camstack 1.2.183 → 1.2.184

package/dist/{chunk-RBYTYOMU.js → chunk-CTW2RQUZ.js}

@@ -25164,14 +25164,14 @@ var LlmProfileSchema = external_exports.object({
   */
   appleFoundation: external_exports.object({ nodeId: external_exports.string() }).optional()
 });
-var ConfigSchemaPassthrough$2 = external_exports.unknown();
+var ConfigSchemaPassthrough$3 = external_exports.unknown();
 var LlmProfileKindDescriptorSchema = external_exports.object({
   kind: LlmProfileKindSchema,
   label: external_exports.string(),
   icon: external_exports.string(),
   /** Stamped by each provider so the concat-fanned catalog stays routable. */
   addonId: external_exports.string(),
-  configSchema: ConfigSchemaPassthrough$2
+  configSchema: ConfigSchemaPassthrough$3
 });
 var LlmDefaultSelectorSchema = external_exports.union([external_exports.object({ consumer: external_exports.string() }), external_exports.object({ purpose: external_exports.enum(["text", "vision"]) })]);
 var LlmDefaultSchema = external_exports.object({
@@ -26274,7 +26274,7 @@ var TargetKindCapsSchema = external_exports.object({
   ttl: external_exports.boolean(),
   bodyMaxLen: external_exports.number().int().positive()
 });
-var ConfigSchemaPassthrough$1 = external_exports.unknown();
+var ConfigSchemaPassthrough$2 = external_exports.unknown();
 var TargetKindSchema = external_exports.object({
   kind: external_exports.string(),
   label: external_exports.string(),
@@ -26311,7 +26311,7 @@ var TargetKindSchema = external_exports.object({
   * its raster path, which is the safe default for an unknown image.
   */
   iconMediaType: external_exports.string().optional(),
-  configSchema: ConfigSchemaPassthrough$1,
+  configSchema: ConfigSchemaPassthrough$2,
   /**
   * The config keys that decide WHERE this kind's secrets are sent (server,
   * base URL, instance, chat, recipient). A save that changes any of them
@@ -29066,6 +29066,65 @@ var oauthIntegrationCapability = {
     getDescriptor: method(external_exports.void(), OauthIntegrationDescriptorSchema, { auth: "admin" })
   }
 };
+var ConfigSchemaPassthrough$1 = external_exports.unknown();
+var OidcConnectionSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  displayName: external_exports.string(),
+  icon: external_exports.string(),
+  issuerUrl: external_exports.string(),
+  clientId: external_exports.string(),
+  /** Client id + secret present — never the secret value. */
+  configured: external_exports.boolean(),
+  /**
+  * Values for the connection form schema. `clientSecret` is a keychain
+  * {@link SecretFieldView} or `null` / `''`, never plaintext (D789).
+  */
+  formValues: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
+});
+var OidcConnectionUpdateInputSchema = external_exports.object({
+  id: external_exports.string().min(1),
+  displayName: external_exports.string().min(1),
+  icon: external_exports.string().optional(),
+  issuerUrl: external_exports.string().optional(),
+  clientId: external_exports.string().optional(),
+  clientSecret: external_exports.union([external_exports.string(), external_exports.object({ $secretClear: external_exports.literal(true) })]).optional(),
+  redirectUri: external_exports.string().optional(),
+  scopes: external_exports.string().optional(),
+  usernameClaim: external_exports.enum([
+    "preferred_username",
+    "email",
+    "sub"
+  ]).optional()
+});
+var oidcConnectionsCapability = {
+  name: "oidc-connections",
+  scope: "system",
+  mode: "singleton",
+  methods: {
+    /** Form fields for Add/Edit (ConfigFormBuilder). */
+    connectionFormSchema: method(external_exports.object({}), ConfigSchemaPassthrough$1, { auth: "admin" }),
+    listConnections: method(external_exports.object({}), external_exports.array(OidcConnectionSchema).readonly(), { auth: "admin" }),
+    /**
+    * Create a row with the operator-chosen URL slug. Credentials follow via
+    * `updateConnection` (same Save path as Training Providers).
+    */
+    createConnection: method(external_exports.object({
+      id: external_exports.string().min(1).regex(/^[a-z0-9][a-z0-9-]{0,63}$/, "id must be a lowercase slug"),
+      displayName: external_exports.string().min(1)
+    }), external_exports.object({ id: external_exports.string() }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    updateConnection: method(OidcConnectionUpdateInputSchema, external_exports.object({ ok: external_exports.literal(true) }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    deleteConnection: method(external_exports.object({ id: external_exports.string().min(1) }), external_exports.object({ ok: external_exports.literal(true) }), {
+      kind: "mutation",
+      auth: "admin"
+    })
+  }
+};
 var MotionTriggeredBySchema = external_exports.discriminatedUnion("kind", [external_exports.object({ kind: external_exports.literal("camera") }), external_exports.object({
   kind: external_exports.literal("sensor"),
   deviceId: external_exports.number().int().positive()
@@ -53168,6 +53227,36 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "oidcConnections.connectionFormSchema": {
+    capName: "oidc-connections",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "oidcConnections.createConnection": {
+    capName: "oidc-connections",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "oidcConnections.deleteConnection": {
+    capName: "oidc-connections",
+    capScope: "system",
+    addonId: null,
+    access: "delete"
+  },
+  "oidcConnections.listConnections": {
+    capName: "oidc-connections",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "oidcConnections.updateConnection": {
+    capName: "oidc-connections",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "osd.getStatus": {
     capName: "osd",
     capScope: "device",

