@camstack/types 1.2.7 → 1.2.9

package/dist/index.mjs

@@ -1,5 +1,5 @@
-import { $ as StreamSourceSchema, A as parseJsonUnknown, B as CamProfileSchema, C as asBoolean, D as asString, E as asNumber, F as readinessKey, G as DecodedFrameSchema, H as CamStreamResolutionSchema, I as scopeKey, J as FrameHandleSchema, K as EncodedPacketSchema, L as BrokerStatsSchema, M as ReadinessRegistry, N as ReadinessTimeoutError, O as parseJsonArray, P as emitDownForOwnedCaps, Q as StreamSourceEntrySchema, R as BrokerStatusSchema, S as DeviceType, T as asJsonObject, U as CameraStreamSchema, V as CamStreamKindSchema, W as DecodedAudioChunkSchema, X as ProfileSlotSchema, Y as ProfileRtspEntrySchema, Z as ProfileSlotStatusSchema, _ as resolveCapMount, _t as collectHydratedFieldValues, a as viewerUiCapability, at as makeSourceBrokerId, b as DeviceFeature, bt as DisposerChain, c as createLazyTrpcSource, ct as BaseAddon, d as DEVICE_SETTINGS_CONTRIBUTION_METHODS, dt as createEvent, et as SubscribeAudioChunksInputSchema, f as DEVICE_STATUS_METHOD, ft as emitReadiness, g as method, gt as collectHydratedFieldEntries, h as isDeviceConfigCap, ht as WELL_KNOWN_TAB_MAP, i as deviceOpsCapability, it as makeProfileBrokerId, j as DATAPLANE_SECRET_HEADER, k as parseJsonObject, l as createMirrorSource, lt as normalizeAddonInitResult, m as expandCapMethods, mt as WELL_KNOWN_TABS, n as sleepCancellable, nt as SubscribeFramesInputSchema, o as adminUiCapability, ot as parseProfileBrokerId, p as event, pt as isEvent, q as FrameHandleFormatSchema, r as RawStateResultSchema, rt as SubscribeFramesResultSchema, s as createDeviceProxy, st as selectAssignedProfileSlots, t as sleep, tt as SubscribeAudioChunksResultSchema, u as createSliceHandle, ut as createDurableState, v as systemMethod, vt as hydrateSchema, w as asJsonArray, x as DeviceRole, y as ChargingStatus, yt as resolveHydratedFieldValue, z as CAM_PROFILE_ORDER } from "./sleep-BQ60XlE9.mjs";
-import { t as EventCategory } from "./event-category-D4HJq7Mw.mjs";
+import { $ as StreamSourceSchema, A as parseJsonUnknown, B as CamProfileSchema, C as asBoolean, D as asString, E as asNumber, F as readinessKey, G as DecodedFrameSchema, H as CamStreamResolutionSchema, I as scopeKey, J as FrameHandleSchema, K as EncodedPacketSchema, L as BrokerStatsSchema, M as ReadinessRegistry, N as ReadinessTimeoutError, O as parseJsonArray, P as emitDownForOwnedCaps, Q as StreamSourceEntrySchema, R as BrokerStatusSchema, S as DeviceType, T as asJsonObject, U as CameraStreamSchema, V as CamStreamKindSchema, W as DecodedAudioChunkSchema, X as ProfileSlotSchema, Y as ProfileRtspEntrySchema, Z as ProfileSlotStatusSchema, _ as resolveCapMount, _t as collectHydratedFieldValues, a as viewerUiCapability, at as makeSourceBrokerId, b as DeviceFeature, bt as DisposerChain, c as createLazyTrpcSource, ct as BaseAddon, d as DEVICE_SETTINGS_CONTRIBUTION_METHODS, dt as createEvent, et as SubscribeAudioChunksInputSchema, f as DEVICE_STATUS_METHOD, ft as emitReadiness, g as method, gt as collectHydratedFieldEntries, h as isDeviceConfigCap, ht as WELL_KNOWN_TAB_MAP, i as deviceOpsCapability, it as makeProfileBrokerId, j as DATAPLANE_SECRET_HEADER, k as parseJsonObject, l as createMirrorSource, lt as normalizeAddonInitResult, m as expandCapMethods, mt as WELL_KNOWN_TABS, n as sleepCancellable, nt as SubscribeFramesInputSchema, o as adminUiCapability, ot as parseProfileBrokerId, p as event, pt as isEvent, q as FrameHandleFormatSchema, r as RawStateResultSchema, rt as SubscribeFramesResultSchema, s as createDeviceProxy, st as selectAssignedProfileSlots, t as sleep, tt as SubscribeAudioChunksResultSchema, u as createSliceHandle, ut as createDurableState, v as systemMethod, vt as hydrateSchema, w as asJsonArray, x as DeviceRole, y as ChargingStatus, yt as resolveHydratedFieldValue, z as CAM_PROFILE_ORDER } from "./sleep-DiOnzenz.mjs";
+import { t as EventCategory } from "./event-category-BLcNejAE.mjs";
 import { EventSourceType } from "./enums.mjs";
 import { t as errMsg } from "./err-msg-IQTHeDzc.mjs";
 import { z } from "zod";
@@ -2944,6 +2944,63 @@ function subKindsOf(macro) {
 	return out;
 }
 //#endregion
+//#region src/catalogs/nc-taxonomy.ts
+/**
+* Notification-Center taxonomy — the fixed vocabulary the NC rule editor
+* offers as pickers instead of free text. Derived (never hand-listed) from the
+* single `EVENT_TAXONOMY` dictionary so it stays in lockstep with every other
+* taxonomy surface (timeline, filters, event page).
+*
+* Three buckets, mapped onto the rule editor's `stringList` conditions:
+*   - `videoClasses` → detection classes (person / vehicle / animal + subs)
+*     for the `classes` / `classesExclude` conditions.
+*   - `audioKinds`   → audio-analyzer sub kinds (`audio-scream`, …) shown in
+*     the same class picker, grouped under an Audio header.
+*   - `labels`       → sensor + control taxonomy kinds (doorbell / contact /
+*     lock / …) for the `sensorKinds` device-event condition.
+*
+* Each entry carries `parentKind` so the client can group video subs under
+* their macro and sensor/control kinds under their category. This surface is
+* served ADDITIVELY on the `nc.getConditionCatalog` bridge response — no cap
+* method, no codegen — so it ships train-free with an addon deploy.
+*/
+/** One selectable taxonomy value: a stable kind id + display label + parent. */
+var NcTaxonomyEntrySchema = z.object({
+	/** Stable kind id (e.g. 'person', 'car', 'audio-scream', 'doorbell'). */
+	kind: z.string(),
+	/** English fallback label (the UI translates via the event-kind i18n key). */
+	label: z.string(),
+	/** Macro/category parent for grouping ('car' → 'vehicle'); null for a top. */
+	parentKind: z.string().nullable()
+});
+/** The complete NC picker taxonomy — three grouped buckets. */
+var NcTaxonomySchema = z.object({
+	videoClasses: z.array(NcTaxonomyEntrySchema),
+	audioKinds: z.array(NcTaxonomyEntrySchema),
+	labels: z.array(NcTaxonomyEntrySchema)
+});
+function toEntry(kind, label, parentKind) {
+	return {
+		kind,
+		label,
+		parentKind
+	};
+}
+/**
+* Build the NC taxonomy from `EVENT_TAXONOMY`. Insertion order is preserved
+* (macros before their subs), which the client relies on for stable grouping.
+*/
+function buildNcTaxonomy() {
+	const all = Object.values(EVENT_TAXONOMY);
+	return {
+		videoClasses: all.filter((e) => e.category === "detection").map((e) => toEntry(e.kind, e.label, e.parentKind)),
+		audioKinds: all.filter((e) => e.category === "audio" && e.level === "sub").map((e) => toEntry(e.kind, e.label, e.parentKind)),
+		labels: all.filter((e) => e.category === "sensor" || e.category === "control").map((e) => toEntry(e.kind, e.label, e.parentKind))
+	};
+}
+/** The frozen NC taxonomy, derived once from the taxonomy dictionary. */
+var NC_TAXONOMY = Object.freeze(buildNcTaxonomy());
+//#endregion
 //#region src/types/device-type.ts
 var DEVICE_TYPE_INFO = { ["camera"]: {
 	type: "camera",
@@ -13574,6 +13631,17 @@ function createSystemProxy(api) {
 			deleteTarget: (input) => dispatch("notificationOutput", "deleteTarget", "mutation", input),
 			setTargetEnabled: (input) => dispatch("notificationOutput", "setTargetEnabled", "mutation", input)
 		},
+		notificationRules: {
+			listRules: (input) => dispatch("notificationRules", "listRules", "query", input),
+			getRule: (input) => dispatch("notificationRules", "getRule", "query", input),
+			createRule: (input) => dispatch("notificationRules", "createRule", "mutation", input),
+			updateRule: (input) => dispatch("notificationRules", "updateRule", "mutation", input),
+			deleteRule: (input) => dispatch("notificationRules", "deleteRule", "mutation", input),
+			setRuleEnabled: (input) => dispatch("notificationRules", "setRuleEnabled", "mutation", input),
+			testRule: (input) => dispatch("notificationRules", "testRule", "mutation", input),
+			getConditionCatalog: (input) => dispatch("notificationRules", "getConditionCatalog", "query", input),
+			getHistory: (input) => dispatch("notificationRules", "getHistory", "query", input)
+		},
 		pipelineExecutor: {
 			getAvailableEngines: (input) => dispatch("pipelineExecutor", "getAvailableEngines", "query", input),
 			getSelectedEngine: (input) => dispatch("pipelineExecutor", "getSelectedEngine", "query", input),
@@ -14842,108 +14910,6 @@ var addonWidgetsCapability = {
 	methods: { listWidgets: method(z.void(), z.array(EnrichedWidgetMetadataSchema).readonly()) }
 };
 //#endregion
-//#region src/capabilities/advanced-notifier.cap.ts
-var NotificationRuleConditionsSchema = z.object({
-	deviceIds: z.array(z.number()).readonly().optional(),
-	classNames: z.array(z.string()).readonly().optional(),
-	zoneIds: z.array(z.string()).readonly().optional(),
-	minConfidence: z.number().optional(),
-	source: z.enum([
-		"pipeline",
-		"onboard",
-		"any"
-	]).optional(),
-	schedule: z.object({
-		days: z.array(z.number()).readonly(),
-		startHour: z.number(),
-		endHour: z.number()
-	}).optional(),
-	cooldownSeconds: z.number().optional(),
-	minDwellSeconds: z.number().optional(),
-	/** Match against `event.data.eventType` token (e.g. `'press_long'`). When non-empty, only events
-	*  carrying a matching `data.eventType` string pass this condition. Rules without this field are
-	*  unaffected (back-compat). Distinct from `rule.eventTypes` which holds EventCategory strings. */
-	eventTypeTokens: z.array(z.string()).readonly().optional(),
-	/** Match detections whose CLIP image embedding is semantically similar to this free-text
-	*  description. Requires the embedding-encoder cap to have pre-warmed the text vector.
-	*  `minSimilarity` is the cosine similarity threshold in [0, 1]. */
-	clipDescription: z.object({
-		text: z.string().min(1),
-		minSimilarity: z.number().min(0).max(1)
-	}).optional(),
-	/** Match events whose recognized-entity label (face identity name or plate
-	*  vehicle name, propagated onto `event.data.label`) is one of these values.
-	*  Empty/absent → unaffected (back-compat). Enables "notify me when <named
-	*  vehicle/person> is seen". */
-	labels: z.array(z.string()).readonly().optional()
-});
-var NotificationRuleTemplateSchema = z.object({
-	title: z.string(),
-	body: z.string(),
-	imageMode: z.enum([
-		"crop",
-		"annotated",
-		"full",
-		"none"
-	])
-});
-var NotificationRuleSchema = z.object({
-	id: z.string(),
-	name: z.string(),
-	enabled: z.boolean(),
-	eventTypes: z.array(z.string()).readonly(),
-	conditions: NotificationRuleConditionsSchema,
-	outputs: z.array(z.string()).readonly(),
-	template: NotificationRuleTemplateSchema.optional(),
-	priority: z.enum([
-		"low",
-		"normal",
-		"high",
-		"critical"
-	])
-});
-var NotificationTestResultSchema = z.object({
-	ruleId: z.string(),
-	eventId: z.string(),
-	timestamp: z.number(),
-	wouldFire: z.boolean(),
-	reason: z.string().optional()
-});
-var NotificationHistoryEntrySchema = z.object({
-	id: z.string(),
-	ruleId: z.string(),
-	ruleName: z.string(),
-	eventId: z.string(),
-	timestamp: z.number(),
-	outputs: z.array(z.string()).readonly(),
-	success: z.boolean(),
-	error: z.string().optional(),
-	deviceId: z.number().optional()
-});
-var NotificationHistoryFilterSchema = z.object({
-	ruleId: z.string().optional(),
-	deviceId: z.number().optional(),
-	from: z.number().optional(),
-	to: z.number().optional(),
-	limit: z.number().optional()
-});
-var advancedNotifierCapability = {
-	name: "advanced-notifier",
-	scope: "system",
-	mode: "singleton",
-	internal: true,
-	methods: {
-		getRules: method(z.void(), z.object({ rules: z.array(NotificationRuleSchema).readonly() })),
-		upsertRule: method(z.object({ rule: NotificationRuleSchema }), z.object({ success: z.literal(true) }), { kind: "mutation" }),
-		deleteRule: method(z.object({ ruleId: z.string() }), z.object({ success: z.literal(true) }), { kind: "mutation" }),
-		testRule: method(z.object({
-			ruleId: z.string(),
-			lookbackMinutes: z.number()
-		}), z.object({ results: z.array(NotificationTestResultSchema).readonly() }), { kind: "mutation" }),
-		getHistory: method(z.object({ filter: NotificationHistoryFilterSchema.optional() }), z.object({ entries: z.array(NotificationHistoryEntrySchema).readonly() }))
-	}
-};
-//#endregion
 //#region src/capabilities/alerts.cap.ts
 /**
 * Alerts capability — collection-based internal alert system.
@@ -15286,119 +15252,6 @@ var authProviderCapability = {
 	/** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
 	mount: { kind: "skip" }
 };
-//#endregion
-//#region src/capabilities/login-method.cap.ts
-/**
-* `login-method` — collection cap through which auth addons contribute
-* their pre-auth login surfaces to the login page. This is the SINGLE,
-* generic mechanism that supersedes the dead `auth.listProviders` reader:
-* every auth addon (OIDC, magic-link, WebAuthn/passkey) registers a
-* `login-method` provider and the PUBLIC `auth.listLoginMethods`
-* procedure aggregates them for the unauthenticated login page.
-*
-* A contribution is a discriminated union on `kind`:
-*
-*  - `redirect` — a declarative button. The login page renders a generic
-*    button that navigates to `startUrl` (an addon-owned HTTP route).
-*    Covers OIDC (`/addon/auth-oidc/<id>/start`) and magic-link with
-*    ZERO shell-side JS. A future SSO addon plugs in the same way — the
-*    login page needs NO change.
-*
-*  - `widget` — a Module-Federation widget the login page mounts (via
-*    `loadRemoteBundle`) for an in-page ceremony. `auth.listLoginMethods`
-*    stamps a public `bundleUrl` from `addonId` + `bundle`. Generic
-*    mechanism kept for future use; no shipped addon uses it on the login
-*    page (the passkey ceremony below runs natively in the shell instead).
-*
-*  - `passkey` — a declarative WebAuthn ceremony the shell renders
-*    natively (`@simplewebauthn/browser` lives in `addon-admin-ui`, not in
-*    a remotely-loaded bundle). Carries the addon's effective `rpId` /
-*    `origin` (from its `resolveRpID()` / `resolveOrigin()`) so the shell
-*    can gate visibility (IP-literal origin, hostname/rpId mismatch) WITHOUT
-*    fetching any remote code pre-auth. Contribution stays unconditional —
-*    enrollment state is never leaked pre-auth; visibility is a shell
-*    decision.
-*
-* Every contribution carries a `stage`:
-*  - `primary`        — shown on the first credentials screen (OIDC /
-*                       magic-link buttons; a future usernameless passkey).
-*  - `second-factor`  — shown AFTER the password leg, gated on the
-*                       returned `factors` (passkey-as-2FA today).
-*
-* `mount: skip` — the cap is read server-side by the core auth router
-* (`registry.getCollection('login-method')`), never mounted as its own
-* tRPC router.
-*/
-/** When a login method renders in the two-phase login flow. */
-var LoginStageEnum = z.enum(["primary", "second-factor"]);
-/**
-* A declarative redirect button — the login page navigates to `startUrl`.
-* OIDC and magic-link contribute this; a future SSO addon does too.
-*/
-var RedirectLoginMethodSchema = z.object({
-	kind: z.literal("redirect"),
-	/** Stable id within the login-method set (e.g. `auth-oidc/google`). */
-	id: z.string(),
-	/** Operator-facing button label. */
-	label: z.string(),
-	/** lucide-react icon name. */
-	icon: z.string().optional(),
-	/** Addon-owned HTTP route the button navigates to (GET). */
-	startUrl: z.string(),
-	stage: LoginStageEnum
-});
-/**
-* A Module-Federation widget the login page mounts for an in-page
-* ceremony. `bundle` + `addonId` let `auth.listLoginMethods` stamp a
-* public `bundleUrl`; `remote` is the MF descriptor `loadRemoteBundle`
-* consumes. No `bundleUrl` here — it is server-stamped on the public
-* output so the addon never encodes the static-route scheme.
-*/
-var WidgetLoginMethodSchema = z.object({
-	kind: z.literal("widget"),
-	/** Stable id within the login-method set (e.g. `auth-webauthn/passkey-login`). */
-	id: z.string(),
-	/** Owning addon id — drives the public bundle URL + the MF namespace. */
-	addonId: z.string(),
-	/** Bundle filename inside the addon's dist dir (`remoteEntry.js`). */
-	bundle: z.string(),
-	/** MF remote descriptor — `{ remoteName, exposedModule, componentKey }`. */
-	remote: WidgetRemoteSchema,
-	stage: LoginStageEnum
-});
-/**
-* A declarative WebAuthn ceremony the shell renders natively (no remote
-* code). Carries the addon's EFFECTIVE `rpId`/`origin` so the shell can
-* gate visibility (IP-literal origin, hostname/rpId mismatch) before ever
-* showing the button — the contribution itself stays unconditional.
-*/
-var PasskeyLoginMethodSchema = z.object({
-	kind: z.literal("passkey"),
-	/** Stable id within the login-method set (e.g. `auth-webauthn/passkey-direct-login`). */
-	id: z.string(),
-	/** Operator-facing button label. */
-	label: z.string(),
-	stage: LoginStageEnum,
-	/** Effective WebAuthn RP ID (`resolveRpID()`) — the shell gates visibility on it. */
-	rpId: z.string(),
-	/** Effective expected origin (`resolveOrigin()`), null when unconfigured. */
-	origin: z.string().nullable()
-});
-/** One login-method contribution — redirect button, pre-auth widget, or native passkey ceremony. */
-var LoginMethodContributionSchema = z.discriminatedUnion("kind", [
-	RedirectLoginMethodSchema,
-	WidgetLoginMethodSchema,
-	PasskeyLoginMethodSchema
-]);
-var loginMethodCapability = {
-	name: "login-method",
-	scope: "system",
-	mode: "collection",
-	internal: true,
-	methods: { getLoginMethods: method(z.void(), z.array(LoginMethodContributionSchema).readonly()) },
-	/** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
-	mount: { kind: "skip" }
-};
 /**
 * Orchestrator-side destination metadata. The orchestrator computes
 * `id = <addonId>:<subId>` from its provider lookup so consumers
@@ -16054,7 +15907,8 @@ function customAction(input, output, options) {
 		output,
 		kind: options?.kind ?? "query",
 		auth: options?.auth ?? "protected",
-		scope: options?.scope ?? { kind: "system" }
+		scope: options?.scope ?? { kind: "system" },
+		...options?.caller ? { caller: "required" } : {}
 	};
 }
 function deviceCustomAction(input, output, options) {
@@ -17659,1061 +17513,1946 @@ var filesystemBrowseCapability = {
 	}
 };
 //#endregion
-//#region src/capabilities/log-destination.cap.ts
-var LogLevelSchema = z.enum([
-	"debug",
-	"info",
-	"warn",
-	"error"
+//#region src/capabilities/llm-shared.ts
+/**
+* Shared LLM generate contracts — imported by BOTH `llm.cap.ts` (consumer
+* surface) and `llm-runtime.cap.ts` (node-side managed executor) so the two
+* caps stay wire-compatible without a circular cap→cap import.
+*
+* Errors are a discriminated-union RESULT, never thrown: the shape survives
+* every transport tier structurally, and failed calls still write usage rows.
+* Token counts only in v1 — no costUsd (operator decision, 2026-07-15).
+*/
+var LlmUsageSchema = z.object({
+	inputTokens: z.number(),
+	outputTokens: z.number()
+});
+var LlmErrorCodeSchema = z.enum([
+	"timeout",
+	"rate-limited",
+	"auth",
+	"refusal",
+	"bad-request",
+	"unavailable",
+	"no-profile",
+	"budget-exceeded",
+	"adapter-error"
 ]);
-var LogEntrySchema = z.object({
-	timestamp: z.date(),
-	level: LogLevelSchema,
-	scope: z.array(z.string()),
-	message: z.string(),
-	meta: z.record(z.string(), z.unknown()).optional(),
-	tags: z.record(z.string(), z.string()).optional()
+var LlmGenerateOkSchema = z.object({
+	ok: z.literal(true),
+	text: z.string(),
+	model: z.string(),
+	usage: LlmUsageSchema,
+	truncated: z.boolean(),
+	latencyMs: z.number()
 });
-var logDestinationCapability = {
-	name: "log-destination",
-	scope: "system",
-	mode: "collection",
-	internal: true,
-	methods: {
-		write: method(LogEntrySchema, z.void(), { kind: "mutation" }),
-		query: method(z.object({
-			scope: z.array(z.string()).optional(),
-			level: LogLevelSchema.optional(),
-			since: z.date().optional(),
-			until: z.date().optional(),
-			limit: z.number().optional(),
-			tags: z.record(z.string(), z.string()).optional()
-		}), z.array(LogEntrySchema).readonly())
-	},
-	/** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
-	mount: { kind: "skip" }
-};
-//#endregion
-//#region src/capabilities/metrics-provider.cap.ts
-var CpuBreakdownSchema = z.object({
-	total: z.number(),
-	user: z.number(),
-	system: z.number(),
-	irq: z.number(),
-	nice: z.number(),
-	loadAvg: z.tuple([
-		z.number(),
-		z.number(),
-		z.number()
-	]),
-	cores: z.number()
+var LlmGenerateErrSchema = z.object({
+	ok: z.literal(false),
+	code: LlmErrorCodeSchema,
+	message: z.string(),
+	retryAfterMs: z.number().optional()
 });
-var MemoryInfoSchema = z.object({
-	percent: z.number(),
-	totalBytes: z.number(),
-	usedBytes: z.number(),
-	availableBytes: z.number(),
-	swapUsedBytes: z.number(),
-	swapTotalBytes: z.number()
-});
-var DiskIoSnapshotSchema = z.object({
-	readBytes: z.number(),
-	writeBytes: z.number(),
-	readOps: z.number(),
-	writeOps: z.number(),
-	timestampMs: z.number()
-});
-var NetworkIoSnapshotSchema = z.object({
-	rxBytes: z.number(),
-	txBytes: z.number(),
-	rxPackets: z.number(),
-	txPackets: z.number(),
-	rxErrors: z.number(),
-	txErrors: z.number(),
-	timestampMs: z.number()
-});
-var MetricsGpuInfoSchema = z.object({
-	utilization: z.number(),
-	model: z.string(),
-	memoryUsedBytes: z.number(),
-	memoryTotalBytes: z.number(),
-	temperature: z.number().nullable()
-});
-var ProcessResourceInfoSchema = z.object({
-	openFds: z.number(),
-	threadCount: z.number(),
-	activeHandles: z.number(),
-	activeRequests: z.number()
-});
-var PressureAvgsSchema = z.object({
-	avg10: z.number(),
-	avg60: z.number(),
-	avg300: z.number()
+var LlmGenerateResultSchema = z.discriminatedUnion("ok", [LlmGenerateOkSchema, LlmGenerateErrSchema]);
+/**
+* `Uint8Array` is the sanctioned binary convention — superjson + the UDS
+* MsgPack channel round-trip typed arrays (embedding-encoder.cap.ts:29,
+* notification-output.cap.ts:27-31 precedents).
