@camstack/addon-matter-broker 0.2.142 → 0.2.144

package/dist/addon.js

@@ -13,7 +13,7 @@ let node_stream_promises = require("node:stream/promises");
 let node_net = require("node:net");
 let node_dgram = require("node:dgram");
 node_dgram = require_esm.__toESM(node_dgram, 1);
-//#region ../types/dist/event-category-7pZEBmVg.mjs
+//#region ../types/dist/event-category-BfJwUd2S.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -330,6 +330,15 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineDetectionBlind"] = "pipeline.detection-blind";
 	/**
+	* A camera's motion source has fired constantly with no subject for an hour
+	* (motion duty or session count over the bar, zero detections) — it is not
+	* blind, its motion zones or sensitivity want tuning (D907). Paired with
+	* {@link PipelineMotionCalm}.
+	*/
+	EventCategory["PipelineMotionNoisy"] = "pipeline.motion-noisy";
+	/** The recovery edge of {@link PipelineMotionNoisy}: the motion fell back, or a detection arrived. */
+	EventCategory["PipelineMotionCalm"] = "pipeline.motion-calm";
+	/**
 	* Per-camera pipeline config was mutated by the orchestrator
 	* (3-level settings change via `setAgentAddonDefaults` /
 	* `setCameraStepToggle` / `setCameraPipelineForAgent` or a
@@ -5569,7 +5578,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-CueztlR1.mjs
+//#region ../types/dist/sleep-DJFUfKvA.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -8168,7 +8177,7 @@ var EntryDescriptorSchema = object({
 	/** JSON Schema of the entry body; `secret: true` marks a password field. */
 	fields: record(string$2(), unknown())
 }).strict();
-/** What crosses the wire and sits in the engine's catalog: JSON only, no Zod. */
+/** What crosses the wire from an addon: JSON only, no Zod. An unknown key is refused. */
 var RecordKindDeclarationSchema = object({
 	database: _enum(RECORD_DATABASES).default("settings"),
 	class: _enum(RECORD_CLASSES),
@@ -8187,14 +8196,6 @@ var RecordKindDeclarationSchema = object({
 	secretPaths: array(string$2().min(1)).default([]),
 	/** The id key of each array that carries a secret (`{ headers: 'name' }`). */
 	secretArrayKeys: record(string$2(), string$2()).default({}),
-	/**
-	* RETIRED (D900): the legacy table a kind adopted from during the records
-	* migration. Nothing declares it any more and nothing reads it; the schema
-	* still ACCEPTS it because the catalog rows the migration wrote carry it
-	* (an orphaned kind is never redeclared) and an addon built before the
-	* removal still sends it. Never set it.
-	*/
-	adoptsFrom: string$2().min(1).optional(),
 	/** Kinds that must agree through `transact` sit in one file under one family name. */
 	transactFamily: string$2().min(1).optional(),
 	entry: EntryDescriptorSchema.optional()
@@ -12990,17 +12991,6 @@ object({
 	createdAt: number(),
 	updatedAt: number()
 });
-object({
-	id: string$2(),
-	label: string$2(),
-	isAdmin: boolean().default(false),
-	allowedProviders: AllowedProviderSchema,
-	allowedDevices: AllowedDevicesSchema,
-	tokenHash: string$2(),
-	tokenPrefix: string$2(),
-	createdAt: number(),
-	lastUsedAt: number().optional()
-});
 object({
 	id: string$2(),
 	userId: string$2(),
@@ -17031,16 +17021,36 @@ var RecordKindStateSchema = _enum([
 var DeclareKindResultSchema = object({
 	kindId: number().int(),
 	state: RecordKindStateSchema,
-	createdIndexes: array(string$2()),
-	/**
-	* RETIRED (D900): always `null`. It carried the records-migration boot guard;
-	* it stays on the wire, null, because an addon built before the removal reads
-	* an ABSENT field as "adoption pending" and refuses to start.
-	*/
-	adoptionPending: _null()
+	createdIndexes: array(string$2())
 });
 /** Keychain refs a write released (the old marker is gone from the row): the owner deletes the values. */
 var SecretRefsList = array(string$2());
+/**
+* One op of a `transact`: the single-row writes, each on a kind of the caller.
