@camstack/system 1.2.453 → 1.2.455

package/dist/{dist-B9C2v4SG.mjs → dist-BpSENkRJ.mjs}

@@ -1,6 +1,6 @@
 import { z } from "zod";
 import "node:crypto";
-//#region ../types/dist/event-category-BvOFi6PY.mjs
+//#region ../types/dist/event-category-DOl51-Ij.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -79,9 +79,18 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	/**
 	* The node's one-shot runner boot check (D877): planned runners against the
 	* process service, `degraded` when any is failed, refused or missing. The
-	* alert centre turns it into one alert and a direct critical push.
+	* alert centre turns it into one critical alert.
 	*/
 	EventCategory["SystemRunnerCheck"] = "system.runner-check";
+	/**
+	* An alert EPISODE opened or closed, emitted by the alert centre for alerts
+	* of severity `critical` or `error` (`AlertEpisodePayload`). The alert
+	* centre sends no notification of its own: Notification Center turns this
+	* into the `alert-critical` / `alert-error` / `alert-critical-resolved`
+	* system-event kinds, and reconciles from the alerts store because a bus
+	* event may be dropped (D8, D11).
+	*/
+	EventCategory["AlertEpisode"] = "alert.episode";
 	EventCategory["AddonError"] = "addon.error";
 	EventCategory["AddonPageReady"] = "addon.page-ready";
 	EventCategory["AddonWidgetReady"] = "addon.widget-ready";
@@ -736,7 +745,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/sleep-BegKjwUu.mjs
+//#region ../types/dist/sleep-BxjU_fJM.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -3248,6 +3257,12 @@ function normalizeAddonInitResult(result) {
 * core proxy and the kernel listener) to keep both off a kernel↔core import.
 */
 var DATAPLANE_SECRET_HEADER = "x-camstack-dataplane-secret";
+/**
+* The share-view scope kinds a `csv_*` share token can carry. The hub mints
+* and validates them (`share-token.service.ts` builds its enum from this
+* list); a data plane names the kinds it ACCEPTS in `share`.
+*/
+var SHARE_VIEW_KINDS = ["grid-view", "events-view"];
 /** The wire shape of {@link PeerBytesTicket} — see the type for what it is. */
 var PeerBytesTicketSchema = z.object({
 	/** `http://127.0.0.1:<port>/<token>`. One `GET` takes it. */
@@ -10383,6 +10398,235 @@ function scopesAllowDeviceCap(scopes, access) {
 function scopesAllowAddon(scopes, addonId, access) {
 	return scopes.some((s) => s.type === "addon" && s.target === addonId && s.access.includes(access));
 }
+/**
+* Zod schemas for persisted record types.
+*
+* These schemas serve as the single source of truth for types that are
+* stored in the settings-store backend and retrieved via tRPC. They
+* replace the manual TypeScript interfaces with schema-derived types,
+* enabling runtime validation when reading from the backend.
+*
+* Convention: each schema is named `<Type>Schema`, the inferred TS type
+* keeps the original name for backward compatibility.
+*/
+/**
+* Auth model (v2 — 2026-05-12 caps-only):
+*
+* Two principals:
+*   - `isAdmin: true`  — full bypass. Admin scope set is ignored.
+*   - `isAdmin: false` — every call gated by `scopes` (see TokenScope).
+*
+* No role enum. There used to be `viewer / agent / scoped` and earlier
+* `super_admin` — collapsed onto the single boolean because every
+* non-admin caller is governed by the same scope-check rules; the
+* distinction was only ever used to route role-specific procedures
+* which we no longer have. CLI / webhook integrations are `cst_*` tokens
+* with `isAdmin: false` + an explicit scope list.
+*/
+/** Per-method access flavour. Materialised on every cap method via codegen. */
+var MethodAccessSchema = z.enum([
+	"view",
+	"create",
+	"delete"
+]);
+/**
+* A single scope grant. Three forms — checked in matcher with OR
+* semantics; the first match decides whether the call passes:
+*
+*   - `category` — broadest. `target: 'device' | 'system'` selects every
+*     cap with the matching `scope` declaration. New caps inherit grants
+*     automatically — adding a device cap to the codebase makes it
+*     reachable to every user with `category:device [...]` without a
+*     re-grant. Use this for "family viewer" / "operator" tiers.
+*
+*   - `addon` — every cap that ships inside a given addon id. Niche;
+*     useful when an integration needs to interact with one specific
+*     addon's surface regardless of how many caps it exports.
+*
+*   - `capability` — the most precise form. Single cap name. Use for
+*     integration tokens where you want to grant `addons.installPackage`
+*     and nothing else.
+*
+* `access` is REQUIRED with min 1 element. `admin` bypass is the
+* "give me everything" escape; there is no wildcard scope.
+*/
+var AllowedProviderSchema = z.union([z.literal("*"), z.array(z.string())]);
+var AllowedDevicesSchema = z.record(z.string(), z.union([z.literal("*"), z.array(z.string())]));
+var CapScopeSchema = z.enum(["device", "system"]);
+/**
+* DeviceSelector (scope model v3 — 2026-08-12).
+*
+* A `device` grant no longer carries a frozen list of deviceIds. It carries
+* a SELECTOR the matcher resolves against the live fleet, so the grant can be
+* DYNAMIC: a `types:['camera']` selector automatically covers a camera added
+* AFTER the grant was minted — no re-grant, no re-login.
+*
+*   - `all`       — every device in the deployment. The broad viewer/operator
+*     lever without a `category` grant (a `category` grant also covers device
+*     caps that carry no deviceId; `all` is specifically the device set).
+*   - `ids`       — an explicit deviceId list. This is what a v2 `device:[…]`
+*     grant migrates to (see {@link TokenScopeSchema}); STATIC — a new camera
+*     is NOT covered until the grant is edited.
+*   - `types`     — every device of a `DeviceType` (e.g. every `camera`).
+*     DYNAMIC. A device that changes type, or a new device of the type,
+*     re-resolves on the next request.
+*   - `locations` — every device whose operator-assigned `location` label is
+*     in the set (e.g. "Garden", "Front door"). DYNAMIC. A device with a
+*     null/unset location matches NO `locations` selector.
+*/
+var DeviceSelectorSchema = z.discriminatedUnion("kind", [
+	z.object({ kind: z.literal("all") }),
+	z.object({
+		kind: z.literal("ids"),
+		ids: z.array(z.number().int()).min(1)
+	}),
+	z.object({
+		kind: z.literal("types"),
+		types: z.array(z.enum(DeviceType)).min(1)
+	}),
+	z.object({
+		kind: z.literal("locations"),
+		locations: z.array(z.string().min(1)).min(1)
+	})
+]);
+var DeviceTokenScopeSchema = z.object({
+	type: z.literal("device"),
+	/** The device SET this grant covers — resolved against the live fleet. */
+	selector: DeviceSelectorSchema,
+	access: z.array(MethodAccessSchema).min(1),
+	/**
+	* Whether a grant on a PARENT device transparently covers its accessory
+	* CHILDREN (siren / floodlight / PIR) via the persisted-parentage walk.
+	* Direction is parent → children ONLY.
+	*
+	* Absent → the matcher DERIVES it from the access flavour: `view`
+	* inherits (a camera viewer sees the camera's accessories), `create` /
+	* `delete` do NOT (actuating/removing a child is an explicit act the
+	* operator must grant on the child, not inherit from the parent). Set it
+	* explicitly to override that default per grant.