+*/
+var LlmImageSchema = z.object({
+	bytes: z.instanceof(Uint8Array),
+	mimeType: z.string()
 });
-var PressureInfoSchema = z.object({
-	some: PressureAvgsSchema,
-	full: PressureAvgsSchema.nullable()
+var LlmGenerateBaseInputSchema = z.object({
+	/** Collection routing (the notification-output posture). */
+	addonId: z.string().optional(),
+	/** Explicit profile; else the resolution chain (spec §3). */
+	profileId: z.string().optional(),
+	/** MANDATORY usage tag: 'ai-summary', 'notifier-rules', 'adhoc-ui', … */
+	consumer: z.string(),
+	system: z.string().optional(),
+	/** v1: single-turn. `messages[]` is a v2 additive field. */
+	prompt: z.string(),
+	/** Structured output — adapter-mapped (response_format / forced tool / responseSchema). */
+	jsonSchema: z.record(z.string(), z.unknown()).optional(),
+	/** Per-call override of the profile default. */
+	maxTokens: z.number().int().positive().optional(),
+	temperature: z.number().optional()
 });
-var SystemResourceSnapshotSchema = z.object({
-	cpu: CpuBreakdownSchema,
-	memory: MemoryInfoSchema,
-	gpu: MetricsGpuInfoSchema.nullable(),
-	network: NetworkIoSnapshotSchema,
-	disk: DiskIoSnapshotSchema,
-	pressure: z.object({
-		cpu: PressureInfoSchema.nullable(),
-		memory: PressureInfoSchema.nullable(),
-		io: PressureInfoSchema.nullable()
+//#endregion
+//#region src/capabilities/llm-runtime.cap.ts
+/**
+* `llm-runtime` — node-side managed llama.cpp executor (spec §4). Registered
+* on EVERY node where `addon-ai` is installed; the hub `llm` provider reaches
+* a specific node's runtime with `nodePin(profile.runtime.nodeId)` — normal
+* cap routing, zero bespoke plumbing. `internal: true`: the operator reaches
+* this only through the `llm` cap's methods.
+*
+* One running llama-server child per node in v1 (models are RAM-heavy).
+* Resource ceiling = llama-server flags + idleStopMinutes ONLY (no RSS
+* watchdog — operator decision #3).
+*/
+var ManagedModelRefSchema = z.discriminatedUnion("kind", [
+	z.object({
+		kind: z.literal("catalog"),
+		catalogId: z.string()
 	}),
-	process: ProcessResourceInfoSchema,
-	cpuTemperature: z.number().nullable(),
-	timestampMs: z.number()
-});
-var DiskSpaceInfoSchema = z.object({
-	path: z.string(),
-	totalBytes: z.number(),
-	usedBytes: z.number(),
-	availableBytes: z.number(),
-	percent: z.number()
-});
-var PidResourceStatsSchema = z.object({
-	pid: z.number(),
-	cpu: z.number(),
-	memory: z.number(),
-	/**
-	* Private (anonymous) resident bytes — the per-process V8 heap + native
-	* allocations NOT shared with other processes (Linux RssAnon). This is the
-	* "real" per-runner cost; summing it across runners is meaningful, unlike
-	* `memory` (RSS), which double-counts the shared mmap'd framework code.
-	* Undefined where /proc is unavailable (e.g. macOS).
-	*/
-	privateBytes: z.number().optional(),
-	/**
-	* Shared file-backed resident bytes (Linux RssFile) — mmap'd framework/lib
-	* code shared copy-on-write across runners. Undefined on macOS.
-	*/
-	sharedBytes: z.number().optional()
+	z.object({
+		kind: z.literal("url"),
+		url: z.string(),
+		sha256: z.string().optional()
+	}),
+	z.object({
+		kind: z.literal("path"),
+		path: z.string()
+	})
+]);
+var ManagedRuntimeConfigSchema = z.object({
+	/** WHERE the runtime lives — hub or any agent. */
+	nodeId: z.string(),
+	/** Closed for v1; 'ollama' is a v2 candidate. */
+	engine: z.enum(["llama-cpp"]),
+	model: ManagedModelRefSchema,
+	contextSize: z.number().int().default(4096),
+	/** 0 = CPU-only. */
+	gpuLayers: z.number().int().default(0),
+	/** Default: cpus-2, clamped ≥1 (resolved node-side). */
+	threads: z.number().int().optional(),
+	/** Concurrent slots. */
+	parallel: z.number().int().default(1),
+	/** Else lazy: first generate boots it. */
+	autoStart: z.boolean().default(false),
+	/** 0 = never; frees RAM after quiet periods. */
+	idleStopMinutes: z.number().int().default(30)
 });
-var AddonInstanceSchema = z.object({
-	addonId: z.string(),
+var LlmRuntimeStatusSchema = z.object({
+	/** Status is ALWAYS node-qualified. */
 	nodeId: z.string(),
-	role: z.enum(["hub", "worker"]),
-	pid: z.number(),
 	state: z.enum([
-		"starting",
-		"running",
-		"stopping",
 		"stopped",
-		"crashed"
-	]),
-	uptimeSec: z.number()
-});
-var NodeProcessSchema = z.object({
-	pid: z.number(),
-	ppid: z.number(),
-	pgid: z.number(),
-	classification: z.enum([
-		"root",
-		"managed",
-		"system",
-		"ghost"
+		"downloading",
+		"starting",
+		"ready",
+		"crashed",
+		"failed"
 	]),
-	/** `$process` addon binding when `managed`, else null. */
-	addonId: z.string().nullable(),
-	/** Kernel-reported nodeId when the process is a known agent/worker. */
-	nodeId: z.string().nullable(),
-	/** Truncated command line. */
-	command: z.string(),
-	cpuPercent: z.number(),
-	memoryRssBytes: z.number(),
-	/** Wall-clock uptime (seconds). Parsed from `ps etime`. */
-	uptimeSec: z.number(),
-	/** True when ancestor walk reaches `ppid=1` (reparented to init/launchd). */
-	orphaned: z.boolean()
-});
-var KillProcessInputSchema = z.object({
-	pid: z.number(),
-	/** Force = SIGKILL. Default is SIGTERM. */
-	force: z.boolean().optional()
+	pid: z.number().optional(),
+	port: z.number().optional(),
+	modelPath: z.string().optional(),
+	modelId: z.string().optional(),
+	downloadProgress: z.number().min(0).max(1).optional(),
+	lastError: z.string().optional(),
+	crashesInWindow: z.number(),
+	/** Child RSS (sampled best-effort). */
+	memoryBytes: z.number().optional(),
+	vramBytes: z.number().optional()
 });
-var KillProcessResultSchema = z.object({
-	success: z.boolean(),
-	reason: z.string().optional(),
-	signal: z.enum(["SIGTERM", "SIGKILL"]).optional()
+var LlmNodeModelSchema = z.object({
+	file: z.string(),
+	sizeBytes: z.number(),
+	catalogId: z.string().optional(),
+	installedAt: z.number().optional()
 });
-var DumpHeapSnapshotInputSchema = z.object({ 
-/** The addon whose runner should dump a heap snapshot. */
-addonId: z.string() });
-var DumpHeapSnapshotResultSchema = z.object({
-	success: z.boolean(),
-	/** Path of the written .heapsnapshot inside the runner's container/host. */
-	path: z.string().optional(),
-	/** Process pid that was signalled. */
-	pid: z.number().optional(),
-	reason: z.string().optional()
+var LlmRuntimeDiskUsageSchema = z.object({
+	nodeId: z.string(),
+	modelsBytes: z.number(),
+	freeBytes: z.number().optional()
 });
-var SystemMetricsSchema = z.object({
-	cpuPercent: z.number(),
-	memoryPercent: z.number(),
-	memoryUsedMB: z.number(),
-	memoryTotalMB: z.number(),
-	diskPercent: z.number().optional(),
-	temperature: z.number().optional(),
-	gpuPercent: z.number().optional(),
-	gpuMemoryPercent: z.number().optional()
+var LlmRuntimeCompleteInputSchema = LlmGenerateBaseInputSchema.extend({
+	images: z.array(LlmImageSchema).optional(),
+	runtime: ManagedRuntimeConfigSchema,
+	/** The managed profile's timeout, threaded by the hub provider. */
+	timeoutMs: z.number().int().positive().optional()
 });
-var metricsProviderCapability = {
-	name: "metrics-provider",
+var llmRuntimeCapability = {
+	name: "llm-runtime",
 	scope: "system",
 	mode: "singleton",
+	internal: true,
 	methods: {
-		/** Fresh, full system snapshot (triggers OS-level collection). */
-		collectSnapshot: method(z.void(), SystemResourceSnapshotSchema),
-		/** Most recent cached snapshot from the background sampler, or null pre-first-sample. */
-		getCached: method(z.void(), SystemResourceSnapshotSchema.nullable()),
-		/** Light-weight cached summary for heartbeats and list views. */
-		getCurrent: method(z.void(), SystemMetricsSchema),
-		/** Disk space for the given mount/path. */
-		getDiskSpace: method(z.object({ dirPath: z.string() }), DiskSpaceInfoSchema),
-		/** GPU info (null if unavailable). */
-		getGpuInfo: method(z.void(), MetricsGpuInfoSchema.nullable()),
-		/** CPU temperature in °C (null if unavailable). */
-		getCpuTemperature: method(z.void(), z.number().nullable()),
-		/** Per-PID resource stats. Missing/dead PIDs are omitted from the result. */
-		getProcessStats: method(z.object({ pids: z.array(z.number()) }), z.array(PidResourceStatsSchema)),
-		/**
-		* List addon instances known to this node — one entry per forked worker
-		* plus a synthetic 'hub' entry representing the local hub process.
-		* Used by benchmarks/observability to detect whether a given addon runs
-		* in its own process (measurable independently) or inline with the hub.
-		*/
-		listAddonInstances: method(z.void(), z.array(AddonInstanceSchema).readonly()),
-		/**
-		* Resource stats for the process hosting the given addon.
-		* Returns null when the addon runs in-process on the hub (can't measure
-		* independently — caller should detect via listAddonInstances). Returns
-		* hub process stats for addonId '$hub'.
-		*/
-		getAddonStats: method(z.object({ addonId: z.string() }), PidResourceStatsSchema.nullable()),
-		/**
-		* Snapshot of every camstack-related process on this node with a
-		* ghost/managed/root classification. Powers the Cluster → Agent →
-		* Processes tab: cross-references `$process.list` against a `ps` scan
-		* so orphaned trees (PPID=1) or unknown children show up as `ghost`
-		* and can be killed from the UI.
-		*/
-		listNodeProcesses: method(z.void(), z.array(NodeProcessSchema).readonly()),
-		/**
-		* Send SIGTERM (or SIGKILL when `force`) to a pid inside this node's
-		* process tree. The provider refuses pids that aren't in the live
-		* `listNodeProcesses()` snapshot — callers can't use this endpoint
-		* to kill arbitrary system processes.
-		*/
-		killProcess: method(KillProcessInputSchema, KillProcessResultSchema, {
+		complete: method(LlmRuntimeCompleteInputSchema, LlmGenerateResultSchema, { kind: "mutation" }),
+		ensureStarted: method(z.object({ runtime: ManagedRuntimeConfigSchema }), LlmRuntimeStatusSchema, {
 			kind: "mutation",
 			auth: "admin"
 		}),
-		/**
-		* Tell the addon's forked runner to write a V8 heap snapshot to disk (via
-		* SIGUSR2 — the runner's diagnostic handler). Also logs its
-		* `process.memoryUsage()` + heap-space breakdown. Refuses pids not in the
-		* live `listNodeProcesses()` snapshot. Use for deep per-addon memory
-		* attribution; copy the returned path off the node to analyze.
-		*/
-		dumpHeapSnapshot: method(DumpHeapSnapshotInputSchema, DumpHeapSnapshotResultSchema, {
+		stop: method(z.object({}), z.void(), {
 			kind: "mutation",
 			auth: "admin"
-		})
+		}),
+		status: method(z.object({}), LlmRuntimeStatusSchema),
+		installModel: method(z.object({ model: ManagedModelRefSchema }), z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		deleteModel: method(z.object({ file: z.string() }), z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		listLocalModels: method(z.object({}), z.array(LlmNodeModelSchema)),
+		getDiskUsage: method(z.object({}), LlmRuntimeDiskUsageSchema)
 	}
 };
 //#endregion
-//#region src/capabilities/model-convert.cap.ts
-var ModelConvertInputSchema = z.object({
-	sourceUrl: z.string(),
-	metadata: ModelConvertMetadataSchema,
-	targets: z.array(ConvertTargetSchema).min(1).readonly(),
-	calibrationRef: z.string().optional(),
-	sessionId: z.string().optional()
-});
-var modelConvertCapability = {
-	name: "model-convert",
-	scope: "system",
-	mode: "singleton",
-	internal: true,
-	methods: { convert: method(ModelConvertInputSchema, ConvertResultSchema, {
-		kind: "mutation",
-		auth: "admin",
-		timeoutMs: 6e5
-	}) }
-};
-//#endregion
-//#region src/capabilities/model-distributor.cap.ts
-/**
-* `model-distributor` — singleton, hub-resident. Pushes a model FORMAT that is
-* already present on the hub's `/data/models` to a target agent node's
-* `/data/models`, sha256-verified, reusing the agent-pull machinery
-* (DeployStageRegistry + the one-time-token bundle route + the agent's
-* `fetchBundleFromHub`). Its provider is built in `server/backend` because it
-* needs the Moleculer broker + the deploy-stage registry, which a forked addon
-* can't reach. `addon-model-studio` drives it via `ctx.api` and owns the
-* per-node availability map.
-*/
-var ModelDistributeInputSchema = z.object({
-	nodeId: z.string(),
-	modelId: z.string(),
-	format: z.enum(MODEL_FORMATS),
-	entry: ModelCatalogEntrySchema
-});
-var ModelDistributeResultSchema = z.object({
-	ok: z.boolean(),
-	/** sha256 of the staged tarball (empty for a hub-local no-op). */
-	sha256: z.string(),
-	bytes: z.number(),
-	/** The target node's modelsDir the artifact landed in. */
-	path: z.string()
-});
-var modelDistributorCapability = {
-	name: "model-distributor",
-	scope: "system",
-	mode: "singleton",
-	internal: true,
-	methods: { distributeModel: method(ModelDistributeInputSchema, ModelDistributeResultSchema, {
-		kind: "mutation",
-		auth: "admin"
-	}) }
-};
-//#endregion
-//#region src/capabilities/mqtt-broker.cap.ts
-/**
-* `mqtt-broker` — broker-registry cap.
-*
-* NOT a pub/sub proxy. The cap exposes (a) a registry of configured
-* MQTT brokers (external + optionally an embedded `aedes`-backed one)
-* and (b) the connection details a consumer addon needs to spin up
-* its OWN `mqtt.js` client.
-*
-* Why: pub/sub routing over the system event-bus loses fidelity
-* (callback shape, QoS guarantees, will/retain semantics) and adds
-* refcount bookkeeping that addons would rather own themselves. The
-* canonical consumer (`addon-export-ha-mqtt`) needs raw `mqtt.js`
-* features anyway — give it the connection config, get out of the way.
-*
-* Consumer flow:
-*   const cfg = await ctx.api.mqttBroker.getBrokerConfig({ id })
-*   const client = mqtt.connect(cfg.url, { username: cfg.username, … })
-*   client.subscribe('zigbee2mqtt/+')
-*
-* Collection mode: multiple brokers (e.g. one local mosquitto + one
-* cloud bridge). The "embedded" entry (when present) is just another
-* broker in the registry — its lifecycle is owned by the addon that
-* spawned it.
-*/
-var BrokerKindSchema = z.enum(["external", "embedded"]);
+//#region src/capabilities/llm.cap.ts
 /**
-* Broker live-probe status.
+* `llm` — consumer-facing LLM surface (spec §1-§3). Collection-mode: array
+* methods concat-fan across providers; single-row methods route to ONE
+* provider by the `addonId` in the call input (the notification-output
+* posture, notification-output.cap.ts:215-250). Provided by `addon-ai`
+* (hub-placed); the cap stays open for future providers.
 *
-* - `connected` — last probe completed a clean CONNACK
-* - `disconnected` — no probe has run yet (cold cache)
-* - `auth-failed` — CONNACK refused with auth error (RC 4 / 5)
-* - `unreachable` — TCP connect timed out / refused
-* - `tls-error` — TLS handshake failed (cert / SNI / cipher)
+* Profiles are ROWS (data), not addons: one row = one usable model endpoint.
+* `apiKey` is a password field — providers REDACT it on read and merge on
+* write; a stored key NEVER round-trips to a client.
 */
-var BrokerStatusSchema$1 = z.enum([
-	"connected",
-	"disconnected",
-	"auth-failed",
-	"unreachable",
-	"tls-error"
+var LlmProfileKindSchema = z.enum([
+	"openai-compatible",
+	"openai",
+	"anthropic",
+	"google",
+	"managed-local"
 ]);
-var BrokerInfoSchema = z.object({
+var LlmProfileSchema = z.object({
 	id: z.string(),
 	name: z.string(),
-	url: z.string(),
-	kind: BrokerKindSchema,
-	status: BrokerStatusSchema$1,
-	latencyMs: z.number().nullable(),
-	error: z.string().optional(),
-	/** Embedded brokers only: number of MQTT clients currently connected. */
-	connectedClients: z.number().int().nonnegative().optional(),
-	/** Epoch ms of the last live probe (external) or aedes snapshot (embedded). */
-	lastCheckedAt: z.number().optional()
-});
-/**
-* Connection details — what a consumer needs to call
-* `mqtt.connect(url, options)`. We split URL + credentials so the
-* consumer can pass them as `mqtt.connect(url, { username, password })`
-* instead of stuffing creds into the URL (which leaks them into logs).
-*/
-var BrokerConnectionDetailsSchema = z.object({
-	url: z.string(),
-	username: z.string().optional(),
-	password: z.string().optional(),
-	/**
-	* Suggested prefix for `clientId`. Each consumer should suffix this
-	* with its own discriminator (addon id, instance id) so reconnects
-	* don't kick each other off (MQTT spec: clientId must be unique per
-	* broker).
-	*/
-	clientIdPrefix: z.string().optional()
-});
-var AddBrokerInputSchema = z.object({
-	name: z.string().min(1),
-	url: z.string().regex(/^(mqtt|mqtts|ws|wss):\/\//, "URL must start with mqtt(s):// or ws(s)://"),
-	username: z.string().optional(),
-	password: z.string().optional(),
-	clientIdPrefix: z.string().optional()
-});
-var AddBrokerResultSchema = z.object({ id: z.string() });
-var IdInputSchema = z.object({ id: z.string() });
-var TestResultSchema$1 = z.discriminatedUnion("ok", [z.object({
-	ok: z.literal(true),
-	latencyMs: z.number()
-}), z.object({
-	ok: z.literal(false),
-	error: z.string()
-})]);
-var StartEmbeddedInputSchema = z.object({
-	port: z.number().int().min(1).max(65535).default(1883),
-	/** Allow anonymous connect (no username/password). Default: false. */
-	allowAnonymous: z.boolean().default(false),
-	/** Optional shared username/password for clients. */
-	username: z.string().optional(),
-	password: z.string().optional()
+	kind: LlmProfileKindSchema,
+	/** Stamped by the provider — keeps the fanned catalog routable. */
+	addonId: z.string(),
+	enabled: z.boolean(),
+	/** Vendor model id, or the managed runtime's loaded model. */
+	model: z.string(),
+	/** Required for openai-compatible; override for cloud kinds. */
+	baseUrl: z.string().optional(),
+	/** ConfigUISchema type:'password' — never round-trips (spec §5). */
+	apiKey: z.string().optional(),
+	supportsVision: z.boolean(),
+	temperature: z.number().min(0).max(2).optional(),
+	maxTokens: z.number().int().positive().optional(),
+	timeoutMs: z.number().int().positive().default(6e4),
+	extraHeaders: z.record(z.string(), z.string()).optional(),
+	/** kind === 'managed-local' only (spec §4). */
+	runtime: ManagedRuntimeConfigSchema.optional()
 });
-var StartEmbeddedResultSchema = z.object({
-	id: z.string(),
-	url: z.string()
+/** ConfigUISchema tree passed through untyped on the wire (the
+*  notification-output `ConfigSchemaPassthrough` precedent at
+*  notification-output.cap.ts:151); the exported TS type re-tightens it. */
+var ConfigSchemaPassthrough$1 = z.unknown();
+var LlmProfileKindDescriptorSchema = z.object({
+	kind: LlmProfileKindSchema,
+	label: z.string(),
+	icon: z.string(),
+	/** Stamped by each provider so the concat-fanned catalog stays routable. */
+	addonId: z.string(),
+	configSchema: ConfigSchemaPassthrough$1
 });
-var StatusSchema = z.object({
-	brokerCount: z.number(),
-	embeddedRunning: z.boolean()
+var LlmDefaultSelectorSchema = z.union([z.object({ consumer: z.string() }), z.object({ purpose: z.enum(["text", "vision"]) })]);
+var LlmDefaultSchema = z.object({
+	selector: LlmDefaultSelectorSchema,
+	profileId: z.string()
 });
-var mqttBrokerCapability = {
-	name: "mqtt-broker",
+/** Server-side rollup row — getUsage never dumps raw call rows (spec §6). */
+var LlmUsageRollupSchema = z.object({
+	day: z.string(),
+	consumer: z.string(),
+	profileId: z.string(),
+	calls: z.number(),
+	okCalls: z.number(),
+	errorCalls: z.number(),
+	inputTokens: z.number(),
+	outputTokens: z.number(),
+	avgLatencyMs: z.number()
+});
+/** LLM-facing view over the reused ModelCatalogEntry mechanism (spec §4.2). */
+var ManagedModelCatalogEntrySchema = z.object({
+	id: z.string(),
+	label: z.string(),
+	family: z.string(),
+	purpose: z.enum(["text", "vision"]),
+	url: z.string(),
+	sha256: z.string(),
+	sizeBytes: z.number(),
+	quantization: z.string(),
+	/** Load-time guidance shown in the picker. */
+	minRamBytes: z.number(),
+	contextSizeDefault: z.number().int(),
+	/** Vision models: companion projector file. */
+	mmprojUrl: z.string().optional()
+});
+var LlmRuntimeNodeSchema = z.object({
+	nodeId: z.string(),
+	reachable: z.boolean(),
+	status: LlmRuntimeStatusSchema.optional(),
+	disk: LlmRuntimeDiskUsageSchema.optional(),
+	error: z.string().optional()
+});
+var GenerateVisionInputSchema = LlmGenerateBaseInputSchema.extend({ images: z.array(LlmImageSchema).min(1) });
+var ProfileRefInputSchema = z.object({
+	addonId: z.string(),
+	profileId: z.string()
+});
+var llmCapability = {
+	name: "llm",
 	scope: "system",
 	mode: "collection",
-	providerKind: "broker",
-	status: {
-		schema: StatusSchema,
-		kind: "poll"
-	},
+	internal: false,
+	providerKind: "ai",
+	/** `nodeId` inputs below are DATA (the hub provider pins itself), never routing. */
+	nodeIdMode: "data",
 	methods: {
-		listBrokers: method(z.void(), z.array(BrokerInfoSchema)),
-		getBrokerConfig: method(IdInputSchema, BrokerConnectionDetailsSchema),
-		addBroker: method(AddBrokerInputSchema, AddBrokerResultSchema, { kind: "mutation" }),
-		removeBroker: method(IdInputSchema, z.void(), { kind: "mutation" }),
-		testConnection: method(IdInputSchema, TestResultSchema$1, { kind: "mutation" }),
-		startEmbeddedBroker: method(StartEmbeddedInputSchema, StartEmbeddedResultSchema, { kind: "mutation" }),
-		stopEmbeddedBroker: method(IdInputSchema, z.void(), { kind: "mutation" }),
-		getStatus: method(z.void(), StatusSchema)
+		generate: method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }),
+		generateVision: method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }),
+		listProfileKinds: method(z.object({}), z.array(LlmProfileKindDescriptorSchema)),
+		listProfiles: method(z.object({}), z.array(LlmProfileSchema)),
+		upsertProfile: method(z.object({ profile: LlmProfileSchema }), LlmProfileSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		deleteProfile: method(ProfileRefInputSchema, z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		testProfile: method(ProfileRefInputSchema, LlmGenerateResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/** Live vendor enumeration (GET /models etc.). */
+		listModels: method(ProfileRefInputSchema, z.array(z.string())),
+		getDefaults: method(z.object({}), z.array(LlmDefaultSchema)),
+		setDefault: method(z.object({
+			selector: LlmDefaultSelectorSchema,
+			profileId: z.string().nullable()
+		}), z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		getUsage: method(z.object({
+			since: z.number().optional(),
+			until: z.number().optional(),
+			consumer: z.string().optional(),
+			profileId: z.string().optional()
+		}), z.array(LlmUsageRollupSchema)),
+		listModelCatalog: method(z.object({}), z.array(ManagedModelCatalogEntrySchema)),
+		listRuntimeNodes: method(z.object({}), z.array(LlmRuntimeNodeSchema)),
+		listNodeModels: method(z.object({ nodeId: z.string() }), z.array(LlmNodeModelSchema)),
+		installModel: method(z.object({
+			nodeId: z.string(),
+			model: ManagedModelRefSchema
+		}), z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		deleteModel: method(z.object({
+			nodeId: z.string(),
+			file: z.string()
+		}), z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		getRuntimeStatus: method(ProfileRefInputSchema, LlmRuntimeStatusSchema),
+		startRuntime: method(ProfileRefInputSchema, LlmRuntimeStatusSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		stopRuntime: method(ProfileRefInputSchema, z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		})
 	}
 };
 //#endregion
-//#region src/capabilities/network-access.cap.ts
-var NetworkEndpointSchema = z.object({
-	url: z.string(),
-	hostname: z.string(),
-	port: z.number(),
-	protocol: z.enum(["http", "https"])
-});
-var NetworkAccessStatusSchema = z.object({
-	connected: z.boolean(),
-	endpoint: NetworkEndpointSchema.nullable(),
-	error: z.string().optional()
-});
-/**
-* Optional, richer endpoint shape returned by providers that expose
-* MORE than one ingress concurrently (Tailscale Ingress with mixed
-* serve+funnel rules, future ngrok multi-tunnel, …). Each entry carries
-* the originating provider config (mode + sourcePort) so the
-* orchestrator UI can label rows distinctly. Providers that expose only
-* one endpoint just omit `listEndpoints` from their provider impl.
