@camstack/types 1.2.326 → 1.2.328

package/dist/generated/addon-api.d.ts

@@ -58,6 +58,8 @@ import type { humidifierCapability } from '../capabilities/humidifier.cap.js';
 import type { imageSettingsCapability } from '../capabilities/image-settings.cap.js';
 import type { integrationsCapability } from '../capabilities/integrations.cap.js';
 import type { intercomCapability } from '../capabilities/intercom.cap.js';
+import type { keychainAdminCapability } from '../capabilities/keychain-admin.cap.js';
+import type { keychainCapability } from '../capabilities/keychain.cap.js';
 import type { lawnMowerControlCapability } from '../capabilities/lawn-mower-control.cap.js';
 import type { llmRuntimeCapability } from '../capabilities/llm-runtime.cap.js';
 import type { llmCapability } from '../capabilities/llm.cap.js';
@@ -3657,6 +3659,118 @@ export type AppRouter = TrpcCoreRouter<{
             meta: object;
         }>;
     }>>;
+    keychain: TRPCBuiltRouter<{
+        ctx: TrpcContext;
+        meta: object;
+        errorShape: AugmentedErrorShape;
+        transformer: true;
+    }, TRPCDecorateCreateRouterOptions<{
+        put: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainCapability.methods.put.input>;
+            output: z.infer<typeof keychainCapability.methods.put.output>;
+            meta: object;
+        }>;
+        resolve: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainCapability.methods.resolve.input>;
+            output: z.infer<typeof keychainCapability.methods.resolve.output>;
+            meta: object;
+        }>;
+        delete: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainCapability.methods.delete.input>;
+            output: z.infer<typeof keychainCapability.methods.delete.output>;
+            meta: object;
+        }>;
+        listMeta: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainCapability.methods.listMeta.input>;
+            output: z.infer<typeof keychainCapability.methods.listMeta.output>;
+            meta: object;
+        }>;
+        getState: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainCapability.methods.getState.input>;
+            output: z.infer<typeof keychainCapability.methods.getState.output>;
+            meta: object;
+        }>;
+    }>>;
+    keychainAdmin: TRPCBuiltRouter<{
+        ctx: TrpcContext;
+        meta: object;
+        errorShape: AugmentedErrorShape;
+        transformer: true;
+    }, TRPCDecorateCreateRouterOptions<{
+        status: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.status.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.status.output>;
+            meta: object;
+        }>;
+        listSecrets: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.listSecrets.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.listSecrets.output>;
+            meta: object;
+        }>;
+        listAudit: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.listAudit.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.listAudit.output>;
+            meta: object;
+        }>;
+        reveal: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.reveal.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.reveal.output>;
+            meta: object;
+        }>;
+        deleteOrphans: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.deleteOrphans.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.deleteOrphans.output>;
+            meta: object;
+        }>;
+        rotateMasterKey: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.rotateMasterKey.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.rotateMasterKey.output>;
+            meta: object;
+        }>;
+        purgeRetiredKeys: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.purgeRetiredKeys.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.purgeRetiredKeys.output>;
+            meta: object;
+        }>;
+        downloadRecoveryKey: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.downloadRecoveryKey.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.downloadRecoveryKey.output>;
+            meta: object;
+        }>;
+        resetKeychain: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.resetKeychain.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.resetKeychain.output>;
+            meta: object;
+        }>;
+    }>>;
     lawnMowerControl: TRPCBuiltRouter<{
         ctx: TrpcContext;
         meta: object;
@@ -5923,6 +6037,90 @@ export type AppRouter = TrpcCoreRouter<{
             output: z.infer<typeof pipelineAnalyticsCapability.methods.getRetrainExportUrl.output>;
             meta: object;
         }>;
+        setRetrainFrameComplete: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.setRetrainFrameComplete.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.setRetrainFrameComplete.output>;
+            meta: object;
+        }>;
+        writeRetrainArchive: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.writeRetrainArchive.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.writeRetrainArchive.output>;
+            meta: object;
+        }>;
+        listRetrainAssistProfiles: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.listRetrainAssistProfiles.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.listRetrainAssistProfiles.output>;
+            meta: object;
+        }>;
+        proposeRetrainAnnotationsWithLlm: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.proposeRetrainAnnotationsWithLlm.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.proposeRetrainAnnotationsWithLlm.output>;
