@camstack/types 1.2.369 → 1.2.371

package/dist/addon.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-CXlc9YJ5.js");
+const require_sleep = require("./sleep-DnQ5WsMI.js");
 const require_event_category = require("./event-category-T43rdQWR.js");
 const require_err_msg = require("./err-msg-Dx2Kor0g.js");
 //#region src/generated/cap-input-defaults.ts

package/dist/addon.mjs

@@ -1,4 +1,4 @@
-import { A as viewerUiCapability, At as createSecretsAccess, Bt as PEER_BYTES_STALL_MS, C as isZodSecret, Cn as isSecretClear, Dn as makeSecretMarker, E as HF_REPO, En as isSecretMarkerLike, Ft as registerKnownSecret, Gt as DisposerChain, I as adminUiCapability, It as scrubKnownSecrets, Kt as BaseAddon, Lt as shortSecretRefHash, Mt as clearKnownSecrets, Nt as forgetKnownSecret, On as toSecretFieldView, Ot as resolveSecretViewsIn, P as describeCustomActions, Pt as knownSecretCount, Q as readNodePin, Rt as PEER_BYTES_CHUNK_BYTES, S as collectZodSecretPaths, Sn as classifySecretWrite, Tn as isSecretMarker, Ut as DATAPLANE_SECRET_HEADER, Vt as PEER_BYTES_TICKET_TTL_MS, W as expandCapMethods, Z as nodePin, _ as createEventBusSliceSource, an as formatSecretScope, at as scopeKey, c as asString, cn as normalizeSecretOwner, d as parseJsonUnknown, et as MODEL_FORMATS, f as hfModelUrl, fn as createEvent, g as createDeviceProxy, h as isDeviceScopedCap, in as buildSecretRef, j as DEVICE_CHILDREN_BATCH_MAX, jt as MIN_SCRUBBED_LENGTH, k as deviceOpsCapability, kt as REVALIDATE_AFTER_MS, ln as parseSecretRef, m as DEVICE_SCOPED_CAPS, nn as SECRET_REF_SCHEME, nt as ReadinessTimeoutError, o as asJsonObject, on as globalSecretScope, p as BOOT_RECOVERY_BACKOFF_MS, pn as emitReadiness, qt as normalizeAddonInitResult, r as maskUrlCredentials, rn as arrayItemFieldPath, sn as isSecretRef, t as sleep, tt as ReadinessRegistry, wn as isSecretFieldView, xn as SECRET_CLEAR, zt as PEER_BYTES_MAX_OUTSTANDING } from "./sleep--g-h2_c_.mjs";
+import { A as viewerUiCapability, At as createSecretsAccess, Bt as PEER_BYTES_STALL_MS, C as isZodSecret, Cn as isSecretClear, Dn as makeSecretMarker, E as HF_REPO, En as isSecretMarkerLike, Ft as registerKnownSecret, Gt as DisposerChain, I as adminUiCapability, It as scrubKnownSecrets, Kt as BaseAddon, Lt as shortSecretRefHash, Mt as clearKnownSecrets, Nt as forgetKnownSecret, On as toSecretFieldView, Ot as resolveSecretViewsIn, P as describeCustomActions, Pt as knownSecretCount, Q as readNodePin, Rt as PEER_BYTES_CHUNK_BYTES, S as collectZodSecretPaths, Sn as classifySecretWrite, Tn as isSecretMarker, Ut as DATAPLANE_SECRET_HEADER, Vt as PEER_BYTES_TICKET_TTL_MS, W as expandCapMethods, Z as nodePin, _ as createEventBusSliceSource, an as formatSecretScope, at as scopeKey, c as asString, cn as normalizeSecretOwner, d as parseJsonUnknown, et as MODEL_FORMATS, f as hfModelUrl, fn as createEvent, g as createDeviceProxy, h as isDeviceScopedCap, in as buildSecretRef, j as DEVICE_CHILDREN_BATCH_MAX, jt as MIN_SCRUBBED_LENGTH, k as deviceOpsCapability, kt as REVALIDATE_AFTER_MS, ln as parseSecretRef, m as DEVICE_SCOPED_CAPS, nn as SECRET_REF_SCHEME, nt as ReadinessTimeoutError, o as asJsonObject, on as globalSecretScope, p as BOOT_RECOVERY_BACKOFF_MS, pn as emitReadiness, qt as normalizeAddonInitResult, r as maskUrlCredentials, rn as arrayItemFieldPath, sn as isSecretRef, t as sleep, tt as ReadinessRegistry, wn as isSecretFieldView, xn as SECRET_CLEAR, zt as PEER_BYTES_MAX_OUTSTANDING } from "./sleep-DAX0-2v9.mjs";
 import { t as EventCategory } from "./event-category-C4hVnRo8.mjs";
 import { a as DeviceType, t as errMsg } from "./err-msg-DX6i_MY4.mjs";
 //#region src/generated/cap-input-defaults.ts

