@matter/types 0.17.4 → 0.17.5-alpha.0-20260702-a2cd6f764

package/dist/cjs/clusters/access-control.d.ts

@@ -27,7 +27,7 @@ import type { DeviceTypeId } from "../datatype/DeviceTypeId.js";
  * The Access Control Cluster shall be present on the root node endpoint of each Node, and shall NOT be present on any
  * other Endpoint of any Node.
  *
- * @see {@link MatterSpecification.v151.Core} § 9.10
+ * @see {@link MatterSpecification.v16.Core} § 9.10
  */
 export declare namespace AccessControl {
     /**
@@ -41,9 +41,9 @@ export declare namespace AccessControl {
     export const name: "AccessControl";
 
     /**
-     * The cluster revision assigned by {@link MatterSpecification.v151.Cluster}.
+     * The cluster revision assigned by {@link MatterSpecification.v16.Cluster}.
      */
-    export const revision: 2;
+    export const revision: 3;
 
     /**
      * Canonical metadata for the AccessControl cluster.
@@ -68,7 +68,9 @@ export declare namespace AccessControl {
          * Control Privilege Granting algorithm to determine if a subject has privilege to interact with targets on the
          * Node.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.6.3
+         * Every AccessControlEntryStruct in the ACL attribute shall NOT include the AuxiliaryType field.
+         *
+         * @see {@link MatterSpecification.v16.Core} § 9.10.6.3
          */
         acl: AccessControlEntry[];
 
@@ -80,7 +82,7 @@ export declare namespace AccessControl {
          * implementation, it is recommended to only use the minimum value required and avoid reporting a higher value
          * than the required minimum.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.6.5
+         * @see {@link MatterSpecification.v16.Core} § 9.10.6.5
          */
         subjectsPerAccessControlEntry: number;
 
@@ -92,7 +94,7 @@ export declare namespace AccessControl {
          * implementation, it is recommended to only use the minimum value required and avoid reporting a higher value
          * than the required minimum.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.6.6
+         * @see {@link MatterSpecification.v16.Core} § 9.10.6.6
          */
         targetsPerAccessControlEntry: number;
 
@@ -104,7 +106,7 @@ export declare namespace AccessControl {
          * implementation, it is recommended to only use the minimum value required and avoid reporting a higher value
          * than the required minimum.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.6.7
+         * @see {@link MatterSpecification.v16.Core} § 9.10.6.7
          */
         accessControlEntriesPerFabric: number;
     }
@@ -119,7 +121,7 @@ export declare namespace AccessControl {
          *
          * The Access Control Extension list shall support a single extension entry per supported fabric.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.6.4
+         * @see {@link MatterSpecification.v16.Core} § 9.10.6.4
          */
         extension: AccessControlExtension[];
     }
@@ -143,7 +145,7 @@ export declare namespace AccessControl {
          * See Section 9.10.4.2.1, "Managed Device Feature Usage Restrictions" for limitations on the use of access
          * restrictions.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.6.8
+         * @see {@link MatterSpecification.v16.Core} § 9.10.6.8
          */
         commissioningArl: CommissioningAccessRestrictionEntry[];
 
@@ -166,11 +168,48 @@ export declare namespace AccessControl {
          * See Section 9.10.4.2.1, "Managed Device Feature Usage Restrictions" for limitations on the use of access
          * restrictions.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.6.9
+         * @see {@link MatterSpecification.v16.Core} § 9.10.6.9
          */
         arl: AccessRestrictionEntry[];
     }
 
