@camstack/types 1.2.250 → 1.2.252

package/dist/index.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-CvwUEq16.js");
+const require_sleep = require("./sleep-BAgDk7I9.js");
 const require_event_category = require("./event-category-BVfsrBYA.js");
 const require_canonical_hash = require("./canonical-hash-CSE4ioRi.js");
 const require_enums = require("./enums.js");
@@ -8442,7 +8442,7 @@ var brokerCapability = {
 		}),
 		/** Read the broker's cached state for a key. Returns `null` when
 		*  unknown to the broker (never published / unknown entity). */
-		getState: require_sleep.method(GetStateInputSchema, zod.z.unknown().nullable()),
+		getState: require_sleep.method(GetStateInputSchema, zod.z.unknown().nullable(), { auth: "admin" }),
 		/** Status method — explicit registration with a `z.void()` input so
 		*  the codegen-generated tRPC router types its input as
 		*  `{addonId?: string, nodeId?: string}` (system-scoped collection
@@ -10288,6 +10288,16 @@ var CollectionIndexSchema = zod.z.object({
 * namespace, or none. Making the door enforce it is tracked separately —
 * it renames tables, so it needs a migration.
 *
+* **So every method is `auth: 'admin'` (D634).** Because nothing scopes a
+* call to its caller, a `protected` method here was a raw, unredacted read
+* (and write) of every addon's collections for any role holding
+* `category:system` — which is every role: a `viewer` could read every
+* notifier token in plaintext from `notifiers:notification-targets`. No
+* browser or app client calls this cap. Addons are not affected: an
+* addon's `ctx.api` cap call is resolved to the provider directly and never
+* enters the tRPC router (so the tier gates sessions and tokens, never
+* addons), and the hub itself calls it through the capability registry.
+*
 *   - `{ collection: 'addon-settings' }` → table `addon-settings`
 *   - `{ namespace: 'my-addon', collection: 'addon-settings' }` →
 *     table `my-addon:addon-settings`
@@ -10309,14 +10319,17 @@ var settingsStoreCapability = {
 			namespace: zod.z.string().optional(),
 			collection: zod.z.string(),
 			key: zod.z.string()
-		}), zod.z.unknown()),
+		}), zod.z.unknown(), { auth: "admin" }),
 		/** Set a value by key in a collection (upsert). */
 		set: require_sleep.method(zod.z.object({
 			namespace: zod.z.string().optional(),
 			collection: zod.z.string(),
 			key: zod.z.string(),
 			value: zod.z.unknown()
-		}), zod.z.void(), { kind: "mutation" }),
+		}), zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/**
 		* Rows matching a filter.
 		*
@@ -10337,7 +10350,7 @@ var settingsStoreCapability = {
 			collection: zod.z.string(),
 			filter: QueryFilterSchema.optional(),
 			columns: zod.z.array(zod.z.string()).readonly().optional()
-		}), zod.z.array(SettingsRecordSchema).readonly()),
+		}), zod.z.array(SettingsRecordSchema).readonly(), { auth: "admin" }),
 		/**
 		* Make a SLOT hold this row — insert it, or update whatever already
 		* occupies the slot — and answer with the id the row HAS.
@@ -10390,7 +10403,10 @@ var settingsStoreCapability = {
 		}), zod.z.object({ 
 		/** The id the row HAS: assigned by SQLite on an insert, or the existing
 		*  row's own id on an update. */
-id: zod.z.union([zod.z.string(), zod.z.number()]) }), { kind: "mutation" }),
+id: zod.z.union([zod.z.string(), zod.z.number()]) }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Insert a new record. */
 		insert: require_sleep.method(zod.z.object({
 			namespace: zod.z.string().optional(),
@@ -10405,7 +10421,10 @@ id: zod.z.union([zod.z.string(), zod.z.number()]) }), { kind: "mutation" }),
 		* for an absent one, or the ROWID SQLite assigned on an `INTEGER`
 		* primary key — which is the only place an auto key is knowable.
 		*/
-id: zod.z.union([zod.z.string(), zod.z.number()]) }), { kind: "mutation" }),
+id: zod.z.union([zod.z.string(), zod.z.number()]) }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/**
 		* Insert MANY records in ONE transaction, returning how many landed.
