@camstack/system 1.2.342 → 1.2.344

package/dist/{dist-BYHMg5zg.mjs → dist-0zO6jHkf.mjs}

@@ -21413,19 +21413,52 @@ var NcAlarmNonBlockingEditSchema = z.object({
 	nonBlocking: z.boolean()
 });
 /**
-* One arm mode's non-blocking list: devices that may be open when that mode
-* arms, without the arm being refused.
+* Controllable openings: opt IN to blocking (default is do not block). Contacts
+* keep using {@link NcAlarmNonBlockingEditSchema}.
+*/
+var NcAlarmBlockingEditSchema = z.object({
+	mode: AlarmArmModeSchema,
+	deviceId: z.number().int().positive(),
+	/** true = on the list (blocks when open); false = off the list (default). */
+	blocking: z.boolean()
+});
+/**
+* Controllable openings: opt OUT of secure-on-arm (default is secure ON —
+* close / lock / turn off when this mode arms).
+*/
+var NcAlarmSecureOnArmEditSchema = z.object({
+	mode: AlarmArmModeSchema,
+	deviceId: z.number().int().positive(),
+	/** true = secure on arm (default); false = do not actuate on arm. */
+	secureOnArm: z.boolean()
+});
+/**
+* One arm mode's device-id list (non-blocking, blocking, or secure-on-arm-off).
 */
-var NcAlarmNonBlockingSchema = z.object({
+var NcAlarmModeDeviceListSchema = z.object({
 	mode: AlarmArmModeSchema,
 	deviceIds: z.array(z.number().int()).max(200)
 });
 /**
+* One arm mode's non-blocking list: devices that may be open when that mode
+* arms, without the arm being refused.
+*/
+var NcAlarmNonBlockingSchema = NcAlarmModeDeviceListSchema;
+/** Controllable devices that DO block when open (opt-in; default empty). */
+var NcAlarmBlockingSchema = NcAlarmModeDeviceListSchema;
+/**
+* Controllable devices that do NOT secure on arm (opt-out; default empty =
+* every controllable secures).
+*/
+var NcAlarmSecureOnArmOffSchema = NcAlarmModeDeviceListSchema;
+/**
 * The per-mode lists, at most one per mode. Two lists for one mode have no
 * meaning a reader could agree on (union? the last one?), so they are refused
 * at the boundary rather than interpreted.
 */
 var NcAlarmNonBlockingListSchema = z.array(NcAlarmNonBlockingSchema).max(8).refine(uniqueModes, { message: "nonBlocking: at most one list per arm mode" });
+var NcAlarmBlockingListSchema = z.array(NcAlarmBlockingSchema).max(8).refine(uniqueModes, { message: "blocking: at most one list per arm mode" });
+var NcAlarmSecureOnArmOffListSchema = z.array(NcAlarmSecureOnArmOffSchema).max(8).refine(uniqueModes, { message: "secureOnArmOff: at most one list per arm mode" });
 /**
 * The three durations — global, and per mode since D697 — the panel's state
 * machine runs on, who hears about its transitions, and which openings each mode tolerates.
@@ -21468,9 +21501,23 @@ var NcAlarmSettingsSchema = z.object({
 	* arm (a window left ajar for the cat under `home`, say). At most one entry
 	* per mode is meaningful. Defaulted to `[]` so a blob stored before D630
 	* parses as "every opening blocks" — the behaviour it was written under.
+	* Contacts use this list; controllable openings use {@link blocking} instead
+	* (default: do not block).
 	*/
 	nonBlocking: NcAlarmNonBlockingListSchema.default([]),
 	/**
+	* Per arm mode, controllable openings that DO refuse the arm when open.
+	* Default `[]` = none block (secure-on-arm closes them instead). Absent on a
+	* blob older than this field — read as empty.
+	*/
+	blocking: NcAlarmBlockingListSchema.default([]),
+	/**
+	* Per arm mode, controllable openings that must NOT be actuated on arm.
+	* Default `[]` = every controllable secures (close / lock / off). Absent on
+	* an older blob — read as empty (secure ON).
+	*/
+	secureOnArmOff: NcAlarmSecureOnArmOffListSchema.default([]),
+	/**
 	* Per arm mode, the delays that mode OVERRIDES (D697). A mode with no entry, or an entry
 	* without a field, uses the global value above — so `[]`, the default, is exactly the
 	* behaviour of a blob stored before this field existed. Read through `resolveModeDelays`.
@@ -21480,7 +21527,7 @@ var NcAlarmSettingsSchema = z.object({
 /**
 * Every field optional — a tab edits one control at a time.