+    /**
+     * {@link AccessControl} supports these elements if it supports feature "Auxiliary".
+     */
+    export interface AuxiliaryAttributes {
+        /**
+         * This attribute, when present, shall provide a list of additional ACL entries generated by the server that
+         * shall be applied during the Access Control Privilege Granting algorithm. These ACL entries are not writable
+         * or removable using this attribute; they reflect the underlying feature that generated them.
+         *
+         * Features such as the Groupcast cluster may cause entries to appear in this attribute as a result of internal
+         * configurations that grant access to certain subjects by mechanisms other than explicit management of the ACL
+         * list.
+         *
+         * The purpose of exposing these entries in the data model is to ensure transparency in the access granted to
+         * subjects.
+         *
+         * Changes to this attribute resulting from reconfiguration of the underlying features shall cause the
+         * AuxiliaryAccessUpdated event to be generated when they occur. See the AuxiliaryAccessUpdated Event for
+         * additional constraints.
+         *
+         * Servers SHOULD attempt to make the list as concise as possible while respecting the limits such as
+         * SubjectsPerAccessControlEntry and TargetsPerAccessControlEntry.
+         *
+         * The entries in this list shall NOT count towards the AccessControlEntriesPerFabric attribute limit, which
+         * applies only to the writable entries in the ACL attribute.
+         *
+         * Every AccessControlEntryStruct in the AuxiliaryACL shall have the AuxiliaryType field set to a value
+         * indicating the reason for existence of the entry in the list.
+         *
+         * Each feature which would cause entries to appear in this attribute shall individually specify the format of
+         * entries that are auto-generated, and under which circumstances they are generated.
+         *
+         * @see {@link MatterSpecification.v16.Core} § 9.10.6.10
+         */
+        auxiliaryAcl: AccessControlEntry[];
+    }
+
     /**
      * Attributes that may appear in {@link AccessControl}.
      *
@@ -190,7 +229,9 @@ export declare namespace AccessControl {
          * Control Privilege Granting algorithm to determine if a subject has privilege to interact with targets on the
          * Node.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.6.3
+         * Every AccessControlEntryStruct in the ACL attribute shall NOT include the AuxiliaryType field.
+         *
+         * @see {@link MatterSpecification.v16.Core} § 9.10.6.3
          */
         acl: AccessControlEntry[];
 
@@ -202,7 +243,7 @@ export declare namespace AccessControl {
          * implementation, it is recommended to only use the minimum value required and avoid reporting a higher value
          * than the required minimum.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.6.5
+         * @see {@link MatterSpecification.v16.Core} § 9.10.6.5
          */
         subjectsPerAccessControlEntry: number;
 
@@ -214,7 +255,7 @@ export declare namespace AccessControl {
          * implementation, it is recommended to only use the minimum value required and avoid reporting a higher value
          * than the required minimum.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.6.6
+         * @see {@link MatterSpecification.v16.Core} § 9.10.6.6
          */
         targetsPerAccessControlEntry: number;
 
@@ -226,7 +267,7 @@ export declare namespace AccessControl {
          * implementation, it is recommended to only use the minimum value required and avoid reporting a higher value
          * than the required minimum.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.6.7
+         * @see {@link MatterSpecification.v16.Core} § 9.10.6.7
          */
         accessControlEntriesPerFabric: number;
 
@@ -236,7 +277,7 @@ export declare namespace AccessControl {
          *
          * The Access Control Extension list shall support a single extension entry per supported fabric.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.6.4
+         * @see {@link MatterSpecification.v16.Core} § 9.10.6.4
          */
         extension: AccessControlExtension[];
 
@@ -255,7 +296,7 @@ export declare namespace AccessControl {
          * See Section 9.10.4.2.1, "Managed Device Feature Usage Restrictions" for limitations on the use of access
          * restrictions.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.6.8
+         * @see {@link MatterSpecification.v16.Core} § 9.10.6.8
          */
         commissioningArl: CommissioningAccessRestrictionEntry[];
 