+* All ops of one call share ONE database file and ONE `transactFamily`.
+*/
+var RecordTransactOpSchema = discriminatedUnion("op", [
+	object({
+		op: literal("put"),
+		kind: RecordKindNameSchema,
+		record: RecordInputSchema,
+		ifRev: number().int().min(0).optional()
+	}),
+	object({
+		op: literal("patch"),
+		kind: RecordKindNameSchema,
+		id: RecordIdSchema,
+		data: RecordBodySchema,
+		at: number().int().nullable().optional(),
+		expiresAt: number().int().nullable().optional(),
+		ifRev: number().int().min(1).optional()
+	}),
+	object({
+		op: literal("delete"),
+		kind: RecordKindNameSchema,
+		id: RecordIdSchema
+	})
+]);
 var RecordSecretRefsSchema = record(string$2(), record(string$2(), string$2()));
 method(object({ kinds: record(RecordKindNameSchema, RecordKindDeclarationSchema) }), object({ kinds: record(string$2(), DeclareKindResultSchema) }), {
 	kind: "mutation",
@@ -17147,6 +17157,16 @@ method(object({ kinds: record(RecordKindNameSchema, RecordKindDeclarationSchema)
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({ ops: array(RecordTransactOpSchema).min(1).max(RECORD_BATCH_MAX) }), object({
+	results: array(object({
+		rev: number().int().nullable(),
+		deleted: boolean()
+	})),
+	releasedRefs: SecretRefsList,
+	secretRefs: SecretRefsList
+}), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({
 	deviceId: number().int(),
 	kinds: array(RecordKindNameSchema).optional()
@@ -42758,9 +42778,13 @@ var NcSystemEventKindSchema = _enum([
 	"node-updating",
 	"node-inference-unavailable",
 	"detection-blind",
+	"motion-noisy",
+	"motion-calm",
 	"recording-stalled",
 	"recording-healthy",
 	"recording-degraded",
+	"device-attention-required",
+	"device-attention-resolved",
 	"storage-location-low",
 	"storage-location-critical",
 	"storage-location-ok",
@@ -48321,7 +48345,6 @@ var RecommendationReasonSchema = discriminatedUnion("kind", [
 		modelId: string$2()
 	}),
 	object({ kind: literal("cpu-device") }),
-	object({ kind: literal("coral-untouched") }),
 	object({ kind: literal("device-disabled") }),
 	object({ kind: literal("device-unavailable") }),
 	object({ kind: literal("node-offline") }),
@@ -48419,11 +48442,6 @@ var AutoTuneWarningSchema = discriminatedUnion("kind", [
 		kind: literal("detector-store-unreadable"),
 		error: string$2()
 	}),
-	object({
-		kind: literal("coral-enabled"),
-		nodeId: string$2(),
-		deviceKey: string$2()
-	}),
 	object({
 		kind: literal("custom-pin-kept"),
 		nodeId: string$2(),
@@ -56101,6 +56119,16 @@ var DishwasherStatusSchema = object({
 	powerState: string$2().nullable(),
 	saltLevel: DishwasherConsumableLevelSchema.nullable(),
 	rinseAidLevel: DishwasherConsumableLevelSchema.nullable(),
+	/**
+	* True while the appliance asks for its filter to be cleaned (smart-filter, filter-system or
+	* combined care-and-filter reminder raised); false when every such reminder reads clear; null
+	* when none is reported. A cleared reminder is not an unknown one.
