@camstack/types 1.2.309 → 1.2.310

package/dist/capabilities/local-network.cap.d.ts

@@ -56,6 +56,7 @@ declare const ConnectionEndpointSchema: z.ZodObject<{
     label: z.ZodString;
     baseUrl: z.ZodString;
     kind: z.ZodEnum<{
+        custom: "custom";
         public: "public";
         loopback: "loopback";
         "lan-ipv4": "lan-ipv4";
@@ -108,8 +109,9 @@ declare const ViewerEndpointsSchema: z.ZodObject<{
 }, z.core.$strip>;
 export type ViewerEndpoints = z.infer<typeof ViewerEndpointsSchema>;
 /**
- * One audience's hub address (see `hub-address.ts`): the operator's stored
- * override, the address in use, and where it came from.
+ * DEPRECATED compatibility shape of `getHubAddresses` (D729 amendment, kept
+ * one release for addons built against it): `cluster` is the `agents` role,
+ * `browser` the `signIn` role; `override` is the flagged address.
  */
 declare const HubAddressSnapshotSchema: z.ZodObject<{
     override: z.ZodNullable<z.ZodString>;
@@ -142,6 +144,152 @@ declare const HubAddressesSchema: z.ZodObject<{
 }, z.core.$strip>;
 export type HubAddresses = z.infer<typeof HubAddressesSchema>;
 export type HubAddressSnapshot = z.infer<typeof HubAddressSnapshotSchema>;
+/**
+ * What an address is used for (`hub-address.ts`). `viewer` is many-valued;
+ * `notifications`, `agents` and `signIn` are carried by at most one address.
+ */
+export declare const HubAddressRoleSchema: z.ZodEnum<{
+    notifications: "notifications";
+    viewer: "viewer";
+    agents: "agents";
+    signIn: "signIn";
+}>;
+/**
+ * One row of the Network page's Addresses table: a detected endpoint, an
+ * operator-entered custom address, or the CamStack app link — flagged the
+ * same way. A URL that is both detected and entered is ONE row.
+ */
+declare const HubAddressRowSchema: z.ZodObject<{
+    label: z.ZodString;
+    baseUrl: z.ZodString;
+    kind: z.ZodEnum<{
+        custom: "custom";
+        public: "public";
+        loopback: "loopback";
+        "lan-ipv4": "lan-ipv4";
+        "lan-ipv6": "lan-ipv6";
+        "app-link": "app-link";
+    }>;
+    interfaceKind: z.ZodEnum<{
+        public: "public";
+        docker: "docker";
+        lan: "lan";
+        wifi: "wifi";
+        vpn: "vpn";
+        loopback: "loopback";
+        other: "other";
+    }>;
+    plausible: z.ZodBoolean;
+    plausibleReason: z.ZodString;
+    priority: z.ZodNumber;
+    detected: z.ZodBoolean;
+    custom: z.ZodBoolean;
+    flags: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+        notifications: "notifications";
+        viewer: "viewer";
+        agents: "agents";
+        signIn: "signIn";
+    }>>>;
+    inUse: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+        notifications: "notifications";
+        viewer: "viewer";
+        agents: "agents";
+        signIn: "signIn";
+    }>>>;
+    eligible: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+        notifications: "notifications";
+        viewer: "viewer";
+        agents: "agents";
+        signIn: "signIn";
+    }>>>;
+}, z.core.$strip>;
+export type HubAddressRow = z.infer<typeof HubAddressRowSchema>;
+declare const HubAddressBookSchema: z.ZodObject<{
+    rows: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+        label: z.ZodString;
+        baseUrl: z.ZodString;
+        kind: z.ZodEnum<{
+            custom: "custom";
+            public: "public";
+            loopback: "loopback";
+            "lan-ipv4": "lan-ipv4";
+            "lan-ipv6": "lan-ipv6";
+            "app-link": "app-link";
+        }>;
+        interfaceKind: z.ZodEnum<{
+            public: "public";
+            docker: "docker";
+            lan: "lan";
+            wifi: "wifi";
+            vpn: "vpn";
+            loopback: "loopback";
+            other: "other";
+        }>;
+        plausible: z.ZodBoolean;
+        plausibleReason: z.ZodString;
+        priority: z.ZodNumber;
+        detected: z.ZodBoolean;
+        custom: z.ZodBoolean;
+        flags: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+            notifications: "notifications";
+            viewer: "viewer";
