@camstack/addon-provider-homematic 1.2.16 → 1.2.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/dist/addon.js +732 -77
  2. package/dist/addon.mjs +732 -77
  3. package/package.json +1 -1
package/dist/addon.mjs CHANGED
@@ -10830,7 +10830,14 @@ var cameraStreamsCapability = {
10830
10830
  low: string().optional()
10831
10831
  }),
10832
10832
  lastChangedAt: number()
10833
- })
10833
+ }),
10834
+ /**
10835
+ * Runtime-state durability: **session** — a restored `slotStatuses: streaming` for a camera that has been dark for two hours is a lie the UI renders as truth.
10836
+ *
10837
+ * See `RuntimeStateDurability`. Enforced by
10838
+ * `scripts/check-runtime-state-durability.ts`.
10839
+ */
10840
+ durability: "session"
10834
10841
  };
10835
10842
  /** Where a block runs. The operator chooses — a block driving a device on an
10836
10843
  * agent is the reason placement is not fixed to the hub. */
@@ -11391,6 +11398,13 @@ var deviceDiscoveryCapability = {
11391
11398
  kind: "poll"
11392
11399
  },
11393
11400
  runtimeState: DeviceDiscoveryStatusSchema.extend({ lastFetchedAt: number().int().nonnegative() }),
11401
+ /**
11402
+ * Runtime-state durability: **session** — 5.7 KB of scan output on the largest device, fully re-derivable by re-scanning.
11403
+ *
11404
+ * See `RuntimeStateDurability`. Enforced by
11405
+ * `scripts/check-runtime-state-durability.ts`.
11406
+ */
11407
+ durability: "session",
11394
11408
  methods: {
11395
11409
  /**
11396
11410
  * Snapshot of the current `discovered` list. Returns the
@@ -13277,11 +13291,33 @@ var NotificationFormatSchema = _enum([
13277
13291
  * Named by INTENT, never by glyph. "check" would tie the vocabulary to one
13278
13292
  * renderer's icon set; "acknowledge" survives an adapter that draws it
13279
13293
  * differently.
13294
+ *
13295
+ * ── A TOKEN IS NOT A WIRE VALUE ─────────────────────────────────────
13296
+ *
13297
+ * These names are for US. **No adapter may forward one verbatim.** Each maps
13298
+ * the whole set onto its own renderer's vocabulary through a
13299
+ * `Record<NotificationActionIcon, string>` — a Record, never a lookup with a
13300
+ * fallback, so adding a member here fails every adapter's build until someone
13301
+ * decides its glyph, which is the only place that decision can be made
13302
+ * honestly.
13303
+ *
13304
+ * This paragraph is the bug. Zentik declared `actionIcons: true` and passed
13305
+ * `disarm` straight through; iOS feeds that string to
13306
+ * `UNNotificationActionIcon(systemImageName:)`, `disarm` is not an SF Symbol,
13307
+ * and every snooze and alarm button arrived BLANK. A pass-through is not a
13308
+ * mapping, and "the field is documented" is not "the value renders".
13309
+ *
13310
+ * Adding a member is TRAIN-BOUND. The enum lives in the published
13311
+ * `@camstack/server` closure and the cap seam validates against the HUB's copy,
13312
+ * so an addon that emits a token the running hub does not know does not lose an
13313
+ * icon — its whole `send` fails Zod validation and the notification never
13314
+ * arrives. Never emit a new token from an addon before the train carrying it.
13280
13315
  */
13281
13316
  var NotificationActionIconSchema = _enum([
13282
13317
  "acknowledge",
13283
13318
  "dismiss",
13284
13319
  "silence",
13320
+ "snooze",
13285
13321
  "view",
13286
13322
  "play",
13287
13323
  "open",
@@ -13289,9 +13325,13 @@ var NotificationActionIconSchema = _enum([
13289
13325
  "lock",
13290
13326
  "unlock",
13291
13327
  "arm",
13328
+ "arm-home",
13329
+ "arm-away",
13330
+ "arm-night",
13292
13331
  "disarm",
13293
13332
  "light",
13294
- "alert"
13333
+ "alert",
13334
+ "camera"
13295
13335
  ]);
13296
13336
  /** A single tap-through action button. */
13297
13337
  var NotificationActionSchema = object({
@@ -13307,7 +13347,23 @@ var NotificationActionSchema = object({
13307
13347
  * else — see `notification-center/action-token.ts` for what that does and
13308
13348
  * does not buy.
13309
13349
  */
13310
- destructive: boolean().optional()
13350
+ destructive: boolean().optional(),
13351
+ /**
13352
+ * How the tap should REACH the url.
13353
+ *
13354
+ * `navigate` (absent, and every button authored before this field) opens it:
13355
+ * the phone leaves the notification and shows whatever the callback returns.
13356
+ * That is right for a button whose answer the operator wants to read.
13357
+ *
13358
+ * `background` fires it as a POST and stays put. It exists for the buttons
13359
+ * whose whole point is not to interrupt — "silence this for 30 minutes" is
13360
+ * an answer to the notification, and being thrown into a browser tab to
13361
+ * confirm it costs more attention than the notification did. A backend that
13362
+ * cannot do a background call renders it as an ordinary link (the adapters
13363
+ * fall back rather than dropping the button), so this is a preference, never
13364
+ * a requirement.
13365
+ */
13366
+ mode: _enum(["navigate", "background"]).optional()
13311
13367
  });
13312
13368
  /**
13313
13369
  * The canonical notification. `body` is the only hard field (Apprise model).
@@ -13475,6 +13531,24 @@ method(object({}), array(TargetKindSchema)), method(object({}), array(TargetSche
13475
13531
  targetId: string(),
13476
13532
  enabled: boolean()
13477
13533
  }), _void(), { kind: "mutation" });
13534
+ new Set([
13535
+ {
13536
+ id: "person",
13537
+ name: "Person"
13538
+ },
13539
+ {
13540
+ id: "vehicle",
13541
+ name: "Vehicle"
13542
+ },
13543
+ {
13544
+ id: "animal",
13545
+ name: "Animal"
13546
+ },
13547
+ {
13548
+ id: "package",
13549
+ name: "Package"
13550
+ }
13551
+ ].map((l) => l.id));
13478
13552
  var COCO_TO_MACRO = {
13479
13553
  mapping: {
13480
13554
  person: "person",
@@ -14159,7 +14233,17 @@ var alarmPanelCapability = {
14159
14233
  * full slice; renders an arm button per `availableModes` entry and
14160
14234
  * a PIN field iff `requiresCode === true`.
14161
14235
  */
14162
- runtimeState: AlarmPanelStatusSchema
14236
+ runtimeState: AlarmPanelStatusSchema,
14237
+ /**
14238
+ * Runtime-state durability: **restored** — armed state is the one thing a panel must not lose across a restart.
14239
+ *
14240
+ * See `RuntimeStateDurability`. Enforced by
14241
+ * `scripts/check-runtime-state-durability.ts`.
14242
+ */
14243
+ durability: "restored",
14244
+ /** Clock fields: written, but excluded from the compare that decides
14245
+ * whether persisting is worth a SQLite commit. */
14246
+ volatileStateFields: ["lastChangedAt"]
14163
14247
  };
14164
14248
  /**
14165
14249
  * Shared geometry vocabulary for on-frame shape caps — privacy-mask,
@@ -14300,6 +14384,8 @@ var NcSystemEventKindSchema = _enum([
14300
14384
  "alarm-triggered",
14301
14385
  "alarm-armed",
14302
14386
  "alarm-disarmed",
14387
+ "alarm-arming",
14388
+ "alarm-arm-refused",
14303
14389
  "camera-online",
14304
14390
  "camera-offline",
14305
14391
  "camera-disabled",
@@ -14336,6 +14422,9 @@ var NcSystemEventConditionSchema = object({
14336
14422
  nodeIds: array(string().min(1)).min(1).optional(),
14337
14423
  packageNames: array(string().min(1)).min(1).optional()
14338
14424
  });
14425
+ /** Hard ceiling on a window (24h). A snooze that could not expire would be an
14426
+ * outage the operator asked for once and forgot. */
14427
+ var NC_SNOOZE_MAX_MINUTES = 1440;
14339
14428
  /** Weekly schedule — OR of windows; absence on the rule = always active. */
14340
14429
  var NcScheduleSchema = object({
14341
14430
  windows: array(object({
@@ -14712,15 +14801,15 @@ var NcConditionsSchema = object({
14712
14801
  * (an `immediate` rule naming an `audio-*` class, one notification per
14713
14802
  * classified sample) stays exactly as it was for rules that already use it.
