@camstack/addon-pipeline 1.2.321 → 1.2.324

package/dist/audio-analyzer/index.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-DMwFmudw.js");
-const require_process_memory = require("../process-memory-BLd-PX9x.js");
+const require_dist = require("../dist-DlgXwnqU.js");
+const require_process_memory = require("../process-memory-C-mZ1LNi.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_path = require("node:path");

package/dist/audio-analyzer/index.mjs

@@ -1,6 +1,6 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { A as PoolMemoryWatchdog, E as HF_BASE_URL, En as nodePin, Kt as resolvePoolMemoryPolicy, Sn as hydrateSchema, St as mapAudioLabelToMacro, U as audioAnalysisCapability, Un as EventCategory, W as audioAnalyzerCapability, _n as audioChunkBytesPerSample, fn as errMsg, m as DEFAULT_AUDIO_ANALYZER_CONFIG, mn as BaseAddon, r as AUDIO_BACKEND_CHOICES, xn as expandAudioChunkToF32le } from "../dist-CTLBxswm.mjs";
-import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-qCTMcKBo.mjs";
+import { A as PoolMemoryWatchdog, E as HF_BASE_URL, En as nodePin, Kt as resolvePoolMemoryPolicy, Sn as hydrateSchema, St as mapAudioLabelToMacro, U as audioAnalysisCapability, Un as EventCategory, W as audioAnalyzerCapability, _n as audioChunkBytesPerSample, fn as errMsg, m as DEFAULT_AUDIO_ANALYZER_CONFIG, mn as BaseAddon, r as AUDIO_BACKEND_CHOICES, xn as expandAudioChunkToF32le } from "../dist-CbRb0Zyj.mjs";
+import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-CJsA4yRc.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";
 import { downloadFile } from "@camstack/system/addon-utils";

package/dist/{default-detection-model-SkL7rw1J.js → default-detection-model-4nJVRIT6.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-DMwFmudw.js");
+const require_dist = require("./dist-DlgXwnqU.js");
 const require_worker_protocol = require("./worker-protocol-C-G8qmye.js");
 let node_crypto = require("node:crypto");
 //#region src/detection-pipeline/registry/effective-confidence.ts

package/dist/{default-detection-model-DBqAX4cL.mjs → default-detection-model-lWMQATmQ.mjs}

@@ -1,4 +1,4 @@
-import { G as audioKindId, Yt as stepModelRunsOnFormat, _t as hfModelUrl, f as COCO_80_LABELS, i as AUDIO_MACRO_LABELS, p as COCO_TO_MACRO, vt as inferModelProvider, y as DEVICE_BACKEND_TO_FORMAT } from "./dist-CTLBxswm.mjs";
+import { G as audioKindId, Yt as stepModelRunsOnFormat, _t as hfModelUrl, f as COCO_80_LABELS, i as AUDIO_MACRO_LABELS, p as COCO_TO_MACRO, vt as inferModelProvider, y as DEVICE_BACKEND_TO_FORMAT } from "./dist-CbRb0Zyj.mjs";
 import { t as isWorkerReply } from "./worker-protocol-D_NzPcnh.mjs";
 import { randomUUID } from "node:crypto";
 //#region src/detection-pipeline/registry/effective-confidence.ts

package/dist/detection-pipeline/index.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-DMwFmudw.js");
-const require_node = require("../node-CJqa8iTR.js");
-const require_default_detection_model = require("../default-detection-model-SkL7rw1J.js");
+const require_dist = require("../dist-DlgXwnqU.js");
+const require_node = require("../node-s3wZnnJg.js");
+const require_default_detection_model = require("../default-detection-model-4nJVRIT6.js");
 const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
-const require_process_memory = require("../process-memory-BLd-PX9x.js");
+const require_process_memory = require("../process-memory-C-mZ1LNi.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_fs = require("node:fs");

