@camstack/types 1.2.373 → 1.2.375

package/dist/addon.d.ts

@@ -17,6 +17,8 @@
  * See memory: camstack_runner_ram_and_build_rootcause.
  */
 export { BaseAddon, normalizeAddonInitResult } from './addon/base-addon.js';
+export { ErrorI18nPayloadSchema, readErrorI18n } from './i18n/camstack-error.js';
+export type { ErrorI18nPayload } from './i18n/camstack-error.js';
 export { nodePin, readNodePin } from './cap-call-context.js';
 export type { IAdminUiProvider } from './capabilities/admin-ui.cap.js';
 export { adminUiCapability } from './capabilities/admin-ui.cap.js';

package/dist/addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-DnQ5WsMI.js");
+const require_sleep = require("./sleep-rqlHXgwb.js");
 const require_event_category = require("./event-category-T43rdQWR.js");
-const require_err_msg = require("./err-msg-Dx2Kor0g.js");
+const require_err_msg = require("./err-msg-Ls8Q6dHO.js");
 //#region src/generated/cap-input-defaults.ts
 /**
 * AUTO-GENERATED by scripts/generate-cap-input-defaults.ts — DO NOT EDIT.
@@ -355,7 +355,7 @@ function materialise(defaults) {
 * barrel (`ALL_CAPABILITY_DEFINITIONS`), which would cost ~144MB RSS per
 * forked runner. See docs/decisions/adr-0028.md.
 *
-* Coverage: 26 collection caps, 45 array methods.
+* Coverage: 27 collection caps, 46 array methods.
 */
 var COLLECTION_ARRAY_METHODS = Object.freeze({
 	"addon-pages-source": ["listPages"],
@@ -368,6 +368,7 @@ var COLLECTION_ARRAY_METHODS = Object.freeze({
 	"device-export": ["listExposedDevices", "listSupportedDeviceKinds"],
 	"device-extension": ["listSlots", "listSources"],
 	"device-provider": ["discoverDevices", "getDevices"],
+	"device-removal-hook": ["listDeviceData"],
 	"failure-contribution": ["list"],
 	"llm": [
 		"getDefaults",
@@ -2131,6 +2132,7 @@ exports.DEVICE_CHILDREN_BATCH_MAX = require_sleep.DEVICE_CHILDREN_BATCH_MAX;
 exports.DEVICE_SCOPED_CAPS = require_sleep.DEVICE_SCOPED_CAPS;
 exports.DeviceType = require_err_msg.DeviceType;
 exports.DisposerChain = require_sleep.DisposerChain;
+exports.ErrorI18nPayloadSchema = require_sleep.ErrorI18nPayloadSchema;
 exports.EventCategory = require_event_category.EventCategory;
 exports.HF_REPO = require_sleep.HF_REPO;
 exports.MIN_SCRUBBED_LENGTH = require_sleep.MIN_SCRUBBED_LENGTH;
@@ -2183,6 +2185,7 @@ exports.normalizeAddonInitResult = require_sleep.normalizeAddonInitResult;
 exports.normalizeSecretOwner = require_sleep.normalizeSecretOwner;
 exports.parseJsonUnknown = require_sleep.parseJsonUnknown;
 exports.parseSecretRef = require_sleep.parseSecretRef;
+exports.readErrorI18n = require_sleep.readErrorI18n;
 exports.readNodePin = require_sleep.readNodePin;
 exports.registerKnownSecret = require_sleep.registerKnownSecret;
 exports.resolveSecretViewsIn = require_sleep.resolveSecretViewsIn;

