@camstack/addon-matter-broker 0.2.132 → 0.2.133

package/dist/addon.js

@@ -5561,7 +5561,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-yKL5gfrH.mjs
+//#region ../types/dist/sleep-BSuCCFjf.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -17390,7 +17390,19 @@ var DeviceHistorySubjectSchema = discriminatedUnion("kind", [object({
 	kind: literal("node"),
 	nodeId: string$2().min(1)
 })]);
+/**
+* `enum` stores a STATE as the ordinal of its value in the series' value list
+* (`DeviceHistorySeriesInfo.values`, append-only, so an ordinal never changes
+* meaning); a rollup keeps the time spent in each state (`states`).
+*/
 var DeviceHistoryKindSchema = _enum([
+	"gauge",
+	"counter",
+	"boolean",
+	"enum"
+]);
+/** What a PRODUCER may declare. `enum` is cap-only: its value list is the cap field's. */
+var DeviceHistoryProducerKindSchema = _enum([
 	"gauge",
 	"counter",
 	"boolean"
@@ -17427,7 +17439,13 @@ var SeriesInfoSchema = object({
 	/** `null` is unknown (a `unitFrom` series whose device does not state a unit right now), never a guess. */
 	unit: string$2().nullable(),
 	displayName: string$2(),
-	source: _enum(["cap", "addon"]),
+	source: _enum([
+		"cap",
+		"addon",
+		"derived"
+	]),
+	/** `enum`: the value of each ordinal (index = ordinal); `null` for every other kind. */
+	values: array(string$2()).readonly().nullable(),
 	firstTs: number(),
 	lastTs: number()
 });
@@ -17441,17 +17459,31 @@ var QueryPointSchema = object({
 	twMean: number().nullable(),
 	min: number(),
 	max: number(),
-	/** `null` is unknown, never zero (D393). */
-	last: number().nullable()
+	/** `null` is unknown, never zero (D393). For an `enum` series: the ordinal of {@link state}. */
+	last: number().nullable(),
+	/**
+	* The increase over the point: a `counter`'s growth since the previous point
+	* or bucket (a drop is a reset, counted from zero), and for
+	* {@link DEVICE_HISTORY_ENERGY_KEY} the kWh used in the bucket. `null` for
+	* every other kind, and when it cannot be known.
+	*/
+	delta: number().nullable(),
+	/** `enum`: the state in force at the end of the point (the name of `last`); `null` otherwise. */
+	state: string$2().nullable(),
+	/** `enum` rollup: milliseconds spent in each state inside the bucket; `null` for raw points and other kinds. */
+	states: record(string$2(), number()).nullable()
 });
 var QuerySeriesSchema = object({
 	scope: string$2(),
 	/** The last point STRICTLY BEFORE `from` in the chosen tier, so a step chart can start at the held value. */
 	before: object({
 		t: number(),
-		value: number().nullable()
+		value: number().nullable(),
+		state: string$2().nullable()
 	}).nullable(),
-	points: array(QueryPointSchema).readonly()
+	points: array(QueryPointSchema).readonly(),
+	/** A derived key: the stored key its points were computed from; `null` for a stored series. */
+	derivedFrom: string$2().nullable()
 });
 /** The window part of a query, shared by the device and node forms. */
 var QueryWindowShape = {
@@ -17467,6 +17499,23 @@ var QueryResultSchema = object({
 	series: array(QuerySeriesSchema).readonly(),
 	truncated: boolean()
 });
+/** One read of a batch: a device's key or a node's key (exactly one subject). */
+var QueryManyItemSchema = union([object({
+	deviceId: number().int(),
+	key: string$2(),
+	scope: string$2().optional()
+}), object({
+	forNodeId: string$2().min(1),
+	key: string$2(),
+	scope: string$2().optional()
+})]);
+var QueryManyEntrySchema = discriminatedUnion("ok", [object({
+	ok: literal(true),
+	result: QueryResultSchema
+}), object({
+	ok: literal(false),
+	error: string$2()
+})]);
 var TierStatusSchema = object({
 	tier: DeviceHistoryResolutionSchema,
 	/** `null` until the first background count answered. */
@@ -17522,16 +17571,22 @@ var DeviceHistoryStatusSchema = object({
 		lastRefreshAt: number().nullable()
 	})
 });
-method(object({ deviceId: number().int() }), array(SeriesInfoSchema).readonly()), method(object({ nodeId: string$2().min(1) }), array(SeriesInfoSchema).readonly(), { auth: "admin" }), method(object({
+method(object({ deviceId: number().int() }), array(SeriesInfoSchema).readonly()), method(object({ forNodeId: string$2().min(1) }), array(SeriesInfoSchema).readonly(), { auth: "admin" }), method(object({
 	deviceId: number().int(),
 	...QueryWindowShape
 }), QueryResultSchema), method(object({
-	nodeId: string$2().min(1),
+	forNodeId: string$2().min(1),
 	...QueryWindowShape
 }), QueryResultSchema, { auth: "admin" }), method(object({
+	items: array(QueryManyItemSchema).min(1).max(24),
+	from: QueryWindowShape.from,
+	to: QueryWindowShape.to,
+	resolution: QueryWindowShape.resolution,
+	maxPoints: QueryWindowShape.maxPoints
+}), object({ results: array(QueryManyEntrySchema).readonly() }), { auth: "admin" }), method(object({
 	name: string$2().regex(/^[a-z0-9-]+$/),
 	subjectKind: _enum(["device", "node"]),
-	kind: DeviceHistoryKindSchema,
+	kind: DeviceHistoryProducerKindSchema,
 	unit: string$2().optional(),
 	displayName: string$2().min(1),
 	ingest: _enum(["points", "buckets"])
@@ -40757,14 +40812,106 @@ var LogEntrySchema = object({
 	meta: record(string$2(), unknown()).optional(),
 	tags: record(string$2(), string$2()).optional()
 });
-method(LogEntrySchema, _void(), { kind: "mutation" }), method(object({
-	scope: array(string$2()).optional(),
+/**
+* A history READ against one destination (D898).
