@camstack/types 1.2.26 → 1.2.28

package/dist/capabilities/notification-rules.cap.d.ts

@@ -145,6 +145,92 @@ export type NcZoneCondition = z.infer<typeof NcZoneConditionSchema>;
  * The P1 condition set — a flat AND of groups; absent group = pass;
  * membership lists are OR within the list (spec §2.3).
  */
+/**
+ * What a rule may actuate.
+ *
+ * **No hand-maintained allowlist** (operator decision, and the right one — a
+ * written list of methods is a third parallel map to keep aligned, and this
+ * repo has paid for those). The boundary instead comes from a property the
+ * capabilities already carry: an action may target only a **device-scoped**
+ * capability method.
+ *
+ * That is not decoration. A rule can be authored by a NON-ADMIN — personal
+ * rules are a supported flow — and the executor runs with the addon's
+ * privileges, so an unbounded action is an arbitrary RPC channel with a
+ * privilege escalation attached. Restricting to device scope excludes the
+ * system caps (`device-manager.removeDevice` and friends) by construction,
+ * costs nothing to maintain, and cannot rot: a cap that stops being
+ * device-scoped stops being actuatable in the same change.
+ *
+ * The executor enforces it; {@link NcRuleActionSchema} carries the intent.
+ */
+/**
+ * One step of a sequence.
+ *
+ * `wait` is a first-class step rather than a property of the next action: it is
+ * what makes a sequence a SEQUENCE and not a list — "unlock, wait 5s, open"
+ * cannot be expressed otherwise.
+ */
+export declare const NcRuleActionSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"wait">;
+    seconds: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"cap">;
+    deviceId: z.ZodNumber;
+    cap: z.ZodString;
+    method: z.ZodString;
+    args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>], "kind">;
+export type NcRuleAction = z.infer<typeof NcRuleActionSchema>;
+/**
+ * A named, ordered run of steps with its own throttle.
+ *
+ * `minDelaySec` exists because a noisy rule otherwise hammers a physical
+ * actuator — the rule's own cooldown governs NOTIFICATIONS, which is a
+ * different budget from "how often may this gate actually open".
+ */
+export declare const NcRuleActionSequenceSchema: z.ZodObject<{
+    name: z.ZodString;
+    enabled: z.ZodBoolean;
+    minDelaySec: z.ZodOptional<z.ZodNumber>;
+    actions: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"wait">;
+        seconds: z.ZodNumber;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"cap">;
+        deviceId: z.ZodNumber;
+        cap: z.ZodString;
+        method: z.ZodString;
+        args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>], "kind">>;
+}, z.core.$strip>;
+export type NcRuleActionSequence = z.infer<typeof NcRuleActionSequenceSchema>;
+/**
+ * Sequences a rule runs, by hook point.
+ *
+ * ONLY `onTrigger` is here, deliberately. The reference also has activation /
+ * deactivation / reset / post-generation hooks, and they are wanted — but this
+ * repo's expensive failure mode is declaring a surface nothing produces, so a
+ * hook appears here in the same change that produces its edge, never before.
+ */
+export declare const NcRuleActionsSchema: z.ZodObject<{
+    onTrigger: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        enabled: z.ZodBoolean;
+        minDelaySec: z.ZodOptional<z.ZodNumber>;
+        actions: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"wait">;
+            seconds: z.ZodNumber;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"cap">;
+            deviceId: z.ZodNumber;
+            cap: z.ZodString;
+            method: z.ZodString;
+            args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strip>], "kind">>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type NcRuleActions = z.infer<typeof NcRuleActionsSchema>;
 /**
  * "This rule applies only while `deviceId` is in one of `states`."
  *
@@ -447,6 +533,23 @@ export declare const NcRuleInputSchema: z.ZodObject<{
     priority: z.ZodDefault<z.ZodNumber>;
     ownerUserId: z.ZodOptional<z.ZodString>;
     snoozeAllowGlobal: z.ZodOptional<z.ZodBoolean>;
+    actions: z.ZodOptional<z.ZodObject<{
+        onTrigger: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            enabled: z.ZodBoolean;
+            minDelaySec: z.ZodOptional<z.ZodNumber>;
+            actions: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"wait">;
+                seconds: z.ZodNumber;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"cap">;
+                deviceId: z.ZodNumber;
+                cap: z.ZodString;
+                method: z.ZodString;
+                args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            }, z.core.$strip>], "kind">>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export type NcRuleInput = z.infer<typeof NcRuleInputSchema>;
 /**
@@ -588,6 +691,23 @@ export declare const NcRulePatchSchema: z.ZodObject<{
     priority: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
     ownerUserId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
     snoozeAllowGlobal: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
+    actions: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+        onTrigger: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            enabled: z.ZodBoolean;
+            minDelaySec: z.ZodOptional<z.ZodNumber>;