package/dist/addon.mjs

@@ -1,6 +1,6 @@
-import { A as viewerUiCapability, At as createSecretsAccess, Bt as PEER_BYTES_STALL_MS, C as isZodSecret, Cn as isSecretClear, Dn as makeSecretMarker, E as HF_REPO, En as isSecretMarkerLike, Ft as registerKnownSecret, Gt as DisposerChain, I as adminUiCapability, It as scrubKnownSecrets, Kt as BaseAddon, Lt as shortSecretRefHash, Mt as clearKnownSecrets, Nt as forgetKnownSecret, On as toSecretFieldView, Ot as resolveSecretViewsIn, P as describeCustomActions, Pt as knownSecretCount, Q as readNodePin, Rt as PEER_BYTES_CHUNK_BYTES, S as collectZodSecretPaths, Sn as classifySecretWrite, Tn as isSecretMarker, Ut as DATAPLANE_SECRET_HEADER, Vt as PEER_BYTES_TICKET_TTL_MS, W as expandCapMethods, Z as nodePin, _ as createEventBusSliceSource, an as formatSecretScope, at as scopeKey, c as asString, cn as normalizeSecretOwner, d as parseJsonUnknown, et as MODEL_FORMATS, f as hfModelUrl, fn as createEvent, g as createDeviceProxy, h as isDeviceScopedCap, in as buildSecretRef, j as DEVICE_CHILDREN_BATCH_MAX, jt as MIN_SCRUBBED_LENGTH, k as deviceOpsCapability, kt as REVALIDATE_AFTER_MS, ln as parseSecretRef, m as DEVICE_SCOPED_CAPS, nn as SECRET_REF_SCHEME, nt as ReadinessTimeoutError, o as asJsonObject, on as globalSecretScope, p as BOOT_RECOVERY_BACKOFF_MS, pn as emitReadiness, qt as normalizeAddonInitResult, r as maskUrlCredentials, rn as arrayItemFieldPath, sn as isSecretRef, t as sleep, tt as ReadinessRegistry, wn as isSecretFieldView, xn as SECRET_CLEAR, zt as PEER_BYTES_MAX_OUTSTANDING } from "./sleep-DAX0-2v9.mjs";
+import { An as isSecretMarker, Bt as registerKnownSecret, D as collectZodSecretPaths, Dn as classifySecretWrite, En as SECRET_CLEAR, F as viewerUiCapability, Ft as createSecretsAccess, Gt as PEER_BYTES_STALL_MS, Ht as shortSecretRefHash, I as DEVICE_CHILDREN_BATCH_MAX, It as MIN_SCRUBBED_LENGTH, Jt as DATAPLANE_SECRET_HEADER, Kt as PEER_BYTES_TICKET_TTL_MS, Lt as clearKnownSecrets, Mn as makeSecretMarker, Nn as toSecretFieldView, Nt as resolveSecretViewsIn, O as isZodSecret, On as isSecretClear, P as deviceOpsCapability, Pt as REVALIDATE_AFTER_MS, Qt as normalizeAddonInitResult, Rt as forgetKnownSecret, S as createEventBusSliceSource, Ut as PEER_BYTES_CHUNK_BYTES, V as adminUiCapability, Vt as scrubKnownSecrets, Wt as PEER_BYTES_MAX_OUTSTANDING, Xt as DisposerChain, Y as expandCapMethods, Zt as BaseAddon, _ as readErrorI18n, _n as createEvent, at as MODEL_FORMATS, b as isDeviceScopedCap, c as asString, cn as arrayItemFieldPath, d as parseJsonUnknown, dn as globalSecretScope, f as hfModelUrl, fn as isSecretRef, g as ErrorI18nPayloadSchema, j as HF_REPO, jn as isSecretMarkerLike, kn as isSecretFieldView, ln as buildSecretRef, mn as parseSecretRef, nt as nodePin, o as asJsonObject, ot as ReadinessRegistry, p as BOOT_RECOVERY_BACKOFF_MS, pn as normalizeSecretOwner, r as maskUrlCredentials, rt as readNodePin, sn as SECRET_REF_SCHEME, st as ReadinessTimeoutError, t as sleep, un as formatSecretScope, ut as scopeKey, vn as emitReadiness, x as createDeviceProxy, y as DEVICE_SCOPED_CAPS, z as describeCustomActions, zt as knownSecretCount } from "./sleep-DRqxtc0C.mjs";
 import { t as EventCategory } from "./event-category-C4hVnRo8.mjs";
-import { a as DeviceType, t as errMsg } from "./err-msg-DX6i_MY4.mjs";
+import { a as DeviceType, t as errMsg } from "./err-msg-DLerKiVO.mjs";
 //#region src/generated/cap-input-defaults.ts
 /**
 * AUTO-GENERATED by scripts/generate-cap-input-defaults.ts — DO NOT EDIT.
@@ -354,7 +354,7 @@ function materialise(defaults) {
 * barrel (`ALL_CAPABILITY_DEFINITIONS`), which would cost ~144MB RSS per
 * forked runner. See docs/decisions/adr-0028.md.
 *
-* Coverage: 26 collection caps, 45 array methods.
+* Coverage: 27 collection caps, 46 array methods.
 */
 var COLLECTION_ARRAY_METHODS = Object.freeze({
 	"addon-pages-source": ["listPages"],
@@ -367,6 +367,7 @@ var COLLECTION_ARRAY_METHODS = Object.freeze({
 	"device-export": ["listExposedDevices", "listSupportedDeviceKinds"],
 	"device-extension": ["listSlots", "listSources"],
 	"device-provider": ["discoverDevices", "getDevices"],
+	"device-removal-hook": ["listDeviceData"],
 	"failure-contribution": ["list"],
 	"llm": [
 		"getDefaults",
@@ -2119,4 +2120,4 @@ var CAP_STATE_LEAVES = Object.freeze({
 	]
 });
 //#endregion
-export { BOOT_RECOVERY_BACKOFF_MS, BaseAddon, CAP_ADVANCE_FIELDS, CAP_INPUT_DEFAULTS, CAP_STATE_LEAVES, COLLECTION_ARRAY_METHODS, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DEVICE_SCOPED_CAPS, DeviceType, DisposerChain, EventCategory, HF_REPO, MIN_SCRUBBED_LENGTH, MODEL_FORMATS, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, PROVIDER_OPTIONAL_METHODS, REVALIDATE_AFTER_MS, ReadinessRegistry, ReadinessTimeoutError, SECRET_CLEAR, SECRET_REF_SCHEME, adminUiCapability, arrayItemFieldPath, asJsonObject, asString, buildSecretRef, classifySecretWrite, clearKnownSecrets, collectZodSecretPaths, createDeviceProxy, createEvent, createEventBusSliceSource, createSecretsAccess, describeCustomActions, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods, forgetKnownSecret, formatSecretScope, globalSecretScope, hfModelUrl, isCollectionArrayMethodName, isDeviceScopedCap, isProviderOptionalMethodName, isSecretClear, isSecretFieldView, isSecretMarker, isSecretMarkerLike, isSecretRef, isZodSecret, knownSecretCount, makeSecretMarker, maskUrlCredentials, nodePin, normalizeAddonInitResult, normalizeSecretOwner, parseJsonUnknown, parseSecretRef, readNodePin, registerKnownSecret, resolveSecretViewsIn, scopeKey, scrubKnownSecrets, shortSecretRefHash, sleep, toSecretFieldView, viewerUiCapability, withCapInputDefaults };
+export { BOOT_RECOVERY_BACKOFF_MS, BaseAddon, CAP_ADVANCE_FIELDS, CAP_INPUT_DEFAULTS, CAP_STATE_LEAVES, COLLECTION_ARRAY_METHODS, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DEVICE_SCOPED_CAPS, DeviceType, DisposerChain, ErrorI18nPayloadSchema, EventCategory, HF_REPO, MIN_SCRUBBED_LENGTH, MODEL_FORMATS, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, PROVIDER_OPTIONAL_METHODS, REVALIDATE_AFTER_MS, ReadinessRegistry, ReadinessTimeoutError, SECRET_CLEAR, SECRET_REF_SCHEME, adminUiCapability, arrayItemFieldPath, asJsonObject, asString, buildSecretRef, classifySecretWrite, clearKnownSecrets, collectZodSecretPaths, createDeviceProxy, createEvent, createEventBusSliceSource, createSecretsAccess, describeCustomActions, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods, forgetKnownSecret, formatSecretScope, globalSecretScope, hfModelUrl, isCollectionArrayMethodName, isDeviceScopedCap, isProviderOptionalMethodName, isSecretClear, isSecretFieldView, isSecretMarker, isSecretMarkerLike, isSecretRef, isZodSecret, knownSecretCount, makeSecretMarker, maskUrlCredentials, nodePin, normalizeAddonInitResult, normalizeSecretOwner, parseJsonUnknown, parseSecretRef, readErrorI18n, readNodePin, registerKnownSecret, resolveSecretViewsIn, scopeKey, scrubKnownSecrets, shortSecretRefHash, sleep, toSecretFieldView, viewerUiCapability, withCapInputDefaults };

