@camstack/addon-mqtt-broker 1.2.140 → 1.2.142

package/dist/mqtt-broker.addon.js

@@ -46,7 +46,7 @@ let node_fs = require("node:fs");
 node_fs = __toESM(node_fs);
 let node_path = require("node:path");
 node_path = __toESM(node_path);
-//#region ../types/dist/event-category-7pZEBmVg.mjs
+//#region ../types/dist/event-category-BfJwUd2S.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -363,6 +363,15 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineDetectionBlind"] = "pipeline.detection-blind";
 	/**
+	* A camera's motion source has fired constantly with no subject for an hour
+	* (motion duty or session count over the bar, zero detections) — it is not
+	* blind, its motion zones or sensitivity want tuning (D907). Paired with
+	* {@link PipelineMotionCalm}.
+	*/
+	EventCategory["PipelineMotionNoisy"] = "pipeline.motion-noisy";
+	/** The recovery edge of {@link PipelineMotionNoisy}: the motion fell back, or a detection arrived. */
+	EventCategory["PipelineMotionCalm"] = "pipeline.motion-calm";
+	/**
 	* Per-camera pipeline config was mutated by the orchestrator
 	* (3-level settings change via `setAgentAddonDefaults` /
 	* `setCameraStepToggle` / `setCameraPipelineForAgent` or a
@@ -5602,7 +5611,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-CueztlR1.mjs
+//#region ../types/dist/sleep-DJFUfKvA.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -8201,7 +8210,7 @@ var EntryDescriptorSchema = object({
 	/** JSON Schema of the entry body; `secret: true` marks a password field. */
 	fields: record(string(), unknown())
 }).strict();
-/** What crosses the wire and sits in the engine's catalog: JSON only, no Zod. */
+/** What crosses the wire from an addon: JSON only, no Zod. An unknown key is refused. */
 var RecordKindDeclarationSchema = object({
 	database: _enum(RECORD_DATABASES).default("settings"),
 	class: _enum(RECORD_CLASSES),
@@ -8220,14 +8229,6 @@ var RecordKindDeclarationSchema = object({
 	secretPaths: array(string().min(1)).default([]),
 	/** The id key of each array that carries a secret (`{ headers: 'name' }`). */
 	secretArrayKeys: record(string(), string()).default({}),
-	/**
-	* RETIRED (D900): the legacy table a kind adopted from during the records
-	* migration. Nothing declares it any more and nothing reads it; the schema
-	* still ACCEPTS it because the catalog rows the migration wrote carry it
-	* (an orphaned kind is never redeclared) and an addon built before the
-	* removal still sends it. Never set it.
-	*/
-	adoptsFrom: string().min(1).optional(),
 	/** Kinds that must agree through `transact` sit in one file under one family name. */
 	transactFamily: string().min(1).optional(),
 	entry: EntryDescriptorSchema.optional()
@@ -13009,17 +13010,6 @@ object({
 	createdAt: number(),
 	updatedAt: number()
 });
-object({
-	id: string(),
-	label: string(),
-	isAdmin: boolean().default(false),
-	allowedProviders: AllowedProviderSchema,
-	allowedDevices: AllowedDevicesSchema,
-	tokenHash: string(),
-	tokenPrefix: string(),
-	createdAt: number(),
-	lastUsedAt: number().optional()
-});
 object({
 	id: string(),
 	userId: string(),
@@ -16944,16 +16934,36 @@ var RecordKindStateSchema = _enum([
 var DeclareKindResultSchema = object({
 	kindId: number().int(),
 	state: RecordKindStateSchema,
-	createdIndexes: array(string()),
-	/**
-	* RETIRED (D900): always `null`. It carried the records-migration boot guard;
-	* it stays on the wire, null, because an addon built before the removal reads
-	* an ABSENT field as "adoption pending" and refuses to start.
-	*/
-	adoptionPending: _null()
+	createdIndexes: array(string())
 });
 /** Keychain refs a write released (the old marker is gone from the row): the owner deletes the values. */
 var SecretRefsList = array(string());
+/**
+* One op of a `transact`: the single-row writes, each on a kind of the caller.
