@camstack/addon-post-analysis 1.2.25 → 1.2.26

package/dist/{dist-Bi1fiPc0.js → dist-CP-FTAl5.js}

@@ -8414,6 +8414,60 @@ function buildNcTaxonomy() {
 /** The frozen NC taxonomy, derived once from the taxonomy dictionary. */
 var NC_TAXONOMY = Object.freeze(buildNcTaxonomy());
 /**
+* Most specific first. Extending this list is how a new device kind becomes
+* gateable; nothing else needs to change.
+*/
+var DEVICE_STATE_READERS = [
+	{
+		cap: "alarm-panel",
+		field: "state"
+	},
+	{
+		cap: "cover",
+		field: "state"
+	},
+	{
+		cap: "presence",
+		field: "state"
+	},
+	{
+		cap: "lock",
+		field: "locked",
+		booleanWords: ["locked", "unlocked"]
+	},
+	{
+		cap: "contact",
+		field: "entryOpen",
+		booleanWords: ["open", "closed"]
+	},
+	{
+		cap: "switch",
+		field: "on",
+		booleanWords: ["on", "off"]
+	},
+	{
+		cap: "binary",
+		field: "on",
+		booleanWords: ["on", "off"]
+	}
+];
+/**
+* Collapse a device's full runtime state to the one string a rule compares
+* against, or `undefined` when nothing in the table applies.
+*
+* `undefined` is the safe answer everywhere: the gate treats it as "does not
+* match", so a device whose kind we cannot read simply never arms a rule.
+*/
+function readDeviceStateFrom(runtimeState) {
+	for (const reader of DEVICE_STATE_READERS) {
+		const slice = runtimeState[reader.cap];
+		if (slice === null || typeof slice !== "object") continue;
+		const value = slice[reader.field];
+		if (typeof value === "string" && value.length > 0) return value;
+		if (typeof value === "boolean" && reader.booleanWords !== void 0) return value ? reader.booleanWords[0] : reader.booleanWords[1];
+	}
+}
+/**
 * Error types for the safe expression engine. Two distinct classes so callers
 * can tell a compile-time (grammar) failure from a runtime (evaluation)
 * failure — both are non-fatal to the host: read paths degrade to "skip link".
@@ -9236,11 +9290,13 @@ var NcZoneConditionSchema = object({
 	/** Quantifier over `ids` — at least one / every one visited. */
 	match: _enum(["any", "all"]).default("any")
 });
-/**
-* The P1 condition set — a flat AND of groups; absent group = pass;
-* membership lists are OR within the list (spec §2.3).
-*/
 var NcConditionsSchema = object({
+	/** Gate on ANOTHER device's current state (the alarm armed, a switch on). */
+	deviceState: object({
+		deviceId: number().int(),
+		/** Any of these matches. */
+		states: array(string().min(1)).min(1)
+	}).optional(),
 	/** Device scope — absent = all devices. */
 	devices: array(number()).optional(),
 	/** Detector class names (any overlap with the record's class set). */
@@ -9605,7 +9661,8 @@ var NcConditionDescriptorSchema = object({
 		"packagePhase",
 		"crossingSelect",
 		"polygonDraw",
-		"occupancy"
+		"occupancy",
+		"deviceState"
 	]),
 	operator: _enum([
 		"in",
@@ -9864,6 +9921,21 @@ var NC_CONDITION_CATALOG = [
 		phase: "P1",
 		description: "pipeline / onboard / sensor; a record with no stamped source counts as pipeline."
 	},
+	{
+		id: "deviceState",
+		group: "scope",
+		label: "Device state",
+		valueType: "deviceState",
+		operator: "in",
+		appliesTo: [
+			"immediate",
+			"track-end",
+			"device-event",
+			"package-event"
+		],
+		phase: "P2",
+		description: "Only fire while another device is in one of the chosen states — the alarm armed, a switch on, a contact closed. A state that cannot be read does NOT fire."
