@camstack/addon-matter-broker 0.2.83 → 0.2.85

package/dist/addon.js

@@ -16188,14 +16188,14 @@ var alarmPanelCapability = {
 			code: string$2().min(1).optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		disarm: method(object({
 			deviceId: number().int().nonnegative(),
 			code: string$2().min(1).optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/**
 		* Force the panel into the `triggered` state — used by HA
@@ -16206,7 +16206,7 @@ var alarmPanelCapability = {
 		*/
 		trigger: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -24173,7 +24173,7 @@ var brightnessCapability = {
 		percentage: number().min(0).max(100)
 	}), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) },
 	events: { 
 	/**
@@ -24222,7 +24222,7 @@ var buttonCapability = {
 	deviceTypes: [DeviceType.Button],
 	methods: { press: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) }
 };
 /**
@@ -24415,28 +24415,28 @@ var climateControlCapability = {
 			mode: HvacModeSchema
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setFanMode: method(object({
 			deviceId: number().int().nonnegative(),
 			fanMode: string$2().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setPreset: method(object({
 			deviceId: number().int().nonnegative(),
 			preset: string$2().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTarget: method(object({
 			deviceId: number().int().nonnegative(),
 			target: number()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTargetRange: method(object({
 			deviceId: number().int().nonnegative(),
@@ -24444,28 +24444,28 @@ var climateControlCapability = {
 			targetHigh: number()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTargetHumidity: method(object({
 			deviceId: number().int().nonnegative(),
 			targetHumidity: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setSwingVertical: method(object({
 			deviceId: number().int().nonnegative(),
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setSwingHorizontal: method(object({
 			deviceId: number().int().nonnegative(),
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -24565,7 +24565,7 @@ var colorCapability = {
 		color: ColorInputSchema
 	}), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) },
 	events: { 
 	/**
@@ -24894,7 +24894,7 @@ var controlCapability = {
 		control: ControlSetValueInputSchema
 	}), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) },
 	status: {
 		schema: ControlStatusSchema,
@@ -24940,29 +24940,29 @@ var coverCapability = {
 	methods: {
 		open: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		close: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		stop: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setPosition: method(object({
 			deviceId: number().int().nonnegative(),
 			position: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTiltPosition: method(object({
 			deviceId: number().int().nonnegative(),
 			tiltPosition: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -25348,6 +25348,59 @@ var IdentitySampleInfoSchema = object({
 	deviceId: number().int().optional(),
 	base64: string$2().optional()
 });
+/**
+* One enrolled sample, judged against the gallery it lives in.
+*
+* The gallery is the one input to recognition nobody re-reads: a sample
+* enrolled from the wrong face keeps voting forever, and because the matches it
+* pulls then look confident, nobody goes back. The 2026-09-08 audit found
+* exactly one such pair on this cluster — a sample scoring 0.61 against three
+* samples of ANOTHER person, enrolled from the same camera in the same minute,
+* where every other cross-identity pair sits under 0.50.
+*/
+var IdentitySampleAuditRowSchema = object({
+	sampleId: string$2(),
+	enrolledAt: number().int(),
+	deviceId: number().int().optional(),
+	source: _enum(["detected", "photo"]),
+	/** The enrolled crop's media key, so the panel can show the evidence. */
+	mediaKey: string$2().optional(),
+	/**
+	* False = the sample is stamped with a DIFFERENT face model, and a cosine
+	* across feature spaces is a well-formed float with no meaning. Every number
+	* below then says nothing — it must read as "cannot say", never as an
+	* accusation and never as a clean bill: this list ends in a Remove button.
+	*/
+	comparable: boolean(),
+	/** Mean cosine against this person's other samples. Null when there are none
+	*  to compare with — never 0, which would read as "opposite". */
+	selfMean: number().nullable(),
+	/** The other person this sample looks most like, when it looks like one.
