@camstack/types 1.2.327 → 1.2.328

package/dist/capabilities/day-night.cap.d.ts

@@ -18,9 +18,9 @@ import { DeviceType } from '../device/device-type.js';
  */
 /** IR-cut switching mode. `schedule` = time-of-day table configured on the camera. */
 export declare const DayNightModeSchema: z.ZodEnum<{
+    schedule: "schedule";
     auto: "auto";
     night: "night";
-    schedule: "schedule";
     day: "day";
 }>;
 /**
@@ -30,9 +30,9 @@ export declare const DayNightModeSchema: z.ZodEnum<{
  */
 export declare const DayNightStatusSchema: z.ZodObject<{
     mode: z.ZodEnum<{
+        schedule: "schedule";
         auto: "auto";
         night: "night";
-        schedule: "schedule";
         day: "day";
     }>;
     sensitivity: z.ZodOptional<z.ZodNumber>;
@@ -47,9 +47,9 @@ export declare const DayNightStatusSchema: z.ZodObject<{
  */
 export declare const DayNightOptionsSchema: z.ZodObject<{
     modes: z.ZodArray<z.ZodEnum<{
+        schedule: "schedule";
         auto: "auto";
         night: "night";
-        schedule: "schedule";
         day: "day";
     }>>;
     supportsSensitivity: z.ZodBoolean;
@@ -71,9 +71,9 @@ export declare const DayNightOptionsSchema: z.ZodObject<{
  */
 export declare const DayNightSettingsPatchSchema: z.ZodObject<{
     mode: z.ZodOptional<z.ZodEnum<{
+        schedule: "schedule";
         auto: "auto";
         night: "night";
-        schedule: "schedule";
         day: "day";
     }>>;
     sensitivity: z.ZodOptional<z.ZodNumber>;
@@ -101,9 +101,9 @@ export declare const dayNightCapability: {
             deviceId: z.ZodNumber;
         }, z.core.$strip>, z.ZodObject<{
             modes: z.ZodArray<z.ZodEnum<{
+                schedule: "schedule";
                 auto: "auto";
                 night: "night";
-                schedule: "schedule";
                 day: "day";
             }>>;
             supportsSensitivity: z.ZodBoolean;
@@ -123,9 +123,9 @@ export declare const dayNightCapability: {
             deviceId: z.ZodNumber;
             settings: z.ZodObject<{
                 mode: z.ZodOptional<z.ZodEnum<{
+                    schedule: "schedule";
                     auto: "auto";
                     night: "night";
-                    schedule: "schedule";
                     day: "day";
                 }>>;
                 sensitivity: z.ZodOptional<z.ZodNumber>;
@@ -136,9 +136,9 @@ export declare const dayNightCapability: {
     readonly status: {
         readonly schema: z.ZodObject<{
             mode: z.ZodEnum<{
+                schedule: "schedule";
                 auto: "auto";
                 night: "night";
-                schedule: "schedule";
                 day: "day";
             }>;
             sensitivity: z.ZodOptional<z.ZodNumber>;
@@ -149,9 +149,9 @@ export declare const dayNightCapability: {
     };
     readonly runtimeState: z.ZodObject<{
         mode: z.ZodEnum<{
+            schedule: "schedule";
             auto: "auto";
             night: "night";
-            schedule: "schedule";
             day: "day";
         }>;
         sensitivity: z.ZodOptional<z.ZodNumber>;

package/dist/capabilities/device-manager.cap.d.ts

@@ -301,6 +301,7 @@ export declare const DeviceRemovePayloadSchema: z.ZodObject<{
 export declare const DevicePersistConfigPayloadSchema: z.ZodObject<{
     deviceId: z.ZodNumber;
     data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    secretConfigPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;
 /** What a migration actually did, per switch. `unreachable` is a first-class
  *  answer: a camera that could not be asked is not a camera that was silenced. */
@@ -492,6 +493,7 @@ export declare const deviceManagerCapability: {
         readonly persistConfig: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
             deviceId: z.ZodNumber;
             data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            secretConfigPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>, z.ZodVoid, "mutation">;
         /** Load persisted config for a device. Called at restore time. */
         readonly loadConfig: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{

package/dist/capabilities/enum-sensor.cap.d.ts

@@ -12,16 +12,16 @@ import { DeviceType } from '../device/device-type.js';
 /** Locale-render shape for an ISO `value` carried by a `DateTimeSensor`-role
  *  enum sensor: `date` (date-only), `time` (time-only), `datetime` (both). */
 export declare const EnumSensorDateTimeFormatSchema: z.ZodEnum<{
-    date: "date";
     datetime: "datetime";
+    date: "date";
     time: "time";
 }>;
 export type EnumSensorDateTimeFormat = z.infer<typeof EnumSensorDateTimeFormatSchema>;
 export declare const EnumSensorStatusSchema: z.ZodObject<{
     value: z.ZodString;
     format: z.ZodOptional<z.ZodEnum<{
-        date: "date";
         datetime: "datetime";
+        date: "date";
         time: "time";
     }>>;
     lastFetchedAt: z.ZodNumber;
@@ -38,8 +38,8 @@ export declare const enumSensorCapability: {
         readonly schema: z.ZodObject<{
             value: z.ZodString;
             format: z.ZodOptional<z.ZodEnum<{
-                date: "date";
                 datetime: "datetime";
+                date: "date";
                 time: "time";
             }>>;
             lastFetchedAt: z.ZodNumber;
@@ -49,8 +49,8 @@ export declare const enumSensorCapability: {
     readonly runtimeState: z.ZodObject<{
         value: z.ZodString;
         format: z.ZodOptional<z.ZodEnum<{
-            date: "date";
             datetime: "datetime";
+            date: "date";
             time: "time";
         }>>;
         lastFetchedAt: z.ZodNumber;

package/dist/capabilities/index.d.ts

@@ -45,6 +45,8 @@ export type { CustomModelDescriptor, ICustomModelRegistryProvider, } from './cus
 export { CustomModelDescriptorSchema, customModelRegistryCapability, } from './custom-model-registry.cap.js';
 export { type DataStoreEngineInfo, dataStoreProviderCapability, EngineInfoSchema as DataStoreEngineInfoSchema, type IDataStoreProvider, } from './data-store-provider.cap.js';