+	*/
+	includeLinked: z.boolean().optional()
+});
+/**
+* v2 → v3 lazy migration. A pre-v3 `device` grant carried
+* `targets: string[]` (stringified deviceIds); it rewrites to the equivalent
+* `selector: {kind:'ids', ids}`. Applied as a `preprocess` so it runs on
+* EVERY parse path — stored records AND the JWT-carried scope arrays
+* normalised at the request boundary ({@link normalizeTokenScopes} in
+* `device-selector.ts`). Chosen over a one-time DB migration because a
+* migration cannot reach a JWT already in a client's hands; parse-time
+* migration covers both without a flag day. No cast — the raw object is read
+* through `Reflect.get` (its static type is `unknown`).
+*/
+function migrateLegacyTokenScope(raw) {
+	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return raw;
+	if (Reflect.get(raw, "type") !== "device") return raw;
+	if (Reflect.get(raw, "selector") !== void 0) return raw;
+	const targets = Reflect.get(raw, "targets");
+	if (!Array.isArray(targets)) return raw;
+	return {
+		type: "device",
+		selector: {
+			kind: "ids",
+			ids: targets.map((t) => typeof t === "string" ? Number(t) : t).filter((n) => typeof n === "number" && Number.isInteger(n))
+		},
+		access: Reflect.get(raw, "access")
+	};
+}
+var TokenScopeSchema = z.preprocess(migrateLegacyTokenScope, z.discriminatedUnion("type", [
+	z.object({
+		type: z.literal("category"),
+		target: CapScopeSchema,
+		access: z.array(MethodAccessSchema).min(1)
+	}),
+	z.object({
+		type: z.literal("capability"),
+		target: z.string(),
+		access: z.array(MethodAccessSchema).min(1)
+	}),
+	z.object({
+		type: z.literal("addon"),
+		target: z.string(),
+		access: z.array(MethodAccessSchema).min(1)
+	}),
+	DeviceTokenScopeSchema
+]));
+var UserRecordSchema = z.object({
+	id: z.string(),
+	username: z.string(),
+	passwordHash: z.string(),
+	/**
+	* Admin bypass. When true, the middleware skips the scope-access
+	* check entirely. There is no other axis of privilege; the legacy
+	* role enum collapsed onto this boolean in v2.
+	*/
+	isAdmin: z.boolean().default(false),
+	allowedProviders: AllowedProviderSchema,
+	allowedDevices: AllowedDevicesSchema,
+	/**
+	* Scopes granted to this user. Admins bypass; their `scopes` is
+	* ignored. Non-admins without scopes are locked out of every
+	* protected call.
+	*/
+	scopes: z.array(TokenScopeSchema).default([]),
+	createdAt: z.number(),
+	updatedAt: z.number()
+});
+var ApiKeyRecordSchema = z.object({
+	id: z.string(),
+	label: z.string(),
+	isAdmin: z.boolean().default(false),
+	allowedProviders: AllowedProviderSchema,
+	allowedDevices: AllowedDevicesSchema,
+	tokenHash: z.string(),
+	tokenPrefix: z.string(),
+	createdAt: z.number(),
+	lastUsedAt: z.number().optional()
+});
+var ScopedTokenSchema = z.object({
+	id: z.string(),
+	userId: z.string(),
+	name: z.string(),
+	tokenHash: z.string(),
+	tokenPrefix: z.string(),
+	scopes: z.array(TokenScopeSchema),
+	expiresAt: z.number().nullish(),
+	lastUsedAt: z.number().nullish(),
+	createdAt: z.number()
+});
+/** What a share-view grant lets its holder see. */
+var ShareViewGrantSchema = z.object({
+	kind: z.enum(SHARE_VIEW_KINDS),
+	deviceIds: z.array(z.number().int().nonnegative()).min(1).max(64),
+	/** Talk-back, opt-in at mint time; absent means off. */
+	talk: z.boolean().optional()
+});
+var ShareViewScopeSchema = z.object({
+	type: z.literal("share-view"),
+	grant: ShareViewGrantSchema
+});
+var AddonRoutesScopeSchema = z.object({
+	type: z.literal("addon-routes"),
+	access: z.array(MethodAccessSchema).min(1)
+});
+var CredentialScopeSchema = z.union([
+	z.literal("*"),
+	ShareViewScopeSchema,
+	AddonRoutesScopeSchema,
+	TokenScopeSchema
+]);
+/**
+* The claims of a unified token (`auth.mintToken`). It carries no `exp`: its
+* row (looked up by `jti` on every verify, for revocation) holds the ONE
+* expiry, so a share link can be extended and a JWT clock can never disagree
+* with the row.
+*/
+var CredentialTokenClaimsSchema = z.object({
+	kind: z.literal("credential"),
+	sub: z.string().min(1),
+	jti: z.string().min(16),
+	scopes: z.array(CredentialScopeSchema).min(1)
+});
 z.enum(["new-session", "step-up"]);
 /** The languages the hub's app landing pages are written in (D858). */
 var AppPageLangSchema = z.enum(["en", "it"]);
@@ -11267,7 +11511,14 @@ var AlertSeveritySchema = z.enum([
 ]);
 var AlertActionSchema = z.object({
 	label: z.string(),
-	href: z.string().optional()
+	href: z.string().optional(),
+	/**
+	* How `href` is followed. Absent / `app`: an admin-ui route (client-side).
+	* `server`: a route the HUB serves (an addon HTTP route such as an OAuth
+	* start) — the browser must leave the SPA with a full navigation, because
+	* the SPA has no such route and would bounce to the home page.
+	*/
+	navigation: z.enum(["app", "server"]).optional()
 });
 var AlertStatusSchema = z.enum([
 	"active",
@@ -44526,6 +44777,9 @@ var NcSystemEventKindSchema = z.enum([
 	"server-updated",
 	"export-completed",
 	"backup-completed",
+	"alert-critical",
+	"alert-error",
+	"alert-critical-resolved",
 	"camera-online",
 	"camera-offline",
 	"camera-disabled",
@@ -46793,202 +47047,6 @@ var notificationRulesCapability = {
 	}
 };
 /**
-* Zod schemas for persisted record types.
-*
-* These schemas serve as the single source of truth for types that are
-* stored in the settings-store backend and retrieved via tRPC. They
-* replace the manual TypeScript interfaces with schema-derived types,
-* enabling runtime validation when reading from the backend.
-*
-* Convention: each schema is named `<Type>Schema`, the inferred TS type
-* keeps the original name for backward compatibility.
-*/
-/**
-* Auth model (v2 — 2026-05-12 caps-only):
-*
-* Two principals:
-*   - `isAdmin: true`  — full bypass. Admin scope set is ignored.
-*   - `isAdmin: false` — every call gated by `scopes` (see TokenScope).
-*
-* No role enum. There used to be `viewer / agent / scoped` and earlier
-* `super_admin` — collapsed onto the single boolean because every
-* non-admin caller is governed by the same scope-check rules; the
-* distinction was only ever used to route role-specific procedures
-* which we no longer have. CLI / webhook integrations are `cst_*` tokens
-* with `isAdmin: false` + an explicit scope list.
-*/
-/** Per-method access flavour. Materialised on every cap method via codegen. */
-var MethodAccessSchema = z.enum([
-	"view",
-	"create",
-	"delete"
-]);
-/**
-* A single scope grant. Three forms — checked in matcher with OR
-* semantics; the first match decides whether the call passes:
-*
-*   - `category` — broadest. `target: 'device' | 'system'` selects every
-*     cap with the matching `scope` declaration. New caps inherit grants
-*     automatically — adding a device cap to the codebase makes it
-*     reachable to every user with `category:device [...]` without a
-*     re-grant. Use this for "family viewer" / "operator" tiers.
