@camstack/addon-auth 1.2.161 → 1.2.163

package/dist/{dist-DW1QwbXC.js → dist-C4tUr6eU.js}

@@ -32,7 +32,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 }) : target, mod));
 var __toCommonJS = (mod) => __hasOwnProp.call(mod, "module.exports") ? mod["module.exports"] : __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 require("node:crypto");
-//#region ../types/dist/event-category-DOl51-Ij.mjs
+//#region ../types/dist/event-category-BfJwUd2S.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -349,6 +349,15 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineDetectionBlind"] = "pipeline.detection-blind";
 	/**
+	* A camera's motion source has fired constantly with no subject for an hour
+	* (motion duty or session count over the bar, zero detections) — it is not
+	* blind, its motion zones or sensitivity want tuning (D907). Paired with
+	* {@link PipelineMotionCalm}.
+	*/
+	EventCategory["PipelineMotionNoisy"] = "pipeline.motion-noisy";
+	/** The recovery edge of {@link PipelineMotionNoisy}: the motion fell back, or a detection arrived. */
+	EventCategory["PipelineMotionCalm"] = "pipeline.motion-calm";
+	/**
 	* Per-camera pipeline config was mutated by the orchestrator
 	* (3-level settings change via `setAgentAddonDefaults` /
 	* `setCameraStepToggle` / `setCameraPipelineForAgent` or a
@@ -720,6 +729,14 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["BackupRestored"] = "backup.restored";
 	EventCategory["NotificationDispatched"] = "notification.dispatched";
 	EventCategory["NotificationFailed"] = "notification.failed";
+	/**
+	* A notification rule that cannot work (D905): its stored row does not load,
+	* or it still names a device / delivery target the prune CONFIRMED deleted.
+	* One edge per rule per distinct set of reasons; never on an unanswered read.
+	*/
+	EventCategory["NotificationRuleBroken"] = "notification.rule-broken";
+	/** The clear of {@link NotificationRuleBroken}: the rule loads and names nothing deleted. */
+	EventCategory["NotificationRuleRepaired"] = "notification.rule-repaired";
 	EventCategory["DeviceUpdated"] = "device.updated";
 	/**
 	* Transport-level connectivity. Emitted by the device driver when
@@ -5580,7 +5597,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-_sV1BE2f.mjs
+//#region ../types/dist/sleep-DJFUfKvA.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -8179,7 +8196,7 @@ var EntryDescriptorSchema = object({
 	/** JSON Schema of the entry body; `secret: true` marks a password field. */
 	fields: record(string(), unknown())
 }).strict();
-/** What crosses the wire and sits in the engine's catalog: JSON only, no Zod. */
+/** What crosses the wire from an addon: JSON only, no Zod. An unknown key is refused. */
 var RecordKindDeclarationSchema = object({
 	database: _enum(RECORD_DATABASES).default("settings"),
 	class: _enum(RECORD_CLASSES),
@@ -8198,14 +8215,6 @@ var RecordKindDeclarationSchema = object({
 	secretPaths: array(string().min(1)).default([]),
 	/** The id key of each array that carries a secret (`{ headers: 'name' }`). */
 	secretArrayKeys: record(string(), string()).default({}),
-	/**
-	* RETIRED (D900): the legacy table a kind adopted from during the records
-	* migration. Nothing declares it any more and nothing reads it; the schema
-	* still ACCEPTS it because the catalog rows the migration wrote carry it
-	* (an orphaned kind is never redeclared) and an addon built before the
-	* removal still sends it. Never set it.
-	*/
-	adoptsFrom: string().min(1).optional(),
 	/** Kinds that must agree through `transact` sit in one file under one family name. */
 	transactFamily: string().min(1).optional(),
 	entry: EntryDescriptorSchema.optional()
@@ -13100,17 +13109,6 @@ object({
 	createdAt: number(),
 	updatedAt: number()
 });
-object({
-	id: string(),
-	label: string(),
-	isAdmin: boolean().default(false),
-	allowedProviders: AllowedProviderSchema,
-	allowedDevices: AllowedDevicesSchema,
-	tokenHash: string(),
-	tokenPrefix: string(),
-	createdAt: number(),
-	lastUsedAt: number().optional()
-});
 object({
 	id: string(),
 	userId: string(),
@@ -17245,16 +17243,36 @@ var RecordKindStateSchema = _enum([
 var DeclareKindResultSchema = object({
 	kindId: number().int(),
 	state: RecordKindStateSchema,
-	createdIndexes: array(string()),
-	/**
-	* RETIRED (D900): always `null`. It carried the records-migration boot guard;
-	* it stays on the wire, null, because an addon built before the removal reads
-	* an ABSENT field as "adoption pending" and refuses to start.
