camstack 1.2.124 → 1.2.126

package/dist/{launcher-VFR24CPY.js → launcher-6KZS6MDM.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-CEUwB91M.js
-var require_dist_CEUwB91M = __commonJS({
-  "../system/dist/dist-CEUwB91M.js"(exports) {
+// ../system/dist/dist-C_WvDOQ9.js
+var require_dist_C_WvDOQ9 = __commonJS({
+  "../system/dist/dist-C_WvDOQ9.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -34742,14 +34742,14 @@ var require_dist_CEUwB91M = __commonJS({
           code: zod.z.string().min(1).optional()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         disarm: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           code: zod.z.string().min(1).optional()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /**
         * Force the panel into the `triggered` state — used by HA
@@ -34760,7 +34760,7 @@ var require_dist_CEUwB91M = __commonJS({
         */
         trigger: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -43020,7 +43020,7 @@ var require_dist_CEUwB91M = __commonJS({
         percentage: zod.z.number().min(0).max(100)
       }), zod.z.void(), {
         kind: "mutation",
-        auth: "admin"
+        auth: "protected"
       }) },
       events: {
         /**
@@ -43060,7 +43060,7 @@ var require_dist_CEUwB91M = __commonJS({
       deviceTypes: [DeviceType.Button],
       methods: { press: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
         kind: "mutation",
-        auth: "admin"
+        auth: "protected"
       }) }
     };
     var CameraCredentialsSchema = zod.z.object({
@@ -43207,28 +43207,28 @@ var require_dist_CEUwB91M = __commonJS({
           mode: HvacModeSchema
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setFanMode: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           fanMode: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setPreset: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           preset: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setTarget: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           target: zod.z.number()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setTargetRange: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
@@ -43236,28 +43236,28 @@ var require_dist_CEUwB91M = __commonJS({
           targetHigh: zod.z.number()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setTargetHumidity: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           targetHumidity: zod.z.number().min(0).max(100)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setSwingVertical: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setSwingHorizontal: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -43333,7 +43333,7 @@ var require_dist_CEUwB91M = __commonJS({
         color: ColorInputSchema
       }), zod.z.void(), {
         kind: "mutation",
-        auth: "admin"
+        auth: "protected"
       }) },
       events: {
         /**
@@ -43613,7 +43613,7 @@ var require_dist_CEUwB91M = __commonJS({
         control: ControlSetValueInputSchema
       }), zod.z.void(), {
         kind: "mutation",
-        auth: "admin"
+        auth: "protected"
       }) },
       status: {
         schema: ControlStatusSchema,
@@ -43660,29 +43660,29 @@ var require_dist_CEUwB91M = __commonJS({
       methods: {
         open: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         close: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         stop: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setPosition: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           position: zod.z.number().min(0).max(100)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setTiltPosition: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           tiltPosition: zod.z.number().min(0).max(100)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -43989,6 +43989,49 @@ var require_dist_CEUwB91M = __commonJS({
       deviceId: zod.z.number().int().optional(),
       base64: zod.z.string().optional()
     });
+    var IdentitySampleAuditRowSchema = zod.z.object({
+      sampleId: zod.z.string(),
+      enrolledAt: zod.z.number().int(),
+      deviceId: zod.z.number().int().optional(),
+      source: zod.z.enum(["detected", "photo"]),
+      /** The enrolled crop's media key, so the panel can show the evidence. */
+      mediaKey: zod.z.string().optional(),
+      /**
+      * False = the sample is stamped with a DIFFERENT face model, and a cosine
+      * across feature spaces is a well-formed float with no meaning. Every number
+      * below then says nothing — it must read as "cannot say", never as an
+      * accusation and never as a clean bill: this list ends in a Remove button.
+      */
+      comparable: zod.z.boolean(),
+      /** Mean cosine against this person's other samples. Null when there are none
+      *  to compare with — never 0, which would read as "opposite". */
+      selfMean: zod.z.number().nullable(),
+      /** The other person this sample looks most like, when it looks like one.
