@camstack/types 1.2.384 → 1.2.385

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-REHQvLV6.js");
-const require_event_category = require("./event-category-Hoe-mqbd.js");
+const require_sleep = require("./sleep-BE7_6UnC.js");
+const require_event_category = require("./event-category-eSqkye-K.js");
 const require_composition = require("./composition-eoYYVfOp.js");
 const require_node_color = require("./node-color.js");
 const require_err_msg = require("./err-msg-BhVbr0NX.js");
@@ -3951,6 +3951,41 @@ var StorageCleanupJobSchema = zod.z.object({
 	error: zod.z.string().nullable()
 });
 var StorageCleanupStatusInputSchema = zod.z.object({ jobId: zod.z.string().optional() });
+/**
+* Start a mover only when no single-location repoint holds an overlapping
+* physical root. Asks BEFORE (cheap refusal, no job) and AFTER registering the
+* job: the repoint announces its claim and then lists movers, so a mover that
+* registers first is seen by it and one that registers second sees the claim —
+* neither side can miss the other (2026-10-20: a repoint and a relocate job
+* moved and deleted the same event media with no lock between them).
+*
+* Fail CLOSED: a clearance that cannot be asked refuses the start.
+*/
+async function startMoverUnderClearance(deps) {
+	const refuse = (detail) => {
+		throw new Error(`mover refused: ${detail}`);
+	};
+	const ask = async () => {
+		try {
+			return await deps.clearance(deps.locationIds);
+		} catch (err) {
+			return refuse(`the storage orchestrator could not be asked (${err instanceof Error ? err.message : String(err)})`);
+		}
+	};
+	const blocked = (answer) => `a re-point of "${answer.repointLocationId ?? "a location"}" holds an overlapping storage root`;
+	const before = await ask();
+	if (!before.clear) return refuse(blocked(before));
+	const jobId = deps.start();
+	const after = await ask().catch((err) => {
+		deps.cancel(jobId);
+		throw err;
+	});
+	if (!after.clear) {
+		deps.cancel(jobId);
+		return refuse(blocked(after));
+	}
+	return jobId;
+}
 //#endregion
 //#region src/interfaces/server-analysis.ts
 var SUB_DETECTION_TYPES = ["face", "plate"];
@@ -8285,7 +8320,14 @@ var AlertSeveritySchema = zod.z.enum([
 ]);
 var AlertActionSchema = zod.z.object({
 	label: zod.z.string(),
-	href: zod.z.string().optional()
+	href: zod.z.string().optional(),
+	/**
+	* How `href` is followed. Absent / `app`: an admin-ui route (client-side).
+	* `server`: a route the HUB serves (an addon HTTP route such as an OAuth
+	* start) — the browser must leave the SPA with a full navigation, because
+	* the SPA has no such route and would bounce to the home page.
+	*/
+	navigation: zod.z.enum(["app", "server"]).optional()
 });
 var AlertStatusSchema = zod.z.enum([
 	"active",
@@ -42824,6 +42866,9 @@ var NcSystemEventKindSchema = zod.z.enum([
 	"server-updated",
 	"export-completed",
 	"backup-completed",
+	"alert-critical",
+	"alert-error",
+	"alert-critical-resolved",
 	"camera-online",
 	"camera-offline",
 	"camera-disabled",
@@ -44466,6 +44511,18 @@ var NC_CONDITION_CATALOG = [
 				value: "backup-completed",
 				label: "Backup completed"
 			},
+			{
+				value: "alert-critical",
+				label: "Critical alert raised"
+			},
+			{
+				value: "alert-error",
+				label: "Error alert raised"
+			},
+			{
+				value: "alert-critical-resolved",
+				label: "Critical alert resolved"
+			},
 			{
 				value: "alarm-arm-refused",
 				label: "Alarm arm refused"
@@ -55487,6 +55544,18 @@ var storageMigrationCapability = {
 		*/
 		movers: require_sleep.method(zod.z.object({}), zod.z.array(StorageMigrationMoverSchema).readonly(), { auth: "admin" }),
 		/**
+		* May a mover that touches these locations run NOW? One claim per physical
+		* root is owned by the storage orchestrator: a single-location repoint holds
+		* it while it carries its subtree, and a mover (`relocateMedia`,
+		* `relocateFootage`, a migration move) asks here AFTER registering its job and
+		* cancels itself on `clear: false`. The repoint, in turn, refuses while a
+		* registered mover touches its root. Asked, never polled (D3).
