@camstack/system 1.2.328 → 1.2.330

package/dist/{dist-DWq17vC8.mjs → dist-Dp043AI0.mjs}

@@ -9334,6 +9334,117 @@ var authProviderCapability = {
 	mount: { kind: "skip" }
 };
 /**
+* The suffix of a verified snapshot, written next to the live database it
+* copies: `<db>.backup-snapshot`. A restore promotes it back over `<db>`
+* (`server/backend/src/sqlite-restore.ts` spells the same string — the
+* launcher stays free of `@camstack/*` runtime imports — and a spec pins the
+* two together).
+*/
+var DATABASE_SNAPSHOT_SUFFIX = ".backup-snapshot";
+/**
+* The suffix of a copy still being written or verified. A file under this name
+* is never archived and never promoted: only a copy that passed every check is
+* renamed to {@link DATABASE_SNAPSHOT_SUFFIX}.
+*/
+var DATABASE_SNAPSHOT_PARTIAL_SUFFIX = ".backup-snapshot-partial";
+/**
+* How long one snapshot may take end to end: the pinned copy of the whole
+* database plus `PRAGMA integrity_check` over the copy, on the hub's slowest
+* disk. ~800 MB at a pessimistic 10 MB/s is under 3 minutes; the bound is
+* generous because a timeout fails the whole backup run.
+*/
+var DATABASE_SNAPSHOT_TIMEOUT_MS = 30 * 6e4;
+/**
+* The databases an owner snapshots — declared by the OWNER, so a caller never
+* guesses which file is live from what sits beside it (a cleanly closed
+* database has no sidecars and is just as owned). Paths are absolute on the
+* owner's host.
+*/
+var DatabaseSnapshotTargetsSchema = z.object({ databases: z.array(z.object({ livePath: z.string() })) });
+/** One b-tree table of the snapshot and the rows it holds. */
+var DatabaseSnapshotTableSchema = z.object({
+	name: z.string(),
+	rows: z.number().int().nonnegative()
+});
+/**
+* What the owner wrote. Every path is ABSOLUTE on the owner's host — the
+* caller pins the call to its own node, so it can read the file; a caller
+* that finds the path outside its own data root refuses it rather than
+* archiving something it cannot place.
+*/
+var DatabaseSnapshotResultSchema = z.object({
+	/** The live database the snapshot copies. Never to be copied as a file. */
+	livePath: z.string(),
+	/** The verified copy: `<livePath>` + {@link DATABASE_SNAPSHOT_SUFFIX}. */
+	snapshotPath: z.string(),
+	sizeBytes: z.number().int().nonnegative(),
+	pageCount: z.number().int().nonnegative(),
+	pageSize: z.number().int().positive(),
+	/**
+	* Every b-tree table with its row count. Read inside the SAME read
+	* transaction the copy was taken from, and found EQUAL on the copy — so
+	* this is the content of the snapshot, not an estimate of the source.
+	*/
+	tables: z.array(DatabaseSnapshotTableSchema),
+	/** Wall time of the pinned copy (row counts included). */
+	copyMs: z.number().nonnegative(),
+	/** Wall time of the checks on the copy (`integrity_check`, row counts). */
+	verifyMs: z.number().nonnegative(),
+	/** When the pinned read transaction began (ms epoch) — the snapshot's instant. */
+	takenAt: z.number()
+});
+/**
+* A snapshot as an ARCHIVE records it (`ArchiveManifest.sqliteSnapshots`):
+* the same facts, with both paths relative to the archive root (the node's
+* data dir), because an archive outlives the host that made it.
+*/
+var ArchiveSqliteSnapshotSchema = DatabaseSnapshotResultSchema.extend({
+	/** Archive-relative path of the live database the archive does NOT carry. */
+	livePath: z.string(),
+	/** Archive-relative path of the verified copy it carries in its place. */
+	snapshotPath: z.string()
+});
+/**
+* database-snapshot — the OWNER of a live SQLite database writes a consistent,
+* verified copy of it (D693).
+*
+* A live database cannot be copied as files: three files written by a live
+* process cannot be read at one instant from outside it, and a tar of the
+* `.db` / `-wal` / `-shm` trio was measured torn in 6/6 archives (D679). Nor may
+* another process open it (D679 rule 2). So the process that owns the
+* connection writes the copy — through its own connection, on a thread,
+* pinned to one read transaction — and checks it before handing it out.
+*
+* Hub-only and internal: `sqlite-settings` is the registrant, and its consumer
+* is `backup-orchestrator`, which calls it pinned to its own node so the path
+* it gets back is on its own host. `auth: 'admin'` explicitly — `internal`
+* does not gate the mount (see `data-store-provider`).
+*/
+var databaseSnapshotCapability = {
+	name: "database-snapshot",
+	scope: "system",
+	mode: "singleton",
+	internal: true,
+	methods: {
+		/**
+		* Which databases this owner snapshots. Answered from memory — no file is
+		* touched — so a backup can ask it before deciding anything.
+		*/
+		listDatabases: method(z.object({}), DatabaseSnapshotTargetsSchema, { auth: "admin" }),
+		/**
+		* Write `<db>.backup-snapshot` and return what it holds. Throws — and
+		* leaves no file under the final name — when the copy fails
+		* `integrity_check` or its row counts differ from the pinned source's.
+		* A second call while one is running joins it.
+		*/
+		writeSnapshot: method(z.object({}), DatabaseSnapshotResultSchema, {
+			kind: "mutation",
+			auth: "admin",
+			timeoutMs: DATABASE_SNAPSHOT_TIMEOUT_MS
+		})
+	}
+};
+/**
 * Orchestrator-side destination metadata. The orchestrator computes
 * `id = <addonId>:<subId>` from its provider lookup so consumers
 * (admin UI, restore flow) see one canonical key.
@@ -9444,7 +9555,12 @@ var ArchiveManifestSchema = z.object({
 	locations: z.array(z.string()),
 	entries: z.array(ArchiveEntrySchema),
 	totalBytes: z.number(),
-	totalFiles: z.number()
+	totalFiles: z.number(),
+	/**
+	* Live SQLite databases this archive carries as their OWNER's verified
+	* snapshot instead of as files (D693). Absent on archives made before.
+	*/
+	sqliteSnapshots: z.array(ArchiveSqliteSnapshotSchema).optional()
 });
 var LocationStatSchema = z.object({
 	name: z.string(),
@@ -11793,6 +11909,76 @@ var CompositionBlockStateSchema = z.object({
 	reason: z.string().optional(),
 	fields: z.array(CompositionFieldStateSchema)
 });
+/**
+* composer — runs every DECLARATIVE composition (D659).
