@camstack/system 1.2.353 → 1.2.354

package/dist/{dist-Cm556q2j.mjs → dist-DVyXxn41.mjs}

@@ -14169,7 +14169,7 @@ var detectionPipelineCapability = {
 * This matters here more than anywhere else in the repo, because every provider
 * that knows a device's host knows its PASSWORD too: `{ host, port, username,
 * password }` sit in one object on Hikvision, Amcrest, Reolink and ONVIF alike,
-* and `http://admin:hunter2@192.168.x.x/` is a URL a browser accepts. The
+* and `http://admin:hunter2@192.168.60.139/` is a URL a browser accepts. The
 * camera's own page will ask for its own login. That is correct, and pre-
 * filling it is the operator's business, not ours.
 *
@@ -21164,8 +21164,9 @@ var NcRuleSchema = NcRuleInputSchema.extend({
 	disabledTargetIds: z.array(z.string()).default([])
 });
 /**
-* The state-summary SECTIONS (D647 / D698): the D637 kind groups that report a
-* still-true state. `backups-exports` and `alarm` are not sections — a completed
+* The state-summary SECTIONS (D647 / D698 / D708): the D637 kind groups that
+* report a still-true state. `addons` is the crash-looped addons only and
+* `addon-updates` the addons that are behind (D708 split them). `backups-exports` and `alarm` are not sections — a completed
 * job is not an open state, and the alarm stays instant.
 */
 var NcStateSummarySectionIdSchema = z.enum([
@@ -21177,6 +21178,7 @@ var NcStateSummarySectionIdSchema = z.enum([
 	"detection-blind",
 	"nodes",
 	"addons",
+	"addon-updates",
 	"updates"
 ]);
 /** One section of a previewed state summary. `unavailable` = its state could not be read. */
@@ -21671,7 +21673,19 @@ var NcAlarmModeDelaysSchema = z.object({
 	* When this mode may be armed. Absent / null = always allowed (same as a
 	* rule with no `schedule`). Evaluated with {@link isScheduleActive}.
 	*/
-	schedule: NcScheduleSchema.optional()
+	schedule: NcScheduleSchema.optional(),
+	/**
+	* D706: while this mode's ENTRY DELAY runs, do the alarm rules' own pushes go out (as an
+	* intrusion naming the locations)? Absent = false — the entry-delay notification is the
+	* only one, and the matches ride the triggered notification's mosaic (D705).
+	*/
+	notifyDuringEntryDelay: z.boolean().optional(),
+	/**
+	* D706: notify "watched again" when a sensor this arm bypassed closes and opens again.
+	* Absent = false (logged, not sent). Even when true it is not sent when that same sensor
+	* is the one that starts the entry delay — the entry-delay notification already names it.
+	*/
+	notifySensorRewatched: z.boolean().optional()
 });
 var NcAlarmModeDelaysListSchema = z.array(NcAlarmModeDelaysSchema).max(8).refine(uniqueModes, { message: "modeDelays: at most one entry per arm mode" });
 /**
@@ -21686,7 +21700,11 @@ var NcAlarmModeDelaysEditSchema = z.object({
 	triggeredDurationSec: NcAlarmTriggeredSecSchema.nullable().optional(),
 	postTriggeredAction: NcAlarmPostTriggeredActionSchema.nullable().optional(),
 	/** Set a schedule, or `null` to clear (mode always allowed again). */
-	schedule: NcScheduleSchema.nullable().optional()
+	schedule: NcScheduleSchema.nullable().optional(),
+	/** D706: set the switch, or `null` to clear it (back to the default, false). */
+	notifyDuringEntryDelay: z.boolean().nullable().optional(),
+	/** D706: set the switch, or `null` to clear it (back to the default, false). */
+	notifySensorRewatched: z.boolean().nullable().optional()
 });
 var NcAlarmModeDelaysEditListSchema = z.array(NcAlarmModeDelaysEditSchema).max(8).refine(uniqueModes, { message: "modeDelays: at most one edit per arm mode" });
 /** One switch of the alarm table: put ONE device on, or take it off, ONE mode's list. */
@@ -26630,6 +26648,22 @@ var MotionSourceEnum = z.enum([
 	"device-activity"
 ]);
 /**
+* What opened an on-motion detection SESSION: the motion source that passed the
+* camera's `motionSources` gate, and what raised it (the camera itself, or a
+* sensor the operator attached — D672). `sensorName` is the attached sensor's
+* device name as the orchestrator's camera-sensors resolution last read it;
+* absent when unknown or when the camera itself triggered.
+*
+* Carried on the session attach ONLY so the runner's `DetectionPhaseTransition`
+* can say what started the session (D672 rule 11, amended 2026-10-06). The
+* runner never decides anything on it.
+*/
+var SessionTriggerSchema = z.object({
+	source: MotionSourceEnum,
+	triggeredBy: MotionTriggeredBySchema,
+	sensorName: z.string().optional()
+});
+/**
 * List of motion sources active on a camera. Empty array is valid:
 * "no source" — happens for battery cams without firmware motion when
 * the operator hasn't opted into the SW analyzer (would hold the
@@ -26881,6 +26915,14 @@ var RunnerCameraConfigSchema = z.object({
 	*/
 	motionSources: MotionSourcesSchema.default(["analyzer"]),
 	/**
+	* What opened this attach, on a SESSION attach only (see
+	* {@link SessionTriggerSchema}). OPTIONAL with no default: absent on a
+	* standing attach, an occupancy burst, a re-dispatch with no motion event
+	* behind it, and every attach from an orchestrator older than the field — the
+	* runner then names no source on the phase event.