+	},
 	{
 		id: "sensorKinds",
 		group: "device",
@@ -28021,6 +28093,12 @@ Object.defineProperty(exports, "plateGalleryCapability", {
 		return plateGalleryCapability;
 	}
 });
+Object.defineProperty(exports, "readDeviceStateFrom", {
+	enumerable: true,
+	get: function() {
+		return readDeviceStateFrom;
+	}
+});
 Object.defineProperty(exports, "string", {
 	enumerable: true,
 	get: function() {

package/dist/{dist-DsCSHZ9N.mjs → dist-O227Je-Q.mjs}

@@ -8392,6 +8392,60 @@ function buildNcTaxonomy() {
 /** The frozen NC taxonomy, derived once from the taxonomy dictionary. */
 var NC_TAXONOMY = Object.freeze(buildNcTaxonomy());
 /**
+* Most specific first. Extending this list is how a new device kind becomes
+* gateable; nothing else needs to change.
+*/
+var DEVICE_STATE_READERS = [
+	{
+		cap: "alarm-panel",
+		field: "state"
+	},
+	{
+		cap: "cover",
+		field: "state"
+	},
+	{
+		cap: "presence",
+		field: "state"
+	},
+	{
+		cap: "lock",
+		field: "locked",
+		booleanWords: ["locked", "unlocked"]
+	},
+	{
+		cap: "contact",
+		field: "entryOpen",
+		booleanWords: ["open", "closed"]
+	},
+	{
+		cap: "switch",
+		field: "on",
+		booleanWords: ["on", "off"]
+	},
+	{
+		cap: "binary",
+		field: "on",
+		booleanWords: ["on", "off"]
+	}
+];
+/**
+* Collapse a device's full runtime state to the one string a rule compares
+* against, or `undefined` when nothing in the table applies.
+*
+* `undefined` is the safe answer everywhere: the gate treats it as "does not
+* match", so a device whose kind we cannot read simply never arms a rule.
+*/
+function readDeviceStateFrom(runtimeState) {
+	for (const reader of DEVICE_STATE_READERS) {
+		const slice = runtimeState[reader.cap];
+		if (slice === null || typeof slice !== "object") continue;
+		const value = slice[reader.field];
+		if (typeof value === "string" && value.length > 0) return value;
+		if (typeof value === "boolean" && reader.booleanWords !== void 0) return value ? reader.booleanWords[0] : reader.booleanWords[1];
+	}
+}
+/**
 * Error types for the safe expression engine. Two distinct classes so callers
 * can tell a compile-time (grammar) failure from a runtime (evaluation)
 * failure — both are non-fatal to the host: read paths degrade to "skip link".
@@ -9214,11 +9268,13 @@ var NcZoneConditionSchema = object({
 	/** Quantifier over `ids` — at least one / every one visited. */
 	match: _enum(["any", "all"]).default("any")
 });
-/**
-* The P1 condition set — a flat AND of groups; absent group = pass;
-* membership lists are OR within the list (spec §2.3).
-*/
 var NcConditionsSchema = object({
+	/** Gate on ANOTHER device's current state (the alarm armed, a switch on). */
+	deviceState: object({
+		deviceId: number().int(),
+		/** Any of these matches. */
+		states: array(string().min(1)).min(1)
+	}).optional(),
 	/** Device scope — absent = all devices. */
 	devices: array(number()).optional(),
 	/** Detector class names (any overlap with the record's class set). */
@@ -9583,7 +9639,8 @@ var NcConditionDescriptorSchema = object({
 		"packagePhase",
 		"crossingSelect",
 		"polygonDraw",
-		"occupancy"
+		"occupancy",
+		"deviceState"
 	]),
 	operator: _enum([
 		"in",
@@ -9842,6 +9899,21 @@ var NC_CONDITION_CATALOG = [
 		phase: "P1",
 		description: "pipeline / onboard / sensor; a record with no stamped source counts as pipeline."
 	},
+	{
+		id: "deviceState",
+		group: "scope",
+		label: "Device state",
+		valueType: "deviceState",
+		operator: "in",
+		appliesTo: [
+			"immediate",
+			"track-end",
+			"device-event",
+			"package-event"
+		],
+		phase: "P2",
+		description: "Only fire while another device is in one of the chosen states — the alarm armed, a switch on, a contact closed. A state that cannot be read does NOT fire."