+* All ops of one call share ONE database file and ONE `transactFamily`.
+*/
+var RecordTransactOpSchema = discriminatedUnion("op", [
+	object({
+		op: literal("put"),
+		kind: RecordKindNameSchema,
+		record: RecordInputSchema,
+		ifRev: number().int().min(0).optional()
+	}),
+	object({
+		op: literal("patch"),
+		kind: RecordKindNameSchema,
+		id: RecordIdSchema,
+		data: RecordBodySchema,
+		at: number().int().nullable().optional(),
+		expiresAt: number().int().nullable().optional(),
+		ifRev: number().int().min(1).optional()
+	}),
+	object({
+		op: literal("delete"),
+		kind: RecordKindNameSchema,
+		id: RecordIdSchema
+	})
+]);
 var RecordSecretRefsSchema = record(string(), record(string(), string()));
 method(object({ kinds: record(RecordKindNameSchema, RecordKindDeclarationSchema) }), object({ kinds: record(string(), DeclareKindResultSchema) }), {
 	kind: "mutation",
@@ -17060,6 +17070,16 @@ method(object({ kinds: record(RecordKindNameSchema, RecordKindDeclarationSchema)
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({ ops: array(RecordTransactOpSchema).min(1).max(RECORD_BATCH_MAX) }), object({
+	results: array(object({
+		rev: number().int().nullable(),
+		deleted: boolean()
+	})),
+	releasedRefs: SecretRefsList,
+	secretRefs: SecretRefsList
+}), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({
 	deviceId: number().int(),
 	kinds: array(RecordKindNameSchema).optional()
@@ -42437,9 +42457,13 @@ var NcSystemEventKindSchema = _enum([
 	"node-updating",
 	"node-inference-unavailable",
 	"detection-blind",
+	"motion-noisy",
+	"motion-calm",
 	"recording-stalled",
 	"recording-healthy",
 	"recording-degraded",
+	"device-attention-required",
+	"device-attention-resolved",
 	"storage-location-low",
 	"storage-location-critical",
 	"storage-location-ok",
@@ -48000,7 +48024,6 @@ var RecommendationReasonSchema = discriminatedUnion("kind", [
 		modelId: string()
 	}),
 	object({ kind: literal("cpu-device") }),
-	object({ kind: literal("coral-untouched") }),
 	object({ kind: literal("device-disabled") }),
 	object({ kind: literal("device-unavailable") }),
 	object({ kind: literal("node-offline") }),
@@ -48098,11 +48121,6 @@ var AutoTuneWarningSchema = discriminatedUnion("kind", [
 		kind: literal("detector-store-unreadable"),
 		error: string()
 	}),
-	object({
-		kind: literal("coral-enabled"),
-		nodeId: string(),
-		deviceKey: string()
-	}),
 	object({
 		kind: literal("custom-pin-kept"),
 		nodeId: string(),
@@ -54896,6 +54914,16 @@ object({
 	powerState: string().nullable(),
 	saltLevel: DishwasherConsumableLevelSchema.nullable(),
 	rinseAidLevel: DishwasherConsumableLevelSchema.nullable(),
+	/**
+	* True while the appliance asks for its filter to be cleaned (smart-filter, filter-system or
+	* combined care-and-filter reminder raised); false when every such reminder reads clear; null
+	* when none is reported. A cleared reminder is not an unknown one.