-*/
-var NetworkEndpointEntrySchema = NetworkEndpointSchema.extend({
-	/**
-	* Stable id within the provider — typically `<mode>-<sourcePort>` so
-	* the orchestrator can dedupe across `listEndpoints` polls.
-	*/
-	id: z.string(),
-	/** Operator-facing label (mirrors `MeshEndpoint.label`). */
-	label: z.string(),
-	/** Optional provider-specific mode tag, used for icon/colour in admin UI. */
-	mode: z.string().optional(),
-	/** Originating local port the ingress fronts (informational). */
-	sourcePort: z.number().optional()
+//#region src/capabilities/log-destination.cap.ts
+var LogLevelSchema = z.enum([
+	"debug",
+	"info",
+	"warn",
+	"error"
+]);
+var LogEntrySchema = z.object({
+	timestamp: z.date(),
+	level: LogLevelSchema,
+	scope: z.array(z.string()),
+	message: z.string(),
+	meta: z.record(z.string(), z.unknown()).optional(),
+	tags: z.record(z.string(), z.string()).optional()
 });
-var networkAccessCapability = {
-	name: "network-access",
+var logDestinationCapability = {
+	name: "log-destination",
 	scope: "system",
 	mode: "collection",
-	providerKind: "ingress",
+	internal: true,
 	methods: {
-		start: method(z.void(), NetworkEndpointSchema, { kind: "mutation" }),
-		stop: method(z.void(), z.void(), { kind: "mutation" }),
-		getEndpoint: method(z.void(), NetworkEndpointSchema.nullable()),
-		getStatus: method(z.void(), NetworkAccessStatusSchema),
-		/**
-		* Enumerate every active ingress entry. Providers that expose only a
-		* single endpoint may omit this method; callers fall back to
-		* `getEndpoint()` in that case.
-		*/
-		listEndpoints: method(z.void(), z.array(NetworkEndpointEntrySchema).readonly())
-	}
+		write: method(LogEntrySchema, z.void(), { kind: "mutation" }),
+		query: method(z.object({
+			scope: z.array(z.string()).optional(),
+			level: LogLevelSchema.optional(),
+			since: z.date().optional(),
+			until: z.date().optional(),
+			limit: z.number().optional(),
+			tags: z.record(z.string(), z.string()).optional()
+		}), z.array(LogEntrySchema).readonly())
+	},
+	/** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
+	mount: { kind: "skip" }
 };
 //#endregion
-//#region src/capabilities/notification-output.cap.ts
+//#region src/capabilities/login-method.cap.ts
 /**
-* notification-output — canonical, capability-gated notification delivery.
+* `login-method` — collection cap through which auth addons contribute
+* their pre-auth login surfaces to the login page. This is the SINGLE,
+* generic mechanism that supersedes the dead `auth.listProviders` reader:
+* every auth addon (OIDC, magic-link, WebAuthn/passkey) registers a
+* `login-method` provider and the PUBLIC `auth.listLoginMethods`
+* procedure aggregates them for the unauthenticated login page.
 *
-* Apprise-derived model (see
-* `docs/superpowers/specs/2026-07-03-notification-output-notifier-matrix.md`):
-* callers emit ONE canonical `Notification`; each provider declares a
-* per-kind capability descriptor (`TargetKind`), and the pure degrade
-* engine (`@camstack/types` `prepareNotification`) transcodes / degrades the
-* message to what the kind supports — callers never special-case a service.
+* A contribution is a discriminated union on `kind`:
 *
-* DESIGN DECISIONS (locked):
-*  - Target CRUD lives on THIS cap (`upsertTarget` / `deleteTarget` /
-*    `setTargetEnabled`), each provider persisting via the `settings-store`
-*    cap. Rationale: the admin UI needs one uniform surface across the
-*    notifiers addon AND the HA addon; the addon-`globalSettingsSchema`-array
-*    alternative would fork the UI per addon and cannot host the
-*    discovery→adopt flow.
-*  - `listTargetKinds` / `listTargets` / `discoverTargets` return arrays →
-*    the generated cap-mount auto-`concatCollection`-fans them across every
-*    registered provider (notifiers addon + HA addon) so one catalog is
-*    routable. `send` / `testTarget` / CRUD route to ONE provider by the
-*    `addonId` the generated collection router extracts from the call input.
-*  - `Attachment.bytes` is `Uint8Array`. Transport-safe: superjson (the tRPC
-*    transformer) + UDS MsgPack both round-trip typed arrays — already used by
-*    `storage` / `storage-provider` / `recording` caps over the same path. No
-*    base64 fallback needed.
+*  - `redirect` — a declarative button. The login page renders a generic
+*    button that navigates to `startUrl` (an addon-owned HTTP route).
+*    Covers OIDC (`/addon/auth-oidc/<id>/start`) and magic-link with
+*    ZERO shell-side JS. A future SSO addon plugs in the same way — the
+*    login page needs NO change.
 *
-* TODO (deferred, closed-set change — separate decision): add
-* `providerKind: 'notify'` so notification providers surface on the unified
-* admin "Integrations" page.
-*/
-/**
-* Zentik-derived typed-media enum — the superset across every kind. Each
-* adapter picks what it supports and the degrade engine filters the rest.
-*/
-var AttachmentMediaTypeSchema = z.enum([
-	"image",
-	"video",
-	"gif",
-	"audio",
-	"icon"
-]);
-/**
-* A single attachment. Exactly one of `url` (remote source, most adapters
-* prefer this) or `bytes` (inline source; required for Pushover-style
-* bytes-only kinds) MUST be present — the degrade engine expresses a
-* url→bytes fetch as a `needsFetch` directive the adapter executes.
-*/
-var AttachmentSchema = z.object({
-	mediaType: AttachmentMediaTypeSchema,
-	url: z.string().optional(),
-	bytes: z.instanceof(Uint8Array).optional(),
-	mime: z.string().optional(),
-	name: z.string().optional()
-}).refine((a) => a.url !== void 0 || a.bytes !== void 0, { message: "Attachment requires either `url` or `bytes`" });
-var NotificationFormatSchema = z.enum([
-	"text",
-	"markdown",
-	"html"
-]);
-/** A single tap-through action button. */
-var NotificationActionSchema = z.object({
-	id: z.string(),
-	label: z.string(),
-	url: z.string().optional()
-});
+*  - `widget` — a Module-Federation widget the login page mounts (via
+*    `loadRemoteBundle`) for an in-page ceremony. `auth.listLoginMethods`
+*    stamps a public `bundleUrl` from `addonId` + `bundle`. Generic
+*    mechanism kept for future use; no shipped addon uses it on the login
+*    page (the passkey ceremony below runs natively in the shell instead).
+*
+*  - `passkey` — a declarative WebAuthn ceremony the shell renders
+*    natively (`@simplewebauthn/browser` lives in `addon-admin-ui`, not in
+*    a remotely-loaded bundle). Carries the addon's effective `rpId` /
+*    `origin` (from its `resolveRpID()` / `resolveOrigin()`) so the shell
+*    can gate visibility (IP-literal origin, hostname/rpId mismatch) WITHOUT
+*    fetching any remote code pre-auth. Contribution stays unconditional —
+*    enrollment state is never leaked pre-auth; visibility is a shell
+*    decision.
+*
+* Every contribution carries a `stage`:
+*  - `primary`        — shown on the first credentials screen (OIDC /
+*                       magic-link buttons; a future usernameless passkey).
+*  - `second-factor`  — shown AFTER the password leg, gated on the
+*                       returned `factors` (passkey-as-2FA today).
+*
+* `mount: skip` — the cap is read server-side by the core auth router
+* (`registry.getCollection('login-method')`), never mounted as its own
+* tRPC router.
+*/
+/** When a login method renders in the two-phase login flow. */
+var LoginStageEnum = z.enum(["primary", "second-factor"]);
 /**
-* The canonical notification. `body` is the only hard field (Apprise model).
-* `priority` is a 5-level ORDINAL (1=lowest … 3=normal(default) … 5=urgent),
-* NOT a fixed severity enum — each kind declares its own `caps.levels` and
-* the adapter maps this ordinal onto its native level. `level?` is an
-* optional kind-native level id (`emergency`, `silent`, …) that overrides
-* `priority` for that one target.
+* A declarative redirect button — the login page navigates to `startUrl`.
+* OIDC and magic-link contribute this; a future SSO addon does too.
 */
-var NotificationSchema = z.object({
-	body: z.string(),
-	title: z.string().optional(),
-	format: NotificationFormatSchema.default("text"),
-	priority: z.number().int().min(1).max(5).default(3),
-	level: z.string().optional(),
-	attachments: z.array(AttachmentSchema).optional(),
-	clickUrl: z.string().optional(),
-	actions: z.array(NotificationActionSchema).optional(),
-	sound: z.string().optional(),
-	ttl: z.number().optional(),
-	tag: z.string().optional(),
-	deviceId: z.number().optional(),
-	eventId: z.string().optional(),
-	metadata: z.record(z.string(), z.unknown()).optional()
-});
-/** One declared native severity/priority level for a kind. */
-var TargetKindLevelSchema = z.object({
+var RedirectLoginMethodSchema = z.object({
+	kind: z.literal("redirect"),
+	/** Stable id within the login-method set (e.g. `auth-oidc/google`). */
 	id: z.string(),
+	/** Operator-facing button label. */
 	label: z.string(),
-	/** Which canonical priority (1..5) this level maps to. `null` = qualitative-only. */
-	ordinal: z.number().int().min(1).max(5).nullable(),
-	flags: z.object({
-		critical: z.boolean().optional(),
-		silent: z.boolean().optional(),
-		noPush: z.boolean().optional()
-	}).optional(),
-	/** e.g. Pushover `emergency` requires `retry` / `expire`. */
-	requires: z.array(z.string()).optional(),
-	description: z.string().optional()
-});
-/** Attachment capabilities for a kind (drives the degrade engine + test panel). */
-var TargetKindAttachmentsCapsSchema = z.object({
-	mediaTypes: z.array(AttachmentMediaTypeSchema),
-	mode: z.enum([
-		"url",
-		"bytes",
-		"both"
-	]),
-	max: z.number().int().nonnegative(),
-	maxBytes: z.number().int().positive().optional()
-});
-/** The full capability block consulted before dispatch. */
-var TargetKindCapsSchema = z.object({
-	attachments: TargetKindAttachmentsCapsSchema,
-	/** Max action buttons (0 = none). */
-	actions: z.number().int().nonnegative(),
-	levels: z.array(TargetKindLevelSchema),
-	format: z.array(NotificationFormatSchema),
-	clickUrl: z.boolean(),
-	sound: z.boolean(),
-	ttl: z.boolean(),
-	bodyMaxLen: z.number().int().positive()
+	/** lucide-react icon name. */
+	icon: z.string().optional(),
+	/** Addon-owned HTTP route the button navigates to (GET). */
+	startUrl: z.string(),
+	stage: LoginStageEnum
 });
 /**
-* `configSchema` is a `ConfigUISchema` tree passed through to the admin
-* FormBuilder. Stored as `z.unknown()` at the cap seam (mirrors
-* `device-provider.getChildCreationSchema` `CreationSchemaOutputSchema`) —
-* the union is large and not meant for runtime validation here; the exported
-* `TargetKind` type re-tightens `configSchema` to `ConfigUISchema`.
+* A Module-Federation widget the login page mounts for an in-page
+* ceremony. `bundle` + `addonId` let `auth.listLoginMethods` stamp a
+* public `bundleUrl`; `remote` is the MF descriptor `loadRemoteBundle`
+* consumes. No `bundleUrl` here — it is server-stamped on the public
+* output so the addon never encodes the static-route scheme.
 */
-var ConfigSchemaPassthrough$1 = z.unknown();
-var TargetKindSchema = z.object({
-	kind: z.string(),
-	label: z.string(),
-	icon: z.string(),
-	/** Stamped by each provider so the concat-fanned catalog stays routable. */
+var WidgetLoginMethodSchema = z.object({
+	kind: z.literal("widget"),
+	/** Stable id within the login-method set (e.g. `auth-webauthn/passkey-login`). */
+	id: z.string(),
+	/** Owning addon id — drives the public bundle URL + the MF namespace. */
 	addonId: z.string(),
-	configSchema: ConfigSchemaPassthrough$1,
-	supportsDiscovery: z.boolean(),
-	caps: TargetKindCapsSchema
+	/** Bundle filename inside the addon's dist dir (`remoteEntry.js`). */
+	bundle: z.string(),
+	/** MF remote descriptor — `{ remoteName, exposedModule, componentKey }`. */
+	remote: WidgetRemoteSchema,
+	stage: LoginStageEnum
 });
 /**
-* A persisted target. `config` holds secrets; providers REDACT secret fields
-* (return a presence marker only) when serving `listTargets` — never
-* round-trip a stored secret to the UI.
+* A declarative WebAuthn ceremony the shell renders natively (no remote
+* code). Carries the addon's EFFECTIVE `rpId`/`origin` so the shell can
+* gate visibility (IP-literal origin, hostname/rpId mismatch) before ever
+* showing the button — the contribution itself stays unconditional.
 */
-var TargetSchema = z.object({
+var PasskeyLoginMethodSchema = z.object({
+	kind: z.literal("passkey"),
+	/** Stable id within the login-method set (e.g. `auth-webauthn/passkey-direct-login`). */
 	id: z.string(),
-	name: z.string(),
-	kind: z.string(),
-	addonId: z.string(),
-	enabled: z.boolean(),
-	config: z.record(z.string(), z.unknown())
-});
-/** A discovery-surfaced candidate (config is partial + non-secret). */
-var DiscoveredTargetSchema = z.object({
-	kind: z.string(),
-	suggestedName: z.string(),
-	config: z.record(z.string(), z.unknown())
-});
-/** The degrade engine's report — what was resolved / dropped / degraded. */
-var RenderedAsSchema = z.object({
-	level: z.string(),
-	format: NotificationFormatSchema,
-	attachmentsSent: z.number().int().nonnegative(),
-	actionsSent: z.number().int().nonnegative(),
-	truncated: z.boolean(),
-	dropped: z.array(z.string())
-});
-var SendResultSchema = z.object({
-	success: z.boolean(),
-	error: z.string().optional(),
-	renderedAs: RenderedAsSchema.optional()
+	/** Operator-facing button label. */
+	label: z.string(),
+	stage: LoginStageEnum,
+	/** Effective WebAuthn RP ID (`resolveRpID()`) — the shell gates visibility on it. */
+	rpId: z.string(),
+	/** Effective expected origin (`resolveOrigin()`), null when unconfigured. */
+	origin: z.string().nullable()
 });
-/** Same shape as SendResult — kept as a distinct name for the test panel. */
-var TestResultSchema = SendResultSchema;
-var notificationOutputCapability = {
-	name: "notification-output",
+/** One login-method contribution — redirect button, pre-auth widget, or native passkey ceremony. */
+var LoginMethodContributionSchema = z.discriminatedUnion("kind", [
+	RedirectLoginMethodSchema,
+	WidgetLoginMethodSchema,
+	PasskeyLoginMethodSchema
+]);
+var loginMethodCapability = {
+	name: "login-method",
 	scope: "system",
 	mode: "collection",
-	methods: {
-		listTargetKinds: method(z.object({}), z.array(TargetKindSchema)),
-		listTargets: method(z.object({}), z.array(TargetSchema)),
-		discoverTargets: method(z.object({
-			kind: z.string(),
-			config: z.record(z.string(), z.unknown()).optional()
-		}), z.array(DiscoveredTargetSchema)),
-		send: method(z.object({
-			targetId: z.string(),
-			notification: NotificationSchema
-		}), SendResultSchema, { kind: "mutation" }),
-		testTarget: method(z.object({
-			targetId: z.string(),
-			sample: NotificationSchema.optional()
-		}), TestResultSchema, { kind: "mutation" }),
-		upsertTarget: method(z.object({ target: TargetSchema }), TargetSchema, { kind: "mutation" }),
-		deleteTarget: method(z.object({ targetId: z.string() }), z.void(), { kind: "mutation" }),
-		setTargetEnabled: method(z.object({
-			targetId: z.string(),
-			enabled: z.boolean()
-		}), z.void(), { kind: "mutation" })
-	}
+	internal: true,
+	methods: { getLoginMethods: method(z.void(), z.array(LoginMethodContributionSchema).readonly()) },
+	/** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
+	mount: { kind: "skip" }
 };
 //#endregion
-//#region src/capabilities/llm-shared.ts
-/**
-* Shared LLM generate contracts — imported by BOTH `llm.cap.ts` (consumer
-* surface) and `llm-runtime.cap.ts` (node-side managed executor) so the two
-* caps stay wire-compatible without a circular cap→cap import.
-*
-* Errors are a discriminated-union RESULT, never thrown: the shape survives
-* every transport tier structurally, and failed calls still write usage rows.
-* Token counts only in v1 — no costUsd (operator decision, 2026-07-15).
-*/
-var LlmUsageSchema = z.object({
-	inputTokens: z.number(),
-	outputTokens: z.number()
+//#region src/capabilities/metrics-provider.cap.ts
+var CpuBreakdownSchema = z.object({
+	total: z.number(),
+	user: z.number(),
+	system: z.number(),
+	irq: z.number(),
+	nice: z.number(),
+	loadAvg: z.tuple([
+		z.number(),
+		z.number(),
+		z.number()
+	]),
+	cores: z.number()
 });
-var LlmErrorCodeSchema = z.enum([
-	"timeout",
-	"rate-limited",
-	"auth",
-	"refusal",
-	"bad-request",
-	"unavailable",
-	"no-profile",
-	"budget-exceeded",
-	"adapter-error"
-]);
-var LlmGenerateOkSchema = z.object({
-	ok: z.literal(true),
-	text: z.string(),
+var MemoryInfoSchema = z.object({
+	percent: z.number(),
+	totalBytes: z.number(),
+	usedBytes: z.number(),
+	availableBytes: z.number(),
+	swapUsedBytes: z.number(),
+	swapTotalBytes: z.number()
+});
+var DiskIoSnapshotSchema = z.object({
+	readBytes: z.number(),
+	writeBytes: z.number(),
+	readOps: z.number(),
+	writeOps: z.number(),
+	timestampMs: z.number()
+});
+var NetworkIoSnapshotSchema = z.object({
+	rxBytes: z.number(),
+	txBytes: z.number(),
+	rxPackets: z.number(),
+	txPackets: z.number(),
+	rxErrors: z.number(),
+	txErrors: z.number(),
+	timestampMs: z.number()
+});
+var MetricsGpuInfoSchema = z.object({
+	utilization: z.number(),
 	model: z.string(),
-	usage: LlmUsageSchema,
-	truncated: z.boolean(),
-	latencyMs: z.number()
+	memoryUsedBytes: z.number(),
+	memoryTotalBytes: z.number(),
+	temperature: z.number().nullable()
 });
-var LlmGenerateErrSchema = z.object({
-	ok: z.literal(false),
-	code: LlmErrorCodeSchema,
-	message: z.string(),
-	retryAfterMs: z.number().optional()
+var ProcessResourceInfoSchema = z.object({
+	openFds: z.number(),
+	threadCount: z.number(),
+	activeHandles: z.number(),
+	activeRequests: z.number()
 });
-var LlmGenerateResultSchema = z.discriminatedUnion("ok", [LlmGenerateOkSchema, LlmGenerateErrSchema]);
-/**
-* `Uint8Array` is the sanctioned binary convention — superjson + the UDS
-* MsgPack channel round-trip typed arrays (embedding-encoder.cap.ts:29,
-* notification-output.cap.ts:27-31 precedents).
-*/
-var LlmImageSchema = z.object({
-	bytes: z.instanceof(Uint8Array),
-	mimeType: z.string()
+var PressureAvgsSchema = z.object({
+	avg10: z.number(),
+	avg60: z.number(),
+	avg300: z.number()
 });
-var LlmGenerateBaseInputSchema = z.object({
-	/** Collection routing (the notification-output posture). */
-	addonId: z.string().optional(),
-	/** Explicit profile; else the resolution chain (spec §3). */
-	profileId: z.string().optional(),
-	/** MANDATORY usage tag: 'ai-summary', 'notifier-rules', 'adhoc-ui', … */
-	consumer: z.string(),
-	system: z.string().optional(),
-	/** v1: single-turn. `messages[]` is a v2 additive field. */
-	prompt: z.string(),
-	/** Structured output — adapter-mapped (response_format / forced tool / responseSchema). */
-	jsonSchema: z.record(z.string(), z.unknown()).optional(),
-	/** Per-call override of the profile default. */
-	maxTokens: z.number().int().positive().optional(),
-	temperature: z.number().optional()
+var PressureInfoSchema = z.object({
+	some: PressureAvgsSchema,
+	full: PressureAvgsSchema.nullable()
 });
-//#endregion
-//#region src/capabilities/llm-runtime.cap.ts
-/**
-* `llm-runtime` — node-side managed llama.cpp executor (spec §4). Registered
-* on EVERY node where `addon-ai` is installed; the hub `llm` provider reaches
-* a specific node's runtime with `nodePin(profile.runtime.nodeId)` — normal
-* cap routing, zero bespoke plumbing. `internal: true`: the operator reaches
-* this only through the `llm` cap's methods.
-*
-* One running llama-server child per node in v1 (models are RAM-heavy).
-* Resource ceiling = llama-server flags + idleStopMinutes ONLY (no RSS
-* watchdog — operator decision #3).
