@camstack/types 1.2.332 → 1.2.334

package/dist/capabilities/index.d.ts

@@ -31,7 +31,7 @@ export type { AudioAnalyzerGlobalConfig, AudioBackendChoice, IAudioAnalyzerProvi
 export { AUDIO_BACKEND_CHOICES, AudioAnalysisResultSchema, AudioAnalysisSettingsSchema, AudioAttachDeviceInputSchema, AudioAttachDeviceResultSchema, AudioClassificationResultSchema, AudioDetachDeviceResultSchema, audioAnalyzerCapability, DEFAULT_AUDIO_ANALYZER_CONFIG, } from './audio-analyzer.cap.js';
 export { AudioCodecInfoSchema, AudioDecodeSessionConfigSchema, AudioEncodedChunkSchema, AudioEncodeSessionConfigSchema, AudioPcmChunkSchema, audioCodecCapability, type IAudioCodecCapProvider, PcmSampleFormatSchema, } from './audio-codec.cap.js';
 export { AuthResultSchema, authProviderCapability } from './auth-provider.cap.js';
-export { ArchiveEntrySchema, ArchiveManifestSchema, BackupDestinationInfoSchema, BackupEntrySchema, type BackupRun, type BackupRunPhase, BackupRunPhaseSchema, BackupRunSchema, type BackupRunState, BackupRunStateSchema, type BackupTriggerResult, BackupTriggerResultSchema, backupCapability, type IBackupProvider, LocationStatSchema, } from './backup.cap.js';
+export { ArchiveEntrySchema, ArchiveManifestSchema, type BackupArchiveEncryption, BackupArchiveEncryptionSchema, BackupDestinationInfoSchema, type BackupEncryptionStatus, BackupEncryptionStatusSchema, BackupEntrySchema, type BackupRun, type BackupRunPhase, BackupRunPhaseSchema, BackupRunSchema, type BackupRunState, BackupRunStateSchema, type BackupTriggerResult, BackupTriggerResultSchema, backupCapability, type IBackupProvider, LocationStatSchema, } from './backup.cap.js';
 export { BrokerAddInputSchema, BrokerGetStateInputSchema, type BrokerInfo, type BrokerInfo as UnifiedBrokerInfo, BrokerInfoSchema, BrokerInfoSchema as UnifiedBrokerInfoSchema, type BrokerProviderInfo, BrokerProviderInfoSchema, BrokerPublishInputSchema, BrokerRegistryStatusSchema, type BrokerStatus as UnifiedBrokerStatus, BrokerStatusEnum, BrokerSubscribeInputSchema, BrokerSubscribeResultSchema, BrokerTestConnectionResultSchema, BrokerUnsubscribeInputSchema, brokerCapability, type IBrokerProvider, } from './broker.cap.js';
 export { cameraPipelineConfigCapability, type ICameraPipelineConfigProvider, } from './camera-pipeline-config.cap.js';
 export { cameraStreamsCapability, type ICameraStreamsProvider, type PickedCamStream, PickedCamStreamSchema, type PickStreamPreferences, PickStreamPreferencesSchema, type PickStreamRequirements, PickStreamRequirementsSchema, type StreamCodec, StreamCodecSchema, } from './camera-streams.cap.js';
@@ -41,12 +41,12 @@ export { DEFAULT_RUNTIME_STATE_DURABILITY, DEVICE_SETTINGS_CONTRIBUTION_METHODS,
 export { COMPOSER_RUNNER_ID, type ComposerApplyInput, ComposerApplyInputSchema, type ComposerApplyResult, ComposerApplyResultSchema, type ComposerBlock, ComposerBlockSchema, type ComposerBlockVerdict, ComposerBlockVerdictSchema, type ComposerUnreadableBlock, ComposerUnreadableBlockSchema, composerCapability, type IComposerProvider, } from './composer.cap.js';
 export { CORE_BLOCK_ADDON_PREFIX, CORE_BLOCKS_ADDON_ID, type CompositionBlockInput, CompositionBlockInputSchema, type CompositionBlockPatch, type CompositionCustomizationRead, CompositionCustomizationReadSchema, type CompositionGetRead, CompositionGetReadSchema, type CompositionListRead, CompositionListReadSchema, type CompositionStateRead, CompositionStateReadSchema, type CompositionView, CompositionViewSchema, type CoreBlock, type CoreBlockCompileInput, CoreBlockCompileInputSchema, type CoreBlockCompileResult, CoreBlockCompileResultSchema, type CoreBlockFiles, CoreBlockFilesSchema, type CoreBlockInput, CoreBlockInputFieldsSchema, CoreBlockInputSchema, type CoreBlockPlacement, CoreBlockPlacementSchema, CoreBlockSchema, type CoreBlockSource, type CoreBlockSourceKind, CoreBlockSourceSchema, type CoreBlockStatus, CoreBlockStatusSchema, coreBlockAddonId, coreBlockComposition, coreBlockIdFromAddonId, coreBlockSourceKind, coreBlocksCapability, DEFAULT_CORE_BLOCK_ENTRY, type ICoreBlocksProvider, normalizeCoreBlockWrite, resolveCoreBlockEntry, resolveCoreBlockFiles, } from './core-blocks.cap.js';
 export * from './custom-actions.js';
-export type { CustomModelDescriptor, ICustomModelRegistryProvider, } from './custom-model-registry.cap.js';
-export { CustomModelDescriptorSchema, customModelRegistryCapability, } from './custom-model-registry.cap.js';
+export type { CustomModelDescriptor, ICustomModelRegistryProvider, ImportModelBundleInput, ImportModelBundleResult, ModelBundleFile, } from './custom-model-registry.cap.js';
+export { CustomModelDescriptorSchema, customModelRegistryCapability, ImportModelBundleInputSchema, ImportModelBundleResultSchema, ModelBundleFileSchema, } from './custom-model-registry.cap.js';
 export { type DataStoreEngineInfo, dataStoreProviderCapability, EngineInfoSchema as DataStoreEngineInfoSchema, type IDataStoreProvider, } from './data-store-provider.cap.js';
 export { type ArchiveSqliteSnapshot, ArchiveSqliteSnapshotSchema, DATABASE_SNAPSHOT_PARTIAL_SUFFIX, DATABASE_SNAPSHOT_SUFFIX, DATABASE_SNAPSHOT_TIMEOUT_MS, type DatabaseSnapshotResult, DatabaseSnapshotResultSchema, type DatabaseSnapshotTable, DatabaseSnapshotTableSchema, type DatabaseSnapshotTargets, DatabaseSnapshotTargetsSchema, databaseSnapshotCapability, type IDatabaseSnapshotProvider, } from './database-snapshot.cap.js';
 export { type IKeychainProvider, KEYCHAIN_MAX_REFS_PER_CALL, type KeychainResolveEntry, KeychainResolveEntrySchema, type KeychainResolveResult, KeychainResolveResultSchema, type KeychainSecretMeta, KeychainSecretMetaSchema, type KeychainState, KeychainStateSchema, type KeychainUnavailableReason, KeychainUnavailableReasonSchema, keychainCapability, } from './keychain.cap.js';
