@camstack/types 1.1.35 → 1.1.37

package/dist/addon.d.ts

@@ -30,5 +30,7 @@ export { deviceOpsCapability } from './capabilities/device-ops.cap.js';
 export { createDeviceProxy } from './generated/device-proxy.js';
 export { BaseAddon, normalizeAddonInitResult } from './addon/base-addon.js';
 export { adminUiCapability } from './capabilities/admin-ui.cap.js';
+export { viewerUiCapability } from './capabilities/viewer-ui.cap.js';
 export type { IAdminUiProvider } from './capabilities/admin-ui.cap.js';
+export type { IViewerUiProvider } from './capabilities/viewer-ui.cap.js';
 export type { ICamstackAddon, AddonDeclaration, AddonInitResult, ProviderRegistration, } from './interfaces/addon.js';

package/dist/addon.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-DuN1nc6O.js");
+const require_sleep = require("./sleep-BtS3xMHv.js");
 const require_err_msg = require("./err-msg-COpsHMw2.js");
 exports.BaseAddon = require_sleep.BaseAddon;
 exports.DATAPLANE_SECRET_HEADER = require_sleep.DATAPLANE_SECRET_HEADER;
@@ -20,3 +20,4 @@ exports.normalizeAddonInitResult = require_sleep.normalizeAddonInitResult;
 exports.parseJsonUnknown = require_sleep.parseJsonUnknown;
 exports.scopeKey = require_sleep.scopeKey;
 exports.sleep = require_sleep.sleep;
+exports.viewerUiCapability = require_sleep.viewerUiCapability;

package/dist/addon.mjs

@@ -1,3 +1,3 @@
-import { A as ReadinessRegistry, C as asJsonObject, O as parseJsonUnknown, P as scopeKey, T as asString, a as adminUiCapability, b as DeviceType, gt as DisposerChain, ht as EventCategory, i as deviceOpsCapability, j as ReadinessTimeoutError, k as DATAPLANE_SECRET_HEADER, o as createDeviceProxy, ot as BaseAddon, p as expandCapMethods, st as normalizeAddonInitResult, t as sleep, ut as emitReadiness } from "./sleep-DiQ8xW1M.mjs";
+import { A as DATAPLANE_SECRET_HEADER, E as asString, F as scopeKey, M as ReadinessTimeoutError, a as viewerUiCapability, bt as DisposerChain, ct as normalizeAddonInitResult, dt as emitReadiness, i as deviceOpsCapability, j as ReadinessRegistry, k as parseJsonUnknown, m as expandCapMethods, o as adminUiCapability, s as createDeviceProxy, st as BaseAddon, t as sleep, w as asJsonObject, x as DeviceType, yt as EventCategory } from "./sleep-DJaTV2D7.mjs";
 import { t as errMsg } from "./err-msg-IQTHeDzc.mjs";
-export { BaseAddon, DATAPLANE_SECRET_HEADER, DeviceType, DisposerChain, EventCategory, ReadinessRegistry, ReadinessTimeoutError, adminUiCapability, asJsonObject, asString, createDeviceProxy, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods, normalizeAddonInitResult, parseJsonUnknown, scopeKey, sleep };
+export { BaseAddon, DATAPLANE_SECRET_HEADER, DeviceType, DisposerChain, EventCategory, ReadinessRegistry, ReadinessTimeoutError, adminUiCapability, asJsonObject, asString, createDeviceProxy, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods, normalizeAddonInitResult, parseJsonUnknown, scopeKey, sleep, viewerUiCapability };

package/dist/capabilities/addon-widgets-source.cap.d.ts

@@ -98,6 +98,7 @@ declare const WidgetMetadataSchema: z.ZodObject<{
         deviceContext: z.ZodDefault<z.ZodBoolean>;
         integrationContext: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strip>;
+    preAuth: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     defaultSize: z.ZodDefault<z.ZodEnum<{
         xs: "xs";
         sm: "sm";
@@ -145,6 +146,7 @@ export declare const addonWidgetsSourceCapability: {
                 deviceContext: z.ZodDefault<z.ZodBoolean>;
                 integrationContext: z.ZodDefault<z.ZodBoolean>;
             }, z.core.$strip>;
+            preAuth: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
             defaultSize: z.ZodDefault<z.ZodEnum<{
                 xs: "xs";
                 sm: "sm";

package/dist/capabilities/addon-widgets.cap.d.ts

@@ -40,6 +40,7 @@ declare const EnrichedWidgetMetadataSchema: z.ZodObject<{
         deviceContext: z.ZodDefault<z.ZodBoolean>;
         integrationContext: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strip>;
+    preAuth: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     defaultSize: z.ZodDefault<z.ZodEnum<{
         xs: "xs";
         sm: "sm";
@@ -88,6 +89,7 @@ export declare const addonWidgetsCapability: {
                 deviceContext: z.ZodDefault<z.ZodBoolean>;
                 integrationContext: z.ZodDefault<z.ZodBoolean>;
             }, z.core.$strip>;
+            preAuth: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
             defaultSize: z.ZodDefault<z.ZodEnum<{
                 xs: "xs";
                 sm: "sm";

