@camstack/addon-mqtt-broker 1.1.20 → 1.1.21

package/dist/mqtt-broker.addon.js

@@ -4673,7 +4673,7 @@ function _instanceof(cls, params = {}) {
 	return inst;
 }
 //#endregion
-//#region ../types/dist/sleep-DJaTV2D7.mjs
+//#region ../types/dist/sleep-BC9Yqte7.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -6777,6 +6777,18 @@ function method(input, output, options) {
 		timeoutMs: options?.timeoutMs
 	};
 }
+/**
+* A wrapper/system-only method: served exclusively by the cap's system-level
+* provider (`InferProvider`), and OPTIONAL on `InferNativeProvider` so per-device
+* driver natives don't stub out a wrapper concern (e.g. a cross-device cache
+* overview). The `systemOnly: true` literal is what `InferNativeProvider` keys on.
+*/
+function systemMethod(input, output, options) {
+	return {
+		...method(input, output, options),
+		systemOnly: true
+	};
+}
 var StaticDirOutputSchema$1 = object({ staticDir: string() });
 var VersionOutputSchema$1 = object({ version: string() });
 method(_void(), StaticDirOutputSchema$1), method(_void(), VersionOutputSchema$1);
@@ -10515,6 +10527,7 @@ var PipelineAddonSchemaSchema = object({
 	defaultModelId: string(),
 	defaultModelIdByFormat: record(string(), string()).optional(),
 	enabledByDefault: boolean().optional(),
+	backfillIntoExistingOverrides: boolean().optional(),
 	defaultConfidence: number(),
 	group: string().optional(),
 	configSchema: array(ConfigFieldBridge).readonly().optional()
@@ -10821,6 +10834,25 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(ZoneSchema).read
 	auth: "admin"
 }), object({ zones: array(ZoneSchema).readonly() });
 /**
+* A bounding box in NORMALIZED [0,1] frame coordinates for `getNativeCrop`. The
+* decode worker resolves it against the RETAINED native frame's real pixel dims,
+* so the caller supplies only the detection-res bbox divided by the detection
+* dims — no native resolution to plumb.
+*/
+var NativeCropBboxSchema = object({
+	x: number(),
+	y: number(),
+	w: number(),
+	h: number()
+});
+/** Result of a best-effort native-resolution crop (`getNativeCrop`). */
+var NativeCropResultSchema = object({
+	/** Packed rgb (24-bit) pixels of the crop. */
+	bytes: _instanceof(Uint8Array),
+	width: number().int().positive(),
+	height: number().int().positive()
+});
+/**
 * Per-camera tunable ranges + defaults. Single source of truth used
 * by both the Zod data schema (validation + default fallback) and
 * the device settings UI (slider min/max/step). Touch one place and
@@ -11076,7 +11108,11 @@ var RunnerLocalMetricsSchema = object({
 	avgInferenceTimeMs: number(),
 	queueDepth: number()
 });
-method(RunnerCameraConfigSchema, object({ success: literal(true) }), { kind: "mutation" }), method(object({ deviceId: number() }), object({ success: literal(true) }), { kind: "mutation" }), method(ReportMotionInputSchema, object({ success: literal(true) }), { kind: "mutation" }), method(_void(), RunnerLocalLoadSchema), method(_void(), RunnerLocalMetricsSchema), method(object({ deviceId: number() }), CameraMetricsSchema.nullable()), method(_void(), array(CameraMetricsWithDeviceIdSchema).readonly()), method(_void(), array(number()).readonly());
+method(RunnerCameraConfigSchema, object({ success: literal(true) }), { kind: "mutation" }), method(object({ deviceId: number() }), object({ success: literal(true) }), { kind: "mutation" }), method(ReportMotionInputSchema, object({ success: literal(true) }), { kind: "mutation" }), method(_void(), RunnerLocalLoadSchema), method(_void(), RunnerLocalMetricsSchema), method(object({ deviceId: number() }), CameraMetricsSchema.nullable()), method(_void(), array(CameraMetricsWithDeviceIdSchema).readonly()), method(_void(), array(number()).readonly()), method(object({
+	handle: FrameHandleSchema,
+	bbox: NativeCropBboxSchema,
+	maxWidth: number().int().positive().optional()
+}), NativeCropResultSchema.nullable());
 object({
 	detected: boolean(),
 	/** Ms epoch of the last detected-true observation. Null if never detected. */
@@ -15182,7 +15218,17 @@ var TrackSchema = object({
 	/** Cumulative normalized distance travelled (0..1 units = full frame width). */
 	totalDistance: number(),
 	state: TrackStateSchema,
-	active: boolean()
+	active: boolean(),
+	/** Deterministic key-event importance score in [0,1] (server-computed at
+	*  track expiry, recomputed on late label). Absent on legacy rows written
+	*  before scoring shipped — consumers degrade to absence / compute-on-read. */
