@camstack/core 0.1.33 → 0.1.35

package/dist/index.js

@@ -37,7 +37,7 @@ let node_vm = require("node:vm");
 node_vm = require_chunk.__toESM(node_vm);
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
-//#region ../types/dist/index-DVKPWMwv.mjs
+//#region ../types/dist/index-BBVUwOlZ.mjs
 var MODEL_FORMATS = [
 	"onnx",
 	"coreml",
@@ -898,7 +898,7 @@ var DecodedFrameSchema = zod.z.object({
 	]),
 	timestamp: zod.z.number()
 });
-var BrokerStatusSchema = zod.z.enum([
+var BrokerStatusSchema$1 = zod.z.enum([
 	"idle",
 	"connecting",
 	"streaming",
@@ -906,7 +906,7 @@ var BrokerStatusSchema = zod.z.enum([
 	"stopped"
 ]);
 var BrokerStatsSchema = zod.z.object({
-	status: BrokerStatusSchema,
+	status: BrokerStatusSchema$1,
 	inputFps: zod.z.number(),
 	decodeFps: zod.z.number(),
 	encodedSubscribers: zod.z.number(),
@@ -1006,6 +1006,37 @@ zod.z.enum([
 	"disabled",
 	"waking"
 ]);
+var VideoCodecTargetSchema = zod.z.enum([
+	"H264",
+	"H265",
+	"auto"
+]);
+var AudioCodecTargetSchema = zod.z.enum([
+	"AAC",
+	"Opus",
+	"PCMU",
+	"none"
+]);
+var MaxResolutionSchema = zod.z.object({
+	width: zod.z.number().int().positive(),
+	height: zod.z.number().int().positive()
+});
+var GetStreamWithCodecInputSchema = zod.z.object({
+	deviceId: zod.z.number().int().nonnegative(),
+	videoCodec: VideoCodecTargetSchema,
+	audioCodec: AudioCodecTargetSchema.optional(),
+	maxResolution: MaxResolutionSchema.optional(),
+	tag: zod.z.string().optional()
+});
+var RtpSourceSchema = zod.z.object({
+	url: zod.z.string(),
+	videoCodec: zod.z.enum(["H264", "H265"]),
+	audioCodec: zod.z.string(),
+	resolution: MaxResolutionSchema,
+	transcoded: zod.z.boolean(),
+	encoder: zod.z.string(),
+	pipelineKey: zod.z.string()
+});
 method(zod.z.object({
 	deviceId: zod.z.number().int().nonnegative(),
 	camStreamId: zod.z.string().min(1),
@@ -1015,28 +1046,8 @@ method(zod.z.object({
 	resolution: CamStreamResolutionSchema.optional(),
 	fps: zod.z.number().positive().optional(),
 	label: zod.z.string().optional(),
-	/**
-	* Device-level features that the broker / manager / snapshot
-	* orchestrator consult to derive per-stream policy (e.g.
-	* `BatteryOperated` → relax stall watchdog, default pre-buffer
-	* to off, raise snapshot rate-limit). Single source of truth —
-	* publishers no longer set per-stream flags like `allowStall`.
-	*/
 	deviceFeatures: zod.z.array(zod.z.string()).optional(),
-	/**
-	* Whether this stream participates in the broker's automatic
-	* profile assignment. Defaults `true`. Publishers set `false` for
-	* streams that should be SELECTABLE but not auto-picked — e.g.
-	* Reolink publishes native Baichuan as eligible and RTSP/RTMP
-	* mirrors as ineligible (still assignable manually via
-	* `assignProfile`).
-	*/
 	autoEligible: zod.z.boolean().optional(),
-	/**
-	* Transport-specific opaque metadata stashed alongside the stream
-	* record. `pull-rfc4571` publishers put the SDP here so the broker
-	* reader can route packets without an in-band DESCRIBE phase.
-	*/
 	metadata: zod.z.record(zod.z.string(), zod.z.unknown()).optional()
 }), zod.z.object({ success: zod.z.literal(true) }), {
 	kind: "mutation",
@@ -1080,7 +1091,16 @@ method(zod.z.object({
 }), method(zod.z.object({
 	streamId: zod.z.string(),
 	format: StreamFormatSchema
-}), zod.z.object({ url: zod.z.string() })), method(zod.z.object({ brokerId: zod.z.string() }), zod.z.custom()), method(zod.z.object({
+}), zod.z.object({ url: zod.z.string() })), method(GetStreamWithCodecInputSchema, RtpSourceSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(zod.z.object({ pipelineKey: zod.z.string() }), zod.z.object({
+	released: zod.z.boolean(),
+	refcount: zod.z.number().int().nonnegative()
+}), {
+	kind: "mutation",
+	auth: "admin"
+}), method(zod.z.object({ brokerId: zod.z.string() }), zod.z.custom()), method(zod.z.object({
 	brokerId: zod.z.string(),
 	seconds: zod.z.number().min(0).max(30)
 }), zod.z.void(), {
@@ -2378,7 +2398,8 @@ var CollectionColumnSchema = zod.z.object({
 		"TEXT",
 		"INTEGER",
 		"REAL",
-		"JSON"
+		"JSON",
+		"BOOLEAN"
 	]),
 	primaryKey: zod.z.boolean().optional(),
 	notNull: zod.z.boolean().optional(),
@@ -2450,7 +2471,206 @@ method(LogEntrySchema, zod.z.void(), { kind: "mutation" }), method(zod.z.object(
 	limit: zod.z.number().optional(),
 	tags: zod.z.record(zod.z.string(), zod.z.string()).optional()
 }), zod.z.array(LogEntrySchema).readonly());
-method(zod.z.void(), zod.z.string()), method(zod.z.void(), zod.z.string());
+var StaticDirOutputSchema = zod.z.object({ staticDir: zod.z.string() });
+var VersionOutputSchema = zod.z.object({ version: zod.z.string() });
+method(zod.z.void(), StaticDirOutputSchema), method(zod.z.void(), VersionOutputSchema);
+var SsoBridgeClaimsSchema = zod.z.object({
+	userId: zod.z.string(),
+	username: zod.z.string(),
+	isAdmin: zod.z.boolean(),
+	provider: zod.z.string(),
+	email: zod.z.string().optional(),
+	displayName: zod.z.string().optional(),
+	/**
+	* Public HTTPS URL of the hub that issued this token. Used by
+	* cloud-mode OAuth proxies (Alexa Smart Home Lambda, future Google
+	* Home Lambda) to route a request back to the originating hub
+	* without holding routing state of their own. The Lambda decodes the
+	* JWT WITHOUT verifying the signature — the hub re-verifies on every
+	* inbound call so trust still rests with the signing hub.