-*
-*   - `addon` — every cap that ships inside a given addon id. Niche;
-*     useful when an integration needs to interact with one specific
-*     addon's surface regardless of how many caps it exports.
-*
-*   - `capability` — the most precise form. Single cap name. Use for
-*     integration tokens where you want to grant `addons.installPackage`
-*     and nothing else.
-*
-* `access` is REQUIRED with min 1 element. `admin` bypass is the
-* "give me everything" escape; there is no wildcard scope.
-*/
-var AllowedProviderSchema = z.union([z.literal("*"), z.array(z.string())]);
-var AllowedDevicesSchema = z.record(z.string(), z.union([z.literal("*"), z.array(z.string())]));
-var CapScopeSchema = z.enum(["device", "system"]);
-/**
-* DeviceSelector (scope model v3 — 2026-08-12).
-*
-* A `device` grant no longer carries a frozen list of deviceIds. It carries
-* a SELECTOR the matcher resolves against the live fleet, so the grant can be
-* DYNAMIC: a `types:['camera']` selector automatically covers a camera added
-* AFTER the grant was minted — no re-grant, no re-login.
-*
-*   - `all`       — every device in the deployment. The broad viewer/operator
-*     lever without a `category` grant (a `category` grant also covers device
-*     caps that carry no deviceId; `all` is specifically the device set).
-*   - `ids`       — an explicit deviceId list. This is what a v2 `device:[…]`
-*     grant migrates to (see {@link TokenScopeSchema}); STATIC — a new camera
-*     is NOT covered until the grant is edited.
-*   - `types`     — every device of a `DeviceType` (e.g. every `camera`).
-*     DYNAMIC. A device that changes type, or a new device of the type,
-*     re-resolves on the next request.
-*   - `locations` — every device whose operator-assigned `location` label is
-*     in the set (e.g. "Garden", "Front door"). DYNAMIC. A device with a
-*     null/unset location matches NO `locations` selector.
-*/
-var DeviceSelectorSchema = z.discriminatedUnion("kind", [
-	z.object({ kind: z.literal("all") }),
-	z.object({
-		kind: z.literal("ids"),
-		ids: z.array(z.number().int()).min(1)
-	}),
-	z.object({
-		kind: z.literal("types"),
-		types: z.array(z.enum(DeviceType)).min(1)
-	}),
-	z.object({
-		kind: z.literal("locations"),
-		locations: z.array(z.string().min(1)).min(1)
-	})
-]);
-var DeviceTokenScopeSchema = z.object({
-	type: z.literal("device"),
-	/** The device SET this grant covers — resolved against the live fleet. */
-	selector: DeviceSelectorSchema,
-	access: z.array(MethodAccessSchema).min(1),
-	/**
-	* Whether a grant on a PARENT device transparently covers its accessory
-	* CHILDREN (siren / floodlight / PIR) via the persisted-parentage walk.
-	* Direction is parent → children ONLY.
-	*
-	* Absent → the matcher DERIVES it from the access flavour: `view`
-	* inherits (a camera viewer sees the camera's accessories), `create` /
-	* `delete` do NOT (actuating/removing a child is an explicit act the
-	* operator must grant on the child, not inherit from the parent). Set it
-	* explicitly to override that default per grant.
-	*/
-	includeLinked: z.boolean().optional()
-});
-/**
-* v2 → v3 lazy migration. A pre-v3 `device` grant carried
-* `targets: string[]` (stringified deviceIds); it rewrites to the equivalent
-* `selector: {kind:'ids', ids}`. Applied as a `preprocess` so it runs on
-* EVERY parse path — stored records AND the JWT-carried scope arrays
-* normalised at the request boundary ({@link normalizeTokenScopes} in
-* `device-selector.ts`). Chosen over a one-time DB migration because a
-* migration cannot reach a JWT already in a client's hands; parse-time
-* migration covers both without a flag day. No cast — the raw object is read
-* through `Reflect.get` (its static type is `unknown`).
-*/
-function migrateLegacyTokenScope(raw) {
-	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return raw;
-	if (Reflect.get(raw, "type") !== "device") return raw;
-	if (Reflect.get(raw, "selector") !== void 0) return raw;
-	const targets = Reflect.get(raw, "targets");
-	if (!Array.isArray(targets)) return raw;
-	return {
-		type: "device",
-		selector: {
-			kind: "ids",
-			ids: targets.map((t) => typeof t === "string" ? Number(t) : t).filter((n) => typeof n === "number" && Number.isInteger(n))
-		},
-		access: Reflect.get(raw, "access")
-	};
-}
-var TokenScopeSchema = z.preprocess(migrateLegacyTokenScope, z.discriminatedUnion("type", [
-	z.object({
-		type: z.literal("category"),
-		target: CapScopeSchema,
-		access: z.array(MethodAccessSchema).min(1)
-	}),
-	z.object({
-		type: z.literal("capability"),
-		target: z.string(),
-		access: z.array(MethodAccessSchema).min(1)
-	}),
-	z.object({
-		type: z.literal("addon"),
-		target: z.string(),
-		access: z.array(MethodAccessSchema).min(1)
-	}),
-	DeviceTokenScopeSchema
-]));
-var UserRecordSchema = z.object({
-	id: z.string(),
-	username: z.string(),
-	passwordHash: z.string(),
-	/**
-	* Admin bypass. When true, the middleware skips the scope-access
-	* check entirely. There is no other axis of privilege; the legacy
-	* role enum collapsed onto this boolean in v2.
-	*/
-	isAdmin: z.boolean().default(false),
-	allowedProviders: AllowedProviderSchema,
-	allowedDevices: AllowedDevicesSchema,
-	/**
-	* Scopes granted to this user. Admins bypass; their `scopes` is
-	* ignored. Non-admins without scopes are locked out of every
-	* protected call.
-	*/
-	scopes: z.array(TokenScopeSchema).default([]),
-	createdAt: z.number(),
-	updatedAt: z.number()
-});
-var ApiKeyRecordSchema = z.object({
-	id: z.string(),
-	label: z.string(),
-	isAdmin: z.boolean().default(false),
-	allowedProviders: AllowedProviderSchema,
-	allowedDevices: AllowedDevicesSchema,
-	tokenHash: z.string(),
-	tokenPrefix: z.string(),
-	createdAt: z.number(),
-	lastUsedAt: z.number().optional()
-});
-var ScopedTokenSchema = z.object({
-	id: z.string(),
-	userId: z.string(),
-	name: z.string(),
-	tokenHash: z.string(),
-	tokenPrefix: z.string(),
-	scopes: z.array(TokenScopeSchema),
-	expiresAt: z.number().nullish(),
-	lastUsedAt: z.number().nullish(),
-	createdAt: z.number()
-});
-/**
 * `oauth-integration` — a collection cap by which an addon declares
 * itself a linkable OAuth client of the hub's core `/oauth2/*` server.
 * Each provider returns a static descriptor; the core enumerates them
@@ -55883,6 +55941,18 @@ var storageMigrationCapability = {
 		*/
 		movers: method(z.object({}), z.array(StorageMigrationMoverSchema).readonly(), { auth: "admin" }),
 		/**
+		* May a mover that touches these locations run NOW? One claim per physical
+		* root is owned by the storage orchestrator: a single-location repoint holds
+		* it while it carries its subtree, and a mover (`relocateMedia`,
+		* `relocateFootage`, a migration move) asks here AFTER registering its job and
+		* cancels itself on `clear: false`. The repoint, in turn, refuses while a
+		* registered mover touches its root. Asked, never polled (D3).
