camstack 1.2.191 → 1.2.193

package/dist/cli.js

@@ -37,7 +37,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-AZI5I6X5.js");
+  await import("./launcher-MJFET7GO.js");
 }
 
 // src/commands/agent.ts
@@ -82,7 +82,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-AZI5I6X5.js");
+  await import("./launcher-MJFET7GO.js");
 }
 
 // src/commands/setup.ts
@@ -14773,7 +14773,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-BxjU_fJM.mjs
+// ../types/dist/sleep-BSuCCFjf.mjs
 var AUDIO_CHUNK_FORMATS = [
   "f32le",
   "pcmu",
@@ -18584,10 +18584,12 @@ var AddonRoutesScopeSchema = external_exports.object({
   type: external_exports.literal("addon-routes"),
   access: external_exports.array(MethodAccessSchema).min(1)
 });
+var PreferencesSelfScopeSchema = external_exports.object({ type: external_exports.literal("preferences-self") });
 var CredentialScopeSchema = external_exports.union([
   external_exports.literal("*"),
   ShareViewScopeSchema,
   AddonRoutesScopeSchema,
+  PreferencesSelfScopeSchema,
   TokenScopeSchema
 ]);
 var CREDENTIAL_TOKEN_KIND = "credential";
@@ -18597,6 +18599,58 @@ var CredentialTokenClaimsSchema = external_exports.object({
   jti: external_exports.string().min(16),
   scopes: external_exports.array(CredentialScopeSchema).min(1)
 });
+var PREFERENCES_NAMESPACE_PATTERN = /^[a-z][a-z0-9.-]{0,63}$/;
+var PREFERENCES_MAX_VALUE_BYTES = 256 * 1024;
+var PreferenceNamespaceSchema = external_exports.string().regex(PREFERENCES_NAMESPACE_PATTERN);
+var PreferenceValueSchema = external_exports.record(external_exports.string(), external_exports.unknown());
+var PreferenceDeviceIdSchema = external_exports.string().min(1).max(64);
+var PreferenceRowSchema = external_exports.object({
+  namespace: PreferenceNamespaceSchema,
+  value: PreferenceValueSchema,
+  /** Starts at 1, +1 on every write of this namespace. A delete ends the row and its count. */
+  revision: external_exports.number().int().positive(),
+  updatedAt: external_exports.number().int(),
+  /** The client id the last writer sent; `null` when it sent none. */
+  updatedByDevice: PreferenceDeviceIdSchema.nullable()
+});
+var PreferencesGetInputSchema = external_exports.object({
+  /** Absent: every namespace the caller holds. */
+  namespaces: external_exports.array(PreferenceNamespaceSchema).max(32).optional()
+});
+var PreferencesGetOutputSchema = external_exports.object({ rows: external_exports.array(PreferenceRowSchema) });
+var PreferencesPutInputSchema = external_exports.object({
+  namespace: PreferenceNamespaceSchema,
+  value: PreferenceValueSchema,
+  /**
+  * The revision the edit was based on. Absent: last write wins. `0`: the
+  * namespace must not exist yet. Any other value that is not the current
+  * revision answers `conflict` and writes nothing.
+  */
+  baseRevision: external_exports.number().int().nonnegative().optional(),
+  deviceId: PreferenceDeviceIdSchema.optional()
+});
+var PreferencesPutOutputSchema = external_exports.discriminatedUnion("status", [external_exports.object({
+  status: external_exports.literal("saved"),
+  row: PreferenceRowSchema
+}), external_exports.object({
+  status: external_exports.literal("conflict"),
+  current: PreferenceRowSchema.nullable()
+})]);
+var PreferencesDeleteInputSchema = external_exports.object({ namespace: PreferenceNamespaceSchema });
+var PreferencesDeleteOutputSchema = external_exports.object({
+  /** `false` when the namespace did not exist. */
+  deleted: external_exports.boolean()
+});
+var PreferencesChangedSinceInputSchema = external_exports.object({
+  /** The revision the client holds per namespace; a namespace it does not list is new to it. */
+  revisionByNamespace: external_exports.record(PreferenceNamespaceSchema, external_exports.number().int().nonnegative()).refine((map2) => Object.keys(map2).length <= 32, { message: `at most 32 namespaces` })
+});
+var PreferencesChangedSinceOutputSchema = external_exports.object({
+  /** Every row whose revision differs from the client's, and every row it did not list. */
+  rows: external_exports.array(PreferenceRowSchema),
+  /** Namespaces the client listed that no longer exist. */
+  deleted: external_exports.array(PreferenceNamespaceSchema)
+});
 var AppFlowPurposeSchema = external_exports.enum(["new-session", "step-up"]);
 var AppPageLangSchema = external_exports.enum(["en", "it"]);
 var APP_FLOW_REFUSAL_MESSAGES = {
@@ -23308,6 +23362,12 @@ var DeviceHistorySubjectSchema = external_exports.discriminatedUnion("kind", [ex
   nodeId: external_exports.string().min(1)
 })]);
 var DeviceHistoryKindSchema = external_exports.enum([
+  "gauge",
+  "counter",
+  "boolean",
+  "enum"
+]);
+var DeviceHistoryProducerKindSchema = external_exports.enum([
   "gauge",
   "counter",
   "boolean"
@@ -23343,7 +23403,13 @@ var SeriesInfoSchema = external_exports.object({
   /** `null` is unknown (a `unitFrom` series whose device does not state a unit right now), never a guess. */
   unit: external_exports.string().nullable(),
   displayName: external_exports.string(),
-  source: external_exports.enum(["cap", "addon"]),
+  source: external_exports.enum([
+    "cap",
+    "addon",
+    "derived"
+  ]),
+  /** `enum`: the value of each ordinal (index = ordinal); `null` for every other kind. */
+  values: external_exports.array(external_exports.string()).readonly().nullable(),
   firstTs: external_exports.number(),
   lastTs: external_exports.number()
 });
@@ -23357,17 +23423,31 @@ var QueryPointSchema = external_exports.object({
   twMean: external_exports.number().nullable(),
   min: external_exports.number(),
   max: external_exports.number(),
-  /** `null` is unknown, never zero (D393). */
-  last: external_exports.number().nullable()
+  /** `null` is unknown, never zero (D393). For an `enum` series: the ordinal of {@link state}. */
+  last: external_exports.number().nullable(),
+  /**
+  * The increase over the point: a `counter`'s growth since the previous point
+  * or bucket (a drop is a reset, counted from zero), and for
+  * {@link DEVICE_HISTORY_ENERGY_KEY} the kWh used in the bucket. `null` for
+  * every other kind, and when it cannot be known.