+            meta: object;
+        }>;
+        createRetrainCollection: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.createRetrainCollection.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.createRetrainCollection.output>;
+            meta: object;
+        }>;
+        listRetrainCollections: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.listRetrainCollections.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.listRetrainCollections.output>;
+            meta: object;
+        }>;
+        renameRetrainCollection: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.renameRetrainCollection.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.renameRetrainCollection.output>;
+            meta: object;
+        }>;
+        deleteRetrainCollection: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.deleteRetrainCollection.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.deleteRetrainCollection.output>;
+            meta: object;
+        }>;
+        addRetrainFrameFromRecording: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.addRetrainFrameFromRecording.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.addRetrainFrameFromRecording.output>;
+            meta: object;
+        }>;
+        addRetrainFramesToCollection: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.addRetrainFramesToCollection.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.addRetrainFramesToCollection.output>;
+            meta: object;
+        }>;
+        removeRetrainFrameFromCollection: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.removeRetrainFrameFromCollection.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.removeRetrainFrameFromCollection.output>;
+            meta: object;
+        }>;
+        listRetrainCollectionFrames: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.listRetrainCollectionFrames.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.listRetrainCollectionFrames.output>;
+            meta: object;
+        }>;
         getEventMedia: TRPCQueryProcedure<{
             input: {
                 [x: string]: unknown;
@@ -6539,6 +6737,55 @@ export type AppRouter = TrpcCoreRouter<{
             output: z.infer<typeof pipelineOrchestratorCapability.methods.setShareSource.output>;
             meta: object;
         }>;
+        getNodeBenchmarkPreflight: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineOrchestratorCapability.methods.getNodeBenchmarkPreflight.input>;
+            output: z.infer<typeof pipelineOrchestratorCapability.methods.getNodeBenchmarkPreflight.output>;
+            meta: object;
+        }>;
+        startNodeBenchmark: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineOrchestratorCapability.methods.startNodeBenchmark.input>;
+            output: z.infer<typeof pipelineOrchestratorCapability.methods.startNodeBenchmark.output>;
+            meta: object;
+        }>;
+        getNodeBenchmarkStatus: TRPCQueryProcedure<{
+            input: {
+                nodeId?: string | undefined;
+            } | undefined;
+            output: z.infer<typeof pipelineOrchestratorCapability.methods.getNodeBenchmarkStatus.output>;
+            meta: object;
+        }>;
+        abortNodeBenchmark: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineOrchestratorCapability.methods.abortNodeBenchmark.input>;
+            output: z.infer<typeof pipelineOrchestratorCapability.methods.abortNodeBenchmark.output>;
+            meta: object;
+        }>;
+        getNodeBenchmarkCandidates: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineOrchestratorCapability.methods.getNodeBenchmarkCandidates.input>;
+            output: z.infer<typeof pipelineOrchestratorCapability.methods.getNodeBenchmarkCandidates.output>;
+            meta: object;
+        }>;
+        listNodeBenchmarkResults: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineOrchestratorCapability.methods.listNodeBenchmarkResults.input>;
+            output: z.infer<typeof pipelineOrchestratorCapability.methods.listNodeBenchmarkResults.output>;
+            meta: object;
+        }>;
+        deleteNodeBenchmarkResult: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineOrchestratorCapability.methods.deleteNodeBenchmarkResult.input>;
+            output: z.infer<typeof pipelineOrchestratorCapability.methods.deleteNodeBenchmarkResult.output>;
+            meta: object;
+        }>;
         getCameraSettings: TRPCQueryProcedure<{
             input: {
                 [x: string]: unknown;
@@ -6749,6 +6996,27 @@ export type AppRouter = TrpcCoreRouter<{
             output: z.infer<typeof pipelineRunnerCapability.methods.releaseParkedTrackFrames.output>;
             meta: object;
         }>;
+        startNodeBench: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineRunnerCapability.methods.startNodeBench.input>;
+            output: z.infer<typeof pipelineRunnerCapability.methods.startNodeBench.output>;
+            meta: object;
+        }>;
+        getNodeBenchStatus: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineRunnerCapability.methods.getNodeBenchStatus.input>;
+            output: z.infer<typeof pipelineRunnerCapability.methods.getNodeBenchStatus.output>;
+            meta: object;
+        }>;
+        abortNodeBench: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineRunnerCapability.methods.abortNodeBench.input>;