package/dist/detection-pipeline/index.mjs

@@ -1,9 +1,9 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { A as PoolMemoryWatchdog, An as sleep, At as overlayClusterStepSettings, Dn as parseJsonUnknown, En as nodePin, Ft as pipelineExecutorCapability, Hn as union, Ht as resolveClusterStepModelId, Jt as runtimeDevices$1, Kt as resolvePoolMemoryPolicy, Mn as array, Mt as pickClusterStepSettings, Rn as object, Sn as hydrateSchema, Un as EventCategory, V as YAMNET_TO_MACRO, Vn as string, Yt as stepModelRunsOnFormat, bt as loadContributionCapability, ct as evaluateZoneRules, d as CLUSTER_MODEL_SCOPED_STEPS, en as supportedRuntimes$1, et as defaultDeviceFor$1, fn as errMsg, h as DEFAULT_CLUSTER_STEP_SETTINGS, it as detectionPipelineCapability, mn as BaseAddon, n as APPLE_SA_TO_MACRO, st as enumerateInferenceDevices, vn as createEvent, y as DEVICE_BACKEND_TO_FORMAT } from "../dist-CTLBxswm.mjs";
-import { s as readProcessCost } from "../node-BO3NIRH9.mjs";
-import { S as resolveModelDefaultConfidence, _ as getStep, a as buildSubtreeCanRun, c as macroGateVerdict, g as getDefaultModelForFormat, h as ALL_STEPS, i as mergeCustomModels, m as ALL_PIPELINE_STEPS, n as resolveDefaultDetectionModel, r as CustomModelCatalog, u as localFrameRegistry, v as getStepDefinition, x as landmarkPrecisionVerdict, y as resolveModelForFormat } from "../default-detection-model-DBqAX4cL.mjs";
+import { A as PoolMemoryWatchdog, An as sleep, At as overlayClusterStepSettings, Dn as parseJsonUnknown, En as nodePin, Ft as pipelineExecutorCapability, Hn as union, Ht as resolveClusterStepModelId, Jt as runtimeDevices$1, Kt as resolvePoolMemoryPolicy, Mn as array, Mt as pickClusterStepSettings, Rn as object, Sn as hydrateSchema, Un as EventCategory, V as YAMNET_TO_MACRO, Vn as string, Yt as stepModelRunsOnFormat, bt as loadContributionCapability, ct as evaluateZoneRules, d as CLUSTER_MODEL_SCOPED_STEPS, en as supportedRuntimes$1, et as defaultDeviceFor$1, fn as errMsg, h as DEFAULT_CLUSTER_STEP_SETTINGS, it as detectionPipelineCapability, mn as BaseAddon, n as APPLE_SA_TO_MACRO, st as enumerateInferenceDevices, vn as createEvent, y as DEVICE_BACKEND_TO_FORMAT } from "../dist-CbRb0Zyj.mjs";
+import { s as readProcessCost } from "../node-CZ5DXcvq.mjs";
+import { S as resolveModelDefaultConfidence, _ as getStep, a as buildSubtreeCanRun, c as macroGateVerdict, g as getDefaultModelForFormat, h as ALL_STEPS, i as mergeCustomModels, m as ALL_PIPELINE_STEPS, n as resolveDefaultDetectionModel, r as CustomModelCatalog, u as localFrameRegistry, v as getStepDefinition, x as landmarkPrecisionVerdict, y as resolveModelForFormat } from "../default-detection-model-lWMQATmQ.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
-import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-qCTMcKBo.mjs";
+import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-CJsA4yRc.mjs";
 import * as os from "node:os";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/{dist-CTLBxswm.mjs → dist-CbRb0Zyj.mjs}

