@camstack/types 1.2.373 → 1.2.375

package/dist/device/device-removal-reconcile.d.ts

@@ -0,0 +1,49 @@
+/**
+ * The reconcile half of `device-removal-hook` (D865), shared by every
+ * implementer so the rule is written once.
+ *
+ * A hook call can miss an implementer that was down or restarting when the
+ * device was deleted. At start (and every {@link REMOVAL_RECONCILE_INTERVAL_MS}
+ * after) the implementer asks device-manager for the TOMBSTONES it may have
+ * missed and runs its own idempotent removal for each.
+ *
+ * What it will never do: decide a device is gone because it is absent from a
+ * device list. The only input is a tombstone — a recorded DELETE. A failed
+ * read of the tombstones changes nothing (D49): it is logged and the next tick
+ * asks again.
+ */
+import type { DeviceRemovedInput, DeviceRemovedResult } from '../capabilities/device-removal-hook.cap.js';
+import type { DeviceTombstone } from '../capabilities/device-manager.cap.js';
+import type { IScopedLogger } from '../interfaces/logging.js';
+/** How often an implementer re-asks for tombstones after its start-up pass. */
+export declare const REMOVAL_RECONCILE_INTERVAL_MS: number;
+/** The slice of `ctx.api` the reconcile reads — narrower than the generated client. */
+export interface TombstoneSource {
+    readonly deviceManager: {
+        readonly listDeletedSince: {
+            query(input: {
+                sinceMs: number;
+            }): Promise<readonly DeviceTombstone[]>;
+        };
+    };
+}
+export interface RemovalReconcileOptions {
+    readonly api: TombstoneSource | undefined;
+    readonly logger: IScopedLogger;
+    /** The implementer's own idempotent removal — the same one `onDeviceRemoved` runs. */
+    readonly remove: (input: DeviceRemovedInput) => Promise<DeviceRemovedResult>;
+    readonly now?: () => number;
+}
+export interface RemovalReconcileOutcome {
+    /** `false` when the tombstones could not be read; nothing was touched. */
+    readonly read: boolean;
+    readonly applied: number;
+    readonly failed: number;
+}
+/** One reconcile pass over every tombstone inside the retention window. */
+export declare function reconcileRemovedDevices(opts: RemovalReconcileOptions): Promise<RemovalReconcileOutcome>;
+/**
+ * Run the reconcile now and then periodically. Returns the disposer. The timer
+ * is unref'd and a pass never overlaps the previous one.
+ */
+export declare function armRemovalReconcile(opts: RemovalReconcileOptions): () => void;

package/dist/device/device-type.d.ts

@@ -250,6 +250,22 @@ export declare enum DeviceRole {
     Nightvision = "nightvision",
     PrivacyMask = "privacy-mask",
     Doorbell = "doorbell",
+    /** Interior blind / shade / roller blind. HA `device_class: blind|shade`. */
+    CoverBlind = "cover-blind",
+    /** Exterior roller shutter. HA `device_class: shutter`; Homematic BROLL. */
+    CoverShutter = "cover-shutter",
+    /** Exterior awning. HA `device_class: awning`. */
+    CoverAwning = "cover-awning",
+    /** Curtain / drape. HA `device_class: curtain`. */
+    CoverCurtain = "cover-curtain",
+    /** Garage door. HA `device_class: garage`. A security actuator: exports gate it. */
+    CoverGarage = "cover-garage",
+    /** Gate. HA `device_class: gate`. A security actuator: exports gate it. */
+    CoverGate = "cover-gate",
+    /** Door. HA `device_class: door`. A security actuator: exports gate it. */
+    CoverDoor = "cover-door",
+    /** Window. HA `device_class: window`. */
+    CoverWindow = "cover-window",
     /** Virtual HA toggle (input_boolean.*) — distinguishable from a
      *  real Switch device for UI rendering / export adapters. */
     BinaryHelper = "binary-helper",

package/dist/{err-msg-DX6i_MY4.mjs → err-msg-DLerKiVO.mjs}

@@ -254,6 +254,22 @@ var DeviceRole = /* @__PURE__ */ function(DeviceRole) {
 	DeviceRole["Nightvision"] = "nightvision";
 	DeviceRole["PrivacyMask"] = "privacy-mask";
 	DeviceRole["Doorbell"] = "doorbell";
+	/** Interior blind / shade / roller blind. HA `device_class: blind|shade`. */
+	DeviceRole["CoverBlind"] = "cover-blind";
+	/** Exterior roller shutter. HA `device_class: shutter`; Homematic BROLL. */
+	DeviceRole["CoverShutter"] = "cover-shutter";
+	/** Exterior awning. HA `device_class: awning`. */
+	DeviceRole["CoverAwning"] = "cover-awning";
+	/** Curtain / drape. HA `device_class: curtain`. */
+	DeviceRole["CoverCurtain"] = "cover-curtain";
+	/** Garage door. HA `device_class: garage`. A security actuator: exports gate it. */
+	DeviceRole["CoverGarage"] = "cover-garage";
+	/** Gate. HA `device_class: gate`. A security actuator: exports gate it. */
+	DeviceRole["CoverGate"] = "cover-gate";
+	/** Door. HA `device_class: door`. A security actuator: exports gate it. */
+	DeviceRole["CoverDoor"] = "cover-door";
+	/** Window. HA `device_class: window`. */
+	DeviceRole["CoverWindow"] = "cover-window";
 	/** Virtual HA toggle (input_boolean.*) — distinguishable from a
 	*  real Switch device for UI rendering / export adapters. */
 	DeviceRole["BinaryHelper"] = "binary-helper";