 		*
@@ -10433,20 +10452,29 @@ id: zod.z.union([zod.z.string(), zod.z.number()]) }), { kind: "mutation" }),
 			namespace: zod.z.string().optional(),
 			collection: zod.z.string(),
 			records: zod.z.array(BulkRecordSchema).readonly()
-		}), zod.z.object({ inserted: zod.z.number().int() }), { kind: "mutation" }),
+		}), zod.z.object({ inserted: zod.z.number().int() }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Update an existing record by ID. */
 		update: require_sleep.method(zod.z.object({
 			namespace: zod.z.string().optional(),
 			collection: zod.z.string(),
 			id: zod.z.string(),
 			data: zod.z.record(zod.z.string(), zod.z.unknown())
-		}), zod.z.void(), { kind: "mutation" }),
+		}), zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Delete a record by key/ID. */
 		delete: require_sleep.method(zod.z.object({
 			namespace: zod.z.string().optional(),
 			collection: zod.z.string(),
 			key: zod.z.string()
-		}), zod.z.void(), { kind: "mutation" }),
+		}), zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/**
 		* Delete every record matching `filter`, in ONE statement, returning how
 		* many rows went. This exists because its absence made every retention
@@ -10465,7 +10493,10 @@ id: zod.z.union([zod.z.string(), zod.z.number()]) }), { kind: "mutation" }),
 			namespace: zod.z.string().optional(),
 			collection: zod.z.string(),
 			filter: MutationFilterSchema
-		}), zod.z.object({ deleted: zod.z.number().int() }), { kind: "mutation" }),
+		}), zod.z.object({ deleted: zod.z.number().int() }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/**
 		* Apply `data` to every record matching `filter`, in one statement,
 		* returning how many rows changed. Same filter contract as
@@ -10476,13 +10507,16 @@ id: zod.z.union([zod.z.string(), zod.z.number()]) }), { kind: "mutation" }),
 			collection: zod.z.string(),
 			filter: MutationFilterSchema,
 			data: zod.z.record(zod.z.string(), zod.z.unknown())
-		}), zod.z.object({ updated: zod.z.number().int() }), { kind: "mutation" }),
+		}), zod.z.object({ updated: zod.z.number().int() }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Count entries in a collection, optionally filtered. */
 		count: require_sleep.method(zod.z.object({
 			namespace: zod.z.string().optional(),
 			collection: zod.z.string(),
 			filter: QueryFilterSchema.optional()
-		}), zod.z.number()),
+		}), zod.z.number(), { auth: "admin" }),
 		/**
 		* `COUNT(*)` and one `SUM` / `MIN` / `MAX` per requested field, in ONE
 		* statement, over the rows `filter` selects.
@@ -10508,7 +10542,7 @@ id: zod.z.union([zod.z.string(), zod.z.number()]) }), { kind: "mutation" }),
 			collection: zod.z.string(),
 			fields: zod.z.array(AggregateFieldSchema).readonly(),
 			filter: QueryFilterSchema.optional()
-		}), AggregateResultSchema),
+		}), AggregateResultSchema, { auth: "admin" }),
 		/** Grouped counts per ((field-origin)/bucketSize) bucket, filtered. */
 		histogram: require_sleep.method(zod.z.object({
 			namespace: zod.z.string().optional(),
@@ -10520,12 +10554,12 @@ id: zod.z.union([zod.z.string(), zod.z.number()]) }), { kind: "mutation" }),
 		}), zod.z.array(zod.z.object({
 			bucket: zod.z.number().int(),
 			count: zod.z.number().int()
-		})).readonly()),
+		})).readonly(), { auth: "admin" }),
 		/** Check if a collection is empty. */
 		isEmpty: require_sleep.method(zod.z.object({
 			namespace: zod.z.string().optional(),
 			collection: zod.z.string()
-		}), zod.z.boolean()),
+		}), zod.z.boolean(), { auth: "admin" }),
 		/**
 		* Declare a typed (SQL-backed) collection with explicit columns +
 		* indexes. Idempotent: re-declaring an existing collection with the
@@ -10546,7 +10580,10 @@ id: zod.z.union([zod.z.string(), zod.z.number()]) }), { kind: "mutation" }),
 			collection: zod.z.string(),
