@camstack/types 1.2.15 → 1.2.16

package/dist/capabilities/backup.cap.d.ts

@@ -111,6 +111,32 @@ declare const LocationStatSchema: z.ZodObject<{
     fileCount: z.ZodNumber;
     present: z.ZodBoolean;
 }, z.core.$strip>;
+/**
+ * A backup schedule — the N:M "entry" that binds one cron cadence to a
+ * SET of destination locations. Supersedes the per-location cron on
+ * `BackupDestinationPolicy`: an operator creates a schedule, picks the
+ * `backups` locations it should write to, and the orchestrator fans a
+ * single archive out to all of them when the cron fires.
+ *
+ * `retentionCount` is per-schedule (D-decision 2026-07-28): every
+ * location targeted by this schedule keeps this many archives from
+ * this schedule's runs.
+ *
+ * `dataSources` optionally narrows which top-level state locations
+ * (db, addons, tls, …) are archived; omitted = the orchestrator's
+ * default full set.
+ */
+declare const BackupScheduleSchema: z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodString;
+    cron: z.ZodString;
+    enabled: z.ZodBoolean;
+    locationIds: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+    retentionCount: z.ZodNumber;
+    dataSources: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+    lastRunAt: z.ZodOptional<z.ZodNumber>;
+    nextRunAt: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
 /**
  * backup — singleton capability for backup management.
  *
@@ -155,6 +181,7 @@ export declare const backupCapability: {
             destinations: z.ZodOptional<z.ZodArray<z.ZodString>>;
             locations: z.ZodOptional<z.ZodArray<z.ZodString>>;
             label: z.ZodOptional<z.ZodString>;
+            retentionCount: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strip>>, z.ZodReadonly<z.ZodArray<z.ZodObject<{
             id: z.ZodString;
             destinationId: z.ZodOptional<z.ZodString>;
@@ -262,7 +289,52 @@ export declare const backupCapability: {
             error: z.ZodOptional<z.ZodString>;
             nextRuns: z.ZodReadonly<z.ZodArray<z.ZodNumber>>;
         }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
+        /**
+         * List every backup schedule (the N:M entries), each with its
+         * computed `nextRunAt`. Powers the Schedules section of the
+         * admin-UI Backups page.
+         */
+        readonly listSchedules: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodReadonly<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            cron: z.ZodString;
+            enabled: z.ZodBoolean;
+            locationIds: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+            retentionCount: z.ZodNumber;
+            dataSources: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+            lastRunAt: z.ZodOptional<z.ZodNumber>;
+            nextRunAt: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>>, import("./capability-definition.js").CapabilityMethodKind>;
+        /**
+         * Create or replace a schedule. An empty / absent `id` mints a new
+         * one; a present `id` replaces in place. `cron` is validated
+         * server-side; `locationIds` must reference existing `backups`
+         * locations (unknown ids are dropped with a warning).
+         */
+        readonly upsertSchedule: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            id: z.ZodOptional<z.ZodString>;
+            label: z.ZodString;
+            cron: z.ZodString;
+            enabled: z.ZodBoolean;
+            locationIds: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+            retentionCount: z.ZodNumber;
+            dataSources: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            cron: z.ZodString;
+            enabled: z.ZodBoolean;
+            locationIds: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+            retentionCount: z.ZodNumber;
+            dataSources: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
+            lastRunAt: z.ZodOptional<z.ZodNumber>;
+            nextRunAt: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>, "mutation">;
+        /** Delete a schedule by id. Does not touch the target locations. */
+        readonly deleteSchedule: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            id: z.ZodString;
+        }, z.core.$strip>, z.ZodVoid, "mutation">;
     };
 };
 export type IBackupProvider = InferProvider<typeof backupCapability>;
-export { BackupEntrySchema, BackupSubDestinationInfoSchema, BackupDestinationInfoSchema, BackupArchiveEntrySchema, ArchiveEntrySchema, ArchiveManifestSchema, LocationStatSchema, };
+export { ArchiveEntrySchema, ArchiveManifestSchema, BackupArchiveEntrySchema, BackupDestinationInfoSchema, BackupEntrySchema, BackupScheduleSchema, BackupSubDestinationInfoSchema, LocationStatSchema, };

package/dist/capabilities/storage.cap.d.ts

@@ -125,6 +125,7 @@ export declare const storageCapability: {
             defaultRoot: z.ZodOptional<z.ZodEnum<{
                 data: "data";
                 media: "media";
+                backup: "backup";
             }>>;
         }, z.core.$strip>>>, import("./capability-definition.js").CapabilityMethodKind>;
         readonly upsertLocation: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{