+*
+* Internal and admin-only: its one caller is `core-blocks`' supervisor, which
+* sends the WHOLE set of composition blocks on every converge (idempotent),
+* and reads their state for the API. Nothing else talks to it.
+*/
+/** The composer's runner id, `resolveRunnerId(decl, 'composer')`; pinned by `composer-manifest.spec.ts`. */
+var COMPOSER_RUNNER_ID = COMPOSER_ADDON_ID;
+var ComposerBlockSchema = z.object({
+	id: z.string().min(1),
+	name: z.string().min(1).max(120),
+	enabled: z.boolean(),
+	updatedAt: z.number(),
+	composition: CompositionSchema
+});
+/**
+* A stored composition row that no longer PARSES — a schema a release
+* tightened, a row written by a newer build. Sent by id so the composer keeps
+* its device as a placeholder and reports the block `failed` naming the parse
+* error. Leaving it out would read, twice, exactly like a delete (D49).
+*/
+var ComposerUnreadableBlockSchema = z.object({
+	id: z.string().min(1),
+	/** The row's stored name column; null when even that is unreadable (the device keeps the name it has). */
+	name: z.string().nullable(),
+	/** The parse error, in the operator's words. */
+	error: z.string()
+});
+var ComposerApplyInputSchema = z.object({
+	/** The shared Blocks integration; null until `core-blocks` has reconciled it. */
+	integrationId: z.string().nullable(),
+	/** False when the `core_blocks` read failed: then nothing may be withdrawn (D49). */
+	storeLoaded: z.boolean(),
+	blocks: z.array(ComposerBlockSchema),
+	/** Operator restarts: rebuild these runtimes and re-resolve their sources. Stores nothing (D62). */
+	restartBlockIds: z.array(z.string()),
+	/** Composition rows that exist but do not parse: held, never withdrawn, reported failed. */
+	unreadableBlocks: z.array(ComposerUnreadableBlockSchema)
+});
+var ComposerBlockVerdictSchema = z.object({
+	blockId: z.string(),
+	status: CompositionRunStatusSchema,
+	reason: z.string().optional()
+});
+var composerCapability = {
+	name: "composer",
+	scope: "system",
+	mode: "singleton",
+	internal: true,
+	methods: {
+		/**
+		* Not `apply`: tRPC reserves `apply`, `call` and `then` as router keys, and
+		* `router({})` throws on one — every cap router is built at boot.
+		*/
+		applyBlocks: method(ComposerApplyInputSchema, z.object({
+			blocks: z.array(ComposerBlockVerdictSchema),
+			/**
+			* False when the composer declared and withdrew NOTHING (store not loaded,
+			* integration unknown, its own rows unread or read empty once). An empty
+			* apply the caller owes is paid off only by one the composer acted on (D49).
+			*/
+			acted: z.boolean()
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		getStates: method(z.object({ blockIds: z.array(z.string()) }), z.object({ states: z.array(CompositionBlockStateSchema) }), { auth: "admin" })
+	}
+};
 function problem(code, path, message) {
 	return {
 		code,
@@ -13004,76 +13190,6 @@ var coreBlocksCapability = {
 	}
 };
 /**
-* composer — runs every DECLARATIVE composition (D659).
-*
-* Internal and admin-only: its one caller is `core-blocks`' supervisor, which
-* sends the WHOLE set of composition blocks on every converge (idempotent),
-* and reads their state for the API. Nothing else talks to it.
-*/
-/** The composer's runner id, `resolveRunnerId(decl, 'composer')`; pinned by `composer-manifest.spec.ts`. */
-var COMPOSER_RUNNER_ID = COMPOSER_ADDON_ID;
-var ComposerBlockSchema = z.object({
-	id: z.string().min(1),
-	name: z.string().min(1).max(120),
-	enabled: z.boolean(),
-	updatedAt: z.number(),
-	composition: CompositionSchema
-});
-/**
-* A stored composition row that no longer PARSES — a schema a release
-* tightened, a row written by a newer build. Sent by id so the composer keeps
-* its device as a placeholder and reports the block `failed` naming the parse
-* error. Leaving it out would read, twice, exactly like a delete (D49).
-*/
-var ComposerUnreadableBlockSchema = z.object({
-	id: z.string().min(1),
-	/** The row's stored name column; null when even that is unreadable (the device keeps the name it has). */
-	name: z.string().nullable(),
-	/** The parse error, in the operator's words. */
-	error: z.string()
-});
-var ComposerApplyInputSchema = z.object({
-	/** The shared Blocks integration; null until `core-blocks` has reconciled it. */
-	integrationId: z.string().nullable(),
-	/** False when the `core_blocks` read failed: then nothing may be withdrawn (D49). */
-	storeLoaded: z.boolean(),
-	blocks: z.array(ComposerBlockSchema),
-	/** Operator restarts: rebuild these runtimes and re-resolve their sources. Stores nothing (D62). */
-	restartBlockIds: z.array(z.string()),
-	/** Composition rows that exist but do not parse: held, never withdrawn, reported failed. */
-	unreadableBlocks: z.array(ComposerUnreadableBlockSchema)
-});
-var ComposerBlockVerdictSchema = z.object({
-	blockId: z.string(),
-	status: CompositionRunStatusSchema,
-	reason: z.string().optional()
-});
-var composerCapability = {
-	name: "composer",
-	scope: "system",
-	mode: "singleton",
-	internal: true,
-	methods: {
-		/**
-		* Not `apply`: tRPC reserves `apply`, `call` and `then` as router keys, and
-		* `router({})` throws on one — every cap router is built at boot.
-		*/
-		applyBlocks: method(ComposerApplyInputSchema, z.object({
-			blocks: z.array(ComposerBlockVerdictSchema),
-			/**
-			* False when the composer declared and withdrew NOTHING (store not loaded,
-			* integration unknown, its own rows unread or read empty once). An empty
-			* apply the caller owes is paid off only by one the composer acted on (D49).
-			*/
-			acted: z.boolean()
-		}), {
-			kind: "mutation",
-			auth: "admin"
-		}),
-		getStates: method(z.object({ blockIds: z.array(z.string()) }), z.object({ states: z.array(CompositionBlockStateSchema) }), { auth: "admin" })
-	}
-};
-/**
 * `custom-model-registry` — collection cap exposing operator-registered
 * custom detection models. Each provider (today: `addon-model-studio`)
 * contributes a list of `CustomModelDescriptor`s; the hub auto-concatenates
@@ -16232,6 +16348,272 @@ var deviceManagerCapability = {
 	}
 };
 /**
+* Doorbell button cap. Two kinds of providers coexist behind this cap
+* name (same pattern as `snapshot`):
+*
+*   - **Native** providers: registered per-device by device-driver
+*     addons via `ctx.registerNativeCap` — either on a
+*     `DeviceType.Button` accessory with `role: DeviceRole.Doorbell`,
+*     or directly on the camera (Reolink registers at camera level).