-export { type IKeychainAdminProvider, KEYCHAIN_RESET_CONFIRMATION, type KeychainAdminSecret, KeychainAdminSecretSchema, type KeychainAuditAction, KeychainAuditActionSchema, type KeychainAuditEntry, KeychainAuditEntrySchema, type KeychainKeySource, type KeychainKeySourceKind, KeychainKeySourceKindSchema, KeychainKeySourceSchema, type KeychainSecretUsage, KeychainSecretUsageSchema, type KeychainStatus, KeychainStatusSchema, keychainAdminCapability, type SystemHeldSecretName, SystemHeldSecretNameSchema, } from './keychain-admin.cap.js';
+export { type IKeychainAdminProvider, KEYCHAIN_RESET_CONFIRMATION, type KeychainAdminSecret, KeychainAdminSecretSchema, type KeychainAuditAction, KeychainAuditActionSchema, type KeychainAuditEntry, KeychainAuditEntrySchema, type KeychainKeySource, type KeychainKeySourceKind, KeychainKeySourceKindSchema, KeychainKeySourceSchema, KEYCHAIN_RESET_TRIGGER_ACTOR, type KeychainResetRecord, KeychainResetRecordSchema, type KeychainSecretUsage, KeychainSecretUsageSchema, type KeychainStatus, KeychainStatusSchema, keychainAdminCapability, type SystemHeldSecretName, SystemHeldSecretNameSchema, } from './keychain-admin.cap.js';
 export type { DecoderHwAccelConfig, HwAccelChoice, IDecoderCapProvider, } from './decoder.cap.js';
 export { DEFAULT_DECODER_HWACCEL_CONFIG, decoderCapability, HWACCEL_OPTIONS, } from './decoder.cap.js';
 export { detectionPipelineCapability, type IDetectionPipelineProvider, } from './detection-pipeline.cap.js';
@@ -224,7 +224,7 @@ export { type ITamperProvider, type TamperStatus, TamperStatusSchema, tamperCapa
 export { type ITemperatureSensorProvider, type TemperatureSensorStatus, TemperatureSensorStatusSchema, temperatureSensorCapability, } from './temperature-sensor.cap.js';
 export { type IToastProvider, ToastSchema, toastCapability } from './toast.cap.js';
 export { type IUpdateProvider, type UpdateStatus, UpdateStatusSchema, updateCapability, } from './update.cap.js';
-export { ApiKeySummarySchema, CreateApiKeyInputSchema, CreateApiKeyResultSchema, CreateScopedTokenInputSchema, CreateScopedTokenResultSchema, CreateUserInputSchema, ExternalIdentityKeySchema, ExternalIdentitySchema, type IUserManagementProvider, ScopedTokenSummarySchema, UpdateUserInputSchema, UserSummarySchema, userManagementCapability, } from './user-management.cap.js';
+export { ApiKeySummarySchema, CreateScopedTokenInputSchema, CreateScopedTokenResultSchema, CreateUserInputSchema, ExternalIdentityKeySchema, ExternalIdentitySchema, type IUserManagementProvider, ScopedTokenSummarySchema, UpdateUserInputSchema, UserSummarySchema, userManagementCapability, } from './user-management.cap.js';
 export { type IVacuumControlProvider, type TankStatus, TankStatusSchema, type VacuumControlStatus, VacuumControlStatusSchema, type VacuumState, VacuumStateSchema, vacuumControlCapability, } from './vacuum-control.cap.js';
 export { type IValveProvider, type ValveState, ValveStateSchema, type ValveStatus, ValveStatusSchema, valveCapability, } from './valve.cap.js';
 export { type IVibrationProvider, type VibrationStatus, VibrationStatusSchema, vibrationCapability, } from './vibration.cap.js';
@@ -233,6 +233,10 @@ export { type IWeatherProvider, type WeatherStatus, WeatherStatusSchema, weather
 export { type CameraOccupancySnapshot, type CameraOccupancySnapshotForDevice, CameraOccupancySnapshotForDeviceSchema, type HistoryPoint, HistoryPointSchema, type HistoryResolution, HistoryResolutionEnum, type IZoneAnalyticsProvider, type PerScopeBreakdown, PerScopeBreakdownSchema, type StationaryObject, StationaryObjectSchema, type ZoneScopeBreakdown, ZoneScopeBreakdownSchema, zoneAnalyticsCapability, } from './zone-analytics.cap.js';
 export { type IZoneRulesProvider, type ZoneRuleStage, ZoneRuleStageEnum, zoneRulesCapability, } from './zone-rules.cap.js';
 export { type IZonesProvider, type PolygonPoint, PolygonPointSchema, type Zone, type ZoneKind, ZoneKindEnum, ZoneSchema, zonesCapability, } from './zones.cap.js';
+export type { ITrainingCloudProvider, ProviderJobState, ProviderJobStatus, TrainerSourceRef, TrainingCredentialCheck, TrainingGpuOption, TrainingLogLine, TrainingProviderDefaults, TrainingProviderDescriptor, TrainingRegionOption, } from './training-provider.cap.js';
+export { ProviderJobStateSchema, ProviderJobStatusSchema, TrainerSourceRefSchema, TrainingCredentialCheckSchema, TrainingGpuOptionSchema, TrainingLogLineSchema, TrainingProviderDefaultsSchema, TrainingProviderDescriptorSchema, TrainingRegionOptionSchema, trainingProviderCapability, } from './training-provider.cap.js';
+export type { ITrainingOrchestrator, TrainingBaseModel, TrainingCanary, TrainingDatasetVersionRow, TrainingFailureReason, TrainingJob, TrainingJobPlan, TrainingJobRequest, TrainingJobState, TrainingPreset, TrainingProgressPoint, TrainingRefusalReason, TrainingSplitPlan, } from './training.cap.js';
+export { TrainingBaseModelSchema, TrainingCanarySchema, TrainingDatasetVersionRowSchema, TrainingFailureReasonSchema, TrainingJobPlanSchema, TrainingJobRequestSchema, TrainingJobSchema, TrainingJobStateSchema, TrainingPresetSchema, TrainingProgressPointSchema, TrainingRefusalReasonSchema, TrainingSplitPlanSchema, trainingCapability, } from './training.cap.js';
 import type { IReadinessRegistry } from '../interfaces/readiness.js';
 import type { accessoriesCapability } from './accessories.cap.js';
 import type { addonPagesCapability } from './addon-pages.cap.js';
@@ -398,9 +402,11 @@ import type { viewerUiCapability } from './viewer-ui.cap.js';
