@camstack/types 1.2.326 → 1.2.327

package/dist/addon.d.ts

@@ -27,6 +27,7 @@ export type { IViewerUiProvider } from './capabilities/viewer-ui.cap.js';
 export { viewerUiCapability } from './capabilities/viewer-ui.cap.js';
 export { DEVICE_CHILDREN_BATCH_MAX } from './device/children-batch-max.js';
 export { DeviceType } from './device/device-type.js';
+export { collectZodSecretPaths, isZodSecret } from './device/zod-secret.js';
 export { DisposerChain } from './disposer-chain.js';
 export { PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, } from './interfaces/addon-peer-bytes.js';
 export type * from './interfaces/addon-peer-bytes.js';

package/dist/addon.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-DPar9AHl.js");
+const require_sleep = require("./sleep-az1qiFzK.js");
 const require_event_category = require("./event-category-CtBAl88K.js");
 const require_err_msg = require("./err-msg-Dx2Kor0g.js");
 //#region src/generated/cap-input-defaults.ts
@@ -413,6 +413,7 @@ exports.ReadinessTimeoutError = require_sleep.ReadinessTimeoutError;
 exports.adminUiCapability = require_sleep.adminUiCapability;
 exports.asJsonObject = require_sleep.asJsonObject;
 exports.asString = require_sleep.asString;
+exports.collectZodSecretPaths = require_sleep.collectZodSecretPaths;
 exports.createDeviceProxy = require_sleep.createDeviceProxy;
 exports.createEventBusSliceSource = require_sleep.createEventBusSliceSource;
 exports.describeCustomActions = require_sleep.describeCustomActions;
@@ -423,6 +424,7 @@ exports.expandCapMethods = require_sleep.expandCapMethods;
 exports.isCollectionArrayMethodName = isCollectionArrayMethodName;
 exports.isDeviceScopedCap = require_sleep.isDeviceScopedCap;
 exports.isProviderOptionalMethodName = isProviderOptionalMethodName;
+exports.isZodSecret = require_sleep.isZodSecret;
 exports.nodePin = require_sleep.nodePin;
 exports.normalizeAddonInitResult = require_sleep.normalizeAddonInitResult;
 exports.parseJsonUnknown = require_sleep.parseJsonUnknown;

package/dist/addon.mjs

@@ -1,4 +1,4 @@
-import { B as nodePin, Ct as DisposerChain, D as adminUiCapability, N as expandCapMethods, S as DEVICE_CHILDREN_BATCH_MAX, T as describeCustomActions, Tt as normalizeAddonInitResult, U as ReadinessRegistry, V as readNodePin, W as ReadinessTimeoutError, _t as PEER_BYTES_MAX_OUTSTANDING, a as asJsonObject, b as deviceOpsCapability, d as BOOT_RECOVERY_BACKOFF_MS, f as DEVICE_SCOPED_CAPS, gt as PEER_BYTES_CHUNK_BYTES, h as createEventBusSliceSource, kt as emitReadiness, m as createDeviceProxy, p as isDeviceScopedCap, q as scopeKey, s as asString, t as sleep, u as parseJsonUnknown, vt as PEER_BYTES_STALL_MS, wt as BaseAddon, x as viewerUiCapability, xt as DATAPLANE_SECRET_HEADER, yt as PEER_BYTES_TICKET_TTL_MS } from "./sleep-BNeXenvr.mjs";
+import { A as adminUiCapability, C as deviceOpsCapability, Dt as BaseAddon, Et as DisposerChain, I as expandCapMethods, K as ReadinessRegistry, Mt as emitReadiness, O as describeCustomActions, Ot as normalizeAddonInitResult, St as PEER_BYTES_TICKET_TTL_MS, T as DEVICE_CHILDREN_BATCH_MAX, U as nodePin, W as readNodePin, X as scopeKey, _ as createDeviceProxy, a as asJsonObject, bt as PEER_BYTES_MAX_OUTSTANDING, d as BOOT_RECOVERY_BACKOFF_MS, f as DEVICE_SCOPED_CAPS, g as isZodSecret, h as collectZodSecretPaths, p as isDeviceScopedCap, q as ReadinessTimeoutError, s as asString, t as sleep, u as parseJsonUnknown, v as createEventBusSliceSource, w as viewerUiCapability, wt as DATAPLANE_SECRET_HEADER, xt as PEER_BYTES_STALL_MS, yt as PEER_BYTES_CHUNK_BYTES } from "./sleep-B0JG7-_F.mjs";
 import { t as EventCategory } from "./event-category-B_0XEcLF.mjs";
 import { a as DeviceType, t as errMsg } from "./err-msg-DX6i_MY4.mjs";
 //#region src/generated/cap-input-defaults.ts
@@ -392,4 +392,4 @@ function isProviderOptionalMethodName(capName, method) {
 	return methods !== void 0 && methods.includes(method);
 }
 //#endregion
-export { BOOT_RECOVERY_BACKOFF_MS, BaseAddon, CAP_INPUT_DEFAULTS, COLLECTION_ARRAY_METHODS, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DEVICE_SCOPED_CAPS, DeviceType, DisposerChain, EventCategory, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, PROVIDER_OPTIONAL_METHODS, ReadinessRegistry, ReadinessTimeoutError, adminUiCapability, asJsonObject, asString, createDeviceProxy, createEventBusSliceSource, describeCustomActions, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods, isCollectionArrayMethodName, isDeviceScopedCap, isProviderOptionalMethodName, nodePin, normalizeAddonInitResult, parseJsonUnknown, readNodePin, scopeKey, sleep, viewerUiCapability, withCapInputDefaults };
+export { BOOT_RECOVERY_BACKOFF_MS, BaseAddon, CAP_INPUT_DEFAULTS, COLLECTION_ARRAY_METHODS, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DEVICE_SCOPED_CAPS, DeviceType, DisposerChain, EventCategory, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, PROVIDER_OPTIONAL_METHODS, ReadinessRegistry, ReadinessTimeoutError, adminUiCapability, asJsonObject, asString, collectZodSecretPaths, createDeviceProxy, createEventBusSliceSource, describeCustomActions, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods, isCollectionArrayMethodName, isDeviceScopedCap, isProviderOptionalMethodName, isZodSecret, nodePin, normalizeAddonInitResult, parseJsonUnknown, readNodePin, scopeKey, sleep, viewerUiCapability, withCapInputDefaults };

