@camstack/types 1.2.166 → 1.2.168

package/dist/capabilities/face-gallery.cap.d.ts

@@ -19,6 +19,63 @@ declare const IdentitySampleInfoSchema: z.ZodObject<{
     base64: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type IdentitySampleInfo = z.infer<typeof IdentitySampleInfoSchema>;
+/**
+ * One enrolled sample, judged against the gallery it lives in.
+ *
+ * The gallery is the one input to recognition nobody re-reads: a sample
+ * enrolled from the wrong face keeps voting forever, and because the matches it
+ * pulls then look confident, nobody goes back. The 2026-09-08 audit found
+ * exactly one such pair on this cluster — a sample scoring 0.61 against three
+ * samples of ANOTHER person, enrolled from the same camera in the same minute,
+ * where every other cross-identity pair sits under 0.50.
+ */
+declare const IdentitySampleAuditRowSchema: z.ZodObject<{
+    sampleId: z.ZodString;
+    enrolledAt: z.ZodNumber;
+    deviceId: z.ZodOptional<z.ZodNumber>;
+    source: z.ZodEnum<{
+        detected: "detected";
+        photo: "photo";
+    }>;
+    mediaKey: z.ZodOptional<z.ZodString>;
+    comparable: z.ZodBoolean;
+    selfMean: z.ZodNullable<z.ZodNumber>;
+    bestForeign: z.ZodOptional<z.ZodObject<{
+        identityId: z.ZodString;
+        name: z.ZodString;
+        score: z.ZodNumber;
+    }, z.core.$strip>>;
+    suspicion: z.ZodNumber;
+}, z.core.$strip>;
+export type IdentitySampleAuditRow = z.infer<typeof IdentitySampleAuditRowSchema>;
+declare const IdentitySampleAuditSchema: z.ZodObject<{
+    identityId: z.ZodString;
+    name: z.ZodString;
+    modelId: z.ZodString;
+    totalSamples: z.ZodNumber;
+    comparableSamples: z.ZodNumber;
+    flagged: z.ZodNumber;
+    flagThreshold: z.ZodNumber;
+    rows: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+        sampleId: z.ZodString;
+        enrolledAt: z.ZodNumber;
+        deviceId: z.ZodOptional<z.ZodNumber>;
+        source: z.ZodEnum<{
+            detected: "detected";
+            photo: "photo";
+        }>;
+        mediaKey: z.ZodOptional<z.ZodString>;
+        comparable: z.ZodBoolean;
+        selfMean: z.ZodNullable<z.ZodNumber>;
+        bestForeign: z.ZodOptional<z.ZodObject<{
+            identityId: z.ZodString;
+            name: z.ZodString;
+            score: z.ZodNumber;
+        }, z.core.$strip>>;
+        suspicion: z.ZodNumber;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type IdentitySampleAudit = z.infer<typeof IdentitySampleAuditSchema>;
 declare const FaceInfoSchema: z.ZodObject<{
     faceId: z.ZodString;
     deviceId: z.ZodNumber;
@@ -122,6 +179,47 @@ export declare const faceGalleryCapability: {
             deviceId: z.ZodOptional<z.ZodNumber>;
             base64: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>>, import("./capability-definition.js").CapabilityMethodKind>;
+        /**
+         * Re-analyse ONE person's enrolled samples against the whole gallery.
+         *
+         * A pure read — no write, no inference, just dot products over vectors the
+         * hub already holds (327 of them on this cluster). `admin` for the same
+         * reason `listIdentitySamples` is: the answer names every enrolled person
+         * and how well one person's samples match them, which is the gallery's
+         * shape and not a viewer-level fact.
+         *
+         * Removal deliberately stays `removeSample`: an analysis that could also
+         * delete would be one confirmation away from emptying a gallery.
+         */
+        readonly auditIdentitySamples: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            identityId: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            identityId: z.ZodString;
+            name: z.ZodString;
+            modelId: z.ZodString;
+            totalSamples: z.ZodNumber;
+            comparableSamples: z.ZodNumber;
+            flagged: z.ZodNumber;
+            flagThreshold: z.ZodNumber;
+            rows: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+                sampleId: z.ZodString;
+                enrolledAt: z.ZodNumber;
+                deviceId: z.ZodOptional<z.ZodNumber>;
+                source: z.ZodEnum<{
+                    detected: "detected";
+                    photo: "photo";
+                }>;
+                mediaKey: z.ZodOptional<z.ZodString>;
+                comparable: z.ZodBoolean;
+                selfMean: z.ZodNullable<z.ZodNumber>;
+                bestForeign: z.ZodOptional<z.ZodObject<{
+                    identityId: z.ZodString;
+                    name: z.ZodString;
+                    score: z.ZodNumber;
+                }, z.core.$strip>>;
+                suspicion: z.ZodNumber;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
         readonly removeSample: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
             identityId: z.ZodString;
             sampleId: z.ZodString;

