@camstack/addon-post-analysis 1.2.325 → 1.2.330

package/dist/pipeline-analytics/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_clip_model_registry = require("../clip-model-registry-BFLeI0dr.js");
+const require_clip_model_registry = require("../clip-model-registry-DQmmIYXS.js");
 let node_fs = require("node:fs");
 node_fs = require_clip_model_registry.__toESM(node_fs, 1);
 let node_path = require("node:path");
@@ -659,7 +659,8 @@ var NcAlarmArmOutcomeSchema = require_clip_model_registry.discriminatedUnion("ou
 	require_clip_model_registry.object({
 		outcome: require_clip_model_registry.literal("rejected"),
 		reason: NcAlarmArmAnywayRejectionSchema
-	}).readonly()
+	}).readonly(),
+	require_clip_model_registry.object({ outcome: require_clip_model_registry.literal("outside-schedule") }).readonly()
 ]);
 /**
 * The devices a mode covers, ascending and de-duplicated.
@@ -1518,7 +1519,25 @@ function modeDelaysFromPersisted(raw) {
 			}
 			kept[field] = value;
 		}
-		if (kept.exitDelaySec !== void 0 || kept.entryDelaySec !== void 0 || kept.triggeredDurationSec !== void 0) entries.push(kept);
+		if (item.postTriggeredAction !== void 0) {
+			const action = require_clip_model_registry.NcAlarmPostTriggeredActionSchema.safeParse(item.postTriggeredAction);
+			if (action.success) kept.postTriggeredAction = action.data;
+			else dropped.push({
+				mode: item.mode,
+				why: "out-of-bounds",
+				field: "triggeredDurationSec"
+			});
+		}
+		if (item.schedule !== void 0) {
+			const schedule = require_clip_model_registry.NcScheduleSchema.safeParse(item.schedule);
+			if (schedule.success) kept.schedule = schedule.data;
+			else dropped.push({
+				mode: item.mode,
+				why: "out-of-bounds",
+				field: "schedule"
+			});
+		}
+		if (kept.exitDelaySec !== void 0 || kept.entryDelaySec !== void 0 || kept.triggeredDurationSec !== void 0 || kept.postTriggeredAction !== void 0 || kept.schedule !== void 0) entries.push(kept);
 	}
 	return {
 		entries,
@@ -1534,16 +1553,15 @@ function modeDelaysFromPersisted(raw) {
 * (`resolveModeDelays`): `home` has no exit delay on purpose — nobody is
 * leaving — and says so with its own entry, not by this shared value.
 *
-* `triggeredDurationSec: 0` = "sound until somebody disarms it". That is what
-* the panel did before the field existed, so an install that never opens the
-* tab keeps behaving exactly as it did — a default that silently re-armed
-* every existing alarm after N seconds would be a behaviour change nobody
-* asked for.
+* Default post-triggered action is `rearmAfter` 10 s — every mode inherits
+* that unless the operator overrides. Older blobs that still store the stock
+* `0` + absent/`doNothing` seed are migrated once at panel boot (D701).
 */
 var DEFAULT_DELAYS = {
 	exitDelaySec: 30,
 	entryDelaySec: 20,
-	triggeredDurationSec: 0
+	triggeredDurationSec: 10,
+	postTriggeredAction: "rearmAfter"
 };
 var DISARMED = {
 	target: "disarmed",
@@ -1561,7 +1579,7 @@ function armedState(mode) {
 * answer is still correct the moment anyone asks.
 */
 function stateAt(m, now) {
-	if (m.clearAt !== void 0 && now >= m.clearAt) return m.target;
+	if (m.clearAt !== void 0 && now >= m.clearAt) return m.clearToDisarmed === true ? "disarmed" : m.target;
 	if (m.fired) return "triggered";
 	if (m.triggerAt !== void 0) return now >= m.triggerAt ? "triggered" : "pending";
 	if (m.armedAt !== void 0) return now >= m.armedAt ? m.target : "arming";
@@ -1657,10 +1675,18 @@ function trigger(m, delays, now) {
 		changedAt: now
 	};
 }
-/** `clearAt` iff the operator asked for a bounded siren — see {@link AlarmDelays}. */
+/**
+* `clearAt` (+ optional disarm) when the operator asked for a bounded
+* post-triggered action — see {@link AlarmDelays}.
+*/
 function autoClear(delays, firesAt) {
-	if (delays.triggeredDurationSec <= 0) return {};
-	return { clearAt: firesAt + delays.triggeredDurationSec * 1e3 };
+	if (delays.postTriggeredAction === "doNothing") return {};
+	const clearAt = firesAt + Math.max(0, delays.triggeredDurationSec) * 1e3;
+	if (delays.postTriggeredAction === "disableAfter") return {
+		clearAt,
+		clearToDisarmed: true
+	};
+	return { clearAt };
 }
 /**
 * Settle the machine so a stored value never depends on when it is read.
@@ -1670,16 +1696,23 @@ function autoClear(delays, firesAt) {
 * than only in the reading of it.
 */
 function settle(m, now) {
-	if (m.clearAt !== void 0 && now >= m.clearAt) return {
-		target: m.target,
-		fired: false,
-		changedAt: m.clearAt
-	};
+	if (m.clearAt !== void 0 && now >= m.clearAt) {
+		if (m.clearToDisarmed === true) return {
+			...DISARMED,
+			changedAt: m.clearAt
+		};
+		return {
+			target: m.target,
+			fired: false,
+			changedAt: m.clearAt
+		};
+	}
 	if (m.triggerAt !== void 0 && now >= m.triggerAt) return {
 		target: m.target,
 		fired: true,
 		changedAt: m.triggerAt,
-		...m.clearAt !== void 0 ? { clearAt: m.clearAt } : {}
+		...m.clearAt !== void 0 ? { clearAt: m.clearAt } : {},
+		...m.clearToDisarmed === true ? { clearToDisarmed: true } : {}
 	};
 	if (m.armedAt !== void 0 && now >= m.armedAt) return {
 		target: m.target,
@@ -1826,7 +1859,8 @@ function alarmTransition(input) {
 		kind: "alarm-disarmed",
 		state: next,
 		previous,
-		at
+		at,
+		...input.autoCleared === true ? { autoCleared: true } : {}
 	};
 	return null;
 }
@@ -1917,6 +1951,17 @@ var ncAlarmPanelSchema = require_clip_model_registry.object({
 	entryDelaySec: require_clip_model_registry.number().int().min(0).max(600).default(DEFAULT_DELAYS.entryDelaySec),
 	triggeredDurationSec: require_clip_model_registry.number().int().min(0).max(3600).default(DEFAULT_DELAYS.triggeredDurationSec),
 	/**
+	* What happens when the triggered window ends. Absent on older blobs →
+	* derived from {@link triggeredDurationSec} at read time (never defaulted
+	* here: a Zod default would force `doNothing` onto installs that already
+	* had a positive `triggeredDurationSec` and silently stop re-arming).
