@camstack/types 1.2.254 → 1.2.256

package/dist/index.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-BAgDk7I9.js");
+const require_sleep = require("./sleep-DtomDrRW.js");
 const require_event_category = require("./event-category-BVfsrBYA.js");
 const require_canonical_hash = require("./canonical-hash-CSE4ioRi.js");
 const require_enums = require("./enums.js");
@@ -17495,6 +17495,16 @@ var NcCrossingSchema = zod.z.enum([
 	"exit",
 	"any"
 ]);
+/**
+* Which edge of a BOOLEAN sensor fires a device-event rule (D640).
+*  - `raised`  — the sensor went high: water detected, smoke, open, tampered.
+*  - `cleared` — it went back: dry, clear, closed.
+*  - absent    — both edges, which is what every rule authored before this did.
+*
+* There is no third member for "both": absence already says it, and a value
+* that means the same as absence is a second way to write one rule.
+*/
+var NcSensorTransitionSchema = zod.z.enum(["raised", "cleared"]);
 /** Admin-zone membership condition (zone IDs as stamped by the ZoneEngine). */
 var NcZoneConditionSchema = zod.z.object({
 	ids: zod.z.array(zod.z.string().min(1)).min(1),
@@ -17684,6 +17694,20 @@ var NcConditionsSchema = zod.z.object({
 	scene: NcSceneConditionSchema.optional(),
 	/** Device scope — absent = all devices. */
 	devices: zod.z.array(zod.z.number()).optional(),
+	/**
+	* Device EXCLUSION (D641) — "every device except these". Judged on the SAME
+	* subject ids {@link devices} is judged on (the camera, the sensor that
+	* fired, a linked set's sensor and row cameras), so a sensor fanned out per
+	* linked camera is excluded exactly where an include would have tested it.
+	* `min(1)`: an empty exclusion excludes nothing and is written as absent.
+	*
+	* Not for `system-event` rules — those carry their own
+	* `systemEvent.excludeDeviceIds` (D636), and the hub refuses this key there.
+	* Editors present the two lists as ONE field (All | Only these | All except
+	* these); the engine evaluates each independently, so a legacy rule
+	* carrying both still means "these, minus those".
+	*/
+	devicesExclude: zod.z.array(zod.z.number()).min(1).optional(),
 	/** Detector class names (any overlap with the record's class set). */
 	classes: zod.z.array(zod.z.string().min(1)).optional(),
 	/** Veto classes — any overlap fails the rule. */
@@ -17817,6 +17841,16 @@ var NcConditionsSchema = zod.z.object({
 	*/
 	sensorKinds: zod.z.array(zod.z.string().min(1)).optional(),
 	/**
+	* DEVICE-EVENT only (D640). Fire on one edge of a boolean sensor —
+	* {@link NcSensorTransitionSchema}. Which field of the slice means "raised"
+	* is `@camstack/types` → `notification/sensor-raised.ts`. A reading the
+	* engine cannot place (a kind with no raise, an unreadable slice) PASSES:
+	* the condition fails open towards notifying, never towards silence. Editors
+	* offer it only when every chosen {@link sensorKinds} member has a raise
+	* (`sensorTransitionOffered`), and the hub refuses it on any other delivery.
+	*/
+	sensorTransition: NcSensorTransitionSchema.optional(),
+	/**
 	* PACKAGE-EVENT only. Which package phase fires the rule — `delivered`
 	* (a parked parcel appeared), `picked-up` (it departed), or `both`. Fails
 	* when the subject's phase does not match (a subject always carries a phase
@@ -18328,9 +18362,29 @@ var NcTestResultSchema = zod.z.object({
 	className: zod.z.string().optional(),
 	label: zod.z.string().optional()
 });
-/** The five rule kinds, as data. `NcRuleKind` in `notification/rule-kinds.ts`
-*  is the same union; the template-vars spec pins the two together. */
+/** The rule kinds, as data. `NcRuleKind` in `notification/rule-kinds.ts` is the
+*  same union; the template-vars spec pins the two together. `mixed` is DERIVED
+*  (a stored system rule whose kinds span families, D637) and never authored. */
 var NcRuleKindSchema = zod.z.enum([
+	"detection",
+	"sensor",
+	"occupancy",
+	"sound",
+	"device-events",
+	"system",
+	"alarm",
+	"mixed"
+]);
+/**
+* The kinds a SERVED template-variable descriptor may name: the five that
+* existed before D637, frozen. `getTemplateCatalog` ships `kinds` to every
+* installed viewer, and a viewer at `@camstack/types` 1.2.25x parses them with a
+* strict five-member enum — one `device-events` in one descriptor fails the
+* whole catalog parse. So the WIRE says `system`, and the MATCH widens it:
+* `templateVarKindApplies` reads a `system` descriptor as applying to every
+* system rule kind (`device-events`, `system`, `alarm`, `mixed`).
+*/
+var NcTemplateVarKindSchema = zod.z.enum([
 	"detection",
 	"sensor",
 	"occupancy",
@@ -18368,7 +18422,7 @@ var NcTemplateVarGroupSchema = zod.z.enum([
 *
 * `families` / `fields` / `kinds` / `deliveries` / `systemEventKinds` say WHERE
 * it has a value; absent = no restriction on that axis. `systemEventKinds` is
-* read only for a `system` rule. `dynamic` declares a FAMILY of names
+* read only for a system-event rule (any family, or `mixed`). `dynamic` declares a FAMILY of names
 * (`count_<class>`): the descriptor's `name` is the example member.
 */
 var NcTemplateVarDescriptorSchema = zod.z.object({
@@ -18379,7 +18433,7 @@ var NcTemplateVarDescriptorSchema = zod.z.object({
 	group: NcTemplateVarGroupSchema,
 	families: zod.z.array(NcTemplateFamilySchema).min(1),
 	fields: zod.z.array(NcTemplateFieldSchema).optional(),
-	kinds: zod.z.array(NcRuleKindSchema).optional(),
+	kinds: zod.z.array(NcTemplateVarKindSchema).optional(),
 	deliveries: zod.z.array(NcDeliverySchema).optional(),
 	systemEventKinds: zod.z.array(NcSystemEventKindSchema).optional(),
 	dynamic: zod.z.object({
@@ -18429,6 +18483,7 @@ var NcConditionDescriptorSchema = zod.z.object({
 	/** Editor widget the UI renders — never hardcode per-condition forms. */
 	valueType: zod.z.enum([
 		"deviceIdList",
+		"deviceIdExcludeList",
 		"stringList",
 		"number01",
 		"number",
@@ -18439,6 +18494,7 @@ var NcConditionDescriptorSchema = zod.z.object({
 		"plateMatcher",
 		"packagePhase",
 		"crossingSelect",
+		"sensorTransition",
 		"polygonDraw",
 		"occupancy",
 		"audio",
@@ -18637,6 +18693,21 @@ var NC_CONDITION_CATALOG = [
 		phase: "P1",
 		description: "Restrict the rule to these devices; absent = all devices. A sensor event matches either the SENSOR that fired or the camera it is attributed to, so a rule may name either one."
 	},
+	{
+		id: "devicesExclude",
+		group: "scope",
+		label: "Excluded devices",
+		valueType: "deviceIdExcludeList",
+		operator: "notIn",
+		appliesTo: [
+			"immediate",
+			"track-end",
+			"device-event",
+			"package-event"
+		],
+		phase: "P1",
+		description: "Every device except these. Judged on the same device ids as Devices: a sensor event is excluded by the SENSOR that fired or by the camera it is attributed to."
+	},
 	{
 		id: "classes",
 		group: "class",
@@ -18893,6 +18964,33 @@ var NC_CONDITION_CATALOG = [
 		phase: "P1",
 		description: "Raw device event-type tokens (e.g. doorbell press / press_long) from the event-emitter slice; absent on doorbell-pulse / passive sensors."
 	},
+	{
+		id: "sensorTransition",
+		group: "device",
+		label: "Notify when",
+		valueType: "sensorTransition",
+		options: [
+			{
+				value: "",
+				label: "It triggers and when it clears",
+				hint: "Every change: water detected, and back to dry."
+			},
+			{
+				value: "raised",
+				label: "Only when it triggers",
+				hint: "Water detected, smoke, a contact opening — never the return to normal."
+			},
+			{
+				value: "cleared",
+				label: "Only when it clears",
+				hint: "Back to dry, smoke gone, a contact closing — never the alert itself."
+			}
+		],
+		operator: "in",
+		appliesTo: ["device-event"],
+		phase: "P2",
+		description: "Fire on one edge of a boolean sensor. Offered only when every chosen sensor kind raises and clears; a reading that cannot be placed still notifies."