@@ -278,9 +319,41 @@ export declare namespace AccessControl {
          * See Section 9.10.4.2.1, "Managed Device Feature Usage Restrictions" for limitations on the use of access
          * restrictions.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.6.9
+         * @see {@link MatterSpecification.v16.Core} § 9.10.6.9
          */
         arl: AccessRestrictionEntry[];
+
+        /**
+         * This attribute, when present, shall provide a list of additional ACL entries generated by the server that
+         * shall be applied during the Access Control Privilege Granting algorithm. These ACL entries are not writable
+         * or removable using this attribute; they reflect the underlying feature that generated them.
+         *
+         * Features such as the Groupcast cluster may cause entries to appear in this attribute as a result of internal
+         * configurations that grant access to certain subjects by mechanisms other than explicit management of the ACL
+         * list.
+         *
+         * The purpose of exposing these entries in the data model is to ensure transparency in the access granted to
+         * subjects.
+         *
+         * Changes to this attribute resulting from reconfiguration of the underlying features shall cause the
+         * AuxiliaryAccessUpdated event to be generated when they occur. See the AuxiliaryAccessUpdated Event for
+         * additional constraints.
+         *
+         * Servers SHOULD attempt to make the list as concise as possible while respecting the limits such as
+         * SubjectsPerAccessControlEntry and TargetsPerAccessControlEntry.
+         *
+         * The entries in this list shall NOT count towards the AccessControlEntriesPerFabric attribute limit, which
+         * applies only to the writable entries in the ACL attribute.
+         *
+         * Every AccessControlEntryStruct in the AuxiliaryACL shall have the AuxiliaryType field set to a value
+         * indicating the reason for existence of the entry in the list.
+         *
+         * Each feature which would cause entries to appear in this attribute shall individually specify the format of
+         * entries that are auto-generated, and under which circumstances they are generated.
+         *
+         * @see {@link MatterSpecification.v16.Core} § 9.10.6.10
+         */
+        auxiliaryAcl: AccessControlEntry[];
     }
 
     /**
@@ -311,7 +384,7 @@ export declare namespace AccessControl {
          *   order to gain enhanced access. For this reason the device SHOULD perform the Fabric Table Vendor ID
          *   Verification Procedure.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.8.1
+         * @see {@link MatterSpecification.v16.Core} § 9.10.8.1
          */
         reviewFabricRestrictions(request: ReviewFabricRestrictionsRequest): MaybePromise<ReviewFabricRestrictionsResponse>;
     }
@@ -335,7 +408,7 @@ export declare namespace AccessControl {
          *
          *   - Each removed entry shall generate an event with ChangeType Removed.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.9.1
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.1
          */
         accessControlEntryChanged: AccessControlEntryChangedEvent;
     }
@@ -354,7 +427,7 @@ export declare namespace AccessControl {
          *
          *   - Each removed extension shall generate an event with ChangeType Removed.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.9.2
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.2
          */
         accessControlExtensionChanged: AccessControlExtensionChangedEvent;
     }
@@ -369,11 +442,31 @@ export declare namespace AccessControl {
          * receipt of the ReviewFabricRestrictions command, this event may include additional steps that the client may
          * present to the user in order to help the user locate the user interface for the Managed Device feature.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.9.3
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.3
          */
         fabricRestrictionReviewUpdate: FabricRestrictionReviewUpdateEvent;
     }
 
+    /**
+     * {@link AccessControl} supports these elements if it supports feature "Auxiliary".
+     */
+    export interface AuxiliaryEvents {
+        /**
+         * The server shall generate AuxiliaryAccessUpdated events whenever its AuxiliaryACL attribute data changes due
+         * to system management operations.
+         *
+         * This event SHOULD be generated only once per batch of changes, if many changes are done together.
+         *
+         * Administrators may use this event to trigger re-evaluation of overall access control currently granted to the
+         * node.
+         *
+         * Leaving a Fabric shall NOT generate this event.
+         *
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.4
+         */
+        auxiliaryAccessUpdated: AuxiliaryAccessUpdatedEvent;
+    }
+
     /**
      * Events that may appear in {@link AccessControl}.
      *
@@ -391,7 +484,7 @@ export declare namespace AccessControl {
          *
          *   - Each removed entry shall generate an event with ChangeType Removed.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.9.1
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.1
          */
         accessControlEntryChanged: AccessControlEntryChangedEvent;
 
@@ -405,7 +498,7 @@ export declare namespace AccessControl {
          *
          *   - Each removed extension shall generate an event with ChangeType Removed.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.9.2
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.2
          */
         accessControlExtensionChanged: AccessControlExtensionChangedEvent;
 