+		*/
+		moverClearance: require_sleep.method(zod.z.object({ locationIds: zod.z.array(zod.z.string()).readonly() }), zod.z.object({
+			clear: zod.z.boolean(),
+			repointLocationId: zod.z.string().optional()
+		}), { auth: "admin" }),
+		/**
 		* What each class's SOURCE still holds, from the archive — never from the
 		* resident index (D295). Only classes with something left (or something
 		* unknown) are listed, so an empty list means there is nothing to drain and
@@ -61222,6 +61291,11 @@ onStatusChanged: { data: zod.z.object({
 *
 * `kind: 'poll'` — cloud REST APIs typically have no push channel; the
 * provider refreshes the slice on an interval and eagerly after commands.
+*
+* UNKNOWN IS NOT OFF. Every field the appliance reports separately is
+* nullable: `null` means "not known right now" (the appliance has not said,
+* the link is down, or the description does not carry it) and is never
+* rendered or exported as `false` / `0`. `availability` says why.
 */
 var DishwasherStateSchema = zod.z.enum([
 	"idle",
@@ -61231,43 +61305,155 @@ var DishwasherStateSchema = zod.z.enum([
 	"error",
 	"unavailable"
 ]);
+/**
+* The appliance's own operation state, uncollapsed. `state` above is the coarse
+* view for compact surfaces; this is what the appliance said.
+*/
+var DishwasherOperationStateSchema = zod.z.enum([
+	"Inactive",
+	"Ready",
+	"DelayedStart",
+	"Run",
+	"Pause",
+	"ActionRequired",
+	"Finished",
+	"Error",
+	"Aborting"
+]);
+/**
+* Why fields may be `null`:
+*  - `available`           — the link is up and the description is loaded;
+*  - `offline`             — the local link is down (values are unknown, not last-known);
+*  - `description-missing` — the link is up but the appliance's description could not
+*                            be loaded, so its values cannot be decoded.
+*/
+var DishwasherAvailabilitySchema = zod.z.enum([
+	"available",
+	"offline",
+	"description-missing"
+]);
 var DishwasherConsumableLevelSchema = zod.z.enum([
 	"ok",
 	"low",
 	"empty"
 ]);
 var DishwasherStatusSchema = zod.z.object({
+	availability: DishwasherAvailabilitySchema,
+	/** Coarse state for compact surfaces; `unavailable` whenever the appliance state is not known. */
 	state: DishwasherStateSchema,
-	/** Active program id/name, or null when none selected / unknown. */
+	/** The appliance's operation state as reported; null when not known. */
+	operationState: DishwasherOperationStateSchema.nullable(),
+	/** Feature key of the ACTIVE (running) program, or null when none runs / not known. */
 	program: zod.z.string().nullable(),
-	/** Program tokens the hardware accepts — drives the UI selector. */
+	/** Feature key of the SELECTED program (what Start would run), or null when none / not known. */
+	selectedProgram: zod.z.string().nullable(),
+	/** Feature keys of the programs the appliance currently offers — drives the UI selector. */
 	availablePrograms: zod.z.array(zod.z.string()),
-	/** Minutes remaining on the active cycle, or null when not running. */
-	remainingMinutes: zod.z.number().int().nonnegative().nullable(),
+	/** Seconds remaining on the active cycle, or null when not running / not known. */
+	remainingSeconds: zod.z.number().int().nonnegative().nullable(),
+	/** Seconds the delayed start is set to (time until the cycle starts), or null. */
+	delayedStartSeconds: zod.z.number().int().nonnegative().nullable(),
 	/** Cycle completion 0..100, or null when not applicable. */
 	progressPercent: zod.z.number().min(0).max(100).nullable(),
-	/** True when the door is reported open. */
-	doorOpen: zod.z.boolean(),
-	/** True when remote start is allowed (door closed, power on, etc.). */
-	remoteStartAllowed: zod.z.boolean(),
-	/** Main power / switched-on state. */
-	powerOn: zod.z.boolean(),
+	/** True when the door is reported open; null when the door state is not known. */
+	doorOpen: zod.z.boolean().nullable(),
+	/** True when the door is latched (locked) during a cycle; null when not reported. */
+	doorLocked: zod.z.boolean().nullable(),
+	/** True when remote start is allowed (door closed, power on, etc.); null when not known. */
+	remoteStartAllowed: zod.z.boolean().nullable(),
+	/** True when the appliance accepts remote control now; null when not known. */
+	remoteControlActive: zod.z.boolean().nullable(),
+	/** True while somebody operates the appliance at its panel; null when not reported. */
+	localControlActive: zod.z.boolean().nullable(),
+	/** Main power / switched-on state; null when not known. */
