@camstack/types 0.1.20 → 0.1.22

package/dist/{auth-records-BS1ylE_b.js → auth-records-Q5ocndX5.js}

@@ -5349,15 +5349,6 @@ const AuthProviderInfoSchema = zod.z.object({
   addonId: zod.z.string(),
   /** Display label shown on the login button + admin row. */
   displayName: zod.z.string(),
-  /**
-   * Provider kind — drives icon + grouping in admin UI.
-   *   - `local` — username/password form (always at top of login page)
-   *   - `oidc` — OpenID Connect (Google, Microsoft, Okta, generic)
-   *   - `saml` — SAML 2.0
-   *   - `ldap` — LDAP / Active Directory
-   *   - `other` — anything else (custom integrations)
-   */
-  kind: zod.z.enum(["local", "oidc", "saml", "ldap", "other"]),
   /** Optional iconography hint (lucide-react icon name OR emoji). */
   icon: zod.z.string().optional(),
   /** When true, the provider exposes a redirect-based login flow
@@ -5423,16 +5414,8 @@ const RemoteAccessEndpointSchema = zod.z.object({
 const RemoteAccessProviderInfoSchema = zod.z.object({
   /** Stable id matching the addon id. */
   addonId: zod.z.string(),
-  /** Display label shown on the admin row. */
+  /** Display label shown on the admin row — sourced from the addon manifest. */
   displayName: zod.z.string(),
-  /**
-   * Provider kind — drives icon + status formatting.
-   *   - `cloudflare-tunnel`
-   *   - `ngrok`
-   *   - `tailscale`
-   *   - `other`
-   */
-  kind: zod.z.enum(["cloudflare-tunnel", "ngrok", "tailscale", "other"]),
   /** When false, the provider is registered but disabled. */
   enabled: zod.z.boolean(),
   /** True when the underlying tunnel/connection is up. */
@@ -5492,16 +5475,8 @@ const turnProviderCapability = {
 const TurnProviderInfoSchema = zod.z.object({
   /** Stable id matching the addon id. */
   addonId: zod.z.string(),
-  /** Display label shown on the admin row. */
+  /** Display label shown on the admin row — sourced from the addon manifest. */
   displayName: zod.z.string(),
-  /**
-   * Provider kind — drives icon + grouping.
-   *   - `cloudflare` — Cloudflare TURN
-   *   - `coturn` — self-hosted coturn
-   *   - `twilio` — Twilio Network Traversal
-   *   - `other` — anything else
-   */
-  kind: zod.z.enum(["cloudflare", "coturn", "twilio", "other"]),
   /** When false, the provider is registered but disabled. */
   enabled: zod.z.boolean(),
   /** Number of servers this provider is currently exposing. */
@@ -7210,7 +7185,7 @@ const meshOrchestratorCapability = {
     )
   }
 };
-const UserRoleSchema$1 = zod.z.enum(["super_admin", "admin", "viewer", "agent"]);
+const UserRoleSchema$1 = zod.z.enum(["super_admin", "admin", "viewer", "agent", "scoped"]);
 const UserSummarySchema = zod.z.object({
   id: zod.z.string(),
   username: zod.z.string(),
@@ -7778,14 +7753,16 @@ const addonsCapability = {
     // ── Listing ──────────────────────────────────────────────────────
     list: method(zod.z.void(), zod.z.array(AddonListItemSchema).readonly()),
     // ── Logs (query) ────────────────────────────────────────────────
+    // Default auth (`protected`): authenticated users — including scoped
+    // tokens with the right route-prefix scope. Reading logs isn't an
+    // administrative action; install/restart/uninstall stay admin-only.
     getLogs: method(
       zod.z.object({
         addonId: zod.z.string(),
         limit: zod.z.number().min(1).max(500).default(100),
         level: LogLevelSchema.optional()
       }),
-      zod.z.array(LogQueryEntrySchema),
-      { auth: "admin" }
+      zod.z.array(LogQueryEntrySchema)
     ),
     // ── Packages ────────────────────────────────────────────────────
     listPackages: method(zod.z.void(), zod.z.array(InstalledPackageSchema).readonly()),
@@ -7930,7 +7907,7 @@ const PIPELINE_OWNER_CAPABILITY_NAMES = [
   "pipeline-orchestrator",
   "pipeline-runner"
 ];
-const UserRoleSchema = zod.z.enum(["super_admin", "admin", "viewer", "agent"]);
+const UserRoleSchema = zod.z.enum(["super_admin", "admin", "viewer", "agent", "scoped"]);
 const AllowedProviderSchema = zod.z.union([zod.z.literal("*"), zod.z.array(zod.z.string())]);
 const AllowedDevicesSchema = zod.z.record(zod.z.string(), zod.z.union([zod.z.literal("*"), zod.z.array(zod.z.string())]));
 const UserRecordSchema = zod.z.object({
@@ -8309,4 +8286,4 @@ exports.webrtcSessionCapability = webrtcSessionCapability;
 exports.zoneAnalyticsCapability = zoneAnalyticsCapability;
 exports.zoneRulesCapability = zoneRulesCapability;
 exports.zonesCapability = zonesCapability;
-//# sourceMappingURL=auth-records-BS1ylE_b.js.map
+//# sourceMappingURL=auth-records-Q5ocndX5.js.map