@@ -415,9 +508,24 @@ export declare namespace AccessControl {
          * receipt of the ReviewFabricRestrictions command, this event may include additional steps that the client may
          * present to the user in order to help the user locate the user interface for the Managed Device feature.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.9.3
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.3
          */
         fabricRestrictionReviewUpdate: FabricRestrictionReviewUpdateEvent;
+
+        /**
+         * The server shall generate AuxiliaryAccessUpdated events whenever its AuxiliaryACL attribute data changes due
+         * to system management operations.
+         *
+         * This event SHOULD be generated only once per batch of changes, if many changes are done together.
+         *
+         * Administrators may use this event to trigger re-evaluation of overall access control currently granted to the
+         * node.
+         *
+         * Leaving a Fabric shall NOT generate this event.
+         *
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.4
+         */
+        auxiliaryAccessUpdated: AuxiliaryAccessUpdatedEvent;
     }
 
     export type Components = [
@@ -429,15 +537,17 @@ export declare namespace AccessControl {
             attributes: ManagedDeviceAttributes,
             commands: ManagedDeviceCommands,
             events: ManagedDeviceEvents
-        }
+        },
+
+        { flags: { auxiliary: true }, attributes: AuxiliaryAttributes, events: AuxiliaryEvents }
     ];
 
-    export type Features = "Extension" | "ManagedDevice";
+    export type Features = "Extension" | "ManagedDevice" | "Auxiliary";
 
     /**
      * These are optional features supported by AccessControlCluster.
      *
-     * @see {@link MatterSpecification.v151.Core} § 9.10.4
+     * @see {@link MatterSpecification.v16.Core} § 9.10.4
      */
     export enum Feature {
         /**
@@ -445,7 +555,7 @@ export declare namespace AccessControl {
          *
          * This feature indicates the device supports ACL Extension attribute.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.4.1
+         * @see {@link MatterSpecification.v16.Core} § 9.10.4.1
          */
         Extension = "Extension",
 
@@ -496,13 +606,25 @@ export declare namespace AccessControl {
          * See Section 6.6.2, "Access Control Model" for a description of how access control is impacted by the ARL
          * attribute.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.4.2
+         * @see {@link MatterSpecification.v16.Core} § 9.10.4.2
+         */
+        ManagedDevice = "ManagedDevice",
+
+        /**
+         * Auxiliary (AUX)
+         *
+         * This feature indicates that there may be entries in the AuxiliaryACL attribute which indicate synthesized ACL
+         * entries. For example, when this feature is supported, the configuration of groups via the Groupcast cluster
+         * may lead, under some circumstances, to some access being granted via auxiliary means (not explicit ACL
+         * attribute list writes) to some subjects by virtue of group membership. See the AuxiliaryACL attribute.
+         *
+         * @see {@link MatterSpecification.v16.Core} § 9.10.4.3
          */
-        ManagedDevice = "ManagedDevice"
+        Auxiliary = "Auxiliary"
     }
 
     /**
-     * @see {@link MatterSpecification.v151.Core} § 9.10.5.6
+     * @see {@link MatterSpecification.v16.Core} § 9.10.5.7
      */
     export class AccessControlEntry {
         constructor(values?: Partial<AccessControlEntry>);
@@ -548,14 +670,14 @@ export declare namespace AccessControl {
          *   particular device type; a client granted Operate privilege may still be able to perform configuration in
          *   Fan Control Clusters included in other device types on the same Node.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.5.6.1
+         * @see {@link MatterSpecification.v16.Core} § 9.10.5.7.1
          */
         privilege: AccessControlEntryPrivilege;
 
         /**
          * The AuthMode field shall specify the authentication mode required by this Access Control Entry.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.5.6.2
+         * @see {@link MatterSpecification.v16.Core} § 9.10.5.7.2
          */
         authMode: AccessControlEntryAuthMode;
 
