@camstack/system 1.2.436 → 1.2.438

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DVe0Nsp8.js");
+const require_dist = require("../../dist-GgG-7amw.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);
@@ -106,36 +106,45 @@ var WinstonLoggingAddon = class extends require_dist.BaseAddon {
 		return this.schema({ sections: [{
 			id: "winston-logging",
 			title: "Logging",
+			titleKey: "server:globalSettings.s_winston-logging.title",
 			description: "Global log verbosity + retention for rotated log files on this node.",
+			descriptionKey: "server:globalSettings.s_winston-logging.description",
 			columns: 2,
 			fields: [this.field({
 				type: "select",
 				key: "level",
 				label: "Log Level",
+				labelKey: "server:globalSettings.s_winston-logging.level.label",
 				default: "info",
 				options: [
 					{
 						value: "debug",
-						label: "Debug"
+						label: "Debug",
+						labelKey: "server:globalSettings.s_winston-logging.level.o_debug.label"
 					},
 					{
 						value: "info",
-						label: "Info"
+						label: "Info",
+						labelKey: "server:globalSettings.s_winston-logging.level.o_info.label"
 					},
 					{
 						value: "warn",
-						label: "Warn"
+						label: "Warn",
+						labelKey: "server:globalSettings.s_winston-logging.level.o_warn.label"
 					},
 					{
 						value: "error",
-						label: "Error"
+						label: "Error",
+						labelKey: "server:globalSettings.s_winston-logging.level.o_error.label"
 					}
 				]
 			}), this.field({
 				type: "number",
 				key: "retentionDays",
 				label: "Retention (days)",
+				labelKey: "server:globalSettings.s_winston-logging.retentionDays.label",
 				description: "Number of days to keep rotated log files before deletion",
+				descriptionKey: "server:globalSettings.s_winston-logging.retentionDays.description",
 				min: 1,
 				max: 365,
 				step: 1,

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { ln as logDestinationCapability, xr as BaseAddon } from "../../dist-DjD2M79P.mjs";
+import { Or as BaseAddon, mn as logDestinationCapability } from "../../dist-Dc8GKC5H.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";
@@ -99,36 +99,45 @@ var WinstonLoggingAddon = class extends BaseAddon {
 		return this.schema({ sections: [{
 			id: "winston-logging",
 			title: "Logging",
+			titleKey: "server:globalSettings.s_winston-logging.title",
 			description: "Global log verbosity + retention for rotated log files on this node.",
+			descriptionKey: "server:globalSettings.s_winston-logging.description",
 			columns: 2,
 			fields: [this.field({
 				type: "select",
 				key: "level",
 				label: "Log Level",
+				labelKey: "server:globalSettings.s_winston-logging.level.label",
 				default: "info",
 				options: [
 					{
 						value: "debug",
-						label: "Debug"
+						label: "Debug",
+						labelKey: "server:globalSettings.s_winston-logging.level.o_debug.label"
 					},
 					{
 						value: "info",
-						label: "Info"
+						label: "Info",
+						labelKey: "server:globalSettings.s_winston-logging.level.o_info.label"
 					},
 					{
 						value: "warn",
-						label: "Warn"
+						label: "Warn",
+						labelKey: "server:globalSettings.s_winston-logging.level.o_warn.label"
 					},
 					{
 						value: "error",
-						label: "Error"
+						label: "Error",
+						labelKey: "server:globalSettings.s_winston-logging.level.o_error.label"
 					}
 				]
 			}), this.field({
 				type: "number",
 				key: "retentionDays",
 				label: "Retention (days)",
+				labelKey: "server:globalSettings.s_winston-logging.retentionDays.label",
 				description: "Number of days to keep rotated log files before deletion",
+				descriptionKey: "server:globalSettings.s_winston-logging.retentionDays.description",
 				min: 1,
 				max: 365,
 				step: 1,

package/dist/{composition-sources-BAOlCu4j.js → composition-sources-DI3Z83vG.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-DVe0Nsp8.js");
+const require_dist = require("./dist-GgG-7amw.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-gN_BWUKp.mjs → composition-sources-DpHGCjdL.mjs}

@@ -1,4 +1,4 @@
-import { br as errMsg, pr as compositionSourceKey } from "./dist-DjD2M79P.mjs";
+import { Dr as errMsg, br as compositionSourceKey } from "./dist-Dc8GKC5H.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{constants-BFpowodq.mjs → constants-DQK705Sb.mjs}

@@ -1,4 +1,4 @@
-import { Pr as buildSecretRef } from "./dist-DjD2M79P.mjs";
+import { Vr as buildSecretRef } from "./dist-Dc8GKC5H.mjs";
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
 var MESH_CA_KEY_REF = buildSecretRef({
 	owner: "system",

package/dist/{constants-GENKqk9k.js → constants-wkcn5Ij3.js}

@@ -1,5 +1,5 @@
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
-var MESH_CA_KEY_REF = require("./dist-DVe0Nsp8.js").buildSecretRef({
+var MESH_CA_KEY_REF = require("./dist-GgG-7amw.js").buildSecretRef({
 	owner: "system",
 	scope: { kind: "global" },
 	fieldPath: "meshCaKey"

package/dist/{device-ca-CuWuRW9N.js → device-ca-BSvkXqyI.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-DVe0Nsp8.js");
+const require_dist = require("./dist-GgG-7amw.js");
 const require_x509_es = require("./x509.es-r7Ht1thA.js");
 let node_crypto = require("node:crypto");
 //#region src/auth/jwt-signing-key.ts

package/dist/{device-ca-BNM5ai4t.mjs → device-ca-DvIZjXIl.mjs}

@@ -1,4 +1,4 @@