+	*/
+	postTriggeredAction: require_clip_model_registry._enum([
+		"rearmAfter",
+		"disableAfter",
+		"doNothing"
+	]).optional(),
+	/**
 	* VESTIGIAL (D630): nothing reads it to decide anything any more — every
 	* transition is announced to `announceTargets`. Kept so a persisted blob
 	* and the settings cap still round-trip it, and read once at boot to tell
@@ -1975,7 +2020,14 @@ var ncAlarmPanelSchema = require_clip_model_registry.object({
 		mode: require_clip_model_registry.string(),
 		exitDelaySec: require_clip_model_registry.number().optional(),
 		entryDelaySec: require_clip_model_registry.number().optional(),
-		triggeredDurationSec: require_clip_model_registry.number().optional()
+		triggeredDurationSec: require_clip_model_registry.number().optional(),
+		postTriggeredAction: require_clip_model_registry._enum([
+			"rearmAfter",
+			"disableAfter",
+			"doNothing"
+		]).optional(),
+		/** Loose — re-validated through {@link modeDelaysFromPersisted}. */
+		schedule: require_clip_model_registry.unknown().optional()
 	})).default([]),
 	/**
 	* Active alarm configuration profile id. Empty / absent on a blob older than
@@ -2047,12 +2099,18 @@ function settingsBlobFromPersisted(raw) {
 		if (typeof rec["exitDelaySec"] === "number") entry.exitDelaySec = rec["exitDelaySec"];
 		if (typeof rec["entryDelaySec"] === "number") entry.entryDelaySec = rec["entryDelaySec"];
 		if (typeof rec["triggeredDurationSec"] === "number") entry.triggeredDurationSec = rec["triggeredDurationSec"];
+		if (typeof rec["postTriggeredAction"] === "string") entry.postTriggeredAction = rec["postTriggeredAction"];
+		if (rec["schedule"] !== void 0) entry.schedule = rec["schedule"];
 		modeDelaysLoose.push(entry);
 	}
+	const truncatedTriggered = Math.max(0, Math.min(3600, Math.trunc(triggered)));
+	const rawAction = raw["postTriggeredAction"];
+	const postTriggeredAction = rawAction === "rearmAfter" || rawAction === "disableAfter" || rawAction === "doNothing" ? rawAction : void 0;
 	return {
 		exitDelaySec: Math.max(0, Math.min(600, Math.trunc(exit))),
 		entryDelaySec: Math.max(0, Math.min(600, Math.trunc(entry))),
-		triggeredDurationSec: Math.max(0, Math.min(3600, Math.trunc(triggered))),
+		triggeredDurationSec: truncatedTriggered,
+		...postTriggeredAction !== void 0 ? { postTriggeredAction } : {},
 		announceTargets,
 		nonBlocking: lists("nonBlocking"),
 		blocking: lists("blocking"),
@@ -2065,6 +2123,7 @@ function settingsToPersisted(settings) {
 		exitDelaySec: settings.exitDelaySec,
 		entryDelaySec: settings.entryDelaySec,
 		triggeredDurationSec: settings.triggeredDurationSec,
+		...settings.postTriggeredAction !== void 0 ? { postTriggeredAction: settings.postTriggeredAction } : {},
 		announceTargets: [...settings.announceTargets],
 		nonBlocking: settings.nonBlocking.map((l) => ({
 			mode: l.mode,
@@ -2149,11 +2208,13 @@ function machineFromPersisted(raw) {
 	const armedAt = optionalInstant(rec["armedAt"]);
 	const triggerAt = optionalInstant(rec["triggerAt"]);
 	const clearAt = optionalInstant(rec["clearAt"]);
+	const clearToDisarmed = rec["clearToDisarmed"] === true;
 	return {
 		target: rec["target"],
 		...armedAt !== void 0 ? { armedAt } : {},
 		...triggerAt !== void 0 ? { triggerAt } : {},
 		...clearAt !== void 0 ? { clearAt } : {},
+		...clearToDisarmed ? { clearToDisarmed: true } : {},
 		fired: rec["fired"] === true,
 		changedAt: rec["changedAt"]
 	};
@@ -2193,14 +2254,48 @@ var NcAlarmPanelDevice = class extends require_clip_model_registry.BaseDevice {
 		super(ctx, ncAlarmPanelSchema, { type: require_clip_model_registry.DeviceType.AlarmPanel });
 		this.logDroppedModeDelays();
 		this.restore();
+		this.migrateStockAfterTriggerDefaults();
 		this.registerAlarmCap();
 		this.publish();
 		if (this.config.get("announceArm") === false && this.config.get("announceTargets").length > 0) this.ctx.logger.info("alarm announcements now cover every transition (D630) — the announceArm switch is gone", { tags: { deviceId: this.id } });
+		if (this.config.get("announceTargets").length > 0) {
+			this.ctx.logger.info("alarm announceTargets cleared — deliver via alarm rules only", {
+				tags: { deviceId: this.id },
+				meta: { cleared: this.config.get("announceTargets").length }
+			});
+			this.config.set("announceTargets", []);
+		}
+	}
+	/**
+	* One-shot: the pre-D701 stock seed was `triggeredDurationSec: 0` + absent /
+	* `doNothing` (stay triggered forever). That left After trigger looking dead
+	* in the UI. Flip only that seed to {@link DEFAULT_DELAYS} — never a custom
+	* duration or an explicit `disableAfter`.
+	*/
+	migrateStockAfterTriggerDefaults() {
+		const duration = this.config.get("triggeredDurationSec");
+		const action = this.config.get("postTriggeredAction");
+		if (!(duration === 0 && (action === void 0 || action === "doNothing"))) return;
+		this.config.set("triggeredDurationSec", DEFAULT_DELAYS.triggeredDurationSec);
+		this.config.set("postTriggeredAction", DEFAULT_DELAYS.postTriggeredAction);
+		this.ctx.logger.info("alarm after-trigger defaults migrated to rearmAfter 10s", {
+			tags: { deviceId: this.id },
+			meta: {
+				fromDurationSec: duration,
+				fromAction: action ?? "absent",
+				toDurationSec: DEFAULT_DELAYS.triggeredDurationSec,
+				toAction: DEFAULT_DELAYS.postTriggeredAction
+			}
+		});
 	}
 	/** The operator-visible configuration, as the cap serves it. */
 	settings() {
+		const storedAction = this.config.get("postTriggeredAction");
 		return {
-			...this.readDelays(),
+			exitDelaySec: this.config.get("exitDelaySec"),
+			entryDelaySec: this.config.get("entryDelaySec"),
+			triggeredDurationSec: this.config.get("triggeredDurationSec"),
+			...storedAction !== void 0 ? { postTriggeredAction: storedAction } : {},
 			announceArm: this.config.get("announceArm"),
 			announceTargets: [...this.config.get("announceTargets")],
 			nonBlocking: modeDeviceListFromPersisted(this.config.get("nonBlocking")),
@@ -2349,6 +2444,7 @@ var NcAlarmPanelDevice = class extends require_clip_model_registry.BaseDevice {
 		if (patch.exitDelaySec !== void 0) await this.config.set("exitDelaySec", patch.exitDelaySec);
 		if (patch.entryDelaySec !== void 0) await this.config.set("entryDelaySec", patch.entryDelaySec);
 		if (patch.triggeredDurationSec !== void 0) await this.config.set("triggeredDurationSec", patch.triggeredDurationSec);
+		if (patch.postTriggeredAction !== void 0) await this.config.set("postTriggeredAction", patch.postTriggeredAction);
 		if (patch.announceArm !== void 0) await this.config.set("announceArm", patch.announceArm);
 		if (patch.announceTargets !== void 0) await this.config.set("announceTargets", [...patch.announceTargets]);
 		if (membership !== void 0 && membershipChanged !== null) this.ctx.logger.info("alarm non-blocking list changed", {
@@ -2524,6 +2620,29 @@ var NcAlarmPanelDevice = class extends require_clip_model_registry.BaseDevice {
 					}
 				});
 			}
+			if (edit.postTriggeredAction !== void 0) {
+				const from = was?.postTriggeredAction ?? null;
+				const to = now?.postTriggeredAction ?? null;
+				if (from !== to) this.ctx.logger.info("alarm mode delays changed", {