+		*/
+		moverClearance: method(z.object({ locationIds: z.array(z.string()).readonly() }), z.object({
+			clear: z.boolean(),
+			repointLocationId: z.string().optional()
+		}), { auth: "admin" }),
+		/**
 		* What each class's SOURCE still holds, from the archive — never from the
 		* resident index (D295). Only classes with something left (or something
 		* unknown) are listed, so an empty list means there is nothing to drain and
@@ -61103,6 +61173,11 @@ onStatusChanged: { data: z.object({
 *
 * `kind: 'poll'` — cloud REST APIs typically have no push channel; the
 * provider refreshes the slice on an interval and eagerly after commands.
+*
+* UNKNOWN IS NOT OFF. Every field the appliance reports separately is
+* nullable: `null` means "not known right now" (the appliance has not said,
+* the link is down, or the description does not carry it) and is never
+* rendered or exported as `false` / `0`. `availability` says why.
 */
 var DishwasherStateSchema = z.enum([
 	"idle",
@@ -61112,43 +61187,155 @@ var DishwasherStateSchema = z.enum([
 	"error",
 	"unavailable"
 ]);
+/**
+* The appliance's own operation state, uncollapsed. `state` above is the coarse
+* view for compact surfaces; this is what the appliance said.
+*/
+var DishwasherOperationStateSchema = z.enum([
+	"Inactive",
+	"Ready",
+	"DelayedStart",
+	"Run",
+	"Pause",
+	"ActionRequired",
+	"Finished",
+	"Error",
+	"Aborting"
+]);
+/**
+* Why fields may be `null`:
+*  - `available`           — the link is up and the description is loaded;
+*  - `offline`             — the local link is down (values are unknown, not last-known);
+*  - `description-missing` — the link is up but the appliance's description could not
+*                            be loaded, so its values cannot be decoded.
+*/
+var DishwasherAvailabilitySchema = z.enum([
+	"available",
+	"offline",
+	"description-missing"
+]);
 var DishwasherConsumableLevelSchema = z.enum([
 	"ok",
 	"low",
 	"empty"
 ]);
 var DishwasherStatusSchema = z.object({
+	availability: DishwasherAvailabilitySchema,
+	/** Coarse state for compact surfaces; `unavailable` whenever the appliance state is not known. */
 	state: DishwasherStateSchema,
-	/** Active program id/name, or null when none selected / unknown. */
+	/** The appliance's operation state as reported; null when not known. */
+	operationState: DishwasherOperationStateSchema.nullable(),
+	/** Feature key of the ACTIVE (running) program, or null when none runs / not known. */
 	program: z.string().nullable(),
-	/** Program tokens the hardware accepts — drives the UI selector. */
+	/** Feature key of the SELECTED program (what Start would run), or null when none / not known. */
+	selectedProgram: z.string().nullable(),
+	/** Feature keys of the programs the appliance currently offers — drives the UI selector. */
 	availablePrograms: z.array(z.string()),
-	/** Minutes remaining on the active cycle, or null when not running. */
-	remainingMinutes: z.number().int().nonnegative().nullable(),
+	/** Seconds remaining on the active cycle, or null when not running / not known. */
+	remainingSeconds: z.number().int().nonnegative().nullable(),
+	/** Seconds the delayed start is set to (time until the cycle starts), or null. */
+	delayedStartSeconds: z.number().int().nonnegative().nullable(),
 	/** Cycle completion 0..100, or null when not applicable. */
 	progressPercent: z.number().min(0).max(100).nullable(),
-	/** True when the door is reported open. */
-	doorOpen: z.boolean(),
-	/** True when remote start is allowed (door closed, power on, etc.). */
-	remoteStartAllowed: z.boolean(),
-	/** Main power / switched-on state. */
-	powerOn: z.boolean(),
+	/** True when the door is reported open; null when the door state is not known. */
+	doorOpen: z.boolean().nullable(),
+	/** True when the door is latched (locked) during a cycle; null when not reported. */
+	doorLocked: z.boolean().nullable(),
+	/** True when remote start is allowed (door closed, power on, etc.); null when not known. */
+	remoteStartAllowed: z.boolean().nullable(),
+	/** True when the appliance accepts remote control now; null when not known. */
+	remoteControlActive: z.boolean().nullable(),
+	/** True while somebody operates the appliance at its panel; null when not reported. */
+	localControlActive: z.boolean().nullable(),
+	/** Main power / switched-on state; null when not known. */
+	powerOn: z.boolean().nullable(),
+	/** The raw power state (`On`, `Off`, `Standby`, …); null when not known. */
+	powerState: z.string().nullable(),
 	saltLevel: DishwasherConsumableLevelSchema.nullable(),
 	rinseAidLevel: DishwasherConsumableLevelSchema.nullable(),
-	halfLoad: z.boolean(),
-	hygienePlus: z.boolean(),
+	/** Option states: null when the appliance does not expose the option or has not said. */
+	halfLoad: z.boolean().nullable(),
+	hygienePlus: z.boolean().nullable(),
 	/** Extra dry option when the appliance exposes it. */
-	extraDry: z.boolean(),
+	extraDry: z.boolean().nullable(),
 	/** Intensive zone (lower basket) when the appliance exposes it. */
-	intensiveZone: z.boolean(),
+	intensiveZone: z.boolean().nullable(),
 	/** VarioSpeed / VarioSpeed+ when the appliance exposes it. */
-	varioSpeedPlus: z.boolean(),
-	/** Child lock (controls disabled on the appliance). */
-	childLock: z.boolean(),
+	varioSpeedPlus: z.boolean().nullable(),
+	/** Child lock (controls disabled on the appliance); null when not known. */
+	childLock: z.boolean().nullable(),
+	/** Feature keys of the events currently raised (salt low, rinse aid low, program finished, …). */
+	activeEvents: z.array(z.string()),
+	/** Numeric error code when the appliance reports one; null otherwise. */
 	errorCode: z.number().nullable(),
+	/** Name of the raised alert-level event while the appliance is in error; null otherwise. */
 	errorLabel: z.string().nullable(),
+	/** Ms epoch of the last value received from the appliance; 0 = never. */
 	lastFetchedAt: z.number()
 });
+var DeviceIdSchema = z.number().int().nonnegative();
+/** A value a program option or setting can take. */
+var DishwasherValueSchema = z.union([
+	z.boolean(),
+	z.string(),
+	z.number()
+]);
+var DishwasherAccessSchema = z.enum([
+	"none",
+	"read",
+	"readWrite",
+	"writeOnly",
+	"readStatic"
+]);
+/**
+* One option or setting the appliance declares, with the constraints its description
+* gives. A `readWrite` descriptor that is `available` is what `setOption` accepts.
