@camstack/types 1.2.327 → 1.2.329

package/dist/generated/addon-api.d.ts

@@ -58,6 +58,8 @@ import type { humidifierCapability } from '../capabilities/humidifier.cap.js';
 import type { imageSettingsCapability } from '../capabilities/image-settings.cap.js';
 import type { integrationsCapability } from '../capabilities/integrations.cap.js';
 import type { intercomCapability } from '../capabilities/intercom.cap.js';
+import type { keychainAdminCapability } from '../capabilities/keychain-admin.cap.js';
+import type { keychainCapability } from '../capabilities/keychain.cap.js';
 import type { lawnMowerControlCapability } from '../capabilities/lawn-mower-control.cap.js';
 import type { llmRuntimeCapability } from '../capabilities/llm-runtime.cap.js';
 import type { llmCapability } from '../capabilities/llm.cap.js';
@@ -3657,6 +3659,118 @@ export type AppRouter = TrpcCoreRouter<{
             meta: object;
         }>;
     }>>;
+    keychain: TRPCBuiltRouter<{
+        ctx: TrpcContext;
+        meta: object;
+        errorShape: AugmentedErrorShape;
+        transformer: true;
+    }, TRPCDecorateCreateRouterOptions<{
+        put: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainCapability.methods.put.input>;
+            output: z.infer<typeof keychainCapability.methods.put.output>;
+            meta: object;
+        }>;
+        resolve: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainCapability.methods.resolve.input>;
+            output: z.infer<typeof keychainCapability.methods.resolve.output>;
+            meta: object;
+        }>;
+        delete: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainCapability.methods.delete.input>;
+            output: z.infer<typeof keychainCapability.methods.delete.output>;
+            meta: object;
+        }>;
+        listMeta: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainCapability.methods.listMeta.input>;
+            output: z.infer<typeof keychainCapability.methods.listMeta.output>;
+            meta: object;
+        }>;
+        getState: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainCapability.methods.getState.input>;
+            output: z.infer<typeof keychainCapability.methods.getState.output>;
+            meta: object;
+        }>;
+    }>>;
+    keychainAdmin: TRPCBuiltRouter<{
+        ctx: TrpcContext;
+        meta: object;
+        errorShape: AugmentedErrorShape;
+        transformer: true;
+    }, TRPCDecorateCreateRouterOptions<{
+        status: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.status.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.status.output>;
+            meta: object;
+        }>;
+        listSecrets: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.listSecrets.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.listSecrets.output>;
+            meta: object;
+        }>;
+        listAudit: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.listAudit.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.listAudit.output>;
+            meta: object;
+        }>;
+        reveal: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.reveal.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.reveal.output>;
+            meta: object;
+        }>;
+        deleteOrphans: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.deleteOrphans.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.deleteOrphans.output>;
+            meta: object;
+        }>;
+        rotateMasterKey: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.rotateMasterKey.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.rotateMasterKey.output>;
+            meta: object;
+        }>;
+        purgeRetiredKeys: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.purgeRetiredKeys.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.purgeRetiredKeys.output>;
+            meta: object;
+        }>;
+        downloadRecoveryKey: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.downloadRecoveryKey.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.downloadRecoveryKey.output>;
+            meta: object;
+        }>;
+        resetKeychain: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainAdminCapability.methods.resetKeychain.input>;
+            output: z.infer<typeof keychainAdminCapability.methods.resetKeychain.output>;
+            meta: object;
+        }>;
+    }>>;
     lawnMowerControl: TRPCBuiltRouter<{
         ctx: TrpcContext;
         meta: object;
@@ -5937,6 +6051,111 @@ export type AppRouter = TrpcCoreRouter<{
             output: z.infer<typeof pipelineAnalyticsCapability.methods.writeRetrainArchive.output>;
             meta: object;
         }>;
+        previewRetrainDataset: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.previewRetrainDataset.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.previewRetrainDataset.output>;
+            meta: object;
+        }>;
+        createRetrainDatasetVersion: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.createRetrainDatasetVersion.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.createRetrainDatasetVersion.output>;
+            meta: object;
+        }>;
+        listRetrainDatasetVersions: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.listRetrainDatasetVersions.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.listRetrainDatasetVersions.output>;
+            meta: object;
+        }>;
+        deleteRetrainDatasetVersion: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.deleteRetrainDatasetVersion.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.deleteRetrainDatasetVersion.output>;
+            meta: object;
+        }>;
+        verifyRetrainDatasetVersion: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.verifyRetrainDatasetVersion.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.verifyRetrainDatasetVersion.output>;
+            meta: object;
+        }>;
+        listRetrainAssistProfiles: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.listRetrainAssistProfiles.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.listRetrainAssistProfiles.output>;
