@camstack/types 1.2.325 → 1.2.327

package/dist/client.js

@@ -5752,6 +5752,8 @@ function createDeviceProxy(api, binding, opts) {
 		completeRetrainTrack: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "completeRetrainTrack", "mutation", input),
 		restageRetrainTrack: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "restageRetrainTrack", "mutation", input),
 		getRetrainExportUrl: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getRetrainExportUrl", "query", input),
+		setRetrainFrameComplete: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "setRetrainFrameComplete", "mutation", input),
+		writeRetrainArchive: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "writeRetrainArchive", "mutation", input),
 		getEventMedia: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getEventMedia", "query", input),
 		getTrackMedia: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getTrackMedia", "query", input),
 		listTrackMedia: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listTrackMedia", "query", input),
@@ -7636,6 +7638,10 @@ function createSystemProxy(api) {
 			oauthExchangeCode: (input) => dispatch("userManagement", "oauthExchangeCode", "mutation", input),
 			oauthRefresh: (input) => dispatch("userManagement", "oauthRefresh", "mutation", input),
 			oauthVerifyAccessToken: (input) => dispatch("userManagement", "oauthVerifyAccessToken", "query", input),
+			listExternalIdentities: (input) => dispatch("userManagement", "listExternalIdentities", "query", input),
+			findUserByExternalIdentity: (input) => dispatch("userManagement", "findUserByExternalIdentity", "query", input),
+			linkExternalIdentity: (input) => dispatch("userManagement", "linkExternalIdentity", "mutation", input),
+			unlinkExternalIdentity: (input) => dispatch("userManagement", "unlinkExternalIdentity", "mutation", input),
 			listOauthSessions: (input) => dispatch("userManagement", "listOauthSessions", "query", input),
 			revokeOauthSession: (input) => dispatch("userManagement", "revokeOauthSession", "mutation", input)
 		}

package/dist/client.mjs

@@ -5751,6 +5751,8 @@ function createDeviceProxy(api, binding, opts) {
 		completeRetrainTrack: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "completeRetrainTrack", "mutation", input),
 		restageRetrainTrack: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "restageRetrainTrack", "mutation", input),
 		getRetrainExportUrl: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getRetrainExportUrl", "query", input),
+		setRetrainFrameComplete: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "setRetrainFrameComplete", "mutation", input),
+		writeRetrainArchive: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "writeRetrainArchive", "mutation", input),
 		getEventMedia: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getEventMedia", "query", input),
 		getTrackMedia: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getTrackMedia", "query", input),
 		listTrackMedia: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listTrackMedia", "query", input),
@@ -7635,6 +7637,10 @@ function createSystemProxy(api) {
 			oauthExchangeCode: (input) => dispatch("userManagement", "oauthExchangeCode", "mutation", input),
 			oauthRefresh: (input) => dispatch("userManagement", "oauthRefresh", "mutation", input),
 			oauthVerifyAccessToken: (input) => dispatch("userManagement", "oauthVerifyAccessToken", "query", input),
+			listExternalIdentities: (input) => dispatch("userManagement", "listExternalIdentities", "query", input),
+			findUserByExternalIdentity: (input) => dispatch("userManagement", "findUserByExternalIdentity", "query", input),
+			linkExternalIdentity: (input) => dispatch("userManagement", "linkExternalIdentity", "mutation", input),
+			unlinkExternalIdentity: (input) => dispatch("userManagement", "unlinkExternalIdentity", "mutation", input),
 			listOauthSessions: (input) => dispatch("userManagement", "listOauthSessions", "query", input),
 			revokeOauthSession: (input) => dispatch("userManagement", "revokeOauthSession", "mutation", input)
 		}

package/dist/device/display-icon-vocabulary.d.ts

@@ -81,6 +81,13 @@ export declare const DISPLAY_ICON_KEYS: readonly string[];
 export declare const DISPLAY_ICON_OFFERED_KEYS: readonly string[];
 /** Is this a key of the shared vocabulary? */
 export declare function isDisplayIconKey(value: unknown): boolean;
+/**
+ * A stored icon value as a vocabulary key: `value` when it IS one, `fallback`
+ * otherwise. For an `icon` settings field (D780) whose stored value may
+ * predate the vocabulary (a free-text lucide name) — the field's default is
+ * drawn rather than nothing.
+ */
+export declare function resolveDisplayIconKey(value: unknown, fallback: string): string;
 /** The entry for a key, or `undefined` — never a guessed one. */
 export declare function displayIconEntry(key: string): DisplayIconEntry | undefined;
 /** The entries of one group, in vocabulary order. */