-import { E as DEVICE_SAN_USER_PREFIX, Pr as buildSecretRef, T as DEVICE_SAN_CREDENTIAL_PREFIX } from "./dist-DjD2M79P.mjs";
+import { D as DEVICE_SAN_CREDENTIAL_PREFIX, O as DEVICE_SAN_USER_PREFIX, Vr as buildSecretRef } from "./dist-Dc8GKC5H.mjs";
 import { a as KeyUsagesExtension, d as X509Certificate$1, f as X509CertificateGenerator, g as backdatedNotBefore, i as KeyUsageFlags, l as SubjectAlternativeNameExtension, n as BasicConstraintsExtension, o as PemConverter, p as cryptoProvider, r as ExtendedKeyUsageExtension, t as AuthorityKeyIdentifierExtension, u as SubjectKeyIdentifierExtension } from "./x509.es-CDvj67p1.mjs";
 import { X509Certificate, createPublicKey, randomBytes, verify, webcrypto } from "node:crypto";
 //#region src/auth/jwt-signing-key.ts

package/dist/{dist-DjD2M79P.mjs → dist-Dc8GKC5H.mjs}

@@ -718,7 +718,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/sleep-DAX0-2v9.mjs
+//#region ../types/dist/sleep-DRqxtc0C.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -4421,6 +4421,35 @@ function collectZodSecretPaths(schema, prefix = "") {
 	return [...new Set(paths)];
 }
 /**
+* A user-facing error with a STABLE code (D863).
+*
+* `message` is always the English text, so every consumer that knows nothing
+* of codes (old clients, logs, the mesh) behaves exactly as before. The hub's
+* tRPC error formatter reads `code` + `params` and, when the request language
+* has a text for `server:<code>`, replaces the response `message`; the code
+* stays in the payload (`data.i18n`).
+*/
+/** Dotted lower-case code, e.g. `auth.invalid-credentials`. It is the key in the `server` catalog. */
+var ErrorCodeSchema = z.string().regex(/^[a-z][a-z0-9-]*(\.[a-z0-9-]+)+$/);
+z.object({
+	code: ErrorCodeSchema,
+	params: z.record(z.string(), z.union([z.string(), z.number()])).optional()
+});
+var CamstackError = class extends Error {
+	i18nCode;
+	i18nParams;
+	constructor(code, params, englishMessage) {
+		super(englishMessage);
+		this.name = "CamstackError";
+		this.i18nCode = code;
+		this.i18nParams = params;
+	}
+};
+/** `throw userError('device.not-found', { id }, 'Device 12 not found')` */
+function userError(code, params, englishFallback) {
+	return new CamstackError(code, params, englishFallback);
+}
+/**
 * Type-safe JSON parsing helpers.
 *
 * `JSON.parse` is typed as `any` in lib.es5.d.ts, which triggers
@@ -4486,7 +4515,7 @@ function sleep(ms) {
 	return new Promise((resolve) => setTimeout(resolve, Math.max(0, ms)));
 }
 //#endregion
-//#region ../types/dist/err-msg-DX6i_MY4.mjs
+//#region ../types/dist/err-msg-DLerKiVO.mjs
 var DeviceType = /* @__PURE__ */ function(DeviceType) {
 	DeviceType["Camera"] = "camera";
 	DeviceType["Hub"] = "hub";
@@ -4736,6 +4765,22 @@ var DeviceRole = /* @__PURE__ */ function(DeviceRole) {
 	DeviceRole["Nightvision"] = "nightvision";
 	DeviceRole["PrivacyMask"] = "privacy-mask";
 	DeviceRole["Doorbell"] = "doorbell";
+	/** Interior blind / shade / roller blind. HA `device_class: blind|shade`. */
+	DeviceRole["CoverBlind"] = "cover-blind";
+	/** Exterior roller shutter. HA `device_class: shutter`; Homematic BROLL. */
+	DeviceRole["CoverShutter"] = "cover-shutter";
+	/** Exterior awning. HA `device_class: awning`. */
+	DeviceRole["CoverAwning"] = "cover-awning";
+	/** Curtain / drape. HA `device_class: curtain`. */
+	DeviceRole["CoverCurtain"] = "cover-curtain";
+	/** Garage door. HA `device_class: garage`. A security actuator: exports gate it. */
+	DeviceRole["CoverGarage"] = "cover-garage";
+	/** Gate. HA `device_class: gate`. A security actuator: exports gate it. */
+	DeviceRole["CoverGate"] = "cover-gate";
+	/** Door. HA `device_class: door`. A security actuator: exports gate it. */
+	DeviceRole["CoverDoor"] = "cover-door";
+	/** Window. HA `device_class: window`. */
+	DeviceRole["CoverWindow"] = "cover-window";
 	/** Virtual HA toggle (input_boolean.*) — distinguishable from a
 	*  real Switch device for UI rendering / export adapters. */
 	DeviceRole["BinaryHelper"] = "binary-helper";
@@ -4816,7 +4861,7 @@ function errMsg(err) {
 	return String(err);
 }
 //#endregion
-//#region ../types/dist/composition-C-WpVYTX.mjs
+//#region ../types/dist/composition-EQ9Ok0Ee.mjs
 var AUDIO_ENCODER_BY_CODEC = {
 	opus: "libopus",
 	aac: "aac",
@@ -9769,6 +9814,8 @@ function scopesAllowAddon(scopes, addonId, access) {
 	return scopes.some((s) => s.type === "addon" && s.target === addonId && s.access.includes(access));
 }
 z.enum(["new-session", "step-up"]);
+/** The languages the hub's app landing pages are written in (D858). */
+var AppPageLangSchema = z.enum(["en", "it"]);
 /** How a native app starts one login method (D858), as `auth.listLoginMethods` reports it. */
 var AppLoginPathSchema = z.discriminatedUnion("kind", [z.object({ kind: z.literal("native") }), z.object({
 	kind: z.literal("browser"),
@@ -10371,7 +10418,9 @@ var ConfigTabDeclarationSchema = z.object({
 var ConfigSectionWithValuesSchema = z.object({
 	id: z.string(),
 	title: z.string(),
+	titleKey: z.string().optional(),
 	description: z.string().optional(),
+	descriptionKey: z.string().optional(),
 	style: z.enum(["card", "accordion"]).optional(),
 	defaultCollapsed: z.boolean().optional(),
 	columns: z.union([
@@ -16215,6 +16264,16 @@ var keychainCapability = {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/**
+		* Delete every value scoped `device/<deviceId>`, whatever its owner (D864).