+	},
 	{
 		id: "packagePhase",
 		group: "package",
@@ -19079,6 +19177,39 @@ var NcHistoryFilterSchema = zod.z.object({
 	limit: zod.z.number().int().min(1).max(500).default(100)
 });
 /**
+* The newest delivery row of ONE rule — the "Last run" of a rules table.
+*
+* A projection of the same outbox rows `getHistory` returns, so it records
+* DELIVERIES only: a throttled or unmatched evaluation never produced a row
+* and is not a run here. When one fire reached several targets (several rows
+* at the same `lastAt`), `status` is the least successful of them
+* (`dead` > `pending` > `sent`): "the last run delivered" must be true for
+* every target it names.
+*/
+var NcRuleLastRunSchema = zod.z.object({
+	ruleId: zod.z.string(),
+	/** Fire time of the newest row (`createdAt`, epoch ms). */
+	lastAt: zod.z.number(),
+	status: NcHistoryStatusSchema,
+	/** The camera/device of that row (a digest row files under its first camera). */
+	deviceId: zod.z.number()
+});
+/**
+* Every rule's last run, in one answer.
+*
+* A rule ABSENT from `runs` produced no delivery inside `horizonMs` — how far
+* back this answer looked, in ms before the hub's now. It is the outbox prune
+* window (7 days by default, operator-configurable), NARROWED when the read hit
+* its row bound: the answer never claims a window it did not read. `null` means
+* the operator keeps the outbox forever AND the read reached its end, so absent
+* means "never on record". A UI derives its "not in the last N days" from this
+* value, never from a constant — and only when the call ANSWERED (D315).
+*/
+var NcRuleLastRunsSchema = zod.z.object({
+	runs: zod.z.array(NcRuleLastRunSchema),
+	horizonMs: zod.z.number().nonnegative().nullable()
+});
+/**
 * What a snooze covers. Broader scopes win when several overlap, so one window
 * leaves ONE digest rather than a rule snooze and a whole-feed snooze both
 * summarising the same silence.
@@ -19265,6 +19396,14 @@ var NcAlarmModeCoverageSchema = zod.z.object({
 	/** Ids named by the covering rules. A SUBSET when `allDevices` is true. */
 	deviceIds: zod.z.array(zod.z.number().int()),
 	/**
+	* D641: the ids NOT covered although `allDevices` is true — every unscoped
+	* covering rule EXCLUDES them (`conditions.devicesExclude`) and no named rule
+	* covers them. Always `[]` when `allDevices` is false. Excluded by the rules,
+	* which is not the same as skipped by a switch: never in `skippedDevices`.
+	* Defaulted so an answer computed before this field parses as "none".
+	*/
+	allDevicesExcept: zod.z.array(zod.z.number().int()).default([]),
+	/**
 	* Devices this mode NAMES but cannot actually arm, each with the switch that
 	* excludes it.
 	*
@@ -19506,6 +19645,15 @@ var notificationRulesCapability = {
 		*/
 		getHistory: require_sleep.method(zod.z.object({ filter: NcHistoryFilterSchema.default({ limit: 100 }) }), zod.z.object({ entries: zod.z.array(NcHistoryEntrySchema) }), { auth: "admin" }),
 		/**
+		* The newest delivery of every rule, in ONE bounded read of the outbox —
+		* the "Last run" column. Never a `getHistory` per rule. A rule with no
+		* delivery inside `horizonMs` is absent from `runs`; see
+		* {@link NcRuleLastRunsSchema} for what absent means. A store that cannot
+		* answer FAILS the call rather than answering "nothing ran". Admin-only,
+		* like `getHistory`, of which it is a projection.
+		*/
+		getRuleLastRuns: require_sleep.method(zod.z.object({}), NcRuleLastRunsSchema, { auth: "admin" }),
+		/**
 		* Mint a fresh, externally-reachable URL for one artefact a history row
 		* named in {@link NcHistoryEntrySchema.shape.artifactIds} — the SAME
 		* signed-link mechanism the dispatcher uses to attach media to an
@@ -35747,6 +35895,35 @@ var RenameNodeResultSchema = zod.z.object({
 	name: zod.z.string()
 });
 /**
+* One row of the CHEAP node list (D637): what a node picker needs and nothing
+* else. Read from the hub's in-memory registry plus the durable node history.
+* No per-node RPC, unlike `topology`, which walks the whole cluster (32–51 s).
+*/
+var NodeDirectoryEntrySchema = zod.z.object({
+	id: zod.z.string(),
+	name: zod.z.string(),
+	isHub: zod.z.boolean(),
+	isOnline: zod.z.boolean()
+});
+/**
+* The cheap node list. A consumer's rule for a STORED node id (a rule's
+* `nodeIds`) that is missing from `nodes`, whatever `complete` says: render it
+* as a removable chip labelled unknown, never drop it (D49). Even a complete
+* list omits a node that joined and left between two history captures, so a
+* missing id means "not known to the hub", never "removed". Only the operator
+* removes it.
+*
+* `complete` changes only the WORDING: `false` = no history read has ever
+* answered, so the list may be missing offline nodes the hub does know (D315).
+*
+* `name` is the history row's name (≤ 30 s behind a rename), or the id when
+* the history has none.
+*/
+var NodeDirectorySchema = zod.z.object({
+	nodes: zod.z.array(NodeDirectoryEntrySchema).readonly(),
+	complete: zod.z.boolean()
+});
+/**
 * `nodes` is a **hub-centric** cluster-management cap: the hub hosts
 * the single provider and every per-node method (`getNodeAddons`,
 * `restartProcess`, `restartNode`, `undeployAddon`, …) takes `nodeId`
@@ -35765,6 +35942,12 @@ var nodesCapability = {
 	nodeIdMode: "data",
 	methods: {
 		topology: require_sleep.method(zod.z.void(), zod.z.array(TopologyNodeSchema).readonly(), { auth: "admin" }),
+		/**
+		* The cheap node list for pickers (D637): the hub's in-memory registry plus
+		* the durable node history, no per-node RPC. `complete: false` when the
+		* history could not be read.
+		*/
+		directory: require_sleep.method(zod.z.void(), NodeDirectorySchema, { auth: "admin" }),
 		deployAddon: require_sleep.method(NodeAddonInputSchema, SuccessSchema, {
 			kind: "mutation",
 			auth: "admin"
@@ -52634,6 +52817,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"nodes.directory": {
+		capName: "nodes",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"nodes.executeQuery": {
 		capName: "nodes",
 		capScope: "system",
@@ -52802,6 +52991,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"notificationRules.getRuleLastRuns": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"notificationRules.getTemplateCatalog": {
 		capName: "notification-rules",
 		capScope: "system",
@@ -59616,6 +59811,7 @@ function createSystemProxy(api) {
 		networkQuality: { getAllStats: (input) => dispatch("networkQuality", "getAllStats", "query", input) },
 		nodes: {
 			topology: (input) => dispatch("nodes", "topology", "query", input),
+			directory: (input) => dispatch("nodes", "directory", "query", input),
 			deployAddon: (input) => dispatch("nodes", "deployAddon", "mutation", input),
 			undeployAddon: (input) => dispatch("nodes", "undeployAddon", "mutation", input),
 			restartAddon: (input) => dispatch("nodes", "restartAddon", "mutation", input),
@@ -60668,7 +60864,285 @@ function prepareNotification(caps, n) {
 	};
 }
 //#endregion
+//#region src/notification/system-event-filters.ts
+/** Every filter, for the callers that must cover all four (guards, tests). */
+var NC_SYSTEM_EVENT_FILTER_KEYS = [
+	"deviceIds",
+	"deviceTypes",
+	"nodeIds",
+	"packageNames"
+];
+/**
+* Does `filter` say anything about `kind`?
+*
+* `false` means the filter is not part of this kind's vocabulary: the engine
+* ignores it and an editor hides its input. It never means "excluded".
+*/
+function systemEventFilterApplies(kind, filter) {
+	switch (filter) {
+		case "deviceIds": return kind.startsWith("device-") || kind.startsWith("stream-") || kind === "detection-blind" || kind === "alarm-triggered";
+		case "deviceTypes": return kind.startsWith("device-") || kind === "detection-blind";
+		case "nodeIds": return kind.startsWith("node-") || kind === "addon-crash-loop" || kind === "addon-update-available" || kind === "addon-updated" || kind === "server-update-available" || kind === "wrapper-update-available" || kind === "server-updated";
+		case "packageNames": return kind.endsWith("update-available") || kind === "addon-updated" || kind === "server-updated";
+	}
+}
+/**
+* Does `filter` say anything about AT LEAST ONE of the selected kinds?