+            agents: "agents";
+            signIn: "signIn";
+        }>>>;
+        inUse: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+            notifications: "notifications";
+            viewer: "viewer";
+            agents: "agents";
+            signIn: "signIn";
+        }>>>;
+        eligible: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+            notifications: "notifications";
+            viewer: "viewer";
+            agents: "agents";
+            signIn: "signIn";
+        }>>>;
+    }, z.core.$strip>>>;
+    roles: z.ZodObject<{
+        viewer: z.ZodObject<{
+            flagged: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+            resolved: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+            source: z.ZodEnum<{
+                none: "none";
+                auto: "auto";
+                flagged: "flagged";
+            }>;
+        }, z.core.$strip>;
+        notifications: z.ZodObject<{
+            flagged: z.ZodNullable<z.ZodString>;
+            resolved: z.ZodNullable<z.ZodString>;
+            source: z.ZodEnum<{
+                none: "none";
+                auto: "auto";
+                flagged: "flagged";
+            }>;
+        }, z.core.$strip>;
+        agents: z.ZodObject<{
+            flagged: z.ZodNullable<z.ZodString>;
+            resolved: z.ZodNullable<z.ZodString>;
+            source: z.ZodEnum<{
+                none: "none";
+                auto: "auto";
+                flagged: "flagged";
+            }>;
+        }, z.core.$strip>;
+        signIn: z.ZodObject<{
+            flagged: z.ZodNullable<z.ZodString>;
+            resolved: z.ZodNullable<z.ZodString>;
+            source: z.ZodEnum<{
+                none: "none";
+                auto: "auto";
+                flagged: "flagged";
+            }>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+    appLinkHub: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type HubAddressBook = z.infer<typeof HubAddressBookSchema>;
 export declare const localNetworkCapability: {
     readonly name: "local-network";
     readonly scope: "system";
@@ -250,6 +398,7 @@ export declare const localNetworkCapability: {
                 label: z.ZodString;
                 baseUrl: z.ZodString;
                 kind: z.ZodEnum<{
+                    custom: "custom";
                     public: "public";
                     loopback: "loopback";
                     "lan-ipv4": "lan-ipv4";
@@ -301,10 +450,10 @@ export declare const localNetworkCapability: {
             appLinkHub: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
         /**
-         * Mark which endpoint notification artifacts use. `baseUrl: null` restores
-         * AUTO. The value is stored verbatim (not an index into the candidate
-         * list): interfaces come and go, and an index would silently re-point at a
-         * different address after a reboot.
+         * @deprecated Use `setAddressRole({ role: 'notifications', … })`. Kept so
+         * an older admin UI keeps working: it writes the same `notifications`
+         * flag, with the same validation. `baseUrl: null` restores automatic; an
+         * address that is not detected becomes a custom address.
          */
         readonly setNotificationEndpoint: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
             baseUrl: z.ZodNullable<z.ZodString>;
@@ -314,19 +463,20 @@ export declare const localNetworkCapability: {
             appLinkHub: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>, "mutation">;
         /**
-         * The endpoints the SDK / viewer races for API access. Empty `baseUrls`
-         * means AUTO: every LAN IPv4 address plus the public tunnel, never IPv6,
-         * never mesh, never loopback. `resolved` is that set (or the operator's
-         * explicit subset) as it stands right now.
+         * The `viewer` role as shipped apps read it: the flagged addresses
+         * (detected or custom), or empty for AUTO — every LAN IPv4 address plus
+         * the public tunnel, never IPv6, mesh, loopback or a custom address.