@@ -5379,7 +5379,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-CDCONfkt.mjs
+//#region ../types/dist/sleep-DXKLNFvA.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -5719,6 +5719,43 @@ function hydrateField(field, values) {
 	}
 	const rawValue = storedValue !== void 0 ? storedValue : defaultValue !== void 0 ? defaultValue : null;
 	const value = field.type === "textarea" && field.isJson && rawValue !== null && typeof rawValue === "object" ? JSON.stringify(rawValue, null, 2) : rawValue;
+	if (field.type === "tags" && typeof field.suggestionsFrom === "string") {
+		const from = values[field.suggestionsFrom];
+		const extra = Array.isArray(from) ? from.filter((s) => typeof s === "string" && s.length > 0) : [];
+		const merged = [...new Set([...field.suggestions ?? [], ...extra])];
+		return {
+			...field,
+			suggestions: merged,
+			value
+		};
+	}
+	if ((field.type === "select" || field.type === "multiselect") && typeof field.optionsFrom === "string") {
+		const from = values[field.optionsFrom];
+		const byValue = /* @__PURE__ */ new Map();
+		for (const opt of field.options) byValue.set(opt.value, opt);
+		if (Array.isArray(from)) for (const entry of from) {
+			if (typeof entry === "string" && entry.length > 0) {
+				if (!byValue.has(entry)) byValue.set(entry, {
+					value: entry,
+					label: entry
+				});
+				continue;
+			}
+			if (entry === null || typeof entry !== "object") continue;
+			const v = Reflect.get(entry, "value");
+			const lbl = Reflect.get(entry, "label");
+			if (typeof v !== "string" || v.length === 0) continue;
+			if (!byValue.has(v)) byValue.set(v, {
+				value: v,
+				label: typeof lbl === "string" && lbl.length > 0 ? lbl : v
+			});
+		}
+		return {
+			...field,
+			options: [...byValue.values()],
+			value
+		};
+	}
 	return {
 		...field,
 		value
@@ -13041,7 +13078,16 @@ var AutomationActionSchema = discriminatedUnion("kind", [
 	}),
 	object({
 		kind: literal("cap"),
-		deviceId: union([number().int(), object({ $var: string().min(1) })]),
+		/**
+		* One device, several same-family devices (locks / climate family / …),
+		* or `{ $var }` for the device that triggered the run. An array is
+		* fan-out at codegen — each id gets the same cap.method call.
+		*/
+		deviceId: union([
+			number().int(),
+			array(number().int()).min(1),
+			object({ $var: string().min(1) })
+		]),
 		cap: string().min(1),
 		method: string().min(1),
 		/** Values may carry `{{vars.x}}` slots, which SUBSTITUTE and do not
@@ -16697,7 +16743,7 @@ var detectionPipelineCapability = {
 * This matters here more than anywhere else in the repo, because every provider
 * that knows a device's host knows its PASSWORD too: `{ host, port, username,
 * password }` sit in one object on Hikvision, Amcrest, Reolink and ONVIF alike,
-* and `http://admin:hunter2@192.168.50.139/` is a URL a browser accepts. The
+* and `http://admin:hunter2@192.168.x.x/` is a URL a browser accepts. The
 * camera's own page will ask for its own login. That is correct, and pre-
 * filling it is the operator's business, not ours.
 *
@@ -20256,10 +20302,35 @@ var SendResultSchema = object({
 });
 /** Same shape as SendResult — kept as a distinct name for the test panel. */
 var TestResultSchema = SendResultSchema;
-method(object({}), array(TargetKindSchema)), method(object({}), array(TargetSchema), { auth: "admin" }), method(object({
+/**
+* Pre-save credential probe against a partial (unsaved) target config.
+* `resolvedUrl` never includes secrets (token stripped from path).
+*/
+var ProbeTargetConfigResultSchema = object({
+	ok: boolean(),
+	resolvedUrl: string(),
+	httpStatus: number().int().optional(),
+	stateInstance: string().optional(),
+	error: string().optional()
+});
+method(object({}), array(TargetKindSchema)), method(object({}), array(TargetSchema), { auth: "admin" }), method(object({ targetId: string() }), TargetSchema, { auth: "admin" }), method(object({
 	kind: string(),
-	config: record(string(), unknown()).optional()
+	config: record(string(), unknown()).optional(),
+	/**
+	* When editing / duplicating, the blank password field never round-trips
+	* the stored token. Pass the source target id so the provider can restore
+	* secrets server-side before dialling (same merge as upsert).
+	*/
+	targetId: string().optional()
 }), array(DiscoveredTargetSchema), { auth: "admin" }), method(object({
+	kind: string(),
+	config: record(string(), unknown()),
+	/** See `discoverTargets.targetId` — restore stored secrets for a blank password. */
+	targetId: string().optional()
+}), ProbeTargetConfigResultSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
 	targetId: string(),
 	notification: NotificationSchema
 }), SendResultSchema, {
@@ -20271,7 +20342,16 @@ method(object({}), array(TargetKindSchema)), method(object({}), array(TargetSche
 }), TestResultSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ target: TargetSchema }), TargetSchema, {
+}), method(object({
+	target: TargetSchema,
+	/**
+	* Duplicate flow: create a NEW target id while copying secrets from an
+	* existing row. The UI never holds the stored token; blank / redacted
+	* password fields are restored from this source (D634 still applies if
+	* destinations diverge without a re-typed secret).
+	*/
+	cloneSecretsFrom: string().optional()
+}), TargetSchema, {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({ targetId: string() }), _void(), {
@@ -21234,6 +21314,15 @@ var AlarmArmModeSchema = _enum([
 object({
 	/** Current lifecycle state. */
 	state: AlarmStateSchema,
+	/**
+	* The arm mode the machine belongs to under transitional words