+            output: z.infer<typeof pipelineRunnerCapability.methods.abortNodeBench.output>;
+            meta: object;
+        }>;
     }>>;
     plateGallery: TRPCBuiltRouter<{
         ctx: TrpcContext;
@@ -9149,6 +9417,34 @@ export type AppRouter = TrpcCoreRouter<{
             output: z.infer<typeof userManagementCapability.methods.oauthVerifyAccessToken.output>;
             meta: object;
         }>;
+        listExternalIdentities: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof userManagementCapability.methods.listExternalIdentities.input>;
+            output: z.infer<typeof userManagementCapability.methods.listExternalIdentities.output>;
+            meta: object;
+        }>;
+        findUserByExternalIdentity: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof userManagementCapability.methods.findUserByExternalIdentity.input>;
+            output: z.infer<typeof userManagementCapability.methods.findUserByExternalIdentity.output>;
+            meta: object;
+        }>;
+        linkExternalIdentity: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof userManagementCapability.methods.linkExternalIdentity.input>;
+            output: z.infer<typeof userManagementCapability.methods.linkExternalIdentity.output>;
+            meta: object;
+        }>;
+        unlinkExternalIdentity: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof userManagementCapability.methods.unlinkExternalIdentity.input>;
+            output: z.infer<typeof userManagementCapability.methods.unlinkExternalIdentity.output>;
+            meta: object;
+        }>;
         listOauthSessions: TRPCQueryProcedure<{
             input: {
                 nodeId?: string | undefined;
@@ -10953,6 +11249,45 @@ export type AppRouter = TrpcCoreRouter<{
             };
             meta: object;
         }>;
+        listLinkableProviders: import("@trpc/server").TRPCQueryProcedure<{
+            input: void;
+            output: {
+                provider: string;
+                label: string;
+            }[];
+            meta: object;
+        }>;
+        beginExternalLink: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                provider: string;
+            };
+            output: {
+                url: string;
+            };
+            meta: object;
+        }>;
+        listOwnExternalIdentities: import("@trpc/server").TRPCQueryProcedure<{
+            input: void;
+            output: {
+                provider: string;
+                subject: string;
+                linkedAt: number;
+                providerLabel: string | null;
+                available: boolean;
+                label?: string | undefined;
+            }[];
+            meta: object;
+        }>;
+        unlinkOwnExternalIdentity: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                provider: string;
+                subject: string;
+            };
+            output: {
+                success: boolean;
+            };
+            meta: object;
+        }>;
         listLoginMethods: import("@trpc/server").TRPCQueryProcedure<{
             input: void;
             output: readonly ({
@@ -10962,6 +11297,7 @@ export type AppRouter = TrpcCoreRouter<{
                 startUrl: string;
                 stage: "primary" | "second-factor";
                 icon?: string | undefined;
+                linkable?: boolean | undefined;
             } | {
                 kind: "widget";
                 id: string;
@@ -11331,6 +11667,45 @@ export type AppRouter = TrpcCoreRouter<{
             };
             meta: object;
         }>;
+        listLinkableProviders: import("@trpc/server").TRPCQueryProcedure<{
+            input: void;
+            output: {
+                provider: string;
+                label: string;
+            }[];
+            meta: object;
+        }>;
+        beginExternalLink: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                provider: string;
+            };
+            output: {
+                url: string;
+            };
+            meta: object;
+        }>;
+        listOwnExternalIdentities: import("@trpc/server").TRPCQueryProcedure<{
+            input: void;
+            output: {
+                provider: string;
+                subject: string;
+                linkedAt: number;
+                providerLabel: string | null;
+                available: boolean;
+                label?: string | undefined;
+            }[];
+            meta: object;
+        }>;
+        unlinkOwnExternalIdentity: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                provider: string;
+                subject: string;
+            };
+            output: {
+                success: boolean;
+            };
+            meta: object;
+        }>;
         listLoginMethods: import("@trpc/server").TRPCQueryProcedure<{
             input: void;
             output: readonly ({
@@ -11340,6 +11715,7 @@ export type AppRouter = TrpcCoreRouter<{
                 startUrl: string;
                 stage: "primary" | "second-factor";
                 icon?: string | undefined;
+                linkable?: boolean | undefined;
             } | {
                 kind: "widget";
                 id: string;

package/dist/generated/cap-input-defaults.d.ts

@@ -11,7 +11,7 @@
  * Plain data, zero Zod: a forked runner must not import the schema barrel
  * (~144MB RSS per runner — D28).
  *
- * Coverage: 24 caps, 59 methods with defaults.
+ * Coverage: 24 caps, 62 methods with defaults.