+  */
+  delta: external_exports.number().nullable(),
+  /** `enum`: the state in force at the end of the point (the name of `last`); `null` otherwise. */
+  state: external_exports.string().nullable(),
+  /** `enum` rollup: milliseconds spent in each state inside the bucket; `null` for raw points and other kinds. */
+  states: external_exports.record(external_exports.string(), external_exports.number()).nullable()
 });
 var QuerySeriesSchema = external_exports.object({
   scope: external_exports.string(),
   /** The last point STRICTLY BEFORE `from` in the chosen tier, so a step chart can start at the held value. */
   before: external_exports.object({
     t: external_exports.number(),
-    value: external_exports.number().nullable()
+    value: external_exports.number().nullable(),
+    state: external_exports.string().nullable()
   }).nullable(),
-  points: external_exports.array(QueryPointSchema).readonly()
+  points: external_exports.array(QueryPointSchema).readonly(),
+  /** A derived key: the stored key its points were computed from; `null` for a stored series. */
+  derivedFrom: external_exports.string().nullable()
 });
 var QueryWindowShape = {
   key: external_exports.string(),
@@ -23382,6 +23462,22 @@ var QueryResultSchema = external_exports.object({
   series: external_exports.array(QuerySeriesSchema).readonly(),
   truncated: external_exports.boolean()
 });
+var QueryManyItemSchema = external_exports.union([external_exports.object({
+  deviceId: external_exports.number().int(),
+  key: external_exports.string(),
+  scope: external_exports.string().optional()
+}), external_exports.object({
+  forNodeId: external_exports.string().min(1),
+  key: external_exports.string(),
+  scope: external_exports.string().optional()
+})]);
+var QueryManyEntrySchema = external_exports.discriminatedUnion("ok", [external_exports.object({
+  ok: external_exports.literal(true),
+  result: QueryResultSchema
+}), external_exports.object({
+  ok: external_exports.literal(false),
+  error: external_exports.string()
+})]);
 var TierStatusSchema = external_exports.object({
   tier: DeviceHistoryResolutionSchema,
   /** `null` until the first background count answered. */
@@ -23449,26 +23545,45 @@ var deviceHistoryCapability = {
     * `listNodeSeries` / `queryNode`.
     */
     listSeries: method(external_exports.object({ deviceId: external_exports.number().int() }), external_exports.array(SeriesInfoSchema).readonly()),
-    listNodeSeries: method(external_exports.object({ nodeId: external_exports.string().min(1) }), external_exports.array(SeriesInfoSchema).readonly(), { auth: "admin" }),
+    /**
+    * A NODE's series. The subject is `forNodeId`, never `nodeId`: a top-level
+    * `nodeId` is the cap ROUTING key, and `nodeId: 'little-unraid'` sent the
+    * read to that agent, which hosts no device-history.
+    */
+    listNodeSeries: method(external_exports.object({ forNodeId: external_exports.string().min(1) }), external_exports.array(SeriesInfoSchema).readonly(), { auth: "admin" }),
     /**
     * One series (or every scope of it) at one resolution. `auto` picks the
     * finest tier whose retention covers `from` and whose point count fits
     * `maxPoints`; when even the coarsest tier does not fit, the newest
-    * `maxPoints` points are returned and `truncated` is true.
+    * `maxPoints` points are returned and `truncated` is true. A series fed by
+    * closed buckets has no raw rows, so `auto` never answers it from raw; nor
+    * {@link DEVICE_HISTORY_ENERGY_KEY}, which is computed from rollups.
     */
     query: method(external_exports.object({
       deviceId: external_exports.number().int(),
       ...QueryWindowShape
     }), QueryResultSchema),
     queryNode: method(external_exports.object({
-      nodeId: external_exports.string().min(1),
+      forNodeId: external_exports.string().min(1),
       ...QueryWindowShape
     }), QueryResultSchema, { auth: "admin" }),
+    /**
+    * Several reads over ONE window, answered in order (one entry per item).
+    * Admin-only: its subjects are nested in `items`, where the device scope
+    * gate cannot see them — a principal limited to one device uses `query`.