+            meta: object;
+        }>;
+        proposeRetrainAnnotationsWithLlm: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.proposeRetrainAnnotationsWithLlm.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.proposeRetrainAnnotationsWithLlm.output>;
+            meta: object;
+        }>;
+        createRetrainCollection: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.createRetrainCollection.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.createRetrainCollection.output>;
+            meta: object;
+        }>;
+        listRetrainCollections: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.listRetrainCollections.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.listRetrainCollections.output>;
+            meta: object;
+        }>;
+        renameRetrainCollection: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.renameRetrainCollection.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.renameRetrainCollection.output>;
+            meta: object;
+        }>;
+        deleteRetrainCollection: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.deleteRetrainCollection.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.deleteRetrainCollection.output>;
+            meta: object;
+        }>;
+        addRetrainFrameFromRecording: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.addRetrainFrameFromRecording.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.addRetrainFrameFromRecording.output>;
+            meta: object;
+        }>;
+        addRetrainFramesToCollection: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.addRetrainFramesToCollection.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.addRetrainFramesToCollection.output>;
+            meta: object;
+        }>;
+        removeRetrainFrameFromCollection: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.removeRetrainFrameFromCollection.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.removeRetrainFrameFromCollection.output>;
+            meta: object;
+        }>;
+        listRetrainCollectionFrames: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineAnalyticsCapability.methods.listRetrainCollectionFrames.input>;
+            output: z.infer<typeof pipelineAnalyticsCapability.methods.listRetrainCollectionFrames.output>;
+            meta: object;
+        }>;
         getEventMedia: TRPCQueryProcedure<{
             input: {
                 [x: string]: unknown;
@@ -6553,6 +6772,55 @@ export type AppRouter = TrpcCoreRouter<{
             output: z.infer<typeof pipelineOrchestratorCapability.methods.setShareSource.output>;
             meta: object;
         }>;
+        getNodeBenchmarkPreflight: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineOrchestratorCapability.methods.getNodeBenchmarkPreflight.input>;
+            output: z.infer<typeof pipelineOrchestratorCapability.methods.getNodeBenchmarkPreflight.output>;
+            meta: object;
+        }>;
+        startNodeBenchmark: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineOrchestratorCapability.methods.startNodeBenchmark.input>;
+            output: z.infer<typeof pipelineOrchestratorCapability.methods.startNodeBenchmark.output>;
+            meta: object;
+        }>;
+        getNodeBenchmarkStatus: TRPCQueryProcedure<{
+            input: {
+                nodeId?: string | undefined;
+            } | undefined;
+            output: z.infer<typeof pipelineOrchestratorCapability.methods.getNodeBenchmarkStatus.output>;
+            meta: object;
+        }>;
+        abortNodeBenchmark: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineOrchestratorCapability.methods.abortNodeBenchmark.input>;
+            output: z.infer<typeof pipelineOrchestratorCapability.methods.abortNodeBenchmark.output>;
+            meta: object;
+        }>;
+        getNodeBenchmarkCandidates: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineOrchestratorCapability.methods.getNodeBenchmarkCandidates.input>;
+            output: z.infer<typeof pipelineOrchestratorCapability.methods.getNodeBenchmarkCandidates.output>;
+            meta: object;
+        }>;
+        listNodeBenchmarkResults: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineOrchestratorCapability.methods.listNodeBenchmarkResults.input>;
+            output: z.infer<typeof pipelineOrchestratorCapability.methods.listNodeBenchmarkResults.output>;
+            meta: object;
+        }>;
+        deleteNodeBenchmarkResult: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineOrchestratorCapability.methods.deleteNodeBenchmarkResult.input>;
+            output: z.infer<typeof pipelineOrchestratorCapability.methods.deleteNodeBenchmarkResult.output>;
+            meta: object;
+        }>;
         getCameraSettings: TRPCQueryProcedure<{
             input: {
                 [x: string]: unknown;
@@ -6763,6 +7031,27 @@ export type AppRouter = TrpcCoreRouter<{
             output: z.infer<typeof pipelineRunnerCapability.methods.releaseParkedTrackFrames.output>;
             meta: object;
         }>;
+        startNodeBench: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineRunnerCapability.methods.startNodeBench.input>;
+            output: z.infer<typeof pipelineRunnerCapability.methods.startNodeBench.output>;
+            meta: object;
+        }>;
+        getNodeBenchStatus: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineRunnerCapability.methods.getNodeBenchStatus.input>;
+            output: z.infer<typeof pipelineRunnerCapability.methods.getNodeBenchStatus.output>;
+            meta: object;
+        }>;
+        abortNodeBench: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof pipelineRunnerCapability.methods.abortNodeBench.input>;
+            output: z.infer<typeof pipelineRunnerCapability.methods.abortNodeBench.output>;
+            meta: object;
+        }>;
     }>>;
     plateGallery: TRPCBuiltRouter<{
         ctx: TrpcContext;