package/dist/capabilities/index.d.ts

@@ -149,7 +149,7 @@ export { type DoorbellPressEvent, DoorbellPressEventSchema, type DoorbellStatus,
 export { type EnumSensorDateTimeFormat, EnumSensorDateTimeFormatSchema, type EnumSensorStatus, EnumSensorStatusSchema, enumSensorCapability, type IEnumSensorProvider, } from './enum-sensor.cap.js';
 export { type EventEmitterStatus, EventEmitterStatusSchema, type EventFire, EventFireSchema, eventEmitterCapability, type IEventEmitterProvider, } from './event-emitter.cap.js';
 export { EventItemSchema, eventsCapability, type IEventsProvider } from './events.cap.js';
-export { type FaceCluster, type FaceInfo, type FaceSortDirection, type FaceSortField, faceGalleryCapability, type Identity, type IdentitySampleInfo, type IFaceGalleryProvider, type ListRecentFacesInput, type SuggestFaceClustersInput, } from './face-gallery.cap.js';
+export { type FaceCluster, type FaceInfo, type FaceSortDirection, type FaceSortField, faceGalleryCapability, type Identity, type IdentitySampleAudit, type IdentitySampleAuditRow, type IdentitySampleInfo, type IFaceGalleryProvider, type ListRecentFacesInput, type SuggestFaceClustersInput, } from './face-gallery.cap.js';
 export { type FanControlStatus, FanControlStatusSchema, type FanDirection, FanDirectionSchema, fanControlCapability, type IFanControlProvider, } from './fan-control.cap.js';
 export { type FeatureProbeStatus, FeatureProbeStatusSchema, featureProbeCapability, type IFeatureProbeProvider, } from './feature-probe.cap.js';
 export { type FloodStatus, FloodStatusSchema, floodCapability, type IFloodProvider, } from './flood.cap.js';