+*
+* The editor's question: a rule selects several kinds at once and renders one
+* filter input for the set, so a filter is shown when any selected kind can be
+* narrowed by it. The kinds it cannot narrow are then simply not narrowed —
+* which is the engine's half of the same rule.
+*/
+function systemEventFilterAppliesToAnyKind(kinds, filter) {
+	return kinds.some((kind) => systemEventFilterApplies(kind, filter));
+}
+//#endregion
+//#region src/notification/system-event-families.ts
+/**
+* WHICH FAMILY every system-event kind belongs to, and which narrowing filters
+* each family may carry: one table, read by the hub validator, by `ruleKindOf`
+* and by both rule editors (D637).
+*
+* A system rule used to be one editor for thirty-one kinds and five filters.
+* "Eventi di sistema" carried battery kinds under a liveness `deviceTypes` filter
+* and went silent for two weeks (D636). The three families are three questions:
+* about devices, about the installation, and about the alarm panel. A rule
+* answers one of them. The engine never needed to know, and it still does not:
+* a mixed stored rule keeps firing. Only AUTHORING is strict.
+*
+* The legacy `camera-*` tail has no family (`null`). It is parsed, never produced,
+* never offered.
+*/
+var NC_SYSTEM_EVENT_FAMILIES = [
+	"device-events",
+	"system",
+	"alarm"
+];
+function isSystemEventFamily(value) {
+	return NC_SYSTEM_EVENT_FAMILIES.some((family) => family === value);
+}
+/** Total over the enum: a kind added to the cap without a family fails tsc here. */
+var NC_SYSTEM_EVENT_FAMILY = {
+	"device-online": "device-events",
+	"device-offline": "device-events",
+	"device-disabled": "device-events",
+	"device-enabled": "device-events",
+	"device-battery-low": "device-events",
+	"device-battery-normal": "device-events",
+	"device-consumable-low": "device-events",
+	"device-consumable-normal": "device-events",
+	"stream-online": "device-events",
+	"stream-offline": "device-events",
+	"detection-blind": "device-events",
+	"node-online": "system",
+	"node-offline": "system",
+	"node-inference-unavailable": "system",
+	"addon-crash-loop": "system",
+	"addon-update-available": "system",
+	"addon-updated": "system",
+	"server-update-available": "system",
+	"server-updated": "system",
+	"wrapper-update-available": "system",
+	"backup-completed": "system",
+	"export-completed": "system",
+	"alarm-triggered": "alarm",
+	"alarm-armed": "alarm",
+	"alarm-disarmed": "alarm",
+	"alarm-arming": "alarm",
+	"alarm-arm-refused": "alarm",
+	"alarm-pending": "alarm",
+	"alarm-rearmed": "alarm",
+	"alarm-sensor-bypass": "alarm",
+	"alarm-check-failed": "alarm",
+	"camera-online": null,
+	"camera-offline": null,
+	"camera-disabled": null,
+	"camera-enabled": null
+};
+/** Read by NAME, for kinds that arrive as plain strings (a newer hub, the viewer's mirror). */
+var FAMILY_BY_NAME = new Map(Object.entries(NC_SYSTEM_EVENT_FAMILY));
+var NC_SYSTEM_EVENT_CONDITION_FILTER_KEYS = [...NC_SYSTEM_EVENT_FILTER_KEYS, "excludeDeviceIds"];
+/**
+* The filters a family may carry. The four base filters are the union of
+* `systemEventFilterApplies` over the family's kinds (the spec pins that
+* equality). `excludeDeviceIds` is a device-events filter only: an alarm is
+* narrowed to the camera that triggered it and excludes nothing.
+*/
+var NC_SYSTEM_EVENT_FAMILY_FILTERS = {
+	"device-events": [
+		"deviceIds",
+		"excludeDeviceIds",
+		"deviceTypes"
+	],
+	system: ["nodeIds", "packageNames"],
+	alarm: ["deviceIds"]
+};
+var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
+	{
+		id: "device-state",
+		family: "device-events",
+		label: "Device state",
+		kinds: [
+			"device-offline",
+			"device-online",
+			"device-disabled",
+			"device-enabled"
+		]
+	},
+	{
+		id: "streams",
+		family: "device-events",
+		label: "Streams",
+		kinds: ["stream-offline", "stream-online"]
+	},
+	{
+		id: "battery",
+		family: "device-events",
+		label: "Battery",
+		kinds: ["device-battery-low", "device-battery-normal"]
+	},
+	{
+		id: "consumables",
+		family: "device-events",
+		label: "Consumables",
+		kinds: ["device-consumable-low", "device-consumable-normal"]
+	},
+	{
+		id: "detection-blind",
+		family: "device-events",
+		label: "Detecting nothing",
+		kinds: ["detection-blind"]
+	},
+	{
+		id: "nodes",
+		family: "system",
+		label: "Nodes",
+		kinds: [
+			"node-offline",
+			"node-online",
+			"node-inference-unavailable"
+		]
+	},
+	{
+		id: "addons",
+		family: "system",
+		label: "Addons",
+		kinds: [
+			"addon-crash-loop",
+			"addon-update-available",
+			"addon-updated"
+		]
+	},
+	{
+		id: "updates",
+		family: "system",
+		label: "Server & container updates",
+		kinds: [
+			"server-update-available",
+			"server-updated",
+			"wrapper-update-available"
+		]
+	},
+	{
+		id: "backups-exports",
+		family: "system",
+		label: "Backups & exports",
+		kinds: ["backup-completed", "export-completed"]
+	},
+	{
+		id: "alarm",
+		family: "alarm",
+		label: "Alarm",
+		kinds: NC_ALARM_SYSTEM_EVENT_KINDS
+	}
+];
+function systemEventKindsOfFamily(family) {
+	return NC_SYSTEM_EVENT_KIND_GROUP_SPECS.filter((g) => g.family === family).flatMap((g) => g.kinds);
+}
+/** The kind names on an UNTYPED condition, or `undefined` when it has none. */
+function systemEventKindNamesOf(condition) {
+	if (typeof condition !== "object" || condition === null || !("kinds" in condition)) return void 0;
+	const kinds = condition.kinds;
+	if (!Array.isArray(kinds)) return void 0;
+	return kinds.filter((kind) => typeof kind === "string");
+}
+/**
+* One family, or `mixed`. Mixed covers kinds that span families, a legacy kind,
+* a kind this build does not know (it fails toward read-only and never toward
+* editable), and an empty selection (nothing to decide on).
+*/
+function systemEventFamilyOf(kindNames) {
+	const families = /* @__PURE__ */ new Set();
+	for (const name of kindNames) {
+		const family = FAMILY_BY_NAME.get(name);
+		if (family === void 0 || family === null) return { kind: "mixed" };
+		families.add(family);
+	}
+	const [only] = [...families];
+	return families.size === 1 && only !== void 0 ? {
+		kind: "family",
+		family: only
+	} : { kind: "mixed" };
+}
+/**
+* Why the hub refuses this condition on a new or updated rule. Empty = accepted.
+* Families are reported in `NC_SYSTEM_EVENT_FAMILIES` order, and filters in
+* `NC_SYSTEM_EVENT_CONDITION_FILTER_KEYS` order, so a refusal reads the same
+* every time.