package/dist/auth/app-flow.d.ts

@@ -0,0 +1,72 @@
+/**
+ * The native-app browser sign-in flows the hub serves itself (D858).
+ *
+ * The viewer app opens the system browser at a hub START route (OIDC
+ * `/addon/auth-oidc/<id>/start`, the passkey page `/auth/app/passkey`) and gets
+ * a one-shot handoff code back at its custom scheme. These helpers are the one
+ * reading of the request every leg shares - the OIDC addon, the finish leg and
+ * the passkey page - so a rule tightened for one is tightened for all:
+ *
+ *  - PKCE is mandatory and S256 only (`code_challenge` = base64url of a SHA-256);
+ *  - `state` is echoed back exactly;
+ *  - the return URL is one of {@link APP_AUTH_CALLBACK_URLS}, never a free URL;
+ *  - the purpose is `new-session` or `step-up` (the legacy `renew` has no browser flow).
+ *
+ * Pure and dependency-free (zod only) so an addon, the backend and a spec read
+ * the same code.
+ */
+import { z } from 'zod';
+/** What the app redeems the code for. `step-up` yields a proof, never a session. */
+export declare const AppFlowPurposeSchema: z.ZodEnum<{
+    "new-session": "new-session";
+    "step-up": "step-up";
+}>;
+export type AppFlowPurpose = z.infer<typeof AppFlowPurposeSchema>;
+/** Where the app is sent when the request names no `redirect`. */
+export declare const APP_FLOW_DEFAULT_REDIRECT = "camstack://auth-callback";
+/**
+ * A browser OIDC flow started for an app carries this prefix on the IdP
+ * `state` it generates, so a callback whose pending state is gone (expired,
+ * replayed) can still be answered at the app and not on a hub error page. The
+ * destination of that answer is the fixed default callback - the prefix
+ * selects nothing the requester controls.
+ */
+export declare const APP_FLOW_STATE_PREFIX = "a.";
+/** A validated app flow request. */
+export interface AppFlowRequest {
+    readonly codeChallenge: string;
+    readonly state: string;
+    readonly purpose: AppFlowPurpose;
+    /** The canonical allow-listed callback URL. */
+    readonly redirect: string;
+}
+export type AppFlowRefusal = 'bad-challenge' | 'bad-challenge-method' | 'bad-state' | 'bad-purpose' | 'bad-redirect';
+export type AppFlowParse = {
+    readonly ok: true;
+    readonly request: AppFlowRequest;
+} | {
+    readonly ok: false;
+    readonly reason: AppFlowRefusal;
+};
+/** Operator-facing words for a refusal (the "clear page", D858). */
+export declare const APP_FLOW_REFUSAL_MESSAGES: Record<AppFlowRefusal, string>;
+/**
+ * Read the app parameters off a start query: `code_challenge`,
+ * `code_challenge_method`, `state`, `purpose`, `redirect`. Anything missing or
+ * malformed is refused - there is no lenient default for PKCE or state.
+ */
+export declare function parseAppFlowRequest(query: Readonly<Record<string, string | undefined>>): AppFlowParse;
+/** The app's callback with `code` (success) or `error` (refusal), and the echoed `state` when known. */
+export declare function appFlowLocation(redirect: string, result: {
+    readonly code: string;
+} | {
+    readonly error: string;
+}, state?: string): string;
+/** How a native app starts one login method (D858), as `auth.listLoginMethods` reports it. */
+export declare const AppLoginPathSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"native">;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"browser">;
+    startPath: z.ZodString;
+}, z.core.$strip>], "kind">;
+export type AppLoginPath = z.infer<typeof AppLoginPathSchema>;

package/dist/auth/device-certificate.d.ts

@@ -368,5 +368,11 @@ export declare const DeviceCertificateLoginMethodSchema: z.ZodObject<{
         native: "native";
         web: "web";
     }>>;
+    app: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"native">;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"browser">;
+        startPath: z.ZodString;
+    }, z.core.$strip>], "kind">>;
 }, z.core.$strip>;
 export type DeviceCertificateLoginMethod = z.infer<typeof DeviceCertificateLoginMethodSchema>;

package/dist/capabilities/addon-catalog-href.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The Addons catalog filtered to the packages that declare `capability` — the
+ * ONE spelling of that link (D860). It lives in `@camstack/types` so an addon's
+ * own page (which may not import the admin UI) and the admin pages build it the
+ * same way. `scripts/check-addon-install-links.ts` pins this file as the only
+ * place the URL is written.
+ */
+export declare function addonCatalogHref(capability: string): string;

package/dist/capabilities/addons.cap.d.ts

@@ -112,6 +112,7 @@ declare const SearchResultSchema: z.ZodObject<{
     author: z.ZodString;
     installed: z.ZodBoolean;
     installedVersion: z.ZodOptional<z.ZodString>;
+    capabilities: z.ZodNullable<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
 }, z.core.$strip>;
 declare const AutoUpdateSettingsSchema: z.ZodObject<{
     channel: z.ZodEnum<{
@@ -223,6 +224,7 @@ declare const PackageInstallationsSchema: z.ZodObject<{
 export type UninstallNodeOutcome = z.infer<typeof UninstallNodeOutcomeSchema>;
 export type UninstallNodeResult = z.infer<typeof UninstallNodeResultSchema>;
 export type UninstallPackageResult = z.infer<typeof UninstallPackageResultSchema>;
+export type AddonSearchResult = z.infer<typeof SearchResultSchema>;
 export type PackageInstallation = z.infer<typeof PackageInstallationSchema>;
 export type PackageInstallations = z.infer<typeof PackageInstallationsSchema>;
 declare const BulkUpdateItemStatusSchema: z.ZodEnum<{
@@ -478,6 +480,7 @@ export declare const addonsCapability: {
         readonly reloadPackages: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodUnknown, "mutation">;
         readonly searchAvailable: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
             query: z.ZodOptional<z.ZodString>;
+            capability: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>, z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             version: z.ZodString;
@@ -487,6 +490,7 @@ export declare const addonsCapability: {
             author: z.ZodString;
             installed: z.ZodBoolean;
             installedVersion: z.ZodOptional<z.ZodString>;
+            capabilities: z.ZodNullable<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
         }, z.core.$strip>>, import("./capability-definition.js").CapabilityMethodKind>;
         /**
          * Available package updates for a node. `nodeId` omitted (or