+		* Reserved to `device-manager`, on the device-removed path: a driver's
+		* device-scoped secret is not anybody's once the device is gone. Answers the
+		* refs removed (never values).
+		*/
+		deleteDeviceScope: method(z.object({ deviceId: z.number().int() }), z.object({ refs: z.array(z.string()).readonly() }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** The caller's own refs, metadata only. */
 		listMeta: method(z.object({}), z.array(KeychainSecretMetaSchema).readonly(), { auth: "admin" }),
 		/** Whether values can be served — the save path refuses a write while locked. */
@@ -38219,6 +38278,42 @@ var DeviceRegisterPayloadSchema = z.object({
 	*  omits it and the keyword backstop applies. */
 	secretConfigPaths: z.array(z.string()).optional()
 });
+/** One deleted device, kept by device-manager so an addon that missed the
+*  deletion can still learn of it (D865). Written by the delete path ONLY. */
+var DeviceTombstoneSchema = z.object({
+	deviceId: z.number().int().positive(),
+	/** Epoch ms the device was deleted. */
+	deletedAt: z.number(),
+	/** The addon that owned the device when it was deleted. */
+	providerAddonId: z.string()
+});
+/** How long a tombstone stays readable. Past it, a device that was deleted
+*  and never cleaned is only reachable by the admin "clean data of deleted
+*  devices" action. */
+var DEVICE_TOMBSTONE_RETENTION_MS = 2160 * 60 * 60 * 1e3;
+/** Data held for one device that device-manager no longer knows. */
+var OrphanDeviceDataSchema = z.object({
+	deviceId: z.number().int().positive(),
+	/** Rows/files per store (`<addonId>:<store>`). */
+	stores: z.record(z.string(), z.number().int().nonnegative())
+});
+var CleanupDeletedDevicesResultSchema = z.object({
+	/**
+	* `skipped` — the absence check could not be trusted (a device-list read
+	* failed or the two reads disagreed); nothing was listed or deleted.
+	* `dry-run` — `devices` is what a confirmed run would delete.
+	* `cleaned` — `devices` is what was deleted.
+	*/
+	status: z.enum([
+		"skipped",
+		"dry-run",
+		"cleaned"
+	]),
+	reason: z.string().nullable(),
+	devices: z.array(OrphanDeviceDataSchema),
+	/** Implementers that could not be asked (their stores are not in `devices`). */
+	unreachable: z.array(z.string())
+});
 var DeviceRemovePayloadSchema = z.object({ deviceId: z.number() });
 var DevicePersistConfigPayloadSchema = z.object({
 	deviceId: z.number(),
@@ -38815,6 +38910,27 @@ var deviceManagerCapability = {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/**
+		* The tombstones of devices deleted at or after `sinceMs` (D865). The
+		* reconcile feed of every `device-removal-hook` implementer: an addon that
+		* was down when a device was deleted asks here at start and periodically.
+		* A tombstone exists only for a DELETE — never for a device that is merely
+		* unregistered, offline or whose provider is restarting. Tombstones older
+		* than `DEVICE_TOMBSTONE_RETENTION_MS` are gone.
+		*/
+		listDeletedSince: method(z.object({ sinceMs: z.number() }), z.array(DeviceTombstoneSchema).readonly(), { auth: "admin" }),
+		/**
+		* Admin-triggered clean-up of data that belongs to devices deleted BEFORE
+		* tombstones existed (D865). Asks every `device-removal-hook` implementer
+		* which device ids it holds data for, keeps those absent from the device
+		* list — confirmed by TWO reads of the list, skipped if either fails — and
+		* with `confirm: false` only reports the counts per store. `confirm: true`
+		* deletes. Never runs on its own.
+		*/
+		cleanupDeletedDevicesData: method(z.object({ confirm: z.boolean() }), CleanupDeletedDevicesResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Cascade-delete every top-level device whose `integrationId` matches.