@@ -569,7 +691,7 @@ export declare namespace AccessControl {
          *
          * Subject ID shall be of type uint64 with semantics depending on the entry's AuthMode as follows:
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.5.6.3
+         * @see {@link MatterSpecification.v16.Core} § 9.10.5.7.3
          */
         subjects: SubjectId[] | null;
 
@@ -587,15 +709,27 @@ export declare namespace AccessControl {
          *
          * A target grants access based on the presence of fields as follows:
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.5.6.4
+         * @see {@link MatterSpecification.v16.Core} § 9.10.5.7.4
          */
         targets: AccessControlTarget[] | null;
 
+        /**
+         * This field, if present, shall indicate the type of AuxiliaryACL entry stored. For example, for Groupcast
+         * cluster synthesized entries, this would be set to Groupcast. An administrator may use the information
+         * provided by this field to determine the feature that caused the auxiliary ACL entry to be created, so that
+         * access can be managed via that other feature's operations.
+         *
+         * This field shall NOT be present in entries in the ACL attribute.
+         *
+         * @see {@link MatterSpecification.v16.Core} § 9.10.5.7.5
+         */
+        auxiliaryType?: AccessControlAuxiliaryType;
+
         fabricIndex: FabricIndex;
     }
 
     /**
-     * @see {@link MatterSpecification.v151.Core} § 9.10.5.7
+     * @see {@link MatterSpecification.v16.Core} § 9.10.5.8
      */
     export class AccessControlExtension {
         constructor(values?: Partial<AccessControlExtension>);
@@ -618,7 +752,7 @@ export declare namespace AccessControl {
          *   it. Such a canonical bytestream could be generated by encoding specific entry fields and sub-fields (such
          *   as lists) in specific order and specific format (e.g. TLV).
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.5.7.1
+         * @see {@link MatterSpecification.v16.Core} § 9.10.5.8.1
          */
         data: Bytes;
 
@@ -628,7 +762,7 @@ export declare namespace AccessControl {
     /**
      * This structure describes a current access restriction when there is no accessing fabric.
      *
-     * @see {@link MatterSpecification.v151.Core} § 9.10.5.10
+     * @see {@link MatterSpecification.v16.Core} § 9.10.5.11
      */
     export class CommissioningAccessRestrictionEntry {
         constructor(values?: Partial<CommissioningAccessRestrictionEntry>);
@@ -637,7 +771,7 @@ export declare namespace AccessControl {
          * This field shall indicate the endpoint having associated access restrictions scoped to the associated fabric
          * of the list containing the entry.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.5.10.1
+         * @see {@link MatterSpecification.v16.Core} § 9.10.5.11.1
          */
         endpoint: EndpointNumber;
 
@@ -645,7 +779,7 @@ export declare namespace AccessControl {
          * This field shall indicate the cluster having associated access restrictions under the entry's Endpoint,
          * scoped to the associated fabric of the list containing the entry.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.5.10.2
+         * @see {@link MatterSpecification.v16.Core} § 9.10.5.11.2
          */
         cluster: ClusterId;
 
@@ -655,7 +789,7 @@ export declare namespace AccessControl {
          *
          * This list shall NOT be empty.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.5.10.3
+         * @see {@link MatterSpecification.v16.Core} § 9.10.5.11.3
          */
         restrictions: AccessRestriction[];
     }
@@ -663,7 +797,7 @@ export declare namespace AccessControl {
     /**
      * This structure describes a current access restriction on the fabric.
      *
-     * @see {@link MatterSpecification.v151.Core} § 9.10.5.9
+     * @see {@link MatterSpecification.v16.Core} § 9.10.5.10
      */
     export class AccessRestrictionEntry {
         constructor(values?: Partial<AccessRestrictionEntry>);
@@ -672,7 +806,7 @@ export declare namespace AccessControl {
          * This field shall indicate the endpoint having associated access restrictions scoped to the associated fabric
          * of the list containing the entry.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.5.9.1
+         * @see {@link MatterSpecification.v16.Core} § 9.10.5.10.1
          */
         endpoint: EndpointNumber;
 