 export { type ArchiveSqliteSnapshot, ArchiveSqliteSnapshotSchema, DATABASE_SNAPSHOT_PARTIAL_SUFFIX, DATABASE_SNAPSHOT_SUFFIX, DATABASE_SNAPSHOT_TIMEOUT_MS, type DatabaseSnapshotResult, DatabaseSnapshotResultSchema, type DatabaseSnapshotTable, DatabaseSnapshotTableSchema, type DatabaseSnapshotTargets, DatabaseSnapshotTargetsSchema, databaseSnapshotCapability, type IDatabaseSnapshotProvider, } from './database-snapshot.cap.js';
+export { type IKeychainProvider, KEYCHAIN_MAX_REFS_PER_CALL, type KeychainResolveEntry, KeychainResolveEntrySchema, type KeychainResolveResult, KeychainResolveResultSchema, type KeychainSecretMeta, KeychainSecretMetaSchema, type KeychainState, KeychainStateSchema, type KeychainUnavailableReason, KeychainUnavailableReasonSchema, keychainCapability, } from './keychain.cap.js';
+export { type IKeychainAdminProvider, KEYCHAIN_RESET_CONFIRMATION, type KeychainAdminSecret, KeychainAdminSecretSchema, type KeychainAuditAction, KeychainAuditActionSchema, type KeychainAuditEntry, KeychainAuditEntrySchema, type KeychainKeySource, type KeychainKeySourceKind, KeychainKeySourceKindSchema, KeychainKeySourceSchema, type KeychainSecretUsage, KeychainSecretUsageSchema, type KeychainStatus, KeychainStatusSchema, keychainAdminCapability, } from './keychain-admin.cap.js';
 export type { DecoderHwAccelConfig, HwAccelChoice, IDecoderCapProvider, } from './decoder.cap.js';
 export { DEFAULT_DECODER_HWACCEL_CONFIG, decoderCapability, HWACCEL_OPTIONS, } from './decoder.cap.js';
 export { detectionPipelineCapability, type IDetectionPipelineProvider, } from './detection-pipeline.cap.js';
@@ -89,7 +91,7 @@ export { NetworkAccessStatusSchema, NetworkEndpointSchema, networkAccessCapabili
 export { type Attachment, type AttachmentMediaType, AttachmentMediaTypeSchema, AttachmentSchema, type DiscoveredTarget, DiscoveredTargetSchema, type INotificationOutputProvider, type NotificationAction, type NotificationActionIcon, NotificationActionIconSchema, NotificationActionSchema, type NotificationFormat, NotificationFormatSchema, NotificationSchema, notificationOutputCapability, type ProbeTargetConfigResult, ProbeTargetConfigResultSchema, type RenderedAs, RenderedAsSchema, type SendResult, SendResultSchema, type Target, type TargetKind, type TargetKindCaps, TargetKindCapsSchema, type TargetKindLevel, TargetKindLevelSchema, TargetKindSchema, TargetSchema, type TestResult, TestResultSchema, } from './notification-output.cap.js';
 export { consumableLowPercentOf, type INotificationRulesProvider, isRetiredClearKey, NC_ALARM_DELAY_MAX_SEC, NC_ALARM_NONBLOCKING_MAX, NC_ALARM_SENSORS_MAX, NC_ALARM_SYSTEM_EVENT_KINDS, NC_ALARM_TRIGGERED_MAX_SEC, NC_AUDIO_DBFS_FLOOR, NC_AUTHORABLE_SYSTEM_EVENT_KINDS, NC_BATTERY_CONSUMABLE_SYSTEM_EVENT_KINDS, NC_CLIP_POST_ROLL_DEFAULT_SEC, NC_CLIP_PRE_ROLL_DEFAULT_SEC, NC_CLIP_RETENTION_MAX_SEC, NC_CONDITION_CATALOG, NC_CONFIRM_DEFAULT_MAX_IMAGE_PX, NC_CONFIRM_DEFAULT_TIMEOUT_MS, NC_CONFIRM_MAX_TIMEOUT_MS, NC_CONFIRM_MIN_TIMEOUT_MS, NC_CONSUMABLE_LOW_PERCENT_DEFAULT, NC_CONSUMABLE_LOW_PERCENT_MAX, NC_CONSUMABLE_SYSTEM_EVENT_KINDS, NC_DEFAULT_SNOOZE_MINUTES, NC_GROUPING_DEFAULT_SEC, NC_GROUPING_MAX_SEC, NC_GROUPING_MIN_SEC, NC_HISTORY_LIMIT_DEFAULT, NC_HISTORY_LIMIT_MAX, NC_MAX_PER_TRACK_IMMEDIATE, NC_RULE_CLEARABLE_KEYS, NC_RULE_RETIRED_CLEAR_KEYS, NC_SNOOZE_MAX_MINUTES, NC_TANK_SYSTEM_EVENT_KINDS, type NcActionBinding, NcActionBindingSchema, type NcAlarmBlocking, type NcAlarmBlockingEdit, NcAlarmBlockingEditSchema, NcAlarmBlockingSchema, type NcAlarmConfig, NcAlarmConfigSchema, type NcAlarmCreateProfileInput, NcAlarmCreateProfileInputSchema, type NcAlarmModeCoverage, NcAlarmModeCoverageSchema, type NcAlarmModeDelays, type NcAlarmModeDelaysEdit, NcAlarmModeDelaysEditSchema, NcAlarmModeDelaysSchema, type NcAlarmModeDeviceList, NcAlarmModeDeviceListSchema, type NcAlarmNonBlocking, type NcAlarmNonBlockingEdit, NcAlarmNonBlockingEditSchema, NcAlarmNonBlockingSchema, type NcAlarmPostTriggeredAction, NcAlarmPostTriggeredActionSchema, type NcAlarmProfileIdInput, NcAlarmProfileIdInputSchema, type NcAlarmProfileMeta, NcAlarmProfileMetaSchema, type NcAlarmProfilesView, NcAlarmProfilesViewSchema, type NcAlarmRenameProfileInput, NcAlarmRenameProfileInputSchema, type NcAlarmSecureOnArmEdit, NcAlarmSecureOnArmEditSchema, type NcAlarmSecureOnArmOff, NcAlarmSecureOnArmOffSchema, type NcAlarmSensorReading, NcAlarmSensorReadingSchema, type NcAlarmSensorState, NcAlarmSensorStateSchema, type NcAlarmSensors, type NcAlarmSensorsInput, NcAlarmSensorsInputSchema, NcAlarmSensorsSchema, type NcAlarmSettings, type NcAlarmSettingsPatch, NcAlarmSettingsPatchSchema, NcAlarmSettingsSchema, type NcAlarmSkippedDevice, NcAlarmSkippedDeviceSchema, type NcAlarmSkipReason, NcAlarmSkipReasonSchema, type NcAudioCondition, NcAudioConditionSchema, type NcClipRetentionAsk, NcClipRetentionAskSchema, type NcClipRetentionPlan, NcClipRetentionPlanSchema, type NcConditionDescriptor, NcConditionDescriptorSchema, type NcConditions, NcConditionsSchema, type NcConfirm, type NcConfirmExpect, NcConfirmExpectSchema, NcConfirmSchema, type NcCrossing, NcCrossingSchema, type NcDelivery, NcDeliverySchema, type NcDeviceStateCondition, NcDeviceStateConditionSchema, type NcHistoryEntry, NcHistoryEntrySchema, type NcHistoryFilter, NcHistoryFilterSchema, type NcHistoryRecordKind, NcHistoryRecordKindSchema, type NcHistoryStatus, NcHistoryStatusSchema, type NcHistorySubject, NcHistorySubjectSchema, type NcHookBindings, NcHookBindingsSchema, type NcLegacyRuleActionSequence, NcLegacyRuleActionSequenceSchema, type NcLinkedCameraMode, NcLinkedCameraModeSchema, type NcMediaFrame, NcMediaFrameSchema, type NcMediaPolicy, NcMediaPolicySchema, type NcOccupancyCondition, NcOccupancyConditionSchema, type NcPlateMatcher, NcPlateMatcherSchema, type NcRule, type NcRuleAction, NcRuleActionSchema, type NcRuleActionSequence, NcRuleActionSequenceSchema, type NcRuleActions, NcRuleActionsSchema, type NcRuleClearableKey, NcRuleClearableKeySchema, type NcRuleInput, NcRuleInputSchema, NcRuleKindSchema, type NcRuleLastRun, NcRuleLastRunSchema, type