package/dist/{err-msg-Dx2Kor0g.js → err-msg-Ls8Q6dHO.js}

@@ -254,6 +254,22 @@ var DeviceRole = /* @__PURE__ */ function(DeviceRole) {
 	DeviceRole["Nightvision"] = "nightvision";
 	DeviceRole["PrivacyMask"] = "privacy-mask";
 	DeviceRole["Doorbell"] = "doorbell";
+	/** Interior blind / shade / roller blind. HA `device_class: blind|shade`. */
+	DeviceRole["CoverBlind"] = "cover-blind";
+	/** Exterior roller shutter. HA `device_class: shutter`; Homematic BROLL. */
+	DeviceRole["CoverShutter"] = "cover-shutter";
+	/** Exterior awning. HA `device_class: awning`. */
+	DeviceRole["CoverAwning"] = "cover-awning";
+	/** Curtain / drape. HA `device_class: curtain`. */
+	DeviceRole["CoverCurtain"] = "cover-curtain";
+	/** Garage door. HA `device_class: garage`. A security actuator: exports gate it. */
+	DeviceRole["CoverGarage"] = "cover-garage";
+	/** Gate. HA `device_class: gate`. A security actuator: exports gate it. */
+	DeviceRole["CoverGate"] = "cover-gate";
+	/** Door. HA `device_class: door`. A security actuator: exports gate it. */
+	DeviceRole["CoverDoor"] = "cover-door";
+	/** Window. HA `device_class: window`. */
+	DeviceRole["CoverWindow"] = "cover-window";
 	/** Virtual HA toggle (input_boolean.*) — distinguishable from a
 	*  real Switch device for UI rendering / export adapters. */
 	DeviceRole["BinaryHelper"] = "binary-helper";

package/dist/generated/addon-api.d.ts

@@ -50,6 +50,7 @@ import type { deviceHistoryCapability } from '../capabilities/device-history.cap
 import type { deviceManagerCapability } from '../capabilities/device-manager.cap.js';
 import type { deviceOpsCapability } from '../capabilities/device-ops.cap.js';
 import type { deviceProviderCapability } from '../capabilities/device-provider.cap.js';
+import type { deviceRemovalHookCapability } from '../capabilities/device-removal-hook.cap.js';
 import type { deviceStateCapability } from '../capabilities/device-state.cap.js';
 import type { embeddingEncoderCapability } from '../capabilities/embedding-encoder.cap.js';
 import type { faceGalleryCapability } from '../capabilities/face-gallery.cap.js';
@@ -2787,6 +2788,20 @@ export type AppRouter = TrpcCoreRouter<{
             output: z.infer<typeof deviceManagerCapability.methods.remove.output>;
             meta: object;
         }>;
+        listDeletedSince: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof deviceManagerCapability.methods.listDeletedSince.input>;
+            output: z.infer<typeof deviceManagerCapability.methods.listDeletedSince.output>;
+            meta: object;
+        }>;
+        cleanupDeletedDevicesData: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof deviceManagerCapability.methods.cleanupDeletedDevicesData.input>;
+            output: z.infer<typeof deviceManagerCapability.methods.cleanupDeletedDevicesData.output>;
+            meta: object;
+        }>;
         removeByIntegration: TRPCMutationProcedure<{
             input: {
                 [x: string]: unknown;
@@ -3233,6 +3248,28 @@ export type AppRouter = TrpcCoreRouter<{
             meta: object;
         }>;
     }>>;
+    deviceRemovalHook: TRPCBuiltRouter<{
+        ctx: TrpcContext;
+        meta: object;
+        errorShape: AugmentedErrorShape;
+        transformer: true;
+    }, TRPCDecorateCreateRouterOptions<{
+        onDeviceRemoved: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof deviceRemovalHookCapability.methods.onDeviceRemoved.input>;
+            output: z.infer<typeof deviceRemovalHookCapability.methods.onDeviceRemoved.output>;
+            meta: object;
+        }>;
+        listDeviceData: TRPCQueryProcedure<{
+            input: {
+                nodeId?: string | undefined;
+                addonId?: string | undefined;
+            } | undefined;
+            output: z.infer<typeof deviceRemovalHookCapability.methods.listDeviceData.output>;
+            meta: object;
+        }>;
+    }>>;
     deviceState: TRPCBuiltRouter<{
         ctx: TrpcContext;
         meta: object;
@@ -3886,6 +3923,13 @@ export type AppRouter = TrpcCoreRouter<{
             output: z.infer<typeof keychainCapability.methods.delete.output>;
             meta: object;
         }>;
+        deleteDeviceScope: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof keychainCapability.methods.deleteDeviceScope.input>;
+            output: z.infer<typeof keychainCapability.methods.deleteDeviceScope.output>;
+            meta: object;
+        }>;
         listMeta: TRPCQueryProcedure<{
             input: {
                 [x: string]: unknown;
@@ -4417,6 +4461,13 @@ export type AppRouter = TrpcCoreRouter<{
             output: z.infer<typeof localNetworkCapability.methods.downloadCa.output>;
             meta: object;
         }>;
+        useStoredUploadedCertificate: TRPCMutationProcedure<{
+            input: {
+                nodeId?: string | undefined;
+            } | undefined;
+            output: z.infer<typeof localNetworkCapability.methods.useStoredUploadedCertificate.output>;
+            meta: object;
+        }>;
         revertToGeneratedCertificate: TRPCMutationProcedure<{
             input: {
                 nodeId?: string | undefined;