package/dist/generated/addon-api.d.ts

@@ -2296,6 +2296,7 @@ export type AppRouter = import("@trpc/server/unstable-core-do-not-import").Route
                 destinations?: string[] | undefined;
                 locations?: string[] | undefined;
                 label?: string | undefined;
+                retentionCount?: number | undefined;
             } | undefined;
             output: readonly {
                 id: string;
@@ -2414,6 +2415,55 @@ export type AppRouter = import("@trpc/server/unstable-core-do-not-import").Route
             };
             meta: object;
         }>;
+        listSchedules: import("@trpc/server").TRPCQueryProcedure<{
+            input: {
+                nodeId?: string | undefined;
+            } | undefined;
+            output: readonly {
+                id: string;
+                label: string;
+                cron: string;
+                enabled: boolean;
+                locationIds: readonly string[];
+                retentionCount: number;
+                dataSources?: readonly string[] | undefined;
+                lastRunAt?: number | undefined;
+                nextRunAt?: number | undefined;
+            }[];
+            meta: object;
+        }>;
+        upsertSchedule: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+                label: string;
+                cron: string;
+                enabled: boolean;
+                locationIds: readonly string[];
+                retentionCount: number;
+                id?: string | undefined;
+                dataSources?: readonly string[] | undefined;
+            };
+            output: {
+                id: string;
+                label: string;
+                cron: string;
+                enabled: boolean;
+                locationIds: readonly string[];
+                retentionCount: number;
+                dataSources?: readonly string[] | undefined;
+                lastRunAt?: number | undefined;
+                nextRunAt?: number | undefined;
+            };
+            meta: object;
+        }>;
+        deleteSchedule: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+                id: string;
+            };
+            output: void;
+            meta: object;
+        }>;
     }>>;
     battery: import("@trpc/server").TRPCBuiltRouter<{
         ctx: TrpcContext;
@@ -14761,7 +14811,7 @@ export type AppRouter = import("@trpc/server/unstable-core-do-not-import").Route
                 cardinality: "single" | "multi";
                 description?: string | undefined;
                 defaultsTo?: string | undefined;
-                defaultRoot?: "data" | "media" | undefined;
+                defaultRoot?: "backup" | "data" | "media" | undefined;
             }[];
             meta: object;
         }>;
@@ -19721,6 +19771,7 @@ export type AppRouter = import("@trpc/server/unstable-core-do-not-import").Route
                 destinations?: string[] | undefined;
                 locations?: string[] | undefined;
                 label?: string | undefined;
+                retentionCount?: number | undefined;
             } | undefined;
             output: readonly {
                 id: string;
@@ -19839,6 +19890,55 @@ export type AppRouter = import("@trpc/server/unstable-core-do-not-import").Route
             };
             meta: object;
         }>;
+        listSchedules: import("@trpc/server").TRPCQueryProcedure<{
+            input: {
+                nodeId?: string | undefined;
+            } | undefined;
+            output: readonly {
+                id: string;
+                label: string;
+                cron: string;
+                enabled: boolean;
+                locationIds: readonly string[];
+                retentionCount: number;
+                dataSources?: readonly string[] | undefined;
+                lastRunAt?: number | undefined;
+                nextRunAt?: number | undefined;
+            }[];
+            meta: object;
+        }>;
+        upsertSchedule: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+                label: string;
+                cron: string;
+                enabled: boolean;
+                locationIds: readonly string[];
+                retentionCount: number;
+                id?: string | undefined;
+                dataSources?: readonly string[] | undefined;
+            };
+            output: {
+                id: string;
+                label: string;
+                cron: string;
+                enabled: boolean;
+                locationIds: readonly string[];
+                retentionCount: number;
+                dataSources?: readonly string[] | undefined;
+                lastRunAt?: number | undefined;
+                nextRunAt?: number | undefined;
+            };
+            meta: object;
+        }>;
+        deleteSchedule: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+                id: string;
+            };
+            output: void;
+            meta: object;
+        }>;
     }>>;
     battery: import("@trpc/server").TRPCBuiltRouter<{
         ctx: TrpcContext;
@@ -32186,7 +32286,7 @@ export type AppRouter = import("@trpc/server/unstable-core-do-not-import").Route
                 cardinality: "single" | "multi";
                 description?: string | undefined;
                 defaultsTo?: string | undefined;
-                defaultRoot?: "data" | "media" | undefined;
+                defaultRoot?: "backup" | "data" | "media" | undefined;
             }[];
             meta: object;
         }>;