+	* (`arming` / `pending` / `triggered` / `disarming`). `null` when
+	* disarmed or when a provider cannot name one. Exporters MUST prefer
+	* this over an in-process memo — a HomeKit accessory that missed the
+	* settled `armed_*` slice used to map `pending` to DISARMED and hide
+	* an entry delay.
+	*/
+	targetMode: AlarmArmModeSchema.nullable().optional(),
 	/** Subset of arm modes the panel accepts. UI renders one button per
 	*  mode in this list. */
 	availableModes: array(AlarmArmModeSchema),
@@ -22969,17 +23058,41 @@ var NC_ALARM_TRIGGERED_MAX_SEC = 3600;
 var NcAlarmDelaySecSchema = number().int().min(0).max(600);
 var NcAlarmTriggeredSecSchema = number().int().min(0).max(NC_ALARM_TRIGGERED_MAX_SEC);
 var uniqueModes = (entries) => new Set(entries.map((e) => e.mode)).size === entries.length;
+/**
+* What the panel does when a bounded triggered window ends.
+* - `rearmAfter` — return to the armed mode
+* - `disableAfter` — auto-disarm
+* - `doNothing` — stay triggered until a human disarms
+*/
+var NcAlarmPostTriggeredActionSchema = _enum([
+	"rearmAfter",
+	"disableAfter",
+	"doNothing"
+]);
 var NcAlarmModeDelaysListSchema = array(object({
 	mode: AlarmArmModeSchema,
 	exitDelaySec: NcAlarmDelaySecSchema.optional(),
 	entryDelaySec: NcAlarmDelaySecSchema.optional(),
-	triggeredDurationSec: NcAlarmTriggeredSecSchema.optional()
+	/**
+	* Duration of `triggered` before {@link postTriggeredAction}. Kept as the
+	* historical field name so older clients still read/write a number.
+	*/
+	triggeredDurationSec: NcAlarmTriggeredSecSchema.optional(),
+	postTriggeredAction: NcAlarmPostTriggeredActionSchema.optional(),
+	/**
+	* When this mode may be armed. Absent / null = always allowed (same as a
+	* rule with no `schedule`). Evaluated with {@link isScheduleActive}.
+	*/
+	schedule: NcScheduleSchema.optional()
 })).max(8).refine(uniqueModes, { message: "modeDelays: at most one entry per arm mode" });
 var NcAlarmModeDelaysEditListSchema = array(object({
 	mode: AlarmArmModeSchema,
 	exitDelaySec: NcAlarmDelaySecSchema.nullable().optional(),
 	entryDelaySec: NcAlarmDelaySecSchema.nullable().optional(),
-	triggeredDurationSec: NcAlarmTriggeredSecSchema.nullable().optional()
+	triggeredDurationSec: NcAlarmTriggeredSecSchema.nullable().optional(),
+	postTriggeredAction: NcAlarmPostTriggeredActionSchema.nullable().optional(),
+	/** Set a schedule, or `null` to clear (mode always allowed again). */
+	schedule: NcScheduleSchema.nullable().optional()
 })).max(8).refine(uniqueModes, { message: "modeDelays: at most one edit per arm mode" });
 /** One switch of the alarm table: put ONE device on, or take it off, ONE mode's list. */
 var NcAlarmNonBlockingEditSchema = object({
@@ -23051,12 +23164,18 @@ var NcAlarmSettingsSchema = object({
 	/** Grace period between a trigger and the alarm firing. 0 = immediate. */
 	entryDelaySec: NcAlarmDelaySecSchema,
 	/**
-	* How long `triggered` lasts before the panel re-arms itself.
-	* **0 = until an operator disarms it** — the behaviour before this field
-	* existed, and therefore what an untouched install keeps doing.
+	* How long `triggered` lasts before {@link postTriggeredAction} runs.
+	* Ignored when the action is `doNothing`. Historical name kept so older
+	* clients still round-trip a number.
 	*/
 	triggeredDurationSec: NcAlarmTriggeredSecSchema,
 	/**
+	* What happens when the triggered window ends. Absent on a blob older than
+	* this field → derived from {@link triggeredDurationSec} (`>0` ⇒ rearmAfter,
+	* else doNothing).
+	*/
+	postTriggeredAction: NcAlarmPostTriggeredActionSchema.optional(),
+	/**
 	* Deprecated by D630 — every transition is announced. Parsed, never read;
 	* remove after one release. Optional so an older admin's patch (which still
 	* sends it) parses rather than failing the whole save.
@@ -34198,7 +34317,7 @@ var LocalInterfaceSchema = object({
 	name: string(),
 	family: _enum(["IPv4", "IPv6"]),
 	address: string(),
-	/** CIDR shorthand (e.g. `192.168.1.10/24`). Empty when OS doesn't expose. */
+	/** CIDR shorthand (e.g. `192.168.x.x/24`). Empty when OS doesn't expose. */
 	cidr: string(),
 	/** OS netmask. Stable across calls so the SDK can hash on it. */
 	netmask: string(),
@@ -34644,7 +34763,7 @@ var MeshPeerSchema = object({
 	tags: array(string()).readonly(),
 	/** True when the peer advertises itself as an exit-node candidate. */
 	exitNodeOption: boolean(),
-	/** Subnet routes the peer advertises (e.g. `["192.168.1.0/24"]`). */
+	/** Subnet routes the peer advertises (e.g. `["192.168.x.x/24"]`). */
 	advertisedRoutes: array(string()).readonly(),
 	/** Owner account login (e.g. `foo@example.com`). Null for tagged peers. */
 	userLogin: string().nullable(),
@@ -44081,6 +44200,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"notificationOutput.getTarget": {
+		capName: "notification-output",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"notificationOutput.listTargetKinds": {
 		capName: "notification-output",
 		capScope: "system",
@@ -44093,6 +44218,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"notificationOutput.probeTargetConfig": {
+		capName: "notification-output",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"notificationOutput.send": {
 		capName: "notification-output",
 		capScope: "system",
@@ -47802,6 +47933,7 @@ Object.freeze({
 		access: "create"
 	}
 });
+DeviceType.Camera, DeviceType.Hub, DeviceType.Light, DeviceType.Siren, DeviceType.Switch, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Fan, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder;
 DeviceFeature.BatteryOperated;
 /**
 * The vocabulary, in the order a picker offers it.