 		*  Children cascade automatically via the per-parent remove path.
 		*  Idempotent: a device whose `integrationId` was never set never matches.
@@ -39730,6 +39846,85 @@ var embeddingEncoderCapability = {
 	}
 };
 /**
+* `device-removal-hook` — the reliable way an addon learns a device was DELETED,
+* so it can delete what it keeps for that device (D865).
+*
+* ## Why an event was not enough
+*
+* `DeviceUnregistered` is telemetry and may be dropped (D8, D11). An addon that
+* hung its per-device clean-up on it left durable garbage whenever the event was
+* lost, the addon was down, or it was restarting at that moment — footage,
+* analytics rows and settings of device 4483 outlived the device. Loss of this
+* signal corrupts durable state, so it travels by RPC with a recorded fact
+* behind it (D8: "if loss would corrupt durable state, use RPC plus a reconcile").
+*
+* ## The three pieces
+*
+* 1. device-manager records a TOMBSTONE per deleted device
+*    (`deviceManager.listDeletedSince`). The tombstone is written by the delete
+*    path only — a device that is unregistered, offline or whose provider is
+*    restarting is NOT deleted and gets none.
+* 2. After a delete, device-manager calls `onDeviceRemoved` on EVERY provider of
+*    this collection, one by one, with bounded retries, logged.
+* 3. An implementer that was down asks `deviceManager.listDeletedSince` at start
+*    (and periodically) and runs its own `onDeviceRemoved` for each tombstone it
+*    may have missed. Reconcile is driven by tombstones, never by "the device is
+*    not in the current list": a failed or partial list read must not destroy data.
+*
+* ## Contract for an implementer
+*
+* - **Idempotent.** It is called again by a retry, by a reconcile and by the
+*   admin cleanup of data that predates tombstones. A device with nothing left
+*   answers zero counts.
+* - **One key per store** in `counts`, deleted rows/files per store, so the log
+*   line and the admin dry run can say where the data was.
+* - **Training datasets are NOT device data** and are never deleted by a hook.
+* - **Per-device SETTINGS are not hooked.** Configuration lives in the standard
+*   per-device store (`ctx.settings.*DeviceStore`), which device-manager clears
+*   for every addon centrally at delete time. This hook is for device DATA
+*   that is not settings: footage, event media, analytics rows, history.
+* - A provider that cannot tell is allowed to throw; the caller retries it.
+*
+* `listDeviceData` is the read side of the admin "Clean data of deleted devices"
+* action: which device ids this addon holds data for, and how much per store. It
+* never deletes. device-manager decides which of those ids are absent from the
+* fleet, from TWO consistent reads of the device list (D49).
+*/
+/** What a hook is told about the deletion. */
+var DeviceRemovedInputSchema = z.object({
+	deviceId: z.number().int().positive(),
+	/** Epoch ms the device was deleted (the tombstone's `deletedAt`). */
+	deletedAt: z.number(),
+	/** The addon that owned the device, as device-manager last knew it. */
+	providerAddonId: z.string()
+});
+/** Rows/files/refs deleted, per store this implementer owns. */
+var DeviceRemovedResultSchema = z.object({ counts: z.record(z.string(), z.number().int().nonnegative()) });
+/** One (store, device) pair an implementer holds data for. */
+var DeviceDataEntrySchema = z.object({
+	store: z.string(),
+	deviceId: z.number().int().positive(),
+	/** Rows (or files) held for the device in the store. */
+	count: z.number().int().nonnegative()
+});
+var deviceRemovalHookCapability = {
+	name: "device-removal-hook",
+	scope: "system",
+	mode: "collection",
+	internal: true,
+	methods: {
+		/** Delete everything this addon keeps for the deleted device. Idempotent. */
+		onDeviceRemoved: method(DeviceRemovedInputSchema, DeviceRemovedResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/** Which devices this addon holds data for, per store. Reads only. */
+		listDeviceData: method(z.void(), z.array(DeviceDataEntrySchema).readonly(), { auth: "admin" })
+	},
+	/** In-process only — enumerated through `addons.listCapabilityProviders`. */
+	mount: { kind: "skip" }
+};
+/**
 * `failure-contribution` — the capability an addon reports its OWN losses
 * through, per camera, with the denominator attached. It stores nothing.
 *
@@ -54193,7 +54388,9 @@ var SsoBridgeClaimsSchema = z.object({
 		codeChallenge: z.string(),
 		state: z.string(),
 		purpose: z.enum(["new-session", "step-up"]),
-		redirect: z.string()
+		redirect: z.string(),
+		/** The page language the app asked for (D858); the confirm page speaks it. */
+		lang: z.enum(["en", "it"]).optional()
 	}).optional()
 });
 var ssoBridgeCapability = {
@@ -68642,6 +68839,37 @@ var switchCapability = {
 		}
 	}] }
 };
+/** C0 controls, DEL and the C1 range: none of them belongs in a name. */
+function hasControlCharacter(value) {
+	for (const char of value) {
+		const code = char.codePointAt(0) ?? 0;
+		if (code <= 31 || code >= 127 && code <= 159) return true;
+	}
+	return false;
+}
+/** A name an operator may save: trimmed, 1-48 characters, no control characters. */
+var ServerNameSchema = z.string().transform((value) => value.trim()).pipe(z.string().min(1, "The server name cannot be empty").max(48, `The server name is at most 48 characters`).refine((value) => !hasControlCharacter(value), { message: "The server name cannot contain control characters" }));
+/** What every reader gets: the name to show, and whether the hub chose it itself. */
+var ServerNameInfoSchema = z.object({
+	name: z.string(),
+	/** `true` when nobody named the hub: `name` is the machine hostname. */
+	isDefault: z.boolean()
+});
+/** What an unset name shows when the hostname says nothing about the hub. */
+var SERVER_NAME_FALLBACK = "CamStack";
+/** A container id: Docker's default hostname (12 hex chars, or the full 64). */
+var CONTAINER_ID_PATTERN = /^(?:[0-9a-f]{12}|[0-9a-f]{64})$/;
+/**
+* The hostname without its domain (`nas.lan.example` becomes `nas`). A hostname
+* that names nothing (empty, `localhost`, a container id) yields
+* {@link SERVER_NAME_FALLBACK}.