+	*/
+	filterCleaningDue: boolean().nullable(),
+	/** True while the machine-care (descaling / cleaning-program) reminder is raised; false when clear; null when not reported. */
+	machineCareDue: boolean().nullable(),
+	/** Program runs left before the machine-care reminder is due; null when the appliance does not say. */
+	machineCareRemainingRuns: number().int().nonnegative().nullable(),
 	/** Option states: null when the appliance does not expose the option or has not said. */
 	halfLoad: boolean().nullable(),
 	hygienePlus: boolean().nullable(),
@@ -61513,16 +61541,6 @@ var UpdateUserInputSchema = object({
 	allowedDevices: record(string(), union([array(string()), literal("*")])).optional(),
 	scopes: array(TokenScopeSchema).optional()
 });
-var ApiKeySummarySchema = object({
-	id: string(),
-	label: string(),
-	isAdmin: boolean().default(false),
-	allowedProviders: union([array(string()), literal("*")]).optional(),
-	allowedDevices: record(string(), union([array(string()), literal("*")])).optional(),
-	tokenPrefix: string(),
-	createdAt: number(),
-	lastUsedAt: number().optional()
-});
 var OauthSessionSummarySchema = object({
 	id: string(),
 	userId: string(),
@@ -61544,8 +61562,7 @@ var TotpStatusSchema = object({
 	confirmedAt: number().nullable()
 });
 /**
-* user-management — singleton capability for user accounts and the
-* legacy API-key rows.
+* user-management — singleton capability for user accounts.
 *
 * v2 model: every method gated by `auth: 'admin'`. Admin-only delegation
 * — the subset check on `setUserScopes` is moot
@@ -61601,10 +61618,6 @@ method(_void(), array(UserSummarySchema), { auth: "admin" }), method(CreateUserI
 }), UserSummarySchema.extend({ passwordHash: string() }).nullable(), {
 	kind: "mutation",
 	access: "view"
-}), method(_void(), array(ApiKeySummarySchema), { auth: "admin" }), method(object({ id: string() }), object({ success: literal(true) }), {
-	kind: "mutation",
-	auth: "admin",
-	access: "delete"
 }), method(object({ userId: string() }), TotpSetupResultSchema, {
 	kind: "mutation",
 	auth: "admin",
@@ -69117,6 +69130,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"records.transact": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"sceneMonitor.captureReference": {
 		capName: "scene-monitor",
 		capScope: "device",
@@ -70449,12 +70468,6 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"userManagement.listApiKeys": {
-		capName: "user-management",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
 	"userManagement.listExternalIdentities": {
 		capName: "user-management",
 		capScope: "system",
@@ -70509,12 +70522,6 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"userManagement.revokeApiKey": {
-		capName: "user-management",
-		capScope: "system",
-		addonId: null,
-		access: "delete"
-	},
 	"userManagement.revokeOauthSession": {
 		capName: "user-management",
 		capScope: "system",
@@ -73879,9 +73886,13 @@ new Map(Object.entries({
 	"stream-online": "device-events",
 	"stream-offline": "device-events",
 	"detection-blind": "device-events",
+	"motion-noisy": "device-events",
+	"motion-calm": "device-events",
 	"recording-stalled": "device-events",
 	"recording-healthy": "device-events",
 	"recording-degraded": "device-events",
+	"device-attention-required": "device-events",
+	"device-attention-resolved": "device-events",
 	"node-online": "system",
 	"node-offline": "system",
 	"node-restarting": "system",
@@ -73964,6 +73975,12 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 		label: "Detecting nothing",
 		kinds: ["detection-blind"]
 	},
+	{
+		id: "motion-noise",
+		family: "device-events",
+		label: "Motion without a subject",
+		kinds: ["motion-noisy", "motion-calm"]
+	},
 	{
 		id: "recording",
 		family: "device-events",
@@ -73974,6 +73991,12 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 			"recording-degraded"
 		]
 	},
+	{
+		id: "device-attention",
+		family: "device-events",
+		label: "Needs attention",
+		kinds: ["device-attention-required", "device-attention-resolved"]
+	},
 	{
 		id: "nodes",
 		family: "system",
@@ -74113,6 +74136,7 @@ var ALERT_EPISODE = [
 	"alert-error",
 	"alert-critical-resolved"
 ];
+var DEVICE_ATTENTION = ["device-attention-required", "device-attention-resolved"];
 var UPDATES = [
 	"addon-update-available",
