@camstack/system 1.2.32 → 1.2.34

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CSs1A90r.js");
+const require_dist = require("../../dist-Bqyu3d1X.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { et as storageProviderCapability, j as filesystemBrowseCapability, ot as BaseAddon } from "../../dist-BL_FHWPP.mjs";
+import { et as storageProviderCapability, j as filesystemBrowseCapability, ot as BaseAddon } from "../../dist-BjUYsgkj.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";
 import { basename, dirname, join, resolve, sep } from "node:path";

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CSs1A90r.js");
+const require_dist = require("../../dist-Bqyu3d1X.js");
 let node_crypto = require("node:crypto");
 let better_sqlite3 = require("better-sqlite3");
 better_sqlite3 = require_chunk.__toESM(better_sqlite3);

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,4 +1,4 @@
-import { Dt as parseJsonUnknown, at as errMsg, c as RUNTIME_DEFAULTS, gt as asJsonObject, ot as BaseAddon, x as dataStoreProviderCapability } from "../../dist-BL_FHWPP.mjs";
+import { Dt as parseJsonUnknown, at as errMsg, c as RUNTIME_DEFAULTS, gt as asJsonObject, ot as BaseAddon, x as dataStoreProviderCapability } from "../../dist-BjUYsgkj.mjs";
 import { randomUUID } from "node:crypto";
 import Database from "better-sqlite3";
 //#region src/builtins/sqlite-storage/filter-compiler.ts

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CSs1A90r.js");
+const require_dist = require("../../dist-Bqyu3d1X.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { $ as storageCapability, Et as parseJsonObject, Z as settingsStoreCapability, d as StorageLocationTypeSchema, ot as BaseAddon } from "../../dist-BL_FHWPP.mjs";
+import { $ as storageCapability, Et as parseJsonObject, Z as settingsStoreCapability, d as StorageLocationTypeSchema, ot as BaseAddon } from "../../dist-BjUYsgkj.mjs";
 import * as path$1 from "node:path";
 import * as fs from "node:fs/promises";
 import { buildStorageLocationRegistry } from "@camstack/system";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CSs1A90r.js");
+const require_dist = require("../../dist-Bqyu3d1X.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { Ct as hydrateSchema, at as errMsg, ot as BaseAddon } from "../../dist-BL_FHWPP.mjs";
+import { Ct as hydrateSchema, at as errMsg, ot as BaseAddon } from "../../dist-BjUYsgkj.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CSs1A90r.js");
+const require_dist = require("../../dist-Bqyu3d1X.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { B as logDestinationCapability, ot as BaseAddon } from "../../dist-BL_FHWPP.mjs";
+import { B as logDestinationCapability, ot as BaseAddon } from "../../dist-BjUYsgkj.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{dist-BL_FHWPP.mjs → dist-BjUYsgkj.mjs}

@@ -5412,7 +5412,24 @@ var NcZoneConditionSchema = z.object({
 * The P1 condition set — a flat AND of groups; absent group = pass;
 * membership lists are OR within the list (spec §2.3).
 */
+/**
+* "This rule applies only while `deviceId` is in one of `states`."
+*
+* The states are the DEVICE's own vocabulary — `AlarmState` for a panel,
+* `on`/`off` for a switch — not a normalised set, because normalising would
+* make the condition lie about devices whose states have no equivalent.
+*
+* An unreadable state does NOT match: see the engine's fail-closed gate. A
+* condition that fired on "I could not read it" would be worse than no gate.
+*/
+var NcDeviceStateConditionSchema = z.object({
+	deviceId: z.number().int(),
+	/** Any of these matches. */
+	states: z.array(z.string().min(1)).min(1)
+});
 var NcConditionsSchema = z.object({
+	/** Gate on ANOTHER device's current state (the alarm armed, a switch on). */
+	deviceState: NcDeviceStateConditionSchema.optional(),
 	/** Device scope — absent = all devices. */
 	devices: z.array(z.number()).optional(),
 	/** Detector class names (any overlap with the record's class set). */
@@ -5613,6 +5630,14 @@ var NcMediaPolicySchema = z.object({
 	clipPreRollSec: z.number().int().min(0).max(30).optional(),
 	clipPostRollSec: z.number().int().min(0).max(30).optional(),
 	/**
+	* Playback rate of the attached gif / clip. Absent = 2x.
