@camstack/addon-auth 1.2.88 → 1.2.90

package/dist/{dist-rwOkDYGH.js → dist-Bqrg5nKS.js}

@@ -12114,6 +12114,9 @@ var QueryFilterSchema = object({
 	whereBetween: record(string(), tuple([unknown(), unknown()])).optional(),
 	/** NULL-safe exclusion: matches rows whose field is NULL OR != the value. */
 	whereNot: record(string(), unknown()).optional(),
+	/** NULL-safe exclusion of a SET — `whereNot` for more than one value. An
+	*  empty list excludes nothing. See `QueryFilter.whereNotIn`. */
+	whereNotIn: record(string(), array(unknown())).optional(),
 	orderBy: object({
 		field: string(),
 		direction: _enum(["asc", "desc"])
@@ -12134,7 +12137,8 @@ var MutationFilterSchema = object({
 	where: record(string(), unknown()).optional(),
 	whereIn: record(string(), array(unknown())).optional(),
 	whereBetween: record(string(), tuple([unknown(), unknown()])).optional(),
-	whereNot: record(string(), unknown()).optional()
+	whereNot: record(string(), unknown()).optional(),
+	whereNotIn: record(string(), array(unknown())).optional()
 });
 /**
 * One scalar an {@link settingsStoreCapability.methods.aggregate} call asks for.
@@ -18632,10 +18636,12 @@ var TrackSourceSchema = _enum([
 *    Terminal for the plain `markForTrain` toggle: returning it to `staging` is
 *    a deliberate action of the retrain page, not a side effect of a checkbox.
 *
-* There is no `null`. The state is stored `TEXT NOT NULL DEFAULT 'none'` because
-* the store's filter language has only positive equality and `whereIn` — no
-* negation, no IS NULL — so a NULL would be unselectable by ANY predicate and
-* would make the entire pre-column history immortal in one deploy.
+* There is no `null`. The state is stored `TEXT NOT NULL DEFAULT 'none'` so that
+* every row is selectable by a positive predicate. (The filter language has
+* since grown the NULL-safe `whereNot` / `whereNotIn` and an `IS NULL` reading
+* of `where: { f: null }`, which is how {@link TrackSourceSchema} can be
+* filtered on a NULLABLE column — see `excludeSources`. It did not when this
+* column was designed, and a NOT NULL column is still the better shape.)
 */
 var RetrainStatusSchema = _enum([
 	"none",
@@ -19371,7 +19377,9 @@ var RecentTracksQueryInput = object({
 	* whose class list is unreadable are kept, and the client's rule stays the
 	* exact one.
 	*/
-	classes: array(string()).optional()
+	classes: array(string()).optional(),
+	/** See {@link ExcludeSourcesDoc}. */
+	excludeSources: array(TrackSourceSchema).optional()
 });
 /**
 * A Summary (D359): the per-camera session envelope that references tracks.
@@ -19799,7 +19807,9 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 	* selected is an operator who has not narrowed anything, and an empty
 	* timeline would read as a camera that saw nothing.
 	*/
-	classes: array(string()).optional()
+	classes: array(string()).optional(),
+	/** See {@link ExcludeSourcesDoc}. */
+	excludeSources: array(TrackSourceSchema).optional()
 }), array(TrackSchema).readonly()), method(RecentTracksQueryInput, RecentTracksPageSchema), method(SummariesQueryInput, SummariesPageSchema), method(object({ id: string() }), SummaryDetailSchema.nullable()), method(object({ deviceId: number() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
@@ -27295,8 +27305,27 @@ var PrivacyMaskRegionSchema = object({
 });
 object({
 	enabled: boolean(),
-	/** Active zones (normalized 0..1). Length ≤ maxRegions. */
-	regions: array(PrivacyMaskRegionSchema),
+	/**
+	* Active zones (normalized 0..1). Length ≤ maxRegions.
+	*
+	* `null` means "no answer" — the provider has never reached this camera
+	* (a cold `runtimeState` slice, a battery camera asleep) or the read
+	* failed. A consumer must render it as UNKNOWN and never as "this camera
+	* has no zones": those two look identical to an operator right up to the
+	* moment one of them is acted on, and acting on them differs completely.
+	* The switch group turned an unanswered read into *"nothing is set up for
+	* it to act on"* — an instruction to go and draw a zone that already
+	* exists — and this editor seeded an EMPTY canvas from it, one Save away
+	* from deleting the mask it could not read.
+	*
+	* Empty-and-answered is `[]` and stays a real answer: this camera genuinely
+	* has no zones. The distinction is the same one {@link
+	* PrivacyMaskStatusSchema.shape.audioEnabled} already draws for the
+	* microphone, on the very same payload — both planes come from ONE refresh,
+	* so it was never coherent for one of them to be able to say "unknown"
+	* while the other could not.
+	*/
+	regions: array(PrivacyMaskRegionSchema).nullable(),
 	/**
 	* Is the camera capturing sound right now? Read from the camera, never from
 	* a server-side mirror.