+	*/
+	sessionTrigger: SessionTriggerSchema.optional(),
+	/**
 	* WHICH root detector runs for this camera. The detection counterpart of
 	* {@link motionSources}, same shape and same discipline: a per-camera list
 	* of sources the system understands, vendor-agnostic, owned here.
@@ -31445,6 +31487,50 @@ var videoclipsCapability = {
 		})
 	}
 };
+/** The central link domain the viewer app claims (Universal Links / App Links). */
+var CAMSTACK_APP_LINK_ORIGIN = "https://camstack.zentik.app";
+/**
+* Reduce a base URL to the bare origin the central page accepts as `hub=`,
+* or `null` when it cannot be one: not http(s), carries credentials, or does
+* not parse. A path/query/fragment is dropped — the central page mounts the
+* viewer under the origin itself.
+*/
+function toAppLinkHubOrigin(baseUrl) {
+	let parsed;
+	try {
+		parsed = new URL(baseUrl);
+	} catch {
+		return null;
+	}
+	if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return null;
+	if (parsed.username !== "" || parsed.password !== "") return null;
+	if (parsed.hostname === "") return null;
+	return parsed.origin;
+}
+/**
+* The hub address an app link carries as `hub=`, chosen from the hub's OWN
+* advertised palette so it always agrees with what the Network page lists:
+* the public tunnel first, then the mesh (Tailscale MagicDNS) — HTTPS only,
+* because the app and the hosted viewer reach it from off the LAN. `null`
+* when the hub advertises neither.
+*/
+function pickAppLinkHub(endpoints) {
+	const rank = (e) => {
+		if (e.kind !== "public" || !e.baseUrl.startsWith("https://")) return null;
+		if (e.interfaceKind === "public") return 0;
+		if (e.interfaceKind === "vpn") return 1;
+		return null;
+	};
+	return endpoints.flatMap((e) => {
+		const r = rank(e);
+		const origin = toAppLinkHubOrigin(e.baseUrl);
+		return r === null || origin === null ? [] : [{
+			r,
+			p: e.priority,
+			origin
+		}];
+	}).toSorted((a, b) => a.r - b.r || a.p - b.p)[0]?.origin ?? null;
+}
 /**
 * Optional client-side hints sent at session creation to help the provider
 * pick the best native source. All fields optional — a viewer that knows
@@ -36148,7 +36234,7 @@ var LocalInterfaceSchema = z.object({
 	name: z.string(),
 	family: z.enum(["IPv4", "IPv6"]),
 	address: z.string(),
-	/** CIDR shorthand (e.g. `192.168.x.x/24`). Empty when OS doesn't expose. */
+	/** CIDR shorthand (e.g. `192.168.10.10/24`). Empty when OS doesn't expose. */
 	cidr: z.string(),
 	/** OS netmask. Stable across calls so the SDK can hash on it. */
 	netmask: z.string(),
@@ -36202,7 +36288,8 @@ var ConnectionEndpointSchema = z.object({
 		"lan-ipv4",
 		"lan-ipv6",
 		"public",
-		"loopback"
+		"loopback",
+		"app-link"
 	]),
 	/**
 	* Originating-interface kind — `lan`/`wifi`/`docker`/`vpn`/`other`/
@@ -36271,15 +36358,27 @@ var GetConnectionEndpointsResultSchema = z.object({
 	localPort: AdvertisedLocalPortSchema
 });
 /**
-* The chosen outbound endpoint for notification artifacts. `baseUrl: null` =
-* AUTO (resolved from the candidate ranking at send time); `resolved` reports
-* what AUTO currently picks, so the UI can show the effective value either way.
+* The address flagged for notification links. `baseUrl: null` = AUTO, which
+* since D709 is the CamStack app link; `resolved` reports the effective value,
+* so the UI can show it either way.
 */
 var NotificationEndpointSchema = z.object({
 	/** The operator's explicit choice, or null for AUTO. */
 	baseUrl: z.string().nullable(),
-	/** What the ranking currently resolves to (null when nothing is reachable). */
-	resolved: z.string().nullable()
+	/**
+	* The effective flagged address: the explicit choice, else (AUTO) the
+	* CamStack app link `https://camstack.zentik.app` (D709). A pre-D709 hub
+	* answered the public tunnel / mesh here, or null.
+	*/
+	resolved: z.string().nullable(),
+	/**
+	* The hub origin an app link carries as `hub=` (D709): the hub's best
+	* public HTTPS address — the tunnel, then the mesh (Tailscale MagicDNS) —
+	* picked from this cap's own palette by `pickAppLinkHub`. `null` when the
+	* hub advertises neither; the app link is then minted without `hub=`.
+	* Absent on a pre-D709 hub.
