@camstack/addon-post-analysis 1.2.93 → 1.2.95

package/dist/{dist-DYoWeRRt.js → dist-BdojoP7i.js}

@@ -21525,6 +21525,14 @@ var ClipSchema = object({
 		endMs: number()
 	}),
 	/**
+	* Distinct object classes attached to this visit (`person`, `car`, …),
+	* dominant first, capped at {@link MAX_CLIP_LABELS}. The ribbon renders these
+	* instead of the bare kind — "Object" tells the operator nothing a colour bar
+	* did not. Absent (never empty) when the visit attached no classified object
+	* event, so a motion/audio-only visit keeps its kind label.
+	*/
+	labels: array(string()).max(3).optional(),
+	/**
 	* Lazy thumbnail URL, never inlined.
 	*
 	* Recording-derived clips (events-mode keep-window, and the prepared

package/dist/{dist-3QRyOemL.mjs → dist-C-_TL-I1.mjs}

@@ -21494,6 +21494,14 @@ var ClipSchema = object({
 		endMs: number()
 	}),
 	/**
+	* Distinct object classes attached to this visit (`person`, `car`, …),
+	* dominant first, capped at {@link MAX_CLIP_LABELS}. The ribbon renders these
+	* instead of the bare kind — "Object" tells the operator nothing a colour bar
+	* did not. Absent (never empty) when the visit attached no classified object
+	* event, so a motion/audio-only visit keeps its kind label.
+	*/
+	labels: array(string()).max(3).optional(),
+	/**
 	* Lazy thumbnail URL, never inlined.
 	*
 	* Recording-derived clips (events-mode keep-window, and the prepared

package/dist/embedding-encoder/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-DYoWeRRt.js");
+const require_dist = require("../dist-BdojoP7i.js");
 let node_fs = require("node:fs");
 let node_fs$1 = require_dist.__toESM(node_fs, 1);
 node_fs = require_dist.__toESM(node_fs);

package/dist/embedding-encoder/index.mjs

@@ -1,4 +1,4 @@
-import { O as PoolMemoryWatchdog, Q as embeddingEncoderCapability, dt as resolvePoolMemoryPolicy, ot as parseProcStatus, tt as hfModelUrl, yt as BaseAddon } from "../dist-3QRyOemL.mjs";
+import { O as PoolMemoryWatchdog, Q as embeddingEncoderCapability, dt as resolvePoolMemoryPolicy, ot as parseProcStatus, tt as hfModelUrl, yt as BaseAddon } from "../dist-C-_TL-I1.mjs";
 import { createRequire } from "node:module";
 import * as fs from "node:fs";
 import "node:fs";

package/dist/pipeline-analytics/{_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-C4-ljPpt.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-CeFPqm3h.mjs}

@@ -3,7 +3,7 @@ import "./dist-CYZr2fwk.mjs";
 var e = {
 	"@camstack/sdk": {
 		name: "@camstack/sdk",
-		version: "1.2.23",
+		version: "1.2.24",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_analytics_widgets",
@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.87",
+		version: "1.2.88",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_analytics_widgets",
@@ -33,7 +33,7 @@ var e = {
 	},
 	"@camstack/ui-library": {
 		name: "@camstack/ui-library",
-		version: "1.2.59",
+		version: "1.2.60",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_analytics_widgets",

package/dist/pipeline-analytics/{hostInit-BoUejl7E.mjs → hostInit-BExsGl4h.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.2.87",
+				version: "1.2.88",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -45,7 +45,7 @@ async function r() {
 				}
 			},
 			"@camstack/sdk": {
-				version: "1.2.23",
+				version: "1.2.24",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -81,7 +81,7 @@ async function r() {
 				}
 			},
 			"@camstack/ui-library": {
-				version: "1.2.59",
+				version: "1.2.60",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/pipeline-analytics/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-DYoWeRRt.js");
+const require_dist = require("../dist-BdojoP7i.js");
 let node_fs = require("node:fs");
 node_fs = require_dist.__toESM(node_fs, 1);
 let node_path = require("node:path");
@@ -6405,6 +6405,16 @@ var NcDeviceStateCache = class {
 	}
 };
 //#endregion
+//#region src/notification-center/default-tap-url.ts
+/** The viewer's hosted base path under the hub. */
+var VIEWER_BASE_PATH = "/viewer/camstack";
+function defaultTapUrl(input) {
+	if (input.systemEvent === true) return null;
+	if (input.baseUrl === null || input.baseUrl.length === 0) return null;
+	if (!Number.isInteger(input.deviceId) || input.deviceId <= 0) return null;
+	return `${input.baseUrl.replace(/\/+$/, "")}${VIEWER_BASE_PATH}/camera/${String(input.deviceId)}?at=${String(input.timestampMs)}`;
+}
+//#endregion
 //#region src/shared/frame/box-drawer.ts
 var DEFAULT_COLOR = require_dist.DEFAULT_EVENT_COLOR;
 var DEFAULT_QUALITY = 80;
@@ -9262,12 +9272,19 @@ var NcDispatcher = class {
 		}) : rendered;
 		const attachments = [...await this.withArtifactUrls(entry, await this.resolveAttachments(entry)), ...frozenArtifactAttachments(entry)];
 		const params = pickParams(entry.payload.params);
+		const tapUrl = params.clickUrl === void 0 && this.deps.viewerUrlBase !== void 0 ? defaultTapUrl({
+			deviceId: systemEvent !== void 0 ? 0 : subject.deviceId,
+			timestampMs: subject.timestamp,
+			baseUrl: await this.deps.viewerUrlBase().catch(() => null),
+			systemEvent: systemEvent !== void 0
+		}) : null;
 		const actions = await this.mintActions(entry, target);
 		return {
 			body,
 			title,
 			priority: clampPriority(paramNumber(entry.payload.params, "priority") ?? entry.payload.priority),
 			...params,
+			...tapUrl !== null ? { clickUrl: tapUrl } : {},
 			tag: entry.payload.group?.key ?? entry.ruleId,
 			...systemEvent !== void 0 ? systemEvent.deviceId !== void 0 ? { deviceId: systemEvent.deviceId } : {} : { deviceId: subject.deviceId },
 			...subject.eventId !== void 0 ? { eventId: subject.eventId } : {},
@@ -19148,7 +19165,8 @@ var NotificationCenter = class NotificationCenter {
 				confirmGate: (input) => confirmGate.judge(input),
 				confirmStats: () => confirmGate.stats()
 			} : {},
-			releaseCooldown: (input) => this.releaseCooldown(input)
+			releaseCooldown: (input) => this.releaseCooldown(input),
+			...deps.dispatcher.viewerUrlBase !== void 0 ? { viewerUrlBase: deps.dispatcher.viewerUrlBase } : {}
 		});
 		this.outbox = new NcOutbox({
 			store: deps.store,
@@ -24856,6 +24874,188 @@ function clusterByEmbedding(items, threshold = .5) {
 	})).toSorted((a, b) => b.size - a.size || b.cohesion - a.cohesion);
 }
 //#endregion
+//#region src/pipeline-analytics/pipeline/face-matcher.ts
+/**
+* Count enrolled samples per identity for probes of a matching model+dimension.