+	},
 	{
 		id: "sensorKinds",
 		group: "device",
@@ -27741,4 +27813,4 @@ Object.freeze({
 	"smtp-provider": "email"
 });
 //#endregion
-export { subKindsOf as A, array as B, defineCustomActions as C, notificationRulesCapability as D, hfModelUrl as E, DeviceType as F, string as G, literal as H, createEvent as I, EventCategory as K, hydrateSchema as L, zoneAnalyticsCapability as M, errMsg as N, pipelineAnalyticsCapability as O, BaseAddon as P, nodePin as R, customAction as S, faceGalleryCapability as T, number as U, boolean as V, object as W, TimelapseRuleSchema as _, NC_CONDITION_CATALOG as a, buildEventKindDescriptor as b, NcRuleInputSchema as c, NcSnoozeInputSchema as d, NcSnoozeSchema as f, TimelapseRuleInputSchema as g, OpsLogEntrySchema as h, MACRO_LABELS as i, videoclipsCapability as j, plateGalleryCapability as k, NcRulePatchSchema as l, NcTaxonomySchema as m, EVENT_KIND_BY_CAP as n, NC_TAXONOMY as o, NcSnoozeSuppressedSchema as p, EVENT_PAD_MS as r, NcConditionDescriptorSchema as s, DEFAULT_EVENT_COLOR as t, NcRuleSchema as u, addonWidgetsSourceCapability as v, embeddingEncoderCapability as w, cosineSimilarity as x, audioMetricsCapability as y, _enum as z };
+export { readDeviceStateFrom as A, _enum as B, defineCustomActions as C, notificationRulesCapability as D, hfModelUrl as E, BaseAddon as F, object as G, boolean as H, DeviceType as I, string as K, createEvent as L, videoclipsCapability as M, zoneAnalyticsCapability as N, pipelineAnalyticsCapability as O, errMsg as P, hydrateSchema as R, customAction as S, faceGalleryCapability as T, literal as U, array as V, number as W, TimelapseRuleSchema as _, NC_CONDITION_CATALOG as a, buildEventKindDescriptor as b, NcRuleInputSchema as c, NcSnoozeInputSchema as d, NcSnoozeSchema as f, TimelapseRuleInputSchema as g, OpsLogEntrySchema as h, MACRO_LABELS as i, subKindsOf as j, plateGalleryCapability as k, NcRulePatchSchema as l, NcTaxonomySchema as m, EVENT_KIND_BY_CAP as n, NC_TAXONOMY as o, NcSnoozeSuppressedSchema as p, EventCategory as q, EVENT_PAD_MS as r, NcConditionDescriptorSchema as s, DEFAULT_EVENT_COLOR as t, NcRuleSchema as u, addonWidgetsSourceCapability as v, embeddingEncoderCapability as w, cosineSimilarity as x, audioMetricsCapability as y, nodePin as z };

package/dist/embedding-encoder/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-Bi1fiPc0.js");
+const require_dist = require("../dist-CP-FTAl5.js");
 let node_fs = require("node:fs");
 let node_fs$1 = require_dist.__toESM(node_fs, 1);
 node_fs = require_dist.__toESM(node_fs);

package/dist/embedding-encoder/index.mjs

@@ -1,4 +1,4 @@
-import { E as hfModelUrl, P as BaseAddon, w as embeddingEncoderCapability } from "../dist-DsCSHZ9N.mjs";
+import { E as hfModelUrl, F as BaseAddon, w as embeddingEncoderCapability } from "../dist-O227Je-Q.mjs";
 import { createRequire } from "node:module";
 import * as fs from "node:fs";
 import "node:fs";

package/dist/{node-DFKBSXUx.js → node-BQUEteve.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-Bi1fiPc0.js");
+const require_dist = require("./dist-CP-FTAl5.js");
 let node_fs = require("node:fs");
 node_fs = require_dist.__toESM(node_fs, 1);
 let node_path = require("node:path");

package/dist/pipeline-analytics/{_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-QDqT3XHa.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-aG07ehD0.mjs}

@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.25",
+		version: "1.2.26",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_pipeline_analytics_widgets",

package/dist/pipeline-analytics/{hostInit-DvTbKmnz.mjs → hostInit-66T4FwIA.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.2.25",
+				version: "1.2.26",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/pipeline-analytics/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-Bi1fiPc0.js");
+const require_dist = require("../dist-CP-FTAl5.js");
 let node_fs = require("node:fs");
 let node_path = require("node:path");
 node_path = require_dist.__toESM(node_path);
@@ -4758,17 +4758,7 @@ function referencesAudioClass(classes) {
 	if (classes === void 0) return false;
 	return classes.some((c) => c.trim().toLowerCase().startsWith("audio-"));
 }
-/**
-* Evaluate one rule against one subject. The rule's `delivery` must match
-* the subject kind (`immediate` ↔ `object-event`, `track-end` ↔
-* `track-end`) — a mismatch fails with `'delivery'`. Schedule is evaluated
-* at the SUBJECT timestamp (the persist moment), so boot-time reconcile of
-* missed records applies the schedule the record lived under.
