@camstack/addon-post-analysis 1.2.274 → 1.2.275

package/dist/{dist-B9V4PRZO.js → dist-Br0p61E2.js}

@@ -5390,7 +5390,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-PEo0-Fz9.mjs
+//#region ../types/dist/sleep-pM_J7YnY.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -17432,6 +17432,7 @@ sub("presence", "sensor", "sensor", "#22c55e", "presence", "Presence");
 sub("enum-sensor", "sensor", "sensor", TAXONOMY_COLORS.sensor, "generic", "Sensor state");
 sub("device-event", "sensor", "sensor", "#10b981", "button", "Device event");
 sub("lock", "control", "control", "#0ea5e9", "lock", "Lock");
+sub("cover", "control", "control", "#0ea5e9", "door", "Cover");
 sub("switch", "control", "control", TAXONOMY_COLORS.control, "switch", "Switch");
 sub("siren", "control", "control", "#dc2626", "siren", "Siren");
 sub("button", "control", "control", "#10b981", "button", "Button");
@@ -17757,6 +17758,10 @@ var NcSystemEventKindSchema = _enum([
 	"alarm-disarmed",
 	"alarm-arming",
 	"alarm-arm-refused",
+	"alarm-pending",
+	"alarm-rearmed",
+	"alarm-sensor-bypass",
+	"alarm-check-failed",
 	"addon-updated",
 	"server-updated",
 	"export-completed",
@@ -17788,9 +17793,13 @@ NcSystemEventKindSchema.options.filter((kind) => !NC_LEGACY_SYSTEM_EVENT_KINDS.h
 */
 var NC_ALARM_SYSTEM_EVENT_KINDS = [
 	"alarm-arm-refused",
+	"alarm-check-failed",
 	"alarm-arming",
 	"alarm-armed",
+	"alarm-pending",
 	"alarm-triggered",
+	"alarm-rearmed",
+	"alarm-sensor-bypass",
 	"alarm-disarmed"
 ];
 /**
@@ -18388,6 +18397,19 @@ var NcMediaFrameSchema = _enum([
 	"full",
 	"boxed"
 ]);
+/**
+* How a SENSOR notification shows the cameras that link the sensor.
+*
+* `mosaic` — one image composed of every linked camera's photograph, taken at
+* the trigger. `each` — one image per camera where the target takes several
+* attachments; a target that takes one keeps the first camera's (the degrade
+* engine drops the rest by order). Either way ONE notification per event.
+* Absent = `mosaic`, applied by the Notification Center and deliberately NOT
+* a Zod default (see NcRulePatchSchema: a default materialises on every
+* partial patch). Meaningless for a rule whose subject is not a sensor, and a
+* sensor linked to one camera ships that camera's plain snapshot either way.
+*/
+var NcLinkedCameraModeSchema = _enum(["mosaic", "each"]);
 var NcMediaPolicySchema = object({
 	attach: _enum([
 		"best",
@@ -18433,7 +18455,9 @@ var NcMediaPolicySchema = object({
 	* A profile that is not assigned falls back to the cheapest, and the render
 	* reports which one actually ran.
 	*/
-	profile: CamProfileSchema.optional()
+	profile: CamProfileSchema.optional(),
+	/** See {@link NcLinkedCameraModeSchema}. */
+	linkedCameras: NcLinkedCameraModeSchema.optional()
 });
 /**
 * Cooldown GRANULARITY over the subject's class — how much a fired
@@ -18553,7 +18577,7 @@ var NcRuleInputSchema = object({
 		cooldownSec: 60,
 		scope: "rule-device"
 	}),
-	/** `{{var}}` templating over camera/class/label/zones/confidence/time. */
+	/** `{{var}}` title/body. The variables are declared in `NC_TEMPLATE_VARS` (@camstack/types) and depend on the rule kind — see `templateVarsFor`. */
 	template: object({
 		title: string().max(500).optional(),
 		body: string().max(2e3).optional()
@@ -18733,6 +18757,22 @@ var NcRulePatchSchema = NcRuleInputSchema.partial().extend({
 	throttle: NcThrottleSchema.optional(),
 	priority: number().int().min(1).max(5).optional()
 });
+var NcRuleClearableKeySchema = _enum([
+	"template",
+	"schedule",
+	"targetUsers",
+	"snoozeOptions",
+	"snoozeAllowGlobal",
+	"waitForEnhancement",
+	"actions",
+	"confirm",
+	"groupIdleSec"
+]);
+var NcRuleUpdateInputSchema = object({
+	ruleId: string(),
+	patch: NcRulePatchSchema,
+	clear: array(NcRuleClearableKeySchema).optional()
+});
 /** A persisted rule. */
 var NcRuleSchema = NcRuleInputSchema.extend({
 	id: string(),
@@ -18764,6 +18804,85 @@ var NcTestResultSchema = object({
 	className: string().optional(),
 	label: string().optional()
 });
+/** The five rule kinds, as data. `NcRuleKind` in `notification/rule-kinds.ts`
+*  is the same union; the template-vars spec pins the two together. */
+var NcRuleKindSchema = _enum([
+	"detection",
+	"sensor",
+	"occupancy",
+	"sound",
+	"system"
+]);
+/** Which producer renders a template: an ordinary rule, a timelapse, a digest. */
+var NcTemplateFamilySchema = _enum([
+	"rule",
+	"timelapse",
+	"summary"
+]);
+/** Which text field of that producer. `previewText` is the timelapse frame
+*  caption, `captionText` the digest mosaic caption — both see fewer vars. */
+var NcTemplateFieldSchema = _enum([
+	"title",
+	"body",
+	"previewText",
+	"captionText"
+]);
+var NcTemplateVarGroupSchema = _enum([
+	"subject",
+	"place",
+	"time",
+	"rule",
+	"occupancy",
+	"sound",
+	"sensor",
+	"system",
+	"digest",
+	"ai"
+]);
+/**
+* ONE `{{var}}` a notification template may name.