package/dist/generated/capability-router-map.d.ts

@@ -56,6 +56,7 @@ export { deviceHistoryCapability } from '../capabilities/device-history.cap.js';
 export { deviceManagerCapability } from '../capabilities/device-manager.cap.js';
 export { deviceOpsCapability } from '../capabilities/device-ops.cap.js';
 export { deviceProviderCapability } from '../capabilities/device-provider.cap.js';
+export { deviceRemovalHookCapability } from '../capabilities/device-removal-hook.cap.js';
 export { deviceStateCapability } from '../capabilities/device-state.cap.js';
 export { deviceStatusCapability } from '../capabilities/device-status.cap.js';
 export { doorbellCapability } from '../capabilities/doorbell.cap.js';
@@ -230,6 +231,7 @@ export declare const CAPABILITY_NAMES: {
     readonly deviceManager: 'device-manager';
     readonly deviceOps: 'device-ops';
     readonly deviceProvider: 'device-provider';
+    readonly deviceRemovalHook: 'device-removal-hook';
     readonly deviceState: 'device-state';
     readonly deviceStatus: 'device-status';
     readonly doorbell: 'doorbell';
@@ -417,6 +419,7 @@ export interface CapabilityRouterMap<TRouter = unknown> {
     readonly deviceManager: TRouter;
     readonly deviceOps: TRouter;
     readonly deviceProvider: TRouter;
+    readonly deviceRemovalHook: TRouter;
     readonly deviceState: TRouter;
     readonly deviceStatus: TRouter;
     readonly doorbell: TRouter;
@@ -537,8 +540,8 @@ export interface CapabilityRouterMap<TRouter = unknown> {
 export declare const SINGLETON_CAPABILITY_NAMES: readonly ['accessories', 'addon-pages', 'addon-settings', 'addon-widgets', 'addons', 'admin-ui', 'air-quality-sensor', 'alarm-panel', 'alerts', 'ambient-light-sensor', 'audio-analysis', 'audio-analyzer', 'audio-codec', 'audio-metrics', 'automation-control', 'backup', 'battery', 'binary', 'brightness', 'button', 'calendars', 'camera-credentials', 'camera-grid-layout', 'camera-pipeline-config', 'camera-streams', 'carbon-monoxide', 'climate-control', 'color', 'composer', 'connectivity', 'consumables', 'contact', 'control', 'core-blocks', 'cover', 'database-snapshot', 'day-night', 'decoder', 'detection-pipeline', 'device-admin-link', 'device-adoption', 'device-credentials', 'device-discovery', 'device-history', 'device-manager', 'device-ops', 'device-state', 'device-status', 'doorbell', 'enum-sensor', 'event-emitter', 'face-gallery', 'fan-control', 'feature-probe', 'filesystem-browse', 'flood', 'gas', 'humidifier', 'humidity-sensor', 'image', 'image-settings', 'integrations', 'intercom', 'keychain', 'keychain-admin', 'lawn-mower-control', 'llm-runtime', 'local-network', 'lock-control', 'media-player', 'metrics-provider', 'model-convert', 'model-distributor', 'motion', 'motion-detection', 'motion-trigger', 'motion-zones', 'native-object-detection', 'navigation', 'network-link', 'network-quality', 'node-certificates', 'nodes', 'notification-rules', 'notifier', 'numeric-sensor', 'oidc-connections', 'osd', 'osd-manager', 'pet-feeder', 'pipeline-analytics', 'pipeline-executor', 'pipeline-orchestrator', 'pipeline-runner', 'plate-gallery', 'platform-probe', 'power-meter', 'presence', 'pressure-sensor', 'privacy-mask', 'ptz', 'ptz-autotrack', 'reboot', 'recording-archive', 'recording-export', 'recording-onboard', 'recording-signal', 'scene-monitor', 'script-runner', 'server-management', 'settings-store', 'smoke', 'snapshot', 'sso-bridge', 'storage', 'storage-migration', 'stream-broker', 'stream-catalog', 'stream-params', 'stream-signals', 'switch', 'system', 'tamper', 'temperature-sensor', 'terminal-session', 'toast', 'training', 'update', 'user-management', 'vacuum-control', 'valve', 'vector-store', 'vibration', 'viewer-ui', 'water-heater', 'weather', 'webrtc-session', 'zone-analytics', 'zone-rules', 'zones'];
 /** Union of singleton capability names (literal string union). */
 export type SingletonCapabilityName = typeof SINGLETON_CAPABILITY_NAMES[number];
-/** Capability names whose mode is `collection` (33 caps). */
-export declare const COLLECTION_CAPABILITY_NAMES: readonly ['addon-pages-source', 'addon-routes', 'addon-widgets-source', 'auth-provider', 'broker', 'calendar-source', 'connection-test', 'custom-model-registry', 'data-store-provider', 'device-export', 'device-extension', 'device-provider', 'embedding-encoder', 'failure-contribution', 'llm', 'load-contribution', 'log-channels', 'log-destination', 'login-method', 'mesh-network', 'mqtt-broker', 'network-access', 'notification-output', 'oauth-integration', 'recording', 'smtp-provider', 'storage-evictable', 'storage-occupancy', 'storage-provider', 'training-provider', 'turn-provider', 'user-passkeys', 'videoclips'];
+/** Capability names whose mode is `collection` (34 caps). */
+export declare const COLLECTION_CAPABILITY_NAMES: readonly ['addon-pages-source', 'addon-routes', 'addon-widgets-source', 'auth-provider', 'broker', 'calendar-source', 'connection-test', 'custom-model-registry', 'data-store-provider', 'device-export', 'device-extension', 'device-provider', 'device-removal-hook', 'embedding-encoder', 'failure-contribution', 'llm', 'load-contribution', 'log-channels', 'log-destination', 'login-method', 'mesh-network', 'mqtt-broker', 'network-access', 'notification-output', 'oauth-integration', 'recording', 'smtp-provider', 'storage-evictable', 'storage-occupancy', 'storage-provider', 'training-provider', 'turn-provider', 'user-passkeys', 'videoclips'];
 /** Union of collection capability names (literal string union). */
 export type CollectionCapabilityName = typeof COLLECTION_CAPABILITY_NAMES[number];
 /** Capability mode lookup at runtime — mirrors the `.cap.ts` definitions. */