-	*/
-	adoptionPending: _null()
+	createdIndexes: array(string())
 });
 /** Keychain refs a write released (the old marker is gone from the row): the owner deletes the values. */
 var SecretRefsList = array(string());
+/**
+* One op of a `transact`: the single-row writes, each on a kind of the caller.
+* All ops of one call share ONE database file and ONE `transactFamily`.
+*/
+var RecordTransactOpSchema = discriminatedUnion("op", [
+	object({
+		op: literal("put"),
+		kind: RecordKindNameSchema,
+		record: RecordInputSchema,
+		ifRev: number().int().min(0).optional()
+	}),
+	object({
+		op: literal("patch"),
+		kind: RecordKindNameSchema,
+		id: RecordIdSchema,
+		data: RecordBodySchema,
+		at: number().int().nullable().optional(),
+		expiresAt: number().int().nullable().optional(),
+		ifRev: number().int().min(1).optional()
+	}),
+	object({
+		op: literal("delete"),
+		kind: RecordKindNameSchema,
+		id: RecordIdSchema
+	})
+]);
 var RecordSecretRefsSchema = record(string(), record(string(), string()));
 method(object({ kinds: record(RecordKindNameSchema, RecordKindDeclarationSchema) }), object({ kinds: record(string(), DeclareKindResultSchema) }), {
 	kind: "mutation",
@@ -17361,6 +17379,16 @@ method(object({ kinds: record(RecordKindNameSchema, RecordKindDeclarationSchema)
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({ ops: array(RecordTransactOpSchema).min(1).max(RECORD_BATCH_MAX) }), object({
+	results: array(object({
+		rev: number().int().nullable(),
+		deleted: boolean()
+	})),
+	releasedRefs: SecretRefsList,
+	secretRefs: SecretRefsList
+}), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({
 	deviceId: number().int(),
 	kinds: array(RecordKindNameSchema).optional()
@@ -42745,9 +42773,13 @@ var NcSystemEventKindSchema = _enum([
 	"node-updating",
 	"node-inference-unavailable",
 	"detection-blind",
+	"motion-noisy",
+	"motion-calm",
 	"recording-stalled",
 	"recording-healthy",
 	"recording-degraded",
+	"device-attention-required",
+	"device-attention-resolved",
 	"storage-location-low",
 	"storage-location-critical",
 	"storage-location-ok",
@@ -42771,6 +42803,8 @@ var NcSystemEventKindSchema = _enum([
 	"alert-critical",
 	"alert-error",
 	"alert-critical-resolved",
+	"rule-broken",
+	"rule-repaired",
 	"camera-online",
 	"camera-offline",
 	"camera-disabled",
@@ -55253,6 +55287,16 @@ object({
 	powerState: string().nullable(),
 	saltLevel: DishwasherConsumableLevelSchema.nullable(),
 	rinseAidLevel: DishwasherConsumableLevelSchema.nullable(),
+	/**
+	* True while the appliance asks for its filter to be cleaned (smart-filter, filter-system or
+	* combined care-and-filter reminder raised); false when every such reminder reads clear; null
+	* when none is reported. A cleared reminder is not an unknown one.
+	*/
+	filterCleaningDue: boolean().nullable(),
+	/** True while the machine-care (descaling / cleaning-program) reminder is raised; false when clear; null when not reported. */
+	machineCareDue: boolean().nullable(),
+	/** Program runs left before the machine-care reminder is due; null when the appliance does not say. */
+	machineCareRemainingRuns: number().int().nonnegative().nullable(),
 	/** Option states: null when the appliance does not expose the option or has not said. */
 	halfLoad: boolean().nullable(),
 	hygienePlus: boolean().nullable(),
@@ -61870,16 +61914,6 @@ var UpdateUserInputSchema = object({
 	allowedDevices: record(string(), union([array(string()), literal("*")])).optional(),
 	scopes: array(TokenScopeSchema).optional()
 });
-var ApiKeySummarySchema = object({
-	id: string(),
-	label: string(),
-	isAdmin: boolean().default(false),
-	allowedProviders: union([array(string()), literal("*")]).optional(),
-	allowedDevices: record(string(), union([array(string()), literal("*")])).optional(),
-	tokenPrefix: string(),
-	createdAt: number(),
-	lastUsedAt: number().optional()
-});
 var OauthSessionSummarySchema = object({
 	id: string(),
 	userId: string(),
@@ -61901,8 +61935,7 @@ var TotpStatusSchema = object({
 	confirmedAt: number().nullable()
 });
 /**
-* user-management — singleton capability for user accounts and the
-* legacy API-key rows.