+	*
+	* A notification clip is GLANCED at on a lock screen, not watched: at real
+	* time an eight-second passage is eight seconds of the recipient's attention
+	* and twice the bytes. 1 is real time for the operator who wants it.
+	*/
+	clipSpeed: z.number().min(1).max(8).optional(),
+	/**
 	* Which stream profile the footage is cut from. Absent = the CHEAPEST
 	* assigned profile: a notification is watched on a phone, so the 4K
 	* rendition would burn CPU to produce a file the client downscales anyway.
@@ -5684,7 +5709,21 @@ var NcRuleInputSchema = z.object({
 	* behaviour, visible to all, read-only in the viewer). Present = personal
 	* rule owned by this userId. Server-stamped; never trusted from a client.
 	*/
-	ownerUserId: z.string().optional()
+	ownerUserId: z.string().optional(),
+	/**
+	* May a non-admin snooze this rule for EVERYONE, not just themselves?
+	*
+	* A snooze is personal by default — it silences the person who set it. This
+	* opts THIS rule into the "the gardener is here all afternoon" case, where
+	* silencing the camera for the whole household is legitimate. It silences
+	* other people, so it is off unless a rule deliberately allows it.
+	*
+	* `.optional()`, deliberately NOT `.default()`: a Zod default does not run on
+	* the addon cap path (three production failures in one day), so absent is
+	* read as `false` by {@link canSetGlobal} in the engine. Admins are not bound
+	* by this flag — see the scope rules on that function.
+	*/
+	snoozeAllowGlobal: z.boolean().optional()
 });
 /**
 * Partial patch for `updateRule` — any subset of the input fields, plus the
@@ -5755,7 +5794,8 @@ var NcConditionDescriptorSchema = z.object({
 		"packagePhase",
 		"crossingSelect",
 		"polygonDraw",
-		"occupancy"
+		"occupancy",
+		"deviceState"
 	]),
 	operator: z.enum([
 		"in",
@@ -5769,7 +5809,28 @@ var NcConditionDescriptorSchema = z.object({
 	/** Which delivery kinds the condition applies to. */
 	appliesTo: z.array(NcDeliverySchema),
 	phase: z.string(),
-	description: z.string().optional()
+	description: z.string().optional(),
+	/**
+	* The CHOICES for a single-choice widget (`sourceSelect`, `crossingSelect`,
+	* `packagePhase`, …), served with the descriptor.
+	*
+	* Before this the descriptor said which widget to render and not what to put
+	* in it, so every option list lived in three places: this file's enums, the
+	* admin's `NC_*_OPTIONS` and the viewer's `NC_*_VALUES`. That triple mirror
+	* is the drift that emptied the viewer's rule editor on 2026-08-04 — the app
+	* mirrors the cap by hand, so it is only ever as current as its last build.
+	*
+	* With the options on the wire, a condition of an EXISTING `valueType` costs
+	* zero client changes. Clients keep a local fallback for an older hub that
+	* does not send them; absent here is "use your own list", not "no choices".
+	*/
+	options: z.array(z.object({
+		/** Written to the rule verbatim. `''` means the ABSENT state. */
+		value: z.string(),
+		label: z.string(),
+		/** What THIS choice matches — shown one at a time, under the control. */
+		hint: z.string().optional()
+	})).readonly().optional()
 });
 /**
 * The delivery lifecycle status of a history row — a straight read of the
@@ -5854,6 +5915,74 @@ var NcHistoryFilterSchema = z.object({
 	until: z.number().optional(),
 	limit: z.number().int().min(1).max(500).default(100)
 });
+/**
+* What a snooze covers. Broader scopes win when several overlap, so one window
+* leaves ONE digest rather than a rule snooze and a whole-feed snooze both
+* summarising the same silence.