NcRuleLastRuns, NcRuleLastRunsSchema, type NcRuleNotificationButton, NcRuleNotificationButtonSchema, type NcRulePatch, NcRulePatchSchema, NcRuleSchema, type NcRuleTarget, NcRuleTargetSchema, type NcRuleUpdateInput, NcRuleUpdateInputSchema, type NcSceneCondition, NcSceneConditionSchema, type NcSchedule, NcScheduleSchema, type NcScheduleWindow, NcScheduleWindowSchema, type NcSensorTransition, NcSensorTransitionSchema, type NcSharedSequence, type NcSharedSequenceInput, NcSharedSequenceInputSchema, NcSharedSequenceSchema, type NcSnooze, type NcSnoozeInput, NcSnoozeInputSchema, NcSnoozeSchema, type NcSnoozeScope, NcSnoozeScopeSchema, type NcSnoozeSuppressed, NcSnoozeSuppressedSchema, type NcStateSummaryPreview, type NcStateSummaryPreviewRow, NcStateSummaryPreviewRowSchema, NcStateSummaryPreviewSchema, type NcStateSummaryPreviewSection, NcStateSummaryPreviewSectionSchema, type NcStateSummarySectionId, NcStateSummarySectionIdSchema, type NcStateSummarySplit, NcStateSummarySplitSchema, type NcSystemEventCondition, NcSystemEventConditionSchema, type NcSystemEventDelivery, type NcSystemEventDeliveryMode, NcSystemEventDeliveryModeSchema, NcSystemEventDeliverySchema, type NcSystemEventKind, NcSystemEventKindSchema, type NcTemplateFamily, NcTemplateFamilySchema, type NcTemplateField, NcTemplateFieldSchema, type NcTemplatePreview, type NcTemplatePreviewInput, NcTemplatePreviewInputSchema, NcTemplatePreviewSchema, type NcTemplateVarContext, NcTemplateVarContextSchema, type NcTemplateVarDescriptor, NcTemplateVarDescriptorSchema, type NcTemplateVarGroup, NcTemplateVarGroupSchema, type NcTemplateVarKind, NcTemplateVarKindSchema, type NcTestResult, NcTestResultSchema, type NcThrottle, type NcThrottleGranularity, NcThrottleGranularitySchema, NcThrottleSchema, type NcZoneCondition, NcZoneConditionSchema, notificationRulesCapability, } from './notification-rules.cap.js';
 export { type IOauthIntegrationProvider, type OauthIntegrationDescriptor, OauthIntegrationDescriptorSchema, oauthIntegrationCapability, } from './oauth-integration.cap.js';
-export { AnalyticsLtsSeriesSchema, type AudioEvent, type AudioEventDraft, AudioEventSchema, type DetectionSource, DetectionSourceSchema, EVENT_DENSITY_BATCH_MAX, type EventDensityBucket, EventDensityBucketSchema, type EventDensityForDevice, EventDensityForDeviceSchema, type EventKind, type EventKindCategory, EventKindCategorySchema, type EventKindDescriptor, EventKindDescriptorSchema, type EventKindIcon, EventKindIconSchema, EventKindSchema, type EventKindsForDevice, EventKindsForDeviceSchema, type EventMediaKindBreakdown, type EventMediaKindFootprint, type EventPruneCounts, type EventStoreDeviceFootprint, type EventStoreFootprint, type IPipelineAnalyticsProvider, type KeyEvent, KeyEventSchema, type KeyEventsForDevice, type LabelAttribution, LabelAttributionSchema, type LabelTier, LabelTierSchema, LTS_SCOPE_CLASS_SEPARATOR, type LtsBucket, LtsBucketSchema, MAX_TRACK_DEBUG_NOTE_LEN, type MediaFile, type MediaFileBytes, type MediaFileInfo, MediaFileInfoSchema, type MediaFileKind, MediaFileKindEnum, type MediaFileRef, MediaFileRefSchema, MediaFileSchema, type MotionEvent, type MotionEventDraft, MotionEventSchema, type ObjectEvent, type ObjectEventDraft, ObjectEventSchema, occupancyScope, parseOccupancyScope, pipelineAnalyticsCapability, type RebuildObjectEmbeddingsRefusal, RebuildObjectEmbeddingsRefusalSchema, type RecentTracksPage, RecentTracksPageSchema, type RecentTracksQuery, RecentTracksQueryInput, type RetrainAnnotation, type RetrainAnnotationDraft, RetrainAnnotationDraftSchema, RetrainAnnotationKindSchema, RetrainAnnotationSchema, RetrainAnnotationSourceSchema, type RetrainArchiveResult, RetrainArchiveResultSchema, type RetrainArchiveTarget, RetrainArchiveTargetSchema, type RetrainAssistResult, RetrainAssistResultSchema, RetrainAssistSubjectSchema, RetrainCopyRefusalSchema, type RetrainExportFilter, RetrainExportFilterSchema, type RetrainExportLayout, RetrainExportLayoutSchema, type RetrainFrame, type RetrainFrameCandidate, RetrainFrameCandidateSchema, type RetrainFrameList, RetrainFrameListSchema, RetrainFrameSchema, type RetrainFrameSelection, RetrainFrameSelectionSchema, type RetrainMacroClass, RetrainMacroClassSchema, type RetrainStatus, RetrainStatusSchema, type RetrainTrack, RetrainTrackSchema, type RetrainTransitionResult, RetrainTransitionResultSchema, type ScoredObjectEvent, ScoredObjectEventSchema, type SensorEvent, SensorEventSchema, type Track, type TrackCascadeCounts, TrackCascadeCountsSchema, type TrackEnvelope, TrackEnvelopeSchema, TrackedDetectionSchema, type TrackFlags, type TrackFlagsPatch, TrackFlagsPatchSchema, TrackFlagsSchema, type TrackProjection, TrackProjectionSchema, TrackSchema, type TrackSource, TrackSourceSchema, type TrackState, TrackStateSchema, type TrackZoneFilter, TrackZoneFilterSchema, type TrainingExportDeviceTotals, TrainingExportDeviceTotalsSchema, type TrainingExportSummary, TrainingExportSummarySchema, type ZoneCrossing, type ZoneCrossingDirection, ZoneCrossingDirectionSchema, ZoneCrossingSchema, } from './pipeline-analytics.cap.js';
+export { AnalyticsLtsSeriesSchema, type AudioEvent, type AudioEventDraft, AudioEventSchema, type DetectionSource, DetectionSourceSchema, EVENT_DENSITY_BATCH_MAX, type EventDensityBucket, EventDensityBucketSchema, type EventDensityForDevice, EventDensityForDeviceSchema, type EventKind, type EventKindCategory, EventKindCategorySchema, type EventKindDescriptor, EventKindDescriptorSchema, type EventKindIcon, EventKindIconSchema, EventKindSchema, type EventKindsForDevice, EventKindsForDeviceSchema, type EventMediaKindBreakdown, type EventMediaKindFootprint, type EventPruneCounts, type EventStoreDeviceFootprint, type EventStoreFootprint, type IPipelineAnalyticsProvider, type KeyEvent, KeyEventSchema, type KeyEventsForDevice, type LabelAttribution, LabelAttributionSchema, type LabelTier, LabelTierSchema, LTS_SCOPE_CLASS_SEPARATOR, type LtsBucket, LtsBucketSchema, MAX_TRACK_DEBUG_NOTE_LEN, type MediaFile, type MediaFileBytes, type MediaFileInfo, MediaFileInfoSchema, type MediaFileKind, MediaFileKindEnum, type