+	*  This is the half that convicts: not looking like yourself can be a hard
+	*  angle; looking like someone the gallery can NAME is a mis-enrolment. */
+	bestForeign: object({
+		identityId: string$2(),
+		name: string$2(),
+		score: number()
+	}).optional(),
+	/** 0 = nothing to say. Higher = look at this one sooner. */
+	suspicion: number()
+});
+var IdentitySampleAuditSchema = object({
+	identityId: string$2(),
+	name: string$2(),
+	/** The cluster face model every comparison was made in. */
+	modelId: string$2(),
+	totalSamples: number().int(),
+	comparableSamples: number().int(),
+	flagged: number().int(),
+	/** The bar `flagged` counts against, so the panel states the RULE and not
+	*  only its current result. */
+	flagThreshold: number(),
+	/** Worst first. A row with nothing to say still appears, at the bottom: the
+	*  operator asked to see the gallery, not only its accusations. */
+	rows: array(IdentitySampleAuditRowSchema).readonly()
+});
 var FaceInfoSchema = object({
 	faceId: string$2(),
 	deviceId: number().int(),
@@ -25499,7 +25552,7 @@ includeCrops: boolean().optional() }).optional(), array(IdentitySchema).readonly
 }), method(object({ id: string$2() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ identityId: string$2() }), array(IdentitySampleInfoSchema).readonly()), method(object({
+}), method(object({ identityId: string$2() }), array(IdentitySampleInfoSchema).readonly()), method(object({ identityId: string$2().min(1) }), IdentitySampleAuditSchema, { auth: "admin" }), method(object({
 	identityId: string$2(),
 	sampleId: string$2()
 }), _void(), {
@@ -25692,28 +25745,28 @@ var fanControlCapability = {
 			percentage: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setPreset: method(object({
 			deviceId: number().int().nonnegative(),
 			preset: string$2().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setDirection: method(object({
 			deviceId: number().int().nonnegative(),
 			direction: FanDirectionSchema
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setOscillating: method(object({
 			deviceId: number().int().nonnegative(),
 			oscillating: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -25935,21 +25988,21 @@ var humidifierCapability = {
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTargetHumidity: method(object({
 			deviceId: number().int().nonnegative(),
 			humidity: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setMode: method(object({
 			deviceId: number().int().nonnegative(),
 			mode: string$2().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -26650,15 +26703,15 @@ var lawnMowerControlCapability = {
 	methods: {
 		startMowing: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		pause: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		dock: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -26943,18 +26996,18 @@ var lockControlCapability = {
 			code: string$2().min(1).optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		unlock: method(object({
 			deviceId: number().int().nonnegative(),
 			code: string$2().min(1).optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		open: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -27057,65 +27110,65 @@ var mediaPlayerCapability = {
 	methods: {
 		play: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		pause: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		stop: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		next: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		previous: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		seek: method(object({
 			deviceId: number().int().nonnegative(),
 			positionMs: number().int().nonnegative()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setVolume: method(object({
 			deviceId: number().int().nonnegative(),
 			volumeLevel: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setMute: method(object({
 			deviceId: number().int().nonnegative(),
 			muted: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setShuffle: method(object({
 			deviceId: number().int().nonnegative(),
 			shuffle: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setRepeat: method(object({
 			deviceId: number().int().nonnegative(),
 			repeat: MediaPlayerRepeatSchema
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		selectSource: method(object({
 			deviceId: number().int().nonnegative(),
 			source: string$2().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		playMedia: method(object({
 			deviceId: number().int().nonnegative(),
@@ -27126,7 +27179,7 @@ var mediaPlayerCapability = {
 			mediaType: string$2().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -28719,27 +28772,27 @@ var petFeederCapability = {
 			hopper2: gramsPortion.optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Cancel an in-progress manual feed. */
 		cancelFeed: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Reset the desiccant "days remaining" counter after replacing it. */
 		resetDesiccant: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Mark a hopper as refilled (D4H/D4S/D4SH). */
 		markFoodReplenished: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Call the pet with the recorded prompt (D3). */
 		callPet: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Play a stored sound by id (D3 / D4H / D4SH). */
 		playSound: method(object({
@@ -28747,7 +28800,7 @@ var petFeederCapability = {
 			soundId: number().int().nonnegative()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Toggle the child-lock (manual-lock) setting. */
 		setChildLock: method(object({