+            actions: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"wait">;
+                seconds: z.ZodNumber;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"cap">;
+                deviceId: z.ZodNumber;
+                cap: z.ZodString;
+                method: z.ZodString;
+                args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            }, z.core.$strip>], "kind">>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>>;
     disabledTargetIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strip>;
 export type NcRulePatch = z.infer<typeof NcRulePatchSchema>;
@@ -722,6 +842,23 @@ export declare const NcRuleSchema: z.ZodObject<{
     priority: z.ZodDefault<z.ZodNumber>;
     ownerUserId: z.ZodOptional<z.ZodString>;
     snoozeAllowGlobal: z.ZodOptional<z.ZodBoolean>;
+    actions: z.ZodOptional<z.ZodObject<{
+        onTrigger: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            enabled: z.ZodBoolean;
+            minDelaySec: z.ZodOptional<z.ZodNumber>;
+            actions: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"wait">;
+                seconds: z.ZodNumber;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"cap">;
+                deviceId: z.ZodNumber;
+                cap: z.ZodString;
+                method: z.ZodString;
+                args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            }, z.core.$strip>], "kind">>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
     id: z.ZodString;
     createdBy: z.ZodString;
     createdAt: z.ZodNumber;
@@ -1108,6 +1245,23 @@ export declare const notificationRulesCapability: {
                 priority: z.ZodDefault<z.ZodNumber>;
                 ownerUserId: z.ZodOptional<z.ZodString>;
                 snoozeAllowGlobal: z.ZodOptional<z.ZodBoolean>;
+                actions: z.ZodOptional<z.ZodObject<{
+                    onTrigger: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        name: z.ZodString;
+                        enabled: z.ZodBoolean;
+                        minDelaySec: z.ZodOptional<z.ZodNumber>;
+                        actions: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                            kind: z.ZodLiteral<"wait">;
+                            seconds: z.ZodNumber;
+                        }, z.core.$strip>, z.ZodObject<{
+                            kind: z.ZodLiteral<"cap">;
+                            deviceId: z.ZodNumber;
+                            cap: z.ZodString;
+                            method: z.ZodString;
+                            args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                        }, z.core.$strip>], "kind">>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>>;
                 id: z.ZodString;
                 createdBy: z.ZodString;
                 createdAt: z.ZodNumber;
@@ -1248,6 +1402,23 @@ export declare const notificationRulesCapability: {
                 priority: z.ZodDefault<z.ZodNumber>;
                 ownerUserId: z.ZodOptional<z.ZodString>;
                 snoozeAllowGlobal: z.ZodOptional<z.ZodBoolean>;
+                actions: z.ZodOptional<z.ZodObject<{
+                    onTrigger: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        name: z.ZodString;
+                        enabled: z.ZodBoolean;
+                        minDelaySec: z.ZodOptional<z.ZodNumber>;
+                        actions: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                            kind: z.ZodLiteral<"wait">;
+                            seconds: z.ZodNumber;
+                        }, z.core.$strip>, z.ZodObject<{
+                            kind: z.ZodLiteral<"cap">;
+                            deviceId: z.ZodNumber;
+                            cap: z.ZodString;
+                            method: z.ZodString;
+                            args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                        }, z.core.$strip>], "kind">>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>>;
                 id: z.ZodString;
                 createdBy: z.ZodString;
                 createdAt: z.ZodNumber;
@@ -1386,6 +1557,23 @@ export declare const notificationRulesCapability: {
                 priority: z.ZodDefault<z.ZodNumber>;
                 ownerUserId: z.ZodOptional<z.ZodString>;
                 snoozeAllowGlobal: z.ZodOptional<z.ZodBoolean>;
+                actions: z.ZodOptional<z.ZodObject<{
+                    onTrigger: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        name: z.ZodString;
+                        enabled: z.ZodBoolean;
+                        minDelaySec: z.ZodOptional<z.ZodNumber>;
+                        actions: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                            kind: z.ZodLiteral<"wait">;
+                            seconds: z.ZodNumber;
+                        }, z.core.$strip>, z.ZodObject<{
+                            kind: z.ZodLiteral<"cap">;
+                            deviceId: z.ZodNumber;
+                            cap: z.ZodString;
+                            method: z.ZodString;
+                            args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                        }, z.core.$strip>], "kind">>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>>;
             }, z.core.$strip>;
         }, z.core.$strip>, z.ZodObject<{
