@camstack/addon-terminal 0.1.89 → 0.1.91

package/dist/addon.js

@@ -16126,14 +16126,14 @@ var alarmPanelCapability = {
 			code: string().min(1).optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		disarm: method(object({
 			deviceId: number().int().nonnegative(),
 			code: string().min(1).optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/**
 		* Force the panel into the `triggered` state — used by HA
@@ -16144,7 +16144,7 @@ var alarmPanelCapability = {
 		*/
 		trigger: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -24259,7 +24259,7 @@ var brightnessCapability = {
 		percentage: number().min(0).max(100)
 	}), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) },
 	events: { 
 	/**
@@ -24292,7 +24292,7 @@ onBrightnessChanged: { data: object({
 };
 DeviceType.Button, method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * camera-credentials — device-scoped cap exposing the camera's network
@@ -24484,28 +24484,28 @@ var climateControlCapability = {
 			mode: HvacModeSchema
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setFanMode: method(object({
 			deviceId: number().int().nonnegative(),
 			fanMode: string().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setPreset: method(object({
 			deviceId: number().int().nonnegative(),
 			preset: string().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTarget: method(object({
 			deviceId: number().int().nonnegative(),
 			target: number()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTargetRange: method(object({
 			deviceId: number().int().nonnegative(),
@@ -24513,28 +24513,28 @@ var climateControlCapability = {
 			targetHigh: number()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTargetHumidity: method(object({
 			deviceId: number().int().nonnegative(),
 			targetHumidity: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setSwingVertical: method(object({
 			deviceId: number().int().nonnegative(),
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setSwingHorizontal: method(object({
 			deviceId: number().int().nonnegative(),
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -24634,7 +24634,7 @@ var colorCapability = {
 		color: ColorInputSchema
 	}), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) },
 	events: { 
 	/**
@@ -24963,7 +24963,7 @@ var controlCapability = {
 		control: ControlSetValueInputSchema
 	}), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) },
 	status: {
 		schema: ControlStatusSchema,
@@ -25009,29 +25009,29 @@ var coverCapability = {
 	methods: {
 		open: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		close: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		stop: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setPosition: method(object({
 			deviceId: number().int().nonnegative(),
 			position: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTiltPosition: method(object({
 			deviceId: number().int().nonnegative(),
 			tiltPosition: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -25417,6 +25417,59 @@ var IdentitySampleInfoSchema = object({
 	deviceId: number().int().optional(),
 	base64: string().optional()
 });
+/**
+* One enrolled sample, judged against the gallery it lives in.
+*
+* The gallery is the one input to recognition nobody re-reads: a sample
+* enrolled from the wrong face keeps voting forever, and because the matches it
+* pulls then look confident, nobody goes back. The 2026-09-08 audit found
+* exactly one such pair on this cluster — a sample scoring 0.61 against three
+* samples of ANOTHER person, enrolled from the same camera in the same minute,
+* where every other cross-identity pair sits under 0.50.
+*/
+var IdentitySampleAuditRowSchema = object({
+	sampleId: string(),
+	enrolledAt: number().int(),
+	deviceId: number().int().optional(),
+	source: _enum(["detected", "photo"]),
+	/** The enrolled crop's media key, so the panel can show the evidence. */
+	mediaKey: string().optional(),
+	/**
+	* False = the sample is stamped with a DIFFERENT face model, and a cosine
+	* across feature spaces is a well-formed float with no meaning. Every number
+	* below then says nothing — it must read as "cannot say", never as an
+	* accusation and never as a clean bill: this list ends in a Remove button.
+	*/
+	comparable: boolean(),
+	/** Mean cosine against this person's other samples. Null when there are none
+	*  to compare with — never 0, which would read as "opposite". */
+	selfMean: number().nullable(),
+	/** The other person this sample looks most like, when it looks like one.