+* Only identities meeting `minIdentitySamples` are eligible auto-match targets.
+*/
+function eligibleIdentities(gallery, probeModelId, probeDim, minIdentitySamples) {
+	const counts = /* @__PURE__ */ new Map();
+	for (const s of gallery) {
+		if (s.modelId !== probeModelId) continue;
+		if (s.embedding.length !== probeDim) continue;
+		counts.set(s.identityId, (counts.get(s.identityId) ?? 0) + 1);
+	}
+	const eligible = /* @__PURE__ */ new Set();
+	for (const [id, count] of counts) if (count >= minIdentitySamples) eligible.add(id);
+	return eligible;
+}
+/**
+* Match a probe embedding against the gallery. Only samples with the same
+* `modelId` AND the same dimension are compared (model-version safety). Returns
+* the best identity when its score ≥ threshold and it beats the best OTHER
+* identity by ≥ margin; otherwise null.
+*/
+function matchEmbedding(probe, gallery, opts) {
+	const probeVec = new Float32Array(probe.embedding);
+	const eligible = eligibleIdentities(gallery, probe.modelId, probe.embedding.length, opts.minIdentitySamples ?? 1);
+	const bestByIdentity = /* @__PURE__ */ new Map();
+	for (const s of gallery) {
+		if (s.modelId !== probe.modelId) continue;
+		if (s.embedding.length !== probe.embedding.length) continue;
+		if (!eligible.has(s.identityId)) continue;
+		const score = require_dist.cosineSimilarity(probeVec, new Float32Array(s.embedding));
+		const prev = bestByIdentity.get(s.identityId);
+		if (prev === void 0 || score > prev) bestByIdentity.set(s.identityId, score);
+	}
+	if (bestByIdentity.size === 0) return null;
+	let bestId = null;
+	let bestScore = -Infinity;
+	let secondScore = -Infinity;
+	for (const [id, score] of bestByIdentity) if (score > bestScore) {
+		secondScore = bestScore;
+		bestScore = score;
+		bestId = id;
+	} else if (score > secondScore) secondScore = score;
+	if (bestId === null || bestScore < opts.threshold) return null;
+	if (secondScore > -Infinity && bestScore - secondScore < opts.margin) return null;
+	return {
+		identityId: bestId,
+		score: bestScore
+	};
+}
+/**
+* Assign at most one identity per track AND at most one track per identity for
+* a single frame. Greedy by score: compute every candidate's full ranked match
+* list, then repeatedly take the globally-highest (track, identity) pair whose
+* track and identity are both still free, until none qualify. A losing track
+* falls back to its next-best free identity ≥ threshold. Ties resolve by input order.
+*/
+/**
+* Enrollment bound: the maximum cosine an embedding may score against a sample
+* of a DIFFERENT identity and still be enrolled. Genuine ArcFace cross-person
+* cosines sit under ~0.4; the low-information attractor (IR, blur, backs of
+* heads) sits at 0.95+. Measured 2026-08-18: 22 of 50 live samples were
+* enrolled from that attractor, with inter-identity cosines up to 0.988 — each
+* one a magnet that "recognises" every degraded probe as its owner.
+*/
+var ENROLLMENT_MAX_FOREIGN_COSINE = .9;
+/**
+* Gate an embedding BEFORE it becomes a gallery sample: condemned when its
+* best cosine against any sample of ANOTHER identity (same model + dimension)
+* reaches {@link ENROLLMENT_MAX_FOREIGN_COSINE}. Null = safe to enroll.
+* Closeness to the TARGET identity's own samples is expected and never
+* condemns.
+*/
+function enrollmentPromiscuity(embedding, modelId, targetIdentityId, gallery, bound = ENROLLMENT_MAX_FOREIGN_COSINE) {
+	const probeVec = new Float32Array(embedding);
+	let worst = null;
+	for (const s of gallery) {
+		if (s.identityId === targetIdentityId) continue;
+		if (s.modelId !== modelId) continue;
+		if (s.embedding.length !== embedding.length) continue;
+		const cosine = require_dist.cosineSimilarity(probeVec, new Float32Array(s.embedding));
+		if (cosine >= bound && (worst === null || cosine > worst.cosine)) worst = {
+			identityId: s.identityId,
+			cosine
+		};
+	}
+	return worst;
+}
+function assignUniquePerFrame(candidates, gallery, opts) {
+	const pairs = [];
+	candidates.forEach((c, trackIdx) => {
+		const probeVec = new Float32Array(c.embedding);
+		const eligible = eligibleIdentities(gallery, c.modelId, c.embedding.length, opts.minIdentitySamples ?? 1);
+		const bestByIdentity = /* @__PURE__ */ new Map();
+		for (const s of gallery) {
+			if (s.modelId !== c.modelId) continue;
+			if (s.embedding.length !== c.embedding.length) continue;
+			if (!eligible.has(s.identityId)) continue;
+			const score = require_dist.cosineSimilarity(probeVec, new Float32Array(s.embedding));
+			const prev = bestByIdentity.get(s.identityId);
+			if (prev === void 0 || score > prev) bestByIdentity.set(s.identityId, score);
+		}
+		let bestId = null;
+		let bestScore = -1;
+		let secondScore = -1;
+		for (const [identityId, score] of bestByIdentity) if (score > bestScore) {
+			if (bestId !== null) secondScore = bestScore;
+			bestId = identityId;
+			bestScore = score;
+		} else if (score > secondScore) secondScore = score;
+		const ambiguous = secondScore >= 0 && bestScore - secondScore < opts.margin;
+		if (bestId !== null && !ambiguous) {
+			for (const [identityId, score] of bestByIdentity) if (score >= opts.threshold) pairs.push({
+				trackIdx,
+				identityId,
+				score
+			});
+		}
+	});
+	pairs.sort((a, b) => b.score - a.score);
+	const takenTracks = /* @__PURE__ */ new Set();
+	const takenIdentities = /* @__PURE__ */ new Set();
+	const result = /* @__PURE__ */ new Map();
+	for (const p of pairs) {
+		if (takenTracks.has(p.trackIdx) || takenIdentities.has(p.identityId)) continue;
+		takenTracks.add(p.trackIdx);
+		takenIdentities.add(p.identityId);
+		result.set(candidates[p.trackIdx].trackId, {
+			identityId: p.identityId,
+			score: p.score
+		});
+	}
+	return result;
+}
+var EMPTY_AGGREGATE = Object.freeze({
+	assignedIdentityId: null,
+	confirmations: Object.freeze({})
+});
+/**
+* Fold one frame's match into a track's aggregate. A null match leaves state
+* untouched. An identity is assigned once its cumulative confirmation count
+* reaches `confirmFrames`; once assigned, a different identity must independently
+* reach `confirmFrames` to switch. `changed` is true only on a (re)assignment to
+* a NEW identity, so callers fire the label update exactly once per transition.