+	importance: number().optional(),
+	/** Id of the track's highest-confidence ObjectEvent (its representative
+	*  "best" frame). Absent when the track produced no object events. */
+	bestEventId: string().optional(),
+	/** Tag of the importance sub-signal that dominated the score
+	*  (identity|dwell|proximity|class|confidence|travel|zone). */
+	importanceReason: string().optional()
 });
 var BaseEventFields = {
 	id: string(),
@@ -15247,8 +15293,18 @@ var ObjectEventSchema = object({
 	frameHeight: number().optional(),
 	/** MediaStore key for the crop attached to this event (if any). */
 	mediaKey: string().optional(),
+	/** Design B: MediaStore key of the track's native-resolution key frame (the
+	*  best-detection full frame). Resolve via the event-media data-plane
+	*  (`/addon/<addonId>/event-media/<keyFrameMediaKey>`) for a detail view that
+	*  draws `bbox` over the native frame. Absent on legacy rows / non-decoded
+	*  sources — consumers fall back to `mediaKey` (the tight crop). */
+	keyFrameMediaKey: string().optional(),
 	/** Populated by B5 (recording playback URL for this event). */
-	mediaUrl: string().optional()
+	mediaUrl: string().optional(),
+	/** The parent track's key-event importance [0,1], propagated to every object
+	*  event of the track (so an event row can be sorted by importance without a
+	*  track join). Absent on legacy rows / before the track was scored. */
+	importance: number().optional()
 });
 var AudioEventSchema = object({
 	...BaseEventFields,
@@ -15272,7 +15328,8 @@ var MediaFileKindEnum = _enum([
 	"fullFrame",
 	"fullFrameBoxed",
 	"faceCrop",
-	"plateCrop"
+	"plateCrop",
+	"keyFrame"
 ]);
 var MediaFileSchema = object({
 	key: string(),
@@ -15293,6 +15350,32 @@ var DeviceEventQueryInput = object({
 	projection: _enum(["full", "slim"]).optional()
 });
 var ObjectEventQueryInput = DeviceEventQueryInput.extend({ classFilter: string().optional() });
+var KeyEventQueryInput = object({
+	deviceId: number(),
+	/** Window lower bound (track firstSeen ≥ since). */
+	since: number(),
+	/** Window upper bound (track firstSeen ≤ until). */
+	until: number(),
+	limit: number().int().min(1).max(200).default(50),
+	/** Drop tracks scoring below this importance. */
+	minImportance: number().min(0).max(1).optional(),
+	/** Restrict to a single class (e.g. 'person'). */
+	classFilter: string().optional()
+});
+var KeyEventSchema = object({
+	/** The representative event id (the track's best ObjectEvent, else its trackId). */
+	id: string(),
+	trackId: string(),
+	/** Track start time (firstSeen). */
+	timestamp: number(),
+	className: string(),
+	label: string().optional(),
+	importance: number(),
+	/** Highest-confidence ObjectEvent id for the track (empty when none). */
+	bestEventId: string(),
+	/** Track lifetime in ms (lastSeen - firstSeen). */
+	windowMs: number().optional()
+});
 var TrackedDetectionSchema = object({
 	trackId: string(),
 	className: string(),
@@ -15322,7 +15405,7 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 }), array(TrackSchema).readonly()), method(object({ deviceId: number() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-}), method(DeviceEventQueryInput, array(MotionEventSchema).readonly()), method(ObjectEventQueryInput, array(ObjectEventSchema).readonly()), method(DeviceEventQueryInput, array(AudioEventSchema).readonly()), method(object({
+}), method(DeviceEventQueryInput, array(MotionEventSchema).readonly()), method(ObjectEventQueryInput, array(ObjectEventSchema).readonly()), method(DeviceEventQueryInput, array(AudioEventSchema).readonly()), method(KeyEventQueryInput, array(KeyEventSchema).readonly()), method(object({
 	deviceId: number(),
 	since: number(),
 	until: number(),
@@ -16089,7 +16172,12 @@ DeviceType.Camera, method(object({
 }), SnapshotImageSchema.nullable()), method(object({ deviceId: number() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-});
+}), systemMethod(object({ deviceIds: array(number()).min(1).max(200) }), array(object({
+	deviceId: number(),
+	lastCapturedAt: number().nullable(),
+	cacheAgeMs: number().nullable(),
+	etag: string().nullable()
+})));
 /**
 * `sso-bridge` — internal hub-only cap that lets SSO-style auth
 * providers (OIDC, SAML, magic-link, …) mint an HMAC-signed token
@@ -16340,10 +16428,32 @@ method(_void(), array(TurnServerSchema).readonly());
 *      b. `finishAuthentication({userId, response})` → server verifies
 *         the assertion, bumps the credential counter, returns ok.