package/dist/capabilities/pipeline-analytics.cap.d.ts

@@ -444,6 +444,11 @@ declare const TrackSchema: z.ZodObject<{
             w: z.ZodNumber;
             h: z.ZodNumber;
         }, z.core.$strip>;
+        source: z.ZodOptional<z.ZodEnum<{
+            frame: "frame";
+            recovery: "recovery";
+        }>>;
+        score: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>>>;
     snapshots: z.ZodReadonly<z.ZodArray<z.ZodObject<{
         timestamp: z.ZodNumber;
@@ -457,6 +462,11 @@ declare const TrackSchema: z.ZodObject<{
                 w: z.ZodNumber;
                 h: z.ZodNumber;
             }, z.core.$strip>;
+            source: z.ZodOptional<z.ZodEnum<{
+                frame: "frame";
+                recovery: "recovery";
+            }>>;
+            score: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strip>;
         mediaKey: z.ZodString;
     }, z.core.$strip>>>;
@@ -1240,6 +1250,11 @@ declare const RecentTracksPageSchema: z.ZodObject<{
                 w: z.ZodNumber;
                 h: z.ZodNumber;
             }, z.core.$strip>;
+            source: z.ZodOptional<z.ZodEnum<{
+                frame: "frame";
+                recovery: "recovery";
+            }>>;
+            score: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strip>>>;
         snapshots: z.ZodReadonly<z.ZodArray<z.ZodObject<{
             timestamp: z.ZodNumber;
@@ -1253,6 +1268,11 @@ declare const RecentTracksPageSchema: z.ZodObject<{
                     w: z.ZodNumber;
                     h: z.ZodNumber;
                 }, z.core.$strip>;
+                source: z.ZodOptional<z.ZodEnum<{
+                    frame: "frame";
+                    recovery: "recovery";
+                }>>;
+                score: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strip>;
             mediaKey: z.ZodString;
         }, z.core.$strip>>>;
@@ -1705,6 +1725,11 @@ export declare const pipelineAnalyticsCapability: {
                     w: z.ZodNumber;
                     h: z.ZodNumber;
                 }, z.core.$strip>;
+                source: z.ZodOptional<z.ZodEnum<{
+                    frame: "frame";
+                    recovery: "recovery";
+                }>>;
+                score: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strip>>>;
             snapshots: z.ZodReadonly<z.ZodArray<z.ZodObject<{
                 timestamp: z.ZodNumber;
@@ -1718,6 +1743,11 @@ export declare const pipelineAnalyticsCapability: {
                         w: z.ZodNumber;
                         h: z.ZodNumber;
                     }, z.core.$strip>;
+                    source: z.ZodOptional<z.ZodEnum<{
+                        frame: "frame";
+                        recovery: "recovery";
+                    }>>;
+                    score: z.ZodOptional<z.ZodNumber>;
                 }, z.core.$strip>;
                 mediaKey: z.ZodString;
             }, z.core.$strip>>>;
@@ -1804,6 +1834,11 @@ export declare const pipelineAnalyticsCapability: {
                     w: z.ZodNumber;
                     h: z.ZodNumber;
                 }, z.core.$strip>;
+                source: z.ZodOptional<z.ZodEnum<{
+                    frame: "frame";
+                    recovery: "recovery";
+                }>>;
+                score: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strip>>>;
             snapshots: z.ZodReadonly<z.ZodArray<z.ZodObject<{
                 timestamp: z.ZodNumber;
@@ -1817,6 +1852,11 @@ export declare const pipelineAnalyticsCapability: {
                         w: z.ZodNumber;
                         h: z.ZodNumber;
                     }, z.core.$strip>;
+                    source: z.ZodOptional<z.ZodEnum<{
+                        frame: "frame";
+                        recovery: "recovery";
+                    }>>;
+                    score: z.ZodOptional<z.ZodNumber>;
                 }, z.core.$strip>;
                 mediaKey: z.ZodString;
             }, z.core.$strip>>>;
@@ -1932,6 +1972,11 @@ export declare const pipelineAnalyticsCapability: {
                     w: z.ZodNumber;
                     h: z.ZodNumber;
                 }, z.core.$strip>;
+                source: z.ZodOptional<z.ZodEnum<{
+                    frame: "frame";
+                    recovery: "recovery";
+                }>>;
+                score: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strip>>>;
             snapshots: z.ZodReadonly<z.ZodArray<z.ZodObject<{
                 timestamp: z.ZodNumber;
@@ -1945,6 +1990,11 @@ export declare const pipelineAnalyticsCapability: {
                         w: z.ZodNumber;
                         h: z.ZodNumber;
                     }, z.core.$strip>;
+                    source: z.ZodOptional<z.ZodEnum<{
+                        frame: "frame";
+                        recovery: "recovery";
+                    }>>;
+                    score: z.ZodOptional<z.ZodNumber>;
                 }, z.core.$strip>;
                 mediaKey: z.ZodString;
             }, z.core.$strip>>>;
@@ -2056,6 +2106,11 @@ export declare const pipelineAnalyticsCapability: {
                         w: z.ZodNumber;
                         h: z.ZodNumber;
                     }, z.core.$strip>;
+                    source: z.ZodOptional<z.ZodEnum<{
+                        frame: "frame";
+                        recovery: "recovery";
+                    }>>;
+                    score: z.ZodOptional<z.ZodNumber>;
                 }, z.core.$strip>>>;
                 snapshots: z.ZodReadonly<z.ZodArray<z.ZodObject<{
                     timestamp: z.ZodNumber;
@@ -2069,6 +2124,11 @@ export declare const pipelineAnalyticsCapability: {
                             w: z.ZodNumber;
                             h: z.ZodNumber;
                         }, z.core.$strip>;
+                        source: z.ZodOptional<z.ZodEnum<{
+                            frame: "frame";
+                            recovery: "recovery";
+                        }>>;
+                        score: z.ZodOptional<z.ZodNumber>;
                     }, z.core.$strip>;
                     mediaKey: z.ZodString;
                 }, z.core.$strip>>>;

package/dist/generated/addon-api.d.ts

@@ -2977,6 +2977,13 @@ export type AppRouter = TrpcCoreRouter<{
             output: z.infer<typeof faceGalleryCapability.methods.listIdentitySamples.output>;
             meta: object;
         }>;
+        auditIdentitySamples: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof faceGalleryCapability.methods.auditIdentitySamples.input>;
+            output: z.infer<typeof faceGalleryCapability.methods.auditIdentitySamples.output>;
+            meta: object;
+        }>;
         removeSample: TRPCMutationProcedure<{
             input: {
                 [x: string]: unknown;