+*/
+var NcSnoozeScopeSchema = z.enum([
+	"rule",
+	"device",
+	"all"
+]);
+/**
+* Client-authored snooze. The server stamps `userId`, `startedAt` and
+* `expiresAt` — a DURATION is sent rather than an instant so a client with a
+* skewed clock cannot author a window that is already over, or never ends.
+*/
+var NcSnoozeInputSchema = z.object({
+	scope: NcSnoozeScopeSchema,
+	/** Required when `scope: 'rule'` — a scoped snooze with no id matches
+	*  NOTHING rather than degrading to "everything". */
+	ruleId: z.string().optional(),
+	/** Required when `scope: 'device'`. */
+	deviceId: z.number().int().optional(),
+	durationMinutes: z.number().int().min(1).max(1440),
+	/**
+	* Silence this for EVERY recipient, not just the caller. Permission is
+	* checked server-side (the rule's `snoozeAllowGlobal`, or admin for the
+	* broader scopes). Absent = personal.
+	*/
+	global: z.boolean().optional(),
+	/**
+	* Deliver a summary of what was suppressed when the window ends. Absent =
+	* ON: someone silencing a nuisance camera wants it off, someone silencing a
+	* SECURITY camera wants to know what they missed, and choosing "off" for
+	* everybody is how a snooze becomes an outage. Resolved to a concrete
+	* boolean by the server at create time — never left to a Zod default, which
+	* does not run on the addon cap path.
+	*/
+	summary: z.boolean().optional()
+});
+/** A persisted snooze window. */
+var NcSnoozeSchema = z.object({
+	id: z.string(),
+	/** Who set it. Also who it silences, unless `global`. */
+	userId: z.string(),
+	scope: NcSnoozeScopeSchema,
+	ruleId: z.string().optional(),
+	deviceId: z.number().int().optional(),
+	startedAt: z.number(),
+	/** Exclusive: at exactly this instant the snooze is over. Expiry is a
+	*  COMPARISON, not a job — no sweeper can leave the operator silenced. */
+	expiresAt: z.number(),
+	global: z.boolean(),
+	summary: z.boolean(),
+	/** When the end-of-window digest went out. Absent = not sent (yet, or the
+	*  window has not closed, or `summary` is false). */
+	digestSentAt: z.number().optional()
+});
+z.object({
+	snoozeId: z.string(),
+	targetId: z.string(),
+	ruleId: z.string(),
+	ruleName: z.string(),
+	deviceId: z.number().int(),
+	/** How many notifications this snooze hid for that pair. */
+	count: z.number().int(),
+	firstAt: z.number(),
+	lastAt: z.number()
+});
 var notificationRulesCapability = {
 	name: "notification-rules",
 	scope: "system",
@@ -5920,7 +6049,36 @@ var notificationRulesCapability = {
 		* P1 (no user dimension); the P2 viewer History screen adds per-caller
 		* scoping on the same method.
 		*/
-		getHistory: method(z.object({ filter: NcHistoryFilterSchema.default({ limit: 100 }) }), z.object({ entries: z.array(NcHistoryEntrySchema) }), { auth: "admin" })
+		getHistory: method(z.object({ filter: NcHistoryFilterSchema.default({ limit: 100 }) }), z.object({ entries: z.array(NcHistoryEntrySchema) }), { auth: "admin" }),
+		/**
+		* Snooze windows currently in effect, plus any whose digest has not yet
+		* gone out. `caller: 'required'`: a user sees their OWN windows and the
+		* global ones that silence them, never another person's private silence.
+		* An admin sees every window — a household-wide silence is exactly the
+		* thing an operator has to be able to find and cancel.