package/dist/capabilities/index.d.ts

@@ -24,6 +24,8 @@ export type { IAddonWidgetsSourceProvider, WidgetMetadata } from './addon-widget
 export { addonWidgetsSourceCapability, WidgetHostEnum, WidgetMetadataSchema, WidgetRemoteSchema, WidgetSizeEnum, } from './addon-widgets-source.cap.js';
 export type { IAdminUiProvider } from './admin-ui.cap.js';
 export { adminUiCapability } from './admin-ui.cap.js';
+export type { IViewerUiProvider } from './viewer-ui.cap.js';
+export { viewerUiCapability } from './viewer-ui.cap.js';
 export type { IAdvancedNotifierProvider } from './advanced-notifier.cap.js';
 export { advancedNotifierCapability, NotificationHistoryEntrySchema, NotificationRuleSchema, } from './advanced-notifier.cap.js';
 export type { Alert, AlertSeverity, AlertStatus } from './alerts.cap.js';
@@ -33,6 +35,8 @@ export type { AudioAnalyzerGlobalConfig, AudioBackendChoice, IAudioAnalyzerProvi
 export { AUDIO_BACKEND_CHOICES, AudioAnalysisResultSchema, AudioAnalysisSettingsSchema, AudioClassificationResultSchema, audioAnalyzerCapability, DEFAULT_AUDIO_ANALYZER_CONFIG, } from './audio-analyzer.cap.js';
 export { AudioCodecInfoSchema, AudioDecodeSessionConfigSchema, AudioEncodedChunkSchema, AudioEncodeSessionConfigSchema, AudioPcmChunkSchema, audioCodecCapability, type IAudioCodecCapProvider, PcmSampleFormatSchema, } from './audio-codec.cap.js';
 export { AuthResultSchema, authProviderCapability } from './auth-provider.cap.js';
+export { loginMethodCapability, LoginStageEnum, RedirectLoginMethodSchema, WidgetLoginMethodSchema, LoginMethodContributionSchema, } from './login-method.cap.js';
+export type { ILoginMethodProvider, LoginMethodContribution, RedirectLoginMethod, WidgetLoginMethod, LoginStage, } from './login-method.cap.js';
 export { ArchiveEntrySchema, ArchiveManifestSchema, BackupDestinationInfoSchema, BackupEntrySchema, backupCapability, type IBackupProvider, LocationStatSchema, } from './backup.cap.js';
 export { BrokerAddInputSchema, BrokerGetStateInputSchema, type BrokerInfo as UnifiedBrokerInfo, BrokerInfoSchema as UnifiedBrokerInfoSchema, type BrokerProviderInfo, BrokerProviderInfoSchema, BrokerPublishInputSchema, BrokerRegistryStatusSchema, type BrokerStatus as UnifiedBrokerStatus, BrokerStatusEnum, BrokerSubscribeInputSchema, BrokerSubscribeResultSchema, BrokerTestConnectionResultSchema, BrokerUnsubscribeInputSchema, brokerCapability, type IBrokerProvider, } from './broker.cap.js';
 export { cameraPipelineConfigCapability, type ICameraPipelineConfigProvider, } from './camera-pipeline-config.cap.js';
@@ -81,6 +85,7 @@ export { AudioChunkInputSchema, AudioClassificationLabelSchema, AudioLevelSchema
 export { CameraMetricsSchema, CameraMetricsWithDeviceIdSchema, OrchestratorMetricsSchema, } from './schemas/orchestrator-metrics.js';
 export type { CameraStream, CamProfile, CamStreamKind, DecodedAudioChunkWire, FrameHandleFormat, ProfileRtspEntry, ProfileSlot, ProfileSlotStatus, SubscribeAudioChunksInput, SubscribeAudioChunksResult, SubscribeFramesInput, SubscribeFramesResult, } from './schemas/streaming-shared.js';
 export { BrokerStatsSchema, BrokerStatusSchema, CAM_PROFILE_ORDER, CameraStreamSchema, CamProfileSchema, CamStreamKindSchema, CamStreamResolutionSchema, DecodedAudioChunkSchema, DecodedFrameSchema, EncodedPacketSchema, FrameHandleFormatSchema, FrameHandleSchema, makeProfileBrokerId, makeSourceBrokerId, ProfileRtspEntrySchema, ProfileSlotSchema, ProfileSlotStatusSchema, parseProfileBrokerId, StreamSourceEntrySchema, StreamSourceSchema, SubscribeAudioChunksInputSchema, SubscribeAudioChunksResultSchema, SubscribeFramesInputSchema, SubscribeFramesResultSchema, selectAssignedProfileSlots, } from './schemas/streaming-shared.js';
+export { type IServerManagementProvider, type ServerBootMode, ServerBootModeSchema, serverManagementCapability, type ServerPackageStatus, ServerPackageStatusSchema, type ServerRollbackInfo, ServerRollbackInfoSchema, type ServerUpdateActionResult, ServerUpdateActionResultSchema, type ServerUpdateCheckResult, ServerUpdateCheckResultSchema, type ServerUpdateState, ServerUpdateStateSchema, } from './server-management.cap.js';
 export { type CollectionColumn, CollectionColumnSchema, type CollectionIndex, CollectionIndexSchema, type ISettingsStoreProvider, QueryFilterSchema, SettingsRecordSchema, type SettingsStoreClient, settingsStoreCapability, } from './settings-store.cap.js';
 export type { ISmtpProvider } from './smtp-provider.cap.js';
 export { SendEmailInputSchema, SendEmailResultSchema, SmtpStatusSchema, smtpProviderCapability, } from './smtp-provider.cap.js';
@@ -194,6 +199,7 @@ import type { addonWidgetsCapability } from './addon-widgets.cap.js';
 import type { addonWidgetsSourceCapability } from './addon-widgets-source.cap.js';