 			columns: zod.z.array(CollectionColumnSchema).readonly(),
 			indexes: zod.z.array(CollectionIndexSchema).readonly().optional()
-		}), zod.z.void(), { kind: "mutation" })
+		}), zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		})
 	}
 };
 //#endregion
@@ -11800,8 +11837,14 @@ var deviceExportCapability = {
 		getStatus: require_sleep.method(zod.z.void(), DeviceExportStatusSchema),
 		listSupportedDeviceKinds: require_sleep.method(zod.z.void(), zod.z.array(DeviceKindSchema)),
 		listExposedDevices: require_sleep.method(zod.z.void(), zod.z.array(ExposedDeviceSchema)),
-		exposeDevice: require_sleep.method(ExposeInputSchema, zod.z.void(), { kind: "mutation" }),
-		unexposeDevice: require_sleep.method(UnexposeInputSchema, zod.z.void(), { kind: "mutation" })
+		exposeDevice: require_sleep.method(ExposeInputSchema, zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		unexposeDevice: require_sleep.method(UnexposeInputSchema, zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		})
 	}
 };
 //#endregion
@@ -12559,11 +12602,14 @@ var deviceManagerCapability = {
 		/** Remove a device from the DB + in-memory registry. Called by DeviceManagerApi.remove(). */
 		removeDevice: require_sleep.method(DeviceRemovePayloadSchema, zod.z.void(), { kind: "mutation" }),
 		/** Persist device config blob. Called by DeviceConfig.set/setAll(). */
-		persistConfig: require_sleep.method(DevicePersistConfigPayloadSchema, zod.z.void(), { kind: "mutation" }),
+		persistConfig: require_sleep.method(DevicePersistConfigPayloadSchema, zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Load persisted config for a device. Called at restore time. */
-		loadConfig: require_sleep.method(zod.z.object({ deviceId: zod.z.number() }), zod.z.record(zod.z.string(), zod.z.unknown())),
+		loadConfig: require_sleep.method(zod.z.object({ deviceId: zod.z.number() }), zod.z.record(zod.z.string(), zod.z.unknown()), { auth: "admin" }),
 		/** Load persisted runtime state. Called at device adopt time. */
-		loadRuntimeState: require_sleep.method(zod.z.object({ deviceId: zod.z.number() }), zod.z.record(zod.z.string(), zod.z.unknown())),
+		loadRuntimeState: require_sleep.method(zod.z.object({ deviceId: zod.z.number() }), zod.z.record(zod.z.string(), zod.z.unknown()), { auth: "admin" }),
 		/** Load operator-organisational meta surface for a device. Called by
 		*  the kernel proxy to populate `DeviceContext.deviceMeta` before
 		*  the device class constructor runs. Returns `null` when the id
@@ -13128,6 +13174,23 @@ var deviceManagerCapability = {
 		*/
 		getAllBindings: require_sleep.method(zod.z.object({}), zod.z.array(DeviceBindingsForDeviceSchema)),
 		/**
+		* The ids of every device bound to AT LEAST ONE of `capNames` — ids only,
+		* ascending (D636).
+		*
+		* The targeted form of "which devices are openings / carry a battery":
+		* before it, the alarm's household scan and the battery section's picker
+		* read the whole fleet (~433 KB slim) and then `getBindingsBatch` over
+		* ~900 ids in five calls. Same resolver as `getBindings` (so a WRAPPED
+		* binding counts exactly as the routing does), walked server-side like
+		* `getAllBindings`; only the matching ids cross the wire. Names are the
+		* caller's to resolve with the targeted `listAll({ deviceIds })`.
+		*
+		* Tier: `protected`, like its siblings `getBindings` / `getBindingsBatch` /
+		* `getAllBindings` — which devices carry a cap is routing metadata every
+		* signed-in client already reads, and it reveals nothing those do not.
+		*/
+		listDeviceIdsByCaps: require_sleep.method(zod.z.object({ capNames: zod.z.array(zod.z.string().min(1)).min(1).max(16) }), zod.z.array(zod.z.number())),
+		/**
 		* Activate (or deactivate) a wrapper addon for a (device, cap) pair — the
 		* per-camera function switch's ONE authority (D62).