 	"server-update-available",
@@ -74142,9 +74166,12 @@ var DEVICE_EVENTS = [
 	"stream-online",
 	"stream-offline",
 	"detection-blind",
+	"motion-noisy",
+	"motion-calm",
 	"recording-stalled",
 	"recording-healthy",
 	"recording-degraded",
+	...DEVICE_ATTENTION,
 	...ALARM
 ];
 /** Every kind a summary may speak about — the two summarisable families. */
@@ -74312,7 +74339,9 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
-	([...RULE_TEXT], [...ALERT_EPISODE]),
+	[...RULE_TEXT],
+	[...RULE_TEXT],
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
@@ -74334,11 +74363,11 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	([...RULE_TEXT], [...ALERT_EPISODE]),
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	([...RULE_TEXT], [...ALERT_EPISODE]),
-	([...RULE_TEXT], [...ALERT_EPISODE]),
-	([...RULE_TEXT], [...ALERT_EPISODE]),
-	([...RULE_TEXT], [...ALERT_EPISODE]),
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
@@ -74414,6 +74443,15 @@ new Map([
 		snapshotLabel: "Tanks low or full now",
 		snapshotSection: "tanks"
 	},
+	{
+		id: "motion-noise",
+		family: "device-events",
+		label: "Motion without a subject (constant / calm again)",
+		bad: ["motion-noisy"],
+		recovery: ["motion-calm"],
+		snapshotLabel: "Cameras with constant motion now",
+		snapshotSection: null
+	},
 	{
 		id: "recording-health",
 		family: "device-events",
@@ -74423,6 +74461,15 @@ new Map([
 		snapshotLabel: "Recordings stalled now",
 		snapshotSection: null
 	},
+	{
+		id: "device-attention",
+		family: "device-events",
+		label: "Device needs attention (raised / resolved)",
+		bad: ["device-attention-required"],
+		recovery: ["device-attention-resolved"],
+		snapshotLabel: "Devices needing attention now",
+		snapshotSection: null
+	},
 	{
 		id: "node-connectivity",
 		family: "system",

package/dist/mqtt-broker.addon.mjs

@@ -39,7 +39,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 var __toCommonJS = (mod) => __hasOwnProp.call(mod, "module.exports") ? mod["module.exports"] : __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 //#endregion
-//#region ../types/dist/event-category-7pZEBmVg.mjs
+//#region ../types/dist/event-category-BfJwUd2S.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -356,6 +356,15 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineDetectionBlind"] = "pipeline.detection-blind";
 	/**
+	* A camera's motion source has fired constantly with no subject for an hour
+	* (motion duty or session count over the bar, zero detections) — it is not
+	* blind, its motion zones or sensitivity want tuning (D907). Paired with
+	* {@link PipelineMotionCalm}.
+	*/
+	EventCategory["PipelineMotionNoisy"] = "pipeline.motion-noisy";
+	/** The recovery edge of {@link PipelineMotionNoisy}: the motion fell back, or a detection arrived. */
+	EventCategory["PipelineMotionCalm"] = "pipeline.motion-calm";
+	/**
 	* Per-camera pipeline config was mutated by the orchestrator
 	* (3-level settings change via `setAgentAddonDefaults` /
 	* `setCameraStepToggle` / `setCameraPipelineForAgent` or a
@@ -5595,7 +5604,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-CueztlR1.mjs
+//#region ../types/dist/sleep-DJFUfKvA.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -8194,7 +8203,7 @@ var EntryDescriptorSchema = object({
 	/** JSON Schema of the entry body; `secret: true` marks a password field. */
 	fields: record(string(), unknown())
 }).strict();
-/** What crosses the wire and sits in the engine's catalog: JSON only, no Zod. */
+/** What crosses the wire from an addon: JSON only, no Zod. An unknown key is refused. */
 var RecordKindDeclarationSchema = object({
 	database: _enum(RECORD_DATABASES).default("settings"),
 	class: _enum(RECORD_CLASSES),
@@ -8213,14 +8222,6 @@ var RecordKindDeclarationSchema = object({
 	secretPaths: array(string().min(1)).default([]),
 	/** The id key of each array that carries a secret (`{ headers: 'name' }`). */
 	secretArrayKeys: record(string(), string()).default({}),
-	/**
-	* RETIRED (D900): the legacy table a kind adopted from during the records
-	* migration. Nothing declares it any more and nothing reads it; the schema
-	* still ACCEPTS it because the catalog rows the migration wrote carry it
-	* (an orphaned kind is never redeclared) and an addon built before the
-	* removal still sends it. Never set it.