 import type { addonsCapability } from './addons.cap.js';
 import type { adminUiCapability } from './admin-ui.cap.js';
+import type { viewerUiCapability } from './viewer-ui.cap.js';
 import type { advancedNotifierCapability } from './advanced-notifier.cap.js';
 import type { airQualitySensorCapability } from './air-quality-sensor.cap.js';
 import type { alarmPanelCapability } from './alarm-panel.cap.js';
@@ -204,6 +210,7 @@ import type { audioAnalyzerCapability } from './audio-analyzer.cap.js';
 import type { audioCodecCapability } from './audio-codec.cap.js';
 import type { audioMetricsCapability } from './audio-metrics.cap.js';
 import type { authProviderCapability } from './auth-provider.cap.js';
+import type { loginMethodCapability } from './login-method.cap.js';
 import type { automationControlCapability } from './automation-control.cap.js';
 import type { backupCapability } from './backup.cap.js';
 import type { binaryCapability } from './binary.cap.js';
@@ -278,6 +285,7 @@ import type { ptzAutotrackCapability } from './ptz-autotrack.cap.js';
 import type { rebootCapability } from './reboot.cap.js';
 import type { recordingCapability } from './recording.cap.js';
 import type { scriptRunnerCapability } from './script-runner.cap.js';
+import type { serverManagementCapability } from './server-management.cap.js';
 import type { settingsStoreCapability } from './settings-store.cap.js';
 import type { smokeCapability } from './smoke.cap.js';
 import type { smtpProviderCapability } from './smtp-provider.cap.js';
@@ -305,6 +313,6 @@ import type { webrtcSessionCapability } from './webrtc-session.cap.js';
 import type { zoneAnalyticsCapability } from './zone-analytics.cap.js';
 import type { zoneRulesCapability } from './zone-rules.cap.js';
 import type { zonesCapability } from './zones.cap.js';
-type AnyCapability = typeof addonSettingsCapability | typeof alertsCapability | typeof storageCapability | typeof storageProviderCapability | typeof storageEvictableCapability | typeof filesystemBrowseCapability | typeof backupCapability | typeof settingsStoreCapability | typeof logDestinationCapability | typeof adminUiCapability | typeof ssoBridgeCapability | typeof userPasskeysCapability | typeof smtpProviderCapability | typeof mqttBrokerCapability | typeof brokerCapability | typeof deviceAdoptionCapability | typeof deviceExportCapability | typeof addonPagesCapability | typeof addonPagesSourceCapability | typeof addonWidgetsCapability | typeof addonWidgetsSourceCapability | typeof customModelRegistryCapability | typeof modelDistributorCapability | typeof modelConvertCapability | typeof addonRoutesCapability | typeof streamBrokerCapability | typeof decoderCapability | typeof webrtcSessionCapability | typeof cameraStreamsCapability | typeof motionDetectionCapability | typeof pipelineExecutorCapability | typeof detectionPipelineCapability | typeof cameraPipelineConfigCapability | typeof pipelineRunnerCapability | typeof pipelineOrchestratorCapability | typeof audioAnalyzerCapability | typeof audioAnalysisCapability | typeof audioCodecCapability | typeof embeddingEncoderCapability | typeof deviceProviderCapability | typeof deviceManagerCapability | typeof deviceStateCapability | typeof authProviderCapability | typeof networkAccessCapability | typeof turnProviderCapability | typeof snapshotCapability | typeof notificationOutputCapability | typeof advancedNotifierCapability | typeof pipelineAnalyticsCapability | typeof metricsProviderCapability | typeof ptzCapability | typeof ptzAutotrackCapability | typeof consumablesCapability | typeof rebootCapability | typeof deviceDiscoveryCapability | typeof brightnessCapability | typeof colorCapability | typeof climateControlCapability | typeof coverCapability | typeof valveCapability | typeof humidifierCapability | typeof waterHeaterCapability | typeof weatherCapability | typeof imageCapability | typeof lockControlCapability | typeof vacuumControlCapability | typeof petFeederCapability | typeof lawnMowerControlCapability | typeof fanControlCapability | typeof controlCapability | typeof notifierCapability | typeof mediaPlayerCapability | typeof alarmPanelCapability | typeof presenceCapability | typeof scriptRunnerCapability | typeof automationControlCapability | typeof motionTriggerCapability | typeof eventsCapability | typeof zonesCapability | typeof zoneRulesCapability | typeof zoneAnalyticsCapability | typeof audioMetricsCapability | typeof motionCapability | typeof contactCapability | typeof floodCapability | typeof smokeCapability | typeof carbonMonoxideCapability | typeof gasCapability | typeof tamperCapability | typeof vibrationCapability | typeof connectivityCapability | typeof binaryCapability | typeof temperatureSensorCapability | typeof