+	*/
+	filterCleaningDue: boolean().nullable(),
+	/** True while the machine-care (descaling / cleaning-program) reminder is raised; false when clear; null when not reported. */
+	machineCareDue: boolean().nullable(),
+	/** Program runs left before the machine-care reminder is due; null when the appliance does not say. */
+	machineCareRemainingRuns: number().int().nonnegative().nullable(),
 	/** Option states: null when the appliance does not expose the option or has not said. */
 	halfLoad: boolean().nullable(),
 	hygienePlus: boolean().nullable(),
@@ -64751,16 +64779,6 @@ var UpdateUserInputSchema = object({
 	allowedDevices: record(string$2(), union([array(string$2()), literal("*")])).optional(),
 	scopes: array(TokenScopeSchema).optional()
 });
-var ApiKeySummarySchema = object({
-	id: string$2(),
-	label: string$2(),
-	isAdmin: boolean().default(false),
-	allowedProviders: union([array(string$2()), literal("*")]).optional(),
-	allowedDevices: record(string$2(), union([array(string$2()), literal("*")])).optional(),
-	tokenPrefix: string$2(),
-	createdAt: number(),
-	lastUsedAt: number().optional()
-});
 var OauthSessionSummarySchema = object({
 	id: string$2(),
 	userId: string$2(),
@@ -64782,8 +64800,7 @@ var TotpStatusSchema = object({
 	confirmedAt: number().nullable()
 });
 /**
-* user-management — singleton capability for user accounts and the
-* legacy API-key rows.
+* user-management — singleton capability for user accounts.
 *
 * v2 model: every method gated by `auth: 'admin'`. Admin-only delegation
 * — the subset check on `setUserScopes` is moot
@@ -64839,10 +64856,6 @@ method(_void(), array(UserSummarySchema), { auth: "admin" }), method(CreateUserI
 }), UserSummarySchema.extend({ passwordHash: string$2() }).nullable(), {
 	kind: "mutation",
 	access: "view"
-}), method(_void(), array(ApiKeySummarySchema), { auth: "admin" }), method(object({ id: string$2() }), object({ success: literal(true) }), {
-	kind: "mutation",
-	auth: "admin",
-	access: "delete"
 }), method(object({ userId: string$2() }), TotpSetupResultSchema, {
 	kind: "mutation",
 	auth: "admin",
@@ -74298,6 +74311,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"records.transact": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"sceneMonitor.captureReference": {
 		capName: "scene-monitor",
 		capScope: "device",
@@ -75630,12 +75649,6 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"userManagement.listApiKeys": {
-		capName: "user-management",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
 	"userManagement.listExternalIdentities": {
 		capName: "user-management",
 		capScope: "system",
@@ -75690,12 +75703,6 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"userManagement.revokeApiKey": {
-		capName: "user-management",
-		capScope: "system",
-		addonId: null,
-		access: "delete"
-	},
 	"userManagement.revokeOauthSession": {
 		capName: "user-management",
 		capScope: "system",
@@ -79060,9 +79067,13 @@ new Map(Object.entries({
 	"stream-online": "device-events",
 	"stream-offline": "device-events",
 	"detection-blind": "device-events",
+	"motion-noisy": "device-events",
+	"motion-calm": "device-events",
 	"recording-stalled": "device-events",
 	"recording-healthy": "device-events",
 	"recording-degraded": "device-events",
+	"device-attention-required": "device-events",
+	"device-attention-resolved": "device-events",
 	"node-online": "system",
 	"node-offline": "system",
 	"node-restarting": "system",
@@ -79145,6 +79156,12 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 		label: "Detecting nothing",
 		kinds: ["detection-blind"]
 	},
+	{
+		id: "motion-noise",
+		family: "device-events",
+		label: "Motion without a subject",
+		kinds: ["motion-noisy", "motion-calm"]
+	},
 	{
 		id: "recording",
 		family: "device-events",
@@ -79155,6 +79172,12 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 			"recording-degraded"
 		]
 	},
+	{
+		id: "device-attention",
+		family: "device-events",
+		label: "Needs attention",
+		kinds: ["device-attention-required", "device-attention-resolved"]
+	},
 	{
 		id: "nodes",
 		family: "system",
@@ -79294,6 +79317,7 @@ var ALERT_EPISODE = [
 	"alert-error",
 	"alert-critical-resolved"
 ];
+var DEVICE_ATTENTION = ["device-attention-required", "device-attention-resolved"];
 var UPDATES = [
 	"addon-update-available",