+*
+* `families` / `fields` / `kinds` / `deliveries` / `systemEventKinds` say WHERE
+* it has a value; absent = no restriction on that axis. `systemEventKinds` is
+* read only for a `system` rule. `dynamic` declares a FAMILY of names
+* (`count_<class>`): the descriptor's `name` is the example member.
+*/
+var NcTemplateVarDescriptorSchema = object({
+	name: string().regex(/^\w+$/),
+	label: string(),
+	description: string().optional(),
+	example: string(),
+	group: NcTemplateVarGroupSchema,
+	families: array(NcTemplateFamilySchema).min(1),
+	fields: array(NcTemplateFieldSchema).optional(),
+	kinds: array(NcRuleKindSchema).optional(),
+	deliveries: array(NcDeliverySchema).optional(),
+	systemEventKinds: array(NcSystemEventKindSchema).optional(),
+	dynamic: object({
+		prefix: literal("count_"),
+		from: literal("classes")
+	}).optional()
+});
+/** Input to `previewTemplate` — the editor's own context, plus the draft text. */
+var NcTemplatePreviewInputSchema = object({
+	context: object({
+		family: NcTemplateFamilySchema,
+		field: NcTemplateFieldSchema,
+		kind: NcRuleKindSchema.optional(),
+		delivery: NcDeliverySchema.optional(),
+		systemEventKinds: array(NcSystemEventKindSchema).optional()
+	}),
+	template: object({
+		title: string().max(500).optional(),
+		body: string().max(2e3).optional()
+	})
+});
+var NcTemplatePreviewSchema = object({
+	title: string().nullable(),
+	body: string().nullable(),
+	/** Names the template uses that this context never fills — they render empty. */
+	unknown: array(string())
+});
 var NcConditionDescriptorSchema = object({
 	/** Field id inside `NcConditions` (or `'schedule'` for the rule-level group). */
 	id: string(),
@@ -18927,6 +19046,14 @@ var NC_CONDITION_CATALOG = [
 				value: "backup-completed",
 				label: "Backup completed"
 			},
+			{
+				value: "alarm-arm-refused",
+				label: "Alarm arm refused"
+			},
+			{
+				value: "alarm-check-failed",
+				label: "Alarm check failed (armed anyway)"
+			},
 			{
 				value: "alarm-arming",
 				label: "Alarm arming (exit delay)"
@@ -18935,10 +19062,22 @@ var NC_CONDITION_CATALOG = [
 				value: "alarm-armed",
 				label: "Alarm armed"
 			},
+			{
+				value: "alarm-pending",
+				label: "Alarm entry delay started"
+			},
 			{
 				value: "alarm-triggered",
 				label: "Alarm triggered"
 			},
+			{
+				value: "alarm-rearmed",
+				label: "Alarm re-armed after siren"
+			},
+			{
+				value: "alarm-sensor-bypass",
+				label: "Alarm sensor bypass"
+			},
 			{
 				value: "alarm-disarmed",
 				label: "Alarm disarmed"
@@ -19489,8 +19628,17 @@ var NcSnoozeSuppressedSchema = object({
 	lastAt: number()
 });
 /**
-* The three durations the panel's state machine runs on, plus who hears about
-* an arm.
+* The per-mode lists, at most one per mode. Two lists for one mode have no
+* meaning a reader could agree on (union? the last one?), so they are refused
+* at the boundary rather than interpreted.