package/dist/device/index.d.ts

@@ -30,5 +30,6 @@ export type { WireableField } from './schema-fields.js';
 export { enumerateItemArrayFields, enumerateSchemaFields, unwrapSchema } from './schema-fields.js';
 export type { DeviceConfigEntry } from './zod-to-config-ui.js';
 export { zodEntriesToConfigUI } from './zod-to-config-ui.js';
+export { collectZodSecretPaths, isZodSecret, SECRET_META } from './zod-secret.js';
 export type { SiteZone } from './site-zone.js';
 export { SiteZoneSchema, siteZoneKey } from './site-zone.js';

package/dist/device/zod-secret.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Secret declaration on a Zod config schema (D783).
+ *
+ * A field is a secret because its schema SAYS so — `.meta({ secret: true })`,
+ * spelled {@link SECRET_META} — never because its key looks like a credential.
+ * It is the Zod twin of `secret: true` / `type: 'password'` on a config-UI
+ * field (`isSecretConfigField`), and every consumer that treats secrets
+ * specially reads it: the settings form (`zodEntriesToConfigUI`), the paths a
+ * device advertises at `registerDevice` (`secretConfigPaths`, which the
+ * non-admin redaction withholds at any depth), and the keychain later.
+ *
+ * Zod keeps `.meta()` in `z.globalRegistry`, which lives on `globalThis`, so a
+ * declaration made by an addon's own copy of zod is visible here.
+ */
+import { z } from 'zod';
+/**
+ * `{ secret: true }` — the one spelling of "this field holds a credential".
+ *
+ * Addons write the LITERAL `.meta({ secret: true })` rather than importing
+ * this constant: an addon running against an older `@camstack/types` would
+ * otherwise call `.meta(undefined)`, which in zod v4 is the metadata GETTER
+ * and returns no schema at all.
+ */
+export declare const SECRET_META: {
+    readonly secret: true;
+};
+/** True when any layer of this field declares `.meta({ secret: true })`. */
+export declare function isZodSecret(schema: z.ZodType): boolean;
+/**
+ * Every declared secret path in a config schema: dotted keys, `[]` for "each
+ * element of this array" (`connection.password`, `rows[].token`). A declared
+ * object or array is reported as one path and not descended into — everything
+ * under it is secret.
+ */
+export declare function collectZodSecretPaths(schema: z.ZodType, prefix?: string): readonly string[];