+*
+* Every filter is applied by the PROVIDER, before the limit — a filter the
+* browser applied after the limit is what made a rare device's lines
+* unreachable behind a busy one's. `before` / `after` are cursors the provider
+* minted (opaque to everyone else): a file position for the rotated files, a
+* nanosecond timestamp for Loki.
+*
+* A read is BOUNDED by `budgetMs`: a filter that matches nothing on a 30-day
+* store answers `done: false` with the cursor it reached and the bytes it
+* scanned, and the caller decides whether to go on. That is what makes a long
+* scan show progress and stop when asked — `cancelRead` ends the slice in
+* flight, and not asking for the next slice ends the scan.
+*/
+var LogReadQuerySchema = object({
+	/** Correlates `cancelRead`. Caller-chosen, unique per in-flight read. */
+	requestId: string$2().min(1).max(64).optional(),
+	/** The device the line is about (`tags.deviceId`, numeric). */
+	deviceId: number().int().optional(),
+	/**
+	* The emitting addon — bare manifest id; `@<version>` / `::<sub>` suffixes
+	* match. Not `addonId`: a cap router reads that name as "which provider".
+	*/
+	fromAddonId: string$2().min(1).max(200).optional(),
+	/**
+	* The emitting node: matches the agent that emitted the line, the node
+	* itself, or a worker under it (`<agent>/<runner>`) — the `agentId`
+	* semantics of `matchesLogTags`. Not `nodeId`: a cap router reads that
+	* name as "which node's provider".
+	*/
+	fromNodeId: string$2().min(1).max(200).optional(),
+	/** Any other tag, exact match (AND). */
+	tags: record(string$2(), union([string$2(), number()])).optional(),
+	/** Severity FLOOR: this level and above. */
 	level: LogLevelSchema.optional(),
-	since: date().optional(),
-	until: date().optional(),
-	limit: number().optional(),
-	tags: record(string$2(), string$2()).optional()
-}), array(LogEntrySchema).readonly());
+	/** Case-insensitive substring over message, scope, tag values and meta values. */
+	text: string$2().min(1).max(200).optional(),
+	/** Epoch ms, inclusive. */
+	since: number().optional(),
+	/** Epoch ms, inclusive. */
+	until: number().optional(),
+	/** Older than this cursor (exclusive). Absent with `after` absent ⇒ from the newest. */
+	before: string$2().min(1).max(1024).optional(),
+	/** Newer than this cursor (exclusive). */
+	after: string$2().min(1).max(1024).optional(),
+	limit: number().int().min(1).max(1e3).optional(),
+	/** Wall-clock bound of this slice. The provider caps it. */
+	budgetMs: number().int().min(50).max(1e4).optional()
+});
+var LogReadResultSchema = object({
+	/** Newest first. */
+	entries: array(object({
+		/** `<bootId>.<seq>` minted by the emitting LogManager — the dedupe key. */
+		id: string$2().optional(),
+		/** Epoch ms. */
+		timestamp: number(),
+		level: LogLevelSchema,
+		scope: string$2().optional(),
+		message: string$2(),
+		tags: record(string$2(), union([string$2(), number()])).optional(),
+		meta: record(string$2(), unknown()).optional()
+	})),
+	/** Pass as `before` for the next older page; null when nothing older exists. */
+	nextBefore: string$2().nullable(),
+	/** Pass as `after` to read what arrived since; null when unknown. */
+	nextAfter: string$2().nullable(),
+	/** Bytes this slice read (files) or received (remote). Progress, not a promise. */
+	scannedBytes: number().int().nonnegative(),
+	/**
+	* True when the scan in this direction reached the end of the store.
+	* False with fewer than `limit` entries means the budget ran out first —
+	* call again with `nextBefore` to go on.
+	*/
+	done: boolean(),
+	/** True when `cancelRead` ended this slice early. */
+	cancelled: boolean().optional()
+});
+var LogReadCapabilitiesSchema = object({
+	/** False ⇒ this destination only ships lines (console, forwarder, an unconfigured Loki). */
+	readable: boolean(),
+	/** Why not, when `readable` is false — rendered next to the source. */
+	reason: string$2().nullable(),
+	/** Filters the provider applies itself. A false one is applied by nobody. */
+	filters: object({
+		deviceId: boolean(),
+		addonId: boolean(),
+		nodeId: boolean(),
+		tags: boolean(),
+		level: boolean(),
+		text: boolean(),
+		timeRange: boolean()
+	}),
+	/** How far back the store reaches, when the provider knows (days). */
+	retentionDays: number().nullable()
+});
+method(LogEntrySchema, _void(), { kind: "mutation" }), optionalMethod(_void(), LogReadCapabilitiesSchema, { auth: "admin" }), optionalMethod(LogReadQuerySchema, LogReadResultSchema, { auth: "admin" }), optionalMethod(object({ requestId: string$2().min(1).max(64) }), object({ cancelled: boolean() }), {
+	kind: "mutation",
+	auth: "admin"
+});
 /**
 * `login-method` — collection cap through which auth addons contribute
 * their pre-auth login surfaces to the login page. This is the SINGLE,
@@ -42482,9 +42629,11 @@ var alarmPanelCapability = {
 	*/
 	durability: "restored",
 	/**
-	* History (D850): none — enum state; arm/disarm history belongs in the events ledger.
+	* History (D850): the panel's lifecycle state as an `enum` series —
+	* change-only, no floor, so an `arming -> pending -> triggered` sequence of a
+	* few seconds keeps every step. Who armed it stays in the events ledger.
 	*/
-	history: "none",
+	history: { fields: { state: { kind: "enum" } } },
 	/** Clock fields: written, but excluded from the compare that decides
 	*  whether persisting is worth a SQLite commit. */
 	volatileStateFields: ["lastChangedAt"]
@@ -43362,6 +43511,33 @@ var NcRuleTargetSchema = object({
 	params: record(string$2(), unknown()).optional()
 });
 /**
+* WHAT THE NOTIFICATION'S PICTURE IS (D897) — the ONE media choice of a rule.