+*/
+var NcAlarmNonBlockingListSchema = array(object({
+	mode: AlarmArmModeSchema,
+	deviceIds: array(number().int()).max(200)
+})).max(8).refine((lists) => new Set(lists.map((l) => l.mode)).size === lists.length, { message: "nonBlocking: at most one list per arm mode" });
+/**
+* The three durations the panel's state machine runs on, who hears about its
+* transitions, and which openings each mode tolerates.
 *
 * They live on the NOTIFICATION-RULES cap, not on `alarm-panel`, on purpose:
 * `alarm-panel` is `deviceNative` and its other provider mirrors somebody
@@ -19509,21 +19657,39 @@ var NcAlarmSettingsSchema = object({
 	* existed, and therefore what an untouched install keeps doing.
 	*/
 	triggeredDurationSec: number().int().min(0).max(3600),
-	/** Send a notification when a mode takes effect. */
-	announceArm: boolean(),
 	/**
-	* Where that notification goes. Target ids from `notification-output`.
+	* Deprecated by D630 — every transition is announced. Parsed, never read;
+	* remove after one release. Optional so an older admin's patch (which still
+	* sends it) parses rather than failing the whole save.
+	*/
+	announceArm: boolean().optional(),
+	/**
+	* Target ids from `notification-output`: every alarm transition goes here.
 	*
-	* Explicit rather than "everyone": an arm announcement is a household
+	* Explicit rather than "everyone": an alarm announcement is a household
 	* message, and broadcasting it to every configured endpoint (including a
 	* webhook wired to something else) is not a default anybody would choose.
-	* Empty with `announceArm: true` sends nothing, and the server logs that —
-	* silence must be attributable.
+	* Empty sends nothing, and the server logs that — silence must be
+	* attributable.
 	*/
-	announceTargets: array(string().min(1)).max(16)
+	announceTargets: array(string().min(1)).max(16),
+	/**
+	* Per arm mode, the covered devices whose being OPEN does not refuse the
+	* arm (a window left ajar for the cat under `home`, say). At most one entry
+	* per mode is meaningful. Defaulted to `[]` so a blob stored before D630
+	* parses as "every opening blocks" — the behaviour it was written under.
+	*/
+	nonBlocking: NcAlarmNonBlockingListSchema.default([])
 });
-/** Every field optional — a tab edits one control at a time. */
-var NcAlarmSettingsPatchSchema = NcAlarmSettingsSchema.partial();
+/**
+* Every field optional — a tab edits one control at a time.
+*
+* `nonBlocking` is re-declared WITHOUT its default: `.partial()` does not
+* remove an inner `.default()`, so a patch that never named the field would
+* parse to `nonBlocking: []` and wipe every mode's list on an unrelated edit
+* (the same trap {@link NcRulePatchSchema} documents).
+*/
+var NcAlarmSettingsPatchSchema = NcAlarmSettingsSchema.extend({ nonBlocking: NcAlarmNonBlockingListSchema }).partial();
 /**
 * What one arm mode actually arms, DERIVED from the enabled rules gated on it.
 * Never authored, never stored — see `alarm-mode-coverage.ts` for why a stored
@@ -19568,6 +19734,36 @@ var NcAlarmModeCoverageSchema = object({
 	*/
 	skippedDevices: array(NcAlarmSkippedDeviceSchema).default([])
 });
+/** One covered device that reads open, and whether that refuses the arm. */
+var NcAlarmOpeningSchema = object({
+	deviceId: number().int(),
+	name: string(),
+	/** The device's state word as read (`open`, `unlocked`, …). */
+	state: string(),
+	/** False when the mode's non-blocking list names this device. */
+	blocking: boolean()
+});
+/** A device the panel is currently ignoring, and which side of it it is on. */
+var NcAlarmExclusionViewSchema = object({
+	deviceId: number().int(),
+	name: string(),
+	phase: _enum(["open", "closed"])
+});
+/** One mode's openings: devices read open, plus those whose state is unknown. */
+var NcAlarmModeOpeningsSchema = object({
+	mode: AlarmArmModeSchema,
+	devices: array(NcAlarmOpeningSchema),
+	/** Covered devices whose state could not be read (D49): neither open nor closed. */
+	unknown: array(number().int())
+});
+var NcAlarmLiveSchema = object({
+	state: AlarmStateSchema,
+	/** The mode being armed into (exit delay) or held; null when disarmed. */
+	targetMode: AlarmArmModeSchema.nullable(),
+	availableModes: array(AlarmArmModeSchema),
+	openings: array(NcAlarmModeOpeningsSchema),
+	exclusions: array(NcAlarmExclusionViewSchema)
+});
 var NcAlarmConfigSchema = object({
 	/**
 	* The panel's device id, or null when this install has no panel (the ensure
@@ -19577,7 +19773,13 @@ var NcAlarmConfigSchema = object({
 	*/
 	deviceId: number().int().nullable(),
 	settings: NcAlarmSettingsSchema,
-	coverage: array(NcAlarmModeCoverageSchema)
+	coverage: array(NcAlarmModeCoverageSchema),
+	/**
+	* The panel as it is NOW — state, what each mode would find open, what is
+	* excluded. Optional: a panel-less hub answers without it, and a client
+	* must not read its absence as "nothing is open".