package/dist/{dist-X6Mer_hb.mjs → dist-Cn-msAsM.mjs}

@@ -12114,6 +12114,9 @@ var QueryFilterSchema = object({
 	whereBetween: record(string(), tuple([unknown(), unknown()])).optional(),
 	/** NULL-safe exclusion: matches rows whose field is NULL OR != the value. */
 	whereNot: record(string(), unknown()).optional(),
+	/** NULL-safe exclusion of a SET — `whereNot` for more than one value. An
+	*  empty list excludes nothing. See `QueryFilter.whereNotIn`. */
+	whereNotIn: record(string(), array(unknown())).optional(),
 	orderBy: object({
 		field: string(),
 		direction: _enum(["asc", "desc"])
@@ -12134,7 +12137,8 @@ var MutationFilterSchema = object({
 	where: record(string(), unknown()).optional(),
 	whereIn: record(string(), array(unknown())).optional(),
 	whereBetween: record(string(), tuple([unknown(), unknown()])).optional(),
-	whereNot: record(string(), unknown()).optional()
+	whereNot: record(string(), unknown()).optional(),
+	whereNotIn: record(string(), array(unknown())).optional()
 });
 /**
 * One scalar an {@link settingsStoreCapability.methods.aggregate} call asks for.
@@ -18632,10 +18636,12 @@ var TrackSourceSchema = _enum([
 *    Terminal for the plain `markForTrain` toggle: returning it to `staging` is
 *    a deliberate action of the retrain page, not a side effect of a checkbox.
 *
-* There is no `null`. The state is stored `TEXT NOT NULL DEFAULT 'none'` because
-* the store's filter language has only positive equality and `whereIn` — no
-* negation, no IS NULL — so a NULL would be unselectable by ANY predicate and
-* would make the entire pre-column history immortal in one deploy.
+* There is no `null`. The state is stored `TEXT NOT NULL DEFAULT 'none'` so that
+* every row is selectable by a positive predicate. (The filter language has
+* since grown the NULL-safe `whereNot` / `whereNotIn` and an `IS NULL` reading
+* of `where: { f: null }`, which is how {@link TrackSourceSchema} can be
+* filtered on a NULLABLE column — see `excludeSources`. It did not when this
+* column was designed, and a NOT NULL column is still the better shape.)
 */
 var RetrainStatusSchema = _enum([
 	"none",
@@ -19371,7 +19377,9 @@ var RecentTracksQueryInput = object({
 	* whose class list is unreadable are kept, and the client's rule stays the
 	* exact one.
 	*/
-	classes: array(string()).optional()
+	classes: array(string()).optional(),
+	/** See {@link ExcludeSourcesDoc}. */
+	excludeSources: array(TrackSourceSchema).optional()
 });
 /**
 * A Summary (D359): the per-camera session envelope that references tracks.
@@ -19799,7 +19807,9 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 	* selected is an operator who has not narrowed anything, and an empty
 	* timeline would read as a camera that saw nothing.
 	*/
-	classes: array(string()).optional()
+	classes: array(string()).optional(),
+	/** See {@link ExcludeSourcesDoc}. */
+	excludeSources: array(TrackSourceSchema).optional()
 }), array(TrackSchema).readonly()), method(RecentTracksQueryInput, RecentTracksPageSchema), method(SummariesQueryInput, SummariesPageSchema), method(object({ id: string() }), SummaryDetailSchema.nullable()), method(object({ deviceId: number() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
@@ -27295,8 +27305,27 @@ var PrivacyMaskRegionSchema = object({
 });
 object({
 	enabled: boolean(),
-	/** Active zones (normalized 0..1). Length ≤ maxRegions. */
-	regions: array(PrivacyMaskRegionSchema),
+	/**
+	* Active zones (normalized 0..1). Length ≤ maxRegions.
+	*
+	* `null` means "no answer" — the provider has never reached this camera
+	* (a cold `runtimeState` slice, a battery camera asleep) or the read
+	* failed. A consumer must render it as UNKNOWN and never as "this camera
+	* has no zones": those two look identical to an operator right up to the
+	* moment one of them is acted on, and acting on them differs completely.
+	* The switch group turned an unanswered read into *"nothing is set up for
+	* it to act on"* — an instruction to go and draw a zone that already
+	* exists — and this editor seeded an EMPTY canvas from it, one Save away
+	* from deleting the mask it could not read.
+	*
+	* Empty-and-answered is `[]` and stays a real answer: this camera genuinely
+	* has no zones. The distinction is the same one {@link
+	* PrivacyMaskStatusSchema.shape.audioEnabled} already draws for the
+	* microphone, on the very same payload — both planes come from ONE refresh,
+	* so it was never coherent for one of them to be able to say "unknown"
+	* while the other could not.
+	*/
+	regions: array(PrivacyMaskRegionSchema).nullable(),
 	/**
 	* Is the camera capturing sound right now? Read from the camera, never from
 	* a server-side mirror.