+	*/
+	appLinkHub: z.string().nullable()
 });
 /**
 * The URLs the SDK / viewer should race for API access. `baseUrls` empty =
@@ -36347,7 +36446,7 @@ var localNetworkCapability = {
 		* every client a second authority on a socket only the hub binds. A viewer
 		* configured with a port-less public URL (`https://camstack.example.top`)
 		* infers 443 from the scheme, asks with 443, and was handed
-		* `https://192.168.x.x:443` for a hub listening on 4443. That candidate
+		* `https://192.168.10.9:443` for a hub listening on 4443. That candidate
 		* cannot ever answer, and losing its race reads in the log exactly like
 		* "the LAN was tried and it was slower" — so an operator sitting on his own
 		* WiFi stayed on the public tunnel for weeks, with the LAN candidate born
@@ -36380,13 +36479,21 @@ var localNetworkCapability = {
 			*  Pass `'https'` when the caller is itself loaded over HTTPS
 			*  to avoid mixed-content blocks in the browser. The public
 			*  tunnel always emits `https://` regardless. */
-			scheme: z.enum(["http", "https"]).optional()
+			scheme: z.enum(["http", "https"]).optional(),
+			/** Append the CamStack app link entry (`kind: 'app-link'`, D709) —
+			*  an address notification links can be flagged with, not a hub
+			*  route. Default `false`: racers and rankers never see it. */
+			includeAppLink: z.boolean().optional()
 		}), GetConnectionEndpointsResultSchema),
 		/**
-		* The endpoint OUTBOUND artifacts must be addressed by — notification
-		* attachment links and deep links. `baseUrl: null` means AUTO: the first
-		* public candidate (a configured origin, then a connected tunnel, then the
-		* LAN), never loopback.
+		* The address notification links are flagged with. `baseUrl: null` means
+		* AUTO, which is the CamStack app link (D709): viewer taps go through
+		* `https://camstack.zentik.app/…?hub=<appLinkHub>` and open the app. Any
+		* hub address the palette lists can be flagged instead; then viewer taps,
+		* attachment links and action buttons all use it. Signed media and
+		* buttons never use the app link — with it flagged (or AUTO) they keep
+		* the ranked hub ladder (a configured origin, a connected tunnel, then
+		* the LAN), never loopback.
 		*
 		* Why an explicit marker: the automatic ranking cannot know which of
 		* several reachable addresses the RECIPIENT can actually open. A link is
@@ -36800,7 +36907,7 @@ var MeshPeerSchema = z.object({
 	tags: z.array(z.string()).readonly(),
 	/** True when the peer advertises itself as an exit-node candidate. */
 	exitNodeOption: z.boolean(),
-	/** Subnet routes the peer advertises (e.g. `["192.168.x.x/24"]`). */
+	/** Subnet routes the peer advertises (e.g. `["192.168.10.0/24"]`). */
 	advertisedRoutes: z.array(z.string()).readonly(),
 	/** Owner account login (e.g. `foo@example.com`). Null for tagged peers. */
 	userLogin: z.string().nullable(),
@@ -58617,12 +58724,14 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 	{
 		id: "addons",
 		family: "system",
-		label: "Addons",
-		kinds: [
-			"addon-crash-loop",
-			"addon-update-available",
-			"addon-updated"
-		]
+		label: "Addons stopped",
+		kinds: ["addon-crash-loop"]
+	},
+	{
+		id: "addon-updates",
+		family: "system",
+		label: "Addon updates",
+		kinds: ["addon-update-available", "addon-updated"]
 	},
 	{
 		id: "updates",
@@ -58782,13 +58891,15 @@ var STATE_SUMMARY_SECTION_VARS = [
 	},
 	{
 		name: "summaryAddons",
-		label: "Summary: addons",
-		example: "@camstack/addon-recorder 1.2.3 → 1.2.4",
-		kinds: [
-			"addon-crash-loop",
-			"addon-update-available",
-			"addon-updated"
-		]
+		label: "Summary: addons stopped",
+		example: "hub — recorder stopped after repeated crashes",
+		kinds: ["addon-crash-loop"]
+	},
+	{
+		name: "summaryAddonUpdates",
+		label: "Summary: addon updates",
+		example: "hub:\n• @camstack/addon-recorder 1.2.3 → 1.2.4",
+		kinds: ["addon-update-available", "addon-updated"]
 	},
 	{
 		name: "summaryUpdates",
@@ -58872,6 +58983,7 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_BODY_ONLY],
 	[...RULE_TEXT],
 	([...RULE_TEXT], [...DEVICE_EVENTS]),
+	([...RULE_TEXT], [...COMBINED_ALARM]),
 	([...RULE_TEXT], [...DEVICE_EVENTS]),
 	([...RULE_TEXT], [...BATTERY, ...CONSUMABLE]),
 	([...RULE_TEXT], [...CONSUMABLE]),