package/dist/generated/collection-array-methods.d.ts

@@ -8,7 +8,7 @@
  * barrel (`ALL_CAPABILITY_DEFINITIONS`), which would cost ~144MB RSS per
  * forked runner. See docs/decisions/adr-0028.md.
  *
- * Coverage: 26 collection caps, 45 array methods.
+ * Coverage: 27 collection caps, 46 array methods.
  */
 export declare const COLLECTION_ARRAY_METHODS: Readonly<Record<string, readonly string[]>>;
 /**

package/dist/generated/method-access-map.d.ts

@@ -6,7 +6,7 @@
  * scope+access check inside `protectedProcedure` (see
  * `server/backend/src/api/trpc/trpc.middleware.ts`).
  *
- * Coverage: 1332 method paths across 173 capabilities.
+ * Coverage: 1338 method paths across 174 capabilities.
  */
 import type { CapabilityMethodAccess } from '../capabilities/capability-definition.js';
 export interface MethodAccessRecord {

package/dist/generated/method-device-selectors.d.ts

@@ -6,8 +6,8 @@
  * system-scope cap that takes a deviceId was previously never device-filtered
  * — see the generator header).
  *
- * Coverage: 524 methods carry a device reference, of which
- * 169 are on SYSTEM-scope caps.
+ * Coverage: 526 methods carry a device reference, of which
+ * 171 are on SYSTEM-scope caps.
  *
  * Top-level fields, number arrays, and one-level arrays of objects carrying
  * a numeric device field (targets[].deviceId) are all mapped; the matcher