package/dist/capabilities/addon-settings.cap.d.ts

@@ -9,7 +9,9 @@ declare const ConfigTabDeclarationSchema: z.ZodObject<{
 declare const ConfigSectionWithValuesSchema: z.ZodObject<{
     id: z.ZodString;
     title: z.ZodString;
+    titleKey: z.ZodOptional<z.ZodString>;
     description: z.ZodOptional<z.ZodString>;
+    descriptionKey: z.ZodOptional<z.ZodString>;
     style: z.ZodOptional<z.ZodEnum<{
         accordion: "accordion";
         card: "card";
@@ -34,7 +36,9 @@ declare const SettingsSchemaWithValuesSchema: z.ZodObject<{
     sections: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         title: z.ZodString;
+        titleKey: z.ZodOptional<z.ZodString>;
         description: z.ZodOptional<z.ZodString>;
+        descriptionKey: z.ZodOptional<z.ZodString>;
         style: z.ZodOptional<z.ZodEnum<{
             accordion: "accordion";
             card: "card";
@@ -103,7 +107,9 @@ export declare const addonSettingsCapability: {
             sections: z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 title: z.ZodString;
+                titleKey: z.ZodOptional<z.ZodString>;
                 description: z.ZodOptional<z.ZodString>;
+                descriptionKey: z.ZodOptional<z.ZodString>;
                 style: z.ZodOptional<z.ZodEnum<{
                     accordion: "accordion";
                     card: "card";
@@ -139,7 +145,9 @@ export declare const addonSettingsCapability: {
             sections: z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 title: z.ZodString;
+                titleKey: z.ZodOptional<z.ZodString>;
                 description: z.ZodOptional<z.ZodString>;
+                descriptionKey: z.ZodOptional<z.ZodString>;
                 style: z.ZodOptional<z.ZodEnum<{
                     accordion: "accordion";
                     card: "card";
@@ -169,7 +177,9 @@ export declare const addonSettingsCapability: {
             sections: z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 title: z.ZodString;
+                titleKey: z.ZodOptional<z.ZodString>;
                 description: z.ZodOptional<z.ZodString>;
+                descriptionKey: z.ZodOptional<z.ZodString>;
                 style: z.ZodOptional<z.ZodEnum<{
                     accordion: "accordion";
                     card: "card";

package/dist/capabilities/core-blocks.cap.d.ts

@@ -2497,7 +2497,9 @@ export declare const coreBlocksCapability: {
             sections: z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 title: z.ZodString;
+                titleKey: z.ZodOptional<z.ZodString>;
                 description: z.ZodOptional<z.ZodString>;
+                descriptionKey: z.ZodOptional<z.ZodString>;
                 style: z.ZodOptional<z.ZodEnum<{
                     accordion: "accordion";
                     card: "card";

package/dist/capabilities/device-manager.cap.d.ts

@@ -295,6 +295,38 @@ export declare const DeviceRegisterPayloadSchema: z.ZodObject<{
     config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     secretConfigPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;
+/** One deleted device, kept by device-manager so an addon that missed the
+ *  deletion can still learn of it (D865). Written by the delete path ONLY. */
+export declare const DeviceTombstoneSchema: z.ZodObject<{
+    deviceId: z.ZodNumber;
+    deletedAt: z.ZodNumber;
+    providerAddonId: z.ZodString;
+}, z.core.$strip>;
+export type DeviceTombstone = z.infer<typeof DeviceTombstoneSchema>;
+/** How long a tombstone stays readable. Past it, a device that was deleted
+ *  and never cleaned is only reachable by the admin "clean data of deleted
+ *  devices" action. */
+export declare const DEVICE_TOMBSTONE_RETENTION_MS: number;
+/** Data held for one device that device-manager no longer knows. */
+export declare const OrphanDeviceDataSchema: z.ZodObject<{
+    deviceId: z.ZodNumber;
+    stores: z.ZodRecord<z.ZodString, z.ZodNumber>;
+}, z.core.$strip>;
+export type OrphanDeviceData = z.infer<typeof OrphanDeviceDataSchema>;
+export declare const CleanupDeletedDevicesResultSchema: z.ZodObject<{
+    status: z.ZodEnum<{
+        cleaned: "cleaned";
+        "dry-run": "dry-run";
+        skipped: "skipped";
+    }>;
+    reason: z.ZodNullable<z.ZodString>;
+    devices: z.ZodArray<z.ZodObject<{
+        deviceId: z.ZodNumber;
+        stores: z.ZodRecord<z.ZodString, z.ZodNumber>;
+    }, z.core.$strip>>;
+    unreachable: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type CleanupDeletedDevicesResult = z.infer<typeof CleanupDeletedDevicesResultSchema>;
 export declare const DeviceRemovePayloadSchema: z.ZodObject<{
     deviceId: z.ZodNumber;
 }, z.core.$strip>;
@@ -1255,6 +1287,44 @@ export declare const deviceManagerCapability: {
         }, z.core.$strip>, z.ZodObject<{
             success: z.ZodLiteral<true>;
         }, z.core.$strip>, "mutation">;
+        /**
+         * The tombstones of devices deleted at or after `sinceMs` (D865). The
+         * reconcile feed of every `device-removal-hook` implementer: an addon that
+         * was down when a device was deleted asks here at start and periodically.
+         * A tombstone exists only for a DELETE — never for a device that is merely
+         * unregistered, offline or whose provider is restarting. Tombstones older
+         * than `DEVICE_TOMBSTONE_RETENTION_MS` are gone.
+         */
+        readonly listDeletedSince: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            sinceMs: z.ZodNumber;
+        }, z.core.$strip>, z.ZodReadonly<z.ZodArray<z.ZodObject<{
+            deviceId: z.ZodNumber;
+            deletedAt: z.ZodNumber;
+            providerAddonId: z.ZodString;
+        }, z.core.$strip>>>, import("./capability-definition.js").CapabilityMethodKind>;
+        /**
+         * Admin-triggered clean-up of data that belongs to devices deleted BEFORE
+         * tombstones existed (D865). Asks every `device-removal-hook` implementer
+         * which device ids it holds data for, keeps those absent from the device
+         * list — confirmed by TWO reads of the list, skipped if either fails — and
+         * with `confirm: false` only reports the counts per store. `confirm: true`
+         * deletes. Never runs on its own.
+         */
+        readonly cleanupDeletedDevicesData: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            confirm: z.ZodBoolean;
+        }, z.core.$strip>, z.ZodObject<{
+            status: z.ZodEnum<{
+                cleaned: "cleaned";
+                "dry-run": "dry-run";
+                skipped: "skipped";
+            }>;
+            reason: z.ZodNullable<z.ZodString>;
+            devices: z.ZodArray<z.ZodObject<{
+                deviceId: z.ZodNumber;
+                stores: z.ZodRecord<z.ZodString, z.ZodNumber>;
+            }, z.core.$strip>>;
+            unreachable: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, "mutation">;
         /** Cascade-delete every top-level device whose `integrationId` matches.
          *  Children cascade automatically via the per-parent remove path.
          *  Idempotent: a device whose `integrationId` was never set never matches.
@@ -1470,7 +1540,9 @@ export declare const deviceManagerCapability: {
             sections: z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 title: z.ZodString;
+                titleKey: z.ZodOptional<z.ZodString>;
                 description: z.ZodOptional<z.ZodString>;
+                descriptionKey: z.ZodOptional<z.ZodString>;
                 style: z.ZodOptional<z.ZodEnum<{
                     accordion: "accordion";
                     card: "card";
@@ -1498,7 +1570,9 @@ export declare const deviceManagerCapability: {
             sections: z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 title: z.ZodString;
+                titleKey: z.ZodOptional<z.ZodString>;
                 description: z.ZodOptional<z.ZodString>;
+                descriptionKey: z.ZodOptional<z.ZodString>;
                 style: z.ZodOptional<z.ZodEnum<{
                     accordion: "accordion";
                     card: "card";
@@ -1535,7 +1609,9 @@ export declare const deviceManagerCapability: {
                 sections: z.ZodArray<z.ZodObject<{
                     id: z.ZodString;
                     title: z.ZodString;
+                    titleKey: z.ZodOptional<z.ZodString>;
                     description: z.ZodOptional<z.ZodString>;
+                    descriptionKey: z.ZodOptional<z.ZodString>;
                     style: z.ZodOptional<z.ZodEnum<{
                         accordion: "accordion";
                         card: "card";
@@ -1561,7 +1637,9 @@ export declare const deviceManagerCapability: {
                 sections: z.ZodArray<z.ZodObject<{
                     id: z.ZodString;
                     title: z.ZodString;
+                    titleKey: z.ZodOptional<z.ZodString>;
                     description: z.ZodOptional<z.ZodString>;
+                    descriptionKey: z.ZodOptional<z.ZodString>;
                     style: z.ZodOptional<z.ZodEnum<{
                         accordion: "accordion";
                         card: "card";

