camstack 1.2.123 → 1.2.125

package/dist/{chunk-2S3TRFS3.js → chunk-JYGD4EQO.js}

@@ -33372,6 +33372,49 @@ var IdentitySampleInfoSchema = external_exports.object({
   deviceId: external_exports.number().int().optional(),
   base64: external_exports.string().optional()
 });
+var IdentitySampleAuditRowSchema = external_exports.object({
+  sampleId: external_exports.string(),
+  enrolledAt: external_exports.number().int(),
+  deviceId: external_exports.number().int().optional(),
+  source: external_exports.enum(["detected", "photo"]),
+  /** The enrolled crop's media key, so the panel can show the evidence. */
+  mediaKey: external_exports.string().optional(),
+  /**
+  * False = the sample is stamped with a DIFFERENT face model, and a cosine
+  * across feature spaces is a well-formed float with no meaning. Every number
+  * below then says nothing — it must read as "cannot say", never as an
+  * accusation and never as a clean bill: this list ends in a Remove button.
+  */
+  comparable: external_exports.boolean(),
+  /** Mean cosine against this person's other samples. Null when there are none
+  *  to compare with — never 0, which would read as "opposite". */
+  selfMean: external_exports.number().nullable(),
+  /** The other person this sample looks most like, when it looks like one.
+  *  This is the half that convicts: not looking like yourself can be a hard
+  *  angle; looking like someone the gallery can NAME is a mis-enrolment. */
+  bestForeign: external_exports.object({
+    identityId: external_exports.string(),
+    name: external_exports.string(),
+    score: external_exports.number()
+  }).optional(),
+  /** 0 = nothing to say. Higher = look at this one sooner. */
+  suspicion: external_exports.number()
+});
+var IdentitySampleAuditSchema = external_exports.object({
+  identityId: external_exports.string(),
+  name: external_exports.string(),
+  /** The cluster face model every comparison was made in. */
+  modelId: external_exports.string(),
+  totalSamples: external_exports.number().int(),
+  comparableSamples: external_exports.number().int(),
+  flagged: external_exports.number().int(),
+  /** The bar `flagged` counts against, so the panel states the RULE and not
+  *  only its current result. */
+  flagThreshold: external_exports.number(),
+  /** Worst first. A row with nothing to say still appears, at the bottom: the
+  *  operator asked to see the gallery, not only its accusations. */
+  rows: external_exports.array(IdentitySampleAuditRowSchema).readonly()
+});
 var FaceInfoSchema = external_exports.object({
   faceId: external_exports.string(),
   deviceId: external_exports.number().int(),
@@ -33499,6 +33542,19 @@ var faceGalleryCapability = {
       auth: "admin"
     }),
     listIdentitySamples: method(external_exports.object({ identityId: external_exports.string() }), external_exports.array(IdentitySampleInfoSchema).readonly()),
+    /**
+    * Re-analyse ONE person's enrolled samples against the whole gallery.
+    *
+    * A pure read — no write, no inference, just dot products over vectors the
+    * hub already holds (327 of them on this cluster). `admin` for the same
+    * reason `listIdentitySamples` is: the answer names every enrolled person
+    * and how well one person's samples match them, which is the gallery's
+    * shape and not a viewer-level fact.
+    *
+    * Removal deliberately stays `removeSample`: an analysis that could also
+    * delete would be one confirmation away from emptying a gallery.
+    */
+    auditIdentitySamples: method(external_exports.object({ identityId: external_exports.string().min(1) }), IdentitySampleAuditSchema, { auth: "admin" }),
     removeSample: method(external_exports.object({
       identityId: external_exports.string(),
       sampleId: external_exports.string()
@@ -41908,6 +41964,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "faceGallery.auditIdentitySamples": {
+    capName: "face-gallery",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "faceGallery.createIdentity": {
     capName: "face-gallery",
     capScope: "system",