+					tags: { deviceId: this.id },
+					meta: {
+						mode: edit.mode,
+						field: "postTriggeredAction",
+						from,
+						to
+					}
+				});
+			}
+			if (edit.schedule !== void 0) {
+				if ((was?.schedule === void 0 ? null : "set") !== (now?.schedule === void 0 ? null : "set") || edit.schedule !== null) this.ctx.logger.info("alarm mode activation schedule changed", {
+					tags: { deviceId: this.id },
+					meta: {
+						mode: edit.mode,
+						cleared: edit.schedule === null,
+						windows: now?.schedule?.windows.length ?? 0
+					}
+				});
+			}
 		}
 	}
 	/** One INFO line per persisted per-mode delay entry the guard refused to trust. */
@@ -2582,6 +2701,13 @@ var NcAlarmPanelDevice = class extends require_clip_model_registry.BaseDevice {
 	*/
 	async armWith(mode) {
 		const now = Date.now();
+		if (!this.modeScheduleAllows(mode, now)) {
+			this.ctx.logger.info("alarm arm refused — outside activation schedule", {
+				tags: { deviceId: this.id },
+				meta: { mode }
+			});
+			return { outcome: "outside-schedule" };
+		}
 		const read = await this.applyArmGuard(mode);
 		if (read.kind === "unguarded") return this.settleArm(mode, null, now);
 		if (read.kind === "check-failed") {
@@ -2595,6 +2721,11 @@ var NcAlarmPanelDevice = class extends require_clip_model_registry.BaseDevice {
 			why: this.exclusionWhyFor(mode, device)
 		})), now);
 	}
+	/** Absent schedule = always allowed (`isScheduleActive`). */
+	modeScheduleAllows(mode, now) {
+		const schedule = modeDelaysFromPersisted(this.config.get("modeDelays")).entries.find((e) => e.mode === mode)?.schedule;
+		return require_clip_model_registry.isScheduleActive(schedule, now);
+	}
 	/**
 	* The Arm anyway on ONE refusal's notification — the only path that arms
 	* around a device that blocks.
@@ -2620,6 +2751,17 @@ var NcAlarmPanelDevice = class extends require_clip_model_registry.BaseDevice {
 			const reason = refusalId === this.spentRefusalId ? "used" : "unknown-refusal";
 			return this.rejectArmAnyway(refusalId, reason);
 		}
+		if (!this.modeScheduleAllows(held.mode, now)) {
+			this.refusal = null;
+			this.ctx.logger.info("alarm arm-anyway refused — outside activation schedule", {
+				tags: { deviceId: this.id },
+				meta: {
+					mode: held.mode,
+					refusalId
+				}
+			});
+			return { outcome: "outside-schedule" };
+		}
 		if (this.machine.changedAt !== held.panelChangedAt) {
 			this.refusal = null;
 			return this.rejectArmAnyway(refusalId, "stale");
@@ -3015,11 +3157,12 @@ var NcAlarmPanelDevice = class extends require_clip_model_registry.BaseDevice {
 	* rather than fired only once somebody looks.
 	*/
 	publish(now = Date.now()) {
+		const autoCleared = this.machine.clearAt !== void 0 && now >= this.machine.clearAt && this.machine.clearToDisarmed === true;
 		this.machine = settle(this.machine, now);
 		const state = stateAt(this.machine, now);
 		this.runtimeState.setCapState("alarm-panel", this.status(now));
 		this.persist();
-		this.report(state, now);
+		this.report(state, now, autoCleared);
 		if (this.machine.armedAt !== void 0 || this.machine.triggerAt !== void 0 || this.machine.clearAt !== void 0) this.startTicking();
 		else this.stopTicking();
 	}
@@ -3031,7 +3174,7 @@ var NcAlarmPanelDevice = class extends require_clip_model_registry.BaseDevice {
 	* panel's own state update with it would make a delivery failure look like
 	* an alarm failure.
 	*/
-	report(state, now) {
+	report(state, now, autoCleared = false) {
 		const previous = this.lastPublished;
 		this.lastPublished = state;
 		const hook = this.onPublish;
@@ -3046,7 +3189,8 @@ var NcAlarmPanelDevice = class extends require_clip_model_registry.BaseDevice {
 			at: now,
 			...source !== null ? { source } : {},
 			...arming !== void 0 ? { arming } : {},
-			...pending !== void 0 ? { pending } : {}
+			...pending !== void 0 ? { pending } : {},
+			...autoCleared ? { autoCleared: true } : {}
 		});
 		if (transition?.kind === "alarm-triggered") this.attribution.clear();
 		try {
@@ -3132,8 +3276,12 @@ var NcAlarmPanelDevice = class extends require_clip_model_registry.BaseDevice {
 	}
 	/** The global durations plus the per-mode overrides, read from the persisted config NOW. */
 	delaySettings() {
+		const storedAction = this.config.get("postTriggeredAction");
 		return {
-			...this.readDelays(),
+			exitDelaySec: this.config.get("exitDelaySec"),
+			entryDelaySec: this.config.get("entryDelaySec"),
+			triggeredDurationSec: this.config.get("triggeredDurationSec"),
+			...storedAction !== void 0 ? { postTriggeredAction: storedAction } : {},
 			modeDelays: modeDelaysFromPersisted(this.config.get("modeDelays")).entries
 		};
 	}
@@ -3143,24 +3291,32 @@ var NcAlarmPanelDevice = class extends require_clip_model_registry.BaseDevice {
 	*/
 	delaysFor(mode) {
 		const settings = this.delaySettings();
-		if (mode === null) return {
-			exitDelaySec: settings.exitDelaySec,
-			entryDelaySec: settings.entryDelaySec,
-			triggeredDurationSec: settings.triggeredDurationSec,
-			source: {
-				exitDelaySec: "default",
-				entryDelaySec: "default",
-				triggeredDurationSec: "default"
-			}
-		};
+		if (mode === null) {
+			const delays = this.readDelays();
+			return {
+				exitDelaySec: delays.exitDelaySec,
+				entryDelaySec: delays.entryDelaySec,
+				triggeredDurationSec: delays.triggeredDurationSec,
+				postTriggeredAction: delays.postTriggeredAction,
+				source: {
+					exitDelaySec: "default",
+					entryDelaySec: "default",
+					triggeredDurationSec: "default",
+					postTriggeredAction: "default"
+				}
+			};
+		}
 		return require_clip_model_registry.resolveModeDelays(settings, mode);
 	}
-	/** The three global durations, read from the persisted config. */
+	/** The global durations + post-triggered action, read from the persisted config. */
 	readDelays() {
+		const triggeredDurationSec = this.config.get("triggeredDurationSec");
+		const stored = this.config.get("postTriggeredAction");
 		return {
 			exitDelaySec: this.config.get("exitDelaySec"),
 			entryDelaySec: this.config.get("entryDelaySec"),
-			triggeredDurationSec: this.config.get("triggeredDurationSec")
+			triggeredDurationSec,
+			postTriggeredAction: require_clip_model_registry.derivePostTriggeredAction(stored, triggeredDurationSec)
 		};
 	}
 	startTicking() {
@@ -5141,7 +5297,7 @@ function ncClassNoun(texts, className, count) {
 		count,
 		vars: { name: className }
 	});
-	if (require_clip_model_registry.isEventKindLabelKey(normalised)) return require_clip_model_registry.eventKindLabel(normalised, texts.language);
+	if (require_clip_model_registry.isEventKindLabelKey(normalised)) return require_clip_model_registry.eventKindLabel(normalised, texts.language).toLocaleLowerCase(texts.language);
 	return texts.text({
 		key: "class.other",
 		count,
@@ -5149,13 +5305,24 @@ function ncClassNoun(texts, className, count) {
 	});
 }
 /**
-* The parenthetical half of a labelled subject: a recognised person or plate
-* is printed verbatim; a classification (species, COCO sub, …) goes through
-* the shared event-kind map so "animal (cat)" becomes "animale (Gatto)".