@@ -680,7 +814,7 @@ export declare namespace AccessControl {
          * This field shall indicate the cluster having associated access restrictions under the entry's Endpoint,
          * scoped to the associated fabric of the list containing the entry.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.5.9.2
+         * @see {@link MatterSpecification.v16.Core} § 9.10.5.10.2
          */
         cluster: ClusterId;
 
@@ -690,7 +824,7 @@ export declare namespace AccessControl {
          *
          * This list shall NOT be empty.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.5.9.3
+         * @see {@link MatterSpecification.v16.Core} § 9.10.5.10.3
          */
         restrictions: AccessRestriction[];
 
@@ -721,7 +855,7 @@ export declare namespace AccessControl {
      *   order to gain enhanced access. For this reason the device SHOULD perform the Fabric Table Vendor ID
      *   Verification Procedure.
      *
-     * @see {@link MatterSpecification.v151.Core} § 9.10.8.1
+     * @see {@link MatterSpecification.v16.Core} § 9.10.8.1
      */
     export class ReviewFabricRestrictionsRequest {
         constructor(values?: Partial<ReviewFabricRestrictionsRequest>);
@@ -730,7 +864,7 @@ export declare namespace AccessControl {
          * When the ARL field is provided, it indicates the specific restrictions that are requested for review. An
          * empty list represents a generic request for review of all restrictions.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.8.1.1
+         * @see {@link MatterSpecification.v16.Core} § 9.10.8.1.1
          */
         arl: CommissioningAccessRestrictionEntry[];
     }
@@ -739,7 +873,7 @@ export declare namespace AccessControl {
      * Returns the review token for the request, which can be used to correlate with a FabricRestrictionReviewUpdate
      * event.
      *
-     * @see {@link MatterSpecification.v151.Core} § 9.10.8.2
+     * @see {@link MatterSpecification.v16.Core} § 9.10.8.2
      */
     export class ReviewFabricRestrictionsResponse {
         constructor(values?: Partial<ReviewFabricRestrictionsResponse>);
@@ -748,7 +882,7 @@ export declare namespace AccessControl {
          * This field shall specify a Token that can be used to correlate a ReviewFabricRestrictionsResponse with a
          * FabricRestrictionReviewUpdate event.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.8.2.1
+         * @see {@link MatterSpecification.v16.Core} § 9.10.8.2.1
          */
         token: number | bigint;
     }
@@ -763,7 +897,7 @@ export declare namespace AccessControl {
      *
      *   - Each removed entry shall generate an event with ChangeType Removed.
      *
-     * @see {@link MatterSpecification.v151.Core} § 9.10.9.1
+     * @see {@link MatterSpecification.v16.Core} § 9.10.9.1
      */
     export class AccessControlEntryChangedEvent {
         constructor(values?: Partial<AccessControlEntryChangedEvent>);
@@ -774,7 +908,7 @@ export declare namespace AccessControl {
          * Exactly one of AdminNodeID and AdminPasscodeID shall be set, depending on whether the change occurred via a
          * CASE or PASE session; the other shall be null.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.9.1.1
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.1.1
          */
         adminNodeId: NodeId | null;
 
@@ -785,14 +919,14 @@ export declare namespace AccessControl {
          * Exactly one of AdminNodeID and AdminPasscodeID shall be set, depending on whether the change occurred via a
          * CASE or PASE session; the other shall be null.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.9.1.2
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.1.2
          */
         adminPasscodeId: number | null;
 
         /**
          * The type of change as appropriate.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.9.1.3
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.1.3
          */
         changeType: ChangeType;
 
@@ -802,7 +936,7 @@ export declare namespace AccessControl {
          * This field SHOULD be set if resources are adequate for it; otherwise it shall be set to NULL if resources are
          * scarce.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.9.1.4
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.1.4
          */
         latestValue: AccessControlEntry | null;
 