humiditySensorCapability | typeof ambientLightSensorCapability | typeof pressureSensorCapability | typeof powerMeterCapability | typeof airQualitySensorCapability | typeof numericSensorCapability | typeof enumSensorCapability | typeof recordingCapability | typeof deviceOpsCapability | typeof platformProbeCapability | typeof localNetworkCapability | typeof meshNetworkCapability | typeof userManagementCapability | typeof systemCapability | typeof networkQualityCapability | typeof toastCapability | typeof nodesCapability | typeof integrationsCapability | typeof addonsCapability | typeof oauthIntegrationCapability | typeof streamParamsCapability | typeof streamCatalogCapability | typeof motionZonesCapability | typeof privacyMaskCapability | typeof dayNightCapability | typeof imageSettingsCapability;
+type AnyCapability = typeof addonSettingsCapability | typeof alertsCapability | typeof storageCapability | typeof storageProviderCapability | typeof storageEvictableCapability | typeof filesystemBrowseCapability | typeof backupCapability | typeof settingsStoreCapability | typeof logDestinationCapability | typeof adminUiCapability | typeof viewerUiCapability | typeof ssoBridgeCapability | typeof userPasskeysCapability | typeof smtpProviderCapability | typeof mqttBrokerCapability | typeof brokerCapability | typeof deviceAdoptionCapability | typeof deviceExportCapability | typeof addonPagesCapability | typeof addonPagesSourceCapability | typeof addonWidgetsCapability | typeof addonWidgetsSourceCapability | typeof customModelRegistryCapability | typeof modelDistributorCapability | typeof modelConvertCapability | typeof addonRoutesCapability | typeof streamBrokerCapability | typeof decoderCapability | typeof webrtcSessionCapability | typeof cameraStreamsCapability | typeof motionDetectionCapability | typeof pipelineExecutorCapability | typeof detectionPipelineCapability | typeof cameraPipelineConfigCapability | typeof pipelineRunnerCapability | typeof pipelineOrchestratorCapability | typeof audioAnalyzerCapability | typeof audioAnalysisCapability | typeof audioCodecCapability | typeof embeddingEncoderCapability | typeof deviceProviderCapability | typeof deviceManagerCapability | typeof deviceStateCapability | typeof authProviderCapability | typeof loginMethodCapability | typeof networkAccessCapability | typeof turnProviderCapability | typeof snapshotCapability | typeof notificationOutputCapability | typeof advancedNotifierCapability | typeof pipelineAnalyticsCapability | typeof metricsProviderCapability | typeof ptzCapability | typeof ptzAutotrackCapability | typeof consumablesCapability | typeof rebootCapability | typeof deviceDiscoveryCapability | typeof brightnessCapability | typeof colorCapability | typeof climateControlCapability | typeof coverCapability | typeof valveCapability | typeof humidifierCapability | typeof waterHeaterCapability | typeof weatherCapability | typeof imageCapability | typeof lockControlCapability | typeof vacuumControlCapability | typeof petFeederCapability | typeof lawnMowerControlCapability | typeof fanControlCapability | typeof controlCapability | typeof notifierCapability | typeof mediaPlayerCapability | typeof alarmPanelCapability | typeof presenceCapability | typeof scriptRunnerCapability | typeof automationControlCapability | typeof motionTriggerCapability | typeof eventsCapability | typeof zonesCapability | typeof zoneRulesCapability | typeof zoneAnalyticsCapability | typeof audioMetricsCapability | typeof motionCapability | typeof contactCapability | typeof floodCapability | typeof smokeCapability | typeof carbonMonoxideCapability | typeof gasCapability | typeof tamperCapability | typeof vibrationCapability | typeof connectivityCapability | typeof binaryCapability | typeof temperatureSensorCapability | typeof humiditySensorCapability | typeof ambientLightSensorCapability | typeof pressureSensorCapability | typeof powerMeterCapability | typeof airQualitySensorCapability | typeof numericSensorCapability | typeof enumSensorCapability | typeof recordingCapability | typeof deviceOpsCapability | typeof platformProbeCapability | typeof localNetworkCapability | typeof meshNetworkCapability | typeof userManagementCapability | typeof systemCapability | typeof networkQualityCapability | typeof toastCapability | typeof nodesCapability | typeof serverManagementCapability | typeof integrationsCapability | typeof addonsCapability | typeof oauthIntegrationCapability | typeof streamParamsCapability | typeof streamCatalogCapability | typeof motionZonesCapability | typeof privacyMaskCapability | typeof dayNightCapability | typeof imageSettingsCapability;
 export type CapabilityName = AnyCapability['name'];
 export type ITypedReadinessRegistry = IReadinessRegistry<CapabilityName>;