package/dist/capabilities/hub-address.d.ts

@@ -14,14 +14,16 @@
  * carries role flags, the same way for both:
  *
  * - `appConnections` (many) — what the CamStack apps try when connecting.
- *   Automatic: every LAN IPv4 address plus the public tunnel.
+ *   Automatic: every LAN IPv4 address plus the public tunnel — unless the
+ *   tunnel's address is not stable (a Quick tunnel, D860).
  * - `notificationTaps` (one) — ONLY where tapping a notification opens.
  *   Automatic: the CamStack app link (D709); a hub address may be flagged.
  * - `publicEndpoint` (one) — every URL that must work from OUTSIDE the home
  *   network: sign-in links, OIDC / OAuth2 callbacks, the passkey relying
  *   party, account linking, and the notification centre's action buttons,
  *   attachment / media links and admin links. Automatic: the public tunnel,
- *   then the mesh, then the LAN. Never the app link.
+ *   then the mesh, then the LAN. Never the app link, and never an address
+ *   that is re-issued on its own (`stable: false`, a Quick tunnel — D860).
  * - `internal` (one) — what agents and LAN devices download from (addon
  *   bundles, models, a camera relay's broker host, Home Assistant media).
  *   Automatic: a LAN IPv4 literal, then any plausible LAN address, then the