package/dist/generated/system-proxy.d.ts

@@ -78,14 +78,14 @@ export interface SystemProxy {
     readonly deviceCredentials: Pick<InferProvider<typeof deviceCredentialsCapability>, 'listDeviceCredentials' | 'startEnrollment' | 'revokeDeviceCredential' | 'getDeviceCertificateSettings' | 'setDeviceCertificateSettings' | 'deleteDeviceCredential' | 'getDeviceCaStatus' | 'renameDeviceCredential'>;
     readonly deviceExport: Pick<InferProvider<typeof deviceExportCapability>, 'getStatus' | 'listSupportedDeviceKinds' | 'listExposedDevices' | 'exposeDevice' | 'unexposeDevice'>;
     readonly deviceHistory: Pick<InferProvider<typeof deviceHistoryCapability>, 'listNodeSeries' | 'queryNode' | 'declareSeries' | 'record' | 'recordBuckets' | 'getStatus'>;
-    readonly deviceManager: Pick<InferProvider<typeof deviceManagerCapability>, 'allocateDeviceId' | 'migrateDevice' | 'registerDevice' | 'removeDevice' | 'persistConfig' | 'getRoleDisplayDefaults' | 'setRoleDisplayDefaults' | 'listLocations' | 'addLocation' | 'removeLocation' | 'renameLocation' | 'listLocationIcons' | 'setLocationIcon' | 'listLocationDescriptions' | 'setLocationDescription' | 'listSiteZones' | 'setSiteZone' | 'removeSiteZone' | 'renameSiteZone' | 'setLocationZone' | 'listPersistedByAddon' | 'listAll' | 'getChildren' | 'getChildrenBatch' | 'getLinkedDevicesBatch' | 'removeByIntegration' | 'getBindingsBatch' | 'getAllBindings' | 'listDeviceIdsByCaps' | 'listWrappersForCap' | 'listBindableCapsForDeviceType' | 'discoverDevices' | 'adoptDevice' | 'getCreationSchema' | 'createDevice' | 'testCreationField' | 'adoptionListCandidateFilters' | 'adoptionListCandidates' | 'adoptionRefresh' | 'adoptionAdopt' | 'adoptionRelease' | 'adoptionStartJob' | 'adoptionListJobs' | 'adoptionCancelJob' | 'adoptionResync' | 'discoveryProviders' | 'discoverAllProviders' | 'discoverProvider' | 'providerCreationType' | 'providerDiscoveryParamsSchema' | 'getDeviceStatusAggregateBatch'>;
+    readonly deviceManager: Pick<InferProvider<typeof deviceManagerCapability>, 'allocateDeviceId' | 'migrateDevice' | 'registerDevice' | 'removeDevice' | 'persistConfig' | 'getRoleDisplayDefaults' | 'setRoleDisplayDefaults' | 'listLocations' | 'addLocation' | 'removeLocation' | 'renameLocation' | 'listLocationIcons' | 'setLocationIcon' | 'listLocationDescriptions' | 'setLocationDescription' | 'listSiteZones' | 'setSiteZone' | 'removeSiteZone' | 'renameSiteZone' | 'setLocationZone' | 'listPersistedByAddon' | 'listAll' | 'getChildren' | 'getChildrenBatch' | 'getLinkedDevicesBatch' | 'listDeletedSince' | 'cleanupDeletedDevicesData' | 'removeByIntegration' | 'getBindingsBatch' | 'getAllBindings' | 'listDeviceIdsByCaps' | 'listWrappersForCap' | 'listBindableCapsForDeviceType' | 'discoverDevices' | 'adoptDevice' | 'getCreationSchema' | 'createDevice' | 'testCreationField' | 'adoptionListCandidateFilters' | 'adoptionListCandidates' | 'adoptionRefresh' | 'adoptionAdopt' | 'adoptionRelease' | 'adoptionStartJob' | 'adoptionListJobs' | 'adoptionCancelJob' | 'adoptionResync' | 'discoveryProviders' | 'discoverAllProviders' | 'discoverProvider' | 'providerCreationType' | 'providerDiscoveryParamsSchema' | 'getDeviceStatusAggregateBatch'>;
     readonly deviceProvider: Pick<InferProvider<typeof deviceProviderCapability>, 'start' | 'stop' | 'getStatus' | 'getDevices' | 'reloadDevice' | 'supportsDiscovery' | 'discoverDevices' | 'getDiscoveryParamsSchema' | 'getManualCreationType' | 'adoptDiscoveredDevice' | 'supportsManualCreation' | 'getChildCreationSchema' | 'createDevice' | 'testCreationField'>;
     readonly deviceState: Pick<InferProvider<typeof deviceStateCapability>, 'getAllSnapshots' | 'listClaims'>;
     readonly faceGallery: Pick<InferProvider<typeof faceGalleryCapability>, 'listIdentities' | 'createIdentity' | 'renameIdentity' | 'deleteIdentity' | 'listIdentitySamples' | 'auditIdentitySamples' | 'removeSample' | 'getFaceMedia' | 'assignFace' | 'unassignFace' | 'deleteFace' | 'assignFaces' | 'unassignFaces' | 'suggestFaceClusters'>;
     readonly integrations: Pick<InferProvider<typeof integrationsCapability>, 'list' | 'get' | 'getByAddonId' | 'create' | 'update' | 'delete' | 'getSettings' | 'setSettings' | 'getAvailableTypes' | 'testConnection'>;
     readonly keychainAdmin: Pick<InferProvider<typeof keychainAdminCapability>, 'status' | 'listSecrets' | 'listAudit' | 'reveal' | 'setSystemSecret' | 'deleteOrphans' | 'rotateMasterKey' | 'purgeRetiredKeys' | 'downloadRecoveryKey' | 'resetKeychain' | 'resetReport' | 'acknowledgeReset'>;
     readonly llm: Pick<InferProvider<typeof llmCapability>, 'generate' | 'generateVision' | 'cancel' | 'listProfileKinds' | 'listProfiles' | 'upsertProfile' | 'deleteProfile' | 'testProfile' | 'listModels' | 'getDefaults' | 'setDefault' | 'getUsage' | 'listModelCatalog' | 'listRuntimeNodes' | 'listNodeModels' | 'resolveModelRef' | 'installModel' | 'deleteModel' | 'getRuntimeStatus' | 'startRuntime' | 'stopRuntime'>;
-    readonly localNetwork: Pick<InferProvider<typeof localNetworkCapability>, 'list' | 'getPreferred' | 'getConnectionEndpoints' | 'getNotificationEndpoint' | 'setNotificationEndpoint' | 'getViewerEndpoints' | 'setViewerEndpoints' | 'getAddresses' | 'addCustomAddress' | 'removeCustomAddress' | 'setAddressRole' | 'getHubAddresses' | 'getAllowedAddresses' | 'setAllowedAddresses' | 'resetAllowlistToBestMatch' | 'getTlsStatus' | 'regenerateCertificate' | 'uploadCertificate' | 'downloadCa' | 'revertToGeneratedCertificate'>;
+    readonly localNetwork: Pick<InferProvider<typeof localNetworkCapability>, 'list' | 'getPreferred' | 'getConnectionEndpoints' | 'getNotificationEndpoint' | 'setNotificationEndpoint' | 'getViewerEndpoints' | 'setViewerEndpoints' | 'getAddresses' | 'addCustomAddress' | 'removeCustomAddress' | 'setAddressRole' | 'getHubAddresses' | 'getAllowedAddresses' | 'setAllowedAddresses' | 'resetAllowlistToBestMatch' | 'getTlsStatus' | 'regenerateCertificate' | 'uploadCertificate' | 'downloadCa' | 'useStoredUploadedCertificate' | 'revertToGeneratedCertificate'>;
     readonly meshNetwork: Pick<InferProvider<typeof meshNetworkCapability>, 'getStatus' | 'join' | 'startLogin' | 'leave' | 'logout' | 'listPeers' | 'testConnection'>;
     readonly metricsProvider: Pick<InferProvider<typeof metricsProviderCapability>, 'collectSnapshot' | 'getCached' | 'getCurrent' | 'getDiskSpace' | 'getGpuInfo' | 'getCpuTemperature' | 'getProcessStats' | 'listAddonInstances' | 'getAddonStats' | 'listNodeProcesses' | 'getLoadSeries'>;
     readonly mqttBroker: Pick<InferProvider<typeof mqttBrokerCapability>, 'listBrokers' | 'getBrokerConfig' | 'addBroker' | 'removeBroker' | 'testConnection' | 'startEmbeddedBroker' | 'stopEmbeddedBroker' | 'getStatus'>;