package/dist/generated/method-access-map.d.ts

@@ -6,7 +6,7 @@
  * scope+access check inside `protectedProcedure` (see
  * `server/backend/src/api/trpc/trpc.middleware.ts`).
  *
- * Coverage: 1021 method paths across 129 capabilities.
+ * Coverage: 1022 method paths across 129 capabilities.
  */
 import type { CapabilityMethodAccess } from '../capabilities/capability-definition.js';
 export interface MethodAccessRecord {

package/dist/generated/system-proxy.d.ts

@@ -71,7 +71,7 @@ export interface SystemProxy {
     readonly deviceManager: Pick<InferProvider<typeof deviceManagerCapability>, 'allocateDeviceId' | 'migrateDevice' | 'registerDevice' | 'removeDevice' | 'persistConfig' | 'getRoleDisplayDefaults' | 'setRoleDisplayDefaults' | 'listLocations' | 'addLocation' | 'removeLocation' | 'renameLocation' | 'listPersistedByAddon' | 'listAll' | 'getChildren' | 'getChildrenBatch' | 'getLinkedDevicesBatch' | 'removeByIntegration' | 'getBindingsBatch' | 'getAllBindings' | 'listWrappersForCap' | 'listBindableCapsForDeviceType' | 'discoverDevices' | 'adoptDevice' | 'getCreationSchema' | 'createDevice' | 'testCreationField' | 'adoptionListCandidateFilters' | 'adoptionListCandidates' | 'adoptionRefresh' | 'adoptionAdopt' | 'adoptionRelease' | 'adoptionStartJob' | 'adoptionListJobs' | 'adoptionCancelJob' | 'adoptionResync' | 'discoveryProviders' | 'discoverAllProviders' | 'discoverProvider' | 'providerCreationType' | 'providerDiscoveryParamsSchema' | 'getDeviceStatusAggregateBatch'>;
     readonly deviceProvider: Pick<InferProvider<typeof deviceProviderCapability>, 'start' | 'stop' | 'getStatus' | 'getDevices' | 'supportsDiscovery' | 'discoverDevices' | 'getDiscoveryParamsSchema' | 'getManualCreationType' | 'adoptDiscoveredDevice' | 'supportsManualCreation' | 'getChildCreationSchema' | 'createDevice' | 'testCreationField'>;
     readonly deviceState: Pick<InferProvider<typeof deviceStateCapability>, 'getAllSnapshots'>;
-    readonly faceGallery: Pick<InferProvider<typeof faceGalleryCapability>, 'listIdentities' | 'createIdentity' | 'renameIdentity' | 'deleteIdentity' | 'listIdentitySamples' | 'removeSample' | 'getFaceMedia' | 'assignFace' | 'unassignFace' | 'deleteFace' | 'assignFaces' | 'unassignFaces' | 'suggestFaceClusters'>;
+    readonly faceGallery: Pick<InferProvider<typeof faceGalleryCapability>, 'listIdentities' | 'createIdentity' | 'renameIdentity' | 'deleteIdentity' | 'listIdentitySamples' | 'auditIdentitySamples' | 'removeSample' | 'getFaceMedia' | 'assignFace' | 'unassignFace' | 'deleteFace' | 'assignFaces' | 'unassignFaces' | 'suggestFaceClusters'>;
     readonly integrations: Pick<InferProvider<typeof integrationsCapability>, 'list' | 'get' | 'getByAddonId' | 'create' | 'update' | 'delete' | 'getSettings' | 'setSettings' | 'getAvailableTypes' | 'testConnection'>;
     readonly llm: Pick<InferProvider<typeof llmCapability>, 'generate' | 'generateVision' | 'cancel' | 'listProfileKinds' | 'listProfiles' | 'upsertProfile' | 'deleteProfile' | 'testProfile' | 'listModels' | 'getDefaults' | 'setDefault' | 'getUsage' | 'listModelCatalog' | 'listRuntimeNodes' | 'listNodeModels' | 'resolveModelRef' | 'installModel' | 'deleteModel' | 'getRuntimeStatus' | 'startRuntime' | 'stopRuntime'>;
     readonly localNetwork: Pick<InferProvider<typeof localNetworkCapability>, 'list' | 'getPreferred' | 'getConnectionEndpoints' | 'getNotificationEndpoint' | 'setNotificationEndpoint' | 'getViewerEndpoints' | 'setViewerEndpoints' | 'getAllowedAddresses' | 'setAllowedAddresses' | 'resetAllowlistToBestMatch' | 'getTlsStatus' | 'regenerateCertificate' | 'uploadCertificate' | 'downloadCa' | 'revertToGeneratedCertificate'>;