package/dist/generated/cap-input-defaults.d.ts

@@ -11,7 +11,7 @@
  * Plain data, zero Zod: a forked runner must not import the schema barrel
  * (~144MB RSS per runner — D28).
  *
- * Coverage: 24 caps, 59 methods with defaults.
+ * Coverage: 24 caps, 62 methods with defaults.
  */
 export declare const CAP_INPUT_DEFAULTS: Readonly<Record<string, Readonly<Record<string, Readonly<Record<string, unknown>>>>>>;
 /**

package/dist/generated/capability-router-map.d.ts

@@ -73,6 +73,8 @@ export { imageCapability } from '../capabilities/image.cap.js';
 export { imageSettingsCapability } from '../capabilities/image-settings.cap.js';
 export { integrationsCapability } from '../capabilities/integrations.cap.js';
 export { intercomCapability } from '../capabilities/intercom.cap.js';
+export { keychainCapability } from '../capabilities/keychain.cap.js';
+export { keychainAdminCapability } from '../capabilities/keychain-admin.cap.js';
 export { lawnMowerControlCapability } from '../capabilities/lawn-mower-control.cap.js';
 export { llmCapability } from '../capabilities/llm.cap.js';
 export { llmRuntimeCapability } from '../capabilities/llm-runtime.cap.js';
@@ -239,6 +241,8 @@ export declare const CAPABILITY_NAMES: {
     readonly imageSettings: "image-settings";
     readonly integrations: "integrations";
     readonly intercom: "intercom";
+    readonly keychain: "keychain";
+    readonly keychainAdmin: "keychain-admin";
     readonly lawnMowerControl: "lawn-mower-control";
     readonly llm: "llm";
     readonly llmRuntime: "llm-runtime";
@@ -418,6 +422,8 @@ export interface CapabilityRouterMap<TRouter = unknown> {
     readonly imageSettings: TRouter;
     readonly integrations: TRouter;
     readonly intercom: TRouter;
+    readonly keychain: TRouter;
+    readonly keychainAdmin: TRouter;
     readonly lawnMowerControl: TRouter;
     readonly llm: TRouter;
     readonly llmRuntime: TRouter;
@@ -509,8 +515,8 @@ export interface CapabilityRouterMap<TRouter = unknown> {
     readonly zoneRules: TRouter;
     readonly zones: TRouter;
 }
-/** Capability names whose mode is `singleton` (133 caps). */
-export declare const SINGLETON_CAPABILITY_NAMES: readonly ["accessories", "addon-pages", "addon-settings", "addon-widgets", "addons", "admin-ui", "air-quality-sensor", "alarm-panel", "alerts", "ambient-light-sensor", "audio-analysis", "audio-analyzer", "audio-codec", "audio-metrics", "automation-control", "backup", "battery", "binary", "brightness", "button", "calendars", "camera-credentials", "camera-grid-layout", "camera-pipeline-config", "camera-streams", "carbon-monoxide", "climate-control", "color", "composer", "connectivity", "consumables", "contact", "control", "core-blocks", "cover", "database-snapshot", "day-night", "decoder", "detection-pipeline", "device-admin-link", "device-adoption", "device-discovery", "device-manager", "device-ops", "device-state", "device-status", "doorbell", "enum-sensor", "event-emitter", "face-gallery", "fan-control", "feature-probe", "filesystem-browse", "flood", "gas", "humidifier", "humidity-sensor", "image", "image-settings", "integrations", "intercom", "lawn-mower-control", "llm-runtime", "local-network", "lock-control", "media-player", "metrics-provider", "model-convert", "model-distributor", "motion", "motion-detection", "motion-trigger", "motion-zones", "native-object-detection", "navigation", "network-link", "network-quality", "nodes", "notification-rules", "notifier", "numeric-sensor", "osd", "osd-manager", "pet-feeder", "pipeline-analytics", "pipeline-executor", "pipeline-orchestrator", "pipeline-runner", "plate-gallery", "platform-probe", "power-meter", "presence", "pressure-sensor", "privacy-mask", "ptz", "ptz-autotrack", "reboot", "recording-archive", "recording-export", "recording-onboard", "recording-signal", "scene-monitor", "script-runner", "server-management", "settings-store", "smoke", "snapshot", "sso-bridge", "storage", "storage-migration", "stream-broker", "stream-catalog", "stream-params", "stream-signals", "switch", "system", "tamper", "temperature-sensor", "terminal-session", "toast", "update", "user-management", "vacuum-control", "valve", "vector-store", "vibration", "viewer-ui", "water-heater", "weather", "webrtc-session", "zone-analytics", "zone-rules", "zones"];
+/** Capability names whose mode is `singleton` (135 caps). */
+export declare const SINGLETON_CAPABILITY_NAMES: readonly ["accessories", "addon-pages", "addon-settings", "addon-widgets", "addons", "admin-ui", "air-quality-sensor", "alarm-panel", "alerts", "ambient-light-sensor", "audio-analysis", "audio-analyzer", "audio-codec", "audio-metrics", "automation-control", "backup", "battery", "binary", "brightness", "button", "calendars", "camera-credentials", "camera-grid-layout", "camera-pipeline-config", "camera-streams", "carbon-monoxide", "climate-control", "color", "composer", "connectivity", "consumables", "contact", "control", "core-blocks", "cover", "database-snapshot", "day-night", "decoder", "detection-pipeline", "device-admin-link", "device-adoption", "device-discovery", "device-manager", "device-ops", "device-state", "device-status", "doorbell", "enum-sensor", "event-emitter", "face-gallery", "fan-control", "feature-probe", "filesystem-browse", "flood", "gas", "humidifier", "humidity-sensor", "image", "image-settings", "integrations", "intercom", "keychain", "keychain-admin", "lawn-mower-control", "llm-runtime", "local-network", "lock-control", "media-player", "metrics-provider", "model-convert", "model-distributor", "motion", "motion-detection", "motion-trigger", "motion-zones", "native-object-detection", "navigation", "network-link", "network-quality", "nodes", "notification-rules", "notifier", "numeric-sensor", "osd", "osd-manager", "pet-feeder", "pipeline-analytics", "pipeline-executor", "pipeline-orchestrator", "pipeline-runner", "plate-gallery", "platform-probe", "power-meter", "presence", "pressure-sensor", "privacy-mask", "ptz", "ptz-autotrack", "reboot", "recording-archive", "recording-export", "recording-onboard", "recording-signal", "scene-monitor", "script-runner", "server-management", "settings-store", "smoke", "snapshot", "sso-bridge", "storage", "storage-migration", "stream-broker", "stream-catalog", "stream-params", "stream-signals", "switch", "system", "tamper", "temperature-sensor", "terminal-session", "toast", "update", "user-management", "vacuum-control", "valve", "vector-store", "vibration", "viewer-ui", "water-heater", "weather", "webrtc-session", "zone-analytics", "zone-rules", "zones"];
 /** Union of singleton capability names (literal string union). */
 export type SingletonCapabilityName = typeof SINGLETON_CAPABILITY_NAMES[number];
 /** Capability names whose mode is `collection` (32 caps). */