+	*/
+	live: NcAlarmLiveSchema.optional()
 });
 /**
 * ONE rule's demand on ONE camera's clip ring.
@@ -19633,10 +19835,7 @@ var notificationRulesCapability = {
 			auth: "admin",
 			caller: "required"
 		}),
-		updateRule: method(object({
-			ruleId: string(),
-			patch: NcRulePatchSchema
-		}), object({ rule: NcRuleSchema }), {
+		updateRule: method(NcRuleUpdateInputSchema, object({ rule: NcRuleSchema }), {
 			kind: "mutation",
 			auth: "admin",
 			caller: "required"
@@ -19724,6 +19923,18 @@ var notificationRulesCapability = {
 			catalog: array(NcConditionDescriptorSchema),
 			taxonomy: NcTaxonomySchema.optional()
 		})),
+		/** The declared `{{var}}` vocabulary; editors filter it with `templateVarsFor`. */
+		getTemplateCatalog: method(object({}), object({ vars: array(NcTemplateVarDescriptorSchema) })),
+		/**
+		* Render a template with example values, through the hub's text catalog.
+		* Pure: sends nothing. A MUTATION only for transport — a 2.5k-char draft in
+		* a batched GET URL risks length limits — so access stays `view`, the same
+		* as `getTemplateCatalog`.
+		*/
+		previewTemplate: method(NcTemplatePreviewInputSchema, NcTemplatePreviewSchema, {
+			kind: "mutation",
+			access: "view"
+		}),
 		/**
 		* Queryable delivery history — a read-only view over the durable outbox
 		* (fired rule, subject summary, target, status, timestamps, error on a
@@ -19778,7 +19989,10 @@ var notificationRulesCapability = {
 			caller: "required"
 		}),
 		/**
-		* The alarm panel's durations, plus what each mode ACTUALLY arms.
+		* The alarm panel's settings, what each mode ACTUALLY arms, and — when a
+		* panel exists — its `live` state: current state and target mode, what
+		* each mode would find open (blocking or not, and what is unknown), and
+		* the devices currently excluded.
 		*
 		* Coverage is returned by the same call as the settings on purpose: they
 		* are read together or not at all. An editor that showed the delays
@@ -19788,7 +20002,9 @@ var notificationRulesCapability = {
 		*/
 		getAlarmConfig: method(object({}), NcAlarmConfigSchema, { auth: "admin" }),
 		/**
-		* Patch the durations. Returns the WHOLE config, coverage included, so a
+		* Patch the settings (durations, recipients, per-mode non-blocking lists;
+		* `announceArm` is accepted and ignored — D630). Returns the WHOLE config,
+		* coverage and `live` included, so a
 		* client never has to guess what the server settled on — the panel clamps
 		* and normalises, and a form that re-rendered from its own input would
 		* show a value the alarm is not using.