-*/
-var ManagedModelRefSchema = z.discriminatedUnion("kind", [
-	z.object({
-		kind: z.literal("catalog"),
-		catalogId: z.string()
-	}),
-	z.object({
-		kind: z.literal("url"),
-		url: z.string(),
-		sha256: z.string().optional()
+var SystemResourceSnapshotSchema = z.object({
+	cpu: CpuBreakdownSchema,
+	memory: MemoryInfoSchema,
+	gpu: MetricsGpuInfoSchema.nullable(),
+	network: NetworkIoSnapshotSchema,
+	disk: DiskIoSnapshotSchema,
+	pressure: z.object({
+		cpu: PressureInfoSchema.nullable(),
+		memory: PressureInfoSchema.nullable(),
+		io: PressureInfoSchema.nullable()
 	}),
-	z.object({
-		kind: z.literal("path"),
-		path: z.string()
-	})
-]);
-var ManagedRuntimeConfigSchema = z.object({
-	/** WHERE the runtime lives — hub or any agent. */
-	nodeId: z.string(),
-	/** Closed for v1; 'ollama' is a v2 candidate. */
-	engine: z.enum(["llama-cpp"]),
-	model: ManagedModelRefSchema,
-	contextSize: z.number().int().default(4096),
-	/** 0 = CPU-only. */
-	gpuLayers: z.number().int().default(0),
-	/** Default: cpus-2, clamped ≥1 (resolved node-side). */
-	threads: z.number().int().optional(),
-	/** Concurrent slots. */
-	parallel: z.number().int().default(1),
-	/** Else lazy: first generate boots it. */
-	autoStart: z.boolean().default(false),
-	/** 0 = never; frees RAM after quiet periods. */
-	idleStopMinutes: z.number().int().default(30)
+	process: ProcessResourceInfoSchema,
+	cpuTemperature: z.number().nullable(),
+	timestampMs: z.number()
 });
-var LlmRuntimeStatusSchema = z.object({
-	/** Status is ALWAYS node-qualified. */
+var DiskSpaceInfoSchema = z.object({
+	path: z.string(),
+	totalBytes: z.number(),
+	usedBytes: z.number(),
+	availableBytes: z.number(),
+	percent: z.number()
+});
+var PidResourceStatsSchema = z.object({
+	pid: z.number(),
+	cpu: z.number(),
+	memory: z.number(),
+	/**
+	* Private (anonymous) resident bytes — the per-process V8 heap + native
+	* allocations NOT shared with other processes (Linux RssAnon). This is the
+	* "real" per-runner cost; summing it across runners is meaningful, unlike
+	* `memory` (RSS), which double-counts the shared mmap'd framework code.
+	* Undefined where /proc is unavailable (e.g. macOS).
+	*/
+	privateBytes: z.number().optional(),
+	/**
+	* Shared file-backed resident bytes (Linux RssFile) — mmap'd framework/lib
+	* code shared copy-on-write across runners. Undefined on macOS.
+	*/
+	sharedBytes: z.number().optional()
+});
+var AddonInstanceSchema = z.object({
+	addonId: z.string(),
 	nodeId: z.string(),
+	role: z.enum(["hub", "worker"]),
+	pid: z.number(),
 	state: z.enum([
-		"stopped",
-		"downloading",
 		"starting",
-		"ready",
-		"crashed",
-		"failed"
+		"running",
+		"stopping",
+		"stopped",
+		"crashed"
 	]),
-	pid: z.number().optional(),
-	port: z.number().optional(),
-	modelPath: z.string().optional(),
-	modelId: z.string().optional(),
-	downloadProgress: z.number().min(0).max(1).optional(),
-	lastError: z.string().optional(),
-	crashesInWindow: z.number(),
-	/** Child RSS (sampled best-effort). */
-	memoryBytes: z.number().optional(),
-	vramBytes: z.number().optional()
+	uptimeSec: z.number()
 });
-var LlmNodeModelSchema = z.object({
-	file: z.string(),
-	sizeBytes: z.number(),
-	catalogId: z.string().optional(),
-	installedAt: z.number().optional()
+var NodeProcessSchema = z.object({
+	pid: z.number(),
+	ppid: z.number(),
+	pgid: z.number(),
+	classification: z.enum([
+		"root",
+		"managed",
+		"system",
+		"ghost"
+	]),
+	/** `$process` addon binding when `managed`, else null. */
+	addonId: z.string().nullable(),
+	/** Kernel-reported nodeId when the process is a known agent/worker. */
+	nodeId: z.string().nullable(),
+	/** Truncated command line. */
+	command: z.string(),
+	cpuPercent: z.number(),
+	memoryRssBytes: z.number(),
+	/** Wall-clock uptime (seconds). Parsed from `ps etime`. */
+	uptimeSec: z.number(),
+	/** True when ancestor walk reaches `ppid=1` (reparented to init/launchd). */
+	orphaned: z.boolean()
 });
-var LlmRuntimeDiskUsageSchema = z.object({
-	nodeId: z.string(),
-	modelsBytes: z.number(),
-	freeBytes: z.number().optional()
+var KillProcessInputSchema = z.object({
+	pid: z.number(),
+	/** Force = SIGKILL. Default is SIGTERM. */
+	force: z.boolean().optional()
 });
-var LlmRuntimeCompleteInputSchema = LlmGenerateBaseInputSchema.extend({
-	images: z.array(LlmImageSchema).optional(),
-	runtime: ManagedRuntimeConfigSchema,
-	/** The managed profile's timeout, threaded by the hub provider. */
-	timeoutMs: z.number().int().positive().optional()
+var KillProcessResultSchema = z.object({
+	success: z.boolean(),
+	reason: z.string().optional(),
+	signal: z.enum(["SIGTERM", "SIGKILL"]).optional()
 });
-var llmRuntimeCapability = {
-	name: "llm-runtime",
+var DumpHeapSnapshotInputSchema = z.object({ 
+/** The addon whose runner should dump a heap snapshot. */
+addonId: z.string() });
+var DumpHeapSnapshotResultSchema = z.object({
+	success: z.boolean(),
+	/** Path of the written .heapsnapshot inside the runner's container/host. */
+	path: z.string().optional(),
+	/** Process pid that was signalled. */
+	pid: z.number().optional(),
+	reason: z.string().optional()
+});
+var SystemMetricsSchema = z.object({
+	cpuPercent: z.number(),
+	memoryPercent: z.number(),
+	memoryUsedMB: z.number(),
+	memoryTotalMB: z.number(),
+	diskPercent: z.number().optional(),
+	temperature: z.number().optional(),
+	gpuPercent: z.number().optional(),
+	gpuMemoryPercent: z.number().optional()
+});
+var metricsProviderCapability = {
+	name: "metrics-provider",
 	scope: "system",
 	mode: "singleton",
-	internal: true,
 	methods: {
-		complete: method(LlmRuntimeCompleteInputSchema, LlmGenerateResultSchema, { kind: "mutation" }),
-		ensureStarted: method(z.object({ runtime: ManagedRuntimeConfigSchema }), LlmRuntimeStatusSchema, {
-			kind: "mutation",
-			auth: "admin"
-		}),
-		stop: method(z.object({}), z.void(), {
-			kind: "mutation",
-			auth: "admin"
-		}),
-		status: method(z.object({}), LlmRuntimeStatusSchema),
-		installModel: method(z.object({ model: ManagedModelRefSchema }), z.void(), {
+		/** Fresh, full system snapshot (triggers OS-level collection). */
+		collectSnapshot: method(z.void(), SystemResourceSnapshotSchema),
+		/** Most recent cached snapshot from the background sampler, or null pre-first-sample. */
+		getCached: method(z.void(), SystemResourceSnapshotSchema.nullable()),
+		/** Light-weight cached summary for heartbeats and list views. */
+		getCurrent: method(z.void(), SystemMetricsSchema),
+		/** Disk space for the given mount/path. */
+		getDiskSpace: method(z.object({ dirPath: z.string() }), DiskSpaceInfoSchema),
+		/** GPU info (null if unavailable). */
+		getGpuInfo: method(z.void(), MetricsGpuInfoSchema.nullable()),
+		/** CPU temperature in °C (null if unavailable). */
+		getCpuTemperature: method(z.void(), z.number().nullable()),
+		/** Per-PID resource stats. Missing/dead PIDs are omitted from the result. */
+		getProcessStats: method(z.object({ pids: z.array(z.number()) }), z.array(PidResourceStatsSchema)),
+		/**
+		* List addon instances known to this node — one entry per forked worker
+		* plus a synthetic 'hub' entry representing the local hub process.
+		* Used by benchmarks/observability to detect whether a given addon runs
+		* in its own process (measurable independently) or inline with the hub.
+		*/
+		listAddonInstances: method(z.void(), z.array(AddonInstanceSchema).readonly()),
+		/**
+		* Resource stats for the process hosting the given addon.
+		* Returns null when the addon runs in-process on the hub (can't measure
+		* independently — caller should detect via listAddonInstances). Returns
+		* hub process stats for addonId '$hub'.
+		*/
+		getAddonStats: method(z.object({ addonId: z.string() }), PidResourceStatsSchema.nullable()),
+		/**
+		* Snapshot of every camstack-related process on this node with a
+		* ghost/managed/root classification. Powers the Cluster → Agent →
+		* Processes tab: cross-references `$process.list` against a `ps` scan
+		* so orphaned trees (PPID=1) or unknown children show up as `ghost`
+		* and can be killed from the UI.
+		*/
+		listNodeProcesses: method(z.void(), z.array(NodeProcessSchema).readonly()),
+		/**
+		* Send SIGTERM (or SIGKILL when `force`) to a pid inside this node's
+		* process tree. The provider refuses pids that aren't in the live
+		* `listNodeProcesses()` snapshot — callers can't use this endpoint
+		* to kill arbitrary system processes.
+		*/
+		killProcess: method(KillProcessInputSchema, KillProcessResultSchema, {
 			kind: "mutation",
 			auth: "admin"
 		}),
-		deleteModel: method(z.object({ file: z.string() }), z.void(), {
+		/**
+		* Tell the addon's forked runner to write a V8 heap snapshot to disk (via
+		* SIGUSR2 — the runner's diagnostic handler). Also logs its
+		* `process.memoryUsage()` + heap-space breakdown. Refuses pids not in the
+		* live `listNodeProcesses()` snapshot. Use for deep per-addon memory
+		* attribution; copy the returned path off the node to analyze.
+		*/
+		dumpHeapSnapshot: method(DumpHeapSnapshotInputSchema, DumpHeapSnapshotResultSchema, {
 			kind: "mutation",
 			auth: "admin"
-		}),
-		listLocalModels: method(z.object({}), z.array(LlmNodeModelSchema)),
-		getDiskUsage: method(z.object({}), LlmRuntimeDiskUsageSchema)
+		})
 	}
 };
 //#endregion
-//#region src/capabilities/llm.cap.ts
+//#region src/capabilities/model-convert.cap.ts
+var ModelConvertInputSchema = z.object({
+	sourceUrl: z.string(),
+	metadata: ModelConvertMetadataSchema,
+	targets: z.array(ConvertTargetSchema).min(1).readonly(),
+	calibrationRef: z.string().optional(),
+	sessionId: z.string().optional()
+});
+var modelConvertCapability = {
+	name: "model-convert",
+	scope: "system",
+	mode: "singleton",
+	internal: true,
+	methods: { convert: method(ModelConvertInputSchema, ConvertResultSchema, {
+		kind: "mutation",
+		auth: "admin",
+		timeoutMs: 6e5
+	}) }
+};
+//#endregion
+//#region src/capabilities/model-distributor.cap.ts
 /**
-* `llm` — consumer-facing LLM surface (spec §1-§3). Collection-mode: array
-* methods concat-fan across providers; single-row methods route to ONE
-* provider by the `addonId` in the call input (the notification-output
-* posture, notification-output.cap.ts:215-250). Provided by `addon-ai`
-* (hub-placed); the cap stays open for future providers.
+* `model-distributor` — singleton, hub-resident. Pushes a model FORMAT that is
+* already present on the hub's `/data/models` to a target agent node's
+* `/data/models`, sha256-verified, reusing the agent-pull machinery
+* (DeployStageRegistry + the one-time-token bundle route + the agent's
+* `fetchBundleFromHub`). Its provider is built in `server/backend` because it
+* needs the Moleculer broker + the deploy-stage registry, which a forked addon
+* can't reach. `addon-model-studio` drives it via `ctx.api` and owns the
+* per-node availability map.
+*/
+var ModelDistributeInputSchema = z.object({
+	nodeId: z.string(),
+	modelId: z.string(),
+	format: z.enum(MODEL_FORMATS),
+	entry: ModelCatalogEntrySchema
+});
+var ModelDistributeResultSchema = z.object({
+	ok: z.boolean(),
+	/** sha256 of the staged tarball (empty for a hub-local no-op). */
+	sha256: z.string(),
+	bytes: z.number(),
+	/** The target node's modelsDir the artifact landed in. */
+	path: z.string()
+});
+var modelDistributorCapability = {
+	name: "model-distributor",
+	scope: "system",
+	mode: "singleton",
+	internal: true,
+	methods: { distributeModel: method(ModelDistributeInputSchema, ModelDistributeResultSchema, {
+		kind: "mutation",
+		auth: "admin"
+	}) }
+};
+//#endregion
+//#region src/capabilities/mqtt-broker.cap.ts
+/**
+* `mqtt-broker` — broker-registry cap.
 *
-* Profiles are ROWS (data), not addons: one row = one usable model endpoint.
-* `apiKey` is a password field — providers REDACT it on read and merge on
-* write; a stored key NEVER round-trips to a client.
+* NOT a pub/sub proxy. The cap exposes (a) a registry of configured
+* MQTT brokers (external + optionally an embedded `aedes`-backed one)
+* and (b) the connection details a consumer addon needs to spin up
+* its OWN `mqtt.js` client.
+*
+* Why: pub/sub routing over the system event-bus loses fidelity
+* (callback shape, QoS guarantees, will/retain semantics) and adds
+* refcount bookkeeping that addons would rather own themselves. The
+* canonical consumer (`addon-export-ha-mqtt`) needs raw `mqtt.js`
+* features anyway — give it the connection config, get out of the way.
+*
+* Consumer flow:
+*   const cfg = await ctx.api.mqttBroker.getBrokerConfig({ id })
+*   const client = mqtt.connect(cfg.url, { username: cfg.username, … })
+*   client.subscribe('zigbee2mqtt/+')
+*
+* Collection mode: multiple brokers (e.g. one local mosquitto + one
+* cloud bridge). The "embedded" entry (when present) is just another
+* broker in the registry — its lifecycle is owned by the addon that
+* spawned it.
 */
-var LlmProfileKindSchema = z.enum([
-	"openai-compatible",
-	"openai",
-	"anthropic",
-	"google",
-	"managed-local"
+var BrokerKindSchema = z.enum(["external", "embedded"]);
+/**
+* Broker live-probe status.
+*
+* - `connected` — last probe completed a clean CONNACK
+* - `disconnected` — no probe has run yet (cold cache)
+* - `auth-failed` — CONNACK refused with auth error (RC 4 / 5)
+* - `unreachable` — TCP connect timed out / refused
+* - `tls-error` — TLS handshake failed (cert / SNI / cipher)
+*/
+var BrokerStatusSchema$1 = z.enum([
+	"connected",
+	"disconnected",
+	"auth-failed",
+	"unreachable",
+	"tls-error"
 ]);
-var LlmProfileSchema = z.object({
+var BrokerInfoSchema = z.object({
 	id: z.string(),
 	name: z.string(),
-	kind: LlmProfileKindSchema,
-	/** Stamped by the provider — keeps the fanned catalog routable. */
-	addonId: z.string(),
-	enabled: z.boolean(),
-	/** Vendor model id, or the managed runtime's loaded model. */
-	model: z.string(),
-	/** Required for openai-compatible; override for cloud kinds. */
-	baseUrl: z.string().optional(),
-	/** ConfigUISchema type:'password' — never round-trips (spec §5). */
-	apiKey: z.string().optional(),
-	supportsVision: z.boolean(),
-	temperature: z.number().min(0).max(2).optional(),
-	maxTokens: z.number().int().positive().optional(),
-	timeoutMs: z.number().int().positive().default(6e4),
-	extraHeaders: z.record(z.string(), z.string()).optional(),
-	/** kind === 'managed-local' only (spec §4). */
-	runtime: ManagedRuntimeConfigSchema.optional()
+	url: z.string(),
+	kind: BrokerKindSchema,
+	status: BrokerStatusSchema$1,
+	latencyMs: z.number().nullable(),
+	error: z.string().optional(),
+	/** Embedded brokers only: number of MQTT clients currently connected. */
+	connectedClients: z.number().int().nonnegative().optional(),
+	/** Epoch ms of the last live probe (external) or aedes snapshot (embedded). */
+	lastCheckedAt: z.number().optional()
 });
-/** ConfigUISchema tree passed through untyped on the wire (the
-*  notification-output `ConfigSchemaPassthrough` precedent at
-*  notification-output.cap.ts:151); the exported TS type re-tightens it. */
-var ConfigSchemaPassthrough = z.unknown();
-var LlmProfileKindDescriptorSchema = z.object({
-	kind: LlmProfileKindSchema,
-	label: z.string(),
-	icon: z.string(),
-	/** Stamped by each provider so the concat-fanned catalog stays routable. */
-	addonId: z.string(),
-	configSchema: ConfigSchemaPassthrough
+/**
+* Connection details — what a consumer needs to call
+* `mqtt.connect(url, options)`. We split URL + credentials so the
+* consumer can pass them as `mqtt.connect(url, { username, password })`
+* instead of stuffing creds into the URL (which leaks them into logs).
+*/
+var BrokerConnectionDetailsSchema = z.object({
+	url: z.string(),
+	username: z.string().optional(),
+	password: z.string().optional(),
+	/**
+	* Suggested prefix for `clientId`. Each consumer should suffix this
+	* with its own discriminator (addon id, instance id) so reconnects
+	* don't kick each other off (MQTT spec: clientId must be unique per
+	* broker).
+	*/
+	clientIdPrefix: z.string().optional()
 });
-var LlmDefaultSelectorSchema = z.union([z.object({ consumer: z.string() }), z.object({ purpose: z.enum(["text", "vision"]) })]);
-var LlmDefaultSchema = z.object({
-	selector: LlmDefaultSelectorSchema,
-	profileId: z.string()
+var AddBrokerInputSchema = z.object({
+	name: z.string().min(1),
+	url: z.string().regex(/^(mqtt|mqtts|ws|wss):\/\//, "URL must start with mqtt(s):// or ws(s)://"),
+	username: z.string().optional(),
+	password: z.string().optional(),
+	clientIdPrefix: z.string().optional()
 });
-/** Server-side rollup row — getUsage never dumps raw call rows (spec §6). */
-var LlmUsageRollupSchema = z.object({
-	day: z.string(),
-	consumer: z.string(),
-	profileId: z.string(),
-	calls: z.number(),
-	okCalls: z.number(),
-	errorCalls: z.number(),
-	inputTokens: z.number(),
-	outputTokens: z.number(),
-	avgLatencyMs: z.number()
+var AddBrokerResultSchema = z.object({ id: z.string() });
+var IdInputSchema = z.object({ id: z.string() });
+var TestResultSchema$1 = z.discriminatedUnion("ok", [z.object({
+	ok: z.literal(true),
+	latencyMs: z.number()
+}), z.object({
+	ok: z.literal(false),
+	error: z.string()
+})]);
+var StartEmbeddedInputSchema = z.object({
+	port: z.number().int().min(1).max(65535).default(1883),
+	/** Allow anonymous connect (no username/password). Default: false. */
+	allowAnonymous: z.boolean().default(false),
+	/** Optional shared username/password for clients. */
+	username: z.string().optional(),
+	password: z.string().optional()
+});
+var StartEmbeddedResultSchema = z.object({
+	id: z.string(),
+	url: z.string()
+});
+var StatusSchema = z.object({
+	brokerCount: z.number(),
+	embeddedRunning: z.boolean()
+});
+var mqttBrokerCapability = {
+	name: "mqtt-broker",
+	scope: "system",
+	mode: "collection",
+	providerKind: "broker",
+	status: {
+		schema: StatusSchema,
+		kind: "poll"
+	},
+	methods: {
+		listBrokers: method(z.void(), z.array(BrokerInfoSchema)),
+		getBrokerConfig: method(IdInputSchema, BrokerConnectionDetailsSchema),
+		addBroker: method(AddBrokerInputSchema, AddBrokerResultSchema, { kind: "mutation" }),
+		removeBroker: method(IdInputSchema, z.void(), { kind: "mutation" }),
+		testConnection: method(IdInputSchema, TestResultSchema$1, { kind: "mutation" }),
+		startEmbeddedBroker: method(StartEmbeddedInputSchema, StartEmbeddedResultSchema, { kind: "mutation" }),
+		stopEmbeddedBroker: method(IdInputSchema, z.void(), { kind: "mutation" }),
+		getStatus: method(z.void(), StatusSchema)
+	}
+};
+//#endregion
+//#region src/capabilities/network-access.cap.ts
+var NetworkEndpointSchema = z.object({
+	url: z.string(),
+	hostname: z.string(),
+	port: z.number(),
+	protocol: z.enum(["http", "https"])
+});
+var NetworkAccessStatusSchema = z.object({
+	connected: z.boolean(),
+	endpoint: NetworkEndpointSchema.nullable(),
+	error: z.string().optional()
+});
+/**
+* Optional, richer endpoint shape returned by providers that expose
+* MORE than one ingress concurrently (Tailscale Ingress with mixed
+* serve+funnel rules, future ngrok multi-tunnel, …). Each entry carries
+* the originating provider config (mode + sourcePort) so the
+* orchestrator UI can label rows distinctly. Providers that expose only
+* one endpoint just omit `listEndpoints` from their provider impl.
+*/
+var NetworkEndpointEntrySchema = NetworkEndpointSchema.extend({
+	/**
+	* Stable id within the provider — typically `<mode>-<sourcePort>` so
+	* the orchestrator can dedupe across `listEndpoints` polls.
+	*/
+	id: z.string(),
+	/** Operator-facing label (mirrors `MeshEndpoint.label`). */
+	label: z.string(),
+	/** Optional provider-specific mode tag, used for icon/colour in admin UI. */
+	mode: z.string().optional(),
+	/** Originating local port the ingress fronts (informational). */
+	sourcePort: z.number().optional()
+});
+var networkAccessCapability = {
+	name: "network-access",
+	scope: "system",
+	mode: "collection",
+	providerKind: "ingress",
+	methods: {
+		start: method(z.void(), NetworkEndpointSchema, { kind: "mutation" }),
+		stop: method(z.void(), z.void(), { kind: "mutation" }),
+		getEndpoint: method(z.void(), NetworkEndpointSchema.nullable()),
+		getStatus: method(z.void(), NetworkAccessStatusSchema),
+		/**
+		* Enumerate every active ingress entry. Providers that expose only a
+		* single endpoint may omit this method; callers fall back to
+		* `getEndpoint()` in that case.
+		*/
+		listEndpoints: method(z.void(), z.array(NetworkEndpointEntrySchema).readonly())
+	}
+};
+//#endregion
+//#region src/capabilities/notification-output.cap.ts
+/**
+* notification-output — canonical, capability-gated notification delivery.
+*
+* Apprise-derived model (see
+* `docs/superpowers/specs/2026-07-03-notification-output-notifier-matrix.md`):
+* callers emit ONE canonical `Notification`; each provider declares a
+* per-kind capability descriptor (`TargetKind`), and the pure degrade
+* engine (`@camstack/types` `prepareNotification`) transcodes / degrades the
+* message to what the kind supports — callers never special-case a service.
+*
+* DESIGN DECISIONS (locked):
+*  - Target CRUD lives on THIS cap (`upsertTarget` / `deleteTarget` /
+*    `setTargetEnabled`), each provider persisting via the `settings-store`
+*    cap. Rationale: the admin UI needs one uniform surface across the
+*    notifiers addon AND the HA addon; the addon-`globalSettingsSchema`-array
+*    alternative would fork the UI per addon and cannot host the
+*    discovery→adopt flow.
+*  - `listTargetKinds` / `listTargets` / `discoverTargets` return arrays →
+*    the generated cap-mount auto-`concatCollection`-fans them across every
+*    registered provider (notifiers addon + HA addon) so one catalog is
+*    routable. `send` / `testTarget` / CRUD route to ONE provider by the
+*    `addonId` the generated collection router extracts from the call input.