 		*
@@ -15382,12 +15445,27 @@ var mqttBrokerCapability = {
 	},
 	methods: {
 		listBrokers: require_sleep.method(zod.z.void(), zod.z.array(BrokerInfoSchema)),
-		getBrokerConfig: require_sleep.method(IdInputSchema, BrokerConnectionDetailsSchema),
-		addBroker: require_sleep.method(AddBrokerInputSchema, AddBrokerResultSchema, { kind: "mutation" }),
-		removeBroker: require_sleep.method(IdInputSchema, zod.z.void(), { kind: "mutation" }),
-		testConnection: require_sleep.method(IdInputSchema, TestResultSchema$1, { kind: "mutation" }),
-		startEmbeddedBroker: require_sleep.method(StartEmbeddedInputSchema, StartEmbeddedResultSchema, { kind: "mutation" }),
-		stopEmbeddedBroker: require_sleep.method(IdInputSchema, zod.z.void(), { kind: "mutation" }),
+		getBrokerConfig: require_sleep.method(IdInputSchema, BrokerConnectionDetailsSchema, { auth: "admin" }),
+		addBroker: require_sleep.method(AddBrokerInputSchema, AddBrokerResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		removeBroker: require_sleep.method(IdInputSchema, zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		testConnection: require_sleep.method(IdInputSchema, TestResultSchema$1, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		startEmbeddedBroker: require_sleep.method(StartEmbeddedInputSchema, StartEmbeddedResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		stopEmbeddedBroker: require_sleep.method(IdInputSchema, zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		getStatus: require_sleep.method(zod.z.void(), StatusSchema)
 	}
 };
@@ -15708,6 +15786,18 @@ var TargetKindSchema = zod.z.object({
 	*/
 	iconMediaType: zod.z.string().optional(),
 	configSchema: ConfigSchemaPassthrough,
+	/**
+	* The config keys that decide WHERE this kind's secrets are sent (server,
+	* base URL, instance, chat, recipient). A save that changes any of them
+	* while leaving a secret redacted is refused by the provider (D634), so an
+	* editor uses this to ask for the secret on exactly those edits instead of
+	* on every edit.
+	*
+	* Optional: absent from a provider that holds no secret (the Home Assistant
+	* kinds) and from a provider older than this field — an editor that finds
+	* it absent must assume ANY edit may need the secret.
+	*/
+	destinationKeys: zod.z.array(zod.z.string()).optional(),
 	supportsDiscovery: zod.z.boolean(),
 	caps: TargetKindCapsSchema
 });
@@ -15752,25 +15842,40 @@ var notificationOutputCapability = {
 	mode: "collection",
 	methods: {
 		listTargetKinds: require_sleep.method(zod.z.object({}), zod.z.array(TargetKindSchema)),
-		listTargets: require_sleep.method(zod.z.object({}), zod.z.array(TargetSchema)),
+		listTargets: require_sleep.method(zod.z.object({}), zod.z.array(TargetSchema), { auth: "admin" }),
 		discoverTargets: require_sleep.method(zod.z.object({
 			kind: zod.z.string(),
 			config: zod.z.record(zod.z.string(), zod.z.unknown()).optional()
-		}), zod.z.array(DiscoveredTargetSchema)),
+		}), zod.z.array(DiscoveredTargetSchema), { auth: "admin" }),
 		send: require_sleep.method(zod.z.object({
 			targetId: zod.z.string(),
 			notification: NotificationSchema
-		}), SendResultSchema, { kind: "mutation" }),
+		}), SendResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		testTarget: require_sleep.method(zod.z.object({
 			targetId: zod.z.string(),
 			sample: NotificationSchema.optional()
-		}), TestResultSchema, { kind: "mutation" }),
-		upsertTarget: require_sleep.method(zod.z.object({ target: TargetSchema }), TargetSchema, { kind: "mutation" }),
-		deleteTarget: require_sleep.method(zod.z.object({ targetId: zod.z.string() }), zod.z.void(), { kind: "mutation" }),
+		}), TestResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		upsertTarget: require_sleep.method(zod.z.object({ target: TargetSchema }), TargetSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		deleteTarget: require_sleep.method(zod.z.object({ targetId: zod.z.string() }), zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		setTargetEnabled: require_sleep.method(zod.z.object({
 			targetId: zod.z.string(),
 			enabled: zod.z.boolean()
-		}), zod.z.void(), { kind: "mutation" })
+		}), zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		})
 	}
 };
 //#endregion
@@ -17049,6 +17154,21 @@ var NC_ALARM_SYSTEM_EVENT_KINDS = [
 	"alarm-disarmed"
 ];
 /**
+* The SUSTAINED device-health family — a battery or a consumable below the
+* operator's threshold, and its recovery. Named once because three readers
+* need the same four: the viewer's dedicated "battery and consumables" rule
+* section (a stored system rule whose kinds are ALL in this family is shown
+* there), both editors' warning when these kinds meet a `deviceTypes` filter
+* (the filter that silenced the live rule for two weeks — D636), and the
+* catalog parity spec.
