@camstack/addon-tailscale 1.2.85 → 1.2.87

package/dist/client/tailscale.addon.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_dist = require("../dist-BdBOnfeo.js");
+const require_dist = require("../dist-DcVWmpNd.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_fs = require("node:fs");

package/dist/client/tailscale.addon.mjs

@@ -1,4 +1,4 @@
-import { a as EventCategory, i as BaseAddon, n as networkAccessCapability, r as BOOT_RECOVERY_BACKOFF_MS, t as meshNetworkCapability } from "../dist-CRyT30U1.mjs";
+import { a as EventCategory, i as BaseAddon, n as networkAccessCapability, r as BOOT_RECOVERY_BACKOFF_MS, t as meshNetworkCapability } from "../dist-DwQzwZEk.mjs";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
 import * as fs from "node:fs";

package/dist/{dist-BdBOnfeo.js → dist-DcVWmpNd.js}

@@ -7644,6 +7644,35 @@ var CameraSwitchGroupSchema = object({
 	/** Unix ms when the group was composed server-side. */
 	fetchedAt: number()
 });
+/** One archived note — the operator's words plus enough context to find what
+*  they were looking at, after the track itself is gone. */
+var ArchivedDebugNoteSchema = object({
+	/** Archive row id. Derived from `(sourceTrackId, note)`, so re-archiving the
+	*  same sentence about the same track lands on the row already there. */
+	id: string(),
+	/** The operator's own words, verbatim. */
+	note: string(),
+	/** The camera. Required — every question here is asked per-camera. */
+	deviceId: number().int(),
+	/** The track the note was written on. PROVENANCE, not ownership: the track
+	*  is expected to be gone, and this row is not a reference to it. */
+	sourceTrackId: string(),
+	/** Epoch ms the note was moved here, i.e. when the operator reviewed it. */
+	archivedAt: number().int(),
+	/** The track's `firstSeen`, when the row still knew it; `null` otherwise. */
+	trackStartedAt: number().int().nullable(),
+	/** The track's detector class (`person`, `car`, …); `null` when unknown. */
+	trackClass: string().nullable(),
+	/** The track's display label at review time; `null` when it had none. */
+	trackLabel: string().nullable()
+});
+/** Query input for `listArchivedDebugNotes` — newest first, one camera or all. */
+var ArchivedDebugNoteQueryInputSchema = object({
+	/** Restrict to a single camera; omit for every row. */
+	deviceId: number().int().optional(),
+	/** Max rows returned, newest-first. */
+	limit: number().int().min(1).max(1e3).optional()
+});
 /**
 * Ops-log — the durable, append-only operations audit shared by the
 * recordings and events management surfaces.
@@ -15845,16 +15874,16 @@ DeviceType.AlarmPanel, method(object({
 	code: string().min(1).optional()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	code: string().min(1).optional()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * Shared geometry vocabulary for on-frame shape caps — privacy-mask,
@@ -19756,7 +19785,7 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 	deviceId: number(),
 	trackId: string(),
 	flags: TrackFlagsPatchSchema
-}), TrackFlagsSchema, { kind: "mutation" }), method(object({}), EventStoreFootprintSchema, {
+}), TrackFlagsSchema, { kind: "mutation" }), method(ArchivedDebugNoteQueryInputSchema, array(ArchivedDebugNoteSchema).readonly(), { kind: "query" }), method(object({}), EventStoreFootprintSchema, {
 	kind: "query",
 	auth: "admin"
 }), method(object({ deviceId: number().int().optional() }), EventMediaKindBreakdownSchema, {
@@ -23509,7 +23538,7 @@ DeviceType.Light, method(object({
 	percentage: number().min(0).max(100)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), object({
 	deviceId: number(),
 	percentage: number().min(0).max(100),
@@ -23517,7 +23546,7 @@ DeviceType.Light, method(object({
 });
 DeviceType.Button, method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * camera-credentials — device-scoped cap exposing the camera's network
@@ -23676,50 +23705,50 @@ DeviceType.Thermostat, DeviceType.Climate, method(object({
 	mode: HvacModeSchema
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	fanMode: string().min(1)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	preset: string().min(1)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	target: number()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	targetLow: number(),
 	targetHigh: number()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	targetHumidity: number().min(0).max(100)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	on: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	on: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * Color-light cap. Coexists with `switch` (on/off) and `brightness`
@@ -23794,7 +23823,7 @@ DeviceType.Light, method(object({
 	color: ColorInputSchema
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), object({