+         * `resolved` is the set as it stands right now; the custom ones in it are
+         * also in `getConnectionEndpoints`, which the apps filter by it.
          */
         readonly getViewerEndpoints: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodObject<{
             baseUrls: z.ZodReadonly<z.ZodArray<z.ZodString>>;
             resolved: z.ZodReadonly<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
         /**
-         * Replace the viewer race set. Empty `baseUrls` restores AUTO. Stored
-         * verbatim (not indices) so a temporarily-down tunnel is not silently
-         * dropped from the operator's choice.
+         * @deprecated Use `setAddressRole({ role: 'viewer', … })`. Kept so an
+         * older admin UI keeps working: it replaces the same `viewer` flags.
+         * Empty `baseUrls` restores automatic.
          */
         readonly setViewerEndpoints: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
             baseUrls: z.ZodReadonly<z.ZodArray<z.ZodString>>;
@@ -335,44 +485,395 @@ export declare const localNetworkCapability: {
             resolved: z.ZodReadonly<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>, "mutation">;
         /**
-         * The hub's address for each audience — agents (`cluster`) and sign-in
-         * links (`browser`) — as every consumer must read it: the operator's
-         * override when set, else the automatic pick from this cap's palette,
-         * never loopback. The ONE answer to "at which address is this hub
-         * reached?"; there is no environment variable for it.
+         * The Network page's Addresses table and every role's answer — the ONE
+         * reading of "which address is this hub reached at, for what": detected
+         * endpoints and custom addresses with their role flags, and per role the
+         * flagged address, the one in use and whether it is automatic. Agent
+         * deliveries, sign-in and LAN devices read `roles.agents` / `roles.signIn`
+         * here; nothing ranks the palette itself. `scheme` is the one the caller
+         * shows LAN rows in (as `getConnectionEndpoints`); agents and sign-in are
+         * always resolved over the HTTPS palette.
          */
-        readonly getHubAddresses: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodObject<{
-            cluster: z.ZodObject<{
-                override: z.ZodNullable<z.ZodString>;
-                resolved: z.ZodNullable<z.ZodString>;
-                source: z.ZodEnum<{
-                    none: "none";
-                    override: "override";
-                    auto: "auto";
+        readonly getAddresses: import("./capability-definition.js").CapabilityMethodSchema<z.ZodOptional<z.ZodObject<{
+            scheme: z.ZodOptional<z.ZodEnum<{
+                https: "https";
+                http: "http";
+            }>>;
+        }, z.core.$strip>>, z.ZodObject<{
+            rows: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+                label: z.ZodString;
+                baseUrl: z.ZodString;
+                kind: z.ZodEnum<{
+                    custom: "custom";
+                    public: "public";
+                    loopback: "loopback";
+                    "lan-ipv4": "lan-ipv4";
+                    "lan-ipv6": "lan-ipv6";
+                    "app-link": "app-link";
                 }>;
-            }, z.core.$strip>;
-            browser: z.ZodObject<{
-                override: z.ZodNullable<z.ZodString>;
-                resolved: z.ZodNullable<z.ZodString>;
-                source: z.ZodEnum<{
-                    none: "none";
-                    override: "override";
-                    auto: "auto";
+                interfaceKind: z.ZodEnum<{
+                    public: "public";
+                    docker: "docker";
+                    lan: "lan";
+                    wifi: "wifi";
+                    vpn: "vpn";
+                    loopback: "loopback";
+                    other: "other";
                 }>;
+                plausible: z.ZodBoolean;
+                plausibleReason: z.ZodString;
+                priority: z.ZodNumber;
+                detected: z.ZodBoolean;
+                custom: z.ZodBoolean;
+                flags: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+                    notifications: "notifications";
+                    viewer: "viewer";
+                    agents: "agents";
+                    signIn: "signIn";
+                }>>>;
+                inUse: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+                    notifications: "notifications";
+                    viewer: "viewer";
+                    agents: "agents";
+                    signIn: "signIn";
+                }>>>;
+                eligible: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+                    notifications: "notifications";
+                    viewer: "viewer";
+                    agents: "agents";
+                    signIn: "signIn";
+                }>>>;
+            }, z.core.$strip>>>;
+            roles: z.ZodObject<{