+      *  This is the half that convicts: not looking like yourself can be a hard
+      *  angle; looking like someone the gallery can NAME is a mis-enrolment. */
+      bestForeign: zod.z.object({
+        identityId: zod.z.string(),
+        name: zod.z.string(),
+        score: zod.z.number()
+      }).optional(),
+      /** 0 = nothing to say. Higher = look at this one sooner. */
+      suspicion: zod.z.number()
+    });
+    var IdentitySampleAuditSchema = zod.z.object({
+      identityId: zod.z.string(),
+      name: zod.z.string(),
+      /** The cluster face model every comparison was made in. */
+      modelId: zod.z.string(),
+      totalSamples: zod.z.number().int(),
+      comparableSamples: zod.z.number().int(),
+      flagged: zod.z.number().int(),
+      /** The bar `flagged` counts against, so the panel states the RULE and not
+      *  only its current result. */
+      flagThreshold: zod.z.number(),
+      /** Worst first. A row with nothing to say still appears, at the bottom: the
+      *  operator asked to see the gallery, not only its accusations. */
+      rows: zod.z.array(IdentitySampleAuditRowSchema).readonly()
+    });
     var FaceInfoSchema = zod.z.object({
       faceId: zod.z.string(),
       deviceId: zod.z.number().int(),
@@ -44116,6 +44159,19 @@ var require_dist_CEUwB91M = __commonJS({
           auth: "admin"
         }),
         listIdentitySamples: method(zod.z.object({ identityId: zod.z.string() }), zod.z.array(IdentitySampleInfoSchema).readonly()),
+        /**
+        * Re-analyse ONE person's enrolled samples against the whole gallery.
+        *
+        * A pure read — no write, no inference, just dot products over vectors the
+        * hub already holds (327 of them on this cluster). `admin` for the same
+        * reason `listIdentitySamples` is: the answer names every enrolled person
+        * and how well one person's samples match them, which is the gallery's
+        * shape and not a viewer-level fact.
+        *
+        * Removal deliberately stays `removeSample`: an analysis that could also
+        * delete would be one confirmation away from emptying a gallery.
+        */
+        auditIdentitySamples: method(zod.z.object({ identityId: zod.z.string().min(1) }), IdentitySampleAuditSchema, { auth: "admin" }),
         removeSample: method(zod.z.object({
           identityId: zod.z.string(),
           sampleId: zod.z.string()
@@ -44307,28 +44363,28 @@ var require_dist_CEUwB91M = __commonJS({
           percentage: zod.z.number().min(0).max(100)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setPreset: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           preset: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setDirection: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           direction: FanDirectionSchema
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setOscillating: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           oscillating: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -44499,21 +44555,21 @@ var require_dist_CEUwB91M = __commonJS({
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setTargetHumidity: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           humidity: zod.z.number().min(0).max(100)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setMode: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           mode: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -45084,15 +45140,15 @@ var require_dist_CEUwB91M = __commonJS({
       methods: {
         startMowing: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         pause: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         dock: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -45450,18 +45506,18 @@ var require_dist_CEUwB91M = __commonJS({
           code: zod.z.string().min(1).optional()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         unlock: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           code: zod.z.string().min(1).optional()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         open: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -45552,65 +45608,65 @@ var require_dist_CEUwB91M = __commonJS({
       methods: {
         play: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         pause: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         stop: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         next: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         previous: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         seek: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           positionMs: zod.z.number().int().nonnegative()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setVolume: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           volumeLevel: zod.z.number().min(0).max(100)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setMute: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           muted: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setShuffle: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           shuffle: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setRepeat: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           repeat: MediaPlayerRepeatSchema
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         selectSource: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           source: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         playMedia: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
@@ -45621,7 +45677,7 @@ var require_dist_CEUwB91M = __commonJS({
           mediaType: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -47070,27 +47126,27 @@ var require_dist_CEUwB91M = __commonJS({
           hopper2: gramsPortion.optional()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Cancel an in-progress manual feed. */
         cancelFeed: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Reset the desiccant "days remaining" counter after replacing it. */
         resetDesiccant: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Mark a hopper as refilled (D4H/D4S/D4SH). */