@@ -28755,7 +28808,7 @@ var petFeederCapability = {
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Toggle the front indicator light. */
 		setIndicatorLight: method(object({
@@ -28763,7 +28816,7 @@ var petFeederCapability = {
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Toggle the dispense chime. */
 		setFeedSound: method(object({
@@ -28771,7 +28824,7 @@ var petFeederCapability = {
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Set the speaker / prompt volume level. */
 		setVolume: method(object({
@@ -28779,7 +28832,7 @@ var petFeederCapability = {
 			level: number().int().nonnegative()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -31075,7 +31128,7 @@ var switchCapability = {
 		on: boolean()
 	}), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) },
 	events: { onStateChanged: { data: object({
 		deviceId: number(),
@@ -32063,30 +32116,30 @@ var vacuumControlCapability = {
 	methods: {
 		start: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		pause: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		stop: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		returnToBase: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		locate: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setFanSpeed: method(object({
 			deviceId: number().int().nonnegative(),
 			speed: string$2().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -32130,22 +32183,22 @@ var valveCapability = {
 	methods: {
 		open: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		close: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		stop: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setPosition: method(object({
 			deviceId: number().int().nonnegative(),
 			position: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -32244,21 +32297,21 @@ var waterHeaterCapability = {
 			temp: number().finite()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setOperationMode: method(object({
 			deviceId: number().int().nonnegative(),
 			mode: string$2().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setAway: method(object({
 			deviceId: number().int().nonnegative(),
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -35992,6 +36045,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"faceGallery.auditIdentitySamples": {
+		capName: "face-gallery",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"faceGallery.createIdentity": {
 		capName: "face-gallery",
 		capScope: "system",

package/dist/addon.mjs

@@ -16186,14 +16186,14 @@ var alarmPanelCapability = {
 			code: string$2().min(1).optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		disarm: method(object({
 			deviceId: number().int().nonnegative(),
 			code: string$2().min(1).optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/**
 		* Force the panel into the `triggered` state — used by HA
@@ -16204,7 +16204,7 @@ var alarmPanelCapability = {
 		*/
 		trigger: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -24171,7 +24171,7 @@ var brightnessCapability = {
 		percentage: number().min(0).max(100)
 	}), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) },
 	events: { 
 	/**
@@ -24220,7 +24220,7 @@ var buttonCapability = {
 	deviceTypes: [DeviceType.Button],
 	methods: { press: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) }
 };
 /**
@@ -24413,28 +24413,28 @@ var climateControlCapability = {
 			mode: HvacModeSchema
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setFanMode: method(object({
 			deviceId: number().int().nonnegative(),
 			fanMode: string$2().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setPreset: method(object({
 			deviceId: number().int().nonnegative(),
 			preset: string$2().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTarget: method(object({
 			deviceId: number().int().nonnegative(),
 			target: number()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTargetRange: method(object({
 			deviceId: number().int().nonnegative(),
@@ -24442,28 +24442,28 @@ var climateControlCapability = {
 			targetHigh: number()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTargetHumidity: method(object({
 			deviceId: number().int().nonnegative(),
 			targetHumidity: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setSwingVertical: method(object({
 			deviceId: number().int().nonnegative(),
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setSwingHorizontal: method(object({
 			deviceId: number().int().nonnegative(),
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -24563,7 +24563,7 @@ var colorCapability = {
 		color: ColorInputSchema
 	}), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) },
 	events: { 
 	/**
@@ -24892,7 +24892,7 @@ var controlCapability = {
 		control: ControlSetValueInputSchema
 	}), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) },
 	status: {
 		schema: ControlStatusSchema,
@@ -24938,29 +24938,29 @@ var coverCapability = {
 	methods: {
 		open: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		close: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		stop: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setPosition: method(object({
 			deviceId: number().int().nonnegative(),
 			position: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTiltPosition: method(object({
 			deviceId: number().int().nonnegative(),
 			tiltPosition: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -25346,6 +25346,59 @@ var IdentitySampleInfoSchema = object({
 	deviceId: number().int().optional(),
 	base64: string$2().optional()
 });
+/**
+* One enrolled sample, judged against the gallery it lives in.