  */
 export declare const CAP_INPUT_DEFAULTS: Readonly<Record<string, Readonly<Record<string, Readonly<Record<string, unknown>>>>>>;
 /**

package/dist/generated/capability-router-map.d.ts

@@ -73,6 +73,8 @@ export { imageCapability } from '../capabilities/image.cap.js';
 export { imageSettingsCapability } from '../capabilities/image-settings.cap.js';
 export { integrationsCapability } from '../capabilities/integrations.cap.js';
 export { intercomCapability } from '../capabilities/intercom.cap.js';
+export { keychainCapability } from '../capabilities/keychain.cap.js';
+export { keychainAdminCapability } from '../capabilities/keychain-admin.cap.js';
 export { lawnMowerControlCapability } from '../capabilities/lawn-mower-control.cap.js';
 export { llmCapability } from '../capabilities/llm.cap.js';
 export { llmRuntimeCapability } from '../capabilities/llm-runtime.cap.js';
@@ -239,6 +241,8 @@ export declare const CAPABILITY_NAMES: {
     readonly imageSettings: "image-settings";
     readonly integrations: "integrations";
     readonly intercom: "intercom";
+    readonly keychain: "keychain";
+    readonly keychainAdmin: "keychain-admin";
     readonly lawnMowerControl: "lawn-mower-control";
     readonly llm: "llm";
     readonly llmRuntime: "llm-runtime";
@@ -418,6 +422,8 @@ export interface CapabilityRouterMap<TRouter = unknown> {
     readonly imageSettings: TRouter;
     readonly integrations: TRouter;
     readonly intercom: TRouter;
+    readonly keychain: TRouter;
+    readonly keychainAdmin: TRouter;
     readonly lawnMowerControl: TRouter;
     readonly llm: TRouter;
     readonly llmRuntime: TRouter;
@@ -509,8 +515,8 @@ export interface CapabilityRouterMap<TRouter = unknown> {
     readonly zoneRules: TRouter;
     readonly zones: TRouter;
 }
-/** Capability names whose mode is `singleton` (133 caps). */
-export declare const SINGLETON_CAPABILITY_NAMES: readonly ["accessories", "addon-pages", "addon-settings", "addon-widgets", "addons", "admin-ui", "air-quality-sensor", "alarm-panel", "alerts", "ambient-light-sensor", "audio-analysis", "audio-analyzer", "audio-codec", "audio-metrics", "automation-control", "backup", "battery", "binary", "brightness", "button", "calendars", "camera-credentials", "camera-grid-layout", "camera-pipeline-config", "camera-streams", "carbon-monoxide", "climate-control", "color", "composer", "connectivity", "consumables", "contact", "control", "core-blocks", "cover", "database-snapshot", "day-night", "decoder", "detection-pipeline", "device-admin-link", "device-adoption", "device-discovery", "device-manager", "device-ops", "device-state", "device-status", "doorbell", "enum-sensor", "event-emitter", "face-gallery", "fan-control", "feature-probe", "filesystem-browse", "flood", "gas", "humidifier", "humidity-sensor", "image", "image-settings", "integrations", "intercom", "lawn-mower-control", "llm-runtime", "local-network", "lock-control", "media-player", "metrics-provider", "model-convert", "model-distributor", "motion", "motion-detection", "motion-trigger", "motion-zones", "native-object-detection", "navigation", "network-link", "network-quality", "nodes", "notification-rules", "notifier", "numeric-sensor", "osd", "osd-manager", "pet-feeder", "pipeline-analytics", "pipeline-executor", "pipeline-orchestrator", "pipeline-runner", "plate-gallery", "platform-probe", "power-meter", "presence", "pressure-sensor", "privacy-mask", "ptz", "ptz-autotrack", "reboot", "recording-archive", "recording-export", "recording-onboard", "recording-signal", "scene-monitor", "script-runner", "server-management", "settings-store", "smoke", "snapshot", "sso-bridge", "storage", "storage-migration", "stream-broker", "stream-catalog", "stream-params", "stream-signals", "switch", "system", "tamper", "temperature-sensor", "terminal-session", "toast", "update", "user-management", "vacuum-control", "valve", "vector-store", "vibration", "viewer-ui", "water-heater", "weather", "webrtc-session", "zone-analytics", "zone-rules", "zones"];
+/** Capability names whose mode is `singleton` (135 caps). */