+* user-management — singleton capability for user accounts.
 *
 * v2 model: every method gated by `auth: 'admin'`. Admin-only delegation
 * — the subset check on `setUserScopes` is moot
@@ -61958,10 +61991,6 @@ method(_void(), array(UserSummarySchema), { auth: "admin" }), method(CreateUserI
 }), UserSummarySchema.extend({ passwordHash: string() }).nullable(), {
 	kind: "mutation",
 	access: "view"
-}), method(_void(), array(ApiKeySummarySchema), { auth: "admin" }), method(object({ id: string() }), object({ success: literal(true) }), {
-	kind: "mutation",
-	auth: "admin",
-	access: "delete"
 }), method(object({ userId: string() }), TotpSetupResultSchema, {
 	kind: "mutation",
 	auth: "admin",
@@ -69474,6 +69503,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"records.transact": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"sceneMonitor.captureReference": {
 		capName: "scene-monitor",
 		capScope: "device",
@@ -70806,12 +70841,6 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"userManagement.listApiKeys": {
-		capName: "user-management",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
 	"userManagement.listExternalIdentities": {
 		capName: "user-management",
 		capScope: "system",
@@ -70866,12 +70895,6 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"userManagement.revokeApiKey": {
-		capName: "user-management",
-		capScope: "system",
-		addonId: null,
-		access: "delete"
-	},
 	"userManagement.revokeOauthSession": {
 		capName: "user-management",
 		capScope: "system",
@@ -74236,9 +74259,13 @@ new Map(Object.entries({
 	"stream-online": "device-events",
 	"stream-offline": "device-events",
 	"detection-blind": "device-events",
+	"motion-noisy": "device-events",
+	"motion-calm": "device-events",
 	"recording-stalled": "device-events",
 	"recording-healthy": "device-events",
 	"recording-degraded": "device-events",
+	"device-attention-required": "device-events",
+	"device-attention-resolved": "device-events",
 	"node-online": "system",
 	"node-offline": "system",
 	"node-restarting": "system",
@@ -74255,6 +74282,8 @@ new Map(Object.entries({
 	"alert-critical": "system",
 	"alert-error": "system",
 	"alert-critical-resolved": "system",
+	"rule-broken": "system",
+	"rule-repaired": "system",
 	"storage-location-low": "system",
 	"storage-location-critical": "system",
 	"storage-location-ok": "system",
@@ -74319,6 +74348,12 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 		label: "Detecting nothing",
 		kinds: ["detection-blind"]
 	},
+	{
+		id: "motion-noise",
+		family: "device-events",
+		label: "Motion without a subject",
+		kinds: ["motion-noisy", "motion-calm"]
+	},
 	{
 		id: "recording",
 		family: "device-events",
@@ -74329,6 +74364,12 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 			"recording-degraded"
 		]
 	},
+	{
+		id: "device-attention",
+		family: "device-events",
+		label: "Needs attention",
+		kinds: ["device-attention-required", "device-attention-resolved"]
+	},
 	{
 		id: "nodes",
 		family: "system",
@@ -74389,6 +74430,12 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 			"alert-critical-resolved"
 		]
 	},
+	{
+		id: "rule-health",
+		family: "system",
+		label: "Notification rules",
+		kinds: ["rule-broken", "rule-repaired"]
+	},
 	{
 		id: "alarm",
 		family: "alarm",
@@ -74462,6 +74509,7 @@ var ALERT_EPISODE = [
 	"alert-error",
 	"alert-critical-resolved"
 ];
+var DEVICE_ATTENTION = ["device-attention-required", "device-attention-resolved"];
 var UPDATES = [
 	"addon-update-available",
 	"server-update-available",
@@ -74491,9 +74539,12 @@ var DEVICE_EVENTS = [
 	"stream-online",
 	"stream-offline",
 	"detection-blind",
+	"motion-noisy",
+	"motion-calm",
 	"recording-stalled",
 	"recording-healthy",
 	"recording-degraded",
+	...DEVICE_ATTENTION,
 	...ALARM
 ];
 /** Every kind a summary may speak about — the two summarisable families. */
@@ -74661,7 +74712,13 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
-	([...RULE_TEXT], [...ALERT_EPISODE]),
+	[...RULE_TEXT],
+	[...RULE_TEXT],
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