+*/
+function systemEventFamilyProblems(condition) {
+	if (condition === void 0 || condition.kinds.length === 0) return [{ code: "no-kinds" }];
+	const problems = [];
+	const present = /* @__PURE__ */ new Set();
+	for (const kind of condition.kinds) {
+		const family = NC_SYSTEM_EVENT_FAMILY[kind];
+		if (family === null) problems.push({
+			code: "legacy-kind",
+			kind
+		});
+		else present.add(family);
+	}
+	const families = NC_SYSTEM_EVENT_FAMILIES.filter((f) => present.has(f));
+	if (families.length > 1) problems.push({
+		code: "mixed-families",
+		families
+	});
+	const [family] = families;
+	if (families.length !== 1 || family === void 0) return problems;
+	const allowed = NC_SYSTEM_EVENT_FAMILY_FILTERS[family];
+	for (const filter of NC_SYSTEM_EVENT_CONDITION_FILTER_KEYS) if (condition[filter] !== void 0 && !allowed.includes(filter)) problems.push({
+		code: "filter-outside-family",
+		filter,
+		family
+	});
+	return problems;
+}
+function describeSystemEventFamilyProblem(problem) {
+	switch (problem.code) {
+		case "no-kinds": return "a system-event rule needs at least one event kind";
+		case "legacy-kind": return `'${problem.kind}' is a legacy kind and cannot be authored`;
+		case "mixed-families": return `event kinds span ${problem.families.join(" + ")} — one rule per family`;
+		case "filter-outside-family": return `filter '${problem.filter}' is not allowed on a ${problem.family} rule`;
+	}
+}
+//#endregion
 //#region src/notification/rule-kinds.ts
+/** Every kind a `system-event` rule can derive — the three families and `mixed`. */
+var NC_SYSTEM_RULE_KINDS = [
+	"device-events",
+	"system",
+	"alarm",
+	"mixed"
+];
+/** Is this a kind a `system-event` rule derives (any family, or `mixed`)? */
+function isSystemRuleKind(kind) {
+	return NC_SYSTEM_RULE_KINDS.some((k) => k === kind);
+}
+/** The family a kind authors, or undefined (a camera kind, or `mixed`). */
+function systemFamilyOfKind(kind) {
+	return isSystemEventFamily(kind) ? kind : void 0;
+}
 /**
 * Reasons, written once. Each names the SUBJECT FIELD the engine reads and
 * finds absent — that is what makes the exclusion checkable against the engine
@@ -60676,6 +61150,7 @@ function prepareNotification(caps, n) {
 */
 var NO_SENSOR_KIND = "An occupancy edge is not a sensor event: it carries no sensor kind, so this condition can never match one.";
 var NO_EVENT_TOKEN = "An occupancy edge carries no device event-type token — that comes from an event-emitter slice, which a count crossing has none of.";
+var NO_SENSOR_EDGE = "An occupancy edge is a count crossing, not a sensor reading: it has no raise or clear, so this choice could never narrow it.";
 var OCCUPANCY_SOURCE = "An occupancy edge is always produced by the pipeline, so any other source can never match and “pipeline” narrows nothing.";
 var AUDIO_SOURCE = "A confirmed sound window is always stamped as an audio subject, so any other source can never match.";
 var SOUND_NOT_A_PICTURE = "A sound rule fires on what the camera HEARD. Its subject carries no detection, so this condition can never match one — name the sounds in the Sound condition instead.";
@@ -60686,6 +61161,7 @@ var NC_RULE_KIND_SPECS = [
 		kind: "detection",
 		label: "Conditions",
 		excluded: {},
+		editable: true,
 		carriesMedia: true,
 		carriesSubjectCrop: true
 	},
@@ -60694,6 +61170,7 @@ var NC_RULE_KIND_SPECS = [
 		label: "Conditions",
 		/** Same argument as `detection`: `occupancy` converts, it does not confuse. */
 		excluded: {},
+		editable: true,
 		carriesMedia: true,
 		carriesSubjectCrop: true,
 		blurb: "A doorbell press or a linked sensor changing state. The picture comes from the camera the sensor is attributed to."
@@ -60705,8 +61182,10 @@ var NC_RULE_KIND_SPECS = [
 		excluded: {
 			sensorKinds: NO_SENSOR_KIND,
 			eventTypeTokens: NO_EVENT_TOKEN,
+			sensorTransition: NO_SENSOR_EDGE,
 			source: OCCUPANCY_SOURCE
 		},
+		editable: true,
 		carriesMedia: true,
 		carriesSubjectCrop: true,
 		blurb: "Fires when the count in a camera frame or a zone crosses your threshold and holds. Pick the camera first — the zone list is that camera’s."
@@ -60729,25 +61208,66 @@ var NC_RULE_KIND_SPECS = [
 			plates: SOUND_NOT_A_PICTURE,
 			source: AUDIO_SOURCE
 		},
+		editable: true,
 		carriesMedia: true,
 		carriesSubjectCrop: false,
 		blurb: "Fires on a confirmed sampling window of audio, never on a picture. Name the sounds and/or keep a level threshold — with neither it can never match.",
 		mediaBlurb: "A sound owns no frame, so the picture is a photograph of the camera taken at the moment of the match — the whole scene, never a crop. The GIF and the clip are cut around the same instant, from the camera."
 	},
+	{
+		kind: "device-events",
+		label: "Device events",
+		discriminator: "systemEvent",
+		excluded: {},
+		editable: true,
+		carriesMedia: false,
+		carriesSubjectCrop: false,
+		blurb: "A device or its stream going away or coming back, switched off or on, a battery or consumable running low, a camera detecting nothing. There is no frame to attach."
+	},
 	{
 		kind: "system",
-		label: "Events",
+		label: "System events",
 		discriminator: "systemEvent",
 		excluded: {},
+		editable: true,
 		carriesMedia: false,
 		carriesSubjectCrop: false,
-		blurb: "The installation itself: a camera or stream dropping, a node leaving, an update landing. There is no detection behind it and no frame to attach."
+		blurb: "The installation itself: a node leaving, an addon crash-looping, an update available or installed, a backup or an export finishing."
+	},
+	{
+		kind: "alarm",
+		label: "Alarm",
+		discriminator: "systemEvent",
+		excluded: {},
+		editable: true,
+		carriesMedia: false,
+		carriesSubjectCrop: false,
+		blurb: "The alarm panel: refused, arming, armed, entry delay, triggered, re-armed, sensor bypass, disarmed.",
+		mediaBlurb: "An alarm set off by a rule arrives with THAT rule's pictures, combined into one notification. This rule adds none of its own."
+	},
+	{
+		kind: "mixed",
+		label: "To recreate",
+		discriminator: "systemEvent",
+		excluded: {},
+		editable: false,
+		carriesMedia: false,
+		carriesSubjectCrop: false,
+		blurb: "This rule mixes events from more than one family (device events, system, alarm). It keeps firing as it is, but it can no longer be edited: create one rule per family, then delete this one."
 	}
 ];
 /** The spec for a kind. Total by construction — every member has an entry. */
 function ruleKindSpec(kind) {
 	return NC_RULE_KIND_SPECS.find((s) => s.kind === kind) ?? NC_RULE_KIND_SPECS[0];
 }
+/**
+* Every kind a discriminator makes — one kind for `audio` and `occupancy`, the
+* whole system group for `systemEvent`. Empty for a condition that makes no
+* kind. See {@link NcRuleKindSpec.discriminator}.
+*/
+function kindsForDiscriminator(discriminator) {
+	return NC_RULE_KIND_SPECS.filter((s) => s.discriminator === discriminator).map((s) => s.kind);
+}
 /** The delivery a system rule rides — named once, compared everywhere. */
 var NC_SYSTEM_DELIVERY = "system-event";
 /**
@@ -60765,16 +61285,28 @@ function isSystemDelivery(delivery) {
 * the order below is the engine's own: `evaluateRule` checks the system branch
 * first, then the occupancy and audio gates. Takes a plain `delivery` string so
 * a trigger this build does not know still classifies (as `detection`, which is
-* the read-only path's own fallback).
+* the read-only path's own fallback). A system rule classifies by the FAMILY of
+* its event kinds (D637) — see {@link systemRuleKindOf}.
 */
 function ruleKindOf(rule) {
-	if (isSystemDelivery(rule.delivery)) return "system";
+	if (isSystemDelivery(rule.delivery)) return systemRuleKindOf(rule.conditions.systemEvent);
 	if (rule.conditions.occupancy !== void 0 && rule.delivery === "device-event") return "occupancy";
 	if (rule.conditions.audio !== void 0 && rule.delivery === "immediate") return "sound";
 	if (rule.delivery === "device-event") return "sensor";
 	return "detection";
 }
 /**
+* A system rule's kind: its one family, or `mixed` (D637).
+*
+* Takes the UNTYPED condition for the same reason {@link NcRuleConditionsSubject}
+* is structural. `mixed` covers kinds across families, a legacy or unknown kind,
+* and no kinds at all — it fails toward read-only, never toward editable.
+*/
+function systemRuleKindOf(condition) {
+	const verdict = systemEventFamilyOf(systemEventKindNamesOf(condition) ?? []);
+	return verdict.kind === "family" ? verdict.family : "mixed";
+}
+/**
 * Is this condition visible — and authorable — for a rule of this kind?
 *
 * The COMPOSITION, and the only function that decides it: `appliesTo` is the
@@ -60815,35 +61347,64 @@ var NC_RULE_SECTIONS = [
 		label: "All rules",
 		blurb: "Every notification rule, whatever its trigger. Each rule picks a trigger, matches conditions and fans out to one or more delivery targets.",
 		newRuleLabel: "New rule",
-		emptyHint: "No notification rules yet. Create one to be told what your cameras see."