package/dist/generated/method-access-map.d.ts

@@ -6,7 +6,7 @@
  * scope+access check inside `protectedProcedure` (see
  * `server/backend/src/api/trpc/trpc.middleware.ts`).
  *
- * Coverage: 811 method paths across 117 capabilities.
+ * Coverage: 814 method paths across 117 capabilities.
  */
 import type { CapabilityMethodAccess } from '../capabilities/capability-definition.js';
 export interface MethodAccessRecord {

package/dist/generated/system-proxy.d.ts

@@ -58,7 +58,7 @@ export interface SystemProxy {
     readonly alerts: Pick<InferProvider<typeof alertsCapability>, 'emit' | 'update' | 'list' | 'getUnreadCount' | 'markRead' | 'markAllRead' | 'dismiss'>;
     readonly audioAnalyzer: Pick<InferProvider<typeof audioAnalyzerCapability>, 'analyseChunk' | 'classify' | 'isReady' | 'dispose' | 'reprobeAudioEngine'>;
     readonly audioCodec: Pick<InferProvider<typeof audioCodecCapability>, 'listSupportedCodecs' | 'canHandle' | 'createDecodeSession' | 'createEncodeSession' | 'closeSession' | 'pushEncodedFrame' | 'pullPcm' | 'pushPcm' | 'pullEncoded' | 'flushEncode' | 'listActiveSessions'>;
-    readonly backup: Pick<InferProvider<typeof backupCapability>, 'listDestinations' | 'trigger' | 'list' | 'listLocations' | 'getEntries' | 'restore' | 'delete' | 'listArchives' | 'upsertDestinationPolicy' | 'previewSchedule'>;
+    readonly backup: Pick<InferProvider<typeof backupCapability>, 'listDestinations' | 'trigger' | 'list' | 'listLocations' | 'getEntries' | 'restore' | 'delete' | 'listArchives' | 'upsertDestinationPolicy' | 'previewSchedule' | 'listSchedules' | 'upsertSchedule' | 'deleteSchedule'>;
     readonly broker: Pick<InferProvider<typeof brokerCapability>, 'list' | 'get' | 'listProviders' | 'add' | 'remove' | 'testConnection' | 'getSettings' | 'setSettings' | 'getBrokerConfig' | 'getSettingsSchema' | 'testSettings' | 'publish' | 'subscribe' | 'unsubscribe' | 'getState' | 'getStatus'>;
     readonly decoder: Pick<InferProvider<typeof decoderCapability>, 'supportsCodec' | 'getInfo' | 'createSession' | 'destroySession' | 'pushPacket' | 'openStream' | 'pullFrames' | 'pullHandles' | 'getFrame' | 'getShmStats' | 'updateConfig' | 'getStats' | 'listActiveSessions' | 'reprobeHwaccel'>;
     readonly deviceAdoption: Pick<InferProvider<typeof deviceAdoptionCapability>, 'listCandidateFilters' | 'listCandidates' | 'getCandidate' | 'refresh' | 'adopt' | 'release' | 'resync'>;