+	powerOn: zod.z.boolean().nullable(),
+	/** The raw power state (`On`, `Off`, `Standby`, …); null when not known. */
+	powerState: zod.z.string().nullable(),
 	saltLevel: DishwasherConsumableLevelSchema.nullable(),
 	rinseAidLevel: DishwasherConsumableLevelSchema.nullable(),
-	halfLoad: zod.z.boolean(),
-	hygienePlus: zod.z.boolean(),
+	/** Option states: null when the appliance does not expose the option or has not said. */
+	halfLoad: zod.z.boolean().nullable(),
+	hygienePlus: zod.z.boolean().nullable(),
 	/** Extra dry option when the appliance exposes it. */
-	extraDry: zod.z.boolean(),
+	extraDry: zod.z.boolean().nullable(),
 	/** Intensive zone (lower basket) when the appliance exposes it. */
-	intensiveZone: zod.z.boolean(),
+	intensiveZone: zod.z.boolean().nullable(),
 	/** VarioSpeed / VarioSpeed+ when the appliance exposes it. */
-	varioSpeedPlus: zod.z.boolean(),
-	/** Child lock (controls disabled on the appliance). */
-	childLock: zod.z.boolean(),
+	varioSpeedPlus: zod.z.boolean().nullable(),
+	/** Child lock (controls disabled on the appliance); null when not known. */
+	childLock: zod.z.boolean().nullable(),
+	/** Feature keys of the events currently raised (salt low, rinse aid low, program finished, …). */
+	activeEvents: zod.z.array(zod.z.string()),
+	/** Numeric error code when the appliance reports one; null otherwise. */
 	errorCode: zod.z.number().nullable(),
+	/** Name of the raised alert-level event while the appliance is in error; null otherwise. */
 	errorLabel: zod.z.string().nullable(),
+	/** Ms epoch of the last value received from the appliance; 0 = never. */
 	lastFetchedAt: zod.z.number()
 });
+var DeviceIdSchema = zod.z.number().int().nonnegative();
+/** A value a program option or setting can take. */
+var DishwasherValueSchema = zod.z.union([
+	zod.z.boolean(),
+	zod.z.string(),
+	zod.z.number()
+]);
+var DishwasherAccessSchema = zod.z.enum([
+	"none",
+	"read",
+	"readWrite",
+	"writeOnly",
+	"readStatic"
+]);
+/**
+* One option or setting the appliance declares, with the constraints its description
+* gives. A `readWrite` descriptor that is `available` is what `setOption` accepts.
+*/
+var DishwasherOptionDescriptorSchema = zod.z.object({
+	/** Feature key (`Dishcare.Dishwasher.Option.ExtraDry`). */
+	key: zod.z.string(),
+	/** Last segment of the key, for display. */
+	name: zod.z.string(),
+	type: zod.z.enum([
+		"boolean",
+		"number",
+		"enum",
+		"string"
+	]),
+	access: DishwasherAccessSchema,
+	/** The appliance reports this entity as currently available. */
+	available: zod.z.boolean(),
+	/** Unit the description declares for a number; null when it declares none. */
+	unit: zod.z.string().nullable(),
+	min: zod.z.number().nullable(),
+	max: zod.z.number().nullable(),
+	step: zod.z.number().nullable(),
+	/** Allowed members of an enum; null for other types. */
+	enumValues: zod.z.array(zod.z.string()).nullable(),
+	defaultValue: DishwasherValueSchema.nullable()
+});
+var DishwasherProgramSchema = zod.z.object({
+	/** Feature key (`Dishcare.Dishwasher.Program.Eco50`) — what `setProgram` / `start` take. */
+	key: zod.z.string(),
+	name: zod.z.string(),
+	/** The appliance currently offers this program. */
+	available: zod.z.boolean(),
+	/** The options this program lists, with the program-level access / availability / default. */
+	options: zod.z.array(DishwasherOptionDescriptorSchema)
+});
+var DishwasherOptionsSchema = zod.z.object({
+	availability: DishwasherAvailabilitySchema,
+	/** What the appliance can be told to do, from the commands its description declares. */
+	supportsStart: zod.z.boolean(),
+	supportsPause: zod.z.boolean(),
+	supportsResume: zod.z.boolean(),
+	supportsStop: zod.z.boolean(),
+	supportsPower: zod.z.boolean(),
+	/** Every program the description lists, with its options. */
+	programs: zod.z.array(DishwasherProgramSchema),
+	/** Every option and setting entity the description lists (programs reference these by key). */
+	options: zod.z.array(DishwasherOptionDescriptorSchema)
+});
 var dishwasherCapability = {
 	name: "dishwasher",
 	scope: "device",
@@ -61275,86 +61461,102 @@ var dishwasherCapability = {
 	mode: "singleton",
 	deviceTypes: [require_err_msg.DeviceType.Dishwasher],
 	methods: {
-		start: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
+		/**
+		* Start a program. Without `program` the selected one starts. `options` are
+		* option feature keys; each is checked against the program's constraints.