package/dist/capabilities/device-removal-hook.cap.d.ts

@@ -0,0 +1,93 @@
+/**
+ * `device-removal-hook` — the reliable way an addon learns a device was DELETED,
+ * so it can delete what it keeps for that device (D865).
+ *
+ * ## Why an event was not enough
+ *
+ * `DeviceUnregistered` is telemetry and may be dropped (D8, D11). An addon that
+ * hung its per-device clean-up on it left durable garbage whenever the event was
+ * lost, the addon was down, or it was restarting at that moment — footage,
+ * analytics rows and settings of device 4483 outlived the device. Loss of this
+ * signal corrupts durable state, so it travels by RPC with a recorded fact
+ * behind it (D8: "if loss would corrupt durable state, use RPC plus a reconcile").
+ *
+ * ## The three pieces
+ *
+ * 1. device-manager records a TOMBSTONE per deleted device
+ *    (`deviceManager.listDeletedSince`). The tombstone is written by the delete
+ *    path only — a device that is unregistered, offline or whose provider is
+ *    restarting is NOT deleted and gets none.
+ * 2. After a delete, device-manager calls `onDeviceRemoved` on EVERY provider of
+ *    this collection, one by one, with bounded retries, logged.
+ * 3. An implementer that was down asks `deviceManager.listDeletedSince` at start
+ *    (and periodically) and runs its own `onDeviceRemoved` for each tombstone it
+ *    may have missed. Reconcile is driven by tombstones, never by "the device is
+ *    not in the current list": a failed or partial list read must not destroy data.
+ *
+ * ## Contract for an implementer
+ *
+ * - **Idempotent.** It is called again by a retry, by a reconcile and by the
+ *   admin cleanup of data that predates tombstones. A device with nothing left
+ *   answers zero counts.
+ * - **One key per store** in `counts`, deleted rows/files per store, so the log
+ *   line and the admin dry run can say where the data was.
+ * - **Training datasets are NOT device data** and are never deleted by a hook.
+ * - **Per-device SETTINGS are not hooked.** Configuration lives in the standard
+ *   per-device store (`ctx.settings.*DeviceStore`), which device-manager clears
+ *   for every addon centrally at delete time. This hook is for device DATA
+ *   that is not settings: footage, event media, analytics rows, history.
+ * - A provider that cannot tell is allowed to throw; the caller retries it.
+ *
+ * `listDeviceData` is the read side of the admin "Clean data of deleted devices"
+ * action: which device ids this addon holds data for, and how much per store. It
+ * never deletes. device-manager decides which of those ids are absent from the
+ * fleet, from TWO consistent reads of the device list (D49).
+ */
+import { z } from 'zod';
+import { type InferProvider } from './capability-definition.js';
+/** What a hook is told about the deletion. */
+export declare const DeviceRemovedInputSchema: z.ZodObject<{
+    deviceId: z.ZodNumber;
+    deletedAt: z.ZodNumber;
+    providerAddonId: z.ZodString;
+}, z.core.$strip>;
+export type DeviceRemovedInput = z.infer<typeof DeviceRemovedInputSchema>;
+/** Rows/files/refs deleted, per store this implementer owns. */
+export declare const DeviceRemovedResultSchema: z.ZodObject<{
+    counts: z.ZodRecord<z.ZodString, z.ZodNumber>;
+}, z.core.$strip>;
+export type DeviceRemovedResult = z.infer<typeof DeviceRemovedResultSchema>;
+/** One (store, device) pair an implementer holds data for. */
+export declare const DeviceDataEntrySchema: z.ZodObject<{
+    store: z.ZodString;
+    deviceId: z.ZodNumber;
+    count: z.ZodNumber;
+}, z.core.$strip>;
+export type DeviceDataEntry = z.infer<typeof DeviceDataEntrySchema>;
+export declare const deviceRemovalHookCapability: {
+    readonly name: 'device-removal-hook';
+    readonly scope: 'system';
+    readonly mode: 'collection';
+    readonly internal: true;
+    readonly methods: {
+        /** Delete everything this addon keeps for the deleted device. Idempotent. */
+        readonly onDeviceRemoved: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            deviceId: z.ZodNumber;
+            deletedAt: z.ZodNumber;
+            providerAddonId: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            counts: z.ZodRecord<z.ZodString, z.ZodNumber>;
+        }, z.core.$strip>, "mutation">;
+        /** Which devices this addon holds data for, per store. Reads only. */
+        readonly listDeviceData: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodReadonly<z.ZodArray<z.ZodObject<{
+            store: z.ZodString;
+            deviceId: z.ZodNumber;
+            count: z.ZodNumber;
+        }, z.core.$strip>>>, import("./capability-definition.js").CapabilityMethodKind>;
+    };
+    /** In-process only — enumerated through `addons.listCapabilityProviders`. */
+    readonly mount: {
+        readonly kind: 'skip';
+    };
+};
+export type IDeviceRemovalHookProvider = InferProvider<typeof deviceRemovalHookCapability>;