 *
+*   2b. Usernameless (discoverable-credential) authentication — the
+*       passkey IS the primary factor, no password leg:
+*       a. `beginDiscoverableAuthentication({})` → assertion options with
+*          EMPTY `allowCredentials` (the browser offers every resident
+*          passkey it holds for this RP) + `userVerification: 'required'`
+*          (the passkey replaces both factors, so UV is mandatory).
+*          The challenge is stored server-side, NOT bound to any user.
+*       b. `finishDiscoverableAuthentication({response})` → the provider
+*          resolves the credential by the response's credential id,
+*          verifies the assertion against the stored challenge + that
+*          credential's public key/counter, and returns the OWNING
+*          `userId` — the caller (core auth router) mints the session.
+*
 *   3. Management:
 *      - `listPasskeys({userId})` — enumerate user's enrolled credentials.
 *      - `removePasskey({userId, credentialId})` — revoke one credential.
 *
+*   4. Second-factor preference (opt-in, default OFF):
+*      Enrolling a passkey only enables passkey-FIRST sign-in. It is
+*      demanded as a second factor after a password login ONLY when the
+*      user explicitly opts in via `setSecondFactorPreference`.
+*      - `getSecondFactorPreference({userId})` → `{ enabled }` (missing
+*        row ⇒ `enabled: false`).
+*      - `setSecondFactorPreference({userId, enabled})` — persisted by
+*        the providing addon beside its credentials.
+*
 * Challenges are short-lived (5 min, in-memory). The cap is internal —
 * the admin-ui composes the begin/finish round-trip and never exposes
 * the cap to non-admins.
@@ -16386,6 +16496,17 @@ method(object({
 }), object({ verified: boolean() }), {
 	kind: "mutation",
 	access: "view"
+}), method(object({}), object({ optionsJSON: record(string(), unknown()) }), {
+	kind: "mutation",
+	access: "view"
+}), method(object({ 
+/** AuthenticationResponseJSON from the browser. */
+response: record(string(), unknown()) }), object({
+	verified: boolean(),
+	userId: string().nullable()
+}), {
+	kind: "mutation",
+	access: "view"
 }), method(object({ userId: string() }), array(PasskeySummarySchema), { auth: "admin" }), method(object({
 	userId: string(),
 	credentialId: string()
@@ -16393,6 +16514,13 @@ method(object({
 	kind: "mutation",
 	auth: "admin",
 	access: "delete"
+}), method(object({ userId: string() }), object({ enabled: boolean() }), { auth: "admin" }), method(object({
+	userId: string(),
+	enabled: boolean()
+}), object({ success: literal(true) }), {
+	kind: "mutation",
+	auth: "admin",
+	access: "create"
 });
 /**
 * `videoclips` — the unified, navigable-clip surface for a camera.
@@ -17194,7 +17322,17 @@ var FaceInfoSchema = object({
 	recognizedIdentityId: string().optional(),
 	identityName: string().optional(),
 	assigned: boolean(),
-	base64: string().optional()
+	base64: string().optional(),
+	/** Design B: the face bbox (pixel space) on the key frame — lets a detail
+	*  view draw the box over the native `keyFrameMediaKey` frame. Absent on
+	*  legacy rows written before design B. */
+	faceBbox: BoundingBoxSchema.optional(),
+	/** Design B: MediaStore key of the track's native-resolution key frame.