+* The ONE capitalisation the notification body gets: its first letter, after
+* every catalog fragment and placeholder has already been rendered lowercase.
+* Title, fragments and mid-sentence summaries are never passed through here.
 */
-function ncSubjectLabelText(texts, label, labelKind) {
-	if (labelKind === "identity" || labelKind === "plate") return label;
-	return require_clip_model_registry.eventKindLabel(label, texts.language);
+function ncSentenceCaseBody(body) {
+	if (body.length === 0) return body;
+	const first = body[0];
+	const upper = first.toLocaleUpperCase();
+	if (upper === first) return body;
+	return `${upper}${body.slice(1)}`;
+}
+/**
+* True when `label` is a taxonomy / classification id (species, COCO sub, …)
+* rather than a person name or plate. Those REPLACE the coarse class in the
+* subject — "dog" not "animal (dog)", "cane" not "animale (cane)".
+*/
+function isClassificationLabel(label) {
+	return require_clip_model_registry.isEventKindLabelKey(label.trim().toLowerCase());
 }
 /** `person (John)` / `persona (John)` — the thing the notification is about. */
 function ncSubjectText(texts, input) {
@@ -5164,11 +5331,15 @@ function ncSubjectText(texts, input) {
 		key: "detection.subject",
 		vars: { classNoun }
 	});
+	if (input.labelKind !== "identity" && input.labelKind !== "plate" && isClassificationLabel(input.label)) return texts.text({
+		key: "detection.subject",
+		vars: { classNoun: ncClassNoun(texts, input.label, 1) }
+	});
 	return texts.text({
 		key: subjectLabelKey(input.labelKind),
 		vars: {
 			classNoun,
-			label: ncSubjectLabelText(texts, input.label, input.labelKind)
+			label: input.label
 		}
 	});
 }
@@ -5758,7 +5929,7 @@ function isAdoptable(record, nowMs) {
 * what `localDayMinute` does for the same input — one behaviour for a bad
 * zone, not two.
 */
-function clockOf$6(atMs, timeZone) {
+function clockOf$7(atMs, timeZone) {
 	if (timeZone !== void 0) try {
 		return new Intl.DateTimeFormat("en-GB", {
 			timeZone,
@@ -5894,7 +6065,7 @@ var TimelapseRenderer = class {
 				includeAudio: false,
 				maxLifeMs: await this.ports.exportLifeMs(),
 				deleteAfterDownload: false,
-				title: `${request.ruleName} ${clockOf$6(window.startMs, request.timezone)}→${clockOf$6(window.endMs, request.timezone)}`,
+				title: `${request.ruleName} ${clockOf$7(window.startMs, request.timezone)}→${clockOf$7(window.endMs, request.timezone)}`,
 				timelapse: {
 					everyMs,
 					outputFps: request.framerate,
@@ -6225,7 +6396,7 @@ var TimelapseRenderer = class {
 					...meta,
 					unservedWindowCount: verdict.unservedWindows.length,
 					unservedWindows: verdict.unservedWindows.slice(0, 12).map((w) => ({
-						at: clockOf$6(request.window.startMs + w.fromSec * 1e3, request.timezone),
+						at: clockOf$7(request.window.startMs + w.fromSec * 1e3, request.timezone),
 						fromSec: Math.round(w.fromSec),
 						toSec: Math.round(w.toSec),
 						expectedDenseFrames: w.expectedDenseFrames,
@@ -8806,6 +8977,7 @@ function buildActionButtons(input) {
 				sequenceId: button.sequenceId,
 				actionId: button.id
 			}),
+			mode: "background",
 			...button.icon !== void 0 ? { icon: button.icon } : {},
 			...button.destructive !== void 0 ? { destructive: button.destructive } : {}
 		});
@@ -8921,10 +9093,9 @@ var MAX_ARM_BUTTONS = 3;
 * (`ALARM_DISARM_TTL_MS`). Both exist: the hint is for the person, the TTL is
 * for the forwarded screenshot.
 *
-* Arm buttons are `background` — arming from the lock screen should not open a
-* browser. The disarm is `navigate`: it removes a protection, and the operator
-* doing it deserves to SEE that it happened rather than trust a POST nobody
-* confirmed.
+* Every alarm button is `background` — Zentik (and ntfy) fire a POST and leave
+* the lock screen alone. Opening a browser to arm or disarm costs more
+* attention than the notification did.
 *
 * `panel.availableModes` ARE the enabled modes: CamStack has no per-mode
 * disable setting, so the Arm buttons offer exactly what the panel declares.
@@ -8958,14 +9129,14 @@ function buildAlarmButtons(input) {
 		}),
 		icon: "disarm",
 		destructive: true,
-		mode: "navigate"
+		mode: "background"
 	}];
 }
 /**
 * The one Arm anyway a refusal notification carries — or none, when the row
-* names no refusal. `navigate` and destructive, like the disarm: it arms
-* AROUND an open door, and the person doing it should see it happen. Its TTL
-* is the refusal's own (`ARM_ANYWAY_TTL_MS`, priced by the minter).
+* names no refusal. Destructive + background: it arms around an open door via
+* POST (Zentik BACKGROUND_CALL), same as disarm. Its TTL is the refusal's own
+* (`ARM_ANYWAY_TTL_MS`, priced by the minter).