package/dist/{dist-DMwFmudw.js → dist-DlgXwnqU.js}

@@ -5379,7 +5379,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-CDCONfkt.mjs
+//#region ../types/dist/sleep-DXKLNFvA.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -5719,6 +5719,43 @@ function hydrateField(field, values) {
 	}
 	const rawValue = storedValue !== void 0 ? storedValue : defaultValue !== void 0 ? defaultValue : null;
 	const value = field.type === "textarea" && field.isJson && rawValue !== null && typeof rawValue === "object" ? JSON.stringify(rawValue, null, 2) : rawValue;
+	if (field.type === "tags" && typeof field.suggestionsFrom === "string") {
+		const from = values[field.suggestionsFrom];
+		const extra = Array.isArray(from) ? from.filter((s) => typeof s === "string" && s.length > 0) : [];
+		const merged = [...new Set([...field.suggestions ?? [], ...extra])];
+		return {
+			...field,
+			suggestions: merged,
+			value
+		};
+	}
+	if ((field.type === "select" || field.type === "multiselect") && typeof field.optionsFrom === "string") {
+		const from = values[field.optionsFrom];
+		const byValue = /* @__PURE__ */ new Map();
+		for (const opt of field.options) byValue.set(opt.value, opt);
+		if (Array.isArray(from)) for (const entry of from) {
+			if (typeof entry === "string" && entry.length > 0) {
+				if (!byValue.has(entry)) byValue.set(entry, {
+					value: entry,
+					label: entry
+				});
+				continue;
+			}
+			if (entry === null || typeof entry !== "object") continue;
+			const v = Reflect.get(entry, "value");
+			const lbl = Reflect.get(entry, "label");
+			if (typeof v !== "string" || v.length === 0) continue;
+			if (!byValue.has(v)) byValue.set(v, {
+				value: v,
+				label: typeof lbl === "string" && lbl.length > 0 ? lbl : v
+			});
+		}
+		return {
+			...field,
+			options: [...byValue.values()],
+			value
+		};
+	}
 	return {
 		...field,
 		value
@@ -13041,7 +13078,16 @@ var AutomationActionSchema = discriminatedUnion("kind", [
 	}),
 	object({
 		kind: literal("cap"),
-		deviceId: union([number().int(), object({ $var: string().min(1) })]),
+		/**
+		* One device, several same-family devices (locks / climate family / …),
+		* or `{ $var }` for the device that triggered the run. An array is
+		* fan-out at codegen — each id gets the same cap.method call.
+		*/
+		deviceId: union([
+			number().int(),
+			array(number().int()).min(1),
+			object({ $var: string().min(1) })
+		]),
 		cap: string().min(1),
 		method: string().min(1),
 		/** Values may carry `{{vars.x}}` slots, which SUBSTITUTE and do not
@@ -16697,7 +16743,7 @@ var detectionPipelineCapability = {
 * This matters here more than anywhere else in the repo, because every provider
 * that knows a device's host knows its PASSWORD too: `{ host, port, username,
 * password }` sit in one object on Hikvision, Amcrest, Reolink and ONVIF alike,
-* and `http://admin:hunter2@192.168.50.139/` is a URL a browser accepts. The
+* and `http://admin:hunter2@192.168.x.x/` is a URL a browser accepts. The
 * camera's own page will ask for its own login. That is correct, and pre-
 * filling it is the operator's business, not ours.
 *
@@ -20256,10 +20302,35 @@ var SendResultSchema = object({
 });
 /** Same shape as SendResult — kept as a distinct name for the test panel. */
 var TestResultSchema = SendResultSchema;
-method(object({}), array(TargetKindSchema)), method(object({}), array(TargetSchema), { auth: "admin" }), method(object({
+/**
+* Pre-save credential probe against a partial (unsaved) target config.
+* `resolvedUrl` never includes secrets (token stripped from path).
+*/
+var ProbeTargetConfigResultSchema = object({
+	ok: boolean(),
+	resolvedUrl: string(),
+	httpStatus: number().int().optional(),
+	stateInstance: string().optional(),
+	error: string().optional()