14714
14803
  *
14715
- * NOT in {@link NC_CONDITION_CATALOG} yet, and that is the sequencing rule
14716
- * rather than an oversight: the viewer mirrors the descriptor enums BY HAND
14717
- * (`camstack/src/data/notification-center.ts`, guarded by
14718
- * `scripts/check-viewer-condition-mirror.ts`) and its rule editor STRIPS the
14804
+ * In {@link NC_CONDITION_CATALOG} since P2, and the ORDER it got there is the
14805
+ * rule rather than an accident: the viewer mirrors the descriptor enums BY
14806
+ * HAND (`camstack/src/data/notification-center.ts`, guarded by
14807
+ * `scripts/check-viewer-condition-mirror.ts`) and its rule editor strips the
14719
14808
  * condition fields it does not know when a rule is saved from the phone.
14720
14809
  * Publishing an editor for a condition the app cannot round-trip is how an
14721
- * operator loses a rule's conditions by opening it — so the descriptor, the
14722
- * admin widget and the viewer mirror land together (P2 + P3), and only then
14723
- * does an audio rule become authorable.
14810
+ * operator loses a rule's conditions by opening it — so the viewer mirror
14811
+ * (P3, shipped) went FIRST, and the descriptor an editor renders from
14812
+ * follows here.
14724
14813
  */
14725
14814
  audio: NcAudioConditionSchema.optional()
14726
14815
  });
@@ -14956,6 +15045,30 @@ var NcRuleInputSchema = object({
14956
15045
  */
14957
15046
  snoozeAllowGlobal: boolean().optional(),
14958
15047
  /**
15048
+ * The snooze durations THIS rule's notification offers as buttons, in
15049
+ * minutes.
15050
+ *
15051
+ * Three states, and all three are distinct — which is exactly why this is
15052
+ * `.optional()` and never `.default()`. A Zod default does not run on the
15053
+ * addon cap path (three production failures in one day), so a schema default
15054
+ * would collapse the first two:
15055
+ *
15056
+ * | value | meaning |
15057
+ * | --- | --- |
15058
+ * | absent | the operator never said ⇒ {@link NC_DEFAULT_SNOOZE_MINUTES} |
15059
+ * | `[]` | **no snooze buttons on this rule** — the explicit override |
15060
+ * | a list | these choices, de-duplicated and sorted, at most four |
15061
+ *
15062
+ * `.max(4)` because the notifier's own action budget is small (ntfy allows
15063
+ * three buttons in total) and a rule that spent it all on snooze choices
15064
+ * would push its own tap-through actions off the notification.
15065
+ *
15066
+ * An empty list is NOT an alarm exemption: a rule the alarm is about, or
15067
+ * that arms the panel, is exempt automatically and cannot be silenced by a
15068
+ * window from anywhere (D133).
15069
+ */
15070
+ snoozeOptions: array(number().int().min(1).max(NC_SNOOZE_MAX_MINUTES)).max(4).optional(),
15071
+ /**
14959
15072
  * Devices this rule ACTUATES — arm the alarm, open a gate, turn on a light.
14960
15073
  *
14961
15074
  * This is what makes the rule set the alarm's trigger set without the alarm
@@ -15055,6 +15168,7 @@ var NcConditionDescriptorSchema = object({
15055
15168
  "device",
15056
15169
  "package",
15057
15170
  "occupancy",
15171
+ "audio",
15058
15172
  "system"
15059
15173
  ]),
15060
15174
  label: string(),
@@ -15073,6 +15187,7 @@ var NcConditionDescriptorSchema = object({
15073
15187
  "crossingSelect",
15074
15188
  "polygonDraw",
15075
15189
  "occupancy",
15190
+ "audio",
15076
15191
  "deviceState",
15077
15192
  "systemEvent"
15078
15193
  ]),
@@ -15224,7 +15339,20 @@ var NcSnoozeInputSchema = object({
15224
15339
  ruleId: string().optional(),
15225
15340
  /** Required when `scope: 'device'`. */
15226
15341
  deviceId: number().int().optional(),
15227
- durationMinutes: number().int().min(1).max(1440),
15342
+ /**
15343
+ * Narrow the window to these subject classes — "the cat, not the person".
15344
+ *
15345
+ * ORTHOGONAL to `scope`, deliberately, and absent means EVERY class: that is
15346
+ * what every window authored before this field meant, so no persisted row
15347
+ * changes meaning and no client has to learn anything to keep working.
15348
+ *
15349
+ * It is what makes the window's real key `(deviceId, classes[])` and lets it
15350
+ * cross rules (D133): the operator points at a camera and a kind of thing,
15351
+ * not at whichever of their four rules happened to produce the notification
15352
+ * they are dismissing.
15353
+ */
15354
+ classes: array(string().min(1)).min(1).optional(),
15355
+ durationMinutes: number().int().min(1).max(NC_SNOOZE_MAX_MINUTES),
15228
15356
  /**
15229
15357
  * Silence this for EVERY recipient, not just the caller. Permission is
15230
15358
  * checked server-side (the rule's `snoozeAllowGlobal`, or admin for the
@@ -15249,6 +15377,10 @@ var NcSnoozeSchema = object({
15249
15377
  scope: NcSnoozeScopeSchema,
15250
15378
  ruleId: string().optional(),
15251
15379
  deviceId: number().int().optional(),
15380
+ /** Subject classes this window covers. ABSENT = every class — see
15381
+ * {@link NcSnoozeInputSchema.shape.classes}. Lives in the JSON blob and has
15382
+ * no SQLite column: nothing queries a window by class. */
15383
+ classes: array(string().min(1)).min(1).optional(),
15252
15384
  startedAt: number(),
15253
15385
  /** Exclusive: at exactly this instant the snooze is over. Expiry is a
15254
15386
  * COMPARISON, not a job — no sweeper can leave the operator silenced. */
@@ -17349,7 +17481,14 @@ var zonesCapability = {
17349
17481
  * handle. Slice shape is `{ zones: Zone[] }` so future extensions
17350
17482
  * (e.g. zone groupings) can sit alongside the polygon list.
17351
17483
  */
17352
- runtimeState: object({ zones: array(ZoneSchema).readonly() })
17484
+ runtimeState: object({ zones: array(ZoneSchema).readonly() }),
17485
+ /**
17486
+ * Runtime-state durability: **restored** — written only on operator mutation, so a camera that never had one has nothing to re-derive from. This is the slice `zone-mirror-hydration.ts` exists to paper over.
17487
+ *
17488
+ * See `RuntimeStateDurability`. Enforced by
17489
+ * `scripts/check-runtime-state-durability.ts`.
17490
+ */
17491
+ durability: "restored"
17353
17492
  };
17354
17493
  /**
17355
17494
  * A bounding box in NORMALIZED [0,1] frame coordinates for `getNativeCrop`. The
@@ -17519,6 +17658,22 @@ var detectionFpsField = {
17519
17658
  default: 10,
17520
17659
  step: 1
17521
17660
  };
17661
+ /**
17662
+ * The occupancy re-check interval. DEFAULT 300 s (2026-08-13 — was 30 s).
17663
+ *
17664
+ * The recheck is now on by default (a parked car is invisible to occupancy
17665
+ * rules until the stationary registry has been rebuilt by motion, which after a
17666
+ * restart may be never on a quiet camera). Each cycle re-subscribes a detection
17667
+ * session — an RTSP re-dial — so the switch is only affordable at a WIDE
17668
+ * interval: 300 s is ~12 re-dials an hour per camera, against 120 at the old
17669
+ * 30 s. A parked car is therefore counted within 5 minutes of a restart.
17670
+ *
17671
+ * Why not wider: `max` is 300 and raising it is TRAIN-BOUND, not addon-bound —
17672
+ * the host validates `attachCamera` against ITS copy of this schema, so a
17673
+ * runner asked for 600 would be rejected by the hub until a `@camstack/server`
17674
+ * carrying the wider bound is installed everywhere. 300 is the widest value
17675
+ * that ships with an addon deploy.
17676
+ */
17522
17677
  var occupancyRecheckSecField = {
17523
17678
  min: 0,
17524
17679
  max: 300,
@@ -17720,15 +17875,21 @@ var RunnerCameraConfigSchema = object({
17720
17875
  */
17721
17876
  onboardMotionDrivesAnalyzer: boolean().default(true),
17722
17877
  /**
17723
- * Master toggle for the occupancy re-check. When `false` (DEFAULT) the runner
17724
- * never arms the periodic recheck timer, regardless of `occupancyRecheckSec` —
17725
- * this is off by default because the recheck re-subscribes a detection session
17726
- * every N seconds while `watching`, a major source of pull-decoder re-dial
17727
- * churn (each cycle creates+tears a session → RTSP re-dial → latency). The
17878
+ * Master toggle for the occupancy re-check. When `false` the runner never arms
17879
+ * the periodic recheck timer, regardless of `occupancyRecheckSec`; the
17728
17880
  * `occupancyRecheckSec` / `occupancyRecheckFrames` sliders only take effect
17729
17881
  * (and only render) when this is enabled.