+	*  Fetch the native JPEG via the event-media data-plane
+	*  (`/addon/<addonId>/event-media/<keyFrameMediaKey>`). Absent when the
+	*  track produced no key frame (e.g. native/onboard source) — the UI falls
+	*  back to the inline `base64` face crop. */
+	keyFrameMediaKey: string().optional()
 });
 var FaceFilterEnum = _enum([
 	"unassigned",
@@ -21313,6 +21451,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.getKeyEvents": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.getMotionEvents": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -21841,6 +21985,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineRunner.getNativeCrop": {
+		capName: "pipeline-runner",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineRunner.reportMotion": {
 		capName: "pipeline-runner",
 		capScope: "system",
@@ -22207,6 +22357,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"snapshot.getSnapshotOverview": {
+		capName: "snapshot",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"snapshot.invalidateCache": {
 		capName: "snapshot",
 		capScope: "device",
@@ -22885,6 +23041,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"userPasskeys.beginDiscoverableAuthentication": {
+		capName: "user-passkeys",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"userPasskeys.beginRegistration": {
 		capName: "user-passkeys",
 		capScope: "system",
@@ -22897,12 +23059,24 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"userPasskeys.finishDiscoverableAuthentication": {
+		capName: "user-passkeys",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"userPasskeys.finishRegistration": {
 		capName: "user-passkeys",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
+	"userPasskeys.getSecondFactorPreference": {
+		capName: "user-passkeys",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"userPasskeys.listPasskeys": {
 		capName: "user-passkeys",
 		capScope: "system",
@@ -22915,6 +23089,12 @@ Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"userPasskeys.setSecondFactorPreference": {
+		capName: "user-passkeys",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"vacuumControl.locate": {
 		capName: "vacuum-control",
 		capScope: "device",

package/dist/mqtt-broker.addon.mjs

@@ -4668,7 +4668,7 @@ function _instanceof(cls, params = {}) {
 	return inst;
 }
 //#endregion
-//#region ../types/dist/sleep-DJaTV2D7.mjs
+//#region ../types/dist/sleep-BC9Yqte7.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -6772,6 +6772,18 @@ function method(input, output, options) {
 		timeoutMs: options?.timeoutMs
 	};
 }
+/**
+* A wrapper/system-only method: served exclusively by the cap's system-level
+* provider (`InferProvider`), and OPTIONAL on `InferNativeProvider` so per-device
+* driver natives don't stub out a wrapper concern (e.g. a cross-device cache
+* overview). The `systemOnly: true` literal is what `InferNativeProvider` keys on.
+*/
+function systemMethod(input, output, options) {
+	return {
+		...method(input, output, options),
+		systemOnly: true
+	};
+}
 var StaticDirOutputSchema$1 = object({ staticDir: string() });
 var VersionOutputSchema$1 = object({ version: string() });
 method(_void(), StaticDirOutputSchema$1), method(_void(), VersionOutputSchema$1);
@@ -10510,6 +10522,7 @@ var PipelineAddonSchemaSchema = object({
 	defaultModelId: string(),
 	defaultModelIdByFormat: record(string(), string()).optional(),
 	enabledByDefault: boolean().optional(),
+	backfillIntoExistingOverrides: boolean().optional(),
 	defaultConfidence: number(),
 	group: string().optional(),
 	configSchema: array(ConfigFieldBridge).readonly().optional()
@@ -10816,6 +10829,25 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(ZoneSchema).read
 	auth: "admin"
 }), object({ zones: array(ZoneSchema).readonly() });
 /**
+* A bounding box in NORMALIZED [0,1] frame coordinates for `getNativeCrop`. The
+* decode worker resolves it against the RETAINED native frame's real pixel dims,
+* so the caller supplies only the detection-res bbox divided by the detection
+* dims — no native resolution to plumb.