+    */
+    queryMany: method(external_exports.object({
+      items: external_exports.array(QueryManyItemSchema).min(1).max(24),
+      from: QueryWindowShape.from,
+      to: QueryWindowShape.to,
+      resolution: QueryWindowShape.resolution,
+      maxPoints: QueryWindowShape.maxPoints
+    }), external_exports.object({ results: external_exports.array(QueryManyEntrySchema).readonly() }), { auth: "admin" }),
     /** Producer: declare (idempotent) a series key this addon owns: `addon:<callerAddonId>/<name>`. */
     declareSeries: method(external_exports.object({
       name: external_exports.string().regex(/^[a-z0-9-]+$/),
       subjectKind: external_exports.enum(["device", "node"]),
-      kind: DeviceHistoryKindSchema,
+      kind: DeviceHistoryProducerKindSchema,
       unit: external_exports.string().optional(),
       displayName: external_exports.string().min(1),
       ingest: external_exports.enum(["points", "buckets"])
@@ -46576,27 +46691,30 @@ var llmRuntimeCapability = {
     })
   }
 };
-var LlmProfileKindSchema = external_exports.enum([
-  "openai-compatible",
-  "openai",
-  "anthropic",
-  "google",
-  "managed-local",
-  "apple-foundation"
-]);
+var LLM_PROFILE_KIND_PATTERN = /^[a-z0-9][a-z0-9-]{0,63}$/;
+var LlmProfileKindSchema = external_exports.string().regex(LLM_PROFILE_KIND_PATTERN, "a kind id is lower-case letters, digits and dashes");
+var LlmModelFeaturesSchema = external_exports.object({
+  vision: external_exports.boolean(),
+  tools: external_exports.boolean(),
+  streaming: external_exports.boolean()
+});
+var LlmModelInfoSchema = external_exports.object({
+  id: external_exports.string(),
+  label: external_exports.string().optional(),
+  contextLength: external_exports.number().int().positive().optional(),
+  features: LlmModelFeaturesSchema.partial().optional()
+});
+var LlmProviderConfigSchema = external_exports.record(external_exports.string(), external_exports.unknown());
 var LlmProfileSchema = external_exports.object({
   id: external_exports.string(),
   name: external_exports.string(),
+  /** The provider-declared kind (`LlmProfileKindDescriptor.kind`). */
   kind: LlmProfileKindSchema,
   /** Stamped by the provider — keeps the fanned catalog routable. */
   addonId: external_exports.string(),
   enabled: external_exports.boolean(),
   /** Vendor model id, or the managed runtime's loaded model. */
   model: external_exports.string(),
-  /** Required for openai-compatible; override for cloud kinds. */
-  baseUrl: external_exports.string().optional(),
-  /** ConfigUISchema type:'password' — never round-trips (spec §5). */
-  apiKey: external_exports.string().optional(),
   /** Vision on/off. A vision call against a `false` profile is REFUSED, never
   *  degraded to text — that shipped once and produced a confident answer to a
   *  question about a picture nobody sent. */
@@ -46604,15 +46722,11 @@ var LlmProfileSchema = external_exports.object({
   temperature: external_exports.number().min(0).max(2).optional(),
   /** Nucleus sampling. Every wire we speak has it. */
   topP: external_exports.number().min(0).max(1).optional(),
-  /** Top-k sampling. Carried only by the wires that have it — NEITHER OpenAI
-  *  wire does, and the client drops it there (measured: the request body gets
-  *  `top_p` and no `top_k`). The profile editor hides the field wherever it
-  *  would change nothing; `KINDS_WITH_TOP_K` is the single owner of that list. */
+  /** Top-k sampling. Carried only by the wires that have it — a kind offers the
+  *  field in its editor only when its descriptor lists it in `profileFields`. */
   topK: external_exports.number().int().positive().optional(),
   maxTokens: external_exports.number().int().positive().optional(),
-  /** Prompt context window. Advisory for cloud kinds (they enforce their own);
-  *  for `managed-local` it is the llama.cpp `--ctx-size` the runtime starts
-  *  the model with, so it is the one field that changes a PROCESS. */
+  /** Prompt context window. Advisory for cloud kinds (they enforce their own). */
   contextLength: external_exports.number().int().positive().optional(),
   /** Default system prompt. A caller's `system` REPLACES it (never appends —
   *  two system prompts fighting is worse than either alone). */
@@ -46638,26 +46752,76 @@ var LlmProfileSchema = external_exports.object({
   *  library; the REGISTRY of callable tools is ours and is empty in v1, so a
   *  `true` here buys the wiring, not behaviour, until tools are registered. */
   toolsEnabled: external_exports.boolean().default(false),
-  extraHeaders: external_exports.record(external_exports.string(), external_exports.string()).optional(),
-  /** kind === 'managed-local' only (spec §4). */
-  runtime: ManagedRuntimeConfigSchema.optional(),
-  /**
-  * kind === 'apple-foundation' only: WHERE it runs — the only thing there is
-  * to configure (no key, no URL, no download; `model` is `apple-system`).
-  * `supportsVision` on such a row is stamped by the provider from the node's
-  * reported `imageInput`, never taken from the operator (D62).