package/dist/generated/method-access-map.d.ts

@@ -6,7 +6,7 @@
  * scope+access check inside `protectedProcedure` (see
  * `server/backend/src/api/trpc/trpc.middleware.ts`).
  *
- * Coverage: 1219 method paths across 165 capabilities.
+ * Coverage: 1258 method paths across 167 capabilities.
  */
 import type { CapabilityMethodAccess } from '../capabilities/capability-definition.js';
 export interface MethodAccessRecord {

package/dist/generated/method-device-selectors.d.ts

@@ -6,7 +6,7 @@
  * system-scope cap that takes a deviceId was previously never device-filtered
  * — see the generator header).
  *
- * Coverage: 512 methods carry a device reference, of which
+ * Coverage: 514 methods carry a device reference, of which
  * 161 are on SYSTEM-scope caps.
  *
  * Top-level fields, number arrays, and one-level arrays of objects carrying

package/dist/generated/system-proxy.d.ts

@@ -20,6 +20,7 @@ import type { deviceProviderCapability } from '../capabilities/device-provider.c
 import type { deviceStateCapability } from '../capabilities/device-state.cap.js';
 import type { faceGalleryCapability } from '../capabilities/face-gallery.cap.js';
 import type { integrationsCapability } from '../capabilities/integrations.cap.js';
+import type { keychainAdminCapability } from '../capabilities/keychain-admin.cap.js';
 import type { llmCapability } from '../capabilities/llm.cap.js';
 import type { localNetworkCapability } from '../capabilities/local-network.cap.js';
 import type { meshNetworkCapability } from '../capabilities/mesh-network.cap.js';
@@ -76,6 +77,7 @@ export interface SystemProxy {
     readonly deviceState: Pick<InferProvider<typeof deviceStateCapability>, 'getAllSnapshots' | 'listClaims'>;
     readonly faceGallery: Pick<InferProvider<typeof faceGalleryCapability>, 'listIdentities' | 'createIdentity' | 'renameIdentity' | 'deleteIdentity' | 'listIdentitySamples' | 'auditIdentitySamples' | 'removeSample' | 'getFaceMedia' | 'assignFace' | 'unassignFace' | 'deleteFace' | 'assignFaces' | 'unassignFaces' | 'suggestFaceClusters'>;
     readonly integrations: Pick<InferProvider<typeof integrationsCapability>, 'list' | 'get' | 'getByAddonId' | 'create' | 'update' | 'delete' | 'getSettings' | 'setSettings' | 'getAvailableTypes' | 'testConnection'>;
+    readonly keychainAdmin: Pick<InferProvider<typeof keychainAdminCapability>, 'status' | 'listSecrets' | 'listAudit' | 'reveal' | 'deleteOrphans' | 'rotateMasterKey' | 'purgeRetiredKeys' | 'downloadRecoveryKey' | 'resetKeychain'>;
     readonly llm: Pick<InferProvider<typeof llmCapability>, 'generate' | 'generateVision' | 'cancel' | 'listProfileKinds' | 'listProfiles' | 'upsertProfile' | 'deleteProfile' | 'testProfile' | 'listModels' | 'getDefaults' | 'setDefault' | 'getUsage' | 'listModelCatalog' | 'listRuntimeNodes' | 'listNodeModels' | 'resolveModelRef' | 'installModel' | 'deleteModel' | 'getRuntimeStatus' | 'startRuntime' | 'stopRuntime'>;
     readonly localNetwork: Pick<InferProvider<typeof localNetworkCapability>, 'list' | 'getPreferred' | 'getConnectionEndpoints' | 'getNotificationEndpoint' | 'setNotificationEndpoint' | 'getViewerEndpoints' | 'setViewerEndpoints' | 'getAddresses' | 'addCustomAddress' | 'removeCustomAddress' | 'setAddressRole' | 'getHubAddresses' | 'getAllowedAddresses' | 'setAllowedAddresses' | 'resetAllowlistToBestMatch' | 'getTlsStatus' | 'regenerateCertificate' | 'uploadCertificate' | 'downloadCa' | 'revertToGeneratedCertificate'>;
     readonly meshNetwork: Pick<InferProvider<typeof meshNetworkCapability>, 'getStatus' | 'join' | 'startLogin' | 'leave' | 'logout' | 'listPeers' | 'testConnection'>;
@@ -88,8 +90,8 @@ export interface SystemProxy {
     readonly notificationRules: Pick<InferProvider<typeof notificationRulesCapability>, 'listRules' | 'getRule' | 'createRule' | 'updateRule' | 'deleteRule' | 'setRuleEnabled' | 'listSequences' | 'getSequence' | 'createSequence' | 'updateSequence' | 'deleteSequence' | 'getClipRetentionAsks' | 'listDeviceMutes' | 'testRule' | 'previewStateSummary' | 'getConditionCatalog' | 'getTemplateCatalog' | 'previewTemplate' | 'getHistory' | 'getRuleLastRuns' | 'resolveArtifactUrl' | 'listSnoozes' | 'createSnooze' | 'cancelSnooze' | 'getAlarmConfig' | 'setAlarmConfig' | 'createAlarmProfile' | 'renameAlarmProfile' | 'deleteAlarmProfile' | 'activateAlarmProfile' | 'getAlarmSensors'>;
     readonly osdManager: Pick<InferProvider<typeof osdManagerCapability>, 'getConditionSupport' | 'copyDeviceConfiguration' | 'listTemplates' | 'upsertTemplate' | 'deleteTemplate'>;