 	"server-update-available",
@@ -79323,9 +79347,12 @@ var DEVICE_EVENTS = [
 	"stream-online",
 	"stream-offline",
 	"detection-blind",
+	"motion-noisy",
+	"motion-calm",
 	"recording-stalled",
 	"recording-healthy",
 	"recording-degraded",
+	...DEVICE_ATTENTION,
 	...ALARM
 ];
 /** Every kind a summary may speak about — the two summarisable families. */
@@ -79493,7 +79520,9 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
-	([...RULE_TEXT], [...ALERT_EPISODE]),
+	[...RULE_TEXT],
+	[...RULE_TEXT],
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
@@ -79515,11 +79544,11 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	([...RULE_TEXT], [...ALERT_EPISODE]),
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	([...RULE_TEXT], [...ALERT_EPISODE]),
-	([...RULE_TEXT], [...ALERT_EPISODE]),
-	([...RULE_TEXT], [...ALERT_EPISODE]),
-	([...RULE_TEXT], [...ALERT_EPISODE]),
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
@@ -79595,6 +79624,15 @@ new Map([
 		snapshotLabel: "Tanks low or full now",
 		snapshotSection: "tanks"
 	},
+	{
+		id: "motion-noise",
+		family: "device-events",
+		label: "Motion without a subject (constant / calm again)",
+		bad: ["motion-noisy"],
+		recovery: ["motion-calm"],
+		snapshotLabel: "Cameras with constant motion now",
+		snapshotSection: null
+	},
 	{
 		id: "recording-health",
 		family: "device-events",
@@ -79604,6 +79642,15 @@ new Map([
 		snapshotLabel: "Recordings stalled now",
 		snapshotSection: null
 	},
+	{
+		id: "device-attention",
+		family: "device-events",
+		label: "Device needs attention (raised / resolved)",
+		bad: ["device-attention-required"],
+		recovery: ["device-attention-resolved"],
+		snapshotLabel: "Devices needing attention now",
+		snapshotSection: null
+	},
 	{
 		id: "node-connectivity",
 		family: "system",

package/dist/addon.mjs

@@ -11,7 +11,7 @@ import { networkInterfaces, tmpdir, uptime } from "node:os";
 import { finished } from "node:stream/promises";
 import { createConnection, createServer as createServer$2 } from "node:net";
 import * as dgram from "node:dgram";
-//#region ../types/dist/event-category-7pZEBmVg.mjs
+//#region ../types/dist/event-category-BfJwUd2S.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -328,6 +328,15 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineDetectionBlind"] = "pipeline.detection-blind";
 	/**
+	* A camera's motion source has fired constantly with no subject for an hour
+	* (motion duty or session count over the bar, zero detections) — it is not
+	* blind, its motion zones or sensitivity want tuning (D907). Paired with
+	* {@link PipelineMotionCalm}.
+	*/
+	EventCategory["PipelineMotionNoisy"] = "pipeline.motion-noisy";
+	/** The recovery edge of {@link PipelineMotionNoisy}: the motion fell back, or a detection arrived. */
+	EventCategory["PipelineMotionCalm"] = "pipeline.motion-calm";
+	/**
 	* Per-camera pipeline config was mutated by the orchestrator
 	* (3-level settings change via `setAgentAddonDefaults` /
 	* `setCameraStepToggle` / `setCameraPipelineForAgent` or a
@@ -5567,7 +5576,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-CueztlR1.mjs
+//#region ../types/dist/sleep-DJFUfKvA.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -8166,7 +8175,7 @@ var EntryDescriptorSchema = object({
 	/** JSON Schema of the entry body; `secret: true` marks a password field. */
 	fields: record(string$2(), unknown())
 }).strict();
-/** What crosses the wire and sits in the engine's catalog: JSON only, no Zod. */
+/** What crosses the wire from an addon: JSON only, no Zod. An unknown key is refused. */
 var RecordKindDeclarationSchema = object({
 	database: _enum(RECORD_DATABASES).default("settings"),
 	class: _enum(RECORD_CLASSES),
@@ -8185,14 +8194,6 @@ var RecordKindDeclarationSchema = object({
 	secretPaths: array(string$2().min(1)).default([]),
 	/** The id key of each array that carries a secret (`{ headers: 'name' }`). */
 	secretArrayKeys: record(string$2(), string$2()).default({}),
-	/**
-	* RETIRED (D900): the legacy table a kind adopted from during the records
-	* migration. Nothing declares it any more and nothing reads it; the schema
-	* still ACCEPTS it because the catalog rows the migration wrote carry it
-	* (an orphaned kind is never redeclared) and an addon built before the
-	* removal still sends it. Never set it.