 import type { waterHeaterCapability } from './water-heater.cap.js';
 import type { weatherCapability } from './weather.cap.js';
 import type { webrtcSessionCapability } from './webrtc-session.cap.js';
+import type { trainingCapability } from './training.cap.js';
+import type { trainingProviderCapability } from './training-provider.cap.js';
 import type { zoneAnalyticsCapability } from './zone-analytics.cap.js';
 import type { zoneRulesCapability } from './zone-rules.cap.js';
 import type { zonesCapability } from './zones.cap.js';
-type AnyCapability = typeof streamSignalsCapability | typeof addonSettingsCapability | typeof alertsCapability | typeof storageCapability | typeof storageMigrationCapability | typeof storageProviderCapability | typeof storageEvictableCapability | typeof storageOccupancyCapability | typeof filesystemBrowseCapability | typeof backupCapability | typeof terminalSessionCapability | typeof settingsStoreCapability | typeof dataStoreProviderCapability | typeof databaseSnapshotCapability | typeof keychainCapability | typeof keychainAdminCapability | typeof logChannelsCapability | typeof logDestinationCapability | typeof loadContributionCapability | typeof failureContributionCapability | typeof adminUiCapability | typeof viewerUiCapability | typeof ssoBridgeCapability | typeof userPasskeysCapability | typeof smtpProviderCapability | typeof mqttBrokerCapability | typeof brokerCapability | typeof deviceAdoptionCapability | typeof deviceAdminLinkCapability | typeof deviceExportCapability | typeof addonPagesCapability | typeof addonPagesSourceCapability | typeof addonWidgetsCapability | typeof addonWidgetsSourceCapability | typeof customModelRegistryCapability | typeof modelDistributorCapability | typeof modelConvertCapability | typeof addonRoutesCapability | typeof streamBrokerCapability | typeof decoderCapability | typeof webrtcSessionCapability | typeof cameraStreamsCapability | typeof calendarSourceCapability | typeof calendarsCapability | typeof motionDetectionCapability | typeof pipelineExecutorCapability | typeof detectionPipelineCapability | typeof cameraPipelineConfigCapability | typeof pipelineRunnerCapability | typeof pipelineOrchestratorCapability | typeof audioAnalyzerCapability | typeof audioAnalysisCapability | typeof audioCodecCapability | typeof embeddingEncoderCapability | typeof vectorStoreCapability | typeof deviceProviderCapability | typeof deviceManagerCapability | typeof deviceStateCapability | typeof authProviderCapability | typeof loginMethodCapability | typeof networkAccessCapability | typeof turnProviderCapability | typeof snapshotCapability | typeof llmCapability | typeof llmRuntimeCapability | typeof notificationOutputCapability | typeof composerCapability | typeof coreBlocksCapability | typeof notificationRulesCapability | typeof pipelineAnalyticsCapability | typeof metricsProviderCapability | typeof ptzCapability | typeof ptzAutotrackCapability | typeof navigationCapability | typeof consumablesCapability | typeof connectionTestCapability | typeof rebootCapability | typeof deviceDiscoveryCapability | typeof brightnessCapability | typeof colorCapability | typeof climateControlCapability | typeof coverCapability | typeof valveCapability | typeof humidifierCapability | typeof waterHeaterCapability | typeof weatherCapability | typeof imageCapability | typeof lockControlCapability | typeof vacuumControlCapability | typeof petFeederCapability | typeof lawnMowerControlCapability | typeof fanControlCapability | typeof controlCapability | typeof notifierCapability | typeof mediaPlayerCapability | typeof alarmPanelCapability | typeof presenceCapability | typeof scriptRunnerCapability | typeof automationControlCapability | typeof motionTriggerCapability | typeof zonesCapability | typeof zoneRulesCapability | typeof zoneAnalyticsCapability | typeof audioMetricsCapability | typeof motionCapability | typeof contactCapability | typeof floodCapability | typeof smokeCapability | typeof carbonMonoxideCapability | typeof gasCapability | typeof tamperCapability | typeof vibrationCapability | typeof connectivityCapability | typeof binaryCapability | typeof temperatureSensorCapability | typeof humiditySensorCapability | typeof ambientLightSensorCapability | typeof pressureSensorCapability | typeof powerMeterCapability | typeof airQualitySensorCapability | typeof numericSensorCapability | typeof enumSensorCapability | typeof recordingCapability | typeof recordingArchiveCapability | typeof recordingExportCapability | typeof recordingSignalCapability | typeof deviceOpsCapability | typeof platformProbeCapability | typeof localNetworkCapability | typeof meshNetworkCapability | typeof userManagementCapability | typeof systemCapability | typeof networkQualityCapability | typeof toastCapability | typeof nodesCapability | typeof serverManagementCapability | typeof integrationsCapability | typeof addonsCapability | typeof oauthIntegrationCapability | typeof streamParamsCapability | typeof streamCatalogCapability | typeof motionZonesCapability | typeof cameraGridLayoutCapability | typeof sceneMonitorCapability | typeof privacyMaskCapability | typeof dayNightCapability | typeof recordingOnboardCapability | typeof imageSettingsCapability | typeof osdCapability | typeof osdManagerCapability | typeof accessoriesCapability | typeof batteryCapability | typeof networkLinkCapability | typeof buttonCapability | typeof cameraCredentialsCapability | typeof deviceStatusCapability | typeof doorbellCapability | typeof eventEmitterCapability | typeof faceGalleryCapability | typeof featureProbeCapability | typeof intercomCapability | typeof nativeObjectDetectionCapability | typeof plateGalleryCapability | typeof switchCapability | typeof updateCapability | typeof videoclipsCapability | typeof deviceExtensionCapability;