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-2S3TRFS3.js";
+} from "./chunk-JYGD4EQO.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-NN5JUDVE.js");
+  await import("./launcher-KIFZDGA7.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-NN5JUDVE.js");
+  await import("./launcher-KIFZDGA7.js");
 }
 
 // src/commands/setup.ts
@@ -1130,7 +1130,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-4ZPVKRSY.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-45BLIQAV.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);

package/dist/{discover-4ZPVKRSY.js → discover-45BLIQAV.js}

@@ -5,7 +5,7 @@ import {
   filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-2S3TRFS3.js";
+} from "./chunk-JYGD4EQO.js";
 import "./chunk-LMMQX4CK.js";
 export {
   DEFAULT_HUB_HTTPS_PORT,

package/dist/{launcher-NN5JUDVE.js → launcher-KIFZDGA7.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-CEUwB91M.js
-var require_dist_CEUwB91M = __commonJS({
-  "../system/dist/dist-CEUwB91M.js"(exports) {
+// ../system/dist/dist-CNxDnJwz.js
+var require_dist_CNxDnJwz = __commonJS({
+  "../system/dist/dist-CNxDnJwz.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -43989,6 +43989,49 @@ var require_dist_CEUwB91M = __commonJS({
       deviceId: zod.z.number().int().optional(),
       base64: zod.z.string().optional()
     });
+    var IdentitySampleAuditRowSchema = zod.z.object({
+      sampleId: zod.z.string(),
+      enrolledAt: zod.z.number().int(),
+      deviceId: zod.z.number().int().optional(),
+      source: zod.z.enum(["detected", "photo"]),
+      /** The enrolled crop's media key, so the panel can show the evidence. */
+      mediaKey: zod.z.string().optional(),
+      /**
+      * False = the sample is stamped with a DIFFERENT face model, and a cosine
+      * across feature spaces is a well-formed float with no meaning. Every number
+      * below then says nothing — it must read as "cannot say", never as an
+      * accusation and never as a clean bill: this list ends in a Remove button.
+      */
+      comparable: zod.z.boolean(),
+      /** Mean cosine against this person's other samples. Null when there are none
+      *  to compare with — never 0, which would read as "opposite". */
+      selfMean: zod.z.number().nullable(),
+      /** The other person this sample looks most like, when it looks like one.
+      *  This is the half that convicts: not looking like yourself can be a hard
+      *  angle; looking like someone the gallery can NAME is a mis-enrolment. */
+      bestForeign: zod.z.object({
+        identityId: zod.z.string(),
+        name: zod.z.string(),
+        score: zod.z.number()
+      }).optional(),
+      /** 0 = nothing to say. Higher = look at this one sooner. */
+      suspicion: zod.z.number()
+    });
+    var IdentitySampleAuditSchema = zod.z.object({
+      identityId: zod.z.string(),
+      name: zod.z.string(),
+      /** The cluster face model every comparison was made in. */
+      modelId: zod.z.string(),
+      totalSamples: zod.z.number().int(),
+      comparableSamples: zod.z.number().int(),
+      flagged: zod.z.number().int(),
+      /** The bar `flagged` counts against, so the panel states the RULE and not
+      *  only its current result. */
+      flagThreshold: zod.z.number(),
+      /** Worst first. A row with nothing to say still appears, at the bottom: the
+      *  operator asked to see the gallery, not only its accusations. */
+      rows: zod.z.array(IdentitySampleAuditRowSchema).readonly()
+    });
     var FaceInfoSchema = zod.z.object({
       faceId: zod.z.string(),
       deviceId: zod.z.number().int(),
@@ -44116,6 +44159,19 @@ var require_dist_CEUwB91M = __commonJS({
           auth: "admin"
         }),
         listIdentitySamples: method(zod.z.object({ identityId: zod.z.string() }), zod.z.array(IdentitySampleInfoSchema).readonly()),
+        /**
+        * Re-analyse ONE person's enrolled samples against the whole gallery.
+        *
+        * A pure read — no write, no inference, just dot products over vectors the
+        * hub already holds (327 of them on this cluster). `admin` for the same
+        * reason `listIdentitySamples` is: the answer names every enrolled person
+        * and how well one person's samples match them, which is the gallery's
+        * shape and not a viewer-level fact.
+        *
+        * Removal deliberately stays `removeSample`: an analysis that could also
+        * delete would be one confirmation away from emptying a gallery.
+        */