package/dist/capabilities/index.d.ts

@@ -70,6 +70,7 @@ export type { FailureContribution, IFailureContributionProvider, } from './failu
 export { FailureContributionSchema, FailureReasonCountSchema, failureContributionCapability, } from './failure-contribution.cap.js';
 export { filesystemBrowseCapability, type IFilesystemBrowseProvider, } from './filesystem-browse.cap.js';
 export { AUTOMATIC_HUB_ADDRESS_FLAGS, checkRoleAddress, HUB_ADDRESS_ROLES, type HubAddressCheck, type HubAddressFlags, type HubAddressRole, type HubAddressRoleResolution, type HubAddressRoles, type HubAddressSource, type HubAppConnectionsResolution, HUB_MDNS_QUERY_NAME, HUB_MDNS_ROLE, HUB_MDNS_SERVICE_TYPE, HUB_MDNS_TXT_KEYS, AGENT_MDNS_QUERY_NAME, AGENT_MDNS_SERVICE_TYPE, AGENT_MDNS_TXT_KEYS, hubAddressHostname, isDefaultAppConnectionEndpoint, isSingleHubAddressRole, PUBLIC_ENDPOINT_HTTP_REASON, resolveAppConnections, resolveHubAddressRoles, resolveInternalAddress, resolveNotificationTapAddress, resolvePublicEndpoint, SINGLE_HUB_ADDRESS_ROLES, type SingleHubAddressRole, selectAppConnectionEndpoints, validateCustomAddress, } from './hub-address.js';
+export { addonCatalogHref } from './addon-catalog-href.js';
 export { type HfModelResolution, HfModelResolutionSchema, type ILlmProvider, type LlmDefault, LlmDefaultSchema, type LlmDefaultSelector, LlmDefaultSelectorSchema, type LlmProfile, type LlmProfileKind, type LlmProfileKindDescriptor, LlmProfileKindDescriptorSchema, LlmProfileKindSchema, LlmProfileSchema, type LlmRuntimeNode, LlmRuntimeNodeSchema, type LlmUsageRollup, LlmUsageRollupSchema, llmCapability, type ManagedModelCatalogEntry, ManagedModelCatalogEntrySchema, } from './llm.cap.js';
 export { type AppleFmAvailability, AppleFmAvailabilitySchema, type AppleFmUnavailableReason, AppleFmUnavailableReasonSchema, type ILlmRuntimeProvider, type LlmDownloadProgress, LlmDownloadProgressSchema, type LlmNodeModel, LlmNodeModelSchema, type LlmRuntimeAppleCompleteInput, LlmRuntimeAppleCompleteInputSchema, type LlmRuntimeCancelInput, LlmRuntimeCancelInputSchema, type LlmRuntimeCompleteInput, LlmRuntimeCompleteInputSchema, type LlmRuntimeDiskUsage, LlmRuntimeDiskUsageSchema, type LlmRuntimeStatus, LlmRuntimeStatusSchema, llmRuntimeCapability, type ManagedModelExtraFile, ManagedModelExtraFileSchema, type ManagedModelRef, ManagedModelRefSchema, type ManagedRuntimeConfig, ManagedRuntimeConfigSchema, } from './llm-runtime.cap.js';
 export { type LlmErrorCode, LlmErrorCodeSchema, type LlmGenerateBaseInput, LlmGenerateBaseInputSchema, type LlmGenerateErr, LlmGenerateErrSchema, type LlmGenerateOk, LlmGenerateOkSchema, type LlmGenerateResult, LlmGenerateResultSchema, type LlmImage, LlmImageSchema, type LlmRefusalSource, LlmRefusalSourceSchema, type LlmRetryPolicy, LlmRetryPolicySchema, LlmTimeoutDefaults, type LlmUsage, LlmUsageSchema, } from './llm-shared.js';
@@ -89,8 +90,8 @@ export type { IMotionDetectionProvider, MotionAnalysisResult, MotionRegion, } fr
 export { MotionAnalysisResultSchema, MotionRegionSchema, motionDetectionCapability, } from './motion-detection.cap.js';
 export type { BrokerConnectionDetails, BrokerInfo as MqttBrokerInfo, BrokerStatus as MqttBrokerLiveStatus, IMqttBrokerProvider, } from './mqtt-broker.cap.js';
 export { AddBrokerInputSchema, BrokerConnectionDetailsSchema, BrokerInfoSchema as MqttBrokerInfoSchema, MqttBrokerStatusSchema, mqttBrokerCapability, StartEmbeddedInputSchema, } from './mqtt-broker.cap.js';
-export type { NetworkAccessStatus, NetworkEndpoint } from './network-access.cap.js';
-export { NetworkAccessStatusSchema, NetworkEndpointSchema, networkAccessCapability, } from './network-access.cap.js';
+export type { NetworkAccessStatus, NetworkEndpoint, NetworkTunnelStartedData, } from './network-access.cap.js';
+export { NetworkAccessStatusSchema, NetworkEndpointSchema, NetworkTunnelStartedDataSchema, networkAccessCapability, } from './network-access.cap.js';
 export { type Attachment, type AttachmentMediaType, AttachmentMediaTypeSchema, AttachmentSchema, type DiscoveredTarget, DiscoveredTargetSchema, type INotificationOutputProvider, type NotificationAction, type NotificationActionIcon, NotificationActionIconSchema, NotificationActionSchema, type NotificationFormat, NotificationFormatSchema, NotificationSchema, notificationOutputCapability, type ProbeTargetConfigResult, ProbeTargetConfigResultSchema, type RenderedAs, RenderedAsSchema, type SendResult, SendResultSchema, type Target, type TargetKind, type TargetKindCaps, TargetKindCapsSchema, type TargetKindLevel, TargetKindLevelSchema, TargetKindSchema, TargetSchema, type TestResult, TestResultSchema, } from './notification-output.cap.js';
 export { consumableLowPercentOf, type INotificationRulesProvider, isRetiredClearKey, NC_ALARM_DELAY_MAX_SEC, NC_ALARM_NONBLOCKING_MAX, NC_ALARM_SENSORS_MAX, NC_ALARM_SYSTEM_EVENT_KINDS, NC_ALARM_TRIGGERED_MAX_SEC, NC_AUDIO_DBFS_FLOOR, NC_AUTHORABLE_SYSTEM_EVENT_KINDS, NC_BATTERY_CONSUMABLE_SYSTEM_EVENT_KINDS, NC_CLIP_POST_ROLL_DEFAULT_SEC, NC_CLIP_PRE_ROLL_DEFAULT_SEC, NC_CLIP_RETENTION_MAX_SEC, NC_CONDITION_CATALOG, NC_CONFIRM_DEFAULT_MAX_IMAGE_PX, NC_CONFIRM_DEFAULT_TIMEOUT_MS, NC_CONFIRM_MAX_TIMEOUT_MS, NC_CONFIRM_MIN_TIMEOUT_MS, NC_CONSUMABLE_LOW_PERCENT_DEFAULT, NC_CONSUMABLE_LOW_PERCENT_MAX, NC_CONSUMABLE_SYSTEM_EVENT_KINDS, NC_DEFAULT_SNOOZE_MINUTES, NC_GROUPING_DEFAULT_SEC, NC_GROUPING_MAX_SEC, NC_GROUPING_MIN_SEC, NC_HISTORY_LIMIT_DEFAULT, NC_HISTORY_LIMIT_MAX, NC_MAX_PER_TRACK_IMMEDIATE, NC_RULE_CLEARABLE_KEYS, NC_RULE_RETIRED_CLEAR_KEYS, NC_SNOOZE_MAX_MINUTES, NC_TANK_SYSTEM_EVENT_KINDS, type NcActionBinding, NcActionBindingSchema, type NcAlarmBlocking, type NcAlarmBlockingEdit, NcAlarmBlockingEditSchema, NcAlarmBlockingSchema, type NcAlarmConfig, NcAlarmConfigSchema, type NcAlarmCreateProfileInput, NcAlarmCreateProfileInputSchema, type NcAlarmModeCoverage, NcAlarmModeCoverageSchema, type NcAlarmModeDelays, type NcAlarmModeDelaysEdit, NcAlarmModeDelaysEditSchema, NcAlarmModeDelaysSchema, type NcAlarmModeDeviceList, NcAlarmModeDeviceListSchema, type NcAlarmNonBlocking, type NcAlarmNonBlockingEdit, NcAlarmNonBlockingEditSchema, NcAlarmNonBlockingSchema, type NcAlarmPostTriggeredAction, NcAlarmPostTriggeredActionSchema, type NcAlarmProfileIdInput, NcAlarmProfileIdInputSchema, type NcAlarmProfileMeta, NcAlarmProfileMetaSchema, type NcAlarmProfilesView, NcAlarmProfilesViewSchema, type NcAlarmRenameProfileInput, NcAlarmRenameProfileInputSchema, type NcAlarmSecureOnArmEdit, NcAlarmSecureOnArmEditSchema, type