+type AnyCapability = typeof streamSignalsCapability | typeof addonSettingsCapability | typeof alertsCapability | typeof storageCapability | typeof storageMigrationCapability | typeof storageProviderCapability | typeof storageEvictableCapability | typeof storageOccupancyCapability | typeof filesystemBrowseCapability | typeof backupCapability | typeof terminalSessionCapability | typeof settingsStoreCapability | typeof dataStoreProviderCapability | typeof databaseSnapshotCapability | typeof keychainCapability | typeof keychainAdminCapability | typeof logChannelsCapability | typeof logDestinationCapability | typeof loadContributionCapability | typeof failureContributionCapability | typeof adminUiCapability | typeof viewerUiCapability | typeof ssoBridgeCapability | typeof userPasskeysCapability | typeof smtpProviderCapability | typeof mqttBrokerCapability | typeof brokerCapability | typeof deviceAdoptionCapability | typeof deviceAdminLinkCapability | typeof deviceExportCapability | typeof addonPagesCapability | typeof addonPagesSourceCapability | typeof addonWidgetsCapability | typeof addonWidgetsSourceCapability | typeof customModelRegistryCapability | typeof modelDistributorCapability | typeof modelConvertCapability | typeof addonRoutesCapability | typeof streamBrokerCapability | typeof decoderCapability | typeof webrtcSessionCapability | typeof cameraStreamsCapability | typeof calendarSourceCapability | typeof calendarsCapability | typeof motionDetectionCapability | typeof pipelineExecutorCapability | typeof detectionPipelineCapability | typeof cameraPipelineConfigCapability | typeof pipelineRunnerCapability | typeof pipelineOrchestratorCapability | typeof audioAnalyzerCapability | typeof audioAnalysisCapability | typeof audioCodecCapability | typeof embeddingEncoderCapability | typeof vectorStoreCapability | typeof deviceProviderCapability | typeof deviceManagerCapability | typeof deviceStateCapability | typeof authProviderCapability | typeof loginMethodCapability | typeof networkAccessCapability | typeof turnProviderCapability | typeof snapshotCapability | typeof llmCapability | typeof llmRuntimeCapability | typeof notificationOutputCapability | typeof composerCapability | typeof coreBlocksCapability | typeof notificationRulesCapability | typeof pipelineAnalyticsCapability | typeof metricsProviderCapability | typeof ptzCapability | typeof ptzAutotrackCapability | typeof navigationCapability | typeof consumablesCapability | typeof connectionTestCapability | typeof rebootCapability | typeof deviceDiscoveryCapability | typeof brightnessCapability | typeof colorCapability | typeof climateControlCapability | typeof coverCapability | typeof valveCapability | typeof humidifierCapability | typeof waterHeaterCapability | typeof weatherCapability | typeof imageCapability | typeof lockControlCapability | typeof vacuumControlCapability | typeof petFeederCapability | typeof lawnMowerControlCapability | typeof fanControlCapability | typeof controlCapability | typeof notifierCapability | typeof mediaPlayerCapability | typeof alarmPanelCapability | typeof presenceCapability | typeof scriptRunnerCapability | typeof automationControlCapability | typeof motionTriggerCapability | typeof zonesCapability | typeof zoneRulesCapability | typeof trainingCapability | typeof trainingProviderCapability | typeof zoneAnalyticsCapability | typeof audioMetricsCapability | typeof motionCapability | typeof contactCapability | typeof floodCapability | typeof smokeCapability | typeof carbonMonoxideCapability | typeof gasCapability | typeof tamperCapability | typeof vibrationCapability | typeof connectivityCapability | typeof binaryCapability | typeof temperatureSensorCapability | typeof humiditySensorCapability | typeof ambientLightSensorCapability | typeof pressureSensorCapability | typeof powerMeterCapability | typeof airQualitySensorCapability | typeof numericSensorCapability | typeof enumSensorCapability | typeof recordingCapability | typeof recordingArchiveCapability | typeof recordingExportCapability | typeof recordingSignalCapability | typeof deviceOpsCapability | typeof platformProbeCapability | typeof localNetworkCapability | typeof meshNetworkCapability | typeof userManagementCapability | typeof systemCapability | typeof networkQualityCapability | typeof toastCapability | typeof nodesCapability | typeof serverManagementCapability | typeof integrationsCapability | typeof addonsCapability | typeof oauthIntegrationCapability | typeof streamParamsCapability | typeof streamCatalogCapability | typeof motionZonesCapability | typeof cameraGridLayoutCapability | typeof sceneMonitorCapability | typeof privacyMaskCapability | typeof dayNightCapability | typeof recordingOnboardCapability | typeof imageSettingsCapability | typeof osdCapability | typeof osdManagerCapability | typeof accessoriesCapability | typeof batteryCapability | typeof networkLinkCapability | typeof buttonCapability | typeof cameraCredentialsCapability | typeof deviceStatusCapability | typeof doorbellCapability | typeof eventEmitterCapability | typeof faceGalleryCapability | typeof featureProbeCapability | typeof intercomCapability | typeof nativeObjectDetectionCapability | typeof plateGalleryCapability | typeof switchCapability | typeof updateCapability | typeof videoclipsCapability | typeof deviceExtensionCapability;
 export type CapabilityName = AnyCapability['name'];
 export type ITypedReadinessRegistry = IReadinessRegistry<CapabilityName>;