-  */
-  appleFoundation: external_exports.object({ nodeId: external_exports.string() }).optional()
+  /** Everything the kind's provider owns (endpoint, key, node, runtime…). */
+  providerConfig: LlmProviderConfigSchema.default({})
+});
+var LlmProfileFieldSchema = external_exports.enum([
+  "temperature",
+  "topP",
+  "topK",
+  "maxTokens",
+  "contextLength",
+  "systemPrompt",
+  "timeoutMs",
+  "connectTimeoutMs",
+  "firstTokenTimeoutMs",
+  "idleTimeoutMs",
+  "retry",
+  "toolsEnabled"
+]);
+var LlmProviderWidgetSchema = external_exports.object({
+  id: external_exports.string(),
+  placement: external_exports.enum(["connection", "model"]),
+  /** `providerConfig` keys this widget must fill before the profile can be saved. */
+  requires: external_exports.array(external_exports.string()).optional()
 });
 var ConfigSchemaPassthrough$3 = external_exports.unknown();
 var LlmProfileKindDescriptorSchema = external_exports.object({
   kind: LlmProfileKindSchema,
   label: external_exports.string(),
+  /** A generic icon name (`cloud`, `plug`, `cpu`) — never a glyph or a logo. */
   icon: external_exports.string(),
   /** Stamped by each provider so the concat-fanned catalog stays routable. */
   addonId: external_exports.string(),
-  configSchema: ConfigSchemaPassthrough$3
+  /** The provider's own fields (`providerConfig`); `password` fields are keychain-held. */
+  connectionSchema: ConfigSchemaPassthrough$3,
+  /** Provider fields that belong under "Advanced" (extra headers, runtime tuning). */
+  advancedSchema: ConfigSchemaPassthrough$3.optional(),
+  /** The kind's defaults; a model from `listModels` may override any of them. */
+  features: LlmModelFeaturesSchema,
+  /** `false` = the provider stamps `supportsVision` itself (from what a node reports). */
+  visionEditable: external_exports.boolean(),
+  /** Where the model list comes from: `listModels`, `staticModels`, or nowhere. */
+  modelCatalog: external_exports.enum([
+    "fetch",
+    "static",
+    "none"
+  ]),
+  staticModels: external_exports.array(LlmModelInfoSchema).optional(),
+  /** The common fields that mean something on this kind's wire. */
+  profileFields: external_exports.array(LlmProfileFieldSchema),
+  providerWidgets: external_exports.array(LlmProviderWidgetSchema).optional()
 });
+var LlmListModelsInputSchema = external_exports.object({
+  addonId: external_exports.string(),
+  kind: LlmProfileKindSchema,
+  profileId: external_exports.string().optional(),
+  connection: LlmProviderConfigSchema.optional()
+});
+var LlmListModelsErrorCodeSchema = external_exports.enum([
+  "auth",
+  "network",
+  "unsupported",
+  "invalid"
+]);
+var LlmListModelsResultSchema = external_exports.discriminatedUnion("ok", [external_exports.object({
+  ok: external_exports.literal(true),
+  models: external_exports.array(LlmModelInfoSchema)
+}), external_exports.object({
+  ok: external_exports.literal(false),
+  code: LlmListModelsErrorCodeSchema,
+  message: external_exports.string()
+})]);
 var LlmDefaultSelectorSchema = external_exports.union([external_exports.object({ consumer: external_exports.string() }), external_exports.object({ purpose: external_exports.enum(["text", "vision"]) })]);
 var LlmDefaultSchema = external_exports.object({
   selector: LlmDefaultSelectorSchema,
@@ -46777,8 +46941,17 @@ var llmCapability = {
       auth: "admin",
       timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
     }),
-    /** Live vendor enumeration (GET /models etc.). */
-    listModels: method(ProfileRefInputSchema, external_exports.array(external_exports.string())),
+    /**
+    * The models a kind offers, for a SAVED profile or an unsaved draft
+    * (`connection`). A mutation, not a query: a draft may carry a key, and a
+    * query's input travels in the URL. Admin: it dials whatever endpoint the
+    * draft names and may resolve a stored key to do it. The answer never
+    * carries a secret — failures are a typed result, never a throw.
+    */
+    listModels: method(LlmListModelsInputSchema, LlmListModelsResultSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
     getDefaults: method(external_exports.object({}), external_exports.array(LlmDefaultSchema)),
     setDefault: method(external_exports.object({
       selector: LlmDefaultSelectorSchema,
@@ -46965,6 +47138,88 @@ var LogEntrySchema = external_exports.object({
   meta: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
   tags: external_exports.record(external_exports.string(), external_exports.string()).optional()
 });
+var LogReadQuerySchema = external_exports.object({
+  /** Correlates `cancelRead`. Caller-chosen, unique per in-flight read. */
+  requestId: external_exports.string().min(1).max(64).optional(),
+  /** The device the line is about (`tags.deviceId`, numeric). */
+  deviceId: external_exports.number().int().optional(),
+  /**
+  * The emitting addon — bare manifest id; `@<version>` / `::<sub>` suffixes
+  * match. Not `addonId`: a cap router reads that name as "which provider".
+  */
+  fromAddonId: external_exports.string().min(1).max(200).optional(),
+  /**
+  * The emitting node: matches the agent that emitted the line, the node
+  * itself, or a worker under it (`<agent>/<runner>`) — the `agentId`
+  * semantics of `matchesLogTags`. Not `nodeId`: a cap router reads that
+  * name as "which node's provider".
+  */
+  fromNodeId: external_exports.string().min(1).max(200).optional(),
+  /** Any other tag, exact match (AND). */
+  tags: external_exports.record(external_exports.string(), external_exports.union([external_exports.string(), external_exports.number()])).optional(),
+  /** Severity FLOOR: this level and above. */
+  level: LogLevelSchema.optional(),
+  /** Case-insensitive substring over message, scope, tag values and meta values. */
+  text: external_exports.string().min(1).max(200).optional(),
+  /** Epoch ms, inclusive. */
+  since: external_exports.number().optional(),
+  /** Epoch ms, inclusive. */
+  until: external_exports.number().optional(),
+  /** Older than this cursor (exclusive). Absent with `after` absent ⇒ from the newest. */
+  before: external_exports.string().min(1).max(1024).optional(),
+  /** Newer than this cursor (exclusive). */
+  after: external_exports.string().min(1).max(1024).optional(),
+  limit: external_exports.number().int().min(1).max(1e3).optional(),
+  /** Wall-clock bound of this slice. The provider caps it. */
+  budgetMs: external_exports.number().int().min(50).max(1e4).optional()
+});
+var LogReadEntrySchema = external_exports.object({
+  /** `<bootId>.<seq>` minted by the emitting LogManager — the dedupe key. */
+  id: external_exports.string().optional(),
+  /** Epoch ms. */
+  timestamp: external_exports.number(),
+  level: LogLevelSchema,
+  scope: external_exports.string().optional(),
+  message: external_exports.string(),
+  tags: external_exports.record(external_exports.string(), external_exports.union([external_exports.string(), external_exports.number()])).optional(),
+  meta: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
+});
+var LogReadResultSchema = external_exports.object({
+  /** Newest first. */
+  entries: external_exports.array(LogReadEntrySchema),
+  /** Pass as `before` for the next older page; null when nothing older exists. */
+  nextBefore: external_exports.string().nullable(),
+  /** Pass as `after` to read what arrived since; null when unknown. */
+  nextAfter: external_exports.string().nullable(),
+  /** Bytes this slice read (files) or received (remote). Progress, not a promise. */
+  scannedBytes: external_exports.number().int().nonnegative(),
+  /**
+  * True when the scan in this direction reached the end of the store.