MediaFileRef, MediaFileRefSchema, MediaFileSchema, type MotionEvent, type MotionEventDraft, MotionEventSchema, type ObjectEvent, type ObjectEventDraft, ObjectEventSchema, occupancyScope, parseOccupancyScope, pipelineAnalyticsCapability, type RebuildObjectEmbeddingsRefusal, RebuildObjectEmbeddingsRefusalSchema, type RecentTracksPage, RecentTracksPageSchema, type RecentTracksQuery, RecentTracksQueryInput, type RetrainAnnotation, type RetrainAnnotationDraft, RetrainAnnotationDraftSchema, RetrainAnnotationKindSchema, RetrainAnnotationSchema, type RetrainAnnotationSource, RetrainAnnotationSourceSchema, type RetrainArchiveResult, RetrainArchiveResultSchema, type RetrainArchiveTarget, RetrainArchiveTargetSchema, type RetrainAssistResult, RetrainAssistResultSchema, RetrainAssistSubjectSchema, RetrainCopyRefusalSchema, type RetrainExportFilter, RetrainExportFilterSchema, type RetrainExportLayout, RetrainExportLayoutSchema, type AddRetrainFrameFromRecordingResult, AddRetrainFrameFromRecordingResultSchema, type RetrainAssistProfile, RetrainAssistProfileSchema, type RetrainLlmAssistResult, RetrainLlmAssistResultSchema, type RetrainLlmProposal, RetrainLlmProposalSchema, type RetrainLlmReview, RetrainLlmReviewSchema, type RetrainCollection, type RetrainCollectionCreateResult, RetrainCollectionCreateResultSchema, type RetrainCollectionRenameResult, RetrainCollectionRenameResultSchema, RetrainCollectionSchema, type RetrainFrame, type RetrainFrameCandidate, RetrainFrameCandidateSchema, type RetrainFrameList, RetrainFrameListSchema, type RetrainFrameOrigin, RetrainFrameOriginSchema, RetrainFrameSchema, type RetrainFrameSelection, RetrainFrameSelectionSchema, type RetrainMacroClass, RetrainMacroClassSchema, type RetrainPipelineBox, RetrainPipelineBoxSchema, type RetrainStatus, RetrainStatusSchema, type RetrainTrack, RetrainTrackSchema, type RetrainTransitionResult, RetrainTransitionResultSchema, type ScoredObjectEvent, ScoredObjectEventSchema, type SensorEvent, SensorEventSchema, type Track, type TrackCascadeCounts, TrackCascadeCountsSchema, type TrackEnvelope, TrackEnvelopeSchema, TrackedDetectionSchema, type TrackFlags, type TrackFlagsPatch, TrackFlagsPatchSchema, TrackFlagsSchema, type TrackProjection, TrackProjectionSchema, TrackSchema, type TrackSource, TrackSourceSchema, type TrackState, TrackStateSchema, type TrackZoneFilter, TrackZoneFilterSchema, type TrainingExportDeviceTotals, TrainingExportDeviceTotalsSchema, type TrainingExportSummary, TrainingExportSummarySchema, type ZoneCrossing, type ZoneCrossingDirection, ZoneCrossingDirectionSchema, ZoneCrossingSchema, } from './pipeline-analytics.cap.js';
 export type { EffectiveTuning, EffectiveTuningInput, NativeCropRef, PipelineStepInputOutput, PipelineValidationIssue, PipelineValidationResult, SuppliedRootOutput, } from './pipeline-executor.cap.js';
 export { EffectiveTuningSchema, ModelSubstitutionSchema, NativeCropRefSchema, PipelineDefaultStepSchema, PipelineEngineChoiceSchema, PipelineRunResultBridge, PipelineStepInputSchema, PipelineValidationIssueSchema, PipelineValidationResultSchema, pipelineExecutorCapability, SuppliedRootOutputSchema, } from './pipeline-executor.cap.js';
 export type { CameraAssignmentStatus, CameraAudioStatus, CameraBrokerProfile, CameraBrokerStatus, CameraDecoderStatus, CameraDetectionPhase, CameraDetectionProvisioning, CameraDetectionProvisioningState, CameraDetectionStatus, CameraMotionStatus, CameraRecordingMode, CameraRecordingStatus, CameraSourceStatus, CameraSourceStream, CameraStatus, CameraStatusDegradation, CameraStatusDegradationReason, CameraStatusStage, ClusterModelChoice, ClusterModelChoiceUnreadableReason, DiskReconcileJob, InferenceDeviceExclusionReason, IngestOwner, NodeInferenceDevice, NodeInferenceDevices, OccupancyLookAnswer, OccupancyLookRefusal, OccupancyLookRequest, SetCameraSensorsInput, } from './pipeline-orchestrator.cap.js';
@@ -277,6 +279,8 @@ import type { coverCapability } from './cover.cap.js';
 import type { customModelRegistryCapability } from './custom-model-registry.cap.js';
 import type { dataStoreProviderCapability } from './data-store-provider.cap.js';
 import type { databaseSnapshotCapability } from './database-snapshot.cap.js';
+import type { keychainCapability } from './keychain.cap.js';
+import type { keychainAdminCapability } from './keychain-admin.cap.js';
 import type { dayNightCapability } from './day-night.cap.js';
 import type { decoderCapability } from './decoder.cap.js';
 import type { detectionPipelineCapability } from './detection-pipeline.cap.js';
@@ -397,6 +401,6 @@ import type { webrtcSessionCapability } from './webrtc-session.cap.js';
 import type { zoneAnalyticsCapability } from './zone-analytics.cap.js';
 import type { zoneRulesCapability } from './zone-rules.cap.js';
 import type { zonesCapability } from './zones.cap.js';
-type AnyCapability = typeof streamSignalsCapability | typeof addonSettingsCapability | typeof alertsCapability | typeof storageCapability | typeof storageMigrationCapability | typeof storageProviderCapability | typeof storageEvictableCapability | typeof storageOccupancyCapability | typeof filesystemBrowseCapability | typeof backupCapability | typeof terminalSessionCapability | typeof settingsStoreCapability | typeof dataStoreProviderCapability | typeof databaseSnapshotCapability | typeof logChannelsCapability | typeof logDestinationCapability | typeof loadContributionCapability | typeof failureContributionCapability | typeof adminUiCapability | typeof viewerUiCapability | typeof ssoBridgeCapability | typeof userPasskeysCapability | typeof smtpProviderCapability | typeof mqttBrokerCapability | typeof brokerCapability | typeof deviceAdoptionCapability | typeof deviceAdminLinkCapability | typeof deviceExportCapability | typeof addonPagesCapability | typeof addonPagesSourceCapability | typeof addonWidgetsCapability | typeof addonWidgetsSourceCapability | typeof customModelRegistryCapability | typeof modelDistributorCapability | typeof modelConvertCapability | typeof addonRoutesCapability | typeof streamBrokerCapability | typeof decoderCapability | typeof webrtcSessionCapability | typeof cameraStreamsCapability | typeof calendarSourceCapability | typeof calendarsCapability | typeof motionDetectionCapability | typeof pipelineExecutorCapability | typeof detectionPipelineCapability | typeof cameraPipelineConfigCapability | typeof pipelineRunnerCapability | typeof pipelineOrchestratorCapability | typeof audioAnalyzerCapability | typeof audioAnalysisCapability | typeof audioCodecCapability | typeof embeddingEncoderCapability | typeof vectorStoreCapability | typeof deviceProviderCapability | typeof deviceManagerCapability | typeof deviceStateCapability | typeof authProviderCapability | typeof loginMethodCapability | typeof networkAccessCapability | typeof turnProviderCapability | typeof snapshotCapability | typeof llmCapability | typeof llmRuntimeCapability | typeof notificationOutputCapability | typeof composerCapability | typeof coreBlocksCapability | typeof notificationRulesCapability | typeof pipelineAnalyticsCapability | typeof metricsProviderCapability | typeof ptzCapability | typeof ptzAutotrackCapability | typeof navigationCapability | typeof consumablesCapability | typeof connectionTestCapability | typeof rebootCapability | typeof deviceDiscoveryCapability | typeof brightnessCapability | typeof colorCapability | typeof climateControlCapability | typeof coverCapability | typeof valveCapability | typeof humidifierCapability | typeof waterHeaterCapability | typeof weatherCapability | typeof imageCapability | typeof lockControlCapability | typeof vacuumControlCapability | typeof petFeederCapability | typeof lawnMowerControlCapability | typeof fanControlCapability | typeof controlCapability | typeof notifierCapability | typeof mediaPlayerCapability | typeof alarmPanelCapability | typeof presenceCapability | typeof scriptRunnerCapability | typeof automationControlCapability | typeof motionTriggerCapability | typeof zonesCapability | typeof zoneRulesCapability | typeof zoneAnalyticsCapability | typeof audioMetricsCapability | typeof motionCapability | typeof contactCapability | typeof floodCapability | typeof smokeCapability | typeof carbonMonoxideCapability | typeof gasCapability | typeof tamperCapability | typeof vibrationCapability | typeof connectivityCapability | typeof binaryCapability | typeof temperatureSensorCapability | typeof humiditySensorCapability | typeof ambientLightSensorCapability | typeof pressureSensorCapability | typeof powerMeterCapability | typeof airQualitySensorCapability | typeof numericSensorCapability | typeof enumSensorCapability | typeof recordingCapability | typeof recordingArchiveCapability | typeof recordingExportCapability | typeof recordingSignalCapability | typeof deviceOpsCapability | typeof platformProbeCapability | typeof localNetworkCapability | typeof meshNetworkCapability | typeof userManagementCapability | typeof systemCapability | typeof networkQualityCapability | typeof toastCapability | typeof nodesCapability | typeof serverManagementCapability | typeof integrationsCapability | typeof addonsCapability | typeof oauthIntegrationCapability | typeof streamParamsCapability | typeof streamCatalogCapability | typeof motionZonesCapability | typeof cameraGridLayoutCapability | typeof sceneMonitorCapability | typeof privacyMaskCapability | typeof dayNightCapability | typeof recordingOnboardCapability | typeof imageSettingsCapability | typeof osdCapability | typeof osdManagerCapability | typeof accessoriesCapability | typeof batteryCapability | typeof networkLinkCapability | typeof buttonCapability | typeof cameraCredentialsCapability | typeof deviceStatusCapability | typeof doorbellCapability | typeof eventEmitterCapability | typeof faceGalleryCapability | typeof featureProbeCapability | typeof intercomCapability | typeof nativeObjectDetectionCapability | typeof plateGalleryCapability | typeof switchCapability | typeof updateCapability | typeof videoclipsCapability | typeof deviceExtensionCapability;
+type AnyCapability = typeof streamSignalsCapability | typeof addonSettingsCapability | typeof alertsCapability | typeof storageCapability | typeof storageMigrationCapability | typeof storageProviderCapability | typeof storageEvictableCapability | typeof storageOccupancyCapability | typeof filesystemBrowseCapability | typeof backupCapability | typeof terminalSessionCapability | typeof settingsStoreCapability | typeof dataStoreProviderCapability | typeof databaseSnapshotCapability | typeof keychainCapability | typeof keychainAdminCapability | typeof logChannelsCapability | typeof logDestinationCapability | typeof loadContributionCapability | typeof failureContributionCapability | typeof adminUiCapability | typeof viewerUiCapability | typeof ssoBridgeCapability | typeof userPasskeysCapability | typeof smtpProviderCapability | typeof mqttBrokerCapability | typeof brokerCapability | typeof deviceAdoptionCapability | typeof deviceAdminLinkCapability | typeof deviceExportCapability | typeof addonPagesCapability | typeof addonPagesSourceCapability | typeof addonWidgetsCapability | typeof addonWidgetsSourceCapability | typeof customModelRegistryCapability | typeof modelDistributorCapability | typeof modelConvertCapability | typeof addonRoutesCapability | typeof streamBrokerCapability | typeof decoderCapability | typeof webrtcSessionCapability | typeof cameraStreamsCapability | typeof calendarSourceCapability | typeof calendarsCapability | typeof motionDetectionCapability | typeof pipelineExecutorCapability | typeof detectionPipelineCapability | typeof cameraPipelineConfigCapability | typeof pipelineRunnerCapability | typeof pipelineOrchestratorCapability | typeof audioAnalyzerCapability | typeof audioAnalysisCapability | typeof audioCodecCapability | typeof embeddingEncoderCapability | typeof vectorStoreCapability | typeof deviceProviderCapability | typeof deviceManagerCapability | typeof deviceStateCapability | typeof authProviderCapability | typeof loginMethodCapability | typeof networkAccessCapability | typeof turnProviderCapability | typeof snapshotCapability | typeof llmCapability | typeof