+		*/
+		start: require_sleep.method(zod.z.object({
+			deviceId: DeviceIdSchema,
+			program: zod.z.string().min(1).optional(),
+			options: zod.z.record(zod.z.string(), DishwasherValueSchema).optional()
+		}), zod.z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
-		pause: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
+		pause: require_sleep.method(zod.z.object({ deviceId: DeviceIdSchema }), zod.z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
-		stop: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.void(), {
+		resume: require_sleep.method(zod.z.object({ deviceId: DeviceIdSchema }), zod.z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
+		stop: require_sleep.method(zod.z.object({ deviceId: DeviceIdSchema }), zod.z.void(), {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		/** Select (not start) a program; refused when the appliance does not offer it. */
 		setProgram: require_sleep.method(zod.z.object({
-			deviceId: zod.z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			program: zod.z.string().min(1)
 		}), zod.z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
 		setPower: require_sleep.method(zod.z.object({
-			deviceId: zod.z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			on: zod.z.boolean()
 		}), zod.z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
 		setHalfLoad: require_sleep.method(zod.z.object({
-			deviceId: zod.z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			on: zod.z.boolean()
 		}), zod.z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
 		setHygienePlus: require_sleep.method(zod.z.object({
-			deviceId: zod.z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			on: zod.z.boolean()
 		}), zod.z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
 		setExtraDry: require_sleep.method(zod.z.object({
-			deviceId: zod.z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			on: zod.z.boolean()
 		}), zod.z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
 		setIntensiveZone: require_sleep.method(zod.z.object({
-			deviceId: zod.z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			on: zod.z.boolean()
 		}), zod.z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
 		setVarioSpeedPlus: require_sleep.method(zod.z.object({
-			deviceId: zod.z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			on: zod.z.boolean()
 		}), zod.z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
 		setChildLock: require_sleep.method(zod.z.object({
-			deviceId: zod.z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			on: zod.z.boolean()
 		}), zod.z.void(), {
 			kind: "mutation",
 			auth: "protected"
 		}),
+		/**
+		* Write any option or setting by feature key. Refused when the description does
+		* not list it, it is not writable or not available now, or the value is outside
+		* its declared range / members.
+		*/
 		setOption: require_sleep.method(zod.z.object({
-			deviceId: zod.z.number().int().nonnegative(),
+			deviceId: DeviceIdSchema,
 			key: zod.z.string().min(1),
-			value: zod.z.union([
-				zod.z.boolean(),
-				zod.z.string(),
-				zod.z.number()
-			])
+			value: DishwasherValueSchema
 		}), zod.z.void(), {
 			kind: "mutation",
 			auth: "protected"
-		})
+		}),
+		/** What this appliance can do, from its own description — the UI is derived from it. */
+		getOptions: require_sleep.method(zod.z.object({ deviceId: DeviceIdSchema }), DishwasherOptionsSchema, { auth: "protected" })
 	},
 	status: {
 		schema: DishwasherStatusSchema,
@@ -79838,6 +80040,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"dishwasher.getOptions": {
+		capName: "dishwasher",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"dishwasher.getStatus": {
 		capName: "dishwasher",
 		capScope: "device",
@@ -79850,6 +80058,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"dishwasher.resume": {
+		capName: "dishwasher",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"dishwasher.setChildLock": {
 		capName: "dishwasher",
 		capScope: "device",
@@ -84350,6 +84564,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"storageMigration.moverClearance": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"storageMigration.movers": {
 		capName: "storage-migration",
 		capScope: "system",
@@ -89955,6 +90175,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"dishwasher.getOptions": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"dishwasher.getStatus": [{
 		name: "deviceId",
 		form: "single",
@@ -89965,6 +90190,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"dishwasher.resume": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"dishwasher.setChildLock": [{
 		name: "deviceId",
 		form: "single",
@@ -93652,6 +93882,7 @@ function createSystemProxy(api) {
 			status: (input) => dispatch("storageMigration", "status", "query", input),
 			cancel: (input) => dispatch("storageMigration", "cancel", "mutation", input),
 			movers: (input) => dispatch("storageMigration", "movers", "query", input),
+			moverClearance: (input) => dispatch("storageMigration", "moverClearance", "query", input),
 			residue: (input) => dispatch("storageMigration", "residue", "query", input),
 			drain: (input) => dispatch("storageMigration", "drain", "mutation", input),