+*
+* Every mode starts from the same CLEAN source frame of the trigger moment
+* (keyFrame → sceneFrame → lastSceneFrame, narrowed to the trigger instant and
+* to the zone that fired the rule) and renders it once at send time:
+*  - `scene-boxes` — the whole scene, the subject outlined thick in the accent
+*    colour and every OTHER track visible at that instant outlined thin, each
+*    labelled with class and confidence ("dog 87%").
+*  - `crop`  — the subject cut out of that frame around its box at that instant.
+*  - `clean` — the whole scene with nothing drawn on it.
+*  - `none`  — no picture.
+*
+* A mode that cannot be honoured (no box at that instant, a photograph with no
+* tracked subject) ships `clean` and names the reason in the log, per camera.
+* It replaces the `attach` × `frame` × `zoneCrop` triple, which let one rule
+* ship a crop on one event and a boxed scene on the next depending on which
+* stored kind had landed.
+*/
+var NcMediaImageSchema = _enum([
+	"scene-boxes",
+	"crop",
+	"clean",
+	"none"
+]);
+/**
+* @deprecated Read only by `normalizeNcMediaPolicy` (D897) — see {@link NcMediaImageSchema}.
+*
 * Media attachment policy (P1 still-image subset).
 *  - `best` — the best AVAILABLE subject image at dispatch time (D-3).
 *  - `best-matching` — the media that explains WHY the rule fired: a rule
@@ -43375,6 +43551,8 @@ var NcRuleTargetSchema = object({
 *  - `none` — no attachment.
 */
 /**
+* @deprecated Read only by `normalizeNcMediaPolicy` (D897) — see {@link NcMediaImageSchema}.
+*
 * WHAT THE PICTURE SHOWS — chosen explicitly, because the implicit ladders
 * conflate it with the selection strategy and betray the request: asking for
 * the clean scene frame on an object-event owner used to start at
@@ -43403,16 +43581,29 @@ var NcMediaFrameSchema = _enum([
 */
 var NcLinkedCameraModeSchema = _enum(["mosaic", "each"]);
 var NcMediaPolicySchema = object({
+	/**
+	* The picture — see {@link NcMediaImageSchema}. Absent on a rule nobody has
+	* saved since D897: `normalizeNcMediaPolicy` derives it from the legacy
+	* triple below, at load and at every write, and the store keeps only this.
+	*/
+	image: NcMediaImageSchema.optional(),
+	/**
+	* Draw the zone that FIRED the rule on the picture (`scene-boxes` / `clean`;
+	* a `crop` never shows it). Valid only on a rule whose trigger is a zone —
+	* `conditions.zones` or an occupancy zone — and refused on save otherwise.
+	* Replaces `zoneCrop`.
+	*/
+	showTriggerZone: boolean().optional(),
+	/** @deprecated D897 — accepted from an editor that predates `image`, folded into it on save. */
 	attach: _enum([
 		"best",
 		"best-matching",
 		"keyFrame",
 		"none"
-	]).default("best"),
-	/** What the still shows. Absent = `cropped` (the historical `best` shape). */
+	]).optional(),
+	/** @deprecated D897 — accepted from an editor that predates `image`, folded into it on save. */
 	frame: NcMediaFrameSchema.optional(),
-	/** Crop the attached still to the rule's condition-zone bbox (padded) —
-	*  "show me the ZONE", not the whole scene or the subject crop. */
+	/** @deprecated D897 — folded into `image: 'clean'` + `showTriggerZone` on save. */
 	zoneCrop: boolean().optional(),
 	/**
 	* Also attach a short GIF cut from the stream broker's clip ring around the
@@ -43584,7 +43775,9 @@ var NcRuleInputSchema = object({
 	* targets.
 	*/
 	targetUsers: array(string$2()).optional(),
-	media: NcMediaPolicySchema.default({ attach: "best" }),
+	/** Absent = the kind's default picture (`resolveNcMediaImage`): the subject crop for a
+	*  detection, the clean scene for a sensor or a sound. Set explicitly on save (D897). */
+	media: NcMediaPolicySchema.default({}),
 	throttle: NcThrottleSchema.default({
 		cooldownSec: 60,
 		scope: "rule-device"
@@ -44521,13 +44714,37 @@ var NcAlarmModeOpeningsSchema = object({
 	/** Covered devices whose state could not be read (D49): neither open nor closed. */
 	unknown: array(number().int())
 });
+/**
+* One alarm INPUT — a (rule, device) pair — the operator bypassed until the
+* next disarm ("Bypass this input until disarm" on a trigger notification, or
+* `nc.bypassAlarmInput`). Reported so an armed alarm with a silenced input
+* never looks fully armed (D62: off must never look like broken).
+*/
+var NcAlarmInputBypassViewSchema = object({
+	ruleId: string$2(),
+	/** The rule's current name (its frozen name when the rule is gone). */
+	ruleName: string$2(),
+	/** The input: the sensor of the match, else its camera. */
+	deviceId: number().int(),
+	/** The input's current name. */
+	name: string$2(),
+	/** When it was bypassed (ms epoch). */
+	since: number(),
+	/** Triggers from this input dropped since. */
+	dropped: number().int().min(0)
+});
 var NcAlarmLiveSchema = object({
 	state: AlarmStateSchema,
 	/** The mode being armed into (exit delay) or held; null when disarmed. */
 	targetMode: AlarmArmModeSchema.nullable(),
 	availableModes: array(AlarmArmModeSchema),
 	openings: array(NcAlarmModeOpeningsSchema),
-	exclusions: array(NcAlarmExclusionViewSchema)
+	exclusions: array(NcAlarmExclusionViewSchema),
+	/**
+	* Inputs bypassed for the rest of this arm session; cleared on disarm.
+	* Defaulted so an older hub answer still parses (as "none known").