+*/
+var DishwasherOptionDescriptorSchema = z.object({
+	/** Feature key (`Dishcare.Dishwasher.Option.ExtraDry`). */
+	key: z.string(),
+	/** Last segment of the key, for display. */
+	name: z.string(),
+	type: z.enum([
+		"boolean",
+		"number",
+		"enum",
+		"string"
+	]),
+	access: DishwasherAccessSchema,
+	/** The appliance reports this entity as currently available. */
+	available: z.boolean(),
+	/** Unit the description declares for a number; null when it declares none. */
+	unit: z.string().nullable(),
+	min: z.number().nullable(),
+	max: z.number().nullable(),
+	step: z.number().nullable(),
+	/** Allowed members of an enum; null for other types. */
+	enumValues: z.array(z.string()).nullable(),
+	defaultValue: DishwasherValueSchema.nullable()
+});
+var DishwasherProgramSchema = z.object({
+	/** Feature key (`Dishcare.Dishwasher.Program.Eco50`) — what `setProgram` / `start` take. */
+	key: z.string(),
+	name: z.string(),
+	/** The appliance currently offers this program. */
+	available: z.boolean(),
+	/** The options this program lists, with the program-level access / availability / default. */
+	options: z.array(DishwasherOptionDescriptorSchema)
+});
+var DishwasherOptionsSchema = z.object({
+	availability: DishwasherAvailabilitySchema,
+	/** What the appliance can be told to do, from the commands its description declares. */
+	supportsStart: z.boolean(),
+	supportsPause: z.boolean(),
+	supportsResume: z.boolean(),
+	supportsStop: z.boolean(),
+	supportsPower: z.boolean(),
+	/** Every program the description lists, with its options. */
+	programs: z.array(DishwasherProgramSchema),
+	/** Every option and setting entity the description lists (programs reference these by key). */
+	options: z.array(DishwasherOptionDescriptorSchema)
+});
 var dishwasherCapability = {
 	name: "dishwasher",
 	scope: "device",
@@ -61156,86 +61343,102 @@ var dishwasherCapability = {
 	mode: "singleton",
 	deviceTypes: [DeviceType.Dishwasher],
 	methods: {
-		start: method(z.object({ deviceId: z.number().int().nonnegative() }), z.void(), {
+		/**
+		* Start a program. Without `program` the selected one starts. `options` are
+		* option feature keys; each is checked against the program's constraints.
+		*/
+		start: method(z.object({
+			deviceId: DeviceIdSchema,
+			program: z.string().min(1).optional(),
+			options: z.record(z.string(), DishwasherValueSchema).optional()
+		}), z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
-		pause: method(z.object({ deviceId: z.number().int().nonnegative() }), z.void(), {
+		pause: method(z.object({ deviceId: DeviceIdSchema }), z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
-		stop: method(z.object({ deviceId: z.number().int().nonnegative() }), z.void(), {
+		resume: method(z.object({ deviceId: DeviceIdSchema }), z.void(), {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		stop: method(z.object({ deviceId: DeviceIdSchema }), z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
+		/** Select (not start) a program; refused when the appliance does not offer it. */
 		setProgram: method(z.object({
-			deviceId: z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			program: z.string().min(1)
 		}), z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
 		setPower: method(z.object({
-			deviceId: z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			on: z.boolean()
 		}), z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
 		setHalfLoad: method(z.object({
-			deviceId: z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			on: z.boolean()
 		}), z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
 		setHygienePlus: method(z.object({
-			deviceId: z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			on: z.boolean()
 		}), z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
 		setExtraDry: method(z.object({
-			deviceId: z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			on: z.boolean()
 		}), z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
 		setIntensiveZone: method(z.object({
-			deviceId: z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			on: z.boolean()
 		}), z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
 		setVarioSpeedPlus: method(z.object({
-			deviceId: z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			on: z.boolean()
 		}), z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
 		setChildLock: method(z.object({
-			deviceId: z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			on: z.boolean()
 		}), z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
+		/**
+		* Write any option or setting by feature key. Refused when the description does
+		* not list it, it is not writable or not available now, or the value is outside
+		* its declared range / members.
+		*/
 		setOption: method(z.object({
-			deviceId: z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			key: z.string().min(1),
-			value: z.union([
-				z.boolean(),
-				z.string(),
-				z.number()
-			])
+			value: DishwasherValueSchema
 		}), z.void(), {
 			kind: "mutation",
 			auth: "protected"
-		})
+		}),
+		/** What this appliance can do, from its own description — the UI is derived from it. */
+		getOptions: method(z.object({ deviceId: DeviceIdSchema }), DishwasherOptionsSchema, { auth: "protected" })
 	},
 	status: {
 		schema: DishwasherStatusSchema,
@@ -77092,6 +77295,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"dishwasher.getOptions": {
+		capName: "dishwasher",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"dishwasher.getStatus": {
 		capName: "dishwasher",
 		capScope: "device",
@@ -77104,6 +77313,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"dishwasher.resume": {
+		capName: "dishwasher",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"dishwasher.setChildLock": {
 		capName: "dishwasher",
 		capScope: "device",
@@ -81604,6 +81819,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"storageMigration.moverClearance": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"storageMigration.movers": {
 		capName: "storage-migration",
 		capScope: "system",
@@ -84068,6 +84289,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"dishwasher.getOptions": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"dishwasher.getStatus": [{
 		name: "deviceId",
 		form: "single",
@@ -84078,6 +84304,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"dishwasher.resume": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"dishwasher.setChildLock": [{
 		name: "deviceId",
 		form: "single",
@@ -86754,6 +86985,9 @@ new Map(Object.entries({
 	"wrapper-update-available": "system",