+	*/
+	hubUrl: zod.z.string().optional()
+});
+method(zod.z.object({
+	claims: SsoBridgeClaimsSchema,
+	ttlSec: zod.z.number().int().positive().optional()
+}), zod.z.object({ token: zod.z.string() })), method(zod.z.object({ token: zod.z.string() }), SsoBridgeClaimsSchema.nullable());
+var PasskeySummarySchema = zod.z.object({
+	credentialId: zod.z.string(),
+	label: zod.z.string(),
+	createdAt: zod.z.number(),
+	lastUsedAt: zod.z.number().nullable(),
+	transports: zod.z.array(zod.z.string()).default([])
+});
+method(zod.z.object({
+	userId: zod.z.string(),
+	username: zod.z.string()
+}), zod.z.object({ optionsJSON: zod.z.record(zod.z.string(), zod.z.unknown()) }), {
+	kind: "mutation",
+	auth: "admin",
+	access: "create"
+}), method(zod.z.object({
+	userId: zod.z.string(),
+	/** RegistrationResponseJSON from the browser. */
+	response: zod.z.record(zod.z.string(), zod.z.unknown()),
+	/** Operator-visible label (e.g. "MacBook Touch ID"). */
+	label: zod.z.string()
+}), zod.z.object({
+	success: zod.z.literal(true),
+	credentialId: zod.z.string()
+}), {
+	kind: "mutation",
+	auth: "admin",
+	access: "create"
+}), method(zod.z.object({ userId: zod.z.string().optional() }), zod.z.object({ optionsJSON: zod.z.record(zod.z.string(), zod.z.unknown()) }), {
+	kind: "mutation",
+	access: "view"
+}), method(zod.z.object({
+	/** Required — the user the assertion belongs to (verified). */
+	userId: zod.z.string(),
+	/** AuthenticationResponseJSON from the browser. */
+	response: zod.z.record(zod.z.string(), zod.z.unknown())
+}), zod.z.object({ verified: zod.z.boolean() }), {
+	kind: "mutation",
+	access: "view"
+}), method(zod.z.object({ userId: zod.z.string() }), zod.z.array(PasskeySummarySchema), { auth: "admin" }), method(zod.z.object({
+	userId: zod.z.string(),
+	credentialId: zod.z.string()
+}), zod.z.object({ success: zod.z.literal(true) }), {
+	kind: "mutation",
+	auth: "admin",
+	access: "delete"
+});
+var EmailAddressSchema = zod.z.email();
+var SendEmailInputSchema = zod.z.object({
+	to: zod.z.union([EmailAddressSchema, zod.z.array(EmailAddressSchema).min(1)]),
+	cc: zod.z.array(EmailAddressSchema).optional(),
+	bcc: zod.z.array(EmailAddressSchema).optional(),
+	/** RFC 5322 `From` field. Most relays will reject if the domain
+	*  isn't authorised — the addon is responsible for substituting a
+	*  sane default when omitted. */
+	from: zod.z.string().optional(),
+	/** Optional `Reply-To` override. */
+	replyTo: zod.z.string().optional(),
+	subject: zod.z.string(),
+	/** Plain-text body. Required even when `html` is present (fallback
+	*  for clients that strip HTML — including most spam filters). */
+	text: zod.z.string(),
+	/** Optional HTML body. Renders alongside `text` as multi-part. */
+	html: zod.z.string().optional()
+});
+var SendEmailResultSchema = zod.z.object({
+	messageId: zod.z.string(),
+	accepted: zod.z.array(EmailAddressSchema).default([]),
+	rejected: zod.z.array(EmailAddressSchema).default([])
+});
+var SmtpStatusSchema = zod.z.object({
+	/** True iff the addon has successfully verified the relay. */
+	ready: zod.z.boolean(),
+	/** Operator-visible host string (no credentials). */
+	host: zod.z.string(),
+	/** Last error message reported by the relay, when not ready. */
+	error: zod.z.string().optional(),
+	/** Last successful verify timestamp (unix ms). */
+	lastVerifiedAt: zod.z.number().optional()
+});
+method(SendEmailInputSchema, SendEmailResultSchema, {
+	kind: "mutation",
+	auth: "admin",
+	access: "create"
+}), method(zod.z.void(), SmtpStatusSchema, {
+	kind: "mutation",
+	auth: "admin",
+	access: "view"
+}), method(zod.z.void(), SmtpStatusSchema, { auth: "admin" });
+var BrokerKindSchema = zod.z.enum(["external", "embedded"]);
+var BrokerStatusSchema = zod.z.enum([
+	"connected",
+	"disconnected",
+	"auth-failed",
+	"unreachable",
+	"tls-error"
+]);
+var BrokerInfoSchema = zod.z.object({
+	id: zod.z.string(),
+	name: zod.z.string(),
+	url: zod.z.string(),
+	kind: BrokerKindSchema,
+	status: BrokerStatusSchema,
+	latencyMs: zod.z.number().nullable(),
+	error: zod.z.string().optional(),
+	/** Embedded brokers only: number of MQTT clients currently connected. */
+	connectedClients: zod.z.number().int().nonnegative().optional(),
+	/** Epoch ms of the last live probe (external) or aedes snapshot (embedded). */
+	lastCheckedAt: zod.z.number().optional()
+});
+var BrokerConnectionDetailsSchema = zod.z.object({
+	url: zod.z.string(),
+	username: zod.z.string().optional(),
+	password: zod.z.string().optional(),
+	/**
+	* Suggested prefix for `clientId`. Each consumer should suffix this
+	* with its own discriminator (addon id, instance id) so reconnects
+	* don't kick each other off (MQTT spec: clientId must be unique per
+	* broker).