 			cleanupStart: (input) => dispatch("storageMigration", "cleanupStart", "mutation", input),
@@ -94595,7 +94826,7 @@ function systemEventFilterApplies(kind, filter) {
 	switch (filter) {
 		case "deviceIds": return kind.startsWith("device-") || kind.startsWith("stream-") || kind === "detection-blind" || kind.startsWith("recording-") || kind === "alarm-triggered";
 		case "deviceTypes": return kind.startsWith("device-") || kind === "detection-blind";
-		case "nodeIds": return kind.startsWith("node-") || kind === "addon-crash-loop" || kind === "addon-update-available" || kind === "addon-updated" || kind === "server-update-available" || kind === "wrapper-update-available" || kind === "server-updated" || kind.startsWith("storage-location-");
+		case "nodeIds": return kind.startsWith("node-") || kind === "addon-crash-loop" || kind === "addon-update-available" || kind === "addon-updated" || kind === "server-update-available" || kind === "wrapper-update-available" || kind === "server-updated" || kind.startsWith("storage-location-") || kind.startsWith("alert-");
 		case "packageNames": return kind.endsWith("update-available") || kind === "addon-updated" || kind === "node-updating" || kind === "server-updated";
 		case "consumableLowPercent": return NC_CONSUMABLE_SYSTEM_EVENT_KINDS.includes(kind);
 	}
@@ -94668,6 +94899,9 @@ var NC_SYSTEM_EVENT_FAMILY = {
 	"wrapper-update-available": "system",
 	"backup-completed": "system",
 	"export-completed": "system",
+	"alert-critical": "system",
+	"alert-error": "system",
+	"alert-critical-resolved": "system",
 	"storage-location-low": "system",
 	"storage-location-critical": "system",
 	"storage-location-ok": "system",
@@ -94810,6 +95044,16 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 			"storage-location-ok"
 		]
 	},
+	{
+		id: "alerts",
+		family: "system",
+		label: "Alerts",
+		kinds: [
+			"alert-critical",
+			"alert-error",
+			"alert-critical-resolved"
+		]
+	},
 	{
 		id: "alarm",
 		family: "alarm",
@@ -96213,6 +96457,98 @@ function sensorTransitionOffered(sensorKinds) {
 /** What an editor tells the operator when it is about to prune the choice. */
 var NC_SENSOR_TRANSITION_UNSUPPORTED_REASON = "Only a sensor that raises and clears (water, smoke, gas, CO, vibration, tamper, motion, contact) can fire on one edge. Pick only such sensor kinds, or the rule fires on every change.";
 //#endregion
+//#region src/notification/alert-episode.ts
+/**
+* An alert EPISODE as a notification subject.
+*
+* The alert centre sends nothing of its own. A critical or error alert reaches
+* the operator through Notification Center system-event rules, and this file is
+* the one vocabulary the two sides share: the alert centre mints the episode
+* identity and announces its two edges on the bus (`alert.episode`), and
+* Notification Center derives the same identity when it RECONCILES from the
+* alerts store, because a bus event may be dropped (D8, D11).
+*
+* ## Episode identity
+*
+* `metadata.episodeId`, minted by the alert centre when an alert opens (new, or
+* re-opened after it was completed/dismissed, or its emitter changed
+* `metadata.episodeKey`) and kept through every re-emit while it stays open. An
+* alert row written before the alert centre minted ids has none: its episode is
+* `<id>@<createdAt>`, derived here so both sides agree.
+*/
+/** The bus payload of `EventCategory.AlertEpisode`. */
+var AlertEpisodePayloadSchema = zod.z.object({
+	phase: zod.z.enum(["raised", "resolved"]),
+	episodeId: zod.z.string().min(1),
+	alertId: zod.z.string().min(1),
+	severity: AlertSeveritySchema,
+	category: zod.z.string(),
+	title: zod.z.string(),
+	message: zod.z.string(),
+	sourceType: zod.z.string().optional(),
+	sourceId: zod.z.string().optional(),
+	nodeId: zod.z.string().optional(),
+	/** The alert's own action link (where the operator acts on it), when it has one. */
+	actionUrl: zod.z.string().optional(),
+	at: zod.z.number()
+});
+/** The payload of an `alert.episode` event's `data`, or `null` when it is not one. */
+function parseAlertEpisodePayload(data) {
+	const parsed = AlertEpisodePayloadSchema.safeParse(data);
+	return parsed.success ? parsed.data : null;
+}
+/** An episode is closed once its alert is completed or dismissed. */
+function isAlertEpisodeOpen(status) {
+	return status !== "completed" && status !== "dismissed";
+}
+/** Only these severities are ever announced. */
+function isAlertEpisodeSeverity(severity) {
+	return severity === "critical" || severity === "error";
+}
+function alertEpisodeId(alert) {
+	const minted = alert.metadata?.["episodeId"];
+	return typeof minted === "string" && minted.length > 0 ? minted : `${alert.id}@${String(alert.createdAt)}`;
+}
+/** The node an alert is about, from the places emitters put it. */
+function alertNodeId(alert) {
+	const direct = alert.metadata?.["nodeId"];
+	if (typeof direct === "string") return direct;
+	const runner = alert.metadata?.["runner"];
+	if (typeof runner === "object" && runner !== null && "nodeId" in runner) {
+		const id = runner.nodeId;
+		if (typeof id === "string") return id;
+	}
+	return alert.source?.type === "node" ? alert.source.id : void 0;
+}
+/**
+* The system-event kind of an episode edge, or `null` when none is announced
+* (an `error` episode announces its opening only).
