@camstack/addon-remote-storage 1.2.82 → 1.2.84

package/dist/s3.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_shared = require("./shared-CCTASNJI.js");
+const require_shared = require("./shared-GkmTwSS1.js");
 let node_stream = require("node:stream");
 let _aws_sdk_client_s3 = require("@aws-sdk/client-s3");
 let _aws_sdk_lib_storage = require("@aws-sdk/lib-storage");

package/dist/s3.addon.mjs

@@ -1,4 +1,4 @@
-import { c as BaseAddon, i as rearmIdleAbort, n as getOptionalBasePath, o as scheduleIdleAbort, s as storageProviderCapability, t as createSessionId } from "./shared-B5I6yx9T.mjs";
+import { c as BaseAddon, i as rearmIdleAbort, n as getOptionalBasePath, o as scheduleIdleAbort, s as storageProviderCapability, t as createSessionId } from "./shared-Dd6Ix8wk.mjs";
 import { PassThrough } from "node:stream";
 import { DeleteObjectCommand, GetObjectCommand, HeadBucketCommand, HeadObjectCommand, ListObjectsV2Command, PutObjectCommand, S3Client } from "@aws-sdk/client-s3";
 import { Upload } from "@aws-sdk/lib-storage";

package/dist/sftp.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_shared = require("./shared-CCTASNJI.js");
+const require_shared = require("./shared-GkmTwSS1.js");
 let ssh2 = require("ssh2");
 let node_path = require("node:path");
 node_path = require_shared.__toESM(node_path);

package/dist/sftp.addon.mjs

@@ -1,4 +1,4 @@
-import { a as safeJoinRemotePath, c as BaseAddon, i as rearmIdleAbort, o as scheduleIdleAbort, r as getRequiredBasePath, s as storageProviderCapability, t as createSessionId } from "./shared-B5I6yx9T.mjs";
+import { a as safeJoinRemotePath, c as BaseAddon, i as rearmIdleAbort, o as scheduleIdleAbort, r as getRequiredBasePath, s as storageProviderCapability, t as createSessionId } from "./shared-Dd6Ix8wk.mjs";
 import { Client } from "ssh2";
 import * as path from "node:path";
 //#region src/providers/sftp/sftp-config-schema.ts