 	deviceId: number(),
 	mode: _enum([
@@ -23943,7 +23972,7 @@ DeviceType.Control, method(object({
 	control: ControlSetValueInputSchema
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 object({
 	/** Lifecycle state of the cover. */
@@ -23964,25 +23993,25 @@ object({
 });
 DeviceType.Cover, method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	position: number().min(0).max(100)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	tiltPosition: number().min(0).max(100)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * Vendor-neutral day/night (IR-cut) control — the per-camera config cap
@@ -24577,25 +24606,25 @@ DeviceType.Fan, method(object({
 	percentage: number().min(0).max(100)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	preset: string().min(1)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	direction: FanDirectionSchema
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	oscillating: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * Per-device feature/identity probe slice. Holds the runtime-resolved
@@ -24698,19 +24727,19 @@ DeviceType.Humidifier, method(object({
 	on: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	humidity: number().min(0).max(100)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	mode: string().min(1)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 object({
 	/** Current relative humidity, 0..100. */
@@ -25172,13 +25201,13 @@ object({
 });
 DeviceType.LawnMower, method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * local-network — hub-only singleton.
@@ -25438,16 +25467,16 @@ DeviceType.Lock, method(object({
 	code: string().min(1).optional()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	code: string().min(1).optional()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * Media-player cap. Models HA `media_player.*` (Sonos, Chromecast,
@@ -25521,55 +25550,55 @@ object({
 });
 DeviceType.MediaPlayer, method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	positionMs: number().int().nonnegative()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	volumeLevel: number().min(0).max(100)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	muted: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	shuffle: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	repeat: MediaPlayerRepeatSchema
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	source: string().min(1)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	/** Media identifier / URL. */
@@ -25579,7 +25608,7 @@ DeviceType.MediaPlayer, method(object({ deviceId: number().int().nonnegative() }
 	mediaType: string().min(1)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * mesh-network — collection cap for mesh-VPN providers.
@@ -26806,49 +26835,49 @@ DeviceType.PetFeeder, method(object({
 	hopper2: gramsPortion.optional()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	soundId: number().int().nonnegative()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	on: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	on: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	on: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	level: number().int().nonnegative()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 var VehicleSchema = object({
 	id: string(),
@@ -28635,7 +28664,7 @@ DeviceType.Switch, DeviceType.Siren, DeviceType.Light, method(object({
 	on: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), object({
 	deviceId: number(),
 	on: boolean(),
@@ -29492,25 +29521,25 @@ object({
 });
 DeviceType.Vacuum, method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	speed: string().min(1)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 object({
 	/** Lifecycle state of the valve. */
@@ -29529,19 +29558,19 @@ object({
 });
 DeviceType.Valve, method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	position: number().min(0).max(100)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 object({
 	detected: boolean(),
@@ -29575,19 +29604,19 @@ DeviceType.WaterHeater, method(object({
 	temp: number().finite()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	mode: string().min(1)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	on: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 object({
 	/** Verbatim HA condition state (`sunny`, `cloudy`, `rainy`, …). Null
@@ -33215,6 +33244,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.listArchivedDebugNotes": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.listEventKinds": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -37002,6 +37037,11 @@ Object.freeze({
 		form: "array",
 		optional: true
 	}],
+	"pipelineAnalytics.listArchivedDebugNotes": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
 	"pipelineAnalytics.listEventKinds": [{
 		name: "deviceId",
 		form: "single",