package/dist/i18n/camstack-error.d.ts

@@ -0,0 +1,31 @@
+/**
+ * A user-facing error with a STABLE code (D863).
+ *
+ * `message` is always the English text, so every consumer that knows nothing
+ * of codes (old clients, logs, the mesh) behaves exactly as before. The hub's
+ * tRPC error formatter reads `code` + `params` and, when the request language
+ * has a text for `server:<code>`, replaces the response `message`; the code
+ * stays in the payload (`data.i18n`).
+ */
+import { z } from 'zod';
+import type { TranslationParams } from './translation.js';
+/** Dotted lower-case code, e.g. `auth.invalid-credentials`. It is the key in the `server` catalog. */
+export declare const ErrorCodeSchema: z.ZodString;
+/** What travels in the error payload next to the message. */
+export declare const ErrorI18nPayloadSchema: z.ZodObject<{
+    code: z.ZodString;
+    params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>>;
+}, z.core.$strip>;
+export type ErrorI18nPayload = z.infer<typeof ErrorI18nPayloadSchema>;
+export declare class CamstackError extends Error {
+    readonly i18nCode: string;
+    readonly i18nParams: TranslationParams | undefined;
+    constructor(code: string, params: TranslationParams | undefined, englishMessage: string);
+}
+/** `throw userError('device.not-found', { id }, 'Device 12 not found')` */
+export declare function userError(code: string, params: TranslationParams | undefined, englishFallback: string): CamstackError;
+/**
+ * Finds a code on `err` or anywhere down its `.cause` chain. Duck-typed on
+ * the field so it survives a module boundary (self-contained addons).
+ */
+export declare function readErrorI18n(err: unknown): ErrorI18nPayload | null;