package/dist/capabilities/index.d.ts

@@ -60,12 +60,14 @@ export type { IDeviceExportProvider } from './device-export.cap.js';
 export { DeviceExportStatusSchema, deviceExportCapability, ExportSetupFieldSchema, ExportSetupSchema, ExposedDeviceSchema, ExposeInputSchema as DeviceExportExposeInputSchema, UnexposeInputSchema as DeviceExportUnexposeInputSchema, } from './device-export.cap.js';
 export type { ExtensionCandidate, ExtensionCandidates, ExtensionSetResult, ExtensionSetSlotInput, ExtensionSlotActivation, ExtensionSlotRefInput, ExtensionSlotRow, ExtensionSlotSource, ExtensionSlotState, ExtensionSlotUnreachable, ExtensionSource, ExtensionSourceAvailability, ExtensionSourceHealth, IDeviceExtensionProvider, } from './device-extension.cap.js';
 export { deviceExtensionCapability, EXTENSION_SLOT_LISTING_METHOD, EXTENSION_SLOT_REF_SEPARATOR, ExtensionCandidateSchema, ExtensionCandidatesSchema, ExtensionSetResultSchema, ExtensionSetSlotInputSchema, ExtensionSlotActivationSchema, ExtensionSlotRefInputSchema, ExtensionSlotRowSchema, ExtensionSlotSourceSchema, ExtensionSlotStateSchema, ExtensionSlotUnreachableSchema, ExtensionSourceAvailabilitySchema, ExtensionSourceHealthSchema, ExtensionSourceSchema, unreachableExtensionSlotRow, } from './device-extension.cap.js';
-export type { DeviceInfo, DeviceManagerApplyInitialMetaInput } from './device-manager.cap.js';
-export { ConfigEntrySchema, DEVICE_CHILDREN_BATCH_MAX, DeviceInfoSchema, deviceManagerCapability, type IDeviceManagerProvider, LINKED_DEVICES_SLOT, type LinkedDevice, LinkedDeviceSchema, type LinkedDevicesMode, LinkedDevicesModeSchema, type LinkedDevicesSlotValue, LinkedDevicesSlotValueSchema, type MigrateDeviceResult, MigrateDeviceResultSchema, type MigrateSwitchOutcome, MigrateSwitchOutcomeSchema, type MigrateSwitchReport, MigrateSwitchReportSchema, type WrapperActivationRead, WrapperActivationReadSchema, } from './device-manager.cap.js';
+export type { CleanupDeletedDevicesResult, DeviceInfo, DeviceManagerApplyInitialMetaInput, DeviceTombstone, OrphanDeviceData, } from './device-manager.cap.js';
+export { CleanupDeletedDevicesResultSchema, ConfigEntrySchema, DEVICE_CHILDREN_BATCH_MAX, DEVICE_TOMBSTONE_RETENTION_MS, DeviceInfoSchema, DeviceTombstoneSchema, OrphanDeviceDataSchema, deviceManagerCapability, type IDeviceManagerProvider, LINKED_DEVICES_SLOT, type LinkedDevice, LinkedDeviceSchema, type LinkedDevicesMode, LinkedDevicesModeSchema, type LinkedDevicesSlotValue, LinkedDevicesSlotValueSchema, type MigrateDeviceResult, MigrateDeviceResultSchema, type MigrateSwitchOutcome, MigrateSwitchOutcomeSchema, type MigrateSwitchReport, MigrateSwitchReportSchema, type WrapperActivationRead, WrapperActivationReadSchema, } from './device-manager.cap.js';
 export { DiscoveredDeviceSchema, deviceProviderCapability, ProviderStatusSchema, } from './device-provider.cap.js';
 export { type ClaimOutcome, ClaimOutcomeSchema, type ClaimsListing, ClaimsListingSchema, deviceStateCapability, type FieldClaim, type FieldClaimMode, FieldClaimModeSchema, FieldClaimSchema, } from './device-state.cap.js';
 export type { EmbeddingFailedModel, EmbeddingFailedRequirement, EmbeddingModelFailure, EmbeddingRefusal, EmbeddingRefusalCode, EmbeddingTower, IEmbeddingEncoderProvider, } from './embedding-encoder.cap.js';
 export { EMBEDDING_MODEL_FAILED, EMBEDDING_REQUIREMENTS_FAILED, EMBEDDING_REQUIREMENTS_UNAVAILABLE, EmbeddingFailedModelSchema, EmbeddingFailedRequirementSchema, EmbeddingInfoSchema, EmbeddingRefusalCodeSchema, EmbeddingResultSchema, EmbeddingTowerSchema, embeddingEncoderCapability, embeddingModelFailedError, embeddingModelFailedOf, embeddingRefusalOf, embeddingRequirementsFailedError, embeddingRequirementsUnavailableError, isEmbeddingModelFailed, } from './embedding-encoder.cap.js';
+export type { DeviceDataEntry, DeviceRemovedInput, DeviceRemovedResult, IDeviceRemovalHookProvider, } from './device-removal-hook.cap.js';
+export { DeviceDataEntrySchema, DeviceRemovedInputSchema, DeviceRemovedResultSchema, deviceRemovalHookCapability, } from './device-removal-hook.cap.js';
 export type { FailureContribution, IFailureContributionProvider, } from './failure-contribution.cap.js';
 export { FailureContributionSchema, FailureReasonCountSchema, failureContributionCapability, } from './failure-contribution.cap.js';
 export { filesystemBrowseCapability, type IFilesystemBrowseProvider, } from './filesystem-browse.cap.js';
@@ -306,6 +308,7 @@ import type { deviceOpsCapability } from './device-ops.cap.js';
 import type { deviceProviderCapability } from './device-provider.cap.js';
 import type { deviceStateCapability } from './device-state.cap.js';
 import type { deviceStatusCapability } from './device-status.cap.js';
+import type { deviceRemovalHookCapability } from './device-removal-hook.cap.js';
 import type { doorbellCapability } from './doorbell.cap.js';
 import type { embeddingEncoderCapability } from './embedding-encoder.cap.js';
 import type { enumSensorCapability } from './enum-sensor.cap.js';
@@ -416,6 +419,6 @@ import type { trainingProviderCapability } from './training-provider.cap.js';
 import type { zoneAnalyticsCapability } from './zone-analytics.cap.js';
 import type { zoneRulesCapability } from './zone-rules.cap.js';
 import type { zonesCapability } from './zones.cap.js';