+	*/
+	bypassedInputs: array(NcAlarmInputBypassViewSchema).default([])
 });
 var NcAlarmConfigSchema = object({
 	/**
@@ -55263,9 +55480,11 @@ var connectivityCapability = {
 	*/
 	durability: "restored",
 	/**
-	* History (D850): none — duplicates device-status.online (one authority for availability).
+	* History (D850): `connected` as a boolean series — change-only, no floor. It
+	* is the upstream entity's own link (a HA connectivity sensor), not the
+	* device's reachability, which stays `device-status.online`.
 	*/
-	history: "none",
+	history: { fields: { connected: { kind: "boolean" } } },
 	/** Clock fields: written, but excluded from the compare that decides
 	*  whether persisting is worth a SQLite commit. */
 	volatileStateFields: ["lastChangedAt"]
@@ -56089,11 +56308,22 @@ var dishwasherCapability = {
 	},
 	runtimeState: DishwasherStatusSchema,
 	durability: "session",
-	history: { fields: { progressPercent: {
-		kind: "gauge",
-		unit: "%",
-		deadband: 2
-	} } }
+	history: { fields: {
+		progressPercent: {
+			kind: "gauge",
+			unit: "%",
+			deadband: 2
+		},
+		state: { kind: "enum" },
+		operationState: { kind: "enum" },
+		remainingSeconds: {
+			kind: "gauge",
+			unit: "s",
+			minIntervalMs: 6e4
+		},
+		doorOpen: { kind: "boolean" },
+		powerOn: { kind: "boolean" }
+	} }
 };
 var DoorbellStatusSchema = object({
 	/** Ms epoch of the last press. null = never observed since this provider started. */
@@ -56210,9 +56440,15 @@ var enumSensorCapability = {
 	*/
 	durability: "restored",
 	/**
-	* History (D850): none — text/enum state has no history (non-goal).
+	* History (D850): the value as an `enum` series (an appliance's program or
+	* operation state, an HVAC action). The option set is per device, so the
+	* value list is LEARNED as values are first seen (bounded). A sensor with a
+	* `format` carries a timestamp, not a state, and is not recorded.
 	*/
-	history: "none",
+	history: { fields: { value: {
+		kind: "enum",
+		skipWhenSet: "format"
+	} } },
 	/** Clock fields: written, but excluded from the compare that decides
 	*  whether persisting is worth a SQLite commit. */
 	volatileStateFields: ["lastFetchedAt"]
@@ -58186,9 +58422,10 @@ var lockControlCapability = {
 	*/
 	durability: "restored",
 	/**
-	* History (D850): none — enum state; lock events belong in the events ledger.
+	* History (D850): the lock's state as an `enum` series — change-only, no
+	* floor: a jam or an unlock lasting seconds is the edge an operator looks for.
 	*/
-	history: "none",
+	history: { fields: { state: { kind: "enum" } } },
 	/** Clock fields: written, but excluded from the compare that decides
 	*  whether persisting is worth a SQLite commit. */
 	volatileStateFields: ["lastChangedAt"]
@@ -58362,9 +58599,18 @@ var mediaPlayerCapability = {
 	*/
 	durability: "session",
 	/**
-	* History (D850): none — `positionMs` moves continuously while playing; volume is transient.
+	* History (D850): volume (a level an operator or an automation sets; the
+	* default 10 s floor folds a slider drag into its end value) and mute.
+	* `positionMs` is not recorded: it moves continuously while playing.
 	*/
-	history: "none"
+	history: { fields: {
+		volumeLevel: {
+			kind: "gauge",
+			unit: "%",
+			deadband: 1
+		},
+		isMuted: { kind: "boolean" }
+	} }
 };
 /**
 * mesh-network — collection cap for mesh-VPN providers.
@@ -63657,9 +63903,29 @@ var streamParamsCapability = {
 	*/
 	durability: "restored",
 	/**
-	* History (D850): none — encoder configuration.
+	* History (D850): the configured bitrate and frame rate of the main and sub
+	* profiles. Configuration, so change-only on the default floor: a point is an
+	* operator's (or a tuner's) edit, which is exactly what a chart of a stream's
+	* quality over time must show.
 	*/
-	history: "none",
+	history: { fields: {
+		"main.bitrate": {
+			kind: "gauge",
+			unit: "kbps"
+		},
+		"main.framerate": {
+			kind: "gauge",
+			unit: "fps"
+		},
+		"sub.bitrate": {
+			kind: "gauge",
+			unit: "kbps"
+		},
+		"sub.framerate": {
+			kind: "gauge",
+			unit: "fps"
+		}
+	} },
 	/** Clock fields: written, but excluded from the compare that decides
 	*  whether persisting is worth a SQLite commit. */
 	volatileStateFields: ["lastFetchedAt"]
@@ -66837,6 +67103,15 @@ var BaseDevice = class {
 	* Drivers can use the `getProbeFlags()` helper to read the flag bag
 	* with a typed cast.
 	*
+	* Answer what you KNOW. A plain array is read as the complete list only
+	* while this device is `online` and probed; return
+	* `accessoryChildrenUnknown(reason)` whenever you cannot know the list right
+	* now (no credentials, parent not connected, a failed or partial read) —
+	* the kernel then deletes nothing. Return `accessoryChildrenComplete(list)`
+	* to say "connected, and this is the complete list" explicitly. A shrink is
+	* deleted only after a second agreeing complete read on a later probe (D49;
+	* `packages/system/src/kernel/moleculer/accessory-prune-gate.ts`).
+	*
 	* Default: no children.
 	*/
 	getAccessoryChildren() {
@@ -70968,7 +71243,19 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"logDestination.query": {
+	"logDestination.cancelRead": {
+		capName: "log-destination",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"logDestination.describeRead": {
+		capName: "log-destination",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"logDestination.read": {
 		capName: "log-destination",
 		capScope: "system",
 		addonId: null,
@@ -76975,6 +77262,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"logDestination.read": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
 	"mediaPlayer.getStatus": [{
 		name: "deviceId",
 		form: "single",

package/dist/addon.mjs

@@ -5559,7 +5559,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-yKL5gfrH.mjs
+//#region ../types/dist/sleep-BSuCCFjf.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -17388,7 +17388,19 @@ var DeviceHistorySubjectSchema = discriminatedUnion("kind", [object({
 	kind: literal("node"),
 	nodeId: string$2().min(1)
 })]);
+/**
+* `enum` stores a STATE as the ordinal of its value in the series' value list
+* (`DeviceHistorySeriesInfo.values`, append-only, so an ordinal never changes
+* meaning); a rollup keeps the time spent in each state (`states`).