 	"backup-completed": "system",
 	"export-completed": "system",
+	"alert-critical": "system",
+	"alert-error": "system",
+	"alert-critical-resolved": "system",
 	"storage-location-low": "system",
 	"storage-location-critical": "system",
 	"storage-location-ok": "system",
@@ -86878,6 +87112,16 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 			"storage-location-ok"
 		]
 	},
+	{
+		id: "alerts",
+		family: "system",
+		label: "Alerts",
+		kinds: [
+			"alert-critical",
+			"alert-error",
+			"alert-critical-resolved"
+		]
+	},
 	{
 		id: "alarm",
 		family: "alarm",
@@ -86922,6 +87166,63 @@ var NC_SENSOR_RAISED_FIELD_BY_KIND = Object.freeze(Object.fromEntries(Object.ent
 	return [[descriptor.kind, field]];
 })));
 Object.freeze(Object.keys(NC_SENSOR_RAISED_FIELD_BY_KIND));
+z.object({
+	phase: z.enum(["raised", "resolved"]),
+	episodeId: z.string().min(1),
+	alertId: z.string().min(1),
+	severity: AlertSeveritySchema,
+	category: z.string(),
+	title: z.string(),
+	message: z.string(),
+	sourceType: z.string().optional(),
+	sourceId: z.string().optional(),
+	nodeId: z.string().optional(),
+	/** The alert's own action link (where the operator acts on it), when it has one. */
+	actionUrl: z.string().optional(),
+	at: z.number()
+});
+/** An episode is closed once its alert is completed or dismissed. */
+function isAlertEpisodeOpen(status) {
+	return status !== "completed" && status !== "dismissed";
+}
+/** Only these severities are ever announced. */
+function isAlertEpisodeSeverity(severity) {
+	return severity === "critical" || severity === "error";
+}
+function alertEpisodeId(alert) {
+	const minted = alert.metadata?.["episodeId"];
+	return typeof minted === "string" && minted.length > 0 ? minted : `${alert.id}@${String(alert.createdAt)}`;
+}
+/** The node an alert is about, from the places emitters put it. */
+function alertNodeId(alert) {
+	const direct = alert.metadata?.["nodeId"];
+	if (typeof direct === "string") return direct;
+	const runner = alert.metadata?.["runner"];
+	if (typeof runner === "object" && runner !== null && "nodeId" in runner) {
+		const id = runner.nodeId;
+		if (typeof id === "string") return id;
+	}
+	return alert.source?.type === "node" ? alert.source.id : void 0;
+}
+function alertEpisodePayload(alert, phase, at) {
+	const nodeId = alertNodeId(alert);
+	return {
+		phase,
+		episodeId: alertEpisodeId(alert),
+		alertId: alert.id,
+		severity: alert.severity,
+		category: alert.category,
+		title: alert.title,
+		message: alert.message,
+		...alert.source !== void 0 ? {
+			sourceType: alert.source.type,
+			sourceId: alert.source.id
+		} : {},
+		...nodeId !== void 0 ? { nodeId } : {},
+		...alert.action?.href !== void 0 ? { actionUrl: alert.action.href } : {},
+		at
+	};
+}
 var RULE_BODY_ONLY = ["body"];
 var RULE_TEXT = ["title", "body"];
 var BATTERY = ["device-battery-low", "device-battery-normal"];
@@ -86931,6 +87232,11 @@ var TANK = [
 	"device-tank-full",
 	"device-tank-normal"
 ];
+var ALERT_EPISODE = [
+	"alert-critical",
+	"alert-error",
+	"alert-critical-resolved"
+];
 var UPDATES = [
 	"addon-update-available",
 	"server-update-available",
@@ -87123,14 +87429,14 @@ var STATE_SUMMARY_VARS = [
 	([...RULE_TEXT], [...CONSUMABLE]),
 	([...RULE_TEXT], [...TANK]),
 	[...RULE_TEXT],
-	([...RULE_TEXT], [...UPDATES]),
-	([...RULE_TEXT], [...UPDATES]),
-	[...RULE_TEXT],
+	([...RULE_TEXT], [...UPDATES, ...ALERT_EPISODE]),
+	([...RULE_TEXT], [...UPDATES, ...ALERT_EPISODE]),
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
+	([...RULE_TEXT], [...ALERT_EPISODE]),
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
@@ -87148,7 +87454,11 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
-	[...RULE_TEXT],
+	([...RULE_TEXT], [...ALERT_EPISODE]),
+	([...RULE_TEXT], [...ALERT_EPISODE]),
+	([...RULE_TEXT], [...ALERT_EPISODE]),
+	([...RULE_TEXT], [...ALERT_EPISODE]),
+	([...RULE_TEXT], [...ALERT_EPISODE]),
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
@@ -88053,4 +88363,4 @@ function armRemovalReconcile(opts) {
 	return () => clearInterval(timer);
 }
 //#endregion
-export { STORAGE_ADMIN_SCOPED_BASES as $, parseSettingsArrayAdoptsFrom as $i, resolveLocationMode as $n, NoCallerError as $r, evaluateCompositionField as $t, DataStoreDatabaseSchema as A, declarationsOf as Ai, memoizePinnedFfmpeg as An, composedDeviceStableId as Ar, coreBlockAddonId as At, KEYCHAIN_RESET_TRIGGER_ACTOR as B, isKeychainStoredField as Bi, planComposition as Bn, DeviceType as Br, defineExtensionSlotProvider as Bt, DAY_NAMES as C, buildSecretRef as Ci, localNetworkCapability as Cn, vectorIndexDimConflictError as Cr, calendarsCapability as Ct, DEVICE_SAN_CREDENTIAL_PREFIX as D, collectZodSecretPaths as Di, looseSchema as Dn, buildFfmpegArgs as Dr, composerCapability as Dt, DEVICE_NONCE_TTL_MS as E, collectSecretMarkerRefs as Ei, logLevelAtMost as En, COMPOSER_ADDON_ID as Er, checkRoleAddress as Et, FieldClaimModeSchema as F, expandCapMethods as Fi, normalizeUnit as Fn, createStatefulExpressionMemory as Fr, createDeviceExtensionProvider as Ft, METHOD_ACCESS_MAP as G, makeSecretMarker as Gi, recordsCapability as Gn, DATAPLANE_SECRET_HEADER as Gr, deviceHistoryCapability as Gt, KeychainResetRecordSchema as H, isSecretMarker as Hi, procedureAuthKey as Hn, BaseAddon as Hr, describeComposableCaps as Ht, FieldClaimSchema as I, formatSecretScope as Ii, objectInputDeclaresAddonId as In, disarmRoseMemory as Ir, dataStoreProviderCapability as It, NetworkTunnelStartedDataSchema as J, normalizeNodeId as Ji, resolveAppConnections as Jn, DeclarationRefusedError as Jr, deviceStateCapability as Jt, MINUTES_PER_DAY as K, mapSecretLeaves as Ki, reducePoints as Kn, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Kr, deviceManagerCapability as Kt, HISTORY_CATALOG as L, hydrateSchema as Li, objectInputDeclaresRequiredDeviceId as Ln, toExpressionValue as Lr, databaseSnapshotCapability as Lt, DeviceStatusSchema as M, defineRecordKinds as Mi, modeMayWrite as Mn, compositionItemFieldPath as Mr, coreBlockIdFromAddonId as Mt, DeviceTombstoneSchema as N, emitDownForOwnedCaps as Ni, motionCapability as Nn, compositionSliceKey as Nr, coreBlockSourceKind as Nt, DEVICE_SAN_USER_PREFIX as O, createEvent as Oi, mayReadLocation as On, cloneStatefulExpressionMemory as Or, compositionFieldKey as Ot, FIRST_LEVEL_MACRO_CLASSES as P, emitReadiness as Pi, normalizeCoreBlockWrite as Pn, compositionSourceKey as Pr, coreBlocksCapability as Pt, STORAGE_ADMIN_MOVED_COLLECTIONS as Q, parseSecretRef as Qi, resolveHubAddressRoles as Qn, InvalidRecordError as Qr, enumerateSchemaFields as Qt, HUB_MDNS_SERVICE_TYPE