 *
-* `nonBlocking` and `modeDelays` are re-declared WITHOUT their defaults:
+* List fields and `modeDelays` are re-declared WITHOUT their defaults:
 * `.partial()` does not remove an inner `.default()`, so a patch that never
 * named the field would parse to `[]` and wipe every mode's list on an
 * unrelated edit (the same trap {@link NcRulePatchSchema} documents). Here
@@ -21488,11 +21535,15 @@ var NcAlarmSettingsSchema = z.object({
 */
 var NcAlarmSettingsPatchSchema = NcAlarmSettingsSchema.extend({
 	nonBlocking: NcAlarmNonBlockingListSchema,
+	blocking: NcAlarmBlockingListSchema,
+	secureOnArmOff: NcAlarmSecureOnArmOffListSchema,
 	/** Per-mode, per-field edits — NOT the whole list (see NcAlarmModeDelaysEditSchema). */
 	modeDelays: NcAlarmModeDelaysEditListSchema,
 	/** ONE membership change; the panel applies it to the list it holds at its turn. */
-	nonBlockingEdit: NcAlarmNonBlockingEditSchema
-}).partial().refine((p) => p.nonBlocking === void 0 || p.nonBlockingEdit === void 0, { message: "nonBlocking and nonBlockingEdit are exclusive — send the whole lists or one edit" });
+	nonBlockingEdit: NcAlarmNonBlockingEditSchema,
+	blockingEdit: NcAlarmBlockingEditSchema,
+	secureOnArmEdit: NcAlarmSecureOnArmEditSchema
+}).partial().refine((p) => p.nonBlocking === void 0 || p.nonBlockingEdit === void 0, { message: "nonBlocking and nonBlockingEdit are exclusive — send the whole lists or one edit" }).refine((p) => p.blocking === void 0 || p.blockingEdit === void 0, { message: "blocking and blockingEdit are exclusive — send the whole lists or one edit" }).refine((p) => p.secureOnArmOff === void 0 || p.secureOnArmEdit === void 0, { message: "secureOnArmOff and secureOnArmEdit are exclusive — send the whole lists or one edit" });
 /**
 * What one arm mode actually arms, DERIVED from the enabled rules gated on it.
 * Never authored, never stored — see `alarm-mode-coverage.ts` for why a stored
@@ -21607,7 +21658,13 @@ var NcAlarmSensorStateSchema = z.object({
 	/** Why `unknown`: the read failed, or the slice holds no word its cap defines (a placeholder included). */
 	unknownWhy: z.enum(["read-failed", "unknown-word"]).nullable(),
 	/** The device manager's liveness as the centre mirrors it; null = not known. */
-	online: z.boolean().nullable()
+	online: z.boolean().nullable(),
+	/**
+	* True when the opening is a cover / lock / switch — the table shows the
+	* Secure-on-arm switch and uses the controllable defaults. False for contacts
+	* and for non-openings. Defaulted so an older hub answer still parses.
+	*/
+	controllable: z.boolean().default(false)
 });
 var NcAlarmSensorsInputSchema = z.object({ deviceIds: z.array(z.number().int().positive()).max(500) });
 var NcAlarmSensorsSchema = z.object({
@@ -32764,6 +32821,83 @@ var buttonCapability = {
 	}) }
 };
 /**
+* `calendar-source` — collection cap exposing per-provider calendars and
+* their events. Every addon that contributes calendars (Home Assistant,
+* a future Google Calendar addon, …) registers a provider here. The hub
+* singleton `calendars` walks the collection and merges the answers.
+*
+* Mirrors `addon-pages-source`: the public listing is a different shape
+* (source-stamped ids) and lives on the aggregator.
+*/
+var CalendarSourceKindSchema = z.enum(["ha", "addon"]);
+var CalendarInfoSchema = z.object({
+	/** Provider-local id (e.g. HA `calendar.family`). The aggregator prefixes. */
+	id: z.string().min(1),
+	name: z.string().min(1),
+	source: CalendarSourceKindSchema,
+	enabled: z.boolean()
+});
+var CalendarEventSchema = z.object({
+	id: z.string().min(1),
+	calendarId: z.string().min(1),
+	title: z.string(),
+	startMs: z.number().int(),
+	endMs: z.number().int(),
+	allDay: z.boolean().optional(),
+	description: z.string().optional(),
+	location: z.string().optional()
+});
+var CalendarListEventsInputSchema = z.object({
+	calendarIds: z.array(z.string().min(1)).max(64).optional(),
+	startMs: z.number().int(),
+	endMs: z.number().int()
+});
+var calendarSourceCapability = {
+	name: "calendar-source",
+	scope: "system",
+	mode: "collection",
+	internal: true,
+	methods: {
+		listCalendars: method(z.void(), z.array(CalendarInfoSchema).readonly(), { auth: "admin" }),
+		listEvents: method(CalendarListEventsInputSchema, z.array(CalendarEventSchema).readonly(), { auth: "admin" })
+	}
+};
+/**
+* `calendars` — system-scoped singleton. Public surface admin-ui and the
+* notification-center calendar-events producer consume.