package/dist/index.js

@@ -18568,11 +18568,30 @@ var SensorEventSchema = zod.z.object({
 	value: zod.z.record(zod.z.string(), zod.z.unknown()).nullable(),
 	timestamp: zod.z.number()
 });
+/**
+* One stored sighting on a track's trajectory.
+*
+* The array these live in is returned in TIME order (D399) — it is APPENDED in
+* arrival order, and the two detector passes interleave, so a consumer must not
+* assume the two are the same on a row written by an older build.
+*/
 var TrackPositionSchema = zod.z.object({
 	x: zod.z.number(),
 	y: zod.z.number(),
 	timestamp: zod.z.number(),
-	bbox: BoundingBoxSchema
+	bbox: BoundingBoxSchema,
+	/**
+	* Which detector pass measured this box (D399): `frame` is the full-frame
+	* pass on the analysis raster, `recovery` is the native-resolution
+	* small-subject second pass (D377/D378). Both write into one array, and until
+	* this field existed the only way to tell them apart was that full-frame boxes
+	* are exact multiples of 1.2 while recovery boxes are full-precision floats.
+	* Absent on rows written before D399.
+	*/
+	source: zod.z.enum(["frame", "recovery"]).optional(),
+	/** Detection score of this box, so a position can be weighed and not only
+	*  plotted. Absent on rows written before D399. */
+	score: zod.z.number().optional()
 });
 var TrackSnapshotSchema = zod.z.object({
 	timestamp: zod.z.number(),
@@ -18999,14 +19018,25 @@ var TrackSchema = zod.z.object({
 	*/
 	hasRider: zod.z.boolean().optional(),
 	/**
-	* WHY this track ended without a NATIVE best-shot tile
-	* ([D276](../decisions/adr-0276-a-stand-in-tile-is-provisional-and-a-close-says-why.md)) —
+	* WHY this track ended without a NATIVE best-shot FRAME
+	* ([D276](../decisions/adr-0276-a-stand-in-tile-is-provisional-and-a-close-says-why.md),
+	* widened by [D400](../decisions/adr-0400-the-picture-is-judged-on-what-is-delivered.md)) —
 	* a composed token line (`no-key-frame capture=keyframe:native-missx4`,
-	* `derive-returned-null tile=standin`, …) written at close and CLEARED by
-	* the late-keyFrame upgrade when a native tile lands after all. The
-	* operator-facing answer to "perché manca l'immagine?" on a track whose
+	* `derive-returned-null tile=standin`,
+	* `native-tile tile=native no-key-frame-at-close`, …) written at close and
+	* CLEARED by the late-keyFrame upgrade when a native tile lands after all.
+	* The operator-facing answer to "perché manca l'immagine?" on a track whose
 	* tile is a face/plate stand-in, a raster crop, or an icon.
 	*
+	* **`no-key-frame-at-close` (D400).** The line used to be written ONLY when
+	* the TILE ranked below native, so a track whose thumbnail landed natively
+	* while its key frame missed carried no reason at all — three of the four
+	* `MISSING_KEYFRAME` tracks in the 2026-09-07 operator audit were exactly
+	* that shape, and their "niente ultimo" had no cause anywhere on the row.
+	* The key frame is the head of a cascade (`keyFrame ⇒ keyFrameSmall ⇒ the
+	* lastFrame copy source`), so its absence is now on this line whatever the
+	* tile ended up being.
+	*
 	* **Absent ≠ "missed silently"**: a row written before the column, a hub
 	* that predates the field, and every track whose tile landed native all
 	* omit it. Render nothing when absent.
@@ -27515,6 +27545,59 @@ var IdentitySampleInfoSchema = zod.z.object({
 	deviceId: zod.z.number().int().optional(),
 	base64: zod.z.string().optional()
 });
+/**
+* One enrolled sample, judged against the gallery it lives in.
+*
+* The gallery is the one input to recognition nobody re-reads: a sample
+* enrolled from the wrong face keeps voting forever, and because the matches it
+* pulls then look confident, nobody goes back. The 2026-09-08 audit found
+* exactly one such pair on this cluster — a sample scoring 0.61 against three
+* samples of ANOTHER person, enrolled from the same camera in the same minute,
+* where every other cross-identity pair sits under 0.50.
+*/
+var IdentitySampleAuditRowSchema = zod.z.object({
+	sampleId: zod.z.string(),
+	enrolledAt: zod.z.number().int(),