+		emptyHint: "No notification rules yet. Create one to be told what your cameras see.",
+		creatable: true
 	},
 	{
 		key: "detection",
 		label: "Detections & devices",
 		blurb: "Rules driven by what the cameras and sensors SEE — detections, tracks, doorbell presses and package events.",
 		newRuleLabel: "New detection rule",
-		emptyHint: "No detection rules yet. Create one to be told what your cameras see."
+		emptyHint: "No detection rules yet. Create one to be told what your cameras see.",
+		creatable: true
 	},
 	{
 		key: "audio",
 		label: "Sound",
 		blurb: "Rules on what the cameras HEAR: a sustained window of sound loud enough, or classified as one of the sounds you name. A sound rule fires only on a confirmed sampling window, never on a picture.",
 		newRuleLabel: "New sound rule",
-		emptyHint: "No sound rules yet. A new sound rule opens on the sound condition already filled in with a level threshold, so you only have to name the sounds and the targets."
+		emptyHint: "No sound rules yet. A new sound rule opens on the sound condition already filled in with a level threshold, so you only have to name the sounds and the targets.",
+		creatable: true
 	},
 	{
 		key: "occupancy",
 		label: "Occupancy",
 		blurb: "Rules on how many objects are in a camera frame or a zone, and for how long: \"the driveway became occupied\", \"the garden emptied\".",
 		newRuleLabel: "New occupancy rule",
-		emptyHint: "No occupancy rules yet. A new occupancy rule opens on the occupancy condition; pick the camera first, then the zone and the count."
+		emptyHint: "No occupancy rules yet. A new occupancy rule opens on the occupancy condition; pick the camera first, then the zone and the count.",
+		creatable: true
+	},
+	{
+		key: "device-events",
+		label: "Device events",
+		blurb: "Rules about your devices: offline or back, switched off or on, a stream dropping, a battery or consumable running low, a camera detecting nothing.",
+		newRuleLabel: "New device-event rule",
+		emptyHint: "No device-event rules yet. These tell you when a device drops, a battery runs low or a camera goes blind.",
+		creatable: true
 	},
 	{
 		key: "system",
 		label: "System events",
-		blurb: "Rules about the installation itself: a camera or stream dropping, a node leaving the cluster, an addon or server update becoming available. These carry no image and are not tied to a detection.",
+		blurb: "Rules about the installation: a node leaving the cluster, an addon crash-looping, an update available or installed, a backup or export finishing.",
 		newRuleLabel: "New system rule",
-		emptyHint: "No system-event rules yet. These tell you when a camera drops, a node leaves or an update lands."
+		emptyHint: "No system rules yet. These tell you when a node leaves, an update lands or a backup finishes.",
+		creatable: true
+	},
+	{
+		key: "alarm",
+		label: "Alarm",
+		blurb: "Rules about the alarm panel: arming, armed, triggered, disarmed, and the refusals in between.",
+		newRuleLabel: "New alarm rule",
+		emptyHint: "No alarm rules yet. These tell you when the alarm arms, goes off or is disarmed.",
+		creatable: true
+	},
+	{
+		key: "mixed",
+		label: "To recreate",
+		blurb: "System rules authored before the three families existed. Each mixes families, keeps firing as it is, and can only be read or deleted: recreate it as one rule per family.",
+		newRuleLabel: "New rule",
+		emptyHint: "Nothing to recreate.",
+		creatable: false
 	}
 ];
 /** The section for a key, or `undefined` — the lookup behind every label. */
@@ -60866,8 +61427,9 @@ function isOccupancyRule(subject) {
 * Does a rule belong in this section?
 *
 * `all` always matches — a section that hides a rule is how an operator
-* concludes it was deleted. The other four PARTITION the list: sound and
-* occupancy are claimed by their condition, system by its trigger, and
+* concludes it was deleted. The others PARTITION the list: sound and
+* occupancy are claimed by their condition, a system-event rule by its trigger
+* and then by the family of its event kinds (or `mixed`, D637), and
 * everything left over — including a trigger this build has never heard of —
 * counts as a detection rule so it stays visible somewhere.
 *
@@ -60879,21 +61441,23 @@ function isOccupancyRule(subject) {
 */
 function ruleMatchesSection(subject, section) {
 	if (section === "all") return true;
-	if (section === "system") return isSystemDelivery(subject.delivery);
+	if (isSystemDelivery(subject.delivery)) return ruleKindOf(subject) === section;
 	if (section === "audio") return isAudioRule(subject);
 	if (section === "occupancy") return isOccupancyRule(subject);
-	return !isSystemDelivery(subject.delivery) && !isAudioRule(subject) && !isOccupancyRule(subject);
+	if (section === "detection") return !isAudioRule(subject) && !isOccupancyRule(subject);
+	return false;
 }
 /**
 * Which section OWNS this rule — the counter behind a section strip.
 *
-* Derived from {@link ruleMatchesSection} rather than restated, so the strip's
-* counts and the strip's contents can never disagree.
+* The same order as {@link ruleMatchesSection} — trigger first, then the
+* discriminating condition — and the section spec asserts the two agree on
+* every subject, so the strip's counts and its contents cannot disagree.
 */
 function ruleSectionOf(subject) {
-	if (ruleMatchesSection(subject, "system")) return "system";
-	if (ruleMatchesSection(subject, "audio")) return "audio";
-	if (ruleMatchesSection(subject, "occupancy")) return "occupancy";
+	if (isSystemDelivery(subject.delivery)) return systemRuleKindOf(subject.conditions.systemEvent);
+	if (isAudioRule(subject)) return "audio";
+	if (isOccupancyRule(subject)) return "occupancy";
 	return "detection";
 }
 /**
@@ -60931,9 +61495,17 @@ var NC_AUDIO_SEED = {
 };
 function ruleSeedForSection(section) {
 	switch (section) {
+		case "device-events": return {
+			delivery: NC_SYSTEM_DELIVERY,
+			conditions: { systemEvent: { kinds: ["device-offline", "device-online"] } }
+		};
 		case "system": return {
 			delivery: NC_SYSTEM_DELIVERY,
-			conditions: {}
+			conditions: { systemEvent: { kinds: ["node-offline", "node-online"] } }
+		};
+		case "alarm": return {
+			delivery: NC_SYSTEM_DELIVERY,
+			conditions: { systemEvent: { kinds: ["alarm-triggered"] } }
 		};
 		case "audio": return {
 			delivery: "immediate",
@@ -60975,7 +61547,7 @@ var EDITOR_SECTION_LABELS = {
 *
 * Two rules, both of them about a control that would decide nothing:
 *
-*  - a `system-event` rule has no device scope — `conditions.devices` is not
+*  - a system-event rule (any family) has no device scope — `conditions.devices` is not
 *    evaluated for it and the input builder refuses to write it — so the
 *    Cameras section is DROPPED rather than shown and ignored;
 *  - a sound or occupancy rule is NAMED on its conditions section. Neither has
@@ -60993,7 +61565,7 @@ function ruleEditorSectionsForKind(kind) {
 	const spec = ruleKindSpec(kind);
 	const sections = [];
 	for (const key of NC_RULE_EDITOR_SECTION_ORDER) {
-		if (key === "devices" && kind === "system") continue;
+		if (key === "devices" && isSystemRuleKind(kind)) continue;
 		sections.push({
 			key,
 			label: key === "conditions" ? spec.label : EDITOR_SECTION_LABELS[key]
@@ -61064,6 +61636,111 @@ function isScheduleActive(schedule, atMs) {
 	return schedule.invert === true ? !inside : inside;
 }
 //#endregion
+//#region src/notification/alarm-membership.ts
+var ARMED_WORD_PREFIX = "armed_";
+var ALARM_PANEL_CAP = "alarm-panel";
+var ALARM_PANEL_TRIGGER_METHOD = "trigger";
+/**
+* The sensor-event kinds that are OPENINGS to the alarm — the keys of the
+* engine's opening table (`alarm-openings.ts`, which is checked against this
+* list with `satisfies`). Only these carry an opening edge the alarm refuses.
+*/
+var NC_ALARM_OPENING_EVENT_KINDS = [
+	"contact",
+	"cover",
+	"lock"
+];
+/**
+* A rule belongs to the alarm when its `deviceState` gate names ANY device's
+* `armed_*` word, or an ENABLED `onTrigger` sequence pulls the alarm panel's
+* trigger (D630).