NcAlarmSecureOnArmOff, NcAlarmSecureOnArmOffSchema, type NcAlarmSensorReading, NcAlarmSensorReadingSchema, type NcAlarmSensorState, NcAlarmSensorStateSchema, type NcAlarmSensors, type NcAlarmSensorsInput, NcAlarmSensorsInputSchema, NcAlarmSensorsSchema, type NcAlarmSettings, type NcAlarmSettingsPatch, NcAlarmSettingsPatchSchema, NcAlarmSettingsSchema, type NcAlarmSkippedDevice, NcAlarmSkippedDeviceSchema, type NcAlarmSkipReason, NcAlarmSkipReasonSchema, type NcAudioCondition, NcAudioConditionSchema, type NcClipRetentionAsk, NcClipRetentionAskSchema, type NcClipRetentionPlan, NcClipRetentionPlanSchema, type NcConditionDescriptor, NcConditionDescriptorSchema, type NcConditions, NcConditionsSchema, type NcConfirm, type NcConfirmExpect, NcConfirmExpectSchema, NcConfirmSchema, type NcCrossing, NcCrossingSchema, type NcDelivery, NcDeliverySchema, type NcDeviceStateCondition, NcDeviceStateConditionSchema, type NcHistoryEntry, NcHistoryEntrySchema, type NcHistoryFilter, NcHistoryFilterSchema, type NcHistoryRecordKind, NcHistoryRecordKindSchema, type NcHistoryStatus, NcHistoryStatusSchema, type NcHistorySubject, NcHistorySubjectSchema, type NcHookBindings, NcHookBindingsSchema, type NcLegacyRuleActionSequence, NcLegacyRuleActionSequenceSchema, type NcLinkedCameraMode, NcLinkedCameraModeSchema, type NcMediaFrame, NcMediaFrameSchema, type NcMediaPolicy, NcMediaPolicySchema, type NcOccupancyCondition, NcOccupancyConditionSchema, type NcPlateMatcher, NcPlateMatcherSchema, type NcRule, type NcRuleAction, NcRuleActionSchema, type NcRuleActionSequence, NcRuleActionSequenceSchema, type NcRuleActions, NcRuleActionsSchema, type NcRuleClearableKey, NcRuleClearableKeySchema, type NcRuleInput, NcRuleInputSchema, NcRuleKindSchema, type NcRuleLastRun, NcRuleLastRunSchema, type NcRuleLastRuns, NcRuleLastRunsSchema, type NcRuleNotificationButton, NcRuleNotificationButtonSchema, type NcRulePatch, NcRulePatchSchema, NcRuleSchema, type NcRuleTarget, NcRuleTargetSchema, type NcRuleUpdateInput, NcRuleUpdateInputSchema, type NcSceneCondition, NcSceneConditionSchema, type NcSchedule, NcScheduleSchema, type NcScheduleWindow, NcScheduleWindowSchema, type NcSensorTransition, NcSensorTransitionSchema, type NcSharedSequence, type NcSharedSequenceInput, NcSharedSequenceInputSchema, NcSharedSequenceSchema, type NcSnooze, type NcSnoozeInput, NcSnoozeInputSchema, NcSnoozeSchema, type NcSnoozeScope, NcSnoozeScopeSchema, type NcSnoozeSuppressed, NcSnoozeSuppressedSchema, type NcStateSummaryPreview, type NcStateSummaryPreviewRow, NcStateSummaryPreviewRowSchema, NcStateSummaryPreviewSchema, type NcStateSummaryPreviewSection, NcStateSummaryPreviewSectionSchema, type NcStateSummarySectionId, NcStateSummarySectionIdSchema, type NcStateSummarySplit, NcStateSummarySplitSchema, type NcSystemEventCondition, NcSystemEventConditionSchema, type NcSystemEventDelivery, type NcSystemEventDeliveryMode, NcSystemEventDeliveryModeSchema, NcSystemEventDeliverySchema, type NcSystemEventKind, NcSystemEventKindSchema, type NcTemplateFamily, NcTemplateFamilySchema, type NcTemplateField, NcTemplateFieldSchema, type NcTemplatePreview, type NcTemplatePreviewInput, NcTemplatePreviewInputSchema, NcTemplatePreviewSchema, type NcTemplateVarContext, NcTemplateVarContextSchema, type NcTemplateVarDescriptor, NcTemplateVarDescriptorSchema, type NcTemplateVarGroup, NcTemplateVarGroupSchema, type NcTemplateVarKind, NcTemplateVarKindSchema, type NcTestResult, NcTestResultSchema, type NcThrottle, type NcThrottleGranularity, NcThrottleGranularitySchema, NcThrottleSchema, type NcZoneCondition, NcZoneConditionSchema, notificationRulesCapability, } from './notification-rules.cap.js';
 export { type IOauthIntegrationProvider, type OauthIntegrationDescriptor, OauthIntegrationDescriptorSchema, oauthIntegrationCapability, } from './oauth-integration.cap.js';
@@ -137,7 +138,7 @@ export type { IViewerUiProvider } from './viewer-ui.cap.js';
 export { viewerUiCapability } from './viewer-ui.cap.js';
 export { type IWebrtcSessionProvider, WEBRTC_CLIMB_HOLD_CODES, WEBRTC_TRY_BLOCKERS, type WebrtcClientHints, type WebrtcClimbHold, type WebrtcClimbHoldCode, WebrtcClimbHoldSchema, type WebrtcLadderDecision, WebrtcLadderDecisionSchema, type WebrtcSessionDebug, WebrtcSessionDebugSchema, type WebrtcStreamChoice, WebrtcStreamChoiceSchema, type WebrtcStreamTarget, WebrtcStreamTargetSchema, type WebrtcTierFailure, WebrtcTierFailureSchema, type WebrtcTryBlocker, webrtcClientHintsSchema, webrtcSessionCapability, } from './webrtc-session.cap.js';
 export { type AccessoriesStatus, AccessoriesStatusSchema, accessoriesCapability, type IAccessoriesProvider, } from './accessories.cap.js';
-export { AddonAutoUpdateSchema, AddonListItemSchema, AutoUpdateSettingsSchema, addonsCapability, type BulkUpdateItem, type BulkUpdateItemStatus, type BulkUpdatePhase, type BulkUpdateState, CustomActionInputSchema, type IAddonsProvider, InstalledPackageSchema, LogStreamEntrySchema, type PackageInstallation, PackageInstallationSchema, type PackageInstallations, PackageInstallationsSchema, PackageUpdateSchema, PackageVersionInfoSchema, SearchResultSchema, type UninstallNodeOutcome, UninstallNodeOutcomeSchema, type UninstallNodeResult, UninstallNodeResultSchema, type UninstallPackageResult, UninstallPackageResultSchema, } from './addons.cap.js';
+export { AddonAutoUpdateSchema, AddonListItemSchema, AutoUpdateSettingsSchema, addonsCapability, type BulkUpdateItem, type BulkUpdateItemStatus, type BulkUpdatePhase, type BulkUpdateState, CustomActionInputSchema, type IAddonsProvider, InstalledPackageSchema, LogStreamEntrySchema, type AddonSearchResult, type PackageInstallation, PackageInstallationSchema, type PackageInstallations, PackageInstallationsSchema, PackageUpdateSchema, PackageVersionInfoSchema, SearchResultSchema, type UninstallNodeOutcome, UninstallNodeOutcomeSchema, type UninstallNodeResult, UninstallNodeResultSchema, type UninstallPackageResult, UninstallPackageResultSchema, } from './addons.cap.js';
 export { type AirQualitySensorStatus, AirQualitySensorStatusSchema, airQualitySensorCapability, type IAirQualitySensorProvider, } from './air-quality-sensor.cap.js';
 export { type AlarmArmMode, AlarmArmModeSchema, type AlarmPanelStatus, AlarmPanelStatusSchema, type AlarmState, AlarmStateSchema, alarmPanelCapability, type IAlarmPanelProvider, } from './alarm-panel.cap.js';
 export { type AmbientLightSensorStatus, AmbientLightSensorStatusSchema, ambientLightSensorCapability, type IAmbientLightSensorProvider, } from './ambient-light-sensor.cap.js';