-	*/
-	adoptsFrom: string$2().min(1).optional(),
 	/** Kinds that must agree through `transact` sit in one file under one family name. */
 	transactFamily: string$2().min(1).optional(),
 	entry: EntryDescriptorSchema.optional()
@@ -12988,17 +12989,6 @@ object({
 	createdAt: number(),
 	updatedAt: number()
 });
-object({
-	id: string$2(),
-	label: string$2(),
-	isAdmin: boolean().default(false),
-	allowedProviders: AllowedProviderSchema,
-	allowedDevices: AllowedDevicesSchema,
-	tokenHash: string$2(),
-	tokenPrefix: string$2(),
-	createdAt: number(),
-	lastUsedAt: number().optional()
-});
 object({
 	id: string$2(),
 	userId: string$2(),
@@ -17029,16 +17019,36 @@ var RecordKindStateSchema = _enum([
 var DeclareKindResultSchema = object({
 	kindId: number().int(),
 	state: RecordKindStateSchema,
-	createdIndexes: array(string$2()),
-	/**
-	* RETIRED (D900): always `null`. It carried the records-migration boot guard;
-	* it stays on the wire, null, because an addon built before the removal reads
-	* an ABSENT field as "adoption pending" and refuses to start.
-	*/
-	adoptionPending: _null()
+	createdIndexes: array(string$2())
 });
 /** Keychain refs a write released (the old marker is gone from the row): the owner deletes the values. */
 var SecretRefsList = array(string$2());
+/**
+* One op of a `transact`: the single-row writes, each on a kind of the caller.
+* All ops of one call share ONE database file and ONE `transactFamily`.
+*/
+var RecordTransactOpSchema = discriminatedUnion("op", [
+	object({
+		op: literal("put"),
+		kind: RecordKindNameSchema,
+		record: RecordInputSchema,
+		ifRev: number().int().min(0).optional()
+	}),
+	object({
+		op: literal("patch"),
+		kind: RecordKindNameSchema,
+		id: RecordIdSchema,
+		data: RecordBodySchema,
+		at: number().int().nullable().optional(),
+		expiresAt: number().int().nullable().optional(),
+		ifRev: number().int().min(1).optional()
+	}),
+	object({
+		op: literal("delete"),
+		kind: RecordKindNameSchema,
+		id: RecordIdSchema
+	})
+]);
 var RecordSecretRefsSchema = record(string$2(), record(string$2(), string$2()));
 method(object({ kinds: record(RecordKindNameSchema, RecordKindDeclarationSchema) }), object({ kinds: record(string$2(), DeclareKindResultSchema) }), {
 	kind: "mutation",
@@ -17145,6 +17155,16 @@ method(object({ kinds: record(RecordKindNameSchema, RecordKindDeclarationSchema)
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({ ops: array(RecordTransactOpSchema).min(1).max(RECORD_BATCH_MAX) }), object({
+	results: array(object({
+		rev: number().int().nullable(),
+		deleted: boolean()
+	})),
+	releasedRefs: SecretRefsList,
+	secretRefs: SecretRefsList
+}), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({
 	deviceId: number().int(),
 	kinds: array(RecordKindNameSchema).optional()
@@ -42756,9 +42776,13 @@ var NcSystemEventKindSchema = _enum([
 	"node-updating",
 	"node-inference-unavailable",