package/dist/capabilities/addon-routes.cap.d.ts

@@ -37,9 +37,9 @@ export declare const addonRoutesCapability: {
     readonly methods: {
         readonly getRoutes: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodArray<z.ZodObject<{
             method: z.ZodEnum<{
-                GET: "GET";
-                POST: "POST";
                 PUT: "PUT";
+                POST: "POST";
+                GET: "GET";
                 DELETE: "DELETE";
                 PATCH: "PATCH";
             }>;

package/dist/capabilities/device-manager.cap.d.ts

@@ -74,6 +74,7 @@ export declare const DeviceInfoSchema: z.ZodObject<{
     features: z.ZodArray<z.ZodString>;
     isCamera: z.ZodBoolean;
     config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    secretConfigPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
     metadata: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     sourceInfo: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
@@ -292,6 +293,7 @@ export declare const DeviceRegisterPayloadSchema: z.ZodObject<{
     role: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     features: z.ZodOptional<z.ZodArray<z.ZodString>>;
     config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    secretConfigPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;
 export declare const DeviceRemovePayloadSchema: z.ZodObject<{
     deviceId: z.ZodNumber;
@@ -480,6 +482,7 @@ export declare const deviceManagerCapability: {
             role: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             features: z.ZodOptional<z.ZodArray<z.ZodString>>;
             config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            secretConfigPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>, z.ZodVoid, "mutation">;
         /** Remove a device from the DB + in-memory registry. Called by DeviceManagerApi.remove(). */
         readonly removeDevice: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
@@ -1013,6 +1016,7 @@ export declare const deviceManagerCapability: {
             features: z.ZodArray<z.ZodString>;
             isCamera: z.ZodBoolean;
             config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            secretConfigPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
             metadata: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
             sourceInfo: z.ZodOptional<z.ZodObject<{
                 id: z.ZodString;
@@ -1059,6 +1063,7 @@ export declare const deviceManagerCapability: {
             features: z.ZodArray<z.ZodString>;
             isCamera: z.ZodBoolean;
             config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            secretConfigPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
             metadata: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
             sourceInfo: z.ZodOptional<z.ZodObject<{
                 id: z.ZodString;
@@ -1105,6 +1110,7 @@ export declare const deviceManagerCapability: {
             features: z.ZodArray<z.ZodString>;
             isCamera: z.ZodBoolean;
             config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            secretConfigPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
             metadata: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
             sourceInfo: z.ZodOptional<z.ZodObject<{
                 id: z.ZodString;
@@ -1182,6 +1188,7 @@ export declare const deviceManagerCapability: {
             features: z.ZodArray<z.ZodString>;
             isCamera: z.ZodBoolean;
             config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            secretConfigPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
             metadata: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
             sourceInfo: z.ZodOptional<z.ZodObject<{
                 id: z.ZodString;