+*     Emits an `onPressed` event every time the firmware pushes a
+*     ring; status tracks the last press and a pressCount since start
+*     (diagnostic).
+*
+*   - **Wrapper** provider: the `virtual-doorbell` system builtin
+*     (`@camstack/system/builtins/doorbell`). Turns ANY binary-ish
+*     device (contact / switch / event-emitter …) into a doorbell for
+*     a camera. `defaultActive: false` — the operator explicitly binds
+*     it per camera in the device-bindings UI, then picks the source
+*     device + trigger in the per-device settings.
+*
+* The DeviceEventPropagator re-emits `onPressed` on the camera parent
+* — subscribers listening at the camera level receive ring events
+* with `via[]` populated. No code on the parent needed.
+*/
+var DoorbellStatusSchema = z.object({
+	/** Ms epoch of the last press. null = never observed since this provider started. */
+	lastPressedAt: z.number().nullable(),
+	/** Counter since provider start. Resets on reboot. Useful for metrics/debug. */
+	pressCountSinceStart: z.number()
+});
+var DoorbellPressEventSchema = z.object({
+	deviceId: z.number(),
+	timestamp: z.number()
+});
+/**
+* The `doorbell-source` extension slot's editable value (D648): the camera's
+* virtual-doorbell trigger devices, exactly what the wrapper's
+* `doorbellSources` persists (as `{ deviceId }` records).
+*/
+var DoorbellSourceSlotValueSchema = z.object({ deviceIds: z.array(z.number().int().positive()) });
+/**
+* The `doorbell-source` slot — which devices ring this camera's VIRTUAL
+* doorbell, owned by the `virtual-doorbell` wrapper over its
+* `doorbellSources` store (D648). A source rings when one of its
+* `SOURCE_CAPS` rises. Whether the wrapper is bound to the camera at all is a
+* different authority (`deviceManager.setWrapperActive`, D62) — the slot
+* reports it, it never writes it.
+*/
+var DOORBELL_SOURCE_SLOT = {
+	id: "doorbell-source",
+	label: "Doorbell trigger devices",
+	description: "Any of these becoming active rings this camera's virtual doorbell: a binary sensor when it goes active, a switch when it turns on.",
+	shape: "association",
+	hostDeviceTypes: [DeviceType.Camera],
+	sourceCaps: SOURCE_CAPS,
+	cardinality: "many",
+	value: DoorbellSourceSlotValueSchema
+};
+var doorbellCapability = {
+	name: "doorbell",
+	scope: "device",
+	deviceNative: true,
+	mode: "singleton",
+	kind: "wrapper",
+	defaultActive: false,
+	deviceTypes: [DeviceType.Button, DeviceType.Camera],
+	extensionSlots: [DOORBELL_SOURCE_SLOT],
+	methods: {},
+	events: { 
+	/**
+	* Fires once per physical press. Reolink delivers via Baichuan
+	* push (`ReolinkSimpleEvent.type === 'doorbell'`). There is no
+	* release/duration — it's a pulse.
+	*/
+onPressed: {
+		data: DoorbellPressEventSchema,
+		fromState: {
+			field: "lastPressedAt",
+			on: "advance"
+		}
+	} },
+	status: {
+		schema: DoorbellStatusSchema,
+		kind: "push"
+	},
+	/**
+	* Runtime-state slice — last press timestamp + lifetime press count.
+	* Mirrored by the kernel and readable via
+	* `device.state.doorbell.value`. UIs can show "last ring 5m ago"
+	* without subscribing.
+	*/
+	runtimeState: DoorbellStatusSchema,
+	/**
+	* Runtime-state durability: **restored** — a monotonic accumulator: the slice IS the record. `lastPressedAt` is content here, not a clock, so it is deliberately NOT volatile.
+	*
+	* See `RuntimeStateDurability`. Enforced by
+	* `scripts/check-runtime-state-durability.ts`.
+	*/
+	durability: "restored"
+};
+var ExtensionSlotIdSchema = z.enum(["doorbell-source", "linked-devices"]);
+var EXTENSION_SLOTS = {
+	"doorbell-source": {
+		descriptor: DOORBELL_SOURCE_SLOT,
+		declaringCap: "doorbell",
+		hostDeviceTypes: [DeviceType.Camera]
+	},
+	"linked-devices": {
+		descriptor: LINKED_DEVICES_SLOT,
+		declaringCap: "device-manager",
+		hostDeviceTypes: [DeviceType.Camera]
+	}
+};
+/** A slot's editable value, discriminated on `slot`. */
+var ExtensionSlotValueSchema = z.discriminatedUnion("slot", [DoorbellSourceSlotValueSchema.extend({ slot: z.literal("doorbell-source") }), LinkedDevicesSlotValueSchema.extend({ slot: z.literal("linked-devices") })]);
+/** Every device type at least one slot is offered on — `device-extension`'s `deviceTypes`. */
+var EXTENSION_HOST_DEVICE_TYPES = [DeviceType.Camera];
+var ExtensionSourceAvailabilitySchema = z.discriminatedUnion("state", [z.object({ state: z.literal("ok") }), z.object({
+	state: z.literal("unreachable"),
+	reason: z.string()
+})]);
+/** One provider of slots — the D554 source-listing row. */
+var ExtensionSourceSchema = z.object({
+	/** The routing prefix of every `slotRef` this provider serves. */
+	source: z.string(),
+	label: z.string(),
+	/** Stamped by the dispatcher from the registry (D557). */
+	addonId: z.string().optional(),
+	availability: ExtensionSourceAvailabilitySchema
+});
+/**
+* How one picked source stands. `missing` — no such device (deleted, or an id
+* that never existed); `foreign` — a device the slot's owner cannot read from
+* (a source owned by another addon); `unavailable` — it exists but is not a
+* valid source now (a container, which is never a pick). A source in any of
+* these states is SHOWN, never silently dropped or re-pointed.
+*/
+var ExtensionSourceHealthSchema = z.enum([
+	"ok",
+	"missing",
+	"foreign",
+	"unavailable"
+]);
+var ExtensionSlotSourceSchema = z.object({
+	deviceId: z.number().int(),
+	/** The device's name, or null when it could not be resolved (`missing`). */
+	name: z.string().nullable(),
+	health: ExtensionSourceHealthSchema,
+	detail: z.string().optional()
+});
+/**
+* A DIFFERENT authority that gates whether the slot's sources do anything —
+* reported read-only, named, never written through this contract (D62). The
+* virtual doorbell's sources ring only while the wrapper is bound to the
+* camera, and that binding belongs to `deviceManager.setWrapperActive`.
+* `unknown` means the gate could not be read; it is not "inactive" (D315).