+*
+* Walks every `calendar-source` provider, stamps each calendar with a
+* cluster-stable id (`<sourceAddonId>:<localId>`) and the providing
+* addon's id, and fans `listEvents` out the same way. Home Assistant
+* import is a built-in refresh of the HA source rather than a second
+* registry — `importFromHomeAssistant` asks that source to re-discover.
+*/
+var CalendarEntrySchema = CalendarInfoSchema.extend({
+	/** Cluster-stable id: `<providerAddonId>:<localId>`. */
+	id: z.string().min(1),
+	/** The addon that registered the calendar-source provider. */
+	providerAddonId: z.string().min(1).optional()
+});
+var CalendarImportResultSchema = z.object({
+	imported: z.number().int().nonnegative(),
+	/** Absent when no HA calendar-source provider was reachable. */
+	providerAddonId: z.string().min(1).optional(),
+	error: z.string().optional()
+});
+var calendarsCapability = {
+	name: "calendars",
+	scope: "system",
+	mode: "singleton",
+	methods: {
+		listCalendars: method(z.void(), z.array(CalendarEntrySchema).readonly(), { auth: "admin" }),
+		listEvents: method(CalendarListEventsInputSchema, z.array(CalendarEventSchema).readonly(), { auth: "admin" }),
+		importFromHomeAssistant: method(z.void(), CalendarImportResultSchema, {
+			auth: "admin",
+			kind: "mutation"
+		})
+	}
+};
+/**
 * camera-credentials — device-scoped cap exposing the camera's network
 * + auth surface in a vendor-neutral shape.
 *
@@ -47535,6 +47669,8 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	brightnessCapability,
 	brokerCapability,
 	buttonCapability,
+	calendarSourceCapability,
+	calendarsCapability,
 	cameraCredentialsCapability,
 	cameraGridLayoutCapability,
 	cameraPipelineConfigCapability,
@@ -48455,6 +48591,36 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"calendars.importFromHomeAssistant": {
+		capName: "calendars",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"calendars.listCalendars": {
+		capName: "calendars",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"calendars.listEvents": {
+		capName: "calendars",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"calendarSource.listCalendars": {
+		capName: "calendar-source",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"calendarSource.listEvents": {
+		capName: "calendar-source",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"cameraCredentials.getCredentials": {
 		capName: "camera-credentials",
 		capScope: "device",
@@ -58881,4 +59047,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { composerCapability as $, asString$1 as $n, parseStreamParamsFormPatch as $t, REDACTED_SECRET as A, cloneStatefulExpressionMemory as An, isArrayOutputSchema as At, UserRecordSchema as B, DeviceFeature as Bn, locationIconKey as Bt, LOG_LEVEL_RANK as C, validateComposition as Cn, evictionPolicyOfLocation as Ct, MINUTES_PER_DAY as D, withLocationMode as Dn, foldSnapshotByFunction as Dt, METHOD_ACCESS_MAP as E, vectorStoreCapability as En, filesystemBrowseCapability as Et, ScopedTokenSchema as F, compositionSliceKey as Fn, kebabToCamel as Ft, authProviderCapability as G, DATAPLANE_SECRET_HEADER as Gn, mayWriteToLocation as Gt, addonSettingsCapability as H, DeviceType as Hn, logLevelAtMost as Ht, StorageCleanupJobSchema as I, compositionSourceKey as In, legacyAutoLinkIds as It, batteryCapability as J, ReadinessRegistry as Jn, modeMayWrite as Jt, backupCapability as K, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Kn, memoizePinnedFfmpeg as Kt, StorageLocationModeSchema as L, createStatefulExpressionMemory as Ln, legacyModeOf as Lt, RecordingStatusSchema as M, composedDeviceStableId as Mn, isLocationEnabled as Mt, STORAGE_ACCESS_FALLBACK as N, compositionFeatureEnabled as Nn, isObjectInput as Nt, MOTION_CLOSE_AFTER_MS as O, COMPOSER_ADDON_ID as On, formatMinutes as Ot, STREAM_PROFILE_META as P, compositionItemFieldPath as Pn, isVoidInput as Pt, collectSecretConfigKeys as Q, asNumber as Qn, objectInputDeclaresRequiredDeviceId as Qt, StorageLocationTypeSchema as R, disarmRoseMemory as Rn, lifecycleJobSchema as Rt, FieldClaimSchema as S, userManagementCapability as Sn, evaluateCompositionField