+	*  This is the half that convicts: not looking like yourself can be a hard
+	*  angle; looking like someone the gallery can NAME is a mis-enrolment. */
+	bestForeign: object({
+		identityId: string(),
+		name: string(),
+		score: number()
+	}).optional(),
+	/** 0 = nothing to say. Higher = look at this one sooner. */
+	suspicion: number()
+});
+var IdentitySampleAuditSchema = object({
+	identityId: string(),
+	name: string(),
+	/** The cluster face model every comparison was made in. */
+	modelId: string(),
+	totalSamples: number().int(),
+	comparableSamples: number().int(),
+	flagged: number().int(),
+	/** The bar `flagged` counts against, so the panel states the RULE and not
+	*  only its current result. */
+	flagThreshold: number(),
+	/** Worst first. A row with nothing to say still appears, at the bottom: the
+	*  operator asked to see the gallery, not only its accusations. */
+	rows: array(IdentitySampleAuditRowSchema).readonly()
+});
 var FaceInfoSchema = object({
 	faceId: string(),
 	deviceId: number().int(),
@@ -25568,7 +25621,7 @@ includeCrops: boolean().optional() }).optional(), array(IdentitySchema).readonly
 }), method(object({ id: string() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ identityId: string() }), array(IdentitySampleInfoSchema).readonly()), method(object({
+}), method(object({ identityId: string() }), array(IdentitySampleInfoSchema).readonly()), method(object({ identityId: string().min(1) }), IdentitySampleAuditSchema, { auth: "admin" }), method(object({
 	identityId: string(),
 	sampleId: string()
 }), _void(), {
@@ -25761,28 +25814,28 @@ var fanControlCapability = {
 			percentage: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setPreset: method(object({
 			deviceId: number().int().nonnegative(),
 			preset: string().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setDirection: method(object({
 			deviceId: number().int().nonnegative(),
 			direction: FanDirectionSchema
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setOscillating: method(object({
 			deviceId: number().int().nonnegative(),
 			oscillating: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -26004,21 +26057,21 @@ var humidifierCapability = {
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTargetHumidity: method(object({
 			deviceId: number().int().nonnegative(),
 			humidity: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setMode: method(object({
 			deviceId: number().int().nonnegative(),
 			mode: string().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -26719,15 +26772,15 @@ var lawnMowerControlCapability = {
 	methods: {
 		startMowing: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		pause: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		dock: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -27012,18 +27065,18 @@ var lockControlCapability = {
 			code: string().min(1).optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		unlock: method(object({
 			deviceId: number().int().nonnegative(),
 			code: string().min(1).optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		open: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -27126,65 +27179,65 @@ var mediaPlayerCapability = {
 	methods: {
 		play: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		pause: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		stop: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		next: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		previous: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		seek: method(object({
 			deviceId: number().int().nonnegative(),
 			positionMs: number().int().nonnegative()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setVolume: method(object({
 			deviceId: number().int().nonnegative(),
 			volumeLevel: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setMute: method(object({
 			deviceId: number().int().nonnegative(),
 			muted: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setShuffle: method(object({
 			deviceId: number().int().nonnegative(),
 			shuffle: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setRepeat: method(object({
 			deviceId: number().int().nonnegative(),
 			repeat: MediaPlayerRepeatSchema
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		selectSource: method(object({
 			deviceId: number().int().nonnegative(),
 			source: string().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		playMedia: method(object({
 			deviceId: number().int().nonnegative(),
@@ -27195,7 +27248,7 @@ var mediaPlayerCapability = {
 			mediaType: string().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -28788,27 +28841,27 @@ var petFeederCapability = {
 			hopper2: gramsPortion.optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Cancel an in-progress manual feed. */
 		cancelFeed: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Reset the desiccant "days remaining" counter after replacing it. */
 		resetDesiccant: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Mark a hopper as refilled (D4H/D4S/D4SH). */
 		markFoodReplenished: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Call the pet with the recorded prompt (D3). */
 		callPet: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Play a stored sound by id (D3 / D4H / D4SH). */
 		playSound: method(object({
@@ -28816,7 +28869,7 @@ var petFeederCapability = {
 			soundId: number().int().nonnegative()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Toggle the child-lock (manual-lock) setting. */
 		setChildLock: method(object({
@@ -28824,7 +28877,7 @@ var petFeederCapability = {