+*/
+function ruleBelongsToAlarm(rule) {
+	if ((rule.conditions.deviceState?.states ?? []).some((s) => s.trim().toLowerCase().startsWith(ARMED_WORD_PREFIX))) return true;
+	return (rule.onTrigger ?? []).some((sequence) => sequence.enabled && sequence.actions.some((step) => step.kind === "cap" && step.cap === ALARM_PANEL_CAP && step.method === ALARM_PANEL_TRIGGER_METHOD));
+}
+function isOpeningKind(kind) {
+	const k = kind.trim().toLowerCase();
+	return NC_ALARM_OPENING_EVENT_KINDS.some((opening) => opening === k);
+}
+/**
+* An alarm rule over openings only, asking for the CLEAR: the alarm edge
+* refuses every closing, and the chosen edge refuses every opening, so nothing
+* is left (D640 × D630). Not refused on save — alarm membership is derived and
+* can change with an action edit — but every editor must SAY it.
+*/
+function sensorTransitionNeverFires(rule) {
+	const kinds = rule.conditions.sensorKinds ?? [];
+	if (rule.conditions.sensorTransition !== "cleared" || kinds.length === 0) return false;
+	if (!kinds.every(isOpeningKind)) return false;
+	return ruleBelongsToAlarm(rule);
+}
+/** The warning an editor shows for {@link sensorTransitionNeverFires}. */
+var NC_SENSOR_TRANSITION_NEVER_FIRES_WARNING = "This rule belongs to the alarm, and an alarm rule fires only when an opening OPENS. Set to “only when it clears”, it can never fire.";
+//#endregion
+//#region src/notification/sensor-raised.ts
+/**
+* WHICH WAY A BOOLEAN SENSOR MOVED — read off the one slice a sensor event
+* persists (D640 "a sensor rule fires on the raise, the clear, or both").
+*
+* A device-event rule over a flood sensor notified on BOTH edges: water
+* detected, and back to dry. `NcConditions.sensorTransition` lets the rule
+* name one edge; this file answers, for one `SensorEvent`, which edge it is.
+*
+* NOT A SECOND TABLE. The "which boolean of this cap counts as HIGH" question
+* already has one answer, `SOURCE_CAP_ACTIVE_FIELD`
+* (`catalogs/sensor-active-state.ts`, the doorbell's and the recorder's edge
+* table), and a sensor event names its kind, not its cap. So the table here is
+* DERIVED: event kind → cap (`EVENT_KIND_BY_CAP`) → that cap's active field.
+* Only kinds whose taxonomy category is `sensor` take part — a switch has an
+* `on` boolean too, but "it triggers / it clears" is not a sentence about a
+* light, and offering it there would be a knob with a misleading label.
+* `presence` is a WORD (`home` / `not_home` / a zone), not a boolean, and is
+* absent from the source table, so it is absent here.
+*
+* `undefined` = never guessed: a kind with no raise (a doorbell press, a
+* button, a cover), or a slice whose field is missing or not a boolean. The
+* engine then does NOT filter — a flood alert must not go silent because one
+* read came back unreadable (the same stance as the alarm's `sensorEdgeOf`).
+*
+* Pure, RN-safe: the viewer imports the support rule from here.
+*/
+/** Event kind → the boolean field of its cap slice that means "raised". */
+var NC_SENSOR_RAISED_FIELD_BY_KIND = Object.freeze(Object.fromEntries(Object.entries(EVENT_KIND_BY_CAP).flatMap(([capName, descriptor]) => {
+	const field = SOURCE_CAP_ACTIVE_FIELD[capName];
+	if (field === void 0 || descriptor.category !== "sensor") return [];
+	return [[descriptor.kind, field]];
+})));
+/** The sensor kinds `sensorTransition` means something for. */
+var NC_SENSOR_TRANSITION_KINDS = Object.freeze(Object.keys(NC_SENSOR_RAISED_FIELD_BY_KIND));
+function normaliseKind(kind) {
+	return kind.trim().toLowerCase();
+}
+/**
+* true = the sensor is raised (water, smoke, open, tampered…), false = it
+* cleared, undefined = this kind has no raise or the slice cannot say.
+*/
+function sensorRaisedOf(kind, value) {
+	if (value === null) return void 0;
+	const field = NC_SENSOR_RAISED_FIELD_BY_KIND[normaliseKind(kind)];
+	if (field === void 0) return void 0;
+	const raw = Object.entries(value).find(([key]) => key === field)?.[1];
+	return typeof raw === "boolean" ? raw : void 0;
+}
+/**
+* THE SUPPORT RULE, shared by both editors: "Notify when" is offered only when
+* the rule names at least one sensor kind and EVERY kind it names has a raise.
+* A mixed rule (flood + doorbell) would hear "only when it clears" as "never
+* for the doorbell" in the operator's head while the engine lets the doorbell
+* through — so the choice is not offered, and an editor prunes it on save.
+*/
+function sensorTransitionOffered(sensorKinds) {
+	if (sensorKinds === void 0 || sensorKinds.length === 0) return false;
+	return sensorKinds.every((kind) => NC_SENSOR_TRANSITION_KINDS.includes(normaliseKind(kind)));
+}
+/** What an editor tells the operator when it is about to prune the choice. */
+var NC_SENSOR_TRANSITION_UNSUPPORTED_REASON = "Only a sensor that raises and clears (water, smoke, gas, CO, vibration, tamper, motion, contact) can fire on one edge. Pick only such sensor kinds, or the rule fires on every change.";
+//#endregion
 //#region src/notification/template-vars.ts
 var RULE_BODY_ONLY = ["body"];
 var RULE_TEXT = ["title", "body"];
@@ -61802,10 +62479,38 @@ var CAPTION_VARS = {
 function onAxis(declared, asked) {
 	return declared === void 0 || asked === void 0 || declared.includes(asked);
 }
-function onSystemAxis(d, ctx) {
-	if (ctx.kind !== "system" || d.systemEventKinds === void 0) return true;
+/**
+* Does a descriptor declared for `declared` kinds have a value for a rule of
+* `kind`?
+*
+* `system` on the WIRE stands for every system rule kind (D637): the served
+* catalog keeps the five pre-D637 tokens so installed viewers still parse it
+* (`NcTemplateVarKindSchema`), and the family split lives here, in the match.
+* Exported so the admin's local interpreter of the served catalog asks the
+* same question instead of restating it.
+*/
+function templateVarKindApplies(declared, kind) {
+	if (declared === void 0 || kind === void 0) return true;
+	if (declared.some((k) => k === kind)) return true;
+	return isSystemRuleKind(kind) && declared.includes("system");
+}
+/**
+* Is a descriptor that names `systemEventKinds` on the event-kind axis of a
+* system rule? Read only for a system rule kind; any other kind ignores it.
+*
+* Event kinds chosen: the descriptor must speak about one of them. None chosen
+* yet: a FAMILY kind watches its own family's event kinds (a device-events rule
+* is never offered the alarm's `{{mode}}`), and `mixed` watches all of them.
+*/
+function templateVarSystemEventApplies(d, ctx) {
+	if (!isSystemRuleKind(ctx.kind) || d.systemEventKinds === void 0) return true;
+	const declared = d.systemEventKinds;
 	const asked = ctx.systemEventKinds ?? [];
-	return asked.length === 0 || asked.some((k) => d.systemEventKinds?.includes(k) === true);
+	if (asked.length > 0) return asked.some((k) => declared.includes(k));
+	const family = ctx.kind === void 0 ? void 0 : systemFamilyOfKind(ctx.kind);
+	if (family === void 0) return true;
+	const own = systemEventKindsOfFamily(family);
+	return declared.some((k) => own.includes(k));
 }
 /**
 * The variables that have a value in `ctx`, in catalog order. Pure.