+        auditIdentitySamples: method(zod.z.object({ identityId: zod.z.string().min(1) }), IdentitySampleAuditSchema, { auth: "admin" }),
         removeSample: method(zod.z.object({
           identityId: zod.z.string(),
           sampleId: zod.z.string()
@@ -53352,6 +53408,12 @@ var require_dist_CEUwB91M = __commonJS({
         addonId: null,
         access: "create"
       },
+      "faceGallery.auditIdentitySamples": {
+        capName: "face-gallery",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "faceGallery.createIdentity": {
         capName: "face-gallery",
         capScope: "system",
@@ -60981,7 +61043,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_CNxDnJwz();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -61800,7 +61862,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_CNxDnJwz();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -61894,7 +61956,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_CNxDnJwz();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -62791,11 +62853,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-DtPZcaQ_.js
-var require_retired_settings_keys_DtPZcaQ = __commonJS({
-  "../system/dist/retired-settings-keys-DtPZcaQ_.js"(exports) {
+// ../system/dist/retired-settings-keys-D9wnrXOC.js
+var require_retired_settings_keys_D9wnrXOC = __commonJS({
+  "../system/dist/retired-settings-keys-D9wnrXOC.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_CNxDnJwz();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -65030,8 +65092,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
-    var require_retired_settings_keys = require_retired_settings_keys_DtPZcaQ();
+    var require_dist10 = require_dist_CNxDnJwz();
+    var require_retired_settings_keys = require_retired_settings_keys_D9wnrXOC();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -70656,7 +70718,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_CNxDnJwz();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -70793,7 +70855,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_CNxDnJwz();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -70989,7 +71051,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_CNxDnJwz();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -78802,7 +78864,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_CNxDnJwz();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -79367,7 +79429,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_CNxDnJwz();
     var node_fs_promises = __require("fs/promises");
     var node_child_process = __require("child_process");
     var node_util = __require("util");
@@ -81951,7 +82013,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_CNxDnJwz();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -83067,8 +83129,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
-    var require_retired_settings_keys = require_retired_settings_keys_DtPZcaQ();
+    var require_dist10 = require_dist_CNxDnJwz();
+    var require_retired_settings_keys = require_retired_settings_keys_D9wnrXOC();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -85572,7 +85634,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_CNxDnJwz();
     var require_hub_cap_forward = require_hub_cap_forward_DmHNjbB0();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -88298,7 +88360,7 @@ var require_storage_orchestrator_addon = __commonJS({
             return Promise.all(rows.map(async (loc) => ({
               ...this.redacted(loc),
               ...this.occupancy.ownedFor(loc.id) !== void 0 ? { owned: this.occupancy.ownedFor(loc.id) } : {},
-              capacity: require_dist10.isLocationEnabled(loc) ? await this.localCapacityOf(loc) : null
+              capacity: require_dist10.mayReadLocation(loc) ? await this.localCapacityOf(loc) : null
             })));
           },
           listLocationDeclarations: async () => service.listDeclarations(),
@@ -89128,7 +89190,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_CNxDnJwz();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -107189,7 +107251,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_CNxDnJwz();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -131799,7 +131861,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_CNxDnJwz();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -234187,6 +234249,49 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       deviceId: zod.z.number().int().optional(),
       base64: zod.z.string().optional()
     });
+    var IdentitySampleAuditRowSchema = zod.z.object({
+      sampleId: zod.z.string(),
+      enrolledAt: zod.z.number().int(),