+	*/
+	clientIdPrefix: zod.z.string().optional()
+});
+var AddBrokerInputSchema = zod.z.object({
+	name: zod.z.string().min(1),
+	url: zod.z.string().regex(/^(mqtt|mqtts|ws|wss):\/\//, "URL must start with mqtt(s):// or ws(s)://"),
+	username: zod.z.string().optional(),
+	password: zod.z.string().optional(),
+	clientIdPrefix: zod.z.string().optional()
+});
+var AddBrokerResultSchema = zod.z.object({ id: zod.z.string() });
+var IdInputSchema = zod.z.object({ id: zod.z.string() });
+var TestResultSchema = zod.z.discriminatedUnion("ok", [zod.z.object({
+	ok: zod.z.literal(true),
+	latencyMs: zod.z.number()
+}), zod.z.object({
+	ok: zod.z.literal(false),
+	error: zod.z.string()
+})]);
+var StartEmbeddedInputSchema = zod.z.object({
+	port: zod.z.number().int().min(1).max(65535).default(1883),
+	/** Allow anonymous connect (no username/password). Default: false. */
+	allowAnonymous: zod.z.boolean().default(false),
+	/** Optional shared username/password for clients. */
+	username: zod.z.string().optional(),
+	password: zod.z.string().optional()
+});
+var StartEmbeddedResultSchema = zod.z.object({
+	id: zod.z.string(),
+	url: zod.z.string()
+});
+var StatusSchema = zod.z.object({
+	brokerCount: zod.z.number(),
+	embeddedRunning: zod.z.boolean()
+});
+method(zod.z.void(), zod.z.array(BrokerInfoSchema)), method(IdInputSchema, BrokerConnectionDetailsSchema), method(AddBrokerInputSchema, AddBrokerResultSchema, { kind: "mutation" }), method(IdInputSchema, zod.z.void(), { kind: "mutation" }), method(IdInputSchema, TestResultSchema, { kind: "mutation" }), method(StartEmbeddedInputSchema, StartEmbeddedResultSchema, { kind: "mutation" }), method(IdInputSchema, zod.z.void(), { kind: "mutation" }), method(zod.z.void(), StatusSchema);
+var LinkStateSchema = zod.z.enum([
+	"unlinked",
+	"linked",
+	"error"
+]);
+var DeviceExportStatusSchema = zod.z.object({
+	linkState: LinkStateSchema,
+	exposedDeviceCount: zod.z.number(),
+	error: zod.z.string().optional()
+});
+var DeviceKindSchema = zod.z.string();
+var ExposedDeviceSchema = zod.z.object({
+	deviceId: zod.z.string(),
+	exposedAs: zod.z.string().optional(),
+	capabilities: zod.z.array(zod.z.string()).optional()
+});
+var ExposeInputSchema = zod.z.object({
+	deviceId: zod.z.string(),
+	capabilities: zod.z.array(zod.z.string()).optional()
+});
+var UnexposeInputSchema = zod.z.object({ deviceId: zod.z.string() });
+method(zod.z.void(), DeviceExportStatusSchema), method(zod.z.void(), zod.z.array(DeviceKindSchema)), method(zod.z.void(), zod.z.array(ExposedDeviceSchema)), method(ExposeInputSchema, zod.z.void(), { kind: "mutation" }), method(UnexposeInputSchema, zod.z.void(), { kind: "mutation" });
 var AddonPageDeclarationSchema$1 = zod.z.object({
 	id: zod.z.string(),
 	label: zod.z.string(),
@@ -2554,9 +2774,41 @@ var AddonHttpRouteSchema = zod.z.object({
 		"DELETE",
 		"PATCH"
 	]),
-	path: zod.z.string()
+	path: zod.z.string(),
+	access: zod.z.enum([
+		"public",
+		"authenticated",
+		"admin"
+	]).optional(),
+	description: zod.z.string().optional()
 });
-method(zod.z.void(), zod.z.array(AddonHttpRouteSchema));
+var InvokeRequestSchema = zod.z.object({
+	method: zod.z.string(),
+	path: zod.z.string(),
+	params: zod.z.record(zod.z.string(), zod.z.string()),
+	query: zod.z.record(zod.z.string(), zod.z.string()),
+	body: zod.z.unknown(),
+	headers: zod.z.record(zod.z.string(), zod.z.string()),
+	user: zod.z.object({
+		id: zod.z.string(),
+		username: zod.z.string(),
+		isAdmin: zod.z.boolean()
+	}).optional(),
+	scopedToken: zod.z.unknown().optional()
+});
+var InvokeReplyEnvelopeSchema = zod.z.object({
+	status: zod.z.number().int(),
+	headers: zod.z.record(zod.z.string(), zod.z.string()),
+	/** When set, the hub MUST `reply.redirect(redirectUrl)` instead of
+	*  sending `body`. Status defaults to 302 when this is set unless
+	*  the handler called `reply.code(...)` explicitly. */
+	redirectUrl: zod.z.string().nullable(),
+	/** JSON-serializable body. `undefined` is treated as "no body". */
+	body: zod.z.unknown().optional(),
+	/** Set when the handler called `reply.type(mime)`. */