     readonly pipelineExecutor: Pick<InferProvider<typeof pipelineExecutorCapability>, 'getAvailableEngines' | 'getSelectedEngine' | 'getDefaultSteps' | 'getEngineProvisioning' | 'getVideoPipelineSteps' | 'setVideoPipelineSteps' | 'clearDeviceOverrides' | 'clearModelBoundDeviceOverrides' | 'getInferenceDeviceHealth' | 'rearmInferenceDevice' | 'getSchema' | 'getGlobalSteps' | 'getGlobalPipelineConfig' | 'getOrchestratorConfigSchema' | 'validatePipeline' | 'getCapabilities' | 'getAddonModels' | 'downloadModel' | 'deleteModel' | 'cacheFrameInPool' | 'inferCached' | 'uncacheFrame' | 'getEffectiveTuning' | 'listLoadedEngines' | 'spinEngine' | 'killEngine' | 'listReferenceImages' | 'getReferenceImage' | 'getReferenceAudioFiles' | 'getReferenceAudio' | 'getAudioCapabilities' | 'runAudioTest' | 'getDetectionConfigSchema'>;
-    readonly pipelineOrchestrator: Pick<InferProvider<typeof pipelineOrchestratorCapability>, 'requestOccupancyLook' | 'pauseForStorageMigration' | 'resumeForStorageMigration' | 'rebalance' | 'getPipelineAssignments' | 'getAgentLoad' | 'getClusterModelChoice' | 'getGlobalMetrics' | 'getCapabilityBindings' | 'setCapabilityBinding' | 'getIngestOwner' | 'getAudioNodeLoad' | 'getAudioAssignments' | 'getAgentSettings' | 'listAgentSettings' | 'removeAgentSettings' | 'setAgentMaxCameras' | 'setAgentCapabilities' | 'setAgentDecodeLimits' | 'setAgentReachableHost' | 'setAgentInferenceDevices' | 'getNodeInferenceDevices' | 'resetNodePipelineDefaults' | 'planAutoTune' | 'applyAutoTune' | 'setLoadBalancingShares' | 'getPlacementStats' | 'suggestShares' | 'getEffectiveShares' | 'setShareSource' | 'getCameraStatuses' | 'setCameraSensors' | 'reconcileFromDisk' | 'getReconcileFromDiskStatus'>;
-    readonly pipelineRunner: Pick<InferProvider<typeof pipelineRunnerCapability>, 'attachCamera' | 'reportMotion' | 'getLocalLoad' | 'getLocalMetrics' | 'getAllCameraMetrics' | 'getLocalCameras' | 'getNativeCrop' | 'runStatelessStep'>;
+    readonly pipelineOrchestrator: Pick<InferProvider<typeof pipelineOrchestratorCapability>, 'requestOccupancyLook' | 'pauseForStorageMigration' | 'resumeForStorageMigration' | 'rebalance' | 'getPipelineAssignments' | 'getAgentLoad' | 'getClusterModelChoice' | 'getGlobalMetrics' | 'getCapabilityBindings' | 'setCapabilityBinding' | 'getIngestOwner' | 'getAudioNodeLoad' | 'getAudioAssignments' | 'getAgentSettings' | 'listAgentSettings' | 'removeAgentSettings' | 'setAgentMaxCameras' | 'setAgentCapabilities' | 'setAgentDecodeLimits' | 'setAgentReachableHost' | 'setAgentInferenceDevices' | 'getNodeInferenceDevices' | 'resetNodePipelineDefaults' | 'planAutoTune' | 'applyAutoTune' | 'setLoadBalancingShares' | 'getPlacementStats' | 'suggestShares' | 'getEffectiveShares' | 'setShareSource' | 'getNodeBenchmarkPreflight' | 'startNodeBenchmark' | 'getNodeBenchmarkStatus' | 'abortNodeBenchmark' | 'getNodeBenchmarkCandidates' | 'listNodeBenchmarkResults' | 'deleteNodeBenchmarkResult' | 'getCameraStatuses' | 'setCameraSensors' | 'reconcileFromDisk' | 'getReconcileFromDiskStatus'>;
+    readonly pipelineRunner: Pick<InferProvider<typeof pipelineRunnerCapability>, 'attachCamera' | 'reportMotion' | 'getLocalLoad' | 'getLocalMetrics' | 'getAllCameraMetrics' | 'getLocalCameras' | 'getNativeCrop' | 'runStatelessStep' | 'startNodeBench' | 'getNodeBenchStatus' | 'abortNodeBench'>;
     readonly plateGallery: Pick<InferProvider<typeof plateGalleryCapability>, 'getPlateMedia' | 'searchPlates' | 'suggestPlateClusters' | 'correctPlateText' | 'deletePlate' | 'listVehicles' | 'createVehicle' | 'renameVehicle' | 'deleteVehicle' | 'listVehicleSamples' | 'removeVehicleSample' | 'assignPlate' | 'unassignPlate' | 'assignPlates' | 'unassignPlates'>;
     readonly recordingArchive: Pick<InferProvider<typeof recordingArchiveCapability>, 'getAvailabilityBatch' | 'getDaysWithRecordingsBatch' | 'getStorageUsage' | 'listOpsLog' | 'pauseForStorageMigration' | 'resumeForStorageMigration' | 'refreshStorageLocationsForMigration' | 'startStorageMigrationMove' | 'getStorageMigrationMoveStatus' | 'cancelStorageMigrationMove' | 'relocateFootage' | 'listRelocateJobs' | 'getRelocateResidue' | 'reconcileLedgerAgainstDisk' | 'cancelRelocateJob' | 'planStorageRebalance' | 'startStorageRebalance' | 'getPlacement' | 'setDevicePlacement'>;
     readonly recordingExport: Pick<InferProvider<typeof recordingExportCapability>, 'createExport' | 'getExport' | 'cancelExport' | 'deleteExport' | 'getDownloadUrl' | 'readExportBytes'>;