-*
-* Throttle/cooldown is deliberately NOT part of this function — cooldown
-* is stateful; see {@link cooldownKey} / {@link isCoolingDown}.
-*/
-function evaluateRule(rule, subject) {
+function evaluateRule(rule, subject, deviceState) {
 	if (subject.kind === "occupancy-event") {
 		if (rule.delivery !== "device-event") return fail("delivery");
 		const occ = rule.conditions.occupancy;
@@ -4783,6 +4773,11 @@ function evaluateRule(rule, subject) {
 		if (rule.conditions.occupancy !== void 0) return fail("occupancy");
 	}
 	const c = rule.conditions;
+	if (c.deviceState !== void 0) {
+		const current = deviceState?.(c.deviceState.deviceId);
+		if (current === void 0) return fail("deviceState");
+		if (!toLowerSet(c.deviceState.states).has(current.trim().toLowerCase())) return fail("deviceState");
+	}
 	if (c.devices !== void 0 && c.devices.length > 0 && !c.devices.includes(subject.deviceId)) return fail("devices");
 	if (c.source !== void 0 && c.source !== "any") {
 		if ((subject.source ?? "pipeline") !== c.source) return fail("source");
@@ -6612,6 +6607,53 @@ var NcRuleStore = class {
 		});
 	}
 };
+var NcDeviceStateCache = class {
+	deps;
+	states = /* @__PURE__ */ new Map();
+	lastOkAt = 0;
+	ids = [];
+	now;
+	constructor(deps) {
+		this.deps = deps;
+		this.now = deps.now ?? (() => Date.now());
+	}
+	/**
+	* The device ids worth reading — recomputed from the rule set, so a cluster
+	* with no gated rule does no work at all.
+	*/
+	setWatched(ids) {
+		this.ids = [...new Set(ids)].sort((a, b) => a - b);
+	}
+	watched() {
+		return this.ids;
+	}
+	/** Hot-path read. No I/O, no await — this is called per event. */
+	get(deviceId) {
+		if (this.now() - this.lastOkAt > 3e5) return void 0;
+		return this.states.get(deviceId);
+	}
+	/**
+	* Re-read every watched state. Never throws: a gate that could fail the
+	* evaluation tick would take the notification pipeline with it.