@@ -59597,4 +59709,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { cameraGridLayoutCapability as $, ReadinessRegistry as $n, normalizeUnit as $t, RECORDING_SOURCE_CAMSTACK_ADDON as A, vectorIndexDimConflictError as An, formatMinutes as At, StorageMigrationJobSchema as B, compositionSliceKey as Bn, lifecycleJobSchema as Bt, FieldClaimSchema as C, storageOccupancyCapability as Cn, enumerateSchemaFields as Ct, METHOD_ACCESS_MAP as D, userManagementCapability as Dn, extractNestedAddonId as Dt, LocationIconIdSchema as E, streamQualityLabel as En, expandContainer as Et, STREAM_PROFILE_META as F, cloneStatefulExpressionMemory as Fn, isObjectInput as Ft, alertsCapability as G, DeviceFeature as Gn, looseSchema as Gt, addonPagesCapability as H, createStatefulExpressionMemory as Hn, locationIconKey as Ht, ScopedTokenSchema as I, composedDeviceRef as In, isVoidInput as It, bareAddonId as J, errMsg as Jn, memoizePinnedFfmpeg as Jt, authProviderCapability as K, DeviceRole as Kn, mayReadLocation as Kt, StorageCleanupJobSchema as L, composedDeviceStableId as Ln, kebabToCamel as Lt, RUNTIME_DEFAULTS as M, withLocationMode as Mn, isArrayOutputSchema as Mt, RecordingStatusSchema as N, COMPOSER_ADDON_ID as Nn, isCollectionArrayMethod as Nt, MINUTES_PER_DAY as O, validateComposition as On, filesystemBrowseCapability as Ot, STORAGE_ACCESS_FALLBACK as P, buildFfmpegArgs as Pn, isLocationEnabled as Pt, calendarsCapability as Q, DEVICE_STATUS_METHOD as Qn, normalizeCoreBlockWrite as Qt, StorageLocationModeSchema as R, compositionFeatureEnabled as Rn, legacyAutoLinkIds as Rt, FieldClaimModeSchema as S, storageMigrationCapability as Sn, enumerateItemArrayFields as St, LegacyStorageLocationDefaultSchema as T, streamCatalogCapability as Tn, evictionPolicyOfLocation as Tt, addonSettingsCapability as U, disarmRoseMemory as Un, logDestinationCapability as Ut, UserRecordSchema as V, compositionSourceKey as Vn, localNetworkCapability as Vt, addonWidgetsCapability as W, toExpressionValue as Wn, logLevelAtMost as Wt, buildCapabilityLookup as X, DATAPLANE_SECRET_HEADER as Xn, modeMayWrite as Xt, batteryCapability as Y, BaseAddon as Yn, metricsProviderCapability as Yt, buildStreamParamsConfigSchema as Z, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Zn, motionCapability as Zt, DAY_NAMES as _, scoreRuntimes as _n, scopeKey as _r, deviceExtensionCapability as _t, BatteryStatusSchema as a, procedureAuthKey as an, createEvent as ar, coreBlockComposition as at, DeviceStatusSchema as b, snapshotCapability as bn, EventCategory as br, deviceStatusCapability as bt, COMPOSED_ITEM_FIXED_FIELDS as c, replacedFieldKeys as cn, expandCapMethods as cr, coreBlocksCapability as ct, CORE_BLOCK_ADDON_PREFIX as d, resolveCoreBlockFiles as dn, isEvent as dr, databaseSnapshotCapability as dt, objectInputDeclaresAddonId as en, ReadinessTimeoutError as er, collectSecretConfigKeys as et, CalendarPreferencesSchema as f, resolveLocationMode as fn, nodePin as fr, declarationOwnerNodeId as ft, DATABASE_SNAPSHOT_TIMEOUT_MS as g, scopesAllowDeviceCap as gn, resolveCapMount as gr, describeComposableCaps as gt, DATABASE_SNAPSHOT_SUFFIX as h, scopesAllowAddon as hn, readinessKey as hr, deriveBatteryPresence as ht, BaseDevice as i, platformProbeCapability as in, asString$1 as ir, coreBlockAddonId as it, REDACTED_SECRET as j, vectorStoreCapability as jn, gbToBytes as jt, MOTION_CLOSE_AFTER_MS as k, vectorDimFromBase64 as kn, foldSnapshotByFunction as kt, COMPOSER_RUNNER_ID as l, resolveBucketMs as ln, hydrateSchema as lr, createDeviceExtensionProvider as lt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as m, runtimeStatePolicyFor as mn, parseJsonUnknown as mr, defineExtensionSlotProvider as mt, AlertSchema as n, parseStreamParamsFormPatch as nn, asJsonObject as nr, compositionFieldKey as nt, CAMERA_SWITCH_ORDER as o, ptzAutotrackCapability as on, emitDownForOwnedCaps as or, coreBlockIdFromAddonId as ot, CoreBlockSchema as p, resolveMethodAuth as pn, parseJsonObject as pr, decodeVectorBase64 as pt, backupCapability as q, DeviceType as qn, mayWriteToLocation as qt, ApiKeyRecordSchema as r, planComposition as rn, asNumber as rr, compositionSourceRefs as rt, CAP_NAMES_WITH_STATUS as s, reducePoints as sn, emitReadiness as sr, coreBlockSourceKind as st, ALL_CAPABILITY_DEFINITIONS as t, objectInputDeclaresRequiredDeviceId as tn, WELL_KNOWN_TAB_MAP as tr, composerCapability as tt, CORE_BLOCKS_ADDON_ID as u, resolveCoreBlockEntry as un, isDeviceConfigCap as ur, dataStoreProviderCapability as ut, DERIVED_CAMERA_SILENCED_CAP_NAMES as v, settingsStoreCapability as vn, sleep as vr, deviceManagerCapability as vt, LOG_LEVEL_RANK as w, storageProviderCapability as wn, evaluateCompositionField as wt, FIRST_LEVEL_MACRO_CLASSES as x, storageCapability as xn, enumerateInferenceDevices as xt, DeclaredDevices as y, siteZoneKey as yn, toNodeId as yr, deviceStateCapability as yt, StorageLocationTypeSchema as z, compositionItemFieldPath as zn, legacyModeOf as zt };