+*/
+var NC_BATTERY_CONSUMABLE_SYSTEM_EVENT_KINDS = [
+	"device-battery-low",
+	"device-battery-normal",
+	"device-consumable-low",
+	"device-consumable-normal"
+];
+/**
 * One coherent system-event condition. `kinds` is the required opt-in safety
 * gate; the remaining lists are optional narrowing filters relevant to the
 * selected kinds.
@@ -17068,6 +17188,19 @@ var NcSystemEventConditionSchema = zod.z.object({
 	* does not carry) matches no `deviceTypes` list.
 	*/
 	deviceTypes: zod.z.array(zod.z.string().min(1)).min(1).optional(),
+	/**
+	* Devices this rule NEVER speaks about, whatever else matched. Scoped to the
+	* same kind family as `deviceIds` (`systemEventFilterApplies(kind,
+	* 'deviceIds')`) and applied AFTER it: include first, then exclude. A
+	* consumable subject (`consumable:<id>:<key>`) is excluded by its device id.
+	*
+	* It never fails closed: a subject that carries no device id is not in the
+	* list, so it is not excluded. "Every battery except the one thermometer that
+	* reads 0 % forever" is the question this answers — expressed as an include
+	* list it would have to name every other battery device, and every device
+	* adopted later would be silently left out (D636).
+	*/
+	excludeDeviceIds: zod.z.array(zod.z.number().int()).min(1).optional(),
 	nodeIds: zod.z.array(zod.z.string().min(1)).min(1).optional(),
 	packageNames: zod.z.array(zod.z.string().min(1)).min(1).optional()
 });
@@ -18316,6 +18449,14 @@ var NC_CONDITION_CATALOG = [
 				value: "server-updated",
 				label: "Server updated"
 			},
+			{
+				value: "device-battery-low",
+				label: "Battery low"
+			},
+			{
+				value: "device-battery-normal",
+				label: "Battery back to normal"
+			},
 			{
 				value: "device-consumable-low",
 				label: "Consumable low"
@@ -26403,54 +26544,78 @@ var storageCapability = {
 		resolve: require_sleep.method(zod.z.object({
 			location: StorageLocationRefSchema,
 			relativePath: zod.z.string()
-		}), zod.z.string()),
+		}), zod.z.string(), { auth: "admin" }),
 		write: require_sleep.method(zod.z.object({
 			location: StorageLocationRefSchema,
 			relativePath: zod.z.string(),
 			data: zod.z.instanceof(Uint8Array)
-		}), zod.z.void(), { kind: "mutation" }),
+		}), zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		read: require_sleep.method(zod.z.object({
 			location: StorageLocationRefSchema,
 			relativePath: zod.z.string()
-		}), zod.z.instanceof(Uint8Array)),
+		}), zod.z.instanceof(Uint8Array), { auth: "admin" }),
 		exists: require_sleep.method(zod.z.object({
 			location: StorageLocationRefSchema,
 			relativePath: zod.z.string()
-		}), zod.z.boolean()),
+		}), zod.z.boolean(), { auth: "admin" }),
 		list: require_sleep.method(zod.z.object({
 			location: StorageLocationRefSchema,
 			prefix: zod.z.string().optional()
-		}), zod.z.array(zod.z.string()).readonly()),
+		}), zod.z.array(zod.z.string()).readonly(), { auth: "admin" }),
 		delete: require_sleep.method(zod.z.object({
 			location: StorageLocationRefSchema,
 			relativePath: zod.z.string()
-		}), zod.z.void(), { kind: "mutation" }),
+		}), zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		getAvailableSpace: require_sleep.method(zod.z.object({ location: StorageLocationRefSchema }), zod.z.number().nullable()),
 		beginUpload: require_sleep.method(zod.z.object({