package/dist/{shared-B5I6yx9T.mjs → shared-Dd6Ix8wk.mjs}

@@ -18363,11 +18363,30 @@ var SensorEventSchema = object({
 	value: record(string(), unknown()).nullable(),
 	timestamp: number()
 });
+/**
+* One stored sighting on a track's trajectory.
+*
+* The array these live in is returned in TIME order (D399) — it is APPENDED in
+* arrival order, and the two detector passes interleave, so a consumer must not
+* assume the two are the same on a row written by an older build.
+*/
 var TrackPositionSchema = object({
 	x: number(),
 	y: number(),
 	timestamp: number(),
-	bbox: BoundingBoxSchema
+	bbox: BoundingBoxSchema,
+	/**
+	* Which detector pass measured this box (D399): `frame` is the full-frame
+	* pass on the analysis raster, `recovery` is the native-resolution
+	* small-subject second pass (D377/D378). Both write into one array, and until
+	* this field existed the only way to tell them apart was that full-frame boxes
+	* are exact multiples of 1.2 while recovery boxes are full-precision floats.
+	* Absent on rows written before D399.
+	*/
+	source: _enum(["frame", "recovery"]).optional(),
+	/** Detection score of this box, so a position can be weighed and not only
+	*  plotted. Absent on rows written before D399. */
+	score: number().optional()
 });
 var TrackSnapshotSchema = object({
 	timestamp: number(),
@@ -18767,14 +18786,25 @@ var TrackSchema = object({
 	*/
 	hasRider: boolean().optional(),
 	/**
-	* WHY this track ended without a NATIVE best-shot tile
-	* ([D276](../decisions/adr-0276-a-stand-in-tile-is-provisional-and-a-close-says-why.md)) —
+	* WHY this track ended without a NATIVE best-shot FRAME
+	* ([D276](../decisions/adr-0276-a-stand-in-tile-is-provisional-and-a-close-says-why.md),
+	* widened by [D400](../decisions/adr-0400-the-picture-is-judged-on-what-is-delivered.md)) —
 	* a composed token line (`no-key-frame capture=keyframe:native-missx4`,
-	* `derive-returned-null tile=standin`, …) written at close and CLEARED by
-	* the late-keyFrame upgrade when a native tile lands after all. The
-	* operator-facing answer to "perché manca l'immagine?" on a track whose
+	* `derive-returned-null tile=standin`,
+	* `native-tile tile=native no-key-frame-at-close`, …) written at close and
+	* CLEARED by the late-keyFrame upgrade when a native tile lands after all.
+	* The operator-facing answer to "perché manca l'immagine?" on a track whose
 	* tile is a face/plate stand-in, a raster crop, or an icon.
 	*
+	* **`no-key-frame-at-close` (D400).** The line used to be written ONLY when
+	* the TILE ranked below native, so a track whose thumbnail landed natively
+	* while its key frame missed carried no reason at all — three of the four
+	* `MISSING_KEYFRAME` tracks in the 2026-09-07 operator audit were exactly
+	* that shape, and their "niente ultimo" had no cause anywhere on the row.
+	* The key frame is the head of a cascade (`keyFrame ⇒ keyFrameSmall ⇒ the
+	* lastFrame copy source`), so its absence is now on this line whatever the
+	* tile ended up being.
+	*
 	* **Absent ≠ "missed silently"**: a row written before the column, a hub
 	* that predates the field, and every track whose tile landed native all
 	* omit it. Render nothing when absent.
@@ -24168,6 +24198,59 @@ var IdentitySampleInfoSchema = object({
 	deviceId: number().int().optional(),
 	base64: string().optional()
 });
+/**
+* One enrolled sample, judged against the gallery it lives in.
+*
+* The gallery is the one input to recognition nobody re-reads: a sample
+* enrolled from the wrong face keeps voting forever, and because the matches it
+* pulls then look confident, nobody goes back. The 2026-09-08 audit found
+* exactly one such pair on this cluster — a sample scoring 0.61 against three
+* samples of ANOTHER person, enrolled from the same camera in the same minute,
+* where every other cross-identity pair sits under 0.50.
+*/
+var IdentitySampleAuditRowSchema = object({
+	sampleId: string(),
+	enrolledAt: number().int(),
+	deviceId: number().int().optional(),
+	source: _enum(["detected", "photo"]),
+	/** The enrolled crop's media key, so the panel can show the evidence. */
+	mediaKey: string().optional(),
+	/**
+	* False = the sample is stamped with a DIFFERENT face model, and a cosine
+	* across feature spaces is a well-formed float with no meaning. Every number
+	* below then says nothing — it must read as "cannot say", never as an
+	* accusation and never as a clean bill: this list ends in a Remove button.
+	*/
+	comparable: boolean(),
+	/** Mean cosine against this person's other samples. Null when there are none
+	*  to compare with — never 0, which would read as "opposite". */
+	selfMean: number().nullable(),
+	/** The other person this sample looks most like, when it looks like one.
+	*  This is the half that convicts: not looking like yourself can be a hard
+	*  angle; looking like someone the gallery can NAME is a mis-enrolment. */
+	bestForeign: object({
+		identityId: string(),
+		name: string(),
+		score: number()
+	}).optional(),
+	/** 0 = nothing to say. Higher = look at this one sooner. */
+	suspicion: number()
+});
+var IdentitySampleAuditSchema = object({
+	identityId: string(),
+	name: string(),
+	/** The cluster face model every comparison was made in. */
+	modelId: string(),
+	totalSamples: number().int(),
+	comparableSamples: number().int(),
+	flagged: number().int(),
+	/** The bar `flagged` counts against, so the panel states the RULE and not
+	*  only its current result. */
+	flagThreshold: number(),
+	/** Worst first. A row with nothing to say still appears, at the bottom: the
+	*  operator asked to see the gallery, not only its accusations. */
+	rows: array(IdentitySampleAuditRowSchema).readonly()
+});
 var FaceInfoSchema = object({
 	faceId: string(),
 	deviceId: number().int(),
@@ -24319,7 +24402,7 @@ includeCrops: boolean().optional() }).optional(), array(IdentitySchema).readonly
 }), method(object({ id: string() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ identityId: string() }), array(IdentitySampleInfoSchema).readonly()), method(object({
+}), method(object({ identityId: string() }), array(IdentitySampleInfoSchema).readonly()), method(object({ identityId: string().min(1) }), IdentitySampleAuditSchema, { auth: "admin" }), method(object({
 	identityId: string(),
 	sampleId: string()
 }), _void(), {
@@ -31546,6 +31629,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"faceGallery.auditIdentitySamples": {
+		capName: "face-gallery",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"faceGallery.createIdentity": {
 		capName: "face-gallery",
 		capScope: "system",