package/dist/capabilities/index.d.ts

@@ -89,7 +89,7 @@ export { NetworkAccessStatusSchema, NetworkEndpointSchema, networkAccessCapabili
 export { type Attachment, type AttachmentMediaType, AttachmentMediaTypeSchema, AttachmentSchema, type DiscoveredTarget, DiscoveredTargetSchema, type INotificationOutputProvider, type NotificationAction, type NotificationActionIcon, NotificationActionIconSchema, NotificationActionSchema, type NotificationFormat, NotificationFormatSchema, NotificationSchema, notificationOutputCapability, type ProbeTargetConfigResult, ProbeTargetConfigResultSchema, type RenderedAs, RenderedAsSchema, type SendResult, SendResultSchema, type Target, type TargetKind, type TargetKindCaps, TargetKindCapsSchema, type TargetKindLevel, TargetKindLevelSchema, TargetKindSchema, TargetSchema, type TestResult, TestResultSchema, } from './notification-output.cap.js';
 export { consumableLowPercentOf, type INotificationRulesProvider, isRetiredClearKey, NC_ALARM_DELAY_MAX_SEC, NC_ALARM_NONBLOCKING_MAX, NC_ALARM_SENSORS_MAX, NC_ALARM_SYSTEM_EVENT_KINDS, NC_ALARM_TRIGGERED_MAX_SEC, NC_AUDIO_DBFS_FLOOR, NC_AUTHORABLE_SYSTEM_EVENT_KINDS, NC_BATTERY_CONSUMABLE_SYSTEM_EVENT_KINDS, NC_CLIP_POST_ROLL_DEFAULT_SEC, NC_CLIP_PRE_ROLL_DEFAULT_SEC, NC_CLIP_RETENTION_MAX_SEC, NC_CONDITION_CATALOG, NC_CONFIRM_DEFAULT_MAX_IMAGE_PX, NC_CONFIRM_DEFAULT_TIMEOUT_MS, NC_CONFIRM_MAX_TIMEOUT_MS, NC_CONFIRM_MIN_TIMEOUT_MS, NC_CONSUMABLE_LOW_PERCENT_DEFAULT, NC_CONSUMABLE_LOW_PERCENT_MAX, NC_CONSUMABLE_SYSTEM_EVENT_KINDS, NC_DEFAULT_SNOOZE_MINUTES, NC_GROUPING_DEFAULT_SEC, NC_GROUPING_MAX_SEC, NC_GROUPING_MIN_SEC, NC_HISTORY_LIMIT_DEFAULT, NC_HISTORY_LIMIT_MAX, NC_MAX_PER_TRACK_IMMEDIATE, NC_RULE_CLEARABLE_KEYS, NC_RULE_RETIRED_CLEAR_KEYS, NC_SNOOZE_MAX_MINUTES, NC_TANK_SYSTEM_EVENT_KINDS, type NcActionBinding, NcActionBindingSchema, type NcAlarmBlocking, type NcAlarmBlockingEdit, NcAlarmBlockingEditSchema, NcAlarmBlockingSchema, type NcAlarmConfig, NcAlarmConfigSchema, type NcAlarmCreateProfileInput, NcAlarmCreateProfileInputSchema, type NcAlarmModeCoverage, NcAlarmModeCoverageSchema, type NcAlarmModeDelays, type NcAlarmModeDelaysEdit, NcAlarmModeDelaysEditSchema, NcAlarmModeDelaysSchema, type NcAlarmModeDeviceList, NcAlarmModeDeviceListSchema, type NcAlarmNonBlocking, type NcAlarmNonBlockingEdit, NcAlarmNonBlockingEditSchema, NcAlarmNonBlockingSchema, type NcAlarmPostTriggeredAction, NcAlarmPostTriggeredActionSchema, type NcAlarmProfileIdInput, NcAlarmProfileIdInputSchema, type NcAlarmProfileMeta, NcAlarmProfileMetaSchema, type NcAlarmProfilesView, NcAlarmProfilesViewSchema, type NcAlarmRenameProfileInput, NcAlarmRenameProfileInputSchema, type NcAlarmSecureOnArmEdit, NcAlarmSecureOnArmEditSchema, type NcAlarmSecureOnArmOff, NcAlarmSecureOnArmOffSchema, type NcAlarmSensorReading, NcAlarmSensorReadingSchema, type NcAlarmSensorState, NcAlarmSensorStateSchema, type NcAlarmSensors, type NcAlarmSensorsInput, NcAlarmSensorsInputSchema, NcAlarmSensorsSchema, type NcAlarmSettings, type NcAlarmSettingsPatch, NcAlarmSettingsPatchSchema, NcAlarmSettingsSchema, type NcAlarmSkippedDevice, NcAlarmSkippedDeviceSchema, type NcAlarmSkipReason, NcAlarmSkipReasonSchema, type NcAudioCondition, NcAudioConditionSchema, type NcClipRetentionAsk, NcClipRetentionAskSchema, type NcClipRetentionPlan, NcClipRetentionPlanSchema, type NcConditionDescriptor, NcConditionDescriptorSchema, type NcConditions, NcConditionsSchema, type NcConfirm, type NcConfirmExpect, NcConfirmExpectSchema, NcConfirmSchema, type NcCrossing, NcCrossingSchema, type NcDelivery, NcDeliverySchema, type NcDeviceStateCondition, NcDeviceStateConditionSchema, type NcHistoryEntry, NcHistoryEntrySchema, type NcHistoryFilter, NcHistoryFilterSchema, type NcHistoryRecordKind, NcHistoryRecordKindSchema, type NcHistoryStatus, NcHistoryStatusSchema, type NcHistorySubject, NcHistorySubjectSchema, type NcHookBindings, NcHookBindingsSchema, type NcLegacyRuleActionSequence, NcLegacyRuleActionSequenceSchema, type NcLinkedCameraMode, NcLinkedCameraModeSchema, type NcMediaFrame, NcMediaFrameSchema, type NcMediaPolicy, NcMediaPolicySchema, type NcOccupancyCondition, NcOccupancyConditionSchema, type NcPlateMatcher, NcPlateMatcherSchema, type NcRule, type NcRuleAction, NcRuleActionSchema, type NcRuleActionSequence, NcRuleActionSequenceSchema, type NcRuleActions, NcRuleActionsSchema, type NcRuleClearableKey, NcRuleClearableKeySchema, type NcRuleInput, NcRuleInputSchema, NcRuleKindSchema, type NcRuleLastRun, NcRuleLastRunSchema, type NcRuleLastRuns, NcRuleLastRunsSchema, type NcRuleNotificationButton, NcRuleNotificationButtonSchema, type NcRulePatch, NcRulePatchSchema, NcRuleSchema, type NcRuleTarget, NcRuleTargetSchema, type NcRuleUpdateInput, NcRuleUpdateInputSchema, type NcSceneCondition, NcSceneConditionSchema, type NcSchedule, NcScheduleSchema, type NcScheduleWindow, NcScheduleWindowSchema, type NcSensorTransition, NcSensorTransitionSchema, type NcSharedSequence, type NcSharedSequenceInput, NcSharedSequenceInputSchema, NcSharedSequenceSchema, type NcSnooze, type NcSnoozeInput, NcSnoozeInputSchema, NcSnoozeSchema, type NcSnoozeScope, NcSnoozeScopeSchema, type NcSnoozeSuppressed, NcSnoozeSuppressedSchema, type NcStateSummaryPreview, type NcStateSummaryPreviewRow, NcStateSummaryPreviewRowSchema, NcStateSummaryPreviewSchema, type NcStateSummaryPreviewSection, NcStateSummaryPreviewSectionSchema, type NcStateSummarySectionId, NcStateSummarySectionIdSchema, type NcStateSummarySplit, NcStateSummarySplitSchema, type NcSystemEventCondition, NcSystemEventConditionSchema, type NcSystemEventDelivery, type NcSystemEventDeliveryMode, NcSystemEventDeliveryModeSchema, NcSystemEventDeliverySchema, type NcSystemEventKind, NcSystemEventKindSchema, type NcTemplateFamily, NcTemplateFamilySchema, type NcTemplateField, NcTemplateFieldSchema, type NcTemplatePreview, type NcTemplatePreviewInput, NcTemplatePreviewInputSchema, NcTemplatePreviewSchema, type NcTemplateVarContext, NcTemplateVarContextSchema, type NcTemplateVarDescriptor, NcTemplateVarDescriptorSchema, type NcTemplateVarGroup, NcTemplateVarGroupSchema, type NcTemplateVarKind, NcTemplateVarKindSchema, type NcTestResult, NcTestResultSchema, type NcThrottle, type NcThrottleGranularity, NcThrottleGranularitySchema, NcThrottleSchema, type NcZoneCondition, NcZoneConditionSchema, notificationRulesCapability, } from './notification-rules.cap.js';
 export { type IOauthIntegrationProvider, type OauthIntegrationDescriptor, OauthIntegrationDescriptorSchema, oauthIntegrationCapability, } from './oauth-integration.cap.js';