package/dist/capabilities/keychain-admin.cap.d.ts

@@ -33,6 +33,29 @@ export declare const KeychainKeySourceSchema: z.ZodObject<{
     sharesBackupWithDatabase: z.ZodBoolean;
 }, z.core.$strip>;
 export type KeychainKeySource = z.infer<typeof KeychainKeySourceSchema>;
+/**
+ * Who reset the keychain: an operator from System → Secrets (`user:<id>`), or
+ * the one-shot `<dataDir>/.keychain/RESET_KEYCHAIN` trigger file at boot
+ * (`trigger-file`) — the only way back into a hub whose master key is lost,
+ * because a locked keychain leaves no session that could reach the page (D797).
+ */
+export declare const KEYCHAIN_RESET_TRIGGER_ACTOR = "trigger-file";
+/**
+ * One keychain reset, as the Secrets page reports it until the operator
+ * acknowledges it. Never a value: refs, counts and table names only.
+ */
+export declare const KeychainResetRecordSchema: z.ZodObject<{
+    id: z.ZodString;
+    at: z.ZodNumber;
+    actor: z.ZodString;
+    lockedReason: z.ZodNullable<z.ZodString>;
+    archived: z.ZodNumber;
+    archivedCollection: z.ZodNullable<z.ZodString>;
+    archivedKeysCollection: z.ZodNullable<z.ZodString>;
+    clearedSettingsKeys: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+    acknowledgedAt: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strip>;
+export type KeychainResetRecord = z.infer<typeof KeychainResetRecordSchema>;
 export declare const KeychainStatusSchema: z.ZodObject<{
     keychain: z.ZodDiscriminatedUnion<[z.ZodObject<{
         state: z.ZodLiteral<"ready">;
@@ -73,6 +96,17 @@ export declare const KeychainStatusSchema: z.ZodObject<{
     retiredWraps: z.ZodNumber;
     recoveryKeyDownloadedAt: z.ZodNullable<z.ZodNumber>;
     secretCount: z.ZodNumber;
+    lastReset: z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        at: z.ZodNumber;
+        actor: z.ZodString;
+        lockedReason: z.ZodNullable<z.ZodString>;
+        archived: z.ZodNumber;
+        archivedCollection: z.ZodNullable<z.ZodString>;
+        archivedKeysCollection: z.ZodNullable<z.ZodString>;
+        clearedSettingsKeys: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+        acknowledgedAt: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export type KeychainStatus = z.infer<typeof KeychainStatusSchema>;
 /**
@@ -112,6 +146,7 @@ export declare const KeychainAuditActionSchema: z.ZodEnum<{
     "purge-retired-keys": "purge-retired-keys";
     "download-recovery-key": "download-recovery-key";
     "delete-orphans": "delete-orphans";
+    "acknowledge-reset": "acknowledge-reset";
     initialize: "initialize";
 }>;
 export type KeychainAuditAction = z.infer<typeof KeychainAuditActionSchema>;
@@ -127,6 +162,7 @@ export declare const KeychainAuditEntrySchema: z.ZodObject<{
         "purge-retired-keys": "purge-retired-keys";
         "download-recovery-key": "download-recovery-key";
         "delete-orphans": "delete-orphans";
+        "acknowledge-reset": "acknowledge-reset";
         initialize: "initialize";
     }>;
     actor: z.ZodString;
@@ -190,6 +226,17 @@ export declare const keychainAdminCapability: {
             retiredWraps: z.ZodNumber;
             recoveryKeyDownloadedAt: z.ZodNullable<z.ZodNumber>;
             secretCount: z.ZodNumber;
+            lastReset: z.ZodNullable<z.ZodObject<{
+                id: z.ZodString;
+                at: z.ZodNumber;
+                actor: z.ZodString;
+                lockedReason: z.ZodNullable<z.ZodString>;
+                archived: z.ZodNumber;
+                archivedCollection: z.ZodNullable<z.ZodString>;
+                archivedKeysCollection: z.ZodNullable<z.ZodString>;
+                clearedSettingsKeys: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+                acknowledgedAt: z.ZodNullable<z.ZodNumber>;
+            }, z.core.$strip>>;
         }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
         readonly listSecrets: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{}, z.core.$strip>, z.ZodReadonly<z.ZodArray<z.ZodObject<{
             ref: z.ZodString;
@@ -221,6 +268,7 @@ export declare const keychainAdminCapability: {
                 "purge-retired-keys": "purge-retired-keys";
                 "download-recovery-key": "download-recovery-key";
                 "delete-orphans": "delete-orphans";
+                "acknowledge-reset": "acknowledge-reset";
                 initialize: "initialize";
             }>;
             actor: z.ZodString;
@@ -335,6 +383,41 @@ export declare const keychainAdminCapability: {
         }, z.core.$strip>, "mutation"> & {
             readonly caller: "required";
         };
+        /**
+         * What the last reset left to re-enter: the archived refs (owner, scope,
+         * field — never a value) that hold no value again yet. Process-held refs
+         * the hub regenerates itself (the session signing key) are not listed.
+         */
+        readonly resetReport: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
+            reset: z.ZodNullable<z.ZodObject<{
+                id: z.ZodString;
+                at: z.ZodNumber;
+                actor: z.ZodString;
+                lockedReason: z.ZodNullable<z.ZodString>;
+                archived: z.ZodNumber;
+                archivedCollection: z.ZodNullable<z.ZodString>;
+                archivedKeysCollection: z.ZodNullable<z.ZodString>;
+                clearedSettingsKeys: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+                acknowledgedAt: z.ZodNullable<z.ZodNumber>;
+            }, z.core.$strip>>;
+            pendingReentry: z.ZodReadonly<z.ZodArray<z.ZodObject<{
+                ref: z.ZodString;
+                owner: z.ZodString;
+                scope: z.ZodString;
+                fieldPath: z.ZodString;
+                version: z.ZodNumber;
+                createdAt: z.ZodNumber;
+                updatedAt: z.ZodNumber;
+                updatedBy: z.ZodString;
+                lastReadAt: z.ZodNullable<z.ZodNumber>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
+        /** Dismiss the "keychain was reset" notice. Audited. */
+        readonly acknowledgeReset: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
+            acknowledged: z.ZodBoolean;
+        }, z.core.$strip>, "mutation"> & {
+            readonly caller: "required";
+        };
     };
 };
 export type IKeychainAdminProvider = InferProvider<typeof keychainAdminCapability>;