+export { calendarsCapability as $, DEVICE_SETTINGS_CONTRIBUTION_METHODS as $n, normalizeCoreBlockWrite as $t, MOTION_CLOSE_AFTER_MS as A, validateComposition as An, foldSnapshotByFunction as At, StorageLocationTypeSchema as B, compositionFeatureEnabled as Bn, legacyModeOf as Bt, FieldClaimModeSchema as C, storageCapability as Cn, enumerateItemArrayFields as Ct, LocationIconIdSchema as D, streamCatalogCapability as Dn, expandContainer as Dt, LegacyStorageLocationDefaultSchema as E, storageProviderCapability as En, evictionPolicyOfLocation as Et, STORAGE_ACCESS_FALLBACK as F, COMPOSER_ADDON_ID as Fn, isLocationEnabled as Ft, addonWidgetsCapability as G, disarmRoseMemory as Gn, logLevelAtMost as Gt, UserRecordSchema as H, compositionSliceKey as Hn, localNetworkCapability as Ht, STREAM_PROFILE_META as I, buildFfmpegArgs as In, isObjectInput as It, backupCapability as J, DeviceRole as Jn, mayWriteToLocation as Jt, alertsCapability as K, toExpressionValue as Kn, looseSchema as Kt, ScopedTokenSchema as L, cloneStatefulExpressionMemory as Ln, isVoidInput as Lt, REDACTED_SECRET as M, vectorIndexDimConflictError as Mn, gbToBytes as Mt, RUNTIME_DEFAULTS as N, vectorStoreCapability as Nn, isArrayOutputSchema as Nt, METHOD_ACCESS_MAP as O, streamQualityLabel as On, extractNestedAddonId as Ot, RecordingStatusSchema as P, withLocationMode as Pn, isCollectionArrayMethod as Pt, buildStreamParamsConfigSchema as Q, DATAPLANE_SECRET_HEADER as Qn, motionCapability as Qt, StorageCleanupJobSchema as R, composedDeviceRef as Rn, kebabToCamel as Rt, FIRST_LEVEL_MACRO_CLASSES as S, snapshotCapability as Sn, EventCategory as Sr, enumerateInferenceDevices as St, LOG_LEVEL_RANK as T, storageOccupancyCapability as Tn, evaluateCompositionField as Tt, addonPagesCapability as U, compositionSourceKey as Un, locationIconKey as Ut, StorageMigrationJobSchema as V, compositionItemFieldPath as Vn, lifecycleJobSchema as Vt, addonSettingsCapability as W, createStatefulExpressionMemory as Wn, logDestinationCapability as Wt, batteryCapability as X, errMsg as Xn, metricsProviderCapability as Xt, bareAddonId as Y, DeviceType as Yn, memoizePinnedFfmpeg as Yt, buildCapabilityLookup as Z, BaseAddon as Zn, modeMayWrite as Zt, DATABASE_SNAPSHOT_TIMEOUT_MS as _, scopesAllowAddon as _n, readinessKey as _r, describeComposableCaps as _t, BatteryStatusSchema as a, planComposition as an, asNumber as ar, coreBlockAddonId as at, DeclaredDevices as b, settingsStoreCapability as bn, sleep as br, deviceStateCapability as bt, CAP_NAMES_WITH_STATUS as c, ptzAutotrackCapability as cn, emitDownForOwnedCaps as cr, coreBlockSourceKind as ct, CORE_BLOCKS_ADDON_ID as d, resolveBucketMs as dn, hydrateSchema as dr, dataStoreProviderCapability as dt, normalizeUnit as en, DEVICE_STATUS_METHOD as er, cameraGridLayoutCapability as et, CORE_BLOCK_ADDON_PREFIX as f, resolveCoreBlockEntry as fn, isDeviceConfigCap as fr, databaseSnapshotCapability as ft, DATABASE_SNAPSHOT_SUFFIX as g, runtimeStatePolicyFor as gn, parseJsonUnknown as gr, deriveBatteryPresence as gt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as h, resolveMethodAuth as hn, parseJsonObject as hr, defineExtensionSlotProvider as ht, BaseDevice as i, pickAppLinkHub as in, asJsonObject as ir, compositionSourceRefs as it, RECORDING_SOURCE_CAMSTACK_ADDON as j, vectorDimFromBase64 as jn, formatMinutes as jt, MINUTES_PER_DAY as k, userManagementCapability as kn, filesystemBrowseCapability as kt, COMPOSED_ITEM_FIXED_FIELDS as l, reducePoints as ln, emitReadiness as lr, coreBlocksCapability as lt, CoreBlockSchema as m, resolveLocationMode as mn, nodePin as mr, decodeVectorBase64 as mt, AlertSchema as n, objectInputDeclaresRequiredDeviceId as nn, ReadinessTimeoutError as nr, composerCapability as nt, CAMERA_SWITCH_ORDER as o, platformProbeCapability as on, asString$1 as or, coreBlockComposition as ot, CalendarPreferencesSchema as p, resolveCoreBlockFiles as pn, isEvent as pr, declarationOwnerNodeId as pt, authProviderCapability as q, DeviceFeature as qn, mayReadLocation as qt, ApiKeyRecordSchema as r, parseStreamParamsFormPatch as rn, WELL_KNOWN_TAB_MAP as rr, compositionFieldKey as rt, CAMSTACK_APP_LINK_ORIGIN as s, procedureAuthKey as sn, createEvent as sr, coreBlockIdFromAddonId as st, ALL_CAPABILITY_DEFINITIONS as t, objectInputDeclaresAddonId as tn, ReadinessRegistry as tr, collectSecretConfigKeys as tt, COMPOSER_RUNNER_ID as u, replacedFieldKeys as un, expandCapMethods as ur, createDeviceExtensionProvider as ut, DAY_NAMES as v, scopesAllowDeviceCap as vn, resolveCapMount as vr, deviceExtensionCapability as vt, FieldClaimSchema as w, storageMigrationCapability as wn, enumerateSchemaFields as wt, DeviceStatusSchema as x, siteZoneKey as xn, toNodeId as xr, deviceStatusCapability as xt, DERIVED_CAMERA_SILENCED_CAP_NAMES as y, scoreRuntimes as yn, scopeKey as yr, deviceManagerCapability as yt, StorageLocationModeSchema as z, composedDeviceStableId as zn, legacyAutoLinkIds as zt };

package/dist/{dist-CXVXFdJX.js → dist-DePB7uwU.js}

@@ -14169,7 +14169,7 @@ var detectionPipelineCapability = {
 * This matters here more than anywhere else in the repo, because every provider
 * that knows a device's host knows its PASSWORD too: `{ host, port, username,
 * password }` sit in one object on Hikvision, Amcrest, Reolink and ONVIF alike,
-* and `http://admin:hunter2@192.168.x.x/` is a URL a browser accepts. The
+* and `http://admin:hunter2@192.168.60.139/` is a URL a browser accepts. The
 * camera's own page will ask for its own login. That is correct, and pre-
 * filling it is the operator's business, not ours.