as St, LocationIconIdSchema as T, vectorIndexDimConflictError as Tn, extractNestedAddonId as Tt, addonWidgetsCapability as U, errMsg as Un, looseSchema as Ut, addonPagesCapability as V, DeviceRole as Vn, logDestinationCapability as Vt, alertsCapability as W, BaseAddon as Wn, mayReadLocation as Wt, buildStreamParamsConfigSchema as X, WELL_KNOWN_TAB_MAP as Xn, normalizeUnit as Xt, buildCapabilityLookup as Y, ReadinessTimeoutError as Yn, motionCapability as Yt, cameraGridLayoutCapability as Z, asJsonObject as Zn, objectInputDeclaresAddonId as Zt, DERIVED_CAMERA_SILENCED_CAP_NAMES as _, storageMigrationCapability as _n, deviceStateCapability as _t, BatteryStatusSchema as a, replacedFieldKeys as an, isDeviceConfigCap as ar, coreBlockSourceKind as at, FIRST_LEVEL_MACRO_CLASSES as b, streamCatalogCapability as bn, enumerateItemArrayFields as bt, COMPOSED_ITEM_FIXED_FIELDS as c, resolveMethodAuth as cn, parseJsonObject as cr, dataStoreProviderCapability as ct, CORE_BLOCK_ADDON_PREFIX as d, scopesAllowDeviceCap as dn, resolveCapMount as dr, decodeVectorBase64 as dt, planComposition as en, createEvent as er, compositionFieldKey as et, CoreBlockSchema as f, scoreRuntimes as fn, scopeKey as fr, defineExtensionSlotProvider as ft, DAY_NAMES as g, storageCapability as gn, deviceManagerCapability as gt, DATABASE_SNAPSHOT_TIMEOUT_MS as h, snapshotCapability as hn, EventCategory as hr, deviceExtensionCapability as ht, BaseDevice as i, reducePoints as in, hydrateSchema as ir, coreBlockIdFromAddonId as it, RUNTIME_DEFAULTS as j, composedDeviceRef as jn, isCollectionArrayMethod as jt, RECORDING_SOURCE_CAMSTACK_ADDON as k, buildFfmpegArgs as kn, gbToBytes as kt, COMPOSER_RUNNER_ID as l, runtimeStatePolicyFor as ln, parseJsonUnknown as lr, databaseSnapshotCapability as lt, DATABASE_SNAPSHOT_SUFFIX as m, siteZoneKey as mn, toNodeId as mr, describeComposableCaps as mt, AlertSchema as n, procedureAuthKey as nn, emitReadiness as nr, coreBlockAddonId as nt, CAMERA_SWITCH_ORDER as o, resolveBucketMs as on, isEvent as or, coreBlocksCapability as ot, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as p, settingsStoreCapability as pn, sleep as pr, deriveBatteryPresence as pt, bareAddonId as q, DEVICE_STATUS_METHOD as qn, metricsProviderCapability as qt, ApiKeyRecordSchema as r, ptzAutotrackCapability as rn, expandCapMethods as rr, coreBlockComposition as rt, CAP_NAMES_WITH_STATUS as s, resolveLocationMode as sn, nodePin as sr, createDeviceExtensionProvider as st, ALL_CAPABILITY_DEFINITIONS as t, platformProbeCapability as tn, emitDownForOwnedCaps as tr, compositionSourceRefs as tt, CORE_BLOCKS_ADDON_ID as u, scopesAllowAddon as un, readinessKey as ur, declarationOwnerNodeId as ut, DeclaredDevices as v, storageOccupancyCapability as vn, deviceStatusCapability as vt, LegacyStorageLocationDefaultSchema as w, vectorDimFromBase64 as wn, expandContainer as wt, FieldClaimModeSchema as x, streamQualityLabel as xn, enumerateSchemaFields as xt, DeviceStatusSchema as y, storageProviderCapability as yn, enumerateInferenceDevices as yt, StorageMigrationJobSchema as z, toExpressionValue as zn, localNetworkCapability as zt };
+export { collectSecretConfigKeys as $, asNumber as $n, objectInputDeclaresRequiredDeviceId as $t, REDACTED_SECRET as A, buildFfmpegArgs as An, gbToBytes as At, UserRecordSchema as B, toExpressionValue as Bn, localNetworkCapability as Bt, LOG_LEVEL_RANK as C, userManagementCapability as Cn, evaluateCompositionField as Ct, MINUTES_PER_DAY as D, vectorStoreCapability as Dn, filesystemBrowseCapability as Dt, METHOD_ACCESS_MAP as E, vectorIndexDimConflictError as En, extractNestedAddonId as Et, ScopedTokenSchema as F, compositionItemFieldPath as Fn, isVoidInput as Ft, authProviderCapability as G, BaseAddon as Gn, mayReadLocation as Gt, addonSettingsCapability as H, DeviceRole as Hn, logDestinationCapability as Ht, StorageCleanupJobSchema as I, compositionSliceKey as In, kebabToCamel as It, batteryCapability as J, DEVICE_STATUS_METHOD as Jn, metricsProviderCapability as Jt, backupCapability as K, DATAPLANE_SECRET_HEADER as Kn, mayWriteToLocation as