@@ -819,7 +953,7 @@ export declare namespace AccessControl {
      *
      *   - Each removed extension shall generate an event with ChangeType Removed.
      *
-     * @see {@link MatterSpecification.v151.Core} § 9.10.9.2
+     * @see {@link MatterSpecification.v16.Core} § 9.10.9.2
      */
     export class AccessControlExtensionChangedEvent {
         constructor(values?: Partial<AccessControlExtensionChangedEvent>);
@@ -830,7 +964,7 @@ export declare namespace AccessControl {
          * Exactly one of AdminNodeID and AdminPasscodeID shall be set, depending on whether the change occurred via a
          * CASE or PASE session; the other shall be null.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.9.2.1
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.2.1
          */
         adminNodeId: NodeId | null;
 
@@ -841,14 +975,14 @@ export declare namespace AccessControl {
          * Exactly one of AdminNodeID and AdminPasscodeID shall be set, depending on whether the change occurred via a
          * CASE or PASE session; the other shall be null.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.9.2.2
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.2.2
          */
         adminPasscodeId: number | null;
 
         /**
          * The type of change as appropriate.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.9.2.3
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.2.3
          */
         changeType: ChangeType;
 
@@ -858,7 +992,7 @@ export declare namespace AccessControl {
          * This field SHOULD be set if resources are adequate for it; otherwise it shall be set to NULL if resources are
          * scarce.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.9.2.4
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.2.4
          */
         latestValue: AccessControlExtension | null;
 
@@ -871,7 +1005,7 @@ export declare namespace AccessControl {
      * ReviewFabricRestrictions command, this event may include additional steps that the client may present to the user
      * in order to help the user locate the user interface for the Managed Device feature.
      *
-     * @see {@link MatterSpecification.v151.Core} § 9.10.9.3
+     * @see {@link MatterSpecification.v16.Core} § 9.10.9.3
      */
     export class FabricRestrictionReviewUpdateEvent {
         constructor(values?: Partial<FabricRestrictionReviewUpdateEvent>);
@@ -880,7 +1014,7 @@ export declare namespace AccessControl {
          * This field shall indicate the Token that can be used to correlate a ReviewFabricRestrictionsResponse with a
          * FabricRestrictionReviewUpdate event.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.9.3.1
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.3.1
          */
         token: number | bigint;
 
@@ -894,7 +1028,7 @@ export declare namespace AccessControl {
          * Examples include "Please try again and immediately access device display for further instructions." or
          * "Please check email associated with your Acme account."
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.9.3.2
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.3.2
          */
         instruction?: string;
 
@@ -943,7 +1077,7 @@ export declare namespace AccessControl {
          *     Administrator SHOULD provide details, such as the VID, to the user about the device sending the event so
          *     that the user can make an informed decision about whether to trust the URL.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.9.3.3
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.3.3
          */
         arlRequestFlowUrl?: string;
 
@@ -951,7 +1085,35 @@ export declare namespace AccessControl {
     }
 
     /**
-     * @see {@link MatterSpecification.v151.Core} § 9.10.5.1
+     * The server shall generate AuxiliaryAccessUpdated events whenever its AuxiliaryACL attribute data changes due to
+     * system management operations.
+     *
+     * This event SHOULD be generated only once per batch of changes, if many changes are done together.
+     *
+     * Administrators may use this event to trigger re-evaluation of overall access control currently granted to the
+     * node.
+     *
+     * Leaving a Fabric shall NOT generate this event.
+     *
+     * @see {@link MatterSpecification.v16.Core} § 9.10.9.4
+     */
+    export class AuxiliaryAccessUpdatedEvent {
+        constructor(values?: Partial<AuxiliaryAccessUpdatedEvent>);
+
+        /**
+         * The AdminNodeID field shall contain the NodeID of the Administrator that caused the action which led to
+         * changes to the AuxiliaryACL. If no information is available, such as when a change is internally initiated,
+         * this field shall be null.
+         *
+         * @see {@link MatterSpecification.v16.Core} § 9.10.9.4.1
+         */
+        adminNodeId: NodeId | null;
+
+        fabricIndex: FabricIndex;
+    }
+
+    /**
+     * @see {@link MatterSpecification.v16.Core} § 9.10.5.1
      */
     export enum ChangeType {
         /**
@@ -971,7 +1133,7 @@ export declare namespace AccessControl {
     }
 