+*/
 var DeviceHistoryKindSchema = _enum([
+	"gauge",
+	"counter",
+	"boolean",
+	"enum"
+]);
+/** What a PRODUCER may declare. `enum` is cap-only: its value list is the cap field's. */
+var DeviceHistoryProducerKindSchema = _enum([
 	"gauge",
 	"counter",
 	"boolean"
@@ -17425,7 +17437,13 @@ var SeriesInfoSchema = object({
 	/** `null` is unknown (a `unitFrom` series whose device does not state a unit right now), never a guess. */
 	unit: string$2().nullable(),
 	displayName: string$2(),
-	source: _enum(["cap", "addon"]),
+	source: _enum([
+		"cap",
+		"addon",
+		"derived"
+	]),
+	/** `enum`: the value of each ordinal (index = ordinal); `null` for every other kind. */
+	values: array(string$2()).readonly().nullable(),
 	firstTs: number(),
 	lastTs: number()
 });
@@ -17439,17 +17457,31 @@ var QueryPointSchema = object({
 	twMean: number().nullable(),
 	min: number(),
 	max: number(),
-	/** `null` is unknown, never zero (D393). */
-	last: number().nullable()
+	/** `null` is unknown, never zero (D393). For an `enum` series: the ordinal of {@link state}. */
+	last: number().nullable(),
+	/**
+	* The increase over the point: a `counter`'s growth since the previous point
+	* or bucket (a drop is a reset, counted from zero), and for
+	* {@link DEVICE_HISTORY_ENERGY_KEY} the kWh used in the bucket. `null` for
+	* every other kind, and when it cannot be known.
+	*/
+	delta: number().nullable(),
+	/** `enum`: the state in force at the end of the point (the name of `last`); `null` otherwise. */
+	state: string$2().nullable(),
+	/** `enum` rollup: milliseconds spent in each state inside the bucket; `null` for raw points and other kinds. */
+	states: record(string$2(), number()).nullable()
 });
 var QuerySeriesSchema = object({
 	scope: string$2(),
 	/** The last point STRICTLY BEFORE `from` in the chosen tier, so a step chart can start at the held value. */
 	before: object({
 		t: number(),
-		value: number().nullable()
+		value: number().nullable(),
+		state: string$2().nullable()
 	}).nullable(),
-	points: array(QueryPointSchema).readonly()
+	points: array(QueryPointSchema).readonly(),
+	/** A derived key: the stored key its points were computed from; `null` for a stored series. */
+	derivedFrom: string$2().nullable()
 });
 /** The window part of a query, shared by the device and node forms. */
 var QueryWindowShape = {
@@ -17465,6 +17497,23 @@ var QueryResultSchema = object({
 	series: array(QuerySeriesSchema).readonly(),
 	truncated: boolean()
 });
+/** One read of a batch: a device's key or a node's key (exactly one subject). */
+var QueryManyItemSchema = union([object({
+	deviceId: number().int(),
+	key: string$2(),
+	scope: string$2().optional()
+}), object({
+	forNodeId: string$2().min(1),
+	key: string$2(),
+	scope: string$2().optional()
+})]);
+var QueryManyEntrySchema = discriminatedUnion("ok", [object({
+	ok: literal(true),
+	result: QueryResultSchema
+}), object({
+	ok: literal(false),
+	error: string$2()
+})]);
 var TierStatusSchema = object({
 	tier: DeviceHistoryResolutionSchema,
 	/** `null` until the first background count answered. */
@@ -17520,16 +17569,22 @@ var DeviceHistoryStatusSchema = object({
 		lastRefreshAt: number().nullable()
 	})
 });
-method(object({ deviceId: number().int() }), array(SeriesInfoSchema).readonly()), method(object({ nodeId: string$2().min(1) }), array(SeriesInfoSchema).readonly(), { auth: "admin" }), method(object({
+method(object({ deviceId: number().int() }), array(SeriesInfoSchema).readonly()), method(object({ forNodeId: string$2().min(1) }), array(SeriesInfoSchema).readonly(), { auth: "admin" }), method(object({
 	deviceId: number().int(),
 	...QueryWindowShape
 }), QueryResultSchema), method(object({
-	nodeId: string$2().min(1),
+	forNodeId: string$2().min(1),
 	...QueryWindowShape
 }), QueryResultSchema, { auth: "admin" }), method(object({
+	items: array(QueryManyItemSchema).min(1).max(24),
+	from: QueryWindowShape.from,
+	to: QueryWindowShape.to,
+	resolution: QueryWindowShape.resolution,
+	maxPoints: QueryWindowShape.maxPoints
+}), object({ results: array(QueryManyEntrySchema).readonly() }), { auth: "admin" }), method(object({
 	name: string$2().regex(/^[a-z0-9-]+$/),
 	subjectKind: _enum(["device", "node"]),
-	kind: DeviceHistoryKindSchema,
+	kind: DeviceHistoryProducerKindSchema,
 	unit: string$2().optional(),
 	displayName: string$2().min(1),
 	ingest: _enum(["points", "buckets"])
@@ -40755,14 +40810,106 @@ var LogEntrySchema = object({
 	meta: record(string$2(), unknown()).optional(),
 	tags: record(string$2(), string$2()).optional()
 });
-method(LogEntrySchema, _void(), { kind: "mutation" }), method(object({
-	scope: array(string$2()).optional(),
+/**
+* A history READ against one destination (D898).