+*/
+var NativeCropBboxSchema = object({
+	x: number(),
+	y: number(),
+	w: number(),
+	h: number()
+});
+/** Result of a best-effort native-resolution crop (`getNativeCrop`). */
+var NativeCropResultSchema = object({
+	/** Packed rgb (24-bit) pixels of the crop. */
+	bytes: _instanceof(Uint8Array),
+	width: number().int().positive(),
+	height: number().int().positive()
+});
+/**
 * Per-camera tunable ranges + defaults. Single source of truth used
 * by both the Zod data schema (validation + default fallback) and
 * the device settings UI (slider min/max/step). Touch one place and
@@ -11071,7 +11103,11 @@ var RunnerLocalMetricsSchema = object({
 	avgInferenceTimeMs: number(),
 	queueDepth: number()
 });
-method(RunnerCameraConfigSchema, object({ success: literal(true) }), { kind: "mutation" }), method(object({ deviceId: number() }), object({ success: literal(true) }), { kind: "mutation" }), method(ReportMotionInputSchema, object({ success: literal(true) }), { kind: "mutation" }), method(_void(), RunnerLocalLoadSchema), method(_void(), RunnerLocalMetricsSchema), method(object({ deviceId: number() }), CameraMetricsSchema.nullable()), method(_void(), array(CameraMetricsWithDeviceIdSchema).readonly()), method(_void(), array(number()).readonly());
+method(RunnerCameraConfigSchema, object({ success: literal(true) }), { kind: "mutation" }), method(object({ deviceId: number() }), object({ success: literal(true) }), { kind: "mutation" }), method(ReportMotionInputSchema, object({ success: literal(true) }), { kind: "mutation" }), method(_void(), RunnerLocalLoadSchema), method(_void(), RunnerLocalMetricsSchema), method(object({ deviceId: number() }), CameraMetricsSchema.nullable()), method(_void(), array(CameraMetricsWithDeviceIdSchema).readonly()), method(_void(), array(number()).readonly()), method(object({
+	handle: FrameHandleSchema,
+	bbox: NativeCropBboxSchema,
+	maxWidth: number().int().positive().optional()
+}), NativeCropResultSchema.nullable());
 object({
 	detected: boolean(),
 	/** Ms epoch of the last detected-true observation. Null if never detected. */
@@ -15177,7 +15213,17 @@ var TrackSchema = object({
 	/** Cumulative normalized distance travelled (0..1 units = full frame width). */
 	totalDistance: number(),
 	state: TrackStateSchema,
-	active: boolean()
+	active: boolean(),
+	/** Deterministic key-event importance score in [0,1] (server-computed at
+	*  track expiry, recomputed on late label). Absent on legacy rows written
+	*  before scoring shipped — consumers degrade to absence / compute-on-read. */
+	importance: number().optional(),
+	/** Id of the track's highest-confidence ObjectEvent (its representative
+	*  "best" frame). Absent when the track produced no object events. */
+	bestEventId: string().optional(),
+	/** Tag of the importance sub-signal that dominated the score
+	*  (identity|dwell|proximity|class|confidence|travel|zone). */
+	importanceReason: string().optional()
 });
 var BaseEventFields = {
 	id: string(),
@@ -15242,8 +15288,18 @@ var ObjectEventSchema = object({
 	frameHeight: number().optional(),
 	/** MediaStore key for the crop attached to this event (if any). */
 	mediaKey: string().optional(),
+	/** Design B: MediaStore key of the track's native-resolution key frame (the
+	*  best-detection full frame). Resolve via the event-media data-plane
+	*  (`/addon/<addonId>/event-media/<keyFrameMediaKey>`) for a detail view that
+	*  draws `bbox` over the native frame. Absent on legacy rows / non-decoded
+	*  sources — consumers fall back to `mediaKey` (the tight crop). */
+	keyFrameMediaKey: string().optional(),
 	/** Populated by B5 (recording playback URL for this event). */
-	mediaUrl: string().optional()
+	mediaUrl: string().optional(),
+	/** The parent track's key-event importance [0,1], propagated to every object
+	*  event of the track (so an event row can be sorted by importance without a
+	*  track join). Absent on legacy rows / before the track was scored. */
+	importance: number().optional()
 });
 var AudioEventSchema = object({
 	...BaseEventFields,
@@ -15267,7 +15323,8 @@ var MediaFileKindEnum = _enum([
 	"fullFrame",
 	"fullFrameBoxed",
 	"faceCrop",