+	*/
+	async refresh() {
+		if (this.ids.length === 0) {
+			this.states = /* @__PURE__ */ new Map();
+			return;
+		}
+		try {
+			const next = await this.deps.readStates(this.ids);
+			this.states = new Map(next);
+			this.lastOkAt = this.now();
+			for (const id of this.ids) if (!next.has(id)) this.deps.logger.info("device-state gate: no state for a watched device", { tags: { deviceId: id } });
+		} catch (err) {
+			this.deps.logger.warn("device-state refresh failed — keeping the previous states until they age out", { meta: {
+				watched: this.ids.length,
+				error: String(err)
+			} });
+		}
+	}
+};
 //#endregion
 //#region src/notification-center/snooze-digest.ts
 /** `14:03` in the node's local zone — a digest is read by a person, at home. */
@@ -7445,6 +7487,9 @@ var NotificationCenter = class NotificationCenter {
 	/** Snooze windows + what they hid. Mirrored into RAM; the dispatcher's gate
 	*  reads it with no I/O, the drain tick refreshes it. */
 	snoozes;
+	/** States the `deviceState` rule gate reads. Refreshed on the reload tick;
+	*  read with no I/O on the persist hook. */
+	deviceStates;
 	/** True when ≥1 enabled `device-event` rule declares an occupancy condition —
 	*  the watcher is idle (zero per-frame cost) otherwise. */
 	occupancyEnabled = false;
@@ -7477,6 +7522,11 @@ var NotificationCenter = class NotificationCenter {
 			store: deps.store,
 			logger: this.logger.child("occupancy")
 		});
+		this.deviceStates = new NcDeviceStateCache({
+			logger: this.logger.child("device-state"),
+			readStates: deps.readDeviceStates ?? (async () => /* @__PURE__ */ new Map()),
+			...deps.now !== void 0 ? { now: deps.now } : {}
+		});
 		this.snoozes = new NcSnoozeStore({
 			store: deps.store,
 			logger: this.logger.child("snooze"),
@@ -7531,6 +7581,7 @@ var NotificationCenter = class NotificationCenter {
 		await this.snoozes.load();
 		this.refreshOccupancyWatch();
 		if (!opts.evaluation) return;
+		await this.deviceStates.refresh();
 		this.evaluationActive = true;
 		await this.outbox.load();
 		await this.seedCooldowns();
@@ -7802,7 +7853,7 @@ var NotificationCenter = class NotificationCenter {
 		let anyMatched = false;
 		const rejections = [];
 		for (const rule of candidates) {
-			const evaluation = evaluateRule(rule, subject);
+			const evaluation = evaluateRule(rule, subject, (id) => this.deviceStates.get(id));
 			if (!evaluation.matched) {
 				rejections.push(`${rule.name}:${evaluation.failedCondition ?? "unknown"}`);
 				this.logger.debug("rule did not match", {
@@ -8003,6 +8054,13 @@ var NotificationCenter = class NotificationCenter {
 		}
 		this.occupancyWatcher.setWatchedKeys(specs);
 		this.occupancyEnabled = specs.length > 0;
+		const gated = [];
+		for (const rule of this.rules.list()) {
+			if (!rule.enabled) continue;
+			const ds = rule.conditions.deviceState;
+			if (ds !== void 0) gated.push(ds.deviceId);
+		}
+		this.deviceStates.setWatched(gated);
 	}
 	/** Boot reseed of confirmed occupancy edge-state (durability, constraint 4) —
 	*  hydrate the watcher from the store, then prune orphaned durable rows to the
@@ -8019,6 +8077,7 @@ var NotificationCenter = class NotificationCenter {
 		await this.rules.load();
 		this.refreshOccupancyWatch();
 		if (!this.evaluationActive) return;
+		await this.deviceStates.refresh();
 		await this.occupancyStore.pruneExcept(this.activeOccupancyKeys());
 	}
 	/** The full-key set the watcher currently tracks (post prune) — the bound for
@@ -8246,7 +8305,7 @@ var NotificationCenter = class NotificationCenter {
 		const results = [];
 		for (const subject of subjects.sort((a, b) => b.timestamp - a.timestamp)) {
 			if (results.length >= TEST_RULE_MAX_RESULTS) break;
-			const evaluation = evaluateRule(rule, subject);
+			const evaluation = evaluateRule(rule, subject, (id) => this.deviceStates.get(id));
 			results.push({
 				recordId: subject.recordId,
 				recordKind: subject.kind === "track-end" ? "track" : subject.kind === "audio-event" ? "object-event" : subject.kind === "occupancy-event" ? "device-event" : subject.kind,
@@ -21841,7 +21900,7 @@ var PipelineAnalyticsAddon = class extends require_dist.BaseAddon {
