@camstack/addon-matter-broker 0.2.81 → 0.2.83

package/dist/addon.js

@@ -18826,11 +18826,30 @@ var SensorEventSchema = object({
 	value: record(string$2(), unknown()).nullable(),
 	timestamp: number()
 });
+/**
+* One stored sighting on a track's trajectory.
+*
+* The array these live in is returned in TIME order (D399) — it is APPENDED in
+* arrival order, and the two detector passes interleave, so a consumer must not
+* assume the two are the same on a row written by an older build.
+*/
 var TrackPositionSchema = object({
 	x: number(),
 	y: number(),
 	timestamp: number(),
-	bbox: BoundingBoxSchema
+	bbox: BoundingBoxSchema,
+	/**
+	* Which detector pass measured this box (D399): `frame` is the full-frame
+	* pass on the analysis raster, `recovery` is the native-resolution
+	* small-subject second pass (D377/D378). Both write into one array, and until
+	* this field existed the only way to tell them apart was that full-frame boxes
+	* are exact multiples of 1.2 while recovery boxes are full-precision floats.
+	* Absent on rows written before D399.
+	*/
+	source: _enum(["frame", "recovery"]).optional(),
+	/** Detection score of this box, so a position can be weighed and not only
+	*  plotted. Absent on rows written before D399. */
+	score: number().optional()
 });
 var TrackSnapshotSchema = object({
 	timestamp: number(),
@@ -19230,14 +19249,25 @@ var TrackSchema = object({
 	*/
 	hasRider: boolean().optional(),
 	/**
-	* WHY this track ended without a NATIVE best-shot tile
-	* ([D276](../decisions/adr-0276-a-stand-in-tile-is-provisional-and-a-close-says-why.md)) —
+	* WHY this track ended without a NATIVE best-shot FRAME
+	* ([D276](../decisions/adr-0276-a-stand-in-tile-is-provisional-and-a-close-says-why.md),
+	* widened by [D400](../decisions/adr-0400-the-picture-is-judged-on-what-is-delivered.md)) —
 	* a composed token line (`no-key-frame capture=keyframe:native-missx4`,
-	* `derive-returned-null tile=standin`, …) written at close and CLEARED by
-	* the late-keyFrame upgrade when a native tile lands after all. The
-	* operator-facing answer to "perché manca l'immagine?" on a track whose
+	* `derive-returned-null tile=standin`,
+	* `native-tile tile=native no-key-frame-at-close`, …) written at close and
+	* CLEARED by the late-keyFrame upgrade when a native tile lands after all.
+	* The operator-facing answer to "perché manca l'immagine?" on a track whose
 	* tile is a face/plate stand-in, a raster crop, or an icon.
 	*
+	* **`no-key-frame-at-close` (D400).** The line used to be written ONLY when
+	* the TILE ranked below native, so a track whose thumbnail landed natively
+	* while its key frame missed carried no reason at all — three of the four
+	* `MISSING_KEYFRAME` tracks in the 2026-09-07 operator audit were exactly
+	* that shape, and their "niente ultimo" had no cause anywhere on the row.
+	* The key frame is the head of a cascade (`keyFrame ⇒ keyFrameSmall ⇒ the
+	* lastFrame copy source`), so its absence is now on this line whatever the
+	* tile ended up being.
+	*
 	* **Absent ≠ "missed silently"**: a row written before the column, a hub
 	* that predates the field, and every track whose tile landed native all
 	* omit it. Render nothing when absent.
@@ -29291,8 +29321,27 @@ var PrivacyMaskRegionSchema = object({
 /** Current on-camera privacy state — mask master enable + zones + microphone. */
 var PrivacyMaskStatusSchema = object({
 	enabled: boolean(),
-	/** Active zones (normalized 0..1). Length ≤ maxRegions. */
-	regions: array(PrivacyMaskRegionSchema),
+	/**
+	* Active zones (normalized 0..1). Length ≤ maxRegions.
+	*
+	* `null` means "no answer" — the provider has never reached this camera
+	* (a cold `runtimeState` slice, a battery camera asleep) or the read
+	* failed. A consumer must render it as UNKNOWN and never as "this camera
+	* has no zones": those two look identical to an operator right up to the
+	* moment one of them is acted on, and acting on them differs completely.
+	* The switch group turned an unanswered read into *"nothing is set up for
+	* it to act on"* — an instruction to go and draw a zone that already
+	* exists — and this editor seeded an EMPTY canvas from it, one Save away
+	* from deleting the mask it could not read.
+	*
+	* Empty-and-answered is `[]` and stays a real answer: this camera genuinely
+	* has no zones. The distinction is the same one {@link
+	* PrivacyMaskStatusSchema.shape.audioEnabled} already draws for the
+	* microphone, on the very same payload — both planes come from ONE refresh,
+	* so it was never coherent for one of them to be able to say "unknown"
+	* while the other could not.
+	*/
+	regions: array(PrivacyMaskRegionSchema).nullable(),
 	/**
 	* Is the camera capturing sound right now? Read from the camera, never from
 	* a server-side mirror.