+*/
+function alertEpisodeKind(severity, phase) {
+	if (severity === "critical") return phase === "raised" ? "alert-critical" : "alert-critical-resolved";
+	if (severity === "error" && phase === "raised") return "alert-error";
+	return null;
+}
+function alertEpisodePayload(alert, phase, at) {
+	const nodeId = alertNodeId(alert);
+	return {
+		phase,
+		episodeId: alertEpisodeId(alert),
+		alertId: alert.id,
+		severity: alert.severity,
+		category: alert.category,
+		title: alert.title,
+		message: alert.message,
+		...alert.source !== void 0 ? {
+			sourceType: alert.source.type,
+			sourceId: alert.source.id
+		} : {},
+		...nodeId !== void 0 ? { nodeId } : {},
+		...alert.action?.href !== void 0 ? { actionUrl: alert.action.href } : {},
+		at
+	};
+}
+//#endregion
 //#region src/notification/template-vars.ts
 var RULE_BODY_ONLY = ["body"];
 var RULE_TEXT = ["title", "body"];
@@ -96223,6 +96559,11 @@ var TANK = [
 	"device-tank-full",
 	"device-tank-normal"
 ];
+var ALERT_EPISODE = [
+	"alert-critical",
+	"alert-error",
+	"alert-critical-resolved"
+];
 var UPDATES = [
 	"addon-update-available",
 	"server-update-available",
@@ -96747,7 +97088,8 @@ var NC_TEMPLATE_VARS = [
 			"server-updated",
 			"storage-location-low",
 			"storage-location-critical",
-			"storage-location-ok"
+			"storage-location-ok",
+			...ALERT_EPISODE
 		]
 	},
 	{
@@ -96769,7 +97111,8 @@ var NC_TEMPLATE_VARS = [
 			"server-updated",
 			"storage-location-low",
 			"storage-location-critical",
-			"storage-location-ok"
+			"storage-location-ok",
+			...ALERT_EPISODE
 		]
 	},
 	{
@@ -96836,7 +97179,7 @@ var NC_TEMPLATE_VARS = [
 		families: ["rule"],
 		fields: [...RULE_TEXT],
 		kinds: ["system"],
-		systemEventKinds: ["recording-degraded"]
+		systemEventKinds: ["recording-degraded", ...ALERT_EPISODE]
 	},
 	{
 		name: "locationName",
@@ -97033,13 +97376,53 @@ var NC_TEMPLATE_VARS = [
 	},
 	{
 		name: "title",
-		label: "Export title",
+		label: "Export or alert title",
 		example: "Ingresso 08:00",
 		group: "system",
 		families: ["rule"],
 		fields: [...RULE_TEXT],
 		kinds: ["system"],
-		systemEventKinds: ["export-completed"]
+		systemEventKinds: ["export-completed", ...ALERT_EPISODE]
+	},
+	{
+		name: "severity",
+		label: "Alert severity",
+		example: "critical",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [...ALERT_EPISODE]
+	},
+	{
+		name: "category",
+		label: "Alert category",
+		example: "addon.runner-failed",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [...ALERT_EPISODE]
+	},
+	{
+		name: "source",
+		label: "Alert source (addon, node or runner)",
+		example: "recorder",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [...ALERT_EPISODE]
+	},
+	{
+		name: "actionUrl",
+		label: "Alert action link",
+		example: "/system/addons",
+		group: "system",
+		families: ["rule"],
+		fields: [...RULE_TEXT],
+		kinds: ["system"],
+		systemEventKinds: [...ALERT_EPISODE]
 	},
 	{
 		name: "exportId",
@@ -97250,7 +97633,10 @@ var NC_TEMPLATE_HELD_BACK_SYSTEM_EVENT_KINDS = [
 	"device-tank-full",
 	"device-tank-normal",
 	"node-restarting",
-	"node-updating"
+	"node-updating",
+	"alert-critical",
+	"alert-error",
+	"alert-critical-resolved"
 ];
 /**
 * The catalog as `getTemplateCatalog` SERVES it: every descriptor, with the
@@ -101414,6 +101800,73 @@ function setNestedValue(obj, path, value) {
 	current[parts[parts.length - 1]] = value;
 }
 //#endregion
+//#region src/utils/oauth-landing.ts
+/**
+* Where an OAuth round-trip ends: the admin-ui completion route
+* (`/sso-complete`, the page every popup sign-in already lands on), with the
+* OUTCOME in the URL fragment.
+*
+* The outcome is a status plus a reason CODE from a closed list. It never
+* carries a token, a code, a client secret or a free-form error message: the
+* page words each code itself, and an unknown code reads as `unknown` rather
+* than being echoed. Fragment only, so nothing here reaches a server log.
+*
+* Pure and browser-safe.