Kt, StorageLocationModeSchema as L, compositionSourceKey as Ln, legacyAutoLinkIds as Lt, RecordingStatusSchema as M, composedDeviceRef as Mn, isCollectionArrayMethod as Mt, STORAGE_ACCESS_FALLBACK as N, composedDeviceStableId as Nn, isLocationEnabled as Nt, MOTION_CLOSE_AFTER_MS as O, withLocationMode as On, foldSnapshotByFunction as Ot, STREAM_PROFILE_META as P, compositionFeatureEnabled as Pn, isObjectInput as Pt, cameraGridLayoutCapability as Q, asJsonObject as Qn, objectInputDeclaresAddonId as Qt, StorageLocationTypeSchema as R, createStatefulExpressionMemory as Rn, legacyModeOf as Rt, FieldClaimSchema as S, streamQualityLabel as Sn, enumerateSchemaFields as St, LocationIconIdSchema as T, vectorDimFromBase64 as Tn, expandContainer as Tt, addonWidgetsCapability as U, DeviceType as Un, logLevelAtMost as Ut, addonPagesCapability as V, DeviceFeature as Vn, locationIconKey as Vt, alertsCapability as W, errMsg as Wn, looseSchema as Wt, buildStreamParamsConfigSchema as X, ReadinessTimeoutError as Xn, motionCapability as Xt, buildCapabilityLookup as Y, ReadinessRegistry as Yn, modeMayWrite as Yt, calendarsCapability as Z, WELL_KNOWN_TAB_MAP as Zn, normalizeUnit as Zt, DERIVED_CAMERA_SILENCED_CAP_NAMES as _, storageCapability as _n, deviceManagerCapability as _t, BatteryStatusSchema as a, reducePoints as an, hydrateSchema as ar, coreBlockIdFromAddonId as at, FIRST_LEVEL_MACRO_CLASSES as b, storageProviderCapability as bn, enumerateInferenceDevices as bt, COMPOSED_ITEM_FIXED_FIELDS as c, resolveLocationMode as cn, nodePin as cr, createDeviceExtensionProvider as ct, CORE_BLOCK_ADDON_PREFIX as d, scopesAllowAddon as dn, readinessKey as dr, declarationOwnerNodeId as dt, parseStreamParamsFormPatch as en, asString$1 as er, composerCapability as et, CoreBlockSchema as f, scopesAllowDeviceCap as fn, resolveCapMount as fr, decodeVectorBase64 as ft, DAY_NAMES as g, snapshotCapability as gn, EventCategory as gr, deviceExtensionCapability as gt, DATABASE_SNAPSHOT_TIMEOUT_MS as h, siteZoneKey as hn, toNodeId as hr, describeComposableCaps as ht, BaseDevice as i, ptzAutotrackCapability as in, expandCapMethods as ir, coreBlockComposition as it, RUNTIME_DEFAULTS as j, cloneStatefulExpressionMemory as jn, isArrayOutputSchema as jt, RECORDING_SOURCE_CAMSTACK_ADDON as k, COMPOSER_ADDON_ID as kn, formatMinutes as kt, COMPOSER_RUNNER_ID as l, resolveMethodAuth as ln, parseJsonObject as lr, dataStoreProviderCapability as lt, DATABASE_SNAPSHOT_SUFFIX as m, settingsStoreCapability as mn, sleep as mr, deriveBatteryPresence as mt, AlertSchema as n, platformProbeCapability as nn, emitDownForOwnedCaps as nr, compositionSourceRefs as nt, CAMERA_SWITCH_ORDER as o, replacedFieldKeys as on, isDeviceConfigCap as or, coreBlockSourceKind as ot, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as p, scoreRuntimes as pn, scopeKey as pr, defineExtensionSlotProvider as pt, bareAddonId as q, DEVICE_SETTINGS_CONTRIBUTION_METHODS as qn, memoizePinnedFfmpeg as qt, ApiKeyRecordSchema as r, procedureAuthKey as rn, emitReadiness as rr, coreBlockAddonId as rt, CAP_NAMES_WITH_STATUS as s, resolveBucketMs as sn, isEvent as sr, coreBlocksCapability as st, ALL_CAPABILITY_DEFINITIONS as t, planComposition as tn, createEvent as tr, compositionFieldKey as tt, CORE_BLOCKS_ADDON_ID as u, runtimeStatePolicyFor as un, parseJsonUnknown as ur, databaseSnapshotCapability as ut, DeclaredDevices as v, storageMigrationCapability as vn, deviceStateCapability as vt, LegacyStorageLocationDefaultSchema as w, validateComposition as wn, evictionPolicyOfLocation as wt, FieldClaimModeSchema as x, streamCatalogCapability as xn, enumerateItemArrayFields as xt, DeviceStatusSchema as y, storageOccupancyCapability as yn, deviceStatusCapability as yt, StorageMigrationJobSchema as z, disarmRoseMemory as zn, lifecycleJobSchema as zt };

package/dist/{dist-Tk7iDxUC.js → dist-CqafgUSr.js}

@@ -21413,19 +21413,52 @@ var NcAlarmNonBlockingEditSchema = zod.z.object({
 	nonBlocking: zod.z.boolean()
 });
 /**
-* One arm mode's non-blocking list: devices that may be open when that mode
-* arms, without the arm being refused.