package/dist/addon.mjs

@@ -18824,11 +18824,30 @@ var SensorEventSchema = object({
 	value: record(string$2(), unknown()).nullable(),
 	timestamp: number()
 });
+/**
+* One stored sighting on a track's trajectory.
+*
+* The array these live in is returned in TIME order (D399) — it is APPENDED in
+* arrival order, and the two detector passes interleave, so a consumer must not
+* assume the two are the same on a row written by an older build.
+*/
 var TrackPositionSchema = object({
 	x: number(),
 	y: number(),
 	timestamp: number(),
-	bbox: BoundingBoxSchema
+	bbox: BoundingBoxSchema,
+	/**
+	* Which detector pass measured this box (D399): `frame` is the full-frame
+	* pass on the analysis raster, `recovery` is the native-resolution
+	* small-subject second pass (D377/D378). Both write into one array, and until
+	* this field existed the only way to tell them apart was that full-frame boxes
+	* are exact multiples of 1.2 while recovery boxes are full-precision floats.
+	* Absent on rows written before D399.
+	*/
+	source: _enum(["frame", "recovery"]).optional(),
+	/** Detection score of this box, so a position can be weighed and not only
+	*  plotted. Absent on rows written before D399. */
+	score: number().optional()
 });
 var TrackSnapshotSchema = object({
 	timestamp: number(),
@@ -19228,14 +19247,25 @@ var TrackSchema = object({
 	*/
 	hasRider: boolean().optional(),
 	/**
-	* WHY this track ended without a NATIVE best-shot tile
-	* ([D276](../decisions/adr-0276-a-stand-in-tile-is-provisional-and-a-close-says-why.md)) —
+	* WHY this track ended without a NATIVE best-shot FRAME
+	* ([D276](../decisions/adr-0276-a-stand-in-tile-is-provisional-and-a-close-says-why.md),
+	* widened by [D400](../decisions/adr-0400-the-picture-is-judged-on-what-is-delivered.md)) —
 	* a composed token line (`no-key-frame capture=keyframe:native-missx4`,
-	* `derive-returned-null tile=standin`, …) written at close and CLEARED by
-	* the late-keyFrame upgrade when a native tile lands after all. The
-	* operator-facing answer to "perché manca l'immagine?" on a track whose
+	* `derive-returned-null tile=standin`,
+	* `native-tile tile=native no-key-frame-at-close`, …) written at close and
+	* CLEARED by the late-keyFrame upgrade when a native tile lands after all.
+	* The operator-facing answer to "perché manca l'immagine?" on a track whose
 	* tile is a face/plate stand-in, a raster crop, or an icon.
 	*
+	* **`no-key-frame-at-close` (D400).** The line used to be written ONLY when
+	* the TILE ranked below native, so a track whose thumbnail landed natively
+	* while its key frame missed carried no reason at all — three of the four
+	* `MISSING_KEYFRAME` tracks in the 2026-09-07 operator audit were exactly
+	* that shape, and their "niente ultimo" had no cause anywhere on the row.
+	* The key frame is the head of a cascade (`keyFrame ⇒ keyFrameSmall ⇒ the
+	* lastFrame copy source`), so its absence is now on this line whatever the
+	* tile ended up being.
+	*
 	* **Absent ≠ "missed silently"**: a row written before the column, a hub
 	* that predates the field, and every track whose tile landed native all
 	* omit it. Render nothing when absent.
@@ -29289,8 +29319,27 @@ var PrivacyMaskRegionSchema = object({
 /** Current on-camera privacy state — mask master enable + zones + microphone. */
 var PrivacyMaskStatusSchema = object({
 	enabled: boolean(),
-	/** Active zones (normalized 0..1). Length ≤ maxRegions. */
-	regions: array(PrivacyMaskRegionSchema),
+	/**
+	* Active zones (normalized 0..1). Length ≤ maxRegions.
+	*
+	* `null` means "no answer" — the provider has never reached this camera
+	* (a cold `runtimeState` slice, a battery camera asleep) or the read
+	* failed. A consumer must render it as UNKNOWN and never as "this camera
+	* has no zones": those two look identical to an operator right up to the
+	* moment one of them is acted on, and acting on them differs completely.
+	* The switch group turned an unanswered read into *"nothing is set up for
+	* it to act on"* — an instruction to go and draw a zone that already
+	* exists — and this editor seeded an EMPTY canvas from it, one Save away
+	* from deleting the mask it could not read.
+	*
+	* Empty-and-answered is `[]` and stays a real answer: this camera genuinely
+	* has no zones. The distinction is the same one {@link
+	* PrivacyMaskStatusSchema.shape.audioEnabled} already draws for the
+	* microphone, on the very same payload — both planes come from ONE refresh,
+	* so it was never coherent for one of them to be able to say "unknown"
+	* while the other could not.
+	*/
+	regions: array(PrivacyMaskRegionSchema).nullable(),
 	/**
 	* Is the camera capturing sound right now? Read from the camera, never from
 	* a server-side mirror.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-matter-broker",
-  "version": "0.2.81",
+  "version": "0.2.83",
   "description": "Matter broker addon for CamStack — owns a Matter fabric (commissioning + the long-lived controller) via the matter.js controller and brokers commissioned Matter nodes into CamStack",
   "keywords": [
     "camstack",