package/dist/capabilities/login-method.cap.d.ts

@@ -0,0 +1,146 @@
+import { z } from 'zod';
+import { type InferProvider } from './capability-definition.js';
+/**
+ * `login-method` — collection cap through which auth addons contribute
+ * their pre-auth login surfaces to the login page. This is the SINGLE,
+ * generic mechanism that supersedes the dead `auth.listProviders` reader:
+ * every auth addon (OIDC, magic-link, WebAuthn/passkey) registers a
+ * `login-method` provider and the PUBLIC `auth.listLoginMethods`
+ * procedure aggregates them for the unauthenticated login page.
+ *
+ * A contribution is a discriminated union on `kind`:
+ *
+ *  - `redirect` — a declarative button. The login page renders a generic
+ *    button that navigates to `startUrl` (an addon-owned HTTP route).
+ *    Covers OIDC (`/addon/auth-oidc/<id>/start`) and magic-link with
+ *    ZERO shell-side JS. A future SSO addon plugs in the same way — the
+ *    login page needs NO change.
+ *
+ *  - `widget` — a Module-Federation widget the login page mounts (via
+ *    `loadRemoteBundle`) for an in-page ceremony. Covers the passkey
+ *    login ceremony, which must run `@simplewebauthn/browser` INSIDE the
+ *    addon bundle. The referenced widget also declares `preAuth: true` in
+ *    its `addon-widgets-source` catalog entry. `auth.listLoginMethods`
+ *    stamps a public `bundleUrl` from `addonId` + `bundle`.
+ *
+ * Every contribution carries a `stage`:
+ *  - `primary`        — shown on the first credentials screen (OIDC /
+ *                       magic-link buttons; a future usernameless passkey).
+ *  - `second-factor`  — shown AFTER the password leg, gated on the
+ *                       returned `factors` (passkey-as-2FA today).
+ *
+ * `mount: skip` — the cap is read server-side by the core auth router
+ * (`registry.getCollection('login-method')`), never mounted as its own
+ * tRPC router.
+ */
+/** When a login method renders in the two-phase login flow. */
+export declare const LoginStageEnum: z.ZodEnum<{
+    primary: "primary";
+    "second-factor": "second-factor";
+}>;
+/**
+ * A declarative redirect button — the login page navigates to `startUrl`.
+ * OIDC and magic-link contribute this; a future SSO addon does too.
+ */
+export declare const RedirectLoginMethodSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"redirect">;
+    id: z.ZodString;
+    label: z.ZodString;
+    icon: z.ZodOptional<z.ZodString>;
+    startUrl: z.ZodString;
+    stage: z.ZodEnum<{
+        primary: "primary";
+        "second-factor": "second-factor";
+    }>;
+}, z.core.$strip>;
+/**
+ * A Module-Federation widget the login page mounts for an in-page
+ * ceremony. `bundle` + `addonId` let `auth.listLoginMethods` stamp a
+ * public `bundleUrl`; `remote` is the MF descriptor `loadRemoteBundle`
+ * consumes. No `bundleUrl` here — it is server-stamped on the public
+ * output so the addon never encodes the static-route scheme.
+ */
+export declare const WidgetLoginMethodSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"widget">;
+    id: z.ZodString;
+    addonId: z.ZodString;
+    bundle: z.ZodString;
+    remote: z.ZodObject<{
+        remoteName: z.ZodString;
+        exposedModule: z.ZodString;
+        componentKey: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    stage: z.ZodEnum<{
+        primary: "primary";
+        "second-factor": "second-factor";
+    }>;
+}, z.core.$strip>;
+/** One login-method contribution — redirect button OR pre-auth widget. */
+export declare const LoginMethodContributionSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"redirect">;
+    id: z.ZodString;
+    label: z.ZodString;
+    icon: z.ZodOptional<z.ZodString>;
+    startUrl: z.ZodString;
+    stage: z.ZodEnum<{
+        primary: "primary";
+        "second-factor": "second-factor";
+    }>;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"widget">;
+    id: z.ZodString;
+    addonId: z.ZodString;
+    bundle: z.ZodString;
+    remote: z.ZodObject<{
+        remoteName: z.ZodString;
+        exposedModule: z.ZodString;
+        componentKey: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    stage: z.ZodEnum<{
+        primary: "primary";
+        "second-factor": "second-factor";
+    }>;
+}, z.core.$strip>], "kind">;
+export declare const loginMethodCapability: {
+    readonly name: "login-method";
+    readonly scope: "system";
+    readonly mode: "collection";
+    readonly internal: true;
+    readonly methods: {
+        readonly getLoginMethods: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodReadonly<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"redirect">;
+            id: z.ZodString;
+            label: z.ZodString;
+            icon: z.ZodOptional<z.ZodString>;
+            startUrl: z.ZodString;
+            stage: z.ZodEnum<{
+                primary: "primary";
+                "second-factor": "second-factor";
+            }>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"widget">;
+            id: z.ZodString;
+            addonId: z.ZodString;
+            bundle: z.ZodString;
+            remote: z.ZodObject<{
+                remoteName: z.ZodString;
+                exposedModule: z.ZodString;
+                componentKey: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            stage: z.ZodEnum<{
+                primary: "primary";
+                "second-factor": "second-factor";
+            }>;
+        }, z.core.$strip>], "kind">>>, import("./capability-definition.js").CapabilityMethodKind>;
+    };
+    /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
+    readonly mount: {
+        readonly kind: "skip";
+    };
+};
+export type ILoginMethodProvider = InferProvider<typeof loginMethodCapability>;
+/** A single login-method contribution (redirect | widget). */
+export type LoginMethodContribution = z.infer<typeof LoginMethodContributionSchema>;
+export type RedirectLoginMethod = z.infer<typeof RedirectLoginMethodSchema>;
+export type WidgetLoginMethod = z.infer<typeof WidgetLoginMethodSchema>;
+export type LoginStage = z.infer<typeof LoginStageEnum>;