+export declare const SINGLETON_CAPABILITY_NAMES: readonly ["accessories", "addon-pages", "addon-settings", "addon-widgets", "addons", "admin-ui", "air-quality-sensor", "alarm-panel", "alerts", "ambient-light-sensor", "audio-analysis", "audio-analyzer", "audio-codec", "audio-metrics", "automation-control", "backup", "battery", "binary", "brightness", "button", "calendars", "camera-credentials", "camera-grid-layout", "camera-pipeline-config", "camera-streams", "carbon-monoxide", "climate-control", "color", "composer", "connectivity", "consumables", "contact", "control", "core-blocks", "cover", "database-snapshot", "day-night", "decoder", "detection-pipeline", "device-admin-link", "device-adoption", "device-discovery", "device-manager", "device-ops", "device-state", "device-status", "doorbell", "enum-sensor", "event-emitter", "face-gallery", "fan-control", "feature-probe", "filesystem-browse", "flood", "gas", "humidifier", "humidity-sensor", "image", "image-settings", "integrations", "intercom", "keychain", "keychain-admin", "lawn-mower-control", "llm-runtime", "local-network", "lock-control", "media-player", "metrics-provider", "model-convert", "model-distributor", "motion", "motion-detection", "motion-trigger", "motion-zones", "native-object-detection", "navigation", "network-link", "network-quality", "nodes", "notification-rules", "notifier", "numeric-sensor", "osd", "osd-manager", "pet-feeder", "pipeline-analytics", "pipeline-executor", "pipeline-orchestrator", "pipeline-runner", "plate-gallery", "platform-probe", "power-meter", "presence", "pressure-sensor", "privacy-mask", "ptz", "ptz-autotrack", "reboot", "recording-archive", "recording-export", "recording-onboard", "recording-signal", "scene-monitor", "script-runner", "server-management", "settings-store", "smoke", "snapshot", "sso-bridge", "storage", "storage-migration", "stream-broker", "stream-catalog", "stream-params", "stream-signals", "switch", "system", "tamper", "temperature-sensor", "terminal-session", "toast", "update", "user-management", "vacuum-control", "valve", "vector-store", "vibration", "viewer-ui", "water-heater", "weather", "webrtc-session", "zone-analytics", "zone-rules", "zones"];
 /** Union of singleton capability names (literal string union). */
 export type SingletonCapabilityName = typeof SINGLETON_CAPABILITY_NAMES[number];
 /** Capability names whose mode is `collection` (32 caps). */

package/dist/generated/method-access-map.d.ts

@@ -6,7 +6,7 @@
  * scope+access check inside `protectedProcedure` (see
  * `server/backend/src/api/trpc/trpc.middleware.ts`).
  *
- * Coverage: 1213 method paths across 165 capabilities.
+ * Coverage: 1253 method paths across 167 capabilities.
  */
 import type { CapabilityMethodAccess } from '../capabilities/capability-definition.js';
 export interface MethodAccessRecord {

package/dist/generated/method-device-selectors.d.ts

@@ -6,7 +6,7 @@
  * system-scope cap that takes a deviceId was previously never device-filtered
  * — see the generator header).
  *
- * Coverage: 511 methods carry a device reference, of which
+ * Coverage: 514 methods carry a device reference, of which
  * 161 are on SYSTEM-scope caps.
  *
  * Top-level fields, number arrays, and one-level arrays of objects carrying

package/dist/generated/system-proxy.d.ts

@@ -20,6 +20,7 @@ import type { deviceProviderCapability } from '../capabilities/device-provider.c
 import type { deviceStateCapability } from '../capabilities/device-state.cap.js';
 import type { faceGalleryCapability } from '../capabilities/face-gallery.cap.js';
 import type { integrationsCapability } from '../capabilities/integrations.cap.js';
+import type { keychainAdminCapability } from '../capabilities/keychain-admin.cap.js';
 import type { llmCapability } from '../capabilities/llm.cap.js';
 import type { localNetworkCapability } from '../capabilities/local-network.cap.js';
 import type { meshNetworkCapability } from '../capabilities/mesh-network.cap.js';
@@ -76,6 +77,7 @@ export interface SystemProxy {
     readonly deviceState: Pick<InferProvider<typeof deviceStateCapability>, 'getAllSnapshots' | 'listClaims'>;