package/dist/{dist-CRyT30U1.mjs → dist-DwQzwZEk.mjs}

@@ -7644,6 +7644,35 @@ var CameraSwitchGroupSchema = object({
 	/** Unix ms when the group was composed server-side. */
 	fetchedAt: number()
 });
+/** One archived note — the operator's words plus enough context to find what
+*  they were looking at, after the track itself is gone. */
+var ArchivedDebugNoteSchema = object({
+	/** Archive row id. Derived from `(sourceTrackId, note)`, so re-archiving the
+	*  same sentence about the same track lands on the row already there. */
+	id: string(),
+	/** The operator's own words, verbatim. */
+	note: string(),
+	/** The camera. Required — every question here is asked per-camera. */
+	deviceId: number().int(),
+	/** The track the note was written on. PROVENANCE, not ownership: the track
+	*  is expected to be gone, and this row is not a reference to it. */
+	sourceTrackId: string(),
+	/** Epoch ms the note was moved here, i.e. when the operator reviewed it. */
+	archivedAt: number().int(),
+	/** The track's `firstSeen`, when the row still knew it; `null` otherwise. */
+	trackStartedAt: number().int().nullable(),
+	/** The track's detector class (`person`, `car`, …); `null` when unknown. */
+	trackClass: string().nullable(),
+	/** The track's display label at review time; `null` when it had none. */
+	trackLabel: string().nullable()
+});
+/** Query input for `listArchivedDebugNotes` — newest first, one camera or all. */
+var ArchivedDebugNoteQueryInputSchema = object({
+	/** Restrict to a single camera; omit for every row. */
+	deviceId: number().int().optional(),
+	/** Max rows returned, newest-first. */
+	limit: number().int().min(1).max(1e3).optional()
+});
 /**
 * Ops-log — the durable, append-only operations audit shared by the
 * recordings and events management surfaces.
@@ -15845,16 +15874,16 @@ DeviceType.AlarmPanel, method(object({
 	code: string().min(1).optional()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	code: string().min(1).optional()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * Shared geometry vocabulary for on-frame shape caps — privacy-mask,
@@ -19756,7 +19785,7 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 	deviceId: number(),
 	trackId: string(),
 	flags: TrackFlagsPatchSchema
-}), TrackFlagsSchema, { kind: "mutation" }), method(object({}), EventStoreFootprintSchema, {
+}), TrackFlagsSchema, { kind: "mutation" }), method(ArchivedDebugNoteQueryInputSchema, array(ArchivedDebugNoteSchema).readonly(), { kind: "query" }), method(object({}), EventStoreFootprintSchema, {
 	kind: "query",
 	auth: "admin"
 }), method(object({ deviceId: number().int().optional() }), EventMediaKindBreakdownSchema, {
@@ -23509,7 +23538,7 @@ DeviceType.Light, method(object({
 	percentage: number().min(0).max(100)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), object({
 	deviceId: number(),
 	percentage: number().min(0).max(100),
@@ -23517,7 +23546,7 @@ DeviceType.Light, method(object({
 });
 DeviceType.Button, method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * camera-credentials — device-scoped cap exposing the camera's network
@@ -23676,50 +23705,50 @@ DeviceType.Thermostat, DeviceType.Climate, method(object({
 	mode: HvacModeSchema
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	fanMode: string().min(1)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	preset: string().min(1)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	target: number()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	targetLow: number(),
 	targetHigh: number()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	targetHumidity: number().min(0).max(100)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	on: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	on: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * Color-light cap. Coexists with `switch` (on/off) and `brightness`
@@ -23794,7 +23823,7 @@ DeviceType.Light, method(object({
 	color: ColorInputSchema
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), object({
 	deviceId: number(),
 	mode: _enum([
@@ -23943,7 +23972,7 @@ DeviceType.Control, method(object({
 	control: ControlSetValueInputSchema
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 object({
 	/** Lifecycle state of the cover. */
@@ -23964,25 +23993,25 @@ object({
 });
 DeviceType.Cover, method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	position: number().min(0).max(100)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	tiltPosition: number().min(0).max(100)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * Vendor-neutral day/night (IR-cut) control — the per-camera config cap
@@ -24577,25 +24606,25 @@ DeviceType.Fan, method(object({
 	percentage: number().min(0).max(100)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	preset: string().min(1)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	direction: FanDirectionSchema