+*
+* The gallery is the one input to recognition nobody re-reads: a sample
+* enrolled from the wrong face keeps voting forever, and because the matches it
+* pulls then look confident, nobody goes back. The 2026-09-08 audit found
+* exactly one such pair on this cluster — a sample scoring 0.61 against three
+* samples of ANOTHER person, enrolled from the same camera in the same minute,
+* where every other cross-identity pair sits under 0.50.
+*/
+var IdentitySampleAuditRowSchema = object({
+	sampleId: string$2(),
+	enrolledAt: number().int(),
+	deviceId: number().int().optional(),
+	source: _enum(["detected", "photo"]),
+	/** The enrolled crop's media key, so the panel can show the evidence. */
+	mediaKey: string$2().optional(),
+	/**
+	* False = the sample is stamped with a DIFFERENT face model, and a cosine
+	* across feature spaces is a well-formed float with no meaning. Every number
+	* below then says nothing — it must read as "cannot say", never as an
+	* accusation and never as a clean bill: this list ends in a Remove button.
+	*/
+	comparable: boolean(),
+	/** Mean cosine against this person's other samples. Null when there are none
+	*  to compare with — never 0, which would read as "opposite". */
+	selfMean: number().nullable(),
+	/** The other person this sample looks most like, when it looks like one.
+	*  This is the half that convicts: not looking like yourself can be a hard
+	*  angle; looking like someone the gallery can NAME is a mis-enrolment. */
+	bestForeign: object({
+		identityId: string$2(),
+		name: string$2(),
+		score: number()
+	}).optional(),
+	/** 0 = nothing to say. Higher = look at this one sooner. */
+	suspicion: number()
+});
+var IdentitySampleAuditSchema = object({
+	identityId: string$2(),
+	name: string$2(),
+	/** The cluster face model every comparison was made in. */
+	modelId: string$2(),
+	totalSamples: number().int(),
+	comparableSamples: number().int(),
+	flagged: number().int(),
+	/** The bar `flagged` counts against, so the panel states the RULE and not
+	*  only its current result. */
+	flagThreshold: number(),
+	/** Worst first. A row with nothing to say still appears, at the bottom: the
+	*  operator asked to see the gallery, not only its accusations. */
+	rows: array(IdentitySampleAuditRowSchema).readonly()
+});
 var FaceInfoSchema = object({
 	faceId: string$2(),
 	deviceId: number().int(),
@@ -25497,7 +25550,7 @@ includeCrops: boolean().optional() }).optional(), array(IdentitySchema).readonly
 }), method(object({ id: string$2() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ identityId: string$2() }), array(IdentitySampleInfoSchema).readonly()), method(object({
+}), method(object({ identityId: string$2() }), array(IdentitySampleInfoSchema).readonly()), method(object({ identityId: string$2().min(1) }), IdentitySampleAuditSchema, { auth: "admin" }), method(object({
 	identityId: string$2(),
 	sampleId: string$2()
 }), _void(), {
@@ -25690,28 +25743,28 @@ var fanControlCapability = {
 			percentage: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setPreset: method(object({
 			deviceId: number().int().nonnegative(),
 			preset: string$2().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setDirection: method(object({
 			deviceId: number().int().nonnegative(),
 			direction: FanDirectionSchema
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setOscillating: method(object({
 			deviceId: number().int().nonnegative(),
 			oscillating: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -25933,21 +25986,21 @@ var humidifierCapability = {
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTargetHumidity: method(object({
 			deviceId: number().int().nonnegative(),
 			humidity: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setMode: method(object({
 			deviceId: number().int().nonnegative(),
 			mode: string$2().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -26648,15 +26701,15 @@ var lawnMowerControlCapability = {
 	methods: {
 		startMowing: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		pause: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		dock: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -26941,18 +26994,18 @@ var lockControlCapability = {
 			code: string$2().min(1).optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		unlock: method(object({
 			deviceId: number().int().nonnegative(),
 			code: string$2().min(1).optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		open: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -27055,65 +27108,65 @@ var mediaPlayerCapability = {
 	methods: {
 		play: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		pause: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		stop: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		next: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		previous: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		seek: method(object({