as R, isDeviceConfigCap as Ri, parseStreamParamsFormPatch as Rn, DeviceFeature as Rr, declarationOwnerNodeId as Rt, DATA_STORE_DATABASES as S, assertValidDeclaration as Si, lifecycleJobSchema as Sn, vectorDimFromBase64 as Sr, buildStreamParamsConfigSchema as St, DEVICE_ENROLLMENT_TTL_MS as T, collectSecretLeaves as Ti, logDestinationCapability as Tn, withLocationMode as Tr, canonicalIconKey as Tt, LOG_LEVEL_RANK as U, isSecretMarkerLike as Ui, ptzAutotrackCapability as Un, BatchTooLargeError as Ur, deviceCredentialsCapability as Ut, KeychainAuditEntrySchema as V, isSecretClear as Vi, platformProbeCapability as Vn, errMsg as Vr, deriveBatteryPresence as Vt, LegacyStorageLocationDefaultSchema as W, isSecretRefOwnedBy as Wi, recordEntriesCapability as Wn, CALLER_STAMPED_CAPABILITIES as Wr, deviceExtensionCapability as Wt, RecordingStatusSchema as X, parseJsonObject as Xi, resolveCoreBlockEntry as Xn, ForeignSecretMarkerError as Xr, enumerateInferenceDevices as Xt, RECORDING_SOURCE_CAMSTACK_ADDON as Y, normalizeSecretOwner as Yi, resolveBucketMs as Yn, FilterRequiredError as Yr, deviceStatusCapability as Yt, STORAGE_ACCESS_FALLBACK as Z, parseJsonUnknown as Zi, resolveCoreBlockFiles as Zn, HISTORY_DEFAULT_MIN_INTERVAL_MS as Zr, enumerateItemArrayFields as Zt, CatalogFileSchema as _, UnknownRecordKindError as _i, kebabToCamel as _n, streamQualityLabel as _r, bareAddonId as _t, ApiKeyRecordSchema as a, scopeKey as aa, REDACTED_SECRET as ai, foldSnapshotByFunction as an, scoreRuntimes as ar, StorageLocationModeSchema as at, DATABASE_SNAPSHOT_SUFFIX as b, asNumber as bi, legacyAutoLinkIds as bn, validateComposition as br, buildDeviceEnrollmentLink as bt, CAMERA_SWITCH_ORDER as c, sleep as ca, ReadinessRegistry as ci, gbToBytes as cn, siteZoneKey as cr, TokenScopeSchema as ct, CATALOG_LANGS as d, transformSecretWrite as da, RecordNotFoundError as di, isArrayOutputSchema as dn, storageAdminCapability as dr, addonSettingsCapability as dt, parseSettingsBrokersAdoptsFrom as ea, PlaintextSecretError as ei, evictionPolicyOfLocation as en, resolveMethodAuth as er, STREAM_PROFILE_META as et, COMPOSED_ITEM_FIXED_FIELDS as f, userError as fa, RecordTooLargeError as fi, isCollectionArrayMethod as fn, storageCapability as fr, addonWidgetsCapability as ft, CalendarPreferencesSchema as g, UnindexedFilterError as gi, isVoidInput as gn, streamCatalogCapability as gr, backupCapability as gt, CORE_BLOCK_ADDON_PREFIX as h, SECRET_CLEAR as hi, isObjectInput as hn, storageProviderCapability as hr, authProviderCapability as ht, AlertSchema as i, resolveSecretMarkers as ia, RECORD_SWEEP_INTERVAL_MS as ii, filesystemBrowseCapability as in, scopesAllowDeviceCap as ir, StorageCleanupJobSchema as it, DeclaredDevices as j, defineCustomActions as ji, metricsProviderCapability as jn, compositionFeatureEnabled as jr, coreBlockComposition as jt, DEVICE_TOMBSTONE_RETENTION_MS as k, customAction as ki, mayWriteToLocation as kn, composedDeviceRef as kr, compositionSourceRefs as kt, CAMSTACK_APP_LINK_ORIGIN as l, toNodeId as la, ReadinessTimeoutError as li, interpolate as ln, snapshotCapability as lr, UserRecordSchema as lt, CORE_BLOCKS_ADDON_ID as m, EventCategory as ma, RevConflictError as mi, isLocationEnabled as mn, storageOccupancyCapability as mr, armRemovalReconcile as mt, AGENT_MDNS_TXT_KEYS as n, recordSecretRef as na, RECORD_BATCH_MAX_BYTES as ni, expressionContainsBuiltinCall as nn, runtimeStatePolicyFor as nr, ServerNameSchema as nt, BaseDevice as o, secretTreeFromPaths as oa, REMOVE_LEAF as oi, formatDeviceRevoker as on, settingsStoreCapability as or, StorageLocationTypeSchema as ot, COMPOSER_RUNNER_ID as p, withoutCallerStamp as pa, RecordUniqueViolationError as pi, isDefaultAppConnectionEndpoint as pn, storageMigrationCapability as pr, alertsCapability as pt, MOTION_CLOSE_AFTER_MS as q, nodePin as qi, replacedFieldKeys as qn, DEVICE_STATUS_METHOD as qr, deviceRemovalHookCapability as qt, ALL_CAPABILITY_DEFINITIONS as r, resolveCapMount as ra, RECORD_DELETE_BATCH as ri, extractNestedAddonId as rn, scopesAllowAddon as rr, SsoBridgeClaimsSchema as rt, BatteryStatusSchema as s, secretTreeFromSchema as sa, RUNTIME_DEFAULTS as si, formatMinutes as sn, shortHostname as sr, StorageMigrationJobSchema as st, AGENT_MDNS_SERVICE_TYPE as t, readinessKey as ta, RECORD_BATCH_MAX as ti, expandContainer as tn, resolveNotificationTapAddress as tr, ScopedTokenSchema as tt, CAP_NAMES_WITH_STATUS as u, toSecretFieldView as ua, RecordKindDeclarationSchema as ui, isAppLinkBase as un, splitTranslationRef as ur, addonPagesCapability as ut, CoreBlockSchema as v, WELL_KNOWN_TAB_MAP as vi, keychainAdminCapability as vn, supportedRuntimes as vr, batteryCapability as vt, DERIVED_CAMERA_SILENCED_CAP_NAMES as w, collectSecretConfigKeys as wi, locationIconKey as wn, vectorStoreCapability as wr, cameraGridLayoutCapability as wt, DATABASE_SNAPSHOT_TIMEOUT_MS as x, asString$1 as xi, legacyModeOf as xn, validateCustomAddress as xr, buildDeviceSignatureMessage as xt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as y, asJsonObject as yi, keychainCapability as yn, userManagementCapability as yr, buildCapabilityLookup as yt, HUB_MDNS_TXT_KEYS as z, isEvent as zi, pickAppLinkHub as zn, DeviceRole as zr, decodeVectorBase64 as zt };
+export { STORAGE_ADMIN_MOVED_COLLECTIONS as $, normalizeNodeId as $i, resolveAppConnections as $n, DeclarationRefusedError as $r, enumerateInferenceDevices as $t, DEVICE_TOMBSTONE_RETENTION_MS as A, collectSecretLeaves as Ai, logDestinationCapability as An, withLocationMode as Ar, composerCapability as At, HUB_MDNS_TXT_KEYS as B, expandCapMethods as Bi, normalizeUnit as Bn, createStatefulExpressionMemory as Br, databaseSnapshotCapability as Bt, DATA_STORE_DATABASES as C, WELL_KNOWN_TAB_MAP as Ci, keychainAdminCapability as Cn, supportedRuntimes as Cr, buildDeviceEnrollmentLink as Ct, DEVICE_NONCE_TTL_MS as D, assertValidDeclaration as Di, lifecycleJobSchema as Dn, vectorDimFromBase64 as Dr, cameraGridLayoutCapability as Dt, DEVICE_ENROLLMENT_TTL_MS as E, asString$1 as Ei, legacyModeOf as En, validateCustomAddress as Er, calendarsCapability as Et, FIRST_LEVEL_MACRO_CLASSES as F, declarationsOf as Fi, memoizePinnedFfmpeg as Fn, composedDeviceStableId as Fr, coreBlockIdFromAddonId as Ft, LegacyStorageLocationDefaultSchema as G, isKeychainStoredField as Gi, planComposition as Gn, DeviceType as Gr, describeComposableCaps as Gt, KeychainAuditEntrySchema as H, hydrateSchema as Hi, objectInputDeclaresRequiredDeviceId as Hn, toExpressionValue as Hr, decodeVectorBase64 as Ht, FieldClaimModeSchema as I, defineCustomActions