package/dist/capabilities/local-network.cap.d.ts

@@ -75,6 +75,7 @@ declare const ConnectionEndpointSchema: z.ZodObject<{
     plausible: z.ZodBoolean;
     plausibleReason: z.ZodString;
     priority: z.ZodNumber;
+    stable: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 /** The port every LAN/loopback `baseUrl` in the same result was built with. */
 declare const AdvertisedLocalPortSchema: z.ZodObject<{
@@ -183,6 +184,7 @@ declare const HubAddressRowSchema: z.ZodObject<{
     plausible: z.ZodBoolean;
     plausibleReason: z.ZodString;
     priority: z.ZodNumber;
+    stable: z.ZodOptional<z.ZodBoolean>;
     detected: z.ZodBoolean;
     custom: z.ZodBoolean;
     flags: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
@@ -229,6 +231,7 @@ declare const HubAddressBookSchema: z.ZodObject<{
         plausible: z.ZodBoolean;
         plausibleReason: z.ZodString;
         priority: z.ZodNumber;
+        stable: z.ZodOptional<z.ZodBoolean>;
         detected: z.ZodBoolean;
         custom: z.ZodBoolean;
         flags: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
@@ -419,6 +422,7 @@ export declare const localNetworkCapability: {
                 plausible: z.ZodBoolean;
                 plausibleReason: z.ZodString;
                 priority: z.ZodNumber;
+                stable: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>>>;
             localPort: z.ZodObject<{
                 port: z.ZodNumber;
@@ -525,6 +529,7 @@ export declare const localNetworkCapability: {
                 plausible: z.ZodBoolean;
                 plausibleReason: z.ZodString;
                 priority: z.ZodNumber;
+                stable: z.ZodOptional<z.ZodBoolean>;
                 detected: z.ZodBoolean;
                 custom: z.ZodBoolean;
                 flags: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
@@ -620,6 +625,7 @@ export declare const localNetworkCapability: {
                 plausible: z.ZodBoolean;
                 plausibleReason: z.ZodString;
                 priority: z.ZodNumber;
+                stable: z.ZodOptional<z.ZodBoolean>;
                 detected: z.ZodBoolean;
                 custom: z.ZodBoolean;
                 flags: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
@@ -709,6 +715,7 @@ export declare const localNetworkCapability: {
                 plausible: z.ZodBoolean;
                 plausibleReason: z.ZodString;
                 priority: z.ZodNumber;
+                stable: z.ZodOptional<z.ZodBoolean>;
                 detected: z.ZodBoolean;
                 custom: z.ZodBoolean;
                 flags: z.ZodReadonly<z.ZodArray<z.ZodEnum<{
@@ -813,6 +820,7 @@ export declare const localNetworkCapability: {
                 plausible: z.ZodBoolean;
                 plausibleReason: z.ZodString;
                 priority: z.ZodNumber;
+                stable: z.ZodOptional<z.ZodBoolean>;
                 detected: z.ZodBoolean;
                 custom: z.ZodBoolean;
                 flags: z.ZodReadonly<z.ZodArray<z.ZodEnum<{