         markFoodReplenished: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Call the pet with the recorded prompt (D3). */
         callPet: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Play a stored sound by id (D3 / D4H / D4SH). */
         playSound: method(zod.z.object({
@@ -47098,7 +47154,7 @@ var require_dist_CEUwB91M = __commonJS({
           soundId: zod.z.number().int().nonnegative()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Toggle the child-lock (manual-lock) setting. */
         setChildLock: method(zod.z.object({
@@ -47106,7 +47162,7 @@ var require_dist_CEUwB91M = __commonJS({
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Toggle the front indicator light. */
         setIndicatorLight: method(zod.z.object({
@@ -47114,7 +47170,7 @@ var require_dist_CEUwB91M = __commonJS({
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Toggle the dispense chime. */
         setFeedSound: method(zod.z.object({
@@ -47122,7 +47178,7 @@ var require_dist_CEUwB91M = __commonJS({
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Set the speaker / prompt volume level. */
         setVolume: method(zod.z.object({
@@ -47130,7 +47186,7 @@ var require_dist_CEUwB91M = __commonJS({
           level: zod.z.number().int().nonnegative()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -49492,7 +49548,7 @@ var require_dist_CEUwB91M = __commonJS({
         on: zod.z.boolean()
       }), zod.z.void(), {
         kind: "mutation",
-        auth: "admin"
+        auth: "protected"
       }) },
       events: { onStateChanged: { data: zod.z.object({
         deviceId: zod.z.number(),
@@ -50358,30 +50414,30 @@ var require_dist_CEUwB91M = __commonJS({
       methods: {
         start: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         pause: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         stop: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         returnToBase: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         locate: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setFanSpeed: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           speed: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -50426,22 +50482,22 @@ var require_dist_CEUwB91M = __commonJS({
       methods: {
         open: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         close: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         stop: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setPosition: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           position: zod.z.number().min(0).max(100)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -50522,21 +50578,21 @@ var require_dist_CEUwB91M = __commonJS({
           temp: zod.z.number().finite()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setOperationMode: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           mode: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setAway: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -53352,6 +53408,12 @@ var require_dist_CEUwB91M = __commonJS({
         addonId: null,
         access: "create"
       },
+      "faceGallery.auditIdentitySamples": {
+        capName: "face-gallery",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "faceGallery.createIdentity": {
         capName: "face-gallery",
         capScope: "system",
@@ -60981,7 +61043,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_C_WvDOQ9();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -61800,7 +61862,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_C_WvDOQ9();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -61894,7 +61956,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_C_WvDOQ9();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -62791,11 +62853,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-DtPZcaQ_.js
-var require_retired_settings_keys_DtPZcaQ = __commonJS({
-  "../system/dist/retired-settings-keys-DtPZcaQ_.js"(exports) {
+// ../system/dist/retired-settings-keys-BpasSgff.js
+var require_retired_settings_keys_BpasSgff = __commonJS({
+  "../system/dist/retired-settings-keys-BpasSgff.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_C_WvDOQ9();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -65030,8 +65092,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
-    var require_retired_settings_keys = require_retired_settings_keys_DtPZcaQ();
+    var require_dist10 = require_dist_C_WvDOQ9();
+    var require_retired_settings_keys = require_retired_settings_keys_BpasSgff();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -70656,7 +70718,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_C_WvDOQ9();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -70793,7 +70855,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_C_WvDOQ9();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -70989,7 +71051,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_C_WvDOQ9();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -78802,7 +78864,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_C_WvDOQ9();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -79367,7 +79429,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_C_WvDOQ9();
     var node_fs_promises = __require("fs/promises");
     var node_child_process = __require("child_process");
     var node_util = __require("util");
@@ -81951,7 +82013,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_C_WvDOQ9();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -83067,8 +83129,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
-    var require_retired_settings_keys = require_retired_settings_keys_DtPZcaQ();
+    var require_dist10 = require_dist_C_WvDOQ9();
+    var require_retired_settings_keys = require_retired_settings_keys_BpasSgff();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -85572,7 +85634,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_C_WvDOQ9();
     var require_hub_cap_forward = require_hub_cap_forward_DmHNjbB0();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -86548,6 +86610,41 @@ var require_storage_orchestrator_addon = __commonJS({
         }
       };
     }
+    async function collectFiles(io, prefix) {
+      const entries = await io.list(prefix);