 			location: StorageLocationRefSchema,
 			relativePath: zod.z.string(),
 			sizeBytes: zod.z.number().optional()
-		}), zod.z.object({ uploadId: zod.z.string() }), { kind: "mutation" }),
+		}), zod.z.object({ uploadId: zod.z.string() }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		writeChunk: require_sleep.method(zod.z.object({
 			uploadId: zod.z.string(),
 			offset: zod.z.number(),
 			data: zod.z.instanceof(Uint8Array)
-		}), zod.z.void(), { kind: "mutation" }),
-		finalizeUpload: require_sleep.method(zod.z.object({ uploadId: zod.z.string() }), zod.z.void(), { kind: "mutation" }),
-		abortUpload: require_sleep.method(zod.z.object({ uploadId: zod.z.string() }), zod.z.void(), { kind: "mutation" }),
+		}), zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		finalizeUpload: require_sleep.method(zod.z.object({ uploadId: zod.z.string() }), zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		abortUpload: require_sleep.method(zod.z.object({ uploadId: zod.z.string() }), zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		beginDownload: require_sleep.method(zod.z.object({
 			location: StorageLocationRefSchema,
 			relativePath: zod.z.string()
 		}), zod.z.object({
 			downloadId: zod.z.string(),
 			sizeBytes: zod.z.number()
-		}), { kind: "mutation" }),
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		readChunk: require_sleep.method(zod.z.object({
 			downloadId: zod.z.string(),
 			offset: zod.z.number(),
 			length: zod.z.number()
-		}), zod.z.instanceof(Uint8Array)),
-		endDownload: require_sleep.method(zod.z.object({ downloadId: zod.z.string() }), zod.z.void(), { kind: "mutation" }),
+		}), zod.z.instanceof(Uint8Array), { auth: "admin" }),
+		endDownload: require_sleep.method(zod.z.object({ downloadId: zod.z.string() }), zod.z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		listLocations: require_sleep.method(zod.z.object({ type: StorageLocationTypeSchema.optional() }), zod.z.array(StorageLocationSchema).readonly()),
 		listLocationDeclarations: require_sleep.method(zod.z.void(), zod.z.array(StorageLocationDeclarationSchema).readonly()),
 		upsertLocation: require_sleep.method(StorageLocationSchema.omit({
@@ -28880,7 +29045,98 @@ var WebrtcLadderDecisionSchema = zod.z.object({
 	serverSending: zod.z.boolean().nullable(),
 	/** Epoch ms. The overlay prints its age; a decision from 40 minutes ago
 	*  must not read like one from this second. */
-	at: zod.z.number()
+	at: zod.z.number(),
+	/** The broker's own cause when it is finer than `cause` can carry, e.g.
+	*  `trial-revert` (reported as `stall`/`loss` for older consumers). Optional:
+	*  an older server strips it instead of rejecting the answer. */
+	causeDetail: zod.z.string().optional()
+});
+/**
+* Why the adaptive ladder is NOT climbing on this session right now (D635).
+* Before this, a session held on its rung for a reason and a session with no
+* ladder at all both read "never moved". Every number is one the controller
+* used; `null` is unknown, never zero (D393).
+*/
+/**
+* The hold codes this build knows. The WIRE carries `code` as a plain string:
+* this output is validated by the router, so a closed enum would make a server
+* built before the NEXT code reject the whole debug answer (review m1). A
+* consumer maps an unknown code to a generic "held" and shows `summary`.