-type AnyCapability = typeof streamSignalsCapability | typeof addonSettingsCapability | typeof alertsCapability | typeof storageCapability | typeof storageMigrationCapability | typeof storageProviderCapability | typeof storageEvictableCapability | typeof storageOccupancyCapability | typeof filesystemBrowseCapability | typeof backupCapability | typeof terminalSessionCapability | typeof settingsStoreCapability | typeof dataStoreProviderCapability | typeof databaseSnapshotCapability | typeof deviceHistoryCapability | typeof keychainCapability | typeof keychainAdminCapability | typeof deviceCredentialsCapability | typeof nodeCertificatesCapability | typeof logChannelsCapability | typeof logDestinationCapability | typeof loadContributionCapability | typeof failureContributionCapability | typeof adminUiCapability | typeof viewerUiCapability | typeof ssoBridgeCapability | typeof userPasskeysCapability | typeof smtpProviderCapability | typeof mqttBrokerCapability | typeof brokerCapability | typeof deviceAdoptionCapability | typeof deviceAdminLinkCapability | typeof deviceExportCapability | typeof addonPagesCapability | typeof addonPagesSourceCapability | typeof addonWidgetsCapability | typeof addonWidgetsSourceCapability | typeof customModelRegistryCapability | typeof modelDistributorCapability | typeof modelConvertCapability | typeof addonRoutesCapability | typeof streamBrokerCapability | typeof decoderCapability | typeof webrtcSessionCapability | typeof cameraStreamsCapability | typeof calendarSourceCapability | typeof calendarsCapability | typeof motionDetectionCapability | typeof pipelineExecutorCapability | typeof detectionPipelineCapability | typeof cameraPipelineConfigCapability | typeof pipelineRunnerCapability | typeof pipelineOrchestratorCapability | typeof audioAnalyzerCapability | typeof audioAnalysisCapability | typeof audioCodecCapability | typeof embeddingEncoderCapability | typeof vectorStoreCapability | typeof deviceProviderCapability | typeof deviceManagerCapability | typeof deviceStateCapability | typeof authProviderCapability | typeof loginMethodCapability | typeof networkAccessCapability | typeof turnProviderCapability | typeof snapshotCapability | typeof llmCapability | typeof llmRuntimeCapability | typeof notificationOutputCapability | typeof composerCapability | typeof coreBlocksCapability | typeof notificationRulesCapability | typeof pipelineAnalyticsCapability | typeof metricsProviderCapability | typeof ptzCapability | typeof ptzAutotrackCapability | typeof navigationCapability | typeof consumablesCapability | typeof connectionTestCapability | typeof rebootCapability | typeof deviceDiscoveryCapability | typeof brightnessCapability | typeof colorCapability | typeof climateControlCapability | typeof coverCapability | typeof valveCapability | typeof humidifierCapability | typeof waterHeaterCapability | typeof weatherCapability | typeof imageCapability | typeof lockControlCapability | typeof vacuumControlCapability | typeof petFeederCapability | typeof lawnMowerControlCapability | typeof fanControlCapability | typeof controlCapability | typeof notifierCapability | typeof mediaPlayerCapability | typeof alarmPanelCapability | typeof presenceCapability | typeof scriptRunnerCapability | typeof automationControlCapability | typeof motionTriggerCapability | typeof zonesCapability | typeof zoneRulesCapability | typeof trainingCapability | typeof trainingProviderCapability | typeof zoneAnalyticsCapability | typeof audioMetricsCapability | typeof motionCapability | typeof contactCapability | typeof floodCapability | typeof smokeCapability | typeof carbonMonoxideCapability | typeof gasCapability | typeof tamperCapability | typeof vibrationCapability | typeof connectivityCapability | typeof binaryCapability | typeof temperatureSensorCapability | typeof humiditySensorCapability | typeof ambientLightSensorCapability | typeof pressureSensorCapability | typeof powerMeterCapability | typeof airQualitySensorCapability | typeof numericSensorCapability | typeof enumSensorCapability | typeof recordingCapability | typeof recordingArchiveCapability | typeof recordingExportCapability | typeof recordingSignalCapability | typeof deviceOpsCapability | typeof platformProbeCapability | typeof localNetworkCapability | typeof meshNetworkCapability | typeof userManagementCapability | typeof systemCapability | typeof networkQualityCapability | typeof toastCapability | typeof nodesCapability | typeof serverManagementCapability | typeof integrationsCapability | typeof addonsCapability | typeof oauthIntegrationCapability | typeof oidcConnectionsCapability | typeof streamParamsCapability | typeof streamCatalogCapability | typeof motionZonesCapability | typeof cameraGridLayoutCapability | typeof sceneMonitorCapability | typeof privacyMaskCapability | typeof dayNightCapability | typeof recordingOnboardCapability | typeof imageSettingsCapability | typeof osdCapability | typeof osdManagerCapability | typeof accessoriesCapability | typeof batteryCapability | typeof networkLinkCapability | typeof buttonCapability | typeof cameraCredentialsCapability | typeof deviceStatusCapability | typeof doorbellCapability | typeof eventEmitterCapability | typeof faceGalleryCapability | typeof featureProbeCapability | typeof intercomCapability | typeof nativeObjectDetectionCapability | typeof plateGalleryCapability | typeof switchCapability | typeof updateCapability | typeof videoclipsCapability | typeof deviceExtensionCapability;