+* Controllable openings: opt IN to blocking (default is do not block). Contacts
+* keep using {@link NcAlarmNonBlockingEditSchema}.
 */
-var NcAlarmNonBlockingSchema = zod.z.object({
+var NcAlarmBlockingEditSchema = zod.z.object({
+	mode: AlarmArmModeSchema,
+	deviceId: zod.z.number().int().positive(),
+	/** true = on the list (blocks when open); false = off the list (default). */
+	blocking: zod.z.boolean()
+});
+/**
+* Controllable openings: opt OUT of secure-on-arm (default is secure ON —
+* close / lock / turn off when this mode arms).
+*/
+var NcAlarmSecureOnArmEditSchema = zod.z.object({
+	mode: AlarmArmModeSchema,
+	deviceId: zod.z.number().int().positive(),
+	/** true = secure on arm (default); false = do not actuate on arm. */
+	secureOnArm: zod.z.boolean()
+});
+/**
+* One arm mode's device-id list (non-blocking, blocking, or secure-on-arm-off).
+*/
+var NcAlarmModeDeviceListSchema = zod.z.object({
 	mode: AlarmArmModeSchema,
 	deviceIds: zod.z.array(zod.z.number().int()).max(200)
 });
 /**
+* One arm mode's non-blocking list: devices that may be open when that mode
+* arms, without the arm being refused.
+*/
+var NcAlarmNonBlockingSchema = NcAlarmModeDeviceListSchema;
+/** Controllable devices that DO block when open (opt-in; default empty). */
+var NcAlarmBlockingSchema = NcAlarmModeDeviceListSchema;
+/**
+* Controllable devices that do NOT secure on arm (opt-out; default empty =
+* every controllable secures).
+*/
+var NcAlarmSecureOnArmOffSchema = NcAlarmModeDeviceListSchema;
+/**
 * The per-mode lists, at most one per mode. Two lists for one mode have no
 * meaning a reader could agree on (union? the last one?), so they are refused
 * at the boundary rather than interpreted.
 */
 var NcAlarmNonBlockingListSchema = zod.z.array(NcAlarmNonBlockingSchema).max(8).refine(uniqueModes, { message: "nonBlocking: at most one list per arm mode" });
+var NcAlarmBlockingListSchema = zod.z.array(NcAlarmBlockingSchema).max(8).refine(uniqueModes, { message: "blocking: at most one list per arm mode" });
+var NcAlarmSecureOnArmOffListSchema = zod.z.array(NcAlarmSecureOnArmOffSchema).max(8).refine(uniqueModes, { message: "secureOnArmOff: at most one list per arm mode" });
 /**
 * The three durations — global, and per mode since D697 — the panel's state
 * machine runs on, who hears about its transitions, and which openings each mode tolerates.
@@ -21468,9 +21501,23 @@ var NcAlarmSettingsSchema = zod.z.object({
 	* arm (a window left ajar for the cat under `home`, say). At most one entry
 	* per mode is meaningful. Defaulted to `[]` so a blob stored before D630
 	* parses as "every opening blocks" — the behaviour it was written under.
+	* Contacts use this list; controllable openings use {@link blocking} instead
+	* (default: do not block).
 	*/
 	nonBlocking: NcAlarmNonBlockingListSchema.default([]),
 	/**
+	* Per arm mode, controllable openings that DO refuse the arm when open.
+	* Default `[]` = none block (secure-on-arm closes them instead). Absent on a
+	* blob older than this field — read as empty.
+	*/
+	blocking: NcAlarmBlockingListSchema.default([]),
+	/**
+	* Per arm mode, controllable openings that must NOT be actuated on arm.
+	* Default `[]` = every controllable secures (close / lock / off). Absent on
+	* an older blob — read as empty (secure ON).