     /**
-     * @see {@link MatterSpecification.v151.Core} § 9.10.5.2
+     * @see {@link MatterSpecification.v16.Core} § 9.10.5.2
      */
     export enum AccessControlEntryPrivilege {
         /**
@@ -989,7 +1151,7 @@ export declare namespace AccessControl {
          *
          * This value implicitly grants View privileges
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.5.2.1
+         * @see {@link MatterSpecification.v16.Core} § 9.10.5.2.1
          */
         Operate = 3,
 
@@ -998,7 +1160,7 @@ export declare namespace AccessControl {
          *
          * This value implicitly grants Operate & View privileges
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.5.2.2
+         * @see {@link MatterSpecification.v16.Core} § 9.10.5.2.2
          */
         Manage = 4,
 
@@ -1007,13 +1169,13 @@ export declare namespace AccessControl {
          *
          * This value implicitly grants Manage, Operate & View privileges
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.5.2.3
+         * @see {@link MatterSpecification.v16.Core} § 9.10.5.2.3
          */
         Administer = 5
     }
 
     /**
-     * @see {@link MatterSpecification.v151.Core} § 9.10.5.3
+     * @see {@link MatterSpecification.v16.Core} § 9.10.5.3
      */
     export enum AccessRestrictionType {
         /**
@@ -1038,7 +1200,7 @@ export declare namespace AccessControl {
     }
 
     /**
-     * @see {@link MatterSpecification.v151.Core} § 9.10.5.4
+     * @see {@link MatterSpecification.v16.Core} § 9.10.5.4
      */
     export enum AccessControlEntryAuthMode {
         /**
@@ -1058,7 +1220,22 @@ export declare namespace AccessControl {
     }
 
     /**
-     * @see {@link MatterSpecification.v151.Core} § 9.10.5.5
+     * @see {@link MatterSpecification.v16.Core} § 9.10.5.5
+     */
+    export enum AccessControlAuxiliaryType {
+        /**
+         * This ACL entry exists because of some system reason and is likely non-revocable
+         */
+        System = 0,
+
+        /**
+         * Synthesized via Groupcast Cluster administrator-configured group membership
+         */
+        Groupcast = 1
+    }
+
+    /**
+     * @see {@link MatterSpecification.v16.Core} § 9.10.5.6
      */
     export class AccessControlTarget {
         constructor(values?: Partial<AccessControlTarget>);
@@ -1069,9 +1246,9 @@ export declare namespace AccessControl {
 
     /**
      * This structure describes an access restriction that would be applied to a specific data model element on a given
-     * endpoint/cluster pair (see Section 9.10.5.9, "AccessRestrictionEntryStruct").
+     * endpoint/cluster pair (see Section 9.10.5.10, "AccessRestrictionEntryStruct").
      *
-     * @see {@link MatterSpecification.v151.Core} § 9.10.5.8
+     * @see {@link MatterSpecification.v16.Core} § 9.10.5.9
      */
     export class AccessRestriction {
         constructor(values?: Partial<AccessRestriction>);
@@ -1079,7 +1256,7 @@ export declare namespace AccessControl {
         /**
          * This field shall indicate the type of restriction, for example, AttributeAccessForbidden.
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.5.8.1
+         * @see {@link MatterSpecification.v16.Core} § 9.10.5.9.1
          */
         type: AccessRestrictionType;
 
@@ -1094,7 +1271,7 @@ export declare namespace AccessControl {
          * A null value shall indicate the wildcard value for the given value of Type (i.e. all elements associated with
          * the Type under the associated endpoint and cluster for the containing AccessRestrictionEntryStruct).
          *
-         * @see {@link MatterSpecification.v151.Core} § 9.10.5.8.2
+         * @see {@link MatterSpecification.v16.Core} § 9.10.5.9.2
          */
         id: number | null;
     }