+		*/
+		listSnoozes: method(z.object({}), z.object({ snoozes: z.array(NcSnoozeSchema) }), { caller: "required" }),
+		/**
+		* Open a window. `userId` is stamped from the caller; a GLOBAL window is
+		* permission-checked server-side (the rule's `snoozeAllowGlobal` for a
+		* rule-scoped one, admin for a camera or the whole feed) — a client asking
+		* for one it may not have is rejected, never silently downgraded, because
+		* a snooze the operator believes is in effect and is not is the same
+		* failure as one they cannot end.
+		*/
+		createSnooze: method(z.object({ snooze: NcSnoozeInputSchema }), z.object({ snooze: NcSnoozeSchema }), {
+			kind: "mutation",
+			caller: "required"
+		}),
+		/**
+		* End a window NOW. The digest still goes out (what was hidden while it
+		* was open is still what the operator missed); only the silence stops.
+		* A user may cancel their own; an admin may cancel any.
+		*/
+		cancelSnooze: method(z.object({ snoozeId: z.string() }), z.object({ success: z.literal(true) }), {
+			kind: "mutation",
+			caller: "required"
+		})
 	}
 };
 /**
@@ -6988,7 +7146,15 @@ var streamBrokerCapability = {
 			format: z.enum(["gif", "mp4"]).default("gif"),
 			maxWidth: z.number().int().min(120).max(1920).default(480),
 			/** GIF only — MP4 keeps the source cadence. */
-			fps: z.number().int().min(1).max(15).default(5)
+			fps: z.number().int().min(1).max(15).default(5),
+			/**
+			* Playback rate. A notification clip is GLANCED at on a lock screen,
+			* not watched, so 2x is the default: the recipient sees the whole
+			* passage in half the time and the GIF is half the bytes. `1` is real
+			* time. Applies to MP4 as well — the operator set a speed, not a GIF
+			* speed.
+			*/
+			speed: z.number().min(1).max(8).default(2)
 		}), z.object({
 			base64: z.string(),
 			mime: z.string(),
@@ -26905,12 +27071,24 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"notificationRules.cancelSnooze": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"notificationRules.createRule": {
 		capName: "notification-rules",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
+	"notificationRules.createSnooze": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"notificationRules.deleteRule": {
 		capName: "notification-rules",
 		capScope: "system",
@@ -26941,6 +27119,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"notificationRules.listSnoozes": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"notificationRules.setRuleEnabled": {
 		capName: "notification-rules",
 		capScope: "system",

package/dist/{dist-CSs1A90r.js → dist-Bqyu3d1X.js}

@@ -5412,7 +5412,24 @@ var NcZoneConditionSchema = zod.z.object({
 * The P1 condition set — a flat AND of groups; absent group = pass;
 * membership lists are OR within the list (spec §2.3).
 */
+/**
+* "This rule applies only while `deviceId` is in one of `states`."
+*
+* The states are the DEVICE's own vocabulary — `AlarmState` for a panel,
+* `on`/`off` for a switch — not a normalised set, because normalising would
+* make the condition lie about devices whose states have no equivalent.
+*
+* An unreadable state does NOT match: see the engine's fail-closed gate. A
+* condition that fired on "I could not read it" would be worse than no gate.
+*/
+var NcDeviceStateConditionSchema = zod.z.object({
+	deviceId: zod.z.number().int(),
+	/** Any of these matches. */
+	states: zod.z.array(zod.z.string().min(1)).min(1)
+});
 var NcConditionsSchema = zod.z.object({
+	/** Gate on ANOTHER device's current state (the alarm armed, a switch on). */
+	deviceState: NcDeviceStateConditionSchema.optional(),
 	/** Device scope — absent = all devices. */
 	devices: zod.z.array(zod.z.number()).optional(),
 	/** Detector class names (any overlap with the record's class set). */
@@ -5613,6 +5630,14 @@ var NcMediaPolicySchema = zod.z.object({
 	clipPreRollSec: zod.z.number().int().min(0).max(30).optional(),
 	clipPostRollSec: zod.z.number().int().min(0).max(30).optional(),
 	/**
+	* Playback rate of the attached gif / clip. Absent = 2x.