+*/
+/** The admin-ui route the hub's OAuth completions land on (relative to its mount). */
+var OAUTH_LANDING_PATH = "/sso-complete";
+var OAUTH_LANDING_REASONS = [
+	"access_denied",
+	"invalid_state",
+	"invalid_request",
+	"unknown_broker",
+	"not_configured",
+	"exchange_failed",
+	"no_refresh_token",
+	"unavailable",
+	"unknown"
+];
+function isOauthLandingReason(value) {
+	return OAUTH_LANDING_REASONS.some((reason) => reason === value);
+}
+/**
+* The landing URL for `outcome`. `origin` is the hub address the flow already
+* runs on (from the `local-network` palette role, never a literal); `null`
+* gives a hub-relative URL.
+*/
+function oauthLandingUrl(origin, outcome) {
+	const params = new URLSearchParams({
+		return: "oauth",
+		status: outcome.status
+	});
+	if (outcome.addonId !== void 0) params.set("addon", outcome.addonId);
+	if (outcome.brokerId !== void 0) params.set("broker", outcome.brokerId);
+	if (outcome.integration !== void 0) params.set("integration", outcome.integration);
+	if (outcome.status === "error") params.set("reason", outcome.reason ?? "unknown");
+	if (outcome.action === "disconnect") params.set("action", "disconnect");
+	return `${origin === null ? "" : origin.replace(/\/+$/, "")}${OAUTH_LANDING_PATH}#${params.toString()}`;
+}
+/** Parse the fragment of a landing URL; `null` for anything that is not one. */
+function parseOauthLandingFragment(hash) {
+	if (!hash.startsWith("#")) return null;
+	const params = new URLSearchParams(hash.slice(1));
+	if (params.get("return") !== "oauth") return null;
+	const status = params.get("status");
+	if (status !== "success" && status !== "error") return null;
+	const addonId = params.get("addon");
+	const brokerId = params.get("broker");
+	const integration = params.get("integration");
+	const reasonRaw = params.get("reason");
+	return {
+		status,
+		...addonId !== null && addonId.length > 0 ? { addonId } : {},
+		...brokerId !== null && brokerId.length > 0 ? { brokerId } : {},
+		...integration !== null && integration.length > 0 ? { integration } : {},
+		...status === "error" ? { reason: isOauthLandingReason(reasonRaw) ? reasonRaw : "unknown" } : {},
+		...params.get("action") === "disconnect" ? { action: "disconnect" } : {}
+	};
+}
+//#endregion
 //#region src/utils/pool-memory-watchdog.ts
 var MB = 1024 * 1024;
 var DEFAULT_POOL_MEMORY_POLICY = {
@@ -102482,6 +102935,7 @@ exports.AirQualitySensorStatusSchema = AirQualitySensorStatusSchema;
 exports.AlarmArmModeSchema = AlarmArmModeSchema;
 exports.AlarmPanelStatusSchema = AlarmPanelStatusSchema;
 exports.AlarmStateSchema = AlarmStateSchema;
+exports.AlertEpisodePayloadSchema = AlertEpisodePayloadSchema;
 exports.AlertSchema = AlertSchema;
 exports.AlertSeveritySchema = AlertSeveritySchema;
 exports.AlertSourceSchema = AlertSourceSchema;
@@ -102960,9 +103414,16 @@ exports.DiscoveredChildDeviceSchema = DiscoveredChildDeviceSchema;
 exports.DiscoveredChildStatusSchema = DiscoveredChildStatusSchema;
 exports.DiscoveredDeviceSchema = DiscoveredDeviceSchema;
 exports.DiscoveredTargetSchema = DiscoveredTargetSchema;
+exports.DishwasherAccessSchema = DishwasherAccessSchema;
+exports.DishwasherAvailabilitySchema = DishwasherAvailabilitySchema;
 exports.DishwasherConsumableLevelSchema = DishwasherConsumableLevelSchema;
+exports.DishwasherOperationStateSchema = DishwasherOperationStateSchema;
+exports.DishwasherOptionDescriptorSchema = DishwasherOptionDescriptorSchema;
+exports.DishwasherOptionsSchema = DishwasherOptionsSchema;
+exports.DishwasherProgramSchema = DishwasherProgramSchema;
 exports.DishwasherStateSchema = DishwasherStateSchema;
 exports.DishwasherStatusSchema = DishwasherStatusSchema;
+exports.DishwasherValueSchema = DishwasherValueSchema;
 exports.DiskReconcileJobSchema = DiskReconcileJobSchema;
 exports.DisposerChain = require_sleep.DisposerChain;
 exports.DoorbellPressEventSchema = DoorbellPressEventSchema;