package/dist/cli.js

@@ -2,7 +2,7 @@
 import {
   FFMPEG_PATH_ENV,
   runDiscover
-} from "./chunk-RBYTYOMU.js";
+} from "./chunk-CTW2RQUZ.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -39,7 +39,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-TTEJZCJA.js");
+  await import("./launcher-DYASWHKK.js");
 }
 
 // src/commands/agent.ts
@@ -84,7 +84,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-TTEJZCJA.js");
+  await import("./launcher-DYASWHKK.js");
 }
 
 // src/commands/setup.ts
@@ -1370,7 +1370,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-YKSDGTPX.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-TF6TGNJS.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);

package/dist/{discover-YKSDGTPX.js → discover-TF6TGNJS.js}

@@ -5,7 +5,7 @@ import {
   filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-RBYTYOMU.js";
+} from "./chunk-CTW2RQUZ.js";
 import "./chunk-LMMQX4CK.js";
 export {
   DEFAULT_HUB_HTTPS_PORT,

package/dist/{launcher-TTEJZCJA.js → launcher-DYASWHKK.js}

@@ -24024,9 +24024,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-CrznXkOZ.js
-var require_dist_CrznXkOZ = __commonJS({
-  "../system/dist/dist-CrznXkOZ.js"(exports) {
+// ../system/dist/dist-CpYg1PaO.js
+var require_dist_CpYg1PaO = __commonJS({
+  "../system/dist/dist-CpYg1PaO.js"(exports) {
     "use strict";
     var zod = require_zod();
     __require("crypto");
@@ -39066,14 +39066,14 @@ var require_dist_CrznXkOZ = __commonJS({
       */
       appleFoundation: zod.z.object({ nodeId: zod.z.string() }).optional()
     });
-    var ConfigSchemaPassthrough$2 = zod.z.unknown();
+    var ConfigSchemaPassthrough$3 = zod.z.unknown();
     var LlmProfileKindDescriptorSchema = zod.z.object({
       kind: LlmProfileKindSchema,
       label: zod.z.string(),
       icon: zod.z.string(),
       /** Stamped by each provider so the concat-fanned catalog stays routable. */
       addonId: zod.z.string(),
-      configSchema: ConfigSchemaPassthrough$2
+      configSchema: ConfigSchemaPassthrough$3
     });
     var LlmDefaultSelectorSchema = zod.z.union([zod.z.object({ consumer: zod.z.string() }), zod.z.object({ purpose: zod.z.enum(["text", "vision"]) })]);
     var LlmDefaultSchema = zod.z.object({
@@ -40171,7 +40171,7 @@ var require_dist_CrznXkOZ = __commonJS({
       ttl: zod.z.boolean(),
       bodyMaxLen: zod.z.number().int().positive()
     });
-    var ConfigSchemaPassthrough$1 = zod.z.unknown();
+    var ConfigSchemaPassthrough$2 = zod.z.unknown();
     var TargetKindSchema = zod.z.object({
       kind: zod.z.string(),
       label: zod.z.string(),
@@ -40208,7 +40208,7 @@ var require_dist_CrznXkOZ = __commonJS({
       * its raster path, which is the safe default for an unknown image.
       */
       iconMediaType: zod.z.string().optional(),
-      configSchema: ConfigSchemaPassthrough$1,
+      configSchema: ConfigSchemaPassthrough$2,
       /**
       * The config keys that decide WHERE this kind's secrets are sent (server,
       * base URL, instance, chat, recipient). A save that changes any of them
@@ -42961,6 +42961,65 @@ var require_dist_CrznXkOZ = __commonJS({
         getDescriptor: method(zod.z.void(), OauthIntegrationDescriptorSchema, { auth: "admin" })
       }
     };
+    var ConfigSchemaPassthrough$1 = zod.z.unknown();
+    var OidcConnectionSchema = zod.z.object({
+      id: zod.z.string().min(1),
+      displayName: zod.z.string(),
+      icon: zod.z.string(),
+      issuerUrl: zod.z.string(),
+      clientId: zod.z.string(),
+      /** Client id + secret present — never the secret value. */
+      configured: zod.z.boolean(),