             rule: z.ZodObject<{
@@ -1518,6 +1706,23 @@ export declare const notificationRulesCapability: {
                 priority: z.ZodDefault<z.ZodNumber>;
                 ownerUserId: z.ZodOptional<z.ZodString>;
                 snoozeAllowGlobal: z.ZodOptional<z.ZodBoolean>;
+                actions: z.ZodOptional<z.ZodObject<{
+                    onTrigger: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        name: z.ZodString;
+                        enabled: z.ZodBoolean;
+                        minDelaySec: z.ZodOptional<z.ZodNumber>;
+                        actions: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                            kind: z.ZodLiteral<"wait">;
+                            seconds: z.ZodNumber;
+                        }, z.core.$strip>, z.ZodObject<{
+                            kind: z.ZodLiteral<"cap">;
+                            deviceId: z.ZodNumber;
+                            cap: z.ZodString;
+                            method: z.ZodString;
+                            args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                        }, z.core.$strip>], "kind">>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>>;
                 id: z.ZodString;
                 createdBy: z.ZodString;
                 createdAt: z.ZodNumber;
@@ -1659,6 +1864,23 @@ export declare const notificationRulesCapability: {
                 priority: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
                 ownerUserId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
                 snoozeAllowGlobal: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
+                actions: z.ZodOptional<z.ZodOptional<z.ZodObject<{
+                    onTrigger: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        name: z.ZodString;
+                        enabled: z.ZodBoolean;
+                        minDelaySec: z.ZodOptional<z.ZodNumber>;
+                        actions: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                            kind: z.ZodLiteral<"wait">;
+                            seconds: z.ZodNumber;
+                        }, z.core.$strip>, z.ZodObject<{
+                            kind: z.ZodLiteral<"cap">;
+                            deviceId: z.ZodNumber;
+                            cap: z.ZodString;
+                            method: z.ZodString;
+                            args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                        }, z.core.$strip>], "kind">>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>>>;
                 disabledTargetIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
             }, z.core.$strip>;
         }, z.core.$strip>, z.ZodObject<{
@@ -1792,6 +2014,23 @@ export declare const notificationRulesCapability: {
                 priority: z.ZodDefault<z.ZodNumber>;
                 ownerUserId: z.ZodOptional<z.ZodString>;
                 snoozeAllowGlobal: z.ZodOptional<z.ZodBoolean>;
+                actions: z.ZodOptional<z.ZodObject<{
+                    onTrigger: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        name: z.ZodString;
+                        enabled: z.ZodBoolean;
+                        minDelaySec: z.ZodOptional<z.ZodNumber>;
+                        actions: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                            kind: z.ZodLiteral<"wait">;
+                            seconds: z.ZodNumber;
+                        }, z.core.$strip>, z.ZodObject<{
+                            kind: z.ZodLiteral<"cap">;
+                            deviceId: z.ZodNumber;
+                            cap: z.ZodString;
+                            method: z.ZodString;
+                            args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                        }, z.core.$strip>], "kind">>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>>;
                 id: z.ZodString;
                 createdBy: z.ZodString;
                 createdAt: z.ZodNumber;
@@ -1948,6 +2187,23 @@ export declare const notificationRulesCapability: {
                 priority: z.ZodDefault<z.ZodNumber>;
                 ownerUserId: z.ZodOptional<z.ZodString>;
                 snoozeAllowGlobal: z.ZodOptional<z.ZodBoolean>;
+                actions: z.ZodOptional<z.ZodObject<{
+                    onTrigger: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        name: z.ZodString;
+                        enabled: z.ZodBoolean;
+                        minDelaySec: z.ZodOptional<z.ZodNumber>;
+                        actions: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                            kind: z.ZodLiteral<"wait">;
+                            seconds: z.ZodNumber;
+                        }, z.core.$strip>, z.ZodObject<{
+                            kind: z.ZodLiteral<"cap">;
+                            deviceId: z.ZodNumber;
+                            cap: z.ZodString;
+                            method: z.ZodString;
+                            args: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                        }, z.core.$strip>], "kind">>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>>;
             }, z.core.$strip>;
             lookbackMinutes: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strip>, z.ZodObject<{