+      const files = [];
+      for (const entry of entries) {
+        if ((await io.list(entry)).length > 0) {
+          files.push(...await collectFiles(io, entry));
+          continue;
+        }
+        files.push(entry);
+      }
+      return files;
+    }
+    async function moveLocationTree(io) {
+      const candidates = await collectFiles(io);
+      const copied = [];
+      let bytes = 0;
+      for (const relativePath of candidates) {
+        let data;
+        try {
+          data = await io.read(relativePath);
+        } catch {
+          continue;
+        }
+        await io.write(relativePath, data);
+        const landed = await io.readBack(relativePath);
+        if (landed.length !== data.length) throw new Error(`location repoint: size mismatch after copying "${relativePath}" (${String(landed.length)} != ${String(data.length)}) \u2014 nothing deleted`);
+        copied.push(relativePath);
+        bytes += data.length;
+      }
+      for (const relativePath of copied) await io.deleteSource(relativePath);
+      return {
+        files: copied.length,
+        bytes
+      };
+    }
     function resolveRefusalFor(location, locality) {
       if (locality !== false) return null;
       return `storage.resolve is a request for a path this node can open with node:fs, and location "${location.id}" is served by the remote provider "${location.providerId}" (nodeLocal: false) \u2014 the path it would return exists on the remote host, not here. Read and write this location through the storage cap (read/write, or beginUpload/writeChunk/finalizeUpload) instead.`;
@@ -88306,10 +88403,12 @@ var require_storage_orchestrator_addon = __commonJS({
           upsertLocation: async (input) => {
             const stored = service.getLocationById(input.id);
             const config = restoreRedactedSecrets(input.config, stored?.config, this.secretKeysFor(input.providerId, stored?.config ?? {}));
-            const saved = service.upsertLocation(config === input.config ? input : {
+            const next = config === input.config ? input : {
               ...input,
               config
-            });
+            };
+            await this.carryDataOnRepoint(stored, next);
+            const saved = service.upsertLocation(next);
             this.announceLocationsChanged(saved.id, saved.type, "upsert");
             return this.redacted(saved);
           },
@@ -88804,6 +88903,63 @@ var require_storage_orchestrator_addon = __commonJS({
         return this.secretKeysByProvider.get(providerId);
       }
       /** Which keys of a given stored config must never leave this process. */
+      /**
+      * Move a singleton location's bytes when its root changes.
+      *
+      * Runs BEFORE the row is saved: a copy that fails throws out of the mutation,
+      * so the location keeps pointing at the intact original and the operator is
+      * told why rather than discovering it in a blank panel weeks later.
+      * `moveLocationTree` deletes nothing until every file has been read back from
+      * the destination.
+      *
+      * A no-op for everything else — a rename, a mode change, a `multi` kind, or a
+      * location being created for the first time.
+      */
+      async carryDataOnRepoint(stored, next) {
+        if (stored === void 0) return;
+        const service = this.service;
+        if (service === null) return;
+        if (service.listDeclarations().find((entry) => entry.id === next.type)?.cardinality !== "single") return;
+        const from = stored.config["basePath"];
+        const to = next.config["basePath"];
+        if (typeof from !== "string" || typeof to !== "string" || from === to) return;
+        const source = await service.getProviderFor(stored);
+        const target = {
+          ...stored,
+          config: next.config
+        };
+        const destination = await service.getProviderFor(target);
+        const moved = await moveLocationTree({
+          list: (prefix) => source.list(prefix === void 0 ? { location: stored } : {
+            location: stored,
+            prefix
+          }),
+          read: (relativePath) => source.read({
+            location: stored,
+            relativePath
+          }),
+          write: (relativePath, data) => destination.write({
+            location: target,
+            relativePath,
+            data
+          }),
+          readBack: (relativePath) => destination.read({
+            location: target,
+            relativePath
+          }),
+          deleteSource: (relativePath) => source.delete({
+            location: stored,
+            relativePath
+          })
+        });
+        this.ctx.logger.info("storage-orchestrator: singleton location re-pointed \u2014 its data was carried over", { meta: {
+          id: stored.id,
+          type: stored.type,
+          from,
+          to,
+          ...moved
+        } });
+      }
       secretKeysFor(providerId, config) {
         return secretKeysForConfig(config, this.declaredSecretKeys(providerId));
       }
@@ -89128,7 +89284,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_C_WvDOQ9();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -107189,7 +107345,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_C_WvDOQ9();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -131799,7 +131955,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CEUwB91M();
+    var require_dist10 = require_dist_C_WvDOQ9();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -224305,14 +224461,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           code: zod.z.string().min(1).optional()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         disarm: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           code: zod.z.string().min(1).optional()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /**
         * Force the panel into the `triggered` state — used by HA
@@ -224323,7 +224479,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         */
         trigger: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -233217,7 +233373,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         percentage: zod.z.number().min(0).max(100)