+      /**
+      * Values for the connection form schema. `clientSecret` is a keychain
+      * {@link SecretFieldView} or `null` / `''`, never plaintext (D789).
+      */
+      formValues: zod.z.record(zod.z.string(), zod.z.unknown()).optional()
+    });
+    var OidcConnectionUpdateInputSchema = zod.z.object({
+      id: zod.z.string().min(1),
+      displayName: zod.z.string().min(1),
+      icon: zod.z.string().optional(),
+      issuerUrl: zod.z.string().optional(),
+      clientId: zod.z.string().optional(),
+      clientSecret: zod.z.union([zod.z.string(), zod.z.object({ $secretClear: zod.z.literal(true) })]).optional(),
+      redirectUri: zod.z.string().optional(),
+      scopes: zod.z.string().optional(),
+      usernameClaim: zod.z.enum([
+        "preferred_username",
+        "email",
+        "sub"
+      ]).optional()
+    });
+    var oidcConnectionsCapability = {
+      name: "oidc-connections",
+      scope: "system",
+      mode: "singleton",
+      methods: {
+        /** Form fields for Add/Edit (ConfigFormBuilder). */
+        connectionFormSchema: method(zod.z.object({}), ConfigSchemaPassthrough$1, { auth: "admin" }),
+        listConnections: method(zod.z.object({}), zod.z.array(OidcConnectionSchema).readonly(), { auth: "admin" }),
+        /**
+        * Create a row with the operator-chosen URL slug. Credentials follow via
+        * `updateConnection` (same Save path as Training Providers).
+        */
+        createConnection: method(zod.z.object({
+          id: zod.z.string().min(1).regex(/^[a-z0-9][a-z0-9-]{0,63}$/, "id must be a lowercase slug"),
+          displayName: zod.z.string().min(1)
+        }), zod.z.object({ id: zod.z.string() }), {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        updateConnection: method(OidcConnectionUpdateInputSchema, zod.z.object({ ok: zod.z.literal(true) }), {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        deleteConnection: method(zod.z.object({ id: zod.z.string().min(1) }), zod.z.object({ ok: zod.z.literal(true) }), {
+          kind: "mutation",
+          auth: "admin"
+        })
+      }
+    };
     var MotionTriggeredBySchema = zod.z.discriminatedUnion("kind", [zod.z.object({ kind: zod.z.literal("camera") }), zod.z.object({
       kind: zod.z.literal("sensor"),
       deviceId: zod.z.number().int().positive()
@@ -68460,6 +68519,36 @@ var require_dist_CrznXkOZ = __commonJS({
         addonId: null,
         access: "view"
       },
+      "oidcConnections.connectionFormSchema": {
+        capName: "oidc-connections",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
+      "oidcConnections.createConnection": {
+        capName: "oidc-connections",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
+      "oidcConnections.deleteConnection": {
+        capName: "oidc-connections",
+        capScope: "system",
+        addonId: null,
+        access: "delete"
+      },
+      "oidcConnections.listConnections": {
+        capName: "oidc-connections",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
+      "oidcConnections.updateConnection": {
+        capName: "oidc-connections",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "osd.getStatus": {
         capName: "osd",
         capScope: "device",
@@ -73753,6 +73842,7 @@ var require_dist_CrznXkOZ = __commonJS({
       notifierCapability,
       numericSensorCapability,
       oauthIntegrationCapability,
+      oidcConnectionsCapability,
       osdCapability,
       osdManagerCapability,
       petFeederCapability,
@@ -78970,11 +79060,11 @@ var require_dist_CrznXkOZ = __commonJS({
   }
 });
 