 	"detection-blind",
+	"motion-noisy",
+	"motion-calm",
 	"recording-stalled",
 	"recording-healthy",
 	"recording-degraded",
+	"device-attention-required",
+	"device-attention-resolved",
 	"storage-location-low",
 	"storage-location-critical",
 	"storage-location-ok",
@@ -48319,7 +48343,6 @@ var RecommendationReasonSchema = discriminatedUnion("kind", [
 		modelId: string$2()
 	}),
 	object({ kind: literal("cpu-device") }),
-	object({ kind: literal("coral-untouched") }),
 	object({ kind: literal("device-disabled") }),
 	object({ kind: literal("device-unavailable") }),
 	object({ kind: literal("node-offline") }),
@@ -48417,11 +48440,6 @@ var AutoTuneWarningSchema = discriminatedUnion("kind", [
 		kind: literal("detector-store-unreadable"),
 		error: string$2()
 	}),
-	object({
-		kind: literal("coral-enabled"),
-		nodeId: string$2(),
-		deviceKey: string$2()
-	}),
 	object({
 		kind: literal("custom-pin-kept"),
 		nodeId: string$2(),
@@ -56099,6 +56117,16 @@ var DishwasherStatusSchema = object({
 	powerState: string$2().nullable(),
 	saltLevel: DishwasherConsumableLevelSchema.nullable(),
 	rinseAidLevel: DishwasherConsumableLevelSchema.nullable(),
+	/**
+	* True while the appliance asks for its filter to be cleaned (smart-filter, filter-system or
+	* combined care-and-filter reminder raised); false when every such reminder reads clear; null
+	* when none is reported. A cleared reminder is not an unknown one.
+	*/
+	filterCleaningDue: boolean().nullable(),
+	/** True while the machine-care (descaling / cleaning-program) reminder is raised; false when clear; null when not reported. */
+	machineCareDue: boolean().nullable(),
+	/** Program runs left before the machine-care reminder is due; null when the appliance does not say. */
+	machineCareRemainingRuns: number().int().nonnegative().nullable(),
 	/** Option states: null when the appliance does not expose the option or has not said. */
 	halfLoad: boolean().nullable(),
 	hygienePlus: boolean().nullable(),
@@ -64749,16 +64777,6 @@ var UpdateUserInputSchema = object({
 	allowedDevices: record(string$2(), union([array(string$2()), literal("*")])).optional(),
 	scopes: array(TokenScopeSchema).optional()
 });
-var ApiKeySummarySchema = object({
-	id: string$2(),
-	label: string$2(),
-	isAdmin: boolean().default(false),
-	allowedProviders: union([array(string$2()), literal("*")]).optional(),
-	allowedDevices: record(string$2(), union([array(string$2()), literal("*")])).optional(),
-	tokenPrefix: string$2(),
-	createdAt: number(),
-	lastUsedAt: number().optional()
-});
 var OauthSessionSummarySchema = object({
 	id: string$2(),
 	userId: string$2(),
@@ -64780,8 +64798,7 @@ var TotpStatusSchema = object({
 	confirmedAt: number().nullable()
 });
 /**
-* user-management — singleton capability for user accounts and the
-* legacy API-key rows.
+* user-management — singleton capability for user accounts.