+*  - `Attachment.bytes` is `Uint8Array`. Transport-safe: superjson (the tRPC
+*    transformer) + UDS MsgPack both round-trip typed arrays — already used by
+*    `storage` / `storage-provider` / `recording` caps over the same path. No
+*    base64 fallback needed.
+*
+* TODO (deferred, closed-set change — separate decision): add
+* `providerKind: 'notify'` so notification providers surface on the unified
+* admin "Integrations" page.
+*/
+/**
+* Zentik-derived typed-media enum — the superset across every kind. Each
+* adapter picks what it supports and the degrade engine filters the rest.
+*/
+var AttachmentMediaTypeSchema = z.enum([
+	"image",
+	"video",
+	"gif",
+	"audio",
+	"icon"
+]);
+/**
+* A single attachment. Exactly one of `url` (remote source, most adapters
+* prefer this) or `bytes` (inline source; required for Pushover-style
+* bytes-only kinds) MUST be present — the degrade engine expresses a
+* url→bytes fetch as a `needsFetch` directive the adapter executes.
+*/
+var AttachmentSchema = z.object({
+	mediaType: AttachmentMediaTypeSchema,
+	url: z.string().optional(),
+	bytes: z.instanceof(Uint8Array).optional(),
+	mime: z.string().optional(),
+	name: z.string().optional()
+}).refine((a) => a.url !== void 0 || a.bytes !== void 0, { message: "Attachment requires either `url` or `bytes`" });
+var NotificationFormatSchema = z.enum([
+	"text",
+	"markdown",
+	"html"
+]);
+/** A single tap-through action button. */
+var NotificationActionSchema = z.object({
+	id: z.string(),
+	label: z.string(),
+	url: z.string().optional()
+});
+/**
+* The canonical notification. `body` is the only hard field (Apprise model).
+* `priority` is a 5-level ORDINAL (1=lowest … 3=normal(default) … 5=urgent),
+* NOT a fixed severity enum — each kind declares its own `caps.levels` and
+* the adapter maps this ordinal onto its native level. `level?` is an
+* optional kind-native level id (`emergency`, `silent`, …) that overrides
+* `priority` for that one target.
+*/
+var NotificationSchema = z.object({
+	body: z.string(),
+	title: z.string().optional(),
+	format: NotificationFormatSchema.default("text"),
+	priority: z.number().int().min(1).max(5).default(3),
+	level: z.string().optional(),
+	attachments: z.array(AttachmentSchema).optional(),
+	clickUrl: z.string().optional(),
+	actions: z.array(NotificationActionSchema).optional(),
+	sound: z.string().optional(),
+	ttl: z.number().optional(),
+	tag: z.string().optional(),
+	deviceId: z.number().optional(),
+	eventId: z.string().optional(),
+	metadata: z.record(z.string(), z.unknown()).optional()
+});
+/** One declared native severity/priority level for a kind. */
+var TargetKindLevelSchema = z.object({
+	id: z.string(),
+	label: z.string(),
+	/** Which canonical priority (1..5) this level maps to. `null` = qualitative-only. */
+	ordinal: z.number().int().min(1).max(5).nullable(),
+	flags: z.object({
+		critical: z.boolean().optional(),
+		silent: z.boolean().optional(),
+		noPush: z.boolean().optional()
+	}).optional(),
+	/** e.g. Pushover `emergency` requires `retry` / `expire`. */
+	requires: z.array(z.string()).optional(),
+	description: z.string().optional()
+});
+/** Attachment capabilities for a kind (drives the degrade engine + test panel). */
+var TargetKindAttachmentsCapsSchema = z.object({
+	mediaTypes: z.array(AttachmentMediaTypeSchema),
+	mode: z.enum([
+		"url",
+		"bytes",
+		"both"
+	]),
+	max: z.number().int().nonnegative(),
+	maxBytes: z.number().int().positive().optional()
+});
+/** The full capability block consulted before dispatch. */
+var TargetKindCapsSchema = z.object({
+	attachments: TargetKindAttachmentsCapsSchema,
+	/** Max action buttons (0 = none). */
+	actions: z.number().int().nonnegative(),
+	levels: z.array(TargetKindLevelSchema),
+	format: z.array(NotificationFormatSchema),
+	clickUrl: z.boolean(),
+	sound: z.boolean(),
+	ttl: z.boolean(),
+	bodyMaxLen: z.number().int().positive()
+});
+/**
+* `configSchema` is a `ConfigUISchema` tree passed through to the admin
+* FormBuilder. Stored as `z.unknown()` at the cap seam (mirrors
+* `device-provider.getChildCreationSchema` `CreationSchemaOutputSchema`) —
+* the union is large and not meant for runtime validation here; the exported
+* `TargetKind` type re-tightens `configSchema` to `ConfigUISchema`.
+*/
+var ConfigSchemaPassthrough = z.unknown();
+var TargetKindSchema = z.object({
+	kind: z.string(),
+	label: z.string(),
+	icon: z.string(),
+	/** Stamped by each provider so the concat-fanned catalog stays routable. */
+	addonId: z.string(),
+	configSchema: ConfigSchemaPassthrough,
+	supportsDiscovery: z.boolean(),
+	caps: TargetKindCapsSchema
+});
+/**
+* A persisted target. `config` holds secrets; providers REDACT secret fields
+* (return a presence marker only) when serving `listTargets` — never
+* round-trip a stored secret to the UI.
+*/
+var TargetSchema = z.object({
+	id: z.string(),
+	name: z.string(),
+	kind: z.string(),
+	addonId: z.string(),
+	enabled: z.boolean(),
+	config: z.record(z.string(), z.unknown())
+});
+/** A discovery-surfaced candidate (config is partial + non-secret). */
+var DiscoveredTargetSchema = z.object({
+	kind: z.string(),
+	suggestedName: z.string(),
+	config: z.record(z.string(), z.unknown())
+});
+/** The degrade engine's report — what was resolved / dropped / degraded. */
+var RenderedAsSchema = z.object({
+	level: z.string(),
+	format: NotificationFormatSchema,
+	attachmentsSent: z.number().int().nonnegative(),
+	actionsSent: z.number().int().nonnegative(),
+	truncated: z.boolean(),
+	dropped: z.array(z.string())
+});
+var SendResultSchema = z.object({
+	success: z.boolean(),
+	error: z.string().optional(),
+	renderedAs: RenderedAsSchema.optional()
+});
+/** Same shape as SendResult — kept as a distinct name for the test panel. */
+var TestResultSchema = SendResultSchema;
+var notificationOutputCapability = {
+	name: "notification-output",
+	scope: "system",
+	mode: "collection",
+	methods: {
+		listTargetKinds: method(z.object({}), z.array(TargetKindSchema)),
+		listTargets: method(z.object({}), z.array(TargetSchema)),
+		discoverTargets: method(z.object({
+			kind: z.string(),
+			config: z.record(z.string(), z.unknown()).optional()
+		}), z.array(DiscoveredTargetSchema)),
+		send: method(z.object({
+			targetId: z.string(),
+			notification: NotificationSchema
+		}), SendResultSchema, { kind: "mutation" }),
+		testTarget: method(z.object({
+			targetId: z.string(),
+			sample: NotificationSchema.optional()
+		}), TestResultSchema, { kind: "mutation" }),
+		upsertTarget: method(z.object({ target: TargetSchema }), TargetSchema, { kind: "mutation" }),
+		deleteTarget: method(z.object({ targetId: z.string() }), z.void(), { kind: "mutation" }),
+		setTargetEnabled: method(z.object({
+			targetId: z.string(),
+			enabled: z.boolean()
+		}), z.void(), { kind: "mutation" })
+	}
+};
+//#endregion
+//#region src/capabilities/notification-rules.cap.ts
+/**
+* notification-rules — the Notification Center rule surface (P1 core).
+*
+* Spec: `docs/superpowers/specs/2026-07-22-notification-center-requirements.md`
+* (operator decisions D-1/D-2/D-3 are binding):
+*
+*  - D-2: rule EVALUATION lives in `addon-post-analysis` (the
+*    `notification-center` module), hooked on the durable persistence
+*    moments (object-event insert, TrackCloser.closeExpired) with a
+*    persisted outbox + retry — never the lossy telemetry bus (D8).
+*  - D-3: urgency belongs to the RULE. `delivery: 'immediate'` fires on the
+*    FIRST persisted detection matching the conditions (per-track dedup,
+*    `maxPerTrack` fixed at 1 — see {@link NC_MAX_PER_TRACK_IMMEDIATE});
+*    `delivery: 'track-end'` evaluates the finalized track record at close.
+*  - DISPATCH stays behind `notification-output` (rules reference targets
+*    by id; per-backend params are a passthrough blob capped by the
+*    target kind's own caps/degrade engine).
+*
+* P1 scope: admin-authored rules only (`createdBy` stamped from the
+* server-injected caller identity — the first `caller: 'required'`
+* adopter). The P1 condition subset is: devices, classes(+exclude),
+* minConfidence, admin zones (any/all + exclude), weekly schedule
+* windows, and the optional label/identity/plate matchers. User rules,
+* private zones, per-recipient fan-out and the wider condition table are
+* P2+ (see spec §7).
+*
+* All schemas here are the single source of truth — `NcRule` etc. are
+* `z.infer` exports; no duplicate interfaces (the advanced-notifier
+* schema/interface drift is explicitly not repeated).
+*/
+/**
+* D-3: the trigger/urgency of a rule — which persistence moment evaluates it.
+* The value maps 1:1 onto the evaluated record kind:
+*  - `immediate`     ↔ object-event persist (lowest-latency detection burst)
+*  - `track-end`     ↔ TrackCloser.closeExpired (finalized track record)
+*  - `device-event`  ↔ SensorEventStore insert (doorbell press / sensor state
+*                       change of a LINKED device, one row per linked camera)
+*  - `package-event` ↔ PackageDropDetector object-event insert (a `package`
+*                       delivery / pick-up)
+*
+* `immediate`/`track-end` carry the D-3 urgency semantics; `device-event`/
+* `package-event` are pure trigger kinds (no urgency dimension). Extending
+* this one field keeps the schema additive — a rule still declares exactly
+* one trigger.
+*/
+var NcDeliverySchema = z.enum([
+	"immediate",
+	"track-end",
+	"device-event",
+	"package-event"
+]);
+/**
+* `maxPerTrack` for `immediate` rules is FIXED at 1 (D-3): a single track
+* fires an immediate rule at most once, enforced durably by the outbox
+* unique key `(ruleId, trackId, targetId)`. Not a rule field in P1.
+*/
+var NC_MAX_PER_TRACK_IMMEDIATE = 1;
+/** One weekly activation window. `startMinute > endMinute` crosses midnight. */
+var NcScheduleWindowSchema = z.object({
+	/** Days of week the window STARTS on (0 = Sunday … 6 = Saturday). */
+	days: z.array(z.number().int().min(0).max(6)).min(1),
+	startMinute: z.number().int().min(0).max(1439),
+	endMinute: z.number().int().min(0).max(1439)
+});
+/** Weekly schedule — OR of windows; absence on the rule = always active. */
+var NcScheduleSchema = z.object({
+	windows: z.array(NcScheduleWindowSchema).min(1),
+	/** IANA timezone; default = hub host timezone. */
+	timezone: z.string().optional(),
+	/** Active OUTSIDE the windows (e.g. "only outside business hours"). */
+	invert: z.boolean().optional()
+});
+/** Fuzzy plate matcher — OCR noise makes exact match useless (spec row 12/13). */
+var NcPlateMatcherSchema = z.object({
+	values: z.array(z.string().min(1)).min(1),
+	/** Max Levenshtein distance after normalization (uppercase alphanumeric). */
+	maxDistance: z.number().int().min(0).max(3).default(1)
+});
+/**
+* Occupancy condition (DEVICE-EVENT trigger). Fires on a ZoneAnalytics
+* occupancy edge for a device — optionally narrowed to a single admin
+* `zoneId` and/or object `className`. `op` selects the edge/threshold:
+*  - `became-occupied` (default) — count crossed 0 → ≥ `count`
+*  - `became-free`               — count crossed ≥ `count` → below it
+*  - `>=` / `<=`                 — count is at/over or at/under `count`
+* `sustainSeconds` requires the condition hold continuously that long
+* before firing (debounces flicker; 0 = fire on the first matching edge).
+* Fail-closed: no ZoneAnalytics snapshot / missing zone / null snapshot ⇒
+* the condition never matches. Confirmed edge-state survives addon restarts
+* (declared SQLite collection, reseeded on boot).
+*/
+var NcOccupancyConditionSchema = z.object({
+	/** Admin zone id to scope the count to; absent = whole-frame occupancy. */
+	zoneId: z.string().optional(),
+	/** Object class to count; absent = any class. */
+	className: z.string().optional(),
+	op: z.enum([
+		"became-occupied",
+		"became-free",
+		">=",
+		"<="
+	]).default("became-occupied"),
+	count: z.number().int().min(0).default(1),
+	sustainSeconds: z.number().int().min(0).max(3600).default(15)
+});
+/** Admin-zone membership condition (zone IDs as stamped by the ZoneEngine). */
+var NcZoneConditionSchema = z.object({
+	ids: z.array(z.string().min(1)).min(1),
+	/** Quantifier over `ids` — at least one / every one visited. */
+	match: z.enum(["any", "all"]).default("any")
+});
+/**
+* The P1 condition set — a flat AND of groups; absent group = pass;
+* membership lists are OR within the list (spec §2.3).
+*/
+var NcConditionsSchema = z.object({
+	/** Device scope — absent = all devices. */
+	devices: z.array(z.number()).optional(),
+	/** Detector class names (any overlap with the record's class set). */
+	classes: z.array(z.string().min(1)).optional(),
+	/** Veto classes — any overlap fails the rule. */
+	classesExclude: z.array(z.string().min(1)).optional(),
+	/** Minimum detection confidence 0–1 (fails when the record has none). */
+	minConfidence: z.number().min(0).max(1).optional(),
+	/** Admin zone membership over event `zones` / track `zonesVisited`. */
+	zones: NcZoneConditionSchema.optional(),
+	/** Veto zones — any hit fails the rule. */
+	zonesExclude: z.array(z.string().min(1)).optional(),
+	/**
+	* Exact (case-insensitive) match on the record's collapsed `label`
+	* (identity name / plate text / subclass).
+	*/
+	labelEquals: z.array(z.string().min(1)).optional(),
+	/**
+	* Identity matcher. P1 boundary: matched against the record's collapsed
+	* `label` (the identity display name propagated by the face pipeline) —
+	* identity-ID matching rides in P2 when identity ids reach the record.
+	*/
+	identities: z.array(z.string().min(1)).optional(),
+	/** Fuzzy plate matcher against the record's `label` (plate text). */
+	plates: NcPlateMatcherSchema.optional(),
+	/**
+	* Identity EXCLUDE — mirror of {@link identities} with `notIn` semantics.
+	* Same P1 boundary: matched against the record's collapsed `label` (the
+	* identity display name). A record with NO label passes (nothing to
+	* exclude), unlike the include variant which fails on an absent label.
+	*/
+	identitiesExclude: z.array(z.string().min(1)).optional(),
+	/**
+	* Minimum server-computed key-event importance in [0,1] (`Track.importance`).
+	* TRACK-END only: importance is scored at track close, so it does not exist
+	* at immediate / object-event evaluation time (see catalog `appliesTo`). At
+	* close the value is threaded via the close-time info (the `Track` clone is
+	* captured before the DB row is updated, so it would otherwise read stale).
+	* Fails when the record carries no importance (never guess quality — the
+	* `minConfidence` precedent). MVP cut: a single scalar threshold.
+	*/
+	minImportance: z.number().min(0).max(1).optional(),
+	/**
+	* Minimum track dwell in SECONDS — `(lastSeen − firstSeen) / 1000`.
+	* TRACK-END only: an `immediate` / object-event subject has no closed
+	* lifespan, so a dwell condition never matches immediate delivery
+	* (documented choice — the object-event record carries no `firstSeen`,
+	* so dwell cannot be computed from what the subject actually carries).
+	*/
+	minDwellSeconds: z.number().min(0).optional(),
+	/**
+	* Detection provenance filter. `any` (default / absent) matches every
+	* source; otherwise the subject's source must equal it. Legacy records
+	* with no stamped source are treated as `pipeline`. The union spans both
+	* record kinds — object events carry `pipeline` | `onboard`, synthetic
+	* tracks carry `sensor`.
+	*/
+	source: z.enum([
+		"pipeline",
+		"onboard",
+		"sensor",
+		"any"
+	]).optional(),
+	/**
+	* Minimum identity / plate MATCH confidence in [0,1] — DISTINCT from the
+	* detector `minConfidence` (that gates the object-detection score; this
+	* gates the recognition/OCR match score). Fails when the subject carries
+	* no label-match confidence (never guess). TRACK-END only: the confidence
+	* lives on the recognition result and reaches the subject at track close.
+	*
+	* What it measures precisely (plumbed at track close — the closer threads
+	* the value into `NcTrackClosedInfo.labelConfidence`, the same seam as
+	* `importance`): the BEST recognition match confidence observed for the
+	* label the track carries at close — for a face, the peak cosine similarity
+	* of the ASSIGNED identity (`FaceMatch.score`, reset on an identity switch);
+	* for a plate, the peak OCR read score of the best-held plate
+	* (`plateText.confidence`). When BOTH a face and a plate were recognized on
+	* one track the higher of the two is used. A track that ended with no
+	* confident identity/plate match carries no value, so the condition fails
+	* closed for it (an un-recognized subject).
+	*/
+	minLabelConfidence: z.number().min(0).max(1).optional(),
+	/**
+	* DEVICE-EVENT only. Raw device event-type tokens (`EventFire.eventType`,
+	* e.g. a doorbell `press` / `press_long`) — matched case-insensitively
+	* against the token carried on the device-event subject (extracted from the
+	* event-emitter runtime slice's `lastEvent.eventType`). Fails when the
+	* subject carries no token. Doorbell-pulse / passive-sensor kinds emit no
+	* eventType, so gate those with {@link sensorKinds} instead.
+	*/
+	eventTypeTokens: z.array(z.string().min(1)).optional(),
+	/**
+	* DEVICE-EVENT only. Sensor/control taxonomy kinds (e.g. `doorbell`,
+	* `contact`, `button`, `device-event`) — matched against the persisted
+	* `SensorEvent.kind` (see `sensor-event-kinds.ts`). Membership is OR.
+	*/
+	sensorKinds: z.array(z.string().min(1)).optional(),
+	/**
+	* PACKAGE-EVENT only. Which package phase fires the rule — `delivered`
+	* (a parked parcel appeared), `picked-up` (it departed), or `both`. Fails
+	* when the subject's phase does not match (a subject always carries a phase
+	* on the package-event trigger).
+	*/
+	packagePhase: z.enum([
+		"delivered",
+		"picked-up",
+		"both"
+	]).optional(),
+	/**
+	* PERSONAL-RULE custom zones (viewer-drawn). Inline normalized polygons
+	* (MaskShape vocabulary). A record passes when its bbox overlaps ANY
+	* listed polygon (ZoneEngine membership semantics). Evaluated only when
+	* the subject carries a bbox; absent bbox ⇒ the condition FAILS.
+	*/
+	customZones: z.array(MaskPolygonShapeSchema).optional(),
+	/**
+	* DEVICE-EVENT only. ZoneAnalytics occupancy edge — fires when a device's
+	* (optionally zone/class-scoped) occupancy count crosses the configured
+	* threshold and holds for `sustainSeconds`. Fail-closed on missing
+	* substrate (no snapshot / missing zone). See {@link NcOccupancyCondition}.
+	*/
+	occupancy: NcOccupancyConditionSchema.optional()
+});
+/** One delivery target: a `notification-output` Target ref + passthrough params. */
+var NcRuleTargetSchema = z.object({
+	/** `notification-output` Target id. */
+	targetId: z.string().min(1),
+	/**
+	* Per-backend passthrough. Recognized keys are mapped onto the canonical
+	* Notification (`priority`, `level`, `sound`, `clickUrl`, `ttl`); the
+	* degrade engine drops what the backend can't render.
+	*/
+	params: z.record(z.string(), z.unknown()).optional()
+});
+/**
+* Media attachment policy (P1 still-image subset).
+*  - `best` — the best AVAILABLE subject image at dispatch time (D-3).
+*  - `best-matching` — the media that explains WHY the rule fired: a rule
+*    matched on identities attaches the subject's `faceCrop`, one matched on
+*    plates attaches the `plateCrop`; a rule with no identity/plate condition
+*    (or when the specific crop is missing) degrades to `best`, then
+*    `keyFrame`, then no attachment — never delaying the send. The matched
+*    condition summary is frozen on the outbox row at enqueue (like the rule
+*    name), so the choice never drifts from the record that fired it.
+*  - `keyFrame` — the clean scene frame (no subject box).
+*  - `none` — no attachment.
+*/
+var NcMediaPolicySchema = z.object({ attach: z.enum([
+	"best",
+	"best-matching",
+	"keyFrame",
+	"none"
+]).default("best") });
+/** Throttle — cooldown survives restarts (rebuilt from the outbox on boot). */
+var NcThrottleSchema = z.object({
+	cooldownSec: z.number().int().min(0).max(86400).default(60),
+	/** `rule` = one shared cooldown; `rule-device` = per-camera cooldown. */
+	scope: z.enum(["rule", "rule-device"]).default("rule-device")
+});
+/** Client-supplied rule fields (server stamps id/createdBy/createdAt/updatedAt). */
+var NcRuleInputSchema = z.object({
+	name: z.string().min(1).max(200),
+	enabled: z.boolean().default(true),
+	delivery: NcDeliverySchema,
+	conditions: NcConditionsSchema.default({}),
+	schedule: NcScheduleSchema.optional(),
+	targets: z.array(NcRuleTargetSchema).min(1),
+	media: NcMediaPolicySchema.default({ attach: "best" }),
+	throttle: NcThrottleSchema.default({
+		cooldownSec: 60,
+		scope: "rule-device"
+	}),
+	/** `{{var}}` templating over camera/class/label/zones/confidence/time. */
+	template: z.object({
+		title: z.string().max(500).optional(),
+		body: z.string().max(2e3).optional()
+	}).optional(),
+	/** Canonical notification priority ordinal (1..5); per-target overridable. */
+	priority: z.number().int().min(1).max(5).default(3),
+	/**
+	* Ownership/visibility key. Absent = admin/global rule (unchanged legacy
+	* behaviour, visible to all, read-only in the viewer). Present = personal
+	* rule owned by this userId. Server-stamped; never trusted from a client.
+	*/
+	ownerUserId: z.string().optional()
+});
+/**
+* Partial patch for `updateRule` — any subset of the input fields, plus the
+* persisted-only {@link NcRuleSchema} `disabledTargetIds` set. The latter is
+* NOT a client-authored input field (it lives on the persisted rule, not the
+* input), so it is added here explicitly to let the store's per-target opt-out
+* toggle round-trip through the shared `update` path. Viewer opt-out mutations
+* still flow through `nc.setRuleTargetEnabled` (owner-checked), never a raw
+* `updateRule` patch.
+*/
+var NcRulePatchSchema = NcRuleInputSchema.partial().extend({ disabledTargetIds: z.array(z.string()).optional() });
+/** A persisted rule. */
+var NcRuleSchema = NcRuleInputSchema.extend({
+	id: z.string(),
+	/** userId of the admin who created the rule (server-stamped caller). */
+	createdBy: z.string(),
+	createdAt: z.number(),
+	updatedAt: z.number(),
+	/**
+	* Per-target opt-out set. A targetId here is suppressed for THIS rule at
+	* send time. Only a target's OWNER may add/remove its id (server-checked
+	* in `nc.setRuleTargetEnabled`). Defaults to empty.