+*/
+var ExtensionSlotActivationSchema = z.object({
+	state: z.enum([
+		"active",
+		"inactive",
+		"unknown"
+	]),
+	authority: z.string(),
+	detail: z.string().optional()
+});
+/** One slot of one device, as its owner reads it from its own store. */
+var ExtensionSlotStateSchema = z.object({
+	state: z.literal("ok"),
+	/** `<source>:<slotId>` — the routing key for `listCandidates` / `setSlot`. */
+	slotRef: z.string(),
+	slot: ExtensionSlotIdSchema,
+	/** Names the store written (D62), e.g. `virtual-doorbell:doorbellSources`. */
+	authority: z.string(),
+	activation: ExtensionSlotActivationSchema.nullable(),
+	value: ExtensionSlotValueSchema,
+	sources: z.array(ExtensionSlotSourceSchema),
+	/**
+	* Devices the owner links to the host ON ITS OWN, by structure, and that
+	* are therefore not in `value` (D655): a camera's device-tree children, and
+	* the child a picked container stands for (D356 — a container is never a
+	* pick, its children are). Read-only; the editor shows them and may offer
+	* per-device options on them (the linked-devices tracked-event opt-in).
+	* Absent when the owner links nothing beyond the picks, and from an owner
+	* older than D655.
+	*/
+	impliedSources: z.array(ExtensionSlotSourceSchema).optional()
+});
+/**
+* A provider that could not answer `listSlots` at all. It could not name its
+* own slots, so the row names the ADDON and carries the refusal verbatim.
+* Written by the dispatcher, never by a provider.
+*/
+var ExtensionSlotUnreachableSchema = z.object({
+	state: z.literal("unreachable"),
+	addonId: z.string(),
+	reason: z.string()
+});
+var ExtensionSlotRowSchema = z.discriminatedUnion("state", [ExtensionSlotStateSchema, ExtensionSlotUnreachableSchema]);
+/** One device the slot's editor may offer as a source. */
+var ExtensionCandidateSchema = z.object({
+	deviceId: z.number().int(),
+	name: z.string(),
+	type: z.string(),
+	location: z.string().nullable(),
+	/** The container a child belongs to — "Spotlight 2" alone does not say which. */
+	parentName: z.string().nullable(),
+	/** Pre-marked by the owner's suggestion rule. NEVER saved on its own (D356). */
+	suggested: z.boolean(),
+	/** Why it is suggested ("same location"), null when it is not. */
+	reason: z.string().nullable()
+});
+var ExtensionCandidatesSchema = z.object({ candidates: z.array(ExtensionCandidateSchema) });
+/**
+* What a write did. `none` — applied in place. `host` / `parent` — the owner
+* reloaded the host (or, for an accessory child, its parent) because the
+* write changed what the host REGISTERS. A slot never adds a capability to its
+* host — that is a composition (D663) — so today's owners answer `none`.
+*/
+var ExtensionSetResultSchema = z.object({
+	applied: z.literal(true),
+	reload: z.enum([
+		"none",
+		"host",
+		"parent"
+	])
+});
+var ExtensionSlotRefInputSchema = z.object({
+	deviceId: z.number().int(),
+	slotRef: z.string().min(1)
+});
+var ExtensionSetSlotInputSchema = ExtensionSlotRefInputSchema.extend({ value: ExtensionSlotValueSchema });
+var deviceExtensionCapability = {
+	name: "device-extension",
+	scope: "device",
+	mode: "collection",
+	kind: "wrapper",
+	defaultActive: true,
+	deviceTypes: EXTENSION_HOST_DEVICE_TYPES,
+	deviceConfig: { ui: {
+		kind: "widget",
+		widgetId: "host/extensions-panel",
+		tab: "general",
+		label: "Extensions",
+		order: 72
+	} },
+	methods: {
+		/** One row per slot owner — the D554 source listing `slotRef` routes by. */
+		listSources: method(z.object({ deviceId: z.number().int() }), z.array(ExtensionSourceSchema)),
+		/**
+		* Every slot this device is offered, read by each owner from its own
+		* store. A provider that throws is ONE `unreachable` row (D554.4).
+		*/
+		listSlots: method(z.object({ deviceId: z.number().int() }), z.array(ExtensionSlotRowSchema)),
+		/** The devices the slot's editor may offer, suggestions pre-marked (D356). */
+		listCandidates: method(ExtensionSlotRefInputSchema, ExtensionCandidatesSchema),
+		/**
+		* Write one slot through its owner's EXISTING write path. The owner
+		* validates (a container is never a linked device, a camera is never its
+		* own source) and refuses by name before persisting.
+		*/
+		setSlot: method(ExtensionSetSlotInputSchema, ExtensionSetResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		})
+	}
+};
+/**
 * Per-field ownership (D663). A composition may CLAIM fields of a native
 * cap's runtime-state slice on an existing device: `replace` overlays the
 * claimed fields on the native slice, `add` builds a slice the device does
@@ -19746,17 +20128,25 @@ var NcScheduleSchema = z.object({
 */
 var NcSystemEventDeliveryModeSchema = z.enum(["instant", "summary"]);
 /**
+* How a summary window is SENT (D698): `rule` (absent) = ONE notification with
+* every section; `section` = one notification per section with something to
+* say (an unavailable section included), each titled by its section.
+*/
+var NcStateSummarySplitSchema = z.enum(["rule", "section"]);
+/**
 * `summary`: the rule sends NOTHING per event. When a window of `schedule`
 * CLOSES, it sends one notification with the current state of its kinds
 * (low batteries, consumables to replace, devices offline, updates
-* available, ...), after its own filters. Nothing to report sends nothing.
+* available, ...), after its own filters — or, with `split: 'section'`
+* (D698), one notification per section. Nothing to report sends nothing.
 * The schedule is the ordinary `NcSchedule` (weekly windows, IANA timezone,
 * midnight crossing); the send time is each window's END. Refused on the
 * `alarm` family, which stays instant (`systemEventDeliveryProblems`).
 */
 var NcSystemEventDeliverySchema = z.discriminatedUnion("mode", [z.object({ mode: z.literal("instant") }), z.object({
 	mode: z.literal("summary"),
-	schedule: NcScheduleSchema
+	schedule: NcScheduleSchema,
+	split: NcStateSummarySplitSchema.optional()
 })]);
 /** Fuzzy plate matcher — OCR noise makes exact match useless (spec row 12/13). */
 var NcPlateMatcherSchema = z.object({
@@ -20755,11 +21145,23 @@ var NcStateSummaryPreviewSectionSchema = z.object({
 	reason: z.string().optional()
 });
 /**
+* One notification a previewed summary would send (D698): the whole summary on
+* a `rule` split (no `section`), one section's on a `section` split.