     readonly faceGallery: Pick<InferProvider<typeof faceGalleryCapability>, 'listIdentities' | 'createIdentity' | 'renameIdentity' | 'deleteIdentity' | 'listIdentitySamples' | 'auditIdentitySamples' | 'removeSample' | 'getFaceMedia' | 'assignFace' | 'unassignFace' | 'deleteFace' | 'assignFaces' | 'unassignFaces' | 'suggestFaceClusters'>;
     readonly integrations: Pick<InferProvider<typeof integrationsCapability>, 'list' | 'get' | 'getByAddonId' | 'create' | 'update' | 'delete' | 'getSettings' | 'setSettings' | 'getAvailableTypes' | 'testConnection'>;
+    readonly keychainAdmin: Pick<InferProvider<typeof keychainAdminCapability>, 'status' | 'listSecrets' | 'listAudit' | 'reveal' | 'deleteOrphans' | 'rotateMasterKey' | 'purgeRetiredKeys' | 'downloadRecoveryKey' | 'resetKeychain'>;
     readonly llm: Pick<InferProvider<typeof llmCapability>, 'generate' | 'generateVision' | 'cancel' | 'listProfileKinds' | 'listProfiles' | 'upsertProfile' | 'deleteProfile' | 'testProfile' | 'listModels' | 'getDefaults' | 'setDefault' | 'getUsage' | 'listModelCatalog' | 'listRuntimeNodes' | 'listNodeModels' | 'resolveModelRef' | 'installModel' | 'deleteModel' | 'getRuntimeStatus' | 'startRuntime' | 'stopRuntime'>;
     readonly localNetwork: Pick<InferProvider<typeof localNetworkCapability>, 'list' | 'getPreferred' | 'getConnectionEndpoints' | 'getNotificationEndpoint' | 'setNotificationEndpoint' | 'getViewerEndpoints' | 'setViewerEndpoints' | 'getAddresses' | 'addCustomAddress' | 'removeCustomAddress' | 'setAddressRole' | 'getHubAddresses' | 'getAllowedAddresses' | 'setAllowedAddresses' | 'resetAllowlistToBestMatch' | 'getTlsStatus' | 'regenerateCertificate' | 'uploadCertificate' | 'downloadCa' | 'revertToGeneratedCertificate'>;
     readonly meshNetwork: Pick<InferProvider<typeof meshNetworkCapability>, 'getStatus' | 'join' | 'startLogin' | 'leave' | 'logout' | 'listPeers' | 'testConnection'>;
@@ -88,8 +90,8 @@ export interface SystemProxy {
     readonly notificationRules: Pick<InferProvider<typeof notificationRulesCapability>, 'listRules' | 'getRule' | 'createRule' | 'updateRule' | 'deleteRule' | 'setRuleEnabled' | 'listSequences' | 'getSequence' | 'createSequence' | 'updateSequence' | 'deleteSequence' | 'getClipRetentionAsks' | 'listDeviceMutes' | 'testRule' | 'previewStateSummary' | 'getConditionCatalog' | 'getTemplateCatalog' | 'previewTemplate' | 'getHistory' | 'getRuleLastRuns' | 'resolveArtifactUrl' | 'listSnoozes' | 'createSnooze' | 'cancelSnooze' | 'getAlarmConfig' | 'setAlarmConfig' | 'createAlarmProfile' | 'renameAlarmProfile' | 'deleteAlarmProfile' | 'activateAlarmProfile' | 'getAlarmSensors'>;
     readonly osdManager: Pick<InferProvider<typeof osdManagerCapability>, 'getConditionSupport' | 'copyDeviceConfiguration' | 'listTemplates' | 'upsertTemplate' | 'deleteTemplate'>;
     readonly pipelineExecutor: Pick<InferProvider<typeof pipelineExecutorCapability>, 'getAvailableEngines' | 'getSelectedEngine' | 'getDefaultSteps' | 'getEngineProvisioning' | 'getVideoPipelineSteps' | 'setVideoPipelineSteps' | 'clearDeviceOverrides' | 'clearModelBoundDeviceOverrides' | 'getInferenceDeviceHealth' | 'rearmInferenceDevice' | 'getSchema' | 'getGlobalSteps' | 'getGlobalPipelineConfig' | 'getOrchestratorConfigSchema' | 'validatePipeline' | 'getCapabilities' | 'getAddonModels' | 'downloadModel' | 'deleteModel' | 'cacheFrameInPool' | 'inferCached' | 'uncacheFrame' | 'getEffectiveTuning' | 'listLoadedEngines' | 'spinEngine' | 'killEngine' | 'listReferenceImages' | 'getReferenceImage' | 'getReferenceAudioFiles' | 'getReferenceAudio' | 'getAudioCapabilities' | 'runAudioTest' | 'getDetectionConfigSchema'>;
-    readonly pipelineOrchestrator: Pick<InferProvider<typeof pipelineOrchestratorCapability>, 'requestOccupancyLook' | 'pauseForStorageMigration' | 'resumeForStorageMigration' | 'rebalance' | 'getPipelineAssignments' | 'getAgentLoad' | 'getClusterModelChoice' | 'getGlobalMetrics' | 'getCapabilityBindings' | 'setCapabilityBinding' | 'getIngestOwner' | 'getAudioNodeLoad' | 'getAudioAssignments' | 'getAgentSettings' | 'listAgentSettings' | 'removeAgentSettings' | 'setAgentMaxCameras' | 'setAgentCapabilities' | 'setAgentDecodeLimits' | 'setAgentReachableHost' | 'setAgentInferenceDevices' | 'getNodeInferenceDevices' | 'resetNodePipelineDefaults' | 'planAutoTune' | 'applyAutoTune' | 'setLoadBalancingShares' | 'getPlacementStats' | 'suggestShares' | 'getEffectiveShares' | 'setShareSource' | 'getCameraStatuses' | 'setCameraSensors' | 'reconcileFromDisk' | 'getReconcileFromDiskStatus'>;