 *
 * v2 model: every method gated by `auth: 'admin'`. Admin-only delegation
 * — the subset check on `setUserScopes` is moot
@@ -64837,10 +64854,6 @@ method(_void(), array(UserSummarySchema), { auth: "admin" }), method(CreateUserI
 }), UserSummarySchema.extend({ passwordHash: string$2() }).nullable(), {
 	kind: "mutation",
 	access: "view"
-}), method(_void(), array(ApiKeySummarySchema), { auth: "admin" }), method(object({ id: string$2() }), object({ success: literal(true) }), {
-	kind: "mutation",
-	auth: "admin",
-	access: "delete"
 }), method(object({ userId: string$2() }), TotpSetupResultSchema, {
 	kind: "mutation",
 	auth: "admin",
@@ -74296,6 +74309,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"records.transact": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"sceneMonitor.captureReference": {
 		capName: "scene-monitor",
 		capScope: "device",
@@ -75628,12 +75647,6 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"userManagement.listApiKeys": {
-		capName: "user-management",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
 	"userManagement.listExternalIdentities": {
 		capName: "user-management",
 		capScope: "system",
@@ -75688,12 +75701,6 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"userManagement.revokeApiKey": {
-		capName: "user-management",
-		capScope: "system",
-		addonId: null,
-		access: "delete"
-	},
 	"userManagement.revokeOauthSession": {
 		capName: "user-management",
 		capScope: "system",
@@ -79058,9 +79065,13 @@ new Map(Object.entries({
 	"stream-online": "device-events",
 	"stream-offline": "device-events",
 	"detection-blind": "device-events",
+	"motion-noisy": "device-events",
+	"motion-calm": "device-events",
 	"recording-stalled": "device-events",
 	"recording-healthy": "device-events",
 	"recording-degraded": "device-events",
+	"device-attention-required": "device-events",
+	"device-attention-resolved": "device-events",
 	"node-online": "system",
 	"node-offline": "system",
 	"node-restarting": "system",
@@ -79143,6 +79154,12 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 		label: "Detecting nothing",
 		kinds: ["detection-blind"]
 	},
+	{
+		id: "motion-noise",
+		family: "device-events",
+		label: "Motion without a subject",
+		kinds: ["motion-noisy", "motion-calm"]
+	},
 	{
 		id: "recording",
 		family: "device-events",
@@ -79153,6 +79170,12 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 			"recording-degraded"
 		]
 	},
+	{
+		id: "device-attention",
+		family: "device-events",
+		label: "Needs attention",
+		kinds: ["device-attention-required", "device-attention-resolved"]
+	},
 	{
 		id: "nodes",
 		family: "system",
@@ -79292,6 +79315,7 @@ var ALERT_EPISODE = [
 	"alert-error",
 	"alert-critical-resolved"
 ];
+var DEVICE_ATTENTION = ["device-attention-required", "device-attention-resolved"];
 var UPDATES = [
 	"addon-update-available",
 	"server-update-available",
@@ -79321,9 +79345,12 @@ var DEVICE_EVENTS = [
 	"stream-online",
 	"stream-offline",
 	"detection-blind",
+	"motion-noisy",
+	"motion-calm",
 	"recording-stalled",
 	"recording-healthy",
 	"recording-degraded",
+	...DEVICE_ATTENTION,
 	...ALARM
 ];
 /** Every kind a summary may speak about — the two summarisable families. */
@@ -79491,7 +79518,9 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
-	([...RULE_TEXT], [...ALERT_EPISODE]),
+	[...RULE_TEXT],
+	[...RULE_TEXT],
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
@@ -79513,11 +79542,11 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	([...RULE_TEXT], [...ALERT_EPISODE]),
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	([...RULE_TEXT], [...ALERT_EPISODE]),
-	([...RULE_TEXT], [...ALERT_EPISODE]),
-	([...RULE_TEXT], [...ALERT_EPISODE]),
-	([...RULE_TEXT], [...ALERT_EPISODE]),
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
@@ -79593,6 +79622,15 @@ new Map([
 		snapshotLabel: "Tanks low or full now",
 		snapshotSection: "tanks"
 	},
+	{
+		id: "motion-noise",
+		family: "device-events",
+		label: "Motion without a subject (constant / calm again)",
+		bad: ["motion-noisy"],
+		recovery: ["motion-calm"],
+		snapshotLabel: "Cameras with constant motion now",
+		snapshotSection: null
+	},
 	{
 		id: "recording-health",
 		family: "device-events",
@@ -79602,6 +79640,15 @@ new Map([
 		snapshotLabel: "Recordings stalled now",
 		snapshotSection: null
 	},
+	{
+		id: "device-attention",
+		family: "device-events",
+		label: "Device needs attention (raised / resolved)",
+		bad: ["device-attention-required"],
+		recovery: ["device-attention-resolved"],
+		snapshotLabel: "Devices needing attention now",
+		snapshotSection: null
+	},
 	{
 		id: "node-connectivity",
 		family: "system",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-matter-broker",
-  "version": "0.2.142",
+  "version": "0.2.144",
   "description": "Matter broker addon for CamStack — owns a Matter fabric (commissioning + the long-lived controller) via the matter.js controller and brokers commissioned Matter nodes into CamStack",
   "keywords": [
     "camstack",