+	contentType: zod.z.string().optional()
+});
+method(zod.z.void(), zod.z.array(AddonHttpRouteSchema)), method(InvokeRequestSchema, InvokeReplyEnvelopeSchema, { kind: "mutation" });
 method(zod.z.object({ codec: zod.z.string() }), zod.z.boolean()), method(zod.z.void(), zod.z.object({
 	id: zod.z.string(),
 	name: zod.z.string(),
@@ -2674,6 +2926,14 @@ DeviceType.Camera, method(zod.z.object({ deviceId: zod.z.number().int().nonnegat
 }), zod.z.object({
 	sessionId: zod.z.string(),
 	sdpOffer: zod.z.string()
+}), { kind: "mutation" }), method(zod.z.object({
+	deviceId: zod.z.number().int().nonnegative(),
+	target: WebrtcStreamTargetSchema.optional(),
+	sdpOffer: zod.z.string(),
+	sessionId: zod.z.string().optional()
+}), zod.z.object({
+	sessionId: zod.z.string(),
+	sdpAnswer: zod.z.string()
 }), { kind: "mutation" }), method(zod.z.object({
 	deviceId: zod.z.number().int().nonnegative(),
 	sessionId: zod.z.string(),
@@ -3012,12 +3272,12 @@ method(zod.z.void(), zod.z.array(AudioCodecInfoSchema).readonly()), method(zod.z
 }), zod.z.array(AudioEncodedChunkSchema), { kind: "mutation" }), method(zod.z.void(), zod.z.array(SessionInventoryEntrySchema).readonly());
 var EmbeddingResultSchema = zod.z.object({
 	embedding: zod.z.array(zod.z.number()),
-	dimensions: zod.z.number()
+	inferenceMs: zod.z.number()
 });
 var EmbeddingInfoSchema = zod.z.object({
 	modelId: zod.z.string(),
-	dimensions: zod.z.number(),
-	inputSize: zod.z.number()
+	embeddingDim: zod.z.number(),
+	ready: zod.z.boolean()
 });
 method(zod.z.object({
 	crop: zod.z.instanceof(Uint8Array),
@@ -3298,7 +3558,14 @@ var AuthResultSchema = zod.z.object({
 	username: zod.z.string(),
 	email: zod.z.string().optional(),
 	displayName: zod.z.string().optional(),
-	roles: zod.z.array(zod.z.string()).optional()
+	/**
+	* Whether the authenticating user is an admin. The auth-provider
+	* surface returns this so the server's login flow can mint a JWT
+	* with the correct bypass flag. Non-admin users authenticated via
+	* an external IdP still need their scopes assigned by an admin via
+	* `setUserScopes` — the SSO flow doesn't carry permissions.
+	*/
+	isAdmin: zod.z.boolean().default(false)
 });
 method(zod.z.object({
 	username: zod.z.string(),
@@ -3307,6 +3574,14 @@ method(zod.z.object({
 var AuthProviderInfoSchema = zod.z.object({
 	/** Stable id matching the addon id (used for `getLoginUrl({addonId,…})`). */
 	addonId: zod.z.string(),
+	/**
+	* Per-instance id when one addon registers multiple "logical"
+	* providers (e.g. OIDC with Google + Microsoft + custom). The login
+	* URL becomes `/addon/${addonId}/${instanceId}/start` — handler reads
+	* `:instanceId` from the route. Empty/unset means the addon is a
+	* single-instance provider; the URL is `/addon/${addonId}/start`.
+	*/
+	instanceId: zod.z.string().optional(),
 	/** Display label shown on the login button + admin row. */
 	displayName: zod.z.string(),
 	/** Optional iconography hint (lucide-react icon name OR emoji). */
@@ -3317,6 +3592,8 @@ var AuthProviderInfoSchema = zod.z.object({
 	/** When true, the provider exposes a credential-form login flow
 	*  (`validateCredentials` accepts username + password). */
 	hasCredentialFlow: zod.z.boolean(),
+	/** Provider kind, drives admin-UI hint dispatch (oidc / saml / totp / …). */
+	kind: zod.z.string().optional(),
 	/** Operator-facing status string (e.g. "Connected to https://login.acme.com"). */
 	status: zod.z.string().optional(),
 	/** When false, the provider is registered but disabled by config; the
@@ -3341,7 +3618,20 @@ var NetworkAccessStatusSchema = zod.z.object({
 	endpoint: NetworkEndpointSchema.nullable(),
 	error: zod.z.string().optional()
 });
-method(zod.z.void(), NetworkEndpointSchema, { kind: "mutation" }), method(zod.z.void(), zod.z.void(), { kind: "mutation" }), method(zod.z.void(), NetworkEndpointSchema.nullable()), method(zod.z.void(), NetworkAccessStatusSchema);
+var NetworkEndpointEntrySchema = NetworkEndpointSchema.extend({
+	/**
+	* Stable id within the provider — typically `<mode>-<sourcePort>` so
+	* the orchestrator can dedupe across `listEndpoints` polls.