package/dist/index.js

@@ -1260,16 +1260,23 @@ var StorageLocationDeclarationSchema = zod.z.object({
 	* Which node root the seeded `<id>:default` instance is placed under on a
 	* FRESH install:
 	* - `'data'` (default) — the node's data dir (`CAMSTACK_DATA` / boot dir),
-	*   the appData volume. Right for small/durable data (backups, logs, models).
+	*   the appData volume. Right for small/durable data (logs, models).
 	* - `'media'` — the dedicated media volume (`CAMSTACK_MEDIA_ROOT`) when that
 	*   env is set, else falls back to the data root. Right for bulky, hot media
 	*   (recordings, event media) that should stay off the appData disk.
+	* - `'backup'` — the dedicated backup volume (`CAMSTACK_BACKUP_ROOT`, default
+	*   `/backups` in the image) so archives live on their own mount rather than
+	*   filling the appData disk. Falls back to the data root when unset.
 	*
 	* Only affects the seeded default's `basePath`; operators can repoint any
 	* location afterwards, and a `defaultsTo` slot inherits its parent's root
 	* regardless of this field. Absent (the common case) is treated as `'data'`.
 	*/
-	defaultRoot: zod.z.enum(["data", "media"]).optional()
+	defaultRoot: zod.z.enum([
+		"data",
+		"media",
+		"backup"
+	]).optional()
 });
 //#endregion
 //#region src/interfaces/device-capabilities/camera.ts
@@ -14269,7 +14276,10 @@ function createSystemProxy(api) {
 			delete: (input) => dispatch("backup", "delete", "mutation", input),
 			listArchives: (input) => dispatch("backup", "listArchives", "query", input),
 			upsertDestinationPolicy: (input) => dispatch("backup", "upsertDestinationPolicy", "mutation", input),
-			previewSchedule: (input) => dispatch("backup", "previewSchedule", "query", input)
+			previewSchedule: (input) => dispatch("backup", "previewSchedule", "query", input),
+			listSchedules: (input) => dispatch("backup", "listSchedules", "query", input),
+			upsertSchedule: (input) => dispatch("backup", "upsertSchedule", "mutation", input),
+			deleteSchedule: (input) => dispatch("backup", "deleteSchedule", "mutation", input)
 		},
 		broker: {
 			list: (input) => dispatch("broker", "list", "query", input),
@@ -16301,6 +16311,41 @@ var LocationStatSchema = zod.z.object({
 	present: zod.z.boolean()
 });
 /**
+* A backup schedule — the N:M "entry" that binds one cron cadence to a
+* SET of destination locations. Supersedes the per-location cron on
+* `BackupDestinationPolicy`: an operator creates a schedule, picks the
+* `backups` locations it should write to, and the orchestrator fans a
+* single archive out to all of them when the cron fires.
+*
+* `retentionCount` is per-schedule (D-decision 2026-07-28): every
+* location targeted by this schedule keeps this many archives from
+* this schedule's runs.
+*
+* `dataSources` optionally narrows which top-level state locations
+* (db, addons, tls, …) are archived; omitted = the orchestrator's
+* default full set.
+*/
+var BackupScheduleSchema = zod.z.object({
+	/** Stable id. Generated by the orchestrator on first upsert if absent. */
+	id: zod.z.string(),
+	/** Operator-facing display name. */
+	label: zod.z.string(),
+	/** 5-field POSIX cron. Empty = disabled cadence (kept for editing). */
+	cron: zod.z.string(),
+	/** Master on/off toggle for the whole schedule. */
+	enabled: zod.z.boolean(),
+	/** `backups`-location ids this schedule writes to (fan-out set). */
+	locationIds: zod.z.array(zod.z.string()).readonly(),
+	/** Archives kept per targeted location for this schedule. */
+	retentionCount: zod.z.number().int().min(1).max(1e3),
+	/** Optional subset of source locations to include; omitted = all. */
+	dataSources: zod.z.array(zod.z.string()).readonly().optional(),
+	/** ms-epoch of last successful run. */
+	lastRunAt: zod.z.number().optional(),
+	/** ms-epoch of next computed firing (read-only, filled on list). */
+	nextRunAt: zod.z.number().optional()
+});
+/**
 * backup — singleton capability for backup management.
 *
 * Implemented by `local-backup` addon. Future providers (S3, rsync)
@@ -16327,7 +16372,14 @@ var backupCapability = {
 			/** Subset of registered `backup-destination` addon ids to write to. */
 			destinations: zod.z.array(zod.z.string()).optional(),
 			locations: zod.z.array(zod.z.string()).optional(),
-			label: zod.z.string().optional()
+			label: zod.z.string().optional(),
+			/**
+			* Per-run retention override applied to every targeted
+			* destination. Used by schedule-driven runs (per-entry
+			* retention). Omitted = each destination's own policy
+			* retention (manual runs).
+			*/
+			retentionCount: zod.z.number().int().min(1).max(1e3).optional()
 		}).optional(), zod.z.array(BackupEntrySchema).readonly(), {
 			kind: "mutation",
 			auth: "admin"
@@ -16414,7 +16466,36 @@ var backupCapability = {
 			ok: zod.z.boolean(),
 			error: zod.z.string().optional(),
 			nextRuns: zod.z.array(zod.z.number()).readonly()
-		}))
+		})),
+		/**
+		* List every backup schedule (the N:M entries), each with its
+		* computed `nextRunAt`. Powers the Schedules section of the
+		* admin-UI Backups page.
+		*/
+		listSchedules: require_sleep.method(zod.z.void(), zod.z.array(BackupScheduleSchema).readonly(), { auth: "admin" }),
+		/**
+		* Create or replace a schedule. An empty / absent `id` mints a new
+		* one; a present `id` replaces in place. `cron` is validated
+		* server-side; `locationIds` must reference existing `backups`
+		* locations (unknown ids are dropped with a warning).
+		*/
+		upsertSchedule: require_sleep.method(zod.z.object({
+			id: zod.z.string().optional(),
+			label: zod.z.string(),
+			cron: zod.z.string(),
+			enabled: zod.z.boolean(),
+			locationIds: zod.z.array(zod.z.string()).readonly(),
+			retentionCount: zod.z.number().int().min(1).max(1e3),
+			dataSources: zod.z.array(zod.z.string()).readonly().optional()
+		}), BackupScheduleSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/** Delete a schedule by id. Does not touch the target locations. */
+		deleteSchedule: require_sleep.method(zod.z.object({ id: zod.z.string() }), zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		})
 	}
 };
 //#endregion
@@ -27657,6 +27738,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"backup.deleteSchedule": {
+		capName: "backup",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"backup.getEntries": {
 		capName: "backup",
 		capScope: "system",
@@ -27687,6 +27774,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"backup.listSchedules": {
+		capName: "backup",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"backup.previewSchedule": {
 		capName: "backup",
 		capScope: "system",
@@ -27711,6 +27804,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"backup.upsertSchedule": {
+		capName: "backup",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"battery.wakeForStream": {
 		capName: "battery",
 		capScope: "device",