 *
@@ -21164,8 +21164,9 @@ var NcRuleSchema = NcRuleInputSchema.extend({
 	disabledTargetIds: zod.z.array(zod.z.string()).default([])
 });
 /**
-* The state-summary SECTIONS (D647 / D698): the D637 kind groups that report a
-* still-true state. `backups-exports` and `alarm` are not sections — a completed
+* The state-summary SECTIONS (D647 / D698 / D708): the D637 kind groups that
+* report a still-true state. `addons` is the crash-looped addons only and
+* `addon-updates` the addons that are behind (D708 split them). `backups-exports` and `alarm` are not sections — a completed
 * job is not an open state, and the alarm stays instant.
 */
 var NcStateSummarySectionIdSchema = zod.z.enum([
@@ -21177,6 +21178,7 @@ var NcStateSummarySectionIdSchema = zod.z.enum([
 	"detection-blind",
 	"nodes",
 	"addons",
+	"addon-updates",
 	"updates"
 ]);
 /** One section of a previewed state summary. `unavailable` = its state could not be read. */
@@ -21671,7 +21673,19 @@ var NcAlarmModeDelaysSchema = zod.z.object({
 	* When this mode may be armed. Absent / null = always allowed (same as a
 	* rule with no `schedule`). Evaluated with {@link isScheduleActive}.
 	*/
-	schedule: NcScheduleSchema.optional()
+	schedule: NcScheduleSchema.optional(),
+	/**
+	* D706: while this mode's ENTRY DELAY runs, do the alarm rules' own pushes go out (as an
+	* intrusion naming the locations)? Absent = false — the entry-delay notification is the
+	* only one, and the matches ride the triggered notification's mosaic (D705).
+	*/
+	notifyDuringEntryDelay: zod.z.boolean().optional(),
+	/**
+	* D706: notify "watched again" when a sensor this arm bypassed closes and opens again.
+	* Absent = false (logged, not sent). Even when true it is not sent when that same sensor
+	* is the one that starts the entry delay — the entry-delay notification already names it.
+	*/
+	notifySensorRewatched: zod.z.boolean().optional()
 });
 var NcAlarmModeDelaysListSchema = zod.z.array(NcAlarmModeDelaysSchema).max(8).refine(uniqueModes, { message: "modeDelays: at most one entry per arm mode" });
 /**
@@ -21686,7 +21700,11 @@ var NcAlarmModeDelaysEditSchema = zod.z.object({
 	triggeredDurationSec: NcAlarmTriggeredSecSchema.nullable().optional(),
 	postTriggeredAction: NcAlarmPostTriggeredActionSchema.nullable().optional(),
 	/** Set a schedule, or `null` to clear (mode always allowed again). */
-	schedule: NcScheduleSchema.nullable().optional()
+	schedule: NcScheduleSchema.nullable().optional(),
+	/** D706: set the switch, or `null` to clear it (back to the default, false). */
+	notifyDuringEntryDelay: zod.z.boolean().nullable().optional(),
+	/** D706: set the switch, or `null` to clear it (back to the default, false). */
+	notifySensorRewatched: zod.z.boolean().nullable().optional()
 });
 var NcAlarmModeDelaysEditListSchema = zod.z.array(NcAlarmModeDelaysEditSchema).max(8).refine(uniqueModes, { message: "modeDelays: at most one edit per arm mode" });
 /** One switch of the alarm table: put ONE device on, or take it off, ONE mode's list. */
@@ -26630,6 +26648,22 @@ var MotionSourceEnum = zod.z.enum([
 	"device-activity"
 ]);
 /**
+* What opened an on-motion detection SESSION: the motion source that passed the
+* camera's `motionSources` gate, and what raised it (the camera itself, or a
+* sensor the operator attached — D672). `sensorName` is the attached sensor's
+* device name as the orchestrator's camera-sensors resolution last read it;
+* absent when unknown or when the camera itself triggered.
+*
+* Carried on the session attach ONLY so the runner's `DetectionPhaseTransition`
+* can say what started the session (D672 rule 11, amended 2026-10-06). The
+* runner never decides anything on it.
+*/
+var SessionTriggerSchema = zod.z.object({
+	source: MotionSourceEnum,
+	triggeredBy: MotionTriggeredBySchema,
+	sensorName: zod.z.string().optional()
+});
+/**
 * List of motion sources active on a camera. Empty array is valid:
 * "no source" — happens for battery cams without firmware motion when
 * the operator hasn't opted into the SW analyzer (would hold the
@@ -26881,6 +26915,14 @@ var RunnerCameraConfigSchema = zod.z.object({
 	*/
 	motionSources: MotionSourcesSchema.default(["analyzer"]),
 	/**
+	* What opened this attach, on a SESSION attach only (see
+	* {@link SessionTriggerSchema}). OPTIONAL with no default: absent on a
+	* standing attach, an occupancy burst, a re-dispatch with no motion event
+	* behind it, and every attach from an orchestrator older than the field — the
+	* runner then names no source on the phase event.