+*
+* On each (re)assignment the confirmations record is reset to contain only the
+* newly-assigned identity's count, so any challenger must independently re-reach
+* `confirmFrames` from scratch after any assignment.
+*/
+function updateTrackAggregate(prev, match, opts) {
+	if (match === null) return {
+		state: prev,
+		changed: false
+	};
+	const count = (prev.confirmations[match.identityId] ?? 0) + 1;
+	const confirmations = {
+		...prev.confirmations,
+		[match.identityId]: count
+	};
+	if (count < opts.confirmFrames) return {
+		state: {
+			...prev,
+			confirmations
+		},
+		changed: false
+	};
+	if (prev.assignedIdentityId === match.identityId) return {
+		state: {
+			...prev,
+			confirmations
+		},
+		changed: false
+	};
+	return {
+		state: {
+			assignedIdentityId: match.identityId,
+			confirmations: { [match.identityId]: count }
+		},
+		changed: true
+	};
+}
+//#endregion
 //#region src/pipeline-analytics/face-gallery-provider.ts
 /** Attribution of a face identity NAMED BY THE OPERATOR in the gallery. */
 var OPERATOR_FACE_STEP_ID = "operator:face-gallery";
@@ -25102,6 +25302,19 @@ var FaceGalleryProvider = class {
 		}
 		const currentFace = await this.faceStore.get(faceId);
 		if (!currentFace) throw new Error(`FaceGalleryProvider.assignFace: face disappeared after pre-cleanup: ${faceId}`);
+		const verdict = enrollmentPromiscuity(currentFace.embedding, MODEL_ID, identityId, await this.identityStore.loadGallery());
+		if (verdict !== null) {
+			this.logger.warn("assignFace refused: embedding too close to a FOREIGN identity sample", {
+				tags: { deviceId: currentFace.deviceId },
+				meta: {
+					faceId,
+					identityId,
+					foreignIdentityId: verdict.identityId,
+					cosine: verdict.cosine
+				}
+			});
+			throw new Error(`FaceGalleryProvider.assignFace: embedding is ambiguous — cosine ${verdict.cosine.toFixed(3)} with a sample of another identity (${verdict.identityId}); pick a clearer crop`);
+		}
 		let newKey;
 		if (currentFace.mediaKey) {
 			newKey = await this.mediaStore.reown({
@@ -30047,6 +30260,22 @@ function stillInstantMs(ranges) {
 	if (best === void 0) return void 0;
 	return Math.floor((best.startMs + best.endMs) / 2);
 }
+/**
+* The distinct object classes attached to a visit, most frequent first,
+* capped at {@link MAX_CLIP_LABELS}. Empty when nothing classified overlapped
+* — the caller then omits the field so a motion/audio-only visit keeps its
+* kind label instead of carrying an empty array every consumer length-checks.
+*/
+function dominantLabels(attached) {
+	const counts = /* @__PURE__ */ new Map();
+	for (const a of attached) {
+		if (a.kind !== "object") continue;
+		const name = a.event.className;
+		if (typeof name !== "string" || name.length === 0) continue;
+		counts.set(name, (counts.get(name) ?? 0) + 1);
+	}
+	return [...counts.entries()].toSorted((x, y) => y[1] - x[1]).slice(0, 3).map(([name]) => name);
+}
 function visitsToClips(visits, events, pad, vouched) {
 	const tagged = [
 		...events.object.map((event) => ({
@@ -30067,6 +30296,7 @@ function visitsToClips(visits, events, pad, vouched) {
 		const kind = dominantKind(attached);
 		const withThumb = attached.find((a) => a.kind === kind && a.event.mediaUrl && vouched.has(a.event.id)) ?? attached.find((a) => a.event.mediaUrl && vouched.has(a.event.id));
 		const stillAtMs = stillInstantMs(visit.ranges);
+		const labels = dominantLabels(attached);
 		return {
 			id: `analytics:${visit.startMs}:${visit.endMs}:${VISIT_EVENT_ID}`,
 			source: "analytics",
@@ -30079,7 +30309,8 @@ function visitsToClips(visits, events, pad, vouched) {
 			...stillAtMs !== void 0 ? { stillAtMs } : {},
 			eventIds: attached.slice(0, 24).map((a) => a.event.id),
 			eventCount: attached.length,
-			holes: [...visit.holes]
+			holes: [...visit.holes],
+			...labels.length > 0 ? { labels } : {}
 		};
 	}).toSorted((a, b) => b.timeRange.startMs - a.timeRange.startMs);
 }
@@ -33534,146 +33765,6 @@ async function resolveDefaultEventMedia(deps) {
 	return pickTrackFallbackMedia(await deps.listTrackMedia(trackId)) ?? null;
 }
 //#endregion
-//#region src/pipeline-analytics/pipeline/face-matcher.ts
-/**
-* Count enrolled samples per identity for probes of a matching model+dimension.
-* Only identities meeting `minIdentitySamples` are eligible auto-match targets.
-*/
-function eligibleIdentities(gallery, probeModelId, probeDim, minIdentitySamples) {
-	const counts = /* @__PURE__ */ new Map();
-	for (const s of gallery) {
-		if (s.modelId !== probeModelId) continue;
-		if (s.embedding.length !== probeDim) continue;
-		counts.set(s.identityId, (counts.get(s.identityId) ?? 0) + 1);
-	}
-	const eligible = /* @__PURE__ */ new Set();
-	for (const [id, count] of counts) if (count >= minIdentitySamples) eligible.add(id);
-	return eligible;
-}
-/**
-* Match a probe embedding against the gallery. Only samples with the same
-* `modelId` AND the same dimension are compared (model-version safety). Returns
-* the best identity when its score ≥ threshold and it beats the best OTHER
-* identity by ≥ margin; otherwise null.