package/dist/capabilities/login-method.cap.d.ts

@@ -60,6 +60,12 @@ export declare const RedirectLoginMethodSchema: z.ZodObject<{
         "second-factor": "second-factor";
     }>;
     linkable: z.ZodOptional<z.ZodBoolean>;
+    app: z.ZodOptional<z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"native">;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"browser">;
+        startPath: z.ZodString;
+    }, z.core.$strip>], "kind">>>;
 }, z.core.$strip>;
 /**
  * A Module-Federation widget the login page mounts for an in-page
@@ -82,6 +88,12 @@ export declare const WidgetLoginMethodSchema: z.ZodObject<{
         primary: "primary";
         "second-factor": "second-factor";
     }>;
+    app: z.ZodOptional<z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"native">;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"browser">;
+        startPath: z.ZodString;
+    }, z.core.$strip>], "kind">>>;
 }, z.core.$strip>;
 /**
  * A declarative WebAuthn ceremony the shell renders natively (no remote
@@ -99,6 +111,12 @@ export declare const PasskeyLoginMethodSchema: z.ZodObject<{
     }>;
     rpId: z.ZodString;
     origin: z.ZodNullable<z.ZodString>;
+    app: z.ZodOptional<z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"native">;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"browser">;
+        startPath: z.ZodString;
+    }, z.core.$strip>], "kind">>>;
 }, z.core.$strip>;
 /** One login-method contribution — redirect button, pre-auth widget, or native passkey ceremony. */
 export declare const LoginMethodContributionSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -112,6 +130,12 @@ export declare const LoginMethodContributionSchema: z.ZodDiscriminatedUnion<[z.Z
         "second-factor": "second-factor";
     }>;
     linkable: z.ZodOptional<z.ZodBoolean>;
+    app: z.ZodOptional<z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"native">;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"browser">;
+        startPath: z.ZodString;
+    }, z.core.$strip>], "kind">>>;
 }, z.core.$strip>, z.ZodObject<{
     kind: z.ZodLiteral<"widget">;
     id: z.ZodString;
@@ -126,6 +150,12 @@ export declare const LoginMethodContributionSchema: z.ZodDiscriminatedUnion<[z.Z
         primary: "primary";
         "second-factor": "second-factor";
     }>;
+    app: z.ZodOptional<z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"native">;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"browser">;
+        startPath: z.ZodString;
+    }, z.core.$strip>], "kind">>>;
 }, z.core.$strip>, z.ZodObject<{
     kind: z.ZodLiteral<"passkey">;
     id: z.ZodString;
@@ -136,6 +166,12 @@ export declare const LoginMethodContributionSchema: z.ZodDiscriminatedUnion<[z.Z
     }>;
     rpId: z.ZodString;
     origin: z.ZodNullable<z.ZodString>;
+    app: z.ZodOptional<z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"native">;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"browser">;
+        startPath: z.ZodString;
+    }, z.core.$strip>], "kind">>>;
 }, z.core.$strip>], "kind">;
 export declare const loginMethodCapability: {
     readonly name: 'login-method';
@@ -154,6 +190,12 @@ export declare const loginMethodCapability: {
                 "second-factor": "second-factor";
             }>;
             linkable: z.ZodOptional<z.ZodBoolean>;
+            app: z.ZodOptional<z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"native">;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"browser">;
+                startPath: z.ZodString;
+            }, z.core.$strip>], "kind">>>;
         }, z.core.$strip>, z.ZodObject<{
             kind: z.ZodLiteral<"widget">;
             id: z.ZodString;
@@ -168,6 +210,12 @@ export declare const loginMethodCapability: {
                 primary: "primary";
                 "second-factor": "second-factor";
             }>;
+            app: z.ZodOptional<z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"native">;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"browser">;
+                startPath: z.ZodString;
+            }, z.core.$strip>], "kind">>>;
         }, z.core.$strip>, z.ZodObject<{
             kind: z.ZodLiteral<"passkey">;
             id: z.ZodString;
@@ -178,6 +226,12 @@ export declare const loginMethodCapability: {
             }>;
             rpId: z.ZodString;
             origin: z.ZodNullable<z.ZodString>;
+            app: z.ZodOptional<z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"native">;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"browser">;
+                startPath: z.ZodString;
+            }, z.core.$strip>], "kind">>>;
         }, z.core.$strip>], "kind">>>, import("./capability-definition.js").CapabilityMethodKind>;
     };
     /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */

package/dist/capabilities/network-access.cap.d.ts

@@ -8,6 +8,16 @@ declare const NetworkEndpointSchema: z.ZodObject<{
         http: "http";
         https: "https";
     }>;
+    stable: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+/**
+ * `data` of a `network.tunnel.started` event — what `local-network` (which
+ * tails the bus and cannot import a provider) learns about the new address.
+ */
+declare const NetworkTunnelStartedDataSchema: z.ZodObject<{
+    url: z.ZodString;
+    stable: z.ZodOptional<z.ZodBoolean>;
+    updated: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 declare const NetworkAccessStatusSchema: z.ZodObject<{
     connected: z.ZodBoolean;
@@ -19,11 +29,13 @@ declare const NetworkAccessStatusSchema: z.ZodObject<{
             http: "http";
             https: "https";
         }>;
+        stable: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type NetworkAccessStatus = z.infer<typeof NetworkAccessStatusSchema>;
 export type NetworkEndpoint = z.infer<typeof NetworkEndpointSchema>;
+export type NetworkTunnelStartedData = z.infer<typeof NetworkTunnelStartedDataSchema>;
 /**
  * Optional, richer endpoint shape returned by providers that expose
  * MORE than one ingress concurrently (Tailscale Ingress with mixed
@@ -40,6 +52,7 @@ declare const NetworkEndpointEntrySchema: z.ZodObject<{
         http: "http";
         https: "https";
     }>;
+    stable: z.ZodOptional<z.ZodBoolean>;
     id: z.ZodString;
     label: z.ZodString;
     mode: z.ZodOptional<z.ZodString>;
@@ -59,6 +72,7 @@ export declare const networkAccessCapability: {
                 http: "http";
                 https: "https";
             }>;
+            stable: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>, "mutation">;
         readonly stop: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodVoid, "mutation">;
         readonly getEndpoint: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodNullable<z.ZodObject<{
@@ -69,6 +83,7 @@ export declare const networkAccessCapability: {
                 http: "http";
                 https: "https";
             }>;
+            stable: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>, import("./capability-definition.js").CapabilityMethodKind>;
         readonly getStatus: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodObject<{
             connected: z.ZodBoolean;
@@ -80,6 +95,7 @@ export declare const networkAccessCapability: {
                     http: "http";
                     https: "https";
                 }>;
+                stable: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>>;
             error: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
@@ -96,6 +112,7 @@ export declare const networkAccessCapability: {
                 http: "http";
                 https: "https";
             }>;
+            stable: z.ZodOptional<z.ZodBoolean>;
             id: z.ZodString;
             label: z.ZodString;
             mode: z.ZodOptional<z.ZodString>;
@@ -104,4 +121,4 @@ export declare const networkAccessCapability: {
     };
 };
 export type INetworkAccessProvider = InferProvider<typeof networkAccessCapability>;
-export { NetworkEndpointSchema, NetworkAccessStatusSchema, NetworkEndpointEntrySchema };
+export { NetworkEndpointSchema, NetworkTunnelStartedDataSchema, NetworkAccessStatusSchema, NetworkEndpointEntrySchema, };