@@ -24938,6 +25154,7 @@ var CAP_TO_KIND = {
 	"enum-sensor": "enum-sensor",
 	"event-emitter": "device-event",
 	"lock-control": "lock",
+	cover: "cover",
 	switch: "switch",
 	button: "button",
 	doorbell: "doorbell"
@@ -38221,9 +38438,8 @@ var DEVICE_STATE_READERS = [
 		field: "state"
 	},
 	{
-		cap: "lock",
-		field: "locked",
-		booleanWords: ["locked", "unlocked"]
+		cap: "lock-control",
+		field: "state"
 	},
 	{
 		cap: "contact",
@@ -44313,6 +44529,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"notificationRules.getTemplateCatalog": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"notificationRules.listDeviceMutes": {
 		capName: "notification-rules",
 		capScope: "system",
@@ -44331,6 +44553,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"notificationRules.previewTemplate": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"notificationRules.resolveArtifactUrl": {
 		capName: "notification-rules",
 		capScope: "system",
@@ -49978,6 +50206,759 @@ function isScheduleActive(schedule, atMs) {
 	}
 	return schedule.invert === true ? !inside : inside;
 }
+var RULE_BODY_ONLY = ["body"];
+var RULE_TEXT = ["title", "body"];
+var BATTERY = ["device-battery-low", "device-battery-normal"];
+var CONSUMABLE = ["device-consumable-low", "device-consumable-normal"];
+var UPDATES = [
+	"addon-update-available",
+	"server-update-available",
+	"wrapper-update-available"
+];
+var PACKAGE_UPDATES = ["addon-update-available", "server-update-available"];
+var ALARM = [
+	"alarm-triggered",
+	"alarm-armed",
+	"alarm-disarmed",
+	"alarm-arming",
+	"alarm-arm-refused"
+];
+var COMBINED_ALARM = ["alarm-triggered"];
+var DEVICE_EVENTS = [
+	"device-online",
+	"device-offline",
+	"device-disabled",
+	"device-enabled",
+	...BATTERY,
+	...CONSUMABLE,
+	"stream-online",
+	"stream-offline",
+	"detection-blind",
+	...ALARM
+];
+var NC_TEMPLATE_VARS = [
+	{
+		name: "camera",
+		label: "Camera",
+		example: "Ingresso",
+		group: "subject",
+		families: ["rule", "timelapse"],
+		systemEventKinds: [...DEVICE_EVENTS, "export-completed"]
+	},
+	{
+		name: "class",
+		label: "Detected class",
+		description: "The counted class on an occupancy row (e.g. \"person\"); the detected class elsewhere.",
+		example: "person",
+		group: "subject",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: [
+			"detection",
+			"sensor",
+			"sound",
+			"occupancy",
+			"system"
+		],
+		systemEventKinds: [...COMBINED_ALARM]
+	},
+	{
+		name: "label",
+		label: "Name or plate",
+		description: "Recognised person or read plate; empty otherwise.",
+		example: "Mario",
+		group: "subject",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["detection", "system"],
+		systemEventKinds: [...COMBINED_ALARM]
+	},
+	{
+		name: "subject",
+		label: "Subject sentence",
+		description: "Composed in the notification language, e.g. \"person (Mario)\".",
+		example: "persona (Mario)",
+		group: "subject",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: [
+			"detection",
+			"sensor",
+			"sound",
+			"occupancy"
+		]
+	},
+	{
+		name: "confidence",
+		label: "Confidence",
+		example: "87%",
+		group: "subject",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["detection", "system"],
+		systemEventKinds: [...COMBINED_ALARM]
+	},
+	{
+		name: "count",
+		label: "Count",
+		description: "Occupancy count, subjects in a grouped notification, or the event count of a system notice.",
+		example: "3",
+		group: "subject",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: [
+			"detection",
+			"occupancy",
+			"system"
+		],
+		systemEventKinds: [
+			"addon-crash-loop",
+			...PACKAGE_UPDATES,
+			"addon-updated"
+		]
+	},
+	{
+		name: "detectionSummary",
+		label: "Detection summary",
+		description: "Class composition, e.g. \"2 persons and 1 car\".",
+		example: "2 persone e 1 auto",
+		group: "subject",
+		families: [
+			"rule",
+			"timelapse",
+			"summary"
+		],
+		fields: [...RULE_TEXT],
+		kinds: ["detection"]
+	},
+	{
+		name: "zones",
+		label: "Zones",
+		example: "Cancello, Vialetto",
+		group: "place",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["detection", "system"],
+		systemEventKinds: [...COMBINED_ALARM]
+	},
+	{
+		name: "zone",
+		label: "Zone",
+		example: "Cancello",
+		group: "place",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: [
+			"detection",
+			"occupancy",
+			"system"
+		],
+		systemEventKinds: [...COMBINED_ALARM]
+	},
+	{
+		name: "inZones",
+		label: "\"in <zones>\" fragment",
+		description: "Leading space included; empty when no zone.",
+		example: " in Cancello",
+		group: "place",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["detection", "system"],
+		systemEventKinds: [...COMBINED_ALARM]
+	},
+	{
+		name: "scope",
+		label: "Occupancy scope",
+		example: "Cancello",
+		group: "place",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["occupancy"]
+	},
+	{
+		name: "time",
+		label: "Time",
+		description: "Hours and minutes, in the notification language.",
+		example: "20:05",
+		group: "time",
+		families: [
+			"rule",
+			"timelapse",
+			"summary"
+		],
+		fields: [...RULE_TEXT]
+	},
+	{
+		name: "rule",
+		label: "Rule name",
+		example: "Ingresso notte",
+		group: "rule",
+		families: [
+			"rule",
+			"timelapse",
+			"summary"
+		]
+	},
+	{
+		name: "from",
+		label: "Window start",
+		example: "07:00",