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	oscillating: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * Per-device feature/identity probe slice. Holds the runtime-resolved
@@ -24698,19 +24727,19 @@ DeviceType.Humidifier, method(object({
 	on: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	humidity: number().min(0).max(100)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	mode: string().min(1)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 object({
 	/** Current relative humidity, 0..100. */
@@ -25172,13 +25201,13 @@ object({
 });
 DeviceType.LawnMower, method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * local-network — hub-only singleton.
@@ -25438,16 +25467,16 @@ DeviceType.Lock, method(object({
 	code: string().min(1).optional()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	code: string().min(1).optional()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * Media-player cap. Models HA `media_player.*` (Sonos, Chromecast,
@@ -25521,55 +25550,55 @@ object({
 });
 DeviceType.MediaPlayer, method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	positionMs: number().int().nonnegative()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	volumeLevel: number().min(0).max(100)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	muted: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	shuffle: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	repeat: MediaPlayerRepeatSchema
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	source: string().min(1)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	/** Media identifier / URL. */
@@ -25579,7 +25608,7 @@ DeviceType.MediaPlayer, method(object({ deviceId: number().int().nonnegative() }
 	mediaType: string().min(1)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * mesh-network — collection cap for mesh-VPN providers.
@@ -26806,49 +26835,49 @@ DeviceType.PetFeeder, method(object({
 	hopper2: gramsPortion.optional()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	soundId: number().int().nonnegative()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	on: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	on: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	on: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	level: number().int().nonnegative()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 var VehicleSchema = object({
 	id: string(),
@@ -28635,7 +28664,7 @@ DeviceType.Switch, DeviceType.Siren, DeviceType.Light, method(object({
 	on: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), object({
 	deviceId: number(),
 	on: boolean(),
@@ -29492,25 +29521,25 @@ object({
 });
 DeviceType.Vacuum, method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	speed: string().min(1)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 object({
 	/** Lifecycle state of the valve. */
@@ -29529,19 +29558,19 @@ object({
 });
 DeviceType.Valve, method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	position: number().min(0).max(100)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 object({
 	detected: boolean(),
@@ -29575,19 +29604,19 @@ DeviceType.WaterHeater, method(object({
 	temp: number().finite()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	mode: string().min(1)
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number().int().nonnegative(),
 	on: boolean()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 object({
 	/** Verbatim HA condition state (`sunny`, `cloudy`, `rainy`, …). Null
@@ -33215,6 +33244,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.listArchivedDebugNotes": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.listEventKinds": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -37002,6 +37037,11 @@ Object.freeze({
 		form: "array",
 		optional: true
 	}],
+	"pipelineAnalytics.listArchivedDebugNotes": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
 	"pipelineAnalytics.listEventKinds": [{
 		name: "deviceId",
 		form: "single",

package/dist/ingress/tailscale-ingress.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-BdBOnfeo.js");
+const require_dist = require("../dist-DcVWmpNd.js");
 let node_crypto = require("node:crypto");
 let node_child_process = require("node:child_process");
 //#region src/ingress/tailscale-cli.ts

package/dist/ingress/tailscale-ingress.addon.mjs

@@ -1,4 +1,4 @@
-import { a as EventCategory, i as BaseAddon, n as networkAccessCapability } from "../dist-CRyT30U1.mjs";
+import { a as EventCategory, i as BaseAddon, n as networkAccessCapability } from "../dist-DwQzwZEk.mjs";
 import { randomUUID } from "node:crypto";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-tailscale",
-  "version": "1.2.85",
+  "version": "1.2.87",
   "description": "Tailscale bundle for CamStack — joins the host to a tailnet (client) and exposes the hub via Serve/Funnel (ingress). Multi-entry npm package shipping 2 addons under a single bundle.",
   "keywords": [
     "camstack",