+*/
+var NcStateSummaryPreviewRowSchema = z.object({
+	section: z.string().optional(),
+	/** The section's name on a per-section row; every reported section's, joined, on a combined one. */
+	title: z.string(),
+	text: z.string(),
+	count: z.number().int().nonnegative()
+});
+/**
 * The summary a rule would send now. `empty` = nothing to report and every
 * section read: such a summary is NOT sent. `dropped` counts the open states
 * the rule's own filters (or a camera mute) left out, by reason.
 * `excludedGroups` names the kind groups selected that have no state to report
-* (backups & exports).
+* (backups & exports). `split` and `rows` (D698) say how it would be sent —
+* optional, so an older hub's answer still parses.
 */
 var NcStateSummaryPreviewSchema = z.object({
 	empty: z.boolean(),
@@ -20767,7 +21169,9 @@ var NcStateSummaryPreviewSchema = z.object({
 	text: z.string(),
 	sections: z.array(NcStateSummaryPreviewSectionSchema),
 	dropped: z.record(z.string(), z.number().int().nonnegative()),
-	excludedGroups: z.array(z.string())
+	excludedGroups: z.array(z.string()),
+	split: NcStateSummarySplitSchema.optional(),
+	rows: z.array(NcStateSummaryPreviewRowSchema).optional()
 });
 var NcTestResultSchema = z.object({
 	recordId: z.string(),
@@ -30708,272 +31112,6 @@ var videoclipsCapability = {
 	}
 };
 /**
-* Doorbell button cap. Two kinds of providers coexist behind this cap
-* name (same pattern as `snapshot`):
-*
-*   - **Native** providers: registered per-device by device-driver
-*     addons via `ctx.registerNativeCap` — either on a
-*     `DeviceType.Button` accessory with `role: DeviceRole.Doorbell`,
-*     or directly on the camera (Reolink registers at camera level).
-*     Emits an `onPressed` event every time the firmware pushes a
-*     ring; status tracks the last press and a pressCount since start
-*     (diagnostic).
-*
-*   - **Wrapper** provider: the `virtual-doorbell` system builtin
-*     (`@camstack/system/builtins/doorbell`). Turns ANY binary-ish
-*     device (contact / switch / event-emitter …) into a doorbell for
-*     a camera. `defaultActive: false` — the operator explicitly binds
-*     it per camera in the device-bindings UI, then picks the source
-*     device + trigger in the per-device settings.
-*
-* The DeviceEventPropagator re-emits `onPressed` on the camera parent
-* — subscribers listening at the camera level receive ring events
-* with `via[]` populated. No code on the parent needed.
-*/
-var DoorbellStatusSchema = z.object({
-	/** Ms epoch of the last press. null = never observed since this provider started. */
-	lastPressedAt: z.number().nullable(),
-	/** Counter since provider start. Resets on reboot. Useful for metrics/debug. */
-	pressCountSinceStart: z.number()
-});
-var DoorbellPressEventSchema = z.object({
-	deviceId: z.number(),
-	timestamp: z.number()
-});
-/**
-* The `doorbell-source` extension slot's editable value (D648): the camera's
-* virtual-doorbell trigger devices, exactly what the wrapper's
-* `doorbellSources` persists (as `{ deviceId }` records).
-*/
-var DoorbellSourceSlotValueSchema = z.object({ deviceIds: z.array(z.number().int().positive()) });
-/**
-* The `doorbell-source` slot — which devices ring this camera's VIRTUAL
-* doorbell, owned by the `virtual-doorbell` wrapper over its
-* `doorbellSources` store (D648). A source rings when one of its
-* `SOURCE_CAPS` rises. Whether the wrapper is bound to the camera at all is a
-* different authority (`deviceManager.setWrapperActive`, D62) — the slot
-* reports it, it never writes it.
-*/
-var DOORBELL_SOURCE_SLOT = {
-	id: "doorbell-source",
-	label: "Doorbell trigger devices",
-	description: "Any of these becoming active rings this camera's virtual doorbell: a binary sensor when it goes active, a switch when it turns on.",
-	shape: "association",
-	hostDeviceTypes: [DeviceType.Camera],
-	sourceCaps: SOURCE_CAPS,
-	cardinality: "many",
-	value: DoorbellSourceSlotValueSchema
-};
-var doorbellCapability = {
-	name: "doorbell",
-	scope: "device",
-	deviceNative: true,
-	mode: "singleton",
-	kind: "wrapper",
-	defaultActive: false,
-	deviceTypes: [DeviceType.Button, DeviceType.Camera],
-	extensionSlots: [DOORBELL_SOURCE_SLOT],
-	methods: {},
-	events: { 
-	/**
-	* Fires once per physical press. Reolink delivers via Baichuan
-	* push (`ReolinkSimpleEvent.type === 'doorbell'`). There is no
-	* release/duration — it's a pulse.
-	*/
-onPressed: {
-		data: DoorbellPressEventSchema,
-		fromState: {
-			field: "lastPressedAt",
-			on: "advance"
-		}
-	} },
-	status: {
-		schema: DoorbellStatusSchema,
-		kind: "push"
-	},
-	/**
-	* Runtime-state slice — last press timestamp + lifetime press count.
-	* Mirrored by the kernel and readable via
-	* `device.state.doorbell.value`. UIs can show "last ring 5m ago"
-	* without subscribing.
-	*/
-	runtimeState: DoorbellStatusSchema,
-	/**
-	* Runtime-state durability: **restored** — a monotonic accumulator: the slice IS the record. `lastPressedAt` is content here, not a clock, so it is deliberately NOT volatile.
-	*
-	* See `RuntimeStateDurability`. Enforced by
-	* `scripts/check-runtime-state-durability.ts`.
-	*/
-	durability: "restored"
-};
-var ExtensionSlotIdSchema = z.enum(["doorbell-source", "linked-devices"]);
-var EXTENSION_SLOTS = {
-	"doorbell-source": {
-		descriptor: DOORBELL_SOURCE_SLOT,
-		declaringCap: "doorbell",
-		hostDeviceTypes: [DeviceType.Camera]
-	},
-	"linked-devices": {
-		descriptor: LINKED_DEVICES_SLOT,
-		declaringCap: "device-manager",
-		hostDeviceTypes: [DeviceType.Camera]
-	}
-};
-/** A slot's editable value, discriminated on `slot`. */
-var ExtensionSlotValueSchema = z.discriminatedUnion("slot", [DoorbellSourceSlotValueSchema.extend({ slot: z.literal("doorbell-source") }), LinkedDevicesSlotValueSchema.extend({ slot: z.literal("linked-devices") })]);
-/** Every device type at least one slot is offered on — `device-extension`'s `deviceTypes`. */
-var EXTENSION_HOST_DEVICE_TYPES = [DeviceType.Camera];
-var ExtensionSourceAvailabilitySchema = z.discriminatedUnion("state", [z.object({ state: z.literal("ok") }), z.object({
-	state: z.literal("unreachable"),
-	reason: z.string()
-})]);
-/** One provider of slots — the D554 source-listing row. */
-var ExtensionSourceSchema = z.object({
-	/** The routing prefix of every `slotRef` this provider serves. */
-	source: z.string(),
-	label: z.string(),
-	/** Stamped by the dispatcher from the registry (D557). */
-	addonId: z.string().optional(),
-	availability: ExtensionSourceAvailabilitySchema
-});
-/**
-* How one picked source stands. `missing` — no such device (deleted, or an id
-* that never existed); `foreign` — a device the slot's owner cannot read from
-* (a source owned by another addon); `unavailable` — it exists but is not a
-* valid source now (a container, which is never a pick). A source in any of
-* these states is SHOWN, never silently dropped or re-pointed.