 		let storage = this.ctx.kernel.storage;
 		const mediaRoot = process.env.CAMSTACK_MEDIA_ROOT?.trim();
 		if (mediaRoot) {
-			const { FilesystemStorageProvider } = await Promise.resolve().then(() => require("../node-DFKBSXUx.js"));
+			const { FilesystemStorageProvider } = await Promise.resolve().then(() => require("../node-BQUEteve.js"));
 			storage = new FilesystemStorageProvider(mediaRoot, { eventMedia: mediaRoot });
 			logger.info("pipeline-analytics: event media rooted at CAMSTACK_MEDIA_ROOT", { meta: { mediaRoot } });
 		}
@@ -22198,6 +22257,19 @@ var PipelineAnalyticsAddon = class extends require_dist.BaseAddon {
 					addonId: device.addonId
 				};
 			},
+			readDeviceStates: async (ids) => {
+				const out = /* @__PURE__ */ new Map();
+				for (const id of ids) try {
+					const state = require_dist.readDeviceStateFrom(await api.deviceManager.loadRuntimeState.query({ deviceId: id }));
+					if (state !== void 0) out.set(id, state);
+				} catch (err) {
+					this.ctx.logger.debug("device-state read failed", {
+						tags: { deviceId: id },
+						meta: { error: String(err) }
+					});
+				}
+				return out;
+			},
 			dispatcher: {
 				getZoneNames: async (deviceId) => {
 					return (await api.zones.listZones.query({ deviceId })).map((z) => ({

package/dist/pipeline-analytics/index.mjs

@@ -1,4 +1,4 @@
-import { A as subKindsOf, B as array, C as defineCustomActions, D as notificationRulesCapability, F as DeviceType, G as string, H as literal, I as createEvent, K as EventCategory, L as hydrateSchema, M as zoneAnalyticsCapability, N as errMsg, O as pipelineAnalyticsCapability, P as BaseAddon, R as nodePin, S as customAction, T as faceGalleryCapability, U as number, V as boolean, W as object, _ as TimelapseRuleSchema, a as NC_CONDITION_CATALOG, b as buildEventKindDescriptor, c as NcRuleInputSchema, d as NcSnoozeInputSchema, f as NcSnoozeSchema, g as TimelapseRuleInputSchema, h as OpsLogEntrySchema, i as MACRO_LABELS, j as videoclipsCapability, k as plateGalleryCapability, l as NcRulePatchSchema, m as NcTaxonomySchema, n as EVENT_KIND_BY_CAP, o as NC_TAXONOMY, p as NcSnoozeSuppressedSchema, r as EVENT_PAD_MS, s as NcConditionDescriptorSchema, t as DEFAULT_EVENT_COLOR, u as NcRuleSchema, v as addonWidgetsSourceCapability, x as cosineSimilarity, y as audioMetricsCapability, z as _enum } from "../dist-DsCSHZ9N.mjs";
+import { A as readDeviceStateFrom, B as _enum, C as defineCustomActions, D as notificationRulesCapability, F as BaseAddon, G as object, H as boolean, I as DeviceType, K as string, L as createEvent, M as videoclipsCapability, N as zoneAnalyticsCapability, O as pipelineAnalyticsCapability, P as errMsg, R as hydrateSchema, S as customAction, T as faceGalleryCapability, U as literal, V as array, W as number, _ as TimelapseRuleSchema, a as NC_CONDITION_CATALOG, b as buildEventKindDescriptor, c as NcRuleInputSchema, d as NcSnoozeInputSchema, f as NcSnoozeSchema, g as TimelapseRuleInputSchema, h as OpsLogEntrySchema, i as MACRO_LABELS, j as subKindsOf, k as plateGalleryCapability, l as NcRulePatchSchema, m as NcTaxonomySchema, n as EVENT_KIND_BY_CAP, o as NC_TAXONOMY, p as NcSnoozeSuppressedSchema, q as EventCategory, r as EVENT_PAD_MS, s as NcConditionDescriptorSchema, t as DEFAULT_EVENT_COLOR, u as NcRuleSchema, v as addonWidgetsSourceCapability, x as cosineSimilarity, y as audioMetricsCapability, z as nodePin } from "../dist-O227Je-Q.mjs";
 import { promises } from "node:fs";
 import path from "node:path";
 import { createHmac, randomUUID, timingSafeEqual } from "node:crypto";
@@ -4752,17 +4752,7 @@ function referencesAudioClass(classes) {
 	if (classes === void 0) return false;
 	return classes.some((c) => c.trim().toLowerCase().startsWith("audio-"));
 }
-/**
-* Evaluate one rule against one subject. The rule's `delivery` must match
-* the subject kind (`immediate` ↔ `object-event`, `track-end` ↔
-* `track-end`) — a mismatch fails with `'delivery'`. Schedule is evaluated
-* at the SUBJECT timestamp (the persist moment), so boot-time reconcile of
-* missed records applies the schedule the record lived under.