+	*/
+	disabledTargetIds: z.array(z.string()).default([])
+});
+var NcTestResultSchema = z.object({
+	recordId: z.string(),
+	recordKind: z.enum([
+		"object-event",
+		"track",
+		"device-event",
+		"package-event"
+	]),
+	deviceId: z.number(),
+	timestamp: z.number(),
+	wouldFire: z.boolean(),
+	/** Condition id that failed (first failing group), when `wouldFire` is false. */
+	failedCondition: z.string().optional(),
+	className: z.string().optional(),
+	label: z.string().optional()
 });
-/** LLM-facing view over the reused ModelCatalogEntry mechanism (spec §4.2). */
-var ManagedModelCatalogEntrySchema = z.object({
+var NcConditionDescriptorSchema = z.object({
+	/** Field id inside `NcConditions` (or `'schedule'` for the rule-level group). */
 	id: z.string(),
+	group: z.enum([
+		"scope",
+		"class",
+		"zones",
+		"quality",
+		"label",
+		"schedule",
+		"device",
+		"package",
+		"occupancy"
+	]),
 	label: z.string(),
-	family: z.string(),
-	purpose: z.enum(["text", "vision"]),
-	url: z.string(),
-	sha256: z.string(),
-	sizeBytes: z.number(),
-	quantization: z.string(),
-	/** Load-time guidance shown in the picker. */
-	minRamBytes: z.number(),
-	contextSizeDefault: z.number().int(),
-	/** Vision models: companion projector file. */
-	mmprojUrl: z.string().optional()
+	/** Editor widget the UI renders — never hardcode per-condition forms. */
+	valueType: z.enum([
+		"deviceIdList",
+		"stringList",
+		"number01",
+		"number",
+		"sourceSelect",
+		"zoneSelection",
+		"zoneIdList",
+		"schedule",
+		"plateMatcher",
+		"packagePhase",
+		"polygonDraw",
+		"occupancy"
+	]),
+	operator: z.enum([
+		"in",
+		"notIn",
+		"anyOf",
+		"allOf",
+		"gte",
+		"fuzzyIn",
+		"withinSchedule"
+	]),
+	/** Which delivery kinds the condition applies to. */
+	appliesTo: z.array(NcDeliverySchema),
+	phase: z.string(),
+	description: z.string().optional()
 });
-var LlmRuntimeNodeSchema = z.object({
-	nodeId: z.string(),
-	reachable: z.boolean(),
-	status: LlmRuntimeStatusSchema.optional(),
-	disk: LlmRuntimeDiskUsageSchema.optional(),
-	error: z.string().optional()
+/**
+* The P1 condition surface as data — served by `getConditionCatalog` so
+* rule editors render from the catalog, not hardcoded forms (spec §4.2).
+*/
+var NC_CONDITION_CATALOG = [
+	{
+		id: "devices",
+		group: "scope",
+		label: "Cameras",
+		valueType: "deviceIdList",
+		operator: "in",
+		appliesTo: [
+			"immediate",
+			"track-end",
+			"device-event",
+			"package-event"
+		],
+		phase: "P1",
+		description: "Restrict the rule to these devices; absent = all devices."
+	},
+	{
+		id: "classes",
+		group: "class",
+		label: "Object classes",
+		valueType: "stringList",
+		operator: "in",
+		appliesTo: [
+			"immediate",
+			"track-end",
+			"package-event"
+		],
+		phase: "P1",
+		description: "Any overlap with the detection class set passes."
+	},
+	{
+		id: "classesExclude",
+		group: "class",
+		label: "Excluded classes",
+		valueType: "stringList",
+		operator: "notIn",
+		appliesTo: [
+			"immediate",
+			"track-end",
+			"package-event"
+		],
+		phase: "P1"
+	},
+	{
+		id: "minConfidence",
+		group: "quality",
+		label: "Minimum confidence",
+		valueType: "number01",
+		operator: "gte",
+		appliesTo: [
+			"immediate",
+			"track-end",
+			"package-event"
+		],
+		phase: "P1"
+	},
+	{
+		id: "zones",
+		group: "zones",
+		label: "Zones",
+		valueType: "zoneSelection",
+		operator: "anyOf",
+		appliesTo: [
+			"immediate",
+			"track-end",
+			"package-event"
+		],
+		phase: "P1",
+		description: "Admin zone ids; quantifier any/all over the visited set."
+	},
+	{
+		id: "zonesExclude",
+		group: "zones",
+		label: "Excluded zones",
+		valueType: "zoneIdList",
+		operator: "notIn",
+		appliesTo: [
+			"immediate",
+			"track-end",
+			"package-event"
+		],
+		phase: "P1"
+	},
+	{
+		id: "labelEquals",
+		group: "label",
+		label: "Label equals",
+		valueType: "stringList",
+		operator: "in",
+		appliesTo: ["immediate", "track-end"],
+		phase: "P1",
+		description: "Exact match on the collapsed label (identity / plate / subclass)."
+	},
+	{
+		id: "identities",
+		group: "label",
+		label: "Identities",
+		valueType: "stringList",
+		operator: "in",
+		appliesTo: ["immediate", "track-end"],
+		phase: "P1",
+		description: "P1: matched against the identity display name on the record label."
+	},
+	{
+		id: "plates",
+		group: "label",
+		label: "License plates",
+		valueType: "plateMatcher",
+		operator: "fuzzyIn",
+		appliesTo: ["immediate", "track-end"],
+		phase: "P1",
+		description: "Levenshtein-tolerant match against the plate text."
+	},
+	{
+		id: "identitiesExclude",
+		group: "label",
+		label: "Excluded identities",
+		valueType: "stringList",
+		operator: "notIn",
+		appliesTo: ["immediate", "track-end"],
+		phase: "P1",
+		description: "Veto by identity display name (mirror of Identities; absent label passes)."
+	},
+	{
+		id: "minLabelConfidence",
+		group: "label",
+		label: "Minimum label confidence",
+		valueType: "number01",
+		operator: "gte",
+		appliesTo: ["track-end"],
+		phase: "P1",
+		description: "Best identity/plate recognition match confidence [0,1] for the label the track carries at close (peak assigned-identity cosine / peak plate OCR score; the higher of the two when both were read). Distinct from detection confidence. Fails closed for a track that ended un-recognized."
+	},
+	{
+		id: "minImportance",
+		group: "quality",
+		label: "Minimum importance",
+		valueType: "number01",
+		operator: "gte",
+		appliesTo: ["track-end"],
+		phase: "P1",
+		description: "Server-computed key-event importance [0,1]; track-end rules only (importance is scored at close). Fails when the record has none."
+	},
+	{
+		id: "minDwellSeconds",
+		group: "quality",
+		label: "Minimum dwell (seconds)",
+		valueType: "number",
+		operator: "gte",
+		appliesTo: ["track-end"],
+		phase: "P1",
+		description: "Track lifespan in seconds (lastSeen − firstSeen); track-end rules only."
+	},
+	{
+		id: "source",
+		group: "scope",
+		label: "Detection source",
+		valueType: "sourceSelect",
+		operator: "in",
+		appliesTo: [
+			"immediate",
+			"track-end",
+			"device-event",
+			"package-event"
+		],
+		phase: "P1",
+		description: "pipeline / onboard / sensor; a record with no stamped source counts as pipeline."
+	},
+	{
+		id: "sensorKinds",
+		group: "device",
+		label: "Sensor kinds",
+		valueType: "stringList",
+		operator: "in",
+		appliesTo: ["device-event"],
+		phase: "P1",
+		description: "Sensor/control taxonomy kinds (doorbell / contact / button / …) matched against the persisted device event."
+	},
+	{
+		id: "eventTypeTokens",
+		group: "device",
+		label: "Event-type tokens",
+		valueType: "stringList",
+		operator: "in",
+		appliesTo: ["device-event"],
+		phase: "P1",
+		description: "Raw device event-type tokens (e.g. doorbell press / press_long) from the event-emitter slice; absent on doorbell-pulse / passive sensors."
+	},
+	{
+		id: "packagePhase",
+		group: "package",
+		label: "Package phase",
+		valueType: "packagePhase",
+		operator: "in",
+		appliesTo: ["package-event"],
+		phase: "P1",
+		description: "Delivered / picked-up / both."
+	},
+	{
+		id: "occupancy",
+		group: "occupancy",
+		label: "Occupancy",
+		valueType: "occupancy",
+		operator: "anyOf",
+		appliesTo: ["device-event"],
+		phase: "P1",
+		description: "ZoneAnalytics occupancy edge (optionally zone/class-scoped): count crosses the threshold and holds for sustainSeconds. Fail-closed on a missing snapshot."
+	},
+	{
+		id: "customZones",
+		group: "zones",
+		label: "Custom zones",
+		valueType: "polygonDraw",
+		operator: "anyOf",
+		appliesTo: [
+			"immediate",
+			"track-end",
+			"package-event"
+		],
+		phase: "P1",
+		description: "User-drawn polygons; a detection whose bbox overlaps any polygon matches."
+	},
+	{
+		id: "schedule",
+		group: "schedule",
+		label: "Schedule",
+		valueType: "schedule",
+		operator: "withinSchedule",
+		appliesTo: [
+			"immediate",
+			"track-end",
+			"device-event",
+			"package-event"
+		],
+		phase: "P1",
+		description: "Weekly activation windows (invertible); absent = always active."
+	}
+];
+/**
+* The delivery lifecycle status of a history row — a straight read of the
+* durable outbox row's own status (single source of truth):
+*  - `pending` — enqueued, in-flight or retrying with backoff
+*  - `sent`    — delivered (terminal)
+*  - `dead`    — dead-lettered after exhausting retries / a permanent
+*                backend rejection / a deleted target (terminal; carries
+*                the failure `error`)
+*
+* P1 has no `suppressed-quiet-hours` / `snoozed` states — those ride the P2
+* user dimension (quiet hours / snooze) and are additive when they land.
+*/
+var NcHistoryStatusSchema = z.enum([
+	"pending",
+	"sent",
+	"dead"
+]);
+/** The evaluated record kind a history row descends from (one per trigger). */
+var NcHistoryRecordKindSchema = z.enum([
+	"object-event",
+	"track-end",
+	"device-event",
+	"package-event"
+]);
+/** Subject summary frozen on the row at fire time (survives rule/record edits). */
+var NcHistorySubjectSchema = z.object({
+	className: z.string(),
+	label: z.string().optional(),
+	confidence: z.number().optional(),
+	zones: z.array(z.string()),
+	timestamp: z.number()
 });
-var GenerateVisionInputSchema = LlmGenerateBaseInputSchema.extend({ images: z.array(LlmImageSchema).min(1) });
-var ProfileRefInputSchema = z.object({
-	addonId: z.string(),
-	profileId: z.string()
+/**
+* One delivery-history row. This is a read-only VIEW over the durable
+* outbox row (single source of truth — the same row the drain loop drives;
+* NO second write path, so history can never drift from delivery state).
+* The §3.2 fields map directly: `ruleId`/`targetId`/`deviceId` are columns,
+* `eventRef` is `recordKind`+`recordId`, `timestamps` are `createdAt`
+* (fire) / `updatedAt` (last transition), `status` + `error` are the
+* lifecycle. `ruleName` + `subject` are the intent snapshot frozen at
+* enqueue. `userId?` (per-recipient history) is P2 — no user dimension in
+* P1 (admin scope only).
+*/
+var NcHistoryEntrySchema = z.object({
+	/** Outbox row id — the stable dedup id `ruleId:dedupRef:targetId`. */
+	id: z.string(),
+	ruleId: z.string(),
+	/** Rule name frozen at fire time (outlives a later rename / delete). */
+	ruleName: z.string(),
+	/** The rule urgency/trigger that produced this delivery. */
+	delivery: NcDeliverySchema,
+	targetId: z.string(),
+	deviceId: z.number(),
+	recordKind: NcHistoryRecordKindSchema,
+	/** Event / track ref of the evaluated record (§3.2 `eventRef`). */
+	recordId: z.string(),
+	/** Present for track-scoped deliveries (object-event / track-end). */
+	trackId: z.string().optional(),
+	status: NcHistoryStatusSchema,
+	/** Delivery attempts made so far. */
+	attempts: z.number().int(),
+	/** Fire time (outbox enqueue). */
+	createdAt: z.number(),
+	/** Last transition time (terminal for sent / dead). */
+	updatedAt: z.number(),
+	/** Failure detail — present on a `dead` row. */
+	error: z.string().optional(),
+	subject: NcHistorySubjectSchema
 });
-var llmCapability = {
-	name: "llm",
+/** `getHistory` default page size + hard ceiling (bounded output). */
+var NC_HISTORY_LIMIT_DEFAULT = 100;
+var NC_HISTORY_LIMIT_MAX = 500;
+/**
+* Query filter for `getHistory` (spec §4.2). Every field is a narrowing
+* AND; absent = unbounded on that axis. `since`/`until` bound the fire time
+* (`createdAt`, epoch ms, inclusive). `limit` is clamped to
+* {@link NC_HISTORY_LIMIT_MAX}. `userId` (per-recipient filtering) is P2.
+*/
+var NcHistoryFilterSchema = z.object({
+	ruleId: z.string().optional(),
+	deviceId: z.number().optional(),
+	status: NcHistoryStatusSchema.optional(),
+	since: z.number().optional(),
+	until: z.number().optional(),
+	limit: z.number().int().min(1).max(500).default(100)
+});
+var notificationRulesCapability = {
+	name: "notification-rules",
 	scope: "system",
-	mode: "collection",
-	internal: false,
-	providerKind: "ai",
-	/** `nodeId` inputs below are DATA (the hub provider pins itself), never routing. */
-	nodeIdMode: "data",
+	mode: "singleton",
 	methods: {
-		generate: method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }),
-		generateVision: method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }),
-		listProfileKinds: method(z.object({}), z.array(LlmProfileKindDescriptorSchema)),
-		listProfiles: method(z.object({}), z.array(LlmProfileSchema)),
-		upsertProfile: method(z.object({ profile: LlmProfileSchema }), LlmProfileSchema, {
-			kind: "mutation",
-			auth: "admin"
-		}),
-		deleteProfile: method(ProfileRefInputSchema, z.void(), {
-			kind: "mutation",
-			auth: "admin"
-		}),
-		testProfile: method(ProfileRefInputSchema, LlmGenerateResultSchema, {
+		listRules: method(z.object({}), z.object({ rules: z.array(NcRuleSchema) }), { auth: "admin" }),
+		getRule: method(z.object({ ruleId: z.string() }), z.object({ rule: NcRuleSchema.nullable() }), { auth: "admin" }),
+		createRule: method(z.object({ rule: NcRuleInputSchema }), z.object({ rule: NcRuleSchema }), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "admin",
+			caller: "required"
 		}),
-		/** Live vendor enumeration (GET /models etc.). */
-		listModels: method(ProfileRefInputSchema, z.array(z.string())),
-		getDefaults: method(z.object({}), z.array(LlmDefaultSchema)),
-		setDefault: method(z.object({
-			selector: LlmDefaultSelectorSchema,
-			profileId: z.string().nullable()
-		}), z.void(), {
+		updateRule: method(z.object({
+			ruleId: z.string(),
+			patch: NcRulePatchSchema
+		}), z.object({ rule: NcRuleSchema }), {
 			kind: "mutation",
-			auth: "admin"
+			auth: "admin",
+			caller: "required"
 		}),
-		getUsage: method(z.object({
-			since: z.number().optional(),
-			until: z.number().optional(),
-			consumer: z.string().optional(),
-			profileId: z.string().optional()
-		}), z.array(LlmUsageRollupSchema)),
-		listModelCatalog: method(z.object({}), z.array(ManagedModelCatalogEntrySchema)),
-		listRuntimeNodes: method(z.object({}), z.array(LlmRuntimeNodeSchema)),
-		listNodeModels: method(z.object({ nodeId: z.string() }), z.array(LlmNodeModelSchema)),
-		installModel: method(z.object({
-			nodeId: z.string(),
-			model: ManagedModelRefSchema
-		}), z.void(), {
+		deleteRule: method(z.object({ ruleId: z.string() }), z.object({ success: z.literal(true) }), {
 			kind: "mutation",
 			auth: "admin"
 		}),
-		deleteModel: method(z.object({
-			nodeId: z.string(),
-			file: z.string()
-		}), z.void(), {
+		setRuleEnabled: method(z.object({
+			ruleId: z.string(),
+			enabled: z.boolean()
+		}), z.object({ success: z.literal(true) }), {
 			kind: "mutation",
 			auth: "admin"
 		}),
-		getRuntimeStatus: method(ProfileRefInputSchema, LlmRuntimeStatusSchema),
-		startRuntime: method(ProfileRefInputSchema, LlmRuntimeStatusSchema, {
+		/**
+		* Dry-run a rule against recently persisted records (object events for
+		* `immediate`, closed tracks for `track-end`). Mutation kind only to
+		* carry the full rule object safely; no side effects.
+		*/
+		testRule: method(z.object({
+			rule: NcRuleInputSchema,
+			lookbackMinutes: z.number().int().min(1).max(1440).default(60)
+		}), z.object({ results: z.array(NcTestResultSchema) }), {
 			kind: "mutation",
 			auth: "admin"
 		}),
-		stopRuntime: method(ProfileRefInputSchema, z.void(), {
-			kind: "mutation",
-			auth: "admin"
-		})
+		getConditionCatalog: method(z.object({}), z.object({ catalog: z.array(NcConditionDescriptorSchema) })),
+		/**
+		* Queryable delivery history — a read-only view over the durable outbox
+		* (fired rule, subject summary, target, status, timestamps, error on a
+		* dead row). Newest-first, bounded by `filter.limit`. Retention follows
+		* the outbox's own terminal-row prune horizon (no separate history
+		* horizon — single collection, single source of truth). Admin-only in
+		* P1 (no user dimension); the P2 viewer History screen adds per-caller
+		* scoping on the same method.
+		*/
+		getHistory: method(z.object({ filter: NcHistoryFilterSchema.default({ limit: 100 }) }), z.object({ entries: z.array(NcHistoryEntrySchema) }), { auth: "admin" })
 	}
 };
 //#endregion
@@ -19542,160 +20281,56 @@ var pipelineAnalyticsCapability = {
 		*  Absent ⇒ every kind (back-compat). */
 		getTrackMedia: method(z.object({
 			trackId: z.string(),
-			kinds: z.array(MediaFileKindEnum).optional()
-		}), z.array(MediaFileSchema).readonly()),
-		/**
-		* Search object events by text query using CLIP cosine similarity.
-		* Encodes `text` via the `embedding-encoder` cap, queries the
-		* `ObjectEmbeddingStore` with optional prefilters, ranks all matching
-		* embeddings by cosine similarity, and joins winners to their
-		* ObjectEvents by trackId. Returns up to `limit` events scored ≥
-		* `minScore`, sorted descending by score.
-		*/
-		searchObjectEvents: method(SearchObjectEventsInput, z.array(ScoredObjectEventSchema).readonly())
-	},
-	events: {
-		/**
-		* Enriched frame emitted after refinement — the live-overlay source of
-		* truth (two-plane re-injection). Carries the frame's detections in the
-		* `ObjectDetection` wire shape: first-level roots (with track info +
-		* enrichment labels) plus synthesized `kind:'detail'` face/plate entries
-		* re-projected from per-track detail state, so stream overlays render
-		* boxes + recognized names without querying full Track state.
-		*/
-		onFrameTracked: { data: z.object({
-			deviceId: z.number(),
-			timestamp: z.number(),
-			frameWidth: z.number(),
-			frameHeight: z.number(),
-			detections: z.array(OverlayDetectionSchema).readonly()
-		}) },
-		/** Track entered active state (first-seen). */
-		onTrackStarted: { data: z.object({
-			deviceId: z.number(),
-			trackId: z.string(),
-			className: z.string()
-		}) },
-		/** Track expired (TTL reached after last detection). */
-		onTrackEnded: { data: z.object({
-			deviceId: z.number(),
-			trackId: z.string(),
-			className: z.string(),
-			durationMs: z.number()
-		}) },
-		/** Canonical "something happened at device X" event, per-kind. */
-		onDetectionEvent: { data: z.object({
-			deviceId: z.number(),
-			kind: EventKindSchema,
-			eventId: z.string(),
-			timestamp: z.number()
-		}) }
-	}
-};
-//#endregion
-//#region src/capabilities/sensor-event-kinds.ts
-/**
-* Cap → event-kind mapping for the SENSOR / CONTROL cap families — the table
-* `pipeline-analytics.listEventKinds` uses to turn a linked device's bound
-* caps into per-camera event-kind descriptors.
-*
-* The descriptor DATA (color / iconId / labelKey / parentKind / category)
-* is NOT duplicated here — every entry is derived from the single
-* `EVENT_TAXONOMY` dictionary (`catalogs/event-taxonomy.ts`). This file owns
-* ONLY the cap-name → taxonomy-kind mapping. Adding a new eventful sensor /
-* control cap means adding one line here (and a taxonomy entry); the anti-
-* drift guard `scripts/check-event-kind-coverage.ts` fails the build if an
-* eventful cap is missing.
-*/
-/** Map a taxonomy `iconId` onto the legacy closed `EventKindIcon` enum. */
-var LEGACY_ICON = {
-	motion: "motion",
-	audio: "audio",
-	person: "person",
-	vehicle: "vehicle",
-	animal: "animal",
-	package: "package",
-	door: "door",
-	pir: "pir",
-	smoke: "smoke",
-	water: "water",
-	button: "button",
-	generic: "generic",
-	gas: "smoke",
-	vibration: "generic",
-	tamper: "generic",
-	presence: "person",
-	lock: "generic",
-	siren: "generic",
-	switch: "generic",
-	doorbell: "button"
-};
-function legacyIcon(iconId) {
-	return LEGACY_ICON[iconId] ?? "generic";
-}
-/**
-* Cap name → taxonomy kind id. Covers EVERY eventful sensor / control cap.
-* The anti-drift guard cross-checks this against the eventful caps declared
-* in `packages/types/src/capabilities/*.cap.ts`.
-*/
-var CAP_TO_KIND = {
-	contact: "contact",
-	motion: "motion-sensor",
-	smoke: "smoke",
-	flood: "flood",
-	gas: "gas",
-	"carbon-monoxide": "carbon-monoxide",
-	vibration: "vibration",
-	tamper: "tamper",
-	presence: "presence",
-	"enum-sensor": "enum-sensor",
-	"event-emitter": "device-event",
-	"lock-control": "lock",
-	switch: "switch",
-	button: "button",
-	doorbell: "doorbell"
+			kinds: z.array(MediaFileKindEnum).optional()
+		}), z.array(MediaFileSchema).readonly()),
+		/**
+		* Search object events by text query using CLIP cosine similarity.
+		* Encodes `text` via the `embedding-encoder` cap, queries the
+		* `ObjectEmbeddingStore` with optional prefilters, ranks all matching
+		* embeddings by cosine similarity, and joins winners to their
+		* ObjectEvents by trackId. Returns up to `limit` events scored ≥
+		* `minScore`, sorted descending by score.
+		*/
+		searchObjectEvents: method(SearchObjectEventsInput, z.array(ScoredObjectEventSchema).readonly())
+	},
+	events: {
+		/**
+		* Enriched frame emitted after refinement — the live-overlay source of
+		* truth (two-plane re-injection). Carries the frame's detections in the
+		* `ObjectDetection` wire shape: first-level roots (with track info +
+		* enrichment labels) plus synthesized `kind:'detail'` face/plate entries
+		* re-projected from per-track detail state, so stream overlays render
+		* boxes + recognized names without querying full Track state.
+		*/
+		onFrameTracked: { data: z.object({
+			deviceId: z.number(),
+			timestamp: z.number(),
+			frameWidth: z.number(),
+			frameHeight: z.number(),
+			detections: z.array(OverlayDetectionSchema).readonly()
+		}) },
+		/** Track entered active state (first-seen). */
+		onTrackStarted: { data: z.object({
+			deviceId: z.number(),
+			trackId: z.string(),
+			className: z.string()
+		}) },
+		/** Track expired (TTL reached after last detection). */
+		onTrackEnded: { data: z.object({
+			deviceId: z.number(),
+			trackId: z.string(),
+			className: z.string(),
+			durationMs: z.number()
+		}) },
+		/** Canonical "something happened at device X" event, per-kind. */
+		onDetectionEvent: { data: z.object({
+			deviceId: z.number(),
+			kind: EventKindSchema,
+			eventId: z.string(),
+			timestamp: z.number()
+		}) }
+	}
 };
-function buildDescriptor(capName, kind) {
-	const t = EVENT_TAXONOMY[kind];
-	if (t === void 0) throw new Error(`EVENT_KIND_BY_CAP: cap '${capName}' maps to unknown taxonomy kind '${kind}'`);
-	return {
-		...t,
-		icon: legacyIcon(t.iconId)
-	};
-}
-/**
-* Sensor / control cap name → static event-kind descriptor. A linked device
-* contributes one entry per bound cap present in this map.