package/dist/capabilities/sso-bridge.cap.d.ts

@@ -79,6 +79,15 @@ declare const SsoBridgeClaimsSchema: z.ZodObject<{
     linkIntent: z.ZodOptional<z.ZodString>;
     issuer: z.ZodOptional<z.ZodString>;
     browserBinding: z.ZodOptional<z.ZodString>;
+    app: z.ZodOptional<z.ZodObject<{
+        codeChallenge: z.ZodString;
+        state: z.ZodString;
+        purpose: z.ZodEnum<{
+            "new-session": "new-session";
+            "step-up": "step-up";
+        }>;
+        redirect: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export declare const ssoBridgeCapability: {
     readonly name: 'sso-bridge';
@@ -166,6 +175,15 @@ export declare const ssoBridgeCapability: {
                 linkIntent: z.ZodOptional<z.ZodString>;
                 issuer: z.ZodOptional<z.ZodString>;
                 browserBinding: z.ZodOptional<z.ZodString>;
+                app: z.ZodOptional<z.ZodObject<{
+                    codeChallenge: z.ZodString;
+                    state: z.ZodString;
+                    purpose: z.ZodEnum<{
+                        "new-session": "new-session";
+                        "step-up": "step-up";
+                    }>;
+                    redirect: z.ZodString;
+                }, z.core.$strip>>;
             }, z.core.$strip>;
             ttlSec: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodLiteral<"never">]>>;
         }, z.core.$strip>, z.ZodObject<{
@@ -238,6 +256,15 @@ export declare const ssoBridgeCapability: {
             linkIntent: z.ZodOptional<z.ZodString>;
             issuer: z.ZodOptional<z.ZodString>;
             browserBinding: z.ZodOptional<z.ZodString>;
+            app: z.ZodOptional<z.ZodObject<{
+                codeChallenge: z.ZodString;
+                state: z.ZodString;
+                purpose: z.ZodEnum<{
+                    "new-session": "new-session";
+                    "step-up": "step-up";
+                }>;
+                redirect: z.ZodString;
+            }, z.core.$strip>>;
         }, z.core.$strip>>, import("./capability-definition.js").CapabilityMethodKind>;
     };
 };

package/dist/client.js

@@ -558,6 +558,12 @@ zod.z.object({
 	codec: zod.z.string().optional(),
 	resolution: CamStreamResolutionSchema.optional()
 });
+zod.z.enum(["new-session", "step-up"]);
+/** How a native app starts one login method (D858), as `auth.listLoginMethods` reports it. */
+var AppLoginPathSchema = zod.z.discriminatedUnion("kind", [zod.z.object({ kind: zod.z.literal("native") }), zod.z.object({
+	kind: zod.z.literal("browser"),
+	startPath: zod.z.string().startsWith("/")
+})]);
 //#endregion
 //#region src/auth/device-certificate.ts
 /**
@@ -790,7 +796,9 @@ zod.z.object({
 	signature: zod.z.literal(DEVICE_CERT_SIGNATURE),
 	messageVersion: zod.z.literal(DEVICE_SIGNATURE_MESSAGE_VERSION),
 	/** Which clients can execute it: a native app silently, a browser with a non-extractable WebCrypto key. */
-	clients: zod.z.array(zod.z.enum(["native", "web"]))
+	clients: zod.z.array(zod.z.enum(["native", "web"])),
+	/** The app executes it itself, silently (D858). */
+	app: AppLoginPathSchema.nullable()
 });
 //#endregion
 //#region src/catalogs/sensor-active-state.ts

package/dist/client.mjs

@@ -557,6 +557,12 @@ z.object({
 	codec: z.string().optional(),
 	resolution: CamStreamResolutionSchema.optional()
 });
+z.enum(["new-session", "step-up"]);
+/** How a native app starts one login method (D858), as `auth.listLoginMethods` reports it. */
+var AppLoginPathSchema = z.discriminatedUnion("kind", [z.object({ kind: z.literal("native") }), z.object({
+	kind: z.literal("browser"),
+	startPath: z.string().startsWith("/")
+})]);
 //#endregion
 //#region src/auth/device-certificate.ts
 /**
@@ -789,7 +795,9 @@ z.object({
 	signature: z.literal(DEVICE_CERT_SIGNATURE),
 	messageVersion: z.literal(DEVICE_SIGNATURE_MESSAGE_VERSION),
 	/** Which clients can execute it: a native app silently, a browser with a non-extractable WebCrypto key. */
-	clients: z.array(z.enum(["native", "web"]))
+	clients: z.array(z.enum(["native", "web"])),
+	/** The app executes it itself, silently (D858). */
+	app: AppLoginPathSchema.nullable()
 });
 //#endregion
 //#region src/catalogs/sensor-active-state.ts