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Toggle the front indicator light. */
 		setIndicatorLight: method(object({
@@ -28832,7 +28885,7 @@ var petFeederCapability = {
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Toggle the dispense chime. */
 		setFeedSound: method(object({
@@ -28840,7 +28893,7 @@ var petFeederCapability = {
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Set the speaker / prompt volume level. */
 		setVolume: method(object({
@@ -28848,7 +28901,7 @@ var petFeederCapability = {
 			level: number().int().nonnegative()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -31144,7 +31197,7 @@ var switchCapability = {
 		on: boolean()
 	}), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) },
 	events: { onStateChanged: { data: object({
 		deviceId: number(),
@@ -32132,30 +32185,30 @@ var vacuumControlCapability = {
 	methods: {
 		start: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		pause: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		stop: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		returnToBase: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		locate: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setFanSpeed: method(object({
 			deviceId: number().int().nonnegative(),
 			speed: string().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -32199,22 +32252,22 @@ var valveCapability = {
 	methods: {
 		open: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		close: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		stop: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setPosition: method(object({
 			deviceId: number().int().nonnegative(),
 			position: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -32313,21 +32366,21 @@ var waterHeaterCapability = {
 			temp: number().finite()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setOperationMode: method(object({
 			deviceId: number().int().nonnegative(),
 			mode: string().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setAway: method(object({
 			deviceId: number().int().nonnegative(),
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -35643,6 +35696,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"faceGallery.auditIdentitySamples": {
+		capName: "face-gallery",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"faceGallery.createIdentity": {
 		capName: "face-gallery",
 		capScope: "system",

package/dist/addon.mjs

@@ -16103,14 +16103,14 @@ var alarmPanelCapability = {
 			code: string().min(1).optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		disarm: method(object({
 			deviceId: number().int().nonnegative(),
 			code: string().min(1).optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/**
 		* Force the panel into the `triggered` state — used by HA
@@ -16121,7 +16121,7 @@ var alarmPanelCapability = {
 		*/
 		trigger: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -24236,7 +24236,7 @@ var brightnessCapability = {
 		percentage: number().min(0).max(100)
 	}), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) },
 	events: { 
 	/**
@@ -24269,7 +24269,7 @@ onBrightnessChanged: { data: object({
 };
 DeviceType.Button, method(object({ deviceId: number().int().nonnegative() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 });
 /**
 * camera-credentials — device-scoped cap exposing the camera's network
@@ -24461,28 +24461,28 @@ var climateControlCapability = {
 			mode: HvacModeSchema
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setFanMode: method(object({
 			deviceId: number().int().nonnegative(),
 			fanMode: string().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setPreset: method(object({
 			deviceId: number().int().nonnegative(),
 			preset: string().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTarget: method(object({
 			deviceId: number().int().nonnegative(),
 			target: number()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTargetRange: method(object({
 			deviceId: number().int().nonnegative(),
@@ -24490,28 +24490,28 @@ var climateControlCapability = {
 			targetHigh: number()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTargetHumidity: method(object({
 			deviceId: number().int().nonnegative(),
 			targetHumidity: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setSwingVertical: method(object({
 			deviceId: number().int().nonnegative(),
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setSwingHorizontal: method(object({
 			deviceId: number().int().nonnegative(),
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -24611,7 +24611,7 @@ var colorCapability = {
 		color: ColorInputSchema
 	}), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) },
 	events: { 
 	/**
@@ -24940,7 +24940,7 @@ var controlCapability = {
 		control: ControlSetValueInputSchema
 	}), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) },
 	status: {
 		schema: ControlStatusSchema,
@@ -24986,29 +24986,29 @@ var coverCapability = {
 	methods: {
 		open: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		close: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		stop: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setPosition: method(object({
 			deviceId: number().int().nonnegative(),
 			position: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTiltPosition: method(object({
 			deviceId: number().int().nonnegative(),
 			tiltPosition: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -25394,6 +25394,59 @@ var IdentitySampleInfoSchema = object({
 	deviceId: number().int().optional(),
 	base64: string().optional()
 });
+/**
+* One enrolled sample, judged against the gallery it lives in.