17730
- */
17731
- occupancyRecheckEnabled: boolean().default(false),
17882
+ *
17883
+ * DEFAULT `true` since 2026-08-13 (was `false`). It was off because the
17884
+ * recheck re-subscribes a detection session every N seconds while `watching`
17885
+ * — each cycle creates+tears a session ⇒ an RTSP re-dial ⇒ latency, a major
17886
+ * pull-decoder churn source. What that bought was a blind spot: a STATIONARY
17887
+ * object is counted only while the stationary registry holds it, and the
17888
+ * registry rebuilds from motion, so after a restart a parked car was invisible
17889
+ * to every occupancy rule until something moved in front of it. The churn is
17890
+ * now paid on the interval instead — see `occupancyRecheckSecField`.
17891
+ */
17892
+ occupancyRecheckEnabled: boolean().default(true),
17732
17893
  occupancyRecheckSec: number().min(occupancyRecheckSecField.min).max(occupancyRecheckSecField.max).default(occupancyRecheckSecField.default),
17733
17894
  occupancyRecheckFrames: number().min(occupancyRecheckFramesField.min).max(occupancyRecheckFramesField.max).default(occupancyRecheckFramesField.default),
17734
17895
  /**
@@ -20148,7 +20309,17 @@ var airQualitySensorCapability = {
20148
20309
  schema: AirQualitySensorStatusSchema,
20149
20310
  kind: "push"
20150
20311
  },
20151
- runtimeState: AirQualitySensorStatusSchema
20312
+ runtimeState: AirQualitySensorStatusSchema,
20313
+ /**
20314
+ * Runtime-state durability: **restored** — as `numeric-sensor`.
20315
+ *
20316
+ * See `RuntimeStateDurability`. Enforced by
20317
+ * `scripts/check-runtime-state-durability.ts`.
20318
+ */
20319
+ durability: "restored",
20320
+ /** Clock fields: written, but excluded from the compare that decides
20321
+ * whether persisting is worth a SQLite commit. */
20322
+ volatileStateFields: ["lastFetchedAt"]
20152
20323
  };
20153
20324
  /**
20154
20325
  * Ambient illuminance reading in lux. Drives Home Assistant `sensor`
@@ -20180,7 +20351,17 @@ var ambientLightSensorCapability = {
20180
20351
  schema: AmbientLightSensorStatusSchema,
20181
20352
  kind: "push"
20182
20353
  },
20183
- runtimeState: AmbientLightSensorStatusSchema
20354
+ runtimeState: AmbientLightSensorStatusSchema,
20355
+ /**
20356
+ * Runtime-state durability: **restored** — as `numeric-sensor`.
20357
+ *
20358
+ * See `RuntimeStateDurability`. Enforced by
20359
+ * `scripts/check-runtime-state-durability.ts`.
20360
+ */
20361
+ durability: "restored",
20362
+ /** Clock fields: written, but excluded from the compare that decides
20363
+ * whether persisting is worth a SQLite commit. */
20364
+ volatileStateFields: ["lastFetchedAt"]
20184
20365
  };
20185
20366
  /**
20186
20367
  * Per-class audio metrics aggregated over a sliding window.
@@ -20298,7 +20479,14 @@ var audioMetricsCapability = {
20298
20479
  }), AudioMetricsHistorySchema)
20299
20480
  },
20300
20481
  /** Reactive runtime-state mirror — live `device.state.audioMetrics.value`. */
20301
- runtimeState: AudioMetricsSnapshotSchema
20482
+ runtimeState: AudioMetricsSnapshotSchema,
20483
+ /**
20484
+ * Runtime-state durability: **session** — 1 Hz per camera at the mirror and ~63 % of the fleet's whole runtime-state write rate. `avgDbfs` is a rolling 60 s mean that genuinely moves every second, so no equality fix reclaims it — and a two-hour-old dB reading rendered as current is worse than no reading.
20485
+ *
20486
+ * See `RuntimeStateDurability`. Enforced by
20487
+ * `scripts/check-runtime-state-durability.ts`.
20488
+ */
20489
+ durability: "session"
20302
20490
  };
20303
20491
  /**
20304
20492
  * Automation-control cap. Models HA `automation.*` entities on
@@ -20360,7 +20548,14 @@ var automationControlCapability = {
20360
20548
  * reads `enabled` (toggle) + `isRunning` (spinner) + `lastError`
20361
20549
  * (badge) directly.
20362
20550
  */
20363
- runtimeState: AutomationControlStatusSchema
20551
+ runtimeState: AutomationControlStatusSchema,
20552
+ /**
20553
+ * Runtime-state durability: **session** — the authority for an automation being enabled is the automation store; a restored `isRunning` would be a lie. D62: one authority per switch.
20554
+ *
20555
+ * See `RuntimeStateDurability`. Enforced by
20556
+ * `scripts/check-runtime-state-durability.ts`.
20557
+ */
20558
+ durability: "session"
20364
20559
  };
20365
20560
  /**
20366
20561
  * Battery status snapshot. Emitted by providers whose device is
@@ -20466,7 +20661,17 @@ onStatusChanged: { data: object({
20466
20661
  * via `device.runtimeState.getCapState('battery')` regardless of
20467
20662
  * the underlying driver.
20468
20663
  */
20469
- runtimeState: BatteryStatusSchema
20664
+ runtimeState: BatteryStatusSchema,
20665
+ /**
20666
+ * Runtime-state durability: **restored** — a sleeping battery camera may not report for hours; the restored percentage is the only thing the UI and the sleep gate have. Zero churn once `lastUpdated` is excluded — 526 writes, 0 value changes, in 25 minutes.
20667
+ *
20668
+ * See `RuntimeStateDurability`. Enforced by
20669
+ * `scripts/check-runtime-state-durability.ts`.
20670
+ */
20671
+ durability: "restored",
20672
+ /** Clock fields: written, but excluded from the compare that decides
20673
+ * whether persisting is worth a SQLite commit. */
20674
+ volatileStateFields: ["lastUpdated"]
20470
20675
  };
20471
20676
  /**
20472
20677
  * Generic boolean sensor — last-resort fallback when no domain-
@@ -20495,7 +20700,17 @@ var binaryCapability = {
20495
20700
  schema: BinaryStatusSchema,
20496
20701
  kind: "push"
20497
20702
  },
20498
- runtimeState: BinaryStatusSchema
20703
+ runtimeState: BinaryStatusSchema,
20704
+ /**
20705
+ * Runtime-state durability: **restored** — transition-driven sensor state; the restored value gives the boot comparison.
20706
+ *
20707
+ * See `RuntimeStateDurability`. Enforced by
20708
+ * `scripts/check-runtime-state-durability.ts`.
20709
+ */
20710
+ durability: "restored",
20711
+ /** Clock fields: written, but excluded from the compare that decides
20712
+ * whether persisting is worth a SQLite commit. */
20713
+ volatileStateFields: ["lastChangedAt"]
20499
20714
  };
20500
20715
  /**
20501
20716
  * Dimmable-light brightness control. Co-exists with `switch` on the
@@ -20548,7 +20763,14 @@ onBrightnessChanged: { data: object({
20548
20763
  * by the kernel. Read via `device.state.brightness.value` so UI
20549
20764
  * sliders surface the current level without polling the provider.
20550
20765
  */
20551
- runtimeState: BrightnessStatusSchema
20766
+ runtimeState: BrightnessStatusSchema,
20767
+ /**
20768
+ * Runtime-state durability: **session** — live lamp state, re-published by the provider on connect.
20769
+ *
20770
+ * See `RuntimeStateDurability`. Enforced by
20771
+ * `scripts/check-runtime-state-durability.ts`.
20772
+ */
20773
+ durability: "session"
20552
20774
  };
20553
20775
  DeviceType.Button, method(object({ deviceId: number().int().nonnegative() }), _void(), {
20554
20776
  kind: "mutation",
@@ -20636,7 +20858,17 @@ var carbonMonoxideCapability = {
20636
20858
  schema: CarbonMonoxideStatusSchema,
20637
20859
  kind: "push"
20638
20860
  },
20639
- runtimeState: CarbonMonoxideStatusSchema
20861
+ runtimeState: CarbonMonoxideStatusSchema,
20862
+ /**
20863
+ * Runtime-state durability: **restored** — as `smoke`.
20864
+ *
20865
+ * See `RuntimeStateDurability`. Enforced by
20866
+ * `scripts/check-runtime-state-durability.ts`.
20867
+ */
20868
+ durability: "restored",
20869
+ /** Clock fields: written, but excluded from the compare that decides
20870
+ * whether persisting is worth a SQLite commit. */
20871
+ volatileStateFields: ["lastChangedAt"]
20640
20872
  };
20641
20873
  /**
20642
20874
  * HVAC / climate control cap. Models the full surface of a HA
@@ -20796,7 +21028,14 @@ var climateControlCapability = {
20796
21028
  * the full slice via `device.state.climate-control.value` and refresh
20797
21029
  * on every push without re-querying the provider.