+	*
+	* A notification clip is GLANCED at on a lock screen, not watched: at real
+	* time an eight-second passage is eight seconds of the recipient's attention
+	* and twice the bytes. 1 is real time for the operator who wants it.
+	*/
+	clipSpeed: zod.z.number().min(1).max(8).optional(),
+	/**
 	* Which stream profile the footage is cut from. Absent = the CHEAPEST
 	* assigned profile: a notification is watched on a phone, so the 4K
 	* rendition would burn CPU to produce a file the client downscales anyway.
@@ -5684,7 +5709,21 @@ var NcRuleInputSchema = zod.z.object({
 	* behaviour, visible to all, read-only in the viewer). Present = personal
 	* rule owned by this userId. Server-stamped; never trusted from a client.
 	*/
-	ownerUserId: zod.z.string().optional()
+	ownerUserId: zod.z.string().optional(),
+	/**
+	* May a non-admin snooze this rule for EVERYONE, not just themselves?
+	*
+	* A snooze is personal by default — it silences the person who set it. This
+	* opts THIS rule into the "the gardener is here all afternoon" case, where
+	* silencing the camera for the whole household is legitimate. It silences
+	* other people, so it is off unless a rule deliberately allows it.
+	*
+	* `.optional()`, deliberately NOT `.default()`: a Zod default does not run on
+	* the addon cap path (three production failures in one day), so absent is
+	* read as `false` by {@link canSetGlobal} in the engine. Admins are not bound
+	* by this flag — see the scope rules on that function.
+	*/
+	snoozeAllowGlobal: zod.z.boolean().optional()
 });
 /**
 * Partial patch for `updateRule` — any subset of the input fields, plus the
@@ -5755,7 +5794,8 @@ var NcConditionDescriptorSchema = zod.z.object({
 		"packagePhase",
 		"crossingSelect",
 		"polygonDraw",
-		"occupancy"
+		"occupancy",
+		"deviceState"
 	]),
 	operator: zod.z.enum([
 		"in",
@@ -5769,7 +5809,28 @@ var NcConditionDescriptorSchema = zod.z.object({
 	/** Which delivery kinds the condition applies to. */
 	appliesTo: zod.z.array(NcDeliverySchema),
 	phase: zod.z.string(),
-	description: zod.z.string().optional()
+	description: zod.z.string().optional(),
+	/**
+	* The CHOICES for a single-choice widget (`sourceSelect`, `crossingSelect`,
+	* `packagePhase`, …), served with the descriptor.
+	*
+	* Before this the descriptor said which widget to render and not what to put
+	* in it, so every option list lived in three places: this file's enums, the
+	* admin's `NC_*_OPTIONS` and the viewer's `NC_*_VALUES`. That triple mirror
+	* is the drift that emptied the viewer's rule editor on 2026-08-04 — the app
+	* mirrors the cap by hand, so it is only ever as current as its last build.
+	*
+	* With the options on the wire, a condition of an EXISTING `valueType` costs
+	* zero client changes. Clients keep a local fallback for an older hub that
+	* does not send them; absent here is "use your own list", not "no choices".
+	*/
+	options: zod.z.array(zod.z.object({
+		/** Written to the rule verbatim. `''` means the ABSENT state. */
+		value: zod.z.string(),
+		label: zod.z.string(),
+		/** What THIS choice matches — shown one at a time, under the control. */
+		hint: zod.z.string().optional()
+	})).readonly().optional()
 });
 /**
 * The delivery lifecycle status of a history row — a straight read of the
@@ -5854,6 +5915,74 @@ var NcHistoryFilterSchema = zod.z.object({
 	until: zod.z.number().optional(),
 	limit: zod.z.number().int().min(1).max(500).default(100)
 });
+/**
+* What a snooze covers. Broader scopes win when several overlap, so one window
+* leaves ONE digest rather than a rule snooze and a whole-feed snooze both
+* summarising the same silence.