+*
+* The gallery is the one input to recognition nobody re-reads: a sample
+* enrolled from the wrong face keeps voting forever, and because the matches it
+* pulls then look confident, nobody goes back. The 2026-09-08 audit found
+* exactly one such pair on this cluster — a sample scoring 0.61 against three
+* samples of ANOTHER person, enrolled from the same camera in the same minute,
+* where every other cross-identity pair sits under 0.50.
+*/
+var IdentitySampleAuditRowSchema = object({
+	sampleId: string(),
+	enrolledAt: number().int(),
+	deviceId: number().int().optional(),
+	source: _enum(["detected", "photo"]),
+	/** The enrolled crop's media key, so the panel can show the evidence. */
+	mediaKey: string().optional(),
+	/**
+	* False = the sample is stamped with a DIFFERENT face model, and a cosine
+	* across feature spaces is a well-formed float with no meaning. Every number
+	* below then says nothing — it must read as "cannot say", never as an
+	* accusation and never as a clean bill: this list ends in a Remove button.
+	*/
+	comparable: boolean(),
+	/** Mean cosine against this person's other samples. Null when there are none
+	*  to compare with — never 0, which would read as "opposite". */
+	selfMean: number().nullable(),
+	/** The other person this sample looks most like, when it looks like one.
+	*  This is the half that convicts: not looking like yourself can be a hard
+	*  angle; looking like someone the gallery can NAME is a mis-enrolment. */
+	bestForeign: object({
+		identityId: string(),
+		name: string(),
+		score: number()
+	}).optional(),
+	/** 0 = nothing to say. Higher = look at this one sooner. */
+	suspicion: number()
+});
+var IdentitySampleAuditSchema = object({
+	identityId: string(),
+	name: string(),
+	/** The cluster face model every comparison was made in. */
+	modelId: string(),
+	totalSamples: number().int(),
+	comparableSamples: number().int(),
+	flagged: number().int(),
+	/** The bar `flagged` counts against, so the panel states the RULE and not
+	*  only its current result. */
+	flagThreshold: number(),
+	/** Worst first. A row with nothing to say still appears, at the bottom: the
+	*  operator asked to see the gallery, not only its accusations. */
+	rows: array(IdentitySampleAuditRowSchema).readonly()
+});
 var FaceInfoSchema = object({
 	faceId: string(),
 	deviceId: number().int(),
@@ -25545,7 +25598,7 @@ includeCrops: boolean().optional() }).optional(), array(IdentitySchema).readonly
 }), method(object({ id: string() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ identityId: string() }), array(IdentitySampleInfoSchema).readonly()), method(object({
+}), method(object({ identityId: string() }), array(IdentitySampleInfoSchema).readonly()), method(object({ identityId: string().min(1) }), IdentitySampleAuditSchema, { auth: "admin" }), method(object({
 	identityId: string(),
 	sampleId: string()
 }), _void(), {
@@ -25738,28 +25791,28 @@ var fanControlCapability = {
 			percentage: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setPreset: method(object({
 			deviceId: number().int().nonnegative(),
 			preset: string().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setDirection: method(object({
 			deviceId: number().int().nonnegative(),
 			direction: FanDirectionSchema
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setOscillating: method(object({
 			deviceId: number().int().nonnegative(),
 			oscillating: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -25981,21 +26034,21 @@ var humidifierCapability = {
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setTargetHumidity: method(object({
 			deviceId: number().int().nonnegative(),
 			humidity: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setMode: method(object({
 			deviceId: number().int().nonnegative(),
 			mode: string().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -26696,15 +26749,15 @@ var lawnMowerControlCapability = {
 	methods: {
 		startMowing: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		pause: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		dock: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -26989,18 +27042,18 @@ var lockControlCapability = {
 			code: string().min(1).optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		unlock: method(object({
 			deviceId: number().int().nonnegative(),
 			code: string().min(1).optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		open: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -27103,65 +27156,65 @@ var mediaPlayerCapability = {
 	methods: {
 		play: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		pause: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		stop: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		next: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		previous: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		seek: method(object({