+	*/
+	sessionTrigger: SessionTriggerSchema.optional(),
+	/**
 	* WHICH root detector runs for this camera. The detection counterpart of
 	* {@link motionSources}, same shape and same discipline: a per-camera list
 	* of sources the system understands, vendor-agnostic, owned here.
@@ -31445,6 +31487,50 @@ var videoclipsCapability = {
 		})
 	}
 };
+/** The central link domain the viewer app claims (Universal Links / App Links). */
+var CAMSTACK_APP_LINK_ORIGIN = "https://camstack.zentik.app";
+/**
+* Reduce a base URL to the bare origin the central page accepts as `hub=`,
+* or `null` when it cannot be one: not http(s), carries credentials, or does
+* not parse. A path/query/fragment is dropped — the central page mounts the
+* viewer under the origin itself.
+*/
+function toAppLinkHubOrigin(baseUrl) {
+	let parsed;
+	try {
+		parsed = new URL(baseUrl);
+	} catch {
+		return null;
+	}
+	if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return null;
+	if (parsed.username !== "" || parsed.password !== "") return null;
+	if (parsed.hostname === "") return null;
+	return parsed.origin;
+}
+/**
+* The hub address an app link carries as `hub=`, chosen from the hub's OWN
+* advertised palette so it always agrees with what the Network page lists:
+* the public tunnel first, then the mesh (Tailscale MagicDNS) — HTTPS only,
+* because the app and the hosted viewer reach it from off the LAN. `null`
+* when the hub advertises neither.
+*/
+function pickAppLinkHub(endpoints) {
+	const rank = (e) => {
+		if (e.kind !== "public" || !e.baseUrl.startsWith("https://")) return null;
+		if (e.interfaceKind === "public") return 0;
+		if (e.interfaceKind === "vpn") return 1;
+		return null;
+	};
+	return endpoints.flatMap((e) => {
+		const r = rank(e);
+		const origin = toAppLinkHubOrigin(e.baseUrl);
+		return r === null || origin === null ? [] : [{
+			r,
+			p: e.priority,
+			origin
+		}];
+	}).toSorted((a, b) => a.r - b.r || a.p - b.p)[0]?.origin ?? null;
+}
 /**
 * Optional client-side hints sent at session creation to help the provider
 * pick the best native source. All fields optional — a viewer that knows
@@ -36148,7 +36234,7 @@ var LocalInterfaceSchema = zod.z.object({
 	name: zod.z.string(),
 	family: zod.z.enum(["IPv4", "IPv6"]),
 	address: zod.z.string(),
-	/** CIDR shorthand (e.g. `192.168.x.x/24`). Empty when OS doesn't expose. */
+	/** CIDR shorthand (e.g. `192.168.10.10/24`). Empty when OS doesn't expose. */
 	cidr: zod.z.string(),
 	/** OS netmask. Stable across calls so the SDK can hash on it. */
 	netmask: zod.z.string(),
@@ -36202,7 +36288,8 @@ var ConnectionEndpointSchema = zod.z.object({
 		"lan-ipv4",
 		"lan-ipv6",
 		"public",
-		"loopback"
+		"loopback",
+		"app-link"
 	]),
 	/**
 	* Originating-interface kind — `lan`/`wifi`/`docker`/`vpn`/`other`/
@@ -36271,15 +36358,27 @@ var GetConnectionEndpointsResultSchema = zod.z.object({
 	localPort: AdvertisedLocalPortSchema
 });
 /**
-* The chosen outbound endpoint for notification artifacts. `baseUrl: null` =
-* AUTO (resolved from the candidate ranking at send time); `resolved` reports
-* what AUTO currently picks, so the UI can show the effective value either way.
+* The address flagged for notification links. `baseUrl: null` = AUTO, which
+* since D709 is the CamStack app link; `resolved` reports the effective value,
+* so the UI can show it either way.
 */
 var NotificationEndpointSchema = zod.z.object({
 	/** The operator's explicit choice, or null for AUTO. */
 	baseUrl: zod.z.string().nullable(),
-	/** What the ranking currently resolves to (null when nothing is reachable). */
-	resolved: zod.z.string().nullable()
+	/**
+	* The effective flagged address: the explicit choice, else (AUTO) the
+	* CamStack app link `https://camstack.zentik.app` (D709). A pre-D709 hub
+	* answered the public tunnel / mesh here, or null.
+	*/
+	resolved: zod.z.string().nullable(),
+	/**
+	* The hub origin an app link carries as `hub=` (D709): the hub's best
+	* public HTTPS address — the tunnel, then the mesh (Tailscale MagicDNS) —
+	* picked from this cap's own palette by `pickAppLinkHub`. `null` when the
+	* hub advertises neither; the app link is then minted without `hub=`.
+	* Absent on a pre-D709 hub.