+	*/
+	id: zod.z.string(),
+	/** Operator-facing label (mirrors `MeshEndpoint.label`). */
+	label: zod.z.string(),
+	/** Optional provider-specific mode tag, used for icon/colour in admin UI. */
+	mode: zod.z.string().optional(),
+	/** Originating local port the ingress fronts (informational). */
+	sourcePort: zod.z.number().optional()
+});
+method(zod.z.void(), NetworkEndpointSchema, { kind: "mutation" }), method(zod.z.void(), zod.z.void(), { kind: "mutation" }), method(zod.z.void(), NetworkEndpointSchema.nullable()), method(zod.z.void(), NetworkAccessStatusSchema), method(zod.z.void(), zod.z.array(NetworkEndpointEntrySchema).readonly());
 var RemoteAccessEndpointSchema = zod.z.object({
 	url: zod.z.string(),
 	hostname: zod.z.string(),
@@ -3454,28 +3744,78 @@ method(zod.z.object({
 	success: zod.z.boolean(),
 	error: zod.z.string().optional()
 }), { kind: "mutation" });
+var NotificationRuleConditionsSchema = zod.z.object({
+	deviceIds: zod.z.array(zod.z.number()).readonly().optional(),
+	classNames: zod.z.array(zod.z.string()).readonly().optional(),
+	zoneIds: zod.z.array(zod.z.string()).readonly().optional(),
+	minConfidence: zod.z.number().optional(),
+	source: zod.z.enum([
+		"pipeline",
+		"onboard",
+		"any"
+	]).optional(),
+	schedule: zod.z.object({
+		days: zod.z.array(zod.z.number()).readonly(),
+		startHour: zod.z.number(),
+		endHour: zod.z.number()
+	}).optional(),
+	cooldownSeconds: zod.z.number().optional(),
+	minDwellSeconds: zod.z.number().optional()
+});
+var NotificationRuleTemplateSchema = zod.z.object({
+	title: zod.z.string(),
+	body: zod.z.string(),
+	imageMode: zod.z.enum([
+		"crop",
+		"annotated",
+		"full",
+		"none"
+	])
+});
 var NotificationRuleSchema = zod.z.object({
 	id: zod.z.string(),
 	name: zod.z.string(),
 	enabled: zod.z.boolean(),
-	conditions: zod.z.record(zod.z.string(), zod.z.unknown()),
-	actions: zod.z.array(zod.z.record(zod.z.string(), zod.z.unknown()))
+	eventTypes: zod.z.array(zod.z.string()).readonly(),
+	conditions: NotificationRuleConditionsSchema,
+	outputs: zod.z.array(zod.z.string()).readonly(),
+	template: NotificationRuleTemplateSchema.optional(),
+	priority: zod.z.enum([
+		"low",
+		"normal",
+		"high",
+		"critical"
+	])
+});
+var NotificationTestResultSchema = zod.z.object({
+	ruleId: zod.z.string(),
+	eventId: zod.z.string(),
+	timestamp: zod.z.number(),
+	wouldFire: zod.z.boolean(),
+	reason: zod.z.string().optional()
 });
 var NotificationHistoryEntrySchema = zod.z.object({
 	id: zod.z.string(),
 	ruleId: zod.z.string(),
+	ruleName: zod.z.string(),
+	eventId: zod.z.string(),
 	timestamp: zod.z.number(),
-	deviceId: zod.z.number().optional(),
+	outputs: zod.z.array(zod.z.string()).readonly(),
 	success: zod.z.boolean(),
-	error: zod.z.string().optional()
+	error: zod.z.string().optional(),
+	deviceId: zod.z.number().optional()
 });
-method(zod.z.void(), zod.z.array(NotificationRuleSchema).readonly()), method(NotificationRuleSchema, zod.z.void(), { kind: "mutation" }), method(zod.z.object({ ruleId: zod.z.string() }), zod.z.void(), { kind: "mutation" }), method(zod.z.object({
-	ruleId: zod.z.string(),
-	lookbackMinutes: zod.z.number()
-}), zod.z.array(zod.z.record(zod.z.string(), zod.z.unknown())), { kind: "mutation" }), method(zod.z.object({
+var NotificationHistoryFilterSchema = zod.z.object({
 	ruleId: zod.z.string().optional(),
+	deviceId: zod.z.number().optional(),
+	from: zod.z.number().optional(),
+	to: zod.z.number().optional(),
 	limit: zod.z.number().optional()
-}), zod.z.array(NotificationHistoryEntrySchema));
+});
+method(zod.z.void(), zod.z.object({ rules: zod.z.array(NotificationRuleSchema).readonly() })), method(zod.z.object({ rule: NotificationRuleSchema }), zod.z.object({ success: zod.z.literal(true) }), { kind: "mutation" }), method(zod.z.object({ ruleId: zod.z.string() }), zod.z.object({ success: zod.z.literal(true) }), { kind: "mutation" }), method(zod.z.object({
+	ruleId: zod.z.string(),
+	lookbackMinutes: zod.z.number()
+}), zod.z.object({ results: zod.z.array(NotificationTestResultSchema).readonly() }), { kind: "mutation" }), method(zod.z.object({ filter: NotificationHistoryFilterSchema.optional() }), zod.z.object({ entries: zod.z.array(NotificationHistoryEntrySchema).readonly() }));
 var RecordingModeSchema = zod.z.enum([
 	"continuous",
 	"motion",
@@ -4163,6 +4503,22 @@ DeviceType.Camera, method(zod.z.object({ deviceId: zod.z.number() }), zod.z.obje
 }), zod.z.void(), {
 	kind: "mutation",
 	auth: "admin"
+}), method(zod.z.object({ deviceId: zod.z.number() }), zod.z.object({ sessionId: zod.z.string() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(zod.z.object({
+	deviceId: zod.z.number(),
+	/** PCM frames as little-endian s16, mono. Base64-encoded so
+	*  the payload survives tRPC JSON serialization. */
+	pcmBase64: zod.z.string(),