+      deviceId: zod.z.number().int().optional(),
+      source: zod.z.enum(["detected", "photo"]),
+      /** The enrolled crop's media key, so the panel can show the evidence. */
+      mediaKey: zod.z.string().optional(),
+      /**
+      * False = the sample is stamped with a DIFFERENT face model, and a cosine
+      * across feature spaces is a well-formed float with no meaning. Every number
+      * below then says nothing — it must read as "cannot say", never as an
+      * accusation and never as a clean bill: this list ends in a Remove button.
+      */
+      comparable: zod.z.boolean(),
+      /** Mean cosine against this person's other samples. Null when there are none
+      *  to compare with — never 0, which would read as "opposite". */
+      selfMean: zod.z.number().nullable(),
+      /** The other person this sample looks most like, when it looks like one.
+      *  This is the half that convicts: not looking like yourself can be a hard
+      *  angle; looking like someone the gallery can NAME is a mis-enrolment. */
+      bestForeign: zod.z.object({
+        identityId: zod.z.string(),
+        name: zod.z.string(),
+        score: zod.z.number()
+      }).optional(),
+      /** 0 = nothing to say. Higher = look at this one sooner. */
+      suspicion: zod.z.number()
+    });
+    var IdentitySampleAuditSchema = zod.z.object({
+      identityId: zod.z.string(),
+      name: zod.z.string(),
+      /** The cluster face model every comparison was made in. */
+      modelId: zod.z.string(),
+      totalSamples: zod.z.number().int(),
+      comparableSamples: zod.z.number().int(),
+      flagged: zod.z.number().int(),
+      /** The bar `flagged` counts against, so the panel states the RULE and not
+      *  only its current result. */
+      flagThreshold: zod.z.number(),
+      /** Worst first. A row with nothing to say still appears, at the bottom: the
+      *  operator asked to see the gallery, not only its accusations. */
+      rows: zod.z.array(IdentitySampleAuditRowSchema).readonly()
+    });
     var FaceInfoSchema = zod.z.object({
       faceId: zod.z.string(),
       deviceId: zod.z.number().int(),
@@ -234314,6 +234419,19 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           auth: "admin"
         }),
         listIdentitySamples: require_sleep.method(zod.z.object({ identityId: zod.z.string() }), zod.z.array(IdentitySampleInfoSchema).readonly()),
+        /**
+        * Re-analyse ONE person's enrolled samples against the whole gallery.
+        *
+        * A pure read — no write, no inference, just dot products over vectors the
+        * hub already holds (327 of them on this cluster). `admin` for the same
+        * reason `listIdentitySamples` is: the answer names every enrolled person
+        * and how well one person's samples match them, which is the gallery's
+        * shape and not a viewer-level fact.
+        *
+        * Removal deliberately stays `removeSample`: an analysis that could also
+        * delete would be one confirmation away from emptying a gallery.
+        */
+        auditIdentitySamples: require_sleep.method(zod.z.object({ identityId: zod.z.string().min(1) }), IdentitySampleAuditSchema, { auth: "admin" }),
         removeSample: require_sleep.method(zod.z.object({
           identityId: zod.z.string(),
           sampleId: zod.z.string()
@@ -247063,6 +247181,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "faceGallery.auditIdentitySamples": {
+        capName: "face-gallery",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "faceGallery.createIdentity": {
         capName: "face-gallery",
         capScope: "system",
@@ -254237,6 +254361,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           renameIdentity: (input) => dispatch("faceGallery", "renameIdentity", "mutation", input),
           deleteIdentity: (input) => dispatch("faceGallery", "deleteIdentity", "mutation", input),
           listIdentitySamples: (input) => dispatch("faceGallery", "listIdentitySamples", "query", input),
+          auditIdentitySamples: (input) => dispatch("faceGallery", "auditIdentitySamples", "query", input),
           removeSample: (input) => dispatch("faceGallery", "removeSample", "mutation", input),
           getFaceMedia: (input) => dispatch("faceGallery", "getFaceMedia", "query", input),
           assignFace: (input) => dispatch("faceGallery", "assignFace", "mutation", input),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.2.123",
+  "version": "1.2.125",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",