+});
+method(object({}), array(TargetKindSchema)), method(object({}), array(TargetSchema), { auth: "admin" }), method(object({ targetId: string() }), TargetSchema, { auth: "admin" }), method(object({
 	kind: string(),
-	config: record(string(), unknown()).optional()
+	config: record(string(), unknown()).optional(),
+	/**
+	* When editing / duplicating, the blank password field never round-trips
+	* the stored token. Pass the source target id so the provider can restore
+	* secrets server-side before dialling (same merge as upsert).
+	*/
+	targetId: string().optional()
 }), array(DiscoveredTargetSchema), { auth: "admin" }), method(object({
+	kind: string(),
+	config: record(string(), unknown()),
+	/** See `discoverTargets.targetId` — restore stored secrets for a blank password. */
+	targetId: string().optional()
+}), ProbeTargetConfigResultSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
 	targetId: string(),
 	notification: NotificationSchema
 }), SendResultSchema, {
@@ -20271,7 +20342,16 @@ method(object({}), array(TargetKindSchema)), method(object({}), array(TargetSche
 }), TestResultSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ target: TargetSchema }), TargetSchema, {
+}), method(object({
+	target: TargetSchema,
+	/**
+	* Duplicate flow: create a NEW target id while copying secrets from an
+	* existing row. The UI never holds the stored token; blank / redacted
+	* password fields are restored from this source (D634 still applies if
+	* destinations diverge without a re-typed secret).
+	*/
+	cloneSecretsFrom: string().optional()
+}), TargetSchema, {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({ targetId: string() }), _void(), {
@@ -21234,6 +21314,15 @@ var AlarmArmModeSchema = _enum([
 object({
 	/** Current lifecycle state. */
 	state: AlarmStateSchema,
+	/**
+	* The arm mode the machine belongs to under transitional words
+	* (`arming` / `pending` / `triggered` / `disarming`). `null` when
+	* disarmed or when a provider cannot name one. Exporters MUST prefer
+	* this over an in-process memo — a HomeKit accessory that missed the
+	* settled `armed_*` slice used to map `pending` to DISARMED and hide
+	* an entry delay.
+	*/
+	targetMode: AlarmArmModeSchema.nullable().optional(),
 	/** Subset of arm modes the panel accepts. UI renders one button per
 	*  mode in this list. */
 	availableModes: array(AlarmArmModeSchema),
@@ -22969,17 +23058,41 @@ var NC_ALARM_TRIGGERED_MAX_SEC = 3600;
 var NcAlarmDelaySecSchema = number().int().min(0).max(600);
 var NcAlarmTriggeredSecSchema = number().int().min(0).max(NC_ALARM_TRIGGERED_MAX_SEC);
 var uniqueModes = (entries) => new Set(entries.map((e) => e.mode)).size === entries.length;
+/**
+* What the panel does when a bounded triggered window ends.
+* - `rearmAfter` — return to the armed mode
+* - `disableAfter` — auto-disarm
+* - `doNothing` — stay triggered until a human disarms
+*/
+var NcAlarmPostTriggeredActionSchema = _enum([
+	"rearmAfter",
+	"disableAfter",
+	"doNothing"
+]);
 var NcAlarmModeDelaysListSchema = array(object({
 	mode: AlarmArmModeSchema,
 	exitDelaySec: NcAlarmDelaySecSchema.optional(),
 	entryDelaySec: NcAlarmDelaySecSchema.optional(),
-	triggeredDurationSec: NcAlarmTriggeredSecSchema.optional()
+	/**
+	* Duration of `triggered` before {@link postTriggeredAction}. Kept as the
+	* historical field name so older clients still read/write a number.
+	*/
+	triggeredDurationSec: NcAlarmTriggeredSecSchema.optional(),
+	postTriggeredAction: NcAlarmPostTriggeredActionSchema.optional(),
+	/**
+	* When this mode may be armed. Absent / null = always allowed (same as a
+	* rule with no `schedule`). Evaluated with {@link isScheduleActive}.
+	*/
+	schedule: NcScheduleSchema.optional()