+	/** Sequence number for ordering / dropping out-of-order frames. */
+	sequenceNumber: zod.z.number().int()
+}), zod.z.object({ accepted: zod.z.boolean() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(zod.z.object({ deviceId: zod.z.number() }), zod.z.void(), {
+	kind: "mutation",
+	auth: "admin"
 }), zod.z.object({
 	deviceId: zod.z.number(),
 	status: IntercomStatusSchema
@@ -4214,6 +4570,40 @@ var HwAccelBackendInputSchema = zod.z.enum([
 	"none"
 ]).nullable().optional();
 var HwAccelResolutionSchema = zod.z.object({ preferred: zod.z.array(zod.z.string()).readonly() });
+var HardwareEncoderIdSchema = zod.z.enum([
+	"h264_videotoolbox",
+	"hevc_videotoolbox",
+	"h264_vaapi",
+	"hevc_vaapi",
+	"h264_nvenc",
+	"hevc_nvenc",
+	"h264_qsv",
+	"hevc_qsv",
+	"h264_amf",
+	"hevc_amf",
+	"libx264",
+	"libx265"
+]);
+var HardwareEncoderProbeSchema = zod.z.object({
+	encoder: HardwareEncoderIdSchema,
+	codec: zod.z.enum(["H264", "H265"]),
+	family: zod.z.enum([
+		"videotoolbox",
+		"vaapi",
+		"nvenc",
+		"qsv",
+		"amf",
+		"software"
+	]),
+	available: zod.z.boolean(),
+	reason: zod.z.string().optional()
+});
+var HardwareEncodersSchema = zod.z.object({
+	encoders: zod.z.array(HardwareEncoderProbeSchema).readonly(),
+	defaultH264: HardwareEncoderIdSchema,
+	defaultH265: HardwareEncoderIdSchema,
+	probedAt: zod.z.number()
+});
 var HardwarePlatformSchema = zod.z.enum([
 	"darwin",
 	"linux",
@@ -4276,7 +4666,10 @@ var ResolvedInferenceConfigSchema = zod.z.object({
 method(zod.z.void(), PlatformCapabilitiesSchema), method(zod.z.void(), HardwareInfoSchema), method(zod.z.object({ requirements: zod.z.array(ModelRequirementSchema).readonly() }), ResolvedInferenceConfigSchema), method(zod.z.object({
 	prefer: HwAccelBackendInputSchema,
 	nodeId: zod.z.string().optional()
-}), HwAccelResolutionSchema);
+}), HwAccelResolutionSchema), method(zod.z.void(), HardwareEncodersSchema), method(zod.z.void(), HardwareEncodersSchema, {
+	kind: "mutation",
+	auth: "admin"
+});
 var InterfaceKindEnum = zod.z.enum([
 	"lan",
 	"wifi",
@@ -4446,28 +4839,30 @@ var MeshStatusSchema = zod.z.object({
 	/** Last error from the daemon, when not joined. */
 	error: zod.z.string().optional()
 });
-var PublicIngressConfigSchema = zod.z.object({
-	/** Whether the provider should expose CamStack via its public
-	*  ingress (Tailscale Funnel, etc.). */
-	enabled: zod.z.boolean(),
-	/** Local port to forward. Auto-detected from the hub HTTP port
-	*  when omitted. */
-	port: zod.z.number().int().min(1).max(65535).optional()
-});
-var MeshIngressConfigSchema = zod.z.object({
-	/** Whether the provider should expose CamStack inside the mesh
-	*  via HTTPS (Tailscale Serve, etc.) instead of just raw IP. */
-	enabled: zod.z.boolean(),
-	/** Local port to forward. Auto-detected when omitted. */
-	port: zod.z.number().int().min(1).max(65535).optional()
-});
 method(zod.z.void(), MeshStatusSchema), method(zod.z.object({
 	/** Provider-specific auth key. For Tailscale this is the
 	*  `tskey-auth-*` token from admin.tailscale.com. */
 	authKey: zod.z.string().min(8),
 	/** Optional hostname override the host should advertise. */
 	hostname: zod.z.string().optional()
-}), zod.z.object({ joined: zod.z.literal(true) }), { kind: "mutation" }), method(zod.z.void(), zod.z.object({ left: zod.z.literal(true) }), { kind: "mutation" }), method(zod.z.void(), zod.z.object({ peers: zod.z.array(MeshPeerSchema).readonly() })), method(PublicIngressConfigSchema, zod.z.object({ success: zod.z.literal(true) }), { kind: "mutation" }), method(MeshIngressConfigSchema, zod.z.object({ success: zod.z.literal(true) }), { kind: "mutation" });
+}), zod.z.object({ joined: zod.z.literal(true) }), { kind: "mutation" }), method(zod.z.object({ 
+/** Optional hostname override the host should advertise once joined. */
+hostname: zod.z.string().optional() }), zod.z.object({ 
+/** Authentication URL the operator should open in a browser. */
+loginUrl: zod.z.string() }), { kind: "mutation" }), method(zod.z.void(), zod.z.object({ left: zod.z.literal(true) }), { kind: "mutation" }), method(zod.z.void(), zod.z.object({ peers: zod.z.array(MeshPeerSchema).readonly() })), method(zod.z.object({ 
+/** Optional auth key — when provided, probes the key validity
+*  against the provider's API. Omit when already joined to
+*  just ping the daemon. */
+authKey: zod.z.string().optional() }), zod.z.object({
+	ok: zod.z.boolean(),
+	/** Provider-side identifier resolved by the probe (tailnet
+	*  name for Tailscale, network id for ZeroTier, etc.). */
+	tenant: zod.z.string().optional(),
+	/** Daemon binary version, when reachable. */
+	daemonVersion: zod.z.string().optional(),
+	/** Human-readable error when `ok: false`. */
+	error: zod.z.string().optional()
+}), { kind: "mutation" });
 var MeshEndpointSchema = zod.z.object({
 	id: zod.z.string(),
 	label: zod.z.string(),