+                viewer: z.ZodObject<{
+                    flagged: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+                    resolved: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+                    source: z.ZodEnum<{
+                        none: "none";
+                        auto: "auto";
+                        flagged: "flagged";
+                    }>;
+                }, z.core.$strip>;
+                notifications: z.ZodObject<{
+                    flagged: z.ZodNullable<z.ZodString>;
+                    resolved: z.ZodNullable<z.ZodString>;
+                    source: z.ZodEnum<{
+                        none: "none";
+                        auto: "auto";
+                        flagged: "flagged";
+                    }>;
+                }, z.core.$strip>;
+                agents: z.ZodObject<{
+                    flagged: z.ZodNullable<z.ZodString>;
+                    resolved: z.ZodNullable<z.ZodString>;
+                    source: z.ZodEnum<{
+                        none: "none";
+                        auto: "auto";
+                        flagged: "flagged";
+                    }>;
+                }, z.core.$strip>;
+                signIn: z.ZodObject<{
+                    flagged: z.ZodNullable<z.ZodString>;
+                    resolved: z.ZodNullable<z.ZodString>;
+                    source: z.ZodEnum<{
+                        none: "none";
+                        auto: "auto";
+                        flagged: "flagged";
+                    }>;
+                }, z.core.$strip>;
             }, z.core.$strip>;
+            appLinkHub: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
         /**
-         * Set or clear (`baseUrl: null`) one audience's override. Validated: an
-         * http(s) origin with a host, no credentials, no path, never loopback —
-         * an invalid value is refused with the reason, nothing is stored.
+         * Add a custom address. Validated: an http(s) origin with a host, no
+         * credentials, no path, never loopback — an invalid one is refused with
+         * the reason and nothing is stored. Adding an address that already exists
+         * only updates its label.
+         */
+        readonly addCustomAddress: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            baseUrl: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            rows: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+                label: z.ZodString;
+                baseUrl: z.ZodString;
+                kind: z.ZodEnum<{
+                    custom: "custom";
+                    public: "public";
+                    loopback: "loopback";
+                    "lan-ipv4": "lan-ipv4";
+                    "lan-ipv6": "lan-ipv6";
+                    "app-link": "app-link";
+                }>;
+                interfaceKind: z.ZodEnum<{
+                    public: "public";
+                    docker: "docker";
+                    lan: "lan";
+                    wifi: "wifi";
+                    vpn: "vpn";
+                    loopback: "loopback";
+                    other: "other";
+                }>;
+                plausible: z.ZodBoolean;
+                plausibleReason: z.ZodString;
+                priority: z.ZodNumber;
+                detected: z.ZodBoolean;
+                custom: z.ZodBoolean;
+                flags: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+                    notifications: "notifications";
+                    viewer: "viewer";
+                    agents: "agents";
+                    signIn: "signIn";
+                }>>>;
+                inUse: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+                    notifications: "notifications";
+                    viewer: "viewer";
+                    agents: "agents";
+                    signIn: "signIn";
+                }>>>;
+                eligible: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+                    notifications: "notifications";
+                    viewer: "viewer";
+                    agents: "agents";
+                    signIn: "signIn";
+                }>>>;
+            }, z.core.$strip>>>;
+            roles: z.ZodObject<{
+                viewer: z.ZodObject<{
+                    flagged: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+                    resolved: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+                    source: z.ZodEnum<{
+                        none: "none";
+                        auto: "auto";
+                        flagged: "flagged";
+                    }>;
+                }, z.core.$strip>;
+                notifications: z.ZodObject<{
+                    flagged: z.ZodNullable<z.ZodString>;
+                    resolved: z.ZodNullable<z.ZodString>;
+                    source: z.ZodEnum<{
+                        none: "none";
+                        auto: "auto";
+                        flagged: "flagged";
+                    }>;
+                }, z.core.$strip>;