package/dist/{shared-CCTASNJI.js → shared-GkmTwSS1.js}

@@ -18386,11 +18386,30 @@ var SensorEventSchema = object({
 	value: record(string(), unknown()).nullable(),
 	timestamp: number()
 });
+/**
+* One stored sighting on a track's trajectory.
+*
+* The array these live in is returned in TIME order (D399) — it is APPENDED in
+* arrival order, and the two detector passes interleave, so a consumer must not
+* assume the two are the same on a row written by an older build.
+*/
 var TrackPositionSchema = object({
 	x: number(),
 	y: number(),
 	timestamp: number(),
-	bbox: BoundingBoxSchema
+	bbox: BoundingBoxSchema,
+	/**
+	* Which detector pass measured this box (D399): `frame` is the full-frame
+	* pass on the analysis raster, `recovery` is the native-resolution
+	* small-subject second pass (D377/D378). Both write into one array, and until
+	* this field existed the only way to tell them apart was that full-frame boxes
+	* are exact multiples of 1.2 while recovery boxes are full-precision floats.
+	* Absent on rows written before D399.
+	*/
+	source: _enum(["frame", "recovery"]).optional(),
+	/** Detection score of this box, so a position can be weighed and not only
+	*  plotted. Absent on rows written before D399. */
+	score: number().optional()
 });
 var TrackSnapshotSchema = object({
 	timestamp: number(),
@@ -18790,14 +18809,25 @@ var TrackSchema = object({
 	*/
 	hasRider: boolean().optional(),
 	/**
-	* WHY this track ended without a NATIVE best-shot tile
-	* ([D276](../decisions/adr-0276-a-stand-in-tile-is-provisional-and-a-close-says-why.md)) —
+	* WHY this track ended without a NATIVE best-shot FRAME
+	* ([D276](../decisions/adr-0276-a-stand-in-tile-is-provisional-and-a-close-says-why.md),
+	* widened by [D400](../decisions/adr-0400-the-picture-is-judged-on-what-is-delivered.md)) —
 	* a composed token line (`no-key-frame capture=keyframe:native-missx4`,
-	* `derive-returned-null tile=standin`, …) written at close and CLEARED by
-	* the late-keyFrame upgrade when a native tile lands after all. The
-	* operator-facing answer to "perché manca l'immagine?" on a track whose
+	* `derive-returned-null tile=standin`,
+	* `native-tile tile=native no-key-frame-at-close`, …) written at close and
+	* CLEARED by the late-keyFrame upgrade when a native tile lands after all.
+	* The operator-facing answer to "perché manca l'immagine?" on a track whose
 	* tile is a face/plate stand-in, a raster crop, or an icon.
 	*
+	* **`no-key-frame-at-close` (D400).** The line used to be written ONLY when
+	* the TILE ranked below native, so a track whose thumbnail landed natively
+	* while its key frame missed carried no reason at all — three of the four
+	* `MISSING_KEYFRAME` tracks in the 2026-09-07 operator audit were exactly
+	* that shape, and their "niente ultimo" had no cause anywhere on the row.
+	* The key frame is the head of a cascade (`keyFrame ⇒ keyFrameSmall ⇒ the
+	* lastFrame copy source`), so its absence is now on this line whatever the
+	* tile ended up being.
+	*
 	* **Absent ≠ "missed silently"**: a row written before the column, a hub
 	* that predates the field, and every track whose tile landed native all
 	* omit it. Render nothing when absent.
@@ -24191,6 +24221,59 @@ var IdentitySampleInfoSchema = object({
 	deviceId: number().int().optional(),
 	base64: string().optional()
 });
+/**
+* One enrolled sample, judged against the gallery it lives in.
+*
+* The gallery is the one input to recognition nobody re-reads: a sample
+* enrolled from the wrong face keeps voting forever, and because the matches it
+* pulls then look confident, nobody goes back. The 2026-09-08 audit found
+* exactly one such pair on this cluster — a sample scoring 0.61 against three
+* samples of ANOTHER person, enrolled from the same camera in the same minute,
+* where every other cross-identity pair sits under 0.50.
+*/
+var IdentitySampleAuditRowSchema = object({
+	sampleId: string(),
+	enrolledAt: number().int(),
+	deviceId: number().int().optional(),
+	source: _enum(["detected", "photo"]),
+	/** The enrolled crop's media key, so the panel can show the evidence. */
+	mediaKey: string().optional(),
+	/**
+	* False = the sample is stamped with a DIFFERENT face model, and a cosine
+	* across feature spaces is a well-formed float with no meaning. Every number
+	* below then says nothing — it must read as "cannot say", never as an
+	* accusation and never as a clean bill: this list ends in a Remove button.
+	*/
+	comparable: boolean(),
+	/** Mean cosine against this person's other samples. Null when there are none
+	*  to compare with — never 0, which would read as "opposite". */
+	selfMean: number().nullable(),
+	/** The other person this sample looks most like, when it looks like one.
+	*  This is the half that convicts: not looking like yourself can be a hard
+	*  angle; looking like someone the gallery can NAME is a mis-enrolment. */
+	bestForeign: object({
+		identityId: string(),
+		name: string(),
+		score: number()
+	}).optional(),
+	/** 0 = nothing to say. Higher = look at this one sooner. */
+	suspicion: number()
+});
+var IdentitySampleAuditSchema = object({
+	identityId: string(),
+	name: string(),
+	/** The cluster face model every comparison was made in. */
+	modelId: string(),
+	totalSamples: number().int(),
+	comparableSamples: number().int(),
+	flagged: number().int(),
+	/** The bar `flagged` counts against, so the panel states the RULE and not
+	*  only its current result. */
+	flagThreshold: number(),
+	/** Worst first. A row with nothing to say still appears, at the bottom: the
+	*  operator asked to see the gallery, not only its accusations. */
+	rows: array(IdentitySampleAuditRowSchema).readonly()
+});
 var FaceInfoSchema = object({
 	faceId: string(),
 	deviceId: number().int(),
@@ -24342,7 +24425,7 @@ includeCrops: boolean().optional() }).optional(), array(IdentitySchema).readonly
 }), method(object({ id: string() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ identityId: string() }), array(IdentitySampleInfoSchema).readonly()), method(object({
+}), method(object({ identityId: string() }), array(IdentitySampleInfoSchema).readonly()), method(object({ identityId: string().min(1) }), IdentitySampleAuditSchema, { auth: "admin" }), method(object({
 	identityId: string(),
 	sampleId: string()
 }), _void(), {
@@ -31569,6 +31652,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"faceGallery.auditIdentitySamples": {
+		capName: "face-gallery",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"faceGallery.createIdentity": {
 		capName: "face-gallery",
 		capScope: "system",