llmRuntimeCapability | typeof notificationOutputCapability | typeof composerCapability | typeof coreBlocksCapability | typeof notificationRulesCapability | typeof pipelineAnalyticsCapability | typeof metricsProviderCapability | typeof ptzCapability | typeof ptzAutotrackCapability | typeof navigationCapability | typeof consumablesCapability | typeof connectionTestCapability | typeof rebootCapability | typeof deviceDiscoveryCapability | typeof brightnessCapability | typeof colorCapability | typeof climateControlCapability | typeof coverCapability | typeof valveCapability | typeof humidifierCapability | typeof waterHeaterCapability | typeof weatherCapability | typeof imageCapability | typeof lockControlCapability | typeof vacuumControlCapability | typeof petFeederCapability | typeof lawnMowerControlCapability | typeof fanControlCapability | typeof controlCapability | typeof notifierCapability | typeof mediaPlayerCapability | typeof alarmPanelCapability | typeof presenceCapability | typeof scriptRunnerCapability | typeof automationControlCapability | typeof motionTriggerCapability | typeof zonesCapability | typeof zoneRulesCapability | typeof zoneAnalyticsCapability | typeof audioMetricsCapability | typeof motionCapability | typeof contactCapability | typeof floodCapability | typeof smokeCapability | typeof carbonMonoxideCapability | typeof gasCapability | typeof tamperCapability | typeof vibrationCapability | typeof connectivityCapability | typeof binaryCapability | typeof temperatureSensorCapability | typeof humiditySensorCapability | typeof ambientLightSensorCapability | typeof pressureSensorCapability | typeof powerMeterCapability | typeof airQualitySensorCapability | typeof numericSensorCapability | typeof enumSensorCapability | typeof recordingCapability | typeof recordingArchiveCapability | typeof recordingExportCapability | typeof recordingSignalCapability | typeof deviceOpsCapability | typeof platformProbeCapability | typeof localNetworkCapability | typeof meshNetworkCapability | typeof userManagementCapability | typeof systemCapability | typeof networkQualityCapability | typeof toastCapability | typeof nodesCapability | typeof serverManagementCapability | typeof integrationsCapability | typeof addonsCapability | typeof oauthIntegrationCapability | typeof streamParamsCapability | typeof streamCatalogCapability | typeof motionZonesCapability | typeof cameraGridLayoutCapability | typeof sceneMonitorCapability | typeof privacyMaskCapability | typeof dayNightCapability | typeof recordingOnboardCapability | typeof imageSettingsCapability | typeof osdCapability | typeof osdManagerCapability | typeof accessoriesCapability | typeof batteryCapability | typeof networkLinkCapability | typeof buttonCapability | typeof cameraCredentialsCapability | typeof deviceStatusCapability | typeof doorbellCapability | typeof eventEmitterCapability | typeof faceGalleryCapability | typeof featureProbeCapability | typeof intercomCapability | typeof nativeObjectDetectionCapability | typeof plateGalleryCapability | typeof switchCapability | typeof updateCapability | typeof videoclipsCapability | typeof deviceExtensionCapability;
 export type CapabilityName = AnyCapability['name'];
 export type ITypedReadinessRegistry = IReadinessRegistry<CapabilityName>;

package/dist/capabilities/integrations.cap.d.ts

@@ -82,8 +82,8 @@ declare const AvailableIntegrationTypeSchema: z.ZodObject<{
  */
 declare const TestConnectionStatusEnum: z.ZodEnum<{
     unsupported: "unsupported";
-    validated: "validated";
     rejected: "rejected";
+    validated: "validated";
     inconclusive: "inconclusive";
 }>;
 declare const TestConnectionResultSchema: z.ZodObject<{
@@ -91,8 +91,8 @@ declare const TestConnectionResultSchema: z.ZodObject<{
     error: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
         unsupported: "unsupported";
-        validated: "validated";
         rejected: "rejected";
+        validated: "validated";
         inconclusive: "inconclusive";
     }>>;
     testedBy: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -105,6 +105,7 @@ declare const CreateIntegrationInputSchema: z.ZodObject<{
     enabled: z.ZodOptional<z.ZodBoolean>;
     info: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     settings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    secretKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
     skipRestart: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 declare const UpdateIntegrationInputSchema: z.ZodObject<{
@@ -161,6 +162,7 @@ export declare const integrationsCapability: {
             enabled: z.ZodOptional<z.ZodBoolean>;
             info: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             settings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            secretKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
             skipRestart: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>, z.ZodObject<{
             id: z.ZodString;
@@ -197,6 +199,7 @@ export declare const integrationsCapability: {
         readonly setSettings: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
             id: z.ZodString;
             settings: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            secretKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>, z.ZodObject<{
             success: z.ZodBoolean;
         }, z.core.$strip>, "mutation">;
@@ -234,8 +237,8 @@ export declare const integrationsCapability: {
             error: z.ZodOptional<z.ZodString>;
             status: z.ZodOptional<z.ZodEnum<{
                 unsupported: "unsupported";
-                validated: "validated";
                 rejected: "rejected";
+                validated: "validated";
                 inconclusive: "inconclusive";
             }>>;
             testedBy: z.ZodOptional<z.ZodNullable<z.ZodString>>;

package/dist/capabilities/keychain-admin.cap.d.ts

@@ -0,0 +1,312 @@
+import { z } from 'zod';
+import { type InferProvider } from './capability-definition.js';
+/**
+ * `keychain-admin` — the operator's view of the keychain (System → Secrets).