-*/
-var ExtensionSourceHealthSchema = z.enum([
-	"ok",
-	"missing",
-	"foreign",
-	"unavailable"
-]);
-var ExtensionSlotSourceSchema = z.object({
-	deviceId: z.number().int(),
-	/** The device's name, or null when it could not be resolved (`missing`). */
-	name: z.string().nullable(),
-	health: ExtensionSourceHealthSchema,
-	detail: z.string().optional()
-});
-/**
-* A DIFFERENT authority that gates whether the slot's sources do anything —
-* reported read-only, named, never written through this contract (D62). The
-* virtual doorbell's sources ring only while the wrapper is bound to the
-* camera, and that binding belongs to `deviceManager.setWrapperActive`.
-* `unknown` means the gate could not be read; it is not "inactive" (D315).
-*/
-var ExtensionSlotActivationSchema = z.object({
-	state: z.enum([
-		"active",
-		"inactive",
-		"unknown"
-	]),
-	authority: z.string(),
-	detail: z.string().optional()
-});
-/** One slot of one device, as its owner reads it from its own store. */
-var ExtensionSlotStateSchema = z.object({
-	state: z.literal("ok"),
-	/** `<source>:<slotId>` — the routing key for `listCandidates` / `setSlot`. */
-	slotRef: z.string(),
-	slot: ExtensionSlotIdSchema,
-	/** Names the store written (D62), e.g. `virtual-doorbell:doorbellSources`. */
-	authority: z.string(),
-	activation: ExtensionSlotActivationSchema.nullable(),
-	value: ExtensionSlotValueSchema,
-	sources: z.array(ExtensionSlotSourceSchema),
-	/**
-	* Devices the owner links to the host ON ITS OWN, by structure, and that
-	* are therefore not in `value` (D655): a camera's device-tree children, and
-	* the child a picked container stands for (D356 — a container is never a
-	* pick, its children are). Read-only; the editor shows them and may offer
-	* per-device options on them (the linked-devices tracked-event opt-in).
-	* Absent when the owner links nothing beyond the picks, and from an owner
-	* older than D655.
-	*/
-	impliedSources: z.array(ExtensionSlotSourceSchema).optional()
-});
-/**
-* A provider that could not answer `listSlots` at all. It could not name its
-* own slots, so the row names the ADDON and carries the refusal verbatim.
-* Written by the dispatcher, never by a provider.
-*/
-var ExtensionSlotUnreachableSchema = z.object({
-	state: z.literal("unreachable"),
-	addonId: z.string(),
-	reason: z.string()
-});
-var ExtensionSlotRowSchema = z.discriminatedUnion("state", [ExtensionSlotStateSchema, ExtensionSlotUnreachableSchema]);
-/** One device the slot's editor may offer as a source. */
-var ExtensionCandidateSchema = z.object({
-	deviceId: z.number().int(),
-	name: z.string(),
-	type: z.string(),
-	location: z.string().nullable(),
-	/** The container a child belongs to — "Spotlight 2" alone does not say which. */
-	parentName: z.string().nullable(),
-	/** Pre-marked by the owner's suggestion rule. NEVER saved on its own (D356). */
-	suggested: z.boolean(),
-	/** Why it is suggested ("same location"), null when it is not. */
-	reason: z.string().nullable()
-});
-var ExtensionCandidatesSchema = z.object({ candidates: z.array(ExtensionCandidateSchema) });
-/**
-* What a write did. `none` — applied in place. `host` / `parent` — the owner
-* reloaded the host (or, for an accessory child, its parent) because the
-* write changed what the host REGISTERS. A slot never adds a capability to its
-* host — that is a composition (D663) — so today's owners answer `none`.
-*/
-var ExtensionSetResultSchema = z.object({
-	applied: z.literal(true),
-	reload: z.enum([
-		"none",
-		"host",
-		"parent"
-	])
-});
-var ExtensionSlotRefInputSchema = z.object({
-	deviceId: z.number().int(),
-	slotRef: z.string().min(1)
-});
-var ExtensionSetSlotInputSchema = ExtensionSlotRefInputSchema.extend({ value: ExtensionSlotValueSchema });
-var deviceExtensionCapability = {
-	name: "device-extension",
-	scope: "device",
-	mode: "collection",
-	kind: "wrapper",
-	defaultActive: true,
-	deviceTypes: EXTENSION_HOST_DEVICE_TYPES,
-	deviceConfig: { ui: {
-		kind: "widget",
-		widgetId: "host/extensions-panel",
-		tab: "general",
-		label: "Extensions",
-		order: 72
-	} },
-	methods: {
-		/** One row per slot owner — the D554 source listing `slotRef` routes by. */
-		listSources: method(z.object({ deviceId: z.number().int() }), z.array(ExtensionSourceSchema)),
-		/**
-		* Every slot this device is offered, read by each owner from its own
-		* store. A provider that throws is ONE `unreachable` row (D554.4).
-		*/
-		listSlots: method(z.object({ deviceId: z.number().int() }), z.array(ExtensionSlotRowSchema)),
-		/** The devices the slot's editor may offer, suggestions pre-marked (D356). */
-		listCandidates: method(ExtensionSlotRefInputSchema, ExtensionCandidatesSchema),
-		/**
-		* Write one slot through its owner's EXISTING write path. The owner
-		* validates (a container is never a linked device, a camera is never its
-		* own source) and refuses by name before persisting.