package/dist/smb.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_shared = require("./shared-CCTASNJI.js");
+const require_shared = require("./shared-GkmTwSS1.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");
 node_path = require_shared.__toESM(node_path);

package/dist/smb.addon.mjs

@@ -1,4 +1,4 @@
-import { c as BaseAddon, i as rearmIdleAbort, o as scheduleIdleAbort, s as storageProviderCapability } from "./shared-B5I6yx9T.mjs";
+import { c as BaseAddon, i as rearmIdleAbort, o as scheduleIdleAbort, s as storageProviderCapability } from "./shared-Dd6Ix8wk.mjs";
 import { randomUUID } from "node:crypto";
 import * as path from "node:path";
 import * as fsp from "node:fs/promises";

package/dist/webdav.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_shared = require("./shared-CCTASNJI.js");
+const require_shared = require("./shared-GkmTwSS1.js");
 let node_stream = require("node:stream");
 let webdav = require("webdav");
 //#region src/providers/webdav/webdav-config-schema.ts

package/dist/webdav.addon.mjs

@@ -1,4 +1,4 @@
-import { a as safeJoinRemotePath, c as BaseAddon, i as rearmIdleAbort, o as scheduleIdleAbort, r as getRequiredBasePath, s as storageProviderCapability, t as createSessionId } from "./shared-B5I6yx9T.mjs";
+import { a as safeJoinRemotePath, c as BaseAddon, i as rearmIdleAbort, o as scheduleIdleAbort, r as getRequiredBasePath, s as storageProviderCapability, t as createSessionId } from "./shared-Dd6Ix8wk.mjs";
 import { PassThrough } from "node:stream";
 import { AuthType, createClient } from "webdav";
 //#region src/providers/webdav/webdav-config-schema.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-remote-storage",
-  "version": "1.2.82",
+  "version": "1.2.84",
   "description": "Remote storage providers (SFTP, S3, WebDAV, SMB) — unifies remote backends behind the storage-provider cap",
   "keywords": [
     "camstack",