+*/
+var NcSnoozeScopeSchema = zod.z.enum([
+	"rule",
+	"device",
+	"all"
+]);
+/**
+* Client-authored snooze. The server stamps `userId`, `startedAt` and
+* `expiresAt` — a DURATION is sent rather than an instant so a client with a
+* skewed clock cannot author a window that is already over, or never ends.
+*/
+var NcSnoozeInputSchema = zod.z.object({
+	scope: NcSnoozeScopeSchema,
+	/** Required when `scope: 'rule'` — a scoped snooze with no id matches
+	*  NOTHING rather than degrading to "everything". */
+	ruleId: zod.z.string().optional(),
+	/** Required when `scope: 'device'`. */
+	deviceId: zod.z.number().int().optional(),
+	durationMinutes: zod.z.number().int().min(1).max(1440),
+	/**
+	* Silence this for EVERY recipient, not just the caller. Permission is
+	* checked server-side (the rule's `snoozeAllowGlobal`, or admin for the
+	* broader scopes). Absent = personal.
+	*/
+	global: zod.z.boolean().optional(),
+	/**
+	* Deliver a summary of what was suppressed when the window ends. Absent =
+	* ON: someone silencing a nuisance camera wants it off, someone silencing a
+	* SECURITY camera wants to know what they missed, and choosing "off" for
+	* everybody is how a snooze becomes an outage. Resolved to a concrete
+	* boolean by the server at create time — never left to a Zod default, which
+	* does not run on the addon cap path.
+	*/
+	summary: zod.z.boolean().optional()
+});
+/** A persisted snooze window. */
+var NcSnoozeSchema = zod.z.object({
+	id: zod.z.string(),
+	/** Who set it. Also who it silences, unless `global`. */
+	userId: zod.z.string(),
+	scope: NcSnoozeScopeSchema,
+	ruleId: zod.z.string().optional(),
+	deviceId: zod.z.number().int().optional(),
+	startedAt: zod.z.number(),
+	/** Exclusive: at exactly this instant the snooze is over. Expiry is a
+	*  COMPARISON, not a job — no sweeper can leave the operator silenced. */
+	expiresAt: zod.z.number(),
+	global: zod.z.boolean(),
+	summary: zod.z.boolean(),
+	/** When the end-of-window digest went out. Absent = not sent (yet, or the
+	*  window has not closed, or `summary` is false). */
+	digestSentAt: zod.z.number().optional()
+});
+zod.z.object({
+	snoozeId: zod.z.string(),
+	targetId: zod.z.string(),
+	ruleId: zod.z.string(),
+	ruleName: zod.z.string(),
+	deviceId: zod.z.number().int(),
+	/** How many notifications this snooze hid for that pair. */
+	count: zod.z.number().int(),
+	firstAt: zod.z.number(),
+	lastAt: zod.z.number()
+});
 var notificationRulesCapability = {
 	name: "notification-rules",
 	scope: "system",
@@ -5920,7 +6049,36 @@ var notificationRulesCapability = {
 		* P1 (no user dimension); the P2 viewer History screen adds per-caller
 		* scoping on the same method.
 		*/
-		getHistory: method(zod.z.object({ filter: NcHistoryFilterSchema.default({ limit: 100 }) }), zod.z.object({ entries: zod.z.array(NcHistoryEntrySchema) }), { auth: "admin" })
+		getHistory: method(zod.z.object({ filter: NcHistoryFilterSchema.default({ limit: 100 }) }), zod.z.object({ entries: zod.z.array(NcHistoryEntrySchema) }), { auth: "admin" }),
+		/**
+		* Snooze windows currently in effect, plus any whose digest has not yet
+		* gone out. `caller: 'required'`: a user sees their OWN windows and the
+		* global ones that silence them, never another person's private silence.
+		* An admin sees every window — a household-wide silence is exactly the
+		* thing an operator has to be able to find and cancel.