-*/
-function matchEmbedding(probe, gallery, opts) {
-	const probeVec = new Float32Array(probe.embedding);
-	const eligible = eligibleIdentities(gallery, probe.modelId, probe.embedding.length, opts.minIdentitySamples ?? 1);
-	const bestByIdentity = /* @__PURE__ */ new Map();
-	for (const s of gallery) {
-		if (s.modelId !== probe.modelId) continue;
-		if (s.embedding.length !== probe.embedding.length) continue;
-		if (!eligible.has(s.identityId)) continue;
-		const score = require_dist.cosineSimilarity(probeVec, new Float32Array(s.embedding));
-		const prev = bestByIdentity.get(s.identityId);
-		if (prev === void 0 || score > prev) bestByIdentity.set(s.identityId, score);
-	}
-	if (bestByIdentity.size === 0) return null;
-	let bestId = null;
-	let bestScore = -Infinity;
-	let secondScore = -Infinity;
-	for (const [id, score] of bestByIdentity) if (score > bestScore) {
-		secondScore = bestScore;
-		bestScore = score;
-		bestId = id;
-	} else if (score > secondScore) secondScore = score;
-	if (bestId === null || bestScore < opts.threshold) return null;
-	if (secondScore > -Infinity && bestScore - secondScore < opts.margin) return null;
-	return {
-		identityId: bestId,
-		score: bestScore
-	};
-}
-/**
-* Assign at most one identity per track AND at most one track per identity for
-* a single frame. Greedy by score: compute every candidate's full ranked match
-* list, then repeatedly take the globally-highest (track, identity) pair whose
-* track and identity are both still free, until none qualify. A losing track
-* falls back to its next-best free identity ≥ threshold. Ties resolve by input order.
-*/
-function assignUniquePerFrame(candidates, gallery, opts) {
-	const pairs = [];
-	candidates.forEach((c, trackIdx) => {
-		const probeVec = new Float32Array(c.embedding);
-		const eligible = eligibleIdentities(gallery, c.modelId, c.embedding.length, opts.minIdentitySamples ?? 1);
-		const bestByIdentity = /* @__PURE__ */ new Map();
-		for (const s of gallery) {
-			if (s.modelId !== c.modelId) continue;
-			if (s.embedding.length !== c.embedding.length) continue;
-			if (!eligible.has(s.identityId)) continue;
-			const score = require_dist.cosineSimilarity(probeVec, new Float32Array(s.embedding));
-			const prev = bestByIdentity.get(s.identityId);
-			if (prev === void 0 || score > prev) bestByIdentity.set(s.identityId, score);
-		}
-		for (const [identityId, score] of bestByIdentity) if (score >= opts.threshold) pairs.push({
-			trackIdx,
-			identityId,
-			score
-		});
-	});
-	pairs.sort((a, b) => b.score - a.score);
-	const takenTracks = /* @__PURE__ */ new Set();
-	const takenIdentities = /* @__PURE__ */ new Set();
-	const result = /* @__PURE__ */ new Map();
-	for (const p of pairs) {
-		if (takenTracks.has(p.trackIdx) || takenIdentities.has(p.identityId)) continue;
-		takenTracks.add(p.trackIdx);
-		takenIdentities.add(p.identityId);
-		result.set(candidates[p.trackIdx].trackId, {
-			identityId: p.identityId,
-			score: p.score
-		});
-	}
-	return result;
-}
-var EMPTY_AGGREGATE = Object.freeze({
-	assignedIdentityId: null,
-	confirmations: Object.freeze({})
-});
-/**
-* Fold one frame's match into a track's aggregate. A null match leaves state
-* untouched. An identity is assigned once its cumulative confirmation count
-* reaches `confirmFrames`; once assigned, a different identity must independently
-* reach `confirmFrames` to switch. `changed` is true only on a (re)assignment to
-* a NEW identity, so callers fire the label update exactly once per transition.
-*
-* On each (re)assignment the confirmations record is reset to contain only the
-* newly-assigned identity's count, so any challenger must independently re-reach
-* `confirmFrames` from scratch after any assignment.
-*/
-function updateTrackAggregate(prev, match, opts) {
-	if (match === null) return {
-		state: prev,
-		changed: false
-	};
-	const count = (prev.confirmations[match.identityId] ?? 0) + 1;
-	const confirmations = {
-		...prev.confirmations,
-		[match.identityId]: count
-	};
-	if (count < opts.confirmFrames) return {
-		state: {
-			...prev,
-			confirmations
-		},
-		changed: false
-	};
-	if (prev.assignedIdentityId === match.identityId) return {
-		state: {
-			...prev,
-			confirmations
-		},
-		changed: false
-	};
-	return {
-		state: {
-			assignedIdentityId: match.identityId,
-			confirmations: { [match.identityId]: count }
-		},
-		changed: true
-	};
-}
-//#endregion
 //#region src/pipeline-analytics/face-recognizer.ts
 /** Attribution of an identity resolved by the in-process ArcFace matcher. */
 var FACE_RECOGNIZER_STEP_ID = "face-recognizer";
@@ -52378,6 +52469,7 @@ var PipelineAnalyticsAddon = class extends require_dist.BaseAddon {
 				},
 				renderEventMedia: (req) => this.renderEventMedia(req),
 				publishArtifact: async (bytes, mime) => await this.ncArtifactPlane?.publish(bytes, mime) ?? null,
+				viewerUrlBase: async () => pickArtifactBaseUrl(await this.ncEndpoints()),
 				indexArtifact: async (bytes, mime, meta) => await this.ncArtifactPlane?.publishIndexed(bytes, mime, meta) ?? {
 					url: null,
 					artifactId: null

package/dist/pipeline-analytics/index.mjs

@@ -1,4 +1,4 @@