+*/
+function shortHostname(hostname) {
+	const first = hostname.trim().split(".")[0] ?? "";
+	if (first.length === 0 || first.toLowerCase() === "localhost") return SERVER_NAME_FALLBACK;
+	if (CONTAINER_ID_PATTERN.test(first)) return SERVER_NAME_FALLBACK;
+	return first;
+}
 /**
 * system — system-scoped singleton capability exposing hub-level
 * health, feature flags, network interface enumeration, and the
@@ -68671,6 +68899,12 @@ var FeatureManifestSchema = z.object({
 	backup: z.boolean(),
 	repl: z.boolean()
 });
+/**
+* `system.info`: the feature flags plus the hub's human name (D861). The name is
+* `{ name, isDefault }` — `isDefault: true` means nobody named the hub and `name`
+* is the machine hostname.
+*/
+var SystemInfoSchema = FeatureManifestSchema.extend({ serverName: ServerNameInfoSchema });
 var HealthStatusSchema = z.object({
 	status: z.literal("ok"),
 	uptime: z.number()
@@ -69157,7 +69391,7 @@ var systemCapability = {
 	scope: "system",
 	mode: "singleton",
 	methods: {
-		info: method(z.void(), FeatureManifestSchema),
+		info: method(z.void(), SystemInfoSchema),
 		health: method(z.void(), HealthStatusSchema),
 		featureFlags: method(z.void(), FeatureManifestSchema),
 		networkAddresses: method(z.void(), z.array(NetworkAddressSchema).readonly()),
@@ -74760,6 +74994,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"deviceManager.cleanupDeletedDevicesData": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceManager.createDevice": {
 		capName: "device-manager",
 		capScope: "system",
@@ -74940,6 +75180,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.listDeletedSince": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.listDeviceIdsByCaps": {
 		capName: "device-manager",
 		capScope: "system",
@@ -75348,6 +75594,18 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"deviceRemovalHook.listDeviceData": {
+		capName: "device-removal-hook",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"deviceRemovalHook.onDeviceRemoved": {
+		capName: "device-removal-hook",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceState.claimFields": {
 		capName: "device-state",
 		capScope: "system",
@@ -75780,6 +76038,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"keychain.deleteDeviceScope": {
+		capName: "keychain",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"keychain.getState": {
 		capName: "keychain",
 		capScope: "system",
@@ -81162,6 +81426,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	deviceManagerCapability,
 	deviceOpsCapability,
 	deviceProviderCapability,
+	deviceRemovalHookCapability,
 	deviceStateCapability,
 	deviceStatusCapability,
 	doorbellCapability,
@@ -82055,6 +82320,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceRemovalHook.onDeviceRemoved": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"deviceState.claimFields": [{
 		name: "deviceId",
 		form: "single",
@@ -82244,6 +82514,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"keychain.deleteDeviceScope": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"lawnMowerControl.dock": [{
 		name: "deviceId",
 		form: "single",
@@ -84892,6 +85167,26 @@ new Set([
 	"audio-tools",
 	"audio-silence"
 ]);
+var CATALOG_LANGS = AppPageLangSchema.options;
+/** One catalog file: flat key to text. A file of any other shape is rejected whole. */
+var CatalogFileSchema = z.record(z.string().min(1), z.string());
+/** Fills `{name}` placeholders; an unknown placeholder is left as written. */
+function interpolate(template, params) {
+	if (params === void 0) return template;
+	return template.replace(/\{(\w+)\}/g, (whole, name) => {
+		const value = params[name];
+		return value === void 0 ? whole : String(value);
+	});
+}
+/** Splits `"ns:key"`; `null` when the reference has no namespace. */
+function splitTranslationRef(ref) {
+	const at = ref.indexOf(":");
+	if (at <= 0 || at === ref.length - 1) return null;
+	return {
+		ns: ref.slice(0, at),
+		key: ref.slice(at + 1)
+	};
+}
 /**
 * TimelapseRule — the STANDALONE scheduled timelapse producer's rule model.