package/dist/index.mjs

@@ -1259,16 +1259,23 @@ var StorageLocationDeclarationSchema = z.object({
 	* Which node root the seeded `<id>:default` instance is placed under on a
 	* FRESH install:
 	* - `'data'` (default) — the node's data dir (`CAMSTACK_DATA` / boot dir),
-	*   the appData volume. Right for small/durable data (backups, logs, models).
+	*   the appData volume. Right for small/durable data (logs, models).
 	* - `'media'` — the dedicated media volume (`CAMSTACK_MEDIA_ROOT`) when that
 	*   env is set, else falls back to the data root. Right for bulky, hot media
 	*   (recordings, event media) that should stay off the appData disk.
+	* - `'backup'` — the dedicated backup volume (`CAMSTACK_BACKUP_ROOT`, default
+	*   `/backups` in the image) so archives live on their own mount rather than
+	*   filling the appData disk. Falls back to the data root when unset.
 	*
 	* Only affects the seeded default's `basePath`; operators can repoint any
 	* location afterwards, and a `defaultsTo` slot inherits its parent's root
 	* regardless of this field. Absent (the common case) is treated as `'data'`.
 	*/
-	defaultRoot: z.enum(["data", "media"]).optional()
+	defaultRoot: z.enum([
+		"data",
+		"media",
+		"backup"
+	]).optional()
 });
 //#endregion
 //#region src/interfaces/device-capabilities/camera.ts
@@ -14268,7 +14275,10 @@ function createSystemProxy(api) {
 			delete: (input) => dispatch("backup", "delete", "mutation", input),
 			listArchives: (input) => dispatch("backup", "listArchives", "query", input),
 			upsertDestinationPolicy: (input) => dispatch("backup", "upsertDestinationPolicy", "mutation", input),
-			previewSchedule: (input) => dispatch("backup", "previewSchedule", "query", input)
+			previewSchedule: (input) => dispatch("backup", "previewSchedule", "query", input),
+			listSchedules: (input) => dispatch("backup", "listSchedules", "query", input),
+			upsertSchedule: (input) => dispatch("backup", "upsertSchedule", "mutation", input),
+			deleteSchedule: (input) => dispatch("backup", "deleteSchedule", "mutation", input)
 		},
 		broker: {
 			list: (input) => dispatch("broker", "list", "query", input),
@@ -16300,6 +16310,41 @@ var LocationStatSchema = z.object({
 	present: z.boolean()
 });
 /**
+* A backup schedule — the N:M "entry" that binds one cron cadence to a
+* SET of destination locations. Supersedes the per-location cron on
+* `BackupDestinationPolicy`: an operator creates a schedule, picks the
+* `backups` locations it should write to, and the orchestrator fans a
+* single archive out to all of them when the cron fires.
+*
+* `retentionCount` is per-schedule (D-decision 2026-07-28): every
+* location targeted by this schedule keeps this many archives from
+* this schedule's runs.
+*
+* `dataSources` optionally narrows which top-level state locations
+* (db, addons, tls, …) are archived; omitted = the orchestrator's
+* default full set.
+*/
+var BackupScheduleSchema = z.object({
+	/** Stable id. Generated by the orchestrator on first upsert if absent. */
+	id: z.string(),
+	/** Operator-facing display name. */
+	label: z.string(),
+	/** 5-field POSIX cron. Empty = disabled cadence (kept for editing). */
+	cron: z.string(),
+	/** Master on/off toggle for the whole schedule. */
+	enabled: z.boolean(),
+	/** `backups`-location ids this schedule writes to (fan-out set). */
+	locationIds: z.array(z.string()).readonly(),
+	/** Archives kept per targeted location for this schedule. */
+	retentionCount: z.number().int().min(1).max(1e3),
+	/** Optional subset of source locations to include; omitted = all. */
+	dataSources: z.array(z.string()).readonly().optional(),