-import { $ as encodeVectorBase64, A as RetrainStatusSchema, At as literal, B as TrackSourceSchema, C as NcSnoozeSchema, Ct as isDeviceScopedCap, D as OpsLogEntrySchema, Dt as array, E as NcTaxonomySchema, Et as _enum, F as SceneMonitorSchema, Ft as string, G as audioMetricsCapability, H as addonWidgetsSourceCapability, I as TIMELAPSE_DENSE_FLOOR_SEC, It as unknown, J as cosineSimilarity$1, K as audioModeOf, L as TimelapseRuleInputSchema, Lt as EventCategory, M as SCENE_DEFAULT_ANCHOR_THRESHOLD, Mt as object, N as SCENE_DEFAULT_UNCOVERED_POLICY, Nt as partialRecord, Ot as boolean, P as SCENE_DIVERGED, Pt as record, R as TimelapseRulePatchSchema, S as NcSnoozeInputSchema, St as hydrateSchema, T as NcSystemEventKindSchema, Tt as sleep, U as alarmPanelCapability, V as VISIT_MERGE_GAP_MS, W as assertTimelapseCadences, X as defineCustomActions, Y as customAction, Z as deriveRecordingMode, _ as NcRuleInputSchema, _t as zoneAnalyticsCapability, at as notificationRulesCapability, b as NcRuleTargetSchema, bt as DeviceType, c as EVENT_PAD_MS, ct as plateGalleryCapability, d as NC_ALARM_SYSTEM_EVENT_KINDS, et as faceGalleryCapability, f as NC_CONDITION_CATALOG, ft as sceneMonitorCapability, g as NcConditionDescriptorSchema, gt as videoclipsCapability, h as NC_TAXONOMY, ht as vectorDimFromBase64, i as DETECTION_MACRO_CLASSES, it as kebabToCamel, jt as number, k as RECORDING_EXPORT_MAX_READ_BYTES, kt as discriminatedUnion, l as LabelAttributionSchema, lt as readDeviceStateFrom, mt as systemEventFilterApplies, n as DEFAULT_EVENT_COLOR, nt as isDetectionMacroClass, o as DeclaredDevices, p as NC_DEFAULT_SNOOZE_MINUTES, pt as subKindsOf, q as buildEventKindDescriptor, rt as isScheduleActive, s as EVENT_KIND_BY_CAP, st as pipelineAnalyticsCapability, t as BaseDevice, u as MACRO_LABELS, ut as readTimelapseGeneratedAt, v as NcRulePatchSchema, vt as errMsg, w as NcSnoozeSuppressedSchema, wt as nodePin, x as NcScheduleSchema, xt as createEvent, y as NcRuleSchema, yt as BaseAddon, z as TimelapseRuleSchema } from "../dist-3QRyOemL.mjs";
+import { $ as encodeVectorBase64, A as RetrainStatusSchema, At as literal, B as TrackSourceSchema, C as NcSnoozeSchema, Ct as isDeviceScopedCap, D as OpsLogEntrySchema, Dt as array, E as NcTaxonomySchema, Et as _enum, F as SceneMonitorSchema, Ft as string, G as audioMetricsCapability, H as addonWidgetsSourceCapability, I as TIMELAPSE_DENSE_FLOOR_SEC, It as unknown, J as cosineSimilarity$1, K as audioModeOf, L as TimelapseRuleInputSchema, Lt as EventCategory, M as SCENE_DEFAULT_ANCHOR_THRESHOLD, Mt as object, N as SCENE_DEFAULT_UNCOVERED_POLICY, Nt as partialRecord, Ot as boolean, P as SCENE_DIVERGED, Pt as record, R as TimelapseRulePatchSchema, S as NcSnoozeInputSchema, St as hydrateSchema, T as NcSystemEventKindSchema, Tt as sleep, U as alarmPanelCapability, V as VISIT_MERGE_GAP_MS, W as assertTimelapseCadences, X as defineCustomActions, Y as customAction, Z as deriveRecordingMode, _ as NcRuleInputSchema, _t as zoneAnalyticsCapability, at as notificationRulesCapability, b as NcRuleTargetSchema, bt as DeviceType, c as EVENT_PAD_MS, ct as plateGalleryCapability, d as NC_ALARM_SYSTEM_EVENT_KINDS, et as faceGalleryCapability, f as NC_CONDITION_CATALOG, ft as sceneMonitorCapability, g as NcConditionDescriptorSchema, gt as videoclipsCapability, h as NC_TAXONOMY, ht as vectorDimFromBase64, i as DETECTION_MACRO_CLASSES, it as kebabToCamel, jt as number, k as RECORDING_EXPORT_MAX_READ_BYTES, kt as discriminatedUnion, l as LabelAttributionSchema, lt as readDeviceStateFrom, mt as systemEventFilterApplies, n as DEFAULT_EVENT_COLOR, nt as isDetectionMacroClass, o as DeclaredDevices, p as NC_DEFAULT_SNOOZE_MINUTES, pt as subKindsOf, q as buildEventKindDescriptor, rt as isScheduleActive, s as EVENT_KIND_BY_CAP, st as pipelineAnalyticsCapability, t as BaseDevice, u as MACRO_LABELS, ut as readTimelapseGeneratedAt, v as NcRulePatchSchema, vt as errMsg, w as NcSnoozeSuppressedSchema, wt as nodePin, x as NcScheduleSchema, xt as createEvent, y as NcRuleSchema, yt as BaseAddon, z as TimelapseRuleSchema } from "../dist-C-_TL-I1.mjs";
 import { t as __exportAll } from "../embedding-encoder/index.mjs";
 import * as fs from "node:fs";
 import { promises } from "node:fs";
@@ -6398,6 +6398,16 @@ var NcDeviceStateCache = class {
 	}
 };
 //#endregion
+//#region src/notification-center/default-tap-url.ts
+/** The viewer's hosted base path under the hub. */
+var VIEWER_BASE_PATH = "/viewer/camstack";
+function defaultTapUrl(input) {
+	if (input.systemEvent === true) return null;
+	if (input.baseUrl === null || input.baseUrl.length === 0) return null;
+	if (!Number.isInteger(input.deviceId) || input.deviceId <= 0) return null;
+	return `${input.baseUrl.replace(/\/+$/, "")}${VIEWER_BASE_PATH}/camera/${String(input.deviceId)}?at=${String(input.timestampMs)}`;
+}
+//#endregion
 //#region src/shared/frame/box-drawer.ts
 var DEFAULT_COLOR = DEFAULT_EVENT_COLOR;
 var DEFAULT_QUALITY = 80;
@@ -9255,12 +9265,19 @@ var NcDispatcher = class {
 		}) : rendered;
 		const attachments = [...await this.withArtifactUrls(entry, await this.resolveAttachments(entry)), ...frozenArtifactAttachments(entry)];
 		const params = pickParams(entry.payload.params);
+		const tapUrl = params.clickUrl === void 0 && this.deps.viewerUrlBase !== void 0 ? defaultTapUrl({
+			deviceId: systemEvent !== void 0 ? 0 : subject.deviceId,
+			timestampMs: subject.timestamp,
+			baseUrl: await this.deps.viewerUrlBase().catch(() => null),
+			systemEvent: systemEvent !== void 0
+		}) : null;
 		const actions = await this.mintActions(entry, target);
 		return {
 			body,
 			title,
 			priority: clampPriority(paramNumber(entry.payload.params, "priority") ?? entry.payload.priority),
 			...params,
+			...tapUrl !== null ? { clickUrl: tapUrl } : {},
 			tag: entry.payload.group?.key ?? entry.ruleId,
 			...systemEvent !== void 0 ? systemEvent.deviceId !== void 0 ? { deviceId: systemEvent.deviceId } : {} : { deviceId: subject.deviceId },
 			...subject.eventId !== void 0 ? { eventId: subject.eventId } : {},
@@ -19126,7 +19143,8 @@ var NotificationCenter = class NotificationCenter {
 				confirmGate: (input) => confirmGate.judge(input),
 				confirmStats: () => confirmGate.stats()
 			} : {},
-			releaseCooldown: (input) => this.releaseCooldown(input)
+			releaseCooldown: (input) => this.releaseCooldown(input),
+			...deps.dispatcher.viewerUrlBase !== void 0 ? { viewerUrlBase: deps.dispatcher.viewerUrlBase } : {}
 		});
 		this.outbox = new NcOutbox({
 			store: deps.store,
@@ -24834,6 +24852,188 @@ function clusterByEmbedding(items, threshold = .5) {
 	})).toSorted((a, b) => b.size - a.size || b.cohesion - a.cohesion);
 }
 //#endregion
+//#region src/pipeline-analytics/pipeline/face-matcher.ts
+/**
+* Count enrolled samples per identity for probes of a matching model+dimension.