-export { AnalyticsLtsSeriesSchema, type AudioEvent, type AudioEventDraft, AudioEventSchema, type DetectionSource, DetectionSourceSchema, EVENT_DENSITY_BATCH_MAX, type EventDensityBucket, EventDensityBucketSchema, type EventDensityForDevice, EventDensityForDeviceSchema, type EventKind, type EventKindCategory, EventKindCategorySchema, type EventKindDescriptor, EventKindDescriptorSchema, type EventKindIcon, EventKindIconSchema, EventKindSchema, type EventKindsForDevice, EventKindsForDeviceSchema, type EventMediaKindBreakdown, type EventMediaKindFootprint, type EventPruneCounts, type EventStoreDeviceFootprint, type EventStoreFootprint, type IPipelineAnalyticsProvider, type KeyEvent, KeyEventSchema, type KeyEventsForDevice, type LabelAttribution, LabelAttributionSchema, type LabelTier, LabelTierSchema, LTS_SCOPE_CLASS_SEPARATOR, type LtsBucket, LtsBucketSchema, MAX_TRACK_DEBUG_NOTE_LEN, type MediaFile, type MediaFileBytes, type MediaFileInfo, MediaFileInfoSchema, type MediaFileKind, MediaFileKindEnum, type MediaFileRef, MediaFileRefSchema, MediaFileSchema, type MotionEvent, type MotionEventDraft, MotionEventSchema, type ObjectEvent, type ObjectEventDraft, ObjectEventSchema, occupancyScope, parseOccupancyScope, pipelineAnalyticsCapability, type RebuildObjectEmbeddingsRefusal, RebuildObjectEmbeddingsRefusalSchema, type RecentTracksPage, RecentTracksPageSchema, type RecentTracksQuery, RecentTracksQueryInput, type RetrainAnnotation, type RetrainAnnotationDraft, RetrainAnnotationDraftSchema, RetrainAnnotationKindSchema, RetrainAnnotationSchema, RetrainAnnotationSourceSchema, type RetrainAssistResult, RetrainAssistResultSchema, RetrainAssistSubjectSchema, RetrainCopyRefusalSchema, type RetrainFrame, type RetrainFrameCandidate, RetrainFrameCandidateSchema, type RetrainFrameList, RetrainFrameListSchema, RetrainFrameSchema, type RetrainFrameSelection, RetrainFrameSelectionSchema, type RetrainMacroClass, RetrainMacroClassSchema, type RetrainStatus, RetrainStatusSchema, type RetrainTrack, RetrainTrackSchema, type RetrainTransitionResult, RetrainTransitionResultSchema, type ScoredObjectEvent, ScoredObjectEventSchema, type SensorEvent, SensorEventSchema, type Track, type TrackCascadeCounts, TrackCascadeCountsSchema, type TrackEnvelope, TrackEnvelopeSchema, TrackedDetectionSchema, type TrackFlags, type TrackFlagsPatch, TrackFlagsPatchSchema, TrackFlagsSchema, type TrackProjection, TrackProjectionSchema, TrackSchema, type TrackSource, TrackSourceSchema, type TrackState, TrackStateSchema, type TrackZoneFilter, TrackZoneFilterSchema, type TrainingExportDeviceTotals, TrainingExportDeviceTotalsSchema, type TrainingExportSummary, TrainingExportSummarySchema, type ZoneCrossing, type ZoneCrossingDirection, ZoneCrossingDirectionSchema, ZoneCrossingSchema, } from './pipeline-analytics.cap.js';
+export { AnalyticsLtsSeriesSchema, type AudioEvent, type AudioEventDraft, AudioEventSchema, type DetectionSource, DetectionSourceSchema, EVENT_DENSITY_BATCH_MAX, type EventDensityBucket, EventDensityBucketSchema, type EventDensityForDevice, EventDensityForDeviceSchema, type EventKind, type EventKindCategory, EventKindCategorySchema, type EventKindDescriptor, EventKindDescriptorSchema, type EventKindIcon, EventKindIconSchema, EventKindSchema, type EventKindsForDevice, EventKindsForDeviceSchema, type EventMediaKindBreakdown, type EventMediaKindFootprint, type EventPruneCounts, type EventStoreDeviceFootprint, type EventStoreFootprint, type IPipelineAnalyticsProvider, type KeyEvent, KeyEventSchema, type KeyEventsForDevice, type LabelAttribution, LabelAttributionSchema, type LabelTier, LabelTierSchema, LTS_SCOPE_CLASS_SEPARATOR, type LtsBucket, LtsBucketSchema, MAX_TRACK_DEBUG_NOTE_LEN, type MediaFile, type MediaFileBytes, type MediaFileInfo, MediaFileInfoSchema, type MediaFileKind, MediaFileKindEnum, type MediaFileRef, MediaFileRefSchema, MediaFileSchema, type MotionEvent, type MotionEventDraft, MotionEventSchema, type ObjectEvent, type ObjectEventDraft, ObjectEventSchema, occupancyScope, parseOccupancyScope, pipelineAnalyticsCapability, type RebuildObjectEmbeddingsRefusal, RebuildObjectEmbeddingsRefusalSchema, type RecentTracksPage, RecentTracksPageSchema, type RecentTracksQuery, RecentTracksQueryInput, type RetrainAnnotation, type RetrainAnnotationDraft, RetrainAnnotationDraftSchema, RetrainAnnotationKindSchema, RetrainAnnotationSchema, RetrainAnnotationSourceSchema, type RetrainArchiveResult, RetrainArchiveResultSchema, type RetrainArchiveTarget, RetrainArchiveTargetSchema, type RetrainAssistResult, RetrainAssistResultSchema, RetrainAssistSubjectSchema, RetrainCopyRefusalSchema, type RetrainExportFilter, RetrainExportFilterSchema, type RetrainExportLayout, RetrainExportLayoutSchema, type RetrainFrame, type RetrainFrameCandidate, RetrainFrameCandidateSchema, type RetrainFrameList, RetrainFrameListSchema, RetrainFrameSchema, type RetrainFrameSelection, RetrainFrameSelectionSchema, type RetrainMacroClass, RetrainMacroClassSchema, type RetrainStatus, RetrainStatusSchema, type RetrainTrack, RetrainTrackSchema, type RetrainTransitionResult, RetrainTransitionResultSchema, type ScoredObjectEvent, ScoredObjectEventSchema, type SensorEvent, SensorEventSchema, type Track, type TrackCascadeCounts, TrackCascadeCountsSchema, type TrackEnvelope, TrackEnvelopeSchema, TrackedDetectionSchema, type TrackFlags, type TrackFlagsPatch, TrackFlagsPatchSchema, TrackFlagsSchema, type TrackProjection, TrackProjectionSchema, TrackSchema, type TrackSource, TrackSourceSchema, type TrackState, TrackStateSchema, type TrackZoneFilter, TrackZoneFilterSchema, type TrainingExportDeviceTotals, TrainingExportDeviceTotalsSchema, type TrainingExportSummary, TrainingExportSummarySchema, type ZoneCrossing, type ZoneCrossingDirection, ZoneCrossingDirectionSchema, ZoneCrossingSchema, } from './pipeline-analytics.cap.js';
 export type { EffectiveTuning, EffectiveTuningInput, NativeCropRef, PipelineStepInputOutput, PipelineValidationIssue, PipelineValidationResult, SuppliedRootOutput, } from './pipeline-executor.cap.js';
 export { EffectiveTuningSchema, ModelSubstitutionSchema, NativeCropRefSchema, PipelineDefaultStepSchema, PipelineEngineChoiceSchema, PipelineRunResultBridge, PipelineStepInputSchema, PipelineValidationIssueSchema, PipelineValidationResultSchema, pipelineExecutorCapability, SuppliedRootOutputSchema, } from './pipeline-executor.cap.js';
 export type { CameraAssignmentStatus, CameraAudioStatus, CameraBrokerProfile, CameraBrokerStatus, CameraDecoderStatus, CameraDetectionPhase, CameraDetectionProvisioning, CameraDetectionProvisioningState, CameraDetectionStatus, CameraMotionStatus, CameraRecordingMode, CameraRecordingStatus, CameraSourceStatus, CameraSourceStream, CameraStatus, CameraStatusDegradation, CameraStatusDegradationReason, CameraStatusStage, ClusterModelChoice, ClusterModelChoiceUnreadableReason, DiskReconcileJob, InferenceDeviceExclusionReason, IngestOwner, NodeInferenceDevice, NodeInferenceDevices, OccupancyLookAnswer, OccupancyLookRefusal, OccupancyLookRequest, SetCameraSensorsInput, } from './pipeline-orchestrator.cap.js';
@@ -222,7 +222,7 @@ export { type ITamperProvider, type TamperStatus, TamperStatusSchema, tamperCapa
 export { type ITemperatureSensorProvider, type TemperatureSensorStatus, TemperatureSensorStatusSchema, temperatureSensorCapability, } from './temperature-sensor.cap.js';
 export { type IToastProvider, ToastSchema, toastCapability } from './toast.cap.js';
 export { type IUpdateProvider, type UpdateStatus, UpdateStatusSchema, updateCapability, } from './update.cap.js';
-export { ApiKeySummarySchema, CreateApiKeyInputSchema, CreateApiKeyResultSchema, CreateScopedTokenInputSchema, CreateScopedTokenResultSchema, CreateUserInputSchema, type IUserManagementProvider, ScopedTokenSummarySchema, UpdateUserInputSchema, UserSummarySchema, userManagementCapability, } from './user-management.cap.js';
+export { ApiKeySummarySchema, CreateApiKeyInputSchema, CreateApiKeyResultSchema, CreateScopedTokenInputSchema, CreateScopedTokenResultSchema, CreateUserInputSchema, ExternalIdentityKeySchema, ExternalIdentitySchema, type IUserManagementProvider, ScopedTokenSummarySchema, UpdateUserInputSchema, UserSummarySchema, userManagementCapability, } from './user-management.cap.js';
 export { type IVacuumControlProvider, type TankStatus, TankStatusSchema, type VacuumControlStatus, VacuumControlStatusSchema, type VacuumState, VacuumStateSchema, vacuumControlCapability, } from './vacuum-control.cap.js';
 export { type IValveProvider, type ValveState, ValveStateSchema, type ValveStatus, ValveStatusSchema, valveCapability, } from './valve.cap.js';
 export { type IVibrationProvider, type VibrationStatus, VibrationStatusSchema, vibrationCapability, } from './vibration.cap.js';