+	deviceId: zod.z.number().int().optional(),
+	source: zod.z.enum(["detected", "photo"]),
+	/** The enrolled crop's media key, so the panel can show the evidence. */
+	mediaKey: zod.z.string().optional(),
+	/**
+	* False = the sample is stamped with a DIFFERENT face model, and a cosine
+	* across feature spaces is a well-formed float with no meaning. Every number
+	* below then says nothing — it must read as "cannot say", never as an
+	* accusation and never as a clean bill: this list ends in a Remove button.
+	*/
+	comparable: zod.z.boolean(),
+	/** Mean cosine against this person's other samples. Null when there are none
+	*  to compare with — never 0, which would read as "opposite". */
+	selfMean: zod.z.number().nullable(),
+	/** The other person this sample looks most like, when it looks like one.
+	*  This is the half that convicts: not looking like yourself can be a hard
+	*  angle; looking like someone the gallery can NAME is a mis-enrolment. */
+	bestForeign: zod.z.object({
+		identityId: zod.z.string(),
+		name: zod.z.string(),
+		score: zod.z.number()
+	}).optional(),
+	/** 0 = nothing to say. Higher = look at this one sooner. */
+	suspicion: zod.z.number()
+});
+var IdentitySampleAuditSchema = zod.z.object({
+	identityId: zod.z.string(),
+	name: zod.z.string(),
+	/** The cluster face model every comparison was made in. */
+	modelId: zod.z.string(),
+	totalSamples: zod.z.number().int(),
+	comparableSamples: zod.z.number().int(),
+	flagged: zod.z.number().int(),
+	/** The bar `flagged` counts against, so the panel states the RULE and not
+	*  only its current result. */
+	flagThreshold: zod.z.number(),
+	/** Worst first. A row with nothing to say still appears, at the bottom: the
+	*  operator asked to see the gallery, not only its accusations. */
+	rows: zod.z.array(IdentitySampleAuditRowSchema).readonly()
+});
 var FaceInfoSchema = zod.z.object({
 	faceId: zod.z.string(),
 	deviceId: zod.z.number().int(),
@@ -27676,6 +27759,19 @@ includeCrops: zod.z.boolean().optional() }).optional(), zod.z.array(IdentitySche
 			auth: "admin"
 		}),
 		listIdentitySamples: require_sleep.method(zod.z.object({ identityId: zod.z.string() }), zod.z.array(IdentitySampleInfoSchema).readonly()),
+		/**
+		* Re-analyse ONE person's enrolled samples against the whole gallery.
+		*
+		* A pure read — no write, no inference, just dot products over vectors the
+		* hub already holds (327 of them on this cluster). `admin` for the same
+		* reason `listIdentitySamples` is: the answer names every enrolled person
+		* and how well one person's samples match them, which is the gallery's
+		* shape and not a viewer-level fact.
+		*
+		* Removal deliberately stays `removeSample`: an analysis that could also
+		* delete would be one confirmation away from emptying a gallery.
+		*/
+		auditIdentitySamples: require_sleep.method(zod.z.object({ identityId: zod.z.string().min(1) }), IdentitySampleAuditSchema, { auth: "admin" }),
 		removeSample: require_sleep.method(zod.z.object({
 			identityId: zod.z.string(),
 			sampleId: zod.z.string()
@@ -42940,6 +43036,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"faceGallery.auditIdentitySamples": {
+		capName: "face-gallery",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"faceGallery.createIdentity": {
 		capName: "face-gallery",
 		capScope: "system",
@@ -50166,6 +50268,7 @@ function createSystemProxy(api) {
 			renameIdentity: (input) => dispatch("faceGallery", "renameIdentity", "mutation", input),
 			deleteIdentity: (input) => dispatch("faceGallery", "deleteIdentity", "mutation", input),
 			listIdentitySamples: (input) => dispatch("faceGallery", "listIdentitySamples", "query", input),
+			auditIdentitySamples: (input) => dispatch("faceGallery", "auditIdentitySamples", "query", input),
 			removeSample: (input) => dispatch("faceGallery", "removeSample", "mutation", input),
 			getFaceMedia: (input) => dispatch("faceGallery", "getFaceMedia", "query", input),
 			assignFace: (input) => dispatch("faceGallery", "assignFace", "mutation", input),