package/dist/generated/addon-api.d.ts

@@ -5923,6 +5923,20 @@ export type AppRouter = TrpcCoreRouter<{
             output: z.infer<typeof pipelineAnalyticsCapability.methods.getRetrainExportUrl.output>;
             meta: object;
         }>;
+        setRetrainFrameComplete: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.setRetrainFrameComplete.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.setRetrainFrameComplete.output>;
+            meta: object;
+        }>;
+        writeRetrainArchive: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.writeRetrainArchive.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.writeRetrainArchive.output>;
+            meta: object;
+        }>;
         getEventMedia: TRPCQueryProcedure<{
             input: {
                 [x: string]: unknown;
@@ -9149,6 +9163,34 @@ export type AppRouter = TrpcCoreRouter<{
             output: z.infer<typeof userManagementCapability.methods.oauthVerifyAccessToken.output>;
             meta: object;
         }>;
+        listExternalIdentities: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof userManagementCapability.methods.listExternalIdentities.input>;
+            output: z.infer<typeof userManagementCapability.methods.listExternalIdentities.output>;
+            meta: object;
+        }>;
+        findUserByExternalIdentity: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof userManagementCapability.methods.findUserByExternalIdentity.input>;
+            output: z.infer<typeof userManagementCapability.methods.findUserByExternalIdentity.output>;
+            meta: object;
+        }>;
+        linkExternalIdentity: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof userManagementCapability.methods.linkExternalIdentity.input>;
+            output: z.infer<typeof userManagementCapability.methods.linkExternalIdentity.output>;
+            meta: object;
+        }>;
+        unlinkExternalIdentity: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof userManagementCapability.methods.unlinkExternalIdentity.input>;
+            output: z.infer<typeof userManagementCapability.methods.unlinkExternalIdentity.output>;
+            meta: object;
+        }>;
         listOauthSessions: TRPCQueryProcedure<{
             input: {
                 nodeId?: string | undefined;
@@ -10953,6 +10995,45 @@ export type AppRouter = TrpcCoreRouter<{
             };
             meta: object;
         }>;
+        listLinkableProviders: import("@trpc/server").TRPCQueryProcedure<{
+            input: void;
+            output: {
+                provider: string;
+                label: string;
+            }[];
+            meta: object;
+        }>;
+        beginExternalLink: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                provider: string;
+            };
+            output: {
+                url: string;
+            };
+            meta: object;
+        }>;
+        listOwnExternalIdentities: import("@trpc/server").TRPCQueryProcedure<{
+            input: void;
+            output: {
+                provider: string;
+                subject: string;
+                linkedAt: number;
+                providerLabel: string | null;
+                available: boolean;
+                label?: string | undefined;
+            }[];
+            meta: object;
+        }>;
+        unlinkOwnExternalIdentity: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                provider: string;
+                subject: string;
+            };
+            output: {
+                success: boolean;
+            };
+            meta: object;
+        }>;
         listLoginMethods: import("@trpc/server").TRPCQueryProcedure<{
             input: void;
             output: readonly ({
@@ -10962,6 +11043,7 @@ export type AppRouter = TrpcCoreRouter<{
                 startUrl: string;
                 stage: "primary" | "second-factor";
                 icon?: string | undefined;
+                linkable?: boolean | undefined;
             } | {
                 kind: "widget";
                 id: string;
@@ -11331,6 +11413,45 @@ export type AppRouter = TrpcCoreRouter<{
             };
             meta: object;
         }>;
+        listLinkableProviders: import("@trpc/server").TRPCQueryProcedure<{
+            input: void;
+            output: {
+                provider: string;
+                label: string;
+            }[];
+            meta: object;
+        }>;
+        beginExternalLink: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                provider: string;
+            };
+            output: {
+                url: string;
+            };
+            meta: object;
+        }>;
+        listOwnExternalIdentities: import("@trpc/server").TRPCQueryProcedure<{
+            input: void;
+            output: {
+                provider: string;
+                subject: string;
+                linkedAt: number;
+                providerLabel: string | null;
+                available: boolean;
+                label?: string | undefined;
+            }[];
+            meta: object;
+        }>;
+        unlinkOwnExternalIdentity: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                provider: string;
+                subject: string;
+            };
+            output: {
+                success: boolean;
+            };
+            meta: object;
+        }>;
         listLoginMethods: import("@trpc/server").TRPCQueryProcedure<{
             input: void;
             output: readonly ({
@@ -11340,6 +11461,7 @@ export type AppRouter = TrpcCoreRouter<{
                 startUrl: string;
                 stage: "primary" | "second-factor";
                 icon?: string | undefined;
+                linkable?: boolean | undefined;
             } | {
                 kind: "widget";
                 id: string;

package/dist/generated/method-access-map.d.ts

@@ -6,7 +6,7 @@
  * scope+access check inside `protectedProcedure` (see
  * `server/backend/src/api/trpc/trpc.middleware.ts`).
  *
- * Coverage: 1213 method paths across 165 capabilities.
+ * Coverage: 1219 method paths across 165 capabilities.
  */
 import type { CapabilityMethodAccess } from '../capabilities/capability-definition.js';
 export interface MethodAccessRecord {

package/dist/generated/method-device-selectors.d.ts

@@ -6,7 +6,7 @@
  * system-scope cap that takes a deviceId was previously never device-filtered
  * — see the generator header).
  *
- * Coverage: 511 methods carry a device reference, of which
+ * Coverage: 512 methods carry a device reference, of which
  * 161 are on SYSTEM-scope caps.
  *
  * Top-level fields, number arrays, and one-level arrays of objects carrying