-// ../system/dist/jwt-signing-key-7JsaDUwM.js
-var require_jwt_signing_key_7JsaDUwM = __commonJS({
-  "../system/dist/jwt-signing-key-7JsaDUwM.js"(exports) {
+// ../system/dist/jwt-signing-key-DiBm2MuN.js
+var require_jwt_signing_key_DiBm2MuN = __commonJS({
+  "../system/dist/jwt-signing-key-DiBm2MuN.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     var node_crypto = __require("crypto");
     var SYSTEM_SECRET_OWNER = "system";
     var JWT_SIGNING_KEY_REF = require_dist10.buildSecretRef({
@@ -79126,7 +79216,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     function deviceLabelFromEventData(data) {
       const name = stringNonEmpty(data["name"]) ?? stringNonEmpty(data["deviceName"]);
       if (name !== void 0) return name;
@@ -79950,7 +80040,7 @@ var require_calendars_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     var require_settle_sources = require_settle_sources_Bhsy57y();
     var zod = require_zod();
     var CALENDAR_COLOR_PALETTE = [
@@ -80164,11 +80254,11 @@ var require_calendars = __commonJS({
   }
 });
 
-// ../system/dist/composition-sources-D2TB0T_2.js
-var require_composition_sources_D2TB0T_2 = __commonJS({
-  "../system/dist/composition-sources-D2TB0T_2.js"(exports) {
+// ../system/dist/composition-sources-BWt1BQhu.js
+var require_composition_sources_BWt1BQhu = __commonJS({
+  "../system/dist/composition-sources-BWt1BQhu.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     function normalizedNativeOwner(owner) {
       const trimmed = owner?.trim();
       return trimmed ? trimmed : null;
@@ -80283,8 +80373,8 @@ var require_composer_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
-    var require_composition_sources = require_composition_sources_D2TB0T_2();
+    var require_dist10 = require_dist_CpYg1PaO();
+    var require_composition_sources = require_composition_sources_BWt1BQhu();
     var zod = require_zod();
     function isRecord$2(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -84094,7 +84184,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -88163,8 +88253,8 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
-    var require_composition_sources = require_composition_sources_D2TB0T_2();
+    var require_dist10 = require_dist_CpYg1PaO();
+    var require_composition_sources = require_composition_sources_BWt1BQhu();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var node_fs_promises = __require("fs/promises");
@@ -90036,11 +90126,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-DXTNfQwr.js
-var require_retired_settings_keys_DXTNfQwr = __commonJS({
-  "../system/dist/retired-settings-keys-DXTNfQwr.js"(exports) {
+// ../system/dist/retired-settings-keys-WcubTmKK.js
+var require_retired_settings_keys_WcubTmKK = __commonJS({
+  "../system/dist/retired-settings-keys-WcubTmKK.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -90329,8 +90419,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
-    var require_retired_settings_keys = require_retired_settings_keys_DXTNfQwr();
+    var require_dist10 = require_dist_CpYg1PaO();
+    var require_retired_settings_keys = require_retired_settings_keys_WcubTmKK();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
@@ -98704,7 +98794,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -98841,7 +98931,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -99198,9 +99288,9 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     var require_ms$1 = require_ms_t68_FaqE();