+	*/
+	secureOnArmOff: NcAlarmSecureOnArmOffListSchema.default([]),
+	/**
 	* Per arm mode, the delays that mode OVERRIDES (D697). A mode with no entry, or an entry
 	* without a field, uses the global value above — so `[]`, the default, is exactly the
 	* behaviour of a blob stored before this field existed. Read through `resolveModeDelays`.
@@ -21480,7 +21527,7 @@ var NcAlarmSettingsSchema = zod.z.object({
 /**
 * Every field optional — a tab edits one control at a time.
 *
-* `nonBlocking` and `modeDelays` are re-declared WITHOUT their defaults:
+* List fields and `modeDelays` are re-declared WITHOUT their defaults:
 * `.partial()` does not remove an inner `.default()`, so a patch that never
 * named the field would parse to `[]` and wipe every mode's list on an
 * unrelated edit (the same trap {@link NcRulePatchSchema} documents). Here
@@ -21488,11 +21535,15 @@ var NcAlarmSettingsSchema = zod.z.object({
 */
 var NcAlarmSettingsPatchSchema = NcAlarmSettingsSchema.extend({
 	nonBlocking: NcAlarmNonBlockingListSchema,
+	blocking: NcAlarmBlockingListSchema,
+	secureOnArmOff: NcAlarmSecureOnArmOffListSchema,
 	/** Per-mode, per-field edits — NOT the whole list (see NcAlarmModeDelaysEditSchema). */
 	modeDelays: NcAlarmModeDelaysEditListSchema,
 	/** ONE membership change; the panel applies it to the list it holds at its turn. */
-	nonBlockingEdit: NcAlarmNonBlockingEditSchema
-}).partial().refine((p) => p.nonBlocking === void 0 || p.nonBlockingEdit === void 0, { message: "nonBlocking and nonBlockingEdit are exclusive — send the whole lists or one edit" });
+	nonBlockingEdit: NcAlarmNonBlockingEditSchema,
+	blockingEdit: NcAlarmBlockingEditSchema,
+	secureOnArmEdit: NcAlarmSecureOnArmEditSchema
+}).partial().refine((p) => p.nonBlocking === void 0 || p.nonBlockingEdit === void 0, { message: "nonBlocking and nonBlockingEdit are exclusive — send the whole lists or one edit" }).refine((p) => p.blocking === void 0 || p.blockingEdit === void 0, { message: "blocking and blockingEdit are exclusive — send the whole lists or one edit" }).refine((p) => p.secureOnArmOff === void 0 || p.secureOnArmEdit === void 0, { message: "secureOnArmOff and secureOnArmEdit are exclusive — send the whole lists or one edit" });
 /**
 * What one arm mode actually arms, DERIVED from the enabled rules gated on it.
 * Never authored, never stored — see `alarm-mode-coverage.ts` for why a stored
@@ -21607,7 +21658,13 @@ var NcAlarmSensorStateSchema = zod.z.object({
 	/** Why `unknown`: the read failed, or the slice holds no word its cap defines (a placeholder included). */
 	unknownWhy: zod.z.enum(["read-failed", "unknown-word"]).nullable(),
 	/** The device manager's liveness as the centre mirrors it; null = not known. */
-	online: zod.z.boolean().nullable()
+	online: zod.z.boolean().nullable(),
+	/**
+	* True when the opening is a cover / lock / switch — the table shows the
+	* Secure-on-arm switch and uses the controllable defaults. False for contacts
+	* and for non-openings. Defaulted so an older hub answer still parses.
+	*/
+	controllable: zod.z.boolean().default(false)
 });
 var NcAlarmSensorsInputSchema = zod.z.object({ deviceIds: zod.z.array(zod.z.number().int().positive()).max(500) });
 var NcAlarmSensorsSchema = zod.z.object({
@@ -32764,6 +32821,83 @@ var buttonCapability = {
 	}) }
 };
 /**
+* `calendar-source` — collection cap exposing per-provider calendars and
+* their events. Every addon that contributes calendars (Home Assistant,
+* a future Google Calendar addon, …) registers a provider here. The hub
+* singleton `calendars` walks the collection and merges the answers.
+*
+* Mirrors `addon-pages-source`: the public listing is a different shape
+* (source-stamped ids) and lives on the aggregator.