+type AnyCapability = typeof streamSignalsCapability | typeof addonSettingsCapability | typeof alertsCapability | typeof storageCapability | typeof storageMigrationCapability | typeof storageProviderCapability | typeof storageEvictableCapability | typeof storageOccupancyCapability | typeof filesystemBrowseCapability | typeof backupCapability | typeof terminalSessionCapability | typeof settingsStoreCapability | typeof dataStoreProviderCapability | typeof databaseSnapshotCapability | typeof deviceHistoryCapability | typeof keychainCapability | typeof keychainAdminCapability | typeof deviceCredentialsCapability | typeof nodeCertificatesCapability | typeof logChannelsCapability | typeof logDestinationCapability | typeof loadContributionCapability | typeof failureContributionCapability | typeof deviceRemovalHookCapability | typeof adminUiCapability | typeof viewerUiCapability | typeof ssoBridgeCapability | typeof userPasskeysCapability | typeof smtpProviderCapability | typeof mqttBrokerCapability | typeof brokerCapability | typeof deviceAdoptionCapability | typeof deviceAdminLinkCapability | typeof deviceExportCapability | typeof addonPagesCapability | typeof addonPagesSourceCapability | typeof addonWidgetsCapability | typeof addonWidgetsSourceCapability | typeof customModelRegistryCapability | typeof modelDistributorCapability | typeof modelConvertCapability | typeof addonRoutesCapability | typeof streamBrokerCapability | typeof decoderCapability | typeof webrtcSessionCapability | typeof cameraStreamsCapability | typeof calendarSourceCapability | typeof calendarsCapability | typeof motionDetectionCapability | typeof pipelineExecutorCapability | typeof detectionPipelineCapability | typeof cameraPipelineConfigCapability | typeof pipelineRunnerCapability | typeof pipelineOrchestratorCapability | typeof audioAnalyzerCapability | typeof audioAnalysisCapability | typeof audioCodecCapability | typeof embeddingEncoderCapability | typeof vectorStoreCapability | typeof deviceProviderCapability | typeof deviceManagerCapability | typeof deviceStateCapability | typeof authProviderCapability | typeof loginMethodCapability | typeof networkAccessCapability | typeof turnProviderCapability | typeof snapshotCapability | typeof llmCapability | typeof llmRuntimeCapability | typeof notificationOutputCapability | typeof composerCapability | typeof coreBlocksCapability | typeof notificationRulesCapability | typeof pipelineAnalyticsCapability | typeof metricsProviderCapability | typeof ptzCapability | typeof ptzAutotrackCapability | typeof navigationCapability | typeof consumablesCapability | typeof connectionTestCapability | typeof rebootCapability | typeof deviceDiscoveryCapability | typeof brightnessCapability | typeof colorCapability | typeof climateControlCapability | typeof coverCapability | typeof valveCapability | typeof humidifierCapability | typeof waterHeaterCapability | typeof weatherCapability | typeof imageCapability | typeof lockControlCapability | typeof vacuumControlCapability | typeof petFeederCapability | typeof lawnMowerControlCapability | typeof fanControlCapability | typeof controlCapability | typeof notifierCapability | typeof mediaPlayerCapability | typeof alarmPanelCapability | typeof presenceCapability | typeof scriptRunnerCapability | typeof automationControlCapability | typeof motionTriggerCapability | typeof zonesCapability | typeof zoneRulesCapability | typeof trainingCapability | typeof trainingProviderCapability | typeof zoneAnalyticsCapability | typeof audioMetricsCapability | typeof motionCapability | typeof contactCapability | typeof floodCapability | typeof smokeCapability | typeof carbonMonoxideCapability | typeof gasCapability | typeof tamperCapability | typeof vibrationCapability | typeof connectivityCapability | typeof binaryCapability | typeof temperatureSensorCapability | typeof humiditySensorCapability | typeof ambientLightSensorCapability | typeof pressureSensorCapability | typeof powerMeterCapability | typeof airQualitySensorCapability | typeof numericSensorCapability | typeof enumSensorCapability | typeof recordingCapability | typeof recordingArchiveCapability | typeof recordingExportCapability | typeof recordingSignalCapability | typeof deviceOpsCapability | typeof platformProbeCapability | typeof localNetworkCapability | typeof meshNetworkCapability | typeof userManagementCapability | typeof systemCapability | typeof networkQualityCapability | typeof toastCapability | typeof nodesCapability | typeof serverManagementCapability | typeof integrationsCapability | typeof addonsCapability | typeof oauthIntegrationCapability | typeof oidcConnectionsCapability | typeof streamParamsCapability | typeof streamCatalogCapability | typeof motionZonesCapability | typeof cameraGridLayoutCapability | typeof sceneMonitorCapability | typeof privacyMaskCapability | typeof dayNightCapability | typeof recordingOnboardCapability | typeof imageSettingsCapability | typeof osdCapability | typeof osdManagerCapability | typeof accessoriesCapability | typeof batteryCapability | typeof networkLinkCapability | typeof buttonCapability | typeof cameraCredentialsCapability | typeof deviceStatusCapability | typeof doorbellCapability | typeof eventEmitterCapability | typeof faceGalleryCapability | typeof featureProbeCapability | typeof intercomCapability | typeof nativeObjectDetectionCapability | typeof plateGalleryCapability | typeof switchCapability | typeof updateCapability | typeof videoclipsCapability | typeof deviceExtensionCapability;
 export type CapabilityName = AnyCapability['name'];
 export type ITypedReadinessRegistry = IReadinessRegistry<CapabilityName>;