@@ -4500,35 +4895,58 @@ method(zod.z.void(), zod.z.array(MeshProviderInfoSchema).readonly()), method(zod
 	authKey: zod.z.string().min(8),
 	hostname: zod.z.string().optional()
 }), zod.z.object({ joined: zod.z.literal(true) }), { kind: "mutation" }), method(zod.z.object({ addonId: zod.z.string() }), zod.z.object({ success: zod.z.literal(true) }), { kind: "mutation" });
-var UserRoleSchema = zod.z.enum([
-	"admin",
-	"viewer",
-	"agent",
-	"scoped"
-]);
-var AllowedProviderSchema = zod.z.union([zod.z.literal("*"), zod.z.array(zod.z.string())]);
-var AllowedDevicesSchema = zod.z.record(zod.z.string(), zod.z.union([zod.z.literal("*"), zod.z.array(zod.z.string())]));
 var MethodAccessSchema = zod.z.enum([
 	"view",
 	"create",
 	"delete"
 ]);
-var TokenScopeSchema = zod.z.object({
-	type: zod.z.enum(["addon", "capability"]),
-	target: zod.z.string(),
-	access: zod.z.array(MethodAccessSchema).min(1)
-});
+var AllowedProviderSchema = zod.z.union([zod.z.literal("*"), zod.z.array(zod.z.string())]);
+var AllowedDevicesSchema = zod.z.record(zod.z.string(), zod.z.union([zod.z.literal("*"), zod.z.array(zod.z.string())]));
+var CapScopeSchema = zod.z.enum(["device", "system"]);
+var TokenScopeSchema = zod.z.discriminatedUnion("type", [
+	zod.z.object({
+		type: zod.z.literal("category"),
+		target: CapScopeSchema,
+		access: zod.z.array(MethodAccessSchema).min(1)
+	}),
+	zod.z.object({
+		type: zod.z.literal("capability"),
+		target: zod.z.string(),
+		access: zod.z.array(MethodAccessSchema).min(1)
+	}),
+	zod.z.object({
+		type: zod.z.literal("addon"),
+		target: zod.z.string(),
+		access: zod.z.array(MethodAccessSchema).min(1)
+	}),
+	zod.z.object({
+		type: zod.z.literal("device"),
+		/**
+		* One or more deviceIds (serialised as strings for wire-format
+		* consistency with the rest of the union). Matcher accepts if
+		* `input.deviceId` ∈ `targets`. Array shape avoids the row-explosion
+		* of one scope-per-device when granting access to a set of cameras.
+		*/
+		targets: zod.z.array(zod.z.string()).min(1),
+		access: zod.z.array(MethodAccessSchema).min(1)
+	})
+]);
 zod.z.object({
 	id: zod.z.string(),
 	username: zod.z.string(),
 	passwordHash: zod.z.string(),
-	role: UserRoleSchema,
+	/**
+	* Admin bypass. When true, the middleware skips the scope-access
+	* check entirely. There is no other axis of privilege; the legacy
+	* role enum collapsed onto this boolean in v2.
+	*/
+	isAdmin: zod.z.boolean().default(false),
 	allowedProviders: AllowedProviderSchema,
 	allowedDevices: AllowedDevicesSchema,
 	/**
-	* Scopes granted to this user. Admins bypass; their `scopes` is ignored.
-	* Non-admins (`viewer`, `agent`, `scoped`) without scopes are locked out
-	* of every protected call.
+	* Scopes granted to this user. Admins bypass; their `scopes` is
+	* ignored. Non-admins without scopes are locked out of every
+	* protected call.
 	*/
 	scopes: zod.z.array(TokenScopeSchema).default([]),
 	createdAt: zod.z.number(),
@@ -4537,7 +4955,7 @@ zod.z.object({
 zod.z.object({
 	id: zod.z.string(),
 	label: zod.z.string(),
-	role: UserRoleSchema,
+	isAdmin: zod.z.boolean().default(false),
 	allowedProviders: AllowedProviderSchema,
 	allowedDevices: AllowedDevicesSchema,
 	tokenHash: zod.z.string(),
@@ -4559,7 +4977,7 @@ zod.z.object({
 var UserSummarySchema = zod.z.object({
 	id: zod.z.string(),
 	username: zod.z.string(),
-	role: UserRoleSchema,
+	isAdmin: zod.z.boolean().default(false),
 	allowedProviders: zod.z.union([zod.z.array(zod.z.string()), zod.z.literal("*")]),
 	allowedDevices: zod.z.record(zod.z.string(), zod.z.union([zod.z.array(zod.z.string()), zod.z.literal("*")])),
 	scopes: zod.z.array(TokenScopeSchema).default([]),
@@ -4569,14 +4987,14 @@ var UserSummarySchema = zod.z.object({
 var CreateUserInputSchema = zod.z.object({
 	username: zod.z.string(),
 	password: zod.z.string().min(6),
-	role: UserRoleSchema,
+	isAdmin: zod.z.boolean().default(false),
 	allowedProviders: zod.z.union([zod.z.array(zod.z.string()), zod.z.literal("*")]).optional(),
 	allowedDevices: zod.z.record(zod.z.string(), zod.z.union([zod.z.array(zod.z.string()), zod.z.literal("*")])).optional(),
 	scopes: zod.z.array(TokenScopeSchema).optional()
 });
 var UpdateUserInputSchema = zod.z.object({
 	id: zod.z.string(),
-	role: UserRoleSchema.optional(),
+	isAdmin: zod.z.boolean().optional(),
 	allowedProviders: zod.z.union([zod.z.array(zod.z.string()), zod.z.literal("*")]).optional(),
 	allowedDevices: zod.z.record(zod.z.string(), zod.z.union([zod.z.array(zod.z.string()), zod.z.literal("*")])).optional(),
 	scopes: zod.z.array(TokenScopeSchema).optional()
@@ -4584,7 +5002,7 @@ var UpdateUserInputSchema = zod.z.object({
 var ApiKeySummarySchema = zod.z.object({
 	id: zod.z.string(),
 	label: zod.z.string(),
-	role: UserRoleSchema,
+	isAdmin: zod.z.boolean().default(false),