package/dist/capabilities/login-method.cap.d.ts

@@ -4,7 +4,7 @@ import { type InferProvider } from './capability-definition.js';
  * `login-method` — collection cap through which auth addons contribute
  * their pre-auth login surfaces to the login page. This is the SINGLE,
  * generic mechanism that supersedes the dead `auth.listProviders` reader:
- * every auth addon (OIDC, magic-link, WebAuthn/passkey) registers a
+ * every auth addon (OIDC, WebAuthn/passkey) registers a
  * `login-method` provider and the PUBLIC `auth.listLoginMethods`
  * procedure aggregates them for the unauthenticated login page.
  *
@@ -12,8 +12,7 @@ import { type InferProvider } from './capability-definition.js';
  *
  *  - `redirect` — a declarative button. The login page renders a generic
  *    button that navigates to `startUrl` (an addon-owned HTTP route).
- *    Covers OIDC (`/addon/auth-oidc/<id>/start`) and magic-link with
- *    ZERO shell-side JS. A future SSO addon plugs in the same way — the
+ *    Covers OIDC (`/addon/auth-oidc/<id>/start`) with ZERO shell-side JS. A future SSO addon plugs in the same way — the
  *    login page needs NO change.
  *
  *  - `widget` — a Module-Federation widget the login page mounts (via
@@ -32,8 +31,8 @@ import { type InferProvider } from './capability-definition.js';
  *    decision.
  *
  * Every contribution carries a `stage`:
- *  - `primary`        — shown on the first credentials screen (OIDC /
- *                       magic-link buttons; a future usernameless passkey).
+ *  - `primary`        — shown on the first credentials screen (OIDC
+ *                       buttons; a usernameless passkey).
  *  - `second-factor`  — shown AFTER the password leg, gated on the
  *                       returned `factors` (passkey-as-2FA today).
  *
@@ -48,7 +47,7 @@ export declare const LoginStageEnum: z.ZodEnum<{
 }>;
 /**
  * A declarative redirect button — the login page navigates to `startUrl`.
- * OIDC and magic-link contribute this; a future SSO addon does too.
+ * OIDC contributes this; a future SSO addon does too.
  */
 export declare const RedirectLoginMethodSchema: z.ZodObject<{
     kind: z.ZodLiteral<"redirect">;

package/dist/capabilities/nodes.cap.d.ts

@@ -93,6 +93,10 @@ declare const TopologyNodeSchema: z.ZodObject<{
         name: z.ZodString;
         version: z.ZodString;
     }, z.core.$strip>>;
+    meshTransport: z.ZodOptional<z.ZodEnum<{
+        clear: "clear";
+        tls: "tls";
+    }>>;
 }, z.core.$strip>;
 declare const ClusterAddonNodeDeploymentSchema: z.ZodObject<{
     nodeId: z.ZodString;
@@ -222,6 +226,10 @@ export declare const nodesCapability: {
                 name: z.ZodString;
                 version: z.ZodString;
             }, z.core.$strip>>;
+            meshTransport: z.ZodOptional<z.ZodEnum<{
+                clear: "clear";
+                tls: "tls";
+            }>>;
         }, z.core.$strip>>>, import("./capability-definition.js").CapabilityMethodKind>;
         /**
          * The cheap node list for pickers (D637): the hub's in-memory registry plus

package/dist/capabilities/notification-output.cap.d.ts

@@ -250,8 +250,8 @@ export declare const TargetKindAttachmentsCapsSchema: z.ZodObject<{
         gif: "gif";
     }>>;
     mode: z.ZodEnum<{
-        bytes: "bytes";
         url: "url";
+        bytes: "bytes";
         both: "both";
     }>;
     max: z.ZodNumber;
@@ -268,8 +268,8 @@ export declare const TargetKindCapsSchema: z.ZodObject<{
             gif: "gif";
         }>>;
         mode: z.ZodEnum<{
-            bytes: "bytes";
             url: "url";
+            bytes: "bytes";
             both: "both";
         }>;
         max: z.ZodNumber;
@@ -320,8 +320,8 @@ export declare const TargetKindSchema: z.ZodObject<{
                 gif: "gif";
             }>>;
             mode: z.ZodEnum<{
-                bytes: "bytes";
                 url: "url";
+                bytes: "bytes";
                 both: "both";
             }>;
             max: z.ZodNumber;
@@ -463,8 +463,8 @@ export declare const notificationOutputCapability: {
                         gif: "gif";
                     }>>;
                     mode: z.ZodEnum<{
-                        bytes: "bytes";
                         url: "url";
+                        bytes: "bytes";
                         both: "both";
                     }>;
                     max: z.ZodNumber;