 })).max(8).refine(uniqueModes, { message: "modeDelays: at most one entry per arm mode" });
 var NcAlarmModeDelaysEditListSchema = array(object({
 	mode: AlarmArmModeSchema,
 	exitDelaySec: NcAlarmDelaySecSchema.nullable().optional(),
 	entryDelaySec: NcAlarmDelaySecSchema.nullable().optional(),
-	triggeredDurationSec: NcAlarmTriggeredSecSchema.nullable().optional()
+	triggeredDurationSec: NcAlarmTriggeredSecSchema.nullable().optional(),
+	postTriggeredAction: NcAlarmPostTriggeredActionSchema.nullable().optional(),
+	/** Set a schedule, or `null` to clear (mode always allowed again). */
+	schedule: NcScheduleSchema.nullable().optional()
 })).max(8).refine(uniqueModes, { message: "modeDelays: at most one edit per arm mode" });
 /** One switch of the alarm table: put ONE device on, or take it off, ONE mode's list. */
 var NcAlarmNonBlockingEditSchema = object({
@@ -23051,12 +23164,18 @@ var NcAlarmSettingsSchema = object({
 	/** Grace period between a trigger and the alarm firing. 0 = immediate. */
 	entryDelaySec: NcAlarmDelaySecSchema,
 	/**
-	* How long `triggered` lasts before the panel re-arms itself.
-	* **0 = until an operator disarms it** — the behaviour before this field
-	* existed, and therefore what an untouched install keeps doing.
+	* How long `triggered` lasts before {@link postTriggeredAction} runs.
+	* Ignored when the action is `doNothing`. Historical name kept so older
+	* clients still round-trip a number.
 	*/
 	triggeredDurationSec: NcAlarmTriggeredSecSchema,
 	/**
+	* What happens when the triggered window ends. Absent on a blob older than
+	* this field → derived from {@link triggeredDurationSec} (`>0` ⇒ rearmAfter,
+	* else doNothing).
+	*/
+	postTriggeredAction: NcAlarmPostTriggeredActionSchema.optional(),
+	/**
 	* Deprecated by D630 — every transition is announced. Parsed, never read;
 	* remove after one release. Optional so an older admin's patch (which still
 	* sends it) parses rather than failing the whole save.
@@ -34198,7 +34317,7 @@ var LocalInterfaceSchema = object({
 	name: string(),
 	family: _enum(["IPv4", "IPv6"]),
 	address: string(),
-	/** CIDR shorthand (e.g. `192.168.1.10/24`). Empty when OS doesn't expose. */
+	/** CIDR shorthand (e.g. `192.168.x.x/24`). Empty when OS doesn't expose. */
 	cidr: string(),
 	/** OS netmask. Stable across calls so the SDK can hash on it. */
 	netmask: string(),
@@ -34644,7 +34763,7 @@ var MeshPeerSchema = object({
 	tags: array(string()).readonly(),
 	/** True when the peer advertises itself as an exit-node candidate. */
 	exitNodeOption: boolean(),
-	/** Subnet routes the peer advertises (e.g. `["192.168.1.0/24"]`). */
+	/** Subnet routes the peer advertises (e.g. `["192.168.x.x/24"]`). */
 	advertisedRoutes: array(string()).readonly(),
 	/** Owner account login (e.g. `foo@example.com`). Null for tagged peers. */
 	userLogin: string().nullable(),
@@ -44081,6 +44200,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"notificationOutput.getTarget": {
+		capName: "notification-output",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"notificationOutput.listTargetKinds": {
 		capName: "notification-output",
 		capScope: "system",
@@ -44093,6 +44218,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"notificationOutput.probeTargetConfig": {
+		capName: "notification-output",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"notificationOutput.send": {
 		capName: "notification-output",
 		capScope: "system",
@@ -47802,6 +47933,7 @@ Object.freeze({
 		access: "create"
 	}
 });
+DeviceType.Camera, DeviceType.Hub, DeviceType.Light, DeviceType.Siren, DeviceType.Switch, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Fan, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder;
 DeviceFeature.BatteryOperated;
 /**
 * The vocabulary, in the order a picker offers it.