       }), zod.z.void(), {
         kind: "mutation",
-        auth: "admin"
+        auth: "protected"
       }) },
       events: {
         /**
@@ -233257,7 +233413,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       deviceTypes: [require_sleep.DeviceType.Button],
       methods: { press: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
         kind: "mutation",
-        auth: "admin"
+        auth: "protected"
       }) }
     };
     var CameraCredentialsSchema = zod.z.object({
@@ -233404,28 +233560,28 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           mode: HvacModeSchema
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setFanMode: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           fanMode: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setPreset: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           preset: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setTarget: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           target: zod.z.number()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setTargetRange: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
@@ -233433,28 +233589,28 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           targetHigh: zod.z.number()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setTargetHumidity: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           targetHumidity: zod.z.number().min(0).max(100)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setSwingVertical: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setSwingHorizontal: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -233530,7 +233686,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         color: ColorInputSchema
       }), zod.z.void(), {
         kind: "mutation",
-        auth: "admin"
+        auth: "protected"
       }) },
       events: {
         /**
@@ -233811,7 +233967,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         control: ControlSetValueInputSchema
       }), zod.z.void(), {
         kind: "mutation",
-        auth: "admin"
+        auth: "protected"
       }) },
       status: {
         schema: ControlStatusSchema,
@@ -233858,29 +234014,29 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       methods: {
         open: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         close: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         stop: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setPosition: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           position: zod.z.number().min(0).max(100)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setTiltPosition: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           tiltPosition: zod.z.number().min(0).max(100)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -234187,6 +234343,49 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       deviceId: zod.z.number().int().optional(),
       base64: zod.z.string().optional()
     });
+    var IdentitySampleAuditRowSchema = zod.z.object({
+      sampleId: zod.z.string(),
+      enrolledAt: zod.z.number().int(),
+      deviceId: zod.z.number().int().optional(),
+      source: zod.z.enum(["detected", "photo"]),
+      /** The enrolled crop's media key, so the panel can show the evidence. */
+      mediaKey: zod.z.string().optional(),
+      /**
+      * False = the sample is stamped with a DIFFERENT face model, and a cosine
+      * across feature spaces is a well-formed float with no meaning. Every number
+      * below then says nothing — it must read as "cannot say", never as an
+      * accusation and never as a clean bill: this list ends in a Remove button.
+      */
+      comparable: zod.z.boolean(),
+      /** Mean cosine against this person's other samples. Null when there are none
+      *  to compare with — never 0, which would read as "opposite". */
+      selfMean: zod.z.number().nullable(),
+      /** The other person this sample looks most like, when it looks like one.
+      *  This is the half that convicts: not looking like yourself can be a hard
+      *  angle; looking like someone the gallery can NAME is a mis-enrolment. */
+      bestForeign: zod.z.object({
+        identityId: zod.z.string(),
+        name: zod.z.string(),
+        score: zod.z.number()
+      }).optional(),
+      /** 0 = nothing to say. Higher = look at this one sooner. */
+      suspicion: zod.z.number()
+    });
+    var IdentitySampleAuditSchema = zod.z.object({
+      identityId: zod.z.string(),
+      name: zod.z.string(),
+      /** The cluster face model every comparison was made in. */
+      modelId: zod.z.string(),
+      totalSamples: zod.z.number().int(),
+      comparableSamples: zod.z.number().int(),
+      flagged: zod.z.number().int(),
+      /** The bar `flagged` counts against, so the panel states the RULE and not
+      *  only its current result. */
+      flagThreshold: zod.z.number(),
+      /** Worst first. A row with nothing to say still appears, at the bottom: the
+      *  operator asked to see the gallery, not only its accusations. */
+      rows: zod.z.array(IdentitySampleAuditRowSchema).readonly()
+    });
     var FaceInfoSchema = zod.z.object({
       faceId: zod.z.string(),
       deviceId: zod.z.number().int(),
@@ -234314,6 +234513,19 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           auth: "admin"
         }),
         listIdentitySamples: require_sleep.method(zod.z.object({ identityId: zod.z.string() }), zod.z.array(IdentitySampleInfoSchema).readonly()),
+        /**
+        * Re-analyse ONE person's enrolled samples against the whole gallery.
+        *
+        * A pure read — no write, no inference, just dot products over vectors the
+        * hub already holds (327 of them on this cluster). `admin` for the same
+        * reason `listIdentitySamples` is: the answer names every enrolled person
+        * and how well one person's samples match them, which is the gallery's
+        * shape and not a viewer-level fact.
+        *
+        * Removal deliberately stays `removeSample`: an analysis that could also
+        * delete would be one confirmation away from emptying a gallery.