 *
@@ -85583,4 +85878,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { addonSettingsCapability as $, validateComposition as $n, parseJsonObject as $r, isObjectInput as $t, FieldClaimModeSchema as A, resolveAppConnections as An, WELL_KNOWN_TAB_MAP as Ar, deviceCredentialsCapability as At, NetworkTunnelStartedDataSchema as B, scopesAllowDeviceCap as Bn, emitDownForOwnedCaps as Br, expandContainer as Bt, DEVICE_ENROLLMENT_TTL_MS as C, pickAppLinkHub as Cn, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Cr, dataStoreProviderCapability as Ct, DeclaredDevices as D, ptzAutotrackCapability as Dn, ReadinessRegistry as Dr, defineExtensionSlotProvider as Dt, DEVICE_SAN_USER_PREFIX as E, procedureAuthKey as En, RUNTIME_DEFAULTS as Er, decodeVectorBase64 as Et, LOG_LEVEL_RANK as F, resolveLocationMode as Fn, collectSecretConfigKeys as Fr, enumerateInferenceDevices as Ft, ScopedTokenSchema as G, storageCapability as Gn, isDeviceConfigCap as Gr, formatDeviceRevoker as Gt, RecordingStatusSchema as H, settingsStoreCapability as Hn, expandCapMethods as Hr, extractNestedAddonId as Ht, LegacyStorageLocationDefaultSchema as I, resolveMethodAuth as In, collectZodSecretPaths as Ir, enumerateItemArrayFields as It, StorageLocationModeSchema as J, storageProviderCapability as Jn, isSecretClear as Jr, isAppLinkBase as Jt, SsoBridgeClaimsSchema as K, storageMigrationCapability as Kn, isEvent as Kr, formatMinutes as Kt, METHOD_ACCESS_MAP as L, resolveNotificationTapAddress as Ln, createEvent as Lr, enumerateSchemaFields as Lt, HUB_MDNS_SERVICE_TYPE as M, resolveCoreBlockEntry as Mn, asNumber as Mr, deviceManagerCapability as Mt, HUB_MDNS_TXT_KEYS as N, resolveCoreBlockFiles as Nn, asString$1 as Nr, deviceStateCapability as Nt, DeviceStatusSchema as O, reducePoints as On, ReadinessTimeoutError as Or, deriveBatteryPresence as Ot, KEYCHAIN_RESET_TRIGGER_ACTOR as P, resolveHubAddressRoles as Pn, buildSecretRef as Pr, deviceStatusCapability as Pt, addonPagesCapability as Q, userManagementCapability as Qn, normalizeSecretOwner as Qr, isLocationEnabled as Qt, MINUTES_PER_DAY as R, runtimeStatePolicyFor as Rn, customAction as Rr, evaluateCompositionField as Rt, DERIVED_CAMERA_SILENCED_CAP_NAMES as S, parseStreamParamsFormPatch as Sn, DATAPLANE_SECRET_HEADER as Sr, createDeviceExtensionProvider as St, DEVICE_SAN_CREDENTIAL_PREFIX as T, platformProbeCapability as Tn, REDACTED_SECRET as Tr, declarationOwnerNodeId as Tt, STORAGE_ACCESS_FALLBACK as U, siteZoneKey as Un, formatSecretScope as Ur, filesystemBrowseCapability as Ut, RECORDING_SOURCE_CAMSTACK_ADDON as V, scoreRuntimes as Vn, emitReadiness as Vr, expressionContainsBuiltinCall as Vt, STREAM_PROFILE_META as W, snapshotCapability as Wn, hydrateSchema as Wr, foldSnapshotByFunction as Wt, StorageMigrationJobSchema as X, streamQualityLabel as Xn, isSecretMarkerLike as Xr, isCollectionArrayMethod as Xt, StorageLocationTypeSchema as Y, streamCatalogCapability as Yn, isSecretMarker as Yr, isArrayOutputSchema as Yt, UserRecordSchema as Z, supportedRuntimes as Zn, nodePin as Zr, isDefaultAppConnectionEndpoint as Zt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as _, motionCapability as _n, DeviceFeature as _r, coreBlockAddonId as _t, ApiKeyRecordSchema as a, scopeKey as ai, legacyModeOf as an, COMPOSER_ADDON_ID as ar, batteryCapability as at, DATA_STORE_DATABASES as b, objectInputDeclaresAddonId as bn, errMsg as br, coreBlockSourceKind as bt, CAMERA_SWITCH_ORDER as c, toNodeId as ci, locationIconKey as cn, composedDeviceRef as cr, buildDeviceSignatureMessage as ct, COMPOSED_ITEM_FIXED_FIELDS as d, EventCategory as di, looseSchema as dn, compositionItemFieldPath as dr, cameraGridLayoutCapability as dt, parseJsonUnknown as ei, isVoidInput as en, validateCustomAddress as er, addonWidgetsCapability as et, COMPOSER_RUNNER_ID as f, mayReadLocation as fn, compositionSliceKey as fr, canonicalIconKey as ft, CoreBlockSchema as g, modeMayWrite as gn, toExpressionValue as gr, compositionSourceRefs as gt, CalendarPreferencesSchema as h, metricsProviderCapability as hn, disarmRoseMemory as hr, compositionFieldKey as ht, AlertSchema as i, resolveSecretMarkers as ii, legacyAutoLinkIds as in, withLocationMode as ir, bareAddonId