package/dist/capabilities/nodes.cap.d.ts

@@ -32,6 +32,16 @@ declare const TopologyProcessSchema: z.ZodObject<{
     }, z.core.$strip>>>;
     groupId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+/**
+ * The node's runtime-updatable ROOT package (`@camstack/server` on the hub,
+ * `@camstack/agent` on agents) as reported by its `registerNode` manifest —
+ * version visibility for the Server management surface. Nullable: offline
+ * rows and pre-phase-2 nodes report none.
+ */
+declare const TopologyRootPackageSchema: z.ZodObject<{
+    name: z.ZodString;
+    version: z.ZodString;
+}, z.core.$strip>;
 declare const TopologyNodeSchema: z.ZodObject<{
     id: z.ZodString;
     name: z.ZodString;
@@ -79,6 +89,10 @@ declare const TopologyNodeSchema: z.ZodObject<{
             memoryRss: z.ZodNumber;
         }, z.core.$strip>>>;
     }, z.core.$strip>>>;
+    rootPackage: z.ZodNullable<z.ZodObject<{
+        name: z.ZodString;
+        version: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 declare const ClusterAddonNodeDeploymentSchema: z.ZodObject<{
     nodeId: z.ZodString;
@@ -168,6 +182,10 @@ export declare const nodesCapability: {
                     memoryRss: z.ZodNumber;
                 }, z.core.$strip>>>;
             }, z.core.$strip>>>;
+            rootPackage: z.ZodNullable<z.ZodObject<{
+                name: z.ZodString;
+                version: z.ZodString;
+            }, z.core.$strip>>;
         }, z.core.$strip>>>, import("./capability-definition.js").CapabilityMethodKind>;
         readonly deployAddon: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
             nodeId: z.ZodString;
@@ -266,4 +284,4 @@ export declare const nodesCapability: {
     };
 };
 export type INodesProvider = InferProvider<typeof nodesCapability>;
-export { TopologyNodeSchema, TopologyProcessSchema, TopologyServiceSchema, ClusterAddonStatusEntrySchema, ClusterAddonNodeDeploymentSchema, NodeAddonEntrySchema, };
+export { TopologyNodeSchema, TopologyProcessSchema, TopologyRootPackageSchema, TopologyServiceSchema, ClusterAddonStatusEntrySchema, ClusterAddonNodeDeploymentSchema, NodeAddonEntrySchema, };