package/dist/motion-wasm/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-DMwFmudw.js");
+const require_dist = require("../dist-DlgXwnqU.js");
 const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
 let node_fs = require("node:fs");
 let node_path = require("node:path");

package/dist/motion-wasm/index.mjs

@@ -1,4 +1,4 @@
-import { Sn as hydrateSchema, ct as evaluateZoneRules, dn as DeviceType, kt as motionDetectionCapability, mn as BaseAddon } from "../dist-CTLBxswm.mjs";
+import { Sn as hydrateSchema, ct as evaluateZoneRules, dn as DeviceType, kt as motionDetectionCapability, mn as BaseAddon } from "../dist-CbRb0Zyj.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";

package/dist/{node-BO3NIRH9.mjs → node-CZ5DXcvq.mjs}

@@ -1,4 +1,4 @@
-import { an as Fmp4BoxSplitter, fn as errMsg, ln as isSoftwareDecode, on as buildFfmpegArgs } from "./dist-CTLBxswm.mjs";
+import { an as Fmp4BoxSplitter, fn as errMsg, ln as isSoftwareDecode, on as buildFfmpegArgs } from "./dist-CbRb0Zyj.mjs";
 import { randomUUID } from "node:crypto";
 import { realpathSync } from "node:fs";
 import path from "node:path";

package/dist/{node-CJqa8iTR.js → node-s3wZnnJg.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-emK7D4bc.js");
-const require_dist = require("./dist-DMwFmudw.js");
+const require_dist = require("./dist-DlgXwnqU.js");
 let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs, 1);

package/dist/pipeline-runner/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-DMwFmudw.js");
-const require_node = require("../node-CJqa8iTR.js");
-const require_default_detection_model = require("../default-detection-model-SkL7rw1J.js");
+const require_dist = require("../dist-DlgXwnqU.js");
+const require_node = require("../node-s3wZnnJg.js");
+const require_default_detection_model = require("../default-detection-model-4nJVRIT6.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
 const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
 const require_restream_intent = require("../restream-intent-7uDNqMKs.js");