+  * False with fewer than `limit` entries means the budget ran out first —
+  * call again with `nextBefore` to go on.
+  */
+  done: external_exports.boolean(),
+  /** True when `cancelRead` ended this slice early. */
+  cancelled: external_exports.boolean().optional()
+});
+var LogReadCapabilitiesSchema = external_exports.object({
+  /** False ⇒ this destination only ships lines (console, forwarder, an unconfigured Loki). */
+  readable: external_exports.boolean(),
+  /** Why not, when `readable` is false — rendered next to the source. */
+  reason: external_exports.string().nullable(),
+  /** Filters the provider applies itself. A false one is applied by nobody. */
+  filters: external_exports.object({
+    deviceId: external_exports.boolean(),
+    addonId: external_exports.boolean(),
+    nodeId: external_exports.boolean(),
+    tags: external_exports.boolean(),
+    level: external_exports.boolean(),
+    text: external_exports.boolean(),
+    timeRange: external_exports.boolean()
+  }),
+  /** How far back the store reaches, when the provider knows (days). */
+  retentionDays: external_exports.number().nullable()
+});
 var logDestinationCapability = {
   name: "log-destination",
   scope: "system",
@@ -46972,14 +47227,13 @@ var logDestinationCapability = {
   internal: true,
   methods: {
     write: method(LogEntrySchema, external_exports.void(), { kind: "mutation" }),
-    query: method(external_exports.object({
-      scope: external_exports.array(external_exports.string()).optional(),
-      level: LogLevelSchema.optional(),
-      since: external_exports.date().optional(),
-      until: external_exports.date().optional(),
-      limit: external_exports.number().optional(),
-      tags: external_exports.record(external_exports.string(), external_exports.string()).optional()
-    }), external_exports.array(LogEntrySchema).readonly())
+    /** Absent ⇒ the destination cannot read back (same as `readable: false`). */
+    describeRead: optionalMethod(external_exports.void(), LogReadCapabilitiesSchema, { auth: "admin" }),
+    read: optionalMethod(LogReadQuerySchema, LogReadResultSchema, { auth: "admin" }),
+    cancelRead: optionalMethod(external_exports.object({ requestId: external_exports.string().min(1).max(64) }), external_exports.object({ cancelled: external_exports.boolean() }), {
+      kind: "mutation",
+      auth: "admin"
+    })
   },
   /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
   mount: { kind: "skip" }
@@ -48586,9 +48840,11 @@ var alarmPanelCapability = {
   */
   durability: "restored",
   /**
-  * History (D850): none — enum state; arm/disarm history belongs in the events ledger.
+  * History (D850): the panel's lifecycle state as an `enum` series —
+  * change-only, no floor, so an `arming -> pending -> triggered` sequence of a
+  * few seconds keeps every step. Who armed it stays in the events ledger.
   */
-  history: "none",
+  history: { fields: { state: { kind: "enum" } } },
   /** Clock fields: written, but excluded from the compare that decides
   *  whether persisting is worth a SQLite commit. */
   volatileStateFields: ["lastChangedAt"]
@@ -49156,6 +49412,12 @@ var NcRuleTargetSchema = external_exports.object({
   */
   params: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
 });
+var NcMediaImageSchema = external_exports.enum([
+  "scene-boxes",
+  "crop",
+  "clean",
+  "none"
+]);
 var NcMediaFrameSchema = external_exports.enum([
   "cropped",
   "full",
@@ -49163,16 +49425,29 @@ var NcMediaFrameSchema = external_exports.enum([
 ]);
 var NcLinkedCameraModeSchema = external_exports.enum(["mosaic", "each"]);
 var NcMediaPolicySchema = external_exports.object({
+  /**
+  * The picture — see {@link NcMediaImageSchema}. Absent on a rule nobody has
+  * saved since D897: `normalizeNcMediaPolicy` derives it from the legacy
+  * triple below, at load and at every write, and the store keeps only this.
+  */
+  image: NcMediaImageSchema.optional(),
+  /**
+  * Draw the zone that FIRED the rule on the picture (`scene-boxes` / `clean`;
+  * a `crop` never shows it). Valid only on a rule whose trigger is a zone —
+  * `conditions.zones` or an occupancy zone — and refused on save otherwise.
+  * Replaces `zoneCrop`.
+  */
+  showTriggerZone: external_exports.boolean().optional(),
+  /** @deprecated D897 — accepted from an editor that predates `image`, folded into it on save. */
   attach: external_exports.enum([
     "best",
     "best-matching",
     "keyFrame",
     "none"
-  ]).default("best"),
-  /** What the still shows. Absent = `cropped` (the historical `best` shape). */
+  ]).optional(),
+  /** @deprecated D897 — accepted from an editor that predates `image`, folded into it on save. */
   frame: NcMediaFrameSchema.optional(),
-  /** Crop the attached still to the rule's condition-zone bbox (padded) —
-  *  "show me the ZONE", not the whole scene or the subject crop. */
+  /** @deprecated D897 — folded into `image: 'clean'` + `showTriggerZone` on save. */
   zoneCrop: external_exports.boolean().optional(),
   /**
   * Also attach a short GIF cut from the stream broker's clip ring around the
@@ -49299,7 +49574,9 @@ var NcRuleInputSchema = external_exports.object({
   * targets.