package/dist/capabilities/privacy-mask.cap.d.ts

@@ -67,10 +67,10 @@ export declare const PrivacyMaskStatusSchema: z.ZodObject<{
 export declare const PrivacyMaskOptionsSchema: z.ZodObject<{
     maxRegions: z.ZodNumber;
     supportedShapes: z.ZodArray<z.ZodEnum<{
+        line: "line";
         polygon: "polygon";
         rect: "rect";
         grid: "grid";
-        line: "line";
     }>>;
     polygonVertices: z.ZodOptional<z.ZodObject<{
         min: z.ZodNumber;
@@ -123,10 +123,10 @@ export declare const privacyMaskCapability: {
         }, z.core.$strip>, z.ZodObject<{
             maxRegions: z.ZodNumber;
             supportedShapes: z.ZodArray<z.ZodEnum<{
+                line: "line";
                 polygon: "polygon";
                 rect: "rect";
                 grid: "grid";
-                line: "line";
             }>>;
             polygonVertices: z.ZodOptional<z.ZodObject<{
                 min: z.ZodNumber;

package/dist/generated/addon-api.d.ts

@@ -28,6 +28,7 @@ import type { climateControlCapability } from '../capabilities/climate-control.c
 import type { colorCapability } from '../capabilities/color.cap.js';
 import type { consumablesCapability } from '../capabilities/consumables.cap.js';
 import type { controlCapability } from '../capabilities/control.cap.js';
+import type { coreBlocksCapability } from '../capabilities/core-blocks.cap.js';
 import type { coverCapability } from '../capabilities/cover.cap.js';
 import type { customModelRegistryCapability } from '../capabilities/custom-model-registry.cap.js';
 import type { dataStoreProviderCapability } from '../capabilities/data-store-provider.cap.js';
@@ -1390,6 +1391,69 @@ export type AppRouter = TrpcCoreRouter<{
             meta: object;
         }>;
     }>>;
+    coreBlocks: TRPCBuiltRouter<{
+        ctx: TrpcContext;
+        meta: object;
+        errorShape: AugmentedErrorShape;
+        transformer: true;
+    }, TRPCDecorateCreateRouterOptions<{
+        list: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof coreBlocksCapability.methods.list.input>;
+            output: z.infer<typeof coreBlocksCapability.methods.list.output>;
+            meta: object;
+        }>;
+        get: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof coreBlocksCapability.methods.get.input>;
+            output: z.infer<typeof coreBlocksCapability.methods.get.output>;
+            meta: object;
+        }>;
+        create: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof coreBlocksCapability.methods.create.input>;
+            output: z.infer<typeof coreBlocksCapability.methods.create.output>;
+            meta: object;
+        }>;
+        update: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof coreBlocksCapability.methods.update.input>;
+            output: z.infer<typeof coreBlocksCapability.methods.update.output>;
+            meta: object;
+        }>;
+        delete: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof coreBlocksCapability.methods.delete.input>;
+            output: z.infer<typeof coreBlocksCapability.methods.delete.output>;
+            meta: object;
+        }>;
+        setEnabled: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof coreBlocksCapability.methods.setEnabled.input>;
+            output: z.infer<typeof coreBlocksCapability.methods.setEnabled.output>;
+            meta: object;
+        }>;
+        compile: TRPCMutationProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof coreBlocksCapability.methods.compile.input>;
+            output: z.infer<typeof coreBlocksCapability.methods.compile.output>;
+            meta: object;
+        }>;
+        getTypeDefs: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof coreBlocksCapability.methods.getTypeDefs.input>;
+            output: z.infer<typeof coreBlocksCapability.methods.getTypeDefs.output>;
+            meta: object;
+        }>;
+    }>>;
     cover: TRPCBuiltRouter<{
         ctx: TrpcContext;
         meta: object;

