@camstack/addon-tailscale 1.2.84 → 1.2.85

package/dist/client/tailscale.addon.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_dist = require("../dist-DUqXeckw.js");
+const require_dist = require("../dist-BdBOnfeo.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_fs = require("node:fs");

package/dist/client/tailscale.addon.mjs

@@ -1,4 +1,4 @@
-import { a as EventCategory, i as BaseAddon, n as networkAccessCapability, r as BOOT_RECOVERY_BACKOFF_MS, t as meshNetworkCapability } from "../dist-C9fQsDBf.mjs";
+import { a as EventCategory, i as BaseAddon, n as networkAccessCapability, r as BOOT_RECOVERY_BACKOFF_MS, t as meshNetworkCapability } from "../dist-CRyT30U1.mjs";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
 import * as fs from "node:fs";

package/dist/{dist-DUqXeckw.js → dist-BdBOnfeo.js}

@@ -24187,6 +24187,59 @@ var IdentitySampleInfoSchema = object({
 	deviceId: number().int().optional(),
 	base64: string().optional()
 });
+/**
+* One enrolled sample, judged against the gallery it lives in.
+*
+* The gallery is the one input to recognition nobody re-reads: a sample
+* enrolled from the wrong face keeps voting forever, and because the matches it
+* pulls then look confident, nobody goes back. The 2026-09-08 audit found
+* exactly one such pair on this cluster — a sample scoring 0.61 against three
+* samples of ANOTHER person, enrolled from the same camera in the same minute,
+* where every other cross-identity pair sits under 0.50.
+*/
+var IdentitySampleAuditRowSchema = object({
+	sampleId: string(),
+	enrolledAt: number().int(),
+	deviceId: number().int().optional(),
+	source: _enum(["detected", "photo"]),
+	/** The enrolled crop's media key, so the panel can show the evidence. */
+	mediaKey: string().optional(),
+	/**
+	* False = the sample is stamped with a DIFFERENT face model, and a cosine
+	* across feature spaces is a well-formed float with no meaning. Every number
+	* below then says nothing — it must read as "cannot say", never as an
+	* accusation and never as a clean bill: this list ends in a Remove button.
+	*/
+	comparable: boolean(),
+	/** Mean cosine against this person's other samples. Null when there are none
+	*  to compare with — never 0, which would read as "opposite". */
+	selfMean: number().nullable(),
+	/** The other person this sample looks most like, when it looks like one.
+	*  This is the half that convicts: not looking like yourself can be a hard
+	*  angle; looking like someone the gallery can NAME is a mis-enrolment. */
+	bestForeign: object({
+		identityId: string(),
+		name: string(),
+		score: number()
+	}).optional(),
+	/** 0 = nothing to say. Higher = look at this one sooner. */
+	suspicion: number()
+});
+var IdentitySampleAuditSchema = object({
+	identityId: string(),
+	name: string(),
+	/** The cluster face model every comparison was made in. */
+	modelId: string(),
+	totalSamples: number().int(),
+	comparableSamples: number().int(),
+	flagged: number().int(),
+	/** The bar `flagged` counts against, so the panel states the RULE and not
+	*  only its current result. */
+	flagThreshold: number(),
+	/** Worst first. A row with nothing to say still appears, at the bottom: the
+	*  operator asked to see the gallery, not only its accusations. */
+	rows: array(IdentitySampleAuditRowSchema).readonly()
+});
 var FaceInfoSchema = object({
 	faceId: string(),
 	deviceId: number().int(),
@@ -24338,7 +24391,7 @@ includeCrops: boolean().optional() }).optional(), array(IdentitySchema).readonly
 }), method(object({ id: string() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ identityId: string() }), array(IdentitySampleInfoSchema).readonly()), method(object({
+}), method(object({ identityId: string() }), array(IdentitySampleInfoSchema).readonly()), method(object({ identityId: string().min(1) }), IdentitySampleAuditSchema, { auth: "admin" }), method(object({
 	identityId: string(),
 	sampleId: string()
 }), _void(), {
@@ -31626,6 +31679,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"faceGallery.auditIdentitySamples": {
+		capName: "face-gallery",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"faceGallery.createIdentity": {
 		capName: "face-gallery",
 		capScope: "system",