+*/
+var CalendarSourceKindSchema = zod.z.enum(["ha", "addon"]);
+var CalendarInfoSchema = zod.z.object({
+	/** Provider-local id (e.g. HA `calendar.family`). The aggregator prefixes. */
+	id: zod.z.string().min(1),
+	name: zod.z.string().min(1),
+	source: CalendarSourceKindSchema,
+	enabled: zod.z.boolean()
+});
+var CalendarEventSchema = zod.z.object({
+	id: zod.z.string().min(1),
+	calendarId: zod.z.string().min(1),
+	title: zod.z.string(),
+	startMs: zod.z.number().int(),
+	endMs: zod.z.number().int(),
+	allDay: zod.z.boolean().optional(),
+	description: zod.z.string().optional(),
+	location: zod.z.string().optional()
+});
+var CalendarListEventsInputSchema = zod.z.object({
+	calendarIds: zod.z.array(zod.z.string().min(1)).max(64).optional(),
+	startMs: zod.z.number().int(),
+	endMs: zod.z.number().int()
+});
+var calendarSourceCapability = {
+	name: "calendar-source",
+	scope: "system",
+	mode: "collection",
+	internal: true,
+	methods: {
+		listCalendars: method(zod.z.void(), zod.z.array(CalendarInfoSchema).readonly(), { auth: "admin" }),
+		listEvents: method(CalendarListEventsInputSchema, zod.z.array(CalendarEventSchema).readonly(), { auth: "admin" })
+	}
+};
+/**
+* `calendars` — system-scoped singleton. Public surface admin-ui and the
+* notification-center calendar-events producer consume.
+*
+* Walks every `calendar-source` provider, stamps each calendar with a
+* cluster-stable id (`<sourceAddonId>:<localId>`) and the providing
+* addon's id, and fans `listEvents` out the same way. Home Assistant
+* import is a built-in refresh of the HA source rather than a second
+* registry — `importFromHomeAssistant` asks that source to re-discover.
+*/
+var CalendarEntrySchema = CalendarInfoSchema.extend({
+	/** Cluster-stable id: `<providerAddonId>:<localId>`. */
+	id: zod.z.string().min(1),
+	/** The addon that registered the calendar-source provider. */
+	providerAddonId: zod.z.string().min(1).optional()
+});
+var CalendarImportResultSchema = zod.z.object({
+	imported: zod.z.number().int().nonnegative(),
+	/** Absent when no HA calendar-source provider was reachable. */
+	providerAddonId: zod.z.string().min(1).optional(),
+	error: zod.z.string().optional()
+});
+var calendarsCapability = {
+	name: "calendars",
+	scope: "system",
+	mode: "singleton",
+	methods: {
+		listCalendars: method(zod.z.void(), zod.z.array(CalendarEntrySchema).readonly(), { auth: "admin" }),
+		listEvents: method(CalendarListEventsInputSchema, zod.z.array(CalendarEventSchema).readonly(), { auth: "admin" }),
+		importFromHomeAssistant: method(zod.z.void(), CalendarImportResultSchema, {
+			auth: "admin",
+			kind: "mutation"
+		})
+	}
+};
+/**
 * camera-credentials — device-scoped cap exposing the camera's network
 * + auth surface in a vendor-neutral shape.
 *
@@ -47535,6 +47669,8 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	brightnessCapability,
 	brokerCapability,
 	buttonCapability,
+	calendarSourceCapability,
+	calendarsCapability,
 	cameraCredentialsCapability,
 	cameraGridLayoutCapability,
 	cameraPipelineConfigCapability,
@@ -48455,6 +48591,36 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"calendars.importFromHomeAssistant": {
+		capName: "calendars",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"calendars.listCalendars": {
+		capName: "calendars",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"calendars.listEvents": {
+		capName: "calendars",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"calendarSource.listCalendars": {
+		capName: "calendar-source",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"calendarSource.listEvents": {
+		capName: "calendar-source",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"cameraCredentials.getCredentials": {
 		capName: "camera-credentials",
 		capScope: "device",
@@ -59277,6 +59443,12 @@ Object.defineProperty(exports, "buildStreamParamsConfigSchema", {
 		return buildStreamParamsConfigSchema;
 	}
 });
+Object.defineProperty(exports, "calendarsCapability", {
+	enumerable: true,
+	get: function() {
+		return calendarsCapability;
+	}
+});
 Object.defineProperty(exports, "cameraGridLayoutCapability", {
 	enumerable: true,
 	get: function() {

package/dist/index.d.ts

@@ -13,6 +13,7 @@ export { ScopedTokenManager } from './auth/scoped-token-manager.js';
 export type { UserConfigReader, UserRecord, UserStorageAccess } from './auth/user-manager.js';
 export { UserManager } from './auth/user-manager.js';
 export { AlertCenterAddon } from './builtins/alerts/index.js';
+export { CalendarsAddon } from './builtins/calendars/index.js';
 export { ComposerAddon } from './builtins/composer/index.js';
 export { ConsoleDestination, ConsoleLoggingAddon } from './builtins/console-logging/index.js';
 export { CoreBlocksAddon } from './builtins/core-blocks/index.js';