+		group: "time",
+		families: ["timelapse", "summary"]
+	},
+	{
+		name: "to",
+		label: "Window end",
+		example: "08:00",
+		group: "time",
+		families: ["timelapse", "summary"]
+	},
+	{
+		name: "capacity",
+		label: "Capacity",
+		example: "2",
+		group: "occupancy",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["occupancy"]
+	},
+	{
+		name: "op",
+		label: "Occupied / free",
+		example: "occupata",
+		group: "occupancy",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["occupancy"]
+	},
+	{
+		name: "sounds",
+		label: "Sounds heard",
+		example: "abbaio, clacson",
+		group: "sound",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["sound"]
+	},
+	{
+		name: "hitPercent",
+		label: "Share of the window",
+		description: "Level mode only: percentage of samples above the threshold.",
+		example: "42",
+		group: "sound",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["sound"]
+	},
+	{
+		name: "db",
+		label: "Peak level (dBFS)",
+		example: "-18",
+		group: "sound",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["sound"]
+	},
+	{
+		name: "eventType",
+		label: "Event type",
+		description: "Raw device event token, e.g. \"press\" or \"open\"; empty when the device sends none.",
+		example: "press",
+		group: "sensor",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["sensor"]
+	},
+	{
+		name: "ai",
+		label: "AI sentence",
+		description: "Where the AI description goes; appended on its own line when absent.",
+		example: "Una persona lascia un pacco.",
+		group: "ai",
+		families: ["rule", "summary"],
+		fields: [...RULE_BODY_ONLY],
+		kinds: ["detection", "occupancy"]
+	},
+	{
+		name: "eventKind",
+		label: "Event kind",
+		example: "device-offline",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"]
+	},
+	{
+		name: "deviceName",
+		label: "Device",
+		example: "Ingresso",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [...DEVICE_EVENTS]
+	},
+	{
+		name: "deviceId",
+		label: "Device id",
+		example: "617",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [...DEVICE_EVENTS, "export-completed"]
+	},
+	{
+		name: "percentage",
+		label: "Percentage",
+		example: "15",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [...BATTERY, ...CONSUMABLE]
+	},
+	{
+		name: "item",
+		label: "Consumable",
+		example: "Filtro",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [...CONSUMABLE]
+	},
+	{
+		name: "profile",
+		label: "Stream profile",
+		example: "high",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: ["stream-online", "stream-offline"]
+	},
+	{
+		name: "node",
+		label: "Node",
+		example: "hub",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [
+			"node-online",
+			"node-offline",
+			"node-inference-unavailable",
+			"addon-crash-loop",
+			...UPDATES,
+			"addon-updated",
+			"server-updated"
+		]
+	},
+	{
+		name: "nodeId",
+		label: "Node id",
+		example: "hub",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [
+			"node-online",
+			"node-offline",
+			"node-inference-unavailable",
+			"addon-crash-loop",
+			...UPDATES,
+			"server-updated"
+		]
+	},
+	{
+		name: "devices",
+		label: "Devices",
+		description: "node-inference-unavailable: the affected cameras, comma-joined. Alarm arm / refusal: HOW MANY devices are armed (or open).",
+		example: "Ingresso, Garage",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [
+			"node-inference-unavailable",
+			"alarm-armed",
+			"alarm-arm-refused"
+		]
+	},
+	{
+		name: "addons",
+		label: "Addons",
+		example: "stream-broker",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: ["addon-crash-loop"]
+	},
+	{
+		name: "minutes",
+		label: "Minutes",
+		example: "12",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: ["detection-blind"]
+	},
+	{
+		name: "package",
+		label: "Package",
+		example: "@camstack/addon-recorder",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [
+			...UPDATES,
+			"addon-updated",
+			"server-updated"
+		]
+	},
+	{
+		name: "packageName",
+		label: "Package",
+		example: "@camstack/addon-recorder",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [...PACKAGE_UPDATES, "server-updated"]
+	},
+	{
+		name: "nodes",
+		label: "Nodes",
+		description: "Comma-joined node ids, when an update spans more than one — the single-node case names it through {{nodeId}} instead. `incomingFromUpdateAvailable` (event-intake.ts) fills `nodes` from ONE shared textParams object for both addon- and server-update-available, exactly like packageName/currentVersion/latestVersion/count — only the shipped TEXT (system.server-update-available.body.onNodes) reads it today, but the var is real on both kinds.",
+		example: "hub, little-unraid",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [...PACKAGE_UPDATES]
+	},
+	{
+		name: "currentVersion",
+		label: "Current version",
+		example: "1.2.377",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [...UPDATES]
+	},
+	{
+		name: "latestVersion",
+		label: "Latest version",
+		example: "1.2.378",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [...UPDATES]
+	},
+	{
+		name: "list",
+		label: "Updated packages",
+		description: "One line per package. `incomingFromUpdateAvailable` fills it for addon-/server-update-available too (the SAME shared textParams object as `nodes`) — `system.addon-update-available.body` reads it; `incomingFromAddonUpdates` fills it again, independently, for the completed `addon-updated` event.",