 			deviceId: number().int().nonnegative(),
 			positionMs: number().int().nonnegative()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setVolume: method(object({
 			deviceId: number().int().nonnegative(),
 			volumeLevel: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setMute: method(object({
 			deviceId: number().int().nonnegative(),
 			muted: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setShuffle: method(object({
 			deviceId: number().int().nonnegative(),
 			shuffle: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setRepeat: method(object({
 			deviceId: number().int().nonnegative(),
 			repeat: MediaPlayerRepeatSchema
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		selectSource: method(object({
 			deviceId: number().int().nonnegative(),
 			source: string().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		playMedia: method(object({
 			deviceId: number().int().nonnegative(),
@@ -27172,7 +27225,7 @@ var mediaPlayerCapability = {
 			mediaType: string().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -28765,27 +28818,27 @@ var petFeederCapability = {
 			hopper2: gramsPortion.optional()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Cancel an in-progress manual feed. */
 		cancelFeed: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Reset the desiccant "days remaining" counter after replacing it. */
 		resetDesiccant: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Mark a hopper as refilled (D4H/D4S/D4SH). */
 		markFoodReplenished: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Call the pet with the recorded prompt (D3). */
 		callPet: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Play a stored sound by id (D3 / D4H / D4SH). */
 		playSound: method(object({
@@ -28793,7 +28846,7 @@ var petFeederCapability = {
 			soundId: number().int().nonnegative()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Toggle the child-lock (manual-lock) setting. */
 		setChildLock: method(object({
@@ -28801,7 +28854,7 @@ var petFeederCapability = {
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Toggle the front indicator light. */
 		setIndicatorLight: method(object({
@@ -28809,7 +28862,7 @@ var petFeederCapability = {
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Toggle the dispense chime. */
 		setFeedSound: method(object({
@@ -28817,7 +28870,7 @@ var petFeederCapability = {
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		/** Set the speaker / prompt volume level. */
 		setVolume: method(object({
@@ -28825,7 +28878,7 @@ var petFeederCapability = {
 			level: number().int().nonnegative()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -31121,7 +31174,7 @@ var switchCapability = {
 		on: boolean()
 	}), _void(), {
 		kind: "mutation",
-		auth: "admin"
+		auth: "protected"
 	}) },
 	events: { onStateChanged: { data: object({
 		deviceId: number(),
@@ -32109,30 +32162,30 @@ var vacuumControlCapability = {
 	methods: {
 		start: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		pause: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		stop: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		returnToBase: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		locate: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setFanSpeed: method(object({
 			deviceId: number().int().nonnegative(),
 			speed: string().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -32176,22 +32229,22 @@ var valveCapability = {
 	methods: {
 		open: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		close: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		stop: method(object({ deviceId: number().int().nonnegative() }), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setPosition: method(object({
 			deviceId: number().int().nonnegative(),
 			position: number().min(0).max(100)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -32290,21 +32343,21 @@ var waterHeaterCapability = {
 			temp: number().finite()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setOperationMode: method(object({
 			deviceId: number().int().nonnegative(),
 			mode: string().min(1)
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		}),
 		setAway: method(object({
 			deviceId: number().int().nonnegative(),
 			on: boolean()
 		}), _void(), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "protected"
 		})
 	},
 	status: {
@@ -35620,6 +35673,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"faceGallery.auditIdentitySamples": {
+		capName: "face-gallery",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"faceGallery.createIdentity": {
 		capName: "face-gallery",
 		capScope: "system",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-terminal",
-  "version": "0.1.89",
+  "version": "0.1.91",
   "description": "Interactive terminal sessions (pty + xterm) as a CamStack addon",
   "keywords": [
     "camstack",