 	allowedProviders: zod.z.union([zod.z.array(zod.z.string()), zod.z.literal("*")]).optional(),
 	allowedDevices: zod.z.record(zod.z.string(), zod.z.union([zod.z.array(zod.z.string()), zod.z.literal("*")])).optional(),
 	tokenPrefix: zod.z.string(),
@@ -4593,7 +5011,7 @@ var ApiKeySummarySchema = zod.z.object({
 });
 var CreateApiKeyInputSchema = zod.z.object({
 	label: zod.z.string(),
-	role: UserRoleSchema,
+	isAdmin: zod.z.boolean().default(false),
 	allowedProviders: zod.z.union([zod.z.array(zod.z.string()), zod.z.literal("*")]).optional(),
 	allowedDevices: zod.z.record(zod.z.string(), zod.z.union([zod.z.array(zod.z.string()), zod.z.literal("*")])).optional()
 });
@@ -4621,43 +5039,89 @@ var CreateScopedTokenResultSchema = zod.z.object({
 	token: zod.z.string(),
 	record: ScopedTokenSummarySchema
 });
+var TotpSetupResultSchema = zod.z.object({
+	secret: zod.z.string(),
+	otpauthUrl: zod.z.string()
+});
+var TotpStatusSchema = zod.z.object({
+	/** True iff `confirmedAt != null` — a pending half-enrollment is reported as `enabled: false`. */
+	enabled: zod.z.boolean(),
+	/** Null when no row exists OR the row is still pending confirmation. */
+	confirmedAt: zod.z.number().nullable()
+});
 method(zod.z.void(), zod.z.array(UserSummarySchema), { auth: "admin" }), method(CreateUserInputSchema, UserSummarySchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	access: "create"
 }), method(UpdateUserInputSchema, zod.z.object({ success: zod.z.literal(true) }), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	access: "create"
 }), method(zod.z.object({ id: zod.z.string() }), zod.z.object({ success: zod.z.literal(true) }), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	access: "delete"
 }), method(zod.z.object({
 	id: zod.z.string(),
 	newPassword: zod.z.string().min(6)
 }), zod.z.object({ success: zod.z.literal(true) }), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	access: "create"
 }), method(zod.z.object({
 	userId: zod.z.string(),
 	scopes: zod.z.array(TokenScopeSchema)
 }), zod.z.object({ success: zod.z.literal(true) }), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	access: "create"
 }), method(zod.z.object({
 	username: zod.z.string(),
 	password: zod.z.string()
-}), UserSummarySchema.extend({ passwordHash: zod.z.string() }).nullable(), { kind: "mutation" }), method(zod.z.void(), zod.z.array(ApiKeySummarySchema), { auth: "admin" }), method(CreateApiKeyInputSchema, CreateApiKeyResultSchema, {
+}), UserSummarySchema.extend({ passwordHash: zod.z.string() }).nullable(), {
 	kind: "mutation",
-	auth: "admin"
+	access: "view"
+}), method(zod.z.void(), zod.z.array(ApiKeySummarySchema), { auth: "admin" }), method(CreateApiKeyInputSchema, CreateApiKeyResultSchema, {
+	kind: "mutation",
+	auth: "admin",
+	access: "create"
 }), method(zod.z.object({ id: zod.z.string() }), zod.z.object({ success: zod.z.literal(true) }), {
 	kind: "mutation",
-	auth: "admin"
-}), method(zod.z.object({ token: zod.z.string() }), ApiKeySummarySchema.nullable(), { kind: "mutation" }), method(CreateScopedTokenInputSchema, CreateScopedTokenResultSchema, {
+	auth: "admin",
+	access: "delete"
+}), method(zod.z.object({ token: zod.z.string() }), ApiKeySummarySchema.nullable(), {
 	kind: "mutation",
-	auth: "admin"
+	access: "view"
+}), method(CreateScopedTokenInputSchema, CreateScopedTokenResultSchema, {
+	kind: "mutation",
+	auth: "admin",
+	access: "create"
 }), method(zod.z.object({ id: zod.z.string() }), zod.z.object({ success: zod.z.literal(true) }), {
 	kind: "mutation",
-	auth: "admin"
-}), method(zod.z.object({ token: zod.z.string() }), ScopedTokenSummarySchema.nullable()), method(zod.z.object({ userId: zod.z.string() }), zod.z.array(ScopedTokenSummarySchema), { auth: "admin" });
+	auth: "admin",
+	access: "delete"
+}), method(zod.z.object({ token: zod.z.string() }), ScopedTokenSummarySchema.nullable(), { access: "view" }), method(zod.z.object({ userId: zod.z.string() }), zod.z.array(ScopedTokenSummarySchema), { auth: "admin" }), method(zod.z.object({ userId: zod.z.string() }), TotpSetupResultSchema, {
+	kind: "mutation",
+	auth: "admin",
+	access: "create"
+}), method(zod.z.object({
+	userId: zod.z.string(),
+	code: zod.z.string()
+}), zod.z.object({ success: zod.z.literal(true) }), {
+	kind: "mutation",
+	auth: "admin",
+	access: "create"
+}), method(zod.z.object({ userId: zod.z.string() }), zod.z.object({ success: zod.z.literal(true) }), {
+	kind: "mutation",
+	auth: "admin",
+	access: "delete"
+}), method(zod.z.object({ userId: zod.z.string() }), TotpStatusSchema, { auth: "admin" }), method(zod.z.object({
+	userId: zod.z.string(),
+	code: zod.z.string()
+}), zod.z.object({ valid: zod.z.boolean() }), {
+	kind: "mutation",
+	access: "view"
+});
 var FeatureManifestSchema = zod.z.object({
 	streaming: zod.z.boolean(),
 	notifications: zod.z.boolean(),