-	"plateCrop"
+	"plateCrop",
+	"keyFrame"
 ]);
 var MediaFileSchema = object({
 	key: string(),
@@ -15288,6 +15345,32 @@ var DeviceEventQueryInput = object({
 	projection: _enum(["full", "slim"]).optional()
 });
 var ObjectEventQueryInput = DeviceEventQueryInput.extend({ classFilter: string().optional() });
+var KeyEventQueryInput = object({
+	deviceId: number(),
+	/** Window lower bound (track firstSeen ≥ since). */
+	since: number(),
+	/** Window upper bound (track firstSeen ≤ until). */
+	until: number(),
+	limit: number().int().min(1).max(200).default(50),
+	/** Drop tracks scoring below this importance. */
+	minImportance: number().min(0).max(1).optional(),
+	/** Restrict to a single class (e.g. 'person'). */
+	classFilter: string().optional()
+});
+var KeyEventSchema = object({
+	/** The representative event id (the track's best ObjectEvent, else its trackId). */
+	id: string(),
+	trackId: string(),
+	/** Track start time (firstSeen). */
+	timestamp: number(),
+	className: string(),
+	label: string().optional(),
+	importance: number(),
+	/** Highest-confidence ObjectEvent id for the track (empty when none). */
+	bestEventId: string(),
+	/** Track lifetime in ms (lastSeen - firstSeen). */
+	windowMs: number().optional()
+});
 var TrackedDetectionSchema = object({
 	trackId: string(),
 	className: string(),
@@ -15317,7 +15400,7 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 }), array(TrackSchema).readonly()), method(object({ deviceId: number() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-}), method(DeviceEventQueryInput, array(MotionEventSchema).readonly()), method(ObjectEventQueryInput, array(ObjectEventSchema).readonly()), method(DeviceEventQueryInput, array(AudioEventSchema).readonly()), method(object({
+}), method(DeviceEventQueryInput, array(MotionEventSchema).readonly()), method(ObjectEventQueryInput, array(ObjectEventSchema).readonly()), method(DeviceEventQueryInput, array(AudioEventSchema).readonly()), method(KeyEventQueryInput, array(KeyEventSchema).readonly()), method(object({
 	deviceId: number(),
 	since: number(),
 	until: number(),
@@ -16084,7 +16167,12 @@ DeviceType.Camera, method(object({
 }), SnapshotImageSchema.nullable()), method(object({ deviceId: number() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-});
+}), systemMethod(object({ deviceIds: array(number()).min(1).max(200) }), array(object({
+	deviceId: number(),
+	lastCapturedAt: number().nullable(),
+	cacheAgeMs: number().nullable(),
+	etag: string().nullable()
+})));
 /**
 * `sso-bridge` — internal hub-only cap that lets SSO-style auth
 * providers (OIDC, SAML, magic-link, …) mint an HMAC-signed token
@@ -16335,10 +16423,32 @@ method(_void(), array(TurnServerSchema).readonly());
 *      b. `finishAuthentication({userId, response})` → server verifies
 *         the assertion, bumps the credential counter, returns ok.
 *
+*   2b. Usernameless (discoverable-credential) authentication — the
+*       passkey IS the primary factor, no password leg:
+*       a. `beginDiscoverableAuthentication({})` → assertion options with
+*          EMPTY `allowCredentials` (the browser offers every resident
+*          passkey it holds for this RP) + `userVerification: 'required'`
+*          (the passkey replaces both factors, so UV is mandatory).
+*          The challenge is stored server-side, NOT bound to any user.
+*       b. `finishDiscoverableAuthentication({response})` → the provider
+*          resolves the credential by the response's credential id,
+*          verifies the assertion against the stored challenge + that
+*          credential's public key/counter, and returns the OWNING
+*          `userId` — the caller (core auth router) mints the session.
+*
 *   3. Management:
 *      - `listPasskeys({userId})` — enumerate user's enrolled credentials.
 *      - `removePasskey({userId, credentialId})` — revoke one credential.
 *
+*   4. Second-factor preference (opt-in, default OFF):
+*      Enrolling a passkey only enables passkey-FIRST sign-in. It is
+*      demanded as a second factor after a password login ONLY when the
+*      user explicitly opts in via `setSecondFactorPreference`.