-    var require_jwt_signing_key = require_jwt_signing_key_7JsaDUwM();
+    var require_jwt_signing_key = require_jwt_signing_key_DiBm2MuN();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -108065,7 +108155,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -108830,7 +108920,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     var require_proc_stat = require_proc_stat_DL_WUOhl();
     var node_fs_promises = __require("fs/promises");
     var node_os = __require("os");
@@ -111708,7 +111798,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -112990,8 +113080,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
-    var require_retired_settings_keys = require_retired_settings_keys_DXTNfQwr();
+    var require_dist10 = require_dist_CpYg1PaO();
+    var require_retired_settings_keys = require_retired_settings_keys_WcubTmKK();
     var require_sqlite_snapshot_protocol = require_sqlite_snapshot_protocol_B9OndqZv();
     var require_wal_checkpoint_policy = require_wal_checkpoint_policy_d2z2qPqx();
     var node_crypto = __require("crypto");
@@ -116204,7 +116294,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     var require_hub_cap_forward = require_hub_cap_forward_W8oEm4ME();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -119982,11 +120072,11 @@ var require_storage_orchestrator = __commonJS({
   }
 });
 
-// ../system/dist/constants-C9RU0W0k.js
-var require_constants_C9RU0W0k = __commonJS({
-  "../system/dist/constants-C9RU0W0k.js"(exports) {
+// ../system/dist/constants-Dq3Xlo3-.js
+var require_constants_Dq3Xlo3 = __commonJS({
+  "../system/dist/constants-Dq3Xlo3-.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     var node_crypto = __require("crypto");
     var CLUSTER_SECRET_REF = require_dist10.buildSecretRef({
       owner: "system",
@@ -147444,9 +147534,9 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     var require_ms$1 = require_ms_t68_FaqE();
-    var require_constants$8 = require_constants_C9RU0W0k();
+    var require_constants$8 = require_constants_Dq3Xlo3();
     var require_x509_es = require_x509_es_BhTzcFhZ();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -227236,7 +227326,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -227373,12 +227463,12 @@ var require_winston_logging = __commonJS({
   }
 });
 
-// ../system/dist/event-loop-stall-monitor-CaAcghV2.js
-var require_event_loop_stall_monitor_CaAcghV2 = __commonJS({
-  "../system/dist/event-loop-stall-monitor-CaAcghV2.js"(exports) {
+// ../system/dist/event-loop-stall-monitor-IeiQqOdV.js
+var require_event_loop_stall_monitor_IeiQqOdV = __commonJS({
+  "../system/dist/event-loop-stall-monitor-IeiQqOdV.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     var node_crypto = __require("crypto");
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -242346,12 +242436,12 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/child-cap-dispatch-BymegE_4.js
-var require_child_cap_dispatch_BymegE_4 = __commonJS({
-  "../system/dist/child-cap-dispatch-BymegE_4.js"(exports) {
+// ../system/dist/child-cap-dispatch-DpQYxjCT.js
+var require_child_cap_dispatch_DpQYxjCT = __commonJS({
+  "../system/dist/child-cap-dispatch-DpQYxjCT.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     var require_proc_stat = require_proc_stat_DL_WUOhl();
     require_hub_cap_forward_W8oEm4ME();
     var node_crypto = __require("crypto");
@@ -253281,12 +253371,12 @@ var require_custom_action_registry_acBY3mHA = __commonJS({
   }
 });
 