-*
-* Throttle/cooldown is deliberately NOT part of this function — cooldown
-* is stateful; see {@link cooldownKey} / {@link isCoolingDown}.
-*/
-function evaluateRule(rule, subject) {
+function evaluateRule(rule, subject, deviceState) {
 	if (subject.kind === "occupancy-event") {
 		if (rule.delivery !== "device-event") return fail("delivery");
 		const occ = rule.conditions.occupancy;
@@ -4777,6 +4767,11 @@ function evaluateRule(rule, subject) {
 		if (rule.conditions.occupancy !== void 0) return fail("occupancy");
 	}
 	const c = rule.conditions;
+	if (c.deviceState !== void 0) {
+		const current = deviceState?.(c.deviceState.deviceId);
+		if (current === void 0) return fail("deviceState");
+		if (!toLowerSet(c.deviceState.states).has(current.trim().toLowerCase())) return fail("deviceState");
+	}
 	if (c.devices !== void 0 && c.devices.length > 0 && !c.devices.includes(subject.deviceId)) return fail("devices");
 	if (c.source !== void 0 && c.source !== "any") {
 		if ((subject.source ?? "pipeline") !== c.source) return fail("source");
@@ -6606,6 +6601,53 @@ var NcRuleStore = class {
 		});
 	}
 };
+var NcDeviceStateCache = class {
+	deps;
+	states = /* @__PURE__ */ new Map();
+	lastOkAt = 0;
+	ids = [];
+	now;
+	constructor(deps) {
+		this.deps = deps;
+		this.now = deps.now ?? (() => Date.now());
+	}
+	/**
+	* The device ids worth reading — recomputed from the rule set, so a cluster
+	* with no gated rule does no work at all.
+	*/
+	setWatched(ids) {
+		this.ids = [...new Set(ids)].sort((a, b) => a - b);
+	}
+	watched() {
+		return this.ids;
+	}
+	/** Hot-path read. No I/O, no await — this is called per event. */
+	get(deviceId) {
+		if (this.now() - this.lastOkAt > 3e5) return void 0;
+		return this.states.get(deviceId);
+	}
+	/**
+	* Re-read every watched state. Never throws: a gate that could fail the
+	* evaluation tick would take the notification pipeline with it.
+	*/
+	async refresh() {
+		if (this.ids.length === 0) {
+			this.states = /* @__PURE__ */ new Map();
+			return;
+		}
+		try {
+			const next = await this.deps.readStates(this.ids);
+			this.states = new Map(next);
+			this.lastOkAt = this.now();
+			for (const id of this.ids) if (!next.has(id)) this.deps.logger.info("device-state gate: no state for a watched device", { tags: { deviceId: id } });
+		} catch (err) {
+			this.deps.logger.warn("device-state refresh failed — keeping the previous states until they age out", { meta: {
+				watched: this.ids.length,
+				error: String(err)
+			} });
+		}
+	}
+};
 //#endregion
 //#region src/notification-center/snooze-digest.ts
 /** `14:03` in the node's local zone — a digest is read by a person, at home. */
@@ -7439,6 +7481,9 @@ var NotificationCenter = class NotificationCenter {
 	/** Snooze windows + what they hid. Mirrored into RAM; the dispatcher's gate
 	*  reads it with no I/O, the drain tick refreshes it. */
 	snoozes;
+	/** States the `deviceState` rule gate reads. Refreshed on the reload tick;
+	*  read with no I/O on the persist hook. */
+	deviceStates;
 	/** True when ≥1 enabled `device-event` rule declares an occupancy condition —
 	*  the watcher is idle (zero per-frame cost) otherwise. */
 	occupancyEnabled = false;
@@ -7471,6 +7516,11 @@ var NotificationCenter = class NotificationCenter {
 			store: deps.store,
 			logger: this.logger.child("occupancy")
 		});
+		this.deviceStates = new NcDeviceStateCache({
+			logger: this.logger.child("device-state"),
+			readStates: deps.readDeviceStates ?? (async () => /* @__PURE__ */ new Map()),
+			...deps.now !== void 0 ? { now: deps.now } : {}
+		});