-	*/
-	adoptsFrom: string().min(1).optional(),
 	/** Kinds that must agree through `transact` sit in one file under one family name. */
 	transactFamily: string().min(1).optional(),
 	entry: EntryDescriptorSchema.optional()
@@ -13002,17 +13003,6 @@ object({
 	createdAt: number(),
 	updatedAt: number()
 });
-object({
-	id: string(),
-	label: string(),
-	isAdmin: boolean().default(false),
-	allowedProviders: AllowedProviderSchema,
-	allowedDevices: AllowedDevicesSchema,
-	tokenHash: string(),
-	tokenPrefix: string(),
-	createdAt: number(),
-	lastUsedAt: number().optional()
-});
 object({
 	id: string(),
 	userId: string(),
@@ -16937,16 +16927,36 @@ var RecordKindStateSchema = _enum([
 var DeclareKindResultSchema = object({
 	kindId: number().int(),
 	state: RecordKindStateSchema,
-	createdIndexes: array(string()),
-	/**
-	* RETIRED (D900): always `null`. It carried the records-migration boot guard;
-	* it stays on the wire, null, because an addon built before the removal reads
-	* an ABSENT field as "adoption pending" and refuses to start.
-	*/
-	adoptionPending: _null()
+	createdIndexes: array(string())
 });
 /** Keychain refs a write released (the old marker is gone from the row): the owner deletes the values. */
 var SecretRefsList = array(string());
+/**
+* One op of a `transact`: the single-row writes, each on a kind of the caller.
+* All ops of one call share ONE database file and ONE `transactFamily`.
+*/
+var RecordTransactOpSchema = discriminatedUnion("op", [
+	object({
+		op: literal("put"),
+		kind: RecordKindNameSchema,
+		record: RecordInputSchema,
+		ifRev: number().int().min(0).optional()
+	}),
+	object({
+		op: literal("patch"),
+		kind: RecordKindNameSchema,
+		id: RecordIdSchema,
+		data: RecordBodySchema,
+		at: number().int().nullable().optional(),
+		expiresAt: number().int().nullable().optional(),
+		ifRev: number().int().min(1).optional()
+	}),
+	object({
+		op: literal("delete"),
+		kind: RecordKindNameSchema,
+		id: RecordIdSchema
+	})
+]);
 var RecordSecretRefsSchema = record(string(), record(string(), string()));
 method(object({ kinds: record(RecordKindNameSchema, RecordKindDeclarationSchema) }), object({ kinds: record(string(), DeclareKindResultSchema) }), {
 	kind: "mutation",
@@ -17053,6 +17063,16 @@ method(object({ kinds: record(RecordKindNameSchema, RecordKindDeclarationSchema)
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({ ops: array(RecordTransactOpSchema).min(1).max(RECORD_BATCH_MAX) }), object({
+	results: array(object({
+		rev: number().int().nullable(),
+		deleted: boolean()
+	})),
+	releasedRefs: SecretRefsList,
+	secretRefs: SecretRefsList
+}), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({
 	deviceId: number().int(),
 	kinds: array(RecordKindNameSchema).optional()
@@ -42430,9 +42450,13 @@ var NcSystemEventKindSchema = _enum([
 	"node-updating",
 	"node-inference-unavailable",
 	"detection-blind",
+	"motion-noisy",
+	"motion-calm",
 	"recording-stalled",
 	"recording-healthy",
 	"recording-degraded",
+	"device-attention-required",
+	"device-attention-resolved",
 	"storage-location-low",
 	"storage-location-critical",
 	"storage-location-ok",
@@ -47993,7 +48017,6 @@ var RecommendationReasonSchema = discriminatedUnion("kind", [
 		modelId: string()
 	}),
 	object({ kind: literal("cpu-device") }),
-	object({ kind: literal("coral-untouched") }),
 	object({ kind: literal("device-disabled") }),
 	object({ kind: literal("device-unavailable") }),
 	object({ kind: literal("node-offline") }),
@@ -48091,11 +48114,6 @@ var AutoTuneWarningSchema = discriminatedUnion("kind", [
 		kind: literal("detector-store-unreadable"),
 		error: string()
 	}),
-	object({
-		kind: literal("coral-enabled"),
-		nodeId: string(),
-		deviceKey: string()
-	}),
 	object({
 		kind: literal("custom-pin-kept"),
 		nodeId: string(),
@@ -54889,6 +54907,16 @@ object({
 	powerState: string().nullable(),
 	saltLevel: DishwasherConsumableLevelSchema.nullable(),
 	rinseAidLevel: DishwasherConsumableLevelSchema.nullable(),
+	/**
+	* True while the appliance asks for its filter to be cleaned (smart-filter, filter-system or
+	* combined care-and-filter reminder raised); false when every such reminder reads clear; null
+	* when none is reported. A cleared reminder is not an unknown one.