+*/
+var WEBRTC_CLIMB_HOLD_CODES = [
+	"stall-building",
+	"delivery",
+	"no-evidence",
+	"warming",
+	"cooldown",
+	"capacity",
+	"try-unclean",
+	"try-backoff",
+	"trial",
+	"suspended"
+];
+/** Clean-path conditions a try-climb can be refused on (`tryBlockedBy`). */
+var WEBRTC_TRY_BLOCKERS = [
+	"delivery",
+	"loss",
+	"rtt",
+	"shared-telemetry"
+];
+var WebrtcClimbHoldSchema = zod.z.object({
+	/** `stall-building` — the client receives ≪ what is sent; `delivery` — the
+	*  current rung is not landing whole; `no-evidence` — no receiver feedback;
+	*  `warming` — healthy, accumulating the streak; `cooldown` — too soon after
+	*  a change; `capacity` — a MEASURED probe below the next rung's bar;
+	*  `try-unclean` — no capacity evidence, and the path is not clean enough to
+	*  try; `try-backoff` — a try reverted, waiting out its backoff; `trial` —
+	*  this rung IS a try, reverting if it does not land; `suspended` —
+	*  recorded playback on the track. */
+	code: zod.z.string(),
+	/** The rung a climb would go to. */
+	nextTier: require_sleep.CamProfileSchema,
+	/** Bytes received ÷ bytes sent over the delivery window (≥ one GOP). */
+	deliveryRatio: zod.z.number().nullable(),
+	deliveryWindowMs: zod.z.number().nullable(),
+	/** The ratio a climb requires. */
+	climbDeliveryRatio: zod.z.number(),
+	/** The receiver's bandwidth estimate (REMB), kbps. Capped by what is sent. */
+	capacityKbps: zod.z.number().nullable(),
+	/** The viewer's downlink probe for this session, kbps. */
+	probeKbps: zod.z.number().nullable(),
+	/** The next rung's measured bitrate, kbps. */
+	nextTierKbps: zod.z.number().nullable(),
+	capacityMargin: zod.z.number(),
+	/** The capacity a climb to `nextTier` needs, kbps (bitrate × margin, or the
+	*  client ladder threshold when the rung has measured nothing). */
+	neededKbps: zod.z.number().nullable(),
+	/** For `try-unclean`: which clean-path condition failed (a `WebrtcTryBlocker`,
+	*  carried as a string for the same reason as `code`). */
+	tryBlockedBy: zod.z.string().nullable(),
+	/** The delivery ratio and the loss ratio a try requires / must stay under.
+	*  Optional, like every field added to this schema after it first shipped:
+	*  the router validates output, so a REQUIRED new field makes a newer server
+	*  reject an older broker's whole answer (review m1). */
+	tryDeliveryRatio: zod.z.number().optional(),
+	tryMaxLossRatio: zod.z.number().optional(),
+	/** For `try-backoff`: time until the next try, ms. */
+	retryInMs: zod.z.number().nullable(),
+	/** The last try that reverted in this viewer session. */
+	lastRevert: zod.z.object({
+		tier: require_sleep.CamProfileSchema,
+		deliveryRatio: zod.z.number().nullable(),
+		stalled: zod.z.boolean(),
+		at: zod.z.number()
+	}).nullable(),
+	/** For `trial`: how long this rung has been on trial, and for how long it must hold. */
+	trialForMs: zod.z.number().nullable(),
+	trialMs: zod.z.number().nullable(),
+	healthyForMs: zod.z.number().nullable(),
+	requiredHealthyMs: zod.z.number().nullable(),
+	/** Epoch ms this hold's code began. */
+	since: zod.z.number(),
+	/** The same one-line account the broker logs, e.g.
+	*  `held: delivery 0.97 over 4.0s ok, REMB 480 kbps < mid 1800 kbps × 1.2`. */
+	summary: zod.z.string()
 });
 /** Per-tier count of MEASURED downgrades this viewer session has suffered. */
 var WebrtcTierFailureSchema = zod.z.object({
@@ -28944,7 +29200,12 @@ var WebrtcSessionDebugSchema = zod.z.object({
 	tierFailures: zod.z.array(WebrtcTierFailureSchema),
 	/** Successful promotions in this viewer session (drives the progressive
 	*  healthy timer). Null when no ladder is running. */
-	upgradeCount: zod.z.number().nullable()
+	upgradeCount: zod.z.number().nullable(),
+	/** Why the ladder is not climbing right now. Null when no ladder runs, it
+	*  is at the top rung, or it just moved. Optional because this output is
+	*  validated by the router: a server carrying this schema must still accept
+	*  the answer of a stream-broker deployed before the field existed. */
+	climbHold: WebrtcClimbHoldSchema.nullable().optional()
 });
 /**
 * WebRTC session — device-scoped facade over the system `webrtc` cap.