20798
21030
  */
20799
- runtimeState: ClimateControlStatusSchema
21031
+ runtimeState: ClimateControlStatusSchema,
21032
+ /**
21033
+ * Runtime-state durability: **session** — as `brightness`; `currentTemp` moves continuously and is re-published on connect.
21034
+ *
21035
+ * See `RuntimeStateDurability`. Enforced by
21036
+ * `scripts/check-runtime-state-durability.ts`.
21037
+ */
21038
+ durability: "session"
20800
21039
  };
20801
21040
  /**
20802
21041
  * Color-light cap. Coexists with `switch` (on/off) and `brightness`
@@ -20906,7 +21145,14 @@ onColorChanged: { data: object({
20906
21145
  * kernel. Read via `device.state.color.value` so UI pickers surface
20907
21146
  * the current chromaticity without polling the provider.
20908
21147
  */
20909
- runtimeState: ColorStatusSchema
21148
+ runtimeState: ColorStatusSchema,
21149
+ /**
21150
+ * Runtime-state durability: **session** — as `brightness`.
21151
+ *
21152
+ * See `RuntimeStateDurability`. Enforced by
21153
+ * `scripts/check-runtime-state-durability.ts`.
21154
+ */
21155
+ durability: "session"
20910
21156
  };
20911
21157
  var ConnectionTestOutcomeSchema = discriminatedUnion("outcome", [
20912
21158
  object({
@@ -20964,7 +21210,17 @@ var connectivityCapability = {
20964
21210
  schema: ConnectivityStatusSchema,
20965
21211
  kind: "push"
20966
21212
  },
20967
- runtimeState: ConnectivityStatusSchema
21213
+ runtimeState: ConnectivityStatusSchema,
21214
+ /**
21215
+ * Runtime-state durability: **restored** — same shape and same argument as `device-status`, for links rather than devices.
21216
+ *
21217
+ * See `RuntimeStateDurability`. Enforced by
21218
+ * `scripts/check-runtime-state-durability.ts`.
21219
+ */
21220
+ durability: "restored",
21221
+ /** Clock fields: written, but excluded from the compare that decides
21222
+ * whether persisting is worth a SQLite commit. */
21223
+ volatileStateFields: ["lastChangedAt"]
20968
21224
  };
20969
21225
  /**
20970
21226
  * Generic device-consumables capability — surfaces a device's
@@ -21046,7 +21302,14 @@ reset: method(object({
21046
21302
  }
21047
21303
  }
21048
21304
  },
21049
- runtimeState: ConsumablesStatusSchema.extend({ lastFetchedAt: number() })
21305
+ runtimeState: ConsumablesStatusSchema.extend({ lastFetchedAt: number() }),
21306
+ /**
21307
+ * Runtime-state durability: **session** — the authority is the appliance; the provider re-reads the whole item array on connect.
21308
+ *
21309
+ * See `RuntimeStateDurability`. Enforced by
21310
+ * `scripts/check-runtime-state-durability.ts`.
21311
+ */
21312
+ durability: "session"
21050
21313
  };
21051
21314
  /**
21052
21315
  * Door / window / opening / garage / valve contact sensor. Boolean
@@ -21077,7 +21340,17 @@ var contactCapability = {
21077
21340
  schema: ContactStatusSchema,
21078
21341
  kind: "push"
21079
21342
  },
21080
- runtimeState: ContactStatusSchema
21343
+ runtimeState: ContactStatusSchema,
21344
+ /**
21345
+ * Runtime-state durability: **restored** — a door left open across a restart must still read open.
21346
+ *
21347
+ * See `RuntimeStateDurability`. Enforced by
21348
+ * `scripts/check-runtime-state-durability.ts`.
21349
+ */
21350
+ durability: "restored",
21351
+ /** Clock fields: written, but excluded from the compare that decides
21352
+ * whether persisting is worth a SQLite commit. */
21353
+ volatileStateFields: ["lastChangedAt"]
21081
21354
  };
21082
21355
  /**
21083
21356
  * Status slice — flat object (the framework's `runtimeState` contract
@@ -21183,7 +21456,14 @@ var controlCapability = {
21183
21456
  * dropdown / text field / date picker) read the slice's discriminant
21184
21457
  * and value directly without polling the provider.
21185
21458
  */
21186
- runtimeState: ControlStatusSchema
21459
+ runtimeState: ControlStatusSchema,
21460
+ /**
21461
+ * Runtime-state durability: **session** — a generic control mirrors an external entity that re-publishes on connect; the options array is re-derived with it.
21462
+ *
21463
+ * See `RuntimeStateDurability`. Enforced by
21464
+ * `scripts/check-runtime-state-durability.ts`.
21465
+ */
21466
+ durability: "session"
21187
21467
  };
21188
21468
  var CoverStatusSchema = object({
21189
21469
  /** Lifecycle state of the cover. */
@@ -21244,7 +21524,17 @@ var coverCapability = {
21244
21524
  * Runtime-state slice — mirrored by the kernel. UI controls watch
21245
21525
  * the slice for live position changes during a move.
21246
21526
  */
21247
- runtimeState: CoverStatusSchema
21527
+ runtimeState: CoverStatusSchema,
21528
+ /**
21529
+ * Runtime-state durability: **restored** — position survives a restart on the device; the mirror should agree at boot rather than read blank.
21530
+ *
21531
+ * See `RuntimeStateDurability`. Enforced by
21532
+ * `scripts/check-runtime-state-durability.ts`.
21533
+ */
21534
+ durability: "restored",
21535
+ /** Clock fields: written, but excluded from the compare that decides
21536
+ * whether persisting is worth a SQLite commit. */
21537
+ volatileStateFields: ["lastChangedAt"]
21248
21538
  };
21249
21539
  /**
21250
21540
  * Vendor-neutral day/night (IR-cut) control — the per-camera config cap
@@ -21338,7 +21628,17 @@ var dayNightCapability = {
21338
21628
  schema: DayNightStatusSchema,
21339
21629
  kind: "poll"
21340
21630
  },
21341
- runtimeState: DayNightStatusSchema
21631
+ runtimeState: DayNightStatusSchema,
21632
+ /**
21633
+ * Runtime-state durability: **restored** — operator-set IR-cut behaviour; mutation-driven.
21634
+ *
21635
+ * See `RuntimeStateDurability`. Enforced by
21636
+ * `scripts/check-runtime-state-durability.ts`.
21637
+ */
21638
+ durability: "restored",
21639
+ /** Clock fields: written, but excluded from the compare that decides
21640
+ * whether persisting is worth a SQLite commit. */
21641
+ volatileStateFields: ["lastFetchedAt"]
21342
21642
  };
21343
21643
  /**
21344
21644
  * Generic device-level status snapshot. Auto-registered by `BaseDevice`
@@ -21385,7 +21685,17 @@ onStatusChanged: { data: object({
21385
21685
  schema: DeviceStatusSchema,
21386
21686
  kind: "push"
21387
21687
  },
21388
- runtimeState: DeviceStatusSchema
21688
+ runtimeState: DeviceStatusSchema,
21689
+ /**
21690
+ * Runtime-state durability: **restored** — the previous observation is what makes the first reading after a restart a COMPARISON instead of a phantom transition (D130). 32 real flips across 16 devices in 25 min — the busiest slice in the cold half.
21691
+ *
21692
+ * See `RuntimeStateDurability`. Enforced by
21693
+ * `scripts/check-runtime-state-durability.ts`.
21694
+ */
21695
+ durability: "restored",
21696
+ /** Clock fields: written, but excluded from the compare that decides
21697
+ * whether persisting is worth a SQLite commit. */
21698
+ volatileStateFields: ["lastChangedAt"]
21389
21699
  };
21390
21700
  /**
21391
21701
  * Doorbell button cap. Two kinds of providers coexist behind this cap
@@ -21447,7 +21757,14 @@ onPressed: { data: DoorbellPressEventSchema } },
21447
21757
  * `device.state.doorbell.value`. UIs can show "last ring 5m ago"
21448
21758
  * without subscribing.
21449
21759
  */
21450
- runtimeState: DoorbellStatusSchema
21760
+ runtimeState: DoorbellStatusSchema,
21761
+ /**
21762
+ * Runtime-state durability: **restored** — a monotonic accumulator: the slice IS the record. `lastPressedAt` is content here, not a clock, so it is deliberately NOT volatile.
21763
+ *
21764
+ * See `RuntimeStateDurability`. Enforced by
21765
+ * `scripts/check-runtime-state-durability.ts`.
21766
+ */
21767
+ durability: "restored"
21451
21768
  };
21452
21769
  /**
21453
21770
  * Enum-state sensor — a string value picked from a finite option set.