+        */
+        auditIdentitySamples: require_sleep.method(zod.z.object({ identityId: zod.z.string().min(1) }), IdentitySampleAuditSchema, { auth: "admin" }),
         removeSample: require_sleep.method(zod.z.object({
           identityId: zod.z.string(),
           sampleId: zod.z.string()
@@ -234505,28 +234717,28 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           percentage: zod.z.number().min(0).max(100)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setPreset: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           preset: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setDirection: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           direction: FanDirectionSchema
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setOscillating: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           oscillating: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -234697,21 +234909,21 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setTargetHumidity: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           humidity: zod.z.number().min(0).max(100)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setMode: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           mode: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -235282,15 +235494,15 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       methods: {
         startMowing: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         pause: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         dock: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -235648,18 +235860,18 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           code: zod.z.string().min(1).optional()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         unlock: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           code: zod.z.string().min(1).optional()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         open: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -235750,65 +235962,65 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       methods: {
         play: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         pause: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         stop: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         next: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         previous: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         seek: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           positionMs: zod.z.number().int().nonnegative()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setVolume: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           volumeLevel: zod.z.number().min(0).max(100)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setMute: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           muted: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setShuffle: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           shuffle: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setRepeat: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           repeat: MediaPlayerRepeatSchema
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         selectSource: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           source: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         playMedia: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
@@ -235819,7 +236031,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           mediaType: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -237409,27 +237621,27 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           hopper2: gramsPortion.optional()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Cancel an in-progress manual feed. */
         cancelFeed: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Reset the desiccant "days remaining" counter after replacing it. */
         resetDesiccant: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Mark a hopper as refilled (D4H/D4S/D4SH). */
         markFoodReplenished: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Call the pet with the recorded prompt (D3). */
         callPet: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Play a stored sound by id (D3 / D4H / D4SH). */
         playSound: require_sleep.method(zod.z.object({
@@ -237437,7 +237649,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           soundId: zod.z.number().int().nonnegative()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Toggle the child-lock (manual-lock) setting. */
         setChildLock: require_sleep.method(zod.z.object({
@@ -237445,7 +237657,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Toggle the front indicator light. */
         setIndicatorLight: require_sleep.method(zod.z.object({
@@ -237453,7 +237665,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Toggle the dispense chime. */
         setFeedSound: require_sleep.method(zod.z.object({
@@ -237461,7 +237673,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         /** Set the speaker / prompt volume level. */
         setVolume: require_sleep.method(zod.z.object({
@@ -237469,7 +237681,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           level: zod.z.number().int().nonnegative()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -239853,7 +240065,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         on: zod.z.boolean()
       }), zod.z.void(), {
         kind: "mutation",
-        auth: "admin"
+        auth: "protected"
       }) },
       events: { onStateChanged: { data: zod.z.object({
         deviceId: zod.z.number(),
@@ -240720,30 +240932,30 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       methods: {
         start: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         pause: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         stop: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         returnToBase: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         locate: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setFanSpeed: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           speed: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -240788,22 +241000,22 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       methods: {
         open: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         close: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         stop: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setPosition: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           position: zod.z.number().min(0).max(100)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -240884,21 +241096,21 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           temp: zod.z.number().finite()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setOperationMode: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           mode: zod.z.string().min(1)
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         }),
         setAway: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           on: zod.z.boolean()
         }), zod.z.void(), {
           kind: "mutation",
-          auth: "admin"
+          auth: "protected"
         })
       },
       status: {
@@ -247063,6 +247275,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "faceGallery.auditIdentitySamples": {
+        capName: "face-gallery",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "faceGallery.createIdentity": {
         capName: "face-gallery",
         capScope: "system",
@@ -254237,6 +254455,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           renameIdentity: (input) => dispatch("faceGallery", "renameIdentity", "mutation", input),
           deleteIdentity: (input) => dispatch("faceGallery", "deleteIdentity", "mutation", input),
           listIdentitySamples: (input) => dispatch("faceGallery", "listIdentitySamples", "query", input),
+          auditIdentitySamples: (input) => dispatch("faceGallery", "auditIdentitySamples", "query", input),
           removeSample: (input) => dispatch("faceGallery", "removeSample", "mutation", input),
           getFaceMedia: (input) => dispatch("faceGallery", "getFaceMedia", "query", input),
           assignFace: (input) => dispatch("faceGallery", "assignFace", "mutation", input),