+		example: "recorder, notifiers",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [...PACKAGE_UPDATES, "addon-updated"]
+	},
+	{
+		name: "fromVersion",
+		label: "From version",
+		example: "1.2.377",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: ["server-updated"]
+	},
+	{
+		name: "toVersion",
+		label: "To version",
+		example: "1.2.378",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: ["server-updated"]
+	},
+	{
+		name: "destinationsOk",
+		label: "Destinations ok",
+		example: "2",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: ["backup-completed"]
+	},
+	{
+		name: "destinationsTotal",
+		label: "Destinations",
+		example: "2",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: ["backup-completed"]
+	},
+	{
+		name: "destinationsFailed",
+		label: "Destinations failed",
+		example: "0",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: ["backup-completed"]
+	},
+	{
+		name: "sizeMB",
+		label: "Size (MB)",
+		example: "412",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: ["backup-completed"]
+	},
+	{
+		name: "backupId",
+		label: "Backup id",
+		example: "bk-20260924",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: ["backup-completed"]
+	},
+	{
+		name: "title",
+		label: "Export title",
+		example: "Ingresso 08:00",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: ["export-completed"]
+	},
+	{
+		name: "exportId",
+		label: "Export id",
+		example: "exp-20260924",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: ["export-completed"]
+	},
+	{
+		name: "bytes",
+		label: "Export size (bytes)",
+		example: "10485760",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: ["export-completed"]
+	},
+	{
+		name: "mode",
+		label: "Alarm mode",
+		example: "away",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [
+			"alarm-armed",
+			"alarm-arming",
+			"alarm-arm-refused"
+		]
+	},
+	{
+		name: "seconds",
+		label: "Seconds",
+		description: "Arming: the exit delay left. Refusal: how long the retry-to-arm-anyway lasts.",
+		example: "30",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: ["alarm-arming", "alarm-arm-refused"]
+	},
+	{
+		name: "rules",
+		label: "Covering rules",
+		description: "How many enabled rules the armed mode gates.",
+		example: "2",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: ["alarm-armed"]
+	},
+	{
+		name: "names",
+		label: "Device names",
+		description: "Armed: the devices armed. Arming: the devices this mode cannot arm. Refusal: the open sensors.",
+		example: "Ingresso, Garage",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [
+			"alarm-armed",
+			"alarm-arming",
+			"alarm-arm-refused"
+		]
+	},
+	{
+		name: "skippedNames",
+		label: "Skipped devices",
+		description: "Devices the mode names but cannot arm (muted, detection off, offline).",
+		example: "Garage",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: ["alarm-armed"]
+	},
+	{
+		name: "bypassedNames",
+		label: "Bypassed sensors",
+		description: "Sensors the operator armed around because they were open.",
+		example: "Finestra veranda",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: ["alarm-armed", "alarm-arming"]
+	},
+	{
+		name: "coverage",
+		label: "Coverage %",
+		example: "96",
+		group: "digest",
+		families: ["timelapse"],
+		fields: [...RULE_TEXT]
+	},
+	{
+		name: "events",
+		label: "Events",
+		example: "4",
+		group: "digest",
+		families: ["timelapse", "summary"],
+		fields: [...RULE_TEXT]
+	},
+	{
+		name: "detections",
+		label: "Detections",
+		example: "7",
+		group: "digest",
+		families: ["timelapse", "summary"],
+		fields: [...RULE_TEXT]
+	},
+	{
+		name: "count_person",
+		label: "Count of one class",
+		description: "count_<class>, e.g. count_person, count_car.",
+		example: "3",
+		group: "digest",
+		families: ["timelapse", "summary"],
+		fields: [...RULE_TEXT],
+		dynamic: {
+			prefix: "count_",
+			from: "classes"
+		}
+	},
+	{
+		name: "cameras",
+		label: "Cameras",
+		example: "3",
+		group: "digest",
+		families: ["summary"],
+		fields: [...RULE_TEXT]
+	},
+	{
+		name: "matched",
+		label: "Matched events",
+		example: "12",
+		group: "digest",
+		families: ["summary"],
+		fields: [...RULE_TEXT]
+	},
+	{
+		name: "shown",
+		label: "Events shown",
+		example: "9",
+		group: "digest",
+		families: ["summary"],
+		fields: [...RULE_TEXT]
+	},
+	{
+		name: "total",
+		label: "Events total",
+		example: "12",
+		group: "digest",
+		families: ["summary"],
+		fields: [...RULE_TEXT]
+	}
+];
+/** The caption fields see a fixed, smaller vocabulary (`timelapsePreviewText`,
+*  `summaryCaptionText`). Declared here rather than as `fields` on every
+*  descriptor so the whole rule stays in one line of code. */
+var CAPTION_VARS = {
+	previewText: [
+		"camera",
+		"rule",
+		"from",
+		"to"
+	],
+	captionText: [
+		"rule",
+		"from",
+		"to"
+	]
+};
+function onAxis(declared, asked) {
+	return declared === void 0 || asked === void 0 || declared.includes(asked);
+}
+function onSystemAxis(d, ctx) {
+	if (ctx.kind !== "system" || d.systemEventKinds === void 0) return true;
+	const asked = ctx.systemEventKinds ?? [];
+	return asked.length === 0 || asked.some((k) => d.systemEventKinds?.includes(k) === true);
+}
+/**
+* The variables that have a value in `ctx`, in catalog order. Pure.