+* Only identities meeting `minIdentitySamples` are eligible auto-match targets.
+*/
+function eligibleIdentities(gallery, probeModelId, probeDim, minIdentitySamples) {
+	const counts = /* @__PURE__ */ new Map();
+	for (const s of gallery) {
+		if (s.modelId !== probeModelId) continue;
+		if (s.embedding.length !== probeDim) continue;
+		counts.set(s.identityId, (counts.get(s.identityId) ?? 0) + 1);
+	}
+	const eligible = /* @__PURE__ */ new Set();
+	for (const [id, count] of counts) if (count >= minIdentitySamples) eligible.add(id);
+	return eligible;
+}
+/**
+* Match a probe embedding against the gallery. Only samples with the same
+* `modelId` AND the same dimension are compared (model-version safety). Returns
+* the best identity when its score ≥ threshold and it beats the best OTHER
+* identity by ≥ margin; otherwise null.
+*/
+function matchEmbedding(probe, gallery, opts) {
+	const probeVec = new Float32Array(probe.embedding);
+	const eligible = eligibleIdentities(gallery, probe.modelId, probe.embedding.length, opts.minIdentitySamples ?? 1);
+	const bestByIdentity = /* @__PURE__ */ new Map();
+	for (const s of gallery) {
+		if (s.modelId !== probe.modelId) continue;
+		if (s.embedding.length !== probe.embedding.length) continue;
+		if (!eligible.has(s.identityId)) continue;
+		const score = cosineSimilarity$1(probeVec, new Float32Array(s.embedding));
+		const prev = bestByIdentity.get(s.identityId);
+		if (prev === void 0 || score > prev) bestByIdentity.set(s.identityId, score);
+	}
+	if (bestByIdentity.size === 0) return null;
+	let bestId = null;
+	let bestScore = -Infinity;
+	let secondScore = -Infinity;
+	for (const [id, score] of bestByIdentity) if (score > bestScore) {
+		secondScore = bestScore;
+		bestScore = score;
+		bestId = id;
+	} else if (score > secondScore) secondScore = score;
+	if (bestId === null || bestScore < opts.threshold) return null;
+	if (secondScore > -Infinity && bestScore - secondScore < opts.margin) return null;
+	return {
+		identityId: bestId,
+		score: bestScore
+	};
+}
+/**
+* Assign at most one identity per track AND at most one track per identity for
+* a single frame. Greedy by score: compute every candidate's full ranked match
+* list, then repeatedly take the globally-highest (track, identity) pair whose
+* track and identity are both still free, until none qualify. A losing track
+* falls back to its next-best free identity ≥ threshold. Ties resolve by input order.
+*/
+/**
+* Enrollment bound: the maximum cosine an embedding may score against a sample
+* of a DIFFERENT identity and still be enrolled. Genuine ArcFace cross-person
+* cosines sit under ~0.4; the low-information attractor (IR, blur, backs of
+* heads) sits at 0.95+. Measured 2026-08-18: 22 of 50 live samples were
+* enrolled from that attractor, with inter-identity cosines up to 0.988 — each
+* one a magnet that "recognises" every degraded probe as its owner.
+*/
+var ENROLLMENT_MAX_FOREIGN_COSINE = .9;
+/**
+* Gate an embedding BEFORE it becomes a gallery sample: condemned when its
+* best cosine against any sample of ANOTHER identity (same model + dimension)
+* reaches {@link ENROLLMENT_MAX_FOREIGN_COSINE}. Null = safe to enroll.
+* Closeness to the TARGET identity's own samples is expected and never
+* condemns.
+*/
+function enrollmentPromiscuity(embedding, modelId, targetIdentityId, gallery, bound = ENROLLMENT_MAX_FOREIGN_COSINE) {
+	const probeVec = new Float32Array(embedding);
+	let worst = null;
+	for (const s of gallery) {
+		if (s.identityId === targetIdentityId) continue;
+		if (s.modelId !== modelId) continue;
+		if (s.embedding.length !== embedding.length) continue;
+		const cosine = cosineSimilarity$1(probeVec, new Float32Array(s.embedding));
+		if (cosine >= bound && (worst === null || cosine > worst.cosine)) worst = {
+			identityId: s.identityId,
+			cosine
+		};
+	}
+	return worst;
+}
+function assignUniquePerFrame(candidates, gallery, opts) {
+	const pairs = [];
+	candidates.forEach((c, trackIdx) => {
+		const probeVec = new Float32Array(c.embedding);
+		const eligible = eligibleIdentities(gallery, c.modelId, c.embedding.length, opts.minIdentitySamples ?? 1);
+		const bestByIdentity = /* @__PURE__ */ new Map();
+		for (const s of gallery) {
+			if (s.modelId !== c.modelId) continue;
+			if (s.embedding.length !== c.embedding.length) continue;
+			if (!eligible.has(s.identityId)) continue;
+			const score = cosineSimilarity$1(probeVec, new Float32Array(s.embedding));
+			const prev = bestByIdentity.get(s.identityId);
+			if (prev === void 0 || score > prev) bestByIdentity.set(s.identityId, score);
+		}
+		let bestId = null;
+		let bestScore = -1;
+		let secondScore = -1;
+		for (const [identityId, score] of bestByIdentity) if (score > bestScore) {
+			if (bestId !== null) secondScore = bestScore;
+			bestId = identityId;
+			bestScore = score;
+		} else if (score > secondScore) secondScore = score;
+		const ambiguous = secondScore >= 0 && bestScore - secondScore < opts.margin;
+		if (bestId !== null && !ambiguous) {
+			for (const [identityId, score] of bestByIdentity) if (score >= opts.threshold) pairs.push({
+				trackIdx,
+				identityId,
+				score
+			});
+		}
+	});
+	pairs.sort((a, b) => b.score - a.score);
+	const takenTracks = /* @__PURE__ */ new Set();
+	const takenIdentities = /* @__PURE__ */ new Set();
+	const result = /* @__PURE__ */ new Map();
+	for (const p of pairs) {
+		if (takenTracks.has(p.trackIdx) || takenIdentities.has(p.identityId)) continue;
+		takenTracks.add(p.trackIdx);
+		takenIdentities.add(p.identityId);
+		result.set(candidates[p.trackIdx].trackId, {
+			identityId: p.identityId,
+			score: p.score
+		});
+	}
+	return result;
+}
+var EMPTY_AGGREGATE = Object.freeze({
+	assignedIdentityId: null,
+	confirmations: Object.freeze({})
+});
+/**
+* Fold one frame's match into a track's aggregate. A null match leaves state
+* untouched. An identity is assigned once its cumulative confirmation count
+* reaches `confirmFrames`; once assigned, a different identity must independently
+* reach `confirmFrames` to switch. `changed` is true only on a (re)assignment to
+* a NEW identity, so callers fire the label update exactly once per transition.