package/dist/index.mjs

@@ -18567,11 +18567,30 @@ var SensorEventSchema = z.object({
 	value: z.record(z.string(), z.unknown()).nullable(),
 	timestamp: z.number()
 });
+/**
+* One stored sighting on a track's trajectory.
+*
+* The array these live in is returned in TIME order (D399) — it is APPENDED in
+* arrival order, and the two detector passes interleave, so a consumer must not
+* assume the two are the same on a row written by an older build.
+*/
 var TrackPositionSchema = z.object({
 	x: z.number(),
 	y: z.number(),
 	timestamp: z.number(),
-	bbox: BoundingBoxSchema
+	bbox: BoundingBoxSchema,
+	/**
+	* Which detector pass measured this box (D399): `frame` is the full-frame
+	* pass on the analysis raster, `recovery` is the native-resolution
+	* small-subject second pass (D377/D378). Both write into one array, and until
+	* this field existed the only way to tell them apart was that full-frame boxes
+	* are exact multiples of 1.2 while recovery boxes are full-precision floats.
+	* Absent on rows written before D399.
+	*/
+	source: z.enum(["frame", "recovery"]).optional(),
+	/** Detection score of this box, so a position can be weighed and not only
+	*  plotted. Absent on rows written before D399. */
+	score: z.number().optional()
 });
 var TrackSnapshotSchema = z.object({
 	timestamp: z.number(),
@@ -18998,14 +19017,25 @@ var TrackSchema = z.object({
 	*/
 	hasRider: z.boolean().optional(),
 	/**
-	* WHY this track ended without a NATIVE best-shot tile
-	* ([D276](../decisions/adr-0276-a-stand-in-tile-is-provisional-and-a-close-says-why.md)) —
+	* WHY this track ended without a NATIVE best-shot FRAME
+	* ([D276](../decisions/adr-0276-a-stand-in-tile-is-provisional-and-a-close-says-why.md),
+	* widened by [D400](../decisions/adr-0400-the-picture-is-judged-on-what-is-delivered.md)) —
 	* a composed token line (`no-key-frame capture=keyframe:native-missx4`,
-	* `derive-returned-null tile=standin`, …) written at close and CLEARED by
-	* the late-keyFrame upgrade when a native tile lands after all. The
-	* operator-facing answer to "perché manca l'immagine?" on a track whose
+	* `derive-returned-null tile=standin`,
+	* `native-tile tile=native no-key-frame-at-close`, …) written at close and
+	* CLEARED by the late-keyFrame upgrade when a native tile lands after all.
+	* The operator-facing answer to "perché manca l'immagine?" on a track whose
 	* tile is a face/plate stand-in, a raster crop, or an icon.
 	*
+	* **`no-key-frame-at-close` (D400).** The line used to be written ONLY when
+	* the TILE ranked below native, so a track whose thumbnail landed natively
+	* while its key frame missed carried no reason at all — three of the four
+	* `MISSING_KEYFRAME` tracks in the 2026-09-07 operator audit were exactly
+	* that shape, and their "niente ultimo" had no cause anywhere on the row.
+	* The key frame is the head of a cascade (`keyFrame ⇒ keyFrameSmall ⇒ the
+	* lastFrame copy source`), so its absence is now on this line whatever the
+	* tile ended up being.
+	*
 	* **Absent ≠ "missed silently"**: a row written before the column, a hub
 	* that predates the field, and every track whose tile landed native all
 	* omit it. Render nothing when absent.
@@ -27514,6 +27544,59 @@ var IdentitySampleInfoSchema = z.object({
 	deviceId: z.number().int().optional(),
 	base64: z.string().optional()
 });
+/**
+* One enrolled sample, judged against the gallery it lives in.
+*
+* The gallery is the one input to recognition nobody re-reads: a sample
+* enrolled from the wrong face keeps voting forever, and because the matches it
+* pulls then look confident, nobody goes back. The 2026-09-08 audit found
+* exactly one such pair on this cluster — a sample scoring 0.61 against three
+* samples of ANOTHER person, enrolled from the same camera in the same minute,
+* where every other cross-identity pair sits under 0.50.
+*/
+var IdentitySampleAuditRowSchema = z.object({
+	sampleId: z.string(),
+	enrolledAt: z.number().int(),
+	deviceId: z.number().int().optional(),
+	source: z.enum(["detected", "photo"]),