+*
+* Every filter is applied by the PROVIDER, before the limit — a filter the
+* browser applied after the limit is what made a rare device's lines
+* unreachable behind a busy one's. `before` / `after` are cursors the provider
+* minted (opaque to everyone else): a file position for the rotated files, a
+* nanosecond timestamp for Loki.
+*
+* A read is BOUNDED by `budgetMs`: a filter that matches nothing on a 30-day
+* store answers `done: false` with the cursor it reached and the bytes it
+* scanned, and the caller decides whether to go on. That is what makes a long
+* scan show progress and stop when asked — `cancelRead` ends the slice in
+* flight, and not asking for the next slice ends the scan.
+*/
+var LogReadQuerySchema = object({
+	/** Correlates `cancelRead`. Caller-chosen, unique per in-flight read. */
+	requestId: string$2().min(1).max(64).optional(),
+	/** The device the line is about (`tags.deviceId`, numeric). */
+	deviceId: number().int().optional(),
+	/**
+	* The emitting addon — bare manifest id; `@<version>` / `::<sub>` suffixes
+	* match. Not `addonId`: a cap router reads that name as "which provider".
+	*/
+	fromAddonId: string$2().min(1).max(200).optional(),
+	/**
+	* The emitting node: matches the agent that emitted the line, the node
+	* itself, or a worker under it (`<agent>/<runner>`) — the `agentId`
+	* semantics of `matchesLogTags`. Not `nodeId`: a cap router reads that
+	* name as "which node's provider".
+	*/
+	fromNodeId: string$2().min(1).max(200).optional(),
+	/** Any other tag, exact match (AND). */
+	tags: record(string$2(), union([string$2(), number()])).optional(),
+	/** Severity FLOOR: this level and above. */
 	level: LogLevelSchema.optional(),
-	since: date().optional(),
-	until: date().optional(),
-	limit: number().optional(),
-	tags: record(string$2(), string$2()).optional()
-}), array(LogEntrySchema).readonly());
+	/** Case-insensitive substring over message, scope, tag values and meta values. */
+	text: string$2().min(1).max(200).optional(),
+	/** Epoch ms, inclusive. */
+	since: number().optional(),
+	/** Epoch ms, inclusive. */
+	until: number().optional(),
+	/** Older than this cursor (exclusive). Absent with `after` absent ⇒ from the newest. */
+	before: string$2().min(1).max(1024).optional(),
+	/** Newer than this cursor (exclusive). */
+	after: string$2().min(1).max(1024).optional(),
+	limit: number().int().min(1).max(1e3).optional(),
+	/** Wall-clock bound of this slice. The provider caps it. */
+	budgetMs: number().int().min(50).max(1e4).optional()
+});
+var LogReadResultSchema = object({
+	/** Newest first. */
+	entries: array(object({
+		/** `<bootId>.<seq>` minted by the emitting LogManager — the dedupe key. */
+		id: string$2().optional(),
+		/** Epoch ms. */
+		timestamp: number(),
+		level: LogLevelSchema,
+		scope: string$2().optional(),
+		message: string$2(),
+		tags: record(string$2(), union([string$2(), number()])).optional(),
+		meta: record(string$2(), unknown()).optional()
+	})),
+	/** Pass as `before` for the next older page; null when nothing older exists. */
+	nextBefore: string$2().nullable(),
+	/** Pass as `after` to read what arrived since; null when unknown. */
+	nextAfter: string$2().nullable(),
+	/** Bytes this slice read (files) or received (remote). Progress, not a promise. */
+	scannedBytes: number().int().nonnegative(),
+	/**
+	* True when the scan in this direction reached the end of the store.
+	* False with fewer than `limit` entries means the budget ran out first —
+	* call again with `nextBefore` to go on.
+	*/
+	done: boolean(),
+	/** True when `cancelRead` ended this slice early. */
+	cancelled: boolean().optional()
+});
+var LogReadCapabilitiesSchema = object({
+	/** False ⇒ this destination only ships lines (console, forwarder, an unconfigured Loki). */
+	readable: boolean(),
+	/** Why not, when `readable` is false — rendered next to the source. */
+	reason: string$2().nullable(),
+	/** Filters the provider applies itself. A false one is applied by nobody. */
+	filters: object({
+		deviceId: boolean(),
+		addonId: boolean(),
+		nodeId: boolean(),
+		tags: boolean(),
+		level: boolean(),
+		text: boolean(),
+		timeRange: boolean()
+	}),
+	/** How far back the store reaches, when the provider knows (days). */
+	retentionDays: number().nullable()
+});
+method(LogEntrySchema, _void(), { kind: "mutation" }), optionalMethod(_void(), LogReadCapabilitiesSchema, { auth: "admin" }), optionalMethod(LogReadQuerySchema, LogReadResultSchema, { auth: "admin" }), optionalMethod(object({ requestId: string$2().min(1).max(64) }), object({ cancelled: boolean() }), {
+	kind: "mutation",
+	auth: "admin"
+});
 /**
 * `login-method` — collection cap through which auth addons contribute
 * their pre-auth login surfaces to the login page. This is the SINGLE,
@@ -42480,9 +42627,11 @@ var alarmPanelCapability = {
 	*/
 	durability: "restored",
 	/**
-	* History (D850): none — enum state; arm/disarm history belongs in the events ledger.
+	* History (D850): the panel's lifecycle state as an `enum` series —
+	* change-only, no floor, so an `arming -> pending -> triggered` sequence of a
+	* few seconds keeps every step. Who armed it stays in the events ledger.
 	*/
-	history: "none",
+	history: { fields: { state: { kind: "enum" } } },
 	/** Clock fields: written, but excluded from the compare that decides
 	*  whether persisting is worth a SQLite commit. */
 	volatileStateFields: ["lastChangedAt"]
@@ -43360,6 +43509,33 @@ var NcRuleTargetSchema = object({
 	params: record(string$2(), unknown()).optional()
 });
 /**
+* WHAT THE NOTIFICATION'S PICTURE IS (D897) — the ONE media choice of a rule.