@@ -21487,7 +21804,17 @@ var enumSensorCapability = {
21487
21804
  schema: EnumSensorStatusSchema,
21488
21805
  kind: "push"
21489
21806
  },
21490
- runtimeState: EnumSensorStatusSchema
21807
+ runtimeState: EnumSensorStatusSchema,
21808
+ /**
21809
+ * Runtime-state durability: **restored** — as `numeric-sensor`; 80 devices.
21810
+ *
21811
+ * See `RuntimeStateDurability`. Enforced by
21812
+ * `scripts/check-runtime-state-durability.ts`.
21813
+ */
21814
+ durability: "restored",
21815
+ /** Clock fields: written, but excluded from the compare that decides
21816
+ * whether persisting is worth a SQLite commit. */
21817
+ volatileStateFields: ["lastFetchedAt"]
21491
21818
  };
21492
21819
  /**
21493
21820
  * Generic stateless event emitter. Installed on a `DeviceType.EventEmitter`
@@ -21523,7 +21850,14 @@ var eventEmitterCapability = {
21523
21850
  schema: EventEmitterStatusSchema,
21524
21851
  kind: "push"
21525
21852
  },
21526
- runtimeState: EventEmitterStatusSchema
21853
+ runtimeState: EventEmitterStatusSchema,
21854
+ /**
21855
+ * Runtime-state durability: **session** — `eventCountSinceStart` names its own scope.
21856
+ *
21857
+ * See `RuntimeStateDurability`. Enforced by
21858
+ * `scripts/check-runtime-state-durability.ts`.
21859
+ */
21860
+ durability: "session"
21527
21861
  };
21528
21862
  var EventItemSchema = object({
21529
21863
  id: string(),
@@ -21804,7 +22138,14 @@ var fanControlCapability = {
21804
22138
  * Runtime-state slice — mirrored by the kernel. UI fan speed
21805
22139
  * sliders read `percentage` for live updates.
21806
22140
  */
21807
- runtimeState: FanControlStatusSchema
22141
+ runtimeState: FanControlStatusSchema,
22142
+ /**
22143
+ * Runtime-state durability: **session** — as `brightness`.
22144
+ *
22145
+ * See `RuntimeStateDurability`. Enforced by
22146
+ * `scripts/check-runtime-state-durability.ts`.
22147
+ */
22148
+ durability: "session"
21808
22149
  };
21809
22150
  /**
21810
22151
  * Per-device feature/identity probe slice. Holds the runtime-resolved
@@ -21880,7 +22221,14 @@ onProbeChanged: { data: object({
21880
22221
  schema: FeatureProbeStatusSchema,
21881
22222
  kind: "push"
21882
22223
  },
21883
- runtimeState: FeatureProbeStatusSchema
22224
+ runtimeState: FeatureProbeStatusSchema,
22225
+ /**
22226
+ * Runtime-state durability: **session** — per-session by definition — `lastProbedAt` means "this worker completed a probe THIS session", which is why the mirror seed already blanks it. Persisting it only creates something to blank.
22227
+ *
22228
+ * See `RuntimeStateDurability`. Enforced by
22229
+ * `scripts/check-runtime-state-durability.ts`.
22230
+ */
22231
+ durability: "session"
21884
22232
  };
21885
22233
  /**
21886
22234
  * Water leak / moisture sensor. Boolean "is liquid currently
@@ -21907,7 +22255,17 @@ var floodCapability = {
21907
22255
  schema: FloodStatusSchema,
21908
22256
  kind: "push"
21909
22257
  },
21910
- runtimeState: FloodStatusSchema
22258
+ runtimeState: FloodStatusSchema,
22259
+ /**
22260
+ * Runtime-state durability: **restored** — as `smoke`.
22261
+ *
22262
+ * See `RuntimeStateDurability`. Enforced by
22263
+ * `scripts/check-runtime-state-durability.ts`.
22264
+ */
22265
+ durability: "restored",
22266
+ /** Clock fields: written, but excluded from the compare that decides
22267
+ * whether persisting is worth a SQLite commit. */
22268
+ volatileStateFields: ["lastChangedAt"]
21911
22269
  };
21912
22270
  /**
21913
22271
  * Combustible-gas (LPG / methane / hydrogen) alarm sensor. Drives
@@ -21930,7 +22288,17 @@ var gasCapability = {
21930
22288
  schema: GasStatusSchema,
21931
22289
  kind: "push"
21932
22290
  },
21933
- runtimeState: GasStatusSchema
22291
+ runtimeState: GasStatusSchema,
22292
+ /**
22293
+ * Runtime-state durability: **restored** — as `smoke`.
22294
+ *
22295
+ * See `RuntimeStateDurability`. Enforced by
22296
+ * `scripts/check-runtime-state-durability.ts`.
22297
+ */
22298
+ durability: "restored",
22299
+ /** Clock fields: written, but excluded from the compare that decides
22300
+ * whether persisting is worth a SQLite commit. */
22301
+ volatileStateFields: ["lastChangedAt"]
21934
22302
  };
21935
22303
  /**
21936
22304
  * Humidifier / dehumidifier cap. Models HA `humidifier.*` entities —
@@ -22006,7 +22374,14 @@ var humidifierCapability = {
22006
22374
  * Runtime-state slice — mirrored by the kernel. UI controls watch the
22007
22375
  * slice for live humidity / mode changes.
22008
22376
  */
22009
- runtimeState: HumidifierStatusSchema
22377
+ runtimeState: HumidifierStatusSchema,
22378
+ /**
22379
+ * Runtime-state durability: **session** — as `climate-control`.
22380
+ *
22381
+ * See `RuntimeStateDurability`. Enforced by
22382
+ * `scripts/check-runtime-state-durability.ts`.
22383
+ */
22384
+ durability: "session"
22010
22385
  };
22011
22386
  /**
22012
22387
  * Single-metric humidity reading. Drives Home Assistant `sensor`
@@ -22042,7 +22417,17 @@ var humiditySensorCapability = {
22042
22417
  schema: HumiditySensorStatusSchema,
22043
22418
  kind: "push"
22044
22419
  },
22045
- runtimeState: HumiditySensorStatusSchema
22420
+ runtimeState: HumiditySensorStatusSchema,
22421
+ /**
22422
+ * Runtime-state durability: **restored** — as `numeric-sensor` (67 of 75 writes were the clock alone).
22423
+ *
22424
+ * See `RuntimeStateDurability`. Enforced by
22425
+ * `scripts/check-runtime-state-durability.ts`.
22426
+ */
22427
+ durability: "restored",
22428
+ /** Clock fields: written, but excluded from the compare that decides
22429
+ * whether persisting is worth a SQLite commit. */
22430
+ volatileStateFields: ["lastFetchedAt"]
22046
22431
  };
22047
22432
  /**
22048
22433
  * Image display cap. Models a single still image exposed by an integration —
@@ -22080,7 +22465,14 @@ var imageCapability = {
22080
22465
  * Runtime-state slice — mirrored by the kernel. The UI reads `url`
22081
22466
  * directly and renders the still image.
22082
22467
  */
22083
- runtimeState: ImageStatusSchema
22468
+ runtimeState: ImageStatusSchema,
22469
+ /**
22470
+ * Runtime-state durability: **session** — a snapshot URL is a session-scoped handle; a restored one points at nothing.
22471
+ *
22472
+ * See `RuntimeStateDurability`. Enforced by
22473
+ * `scripts/check-runtime-state-durability.ts`.
22474
+ */
22475
+ durability: "session"
22084
22476
  };
22085
22477
  /**
22086
22478
  * Vendor-neutral image / picture-adjustment cap — the per-camera config
@@ -22229,7 +22621,17 @@ var imageSettingsCapability = {
22229
22621
  schema: ImageSettingsStatusSchema,
22230
22622
  kind: "poll"
22231
22623
  },
22232
- runtimeState: ImageSettingsStatusSchema
22624
+ runtimeState: ImageSettingsStatusSchema,
22625
+ /**
22626
+ * Runtime-state durability: **restored** — operator-set camera imaging; mutation-driven.
22627
+ *
22628
+ * See `RuntimeStateDurability`. Enforced by
22629
+ * `scripts/check-runtime-state-durability.ts`.
22630
+ */
22631
+ durability: "restored",
22632
+ /** Clock fields: written, but excluded from the compare that decides
22633
+ * whether persisting is worth a SQLite commit. */
22634
+ volatileStateFields: ["lastFetchedAt"]
22233
22635
  };
22234
22636
  /**
22235
22637
  * integrations — system-scoped singleton capability for integration
@@ -22569,7 +22971,14 @@ var lawnMowerControlCapability = {
22569
22971
  * Runtime-state slice — mirrored by the kernel. UI controls watch the
22570
22972
  * slice for live activity + battery changes.
22571
22973
  */
22572
- runtimeState: LawnMowerControlStatusSchema
22974
+ runtimeState: LawnMowerControlStatusSchema,
22975
+ /**
22976
+ * Runtime-state durability: **session** — as `vacuum-control`.