-// ../system/dist/restore-archive-BwOOlIex.js
-var require_restore_archive_BwOOlIex = __commonJS({
-  "../system/dist/restore-archive-BwOOlIex.js"(exports) {
+// ../system/dist/restore-archive-COzu_h0N.js
+var require_restore_archive_COzu_h0N = __commonJS({
+  "../system/dist/restore-archive-COzu_h0N.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
+    var require_dist10 = require_dist_CpYg1PaO();
     var node_crypto = __require("crypto");
     var buffer = __require("buffer");
     var node_fs_promises = __require("fs/promises");
@@ -257655,8 +257745,8 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CrznXkOZ();
-    var require_jwt_signing_key = require_jwt_signing_key_7JsaDUwM();
+    var require_dist10 = require_dist_CpYg1PaO();
+    var require_jwt_signing_key = require_jwt_signing_key_DiBm2MuN();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_builtins_calendars_calendars_addon = require_calendars_addon();
@@ -257682,17 +257772,17 @@ var require_dist3 = __commonJS({
     var require_hub_cap_forward = require_hub_cap_forward_W8oEm4ME();
     var require_builtins_storage_orchestrator_storage_orchestrator_addon = require_storage_orchestrator_addon();
     require_storage_orchestrator();
-    var require_constants15 = require_constants_C9RU0W0k();
+    var require_constants15 = require_constants_Dq3Xlo3();
     var require_builtins_system_config_system_config_addon = require_system_config_addon();
     require_system_config();
     var require_builtins_winston_logging_index = require_winston_logging();
-    var require_event_loop_stall_monitor = require_event_loop_stall_monitor_CaAcghV2();
+    var require_event_loop_stall_monitor = require_event_loop_stall_monitor_IeiQqOdV();
     var require_tls2 = require_tls_BWpwU_d5();
-    var require_child_cap_dispatch = require_child_cap_dispatch_BymegE_4();
+    var require_child_cap_dispatch = require_child_cap_dispatch_DpQYxjCT();
     var require_platform_key_source = require_platform_key_source_Di7HrlGR();
     var require_resource_monitor = require_resource_monitor_BgWGRxN5();
     var require_custom_action_registry = require_custom_action_registry_acBY3mHA();
-    var require_restore_archive = require_restore_archive_BwOOlIex();
+    var require_restore_archive = require_restore_archive_COzu_h0N();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
@@ -283381,14 +283471,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       */
       appleFoundation: zod.z.object({ nodeId: zod.z.string() }).optional()
     });
-    var ConfigSchemaPassthrough$2 = zod.z.unknown();
+    var ConfigSchemaPassthrough$3 = zod.z.unknown();
     var LlmProfileKindDescriptorSchema = zod.z.object({
       kind: LlmProfileKindSchema,
       label: zod.z.string(),
       icon: zod.z.string(),
       /** Stamped by each provider so the concat-fanned catalog stays routable. */
       addonId: zod.z.string(),
-      configSchema: ConfigSchemaPassthrough$2
+      configSchema: ConfigSchemaPassthrough$3
     });
     var LlmDefaultSelectorSchema = zod.z.union([zod.z.object({ consumer: zod.z.string() }), zod.z.object({ purpose: zod.z.enum(["text", "vision"]) })]);
     var LlmDefaultSchema = zod.z.object({
@@ -284491,7 +284581,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       ttl: zod.z.boolean(),
       bodyMaxLen: zod.z.number().int().positive()
     });
-    var ConfigSchemaPassthrough$1 = zod.z.unknown();
+    var ConfigSchemaPassthrough$2 = zod.z.unknown();
     var TargetKindSchema = zod.z.object({
       kind: zod.z.string(),
       label: zod.z.string(),
@@ -284528,7 +284618,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * its raster path, which is the safe default for an unknown image.
       */
       iconMediaType: zod.z.string().optional(),
-      configSchema: ConfigSchemaPassthrough$1,
+      configSchema: ConfigSchemaPassthrough$2,
       /**