package/dist/generated/system-proxy.d.ts

@@ -102,7 +102,7 @@ export interface SystemProxy {
     readonly terminalSession: Pick<InferProvider<typeof terminalSessionCapability>, 'listProfiles' | 'listInstances' | 'createInstance' | 'updateInstance' | 'deleteInstance' | 'setInstanceEnabled' | 'listLegacyCameras' | 'adoptLegacyMonitor' | 'listSessions' | 'openSession' | 'resize' | 'pullOutput' | 'writeInput' | 'close'>;
     readonly toast: Pick<InferProvider<typeof toastCapability>, 'onToast'>;
     readonly turnProvider: Pick<InferProvider<typeof turnProviderCapability>, 'getTurnServers'>;
-    readonly userManagement: Pick<InferProvider<typeof userManagementCapability>, 'listUsers' | 'createUser' | 'updateUser' | 'deleteUser' | 'resetPassword' | 'setUserScopes' | 'validateCredentials' | 'listApiKeys' | 'createApiKey' | 'revokeApiKey' | 'validateApiKey' | 'createScopedToken' | 'revokeScopedToken' | 'validateScopedToken' | 'listScopedTokens' | 'setupTotp' | 'confirmTotp' | 'disableTotp' | 'getTotpStatus' | 'verifyTotp' | 'oauthIssueCode' | 'oauthExchangeCode' | 'oauthRefresh' | 'oauthVerifyAccessToken' | 'listOauthSessions' | 'revokeOauthSession'>;
+    readonly userManagement: Pick<InferProvider<typeof userManagementCapability>, 'listUsers' | 'createUser' | 'updateUser' | 'deleteUser' | 'resetPassword' | 'setUserScopes' | 'validateCredentials' | 'listApiKeys' | 'createApiKey' | 'revokeApiKey' | 'validateApiKey' | 'createScopedToken' | 'revokeScopedToken' | 'validateScopedToken' | 'listScopedTokens' | 'setupTotp' | 'confirmTotp' | 'disableTotp' | 'getTotpStatus' | 'verifyTotp' | 'oauthIssueCode' | 'oauthExchangeCode' | 'oauthRefresh' | 'oauthVerifyAccessToken' | 'listExternalIdentities' | 'findUserByExternalIdentity' | 'linkExternalIdentity' | 'unlinkExternalIdentity' | 'listOauthSessions' | 'revokeOauthSession'>;
 }
 /**
  * Build a `SystemProxy` that dispatches every namespace method through

package/dist/index.d.ts

@@ -195,7 +195,7 @@ export type { IBatteryOperated, IDoorbellButton, INativeSnapshot, IPanTiltZoom,
 export type { LocationDescriptionAssignment, LocationIconAssignment, LocationIconId, } from './device/location-icon.js';
 export { LOCATION_ICON_FALLBACK, LOCATION_ICON_IDS, LOCATION_DESCRIPTION_MAX, LocationDescriptionAssignmentSchema, LocationIconAssignmentSchema, LocationIconIdSchema, locationIconKey, resolveLocationIcon, } from './device/location-icon.js';
 export type { DisplayIconEntry, DisplayIconGroup, DisplayIconHit, } from './device/display-icon-vocabulary.js';
-export { DISPLAY_ICON_GROUPS, DISPLAY_ICON_KEYS, DISPLAY_ICON_OFFERED_KEYS, DISPLAY_ICON_VOCABULARY, displayIconEntry, displayIconsInGroup, isDisplayIconKey, searchDisplayIcons, } from './device/display-icon-vocabulary.js';
+export { DISPLAY_ICON_GROUPS, DISPLAY_ICON_KEYS, DISPLAY_ICON_OFFERED_KEYS, DISPLAY_ICON_VOCABULARY, displayIconEntry, displayIconsInGroup, isDisplayIconKey, resolveDisplayIconKey, searchDisplayIcons, } from './device/display-icon-vocabulary.js';
 export { getByPath, setByPath } from './device/path-util.js';
 export type { ReachabilityPollHandle, ReachabilityPollLogger, ReachabilityPollOptions, } from './device/reachability-poll.js';
 export { REACHABILITY_FAILURES_TO_OFFLINE, REACHABILITY_POLL_INTERVAL_MS, REACHABILITY_PROBE_TIMEOUT_MS, startReachabilityPoll, } from './device/reachability-poll.js';
@@ -209,6 +209,7 @@ export type { DeviceCapListener, DeviceLifecycleListener, DeviceQueryFilters, St
 export { SystemMirror } from './device/system-mirror.js';
 export type { DeviceConfigEntry } from './device/zod-to-config-ui.js';
 export { zodEntriesToConfigUI } from './device/zod-to-config-ui.js';
+export { collectZodSecretPaths, isZodSecret, SECRET_META } from './device/zod-secret.js';
 export { EventCategory, isOwnerOnlyEventCategory, OWNER_ONLY_EVENT_CATEGORIES, publicEventCategories, } from './enums/event-category.js';
 export * from './enums/index.js';
 export type { CompileResult, EvaluateExpressionSourceResult, ExpressionBinaryOperator, ExpressionBindingSource, ExpressionBuiltin, ExpressionEvalHooks, ExpressionEvalOptions, ExpressionFieldBinding, ExpressionGlobalBinding, ExpressionLiteralBinding, ExpressionLogicalOperator, ExpressionNode, ExpressionNodePath, ExpressionSource, ExpressionSourceInput, ExpressionUnaryOperator, ExpressionValue, CountCallState, RoseCallState, StatefulCallState, StatefulCallInvocation, StatefulExpressionEnvironment, StatefulExpressionMemory, StatefulExpressionBuiltin, Keyword, ParsedExpression, Punctuator, Token, } from './expression/index.js';