+ *
+ * Every method is `admin`. Two methods hand out material, each audited and
+ * each named for exactly that: {@link keychainAdminCapability.methods.reveal}
+ * (one value, shown briefly by the UI) and `downloadRecoveryKey` (the master
+ * key itself, so the operator can keep a copy off the hub). Nothing else
+ * returns a value.
+ *
+ * The master key's LOCATION is configuration, never an env var (D788):
+ * `keychain.keyFile` in `config.yaml`, the OS keychain on a desktop hub, else
+ * `<dataDir>/.keychain/master.key` — which sits beside the database in every
+ * whole-volume backup, and the status says so.
+ */
+/** Where the master key in use came from. */
+export declare const KeychainKeySourceKindSchema: z.ZodEnum<{
+    platform: "platform";
+    "config-file": "config-file";
+    "previous-config-file": "previous-config-file";
+    "default-file": "default-file";
+}>;
+export type KeychainKeySourceKind = z.infer<typeof KeychainKeySourceKindSchema>;
+export declare const KeychainKeySourceSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        platform: "platform";
+        "config-file": "config-file";
+        "previous-config-file": "previous-config-file";
+        "default-file": "default-file";
+    }>;
+    path: z.ZodOptional<z.ZodString>;
+    sharesBackupWithDatabase: z.ZodBoolean;
+}, z.core.$strip>;
+export type KeychainKeySource = z.infer<typeof KeychainKeySourceSchema>;
+export declare const KeychainStatusSchema: z.ZodObject<{
+    keychain: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        state: z.ZodLiteral<"ready">;
+    }, z.core.$strip>, z.ZodObject<{
+        state: z.ZodLiteral<"locked">;
+        reason: z.ZodEnum<{
+            "key-missing": "key-missing";
+            "wrong-key": "wrong-key";
+            "key-file-unreadable": "key-file-unreadable";
+            "store-unavailable": "store-unavailable";
+            "not-initialized": "not-initialized";
+            "decrypt-failed": "decrypt-failed";
+        }>;
+    }, z.core.$strip>], "state">;
+    keySource: z.ZodNullable<z.ZodObject<{
+        kind: z.ZodEnum<{
+            platform: "platform";
+            "config-file": "config-file";
+            "previous-config-file": "previous-config-file";
+            "default-file": "default-file";
+        }>;
+        path: z.ZodOptional<z.ZodString>;
+        sharesBackupWithDatabase: z.ZodBoolean;
+    }, z.core.$strip>>;
+    configuredSource: z.ZodObject<{
+        kind: z.ZodEnum<{
+            platform: "platform";
+            "config-file": "config-file";
+            "previous-config-file": "previous-config-file";
+            "default-file": "default-file";
+        }>;
+        path: z.ZodOptional<z.ZodString>;
+        sharesBackupWithDatabase: z.ZodBoolean;
+    }, z.core.$strip>;
+    fingerprint: z.ZodNullable<z.ZodString>;
+    activeKeyId: z.ZodNullable<z.ZodString>;
+    rotationPending: z.ZodBoolean;
+    retiredWraps: z.ZodNumber;
+    recoveryKeyDownloadedAt: z.ZodNullable<z.ZodNumber>;
+    secretCount: z.ZodNumber;
+}, z.core.$strip>;
+export type KeychainStatus = z.infer<typeof KeychainStatusSchema>;
+/**
+ * Whether a stored value is still pointed at by its owner's settings.
+ * `unknown` is a first-class answer: a scope whose blob could not be read is
+ * never reported as an orphan (and never deleted as one).
+ */
+export declare const KeychainSecretUsageSchema: z.ZodEnum<{
+    unknown: "unknown";
+    "in-use": "in-use";
+    orphan: "orphan";
+}>;
+export type KeychainSecretUsage = z.infer<typeof KeychainSecretUsageSchema>;
+export declare const KeychainAdminSecretSchema: z.ZodObject<{
+    ref: z.ZodString;
+    owner: z.ZodString;
+    scope: z.ZodString;
+    fieldPath: z.ZodString;
+    version: z.ZodNumber;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+    updatedBy: z.ZodString;
+    lastReadAt: z.ZodNullable<z.ZodNumber>;
+    usage: z.ZodEnum<{
+        unknown: "unknown";
+        "in-use": "in-use";
+        orphan: "orphan";
+    }>;
+}, z.core.$strip>;
+export type KeychainAdminSecret = z.infer<typeof KeychainAdminSecretSchema>;
+export declare const KeychainAuditActionSchema: z.ZodEnum<{
+    delete: "delete";
+    reset: "reset";
+    put: "put";
+    reveal: "reveal";
+    "rotate-master-key": "rotate-master-key";
+    "purge-retired-keys": "purge-retired-keys";
+    "download-recovery-key": "download-recovery-key";
+    "delete-orphans": "delete-orphans";
+    initialize: "initialize";
+}>;
+export type KeychainAuditAction = z.infer<typeof KeychainAuditActionSchema>;
+export declare const KeychainAuditEntrySchema: z.ZodObject<{
+    id: z.ZodString;
+    at: z.ZodNumber;
+    action: z.ZodEnum<{
+        delete: "delete";
+        reset: "reset";
+        put: "put";
+        reveal: "reveal";
+        "rotate-master-key": "rotate-master-key";
+        "purge-retired-keys": "purge-retired-keys";
+        "download-recovery-key": "download-recovery-key";
+        "delete-orphans": "delete-orphans";
+        initialize: "initialize";
+    }>;
+    actor: z.ZodString;
+    ref: z.ZodNullable<z.ZodString>;
+    detail: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type KeychainAuditEntry = z.infer<typeof KeychainAuditEntrySchema>;
+export declare const KEYCHAIN_RESET_CONFIRMATION = "RESET KEYCHAIN";
+export declare const keychainAdminCapability: {
+    readonly name: "keychain-admin";
+    readonly scope: "system";
+    readonly mode: "singleton";
+    readonly methods: {
+        readonly status: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
+            keychain: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                state: z.ZodLiteral<"ready">;
+            }, z.core.$strip>, z.ZodObject<{
+                state: z.ZodLiteral<"locked">;
+                reason: z.ZodEnum<{
+                    "key-missing": "key-missing";
+                    "wrong-key": "wrong-key";
+                    "key-file-unreadable": "key-file-unreadable";
+                    "store-unavailable": "store-unavailable";
+                    "not-initialized": "not-initialized";
+                    "decrypt-failed": "decrypt-failed";
+                }>;
+            }, z.core.$strip>], "state">;
+            keySource: z.ZodNullable<z.ZodObject<{
+                kind: z.ZodEnum<{
+                    platform: "platform";
+                    "config-file": "config-file";
+                    "previous-config-file": "previous-config-file";
+                    "default-file": "default-file";
+                }>;
+                path: z.ZodOptional<z.ZodString>;
+                sharesBackupWithDatabase: z.ZodBoolean;
+            }, z.core.$strip>>;
+            configuredSource: z.ZodObject<{