package/dist/capabilities/notification-rules.cap.d.ts

@@ -2791,8 +2791,8 @@ export type NcTemplateFamily = z.infer<typeof NcTemplateFamilySchema>;
 /** Which text field of that producer. `previewText` is the timelapse frame
  *  caption, `captionText` the digest mosaic caption — both see fewer vars. */
 export declare const NcTemplateFieldSchema: z.ZodEnum<{
-    title: "title";
     body: "body";
+    title: "title";
     previewText: "previewText";
     captionText: "captionText";
 }>;
@@ -2841,8 +2841,8 @@ export declare const NcTemplateVarDescriptorSchema: z.ZodObject<{
         timelapse: "timelapse";
     }>>;
     fields: z.ZodOptional<z.ZodArray<z.ZodEnum<{
-        title: "title";
         body: "body";
+        title: "title";
         previewText: "previewText";
         captionText: "captionText";
     }>>>;
@@ -2920,8 +2920,8 @@ export declare const NcTemplateVarContextSchema: z.ZodObject<{
         timelapse: "timelapse";
     }>;
     field: z.ZodEnum<{
-        title: "title";
         body: "body";
+        title: "title";
         previewText: "previewText";
         captionText: "captionText";
     }>;
@@ -2999,8 +2999,8 @@ export declare const NcTemplatePreviewInputSchema: z.ZodObject<{
             timelapse: "timelapse";
         }>;
         field: z.ZodEnum<{
-            title: "title";
             body: "body";
+            title: "title";
             previewText: "previewText";
             captionText: "captionText";
         }>;
@@ -7471,8 +7471,8 @@ export declare const notificationRulesCapability: {
                     timelapse: "timelapse";
                 }>>;
                 fields: z.ZodOptional<z.ZodArray<z.ZodEnum<{
-                    title: "title";
                     body: "body";
+                    title: "title";
                     previewText: "previewText";
                     captionText: "captionText";
                 }>>>;
@@ -7556,8 +7556,8 @@ export declare const notificationRulesCapability: {
                     timelapse: "timelapse";
                 }>;
                 field: z.ZodEnum<{
-                    title: "title";
                     body: "body";
+                    title: "title";
                     previewText: "previewText";
                     captionText: "captionText";
                 }>;

package/dist/capabilities/osd-manager.cap.d.ts

@@ -480,11 +480,11 @@ export type OsdSlotView = z.infer<typeof OsdSlotViewSchema>;
  * identical text to the camera every tick.
  */
 export declare const OsdRenderOutcomeEnum: z.ZodEnum<{
+    written: "written";
     failed: "failed";
     disabled: "disabled";
     unreadable: "unreadable";
     unchanged: "unchanged";
-    written: "written";
     gated: "gated";
     unbound: "unbound";
 }>;
@@ -492,11 +492,11 @@ export type OsdRenderOutcome = z.infer<typeof OsdRenderOutcomeEnum>;
 export declare const OsdRenderResultSchema: z.ZodObject<{
     slotId: z.ZodString;
     outcome: z.ZodEnum<{
+        written: "written";
         failed: "failed";
         disabled: "disabled";
         unreadable: "unreadable";
         unchanged: "unchanged";
-        written: "written";
         gated: "gated";
         unbound: "unbound";
     }>;
@@ -1201,11 +1201,11 @@ export declare const osdManagerCapability: {
             render: z.ZodObject<{
                 slotId: z.ZodString;
                 outcome: z.ZodEnum<{
+                    written: "written";
                     failed: "failed";
                     disabled: "disabled";
                     unreadable: "unreadable";
                     unchanged: "unchanged";
-                    written: "written";
                     gated: "gated";
                     unbound: "unbound";
                 }>;
@@ -1419,11 +1419,11 @@ export declare const osdManagerCapability: {
         }, z.core.$strip>, z.ZodObject<{
             slotId: z.ZodString;
             outcome: z.ZodEnum<{
+                written: "written";
                 failed: "failed";
                 disabled: "disabled";
                 unreadable: "unreadable";
                 unchanged: "unchanged";
-                written: "written";
                 gated: "gated";
                 unbound: "unbound";
             }>;
@@ -1437,11 +1437,11 @@ export declare const osdManagerCapability: {
             results: z.ZodArray<z.ZodObject<{
                 slotId: z.ZodString;
                 outcome: z.ZodEnum<{
+                    written: "written";
                     failed: "failed";
                     disabled: "disabled";
                     unreadable: "unreadable";
                     unchanged: "unchanged";
-                    written: "written";
                     gated: "gated";
                     unbound: "unbound";
                 }>;