       * The config keys that decide WHERE this kind's secrets are sent (server,
       * base URL, instance, chat, recipient). A save that changes any of them
@@ -288207,6 +288297,65 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         getDescriptor: require_sleep.method(zod.z.void(), OauthIntegrationDescriptorSchema, { auth: "admin" })
       }
     };
+    var ConfigSchemaPassthrough$1 = zod.z.unknown();
+    var OidcConnectionSchema = zod.z.object({
+      id: zod.z.string().min(1),
+      displayName: zod.z.string(),
+      icon: zod.z.string(),
+      issuerUrl: zod.z.string(),
+      clientId: zod.z.string(),
+      /** Client id + secret present — never the secret value. */
+      configured: zod.z.boolean(),
+      /**
+      * Values for the connection form schema. `clientSecret` is a keychain
+      * {@link SecretFieldView} or `null` / `''`, never plaintext (D789).
+      */
+      formValues: zod.z.record(zod.z.string(), zod.z.unknown()).optional()
+    });
+    var OidcConnectionUpdateInputSchema = zod.z.object({
+      id: zod.z.string().min(1),
+      displayName: zod.z.string().min(1),
+      icon: zod.z.string().optional(),
+      issuerUrl: zod.z.string().optional(),
+      clientId: zod.z.string().optional(),
+      clientSecret: zod.z.union([zod.z.string(), zod.z.object({ $secretClear: zod.z.literal(true) })]).optional(),
+      redirectUri: zod.z.string().optional(),
+      scopes: zod.z.string().optional(),
+      usernameClaim: zod.z.enum([
+        "preferred_username",
+        "email",
+        "sub"
+      ]).optional()
+    });
+    var oidcConnectionsCapability = {
+      name: "oidc-connections",
+      scope: "system",
+      mode: "singleton",
+      methods: {
+        /** Form fields for Add/Edit (ConfigFormBuilder). */
+        connectionFormSchema: require_sleep.method(zod.z.object({}), ConfigSchemaPassthrough$1, { auth: "admin" }),
+        listConnections: require_sleep.method(zod.z.object({}), zod.z.array(OidcConnectionSchema).readonly(), { auth: "admin" }),
+        /**
+        * Create a row with the operator-chosen URL slug. Credentials follow via
+        * `updateConnection` (same Save path as Training Providers).
+        */
+        createConnection: require_sleep.method(zod.z.object({
+          id: zod.z.string().min(1).regex(/^[a-z0-9][a-z0-9-]{0,63}$/, "id must be a lowercase slug"),
+          displayName: zod.z.string().min(1)
+        }), zod.z.object({ id: zod.z.string() }), {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        updateConnection: require_sleep.method(OidcConnectionUpdateInputSchema, zod.z.object({ ok: zod.z.literal(true) }), {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        deleteConnection: require_sleep.method(zod.z.object({ id: zod.z.string().min(1) }), zod.z.object({ ok: zod.z.literal(true) }), {
+          kind: "mutation",
+          auth: "admin"
+        })
+      }
+    };
     var MotionTriggeredBySchema = zod.z.discriminatedUnion("kind", [zod.z.object({ kind: zod.z.literal("camera") }), zod.z.object({
       kind: zod.z.literal("sensor"),
       deviceId: zod.z.number().int().positive()
@@ -315802,6 +315951,36 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "oidcConnections.connectionFormSchema": {
+        capName: "oidc-connections",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
+      "oidcConnections.createConnection": {
+        capName: "oidc-connections",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
+      "oidcConnections.deleteConnection": {
+        capName: "oidc-connections",
+        capScope: "system",
+        addonId: null,
+        access: "delete"
+      },
+      "oidcConnections.listConnections": {
+        capName: "oidc-connections",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
+      "oidcConnections.updateConnection": {