+		*/
+		listSnoozes: method(zod.z.object({}), zod.z.object({ snoozes: zod.z.array(NcSnoozeSchema) }), { caller: "required" }),
+		/**
+		* Open a window. `userId` is stamped from the caller; a GLOBAL window is
+		* permission-checked server-side (the rule's `snoozeAllowGlobal` for a
+		* rule-scoped one, admin for a camera or the whole feed) — a client asking
+		* for one it may not have is rejected, never silently downgraded, because
+		* a snooze the operator believes is in effect and is not is the same
+		* failure as one they cannot end.
+		*/
+		createSnooze: method(zod.z.object({ snooze: NcSnoozeInputSchema }), zod.z.object({ snooze: NcSnoozeSchema }), {
+			kind: "mutation",
+			caller: "required"
+		}),
+		/**
+		* End a window NOW. The digest still goes out (what was hidden while it
+		* was open is still what the operator missed); only the silence stops.
+		* A user may cancel their own; an admin may cancel any.
+		*/
+		cancelSnooze: method(zod.z.object({ snoozeId: zod.z.string() }), zod.z.object({ success: zod.z.literal(true) }), {
+			kind: "mutation",
+			caller: "required"
+		})
 	}
 };
 /**
@@ -6988,7 +7146,15 @@ var streamBrokerCapability = {
 			format: zod.z.enum(["gif", "mp4"]).default("gif"),
 			maxWidth: zod.z.number().int().min(120).max(1920).default(480),
 			/** GIF only — MP4 keeps the source cadence. */
-			fps: zod.z.number().int().min(1).max(15).default(5)
+			fps: zod.z.number().int().min(1).max(15).default(5),
+			/**
+			* Playback rate. A notification clip is GLANCED at on a lock screen,
+			* not watched, so 2x is the default: the recipient sees the whole
+			* passage in half the time and the GIF is half the bytes. `1` is real
+			* time. Applies to MP4 as well — the operator set a speed, not a GIF
+			* speed.
+			*/
+			speed: zod.z.number().min(1).max(8).default(2)
 		}), zod.z.object({
 			base64: zod.z.string(),
 			mime: zod.z.string(),
@@ -26905,12 +27071,24 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"notificationRules.cancelSnooze": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"notificationRules.createRule": {
 		capName: "notification-rules",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
+	"notificationRules.createSnooze": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"notificationRules.deleteRule": {
 		capName: "notification-rules",
 		capScope: "system",
@@ -26941,6 +27119,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"notificationRules.listSnoozes": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"notificationRules.setRuleEnabled": {
 		capName: "notification-rules",
 		capScope: "system",

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-CSs1A90r.js");
+const require_dist = require("./dist-Bqyu3d1X.js");
 const require_model_download_service = require("./model-download-service-hf0ookyy.js");
 const require_manifest_python_deps = require("./manifest-python-deps-BqE5j0-O.js");
 const require_resource_monitor = require("./resource-monitor-DNNomR-i.js");

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { A as extractNestedAddonId, At as scopeKey, Dt as parseJsonUnknown$1, Et as parseJsonObject, F as isObjectInput, G as objectInputDeclaresAddonId, H as looseSchema, I as isVoidInput, J as procedureAuthKey, L as kebabToCamel, Mt as EventCategory$1, N as isArrayOutputSchema, Ot as readinessKey, P as isCollectionArrayMethod, R as lifecycleJobSchema, St as expandCapMethods, V as logLevelAtMost, _t as asNumber, at as errMsg$1, bt as emitDownForOwnedCaps, c as RUNTIME_DEFAULTS, ct as DEVICE_SETTINGS_CONTRIBUTION_METHODS, gt as asJsonObject$1, kt as resolveCapMount, lt as DEVICE_STATUS_METHOD, m as addonSettingsCapability, mt as ReadinessTimeoutError, pt as ReadinessRegistry, s as METHOD_ACCESS_MAP, st as DATAPLANE_SECRET_HEADER$1, t as ALL_CAPABILITY_DEFINITIONS, vt as asString$1, yt as createEvent } from "./dist-BL_FHWPP.mjs";