package/dist/{dist-C9fQsDBf.mjs → dist-CRyT30U1.mjs}

@@ -24187,6 +24187,59 @@ var IdentitySampleInfoSchema = object({
 	deviceId: number().int().optional(),
 	base64: string().optional()
 });
+/**
+* One enrolled sample, judged against the gallery it lives in.
+*
+* The gallery is the one input to recognition nobody re-reads: a sample
+* enrolled from the wrong face keeps voting forever, and because the matches it
+* pulls then look confident, nobody goes back. The 2026-09-08 audit found
+* exactly one such pair on this cluster — a sample scoring 0.61 against three
+* samples of ANOTHER person, enrolled from the same camera in the same minute,
+* where every other cross-identity pair sits under 0.50.
+*/
+var IdentitySampleAuditRowSchema = object({
+	sampleId: string(),
+	enrolledAt: number().int(),
+	deviceId: number().int().optional(),
+	source: _enum(["detected", "photo"]),
+	/** The enrolled crop's media key, so the panel can show the evidence. */
+	mediaKey: string().optional(),
+	/**
+	* False = the sample is stamped with a DIFFERENT face model, and a cosine
+	* across feature spaces is a well-formed float with no meaning. Every number
+	* below then says nothing — it must read as "cannot say", never as an
+	* accusation and never as a clean bill: this list ends in a Remove button.
+	*/
+	comparable: boolean(),
+	/** Mean cosine against this person's other samples. Null when there are none
+	*  to compare with — never 0, which would read as "opposite". */
+	selfMean: number().nullable(),
+	/** The other person this sample looks most like, when it looks like one.
+	*  This is the half that convicts: not looking like yourself can be a hard
+	*  angle; looking like someone the gallery can NAME is a mis-enrolment. */
+	bestForeign: object({
+		identityId: string(),
+		name: string(),
+		score: number()
+	}).optional(),
+	/** 0 = nothing to say. Higher = look at this one sooner. */
+	suspicion: number()
+});
+var IdentitySampleAuditSchema = object({
+	identityId: string(),
+	name: string(),
+	/** The cluster face model every comparison was made in. */
+	modelId: string(),
+	totalSamples: number().int(),
+	comparableSamples: number().int(),
+	flagged: number().int(),
+	/** The bar `flagged` counts against, so the panel states the RULE and not
+	*  only its current result. */
+	flagThreshold: number(),
+	/** Worst first. A row with nothing to say still appears, at the bottom: the
+	*  operator asked to see the gallery, not only its accusations. */
+	rows: array(IdentitySampleAuditRowSchema).readonly()
+});
 var FaceInfoSchema = object({
 	faceId: string(),
 	deviceId: number().int(),
@@ -24338,7 +24391,7 @@ includeCrops: boolean().optional() }).optional(), array(IdentitySchema).readonly
 }), method(object({ id: string() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ identityId: string() }), array(IdentitySampleInfoSchema).readonly()), method(object({
+}), method(object({ identityId: string() }), array(IdentitySampleInfoSchema).readonly()), method(object({ identityId: string().min(1) }), IdentitySampleAuditSchema, { auth: "admin" }), method(object({
 	identityId: string(),
 	sampleId: string()
 }), _void(), {
@@ -31626,6 +31679,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"faceGallery.auditIdentitySamples": {
+		capName: "face-gallery",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"faceGallery.createIdentity": {
 		capName: "face-gallery",
 		capScope: "system",

package/dist/ingress/tailscale-ingress.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-DUqXeckw.js");
+const require_dist = require("../dist-BdBOnfeo.js");
 let node_crypto = require("node:crypto");
 let node_child_process = require("node:child_process");
 //#region src/ingress/tailscale-cli.ts

package/dist/ingress/tailscale-ingress.addon.mjs

@@ -1,4 +1,4 @@
-import { a as EventCategory, i as BaseAddon, n as networkAccessCapability } from "../dist-C9fQsDBf.mjs";
+import { a as EventCategory, i as BaseAddon, n as networkAccessCapability } from "../dist-CRyT30U1.mjs";
 import { randomUUID } from "node:crypto";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-tailscale",
-  "version": "1.2.84",
+  "version": "1.2.85",
   "description": "Tailscale bundle for CamStack — joins the host to a tailnet (client) and exposes the hub via Serve/Funnel (ingress). Multi-entry npm package shipping 2 addons under a single bundle.",
   "keywords": [
     "camstack",