+                agents: z.ZodObject<{
+                    flagged: z.ZodNullable<z.ZodString>;
+                    resolved: z.ZodNullable<z.ZodString>;
+                    source: z.ZodEnum<{
+                        none: "none";
+                        auto: "auto";
+                        flagged: "flagged";
+                    }>;
+                }, z.core.$strip>;
+                signIn: z.ZodObject<{
+                    flagged: z.ZodNullable<z.ZodString>;
+                    resolved: z.ZodNullable<z.ZodString>;
+                    source: z.ZodEnum<{
+                        none: "none";
+                        auto: "auto";
+                        flagged: "flagged";
+                    }>;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+            appLinkHub: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, "mutation">;
+        /** Remove a custom address. Its role flags go with it (those roles turn automatic). */
+        readonly removeCustomAddress: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            baseUrl: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            rows: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+                label: z.ZodString;
+                baseUrl: z.ZodString;
+                kind: z.ZodEnum<{
+                    custom: "custom";
+                    public: "public";
+                    loopback: "loopback";
+                    "lan-ipv4": "lan-ipv4";
+                    "lan-ipv6": "lan-ipv6";
+                    "app-link": "app-link";
+                }>;
+                interfaceKind: z.ZodEnum<{
+                    public: "public";
+                    docker: "docker";
+                    lan: "lan";
+                    wifi: "wifi";
+                    vpn: "vpn";
+                    loopback: "loopback";
+                    other: "other";
+                }>;
+                plausible: z.ZodBoolean;
+                plausibleReason: z.ZodString;
+                priority: z.ZodNumber;
+                detected: z.ZodBoolean;
+                custom: z.ZodBoolean;
+                flags: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+                    notifications: "notifications";
+                    viewer: "viewer";
+                    agents: "agents";
+                    signIn: "signIn";
+                }>>>;
+                inUse: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+                    notifications: "notifications";
+                    viewer: "viewer";
+                    agents: "agents";
+                    signIn: "signIn";
+                }>>>;
+                eligible: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+                    notifications: "notifications";
+                    viewer: "viewer";
+                    agents: "agents";
+                    signIn: "signIn";
+                }>>>;
+            }, z.core.$strip>>>;
+            roles: z.ZodObject<{
+                viewer: z.ZodObject<{
+                    flagged: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+                    resolved: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+                    source: z.ZodEnum<{
+                        none: "none";
+                        auto: "auto";
+                        flagged: "flagged";
+                    }>;
+                }, z.core.$strip>;
+                notifications: z.ZodObject<{
+                    flagged: z.ZodNullable<z.ZodString>;
+                    resolved: z.ZodNullable<z.ZodString>;
+                    source: z.ZodEnum<{
+                        none: "none";
+                        auto: "auto";
+                        flagged: "flagged";
+                    }>;
+                }, z.core.$strip>;
+                agents: z.ZodObject<{
+                    flagged: z.ZodNullable<z.ZodString>;
+                    resolved: z.ZodNullable<z.ZodString>;
+                    source: z.ZodEnum<{
+                        none: "none";
+                        auto: "auto";
+                        flagged: "flagged";
+                    }>;
+                }, z.core.$strip>;
+                signIn: z.ZodObject<{
+                    flagged: z.ZodNullable<z.ZodString>;
+                    resolved: z.ZodNullable<z.ZodString>;
+                    source: z.ZodEnum<{
+                        none: "none";
+                        auto: "auto";
+                        flagged: "flagged";
+                    }>;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+            appLinkHub: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, "mutation">;
+        /**
+         * Flag (`enabled: true`) or unflag an address for a role. For a
+         * single-valued role, flagging moves the flag off every other address.
+         * `baseUrl: null` returns the role to automatic. The address must be a row
+         * of the table (detected, custom, or the app link for notifications);
+         * `signIn` on a plain-http address is refused unless `acceptInsecureHttp`.