package/dist/i18n/translation.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Server-side translation primitives (D863) - pure, zod only.
+ *
+ * A catalog is a FLAT `Record<key, string>` per (namespace, language). A
+ * reference is `"<namespace>:<key>"`; the English text always travels next to
+ * it (`label` beside `labelKey`), so a missing key or an unknown language is
+ * the English text, never a blank or a raw key.
+ */
+import { z } from 'zod';
+/** The languages a catalog may be written in. English is the mandatory base. */
+export declare const CatalogLangSchema: z.ZodEnum<{
+    en: "en";
+    it: "it";
+}>;
+export type CatalogLang = z.infer<typeof CatalogLangSchema>;
+export declare const CATALOG_LANGS: readonly CatalogLang[];
+export declare const DEFAULT_CATALOG_LANG: CatalogLang;
+/** One catalog file: flat key to text. A file of any other shape is rejected whole. */
+export declare const CatalogFileSchema: z.ZodRecord<z.ZodString, z.ZodString>;
+export type CatalogFile = z.infer<typeof CatalogFileSchema>;
+/** `{name}` placeholders in a catalog text. */
+export type TranslationParams = Readonly<Record<string, string | number>>;
+/** Fills `{name}` placeholders; an unknown placeholder is left as written. */
+export declare function interpolate(template: string, params?: TranslationParams): string;
+/** Splits `"ns:key"`; `null` when the reference has no namespace. */
+export declare function splitTranslationRef(ref: string): {
+    ns: string;
+    key: string;
+} | null;
+/** `(namespace, key) -> text in the request language`, or `undefined` when absent. */
+export type CatalogLookup = (ns: string, key: string) => string | undefined;
+/**
+ * Returns `value` with every `labelKey` / `descriptionKey` / `titleKey` that
+ * the catalog can resolve replaced into `label` / `description` / `title`.
+ * Pure: the input is never mutated; a subtree with nothing to change is
+ * returned as the SAME object. A key the catalog does not hold keeps the
+ * English text that sits next to it.
+ */
+export declare function localizeConfigTree(value: unknown, lookup: CatalogLookup): unknown;