@@ -35225,6 +35486,11 @@ var ClientNetworkStatsSchema = zod.z.object({
 	jitterMs: zod.z.number(),
 	estimatedBandwidthKbps: zod.z.number(),
 	packetLossPercent: zod.z.number().min(0).max(100),
+	/** The viewer's latest `/adaptive-probe` reading, Mbps — whatever it read
+	*  (D635 I4). Absent when it never probed or the probe failed (unknown). */
+	downlinkMbps: zod.z.number().optional(),
+	/** Age of that reading when this report was sent, ms. */
+	downlinkAgeMs: zod.z.number().optional(),
 	lastUpdated: zod.z.number()
 });
 var DeviceNetworkStatsSchema = zod.z.object({
@@ -35244,7 +35510,11 @@ var networkQualityCapability = {
 			rttMs: zod.z.number().min(0).max(6e4),
 			jitterMs: zod.z.number().min(0).max(1e4),
 			estimatedBandwidthKbps: zod.z.number().min(0).max(1e6),
-			packetLossPercent: zod.z.number().min(0).max(100)
+			packetLossPercent: zod.z.number().min(0).max(100),
+			/** Latest downlink probe, Mbps, whatever it read; absent = never / failed. */
+			downlinkMbps: zod.z.number().min(0).max(1e5).optional(),
+			/** Age of that probe when this report is sent, ms. */
+			downlinkAgeMs: zod.z.number().min(0).max(864e5).optional()
 		}), zod.z.void(), { kind: "mutation" })
 	},
 	/** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
@@ -50595,6 +50865,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.listDeviceIdsByCaps": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.listLocationDescriptions": {
 		capName: "device-manager",
 		capScope: "system",
@@ -59065,6 +59341,7 @@ function createSystemProxy(api) {
 			removeByIntegration: (input) => dispatch("deviceManager", "removeByIntegration", "mutation", input),
 			getBindingsBatch: (input) => dispatch("deviceManager", "getBindingsBatch", "query", input),
 			getAllBindings: (input) => dispatch("deviceManager", "getAllBindings", "query", input),
+			listDeviceIdsByCaps: (input) => dispatch("deviceManager", "listDeviceIdsByCaps", "query", input),
 			listWrappersForCap: (input) => dispatch("deviceManager", "listWrappersForCap", "query", input),
 			listBindableCapsForDeviceType: (input) => dispatch("deviceManager", "listBindableCapsForDeviceType", "query", input),
 			discoverDevices: (input) => dispatch("deviceManager", "discoverDevices", "mutation", input),
@@ -65019,6 +65296,7 @@ exports.NC_AUDIO_SAMPLING_MIN_SEC = NC_AUDIO_SAMPLING_MIN_SEC;
 exports.NC_AUDIO_SEED = NC_AUDIO_SEED;
 exports.NC_AUTHORABLE_SYSTEM_EVENT_KINDS = NC_AUTHORABLE_SYSTEM_EVENT_KINDS;
 exports.NC_BASE_CONDITION_KEYS = NC_BASE_CONDITION_KEYS;
+exports.NC_BATTERY_CONSUMABLE_SYSTEM_EVENT_KINDS = NC_BATTERY_CONSUMABLE_SYSTEM_EVENT_KINDS;
 exports.NC_CLIP_RETENTION_MAX_SEC = NC_CLIP_RETENTION_MAX_SEC;
 exports.NC_CONDITION_CATALOG = NC_CONDITION_CATALOG;
 exports.NC_CONFIRM_DEFAULT_MAX_IMAGE_PX = NC_CONFIRM_DEFAULT_MAX_IMAGE_PX;
@@ -65556,12 +65834,15 @@ exports.VectorUpsertInputSchema = VectorUpsertInputSchema;
 exports.VectorUpsertResultSchema = VectorUpsertResultSchema;
 exports.VibrationStatusSchema = VibrationStatusSchema;
 exports.VideoEncodeSchema = VideoEncodeSchema;
+exports.WEBRTC_CLIMB_HOLD_CODES = WEBRTC_CLIMB_HOLD_CODES;
 exports.WEBRTC_EGRESS_PROFILE = WEBRTC_EGRESS_PROFILE;
+exports.WEBRTC_TRY_BLOCKERS = WEBRTC_TRY_BLOCKERS;
 exports.WEEKLY_MASK_LENGTH = WEEKLY_MASK_LENGTH;
 exports.WELL_KNOWN_TABS = require_sleep.WELL_KNOWN_TABS;
 exports.WELL_KNOWN_TAB_MAP = require_sleep.WELL_KNOWN_TAB_MAP;
 exports.WaterHeaterStatusSchema = WaterHeaterStatusSchema;
 exports.WeatherStatusSchema = WeatherStatusSchema;
+exports.WebrtcClimbHoldSchema = WebrtcClimbHoldSchema;
 exports.WebrtcLadderDecisionSchema = WebrtcLadderDecisionSchema;
 exports.WebrtcSessionDebugSchema = WebrtcSessionDebugSchema;
 exports.WebrtcStreamChoiceSchema = WebrtcStreamChoiceSchema;