-		*/
-		setSlot: method(ExtensionSetSlotInputSchema, ExtensionSetResultSchema, {
-			kind: "mutation",
-			auth: "admin"
-		})
-	}
-};
-/**
 * Optional client-side hints sent at session creation to help the provider
 * pick the best native source. All fields optional — a viewer that knows
 * nothing still gets a sane default. (Relocated from the retired `webrtc`
@@ -47463,6 +47601,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	coverCapability,
 	customModelRegistryCapability,
 	dataStoreProviderCapability,
+	databaseSnapshotCapability,
 	dayNightCapability,
 	decoderCapability,
 	detectionPipelineCapability,
@@ -48725,6 +48864,18 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"databaseSnapshot.listDatabases": {
+		capName: "database-snapshot",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"databaseSnapshot.writeSnapshot": {
+		capName: "database-snapshot",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"dataStoreProvider.aggregate": {
 		capName: "data-store-provider",
 		capScope: "system",
@@ -57553,6 +57704,18 @@ var STATE_SUMMARY_VARS = [
 		systemEventKinds: [...SUMMARISABLE],
 		systemEventDeliveries: ["summary"]
 	},
+	{
+		name: "summarySection",
+		label: "Summary: this section",
+		description: "The section a per-section summary row is about (D698); on a summary sent as one message, every section it reports, comma-separated.",
+		example: "Batterie scariche",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [...SUMMARISABLE],
+		systemEventDeliveries: ["summary"]
+	},
 	...STATE_SUMMARY_SECTION_VARS.map((v) => ({
 		name: v.name,
 		label: v.label,
@@ -58241,4 +58404,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { compositionSourceRefs as $, WELL_KNOWN_TAB_MAP as $n, parseStreamParamsFormPatch as $t, STORAGE_ACCESS_FALLBACK as A, SOURCE_CAPS as An, isCollectionArrayMethod as At, addonWidgetsCapability as B, evaluateSensorEdge as Bn, locationIconKey as Bt, METHOD_ACCESS_MAP as C, validateComposition as Cn, expandContainer as Ct, REDACTED_SECRET as D, withLocationMode as Dn, formatMinutes as Dt, RECORDING_SOURCE_CAMSTACK_ADDON as E, vectorStoreCapability as En, foldSnapshotByFunction as Et, StorageLocationTypeSchema as F, compositionFeatureEnabled as Fn, kebabToCamel as Ft, batteryCapability as G, DeviceType as Gn, mayWriteToLocation as Gt, authProviderCapability as H, toExpressionValue as Hn, logLevelAtMost as Ht, StorageMigrationJobSchema as I, compositionItemFieldPath as In, legacyAutoLinkIds as It, buildStreamParamsConfigSchema as J, DATAPLANE_SECRET_HEADER as Jn, modeMayWrite as Jt, buildCapabilityLookup as K, errMsg as Kn, memoizePinnedFfmpeg as Kt, UserRecordSchema as L, compositionSliceKey as Ln, legacyModeOf as Lt, ScopedTokenSchema as M, cloneStatefulExpressionMemory as Mn, isObjectInput as Mt, StorageCleanupJobSchema as N, composedDeviceRef as Nn, isSameAddonId as Nt, RUNTIME_DEFAULTS as O, COMPOSER_ADDON_ID as On, gbToBytes as Ot, StorageLocationModeSchema as P, composedDeviceStableId as Pn, isVoidInput as Pt, compositionFieldKey as Q, ReadinessTimeoutError as Qn, objectInputDeclaresRequiredDeviceId as Qt, addonPagesCapability as R, compositionSourceKey as Rn, lifecycleJobSchema as Rt, LocationIconIdSchema as S, userManagementCapability as Sn, evictionPolicyOfLocation as St, MOTION_CLOSE_AFTER_MS as T, vectorIndexDimConflictError as Tn, filesystemBrowseCapability as Tt, backupCapability as U, DeviceFeature as Un, looseSchema as Ut, alertsCapability as V, isSourceCap as Vn, logDestinationCapability as Vt, bareAddonId as W, DeviceRole as Wn, mayReadLocation as Wt, collectSecretConfigKeys as X, DEVICE_STATUS_METHOD as Xn, normalizeUnit as Xt, cameraGridLayoutCapability as Y, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Yn, motionCapability as Yt, composerCapability as Z, ReadinessRegistry as Zn, objectInputDeclaresAddonId as Zt, FIRST_LEVEL_MACRO_CLASSES as _, storageMigrationCapability as _n, EventCategory as _r, doorbellFeatureSources as _t, BatteryStatusSchema as a, replacedFieldKeys as an, emitReadiness as ar, createDeviceExtensionProvider as at, LOG_LEVEL_RANK as b, streamCatalogCapability as bn, enumerateSchemaFields as bt, COMPOSED_ITEM_FIXED_FIELDS as c, resolveMethodAuth as cn, isDeviceConfigCap as cr, decodeVectorBase64 as ct, CORE_BLOCK_ADDON_PREFIX as d, scopesAllowDeviceCap as dn, parseJsonObject as dr, describeComposableCaps as dt, planComposition as en, asJsonObject as er, coreBlockAddonId as et, CoreBlockSchema as f, scoreRuntimes as fn, parseJsonUnknown as fr, deviceExtensionCapability as ft, DeviceStatusSchema as g, storageCapability as gn, sleep as gr, doorbellCapability as gt, DeclaredDevices as h, snapshotCapability as hn, scopeKey as hr, deviceStatusCapability as ht, BaseDevice as i, reducePoints as in, emitDownForOwnedCaps as ir, coreBlocksCapability as it, STREAM_PROFILE_META as j, buildFfmpegArgs as jn, isLocationEnabled as jt, RecordingStatusSchema as k, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as kn, isArrayOutputSchema as kt, COMPOSER_RUNNER_ID as l, runtimeStatePolicyFor as ln, isEvent as lr, defineExtensionSlotProvider as lt, DERIVED_CAMERA_SILENCED_CAP_NAMES as m, siteZoneKey as mn, resolveCapMount as mr, deviceStateCapability as mt, AlertSchema as n, procedureAuthKey as nn, asString$1 as nr, coreBlockIdFromAddonId as nt, CAMERA_SWITCH_ORDER as o, resolveBucketMs as on, expandCapMethods as or, dataStoreProviderCapability as ot, DAY_NAMES as p, settingsStoreCapability as pn, readinessKey as pr, deviceManagerCapability as pt, buildDoorbellCompositionFeature as q, BaseAddon as qn, metricsProviderCapability as qt, ApiKeyRecordSchema as r, ptzAutotrackCapability as rn, createEvent as rr, coreBlockSourceKind as rt, CAP_NAMES_WITH_STATUS as s, resolveLocationMode as sn, hydrateSchema as sr, declarationOwnerNodeId as st, ALL_CAPABILITY_DEFINITIONS as t, platformProbeCapability as tn, asNumber as tr, coreBlockComposition as tt, CORE_BLOCKS_ADDON_ID as u, scopesAllowAddon as un, nodePin as ur, deriveBatteryPresence as ut, FieldClaimModeSchema as v, storageOccupancyCapability as vn, enumerateInferenceDevices as vt, MINUTES_PER_DAY as w, vectorDimFromBase64 as wn, extractNestedAddonId as wt, LegacyStorageLocationDefaultSchema as x, streamQualityLabel as xn, evaluateCompositionField as xt, FieldClaimSchema as y, storageProviderCapability as yn, enumerateItemArrayFields as yt, addonSettingsCapability as z, createStatefulExpressionMemory as zn, localNetworkCapability as zt };