package/dist/index.d.ts

@@ -273,6 +273,10 @@ export type { StateLabel, StateLabelKey, StateLabelLocale } from './i18n/state-l
 export { isStateLabelKey, STATE_LABEL_KEYS, STATE_LABELS, stateLabel, } from './i18n/state-labels.js';
 export type { EventKindLabel, EventKindLabelKey, EventKindLabelLocale, } from './i18n/event-kind-labels.js';
 export { EVENT_KIND_LABEL_KEYS, EVENT_KIND_LABELS, eventKindLabel, isEventKindLabelKey, } from './i18n/event-kind-labels.js';
+export type { CatalogFile, CatalogLang, CatalogLookup, TranslationParams, } from './i18n/translation.js';
+export { CATALOG_LANGS, CatalogFileSchema, CatalogLangSchema, DEFAULT_CATALOG_LANG, interpolate, localizeConfigTree, splitTranslationRef, } from './i18n/translation.js';
+export type { ErrorI18nPayload } from './i18n/camstack-error.js';
+export { CamstackError, ErrorCodeSchema, ErrorI18nPayloadSchema, readErrorI18n, userError, } from './i18n/camstack-error.js';
 export { assertTimelapseCadences, DEFAULT_TIMELAPSE_PREVIEW_TEXT, readTimelapseGeneratedAt, TIMELAPSE_DENSE_FLOOR_SEC, TimelapseRuleInputSchema, TimelapseRulePatchSchema, TimelapseRuleSchema, TimelapseTemplateSchema, } from './notification/timelapse-rule.js';
 export { CLUSTER_MODEL_SCOPED_STEPS, CLUSTER_MODEL_SECTION_ID, CLUSTER_STEP_SETTING_FIELDS, type ClusterModelScopedStep, type ClusterStepModels, type ClusterStepSettingField, type ClusterStepSettings, clusterModelSettingKey, clusterStepSettingFieldsFor, clusterStepSettingKey, DEFAULT_CLUSTER_STEP_MODELS, DEFAULT_CLUSTER_STEP_SETTINGS, DEFAULT_MIN_LANDMARK_FACE_SIZE_PX, type HydratedClusterSection, type HydratedClusterView, interpretStoredClusterModel, type InvalidClusterStepModelEntry, invalidClusterStepModelEntries, isClusterScopedStep, overlayClusterStepSettings, pickClusterStepModels, pickClusterStepSettings, pickInvalidClusterStepModels, readClusterStepModels, readClusterStepSettings, resolveClusterStepModelId, type StepModelScope, type StoredClusterModelInterpretation, } from './pipeline/cluster-model-scope.js';
 export { CAMERA_SENSORS_NOT_LOADED, CAMERA_SENSORS_SETTINGS_KEY, CAMERA_TRIGGER, type CameraSensorAttachment, CameraSensorAttachmentSchema, type CameraSensorRef, CameraSensorRefSchema, cameraSensorRefKey, type CameraSensorsConfig, CameraSensorsConfigSchema, type CameraOwnMotion, CameraOwnMotionSchema, type CameraRawLevel, CameraRawLevelSchema, type CameraSensorEntry, CameraSensorEntrySchema, type CameraSensorMode, CameraSensorModeSchema, type CameraSensorsNotEnforced, CameraSensorsNotEnforcedSchema, type CameraSensorsNotForwarded, CameraSensorsNotForwardedSchema, type CameraSensorsStatus, CameraSensorsStatusSchema, DEFAULT_CAMERA_SENSOR_MODE, MAX_CAMERA_SENSORS, type MotionTriggeredBy, type MotionTriggeredByReading, MotionTriggeredBySchema, readMotionTriggeredBy, } from './pipeline/camera-sensors.js';
@@ -288,6 +292,7 @@ export * from './pipeline/load-balancing/index.js';
 export * from './pipeline/node-benchmark/index.js';
 export { deriveRootFaceRefineRect, ROOT_FACE_REFINE_INPUT_PX, ROOT_FACE_REFINE_SCALE, } from './pipeline/root-face-crop.js';
 export { DEFAULT_DETAIL_CROP_CONVENTION, DETAIL_CROP_PADDING_FIELD, DETAIL_CROP_PADDING_KEY, DETAIL_CROP_SECTION_ID, DETAIL_CROP_SQUARE_KEY, type DetailCropConvention, DetailCropConventionSchema, type DetailCropRect, deriveDetailCropRect, FULL_IMAGE_BBOX, type HydratedSettingsSection, type HydratedSettingsView, pickDetailCropConvention, readDetailCropConvention, } from './pipeline/detail-crop.js';
+export { FACE_RESCORE_INTERVAL_FIELD, FACE_RESCORE_INTERVAL_KEY, FACE_RESCORE_INTERVAL_MIN_RUNNING, FACE_RESCORE_SECTION_ID, type FaceRescoreSettingsView, pickFaceRescoreIntervalMinutes, readFaceRescoreIntervalMinutes, } from './pipeline/face-rescore-schedule.js';
 export { DEFAULT_NATIVE_LEASE_SETTINGS, NATIVE_LEASE_ACTIVITY_FIELD, NATIVE_LEASE_ACTIVITY_KEY, NATIVE_LEASE_ADMISSION_FIELD, NATIVE_LEASE_ADMISSION_KEY, NATIVE_LEASE_BUDGET_FIELD, NATIVE_LEASE_BUDGET_KEY, NATIVE_LEASE_HOLD_FIELD, NATIVE_LEASE_HOLD_KEY, NATIVE_LEASE_SCENE_BUDGET_FIELD, NATIVE_LEASE_SCENE_BUDGET_KEY, NATIVE_LEASE_SECTION_ID, NATIVE_LEASE_TILE_BUDGET_FIELD, NATIVE_LEASE_TILE_BUDGET_KEY, type NativeLeaseAdmission, NativeLeaseAdmissionSchema, type NativeLeaseKnob, type NativeLeaseNumberKnob, type NativeLeaseSettings, type NativeLeaseSettingsOverride, NativeLeaseSettingsSchema, pickNativeLeaseOverride, readNativeLeaseOverride, } from './pipeline/native-lease.js';
 export { ACCESS_ROLES, type AccessRoleAssignment, type AccessRoleId, type AccessRoleSpec, buildRoleScopes, detectAccessRole, roleSpec, } from './schemas/access-roles.js';
 export { type ApiKeyRecord, ApiKeyRecordSchema, type CapScope, CapScopeSchema, type DeviceSelector, DeviceSelectorSchema, type DeviceTokenScope, type MethodAccess, MethodAccessSchema, type ScopedToken, ScopedTokenSchema, type TokenScope, TokenScopeSchema, type UserRecord, UserRecordSchema, } from './schemas/auth-records.js';
@@ -322,3 +327,4 @@ export type { SiteZone } from './device/site-zone.js';
 export { SiteZoneSchema, siteZoneKey } from './device/site-zone.js';
 export type { ServerNameInfo } from './system/server-name.js';
 export { resolveServerName, SERVER_NAME_MAX_LENGTH, SERVER_NAME_SETTING_KEY, ServerNameInfoSchema, ServerNameSchema, shortHostname, } from './system/server-name.js';
+export { armRemovalReconcile, reconcileRemovedDevices, REMOVAL_RECONCILE_INTERVAL_MS, type RemovalReconcileOptions, type RemovalReconcileOutcome, type TombstoneSource, } from './device/device-removal-reconcile.js';