package/dist/capabilities/local-network.cap.d.ts

@@ -390,8 +390,8 @@ export declare const localNetworkCapability: {
             includeLoopback: z.ZodOptional<z.ZodBoolean>;
             ipv4Only: z.ZodOptional<z.ZodBoolean>;
             scheme: z.ZodOptional<z.ZodEnum<{
-                https: "https";
                 http: "http";
+                https: "https";
             }>>;
             includeAppLink: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>, z.ZodObject<{
@@ -497,8 +497,8 @@ export declare const localNetworkCapability: {
          */
         readonly getAddresses: import("./capability-definition.js").CapabilityMethodSchema<z.ZodOptional<z.ZodObject<{
             scheme: z.ZodOptional<z.ZodEnum<{
-                https: "https";
                 http: "http";
+                https: "https";
             }>>;
         }, z.core.$strip>>, z.ZodObject<{
             rows: z.ZodReadonly<z.ZodArray<z.ZodObject<{

package/dist/capabilities/login-method.cap.d.ts

@@ -60,6 +60,7 @@ export declare const RedirectLoginMethodSchema: z.ZodObject<{
         primary: "primary";
         "second-factor": "second-factor";
     }>;
+    linkable: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 /**
  * A Module-Federation widget the login page mounts for an in-page
@@ -111,6 +112,7 @@ export declare const LoginMethodContributionSchema: z.ZodDiscriminatedUnion<[z.Z
         primary: "primary";
         "second-factor": "second-factor";
     }>;
+    linkable: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>, z.ZodObject<{
     kind: z.ZodLiteral<"widget">;
     id: z.ZodString;
@@ -152,6 +154,7 @@ export declare const loginMethodCapability: {
                 primary: "primary";
                 "second-factor": "second-factor";
             }>;
+            linkable: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>, z.ZodObject<{
             kind: z.ZodLiteral<"widget">;
             id: z.ZodString;