 */
 function armAnywayButton(refusalId, input) {
 	if (refusalId === void 0) return [];
@@ -8980,7 +9151,7 @@ function armAnywayButton(refusalId, input) {
 		}),
 		icon: "arm",
 		destructive: true,
-		mode: "navigate"
+		mode: "background"
 	}];
 }
 //#endregion
@@ -12902,6 +13073,10 @@ function alarmTextKeys(transition, body) {
 		titleKey,
 		bodyKey: `system.${kind}.body.${transition.sensor.event}`
 	};
+	if (kind === "alarm-disarmed" && transition.autoCleared === true) return {
+		titleKey,
+		bodyKey: `system.${kind}.body.autoCleared`
+	};
 	if (kind === "alarm-disarmed" && (transition.previous === "triggered" || transition.previous === "pending")) return {
 		titleKey,
 		bodyKey: `system.${kind}.body.defused`
@@ -14621,13 +14796,14 @@ var en_default = {
 	"system.alarm-arming.title.away": "Arming away — {{seconds}}s",
 	"system.alarm-arming.title.night": "Arming night — {{seconds}}s",
 	"system.alarm-arming.body": "Arming",
-	"system.alarm-armed.title.home": "Armed: home",
-	"system.alarm-armed.title.away": "Armed: away",
-	"system.alarm-armed.title.night": "Armed: night",
+	"system.alarm-armed.title.home": "Alarm armed: home",
+	"system.alarm-armed.title.away": "Alarm armed: away",
+	"system.alarm-armed.title.night": "Alarm armed: night",
 	"system.alarm-armed.body": "Alarm armed",
 	"system.alarm-disarmed.title": "Disarmed",
 	"system.alarm-disarmed.body": "Alarm disarmed",
 	"system.alarm-disarmed.body.defused": "Alarm disarmed during an alarm",
+	"system.alarm-disarmed.body.autoCleared": "Alarm disarmed automatically after the siren",
 	"system.alarm-triggered.title": "ALARM",
 	"system.alarm-triggered.body": "Alarm triggered",
 	"system.alarm-triggered.body.rule": "Triggered by {{rule}} on {{deviceName}}",
@@ -14949,13 +15125,14 @@ var it_default = {
 	"system.alarm-arming.title.away": "Inserimento Fuori — {{seconds}}s",
 	"system.alarm-arming.title.night": "Inserimento Notte — {{seconds}}s",
 	"system.alarm-arming.body": "Inserimento in corso",
-	"system.alarm-armed.title.home": "Inserito: Casa",
-	"system.alarm-armed.title.away": "Inserito: Fuori",
-	"system.alarm-armed.title.night": "Inserito: Notte",
+	"system.alarm-armed.title.home": "Allarme inserito: Casa",
+	"system.alarm-armed.title.away": "Allarme inserito: Fuori",
+	"system.alarm-armed.title.night": "Allarme inserito: Notte",
 	"system.alarm-armed.body": "Allarme inserito",
 	"system.alarm-disarmed.title": "Disinserito",
 	"system.alarm-disarmed.body": "Allarme disinserito",
 	"system.alarm-disarmed.body.defused": "Allarme disinserito durante un allarme",
+	"system.alarm-disarmed.body.autoCleared": "Allarme disinserito automaticamente dopo la sirena",
 	"system.alarm-triggered.title": "ALLARME",
 	"system.alarm-triggered.body": "Allarme scattato",
 	"system.alarm-triggered.body.rule": "Scattato da {{rule}} su {{deviceName}}",
@@ -23958,7 +24135,7 @@ var NcDispatcher = class {
 				...systemCount,
 				...systemEvent?.body !== void 0 ? { frozen: systemEvent.body } : {}
 			});
-			return composeRuleAiBody({
+			return ncSentenceCaseBody(composeRuleAiBody({
 				aiText,
 				body: entry.payload.synthetic === true ? this.renderText({
 					key: "test.prefix",
@@ -23966,7 +24143,7 @@ var NcDispatcher = class {
 					frozen: rendered
 				}) : rendered,
 				templateNamesAi
-			});
+			}));
 		};
 		const body = renderBody("");
 		const resolved = await this.resolveAttachments(entry);
@@ -25146,15 +25323,18 @@ function buildTemplateVars(texts, entry, deviceName, zoneLabels, timeZone) {
 	const systemEvent = subject.systemEvent;
 	const detection = systemEvent?.alarmSource?.className !== void 0 ? systemEvent.alarmSource : void 0;
 	const group = readOutboxGroup(entry.payload.group);
+	const locale = texts.language;
+	const cameraName = deviceName.toLocaleLowerCase(locale);
+	const zonesLower = zoneLabels.map((z) => z.toLocaleLowerCase(locale));
 	return {
-		camera: deviceName,
+		camera: cameraName,
 		class: detection?.className ?? (systemEvent !== void 0 ? "" : subject.className),
 		classLabel: (() => {
 			const wire = detection?.className ?? (systemEvent !== void 0 ? "" : subject.className);
-			return wire.length === 0 ? "" : require_clip_model_registry.eventKindLabel(wire, texts.language);
+			return wire.length === 0 ? "" : require_clip_model_registry.eventKindLabel(wire, locale).toLocaleLowerCase(locale);
 		})(),
 		label: detection?.label ?? subject.label ?? "",
-		zones: zoneLabels.join(", "),
+		zones: zonesLower.join(", "),
 		subject: detection?.className !== void 0 ? ncSubjectText(texts, {
 			className: detection.className,
 			...detection.label !== void 0 ? { label: detection.label } : {}
@@ -25164,9 +25344,9 @@ function buildTemplateVars(texts, entry, deviceName, zoneLabels, timeZone) {
 			...subject.labelKind !== void 0 ? { labelKind: subject.labelKind } : {}
 		}),
 		detectionSummary: group !== void 0 && group.members.length > 1 ? ncDetectionSummary(texts, classCounts(group.members)) : "",
-		inZones: ncInZonesText(texts, zoneLabels),
-		scope: occupancy !== void 0 ? occupancy.zone ?? deviceName : "",
-		zone: occupancy?.zone ?? zoneLabels[0] ?? "",
+		inZones: ncInZonesText(texts, zonesLower),
+		scope: occupancy !== void 0 ? occupancy.zone?.toLocaleLowerCase(locale) ?? cameraName : "",
+		zone: (occupancy?.zone ?? zoneLabels[0] ?? "").toLocaleLowerCase(locale),
 		confidence: percentOf(detection?.confidence ?? subject.confidence),
 		time: ncClockText(texts.language, subject.timestamp, timeZone),
 		sounds: subject.audio?.labels.join(", ") ?? "",
@@ -29664,7 +29844,7 @@ function buildRuleAiSystemPrompt(shape, language, maxWords, grouped = false) {
 	].join("");
 }
 /** `HH:MM` in the host timezone. */
-function clockOf$5(atMs) {
+function clockOf$6(atMs) {
 	const d = new Date(atMs);
 	return `${String(d.getHours()).padStart(2, "0")}:${String(d.getMinutes()).padStart(2, "0")}`;
 }
@@ -29702,7 +29882,7 @@ function buildRuleAiPrompt(input) {
 	if (shape === "detection-track") {
 		lines.push(`Camera: ${camera}.${located} Subject: ${subject}. The stills, in order:`);
 		for (const [i, frame] of input.frames.entries()) {