+export { collectSecretConfigKeys as $, DEVICE_SETTINGS_CONTRIBUTION_METHODS as $n, motionCapability as $t, REDACTED_SECRET as A, vectorStoreCapability as An, foldSnapshotByFunction as At, UserRecordSchema as B, compositionItemFieldPath as Bn, legacyAutoLinkIds as Bt, LOG_LEVEL_RANK as C, storageProviderCapability as Cn, enumerateItemArrayFields as Ct, MINUTES_PER_DAY as D, validateComposition as Dn, expandContainer as Dt, METHOD_ACCESS_MAP as E, userManagementCapability as En, evictionPolicyOfLocation as Et, ScopedTokenSchema as F, buildFfmpegArgs as Fn, isLocationEnabled as Ft, authProviderCapability as G, isSourceCap as Gn, logDestinationCapability as Gt, addonSettingsCapability as H, compositionSourceKey as Hn, lifecycleJobSchema as Ht, StorageCleanupJobSchema as I, cloneStatefulExpressionMemory as In, isObjectInput as It, batteryCapability as J, DeviceRole as Jn, mayReadLocation as Jt, backupCapability as K, toExpressionValue as Kn, logLevelAtMost as Kt, StorageLocationModeSchema as L, composedDeviceRef as Ln, isSameAddonId as Lt, RecordingStatusSchema as M, COMPOSER_ADDON_ID as Mn, gbToBytes as Mt, STORAGE_ACCESS_FALLBACK as N, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as Nn, isArrayOutputSchema as Nt, MOTION_CLOSE_AFTER_MS as O, vectorDimFromBase64 as On, extractNestedAddonId as Ot, STREAM_PROFILE_META as P, SOURCE_CAPS as Pn, isCollectionArrayMethod as Pt, cameraGridLayoutCapability as Q, DATAPLANE_SECRET_HEADER as Qn, modeMayWrite as Qt, StorageLocationTypeSchema as R, composedDeviceStableId as Rn, isVoidInput as Rt, FieldClaimSchema as S, storageOccupancyCapability as Sn, EventCategory as Sr, enumerateInferenceDevices as St, LocationIconIdSchema as T, streamQualityLabel as Tn, evaluateCompositionField as Tt, addonWidgetsCapability as U, createStatefulExpressionMemory as Un, localNetworkCapability as Ut, addonPagesCapability as V, compositionSliceKey as Vn, legacyModeOf as Vt, alertsCapability as W, evaluateSensorEdge as Wn, locationIconKey as Wt, buildDoorbellCompositionFeature as X, errMsg as Xn, memoizePinnedFfmpeg as Xt, buildCapabilityLookup as Y, DeviceType as Yn, mayWriteToLocation as Yt, buildStreamParamsConfigSchema as Z, BaseAddon as Zn, metricsProviderCapability as Zt, DERIVED_CAMERA_SILENCED_CAP_NAMES as _, settingsStoreCapability as _n, readinessKey as _r, deviceManagerCapability as _t, BatteryStatusSchema as a, platformProbeCapability as an, asNumber as ar, coreBlockIdFromAddonId as at, FIRST_LEVEL_MACRO_CLASSES as b, storageCapability as bn, sleep as br, doorbellCapability as bt, COMPOSED_ITEM_FIXED_FIELDS as c, reducePoints as cn, emitDownForOwnedCaps as cr, createDeviceExtensionProvider as ct, CORE_BLOCK_ADDON_PREFIX as d, resolveLocationMode as dn, hydrateSchema as dr, declarationOwnerNodeId as dt, normalizeUnit as en, DEVICE_STATUS_METHOD as er, composerCapability as et, CoreBlockSchema as f, resolveMethodAuth as fn, isDeviceConfigCap as fr, decodeVectorBase64 as ft, DAY_NAMES as g, scoreRuntimes as gn, parseJsonUnknown as gr, deviceExtensionCapability as gt, DATABASE_SNAPSHOT_TIMEOUT_MS as h, scopesAllowDeviceCap as hn, parseJsonObject as hr, describeComposableCaps as ht, BaseDevice as i, planComposition as in, asJsonObject as ir, coreBlockComposition as it, RUNTIME_DEFAULTS as j, withLocationMode as jn, formatMinutes as jt, RECORDING_SOURCE_CAMSTACK_ADDON as k, vectorIndexDimConflictError as kn, filesystemBrowseCapability as kt, COMPOSER_RUNNER_ID as l, replacedFieldKeys as ln, emitReadiness as lr, dataStoreProviderCapability as lt, DATABASE_SNAPSHOT_SUFFIX as m, scopesAllowAddon as mn, nodePin as mr, deriveBatteryPresence as mt, AlertSchema as n, objectInputDeclaresRequiredDeviceId as nn, ReadinessTimeoutError as nr, compositionSourceRefs as nt, CAMERA_SWITCH_ORDER as o, procedureAuthKey as on, asString$1 as or, coreBlockSourceKind as ot, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as p, runtimeStatePolicyFor as pn, isEvent as pr, defineExtensionSlotProvider as pt, bareAddonId as q, DeviceFeature as qn, looseSchema as qt, ApiKeyRecordSchema as r, parseStreamParamsFormPatch as rn, WELL_KNOWN_TAB_MAP as rr, coreBlockAddonId as rt, CAP_NAMES_WITH_STATUS as s, ptzAutotrackCapability as sn, createEvent as sr, coreBlocksCapability as st, ALL_CAPABILITY_DEFINITIONS as t, objectInputDeclaresAddonId as tn, ReadinessRegistry as tr, compositionFieldKey as tt, CORE_BLOCKS_ADDON_ID as u, resolveBucketMs as un, expandCapMethods as ur, databaseSnapshotCapability as ut, DeclaredDevices as v, siteZoneKey as vn, resolveCapMount as vr, deviceStateCapability as vt, LegacyStorageLocationDefaultSchema as w, streamCatalogCapability as wn, enumerateSchemaFields as wt, FieldClaimModeSchema as x, storageMigrationCapability as xn, toNodeId as xr, doorbellFeatureSources as xt, DeviceStatusSchema as y, snapshotCapability as yn, scopeKey as yr, deviceStatusCapability as yt, StorageMigrationJobSchema as z, compositionFeatureEnabled as zn, kebabToCamel as zt };