package/dist/capabilities/pipeline-analytics.cap.d.ts

@@ -880,6 +880,7 @@ export type MediaFile = z.infer<typeof MediaFileSchema>;
  */
 declare const MediaFileInfoSchema: z.ZodObject<{
     timestamp: z.ZodNumber;
+    url: z.ZodString;
     kind: z.ZodEnum<{
         crop: "crop";
         thumbnail: "thumbnail";
@@ -898,7 +899,6 @@ declare const MediaFileInfoSchema: z.ZodObject<{
         sceneFrame: "sceneFrame";
         lastSceneFrame: "lastSceneFrame";
     }>;
-    url: z.ZodString;
     mediaId: z.ZodNumber;
     sizeBytes: z.ZodNumber;
 }, z.core.$strip>;
@@ -1173,9 +1173,9 @@ export declare const RetrainFrameSchema: z.ZodObject<{
 export type RetrainFrame = z.infer<typeof RetrainFrameSchema>;
 /** Why a copy-on-select could not be honoured — named, never a silent skip. */
 export declare const RetrainCopyRefusalSchema: z.ZodEnum<{
+    "write-failed": "write-failed";
     "source-missing": "source-missing";
     "unreadable-image": "unreadable-image";
-    "write-failed": "write-failed";
 }>;
 export declare const RetrainFrameSelectionSchema: z.ZodObject<{
     copied: z.ZodReadonly<z.ZodArray<z.ZodObject<{
@@ -1243,9 +1243,9 @@ export declare const RetrainFrameSelectionSchema: z.ZodObject<{
     refused: z.ZodReadonly<z.ZodArray<z.ZodObject<{
         sourceMediaId: z.ZodNumber;
         reason: z.ZodEnum<{
+            "write-failed": "write-failed";
             "source-missing": "source-missing";
             "unreadable-image": "unreadable-image";
-            "write-failed": "write-failed";
         }>;
     }, z.core.$strip>>>;
 }, z.core.$strip>;
@@ -1570,8 +1570,8 @@ export declare const AddRetrainFrameFromRecordingResultSchema: z.ZodDiscriminate
 }, z.core.$strip>, z.ZodObject<{
     kind: z.ZodLiteral<"refused">;
     reason: z.ZodEnum<{
-        "unreadable-image": "unreadable-image";
         "write-failed": "write-failed";
+        "unreadable-image": "unreadable-image";
         "unknown-collection": "unknown-collection";
         "still-unavailable": "still-unavailable";
         "still-busy": "still-busy";
@@ -4432,9 +4432,9 @@ export declare const pipelineAnalyticsCapability: {
             refused: z.ZodReadonly<z.ZodArray<z.ZodObject<{
                 sourceMediaId: z.ZodNumber;
                 reason: z.ZodEnum<{
+                    "write-failed": "write-failed";
                     "source-missing": "source-missing";
                     "unreadable-image": "unreadable-image";
-                    "write-failed": "write-failed";
                 }>;
             }, z.core.$strip>>>;
         }, z.core.$strip>, "mutation">;
@@ -4857,6 +4857,37 @@ export declare const pipelineAnalyticsCapability: {
             sha256: z.ZodString;
             status: z.ZodNumber;
         }, z.core.$strip>, "mutation">;
+        /**
+         * OFFER the annotated archive instead of pushing it (D805): the same tar
+         * `writeRetrainArchive` streams, behind a one-shot `ctx.peerBytes` ticket
+         * the caller dials at once (same host). For a consumer that cannot expose
+         * an upload URL — a training provider streaming straight into its cloud.
+         * The answer is the plan; the bytes and their sha256 are the consumer's
+         * to measure as they arrive.
+         */
+        readonly offerRetrainArchive: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            filter: z.ZodObject<{
+                deviceIds: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+                frameIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                collectionIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                datasetVersionId: z.ZodOptional<z.ZodString>;
+                batchId: z.ZodOptional<z.ZodString>;
+                completeOnly: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>;
+            layout: z.ZodEnum<{
+                frames: "frames";
+                crops: "crops";
+            }>;
+        }, z.core.$strip>, z.ZodObject<{
+            ticket: z.ZodObject<{
+                url: z.ZodString;
+                hostNodeId: z.ZodString;
+                expiresAtMs: z.ZodNumber;
+                declaredBytes: z.ZodNullable<z.ZodNumber>;
+            }, z.core.$strip>;
+            frames: z.ZodNumber;
+            annotations: z.ZodNumber;
+        }, z.core.$strip>, "mutation">;
         /** The counts a selection would freeze — class × camera × day/night,
          *  completeness — without freezing anything. Index reads only. */
         readonly previewRetrainDataset: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
@@ -5275,8 +5306,8 @@ export declare const pipelineAnalyticsCapability: {
         }, z.core.$strip>, z.ZodObject<{
             kind: z.ZodLiteral<"refused">;
             reason: z.ZodEnum<{
-                "unreadable-image": "unreadable-image";
                 "write-failed": "write-failed";
+                "unreadable-image": "unreadable-image";
                 "unknown-collection": "unknown-collection";
                 "still-unavailable": "still-unavailable";
                 "still-busy": "still-busy";
@@ -5505,6 +5536,7 @@ export declare const pipelineAnalyticsCapability: {
             deviceId: z.ZodNumber;
         }, z.core.$strip>, z.ZodReadonly<z.ZodArray<z.ZodObject<{
             timestamp: z.ZodNumber;
+            url: z.ZodString;
             kind: z.ZodEnum<{
                 crop: "crop";
                 thumbnail: "thumbnail";
@@ -5523,7 +5555,6 @@ export declare const pipelineAnalyticsCapability: {
                 sceneFrame: "sceneFrame";
                 lastSceneFrame: "lastSceneFrame";
             }>;
-            url: z.ZodString;
             mediaId: z.ZodNumber;
             sizeBytes: z.ZodNumber;
         }, z.core.$strip>>>, import("./capability-definition.js").CapabilityMethodKind>;
@@ -5555,6 +5586,7 @@ export declare const pipelineAnalyticsCapability: {
             deviceId: z.ZodNumber;
         }, z.core.$strip>, z.ZodReadonly<z.ZodArray<z.ZodObject<{
             timestamp: z.ZodNumber;
+            url: z.ZodString;
             kind: z.ZodEnum<{
                 crop: "crop";
                 thumbnail: "thumbnail";
@@ -5573,7 +5605,6 @@ export declare const pipelineAnalyticsCapability: {
                 sceneFrame: "sceneFrame";
                 lastSceneFrame: "lastSceneFrame";
             }>;
-            url: z.ZodString;
             mediaId: z.ZodNumber;
             sizeBytes: z.ZodNumber;
         }, z.core.$strip>>>, import("./capability-definition.js").CapabilityMethodKind>;

package/dist/capabilities/recording.cap.d.ts

@@ -118,8 +118,8 @@ export declare const RecordingManifestSchema: z.ZodObject<{
 export type RecordingManifest = z.infer<typeof RecordingManifestSchema>;
 export declare const RecordingSourceAvailabilitySchema: z.ZodObject<{
     state: z.ZodEnum<{
-        ok: "ok";
         unreachable: "unreachable";
+        ok: "ok";
         sleeping: "sleeping";
         "no-storage": "no-storage";
         "index-empty": "index-empty";
@@ -144,8 +144,8 @@ export declare const RecordingSourceSchema: z.ZodObject<{
     addonId: z.ZodOptional<z.ZodString>;
     availability: z.ZodObject<{
         state: z.ZodEnum<{
-            ok: "ok";
             unreachable: "unreachable";
+            ok: "ok";
             sleeping: "sleeping";
             "no-storage": "no-storage";
             "index-empty": "index-empty";
@@ -246,8 +246,8 @@ export declare const recordingCapability: {
             addonId: z.ZodOptional<z.ZodString>;
             availability: z.ZodObject<{
                 state: z.ZodEnum<{
-                    ok: "ok";
                     unreachable: "unreachable";
+                    ok: "ok";
                     sleeping: "sleeping";
                     "no-storage": "no-storage";
                     "index-empty": "index-empty";