   */
   targetUsers: external_exports.array(external_exports.string()).optional(),
-  media: NcMediaPolicySchema.default({ attach: "best" }),
+  /** Absent = the kind's default picture (`resolveNcMediaImage`): the subject crop for a
+  *  detection, the clean scene for a sensor or a sound. Set explicitly on save (D897). */
+  media: NcMediaPolicySchema.default({}),
   throttle: NcThrottleSchema.default({
     cooldownSec: 60,
     scope: "rule-device"
@@ -50056,13 +50333,31 @@ var NcAlarmModeOpeningsSchema = external_exports.object({
   /** Covered devices whose state could not be read (D49): neither open nor closed. */
   unknown: external_exports.array(external_exports.number().int())
 });
+var NcAlarmInputBypassViewSchema = external_exports.object({
+  ruleId: external_exports.string(),
+  /** The rule's current name (its frozen name when the rule is gone). */
+  ruleName: external_exports.string(),
+  /** The input: the sensor of the match, else its camera. */
+  deviceId: external_exports.number().int(),
+  /** The input's current name. */
+  name: external_exports.string(),
+  /** When it was bypassed (ms epoch). */
+  since: external_exports.number(),
+  /** Triggers from this input dropped since. */
+  dropped: external_exports.number().int().min(0)
+});
 var NcAlarmLiveSchema = external_exports.object({
   state: AlarmStateSchema,
   /** The mode being armed into (exit delay) or held; null when disarmed. */
   targetMode: AlarmArmModeSchema.nullable(),
   availableModes: external_exports.array(AlarmArmModeSchema),
   openings: external_exports.array(NcAlarmModeOpeningsSchema),
-  exclusions: external_exports.array(NcAlarmExclusionViewSchema)
+  exclusions: external_exports.array(NcAlarmExclusionViewSchema),
+  /**
+  * Inputs bypassed for the rest of this arm session; cleared on disarm.
+  * Defaulted so an older hub answer still parses (as "none known").
+  */
+  bypassedInputs: external_exports.array(NcAlarmInputBypassViewSchema).default([])
 });
 var NcAlarmConfigSchema = external_exports.object({
   /**
@@ -61710,9 +62005,11 @@ var connectivityCapability = {
   */
   durability: "restored",
   /**
-  * History (D850): none — duplicates device-status.online (one authority for availability).
+  * History (D850): `connected` as a boolean series — change-only, no floor. It
+  * is the upstream entity's own link (a HA connectivity sensor), not the
+  * device's reachability, which stays `device-status.online`.
   */
-  history: "none",
+  history: { fields: { connected: { kind: "boolean" } } },
   /** Clock fields: written, but excluded from the compare that decides
   *  whether persisting is worth a SQLite commit. */
   volatileStateFields: ["lastChangedAt"]
@@ -62409,11 +62706,22 @@ var dishwasherCapability = {
   },
   runtimeState: DishwasherStatusSchema,
   durability: "session",
-  history: { fields: { progressPercent: {
-    kind: "gauge",
-    unit: "%",
-    deadband: 2
-  } } }
+  history: { fields: {
+    progressPercent: {
+      kind: "gauge",
+      unit: "%",
+      deadband: 2
+    },
+    state: { kind: "enum" },
+    operationState: { kind: "enum" },
+    remainingSeconds: {
+      kind: "gauge",
+      unit: "s",
+      minIntervalMs: 6e4
+    },
+    doorOpen: { kind: "boolean" },
+    powerOn: { kind: "boolean" }
+  } }
 };
 var DoorbellStatusSchema = external_exports.object({
   /** Ms epoch of the last press. null = never observed since this provider started. */
@@ -62506,9 +62814,15 @@ var enumSensorCapability = {
   */
   durability: "restored",
   /**
-  * History (D850): none — text/enum state has no history (non-goal).
+  * History (D850): the value as an `enum` series (an appliance's program or
+  * operation state, an HVAC action). The option set is per device, so the
+  * value list is LEARNED as values are first seen (bounded). A sensor with a
+  * `format` carries a timestamp, not a state, and is not recorded.
   */
-  history: "none",
+  history: { fields: { value: {
+    kind: "enum",
+    skipWhenSet: "format"
+  } } },
   /** Clock fields: written, but excluded from the compare that decides
   *  whether persisting is worth a SQLite commit. */
   volatileStateFields: ["lastFetchedAt"]
@@ -64377,9 +64691,10 @@ var lockControlCapability = {
   */
   durability: "restored",
   /**
-  * History (D850): none — enum state; lock events belong in the events ledger.
+  * History (D850): the lock's state as an `enum` series — change-only, no
+  * floor: a jam or an unlock lasting seconds is the edge an operator looks for.
   */
-  history: "none",
+  history: { fields: { state: { kind: "enum" } } },
   /** Clock fields: written, but excluded from the compare that decides
   *  whether persisting is worth a SQLite commit. */
   volatileStateFields: ["lastChangedAt"]
@@ -64541,9 +64856,18 @@ var mediaPlayerCapability = {
   */
   durability: "session",
   /**
-  * History (D850): none — `positionMs` moves continuously while playing; volume is transient.
+  * History (D850): volume (a level an operator or an automation sets; the
+  * default 10 s floor folds a slider drag into its end value) and mute.
+  * `positionMs` is not recorded: it moves continuously while playing.
   */
-  history: "none"
+  history: { fields: {
+    volumeLevel: {
+      kind: "gauge",
+      unit: "%",
+      deadband: 1
+    },
+    isMuted: { kind: "boolean" }
+  } }
 };
 var MeshEndpointSchema = external_exports.object({
   /** Stable identifier within the provider (e.g. `mesh-ipv4`, `magicdns`, `funnel`). */
@@ -69342,9 +69666,29 @@ var streamParamsCapability = {
   */
   durability: "restored",
   /**
-  * History (D850): none — encoder configuration.
+  * History (D850): the configured bitrate and frame rate of the main and sub
+  * profiles. Configuration, so change-only on the default floor: a point is an
+  * operator's (or a tuner's) edit, which is exactly what a chart of a stream's
+  * quality over time must show.