package/dist/capabilities/mesh-network.cap.d.ts

@@ -34,8 +34,8 @@ declare const MeshEndpointSchema: z.ZodObject<{
     hostname: z.ZodString;
     port: z.ZodNumber;
     protocol: z.ZodEnum<{
-        https: "https";
         http: "http";
+        https: "https";
     }>;
 }, z.core.$strip>;
 export type MeshEndpoint = z.infer<typeof MeshEndpointSchema>;
@@ -80,8 +80,8 @@ export declare const MeshStatusSchema: z.ZodObject<{
         hostname: z.ZodString;
         port: z.ZodNumber;
         protocol: z.ZodEnum<{
-            https: "https";
             http: "http";
+            https: "https";
         }>;
     }, z.core.$strip>>>;
     error: z.ZodOptional<z.ZodString>;
@@ -123,8 +123,8 @@ export declare const meshNetworkCapability: {
                 hostname: z.ZodString;
                 port: z.ZodNumber;
                 protocol: z.ZodEnum<{
-                    https: "https";
                     http: "http";
+                    https: "https";
                 }>;
             }, z.core.$strip>>>;
             error: z.ZodOptional<z.ZodString>;

package/dist/capabilities/network-access.cap.d.ts

@@ -5,8 +5,8 @@ declare const NetworkEndpointSchema: z.ZodObject<{
     hostname: z.ZodString;
     port: z.ZodNumber;
     protocol: z.ZodEnum<{
-        https: "https";
         http: "http";
+        https: "https";
     }>;
 }, z.core.$strip>;
 declare const NetworkAccessStatusSchema: z.ZodObject<{
@@ -16,8 +16,8 @@ declare const NetworkAccessStatusSchema: z.ZodObject<{
         hostname: z.ZodString;
         port: z.ZodNumber;
         protocol: z.ZodEnum<{
-            https: "https";
             http: "http";
+            https: "https";
         }>;
     }, z.core.$strip>>;
     error: z.ZodOptional<z.ZodString>;
@@ -37,8 +37,8 @@ declare const NetworkEndpointEntrySchema: z.ZodObject<{
     hostname: z.ZodString;
     port: z.ZodNumber;
     protocol: z.ZodEnum<{
-        https: "https";
         http: "http";
+        https: "https";
     }>;
     id: z.ZodString;
     label: z.ZodString;
@@ -56,8 +56,8 @@ export declare const networkAccessCapability: {
             hostname: z.ZodString;
             port: z.ZodNumber;
             protocol: z.ZodEnum<{
-                https: "https";
                 http: "http";
+                https: "https";
             }>;
         }, z.core.$strip>, "mutation">;
         readonly stop: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodVoid, "mutation">;
@@ -66,8 +66,8 @@ export declare const networkAccessCapability: {
             hostname: z.ZodString;
             port: z.ZodNumber;
             protocol: z.ZodEnum<{
-                https: "https";
                 http: "http";
+                https: "https";
             }>;
         }, z.core.$strip>>, import("./capability-definition.js").CapabilityMethodKind>;
         readonly getStatus: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodObject<{
@@ -77,8 +77,8 @@ export declare const networkAccessCapability: {
                 hostname: z.ZodString;
                 port: z.ZodNumber;
                 protocol: z.ZodEnum<{
-                    https: "https";
                     http: "http";
+                    https: "https";
                 }>;
             }, z.core.$strip>>;
             error: z.ZodOptional<z.ZodString>;
@@ -93,8 +93,8 @@ export declare const networkAccessCapability: {
             hostname: z.ZodString;
             port: z.ZodNumber;
             protocol: z.ZodEnum<{
-                https: "https";
                 http: "http";
+                https: "https";
             }>;
             id: z.ZodString;
             label: z.ZodString;