-			const when = frame.atMs !== void 0 ? ` · ${clockOf$5(frame.atMs)}` : "";
+			const when = frame.atMs !== void 0 ? ` · ${clockOf$6(frame.atMs)}` : "";
 			lines.push(`${String(i + 1)}.${when}`);
 		}
 		return lines.join("\n");
@@ -31473,7 +31653,7 @@ var DEFAULT_PROMPT_EN = "What happened during this period? Summarise it for a ho
 */
 var SummaryAnswerSchema = require_clip_model_registry.object({ summary: require_clip_model_registry.string() });
 /** `HH:MM` in the host timezone — the two numbers a frame label needs. */
-function clockOf$4(atMs) {
+function clockOf$5(atMs) {
 	const d = new Date(atMs);
 	return `${String(d.getHours()).padStart(2, "0")}:${String(d.getMinutes()).padStart(2, "0")}`;
 }
@@ -31496,7 +31676,7 @@ function buildSummaryAiPrompt(input, frames) {
 	const roster = frames.map((f, i) => {
 		const location = plainLabel(f.location ?? "");
 		const where = location.length > 0 ? ` (${location})` : "";
-		return `${String(i + 1)}. ${plainLabel(f.deviceName)}${where} · ${clockOf$4(f.atMs)} · ${plainVocabulary(f.className) || "subject"}`;
+		return `${String(i + 1)}. ${plainLabel(f.deviceName)}${where} · ${clockOf$5(f.atMs)} · ${plainVocabulary(f.className) || "subject"}`;
 	}).join("\n");
 	const described = /* @__PURE__ */ new Map();
 	for (const f of frames) {
@@ -32099,7 +32279,7 @@ var NO_DETECTIONS$1 = {
 *  has to check is a key somebody can get wrong. */
 var BODY_SEPARATOR$1 = " · ";
 /** `HH:MM` in the host timezone. */
-function clockOf$3(atMs) {
+function clockOf$4(atMs) {
 	const d = new Date(atMs);
 	return `${String(d.getHours()).padStart(2, "0")}:${String(d.getMinutes()).padStart(2, "0")}`;
 }
@@ -32113,8 +32293,8 @@ function clockOf$3(atMs) {
 function summaryTemplateVars(input) {
 	return {
 		rule: input.ruleName,
-		from: clockOf$3(input.window.startMs),
-		to: clockOf$3(input.window.endMs),
+		from: clockOf$4(input.window.startMs),
+		to: clockOf$4(input.window.endMs),
 		time: ncClockText(input.texts.language, input.generatedAt),
 		events: String(input.tileCount),
 		cameras: String(input.cameraCount),
@@ -32209,11 +32389,11 @@ function summaryRecordId(ruleId, windowEndMs) {
 /** The caption burned onto the mosaic's title band, with the same `{{var}}`
 *  vocabulary the title and body use. `''` is a real answer ("no caption"). */
 function summaryCaptionText(input) {
-	if (input.captionText === void 0) return `${input.ruleName} — ${clockOf$3(input.window.startMs)}→${clockOf$3(input.window.endMs)}`;
+	if (input.captionText === void 0) return `${input.ruleName} — ${clockOf$4(input.window.startMs)}→${clockOf$4(input.window.endMs)}`;
 	return renderTemplate(input.captionText, {
 		rule: input.ruleName,
-		from: clockOf$3(input.window.startMs),
-		to: clockOf$3(input.window.endMs)
+		from: clockOf$4(input.window.startMs),
+		to: clockOf$4(input.window.endMs)
 	}) ?? "";
 }
 /**
@@ -33145,7 +33325,7 @@ var NcSummaryProducer = class {
 				purpose: "summary",
 				tiles: tiles.map(({ candidate, jpeg }) => ({
 					jpeg,
-					...plan.tileLabels ? { label: `${names.get(candidate.deviceId) ?? candidate.deviceId} · ${clockOf$2(candidate.firstSeen)} · ${candidate.className}` } : {},
+					...plan.tileLabels ? { label: `${names.get(candidate.deviceId) ?? candidate.deviceId} · ${clockOf$3(candidate.firstSeen)} · ${candidate.className}` } : {},
 					deviceId: candidate.deviceId,
 					sourceId: candidate.trackId
 				})),
@@ -33368,7 +33548,7 @@ var NcSummaryProducer = class {
 	}
 };
 /** `HH:MM` in the host timezone — the two numbers a tile label needs. */
-function clockOf$2(atMs) {
+function clockOf$3(atMs) {
 	const d = new Date(atMs);
 	return `${String(d.getHours()).padStart(2, "0")}:${String(d.getMinutes()).padStart(2, "0")}`;
 }
@@ -33868,6 +34048,99 @@ var NcCalendarEventsStore = class {
 	}
 };
 //#endregion
+//#region src/notification-center/calendar-events/calendar-events-body.ts
+/** Visual weight on the tomorrow header — Telegram/Zentik plain text. */
+var CALENDAR_EVENTS_TOMORROW_MARK = "★";
+/** Separates the tomorrow block from the rest of the horizon. */
+var CALENDAR_EVENTS_DAY_DELIMITER = "────────";
+var MAX_EVENT_LINES = 40;
+function pad2(n) {
+	return String(n).padStart(2, "0");
+}
+/** Local calendar day key `YYYY-MM-DD`. */
+function localDayKey(atMs) {
+	const d = new Date(atMs);
+	return `${String(d.getFullYear())}-${pad2(d.getMonth() + 1)}-${pad2(d.getDate())}`;
+}
+function startOfLocalDay(atMs) {
+	const d = new Date(atMs);
+	return new Date(d.getFullYear(), d.getMonth(), d.getDate()).getTime();
+}
+function addLocalDays(atMs, days) {
+	const d = new Date(atMs);
+	d.setDate(d.getDate() + days);
+	return d.getTime();
+}
+function dayHeadingFor(dayStartMs, todayKey, tomorrowKey) {
+	const key = localDayKey(dayStartMs);
+	const label = new Date(dayStartMs).toLocaleDateString(void 0, {
+		weekday: "short",
+		month: "short",
+		day: "numeric"
+	});
+	if (key === todayKey) return `Today — ${label}`;
+	if (key === tomorrowKey) return `${CALENDAR_EVENTS_TOMORROW_MARK} Tomorrow — ${label}`;
+	return label;
+}
+/** `HH:MM` local, or `YYYY-MM-DD HH:MM` when the end falls on another day. */
+function clockOf$2(atMs) {
+	const d = new Date(atMs);
+	return `${pad2(d.getHours())}:${pad2(d.getMinutes())}`;
+}
+function formatEventLine(event) {
+	const when = event.allDay === true ? "All day" : `${clockOf$2(event.startMs)}–${clockOf$2(event.endMs)}`;
+	const where = event.location !== void 0 && event.location.length > 0 ? ` @ ${event.location}` : "";
+	return `• ${when} ${event.title}${where}`;
+}
+function groupByLocalDay(events) {
+	const map = /* @__PURE__ */ new Map();
+	for (const ev of events) {
+		const dayKey = localDayKey(ev.startMs);
+		const existing = map.get(dayKey);
+		if (existing !== void 0) {
+			existing.events.push(ev);
+			continue;
+		}
+		map.set(dayKey, {
+			dayKey,
+			dayStartMs: startOfLocalDay(ev.startMs),
+			events: [ev]
+		});
+	}
+	return [...map.values()].toSorted((a, b) => a.dayStartMs - b.dayStartMs);
+}
+/**
+* Build the digest body.
+*
+* @param nowMs — fire time; tomorrow is the local calendar day after this.