+*
+* On each (re)assignment the confirmations record is reset to contain only the
+* newly-assigned identity's count, so any challenger must independently re-reach
+* `confirmFrames` from scratch after any assignment.
+*/
+function updateTrackAggregate(prev, match, opts) {
+	if (match === null) return {
+		state: prev,
+		changed: false
+	};
+	const count = (prev.confirmations[match.identityId] ?? 0) + 1;
+	const confirmations = {
+		...prev.confirmations,
+		[match.identityId]: count
+	};
+	if (count < opts.confirmFrames) return {
+		state: {
+			...prev,
+			confirmations
+		},
+		changed: false
+	};
+	if (prev.assignedIdentityId === match.identityId) return {
+		state: {
+			...prev,
+			confirmations
+		},
+		changed: false
+	};
+	return {
+		state: {
+			assignedIdentityId: match.identityId,
+			confirmations: { [match.identityId]: count }
+		},
+		changed: true
+	};
+}
+//#endregion
 //#region src/pipeline-analytics/face-gallery-provider.ts
 /** Attribution of a face identity NAMED BY THE OPERATOR in the gallery. */
 var OPERATOR_FACE_STEP_ID = "operator:face-gallery";
@@ -25080,6 +25280,19 @@ var FaceGalleryProvider = class {
 		}
 		const currentFace = await this.faceStore.get(faceId);
 		if (!currentFace) throw new Error(`FaceGalleryProvider.assignFace: face disappeared after pre-cleanup: ${faceId}`);
+		const verdict = enrollmentPromiscuity(currentFace.embedding, MODEL_ID, identityId, await this.identityStore.loadGallery());
+		if (verdict !== null) {
+			this.logger.warn("assignFace refused: embedding too close to a FOREIGN identity sample", {
+				tags: { deviceId: currentFace.deviceId },
+				meta: {
+					faceId,
+					identityId,
+					foreignIdentityId: verdict.identityId,
+					cosine: verdict.cosine
+				}
+			});
+			throw new Error(`FaceGalleryProvider.assignFace: embedding is ambiguous — cosine ${verdict.cosine.toFixed(3)} with a sample of another identity (${verdict.identityId}); pick a clearer crop`);
+		}
 		let newKey;
 		if (currentFace.mediaKey) {
 			newKey = await this.mediaStore.reown({
@@ -29988,6 +30201,22 @@ function stillInstantMs(ranges) {
 	if (best === void 0) return void 0;
 	return Math.floor((best.startMs + best.endMs) / 2);
 }
+/**
+* The distinct object classes attached to a visit, most frequent first,
+* capped at {@link MAX_CLIP_LABELS}. Empty when nothing classified overlapped
+* — the caller then omits the field so a motion/audio-only visit keeps its
+* kind label instead of carrying an empty array every consumer length-checks.
+*/
+function dominantLabels(attached) {
+	const counts = /* @__PURE__ */ new Map();
+	for (const a of attached) {
+		if (a.kind !== "object") continue;
+		const name = a.event.className;
+		if (typeof name !== "string" || name.length === 0) continue;
+		counts.set(name, (counts.get(name) ?? 0) + 1);
+	}
+	return [...counts.entries()].toSorted((x, y) => y[1] - x[1]).slice(0, 3).map(([name]) => name);
+}
 function visitsToClips(visits, events, pad, vouched) {
 	const tagged = [
 		...events.object.map((event) => ({
@@ -30008,6 +30237,7 @@ function visitsToClips(visits, events, pad, vouched) {
 		const kind = dominantKind(attached);
 		const withThumb = attached.find((a) => a.kind === kind && a.event.mediaUrl && vouched.has(a.event.id)) ?? attached.find((a) => a.event.mediaUrl && vouched.has(a.event.id));
 		const stillAtMs = stillInstantMs(visit.ranges);
+		const labels = dominantLabels(attached);
 		return {
 			id: `analytics:${visit.startMs}:${visit.endMs}:${VISIT_EVENT_ID}`,
 			source: "analytics",
@@ -30020,7 +30250,8 @@ function visitsToClips(visits, events, pad, vouched) {
 			...stillAtMs !== void 0 ? { stillAtMs } : {},
 			eventIds: attached.slice(0, 24).map((a) => a.event.id),
 			eventCount: attached.length,
-			holes: [...visit.holes]
+			holes: [...visit.holes],
+			...labels.length > 0 ? { labels } : {}
 		};
 	}).toSorted((a, b) => b.timeRange.startMs - a.timeRange.startMs);
 }
@@ -33474,146 +33705,6 @@ async function resolveDefaultEventMedia(deps) {
 	return pickTrackFallbackMedia(await deps.listTrackMedia(trackId)) ?? null;
 }
 //#endregion
-//#region src/pipeline-analytics/pipeline/face-matcher.ts
-/**
-* Count enrolled samples per identity for probes of a matching model+dimension.
-* Only identities meeting `minIdentitySamples` are eligible auto-match targets.