package/dist/generated/capability-router-map.d.ts

@@ -33,6 +33,7 @@ export { connectivityCapability } from '../capabilities/connectivity.cap.js';
 export { consumablesCapability } from '../capabilities/consumables.cap.js';
 export { contactCapability } from '../capabilities/contact.cap.js';
 export { controlCapability } from '../capabilities/control.cap.js';
+export { coreBlocksCapability } from '../capabilities/core-blocks.cap.js';
 export { coverCapability } from '../capabilities/cover.cap.js';
 export { customModelRegistryCapability } from '../capabilities/custom-model-registry.cap.js';
 export { dataStoreProviderCapability } from '../capabilities/data-store-provider.cap.js';
@@ -178,6 +179,7 @@ export declare const CAPABILITY_NAMES: {
     readonly consumables: "consumables";
     readonly contact: "contact";
     readonly control: "control";
+    readonly coreBlocks: "core-blocks";
     readonly cover: "cover";
     readonly customModelRegistry: "custom-model-registry";
     readonly dataStoreProvider: "data-store-provider";
@@ -336,6 +338,7 @@ export interface CapabilityRouterMap<TRouter = unknown> {
     readonly consumables: TRouter;
     readonly contact: TRouter;
     readonly control: TRouter;
+    readonly coreBlocks: TRouter;
     readonly cover: TRouter;
     readonly customModelRegistry: TRouter;
     readonly dataStoreProvider: TRouter;
@@ -446,8 +449,8 @@ export interface CapabilityRouterMap<TRouter = unknown> {
     readonly zoneRules: TRouter;
     readonly zones: TRouter;
 }
-/** Capability names whose mode is `singleton` (121 caps). */
-export declare const SINGLETON_CAPABILITY_NAMES: readonly ["accessories", "addon-pages", "addon-settings", "addon-widgets", "addons", "admin-ui", "air-quality-sensor", "alarm-panel", "alerts", "ambient-light-sensor", "audio-analysis", "audio-analyzer", "audio-codec", "audio-metrics", "automation-control", "backup", "battery", "binary", "brightness", "button", "camera-credentials", "camera-pipeline-config", "camera-streams", "carbon-monoxide", "climate-control", "color", "connectivity", "consumables", "contact", "control", "cover", "day-night", "decoder", "detection-pipeline", "device-adoption", "device-discovery", "device-manager", "device-ops", "device-state", "device-status", "doorbell", "enum-sensor", "event-emitter", "events", "face-gallery", "fan-control", "feature-probe", "filesystem-browse", "flood", "gas", "humidifier", "humidity-sensor", "image", "image-settings", "integrations", "intercom", "lawn-mower-control", "llm-runtime", "local-network", "lock-control", "media-player", "metrics-provider", "model-convert", "model-distributor", "motion", "motion-detection", "motion-trigger", "motion-zones", "native-object-detection", "network-quality", "nodes", "notification-rules", "notifier", "numeric-sensor", "osd", "pet-feeder", "pipeline-analytics", "pipeline-executor", "pipeline-orchestrator", "pipeline-runner", "plate-gallery", "platform-probe", "power-meter", "presence", "pressure-sensor", "privacy-mask", "ptz", "ptz-autotrack", "reboot", "recording", "recordingExport", "scene-monitor", "script-runner", "server-management", "settings-store", "smoke", "snapshot", "sso-bridge", "storage", "stream-broker", "stream-catalog", "stream-params", "switch", "system", "tamper", "temperature-sensor", "terminal-session", "toast", "update", "user-management", "vacuum-control", "valve", "vibration", "videoclips", "viewer-ui", "water-heater", "weather", "webrtc-session", "zone-analytics", "zone-rules", "zones"];
+/** Capability names whose mode is `singleton` (122 caps). */
+export declare const SINGLETON_CAPABILITY_NAMES: readonly ["accessories", "addon-pages", "addon-settings", "addon-widgets", "addons", "admin-ui", "air-quality-sensor", "alarm-panel", "alerts", "ambient-light-sensor", "audio-analysis", "audio-analyzer", "audio-codec", "audio-metrics", "automation-control", "backup", "battery", "binary", "brightness", "button", "camera-credentials", "camera-pipeline-config", "camera-streams", "carbon-monoxide", "climate-control", "color", "connectivity", "consumables", "contact", "control", "core-blocks", "cover", "day-night", "decoder", "detection-pipeline", "device-adoption", "device-discovery", "device-manager", "device-ops", "device-state", "device-status", "doorbell", "enum-sensor", "event-emitter", "events", "face-gallery", "fan-control", "feature-probe", "filesystem-browse", "flood", "gas", "humidifier", "humidity-sensor", "image", "image-settings", "integrations", "intercom", "lawn-mower-control", "llm-runtime", "local-network", "lock-control", "media-player", "metrics-provider", "model-convert", "model-distributor", "motion", "motion-detection", "motion-trigger", "motion-zones", "native-object-detection", "network-quality", "nodes", "notification-rules", "notifier", "numeric-sensor", "osd", "pet-feeder", "pipeline-analytics", "pipeline-executor", "pipeline-orchestrator", "pipeline-runner", "plate-gallery", "platform-probe", "power-meter", "presence", "pressure-sensor", "privacy-mask", "ptz", "ptz-autotrack", "reboot", "recording", "recordingExport", "scene-monitor", "script-runner", "server-management", "settings-store", "smoke", "snapshot", "sso-bridge", "storage", "stream-broker", "stream-catalog", "stream-params", "switch", "system", "tamper", "temperature-sensor", "terminal-session", "toast", "update", "user-management", "vacuum-control", "valve", "vibration", "videoclips", "viewer-ui", "water-heater", "weather", "webrtc-session", "zone-analytics", "zone-rules", "zones"];
 /** Union of singleton capability names (literal string union). */
 export type SingletonCapabilityName = typeof SINGLETON_CAPABILITY_NAMES[number];
 /** Capability names whose mode is `collection` (23 caps). */