+*/
+function formatCalendarEventsBody(events, nowMs, horizonDays) {
+	if (events.length === 0) return `No events in the next ${String(horizonDays)} day(s).`;
+	const todayKey = localDayKey(nowMs);
+	const tomorrowKey = localDayKey(addLocalDays(startOfLocalDay(nowMs), 1));
+	const buckets = groupByLocalDay(events);
+	const today = buckets.filter((b) => b.dayKey === todayKey);
+	const tomorrow = buckets.filter((b) => b.dayKey === tomorrowKey);
+	const later = buckets.filter((b) => b.dayKey !== todayKey && b.dayKey !== tomorrowKey);
+	const lead = [...today, ...tomorrow];
+	const lines = [];
+	let emitted = 0;
+	const pushBucket = (bucket) => {
+		if (emitted >= MAX_EVENT_LINES) return;
+		lines.push(dayHeadingFor(bucket.dayStartMs, todayKey, tomorrowKey));
+		for (const ev of bucket.events) {
+			if (emitted >= MAX_EVENT_LINES) break;
+			lines.push(formatEventLine(ev));
+			emitted += 1;
+		}
+	};
+	for (const bucket of lead) pushBucket(bucket);
+	if (lead.length > 0 && later.length > 0) lines.push(CALENDAR_EVENTS_DAY_DELIMITER);
+	for (const bucket of later) pushBucket(bucket);
+	if (events.length > MAX_EVENT_LINES) lines.push(`…and ${String(events.length - MAX_EVENT_LINES)} more`);
+	return lines.join("\n");
+}
+//#endregion
 //#region src/notification-center/calendar-events/calendar-events-delivery.ts
 function calendarEventsRecordId(ruleId, windowEndMs) {
 	return `calendar-events:${ruleId}:${windowEndMs}`;
@@ -33877,16 +34150,8 @@ function clockOf$1(atMs) {
 	const d = new Date(atMs);
 	return `${`${String(d.getFullYear())}-${String(d.getMonth() + 1).padStart(2, "0")}-${String(d.getDate()).padStart(2, "0")}`} ${`${String(d.getHours()).padStart(2, "0")}:${String(d.getMinutes()).padStart(2, "0")}`}`;
 }
-function formatEventLine(event) {
-	const when = event.allDay ? clockOf$1(event.startMs).slice(0, 10) : `${clockOf$1(event.startMs)}–${clockOf$1(event.endMs)}`;
-	const where = event.location !== void 0 && event.location.length > 0 ? ` @ ${event.location}` : "";
-	return `• ${when} ${event.title}${where}`;
-}
 function derivedBody$1(input) {
-	if (input.events.length === 0) return `No events in the next ${String(input.horizonDays)} day(s).`;
-	const lines = input.events.slice(0, 40).map(formatEventLine);
-	const extra = input.events.length > 40 ? `\n…and ${String(input.events.length - 40)} more` : "";
-	return lines.join("\n") + extra;
+	return formatCalendarEventsBody(input.events, input.eventWindow.startMs, input.horizonDays);
 }
 function templateVars(input) {
 	return {
@@ -39332,19 +39597,21 @@ var NotificationCenter = class {
 	}
 	/**
 	* Start photographing every camera that links `sensorId`, and return the
-	* owners the sensor-level evaluation names — or `undefined` when there is no
-	* set (≤1 linked camera: today's marker is the picture), nothing to show
-	* (every linked camera muted), the event will be dropped as muted (the
-	* SENSOR is muted, or there were row cameras and every one is muted — see
-	* the evaluation's mute gate), or no enabled device-event rule that could
-	* fire on this sensor KIND wants a picture (the gate is the RULE's media
-	* policy, scope and kind conditions, read from the in-memory mirror — D49,
-	* as `audioStillOwner`; an occupancy rule, which rides the same delivery,
-	* never fires on a sensor). Coarse on purpose, in one direction only: a
-	* capture for a rule whose other conditions then fail is one wasted
-	* snapshot, a missing capture is a notification without its picture. The
-	* kind check is what keeps a chatty multi-linked motion sensor from
-	* composing a mosaic on every edge for a doorbell rule.
+	* owners the sensor-level evaluation names — or `undefined` when there is
+	* nothing to photograph (`cameraIds` empty), nothing to show (every linked
+	* camera muted), the event will be dropped as muted (the SENSOR is muted,
+	* or there were row cameras and every one is muted — see the evaluation's
+	* mute gate), or no enabled device-event rule that could fire on this
+	* sensor KIND wants a picture (the gate is the RULE's media policy, scope
+	* and kind conditions, read from the in-memory mirror — D49, as
+	* `audioStillOwner`; an occupancy rule, which rides the same delivery,
+	* never fires on a sensor). One linked camera is enough: link alone owns
+	* notification media; tracked rows are a separate timeline question. Coarse
+	* on purpose, in one direction only: a capture for a rule whose other
+	* conditions then fail is one wasted snapshot, a missing capture is a
+	* notification without its picture. The kind check is what keeps a chatty
+	* multi-linked motion sensor from composing a mosaic on every edge for a
+	* doorbell rule.
 	*
 	* A MUTED camera (D62) is never dialled: its tile is left out, said on that
 	* camera (once per window), and the primary is the first linked camera that
@@ -39357,7 +39624,7 @@ var NotificationCenter = class {
 	beginLinkedStills(request) {
 		const { sensorId, sensorKind, cameraIds, atMs, rowCameraIds, sensorRaised } = request;
 		const shelf = this.linkedStills;
-		if (shelf === null || !this.evaluationActive || cameraIds.length < 2) return void 0;
+		if (shelf === null || !this.evaluationActive || cameraIds.length === 0) return void 0;
 		if (this.deviceMutes.isMuted(sensorId)) return void 0;
 		const rowShown = this.unmutedCameras(rowCameraIds);
 		if (rowCameraIds.length > 0 && rowShown.length === 0) return void 0;
@@ -40656,10 +40923,8 @@ var NotificationCenter = class {
 	* On the SAME serialized chain as every other evaluation, because both of
 	* those follow-ups read what the evaluation just enqueued:
 	*
-	*  - EVERY alarm transition is also announced to the panel's own
-	*    `announceTargets`, which no rule addresses (D630) — but only where a
-	*    rule has not already delivered it, or a target that is both would get
-	*    the same sentence twice;
+	*  - Panel `announceTargets` are NOT addressed (retired 2026-10-03): only
+	*    alarm-family rules deliver. The announce enqueue is a no-op.
 	*  - a TRIGGERED with an attribution supersedes the triggering rule's own
 	*    still-pending rows, for exactly the targets the alarm reached. That is
 	*    the combined notification: one row carrying the alarm's words and that
@@ -40692,11 +40957,11 @@ var NotificationCenter = class {
 		});
 	}
 	/**
-	* The sentence an alarm transition is said with, and the targets it goes to
-	* — for EVERY alarm kind, always the panel's `announceTargets` (D630: the
-	* `announceArm` switch is gone; rules may add more recipients, never fewer).
-	*
-	* `text` is a composed body only where the words depend on the rule set:
+	* The composed body for an alarm transition (when the words depend on the
+	* rule set). Delivery targets are ALWAYS empty here: the panel no longer
+	* fans out to `announceTargets` — an alarm-family rule is the only notifier
+	* (operator ruling 2026-10-03). `announceTargets` remains on the settings
+	* blob for schema compatibility and is ignored at send time.
 	*
 	*  - ARM and ARMING compose from the SAME coverage — "what does this mode
 	*    actually watch" — because they are the same answer given thirty seconds
@@ -40707,14 +40972,9 @@ var NotificationCenter = class {
 	* Every other kind is `null`: the intake picks its catalog body and params.