-*/
-function eligibleIdentities(gallery, probeModelId, probeDim, minIdentitySamples) {
-	const counts = /* @__PURE__ */ new Map();
-	for (const s of gallery) {
-		if (s.modelId !== probeModelId) continue;
-		if (s.embedding.length !== probeDim) continue;
-		counts.set(s.identityId, (counts.get(s.identityId) ?? 0) + 1);
-	}
-	const eligible = /* @__PURE__ */ new Set();
-	for (const [id, count] of counts) if (count >= minIdentitySamples) eligible.add(id);
-	return eligible;
-}
-/**
-* Match a probe embedding against the gallery. Only samples with the same
-* `modelId` AND the same dimension are compared (model-version safety). Returns
-* the best identity when its score ≥ threshold and it beats the best OTHER
-* identity by ≥ margin; otherwise null.
-*/
-function matchEmbedding(probe, gallery, opts) {
-	const probeVec = new Float32Array(probe.embedding);
-	const eligible = eligibleIdentities(gallery, probe.modelId, probe.embedding.length, opts.minIdentitySamples ?? 1);
-	const bestByIdentity = /* @__PURE__ */ new Map();
-	for (const s of gallery) {
-		if (s.modelId !== probe.modelId) continue;
-		if (s.embedding.length !== probe.embedding.length) continue;
-		if (!eligible.has(s.identityId)) continue;
-		const score = cosineSimilarity$1(probeVec, new Float32Array(s.embedding));
-		const prev = bestByIdentity.get(s.identityId);
-		if (prev === void 0 || score > prev) bestByIdentity.set(s.identityId, score);
-	}
-	if (bestByIdentity.size === 0) return null;
-	let bestId = null;
-	let bestScore = -Infinity;
-	let secondScore = -Infinity;
-	for (const [id, score] of bestByIdentity) if (score > bestScore) {
-		secondScore = bestScore;
-		bestScore = score;
-		bestId = id;
-	} else if (score > secondScore) secondScore = score;
-	if (bestId === null || bestScore < opts.threshold) return null;
-	if (secondScore > -Infinity && bestScore - secondScore < opts.margin) return null;
-	return {
-		identityId: bestId,
-		score: bestScore
-	};
-}
-/**
-* Assign at most one identity per track AND at most one track per identity for
-* a single frame. Greedy by score: compute every candidate's full ranked match
-* list, then repeatedly take the globally-highest (track, identity) pair whose
-* track and identity are both still free, until none qualify. A losing track
-* falls back to its next-best free identity ≥ threshold. Ties resolve by input order.
-*/
-function assignUniquePerFrame(candidates, gallery, opts) {
-	const pairs = [];
-	candidates.forEach((c, trackIdx) => {
-		const probeVec = new Float32Array(c.embedding);
-		const eligible = eligibleIdentities(gallery, c.modelId, c.embedding.length, opts.minIdentitySamples ?? 1);
-		const bestByIdentity = /* @__PURE__ */ new Map();
-		for (const s of gallery) {
-			if (s.modelId !== c.modelId) continue;
-			if (s.embedding.length !== c.embedding.length) continue;
-			if (!eligible.has(s.identityId)) continue;
-			const score = cosineSimilarity$1(probeVec, new Float32Array(s.embedding));
-			const prev = bestByIdentity.get(s.identityId);
-			if (prev === void 0 || score > prev) bestByIdentity.set(s.identityId, score);
-		}
-		for (const [identityId, score] of bestByIdentity) if (score >= opts.threshold) pairs.push({
-			trackIdx,
-			identityId,
-			score
-		});
-	});
-	pairs.sort((a, b) => b.score - a.score);
-	const takenTracks = /* @__PURE__ */ new Set();
-	const takenIdentities = /* @__PURE__ */ new Set();
-	const result = /* @__PURE__ */ new Map();
-	for (const p of pairs) {
-		if (takenTracks.has(p.trackIdx) || takenIdentities.has(p.identityId)) continue;
-		takenTracks.add(p.trackIdx);
-		takenIdentities.add(p.identityId);
-		result.set(candidates[p.trackIdx].trackId, {
-			identityId: p.identityId,
-			score: p.score
-		});
-	}
-	return result;
-}
-var EMPTY_AGGREGATE = Object.freeze({
-	assignedIdentityId: null,
-	confirmations: Object.freeze({})
-});
-/**
-* Fold one frame's match into a track's aggregate. A null match leaves state
-* untouched. An identity is assigned once its cumulative confirmation count
-* reaches `confirmFrames`; once assigned, a different identity must independently
-* reach `confirmFrames` to switch. `changed` is true only on a (re)assignment to
-* a NEW identity, so callers fire the label update exactly once per transition.
-*
-* On each (re)assignment the confirmations record is reset to contain only the
-* newly-assigned identity's count, so any challenger must independently re-reach
-* `confirmFrames` from scratch after any assignment.
-*/
-function updateTrackAggregate(prev, match, opts) {
-	if (match === null) return {
-		state: prev,
-		changed: false
-	};
-	const count = (prev.confirmations[match.identityId] ?? 0) + 1;
-	const confirmations = {
-		...prev.confirmations,
-		[match.identityId]: count
-	};
-	if (count < opts.confirmFrames) return {
-		state: {
-			...prev,
-			confirmations
-		},
-		changed: false
-	};
-	if (prev.assignedIdentityId === match.identityId) return {
-		state: {
-			...prev,
-			confirmations
-		},
-		changed: false
-	};
-	return {
-		state: {
-			assignedIdentityId: match.identityId,
-			confirmations: { [match.identityId]: count }
-		},
-		changed: true
-	};
-}
-//#endregion
 //#region src/pipeline-analytics/face-recognizer.ts
 /** Attribution of an identity resolved by the in-process ArcFace matcher. */
 var FACE_RECOGNIZER_STEP_ID = "face-recognizer";
@@ -52318,6 +52409,7 @@ var PipelineAnalyticsAddon = class extends BaseAddon {
 				},
 				renderEventMedia: (req) => this.renderEventMedia(req),
 				publishArtifact: async (bytes, mime) => await this.ncArtifactPlane?.publish(bytes, mime) ?? null,
+				viewerUrlBase: async () => pickArtifactBaseUrl(await this.ncEndpoints()),
 				indexArtifact: async (bytes, mime, meta) => await this.ncArtifactPlane?.publishIndexed(bytes, mime, meta) ?? {
 					url: null,
 					artifactId: null

package/dist/pipeline-analytics/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-C4-ljPpt.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-CeFPqm3h.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-post-analysis",
-  "version": "1.2.93",
+  "version": "1.2.95",
   "description": "Post-Analysis bundle — enrichment, embedding-encoder, pipeline-analytics. Multi-entry npm package shipping addons that consume pipeline output.",
   "keywords": [
     "camstack",