   */
-  history: "none",
+  history: { fields: {
+    "main.bitrate": {
+      kind: "gauge",
+      unit: "kbps"
+    },
+    "main.framerate": {
+      kind: "gauge",
+      unit: "fps"
+    },
+    "sub.bitrate": {
+      kind: "gauge",
+      unit: "kbps"
+    },
+    "sub.framerate": {
+      kind: "gauge",
+      unit: "fps"
+    }
+  } },
   /** Clock fields: written, but excluded from the compare that decides
   *  whether persisting is worth a SQLite commit. */
   volatileStateFields: ["lastFetchedAt"]
@@ -70044,26 +70388,6 @@ var ApiKeySummarySchema = external_exports.object({
   createdAt: external_exports.number(),
   lastUsedAt: external_exports.number().optional()
 });
-var ScopedTokenSummarySchema = external_exports.object({
-  id: external_exports.string(),
-  userId: external_exports.string(),
-  name: external_exports.string(),
-  tokenPrefix: external_exports.string(),
-  scopes: external_exports.array(TokenScopeSchema),
-  expiresAt: external_exports.number().nullish(),
-  lastUsedAt: external_exports.number().nullish(),
-  createdAt: external_exports.number()
-});
-var CreateScopedTokenInputSchema = external_exports.object({
-  userId: external_exports.string(),
-  name: external_exports.string(),
-  scopes: external_exports.array(TokenScopeSchema),
-  expiresAt: external_exports.number().optional()
-});
-var CreateScopedTokenResultSchema = external_exports.object({
-  token: external_exports.string(),
-  record: ScopedTokenSummarySchema
-});
 var OauthSessionSummarySchema = external_exports.object({
   id: external_exports.string(),
   userId: external_exports.string(),
@@ -70150,18 +70474,6 @@ var userManagementCapability = {
       auth: "admin",
       access: "delete"
     }),
-    createScopedToken: method(CreateScopedTokenInputSchema, CreateScopedTokenResultSchema, {
-      kind: "mutation",
-      auth: "admin",
-      access: "create"
-    }),
-    revokeScopedToken: method(external_exports.object({ id: external_exports.string() }), external_exports.object({ success: external_exports.literal(true) }), {
-      kind: "mutation",
-      auth: "admin",
-      access: "delete"
-    }),
-    validateScopedToken: method(external_exports.object({ token: external_exports.string() }), ScopedTokenSummarySchema.nullable(), { access: "view" }),
-    listScopedTokens: method(external_exports.object({ userId: external_exports.string() }), external_exports.array(ScopedTokenSummarySchema), { auth: "admin" }),
     setupTotp: method(external_exports.object({ userId: external_exports.string() }), TotpSetupResultSchema, {
       kind: "mutation",
       auth: "admin",
@@ -74839,7 +75151,7 @@ var METHOD_ACCESS_MAP = Object.freeze({
     capName: "llm",
     capScope: "system",
     addonId: null,
-    access: "view"
+    access: "create"
   },
   "llm.listNodeModels": {
     capName: "llm",
@@ -75141,7 +75453,19 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
-  "logDestination.query": {
+  "logDestination.cancelRead": {
+    capName: "log-destination",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "logDestination.describeRead": {
+    capName: "log-destination",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "logDestination.read": {
     capName: "log-destination",
     capScope: "system",
     addonId: null,
@@ -79503,12 +79827,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
-  "userManagement.createScopedToken": {
-    capName: "user-management",
-    capScope: "system",
-    addonId: null,
-    access: "create"
-  },
   "userManagement.createUser": {
     capName: "user-management",
     capScope: "system",
@@ -79557,12 +79875,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
-  "userManagement.listScopedTokens": {
-    capName: "user-management",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
   "userManagement.listUsers": {
     capName: "user-management",
     capScope: "system",
@@ -79617,12 +79929,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "delete"
   },
-  "userManagement.revokeScopedToken": {
-    capName: "user-management",
-    capScope: "system",
-    addonId: null,
-    access: "delete"
-  },
   "userManagement.setupTotp": {
     capName: "user-management",
     capScope: "system",
@@ -79653,12 +79959,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
-  "userManagement.validateScopedToken": {
-    capName: "user-management",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
   "userManagement.verifyTotp": {
     capName: "user-management",
     capScope: "system",
@@ -81222,6 +81522,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
+  "logDestination.read": [{
+    name: "deviceId",
+    form: "single",
+    optional: true
+  }],
   "mediaPlayer.getStatus": [{
     name: "deviceId",
     form: "single",
@@ -82949,6 +83254,21 @@ var HISTORY_CATALOG = {
       deadband: 1
     }
   },
+  "alarm-panel": { "state": {
+    kind: "enum",
+    values: [
+      "disarmed",
+      "armed_home",
+      "armed_away",
+      "armed_night",
+      "armed_vacation",
+      "armed_custom_bypass",
+      "arming",
+      "disarming",
+      "pending",
+      "triggered"
+    ]
+  } },
   "ambient-light-sensor": { "lux": {
     kind: "gauge",
     unit: "lx",
@@ -82993,6 +83313,7 @@ var HISTORY_CATALOG = {
       minIntervalMs: 0
     }
   },
+  "connectivity": { "connected": { kind: "boolean" } },
   "contact": { "entryOpen": { kind: "boolean" } },
   "cover": { "position": {
     kind: "gauge",