as it, FieldClaimSchema as j, resolveBucketMs as jn, asJsonObject as jr, deviceExtensionCapability as jt, FIRST_LEVEL_MACRO_CLASSES as k, replacedFieldKeys as kn, SECRET_CLEAR as kr, describeComposableCaps as kt, CAMSTACK_APP_LINK_ORIGIN as l, toSecretFieldView as li, logDestinationCapability as ln, composedDeviceStableId as lr, buildStreamParamsConfigSchema as lt, CORE_BLOCK_ADDON_PREFIX as m, memoizePinnedFfmpeg as mn, createStatefulExpressionMemory as mr, composerCapability as mt, AGENT_MDNS_TXT_KEYS as n, readinessKey as ni, keychainAdminCapability as nn, vectorIndexDimConflictError as nr, authProviderCapability as nt, BaseDevice as o, secretTreeFromPaths as oi, lifecycleJobSchema as on, buildFfmpegArgs as or, buildCapabilityLookup as ot, CORE_BLOCKS_ADDON_ID as p, mayWriteToLocation as pn, compositionSourceKey as pr, checkRoleAddress as pt, StorageCleanupJobSchema as q, storageOccupancyCapability as qn, isKeychainStoredField as qr, gbToBytes as qt, ALL_CAPABILITY_DEFINITIONS as r, resolveCapMount as ri, keychainCapability as rn, vectorStoreCapability as rr, backupCapability as rt, BatteryStatusSchema as s, sleep as si, localNetworkCapability as sn, cloneStatefulExpressionMemory as sr, buildDeviceEnrollmentLink as st, AGENT_MDNS_SERVICE_TYPE as t, parseSecretRef as ti, kebabToCamel as tn, vectorDimFromBase64 as tr, alertsCapability as tt, CAP_NAMES_WITH_STATUS as u, transformSecretWrite as ui, logLevelAtMost as un, compositionFeatureEnabled as ur, calendarsCapability as ut, DATABASE_SNAPSHOT_SUFFIX as v, normalizeCoreBlockWrite as vn, DeviceRole as vr, coreBlockComposition as vt, DEVICE_NONCE_TTL_MS as w, planComposition as wn, DEVICE_STATUS_METHOD as wr, databaseSnapshotCapability as wt, DAY_NAMES as x, objectInputDeclaresRequiredDeviceId as xn, BaseAddon as xr, coreBlocksCapability as xt, DATABASE_SNAPSHOT_TIMEOUT_MS as y, normalizeUnit as yn, DeviceType as yr, coreBlockIdFromAddonId as yt, MOTION_CLOSE_AFTER_MS as z, scopesAllowAddon as zn, defineCustomActions as zr, evictionPolicyOfLocation as zt };
+export { StorageLocationTypeSchema as $, storageMigrationCapability as $n, isEvent as $r, isAppLinkBase as $t, DeclaredDevices as A, platformProbeCapability as An, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Ar, decodeVectorBase64 as At, METHOD_ACCESS_MAP as B, resolveLocationMode as Bn, asString$1 as Br, enumerateItemArrayFields as Bt, DAY_NAMES as C, normalizeCoreBlockWrite as Cn, toExpressionValue as Cr, coreBlockIdFromAddonId as Ct, DEVICE_SAN_CREDENTIAL_PREFIX as D, parseStreamParamsFormPatch as Dn, errMsg as Dr, dataStoreProviderCapability as Dt, DEVICE_NONCE_TTL_MS as E, objectInputDeclaresRequiredDeviceId as En, DeviceType as Er, createDeviceExtensionProvider as Et, HUB_MDNS_SERVICE_TYPE as F, resolveAppConnections as Fn, ReadinessTimeoutError as Fr, deviceExtensionCapability as Ft, RecordingStatusSchema as G, scopesAllowDeviceCap as Gn, customAction as Gr, expressionContainsBuiltinCall as Gt, MOTION_CLOSE_AFTER_MS as H, resolveNotificationTapAddress as Hn, collectSecretConfigKeys as Hr, evaluateCompositionField as Ht, HUB_MDNS_TXT_KEYS as I, resolveBucketMs as In, SECRET_CLEAR as Ir, deviceManagerCapability as It, ScopedTokenSchema as J, shortHostname as Jn, emitReadiness as Jr, foldSnapshotByFunction as Jt, STORAGE_ACCESS_FALLBACK as K, scoreRuntimes as Kn, defineCustomActions as Kr, extractNestedAddonId as Kt, KEYCHAIN_RESET_TRIGGER_ACTOR as L, resolveCoreBlockEntry as Ln, WELL_KNOWN_TAB_MAP as Lr, deviceStateCapability as Lt, FIRST_LEVEL_MACRO_CLASSES as M, ptzAutotrackCapability as Mn, REDACTED_SECRET as Mr, deriveBatteryPresence as Mt, FieldClaimModeSchema as N, reducePoints as Nn, RUNTIME_DEFAULTS as Nr, describeComposableCaps as Nt, DEVICE_SAN_USER_PREFIX as O, pickAppLinkHub as On, BaseAddon as Or, databaseSnapshotCapability as Ot, FieldClaimSchema as P, replacedFieldKeys as Pn, ReadinessRegistry as Pr, deviceCredentialsCapability as Pt, StorageLocationModeSchema as Q, storageCapability as Qn, isDeviceConfigCap as Qr, interpolate as Qt, LOG_LEVEL_RANK as R, resolveCoreBlockFiles as Rn, asJsonObject as Rr, deviceStatusCapability as Rt, DATA_STORE_DATABASES as S, motionCapability as Sn, disarmRoseMemory as