+	*/
+	appLinkHub: zod.z.string().nullable()
 });
 /**
 * The URLs the SDK / viewer should race for API access. `baseUrls` empty =
@@ -36347,7 +36446,7 @@ var localNetworkCapability = {
 		* every client a second authority on a socket only the hub binds. A viewer
 		* configured with a port-less public URL (`https://camstack.example.top`)
 		* infers 443 from the scheme, asks with 443, and was handed
-		* `https://192.168.x.x:443` for a hub listening on 4443. That candidate
+		* `https://192.168.10.9:443` for a hub listening on 4443. That candidate
 		* cannot ever answer, and losing its race reads in the log exactly like
 		* "the LAN was tried and it was slower" — so an operator sitting on his own
 		* WiFi stayed on the public tunnel for weeks, with the LAN candidate born
@@ -36380,13 +36479,21 @@ var localNetworkCapability = {
 			*  Pass `'https'` when the caller is itself loaded over HTTPS
 			*  to avoid mixed-content blocks in the browser. The public
 			*  tunnel always emits `https://` regardless. */
-			scheme: zod.z.enum(["http", "https"]).optional()
+			scheme: zod.z.enum(["http", "https"]).optional(),
+			/** Append the CamStack app link entry (`kind: 'app-link'`, D709) —
+			*  an address notification links can be flagged with, not a hub
+			*  route. Default `false`: racers and rankers never see it. */
+			includeAppLink: zod.z.boolean().optional()
 		}), GetConnectionEndpointsResultSchema),
 		/**
-		* The endpoint OUTBOUND artifacts must be addressed by — notification
-		* attachment links and deep links. `baseUrl: null` means AUTO: the first
-		* public candidate (a configured origin, then a connected tunnel, then the
-		* LAN), never loopback.
+		* The address notification links are flagged with. `baseUrl: null` means
+		* AUTO, which is the CamStack app link (D709): viewer taps go through
+		* `https://camstack.zentik.app/…?hub=<appLinkHub>` and open the app. Any
+		* hub address the palette lists can be flagged instead; then viewer taps,
+		* attachment links and action buttons all use it. Signed media and
+		* buttons never use the app link — with it flagged (or AUTO) they keep
+		* the ranked hub ladder (a configured origin, a connected tunnel, then
+		* the LAN), never loopback.
 		*
 		* Why an explicit marker: the automatic ranking cannot know which of
 		* several reachable addresses the RECIPIENT can actually open. A link is
@@ -36800,7 +36907,7 @@ var MeshPeerSchema = zod.z.object({
 	tags: zod.z.array(zod.z.string()).readonly(),
 	/** True when the peer advertises itself as an exit-node candidate. */
 	exitNodeOption: zod.z.boolean(),
-	/** Subnet routes the peer advertises (e.g. `["192.168.x.x/24"]`). */
+	/** Subnet routes the peer advertises (e.g. `["192.168.10.0/24"]`). */
 	advertisedRoutes: zod.z.array(zod.z.string()).readonly(),
 	/** Owner account login (e.g. `foo@example.com`). Null for tagged peers. */
 	userLogin: zod.z.string().nullable(),
@@ -58617,12 +58724,14 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 	{
 		id: "addons",
 		family: "system",
-		label: "Addons",
-		kinds: [
-			"addon-crash-loop",
-			"addon-update-available",
-			"addon-updated"
-		]
+		label: "Addons stopped",
+		kinds: ["addon-crash-loop"]
+	},
+	{
+		id: "addon-updates",
+		family: "system",
+		label: "Addon updates",
+		kinds: ["addon-update-available", "addon-updated"]
 	},
 	{
 		id: "updates",
@@ -58782,13 +58891,15 @@ var STATE_SUMMARY_SECTION_VARS = [
 	},
 	{
 		name: "summaryAddons",
-		label: "Summary: addons",
-		example: "@camstack/addon-recorder 1.2.3 → 1.2.4",
-		kinds: [
-			"addon-crash-loop",
-			"addon-update-available",
-			"addon-updated"
-		]
+		label: "Summary: addons stopped",
+		example: "hub — recorder stopped after repeated crashes",
+		kinds: ["addon-crash-loop"]
+	},
+	{
+		name: "summaryAddonUpdates",
+		label: "Summary: addon updates",
+		example: "hub:\n• @camstack/addon-recorder 1.2.3 → 1.2.4",
+		kinds: ["addon-update-available", "addon-updated"]
 	},
 	{
 		name: "summaryUpdates",
@@ -58872,6 +58983,7 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_BODY_ONLY],
 	[...RULE_TEXT],
 	([...RULE_TEXT], [...DEVICE_EVENTS]),
+	([...RULE_TEXT], [...COMBINED_ALARM]),
 	([...RULE_TEXT], [...DEVICE_EVENTS]),
 	([...RULE_TEXT], [...BATTERY, ...CONSUMABLE]),
 	([...RULE_TEXT], [...CONSUMABLE]),
@@ -59639,6 +59751,12 @@ Object.defineProperty(exports, "CAMERA_SWITCH_ORDER", {
 		return CAMERA_SWITCH_ORDER;
 	}
 });
+Object.defineProperty(exports, "CAMSTACK_APP_LINK_ORIGIN", {
+	enumerable: true,
+	get: function() {
+		return CAMSTACK_APP_LINK_ORIGIN;
+	}
+});
 Object.defineProperty(exports, "CAP_NAMES_WITH_STATUS", {
 	enumerable: true,
 	get: function() {
@@ -60473,6 +60591,12 @@ Object.defineProperty(exports, "parseStreamParamsFormPatch", {
 		return parseStreamParamsFormPatch;
 	}
 });
+Object.defineProperty(exports, "pickAppLinkHub", {
+	enumerable: true,
+	get: function() {
+		return pickAppLinkHub;
+	}
+});
 Object.defineProperty(exports, "planComposition", {
 	enumerable: true,
 	get: function() {