@@ -61819,45 +62524,85 @@ function templateVarsFor(ctx) {
 		const allowed = CAPTION_VARS[ctx.field];
 		return NC_TEMPLATE_VARS.filter((d) => d.families.includes(ctx.family) && allowed.includes(d.name) && d.dynamic === void 0);
 	}
-	return NC_TEMPLATE_VARS.filter((d) => d.families.includes(ctx.family) && onAxis(d.fields, ctx.field) && onAxis(d.kinds, ctx.kind) && onAxis(d.deliveries, ctx.delivery) && onSystemAxis(d, ctx));
+	return NC_TEMPLATE_VARS.filter((d) => d.families.includes(ctx.family) && onAxis(d.fields, ctx.field) && templateVarKindApplies(d.kinds, ctx.kind) && onAxis(d.deliveries, ctx.delivery) && templateVarSystemEventApplies(d, ctx));
 }
 /** True when `name` is supplied in `ctx`, dynamic families (`count_<class>`) included. */
 function isKnownTemplateVar(name, ctx) {
 	return templateVarsFor(ctx).some((d) => d.dynamic !== void 0 ? name.startsWith(d.dynamic.prefix) && name.length > d.dynamic.prefix.length : d.name === name);
 }
 //#endregion
-//#region src/notification/system-event-filters.ts
-/** Every filter, for the callers that must cover all four (guards, tests). */
-var NC_SYSTEM_EVENT_FILTER_KEYS = [
-	"deviceIds",
-	"deviceTypes",
-	"nodeIds",
-	"packageNames"
-];
+//#region src/notification/scope-picker-items.ts
+function nodePickerItems(nodes) {
+	return nodes.map((node) => ({
+		id: node.id,
+		name: node.name,
+		type: node.isHub ? "hub" : "agent",
+		location: node.isOnline ? "online" : "offline",
+		...node.name !== node.id ? { detail: node.id } : {}
+	}));
+}
 /**
-* Does `filter` say anything about `kind`?
-*
-* `false` means the filter is not part of this kind's vocabulary: the engine
-* ignores it and an editor hides its input. It never means "excluded".
-*/
-function systemEventFilterApplies(kind, filter) {
-	switch (filter) {
-		case "deviceIds": return kind.startsWith("device-") || kind.startsWith("stream-") || kind === "detection-blind" || kind === "alarm-triggered" || kind === "export-completed";
-		case "deviceTypes": return kind.startsWith("device-") || kind === "detection-blind";
-		case "nodeIds": return kind.startsWith("node-") || kind === "addon-crash-loop" || kind === "addon-update-available" || kind === "addon-updated" || kind === "server-update-available" || kind === "wrapper-update-available" || kind === "server-updated";
-		case "packageNames": return kind.endsWith("update-available") || kind === "addon-updated" || kind === "server-updated";
-	}
+* The server's own package name: `server-update-available` / `server-updated`
+* carry it, and `addons.listPackages` does not list it.
+*/
+var NC_SERVER_PACKAGE_NAME = "@camstack/server";
+/**
+* Every package name an update EVENT carries as `packageName`, one per
+* producer. The package picker offers each of them whether or not
+* `addons.listPackages` lists it, because a rule scoped to a name no event
+* carries can never fire (and one an event carries must be pickable).
+*
+* - `@camstack/server` — `server-update-available` / `server-updated`: the hub
+*   root package (`HUB_ROOT_SPEC.packageName`, `@camstack/node-root`).
+* - `@camstack/system` — `server-update-available` from the framework check,
+*   which checks `[SYSTEM_PACKAGE]` only (`AddonPackageService.listFrameworkPackages`).
+*   `@camstack/types` / `@camstack/sdk` are framework packages for upload
+*   routing but are never announced, so they are NOT here.
+* - `camstack-wrapper` — `wrapper-update-available` (`WRAPPER_PACKAGE_NAME`,
+*   `wrapper-update-checker.ts`).
+*
+* Types cannot import those producers; the backend spec
+* `core/updates/__tests__/update-event-package-names.spec.ts` pins each literal
+* to its producer constant. This is a picker list, never a routing list.
+*/
+var NC_UPDATE_EVENT_PACKAGE_NAMES = [
+	NC_SERVER_PACKAGE_NAME,
+	"@camstack/system",
+	"camstack-wrapper"
+];
+var UPDATE_EVENT_PACKAGE_TYPE = {
+	"@camstack/server": "server",
+	"@camstack/system": "framework",
+	"camstack-wrapper": "wrapper"
+};
+function isUpdateEventPackageName(name) {
+	return NC_UPDATE_EVENT_PACKAGE_NAMES.some((pinned) => pinned === name);
 }
 /**
-* Does `filter` say anything about AT LEAST ONE of the selected kinds?
-*
-* The editor's question: a rule selects several kinds at once and renders one
-* filter input for the set, so a filter is shown when any selected kind can be
-* narrowed by it. The kinds it cannot narrow are then simply not narrowed —
-* which is the engine's half of the same rule.
+* Every update-event package first (always offered: an event carries it), in
+* `NC_UPDATE_EVENT_PACKAGE_NAMES` order, then the installed addons sorted by
+* name. An installed version is the second line.
 */
-function systemEventFilterAppliesToAnyKind(kinds, filter) {
-	return kinds.some((kind) => systemEventFilterApplies(kind, filter));
+function packagePickerItems(packages) {
+	const versions = new Map(packages.map((pkg) => [pkg.name, pkg.version]));
+	const pinned = NC_UPDATE_EVENT_PACKAGE_NAMES.map((name) => {
+		const version = versions.get(name);
+		return {
+			id: name,
+			name,
+			type: UPDATE_EVENT_PACKAGE_TYPE[name],
+			location: null,
+			...version !== void 0 ? { detail: version } : {}
+		};
+	});
+	const addons = packages.filter((pkg) => !isUpdateEventPackageName(pkg.name)).map((pkg) => ({
+		id: pkg.name,
+		name: pkg.name,
+		type: "addon",
+		location: null,
+		detail: pkg.version
+	})).sort((a, b) => a.name.localeCompare(b.name));
+	return [...pinned, ...addons];
 }
 //#endregion
 //#region src/notification/timelapse-rule.ts
@@ -65406,6 +66151,7 @@ exports.NATIVE_LEASE_TILE_BUDGET_KEY = NATIVE_LEASE_TILE_BUDGET_KEY;
 exports.NAVIGATION_ACTION_CATALOG = NAVIGATION_ACTION_CATALOG;
 exports.NAVIGATION_LIGHT_LEVEL_MAX = NAVIGATION_LIGHT_LEVEL_MAX;
 exports.NAVIGATION_LIGHT_LEVEL_MIN = NAVIGATION_LIGHT_LEVEL_MIN;
+exports.NC_ALARM_OPENING_EVENT_KINDS = NC_ALARM_OPENING_EVENT_KINDS;
 exports.NC_ALARM_SYSTEM_EVENT_KINDS = NC_ALARM_SYSTEM_EVENT_KINDS;
 exports.NC_AUDIO_CONFIRM_HITS_DEFAULT = NC_AUDIO_CONFIRM_HITS_DEFAULT;
 exports.NC_AUDIO_CONFIRM_HITS_MAX = NC_AUDIO_CONFIRM_HITS_MAX;
@@ -65442,11 +66188,23 @@ exports.NC_RULE_CLEARABLE_KEYS = NC_RULE_CLEARABLE_KEYS;
 exports.NC_RULE_EDITOR_SECTION_ORDER = NC_RULE_EDITOR_SECTION_ORDER;
 exports.NC_RULE_KIND_SPECS = NC_RULE_KIND_SPECS;
 exports.NC_RULE_SECTIONS = NC_RULE_SECTIONS;
+exports.NC_SENSOR_RAISED_FIELD_BY_KIND = NC_SENSOR_RAISED_FIELD_BY_KIND;
+exports.NC_SENSOR_TRANSITION_KINDS = NC_SENSOR_TRANSITION_KINDS;
+exports.NC_SENSOR_TRANSITION_NEVER_FIRES_WARNING = NC_SENSOR_TRANSITION_NEVER_FIRES_WARNING;
+exports.NC_SENSOR_TRANSITION_UNSUPPORTED_REASON = NC_SENSOR_TRANSITION_UNSUPPORTED_REASON;
+exports.NC_SERVER_PACKAGE_NAME = NC_SERVER_PACKAGE_NAME;
 exports.NC_SNOOZE_MAX_MINUTES = NC_SNOOZE_MAX_MINUTES;
 exports.NC_SYSTEM_DELIVERY = NC_SYSTEM_DELIVERY;
+exports.NC_SYSTEM_EVENT_CONDITION_FILTER_KEYS = NC_SYSTEM_EVENT_CONDITION_FILTER_KEYS;
+exports.NC_SYSTEM_EVENT_FAMILIES = NC_SYSTEM_EVENT_FAMILIES;