 	*/
 	alarmAnnouncement(panel, transition) {
-		const targetIds = panel.settings().announceTargets;
-		if (targetIds.length === 0) this.logger.info("alarm transition has no announcement target", {
-			tags: { deviceId: panel.deviceId },
-			meta: { kind: transition.kind }
-		});
 		return {
 			text: this.alarmAnnouncementText(panel, transition),
-			targetIds
+			targetIds: []
 		};
 	}
 	/** The composed body of {@link alarmAnnouncement}, or null for a catalog body. */
@@ -41721,14 +41981,19 @@ var NotificationCenter = class {
 	}
 	sequenceActionsOf = (sequenceId) => this.sequences.get(sequenceId)?.actions;
 	/**
-	* Run this rule's onTrigger / onTriggerOff bindings for this match.
+	* Run this rule's onTrigger / onTriggerOff bindings for this match, and —
+	* when the rule is gated on `armed_*` — auto-trigger the CamStack
+	* alarm-panel (never sirens).
 	*
 	* Called BEFORE the cooldown gate — see the call site for why. Everything
 	* here is fire-and-forget and nothing may throw into the evaluation.
 	*/
 	runRuleActions(rule, subject, kind, controls) {
-		if (this.actionRunner === null || controls.runActions === false) return;
-		const bindings = this.isTriggerOffSubject(subject) ? rule.actions?.onTriggerOff : rule.actions?.onTrigger;
+		if (controls.runActions === false) return;
+		const triggerOff = this.isTriggerOffSubject(subject);
+		if (!triggerOff) this.autoTriggerAlarmPanel(rule, subject, kind);
+		if (this.actionRunner === null) return;
+		const bindings = triggerOff ? rule.actions?.onTriggerOff : rule.actions?.onTrigger;
 		if (bindings === void 0 || bindings.length === 0) return;
 		this.actionRunner.runBindings({
 			ruleId: rule.id,
@@ -41740,6 +42005,41 @@ var NotificationCenter = class {
 		});
 	}
 	/**
+	* A rule gated on `armed_*` fires the CamStack panel on match — no
+	* `onTrigger` sequence required. Sirens are never actuated here.
+	*/
+	autoTriggerAlarmPanel(rule, subject, kind) {
+		if (!require_clip_model_registry.ruleAutoTriggersAlarm(rule)) return;
+		const panel = this.alarmPanel;
+		if (panel === null) {
+			this.logger.warn("alarm rule matched but no alarm panel is wired — panel not triggered", {
+				tags: { deviceId: subject.deviceId },
+				meta: {
+					ruleId: rule.id,
+					rule: rule.name
+				}
+			});
+			return;
+		}
+		this.actuateWithAttribution({
+			deviceId: panel.deviceId,
+			cap: ALARM_PANEL_CAP,
+			method: "trigger",
+			args: {},
+			origin: fireRefFor(rule, subject, kind)
+		}).catch((err) => {
+			this.logger.warn("alarm panel auto-trigger failed", {
+				tags: { deviceId: subject.deviceId },
+				meta: {
+					ruleId: rule.id,
+					rule: rule.name,
+					panelId: panel.deviceId,
+					error: err instanceof Error ? err.message : String(err)
+				}
+			});
+		});
+	}
+	/**
 	* The muted device that drops this subject, or `undefined` when none does.
 	* A per-camera subject: its camera. A linked set: the sensor; else, when
 	* the change took rows and every row camera is muted, the sensor too — the
@@ -104137,8 +104437,22 @@ var NO_PUBLICATION = {
 	url: null,
 	artifactId: null
 };
-function isCapRecord(value) {
-	return typeof value === "object" && value !== null;
+/**
+* A tRPC-shaped router or procedure reached by DYNAMIC name off `ctx.api`.
+*
+* A rule names its cap and method as strings, so the generated client cannot be
+* indexed statically. The walk down `api → router → procedure → mutate|query`
+* is therefore guarded hop by hop rather than asserted: every hop that is not
+* what it must be raises the named error the rule author needs to see.
+*
+* Forked-addon `ctx.api` namespaces are tRPC v11 Proxies over a noop function
+* (`typeof === 'function'`). Treating only plain objects as routers made every
+* sequence step fail with `no router for capability "alarm-panel"` while the
+* same method answered fine over HTTP — the panel never left `armed_*`, so
+* HomeKit stayed quiet.
+*/
+function isCapNode(value) {
+	return typeof value === "object" && value !== null || typeof value === "function";
 }
 function isCapCall(value) {
 	return typeof value === "function";
@@ -107257,10 +107571,12 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 			},
 			actuate: async ({ deviceId, cap, method, args }) => {
 				const router = Reflect.get(api, require_clip_model_registry.kebabToCamel(cap));
-				if (!isCapRecord(router)) throw new Error(`rule action: no router for capability "${cap}"`);
-				const proc = router[method];
-				const fn = isCapRecord(proc) ? proc["mutate"] ?? proc["query"] : void 0;
-				if (!isCapCall(fn)) throw new Error(`rule action: "${cap}.${method}" is not a callable cap method`);
+				if (!isCapNode(router)) throw new Error(`rule action: no router for capability "${cap}"`);
+				const proc = Reflect.get(router, method);
+				const mutate = isCapNode(proc) ? Reflect.get(proc, "mutate") : void 0;
+				const query = isCapNode(proc) ? Reflect.get(proc, "query") : void 0;
+				const fn = isCapCall(mutate) ? mutate : isCapCall(query) ? query : void 0;
+				if (fn === void 0) throw new Error(`rule action: "${cap}.${method}" is not a callable cap method`);
 				await fn({
 					deviceId,
 					...args
@@ -113513,7 +113829,7 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 			});
 			return NO_SENSOR_NOTIFICATION_CAMERAS;
 		});
-		const linkedSet = cameras.mediaCameraIds.length > 1;
+		const linkedSet = cameras.mediaCameraIds.length > 1 || cameras.mediaCameraIds.length === 1 && cameras.rowCameraIds.length === 0;
 		const linkedStills = linkedSet ? this.startLinkedStills(data, timestamp, cameras) : void 0;
 		const persisted = [];
 		const unowned = [];
@@ -113693,14 +114009,17 @@ var PipelineAnalyticsAddon = class PipelineAnalyticsAddon extends require_clip_m
 	* which verdict swallowed it.
 	*/
 	flushSensorTransitionDrops() {
-		for (const drop of this.sensorTransitions.takeDropSummary(Date.now())) this.ctx.logger.info("sensor state changes dropped — no transition", {
-			tags: { deviceId: drop.deviceId },
-			meta: {
-				capName: drop.capName,
-				reason: drop.reason,
-				count: drop.count
-			}
-		});
+		for (const drop of this.sensorTransitions.takeDropSummary(Date.now())) {
+			const level = drop.reason === "baseline-seeded-inactive" || drop.reason === "no-change" ? "debug" : "info";
+			this.ctx.logger[level]("sensor state changes dropped — no transition", {
+				tags: { deviceId: drop.deviceId },
+				meta: {
+					capName: drop.capName,
+					reason: drop.reason,
+					count: drop.count
+				}
+			});
+		}
 	}
 	/**
 	* One `info` line per (device, cap) per window for the evaluations refused