-    readonly pipelineRunner: Pick<InferProvider<typeof pipelineRunnerCapability>, 'attachCamera' | 'reportMotion' | 'getLocalLoad' | 'getLocalMetrics' | 'getAllCameraMetrics' | 'getLocalCameras' | 'getNativeCrop' | 'runStatelessStep'>;
+    readonly pipelineOrchestrator: Pick<InferProvider<typeof pipelineOrchestratorCapability>, 'requestOccupancyLook' | 'pauseForStorageMigration' | 'resumeForStorageMigration' | 'rebalance' | 'getPipelineAssignments' | 'getAgentLoad' | 'getClusterModelChoice' | 'getGlobalMetrics' | 'getCapabilityBindings' | 'setCapabilityBinding' | 'getIngestOwner' | 'getAudioNodeLoad' | 'getAudioAssignments' | 'getAgentSettings' | 'listAgentSettings' | 'removeAgentSettings' | 'setAgentMaxCameras' | 'setAgentCapabilities' | 'setAgentDecodeLimits' | 'setAgentReachableHost' | 'setAgentInferenceDevices' | 'getNodeInferenceDevices' | 'resetNodePipelineDefaults' | 'planAutoTune' | 'applyAutoTune' | 'setLoadBalancingShares' | 'getPlacementStats' | 'suggestShares' | 'getEffectiveShares' | 'setShareSource' | 'getNodeBenchmarkPreflight' | 'startNodeBenchmark' | 'getNodeBenchmarkStatus' | 'abortNodeBenchmark' | 'getNodeBenchmarkCandidates' | 'listNodeBenchmarkResults' | 'deleteNodeBenchmarkResult' | 'getCameraStatuses' | 'setCameraSensors' | 'reconcileFromDisk' | 'getReconcileFromDiskStatus'>;
+    readonly pipelineRunner: Pick<InferProvider<typeof pipelineRunnerCapability>, 'attachCamera' | 'reportMotion' | 'getLocalLoad' | 'getLocalMetrics' | 'getAllCameraMetrics' | 'getLocalCameras' | 'getNativeCrop' | 'runStatelessStep' | 'startNodeBench' | 'getNodeBenchStatus' | 'abortNodeBench'>;
     readonly plateGallery: Pick<InferProvider<typeof plateGalleryCapability>, 'getPlateMedia' | 'searchPlates' | 'suggestPlateClusters' | 'correctPlateText' | 'deletePlate' | 'listVehicles' | 'createVehicle' | 'renameVehicle' | 'deleteVehicle' | 'listVehicleSamples' | 'removeVehicleSample' | 'assignPlate' | 'unassignPlate' | 'assignPlates' | 'unassignPlates'>;
     readonly recordingArchive: Pick<InferProvider<typeof recordingArchiveCapability>, 'getAvailabilityBatch' | 'getDaysWithRecordingsBatch' | 'getStorageUsage' | 'listOpsLog' | 'pauseForStorageMigration' | 'resumeForStorageMigration' | 'refreshStorageLocationsForMigration' | 'startStorageMigrationMove' | 'getStorageMigrationMoveStatus' | 'cancelStorageMigrationMove' | 'relocateFootage' | 'listRelocateJobs' | 'getRelocateResidue' | 'reconcileLedgerAgainstDisk' | 'cancelRelocateJob' | 'planStorageRebalance' | 'startStorageRebalance' | 'getPlacement' | 'setDevicePlacement'>;
     readonly recordingExport: Pick<InferProvider<typeof recordingExportCapability>, 'createExport' | 'getExport' | 'cancelExport' | 'deleteExport' | 'getDownloadUrl' | 'readExportBytes'>;
@@ -102,7 +104,7 @@ export interface SystemProxy {
     readonly terminalSession: Pick<InferProvider<typeof terminalSessionCapability>, 'listProfiles' | 'listInstances' | 'createInstance' | 'updateInstance' | 'deleteInstance' | 'setInstanceEnabled' | 'listLegacyCameras' | 'adoptLegacyMonitor' | 'listSessions' | 'openSession' | 'resize' | 'pullOutput' | 'writeInput' | 'close'>;
     readonly toast: Pick<InferProvider<typeof toastCapability>, 'onToast'>;
     readonly turnProvider: Pick<InferProvider<typeof turnProviderCapability>, 'getTurnServers'>;
-    readonly userManagement: Pick<InferProvider<typeof userManagementCapability>, 'listUsers' | 'createUser' | 'updateUser' | 'deleteUser' | 'resetPassword' | 'setUserScopes' | 'validateCredentials' | 'listApiKeys' | 'createApiKey' | 'revokeApiKey' | 'validateApiKey' | 'createScopedToken' | 'revokeScopedToken' | 'validateScopedToken' | 'listScopedTokens' | 'setupTotp' | 'confirmTotp' | 'disableTotp' | 'getTotpStatus' | 'verifyTotp' | 'oauthIssueCode' | 'oauthExchangeCode' | 'oauthRefresh' | 'oauthVerifyAccessToken' | 'listOauthSessions' | 'revokeOauthSession'>;