+*      - `getSecondFactorPreference({userId})` → `{ enabled }` (missing
+*        row ⇒ `enabled: false`).
+*      - `setSecondFactorPreference({userId, enabled})` — persisted by
+*        the providing addon beside its credentials.
+*
 * Challenges are short-lived (5 min, in-memory). The cap is internal —
 * the admin-ui composes the begin/finish round-trip and never exposes
 * the cap to non-admins.
@@ -16381,6 +16491,17 @@ method(object({
 }), object({ verified: boolean() }), {
 	kind: "mutation",
 	access: "view"
+}), method(object({}), object({ optionsJSON: record(string(), unknown()) }), {
+	kind: "mutation",
+	access: "view"
+}), method(object({ 
+/** AuthenticationResponseJSON from the browser. */
+response: record(string(), unknown()) }), object({
+	verified: boolean(),
+	userId: string().nullable()
+}), {
+	kind: "mutation",
+	access: "view"
 }), method(object({ userId: string() }), array(PasskeySummarySchema), { auth: "admin" }), method(object({
 	userId: string(),
 	credentialId: string()
@@ -16388,6 +16509,13 @@ method(object({
 	kind: "mutation",
 	auth: "admin",
 	access: "delete"
+}), method(object({ userId: string() }), object({ enabled: boolean() }), { auth: "admin" }), method(object({
+	userId: string(),
+	enabled: boolean()
+}), object({ success: literal(true) }), {
+	kind: "mutation",
+	auth: "admin",
+	access: "create"
 });
 /**
 * `videoclips` — the unified, navigable-clip surface for a camera.
@@ -17189,7 +17317,17 @@ var FaceInfoSchema = object({
 	recognizedIdentityId: string().optional(),
 	identityName: string().optional(),
 	assigned: boolean(),
-	base64: string().optional()
+	base64: string().optional(),
+	/** Design B: the face bbox (pixel space) on the key frame — lets a detail
+	*  view draw the box over the native `keyFrameMediaKey` frame. Absent on
+	*  legacy rows written before design B. */
+	faceBbox: BoundingBoxSchema.optional(),
+	/** Design B: MediaStore key of the track's native-resolution key frame.
+	*  Fetch the native JPEG via the event-media data-plane
+	*  (`/addon/<addonId>/event-media/<keyFrameMediaKey>`). Absent when the
+	*  track produced no key frame (e.g. native/onboard source) — the UI falls
+	*  back to the inline `base64` face crop. */
+	keyFrameMediaKey: string().optional()
 });
 var FaceFilterEnum = _enum([
 	"unassigned",
@@ -21308,6 +21446,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.getKeyEvents": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.getMotionEvents": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -21836,6 +21980,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineRunner.getNativeCrop": {
+		capName: "pipeline-runner",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineRunner.reportMotion": {
 		capName: "pipeline-runner",
 		capScope: "system",
@@ -22202,6 +22352,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"snapshot.getSnapshotOverview": {
+		capName: "snapshot",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"snapshot.invalidateCache": {
 		capName: "snapshot",
 		capScope: "device",
@@ -22880,6 +23036,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"userPasskeys.beginDiscoverableAuthentication": {
+		capName: "user-passkeys",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"userPasskeys.beginRegistration": {
 		capName: "user-passkeys",
 		capScope: "system",
@@ -22892,12 +23054,24 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"userPasskeys.finishDiscoverableAuthentication": {
+		capName: "user-passkeys",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"userPasskeys.finishRegistration": {
 		capName: "user-passkeys",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
+	"userPasskeys.getSecondFactorPreference": {
+		capName: "user-passkeys",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"userPasskeys.listPasskeys": {
 		capName: "user-passkeys",
 		capScope: "system",
@@ -22910,6 +23084,12 @@ Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"userPasskeys.setSecondFactorPreference": {
+		capName: "user-passkeys",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"vacuumControl.locate": {
 		capName: "vacuum-control",
 		capScope: "device",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-mqtt-broker",
-  "version": "1.1.20",
+  "version": "1.1.21",
   "description": "MQTT broker registry addon for CamStack — manages external broker entries + an optional embedded aedes broker. Consumers spin up their own `mqtt.js` clients via the `mqtt-broker` cap.",
   "keywords": [
     "camstack",