+	*/
+	filterCleaningDue: boolean().nullable(),
+	/** True while the machine-care (descaling / cleaning-program) reminder is raised; false when clear; null when not reported. */
+	machineCareDue: boolean().nullable(),
+	/** Program runs left before the machine-care reminder is due; null when the appliance does not say. */
+	machineCareRemainingRuns: number().int().nonnegative().nullable(),
 	/** Option states: null when the appliance does not expose the option or has not said. */
 	halfLoad: boolean().nullable(),
 	hygienePlus: boolean().nullable(),
@@ -61506,16 +61534,6 @@ var UpdateUserInputSchema = object({
 	allowedDevices: record(string(), union([array(string()), literal("*")])).optional(),
 	scopes: array(TokenScopeSchema).optional()
 });
-var ApiKeySummarySchema = object({
-	id: string(),
-	label: string(),
-	isAdmin: boolean().default(false),
-	allowedProviders: union([array(string()), literal("*")]).optional(),
-	allowedDevices: record(string(), union([array(string()), literal("*")])).optional(),
-	tokenPrefix: string(),
-	createdAt: number(),
-	lastUsedAt: number().optional()
-});
 var OauthSessionSummarySchema = object({
 	id: string(),
 	userId: string(),
@@ -61537,8 +61555,7 @@ var TotpStatusSchema = object({
 	confirmedAt: number().nullable()
 });
 /**
-* user-management — singleton capability for user accounts and the
-* legacy API-key rows.
+* user-management — singleton capability for user accounts.
 *
 * v2 model: every method gated by `auth: 'admin'`. Admin-only delegation
 * — the subset check on `setUserScopes` is moot
@@ -61594,10 +61611,6 @@ method(_void(), array(UserSummarySchema), { auth: "admin" }), method(CreateUserI
 }), UserSummarySchema.extend({ passwordHash: string() }).nullable(), {
 	kind: "mutation",
 	access: "view"
-}), method(_void(), array(ApiKeySummarySchema), { auth: "admin" }), method(object({ id: string() }), object({ success: literal(true) }), {
-	kind: "mutation",
-	auth: "admin",
-	access: "delete"
 }), method(object({ userId: string() }), TotpSetupResultSchema, {
 	kind: "mutation",
 	auth: "admin",
@@ -69110,6 +69123,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"records.transact": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"sceneMonitor.captureReference": {
 		capName: "scene-monitor",
 		capScope: "device",
@@ -70442,12 +70461,6 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"userManagement.listApiKeys": {
-		capName: "user-management",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
 	"userManagement.listExternalIdentities": {
 		capName: "user-management",
 		capScope: "system",
@@ -70502,12 +70515,6 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"userManagement.revokeApiKey": {
-		capName: "user-management",
-		capScope: "system",
-		addonId: null,
-		access: "delete"
-	},
 	"userManagement.revokeOauthSession": {
 		capName: "user-management",
 		capScope: "system",
@@ -73872,9 +73879,13 @@ new Map(Object.entries({
 	"stream-online": "device-events",
 	"stream-offline": "device-events",
 	"detection-blind": "device-events",
+	"motion-noisy": "device-events",
+	"motion-calm": "device-events",
 	"recording-stalled": "device-events",
 	"recording-healthy": "device-events",
 	"recording-degraded": "device-events",