Sr, coreBlockComposition as St, DEVICE_ENROLLMENT_TTL_MS as T, objectInputDeclaresAddonId as Tn, DeviceRole as Tr, coreBlocksCapability as Tt, NetworkTunnelStartedDataSchema as U, runtimeStatePolicyFor as Un, collectZodSecretPaths as Ur, evictionPolicyOfLocation as Ut, MINUTES_PER_DAY as V, resolveMethodAuth as Vn, buildSecretRef as Vr, enumerateSchemaFields as Vt, RECORDING_SOURCE_CAMSTACK_ADDON as W, scopesAllowAddon as Wn, createEvent as Wr, expandContainer as Wt, SsoBridgeClaimsSchema as X, snapshotCapability as Xn, formatSecretScope as Xr, formatMinutes as Xt, ServerNameSchema as Y, siteZoneKey as Yn, expandCapMethods as Yr, formatDeviceRevoker as Yt, StorageCleanupJobSchema as Z, splitTranslationRef as Zn, hydrateSchema as Zr, gbToBytes as Zt, CatalogFileSchema as _, transformSecretWrite as _i, mayReadLocation as _n, compositionFeatureEnabled as _r, checkRoleAddress as _t, ApiKeyRecordSchema as a, normalizeSecretOwner as ai, isVoidInput as an, userManagementCapability as ar, alertsCapability as at, DATABASE_SNAPSHOT_SUFFIX as b, metricsProviderCapability as bn, compositionSourceKey as br, compositionSourceRefs as bt, CAMERA_SWITCH_ORDER as c, parseSecretRef as ci, keychainCapability as cn, vectorDimFromBase64 as cr, bareAddonId as ct, CATALOG_LANGS as d, resolveSecretMarkers as di, lifecycleJobSchema as dn, withLocationMode as dr, buildDeviceEnrollmentLink as dt, isKeychainStoredField as ei, isArrayOutputSchema as en, storageOccupancyCapability as er, StorageMigrationJobSchema as et, COMPOSED_ITEM_FIXED_FIELDS as f, scopeKey as fi, localNetworkCapability as fn, COMPOSER_ADDON_ID as fr, buildDeviceSignatureMessage as ft, CalendarPreferencesSchema as g, toSecretFieldView as gi, looseSchema as gn, composedDeviceStableId as gr, canonicalIconKey as gt, CORE_BLOCK_ADDON_PREFIX as h, toNodeId as hi, logLevelAtMost as hn, composedDeviceRef as hr, cameraGridLayoutCapability as ht, AlertSchema as i, nodePin as ii, isObjectInput as in, supportedRuntimes as ir, addonWidgetsCapability as it, DeviceStatusSchema as j, procedureAuthKey as jn, DEVICE_STATUS_METHOD as jr, defineExtensionSlotProvider as jt, DEVICE_TOMBSTONE_RETENTION_MS as k, planComposition as kn, DATAPLANE_SECRET_HEADER as kr, declarationOwnerNodeId as kt, CAMSTACK_APP_LINK_ORIGIN as l, readinessKey as li, legacyAutoLinkIds as ln, vectorIndexDimConflictError as lr, batteryCapability as lt, CORE_BLOCKS_ADDON_ID as m, sleep as mi, logDestinationCapability as mn, cloneStatefulExpressionMemory as mr, calendarsCapability as mt, AGENT_MDNS_TXT_KEYS as n, isSecretMarker as ni, isDefaultAppConnectionEndpoint as nn, streamCatalogCapability as nr, addonPagesCapability as nt, BaseDevice as o, parseJsonObject as oi, kebabToCamel as on, validateComposition as or, authProviderCapability as ot, COMPOSER_RUNNER_ID as p, secretTreeFromPaths as pi, locationIconKey as pn, buildFfmpegArgs as pr, buildStreamParamsConfigSchema as pt, STREAM_PROFILE_META as q, settingsStoreCapability as qn, emitDownForOwnedCaps as qr, filesystemBrowseCapability as qt, ALL_CAPABILITY_DEFINITIONS as r, isSecretMarkerLike as ri, isLocationEnabled as rn, streamQualityLabel as rr, addonSettingsCapability as rt, BatteryStatusSchema as s, parseJsonUnknown as si, keychainAdminCapability as sn, validateCustomAddress as sr, backupCapability as st, AGENT_MDNS_SERVICE_TYPE as t, isSecretClear as ti, isCollectionArrayMethod as tn, storageProviderCapability as tr, UserRecordSchema as tt, CAP_NAMES_WITH_STATUS as u, resolveCapMount as ui, legacyModeOf as un, vectorStoreCapability as ur, buildCapabilityLookup as ut, CoreBlockSchema as v, userError as vi, mayWriteToLocation as vn, compositionItemFieldPath as vr, composerCapability as vt, DERIVED_CAMERA_SILENCED_CAP_NAMES as w, normalizeUnit as wn, DeviceFeature as wr, coreBlockSourceKind as wt, DATABASE_SNAPSHOT_TIMEOUT_MS as x, modeMayWrite as xn, createStatefulExpressionMemory as xr, coreBlockAddonId as xt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as y, EventCategory as yi, memoizePinnedFfmpeg as yn, compositionSliceKey as yr, compositionFieldKey as yt, LegacyStorageLocationDefaultSchema as z, resolveHubAddressRoles as zn, asNumber as zr, enumerateInferenceDevices as zt };