+exports.NC_SYSTEM_EVENT_FAMILY = NC_SYSTEM_EVENT_FAMILY;
+exports.NC_SYSTEM_EVENT_FAMILY_FILTERS = NC_SYSTEM_EVENT_FAMILY_FILTERS;
 exports.NC_SYSTEM_EVENT_FILTER_KEYS = NC_SYSTEM_EVENT_FILTER_KEYS;
+exports.NC_SYSTEM_EVENT_KIND_GROUP_SPECS = NC_SYSTEM_EVENT_KIND_GROUP_SPECS;
+exports.NC_SYSTEM_RULE_KINDS = NC_SYSTEM_RULE_KINDS;
 exports.NC_TAXONOMY = NC_TAXONOMY;
 exports.NC_TEMPLATE_VARS = NC_TEMPLATE_VARS;
+exports.NC_UPDATE_EVENT_PACKAGE_NAMES = NC_UPDATE_EVENT_PACKAGE_NAMES;
 exports.NETWORK_LINK_TYPES = NETWORK_LINK_TYPES;
 exports.NETWORK_LINK_UNKNOWN = NETWORK_LINK_UNKNOWN;
 exports.NativeCropBboxSchema = NativeCropBboxSchema;
@@ -65503,6 +66261,8 @@ exports.NcRuleActionsSchema = NcRuleActionsSchema;
 exports.NcRuleClearableKeySchema = NcRuleClearableKeySchema;
 exports.NcRuleInputSchema = NcRuleInputSchema;
 exports.NcRuleKindSchema = NcRuleKindSchema;
+exports.NcRuleLastRunSchema = NcRuleLastRunSchema;
+exports.NcRuleLastRunsSchema = NcRuleLastRunsSchema;
 exports.NcRuleNotificationButtonSchema = NcRuleNotificationButtonSchema;
 exports.NcRulePatchSchema = NcRulePatchSchema;
 exports.NcRuleSchema = NcRuleSchema;
@@ -65511,6 +66271,7 @@ exports.NcRuleUpdateInputSchema = NcRuleUpdateInputSchema;
 exports.NcSceneConditionSchema = NcSceneConditionSchema;
 exports.NcScheduleSchema = NcScheduleSchema;
 exports.NcScheduleWindowSchema = NcScheduleWindowSchema;
+exports.NcSensorTransitionSchema = NcSensorTransitionSchema;
 exports.NcSnoozeInputSchema = NcSnoozeInputSchema;
 exports.NcSnoozeSchema = NcSnoozeSchema;
 exports.NcSnoozeScopeSchema = NcSnoozeScopeSchema;
@@ -65526,6 +66287,7 @@ exports.NcTemplatePreviewSchema = NcTemplatePreviewSchema;
 exports.NcTemplateVarContextSchema = NcTemplateVarContextSchema;
 exports.NcTemplateVarDescriptorSchema = NcTemplateVarDescriptorSchema;
 exports.NcTemplateVarGroupSchema = NcTemplateVarGroupSchema;
+exports.NcTemplateVarKindSchema = NcTemplateVarKindSchema;
 exports.NcTestResultSchema = NcTestResultSchema;
 exports.NcThrottleGranularitySchema = NcThrottleGranularitySchema;
 exports.NcThrottleSchema = NcThrottleSchema;
@@ -65534,6 +66296,8 @@ exports.NetworkAccessStatusSchema = NetworkAccessStatusSchema;
 exports.NetworkAddressSchema = NetworkAddressSchema;
 exports.NetworkEndpointSchema = NetworkEndpointSchema;
 exports.NetworkLinkStatusSchema = NetworkLinkStatusSchema;
+exports.NodeDirectoryEntrySchema = NodeDirectoryEntrySchema;
+exports.NodeDirectorySchema = NodeDirectorySchema;
 exports.NotificationActionIconSchema = NotificationActionIconSchema;
 exports.NotificationActionSchema = NotificationActionSchema;
 exports.NotificationFormatSchema = NotificationFormatSchema;
@@ -66129,6 +66893,7 @@ exports.describeCustomActions = require_sleep.describeCustomActions;
 exports.describeModelVariant = describeModelVariant;
 exports.describeOnboardClamp = describeOnboardClamp;
 exports.describeOnboardRefusal = describeOnboardRefusal;
+exports.describeSystemEventFamilyProblem = describeSystemEventFamilyProblem;
 exports.detectAccessRole = detectAccessRole;
 exports.detectionPipelineCapability = detectionPipelineCapability;
 exports.deviceAdminLinkCapability = deviceAdminLinkCapability;
@@ -66243,10 +67008,13 @@ exports.isSoftwareDecode = require_canonical_hash.isSoftwareDecode;
 exports.isSourceCap = isSourceCap;
 exports.isStorageLocationMode = isStorageLocationMode;
 exports.isSystemDelivery = isSystemDelivery;
+exports.isSystemEventFamily = isSystemEventFamily;
+exports.isSystemRuleKind = isSystemRuleKind;
 exports.isVoidInput = isVoidInput;
 exports.ituDbfsFromPreEpoch = ituDbfsFromPreEpoch;
 exports.jobKindSchema = jobKindSchema;
 exports.kebabToCamel = kebabToCamel;
+exports.kindsForDiscriminator = kindsForDiscriminator;
 exports.knownValues = knownValues;
 exports.lawnMowerControlCapability = lawnMowerControlCapability;
 exports.legacyAutoLinkIds = legacyAutoLinkIds;
@@ -66299,6 +67067,7 @@ exports.navigationCapability = navigationCapability;
 exports.networkAccessCapability = networkAccessCapability;
 exports.networkLinkCapability = networkLinkCapability;
 exports.networkQualityCapability = networkQualityCapability;
+exports.nodePickerItems = nodePickerItems;
 exports.nodePin = require_sleep.nodePin;
 exports.nodesCapability = nodesCapability;
 exports.normalizeAddonInitResult = require_sleep.normalizeAddonInitResult;
@@ -66317,6 +67086,7 @@ exports.optionalMethod = require_sleep.optionalMethod;
 exports.osdCapability = osdCapability;
 exports.osdManagerCapability = osdManagerCapability;
 exports.overlayClusterStepSettings = overlayClusterStepSettings;
+exports.packagePickerItems = packagePickerItems;
 exports.parseAdminBase = parseAdminBase;
 exports.parseCameraStreamConfig = parseCameraStreamConfig;
 exports.parseExpression = parseExpression;
@@ -66405,6 +67175,7 @@ exports.resolveStreamMaps = require_canonical_hash.resolveStreamMaps;
 exports.resolveVariantModelId = resolveVariantModelId;
 exports.resolveViewableDeviceIds = resolveViewableDeviceIds;
 exports.roleSpec = roleSpec;
+exports.ruleBelongsToAlarm = ruleBelongsToAlarm;
 exports.ruleEditorSectionsForKind = ruleEditorSectionsForKind;
 exports.ruleKindOf = ruleKindOf;
 exports.ruleKindSpec = ruleKindSpec;
@@ -66425,6 +67196,9 @@ exports.scoreRuntimes = scoreRuntimes;
 exports.scriptRunnerCapability = scriptRunnerCapability;
 exports.searchDisplayIcons = searchDisplayIcons;
 exports.selectAssignedProfileSlots = require_sleep.selectAssignedProfileSlots;
+exports.sensorRaisedOf = sensorRaisedOf;
+exports.sensorTransitionNeverFires = sensorTransitionNeverFires;
+exports.sensorTransitionOffered = sensorTransitionOffered;
 exports.serverManagementCapability = serverManagementCapability;
 exports.setByPath = setByPath;
 exports.settingsStoreCapability = settingsStoreCapability;
@@ -66462,13 +67236,21 @@ exports.switchCapability = switchCapability;
 exports.switchedOffIds = switchedOffIds;
 exports.synthesizeSourceInfo = synthesizeSourceInfo;
 exports.systemCapability = systemCapability;
+exports.systemEventFamilyOf = systemEventFamilyOf;
+exports.systemEventFamilyProblems = systemEventFamilyProblems;
 exports.systemEventFilterApplies = systemEventFilterApplies;
 exports.systemEventFilterAppliesToAnyKind = systemEventFilterAppliesToAnyKind;
+exports.systemEventKindNamesOf = systemEventKindNamesOf;
+exports.systemEventKindsOfFamily = systemEventKindsOfFamily;
+exports.systemFamilyOfKind = systemFamilyOfKind;
+exports.systemRuleKindOf = systemRuleKindOf;
 exports.tamperCapability = tamperCapability;
 exports.taskLogEntrySchema = taskLogEntrySchema;
 exports.taskPhaseSchema = taskPhaseSchema;
 exports.taskTargetSchema = taskTargetSchema;
 exports.temperatureSensorCapability = temperatureSensorCapability;
+exports.templateVarKindApplies = templateVarKindApplies;
+exports.templateVarSystemEventApplies = templateVarSystemEventApplies;
 exports.templateVarsFor = templateVarsFor;
 exports.terminalSessionCapability = terminalSessionCapability;
 exports.textToHtml = textToHtml;