-*/
-var EVENT_KIND_BY_CAP = Object.freeze(Object.fromEntries(Object.entries(CAP_TO_KIND).map(([capName, kind]) => [capName, buildDescriptor(capName, kind)])));
-/** The cap names covered by the taxonomy (for the anti-drift guard). */
-var EVENTFUL_CAP_NAMES = Object.keys(CAP_TO_KIND);
-/**
-* Build a full `EventKindDescriptor` for a taxonomy `kind`, stamping the
-* per-device `source`. Returns null when `kind` is not in the taxonomy.
-* This is THE bridge from the serializable taxonomy dictionary to the cap
-* wire shape — every event-kind descriptor the server emits goes through it,
-* so color/iconId/labelKey are never re-declared at a call site.
-*/
-function buildEventKindDescriptor(kind, source) {
-	const t = EVENT_TAXONOMY[kind];
-	if (t === void 0) return null;
-	return {
-		kind: t.kind,
-		labelKey: t.labelKey,
-		label: t.label,
-		color: t.color,
-		iconId: t.iconId,
-		icon: legacyIcon(t.iconId),
-		category: t.category,
-		parentKind: t.parentKind,
-		level: t.level,
-		source: {
-			capName: source.capName,
-			deviceId: source.deviceId
-		}
-	};
-}
 //#endregion
 //#region src/capabilities/pipeline-orchestrator.cap.ts
 var CameraPipelineConfigSchema = z.object({
@@ -20453,6 +21088,110 @@ var pipelineOrchestratorCapability = {
 	}
 };
 //#endregion
+//#region src/capabilities/sensor-event-kinds.ts
+/**
+* Cap → event-kind mapping for the SENSOR / CONTROL cap families — the table
+* `pipeline-analytics.listEventKinds` uses to turn a linked device's bound
+* caps into per-camera event-kind descriptors.
+*
+* The descriptor DATA (color / iconId / labelKey / parentKind / category)
+* is NOT duplicated here — every entry is derived from the single
+* `EVENT_TAXONOMY` dictionary (`catalogs/event-taxonomy.ts`). This file owns
+* ONLY the cap-name → taxonomy-kind mapping. Adding a new eventful sensor /
+* control cap means adding one line here (and a taxonomy entry); the anti-
+* drift guard `scripts/check-event-kind-coverage.ts` fails the build if an
+* eventful cap is missing.
+*/
+/** Map a taxonomy `iconId` onto the legacy closed `EventKindIcon` enum. */
+var LEGACY_ICON = {
+	motion: "motion",
+	audio: "audio",
+	person: "person",
+	vehicle: "vehicle",
+	animal: "animal",
+	package: "package",
+	door: "door",
+	pir: "pir",
+	smoke: "smoke",
+	water: "water",
+	button: "button",
+	generic: "generic",
+	gas: "smoke",
+	vibration: "generic",
+	tamper: "generic",
+	presence: "person",
+	lock: "generic",
+	siren: "generic",
+	switch: "generic",
+	doorbell: "button"
+};
+function legacyIcon(iconId) {
+	return LEGACY_ICON[iconId] ?? "generic";
+}
+/**
+* Cap name → taxonomy kind id. Covers EVERY eventful sensor / control cap.
+* The anti-drift guard cross-checks this against the eventful caps declared
+* in `packages/types/src/capabilities/*.cap.ts`.
+*/
+var CAP_TO_KIND = {
+	contact: "contact",
+	motion: "motion-sensor",
+	smoke: "smoke",
+	flood: "flood",
+	gas: "gas",
+	"carbon-monoxide": "carbon-monoxide",
+	vibration: "vibration",
+	tamper: "tamper",
+	presence: "presence",
+	"enum-sensor": "enum-sensor",
+	"event-emitter": "device-event",
+	"lock-control": "lock",
+	switch: "switch",
+	button: "button",
+	doorbell: "doorbell"
+};
+function buildDescriptor(capName, kind) {
+	const t = EVENT_TAXONOMY[kind];
+	if (t === void 0) throw new Error(`EVENT_KIND_BY_CAP: cap '${capName}' maps to unknown taxonomy kind '${kind}'`);
+	return {
+		...t,
+		icon: legacyIcon(t.iconId)
+	};
+}
+/**
+* Sensor / control cap name → static event-kind descriptor. A linked device
+* contributes one entry per bound cap present in this map.
+*/
+var EVENT_KIND_BY_CAP = Object.freeze(Object.fromEntries(Object.entries(CAP_TO_KIND).map(([capName, kind]) => [capName, buildDescriptor(capName, kind)])));
+/** The cap names covered by the taxonomy (for the anti-drift guard). */
+var EVENTFUL_CAP_NAMES = Object.keys(CAP_TO_KIND);
+/**
+* Build a full `EventKindDescriptor` for a taxonomy `kind`, stamping the
+* per-device `source`. Returns null when `kind` is not in the taxonomy.
+* This is THE bridge from the serializable taxonomy dictionary to the cap
+* wire shape — every event-kind descriptor the server emits goes through it,
+* so color/iconId/labelKey are never re-declared at a call site.
+*/
+function buildEventKindDescriptor(kind, source) {
+	const t = EVENT_TAXONOMY[kind];
+	if (t === void 0) return null;
+	return {
+		kind: t.kind,
+		labelKey: t.labelKey,
+		label: t.label,
+		color: t.color,
+		iconId: t.iconId,
+		icon: legacyIcon(t.iconId),
+		category: t.category,
+		parentKind: t.parentKind,
+		level: t.level,
+		source: {
+			capName: source.capName,
+			deviceId: source.deviceId
+		}
+	};
+}
+//#endregion
 //#region src/capabilities/server-management.cap.ts
 /**
 * server-management — per-NODE singleton capability for a node's ROOT
@@ -22618,7 +23357,28 @@ var FaceInfoSchema = z.object({
 	*  (`/addon/<addonId>/event-media/<keyFrameMediaKey>`). Absent when the
 	*  track produced no key frame (e.g. native/onboard source) — the UI falls
 	*  back to the inline `base64` face crop. */
-	keyFrameMediaKey: z.string().optional()
+	keyFrameMediaKey: z.string().optional(),
+	/** Winning identity-match cosine (0..1) for this face's track, when an
+	*  identity was auto-confirmed. Lets the UI surface WHY a face was assigned
+	*  (confidence badge / low-confidence audit). Absent on legacy rows and on
+	*  faces that were never auto-recognized. */
+	bestMatchScore: z.number().optional(),
+	/** Native-scale face short side (px) at recognition time, when the runner
+	*  measured it. Lets the UI flag low-resolution auto-assignments. Absent on
+	*  legacy rows / runners that reported no native measure. */
+	nativeFaceShortSidePx: z.number().optional(),
+	/** SUGGESTED identity for this face — a plausible-but-not-confident match that
+	*  MISSED auto-assignment (cosine in the suggestion band, or above threshold
+	*  but blocked only by the recognition size floor). Mutually exclusive with
+	*  `recognizedIdentityId` (a suggestion is NEVER an assignment): the face stays
+	*  UNASSIGNED and everything else keeps treating it as unrecognized — the UI
+	*  merely offers a one-tap "is this <name>?" confirm. Absent on legacy rows and
+	*  on faces that were auto-assigned or below the suggestion band. (2026-07-24) */
+	suggestedIdentityId: z.string().optional(),
+	/** Peak identity-match cosine (0..1) for `suggestedIdentityId`, captured at the
+	*  same moment as `bestMatchScore` (track peak, at close). Lets the UI rank /
+	*  badge suggestion confidence. Present iff `suggestedIdentityId` is. (2026-07-24) */
+	suggestedMatchScore: z.number().optional()
 });
 var FaceFilterEnum = z.enum([
 	"unassigned",
@@ -25280,7 +26040,6 @@ var CAPABILITY_NAMES = {
 	addonWidgetsSource: "addon-widgets-source",
 	addons: "addons",
 	adminUi: "admin-ui",
-	advancedNotifier: "advanced-notifier",
 	airQualitySensor: "air-quality-sensor",
 	alarmPanel: "alarm-panel",
 	alerts: "alerts",
@@ -25359,6 +26118,7 @@ var CAPABILITY_NAMES = {
 	networkQuality: "network-quality",
 	nodes: "nodes",
 	notificationOutput: "notification-output",
+	notificationRules: "notification-rules",
 	notifier: "notifier",
 	numericSensor: "numeric-sensor",
 	oauthIntegration: "oauth-integration",
@@ -25452,10 +26212,6 @@ var CAPABILITY_ROUTER_KEYS = [
 		key: "adminUi",
 		name: "admin-ui"
 	},
-	{
-		key: "advancedNotifier",
-		name: "advanced-notifier"
-	},
 	{
 		key: "airQualitySensor",
 		name: "air-quality-sensor"
@@ -25768,6 +26524,10 @@ var CAPABILITY_ROUTER_KEYS = [
 		key: "notificationOutput",
 		name: "notification-output"
 	},
+	{
+		key: "notificationRules",
+		name: "notification-rules"
+	},
 	{
 		key: "notifier",
 		name: "notifier"
@@ -26004,7 +26764,6 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	addonWidgetsSourceCapability,
 	addonsCapability,
 	adminUiCapability,
-	advancedNotifierCapability,
 	airQualitySensorCapability,
 	alarmPanelCapability,
 	alertsCapability,
@@ -26083,6 +26842,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	networkQualityCapability,
 	nodesCapability,
 	notificationOutputCapability,
+	notificationRulesCapability,
 	notifierCapability,
 	numericSensorCapability,
 	oauthIntegrationCapability,
@@ -26494,36 +27254,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"advancedNotifier.deleteRule": {
-		capName: "advanced-notifier",
-		capScope: "system",
-		addonId: null,
-		access: "delete"
-	},
-	"advancedNotifier.getHistory": {
-		capName: "advanced-notifier",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
-	"advancedNotifier.getRules": {
-		capName: "advanced-notifier",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
-	"advancedNotifier.testRule": {
-		capName: "advanced-notifier",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
-	"advancedNotifier.upsertRule": {
-		capName: "advanced-notifier",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
 	"alarmPanel.arm": {
 		capName: "alarm-panel",
 		capScope: "device",
@@ -28828,6 +29558,60 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"notificationRules.createRule": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"notificationRules.deleteRule": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"notificationRules.getConditionCatalog": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"notificationRules.getHistory": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"notificationRules.getRule": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"notificationRules.listRules": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"notificationRules.setRuleEnabled": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"notificationRules.testRule": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"notificationRules.updateRule": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"notifier.cancel": {
 		capName: "notifier",
 		capScope: "device",
@@ -31042,7 +31826,6 @@ var KNOWN_CAP_NAMES = [
 	"addon-widgets-source",
 	"addons",
 	"admin-ui",
-	"advanced-notifier",
 	"alarm-panel",
 	"alerts",
 	"audio-analysis",
@@ -31104,6 +31887,7 @@ var KNOWN_CAP_NAMES = [
 	"network-quality",
 	"nodes",
 	"notification-output",
+	"notification-rules",
 	"notifier",
 	"oauth-integration",
 	"osd",
@@ -31217,7 +32001,6 @@ var SYSTEM_CAP_NAMES = [
 	"addon-widgets-source",
 	"addons",
 	"admin-ui",
-	"advanced-notifier",
 	"alerts",
 	"audio-analyzer",
 	"audio-codec",
@@ -31249,6 +32032,7 @@ var SYSTEM_CAP_NAMES = [
 	"network-quality",
 	"nodes",
 	"notification-output",
+	"notification-rules",
 	"oauth-integration",
 	"pipeline-executor",
 	"pipeline-orchestrator",
@@ -31869,4 +32653,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { ACCESSORY_LABEL, ALL_CAPABILITY_DEFINITIONS, APPLE_SA_TO_MACRO, AUDIO_BACKEND_CHOICES, AUDIO_MACRO_LABELS, AccessoriesStatusSchema, AccessoryKind, AddBrokerInputSchema, AddonAutoUpdateSchema, AddonListItemSchema, AddonPageDeclarationSchema, AddonPageInfoSchema, AdoptInputSchema as AdoptionAdoptInputSchema, AdoptResultSchema as AdoptionAdoptResultSchema, AdoptionFilterSchema, GetCandidateInputSchema as AdoptionGetCandidateInputSchema, ListCandidatesInputSchema as AdoptionListCandidatesInputSchema, ListCandidatesOutputSchema as AdoptionListCandidatesOutputSchema, ReleaseInputSchema as AdoptionReleaseInputSchema, AdoptionStatusSchema, AgentLoadSummarySchema, AirQualitySensorStatusSchema, AlarmArmModeSchema, AlarmPanelStatusSchema, AlarmStateSchema, AlertSchema, AlertSeveritySchema, AlertSourceSchema, AlertStatusSchema, AmbientLightSensorStatusSchema, ApiKeyRecordSchema, ApiKeySummarySchema, ArchiveEntrySchema, ArchiveManifestSchema, AttachmentMediaTypeSchema, AttachmentSchema, AudioAnalysisResultSchema, AudioAnalysisSettingsSchema, AudioChunkInputSchema, AudioClassSummarySchema, AudioClassificationLabelSchema, AudioClassificationResultSchema, AudioCodecInfoSchema, AudioDecodeSessionConfigSchema, AudioEncodeSchema, AudioEncodeSessionConfigSchema, AudioEncodedChunkSchema, AudioEventSchema, AudioLevelSchema, AudioMetricsHistoryPointSchema, AudioMetricsHistorySchema, AudioMetricsSnapshotSchema, AudioPcmChunkSchema, AuthResultSchema, AutoUpdateSettingsSchema, AutomationControlStatusSchema, AvailableIntegrationTypeSchema, BACKEND_TO_FORMAT, BATTERY_DEVICE_PROFILE, BacklightModeSchema, BackupDestinationInfoSchema, BackupEntrySchema, BaseAddon, BaseDevice, BaseDeviceProvider, BatteryStatusSchema, BinaryStatusSchema, BoundingBoxSchema, BrightnessStatusSchema, AddInputSchema as BrokerAddInputSchema, BrokerAudioClientSchema, BrokerClientsSchema, BrokerConnectionDetailsSchema, BrokerConsumerAttributionSchema, BrokerConsumerKindSchema, BrokerDecodedClientSchema, BrokerEncodedClientSchema, GetStateInputSchema as BrokerGetStateInputSchema, BrokerInfoSchema, BrokerProviderInfoSchema, PublishInputSchema as BrokerPublishInputSchema, RegistryStatusSchema as BrokerRegistryStatusSchema, BrokerRtspClientSchema, BrokerStatsSchema, BrokerStatusEnum, BrokerStatusSchema, SubscribeInputSchema as BrokerSubscribeInputSchema, SubscribeResultSchema as BrokerSubscribeResultSchema, TestConnectionResultSchema as BrokerTestConnectionResultSchema, UnsubscribeInputSchema as BrokerUnsubscribeInputSchema, CAM_PROFILE_ORDER, CAPABILITY_NAMES, CAPABILITY_ROUTER_KEYS, CAP_NAMES_WITH_STATUS, CAP_NODE_PIN_CONTEXT_KEY, CAP_PROVIDER_KIND_MAP, COCO_80_LABELS, COCO_TO_MACRO, CamProfileSchema, CamStreamDescriptorSchema, CamStreamKindSchema, CamStreamResolutionSchema, CameraAssignmentStatusSchema, CameraAudioStatusSchema, CameraBrokerProfileSchema, CameraBrokerStatusSchema, CameraCredentialsSchema, CameraCredentialsStatusSchema, CameraDecoderShmSchema, CameraDecoderStatusSchema, CameraDetectionPhaseSchema, CameraDetectionProvisioningSchema, CameraDetectionProvisioningStateSchema, CameraDetectionStatusSchema, CameraMetricsSchema, CameraMetricsWithDeviceIdSchema, CameraMotionStatusSchema, CameraRecordingModeSchema, CameraRecordingStatusSchema, CameraSourceStatusSchema, CameraSourceStreamSchema, CameraStatusSchema, CameraStreamSchema, CandidateQueryFilterSchema, CapScopeSchema, CapabilityBindingsSchema, CarbonMonoxideStatusSchema, ChargingStatus, ClientNetworkStatsSchema, ClimateControlStatusSchema, ClipPlaybackSchema, ClipSchema, ClusterAddonNodeDeploymentSchema, ClusterAddonStatusEntrySchema, CollectionColumnSchema, CollectionIndexSchema, ColorStatusSchema, ConfigEntrySchema, ConfigSectionWithValuesSchema, ConfigTabDeclarationSchema, ConnectivityStatusSchema, ConsumableItemSchema, ConsumablesStatusSchema, ContactStatusSchema, ControlKindSchema, ControlStatusSchema, ConvertArtifactSchema, ConvertResultSchema, ConvertTargetSchema, CoverStateSchema, CoverStatusSchema, CreateApiKeyInputSchema, CreateApiKeyResultSchema, CreateIntegrationInputSchema, CreateScopedTokenInputSchema, CreateScopedTokenResultSchema, CreateUserInputSchema, CustomActionInputSchema, CustomModelDescriptorSchema, DATAPLANE_SECRET_HEADER, DEFAULT_ADDON_PLACEMENT, DEFAULT_AUDIO_ANALYZER_CONFIG, DEFAULT_DECODER_HWACCEL_CONFIG, DEFAULT_EVENT_COLOR, DEFAULT_FEATURES, DEFAULT_RETENTION, DEFAULT_SCRUB_THUMBNAIL_PRESET, DEVICE_BACKEND_TO_FORMAT, DEVICE_CAP_NAMES, DEVICE_PROFILES, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DEVICE_TYPE_CONTROL_KIND, DEVICE_TYPE_INFO, DayNightModeSchema, DayNightOptionsSchema, DayNightSettingsPatchSchema, DayNightStatusSchema, DecodedAudioChunkSchema, DecodedFrameSchema, DecoderSessionConfigSchema, DecoderStatsSchema, DeleteIntegrationResultSchema, DetectionSourceSchema, DeviceCodeSeveritySchema, DeviceConfig, DeviceDiscoveryStatusSchema, ExposeInputSchema as DeviceExportExposeInputSchema, DeviceExportStatusSchema, UnexposeInputSchema as DeviceExportUnexposeInputSchema, DeviceFeature, DeviceInfoSchema, DeviceLinkModeSchema, DeviceNetworkStatsSchema, DeviceRole, DeviceRuntimeState, DeviceStatusSchema, DeviceType, DiscoveredChildDeviceSchema, DiscoveredChildStatusSchema, DiscoveredDeviceSchema, DiscoveredTargetSchema, DisposerChain, DoorbellPressEventSchema, DoorbellStatusSchema, EVENTFUL_CAP_NAMES, EVENT_KIND_BY_CAP, EVENT_PAD_MS, EVENT_TAXONOMY, EXPRESSION_BUILTINS, EXPRESSION_BUILTIN_NAMES, EXPRESSION_COMPILE_CACHE_CAPACITY, EXPRESSION_IDENTIFIER_RE, EXPRESSION_INJECTED_NOW, ElementConfigStore, EmbeddingInfoSchema, EmbeddingResultSchema, EncodeProfileSchema, EncodedPacketSchema, EnrichedWidgetMetadataSchema, EnumSensorDateTimeFormatSchema, EnumSensorStatusSchema, EventCategory, EventEmitterStatusSchema, EventFireSchema, EventItemSchema, EventKindCategorySchema, EventKindDescriptorSchema, EventKindIconSchema, EventKindSchema, EventSourceType, ExportDownloadSchema, ExportOptionsSchema, ExportRecordSchema, ExportSetupFieldSchema, ExportSetupSchema, ExportSpeedSchema, ExportStateSchema, ExportTimelapseSchema, ExposedDeviceSchema, ExposureModeSchema, ExpressionEvalError, ExpressionParseError, FanControlStatusSchema, FanDirectionSchema, FeatureManifestSchema, FeatureProbeStatusSchema, FloodStatusSchema, FrameHandleFormatSchema, FrameHandleSchema, FrameInputSchema, GasStatusSchema, GetStreamWithCodecInputSchema, GlobalMetricsSchema, HF_BASE_URL, HF_REPO, HWACCEL_OPTIONS, HealthStatusSchema, HistoryPointSchema, HistoryResolutionEnum, HumidifierStatusSchema, HumiditySensorStatusSchema, HvacModeSchema, ImageRotateSchema, ImageSettingsOptionsSchema, ImageSettingsPatchSchema, ImageSettingsStatusSchema, ImageStatusSchema, IngestOwnerSchema, InstalledPackageSchema, IntegrationLiteSchema, IntegrationWithStateSchema, IntercomAbilitySchema, IntercomStatusSchema, KNOWN_CAP_NAMES, KeyEventSchema, LabelDefinitionSchema, LawnMowerActivitySchema, LawnMowerControlStatusSchema, LinkedDeviceSchema, LlmDefaultSchema, LlmDefaultSelectorSchema, LlmErrorCodeSchema, LlmGenerateBaseInputSchema, LlmGenerateErrSchema, LlmGenerateOkSchema, LlmGenerateResultSchema, LlmImageSchema, LlmNodeModelSchema, LlmProfileKindDescriptorSchema, LlmProfileKindSchema, LlmProfileSchema, LlmRuntimeCompleteInputSchema, LlmRuntimeDiskUsageSchema, LlmRuntimeNodeSchema, LlmRuntimeStatusSchema, LlmUsageRollupSchema, LlmUsageSchema, LocateSegmentResultSchema, LocationStatSchema, LockControlStatusSchema, LockStateSchema, LogEntrySchema, LogLevelSchema, LogStreamEntrySchema, LoginMethodContributionSchema, LoginStageEnum, MACRO_LABELS, MAX_EXPRESSION_AST_NODES, MAX_EXPRESSION_BINDINGS, MAX_EXPRESSION_CALL_ARGS, MAX_EXPRESSION_EVAL_STEPS, MAX_EXPRESSION_SOURCE_LENGTH, METHOD_ACCESS_MAP, MODEL_FORMATS, MOTION_TRIGGER_FEATURE, ManagedModelCatalogEntrySchema, ManagedModelRefSchema, ManagedRuntimeConfigSchema, MaskGridDimsSchema, MaskGridShapeSchema, MaskLineShapeSchema, MaskPointSchema, MaskPolygonShapeSchema, MaskPolygonVerticesSchema, MaskRectShapeSchema, MaskShapeKindSchema, MaskShapeSchema, MediaFileSchema, MediaPlayerRepeatSchema, MediaPlayerStateSchema, MediaPlayerStatusSchema, MeshPeerSchema, MeshStatusSchema, MethodAccessSchema, ModelCatalogEntrySchema, ModelConvertInputSchema, ModelConvertMetadataSchema, ModelDistributeInputSchema, ModelDistributeResultSchema, ModelExtraFileSchema, ModelFormatEntrySchema, ModelFormatsSchema, ModelSubstitutionSchema, ModelVariantGroupSchema, MotionAnalysisResultSchema, MotionEventSchema, MotionOnMotionChangedDataSchema, MotionRegionSchema, MotionSourceEnum, MotionSourcesSchema, MotionStatusSchema, MotionTriggerRuntimeStateSchema, MotionTriggerStatusSchema, MotionZoneOptionsSchema, MotionZonePatchSchema, MotionZoneRegionSchema, MotionZoneStatusSchema, StatusSchema as