+        capName: "oidc-connections",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "osd.getStatus": {
         capName: "osd",
         capScope: "device",
@@ -319703,6 +319882,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "notifier",
       "numeric-sensor",
       "oauth-integration",
+      "oidc-connections",
       "osd",
       "osd-manager",
       "pet-feeder",
@@ -319910,6 +320090,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "notification-output",
       "notification-rules",
       "oauth-integration",
+      "oidc-connections",
       "osd-manager",
       "pipeline-executor",
       "pipeline-orchestrator",
@@ -323103,6 +323284,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       notifier: "notifier",
       numericSensor: "numeric-sensor",
       oauthIntegration: "oauth-integration",
+      oidcConnections: "oidc-connections",
       osd: "osd",
       osdManager: "osd-manager",
       petFeeder: "pet-feeder",
@@ -323595,6 +323777,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         key: "oauthIntegration",
         name: "oauth-integration"
       },
+      {
+        key: "oidcConnections",
+        name: "oidc-connections"
+      },
       {
         key: "osd",
         name: "osd"
@@ -323952,6 +324138,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       notifierCapability,
       numericSensorCapability,
       oauthIntegrationCapability,
+      oidcConnectionsCapability,
       osdCapability,
       osdManagerCapability,
       petFeederCapability,
@@ -327651,6 +327838,13 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           activateAlarmProfile: (input) => dispatch("notificationRules", "activateAlarmProfile", "mutation", input),
           getAlarmSensors: (input) => dispatch("notificationRules", "getAlarmSensors", "query", input)
         },
+        oidcConnections: {
+          connectionFormSchema: (input) => dispatch("oidcConnections", "connectionFormSchema", "query", input),
+          listConnections: (input) => dispatch("oidcConnections", "listConnections", "query", input),
+          createConnection: (input) => dispatch("oidcConnections", "createConnection", "mutation", input),
+          updateConnection: (input) => dispatch("oidcConnections", "updateConnection", "mutation", input),
+          deleteConnection: (input) => dispatch("oidcConnections", "deleteConnection", "mutation", input)
+        },
         osdManager: {
           getConditionSupport: (input) => dispatch("osdManager", "getConditionSupport", "query", input),
           copyDeviceConfiguration: (input) => dispatch("osdManager", "copyDeviceConfiguration", "mutation", input),
@@ -335573,6 +335767,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.OccupancyLookAnswerSchema = OccupancyLookAnswerSchema;
     exports.OccupancyLookRefusalSchema = OccupancyLookRefusalSchema;
     exports.OccupancyLookRequestSchema = OccupancyLookRequestSchema;
+    exports.OidcConnectionSchema = OidcConnectionSchema;
+    exports.OidcConnectionUpdateInputSchema = OidcConnectionUpdateInputSchema;
     exports.OnboardFieldSupportSchema = OnboardFieldSupportSchema;
     exports.OnboardRecordTrackSchema = OnboardRecordTrackSchema;
     exports.OnboardScheduleSupportSchema = OnboardScheduleSupportSchema;
@@ -336647,6 +336843,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.objectInputDeclaresAddonId = objectInputDeclaresAddonId;
     exports.objectInputDeclaresRequiredDeviceId = objectInputDeclaresRequiredDeviceId;
     exports.occupancyScope = occupancyScope;
+    exports.oidcConnectionsCapability = oidcConnectionsCapability;
     exports.optionalAncestors = optionalAncestors;
     exports.optionalMethod = require_sleep.optionalMethod;
     exports.osdCapability = osdCapability;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.2.183",
+  "version": "1.2.184",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",