package/dist/capabilities/keychain.cap.d.ts

@@ -149,6 +149,17 @@ export declare const keychainCapability: {
         }, z.core.$strip>, z.ZodObject<{
             deleted: z.ZodNumber;
         }, z.core.$strip>, "mutation">;
+        /**
+         * Delete every value scoped `device/<deviceId>`, whatever its owner (D864).
+         * Reserved to `device-manager`, on the device-removed path: a driver's
+         * device-scoped secret is not anybody's once the device is gone. Answers the
+         * refs removed (never values).
+         */
+        readonly deleteDeviceScope: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            deviceId: z.ZodNumber;
+        }, z.core.$strip>, z.ZodObject<{
+            refs: z.ZodReadonly<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>, "mutation">;
         /** The caller's own refs, metadata only. */
         readonly listMeta: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{}, z.core.$strip>, z.ZodReadonly<z.ZodArray<z.ZodObject<{
             ref: z.ZodString;

package/dist/capabilities/local-network.cap.d.ts

@@ -953,6 +953,14 @@ export declare const localNetworkCapability: {
             caCertPem: z.ZodNullable<z.ZodString>;
             reissueError: z.ZodNullable<z.ZodString>;
             restartRequired: z.ZodBoolean;
+            caMissing: z.ZodBoolean;
+            localCaConstrained: z.ZodNullable<z.ZodBoolean>;
+            caReplacedAt: z.ZodNullable<z.ZodString>;
+            storedUpload: z.ZodNullable<z.ZodObject<{
+                leafFingerprintSha256: z.ZodString;
+                validTo: z.ZodString;
+                hasCa: z.ZodBoolean;
+            }, z.core.$strip>>;
         }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
         /** Issue a new leaf under the existing local CA. Disabled in uploaded mode. */
         readonly regenerateCertificate: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
@@ -970,8 +978,19 @@ export declare const localNetworkCapability: {
             caCertPem: z.ZodNullable<z.ZodString>;
             reissueError: z.ZodNullable<z.ZodString>;
             restartRequired: z.ZodBoolean;
+            caMissing: z.ZodBoolean;
+            localCaConstrained: z.ZodNullable<z.ZodBoolean>;
+            caReplacedAt: z.ZodNullable<z.ZodString>;
+            storedUpload: z.ZodNullable<z.ZodObject<{
+                leafFingerprintSha256: z.ZodString;
+                validTo: z.ZodString;
+                hasCa: z.ZodBoolean;
+            }, z.core.$strip>>;
         }, z.core.$strip>, "mutation">;
-        /** Replace the served material with operator-supplied PEMs. */
+        /**
+         * Replace the served material with operator-supplied PEMs. A certificate that does not lead
+         * to a public CA must come with its CA certificate, validated and kept for Download CA (D873).
+         */
         readonly uploadCertificate: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
             certPem: z.ZodString;
             keyPem: z.ZodString;
@@ -989,12 +1008,45 @@ export declare const localNetworkCapability: {
             caCertPem: z.ZodNullable<z.ZodString>;
             reissueError: z.ZodNullable<z.ZodString>;
             restartRequired: z.ZodBoolean;
+            caMissing: z.ZodBoolean;
+            localCaConstrained: z.ZodNullable<z.ZodBoolean>;
+            caReplacedAt: z.ZodNullable<z.ZodString>;
+            storedUpload: z.ZodNullable<z.ZodObject<{
+                leafFingerprintSha256: z.ZodString;
+                validTo: z.ZodString;
+                hasCa: z.ZodBoolean;
+            }, z.core.$strip>>;
         }, z.core.$strip>, "mutation">;
         /** The local CA PEM, or empty when there is none to download. */
         readonly downloadCa: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodObject<{
             pem: z.ZodString;
         }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
-        /** Drop uploaded material and return to the generated local CA. */
+        /**
+         * Serve the kept upload again after "Revert to generated" (D873). Refused when none is kept.
+         */
+        readonly useStoredUploadedCertificate: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodObject<{
+            mode: z.ZodEnum<{
+                disabled: "disabled";
+                generated: "generated";
+                uploaded: "uploaded";
+            }>;
+            leafFingerprintSha256: z.ZodNullable<z.ZodString>;
+            caFingerprintSha256: z.ZodNullable<z.ZodString>;
+            validTo: z.ZodNullable<z.ZodString>;
+            sans: z.ZodArray<z.ZodString>;
+            caCertPem: z.ZodNullable<z.ZodString>;
+            reissueError: z.ZodNullable<z.ZodString>;
+            restartRequired: z.ZodBoolean;
+            caMissing: z.ZodBoolean;
+            localCaConstrained: z.ZodNullable<z.ZodBoolean>;
+            caReplacedAt: z.ZodNullable<z.ZodString>;
+            storedUpload: z.ZodNullable<z.ZodObject<{
+                leafFingerprintSha256: z.ZodString;
+                validTo: z.ZodString;
+                hasCa: z.ZodBoolean;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, "mutation">;
+        /** Return to the generated local CA. The uploaded certificate stays stored (D873). */
         readonly revertToGeneratedCertificate: import("./capability-definition.js").CapabilityMethodSchema<z.ZodVoid, z.ZodObject<{
             mode: z.ZodEnum<{
                 disabled: "disabled";
@@ -1008,6 +1060,14 @@ export declare const localNetworkCapability: {
             caCertPem: z.ZodNullable<z.ZodString>;
             reissueError: z.ZodNullable<z.ZodString>;
             restartRequired: z.ZodBoolean;
+            caMissing: z.ZodBoolean;
+            localCaConstrained: z.ZodNullable<z.ZodBoolean>;
+            caReplacedAt: z.ZodNullable<z.ZodString>;
+            storedUpload: z.ZodNullable<z.ZodObject<{
+                leafFingerprintSha256: z.ZodString;
+                validTo: z.ZodString;
+                hasCa: z.ZodBoolean;
+            }, z.core.$strip>>;
         }, z.core.$strip>, "mutation">;
     };
     /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */

package/dist/client.js

@@ -27713,6 +27713,8 @@ function createSystemProxy(api) {
 			getChildren: (input) => dispatch("deviceManager", "getChildren", "query", input),
 			getChildrenBatch: (input) => dispatch("deviceManager", "getChildrenBatch", "query", input),
 			getLinkedDevicesBatch: (input) => dispatch("deviceManager", "getLinkedDevicesBatch", "query", input),
+			listDeletedSince: (input) => dispatch("deviceManager", "listDeletedSince", "query", input),
+			cleanupDeletedDevicesData: (input) => dispatch("deviceManager", "cleanupDeletedDevicesData", "mutation", input),
 			removeByIntegration: (input) => dispatch("deviceManager", "removeByIntegration", "mutation", input),
 			getBindingsBatch: (input) => dispatch("deviceManager", "getBindingsBatch", "query", input),
 			getAllBindings: (input) => dispatch("deviceManager", "getAllBindings", "query", input),
@@ -27845,6 +27847,7 @@ function createSystemProxy(api) {
 			regenerateCertificate: (input) => dispatch("localNetwork", "regenerateCertificate", "mutation", input),
 			uploadCertificate: (input) => dispatch("localNetwork", "uploadCertificate", "mutation", input),
 			downloadCa: (input) => dispatch("localNetwork", "downloadCa", "query", input),
+			useStoredUploadedCertificate: (input) => dispatch("localNetwork", "useStoredUploadedCertificate", "mutation", input),
 			revertToGeneratedCertificate: (input) => dispatch("localNetwork", "revertToGeneratedCertificate", "mutation", input)
 		},
 		meshNetwork: {

package/dist/client.mjs

@@ -27712,6 +27712,8 @@ function createSystemProxy(api) {
 			getChildren: (input) => dispatch("deviceManager", "getChildren", "query", input),
 			getChildrenBatch: (input) => dispatch("deviceManager", "getChildrenBatch", "query", input),
 			getLinkedDevicesBatch: (input) => dispatch("deviceManager", "getLinkedDevicesBatch", "query", input),
+			listDeletedSince: (input) => dispatch("deviceManager", "listDeletedSince", "query", input),
+			cleanupDeletedDevicesData: (input) => dispatch("deviceManager", "cleanupDeletedDevicesData", "mutation", input),
 			removeByIntegration: (input) => dispatch("deviceManager", "removeByIntegration", "mutation", input),
 			getBindingsBatch: (input) => dispatch("deviceManager", "getBindingsBatch", "query", input),
 			getAllBindings: (input) => dispatch("deviceManager", "getAllBindings", "query", input),
@@ -27844,6 +27846,7 @@ function createSystemProxy(api) {
 			regenerateCertificate: (input) => dispatch("localNetwork", "regenerateCertificate", "mutation", input),
 			uploadCertificate: (input) => dispatch("localNetwork", "uploadCertificate", "mutation", input),
 			downloadCa: (input) => dispatch("localNetwork", "downloadCa", "query", input),
+			useStoredUploadedCertificate: (input) => dispatch("localNetwork", "useStoredUploadedCertificate", "mutation", input),
 			revertToGeneratedCertificate: (input) => dispatch("localNetwork", "revertToGeneratedCertificate", "mutation", input)
 		},
 		meshNetwork: {

package/dist/{composition-DCYnv4I6.js → composition-DIp0uE_b.js}

@@ -1,4 +1,4 @@
-const require_err_msg = require("./err-msg-Dx2Kor0g.js");
+const require_err_msg = require("./err-msg-Ls8Q6dHO.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 //#region src/ffmpeg/invocation.ts

package/dist/{composition-C-WpVYTX.mjs → composition-EQ9Ok0Ee.mjs}

@@ -1,4 +1,4 @@
-import { a as DeviceType, i as DeviceRole } from "./err-msg-DX6i_MY4.mjs";
+import { a as DeviceType, i as DeviceRole } from "./err-msg-DLerKiVO.mjs";
 import { z } from "zod";
 import { createHash } from "node:crypto";
 //#region src/ffmpeg/invocation.ts