package/dist/generated/device-scoped-caps.d.ts

@@ -0,0 +1,20 @@
+/**
+ * AUTO-GENERATED by scripts/generate-device-scoped-caps.ts — DO NOT EDIT.
+ *
+ * Every `scope: 'device'` capability name, as plain data — so a forked runner
+ * can answer "may a rule actuate this?" without importing the schema barrel
+ * (~144MB RSS per runner, D28).
+ *
+ * Coverage: 80 device-scoped capabilities.
+ */
+export declare const DEVICE_SCOPED_CAPS: ReadonlySet<string>;
+/**
+ * True when `capName` is a device capability.
+ *
+ * This is the ONLY boundary on what a notification rule may actuate. A rule can
+ * be authored by a non-admin and the runner executes with the addon's
+ * privileges, so an unbounded action would be an arbitrary RPC channel with a
+ * privilege escalation attached. Device scope excludes the system caps
+ * (`device-manager.removeDevice` and friends) by construction.
+ */
+export declare function isDeviceScopedCap(capName: string): boolean;

package/dist/generated/method-access-map.d.ts

@@ -6,7 +6,7 @@
  * scope+access check inside `protectedProcedure` (see
  * `server/backend/src/api/trpc/trpc.middleware.ts`).
  *
- * Coverage: 844 method paths across 118 capabilities.
+ * Coverage: 852 method paths across 119 capabilities.
  */
 import type { CapabilityMethodAccess } from '../capabilities/capability-definition.js';
 export interface MethodAccessRecord {