+	"device-attention-required": "device-events",
+	"device-attention-resolved": "device-events",
 	"node-online": "system",
 	"node-offline": "system",
 	"node-restarting": "system",
@@ -73957,6 +73968,12 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 		label: "Detecting nothing",
 		kinds: ["detection-blind"]
 	},
+	{
+		id: "motion-noise",
+		family: "device-events",
+		label: "Motion without a subject",
+		kinds: ["motion-noisy", "motion-calm"]
+	},
 	{
 		id: "recording",
 		family: "device-events",
@@ -73967,6 +73984,12 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 			"recording-degraded"
 		]
 	},
+	{
+		id: "device-attention",
+		family: "device-events",
+		label: "Needs attention",
+		kinds: ["device-attention-required", "device-attention-resolved"]
+	},
 	{
 		id: "nodes",
 		family: "system",
@@ -74106,6 +74129,7 @@ var ALERT_EPISODE = [
 	"alert-error",
 	"alert-critical-resolved"
 ];
+var DEVICE_ATTENTION = ["device-attention-required", "device-attention-resolved"];
 var UPDATES = [
 	"addon-update-available",
 	"server-update-available",
@@ -74135,9 +74159,12 @@ var DEVICE_EVENTS = [
 	"stream-online",
 	"stream-offline",
 	"detection-blind",
+	"motion-noisy",
+	"motion-calm",
 	"recording-stalled",
 	"recording-healthy",
 	"recording-degraded",
+	...DEVICE_ATTENTION,
 	...ALARM
 ];
 /** Every kind a summary may speak about — the two summarisable families. */
@@ -74305,7 +74332,9 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
-	([...RULE_TEXT], [...ALERT_EPISODE]),
+	[...RULE_TEXT],
+	[...RULE_TEXT],
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
@@ -74327,11 +74356,11 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	([...RULE_TEXT], [...ALERT_EPISODE]),
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	([...RULE_TEXT], [...ALERT_EPISODE]),
-	([...RULE_TEXT], [...ALERT_EPISODE]),
-	([...RULE_TEXT], [...ALERT_EPISODE]),
-	([...RULE_TEXT], [...ALERT_EPISODE]),
+	([...RULE_TEXT], [...DEVICE_ATTENTION, ...ALERT_EPISODE]),
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
@@ -74407,6 +74436,15 @@ new Map([
 		snapshotLabel: "Tanks low or full now",
 		snapshotSection: "tanks"
 	},
+	{
+		id: "motion-noise",
+		family: "device-events",
+		label: "Motion without a subject (constant / calm again)",
+		bad: ["motion-noisy"],
+		recovery: ["motion-calm"],
+		snapshotLabel: "Cameras with constant motion now",
+		snapshotSection: null
+	},
 	{
 		id: "recording-health",
 		family: "device-events",
@@ -74416,6 +74454,15 @@ new Map([
 		snapshotLabel: "Recordings stalled now",
 		snapshotSection: null
 	},
+	{
+		id: "device-attention",
+		family: "device-events",
+		label: "Device needs attention (raised / resolved)",
+		bad: ["device-attention-required"],
+		recovery: ["device-attention-resolved"],
+		snapshotLabel: "Devices needing attention now",
+		snapshotSection: null
+	},
 	{
 		id: "node-connectivity",
 		family: "system",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-mqtt-broker",
-  "version": "1.2.140",
+  "version": "1.2.142",
   "description": "MQTT broker registry addon for CamStack — manages external broker entries + an optional embedded aedes broker. Consumers spin up their own `mqtt.js` clients via the `mqtt-broker` cap.",
   "keywords": [
     "camstack",