package/dist/capabilities/pipeline-analytics.cap.d.ts

@@ -1074,6 +1074,8 @@ export declare const RetrainFrameSchema: z.ZodObject<{
     width: z.ZodNumber;
     height: z.ZodNumber;
     copiedAt: z.ZodNumber;
+    capturedAt: z.ZodOptional<z.ZodNumber>;
+    complete: z.ZodBoolean;
 }, z.core.$strip>;
 export type RetrainFrame = z.infer<typeof RetrainFrameSchema>;
 /** Why a copy-on-select could not be honoured — named, never a silent skip. */
@@ -1110,6 +1112,8 @@ export declare const RetrainFrameSelectionSchema: z.ZodObject<{
         width: z.ZodNumber;
         height: z.ZodNumber;
         copiedAt: z.ZodNumber;
+        capturedAt: z.ZodOptional<z.ZodNumber>;
+        complete: z.ZodBoolean;
     }, z.core.$strip>>>;
     refused: z.ZodReadonly<z.ZodArray<z.ZodObject<{
         sourceMediaId: z.ZodNumber;
@@ -1173,10 +1177,63 @@ export declare const RetrainFrameListSchema: z.ZodObject<{
         width: z.ZodNumber;
         height: z.ZodNumber;
         copiedAt: z.ZodNumber;
+        capturedAt: z.ZodOptional<z.ZodNumber>;
+        complete: z.ZodBoolean;
     }, z.core.$strip>>>;
     autoPickMediaId: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
 export type RetrainFrameList = z.infer<typeof RetrainFrameListSchema>;
+/**
+ * Which frames an annotated export carries. Every field narrows; an empty
+ * filter is every annotated copy. A dataset VERSION is a frozen `frameIds`
+ * list owned by whoever trains (the training orchestrator), so `frameIds` is
+ * the primitive a version export uses; `batchId` re-selects what an earlier
+ * export carried (`exportedInBatch`).
+ */
+export declare const RetrainExportFilterSchema: z.ZodObject<{
+    deviceIds: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+    frameIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    batchId: z.ZodOptional<z.ZodString>;
+    completeOnly: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type RetrainExportFilter = z.infer<typeof RetrainExportFilterSchema>;
+/**
+ * `frames`: the full frame copies, boxes in `annotations.json`.
+ * `crops`: additionally one JPEG per subject, cut with the runtime detail-crop
+ * convention — the classifier layout.
+ */
+export declare const RetrainExportLayoutSchema: z.ZodEnum<{
+    frames: "frames";
+    crops: "crops";
+}>;
+export type RetrainExportLayout = z.infer<typeof RetrainExportLayoutSchema>;
+/**
+ * Where `writeRetrainArchive` streams the tar: one HTTP request whose body is
+ * the archive, sent chunk by chunk. Covers a presigned PUT and a provider
+ * addon's data-plane upload route alike. Headers are sent verbatim and never
+ * logged.
+ */
+export declare const RetrainArchiveTargetSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"http">;
+    method: z.ZodEnum<{
+        PUT: "PUT";
+        POST: "POST";
+    }>;
+    url: z.ZodString;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>;
+export type RetrainArchiveTarget = z.infer<typeof RetrainArchiveTargetSchema>;
+export declare const RetrainArchiveResultSchema: z.ZodObject<{
+    batchId: z.ZodString;
+    frames: z.ZodNumber;
+    crops: z.ZodNumber;
+    annotations: z.ZodNumber;
+    missing: z.ZodNumber;
+    bytes: z.ZodNumber;
+    sha256: z.ZodString;
+    status: z.ZodNumber;
+}, z.core.$strip>;
+export type RetrainArchiveResult = z.infer<typeof RetrainArchiveResultSchema>;
 /** What the operator asked the assist to look for. */
 export declare const RetrainAssistSubjectSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"package">;
@@ -3700,6 +3757,8 @@ export declare const pipelineAnalyticsCapability: {
                 width: z.ZodNumber;
                 height: z.ZodNumber;
                 copiedAt: z.ZodNumber;
+                capturedAt: z.ZodOptional<z.ZodNumber>;
+                complete: z.ZodBoolean;
             }, z.core.$strip>>>;
             autoPickMediaId: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strip>, "query">;
@@ -3749,6 +3808,8 @@ export declare const pipelineAnalyticsCapability: {
                 width: z.ZodNumber;
                 height: z.ZodNumber;
                 copiedAt: z.ZodNumber;
+                capturedAt: z.ZodOptional<z.ZodNumber>;
+                complete: z.ZodBoolean;
             }, z.core.$strip>>>;
             refused: z.ZodReadonly<z.ZodArray<z.ZodObject<{
                 sourceMediaId: z.ZodNumber;
@@ -4045,9 +4106,93 @@ export declare const pipelineAnalyticsCapability: {
          */
         readonly getRetrainExportUrl: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
             deviceIds: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+            frameIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            batchId: z.ZodOptional<z.ZodString>;
+            completeOnly: z.ZodOptional<z.ZodBoolean>;
+            layout: z.ZodOptional<z.ZodEnum<{
+                frames: "frames";
+                crops: "crops";
+            }>>;
         }, z.core.$strip>, z.ZodObject<{
             url: z.ZodString;
         }, z.core.$strip>, "query">;
+        /**
+         * The operator's "every subject in this frame is boxed" — set and cleared
+         * by hand, never derived: a frame with no box may be a complete hard
+         * negative, and a frame with three boxes may still miss a fourth person.
+         */
+        readonly setRetrainFrameComplete: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            deviceId: z.ZodNumber;
+            trackId: z.ZodString;
+            frameId: z.ZodString;
+            complete: z.ZodBoolean;
+        }, z.core.$strip>, z.ZodObject<{
+            frameId: z.ZodString;
+            deviceId: z.ZodNumber;
+            trackId: z.ZodString;
+            sourceMediaId: z.ZodNumber;
+            sourceKind: z.ZodEnum<{
+                crop: "crop";
+                thumbnail: "thumbnail";
+                snapshot: "snapshot";
+                firstFrame: "firstFrame";
+                lastFrame: "lastFrame";
+                fullFrame: "fullFrame";
+                fullFrameBoxed: "fullFrameBoxed";
+                faceCrop: "faceCrop";
+                plateCrop: "plateCrop";
+                keyFrame: "keyFrame";
+                keyFrameSmall: "keyFrameSmall";
+                thumbnailSmall: "thumbnailSmall";
+                confirmationCrop: "confirmationCrop";
+                debugCrop: "debugCrop";
+                sceneFrame: "sceneFrame";
+                lastSceneFrame: "lastSceneFrame";
+            }>;
+            sizeBytes: z.ZodNumber;
+            width: z.ZodNumber;
+            height: z.ZodNumber;
+            copiedAt: z.ZodNumber;
+            capturedAt: z.ZodOptional<z.ZodNumber>;
+            complete: z.ZodBoolean;
+        }, z.core.$strip>, "mutation">;
+        /**
+         * Stream the annotated archive to a TARGET instead of a browser — the
+         * same tar `getRetrainExportUrl` serves (manifest first, one JPEG in
+         * memory at a time, paced), written chunk by chunk into one HTTP request.
+         * The bytes never cross this cap and never land on the hub's disk; the
+         * answer is what was sent, with its sha256.
+         */
+        readonly writeRetrainArchive: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            filter: z.ZodObject<{
+                deviceIds: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+                frameIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                batchId: z.ZodOptional<z.ZodString>;
+                completeOnly: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>;
+            layout: z.ZodEnum<{
+                frames: "frames";
+                crops: "crops";
+            }>;
+            target: z.ZodObject<{
+                kind: z.ZodLiteral<"http">;
+                method: z.ZodEnum<{
+                    PUT: "PUT";
+                    POST: "POST";
+                }>;
+                url: z.ZodString;
+                headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            }, z.core.$strip>;
+        }, z.core.$strip>, z.ZodObject<{
+            batchId: z.ZodString;
+            frames: z.ZodNumber;
+            crops: z.ZodNumber;
+            annotations: z.ZodNumber;
+            missing: z.ZodNumber;
+            bytes: z.ZodNumber;
+            sha256: z.ZodString;
+            status: z.ZodNumber;
+        }, z.core.$strip>, "mutation">;
         /**
          * The media an EVENT owns.
          *

package/dist/capabilities/sso-bridge.cap.d.ts

@@ -76,6 +76,8 @@ declare const SsoBridgeClaimsSchema: z.ZodObject<{
     codeChallenge: z.ZodOptional<z.ZodString>;
     sessionId: z.ZodOptional<z.ZodString>;
     refreshTtl: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodLiteral<"never">]>>;
+    linkIntent: z.ZodOptional<z.ZodString>;
+    issuer: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const ssoBridgeCapability: {
     readonly name: "sso-bridge";
@@ -160,6 +162,8 @@ export declare const ssoBridgeCapability: {
                 codeChallenge: z.ZodOptional<z.ZodString>;
                 sessionId: z.ZodOptional<z.ZodString>;
                 refreshTtl: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodLiteral<"never">]>>;
+                linkIntent: z.ZodOptional<z.ZodString>;
+                issuer: z.ZodOptional<z.ZodString>;
             }, z.core.$strip>;
             ttlSec: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodLiteral<"never">]>>;
         }, z.core.$strip>, z.ZodObject<{
@@ -229,6 +233,8 @@ export declare const ssoBridgeCapability: {
             codeChallenge: z.ZodOptional<z.ZodString>;
             sessionId: z.ZodOptional<z.ZodString>;
             refreshTtl: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodLiteral<"never">]>>;
+            linkIntent: z.ZodOptional<z.ZodString>;
+            issuer: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>, import("./capability-definition.js").CapabilityMethodKind>;
     };
 };