+import { A as extractNestedAddonId, At as scopeKey, Dt as parseJsonUnknown$1, Et as parseJsonObject, F as isObjectInput, G as objectInputDeclaresAddonId, H as looseSchema, I as isVoidInput, J as procedureAuthKey, L as kebabToCamel, Mt as EventCategory$1, N as isArrayOutputSchema, Ot as readinessKey, P as isCollectionArrayMethod, R as lifecycleJobSchema, St as expandCapMethods, V as logLevelAtMost, _t as asNumber, at as errMsg$1, bt as emitDownForOwnedCaps, c as RUNTIME_DEFAULTS, ct as DEVICE_SETTINGS_CONTRIBUTION_METHODS, gt as asJsonObject$1, kt as resolveCapMount, lt as DEVICE_STATUS_METHOD, m as addonSettingsCapability, mt as ReadinessTimeoutError, pt as ReadinessRegistry, s as METHOD_ACCESS_MAP, st as DATAPLANE_SECRET_HEADER$1, t as ALL_CAPABILITY_DEFINITIONS, vt as asString$1, yt as createEvent } from "./dist-BjUYsgkj.mjs";
 import { a as downloadModel, c as getModelFilePath, d as contentTypeFor, f as createAuthenticatedFileServer, h as resolveFilePath, i as downloadFile, l as isModelDownloaded, m as parseTokenizedUrl, n as collectModelFiles, o as ensureModel, p as parseRangeHeader, r as deleteModelFromDisk, s as fetchJson, t as ModelDownloadService, u as createFileDataPlaneHandler } from "./model-download-service-Cp9f4dk6.mjs";
 import { $ as buildNativeCapProxy, A as createHubCapForwardService, B as AGENT_CAP_FWD_ACTION, C as brokerTransportLink, Ct as resolveAddonClass, D as localProviderLink, E as ipcParentLink, F as createUdsLogger, G as callWithServiceDiscovery, H as CapRouteResolver, I as createUdsLoggerWithControl, J as UdsLocalTransportServer, K as createLocalTransport, L as LocalChildClient, M as createUdsEventBridge, N as createUdsEventBus, O as HUB_CAP_FWD_ACTION, P as udsChildLogToWorkerEntry, Q as encodeFrame, R as LocalChildRegistry, S as brokerCallForCap, St as runNpm, T as ipcChildLink, U as CapRouteError, V as AGENT_CAP_FWD_SERVICE, W as classifyCapRoute, X as localEndpointPath, Y as SocketChannel, Z as FrameDecoder, _ as createKernelHwAccel, _t as CapabilityHandle, a as getWorkerDeviceRegistry, b as __resetCapUsageRegistryForTests, bt as installManifestNativeDeps, c as setHubConnected, ct as NATIVE_PROVIDER_SERVICE_INFIX, d as getBrokerEventBus, dt as capBareAction, et as buildUdsNativeCapProxy, f as getMoleculerEventStats, ft as capServiceName, g as AddonDepsManager, gt as DeviceRegistry, h as subscribePassthrough, ht as serializeTypedArrays, i as createUdsAddonContext, it as mountNativeCapService, j as createParentUnownedCallHandler, k as HUB_CAP_FWD_SERVICE, l as EVENT_TOPIC_PREFIX, lt as capActionName, m as setNodeEventInterest, mt as deserializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as createAddonService, p as registerEventBusService, pt as parseCapAction, q as UdsLocalTransportClient, r as createAddonContext, s as getOrInitReadinessRegistryForClient, st as validateProviderRegistrations, t as installManifestPythonDeps, tt as createBrokerDeviceManagerApi, u as clusterEventTopic, ut as capActionSuffix, v as resolveHwAccel, vt as CapabilityUnavailableError, w as buildLinkChain, wt as createAddonDataPlaneFacility, x as getCapUsageRegistry, xt as resolveNpmInvocation, y as CapUsageRegistry, yt as copyBundledNativeModules, z as UDS_NO_ROUTE_PREFIX } from "./manifest-python-deps-Ck4-9K9m.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BkP504Vq.mjs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.32",
+  "version": "1.2.34",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",