEvent(event),
+			onDeviceRegistryChange: () => this.notificationCenter?.invalidateActionTargets()
 		});
 		await step("startTrackingTapes", () => this.startTrackingTapes(this.isPostProcessingNode));
 		if (this.isPostProcessingNode) await step("startEmbeddingDispatcher", () => this.startEmbeddingDispatcher(logger, transport));
@@ -123984,6 +124362,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 			this.frameState.lastNonPackageActivityAt.delete(data.deviceId);
 			this.frameState.packageCollectors.forgetDevice(data.deviceId);
 			this.frameState.packageOversizeLogAt.delete(data.deviceId);
+			this.frameState.packageLookFrames.delete(data.deviceId);
 			this.frameState.packageLookDropReasons.delete(data.deviceId);
 			this.overlayState.clearDevice(data.deviceId);
 			this.frameState.overlaySynthesisWarnAt.delete(data.deviceId);
@@ -124007,6 +124386,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 		this.frameState.lastNonPackageActivityAt.delete(deviceId);
 		this.frameState.packageCollectors.forgetDevice(deviceId);
 		this.frameState.packageOversizeLogAt.delete(deviceId);
+		this.frameState.packageLookFrames.delete(deviceId);
 		this.frameState.packageLookDropReasons.delete(deviceId);
 		this.overlayState.clearDevice(deviceId);
 		this.frameState.overlaySynthesisWarnAt.delete(deviceId);
@@ -126989,6 +127369,10 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 	runPackageStillness(input) {
 		if (this.packageDropDetector === null) return;
 		const tags = { deviceId: input.deviceId };
+		if (input.frameHandle !== null) this.frameState.packageLookFrames.set(input.deviceId, {
+			handle: input.frameHandle,
+			at: input.timestamp
+		});
 		for (const t of input.tracked) {
 			if (input.packageClasses.has(t.className)) continue;
 			if (!isDelivererInPackageZone(t.zones, input.packageZoneIds)) continue;
@@ -127222,10 +127606,23 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 					...entry.confidence !== void 0 ? { confidence: entry.confidence } : {}
 				}
 			});
-			this.packageDropDetector.onStationaryChange({
-				phase: "appeared",
+			const lookFrame = this.frameState.packageLookFrames.get(input.deviceId);
+			promoteWithStill({
 				entry,
-				timestamp: entry.becameStationaryAt
+				handle: lookFrame !== void 0 && input.timestamp - lookFrame.at <= PACKAGE_LOOK_FRAME_MAX_AGE_MS ? lookFrame.handle : null,
+				timestamp: lookFrame?.at ?? input.timestamp,
+				query: (request) => this.queryPackageSceneCrop(request),
+				writer: this.mediaStore,
+				logger: this.ctx.logger,
+				detector: this.packageDropDetector
+			}).catch((err) => {
+				this.ctx.logger.warn("package promotion failed", {
+					tags,
+					meta: {
+						entryId: entry.id,
+						error: err instanceof Error ? err.message : String(err)
+					}
+				});
 			});
 		}
 		for (const entry of outcome.departed) {