package/dist/capabilities/system.cap.d.ts

@@ -124,8 +124,8 @@ declare const SetSiteLocationInputSchema: z.ZodNullable<z.ZodObject<{
  */
 declare const TransportPlaneSchema: z.ZodEnum<{
     unknown: "unknown";
-    mesh: "mesh";
     http: "http";
+    mesh: "mesh";
     ws: "ws";
 }>;
 /**
@@ -152,8 +152,8 @@ declare const TransportPlaneCountsSchema: z.ZodObject<{
 declare const RequestCensusGroupSchema: z.ZodObject<{
     plane: z.ZodEnum<{
         unknown: "unknown";
-        mesh: "mesh";
         http: "http";
+        mesh: "mesh";
         ws: "ws";
     }>;
     procedure: z.ZodString;
@@ -220,8 +220,8 @@ declare const RequestCensusSnapshotSchema: z.ZodObject<{
     groups: z.ZodReadonly<z.ZodArray<z.ZodObject<{
         plane: z.ZodEnum<{
             unknown: "unknown";
-            mesh: "mesh";
             http: "http";
+            mesh: "mesh";
             ws: "ws";
         }>;
         procedure: z.ZodString;
@@ -277,8 +277,8 @@ declare const RequestCensusStatusSchema: z.ZodObject<{
     groups: z.ZodReadonly<z.ZodArray<z.ZodObject<{
         plane: z.ZodEnum<{
             unknown: "unknown";
-            mesh: "mesh";
             http: "http";
+            mesh: "mesh";
             ws: "ws";
         }>;
         procedure: z.ZodString;
@@ -779,8 +779,8 @@ export declare const systemCapability: {
             groups: z.ZodReadonly<z.ZodArray<z.ZodObject<{
                 plane: z.ZodEnum<{
                     unknown: "unknown";
-                    mesh: "mesh";
                     http: "http";
+                    mesh: "mesh";
                     ws: "ws";
                 }>;
                 procedure: z.ZodString;

package/dist/capabilities/user-management.cap.d.ts

@@ -433,6 +433,18 @@ declare const OauthSessionSummarySchema: z.ZodObject<{
  * delegation, structural caller-scope subset check goes inside the
  * provider.
  */
+declare const ExternalIdentitySchema: z.ZodObject<{
+    provider: z.ZodString;
+    subject: z.ZodString;
+    issuer: z.ZodString;
+    userId: z.ZodString;
+    label: z.ZodOptional<z.ZodString>;
+    linkedAt: z.ZodNumber;
+}, z.core.$strip>;
+declare const ExternalIdentityKeySchema: z.ZodObject<{
+    provider: z.ZodString;
+    subject: z.ZodString;
+}, z.core.$strip>;
 export declare const userManagementCapability: {
     readonly name: "user-management";
     readonly scope: "system";
@@ -1228,6 +1240,46 @@ export declare const userManagementCapability: {
                 includeLinked: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>], "type">>>;
         }, z.core.$strip>>, import("./capability-definition.js").CapabilityMethodKind>;
+        readonly listExternalIdentities: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            userId: z.ZodString;
+        }, z.core.$strip>, z.ZodArray<z.ZodObject<{
+            provider: z.ZodString;
+            subject: z.ZodString;
+            issuer: z.ZodString;
+            userId: z.ZodString;
+            label: z.ZodOptional<z.ZodString>;
+            linkedAt: z.ZodNumber;
+        }, z.core.$strip>>, import("./capability-definition.js").CapabilityMethodKind>;
+        /** The user an identity is linked to, or `null`. */
+        readonly findUserByExternalIdentity: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            provider: z.ZodString;
+            subject: z.ZodString;
+        }, z.core.$strip>, z.ZodNullable<z.ZodObject<{
+            userId: z.ZodString;
+            issuer: z.ZodString;
+        }, z.core.$strip>>, import("./capability-definition.js").CapabilityMethodKind>;
+        /**
+         * Link `(provider, subject)` to `userId`. Idempotent for the same user;
+         * REFUSES (throws) an identity already linked to another user, and a
+         * user that does not exist.
+         */
+        readonly linkExternalIdentity: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            provider: z.ZodString;
+            subject: z.ZodString;
+            userId: z.ZodString;
+            issuer: z.ZodString;
+            label: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            success: z.ZodLiteral<true>;
+        }, z.core.$strip>, "mutation">;
+        /** Remove one link of `userId`. `success: false` when it was not linked to that user. */
+        readonly unlinkExternalIdentity: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            provider: z.ZodString;
+            subject: z.ZodString;
+            userId: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            success: z.ZodBoolean;
+        }, z.core.$strip>, "mutation">;
         readonly listOauthSessions: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodArray<z.ZodObject<{
             id: z.ZodString;
             userId: z.ZodString;
@@ -1293,4 +1345,4 @@ export declare const userManagementCapability: {
     };
 };
 export type IUserManagementProvider = InferProvider<typeof userManagementCapability>;
-export { ApiKeySummarySchema, CreateApiKeyInputSchema, CreateApiKeyResultSchema, CreateScopedTokenInputSchema, CreateScopedTokenResultSchema, CreateUserInputSchema, OauthSessionSummarySchema, ScopedTokenSummarySchema, UpdateUserInputSchema, UserSummarySchema, };
+export { ApiKeySummarySchema, CreateApiKeyInputSchema, CreateApiKeyResultSchema, CreateScopedTokenInputSchema, CreateScopedTokenResultSchema, CreateUserInputSchema, ExternalIdentityKeySchema, ExternalIdentitySchema, OauthSessionSummarySchema, ScopedTokenSummarySchema, UpdateUserInputSchema, UserSummarySchema, };