+*
+* `ctx` is trusted, typed input — untrusted input (a served/RPC boundary) is
+* validated once against {@link NcTemplateVarContextSchema} at the cap/bridge
+* boundary, not re-parsed on every call here (Task 4).
+*/
+function templateVarsFor(ctx) {
+	if (ctx.field === "previewText" || ctx.field === "captionText") {
+		const allowed = CAPTION_VARS[ctx.field];
+		return NC_TEMPLATE_VARS.filter((d) => d.families.includes(ctx.family) && allowed.includes(d.name) && d.dynamic === void 0);
+	}
+	return NC_TEMPLATE_VARS.filter((d) => d.families.includes(ctx.family) && onAxis(d.fields, ctx.field) && onAxis(d.kinds, ctx.kind) && onAxis(d.deliveries, ctx.delivery) && onSystemAxis(d, ctx));
+}
+/** True when `name` is supplied in `ctx`, dynamic families (`count_<class>`) included. */
+function isKnownTemplateVar(name, ctx) {
+	return templateVarsFor(ctx).some((d) => d.dynamic !== void 0 ? name.startsWith(d.dynamic.prefix) && name.length > d.dynamic.prefix.length : d.name === name);
+}
 /**
 * Does `filter` say anything about `kind`?
 *
@@ -51188,6 +52169,12 @@ Object.defineProperty(exports, "NC_TAXONOMY", {
 		return NC_TAXONOMY;
 	}
 });
+Object.defineProperty(exports, "NC_TEMPLATE_VARS", {
+	enumerable: true,
+	get: function() {
+		return NC_TEMPLATE_VARS;
+	}
+});
 Object.defineProperty(exports, "NcConditionDescriptorSchema", {
 	enumerable: true,
 	get: function() {
@@ -51218,6 +52205,12 @@ Object.defineProperty(exports, "NcRuleTargetSchema", {
 		return NcRuleTargetSchema;
 	}
 });
+Object.defineProperty(exports, "NcRuleUpdateInputSchema", {
+	enumerable: true,
+	get: function() {
+		return NcRuleUpdateInputSchema;
+	}
+});
 Object.defineProperty(exports, "NcScheduleSchema", {
 	enumerable: true,
 	get: function() {
@@ -51254,6 +52247,24 @@ Object.defineProperty(exports, "NcTaxonomySchema", {
 		return NcTaxonomySchema;
 	}
 });
+Object.defineProperty(exports, "NcTemplatePreviewInputSchema", {
+	enumerable: true,
+	get: function() {
+		return NcTemplatePreviewInputSchema;
+	}
+});
+Object.defineProperty(exports, "NcTemplatePreviewSchema", {
+	enumerable: true,
+	get: function() {
+		return NcTemplatePreviewSchema;
+	}
+});
+Object.defineProperty(exports, "NcTemplateVarDescriptorSchema", {
+	enumerable: true,
+	get: function() {
+		return NcTemplateVarDescriptorSchema;
+	}
+});
 Object.defineProperty(exports, "OpsLogEntrySchema", {
 	enumerable: true,
 	get: function() {
@@ -51518,6 +52529,12 @@ Object.defineProperty(exports, "isEventOwnerType", {
 		return isEventOwnerType;
 	}
 });
+Object.defineProperty(exports, "isKnownTemplateVar", {
+	enumerable: true,
+	get: function() {
+		return isKnownTemplateVar;
+	}
+});
 Object.defineProperty(exports, "isMediaOwnerType", {
 	enumerable: true,
 	get: function() {
@@ -51680,6 +52697,12 @@ Object.defineProperty(exports, "systemEventFilterApplies", {
 		return systemEventFilterApplies;
 	}
 });
+Object.defineProperty(exports, "templateVarsFor", {
+	enumerable: true,
+	get: function() {
+		return templateVarsFor;
+	}
+});
 Object.defineProperty(exports, "unknown", {
 	enumerable: true,
 	get: function() {