+*
+* Every mode starts from the same CLEAN source frame of the trigger moment
+* (keyFrame → sceneFrame → lastSceneFrame, narrowed to the trigger instant and
+* to the zone that fired the rule) and renders it once at send time:
+*  - `scene-boxes` — the whole scene, the subject outlined thick in the accent
+*    colour and every OTHER track visible at that instant outlined thin, each
+*    labelled with class and confidence ("dog 87%").
+*  - `crop`  — the subject cut out of that frame around its box at that instant.
+*  - `clean` — the whole scene with nothing drawn on it.
+*  - `none`  — no picture.
+*
+* A mode that cannot be honoured (no box at that instant, a photograph with no
+* tracked subject) ships `clean` and names the reason in the log, per camera.
+* It replaces the `attach` × `frame` × `zoneCrop` triple, which let one rule
+* ship a crop on one event and a boxed scene on the next depending on which
+* stored kind had landed.
+*/
+var NcMediaImageSchema = _enum([
+	"scene-boxes",
+	"crop",
+	"clean",
+	"none"
+]);
+/**
+* @deprecated Read only by `normalizeNcMediaPolicy` (D897) — see {@link NcMediaImageSchema}.
+*
 * Media attachment policy (P1 still-image subset).
 *  - `best` — the best AVAILABLE subject image at dispatch time (D-3).
 *  - `best-matching` — the media that explains WHY the rule fired: a rule
@@ -43373,6 +43549,8 @@ var NcRuleTargetSchema = object({
 *  - `none` — no attachment.
 */
 /**
+* @deprecated Read only by `normalizeNcMediaPolicy` (D897) — see {@link NcMediaImageSchema}.
+*
 * WHAT THE PICTURE SHOWS — chosen explicitly, because the implicit ladders
 * conflate it with the selection strategy and betray the request: asking for
 * the clean scene frame on an object-event owner used to start at
@@ -43401,16 +43579,29 @@ var NcMediaFrameSchema = _enum([
 */
 var NcLinkedCameraModeSchema = _enum(["mosaic", "each"]);
 var NcMediaPolicySchema = object({
+	/**
+	* The picture — see {@link NcMediaImageSchema}. Absent on a rule nobody has
+	* saved since D897: `normalizeNcMediaPolicy` derives it from the legacy
+	* triple below, at load and at every write, and the store keeps only this.
+	*/
+	image: NcMediaImageSchema.optional(),
+	/**
+	* Draw the zone that FIRED the rule on the picture (`scene-boxes` / `clean`;
+	* a `crop` never shows it). Valid only on a rule whose trigger is a zone —
+	* `conditions.zones` or an occupancy zone — and refused on save otherwise.
+	* Replaces `zoneCrop`.
+	*/
+	showTriggerZone: boolean().optional(),
+	/** @deprecated D897 — accepted from an editor that predates `image`, folded into it on save. */
 	attach: _enum([
 		"best",
 		"best-matching",
 		"keyFrame",
 		"none"
-	]).default("best"),
-	/** What the still shows. Absent = `cropped` (the historical `best` shape). */
+	]).optional(),
+	/** @deprecated D897 — accepted from an editor that predates `image`, folded into it on save. */
 	frame: NcMediaFrameSchema.optional(),
-	/** Crop the attached still to the rule's condition-zone bbox (padded) —
-	*  "show me the ZONE", not the whole scene or the subject crop. */
+	/** @deprecated D897 — folded into `image: 'clean'` + `showTriggerZone` on save. */
 	zoneCrop: boolean().optional(),
 	/**
 	* Also attach a short GIF cut from the stream broker's clip ring around the
@@ -43582,7 +43773,9 @@ var NcRuleInputSchema = object({
 	* targets.
 	*/
 	targetUsers: array(string$2()).optional(),
-	media: NcMediaPolicySchema.default({ attach: "best" }),
+	/** Absent = the kind's default picture (`resolveNcMediaImage`): the subject crop for a
+	*  detection, the clean scene for a sensor or a sound. Set explicitly on save (D897). */
+	media: NcMediaPolicySchema.default({}),
 	throttle: NcThrottleSchema.default({
 		cooldownSec: 60,
 		scope: "rule-device"
@@ -44519,13 +44712,37 @@ var NcAlarmModeOpeningsSchema = object({
 	/** Covered devices whose state could not be read (D49): neither open nor closed. */
 	unknown: array(number().int())
 });
+/**
+* One alarm INPUT — a (rule, device) pair — the operator bypassed until the
+* next disarm ("Bypass this input until disarm" on a trigger notification, or
+* `nc.bypassAlarmInput`). Reported so an armed alarm with a silenced input
+* never looks fully armed (D62: off must never look like broken).
+*/
+var NcAlarmInputBypassViewSchema = object({
+	ruleId: string$2(),
+	/** The rule's current name (its frozen name when the rule is gone). */
+	ruleName: string$2(),
+	/** The input: the sensor of the match, else its camera. */
+	deviceId: number().int(),
+	/** The input's current name. */
+	name: string$2(),
+	/** When it was bypassed (ms epoch). */
+	since: number(),
+	/** Triggers from this input dropped since. */
+	dropped: number().int().min(0)
+});
 var NcAlarmLiveSchema = object({
 	state: AlarmStateSchema,
 	/** The mode being armed into (exit delay) or held; null when disarmed. */
 	targetMode: AlarmArmModeSchema.nullable(),
 	availableModes: array(AlarmArmModeSchema),
 	openings: array(NcAlarmModeOpeningsSchema),
-	exclusions: array(NcAlarmExclusionViewSchema)
+	exclusions: array(NcAlarmExclusionViewSchema),
+	/**
+	* Inputs bypassed for the rest of this arm session; cleared on disarm.
+	* Defaulted so an older hub answer still parses (as "none known").
+	*/
+	bypassedInputs: array(NcAlarmInputBypassViewSchema).default([])
 });
 var NcAlarmConfigSchema = object({
 	/**
@@ -55261,9 +55478,11 @@ var connectivityCapability = {
 	*/
 	durability: "restored",
 	/**
-	* History (D850): none — duplicates device-status.online (one authority for availability).