package/dist/generated/system-proxy.d.ts

@@ -9,6 +9,7 @@ import type { audioAnalyzerCapability } from '../capabilities/audio-analyzer.cap
 import type { audioCodecCapability } from '../capabilities/audio-codec.cap.js';
 import type { backupCapability } from '../capabilities/backup.cap.js';
 import type { brokerCapability } from '../capabilities/broker.cap.js';
+import type { coreBlocksCapability } from '../capabilities/core-blocks.cap.js';
 import type { decoderCapability } from '../capabilities/decoder.cap.js';
 import type { deviceAdoptionCapability } from '../capabilities/device-adoption.cap.js';
 import type { deviceExportCapability } from '../capabilities/device-export.cap.js';
@@ -59,6 +60,7 @@ export interface SystemProxy {
     readonly audioCodec: Pick<InferProvider<typeof audioCodecCapability>, 'listSupportedCodecs' | 'canHandle' | 'createDecodeSession' | 'createEncodeSession' | 'closeSession' | 'pushEncodedFrame' | 'pullPcm' | 'pushPcm' | 'pullEncoded' | 'flushEncode' | 'listActiveSessions'>;
     readonly backup: Pick<InferProvider<typeof backupCapability>, 'listDestinations' | 'trigger' | 'list' | 'listLocations' | 'getEntries' | 'restore' | 'delete' | 'listArchives' | 'upsertDestinationPolicy' | 'previewSchedule' | 'listSchedules' | 'upsertSchedule' | 'deleteSchedule'>;
     readonly broker: Pick<InferProvider<typeof brokerCapability>, 'list' | 'get' | 'listProviders' | 'add' | 'remove' | 'testConnection' | 'getSettings' | 'setSettings' | 'getBrokerConfig' | 'getSettingsSchema' | 'testSettings' | 'publish' | 'subscribe' | 'unsubscribe' | 'getState' | 'getStatus'>;
+    readonly coreBlocks: Pick<InferProvider<typeof coreBlocksCapability>, 'list' | 'get' | 'create' | 'update' | 'delete' | 'setEnabled' | 'compile' | 'getTypeDefs'>;
     readonly decoder: Pick<InferProvider<typeof decoderCapability>, 'supportsCodec' | 'getInfo' | 'createSession' | 'destroySession' | 'pushPacket' | 'openStream' | 'pullFrames' | 'pullHandles' | 'getFrame' | 'getShmStats' | 'updateConfig' | 'getStats' | 'listActiveSessions' | 'reprobeHwaccel'>;
     readonly deviceAdoption: Pick<InferProvider<typeof deviceAdoptionCapability>, 'listCandidateFilters' | 'listCandidates' | 'getCandidate' | 'refresh' | 'adopt' | 'release' | 'resync'>;
     readonly deviceExport: Pick<InferProvider<typeof deviceExportCapability>, 'getStatus' | 'listSupportedDeviceKinds' | 'listExposedDevices' | 'exposeDevice' | 'unexposeDevice'>;

package/dist/index.d.ts

@@ -121,6 +121,7 @@ export { COCO_80_LABELS, COCO_TO_MACRO, MACRO_LABELS, } from './catalogs/coco-cl
 export { AUDIO_MACRO_LABELS, YAMNET_TO_MACRO, APPLE_SA_TO_MACRO, mapAudioLabelToMacro, getAudioMacroClassIds, } from './catalogs/audio-classmap.js';
 export { EVENT_TAXONOMY, TAXONOMY_COLORS, DEFAULT_EVENT_COLOR, getTaxonomyEntry, colorForKind, subKindsOf, type EventTaxonomyEntry, type EventTaxonomyCategory, type EventTaxonomyLevel, } from './catalogs/event-taxonomy.js';
 export { NcTaxonomyEntrySchema, NcTaxonomySchema, buildNcTaxonomy, NC_TAXONOMY, type NcTaxonomyEntry, type NcTaxonomy, } from './catalogs/nc-taxonomy.js';
+export { DEVICE_SCOPED_CAPS, isDeviceScopedCap } from './generated/device-scoped-caps.js';
 export { DEVICE_STATE_READERS, readDeviceStateFrom, stateVocabularyFor, } from './catalogs/device-state-vocabulary.js';
 export type { CameraMotionConfig, CameraNativeDetectionConfig, CameraDetectionCapabilities, } from './types/camera-detection.js';
 export { type DeviceTypeInfo, DEVICE_TYPE_INFO } from './types/device-type.js';