@@ -103630,6 +104091,8 @@ exports.NotificationFormatSchema = NotificationFormatSchema;
 exports.NotificationSchema = NotificationSchema;
 exports.NotifierStatusSchema = NotifierStatusSchema;
 exports.NumericSensorStatusSchema = NumericSensorStatusSchema;
+exports.OAUTH_LANDING_PATH = OAUTH_LANDING_PATH;
+exports.OAUTH_LANDING_REASONS = OAUTH_LANDING_REASONS;
 exports.OPERATOR_WRITTEN_STALE_MS = OPERATOR_WRITTEN_STALE_MS;
 exports.OPS_LOG_DEFAULT_LIMIT = OPS_LOG_DEFAULT_LIMIT;
 exports.OPS_LOG_RING_DEFAULT_MAX = OPS_LOG_RING_DEFAULT_MAX;
@@ -104310,6 +104773,10 @@ exports.alarmDeviceSecureOnArm = alarmDeviceSecureOnArm;
 exports.alarmPanelCapability = alarmPanelCapability;
 exports.alarmPatchLanded = alarmPatchLanded;
 exports.alarmProfileById = alarmProfileById;
+exports.alertEpisodeId = alertEpisodeId;
+exports.alertEpisodeKind = alertEpisodeKind;
+exports.alertEpisodePayload = alertEpisodePayload;
+exports.alertNodeId = alertNodeId;
 exports.alertsCapability = alertsCapability;
 exports.allDoActions = allDoActions;
 exports.allowedSuppliedEffect = allowedSuppliedEffect;
@@ -104666,6 +105133,8 @@ exports.invertPresetFeature = invertPresetFeature;
 exports.invocationFromEncodeProfile = require_composition.invocationFromEncodeProfile;
 exports.isAgentOnlyPlacement = isAgentOnlyPlacement;
 exports.isAlarmControllableCap = isAlarmControllableCap;
+exports.isAlertEpisodeOpen = isAlertEpisodeOpen;
+exports.isAlertEpisodeSeverity = isAlertEpisodeSeverity;
 exports.isAppLinkBase = isAppLinkBase;
 exports.isAppStartRefusal = isAppStartRefusal;
 exports.isArrayOutputSchema = isArrayOutputSchema;
@@ -104701,6 +105170,7 @@ exports.isLabelSupplyStepId = isLabelSupplyStepId;
 exports.isLocationEnabled = isLocationEnabled;
 exports.isMediaOwnerType = isMediaOwnerType;
 exports.isNode = isNode;
+exports.isOauthLandingReason = isOauthLandingReason;
 exports.isObjectInput = isObjectInput;
 exports.isOccupancyRule = isOccupancyRule;
 exports.isOwnerOnlyEventCategory = require_event_category.isOwnerOnlyEventCategory;
@@ -104824,6 +105294,7 @@ exports.notificationRulesCapability = notificationRulesCapability;
 exports.notifierCapability = notifierCapability;
 exports.numericSensorCapability = numericSensorCapability;
 exports.oauthIntegrationCapability = oauthIntegrationCapability;
+exports.oauthLandingUrl = oauthLandingUrl;
 exports.objectInputDeclaresAddonId = objectInputDeclaresAddonId;
 exports.objectInputDeclaresRequiredDeviceId = objectInputDeclaresRequiredDeviceId;
 exports.occupancyScope = occupancyScope;
@@ -104836,6 +105307,7 @@ exports.osdManagerCapability = osdManagerCapability;
 exports.overlayClusterStepSettings = overlayClusterStepSettings;
 exports.packagePickerItems = packagePickerItems;
 exports.parseAdminBase = parseAdminBase;
+exports.parseAlertEpisodePayload = parseAlertEpisodePayload;
 exports.parseAppAuthCallback = parseAppAuthCallback;
 exports.parseAppFlowRequest = parseAppFlowRequest;
 exports.parseAppPageLang = parseAppPageLang;
@@ -104846,6 +105318,7 @@ exports.parseJsonArray = require_sleep.parseJsonArray;
 exports.parseJsonObject = require_sleep.parseJsonObject;
 exports.parseJsonUnknown = require_sleep.parseJsonUnknown;
 exports.parseMediaOwnerKey = parseMediaOwnerKey;
+exports.parseOauthLandingFragment = parseOauthLandingFragment;
 exports.parseOccupancyScope = parseOccupancyScope;
 exports.parseProcStatus = parseProcStatus;
 exports.parseProfileBrokerId = require_sleep.parseProfileBrokerId;
@@ -105048,6 +105521,7 @@ exports.smtpProviderCapability = smtpProviderCapability;
 exports.snapshotCapability = snapshotCapability;
 exports.splitTranslationRef = splitTranslationRef;
 exports.ssoBridgeCapability = ssoBridgeCapability;
+exports.startMoverUnderClearance = startMoverUnderClearance;
 exports.startReachabilityPoll = startReachabilityPoll;
 exports.stateLabel = stateLabel;
 exports.stateVocabularyFor = stateVocabularyFor;