          */
-        readonly setHubAddress: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
-            audience: z.ZodEnum<{
-                cluster: "cluster";
-                browser: "browser";
+        readonly setAddressRole: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            role: z.ZodEnum<{
+                notifications: "notifications";
+                viewer: "viewer";
+                agents: "agents";
+                signIn: "signIn";
             }>;
             baseUrl: z.ZodNullable<z.ZodString>;
+            enabled: z.ZodBoolean;
+            acceptInsecureHttp: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>, z.ZodObject<{
+            rows: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+                label: z.ZodString;
+                baseUrl: z.ZodString;
+                kind: z.ZodEnum<{
+                    custom: "custom";
+                    public: "public";
+                    loopback: "loopback";
+                    "lan-ipv4": "lan-ipv4";
+                    "lan-ipv6": "lan-ipv6";
+                    "app-link": "app-link";
+                }>;
+                interfaceKind: z.ZodEnum<{
+                    public: "public";
+                    docker: "docker";
+                    lan: "lan";
+                    wifi: "wifi";
+                    vpn: "vpn";
+                    loopback: "loopback";
+                    other: "other";
+                }>;
+                plausible: z.ZodBoolean;
+                plausibleReason: z.ZodString;
+                priority: z.ZodNumber;
+                detected: z.ZodBoolean;
+                custom: z.ZodBoolean;
+                flags: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+                    notifications: "notifications";
+                    viewer: "viewer";
+                    agents: "agents";
+                    signIn: "signIn";
+                }>>>;
+                inUse: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+                    notifications: "notifications";
+                    viewer: "viewer";
+                    agents: "agents";
+                    signIn: "signIn";
+                }>>>;
+                eligible: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
+                    notifications: "notifications";
+                    viewer: "viewer";
+                    agents: "agents";
+                    signIn: "signIn";
+                }>>>;
+            }, z.core.$strip>>>;
+            roles: z.ZodObject<{
+                viewer: z.ZodObject<{
+                    flagged: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+                    resolved: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+                    source: z.ZodEnum<{
+                        none: "none";
+                        auto: "auto";
+                        flagged: "flagged";
+                    }>;
+                }, z.core.$strip>;
+                notifications: z.ZodObject<{
+                    flagged: z.ZodNullable<z.ZodString>;
+                    resolved: z.ZodNullable<z.ZodString>;
+                    source: z.ZodEnum<{
+                        none: "none";
+                        auto: "auto";
+                        flagged: "flagged";
+                    }>;
+                }, z.core.$strip>;
+                agents: z.ZodObject<{
+                    flagged: z.ZodNullable<z.ZodString>;
+                    resolved: z.ZodNullable<z.ZodString>;
+                    source: z.ZodEnum<{
+                        none: "none";
+                        auto: "auto";
+                        flagged: "flagged";
+                    }>;
+                }, z.core.$strip>;
+                signIn: z.ZodObject<{
+                    flagged: z.ZodNullable<z.ZodString>;
+                    resolved: z.ZodNullable<z.ZodString>;
+                    source: z.ZodEnum<{
+                        none: "none";
+                        auto: "auto";
+                        flagged: "flagged";
+                    }>;
+                }, z.core.$strip>;
+            }, z.core.$strip>;
+            appLinkHub: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, "mutation">;
+        /**
+         * @deprecated Read `getAddresses().roles.agents` / `.signIn`. Kept one
+         * release so an addon built against the D729 amendment keeps resolving:
+         * `cluster` = the `agents` role, `browser` = the `signIn` role.
+         */
+        readonly getHubAddresses: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodObject<{
             cluster: z.ZodObject<{
                 override: z.ZodNullable<z.ZodString>;
                 resolved: z.ZodNullable<z.ZodString>;
@@ -391,7 +892,7 @@ export declare const localNetworkCapability: {
                     auto: "auto";
                 }>;
             }, z.core.$strip>;
-        }, z.core.$strip>, "mutation">;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
         /**
          * Read the operator's allowlist. Empty = "auto" (no filter). Used
          * by the admin UI's address selector to seed its checkbox state.