 		this.snoozes = new NcSnoozeStore({
 			store: deps.store,
 			logger: this.logger.child("snooze"),
@@ -7525,6 +7575,7 @@ var NotificationCenter = class NotificationCenter {
 		await this.snoozes.load();
 		this.refreshOccupancyWatch();
 		if (!opts.evaluation) return;
+		await this.deviceStates.refresh();
 		this.evaluationActive = true;
 		await this.outbox.load();
 		await this.seedCooldowns();
@@ -7796,7 +7847,7 @@ var NotificationCenter = class NotificationCenter {
 		let anyMatched = false;
 		const rejections = [];
 		for (const rule of candidates) {
-			const evaluation = evaluateRule(rule, subject);
+			const evaluation = evaluateRule(rule, subject, (id) => this.deviceStates.get(id));
 			if (!evaluation.matched) {
 				rejections.push(`${rule.name}:${evaluation.failedCondition ?? "unknown"}`);
 				this.logger.debug("rule did not match", {
@@ -7997,6 +8048,13 @@ var NotificationCenter = class NotificationCenter {
 		}
 		this.occupancyWatcher.setWatchedKeys(specs);
 		this.occupancyEnabled = specs.length > 0;
+		const gated = [];
+		for (const rule of this.rules.list()) {
+			if (!rule.enabled) continue;
+			const ds = rule.conditions.deviceState;
+			if (ds !== void 0) gated.push(ds.deviceId);
+		}
+		this.deviceStates.setWatched(gated);
 	}
 	/** Boot reseed of confirmed occupancy edge-state (durability, constraint 4) —
 	*  hydrate the watcher from the store, then prune orphaned durable rows to the
@@ -8013,6 +8071,7 @@ var NotificationCenter = class NotificationCenter {
 		await this.rules.load();
 		this.refreshOccupancyWatch();
 		if (!this.evaluationActive) return;
+		await this.deviceStates.refresh();
 		await this.occupancyStore.pruneExcept(this.activeOccupancyKeys());
 	}
 	/** The full-key set the watcher currently tracks (post prune) — the bound for
@@ -8240,7 +8299,7 @@ var NotificationCenter = class NotificationCenter {
 		const results = [];
 		for (const subject of subjects.sort((a, b) => b.timestamp - a.timestamp)) {
 			if (results.length >= TEST_RULE_MAX_RESULTS) break;
-			const evaluation = evaluateRule(rule, subject);
+			const evaluation = evaluateRule(rule, subject, (id) => this.deviceStates.get(id));
 			results.push({
 				recordId: subject.recordId,
 				recordKind: subject.kind === "track-end" ? "track" : subject.kind === "audio-event" ? "object-event" : subject.kind === "occupancy-event" ? "device-event" : subject.kind,
@@ -22192,6 +22251,19 @@ var PipelineAnalyticsAddon = class extends BaseAddon {
 					addonId: device.addonId
 				};
 			},
+			readDeviceStates: async (ids) => {
+				const out = /* @__PURE__ */ new Map();
+				for (const id of ids) try {
+					const state = readDeviceStateFrom(await api.deviceManager.loadRuntimeState.query({ deviceId: id }));
+					if (state !== void 0) out.set(id, state);
+				} catch (err) {
+					this.ctx.logger.debug("device-state read failed", {
+						tags: { deviceId: id },
+						meta: { error: String(err) }
+					});
+				}
+				return out;
+			},
 			dispatcher: {
 				getZoneNames: async (deviceId) => {
 					return (await api.zones.listZones.query({ deviceId })).map((z) => ({

package/dist/pipeline-analytics/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-QDqT3XHa.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_pipeline_analytics_widgets-aG07ehD0.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-post-analysis",
-  "version": "1.2.25",
+  "version": "1.2.26",
   "description": "Post-Analysis bundle — enrichment, embedding-encoder, pipeline-analytics. Multi-entry npm package shipping addons that consume pipeline output.",
   "keywords": [
     "camstack",