+	* History (D850): `connected` as a boolean series — change-only, no floor. It
+	* is the upstream entity's own link (a HA connectivity sensor), not the
+	* device's reachability, which stays `device-status.online`.
 	*/
-	history: "none",
+	history: { fields: { connected: { kind: "boolean" } } },
 	/** Clock fields: written, but excluded from the compare that decides
 	*  whether persisting is worth a SQLite commit. */
 	volatileStateFields: ["lastChangedAt"]
@@ -56087,11 +56306,22 @@ var dishwasherCapability = {
 	},
 	runtimeState: DishwasherStatusSchema,
 	durability: "session",
-	history: { fields: { progressPercent: {
-		kind: "gauge",
-		unit: "%",
-		deadband: 2
-	} } }
+	history: { fields: {
+		progressPercent: {
+			kind: "gauge",
+			unit: "%",
+			deadband: 2
+		},
+		state: { kind: "enum" },
+		operationState: { kind: "enum" },
+		remainingSeconds: {
+			kind: "gauge",
+			unit: "s",
+			minIntervalMs: 6e4
+		},
+		doorOpen: { kind: "boolean" },
+		powerOn: { kind: "boolean" }
+	} }
 };
 var DoorbellStatusSchema = object({
 	/** Ms epoch of the last press. null = never observed since this provider started. */
@@ -56208,9 +56438,15 @@ var enumSensorCapability = {
 	*/
 	durability: "restored",
 	/**
-	* History (D850): none — text/enum state has no history (non-goal).
+	* History (D850): the value as an `enum` series (an appliance's program or
+	* operation state, an HVAC action). The option set is per device, so the
+	* value list is LEARNED as values are first seen (bounded). A sensor with a
+	* `format` carries a timestamp, not a state, and is not recorded.
 	*/
-	history: "none",
+	history: { fields: { value: {
+		kind: "enum",
+		skipWhenSet: "format"
+	} } },
 	/** Clock fields: written, but excluded from the compare that decides
 	*  whether persisting is worth a SQLite commit. */
 	volatileStateFields: ["lastFetchedAt"]
@@ -58184,9 +58420,10 @@ var lockControlCapability = {
 	*/
 	durability: "restored",
 	/**
-	* History (D850): none — enum state; lock events belong in the events ledger.
+	* History (D850): the lock's state as an `enum` series — change-only, no
+	* floor: a jam or an unlock lasting seconds is the edge an operator looks for.
 	*/
-	history: "none",
+	history: { fields: { state: { kind: "enum" } } },
 	/** Clock fields: written, but excluded from the compare that decides
 	*  whether persisting is worth a SQLite commit. */
 	volatileStateFields: ["lastChangedAt"]
@@ -58360,9 +58597,18 @@ var mediaPlayerCapability = {
 	*/
 	durability: "session",
 	/**
-	* History (D850): none — `positionMs` moves continuously while playing; volume is transient.
+	* History (D850): volume (a level an operator or an automation sets; the
+	* default 10 s floor folds a slider drag into its end value) and mute.
+	* `positionMs` is not recorded: it moves continuously while playing.
 	*/
-	history: "none"
+	history: { fields: {
+		volumeLevel: {
+			kind: "gauge",
+			unit: "%",
+			deadband: 1
+		},
+		isMuted: { kind: "boolean" }
+	} }
 };
 /**
 * mesh-network — collection cap for mesh-VPN providers.
@@ -63655,9 +63901,29 @@ var streamParamsCapability = {
 	*/
 	durability: "restored",
 	/**
-	* History (D850): none — encoder configuration.
+	* History (D850): the configured bitrate and frame rate of the main and sub
+	* profiles. Configuration, so change-only on the default floor: a point is an
+	* operator's (or a tuner's) edit, which is exactly what a chart of a stream's
+	* quality over time must show.
 	*/
-	history: "none",
+	history: { fields: {
+		"main.bitrate": {
+			kind: "gauge",
+			unit: "kbps"
+		},
+		"main.framerate": {
+			kind: "gauge",
+			unit: "fps"
+		},
+		"sub.bitrate": {
+			kind: "gauge",
+			unit: "kbps"
+		},
+		"sub.framerate": {
+			kind: "gauge",
+			unit: "fps"
+		}
+	} },
 	/** Clock fields: written, but excluded from the compare that decides
 	*  whether persisting is worth a SQLite commit. */
 	volatileStateFields: ["lastFetchedAt"]
@@ -66835,6 +67101,15 @@ var BaseDevice = class {
 	* Drivers can use the `getProbeFlags()` helper to read the flag bag
 	* with a typed cast.
 	*
+	* Answer what you KNOW. A plain array is read as the complete list only
+	* while this device is `online` and probed; return
+	* `accessoryChildrenUnknown(reason)` whenever you cannot know the list right
+	* now (no credentials, parent not connected, a failed or partial read) —
+	* the kernel then deletes nothing. Return `accessoryChildrenComplete(list)`
+	* to say "connected, and this is the complete list" explicitly. A shrink is
+	* deleted only after a second agreeing complete read on a later probe (D49;
+	* `packages/system/src/kernel/moleculer/accessory-prune-gate.ts`).
+	*
 	* Default: no children.
 	*/
 	getAccessoryChildren() {
@@ -70966,7 +71241,19 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"logDestination.query": {
+	"logDestination.cancelRead": {
+		capName: "log-destination",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"logDestination.describeRead": {
+		capName: "log-destination",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"logDestination.read": {
 		capName: "log-destination",
 		capScope: "system",
 		addonId: null,
@@ -76973,6 +77260,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"logDestination.read": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
 	"mediaPlayer.getStatus": [{
 		name: "deviceId",
 		form: "single",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-matter-broker",
-  "version": "0.2.132",
+  "version": "0.2.133",
   "description": "Matter broker addon for CamStack — owns a Matter fabric (commissioning + the long-lived controller) via the matter.js controller and brokers commissioned Matter nodes into CamStack",
   "keywords": [
     "camstack",