22977
+ *
22978
+ * See `RuntimeStateDurability`. Enforced by
22979
+ * `scripts/check-runtime-state-durability.ts`.
22980
+ */
22981
+ durability: "session"
22573
22982
  };
22574
22983
  /**
22575
22984
  * local-network — hub-only singleton.
@@ -22775,7 +23184,17 @@ var lockControlCapability = {
22775
23184
  * read `state` and disable themselves during `locking`/`unlocking`
22776
23185
  * transitions.
22777
23186
  */
22778
- runtimeState: LockControlStatusSchema
23187
+ runtimeState: LockControlStatusSchema,
23188
+ /**
23189
+ * Runtime-state durability: **restored** — a lock left locked must still read locked.
23190
+ *
23191
+ * See `RuntimeStateDurability`. Enforced by
23192
+ * `scripts/check-runtime-state-durability.ts`.
23193
+ */
23194
+ durability: "restored",
23195
+ /** Clock fields: written, but excluded from the compare that decides
23196
+ * whether persisting is worth a SQLite commit. */
23197
+ volatileStateFields: ["lastChangedAt"]
22779
23198
  };
22780
23199
  /**
22781
23200
  * Media-player cap. Models HA `media_player.*` (Sonos, Chromecast,
@@ -22937,7 +23356,14 @@ var mediaPlayerCapability = {
22937
23356
  * full slice for live now-playing, volume, and progress updates
22938
23357
  * without polling.
22939
23358
  */
22940
- runtimeState: MediaPlayerStatusSchema
23359
+ runtimeState: MediaPlayerStatusSchema,
23360
+ /**
23361
+ * Runtime-state durability: **session** — a restored transport position describes a playback that stopped when the hub did.
23362
+ *
23363
+ * See `RuntimeStateDurability`. Enforced by
23364
+ * `scripts/check-runtime-state-durability.ts`.
23365
+ */
23366
+ durability: "session"
22941
23367
  };
22942
23368
  /**
22943
23369
  * mesh-network — collection cap for mesh-VPN providers.
@@ -23201,7 +23627,14 @@ onMotionChanged: { data: MotionOnMotionChangedDataSchema } },
23201
23627
  * `device.state.motion.value`. Reads never invoke the provider, so
23202
23628
  * UIs and other addons can poll the cached state safely.
23203
23629
  */
23204
- runtimeState: MotionStatusSchema
23630
+ runtimeState: MotionStatusSchema,
23631
+ /**
23632
+ * Runtime-state durability: **session** — self-clearing by construction (`autoClearAfterMs`); a restored `detected: true` is a frozen event, and the next frame re-publishes the real one.
23633
+ *
23634
+ * See `RuntimeStateDurability`. Enforced by
23635
+ * `scripts/check-runtime-state-durability.ts`.
23636
+ */
23637
+ durability: "session"
23205
23638
  };
23206
23639
  /**
23207
23640
  * Motion-trigger toggle for accessory devices.
@@ -23266,7 +23699,14 @@ var motionTriggerCapability = {
23266
23699
  schema: MotionTriggerStatusSchema,
23267
23700
  kind: "command-driven"
23268
23701
  },
23269
- runtimeState: MotionTriggerRuntimeStateSchema
23702
+ runtimeState: MotionTriggerRuntimeStateSchema,
23703
+ /**
23704
+ * Runtime-state durability: **session** — the authority for motion-trigger enablement is the provider's own config; the slice is a mirror of it, re-published on connect.
23705
+ *
23706
+ * See `RuntimeStateDurability`. Enforced by
23707
+ * `scripts/check-runtime-state-durability.ts`.
23708
+ */
23709
+ durability: "session"
23270
23710
  };
23271
23711
  /**
23272
23712
  * Motion-zones share the same MaskShape vocabulary as privacy-mask — the
@@ -23333,7 +23773,17 @@ var motionZonesCapability = {
23333
23773
  schema: MotionZoneStatusSchema,
23334
23774
  kind: "poll"
23335
23775
  },
23336
- runtimeState: MotionZoneStatusSchema
23776
+ runtimeState: MotionZoneStatusSchema,
23777
+ /**
23778
+ * Runtime-state durability: **restored** — the 14 KB polygon list is the single largest slice on the fleet and has not changed since the operator drew it. Highest value per byte in the table.
23779
+ *
23780
+ * See `RuntimeStateDurability`. Enforced by
23781
+ * `scripts/check-runtime-state-durability.ts`.
23782
+ */
23783
+ durability: "restored",
23784
+ /** Clock fields: written, but excluded from the compare that decides
23785
+ * whether persisting is worth a SQLite commit. */
23786
+ volatileStateFields: ["lastFetchedAt"]
23337
23787
  };
23338
23788
  /**
23339
23789
  * On-camera AI object detection cap. Surfaces per-device the classes
@@ -23407,7 +23857,17 @@ var nativeObjectDetectionCapability = {
23407
23857
  schema: NativeObjectDetectionStatusSchema,
23408
23858
  kind: "push"
23409
23859
  },
23410
- runtimeState: NativeObjectDetectionRuntimeStateSchema
23860
+ runtimeState: NativeObjectDetectionRuntimeStateSchema,
23861
+ /**
23862
+ * Runtime-state durability: **restored** — `enabled` is an operator toggle on a camera whose refresh is a no-op and whose staleMs is Infinity. There is no hardware value to re-read — losing it loses the setting.
23863
+ *
23864
+ * See `RuntimeStateDurability`. Enforced by
23865
+ * `scripts/check-runtime-state-durability.ts`.
23866
+ */
23867
+ durability: "restored",
23868
+ /** Clock fields: written, but excluded from the compare that decides
23869
+ * whether persisting is worth a SQLite commit. */
23870
+ volatileStateFields: ["lastFetchedAt"]
23411
23871
  };
23412
23872
  /**
23413
23873
  * network-quality — system-scoped singleton capability tracking RTT,
@@ -23741,7 +24201,14 @@ onSent: { data: object({
23741
24201
  * form reads `supports` to gate optional fields; history pane reads
23742
24202
  * `lastSentAt` / `lastError` / `queueDepth`.
23743
24203
  */
23744
- runtimeState: NotifierStatusSchema
24204
+ runtimeState: NotifierStatusSchema,
24205
+ /**
24206
+ * Runtime-state durability: **session** — live queue depth and last-send state; a restored queue depth describes a queue that no longer exists.
24207
+ *
24208
+ * See `RuntimeStateDurability`. Enforced by
24209
+ * `scripts/check-runtime-state-durability.ts`.
24210
+ */
24211
+ durability: "session"
23745
24212
  };
23746
24213
  /**
23747
24214
  * Generic numeric sensor — last-resort fallback when no typed numeric
@@ -23784,7 +24251,17 @@ var numericSensorCapability = {
23784
24251
  schema: NumericSensorStatusSchema,
23785
24252
  kind: "push"
23786
24253
  },
23787
- runtimeState: NumericSensorStatusSchema
24254
+ runtimeState: NumericSensorStatusSchema,
24255
+ /**
24256
+ * Runtime-state durability: **restored** — polled value, low churn once the clock is excluded (251 of 669 writes were the clock alone); restoring it removes the cold window before the first poll.
24257
+ *
24258
+ * See `RuntimeStateDurability`. Enforced by
24259
+ * `scripts/check-runtime-state-durability.ts`.
24260
+ */
24261
+ durability: "restored",
24262
+ /** Clock fields: written, but excluded from the compare that decides
24263
+ * whether persisting is worth a SQLite commit. */
24264
+ volatileStateFields: ["lastFetchedAt"]
23788
24265
  };
23789
24266
  /**
23790
24267
  * Generic on-screen-display (video overlay) cap. Each camera exposes
@@ -24169,7 +24646,14 @@ var petFeederCapability = {
24169
24646
  * the full slice via `device.state.petFeeder.value` and refresh on
24170
24647
  * every poll without re-querying the provider.
24171
24648
  */
24172
- runtimeState: PetFeederStatusSchema
24649
+ runtimeState: PetFeederStatusSchema,
24650
+ /**
24651
+ * Runtime-state durability: **session** — live appliance state re-published on connect.
24652
+ *
24653
+ * See `RuntimeStateDurability`. Enforced by
24654
+ * `scripts/check-runtime-state-durability.ts`.
24655
+ */
24656
+ durability: "session"
24173
24657
  };
24174
24658
  var VehicleSchema = object({
24175
24659
  id: string(),
@@ -24481,7 +24965,17 @@ var powerMeterCapability = {
24481
24965
  schema: PowerMeterStatusSchema,
24482
24966
  kind: "push"
24483
24967
  },
24484
- runtimeState: PowerMeterStatusSchema
24968
+ runtimeState: PowerMeterStatusSchema,
24969
+ /**
24970
+ * Runtime-state durability: **restored** — as `numeric-sensor`; `kwhTotal` is an accumulator whose restored value is the baseline.