package/dist/capabilities/server-management.cap.d.ts

@@ -0,0 +1,194 @@
+import { z } from 'zod';
+import { type InferProvider } from './capability-definition.js';
+/**
+ * server-management — per-NODE singleton capability for a node's ROOT
+ * package lifecycle (runtime-updatable node packages, phase 2: hub + docker
+ * agents).
+ *
+ * Each node's root package (`@camstack/server` on the hub, `@camstack/agent`
+ * on agents) carries the whole software stack in its npm dep tree, so ONE
+ * version describes the node. Updates install into
+ * `<dataDir>/server-root/versions/<v>/` and apply on restart via the baked
+ * starter (probation boot + auto-rollback to N-1).
+ *
+ * Providers:
+ *   - HUB: `ServerUpdateService` behind the `server-provided` mount
+ *     (`buildServerProviders` in trpc.router.ts) — the default target for
+ *     unpinned calls.
+ *   - AGENT: `AgentUpdateService` registered by the agent bootstrap under
+ *     the synthetic `agent-runtime` addonId and declared in the agent's
+ *     `$hub.registerNode` manifest.
+ *
+ * Node routing: singleton caps get the codegen/runtime-builder `nodeId`
+ * injection on every method — `input.nodeId` (or `nodePin(nodeId)` from the
+ * SDK) routes the call to that node's provider via the standard remote
+ * proxy (`createCapabilityProxy` → `$agent-cap-fwd` → the agent's
+ * in-process provider lookup). No `nodeId` → the hub's own provider.
+ *
+ * Spec: docs/superpowers/specs/2026-07-12-runtime-updatable-node-packages-design.md
+ */
+/**
+ * Where the running hub's code was loaded from:
+ *  - `workspace` — dev checkout (tsx / workspace dist); the starter defers to
+ *    plain resolution and runtime updates are refused.
+ *  - `baked`     — the immutable image seed closure (no data-dir root active).
+ *  - `data-root` — the runtime-updatable `<dataDir>/server-root` closure.
+ */
+declare const ServerBootModeSchema: z.ZodEnum<{
+    workspace: "workspace";
+    baked: "baked";
+    "data-root": "data-root";
+}>;
+/**
+ * Update lifecycle state:
+ *  - `idle` / `checking` / `staging` — steady / in-flight registry work.
+ *  - `pending-restart` — a version is staged and the node has NOT yet
+ *    restarted onto it (still running the OLD version).
+ *  - `awaiting-confirmation` — the node HAS restarted onto the staged version
+ *    (it is the active probation boot) and is waiting to confirm boot-health.
+ *    Apply/rollback are refused in this state and the node must NOT be
+ *    manually restarted, or the probation boot auto-rolls-back.
+ */
+declare const ServerUpdateStateSchema: z.ZodEnum<{
+    idle: "idle";
+    checking: "checking";
+    staging: "staging";
+    "pending-restart": "pending-restart";
+    "awaiting-confirmation": "awaiting-confirmation";
+}>;
+declare const ServerRollbackInfoSchema: z.ZodObject<{
+    fromVersion: z.ZodString;
+    toVersion: z.ZodNullable<z.ZodString>;
+    atMs: z.ZodNumber;
+    reason: z.ZodString;
+}, z.core.$strip>;
+declare const ServerPackageStatusSchema: z.ZodObject<{
+    packageName: z.ZodString;
+    runningVersion: z.ZodNullable<z.ZodString>;
+    nodeRuntimeVersion: z.ZodNullable<z.ZodString>;
+    activeVersion: z.ZodNullable<z.ZodString>;
+    previousVersion: z.ZodNullable<z.ZodString>;
+    seedVersion: z.ZodNullable<z.ZodString>;
+    latestVersion: z.ZodNullable<z.ZodString>;
+    updateAvailable: z.ZodBoolean;
+    bootMode: z.ZodEnum<{
+        workspace: "workspace";
+        baked: "baked";
+        "data-root": "data-root";
+    }>;
+    updateState: z.ZodEnum<{
+        idle: "idle";
+        checking: "checking";
+        staging: "staging";
+        "pending-restart": "pending-restart";
+        "awaiting-confirmation": "awaiting-confirmation";
+    }>;
+    pendingVersion: z.ZodNullable<z.ZodString>;
+    rolledBack: z.ZodNullable<z.ZodObject<{
+        fromVersion: z.ZodString;
+        toVersion: z.ZodNullable<z.ZodString>;
+        atMs: z.ZodNumber;
+        reason: z.ZodString;
+    }, z.core.$strip>>;
+    stateFileCorrupt: z.ZodBoolean;
+    lastCheckedAtMs: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strip>;
+declare const ServerUpdateCheckResultSchema: z.ZodObject<{
+    packageName: z.ZodString;
+    runningVersion: z.ZodNullable<z.ZodString>;
+    latestVersion: z.ZodNullable<z.ZodString>;
+    updateAvailable: z.ZodBoolean;
+    checkedAtMs: z.ZodNumber;
+    error: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+declare const ServerUpdateActionResultSchema: z.ZodObject<{
+    accepted: z.ZodBoolean;
+    targetVersion: z.ZodNullable<z.ZodString>;
+    restarting: z.ZodBoolean;
+    message: z.ZodString;
+}, z.core.$strip>;
+export declare const serverManagementCapability: {
+    readonly name: "server-management";
+    readonly scope: "system";
+    readonly mode: "singleton";
+    readonly methods: {
+        readonly getServerPackageStatus: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodObject<{
+            packageName: z.ZodString;
+            runningVersion: z.ZodNullable<z.ZodString>;
+            nodeRuntimeVersion: z.ZodNullable<z.ZodString>;
+            activeVersion: z.ZodNullable<z.ZodString>;
+            previousVersion: z.ZodNullable<z.ZodString>;
+            seedVersion: z.ZodNullable<z.ZodString>;
+            latestVersion: z.ZodNullable<z.ZodString>;
+            updateAvailable: z.ZodBoolean;
+            bootMode: z.ZodEnum<{
+                workspace: "workspace";
+                baked: "baked";
+                "data-root": "data-root";
+            }>;
+            updateState: z.ZodEnum<{
+                idle: "idle";
+                checking: "checking";
+                staging: "staging";
+                "pending-restart": "pending-restart";
+                "awaiting-confirmation": "awaiting-confirmation";
+            }>;
+            pendingVersion: z.ZodNullable<z.ZodString>;
+            rolledBack: z.ZodNullable<z.ZodObject<{
+                fromVersion: z.ZodString;
+                toVersion: z.ZodNullable<z.ZodString>;
+                atMs: z.ZodNumber;
+                reason: z.ZodString;
+            }, z.core.$strip>>;
+            stateFileCorrupt: z.ZodBoolean;
+            lastCheckedAtMs: z.ZodNullable<z.ZodNumber>;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
+        readonly checkServerUpdate: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodObject<{
+            packageName: z.ZodString;
+            runningVersion: z.ZodNullable<z.ZodString>;
+            latestVersion: z.ZodNullable<z.ZodString>;
+            updateAvailable: z.ZodBoolean;
+            checkedAtMs: z.ZodNumber;
+            error: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, "mutation">;
+        readonly applyServerUpdate: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            version: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            accepted: z.ZodBoolean;
+            targetVersion: z.ZodNullable<z.ZodString>;
+            restarting: z.ZodBoolean;
+            message: z.ZodString;
+        }, z.core.$strip>, "mutation">;
+        readonly rollbackServerUpdate: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodObject<{
+            accepted: z.ZodBoolean;
+            targetVersion: z.ZodNullable<z.ZodString>;
+            restarting: z.ZodBoolean;
+            message: z.ZodString;
+        }, z.core.$strip>, "mutation">;
+        /**
+         * Plain process restart of the node's root process — no version change.
+         * The supervisor (docker restart policy / launchd / Electron main)
+         * relaunches and the starter loads the SAME active version. Refused while
+         * a stage is in flight or a version is already staged awaiting restart
+         * (use apply/rollback instead, so the pending version is not skipped).
+         */
+        readonly restartServer: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodObject<{
+            accepted: z.ZodBoolean;
+            targetVersion: z.ZodNullable<z.ZodString>;
+            restarting: z.ZodBoolean;
+            message: z.ZodString;
+        }, z.core.$strip>, "mutation">;
+    };
+    /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
+    readonly mount: {
+        readonly kind: "server-provided";
+    };
+};
+export type IServerManagementProvider = InferProvider<typeof serverManagementCapability>;
+export type ServerBootMode = z.infer<typeof ServerBootModeSchema>;
+export type ServerUpdateState = z.infer<typeof ServerUpdateStateSchema>;
+export type ServerRollbackInfo = z.infer<typeof ServerRollbackInfoSchema>;
+export type ServerPackageStatus = z.infer<typeof ServerPackageStatusSchema>;
+export type ServerUpdateCheckResult = z.infer<typeof ServerUpdateCheckResultSchema>;
+export type ServerUpdateActionResult = z.infer<typeof ServerUpdateActionResultSchema>;
+export { ServerBootModeSchema, ServerUpdateStateSchema, ServerRollbackInfoSchema, ServerPackageStatusSchema, ServerUpdateCheckResultSchema, ServerUpdateActionResultSchema, };