package/dist/health/wiring-health.d.ts

@@ -11,18 +11,18 @@
 import { z } from 'zod';
 /** What kind of target a probe addressed. */
 export declare const wiringProbeKindSchema: z.ZodEnum<{
+    widget: "widget";
     device: "device";
     singleton: "singleton";
-    widget: "widget";
 }>;
 export type WiringProbeKind = z.infer<typeof wiringProbeKindSchema>;
 /** Result of probing a single (cap|widget [, device]) target. */
 export declare const wiringProbeResultSchema: z.ZodObject<{
     capName: z.ZodString;
     kind: z.ZodEnum<{
+        widget: "widget";
         device: "device";
         singleton: "singleton";
-        widget: "widget";
     }>;
     deviceId: z.ZodOptional<z.ZodNumber>;
     reachable: z.ZodBoolean;
@@ -36,9 +36,9 @@ export declare const wiringAddonHealthSchema: z.ZodObject<{
     caps: z.ZodReadonly<z.ZodArray<z.ZodObject<{
         capName: z.ZodString;
         kind: z.ZodEnum<{
+            widget: "widget";
             device: "device";
             singleton: "singleton";
-            widget: "widget";
         }>;
         deviceId: z.ZodOptional<z.ZodNumber>;
         reachable: z.ZodBoolean;
@@ -48,9 +48,9 @@ export declare const wiringAddonHealthSchema: z.ZodObject<{
     widgets: z.ZodReadonly<z.ZodArray<z.ZodObject<{
         capName: z.ZodString;
         kind: z.ZodEnum<{
+            widget: "widget";
             device: "device";
             singleton: "singleton";
-            widget: "widget";
         }>;
         deviceId: z.ZodOptional<z.ZodNumber>;
         reachable: z.ZodBoolean;
@@ -67,9 +67,9 @@ export declare const wiringNodeHealthSchema: z.ZodObject<{
         caps: z.ZodReadonly<z.ZodArray<z.ZodObject<{
             capName: z.ZodString;
             kind: z.ZodEnum<{
+                widget: "widget";
                 device: "device";
                 singleton: "singleton";
-                widget: "widget";
             }>;
             deviceId: z.ZodOptional<z.ZodNumber>;
             reachable: z.ZodBoolean;
@@ -79,9 +79,9 @@ export declare const wiringNodeHealthSchema: z.ZodObject<{
         widgets: z.ZodReadonly<z.ZodArray<z.ZodObject<{
             capName: z.ZodString;
             kind: z.ZodEnum<{
+                widget: "widget";
                 device: "device";
                 singleton: "singleton";
-                widget: "widget";
             }>;
             deviceId: z.ZodOptional<z.ZodNumber>;
             reachable: z.ZodBoolean;
@@ -103,9 +103,9 @@ export declare const wiringHealthSnapshotSchema: z.ZodObject<{
             caps: z.ZodReadonly<z.ZodArray<z.ZodObject<{
                 capName: z.ZodString;
                 kind: z.ZodEnum<{
+                    widget: "widget";
                     device: "device";
                     singleton: "singleton";
-                    widget: "widget";
                 }>;
                 deviceId: z.ZodOptional<z.ZodNumber>;
                 reachable: z.ZodBoolean;
@@ -115,9 +115,9 @@ export declare const wiringHealthSnapshotSchema: z.ZodObject<{
             widgets: z.ZodReadonly<z.ZodArray<z.ZodObject<{
                 capName: z.ZodString;
                 kind: z.ZodEnum<{
+                    widget: "widget";
                     device: "device";
                     singleton: "singleton";
-                    widget: "widget";
                 }>;
                 deviceId: z.ZodOptional<z.ZodNumber>;
                 reachable: z.ZodBoolean;