+	[...RULE_TEXT],
+	[...RULE_TEXT],
+	[...RULE_TEXT],
+	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
@@ -74679,11 +74736,11 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	([...RULE_TEXT], [...ALERT_EPISODE]),
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	([...RULE_TEXT], [...ALERT_EPISODE]),
-	([...RULE_TEXT], [...ALERT_EPISODE]),
-	([...RULE_TEXT], [...ALERT_EPISODE]),
-	([...RULE_TEXT], [...ALERT_EPISODE]),
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
@@ -74704,6 +74761,125 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	...STATE_SUMMARY_VARS
 ];
+new Map([
+	{
+		id: "device-connectivity",
+		family: "device-events",
+		label: "Device connectivity (offline / back online)",
+		bad: ["device-offline"],
+		recovery: ["device-online"],
+		snapshotLabel: "Devices offline now",
+		snapshotSection: "device-state"
+	},
+	{
+		id: "device-switch",
+		family: "device-events",
+		label: "Device switched off / back on",
+		bad: ["device-disabled"],
+		recovery: ["device-enabled"],
+		snapshotLabel: "Devices switched off now",
+		snapshotSection: "device-state"
+	},
+	{
+		id: "stream-connectivity",
+		family: "device-events",
+		label: "Stream connectivity (offline / back online)",
+		bad: ["stream-offline"],
+		recovery: ["stream-online"],
+		snapshotLabel: "Streams offline now",
+		snapshotSection: "streams"
+	},
+	{
+		id: "battery",
+		family: "device-events",
+		label: "Battery (low / back to normal)",
+		bad: ["device-battery-low"],
+		recovery: ["device-battery-normal"],
+		snapshotLabel: "Batteries low now",
+		snapshotSection: "battery"
+	},
+	{
+		id: "consumables",
+		family: "device-events",
+		label: "Consumables (low / replaced)",
+		bad: ["device-consumable-low"],
+		recovery: ["device-consumable-normal"],
+		snapshotLabel: "Consumables low now",
+		snapshotSection: "consumables"
+	},
+	{
+		id: "tanks",
+		family: "device-events",
+		label: "Tanks (low or full / back to normal)",
+		bad: ["device-tank-low", "device-tank-full"],
+		recovery: ["device-tank-normal"],
+		snapshotLabel: "Tanks low or full now",
+		snapshotSection: "tanks"
+	},
+	{
+		id: "motion-noise",
+		family: "device-events",
+		label: "Motion without a subject (constant / calm again)",
+		bad: ["motion-noisy"],
+		recovery: ["motion-calm"],
+		snapshotLabel: "Cameras with constant motion now",
+		snapshotSection: null
+	},
+	{
+		id: "recording-health",
+		family: "device-events",
+		label: "Recording health (stalled or degraded / recording again)",
+		bad: ["recording-stalled", "recording-degraded"],
+		recovery: ["recording-healthy"],
+		snapshotLabel: "Recordings stalled now",
+		snapshotSection: null
+	},
+	{
+		id: "device-attention",
+		family: "device-events",
+		label: "Device needs attention (raised / resolved)",
+		bad: ["device-attention-required"],
+		recovery: ["device-attention-resolved"],
+		snapshotLabel: "Devices needing attention now",
+		snapshotSection: null
+	},
+	{
+		id: "node-connectivity",
+		family: "system",
+		label: "Node connectivity (offline / back online)",
+		bad: ["node-offline"],
+		recovery: ["node-online"],
+		snapshotLabel: "Nodes offline now",
+		snapshotSection: "nodes"
+	},
+	{
+		id: "storage-space",
+		family: "system",
+		label: "Storage space (low or critical / ok again)",
+		bad: ["storage-location-low", "storage-location-critical"],
+		recovery: ["storage-location-ok"],
+		snapshotLabel: "Storage locations low now",
+		snapshotSection: null
+	},
+	{
+		id: "critical-alerts",
+		family: "system",
+		label: "Critical alerts (raised / resolved)",
+		bad: ["alert-critical"],
+		recovery: ["alert-critical-resolved"],
+		snapshotLabel: "Critical alerts open now",
+		snapshotSection: null
+	},
+	{
+		id: "rule-health",
+		family: "system",
+		label: "Rule health (broken / repaired)",
+		bad: ["rule-broken"],
+		recovery: ["rule-repaired"],
+		snapshotLabel: "Notification rules broken now",
+		snapshotSection: null
+	}
+].flatMap((spec) => [...spec.bad, ...spec.recovery].map((kind) => [kind, spec])));
 new Set([
 	"disarmed",
 	"armed_home",