package/dist/magic-link/auth-magic-link.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../chunk-Cek0wNdY.js");
-const require_dist = require("../dist-rwOkDYGH.js");
+const require_dist = require("../dist-Bqrg5nKS.js");
 //#region src/magic-link/auth-magic-link.addon.ts
 /**
 * Magic-link authentication addon.

package/dist/magic-link/auth-magic-link.addon.mjs

@@ -1,4 +1,4 @@
-import { a as loginMethodCapability, c as BaseAddon, i as buildAddonRouteProvider, r as authProviderCapability, s as errMsg, t as addonRoutesCapability } from "../dist-X6Mer_hb.mjs";
+import { a as loginMethodCapability, c as BaseAddon, i as buildAddonRouteProvider, r as authProviderCapability, s as errMsg, t as addonRoutesCapability } from "../dist-Cn-msAsM.mjs";
 //#region src/magic-link/auth-magic-link.addon.ts
 /**
 * Magic-link authentication addon.

package/dist/oidc/auth-oidc.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-Cek0wNdY.js");
-const require_dist = require("../dist-rwOkDYGH.js");
+const require_dist = require("../dist-Bqrg5nKS.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 //#region node_modules/jose/dist/webapi/lib/buffer_utils.js

package/dist/oidc/auth-oidc.addon.mjs

@@ -1,4 +1,4 @@
-import { a as loginMethodCapability, c as BaseAddon, i as buildAddonRouteProvider, r as authProviderCapability, s as errMsg, t as addonRoutesCapability } from "../dist-X6Mer_hb.mjs";
+import { a as loginMethodCapability, c as BaseAddon, i as buildAddonRouteProvider, r as authProviderCapability, s as errMsg, t as addonRoutesCapability } from "../dist-Cn-msAsM.mjs";
 import * as crypto$1 from "node:crypto";
 //#region node_modules/jose/dist/webapi/lib/buffer_utils.js
 var encoder = new TextEncoder();

package/dist/webauthn/{_virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-BxJuS3D8.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-l9W-ktqJ.mjs}

@@ -3,7 +3,7 @@ import "./dist-CYZr2fwk.mjs";
 var e = {
 	"@camstack/sdk": {
 		name: "@camstack/sdk",
-		version: "1.2.84",
+		version: "1.2.86",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_auth_webauthn_widgets",
@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.164",
+		version: "1.2.166",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_auth_webauthn_widgets",
@@ -33,7 +33,7 @@ var e = {
 	},
 	"@camstack/ui-library": {
 		name: "@camstack/ui-library",
-		version: "1.2.132",
+		version: "1.2.134",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_auth_webauthn_widgets",

package/dist/webauthn/auth-webauthn.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-Cek0wNdY.js");
-const require_dist = require("../dist-rwOkDYGH.js");
+const require_dist = require("../dist-Bqrg5nKS.js");
 let stream = require("stream");
 stream = require_chunk.__toESM(stream, 1);
 let http = require("http");

package/dist/webauthn/auth-webauthn.addon.mjs

@@ -1,4 +1,4 @@
-import { a as loginMethodCapability, c as BaseAddon, d as number, f as object, l as array, n as addonWidgetsSourceCapability, o as userPasskeysCapability, p as string, u as boolean } from "../dist-X6Mer_hb.mjs";
+import { a as loginMethodCapability, c as BaseAddon, d as number, f as object, l as array, n as addonWidgetsSourceCapability, o as userPasskeysCapability, p as string, u as boolean } from "../dist-Cn-msAsM.mjs";
 import { createRequire } from "node:module";
 import Stream from "stream";
 import http from "http";

package/dist/webauthn/{hostInit-Bt4DNUtC.mjs → hostInit-CoQhELAt.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.2.164",
+				version: "1.2.166",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -45,7 +45,7 @@ async function r() {
 				}
 			},
 			"@camstack/sdk": {
-				version: "1.2.84",
+				version: "1.2.86",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -81,7 +81,7 @@ async function r() {
 				}
 			},
 			"@camstack/ui-library": {
-				version: "1.2.132",
+				version: "1.2.134",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/webauthn/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-BxJuS3D8.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-l9W-ktqJ.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-auth",
-  "version": "1.2.88",
+  "version": "1.2.90",
   "description": "Authentication bundle — magic-link, OIDC, and WebAuthn/passkey. Multi-entry npm package shipping 3 addons under a single bundle; each addon keeps its own id, capabilities, and runner.",
   "keywords": [
     "camstack",