package/dist/index.d.ts

@@ -48,7 +48,10 @@ export type * from './interfaces/config-port.js';
 export type * from './interfaces/config-ui.js';
 export type { HydratedFieldEntry } from './interfaces/config-ui.js';
 export { collectHydratedFieldEntries, collectHydratedFieldValues, hydrateSchema, resolveHydratedFieldValue, WELL_KNOWN_TAB_MAP, WELL_KNOWN_TABS, } from './interfaces/config-ui.js';
-export { collectSecretConfigKeys, isSecretConfigField, REDACTED_SECRET, schemaDeclaresAnyField, } from './interfaces/config-ui-secrets.js';
+export { collectKeychainStoredKeys, collectSecretConfigKeys, isKeychainStoredField, isSecretConfigField, REDACTED_SECRET, schemaDeclaresAnyField, } from './interfaces/config-ui-secrets.js';
+export * from './keychain/index.js';
+export { mergeSecretStatePaths, parseSecretStatePath, type SecretNode, type SecretTree, secretTreeFromPaths, secretTreeFromSchema, } from './addon/secret-paths.js';
+export { collectSecretMarkerRefs, KeychainWriteRefusedError, type ResolvedSecrets, resolveSecretMarkers, type SecretWriteInput, type SecretWriteResult, transformSecretWrite, type UnresolvedReason, type UnresolvedSecret, } from './addon/secret-settings-view.js';
 export type * from './interfaces/context.js';
 export * from './interfaces/birth-decision-ledger.js';
 export * from './interfaces/debug-note-archive.js';
@@ -176,7 +179,7 @@ export { exposeBlockDevices, reconcileBlockDevices } from './device/block-declar
 export type { IDevice } from './device/device.js';
 export type { DeviceBinding, DeviceBindingEntry } from './device/device-binding.js';
 export { DeviceConfig } from './device/device-config.js';
-export type { DeviceConstructor, DeviceContext, DeviceManagerApi, IDeviceRegistry, IDeviceRegistryReader, } from './device/device-context.js';
+export type { DeviceConstructor, DeviceContext, DeviceManagerApi, DevicePersistConfigOptions, IDeviceRegistry, IDeviceRegistryReader, } from './device/device-context.js';
 export type { AccessoryControlInput, AccessoryControlKind, AccessoryControlPick, DeviceControlKind, SensorMapping, } from './device/device-control-resolution.js';
 export { DEVICE_TYPE_CONTROL_KIND, hasMotionTrigger, isNode, MOTION_TRIGGER_FEATURE, pickAccessoryControl, resolveDeviceControlKind, resolveMutate, SENSOR_FEATURES, SENSOR_MAP, } from './device/device-control-resolution.js';
 export type { DeviceDoAction, DeviceDoOpenArg } from './device/device-do-actions.js';
@@ -271,6 +274,7 @@ export { applyModelBoundSettings, clearModelBoundOverrides, clearModelBoundSetti
 export { diffStepSettings, effectiveStepSettings, fieldsPinnedAtValueBelow, fieldUnitKeys, mergeSettingsBags, settingsBelow, settingValuesEqual, type StepSettingSource, type StepSettingsBag, type StepSettingsLayers, stepSettingSource, withFieldFrom, withoutField, } from './pipeline/step-settings-layers.js';
 export * from './pipeline/auto-tune/index.js';
 export * from './pipeline/load-balancing/index.js';
+export * from './pipeline/node-benchmark/index.js';
 export { deriveRootFaceRefineRect, ROOT_FACE_REFINE_INPUT_PX, ROOT_FACE_REFINE_SCALE, } from './pipeline/root-face-crop.js';
 export { DEFAULT_DETAIL_CROP_CONVENTION, DETAIL_CROP_PADDING_FIELD, DETAIL_CROP_PADDING_KEY, DETAIL_CROP_SECTION_ID, DETAIL_CROP_SQUARE_KEY, type DetailCropConvention, DetailCropConventionSchema, type DetailCropRect, deriveDetailCropRect, FULL_IMAGE_BBOX, type HydratedSettingsSection, type HydratedSettingsView, pickDetailCropConvention, readDetailCropConvention, } from './pipeline/detail-crop.js';
 export { DEFAULT_NATIVE_LEASE_SETTINGS, NATIVE_LEASE_ACTIVITY_FIELD, NATIVE_LEASE_ACTIVITY_KEY, NATIVE_LEASE_ADMISSION_FIELD, NATIVE_LEASE_ADMISSION_KEY, NATIVE_LEASE_BUDGET_FIELD, NATIVE_LEASE_BUDGET_KEY, NATIVE_LEASE_HOLD_FIELD, NATIVE_LEASE_HOLD_KEY, NATIVE_LEASE_SCENE_BUDGET_FIELD, NATIVE_LEASE_SCENE_BUDGET_KEY, NATIVE_LEASE_SECTION_ID, NATIVE_LEASE_TILE_BUDGET_FIELD, NATIVE_LEASE_TILE_BUDGET_KEY, type NativeLeaseAdmission, NativeLeaseAdmissionSchema, type NativeLeaseKnob, type NativeLeaseNumberKnob, type NativeLeaseSettings, type NativeLeaseSettingsOverride, NativeLeaseSettingsSchema, pickNativeLeaseOverride, readNativeLeaseOverride, } from './pipeline/native-lease.js';