 			deviceId: number().int().nonnegative(),
 			positionMs: number().int().nonnegative()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setVolume: method(object({
 			deviceId: number().int().nonnegative(),
 			volumeLevel: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setMute: method(object({
 			deviceId: number().int().nonnegative(),
 			muted: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setShuffle: method(object({
 			deviceId: number().int().nonnegative(),
 			shuffle: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setRepeat: method(object({
 			deviceId: number().int().nonnegative(),
 			repeat: MediaPlayerRepeatSchema
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		selectSource: method(object({
 			deviceId: number().int().nonnegative(),
 			source: string$2().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		playMedia: method(object({
 			deviceId: number().int().nonnegative(),
@@ -27124,7 +27177,7 @@ var mediaPlayerCapability = {
 			mediaType: string$2().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -28717,27 +28770,27 @@ var petFeederCapability = {
 			hopper2: gramsPortion.optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Cancel an in-progress manual feed. */
 		cancelFeed: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Reset the desiccant "days remaining" counter after replacing it. */
 		resetDesiccant: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Mark a hopper as refilled (D4H/D4S/D4SH). */
 		markFoodReplenished: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Call the pet with the recorded prompt (D3). */
 		callPet: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Play a stored sound by id (D3 / D4H / D4SH). */
 		playSound: method(object({
@@ -28745,7 +28798,7 @@ var petFeederCapability = {
 			soundId: number().int().nonnegative()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Toggle the child-lock (manual-lock) setting. */
 		setChildLock: method(object({
@@ -28753,7 +28806,7 @@ var petFeederCapability = {
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Toggle the front indicator light. */
 		setIndicatorLight: method(object({
@@ -28761,7 +28814,7 @@ var petFeederCapability = {
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Toggle the dispense chime. */
 		setFeedSound: method(object({
@@ -28769,7 +28822,7 @@ var petFeederCapability = {
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Set the speaker / prompt volume level. */
 		setVolume: method(object({
@@ -28777,7 +28830,7 @@ var petFeederCapability = {
 			level: number().int().nonnegative()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -31073,7 +31126,7 @@ var switchCapability = {
 		on: boolean()
 	}), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) },
 	events: { onStateChanged: { data: object({
 		deviceId: number(),
@@ -32061,30 +32114,30 @@ var vacuumControlCapability = {
 	methods: {
 		start: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		pause: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		stop: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		returnToBase: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		locate: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setFanSpeed: method(object({
 			deviceId: number().int().nonnegative(),
 			speed: string$2().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -32128,22 +32181,22 @@ var valveCapability = {
 	methods: {
 		open: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		close: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		stop: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setPosition: method(object({
 			deviceId: number().int().nonnegative(),
 			position: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -32242,21 +32295,21 @@ var waterHeaterCapability = {
 			temp: number().finite()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setOperationMode: method(object({
 			deviceId: number().int().nonnegative(),
 			mode: string$2().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setAway: method(object({
 			deviceId: number().int().nonnegative(),
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -35990,6 +36043,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"faceGallery.auditIdentitySamples": {
+		capName: "face-gallery",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"faceGallery.createIdentity": {
 		capName: "face-gallery",
 		capScope: "system",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-matter-broker",
-  "version": "0.2.83",
+  "version": "0.2.85",
   "description": "Matter broker addon for CamStack — owns a Matter fabric (commissioning + the long-lived controller) via the matter.js controller and brokers commissioned Matter nodes into CamStack",
   "keywords": [
     "camstack",