+	/** ms-epoch of last successful run. */
+	lastRunAt: z.number().optional(),
+	/** ms-epoch of next computed firing (read-only, filled on list). */
+	nextRunAt: z.number().optional()
+});
+/**
 * backup — singleton capability for backup management.
 *
 * Implemented by `local-backup` addon. Future providers (S3, rsync)
@@ -16326,7 +16371,14 @@ var backupCapability = {
 			/** Subset of registered `backup-destination` addon ids to write to. */
 			destinations: z.array(z.string()).optional(),
 			locations: z.array(z.string()).optional(),
-			label: z.string().optional()
+			label: z.string().optional(),
+			/**
+			* Per-run retention override applied to every targeted
+			* destination. Used by schedule-driven runs (per-entry
+			* retention). Omitted = each destination's own policy
+			* retention (manual runs).
+			*/
+			retentionCount: z.number().int().min(1).max(1e3).optional()
 		}).optional(), z.array(BackupEntrySchema).readonly(), {
 			kind: "mutation",
 			auth: "admin"
@@ -16413,7 +16465,36 @@ var backupCapability = {
 			ok: z.boolean(),
 			error: z.string().optional(),
 			nextRuns: z.array(z.number()).readonly()
-		}))
+		})),
+		/**
+		* List every backup schedule (the N:M entries), each with its
+		* computed `nextRunAt`. Powers the Schedules section of the
+		* admin-UI Backups page.
+		*/
+		listSchedules: method(z.void(), z.array(BackupScheduleSchema).readonly(), { auth: "admin" }),
+		/**
+		* Create or replace a schedule. An empty / absent `id` mints a new
+		* one; a present `id` replaces in place. `cron` is validated
+		* server-side; `locationIds` must reference existing `backups`
+		* locations (unknown ids are dropped with a warning).
+		*/
+		upsertSchedule: method(z.object({
+			id: z.string().optional(),
+			label: z.string(),
+			cron: z.string(),
+			enabled: z.boolean(),
+			locationIds: z.array(z.string()).readonly(),
+			retentionCount: z.number().int().min(1).max(1e3),
+			dataSources: z.array(z.string()).readonly().optional()
+		}), BackupScheduleSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/** Delete a schedule by id. Does not touch the target locations. */
+		deleteSchedule: method(z.object({ id: z.string() }), z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		})
 	}
 };
 //#endregion
@@ -27656,6 +27737,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"backup.deleteSchedule": {
+		capName: "backup",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"backup.getEntries": {
 		capName: "backup",
 		capScope: "system",
@@ -27686,6 +27773,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"backup.listSchedules": {
+		capName: "backup",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"backup.previewSchedule": {
 		capName: "backup",
 		capScope: "system",
@@ -27710,6 +27803,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"backup.upsertSchedule": {
+		capName: "backup",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"battery.wakeForStream": {
 		capName: "battery",
 		capScope: "device",

package/dist/interfaces/storage-location-declaration.d.ts

@@ -31,6 +31,7 @@ export declare const StorageLocationDeclarationSchema: z.ZodObject<{
     defaultRoot: z.ZodOptional<z.ZodEnum<{
         data: "data";
         media: "media";
+        backup: "backup";
     }>>;
 }, z.core.$strip>;
 /** Inferred TypeScript type for `StorageLocationDeclarationSchema`. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/types",
-  "version": "1.2.15",
+  "version": "1.2.16",
   "description": "Shared types, interfaces, and model catalogs for the CamStack detection ecosystem",
   "keywords": [
     "camstack",