+	/** The enrolled crop's media key, so the panel can show the evidence. */
+	mediaKey: z.string().optional(),
+	/**
+	* False = the sample is stamped with a DIFFERENT face model, and a cosine
+	* across feature spaces is a well-formed float with no meaning. Every number
+	* below then says nothing — it must read as "cannot say", never as an
+	* accusation and never as a clean bill: this list ends in a Remove button.
+	*/
+	comparable: z.boolean(),
+	/** Mean cosine against this person's other samples. Null when there are none
+	*  to compare with — never 0, which would read as "opposite". */
+	selfMean: z.number().nullable(),
+	/** The other person this sample looks most like, when it looks like one.
+	*  This is the half that convicts: not looking like yourself can be a hard
+	*  angle; looking like someone the gallery can NAME is a mis-enrolment. */
+	bestForeign: z.object({
+		identityId: z.string(),
+		name: z.string(),
+		score: z.number()
+	}).optional(),
+	/** 0 = nothing to say. Higher = look at this one sooner. */
+	suspicion: z.number()
+});
+var IdentitySampleAuditSchema = z.object({
+	identityId: z.string(),
+	name: z.string(),
+	/** The cluster face model every comparison was made in. */
+	modelId: z.string(),
+	totalSamples: z.number().int(),
+	comparableSamples: z.number().int(),
+	flagged: z.number().int(),
+	/** The bar `flagged` counts against, so the panel states the RULE and not
+	*  only its current result. */
+	flagThreshold: z.number(),
+	/** Worst first. A row with nothing to say still appears, at the bottom: the
+	*  operator asked to see the gallery, not only its accusations. */
+	rows: z.array(IdentitySampleAuditRowSchema).readonly()
+});
 var FaceInfoSchema = z.object({
 	faceId: z.string(),
 	deviceId: z.number().int(),
@@ -27675,6 +27758,19 @@ includeCrops: z.boolean().optional() }).optional(), z.array(IdentitySchema).read
 			auth: "admin"
 		}),
 		listIdentitySamples: method(z.object({ identityId: z.string() }), z.array(IdentitySampleInfoSchema).readonly()),
+		/**
+		* Re-analyse ONE person's enrolled samples against the whole gallery.
+		*
+		* A pure read — no write, no inference, just dot products over vectors the
+		* hub already holds (327 of them on this cluster). `admin` for the same
+		* reason `listIdentitySamples` is: the answer names every enrolled person
+		* and how well one person's samples match them, which is the gallery's
+		* shape and not a viewer-level fact.
+		*
+		* Removal deliberately stays `removeSample`: an analysis that could also
+		* delete would be one confirmation away from emptying a gallery.
+		*/
+		auditIdentitySamples: method(z.object({ identityId: z.string().min(1) }), IdentitySampleAuditSchema, { auth: "admin" }),
 		removeSample: method(z.object({
 			identityId: z.string(),
 			sampleId: z.string()
@@ -42932,6 +43028,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"faceGallery.auditIdentitySamples": {
+		capName: "face-gallery",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"faceGallery.createIdentity": {
 		capName: "face-gallery",
 		capScope: "system",
@@ -50158,6 +50260,7 @@ function createSystemProxy(api) {
 			renameIdentity: (input) => dispatch("faceGallery", "renameIdentity", "mutation", input),
 			deleteIdentity: (input) => dispatch("faceGallery", "deleteIdentity", "mutation", input),
 			listIdentitySamples: (input) => dispatch("faceGallery", "listIdentitySamples", "query", input),
+			auditIdentitySamples: (input) => dispatch("faceGallery", "auditIdentitySamples", "query", input),
 			removeSample: (input) => dispatch("faceGallery", "removeSample", "mutation", input),
 			getFaceMedia: (input) => dispatch("faceGallery", "getFaceMedia", "query", input),
 			assignFace: (input) => dispatch("faceGallery", "assignFace", "mutation", input),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/types",
-  "version": "1.2.166",
+  "version": "1.2.168",
   "description": "Shared types, interfaces, and model catalogs for the CamStack detection ecosystem",
   "keywords": [
     "camstack",