@@ -83000,10 +83321,48 @@ var HISTORY_CATALOG = {
     minIntervalMs: 0
   } },
   "device-status": { "online": { kind: "boolean" } },
-  "dishwasher": { "progressPercent": {
-    kind: "gauge",
-    unit: "%",
-    deadband: 2
+  "dishwasher": {
+    "progressPercent": {
+      kind: "gauge",
+      unit: "%",
+      deadband: 2
+    },
+    "state": {
+      kind: "enum",
+      values: [
+        "idle",
+        "running",
+        "paused",
+        "finished",
+        "error",
+        "unavailable"
+      ]
+    },
+    "operationState": {
+      kind: "enum",
+      values: [
+        "Inactive",
+        "Ready",
+        "DelayedStart",
+        "Run",
+        "Pause",
+        "ActionRequired",
+        "Finished",
+        "Error",
+        "Aborting"
+      ]
+    },
+    "remainingSeconds": {
+      kind: "gauge",
+      unit: "s",
+      minIntervalMs: 6e4
+    },
+    "doorOpen": { kind: "boolean" },
+    "powerOn": { kind: "boolean" }
+  },
+  "enum-sensor": { "value": {
+    kind: "enum",
+    skipWhenSet: "format"
   } },
   "fan-control": {
     "percentage": {
@@ -83038,6 +83397,24 @@ var HISTORY_CATALOG = {
     unit: "%",
     deadband: 2
   } },
+  "lock-control": { "state": {
+    kind: "enum",
+    values: [
+      "locked",
+      "unlocked",
+      "locking",
+      "unlocking",
+      "jammed"
+    ]
+  } },
+  "media-player": {
+    "volumeLevel": {
+      kind: "gauge",
+      unit: "%",
+      deadband: 1
+    },
+    "isMuted": { kind: "boolean" }
+  },
   "motion": { "detected": {
     kind: "boolean",
     excludeDeviceTypes: [DeviceType.Camera]
@@ -83124,6 +83501,24 @@ var HISTORY_CATALOG = {
     deadband: 0.1
   } },
   "smoke": { "detected": { kind: "boolean" } },
+  "stream-params": {
+    "main.bitrate": {
+      kind: "gauge",
+      unit: "kbps"
+    },
+    "main.framerate": {
+      kind: "gauge",
+      unit: "fps"
+    },
+    "sub.bitrate": {
+      kind: "gauge",
+      unit: "kbps"
+    },
+    "sub.framerate": {
+      kind: "gauge",
+      unit: "fps"
+    }
+  },
   "switch": { "on": { kind: "boolean" } },
   "tamper": { "tampered": { kind: "boolean" } },
   "temperature-sensor": { "celsius": {
@@ -85976,6 +86371,23 @@ function resolveLoginServer(flag, positionals, env) {
   return flagged ?? positional ?? (fromEnv ? normalizeHubAddress(fromEnv) : void 0);
 }
 
+// src/commands/login-legacy-flags.ts
+var LEGACY_LOGIN_FLAG_OPTIONS = {
+  admin: { type: "boolean" },
+  "admin-days": { type: "string" }
+};
+var LEGACY_LOGIN_FLAG_MESSAGES = {
+  admin: "--admin is ignored: one login, one token \u2014 drop --admin (admin rights follow your account).",
+  "admin-days": "--admin-days is ignored: one login, one token \u2014 drop --admin-days (the session renews itself)."
+};
+function legacyLoginFlagWarnings(values) {
+  const names = Object.keys(LEGACY_LOGIN_FLAG_MESSAGES).filter(isLegacyFlagName);
+  return names.filter((name) => values[name] !== void 0).map((name) => LEGACY_LOGIN_FLAG_MESSAGES[name]);
+}
+function isLegacyFlagName(name) {
+  return name in LEGACY_LOGIN_FLAG_OPTIONS;
+}
+
 // src/commands/auth.ts
 import * as clack from "@clack/prompts";
 import {
@@ -86154,7 +86566,7 @@ function isLoginPayload(value) {
 function revocationFor(session) {
   if (session.tokenId) {
     return {
-      procedure: "userManagement.revokeScopedToken",
+      procedure: "auth.revokeToken",
       input: { id: session.tokenId },
       bearer: "fresh"
     };
@@ -87466,9 +87878,7 @@ function buildCommands() {
         "  -n, --namespace <ns>   Ignored (kept so old scripts do not fail): hubs are found over mDNS",
         "  -u, --username <name>  Username (skips prompt)",
         "  -p, --password <pwd>   Password (skips prompt \u2014 prefer letting the CLI prompt)",
-        `  --token-name <name>    Ignored (kept for scripts); login uses your hub session JWT`,
-        "      --admin             Ignored (kept for muscle memory); admin follows your account role",
-        "      --admin-days <n>    Ignored (kept for muscle memory); one login, one token format"
+        `  --token-name <name>    Ignored (kept for scripts); login uses your hub session JWT`
       ].join("\n")
     },
     {
@@ -87693,10 +88103,9 @@ async function runLogin(args) {
       username: { type: "string", short: "u" },
       password: { type: "string", short: "p" },
       "token-name": { type: "string" },
-      // Accepted-and-ignored: role comes from the logged-in user (D884). Operators
-      // still type `camstack login --admin <host>` from muscle memory — never fail.
-      admin: { type: "boolean" },
-      "admin-days": { type: "string" },
+      // Removed (D895), still parsed so an old script does not abort: each one
+      // present prints a one-line warning and the login goes on.
+      ...LEGACY_LOGIN_FLAG_OPTIONS,
       // Accepted-and-ignored: `--no-verify` is a `deploy`-only flag (skip the
       // post-deploy health gate). Login has no verify step, but operators
       // muscle-memory it in — we swallow it here so `camstack login --no-verify`
@@ -87717,6 +88126,7 @@ async function runLogin(args) {
   if (stringOpt(parsed.values, "namespace") !== void 0) {
     console.warn("--namespace is ignored: hubs are found over mDNS, not the mesh channel.");
   }
+  for (const warning of legacyLoginFlagWarnings(parsed.values)) console.warn(warning);
   await loginCommand({
     ...explicitServer ? { server: explicitServer } : {},
     ...optionalString(parsed.values, "username"),