24971
+ *
24972
+ * See `RuntimeStateDurability`. Enforced by
24973
+ * `scripts/check-runtime-state-durability.ts`.
24974
+ */
24975
+ durability: "restored",
24976
+ /** Clock fields: written, but excluded from the compare that decides
24977
+ * whether persisting is worth a SQLite commit. */
24978
+ volatileStateFields: ["lastFetchedAt"]
24485
24979
  };
24486
24980
  /**
24487
24981
  * Presence cap. Models HA `person.*` and `device_tracker.*` entities
@@ -24538,7 +25032,17 @@ var presenceCapability = {
24538
25032
  * the map pin is rendered (use `DeviceFeature.PresenceGps` for the
24539
25033
  * pre-fetch fast-path check).
24540
25034
  */
24541
- runtimeState: PresenceStatusSchema
25035
+ runtimeState: PresenceStatusSchema,
25036
+ /**
25037
+ * Runtime-state durability: **restored** — occupancy-relevant: the restored state is what an occupancy rule compares the first post-restart observation against.
25038
+ *
25039
+ * See `RuntimeStateDurability`. Enforced by
25040
+ * `scripts/check-runtime-state-durability.ts`.
25041
+ */
25042
+ durability: "restored",
25043
+ /** Clock fields: written, but excluded from the compare that decides
25044
+ * whether persisting is worth a SQLite commit. */
25045
+ volatileStateFields: ["lastChangedAt"]
24542
25046
  };
24543
25047
  /**
24544
25048
  * Atmospheric pressure reading in hectopascals. Drives Home Assistant
@@ -24574,7 +25078,17 @@ var pressureSensorCapability = {
24574
25078
  schema: PressureSensorStatusSchema,
24575
25079
  kind: "push"
24576
25080
  },
24577
- runtimeState: PressureSensorStatusSchema
25081
+ runtimeState: PressureSensorStatusSchema,
25082
+ /**
25083
+ * Runtime-state durability: **restored** — as `numeric-sensor`.
25084
+ *
25085
+ * See `RuntimeStateDurability`. Enforced by
25086
+ * `scripts/check-runtime-state-durability.ts`.
25087
+ */
25088
+ durability: "restored",
25089
+ /** Clock fields: written, but excluded from the compare that decides
25090
+ * whether persisting is worth a SQLite commit. */
25091
+ volatileStateFields: ["lastFetchedAt"]
24578
25092
  };
24579
25093
  /**
24580
25094
  * PRIVACY — what the camera deliberately does not capture. Two planes:
@@ -24704,7 +25218,17 @@ var privacyMaskCapability = {
24704
25218
  schema: PrivacyMaskStatusSchema,
24705
25219
  kind: "poll"
24706
25220
  },
24707
- runtimeState: PrivacyMaskStatusSchema
25221
+ runtimeState: PrivacyMaskStatusSchema,
25222
+ /**
25223
+ * Runtime-state durability: **restored** — operator-drawn regions, zero real churn — 22 writes in 25 minutes, every one of them the clock.
25224
+ *
25225
+ * See `RuntimeStateDurability`. Enforced by
25226
+ * `scripts/check-runtime-state-durability.ts`.
25227
+ */
25228
+ durability: "restored",
25229
+ /** Clock fields: written, but excluded from the compare that decides
25230
+ * whether persisting is worth a SQLite commit. */
25231
+ volatileStateFields: ["lastFetchedAt"]
24708
25232
  };
24709
25233
  var PtzPresetSchema = object({
24710
25234
  id: string(),
@@ -24870,7 +25394,14 @@ var ptzAutotrackCapability = {
24870
25394
  * fetch / cache / fallback logic out of the four cap methods —
24871
25395
  * they become trampolines over `runtimeState`.
24872
25396
  */
24873
- runtimeState: PtzAutotrackRuntimeStateSchema
25397
+ runtimeState: PtzAutotrackRuntimeStateSchema,
25398
+ /**
25399
+ * Runtime-state durability: **session** — mirrors the camera's own autotrack config, re-read on connect.
25400
+ *
25401
+ * See `RuntimeStateDurability`. Enforced by
25402
+ * `scripts/check-runtime-state-durability.ts`.
25403
+ */
25404
+ durability: "session"
24874
25405
  };
24875
25406
  DeviceType.Camera, DeviceType.Sensor, DeviceType.Switch, method(object({ deviceId: number().int().nonnegative() }), object({ success: literal(true) }), {
24876
25407
  kind: "mutation",
@@ -25520,7 +26051,14 @@ var sceneMonitorCapability = {
25520
26051
  schema: SceneMonitorStatusSchema,
25521
26052
  kind: "push"
25522
26053
  },
25523
- runtimeState: SceneMonitorStatusSchema
26054
+ runtimeState: SceneMonitorStatusSchema,
26055
+ /**
26056
+ * Runtime-state durability: **session** — re-derived from the current scene on the next evaluation.
26057
+ *
26058
+ * See `RuntimeStateDurability`. Enforced by
26059
+ * `scripts/check-runtime-state-durability.ts`.
26060
+ */
26061
+ durability: "session"
25524
26062
  };
25525
26063
  /**
25526
26064
  * Per-stage gating mode applied to the zones a rule references.
@@ -25664,7 +26202,14 @@ var scriptRunnerCapability = {
25664
26202
  * `isRunning` to render a spinner during execution and surfaces
25665
26203
  * `lastError` / `lastRunSuccess` in the recent-runs panel.
25666
26204
  */
25667
- runtimeState: ScriptRunnerStatusSchema
26205
+ runtimeState: ScriptRunnerStatusSchema,
26206
+ /**
26207
+ * Runtime-state durability: **session** — a restored `isRunning: true` describes a process that died with the previous hub.
26208
+ *
26209
+ * See `RuntimeStateDurability`. Enforced by
26210
+ * `scripts/check-runtime-state-durability.ts`.
26211
+ */
26212
+ durability: "session"
25668
26213
  };
25669
26214
  /**
25670
26215
  * Smoke alarm sensor — boolean "is smoke currently detected" with
@@ -25691,7 +26236,17 @@ var smokeCapability = {
25691
26236
  schema: SmokeStatusSchema,
25692
26237
  kind: "push"
25693
26238
  },
25694
- runtimeState: SmokeStatusSchema
26239
+ runtimeState: SmokeStatusSchema,
26240
+ /**
26241
+ * Runtime-state durability: **restored** — a safety sensor must not read "clear" merely because the hub restarted.
26242
+ *
26243
+ * See `RuntimeStateDurability`. Enforced by
26244
+ * `scripts/check-runtime-state-durability.ts`.
26245
+ */
26246
+ durability: "restored",
26247
+ /** Clock fields: written, but excluded from the compare that decides
26248
+ * whether persisting is worth a SQLite commit. */
26249
+ volatileStateFields: ["lastChangedAt"]
25695
26250
  };
25696
26251
  /**
25697
26252
  * One publishable camera stream as its OWNING PROVIDER describes it — the same
@@ -25864,7 +26419,17 @@ var streamParamsCapability = {
25864
26419
  schema: StreamParamsStatusSchema,
25865
26420
  kind: "poll"
25866
26421
  },
25867
- runtimeState: StreamParamsStatusSchema
26422
+ runtimeState: StreamParamsStatusSchema,
26423
+ /**
26424
+ * Runtime-state durability: **restored** — operator-set encoder profile; mutation-driven.
26425
+ *
26426
+ * See `RuntimeStateDurability`. Enforced by
26427
+ * `scripts/check-runtime-state-durability.ts`.
26428
+ */
26429
+ durability: "restored",
26430
+ /** Clock fields: written, but excluded from the compare that decides
26431
+ * whether persisting is worth a SQLite commit. */
26432
+ volatileStateFields: ["lastFetchedAt"]
25868
26433
  };
25869
26434
  /**
25870
26435
  * Generic on/off switch cap for accessory children (siren, floodlight,
@@ -25910,6 +26475,16 @@ var switchCapability = {
25910
26475
  * not need to re-query the provider after a setState mutation.
25911
26476
  */
25912
26477
  runtimeState: SwitchStatusSchema,
26478
+ /**
26479
+ * Runtime-state durability: **restored** — device state an operator reads as authoritative; 55 devices, transition-driven.
26480
+ *
26481
+ * See `RuntimeStateDurability`. Enforced by
26482
+ * `scripts/check-runtime-state-durability.ts`.