+    readonly userManagement: Pick<InferProvider<typeof userManagementCapability>, 'listUsers' | 'createUser' | 'updateUser' | 'deleteUser' | 'resetPassword' | 'setUserScopes' | 'validateCredentials' | 'listApiKeys' | 'createApiKey' | 'revokeApiKey' | 'validateApiKey' | 'createScopedToken' | 'revokeScopedToken' | 'validateScopedToken' | 'listScopedTokens' | 'setupTotp' | 'confirmTotp' | 'disableTotp' | 'getTotpStatus' | 'verifyTotp' | 'oauthIssueCode' | 'oauthExchangeCode' | 'oauthRefresh' | 'oauthVerifyAccessToken' | 'listExternalIdentities' | 'findUserByExternalIdentity' | 'linkExternalIdentity' | 'unlinkExternalIdentity' | 'listOauthSessions' | 'revokeOauthSession'>;
 }
 /**
  * Build a `SystemProxy` that dispatches every namespace method through

package/dist/health/wiring-health.d.ts

@@ -11,18 +11,18 @@
 import { z } from 'zod';
 /** What kind of target a probe addressed. */
 export declare const wiringProbeKindSchema: z.ZodEnum<{
+    widget: "widget";
     device: "device";
     singleton: "singleton";
-    widget: "widget";
 }>;
 export type WiringProbeKind = z.infer<typeof wiringProbeKindSchema>;
 /** Result of probing a single (cap|widget [, device]) target. */
 export declare const wiringProbeResultSchema: z.ZodObject<{
     capName: z.ZodString;
     kind: z.ZodEnum<{
+        widget: "widget";
         device: "device";
         singleton: "singleton";
-        widget: "widget";
     }>;
     deviceId: z.ZodOptional<z.ZodNumber>;
     reachable: z.ZodBoolean;
@@ -36,9 +36,9 @@ export declare const wiringAddonHealthSchema: z.ZodObject<{
     caps: z.ZodReadonly<z.ZodArray<z.ZodObject<{
         capName: z.ZodString;
         kind: z.ZodEnum<{
+            widget: "widget";
             device: "device";
             singleton: "singleton";
-            widget: "widget";
         }>;
         deviceId: z.ZodOptional<z.ZodNumber>;
         reachable: z.ZodBoolean;
@@ -48,9 +48,9 @@ export declare const wiringAddonHealthSchema: z.ZodObject<{
     widgets: z.ZodReadonly<z.ZodArray<z.ZodObject<{
         capName: z.ZodString;
         kind: z.ZodEnum<{
+            widget: "widget";
             device: "device";
             singleton: "singleton";
-            widget: "widget";
         }>;
         deviceId: z.ZodOptional<z.ZodNumber>;
         reachable: z.ZodBoolean;
@@ -67,9 +67,9 @@ export declare const wiringNodeHealthSchema: z.ZodObject<{
         caps: z.ZodReadonly<z.ZodArray<z.ZodObject<{
             capName: z.ZodString;
             kind: z.ZodEnum<{
+                widget: "widget";
                 device: "device";
                 singleton: "singleton";
-                widget: "widget";
             }>;
             deviceId: z.ZodOptional<z.ZodNumber>;
             reachable: z.ZodBoolean;
@@ -79,9 +79,9 @@ export declare const wiringNodeHealthSchema: z.ZodObject<{
         widgets: z.ZodReadonly<z.ZodArray<z.ZodObject<{
             capName: z.ZodString;
             kind: z.ZodEnum<{
+                widget: "widget";
                 device: "device";
                 singleton: "singleton";
-                widget: "widget";
             }>;
             deviceId: z.ZodOptional<z.ZodNumber>;
             reachable: z.ZodBoolean;
@@ -103,9 +103,9 @@ export declare const wiringHealthSnapshotSchema: z.ZodObject<{
             caps: z.ZodReadonly<z.ZodArray<z.ZodObject<{
                 capName: z.ZodString;
                 kind: z.ZodEnum<{
+                    widget: "widget";
                     device: "device";
                     singleton: "singleton";
-                    widget: "widget";
                 }>;
                 deviceId: z.ZodOptional<z.ZodNumber>;
                 reachable: z.ZodBoolean;
@@ -115,9 +115,9 @@ export declare const wiringHealthSnapshotSchema: z.ZodObject<{
             widgets: z.ZodReadonly<z.ZodArray<z.ZodObject<{
                 capName: z.ZodString;
                 kind: z.ZodEnum<{
+                    widget: "widget";
                     device: "device";
                     singleton: "singleton";
-                    widget: "widget";
                 }>;
                 deviceId: z.ZodOptional<z.ZodNumber>;
                 reachable: z.ZodBoolean;