as Ii, metricsProviderCapability as In, compositionFeatureEnabled as Ir, coreBlockSourceKind as It, MOTION_CLOSE_AFTER_MS as J, isSecretMarkerLike as Ji, ptzAutotrackCapability as Jn, BatchTooLargeError as Jr, deviceHistoryCapability as Jt, METHOD_ACCESS_MAP as K, isSecretClear as Ki, platformProbeCapability as Kn, errMsg as Kr, deviceCredentialsCapability as Kt, FieldClaimSchema as L, defineRecordKinds as Li, modeMayWrite as Ln, compositionItemFieldPath as Lr, coreBlocksCapability as Lt, DeclaredDevices as M, collectZodSecretPaths as Mi, looseSchema as Mn, buildFfmpegArgs as Mr, compositionSourceRefs as Mt, DeviceStatusSchema as N, createEvent as Ni, mayReadLocation as Nn, cloneStatefulExpressionMemory as Nr, coreBlockAddonId as Nt, DEVICE_SAN_CREDENTIAL_PREFIX as O, buildSecretRef as Oi, localNetworkCapability as On, vectorIndexDimConflictError as Or, canonicalIconKey as Ot, DeviceTombstoneSchema as P, customAction as Pi, mayWriteToLocation as Pn, composedDeviceRef as Pr, coreBlockComposition as Pt, STORAGE_ACCESS_FALLBACK as Q, nodePin as Qi, replacedFieldKeys as Qn, DEVICE_STATUS_METHOD as Qr, deviceStatusCapability as Qt, HISTORY_CATALOG as R, emitDownForOwnedCaps as Ri, motionCapability as Rn, compositionSliceKey as Rr, createDeviceExtensionProvider as Rt, DATABASE_SNAPSHOT_TIMEOUT_MS as S, UnknownRecordKindError as Si, kebabToCamel as Sn, streamQualityLabel as Sr, buildCapabilityLookup as St, DERIVED_CAMERA_SILENCED_CAP_NAMES as T, asNumber as Ti, legacyAutoLinkIds as Tn, validateComposition as Tr, buildStreamParamsConfigSchema as Tt, KeychainResetRecordSchema as U, isDeviceConfigCap as Ui, parseStreamParamsFormPatch as Un, DeviceFeature as Ur, defineExtensionSlotProvider as Ut, KEYCHAIN_RESET_TRIGGER_ACTOR as V, formatSecretScope as Vi, objectInputDeclaresAddonId as Vn, disarmRoseMemory as Vr, declarationOwnerNodeId as Vt, LOG_LEVEL_RANK as W, isEvent as Wi, pickAppLinkHub as Wn, DeviceRole as Wr, deriveBatteryPresence as Wt, RECORDING_SOURCE_CAMSTACK_ADDON as X, makeSecretMarker as Xi, recordsCapability as Xn, DATAPLANE_SECRET_HEADER as Xr, deviceRemovalHookCapability as Xt, NetworkTunnelStartedDataSchema as Y, isSecretRefOwnedBy as Yi, recordEntriesCapability as Yn, CALLER_STAMPED_CAPABILITIES as Yr, deviceManagerCapability as Yt, RecordingStatusSchema as Z, mapSecretLeaves as Zi, reducePoints as Zn, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Zr, deviceStateCapability as Zt, CatalogFileSchema as _, userError as _a, RecordTooLargeError as _i, isCollectionArrayMethod as _n, storageCapability as _r, armRemovalReconcile as _t, ApiKeyRecordSchema as a, parseSettingsBrokersAdoptsFrom as aa, PlaintextSecretError as ai, expressionContainsBuiltinCall as an, resolveMethodAuth as ar, StorageCleanupJobSchema as at, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as b, SECRET_CLEAR as bi, isObjectInput as bn, storageProviderCapability as br, bareAddonId as bt, CAMERA_SWITCH_ORDER as c, resolveCapMount as ca, RECORD_DELETE_BATCH as ci, foldSnapshotByFunction as cn, scopesAllowAddon as cr, StorageMigrationJobSchema as ct, CATALOG_LANGS as d, secretTreeFromPaths as da, REMOVE_LEAF as di, gbToBytes as dn, settingsStoreCapability as dr, addonPagesCapability as dt, normalizeSecretOwner as ea, FilterRequiredError as ei, enumerateItemArrayFields as en, resolveBucketMs as er, STORAGE_ADMIN_SCOPED_BASES as et, COMPOSED_ITEM_FIXED_FIELDS as f, secretTreeFromSchema as fa, RUNTIME_DEFAULTS as fi, interpolate as fn, shortHostname as fr, addonSettingsCapability as ft, CalendarPreferencesSchema as g, transformSecretWrite as ga, RecordNotFoundError as gi, isArrayOutputSchema as gn, storageAdminCapability as gr, alertsCapability as gt, CORE_BLOCK_ADDON_PREFIX as h, toSecretFieldView as ha, RecordKindDeclarationSchema as hi, isAppLinkBase as hn, splitTranslationRef as hr, alertEpisodePayload as ht, AlertSchema as i, parseSettingsArrayAdoptsFrom as ia, NoCallerError as ii, expandContainer as in, resolveLocationMode as ir, SsoBridgeClaimsSchema as it, DataStoreDatabaseSchema as j, collectSecretMarkerRefs as ji, logLevelAtMost as jn, COMPOSER_ADDON_ID as jr, compositionFieldKey as jt, DEVICE_SAN_USER_PREFIX as k, collectSecretConfigKeys as ki, locationIconKey as kn, vectorStoreCapability as kr, checkRoleAddress as kt, CAMSTACK_APP_LINK_ORIGIN as l, resolveSecretMarkers as la, RECORD_SWEEP_INTERVAL_MS as li, formatDeviceRevoker as ln, scopesAllowDeviceCap as lr, TokenScopeSchema as lt, CORE_BLOCKS_ADDON_ID as m, toNodeId as ma, ReadinessTimeoutError as mi, isAlertEpisodeSeverity as mn, snapshotCapability as mr, alertEpisodeId as mt, AGENT_MDNS_TXT_KEYS as n, parseJsonUnknown as na, HISTORY_DEFAULT_MIN_INTERVAL_MS as ni, evaluateCompositionField as nn, resolveCoreBlockFiles as nr, ScopedTokenSchema as nt, BaseDevice as o, readinessKey as oa, RECORD_BATCH_MAX as oi, extractNestedAddonId as on, resolveNotificationTapAddress as or, StorageLocationModeSchema as ot, COMPOSER_RUNNER_ID as p, sleep as pa, ReadinessRegistry as pi, isAlertEpisodeOpen as pn, siteZoneKey as pr, addonWidgetsCapability as pt, MINUTES_PER_DAY as q, isSecretMarker as qi, procedureAuthKey as qn, BaseAddon as qr, deviceExtensionCapability as qt, ALL_CAPABILITY_DEFINITIONS as r, parseSecretRef as ra, InvalidRecordError as ri, evictionPolicyOfLocation as rn, resolveHubAddressRoles as rr, ServerNameSchema as rt, BatteryStatusSchema as s, recordSecretRef as sa, RECORD_BATCH_MAX_BYTES as si, filesystemBrowseCapability as sn, runtimeStatePolicyFor as sr, StorageLocationTypeSchema as st, AGENT_MDNS_SERVICE_TYPE as t, parseJsonObject as ta, ForeignSecretMarkerError as ti, enumerateSchemaFields as tn, resolveCoreBlockEntry as tr, STREAM_PROFILE_META as tt, CAP_NAMES_WITH_STATUS as u, scopeKey as ua, REDACTED_SECRET as ui, formatMinutes as un, scoreRuntimes as ur, UserRecordSchema as ut, CoreBlockSchema as v, withoutCallerStamp as va, RecordUniqueViolationError as vi, isDefaultAppConnectionEndpoint as vn, storageMigrationCapability as vr, authProviderCapability as vt, DAY_NAMES as w, asJsonObject as wi, keychainCapability as wn, userManagementCapability as wr, buildDeviceSignatureMessage as wt, DATABASE_SNAPSHOT_SUFFIX as x, UnindexedFilterError as xi, isVoidInput as xn, streamCatalogCapability as xr, batteryCapability as xt, CredentialTokenClaimsSchema as y, EventCategory as ya, RevConflictError as yi, isLocationEnabled as yn, storageOccupancyCapability as yr, backupCapability as yt, HUB_MDNS_SERVICE_TYPE as z, emitReadiness as zi, normalizeCoreBlockWrite as zn, compositionSourceKey as zr, dataStoreProviderCapability as zt };