26483
+ */
26484
+ durability: "restored",
26485
+ /** Clock fields: written, but excluded from the compare that decides
26486
+ * whether persisting is worth a SQLite commit. */
26487
+ volatileStateFields: ["lastChangedAt"],
25913
26488
  settings: { bindings: [{
25914
26489
  kind: "scalar",
25915
26490
  statusPath: "on",
@@ -25989,7 +26564,17 @@ var tamperCapability = {
25989
26564
  schema: TamperStatusSchema,
25990
26565
  kind: "push"
25991
26566
  },
25992
- runtimeState: TamperStatusSchema
26567
+ runtimeState: TamperStatusSchema,
26568
+ /**
26569
+ * Runtime-state durability: **restored** — as `smoke`.
26570
+ *
26571
+ * See `RuntimeStateDurability`. Enforced by
26572
+ * `scripts/check-runtime-state-durability.ts`.
26573
+ */
26574
+ durability: "restored",
26575
+ /** Clock fields: written, but excluded from the compare that decides
26576
+ * whether persisting is worth a SQLite commit. */
26577
+ volatileStateFields: ["lastChangedAt"]
25993
26578
  };
25994
26579
  /**
25995
26580
  * Single-metric temperature reading. Drives Home Assistant `sensor`
@@ -26034,7 +26619,17 @@ var temperatureSensorCapability = {
26034
26619
  schema: TemperatureSensorStatusSchema,
26035
26620
  kind: "push"
26036
26621
  },
26037
- runtimeState: TemperatureSensorStatusSchema
26622
+ runtimeState: TemperatureSensorStatusSchema,
26623
+ /**
26624
+ * Runtime-state durability: **restored** — as `numeric-sensor` (69 of 125 writes were the clock alone).
26625
+ *
26626
+ * See `RuntimeStateDurability`. Enforced by
26627
+ * `scripts/check-runtime-state-durability.ts`.
26628
+ */
26629
+ durability: "restored",
26630
+ /** Clock fields: written, but excluded from the compare that decides
26631
+ * whether persisting is worth a SQLite commit. */
26632
+ volatileStateFields: ["lastFetchedAt"]
26038
26633
  };
26039
26634
  /**
26040
26635
  * toast — system-scoped singleton capability that streams toast
@@ -26103,7 +26698,14 @@ var updateCapability = {
26103
26698
  schema: UpdateStatusSchema,
26104
26699
  kind: "poll"
26105
26700
  },
26106
- runtimeState: UpdateStatusSchema
26701
+ runtimeState: UpdateStatusSchema,
26702
+ /**
26703
+ * Runtime-state durability: **session** — a restored `inProgress: true` describes an update that is no longer running; versions are re-probed at boot.
26704
+ *
26705
+ * See `RuntimeStateDurability`. Enforced by
26706
+ * `scripts/check-runtime-state-durability.ts`.
26707
+ */
26708
+ durability: "session"
26107
26709
  };
26108
26710
  var UserSummarySchema = object({
26109
26711
  id: string(),
@@ -26437,7 +27039,14 @@ var vacuumControlCapability = {
26437
27039
  * Runtime-state slice — mirrored by the kernel. UI controls watch the
26438
27040
  * slice for live state + battery + fan-speed changes.
26439
27041
  */
26440
- runtimeState: VacuumControlStatusSchema
27042
+ runtimeState: VacuumControlStatusSchema,
27043
+ /**
27044
+ * Runtime-state durability: **session** — as `media-player` — a restored `state: cleaning` is a robot that is not cleaning.
27045
+ *
27046
+ * See `RuntimeStateDurability`. Enforced by
27047
+ * `scripts/check-runtime-state-durability.ts`.
27048
+ */
27049
+ durability: "session"
26441
27050
  };
26442
27051
  var ValveStatusSchema = object({
26443
27052
  /** Lifecycle state of the valve. */
@@ -26489,7 +27098,14 @@ var valveCapability = {
26489
27098
  * Runtime-state slice — mirrored by the kernel. UI controls watch the
26490
27099
  * slice for live position changes during a move.
26491
27100
  */
26492
- runtimeState: ValveStatusSchema
27101
+ runtimeState: ValveStatusSchema,
27102
+ /**
27103
+ * Runtime-state durability: **session** — as `brightness`.
27104
+ *
27105
+ * See `RuntimeStateDurability`. Enforced by
27106
+ * `scripts/check-runtime-state-durability.ts`.
27107
+ */
27108
+ durability: "session"
26493
27109
  };
26494
27110
  /**
26495
27111
  * Vibration / shake / impact sensor. Drives Home Assistant
@@ -26511,7 +27127,17 @@ var vibrationCapability = {
26511
27127
  schema: VibrationStatusSchema,
26512
27128
  kind: "push"
26513
27129
  },
26514
- runtimeState: VibrationStatusSchema
27130
+ runtimeState: VibrationStatusSchema,
27131
+ /**
27132
+ * Runtime-state durability: **restored** — as `smoke`.
27133
+ *
27134
+ * See `RuntimeStateDurability`. Enforced by
27135
+ * `scripts/check-runtime-state-durability.ts`.
27136
+ */
27137
+ durability: "restored",
27138
+ /** Clock fields: written, but excluded from the compare that decides
27139
+ * whether persisting is worth a SQLite commit. */
27140
+ volatileStateFields: ["lastChangedAt"]
26515
27141
  };
26516
27142
  /**
26517
27143
  * Water heater / boiler cap. Models HA `water_heater.*` entities — a
@@ -26585,7 +27211,14 @@ var waterHeaterCapability = {
26585
27211
  * Runtime-state slice — mirrored by the kernel. UI controls watch the
26586
27212
  * slice for live temperature / mode / away changes.
26587
27213
  */
26588
- runtimeState: WaterHeaterStatusSchema
27214
+ runtimeState: WaterHeaterStatusSchema,
27215
+ /**
27216
+ * Runtime-state durability: **session** — as `climate-control`.
27217
+ *
27218
+ * See `RuntimeStateDurability`. Enforced by
27219
+ * `scripts/check-runtime-state-durability.ts`.
27220
+ */
27221
+ durability: "session"
26589
27222
  };
26590
27223
  /**
26591
27224
  * Weather provider cap. Models HA `weather.*` entities — a read-only
@@ -26644,7 +27277,14 @@ var weatherCapability = {
26644
27277
  * Runtime-state slice — mirrored by the kernel. The UI reads the
26645
27278
  * current conditions directly from the slice on each weather push.
26646
27279
  */
26647
- runtimeState: WeatherStatusSchema
27280
+ runtimeState: WeatherStatusSchema,
27281
+ /**
27282
+ * Runtime-state durability: **session** — a forecast is stale the moment the hub is down; the provider re-fetches on connect.
27283
+ *
27284
+ * See `RuntimeStateDurability`. Enforced by
27285
+ * `scripts/check-runtime-state-durability.ts`.
27286
+ */
27287
+ durability: "session"
26648
27288
  };
26649
27289
  /**
26650
27290
  * Per-zone occupancy aggregation produced by the analytics frame
@@ -26806,7 +27446,14 @@ var zoneAnalyticsCapability = {
26806
27446
  * automatically; the explicit `getCurrentSnapshot` cap method is
26807
27447
  * still useful for one-off polls without a subscription.
26808
27448
  */
26809
- runtimeState: CameraOccupancySnapshotSchema
27449
+ runtimeState: CameraOccupancySnapshotSchema,
27450
+ /**
27451
+ * Runtime-state durability: **session** — per-frame analytics; with `audio-metrics` it is ~90 % of the offered write rate. Re-derived on the next frame.
27452
+ *
27453
+ * See `RuntimeStateDurability`. Enforced by
27454
+ * `scripts/check-runtime-state-durability.ts`.
27455
+ */
27456
+ durability: "session"
26810
27457
  };
26811
27458
  /**
26812
27459
  * Stages a {@link ZoneRule} can apply to. Discriminator on the rules
@@ -26884,7 +27531,14 @@ var zoneRulesCapability = {
26884
27531
  motion: array(ZoneRuleSchema).readonly(),
26885
27532
  detection: array(ZoneRuleSchema).readonly(),
26886
27533
  package: array(ZoneRuleSchema).readonly()
26887
- })
27534
+ }),
27535
+ /**
27536
+ * Runtime-state durability: **restored** — operator intent, mutation-only, same argument as `zones`.
27537
+ *
27538
+ * See `RuntimeStateDurability`. Enforced by
27539
+ * `scripts/check-runtime-state-durability.ts`.
27540
+ */
27541
+ durability: "restored"
26888
27542
  };
26889
27543
  /**
26890
27544
  * Accessory device helpers — shared across drivers.
@@ -33571,6 +34225,7 @@ Object.freeze({
33571
34225
  "network-access": "ingress",
33572
34226
  "smtp-provider": "email"
33573
34227
  });
34228
+ new Map(AUDIO_MACRO_LABELS.flatMap((macro) => macro.icon === void 0 ? [] : [[macro.id, macro.icon]]));
33574
34229
  new Set(["devices", "classes"]);
33575
34230
  /**
33576
34231
  * TimelapseRule — the STANDALONE scheduled timelapse producer's rule model.