package/dist/capabilities/user-passkeys.cap.d.ts

@@ -23,6 +23,19 @@ import { type InferProvider } from './capability-definition.js';
  *      b. `finishAuthentication({userId, response})` → server verifies
  *         the assertion, bumps the credential counter, returns ok.
  *
+ *   2b. Usernameless (discoverable-credential) authentication — the
+ *       passkey IS the primary factor, no password leg:
+ *       a. `beginDiscoverableAuthentication({})` → assertion options with
+ *          EMPTY `allowCredentials` (the browser offers every resident
+ *          passkey it holds for this RP) + `userVerification: 'required'`
+ *          (the passkey replaces both factors, so UV is mandatory).
+ *          The challenge is stored server-side, NOT bound to any user.
+ *       b. `finishDiscoverableAuthentication({response})` → the provider
+ *          resolves the credential by the response's credential id,
+ *          verifies the assertion against the stored challenge + that
+ *          credential's public key/counter, and returns the OWNING
+ *          `userId` — the caller (core auth router) mints the session.
+ *
  *   3. Management:
  *      - `listPasskeys({userId})` — enumerate user's enrolled credentials.
  *      - `removePasskey({userId, credentialId})` — revoke one credential.
@@ -70,6 +83,15 @@ export declare const userPasskeysCapability: {
         }, z.core.$strip>, z.ZodObject<{
             verified: z.ZodBoolean;
         }, z.core.$strip>, "mutation">;
+        readonly beginDiscoverableAuthentication: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
+            optionsJSON: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>, "mutation">;
+        readonly finishDiscoverableAuthentication: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            response: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>, z.ZodObject<{
+            verified: z.ZodBoolean;
+            userId: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, "mutation">;
         readonly listPasskeys: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
             userId: z.ZodString;
         }, z.core.$strip>, z.ZodArray<z.ZodObject<{

package/dist/capabilities/viewer-ui.cap.d.ts

@@ -0,0 +1,24 @@
+import { z } from 'zod';
+import { type InferProvider } from './capability-definition.js';
+/**
+ * viewer-ui — serves the CamStack VIEWER web build (the Expo/React-Native
+ * universal client's PWA export) from the hub, alongside admin-ui. Mirrors
+ * `admin-ui` exactly: a singleton, server-internal cap exposing the static
+ * dist directory + build version so `main.ts` can mount the SPA under a
+ * dedicated prefix.
+ */
+export declare const viewerUiCapability: {
+    readonly name: "viewer-ui";
+    readonly scope: "system";
+    readonly mode: "singleton";
+    readonly internal: true;
+    readonly methods: {
+        readonly getStaticDir: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodObject<{
+            staticDir: z.ZodString;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
+        readonly getVersion: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodObject<{
+            version: z.ZodString;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
+    };
+};
+export type IViewerUiProvider = InferProvider<typeof viewerUiCapability>;