+                kind: z.ZodEnum<{
+                    platform: "platform";
+                    "config-file": "config-file";
+                    "previous-config-file": "previous-config-file";
+                    "default-file": "default-file";
+                }>;
+                path: z.ZodOptional<z.ZodString>;
+                sharesBackupWithDatabase: z.ZodBoolean;
+            }, z.core.$strip>;
+            fingerprint: z.ZodNullable<z.ZodString>;
+            activeKeyId: z.ZodNullable<z.ZodString>;
+            rotationPending: z.ZodBoolean;
+            retiredWraps: z.ZodNumber;
+            recoveryKeyDownloadedAt: z.ZodNullable<z.ZodNumber>;
+            secretCount: z.ZodNumber;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
+        readonly listSecrets: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{}, z.core.$strip>, z.ZodReadonly<z.ZodArray<z.ZodObject<{
+            ref: z.ZodString;
+            owner: z.ZodString;
+            scope: z.ZodString;
+            fieldPath: z.ZodString;
+            version: z.ZodNumber;
+            createdAt: z.ZodNumber;
+            updatedAt: z.ZodNumber;
+            updatedBy: z.ZodString;
+            lastReadAt: z.ZodNullable<z.ZodNumber>;
+            usage: z.ZodEnum<{
+                unknown: "unknown";
+                "in-use": "in-use";
+                orphan: "orphan";
+            }>;
+        }, z.core.$strip>>>, import("./capability-definition.js").CapabilityMethodKind>;
+        readonly listAudit: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            limit: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>, z.ZodReadonly<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            at: z.ZodNumber;
+            action: z.ZodEnum<{
+                delete: "delete";
+                reset: "reset";
+                put: "put";
+                reveal: "reveal";
+                "rotate-master-key": "rotate-master-key";
+                "purge-retired-keys": "purge-retired-keys";
+                "download-recovery-key": "download-recovery-key";
+                "delete-orphans": "delete-orphans";
+                initialize: "initialize";
+            }>;
+            actor: z.ZodString;
+            ref: z.ZodNullable<z.ZodString>;
+            detail: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>>>, import("./capability-definition.js").CapabilityMethodKind>;
+        /**
+         * Show one value to the operator. Audited. The UI hides it again after a
+         * few seconds; nothing caches it.
+         */
+        readonly reveal: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            ref: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            value: z.ZodString;
+            version: z.ZodNumber;
+        }, z.core.$strip>, "mutation"> & {
+            readonly caller: "required";
+        };
+        /** Delete refs no owner points at any more. Re-checked here; `unknown` is kept. */
+        readonly deleteOrphans: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            refs: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            deleted: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+            kept: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+                ref: z.ZodString;
+                usage: z.ZodEnum<{
+                    unknown: "unknown";
+                    "in-use": "in-use";
+                    orphan: "orphan";
+                }>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>, "mutation"> & {
+            readonly caller: "required";
+        };
+        /**
+         * Wrap the data key under the configured primary master key.
+         *
+         * Pending rotation (the keychain unlocked with a previous source): re-wrap
+         * under the primary. Otherwise, with the default file as primary: generate
+         * a new master key, write it there, re-wrap. A file or OS-keychain primary
+         * that is already in use cannot be replaced from here — put the new key at
+         * the source, keep the old one as `keychain.previousKeyFile`, restart, and
+         * rotate. No value is re-encrypted either way; the previous wrap is kept
+         * (retired) until purged.
+         */
+        readonly rotateMasterKey: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
+            fingerprint: z.ZodString;
+            keySource: z.ZodObject<{
+                kind: z.ZodEnum<{
+                    platform: "platform";
+                    "config-file": "config-file";
+                    "previous-config-file": "previous-config-file";
+                    "default-file": "default-file";
+                }>;
+                path: z.ZodOptional<z.ZodString>;
+                sharesBackupWithDatabase: z.ZodBoolean;
+            }, z.core.$strip>;
+        }, z.core.$strip>, "mutation"> & {
+            readonly caller: "required";
+        };
+        readonly purgeRetiredKeys: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
+            purged: z.ZodNumber;
+        }, z.core.$strip>, "mutation"> & {
+            readonly caller: "required";
+        };
+        /** The master key, base64. Audited; marks the recovery copy as taken. */
+        readonly downloadRecoveryKey: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
+            key: z.ZodString;
+            fingerprint: z.ZodString;
+            keySource: z.ZodObject<{
+                kind: z.ZodEnum<{
+                    platform: "platform";
+                    "config-file": "config-file";
+                    "previous-config-file": "previous-config-file";
+                    "default-file": "default-file";
+                }>;
+                path: z.ZodOptional<z.ZodString>;
+                sharesBackupWithDatabase: z.ZodBoolean;
+            }, z.core.$strip>;
+        }, z.core.$strip>, "mutation"> & {
+            readonly caller: "required";
+        };
+        /**
+         * Lost-key recovery: archive every stored value into a
+         * `keychain:secrets-orphaned-<ts>` table and start over with a new data
+         * key. Every secret field then reads "not set". Requires the typed
+         * confirmation {@link KEYCHAIN_RESET_CONFIRMATION}.
+         */
+        readonly resetKeychain: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            confirm: z.ZodLiteral<"RESET KEYCHAIN">;
+        }, z.core.$strip>, z.ZodObject<{
+            archivedCollection: z.ZodNullable<z.ZodString>;
+            archived: z.ZodNumber;
+        }, z.core.$strip>, "mutation"> & {
+            readonly caller: "required";
+        };
+    };
+};
+export type IKeychainAdminProvider = InferProvider<typeof keychainAdminCapability>;