MqttBrokerStatusSchema, NativeCropBboxSchema, NativeCropRefSchema, NativeCropResultSchema, NativeDetectionSchema, NativeObjectClassEnum, NativeObjectDetectionRuntimeStateSchema, NativeObjectDetectionStatusSchema, NetworkAccessStatusSchema, NetworkAddressSchema, NetworkEndpointSchema, NotificationActionSchema, NotificationFormatSchema, NotificationHistoryEntrySchema, NotificationRuleSchema, NotificationSchema, NotifierStatusSchema, NumericSensorStatusSchema, OPS_LOG_DEFAULT_LIMIT, OPS_LOG_RING_DEFAULT_MAX, OauthIntegrationDescriptorSchema, ObjectEventSchema, OpsLogDomainSchema, OpsLogEntrySchema, OpsLogOpSchema, OpsLogQueryInputSchema, OpsLogReasonSchema, OrchestratorMetricsSchema, OsdOverlayKindEnum, OsdOverlayPatchSchema, OsdOverlaySchema, OsdPositionEnum, OsdStatusSchema, PET_FEEDER_MANUAL_FEED_MAX, PET_FEEDER_MANUAL_FEED_MIN, PIPELINE_FLOW_CAPABILITY_NAMES, PIPELINE_OWNER_CAPABILITY_NAMES, PROVIDER_KIND_CAP_NAMES, PYTHON_SCRIPT, PackageUpdateSchema, PackageVersionInfoSchema, PasskeyLoginMethodSchema, PasskeySummarySchema, PcmSampleFormatSchema, PerScopeBreakdownSchema, PetFeederStatusSchema, PickStreamPreferencesSchema, PickStreamRequirementsSchema, PickedCamStreamSchema, PipelineAssignmentSchema, PipelineDefaultStepSchema, PipelineEngineChoiceSchema, PipelineRunResultBridge, PipelineStepInputSchema, PipelineValidationIssueSchema, PipelineValidationResultSchema, PlaceholderReasonSchema, PolygonPointSchema, PowerMeterStatusSchema, PresenceStatusSchema, PressureSensorStatusSchema, PrivacyMaskOptionsSchema, PrivacyMaskPatchSchema, PrivacyMaskRegionSchema, PrivacyMaskShapeSchema, PrivacyMaskStatusSchema, ProfileRtspEntrySchema, ProfileSlotSchema, ProfileSlotStatusSchema, ProviderStatusSchema, PtzAutotrackRuntimeStateSchema, PtzAutotrackSettingsSchema, PtzAutotrackStatusSchema, PtzAutotrackTargetOptionSchema, PtzMoveCommandSchema, PtzPositionSchema, PtzPresetSchema, PtzStatusSchema, QueryFilterSchema, REACHABILITY_FAILURES_TO_OFFLINE, REACHABILITY_POLL_INTERVAL_MS, REACHABILITY_PROBE_TIMEOUT_MS, RECOGNITION_TYPES, RESERVED_BINDING_NAMES, RUNTIME_DEFAULTS, RUNTIME_TO_FORMAT, RawStateResultSchema, ReadSegmentBytesResultSchema, ReadinessRegistry, ReadinessTimeoutError, RecentTracksPageSchema, RecentTracksQueryInput, RecordingAvailabilitySchema, RecordingBandModeSchema, RecordingBandSchema, RecordingBandTriggersSchema, RecordingConfigSchema, RecordingDaysSchema, RecordingDeviceUsageSchema, RecordingLocationUsageSchema, RecordingManifestSchema, RecordingModeSchema, RecordingRangeSchema, RecordingRetentionSchema, RecordingRuleSchema, RecordingScheduleSchema, RecordingStatusSchema, RecordingStorageModeSchema, RecordingStorageUsageSchema, RecordingTriggersSchema, RecordingWeekdaySchema, RedirectLoginMethodSchema, RenderedAsSchema, ReportMotionInputSchema, RingBuffer, RtpSourceSchema, RtspRestreamEntrySchema, RunnerCameraConfigSchema, RunnerCameraDeviceUIFields, RunnerFrameSourceSchema, RunnerInferenceDeviceSchema, RunnerLocalLoadSchema, RunnerLocalMetricsSchema, SCOPE_PRESETS, SCRUB_THUMBNAIL_PRESETS, SCRUB_THUMBNAIL_PRESET_LABELS, SCRUB_THUMBNAIL_PRESET_ORDER, SENSOR_FEATURES, SENSOR_MAP, SOURCE_INFO_METADATA_KEY, STREAM_PROFILE_META, STREAM_QUALITY_LABELS, SUB_DETECTION_TYPES, SYSTEM_CAP_NAMES, SceneCheckSchema, SceneConditionSchema, SceneMonitorSchema, SceneMonitorStateSchema, SceneMonitorStatusSchema, SceneReferenceSchema, ScopedTokenSchema, ScopedTokenSummarySchema, ScoredObjectEventSchema, ScriptRunnerStatusSchema, ScrubThumbnailPresetSchema, SearchResultSchema, SendEmailInputSchema, SendEmailResultSchema, SendResultSchema, SensorEventSchema, ServerBootModeSchema, ServerPackageStatusSchema, ServerRollbackInfoSchema, ServerUpdateActionResultSchema, ServerUpdateCheckResultSchema, ServerUpdateStateSchema, SettingsPatchSchema, SettingsRecordSchema, SettingsSchemaWithValuesSchema, SettingsUpdateResultSchema, ShmRingStatsSchema, SmokeStatusSchema, SmtpStatusSchema, SnapshotImageSchema, SourceInfoSchema, SpatialDetectionSchema, SsoBridgeClaimsSchema, StartEmbeddedInputSchema, StationaryObjectSchema, AbortUploadInputSchema as StorageAbortUploadInputSchema, BeginDownloadInputSchema as StorageBeginDownloadInputSchema, BeginDownloadResultSchema as StorageBeginDownloadResultSchema, BeginUploadInputSchema as StorageBeginUploadInputSchema, BeginUploadResultSchema as StorageBeginUploadResultSchema, EndDownloadInputSchema as StorageEndDownloadInputSchema, FinalizeUploadInputSchema as StorageFinalizeUploadInputSchema, StorageLocationDeclarationSchema, StorageLocationRefSchema, StorageLocationSchema, StorageLocationTypeSchema, ProviderInfoSchema as StorageProviderInfoSchema, ReadChunkInputSchema as StorageReadChunkInputSchema, TestLocationResultSchema as StorageTestLocationResultSchema, WriteChunkInputSchema as StorageWriteChunkInputSchema, StreamCodecSchema, StreamFormatSchema, StreamNetworkStatsSchema, StreamParamsOptionsSchema, StreamParamsStatusSchema, StreamProfileConfigSchema, StreamProfileOptionsSchema, StreamProfilePatchSchema, StreamProfileSchema, StreamSourceEntrySchema, StreamSourceSchema, SubscribeAudioChunksInputSchema, SubscribeAudioChunksResultSchema, SubscribeFramesInputSchema, SubscribeFramesResultSchema, SwitchStatusSchema, SystemMetricsSchema, SystemMirror, TAXONOMY_COLORS, TIMEZONES, TamperStatusSchema, TankStatusSchema, TargetKindCapsSchema, TargetKindLevelSchema, TargetKindSchema, TargetSchema, TemperatureSensorStatusSchema, TestConnectionResultSchema$1 as TestConnectionResultSchema, TestResultSchema, ToastSchema, TokenScopeSchema, TopologyNodeSchema, TopologyProcessSchema, TopologyServiceSchema, TrackCascadeCountsSchema, TrackEnvelopeSchema, TrackProjectionSchema, TrackSchema, TrackStateSchema, TrackZoneFilterSchema, TrackedDetectionSchema, TurnServerSchema, UNIT_TABLE, BrokerInfoSchema$1 as UnifiedBrokerInfoSchema, UnitConversionError, UpdateIntegrationInputSchema, UpdateStatusSchema, UpdateUserInputSchema, UserRecordSchema, UserSummarySchema, VacuumControlStatusSchema, VacuumStateSchema, ValveStateSchema, ValveStatusSchema, VibrationStatusSchema, VideoEncodeSchema, WELL_KNOWN_TABS, WELL_KNOWN_TAB_MAP, WaterHeaterStatusSchema, WeatherStatusSchema, WebrtcStreamChoiceSchema, WebrtcStreamTargetSchema, WhiteBalanceModeSchema, WidgetHostEnum, WidgetLoginMethodSchema, WidgetMetadataSchema, WidgetRemoteSchema, WidgetSizeEnum, YAMNET_TO_MACRO, ZoneKindEnum, ZoneRuleModeEnum, ZoneRuleSchema, ZoneRuleStageEnum, ZoneRulesArraySchema, ZoneSchema, ZoneScopeBreakdownSchema, accessoriesCapability, accessoryStableId, addonPagesCapability, addonPagesSourceCapability, addonRoutesCapability, addonSettingsCapability, addonWidgetsCapability, addonWidgetsSourceCapability, addonsCapability, adminUiCapability, advancedNotifierCapability, airQualitySensorCapability, alarmPanelCapability, alertsCapability, ambientLightSensorCapability, applyTransform, asBoolean, asJsonArray, asJsonObject, asNumber, asString, audioAnalysisCapability, audioAnalyzerCapability, audioCodecCapability, audioMetricsCapability, authProviderCapability, autoAssignProfiles, automationControlCapability, backupCapability, batteryCapability, bestLocationMatch, binaryCapability, bindAddonActions, brightnessCapability, brokerCapability, buildAddonRouteProvider, buildEventKindDescriptor, buildModelVariantGroups, buildStreamParamsConfigSchema, buttonCapability, cameraCredentialsCapability, cameraPipelineConfigCapability, cameraStreamsCapability, canConvertUnit, carbonMonoxideCapability, cellsToRects, classifyStream, classifyStreams, climateControlCapability, collectHydratedFieldEntries, collectHydratedFieldValues, colorCapability, colorForKind, compileExpression, compileExpressionSafe, connectivityCapability, consumablesCapability, contactCapability, controlCapability, convertUnit, cosineSimilarity, coverCapability, createDeviceProxy, createDurableState, createEvent, createExpressionScope, createLazyTrpcSource, createMirrorSource, createRuntimeStateBridge, createSliceHandle, createSystemProxy, customAction, customModelRegistryCapability, dayNightCapability, decoderCapability, defaultDeviceFor, defineCustomActions, describeModelVariant, detectionPipelineCapability, deviceAdoptionCapability, deviceBackendToFormat, deviceCustomAction, deviceDiscoveryCapability, deviceExportCapability, deviceManagerCapability, deviceMatchesProfile, deviceOpsCapability, deviceProviderCapability, deviceStateCapability, deviceStatusCapability, doorbellCapability, embeddingEncoderCapability, emitDownForOwnedCaps, emitReadiness, encodeProfileFromStreamShape, enumSensorCapability, enumerateInferenceDevices, enumerateItemArrayFields, enumerateSchemaFields, errMsg, evaluateAst, evaluateLinkExpression, evaluateZoneRules, event, eventEmitterCapability, eventsCapability, expandCapMethods, extractNestedAddonId, extractSourceInfoFromMetadata, faceGalleryCapability, fanControlCapability, featureProbeCapability, filesystemBrowseCapability, findTimezone, floodCapability, formatForBackend, formatForRuntime, gasCapability, getAudioMacroClassIds, getByPath, getCapsByProviderKind, getTaxonomyEntry, hasMotionTrigger, hfModelUrl, htmlToText, humidifierCapability, humiditySensorCapability, hydrateSchema, imageCapability, imageSettingsCapability, integrationsCapability, intercomCapability, isAgentOnlyPlacement, isArrayOutputSchema, isCollectionArrayMethod, isDeployableToAgent, isDeviceConfigCap, isEvent, isNode, isObjectInput, isVoidInput, jobKindSchema, kebabToCamel, lawnMowerControlCapability, lifecycleJobSchema, lifecycleJobScopeSchema, lifecycleJobStateSchema, lifecycleTaskSchema, llmCapability, llmRuntimeCapability, localNetworkCapability, locationSimilarity, lockControlCapability, logDestinationCapability, loginMethodCapability, looseSchema, makeProfileBrokerId, makeSourceBrokerId, mapAudioLabelToMacro, markdownToHtmlLite, markdownToText, maskUrlCredentials, mediaPlayerCapability, mergeSourceInfo, meshNetworkCapability, method, metricsProviderCapability, migrateConfigToBands, modelConvertCapability, modelDistributorCapability, modelFormatForRuntime, motionCapability, motionDetectionCapability, motionTriggerCapability, motionZonesCapability, mqttBrokerCapability, nativeObjectDetectionCapability, networkAccessCapability, networkQualityCapability, nodePin, nodesCapability, normalizeAddonInitResult, normalizeUnit, notificationOutputCapability, notifierCapability, numericSensorCapability, oauthIntegrationCapability, objectInputDeclaresAddonId, osdCapability, parseCameraStreamConfig, parseExpression, parseJsonArray, parseJsonObject, parseJsonUnknown, parseProfileBrokerId, parseStreamParamsFormPatch, petFeederCapability, pickAccessoryControl, pickPreferredRtspEntry, pipelineAnalyticsCapability, pipelineExecutorCapability, pipelineOrchestratorCapability, pipelineRunnerCapability, plateGalleryCapability, platformProbeCapability, powerMeterCapability, prepareNotification, presenceCapability, pressureSensorCapability, privacyMaskCapability, procedureAuthKey, ptzAutotrackCapability, ptzCapability, pythonScriptForBackend, readNodePin, readinessKey, rebootCapability, recordingCapability, recordingExportCapability, rectsToCells, requiresPython, resolveAddonExecution, resolveAddonGroup, resolveAddonPlacement, resolveAddonRuntime, resolveCapMount, resolveDetectionRuntime, resolveDeviceControlKind, resolveDeviceProfile, resolveFormat, resolveHydratedFieldValue, resolveModelFormat, resolveMutate, resolveRunnerId, resolveScrubThumbnailGeometry, resolveVariantModelId, runInferenceStep, runtimeDevices, sceneMonitorCapability, scopeKey, scoreRuntimes, scriptRunnerCapability, selectAssignedProfileSlots, serverManagementCapability, setByPath, settingsStoreCapability, sleep, sleepCancellable, smokeCapability, smtpProviderCapability, snapshotCapability, ssoBridgeCapability, startReachabilityPoll, storageCapability, storageEvictableCapability, storageProviderCapability, streamBrokerCapability, streamCatalogCapability, streamParamsCapability, streamPixels, streamQualityLabel, subKindsOf, supportedRuntimes, switchCapability, synthesizeSourceInfo, systemCapability, tamperCapability, taskLogEntrySchema, taskPhaseSchema, taskTargetSchema, temperatureSensorCapability, textToHtml, toDeviceSummary, toExpressionValue, toStreamSourceEntry, toastCapability, tokenize, transcodeBody, tryConvertUnit, turnProviderCapability, unitDimension, unitsForDimension, updateCapability, userManagementCapability, userPasskeysCapability, vacuumControlCapability, validateExpressionSource, valveCapability, vibrationCapability, videoclipsCapability, viewerUiCapability, waterHeaterCapability, weatherCapability, webrtcClientHintsSchema, webrtcSessionCapability, wiringAddonHealthSchema, wiringHealthSnapshotSchema, wiringNodeHealthSchema, wiringProbeKindSchema, wiringProbeResultSchema, zodEntriesToConfigUI, zoneAnalyticsCapability, zoneRulesCapability, zonesCapability };
+export { ACCESSORY_LABEL, ALL_CAPABILITY_DEFINITIONS, APPLE_SA_TO_MACRO, AUDIO_BACKEND_CHOICES, AUDIO_MACRO_LABELS, AccessoriesStatusSchema, AccessoryKind, AddBrokerInputSchema, AddonAutoUpdateSchema, AddonListItemSchema, AddonPageDeclarationSchema, AddonPageInfoSchema, AdoptInputSchema as AdoptionAdoptInputSchema, AdoptResultSchema as AdoptionAdoptResultSchema, AdoptionFilterSchema, GetCandidateInputSchema as AdoptionGetCandidateInputSchema, ListCandidatesInputSchema as AdoptionListCandidatesInputSchema, ListCandidatesOutputSchema as AdoptionListCandidatesOutputSchema, ReleaseInputSchema as AdoptionReleaseInputSchema, AdoptionStatusSchema, AgentLoadSummarySchema, AirQualitySensorStatusSchema, AlarmArmModeSchema, AlarmPanelStatusSchema, AlarmStateSchema, AlertSchema, AlertSeveritySchema, AlertSourceSchema, AlertStatusSchema, AmbientLightSensorStatusSchema, ApiKeyRecordSchema, ApiKeySummarySchema, ArchiveEntrySchema, ArchiveManifestSchema, AttachmentMediaTypeSchema, AttachmentSchema, AudioAnalysisResultSchema, AudioAnalysisSettingsSchema, AudioChunkInputSchema, AudioClassSummarySchema, AudioClassificationLabelSchema, AudioClassificationResultSchema, AudioCodecInfoSchema, AudioDecodeSessionConfigSchema, AudioEncodeSchema, AudioEncodeSessionConfigSchema, AudioEncodedChunkSchema, AudioEventSchema, AudioLevelSchema, AudioMetricsHistoryPointSchema, AudioMetricsHistorySchema, AudioMetricsSnapshotSchema, AudioPcmChunkSchema, AuthResultSchema, AutoUpdateSettingsSchema, AutomationControlStatusSchema, AvailableIntegrationTypeSchema, BACKEND_TO_FORMAT, BATTERY_DEVICE_PROFILE, BacklightModeSchema, BackupDestinationInfoSchema, BackupEntrySchema, BaseAddon, BaseDevice, BaseDeviceProvider, BatteryStatusSchema, BinaryStatusSchema, BoundingBoxSchema, BrightnessStatusSchema, AddInputSchema as BrokerAddInputSchema, BrokerAudioClientSchema, BrokerClientsSchema, BrokerConnectionDetailsSchema, BrokerConsumerAttributionSchema, BrokerConsumerKindSchema, BrokerDecodedClientSchema, BrokerEncodedClientSchema, GetStateInputSchema as BrokerGetStateInputSchema, BrokerInfoSchema, BrokerProviderInfoSchema, PublishInputSchema as BrokerPublishInputSchema, RegistryStatusSchema as BrokerRegistryStatusSchema, BrokerRtspClientSchema, BrokerStatsSchema, BrokerStatusEnum, BrokerStatusSchema, SubscribeInputSchema as BrokerSubscribeInputSchema, SubscribeResultSchema as BrokerSubscribeResultSchema, TestConnectionResultSchema as BrokerTestConnectionResultSchema, UnsubscribeInputSchema as BrokerUnsubscribeInputSchema, CAM_PROFILE_ORDER, CAPABILITY_NAMES, CAPABILITY_ROUTER_KEYS, CAP_NAMES_WITH_STATUS, CAP_NODE_PIN_CONTEXT_KEY, CAP_PROVIDER_KIND_MAP, COCO_80_LABELS, COCO_TO_MACRO, CamProfileSchema, CamStreamDescriptorSchema, CamStreamKindSchema, CamStreamResolutionSchema, CameraAssignmentStatusSchema, CameraAudioStatusSchema, CameraBrokerProfileSchema, CameraBrokerStatusSchema, CameraCredentialsSchema, CameraCredentialsStatusSchema, CameraDecoderShmSchema, CameraDecoderStatusSchema, CameraDetectionPhaseSchema, CameraDetectionProvisioningSchema, CameraDetectionProvisioningStateSchema, CameraDetectionStatusSchema, CameraMetricsSchema, CameraMetricsWithDeviceIdSchema, CameraMotionStatusSchema, CameraRecordingModeSchema, CameraRecordingStatusSchema, CameraSourceStatusSchema, CameraSourceStreamSchema, CameraStatusSchema, CameraStreamSchema, CandidateQueryFilterSchema, CapScopeSchema, CapabilityBindingsSchema, CarbonMonoxideStatusSchema, ChargingStatus, ClientNetworkStatsSchema, ClimateControlStatusSchema, ClipPlaybackSchema, ClipSchema, ClusterAddonNodeDeploymentSchema, ClusterAddonStatusEntrySchema, CollectionColumnSchema, CollectionIndexSchema, ColorStatusSchema, ConfigEntrySchema, ConfigSectionWithValuesSchema, ConfigTabDeclarationSchema, ConnectivityStatusSchema, ConsumableItemSchema, ConsumablesStatusSchema, ContactStatusSchema, ControlKindSchema, ControlStatusSchema, ConvertArtifactSchema, ConvertResultSchema, ConvertTargetSchema, CoverStateSchema, CoverStatusSchema, CreateApiKeyInputSchema, CreateApiKeyResultSchema, CreateIntegrationInputSchema, CreateScopedTokenInputSchema, CreateScopedTokenResultSchema, CreateUserInputSchema, CustomActionInputSchema, CustomModelDescriptorSchema, DATAPLANE_SECRET_HEADER, DEFAULT_ADDON_PLACEMENT, DEFAULT_AUDIO_ANALYZER_CONFIG, DEFAULT_DECODER_HWACCEL_CONFIG, DEFAULT_EVENT_COLOR, DEFAULT_FEATURES, DEFAULT_RETENTION, DEFAULT_SCRUB_THUMBNAIL_PRESET, DEVICE_BACKEND_TO_FORMAT, DEVICE_CAP_NAMES, DEVICE_PROFILES, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DEVICE_TYPE_CONTROL_KIND, DEVICE_TYPE_INFO, DayNightModeSchema, DayNightOptionsSchema, DayNightSettingsPatchSchema, DayNightStatusSchema, DecodedAudioChunkSchema, DecodedFrameSchema, DecoderSessionConfigSchema, DecoderStatsSchema, DeleteIntegrationResultSchema, DetectionSourceSchema, DeviceCodeSeveritySchema, DeviceConfig, DeviceDiscoveryStatusSchema, ExposeInputSchema as DeviceExportExposeInputSchema, DeviceExportStatusSchema, UnexposeInputSchema as DeviceExportUnexposeInputSchema, DeviceFeature, DeviceInfoSchema, DeviceLinkModeSchema, DeviceNetworkStatsSchema, DeviceRole, DeviceRuntimeState, DeviceStatusSchema, DeviceType, DiscoveredChildDeviceSchema, DiscoveredChildStatusSchema, DiscoveredDeviceSchema, DiscoveredTargetSchema, DisposerChain, DoorbellPressEventSchema, DoorbellStatusSchema, EVENTFUL_CAP_NAMES, EVENT_KIND_BY_CAP, EVENT_PAD_MS, EVENT_TAXONOMY, EXPRESSION_BUILTINS, EXPRESSION_BUILTIN_NAMES, EXPRESSION_COMPILE_CACHE_CAPACITY, EXPRESSION_IDENTIFIER_RE, EXPRESSION_INJECTED_NOW, ElementConfigStore, EmbeddingInfoSchema, EmbeddingResultSchema, EncodeProfileSchema, EncodedPacketSchema, EnrichedWidgetMetadataSchema, EnumSensorDateTimeFormatSchema, EnumSensorStatusSchema, EventCategory, EventEmitterStatusSchema, EventFireSchema, EventItemSchema, EventKindCategorySchema, EventKindDescriptorSchema, EventKindIconSchema, EventKindSchema, EventSourceType, ExportDownloadSchema, ExportOptionsSchema, ExportRecordSchema, ExportSetupFieldSchema, ExportSetupSchema, ExportSpeedSchema, ExportStateSchema, ExportTimelapseSchema, ExposedDeviceSchema, ExposureModeSchema, ExpressionEvalError, ExpressionParseError, FanControlStatusSchema, FanDirectionSchema, FeatureManifestSchema, FeatureProbeStatusSchema, FloodStatusSchema, FrameHandleFormatSchema, FrameHandleSchema, FrameInputSchema, GasStatusSchema, GetStreamWithCodecInputSchema, GlobalMetricsSchema, HF_BASE_URL, HF_REPO, HWACCEL_OPTIONS, HealthStatusSchema, HistoryPointSchema, HistoryResolutionEnum, HumidifierStatusSchema, HumiditySensorStatusSchema, HvacModeSchema, ImageRotateSchema, ImageSettingsOptionsSchema, ImageSettingsPatchSchema, ImageSettingsStatusSchema, ImageStatusSchema, IngestOwnerSchema, InstalledPackageSchema, IntegrationLiteSchema, IntegrationWithStateSchema, IntercomAbilitySchema, IntercomStatusSchema, KNOWN_CAP_NAMES, KeyEventSchema, LabelDefinitionSchema, LawnMowerActivitySchema, LawnMowerControlStatusSchema, LinkedDeviceSchema, LlmDefaultSchema, LlmDefaultSelectorSchema, LlmErrorCodeSchema, LlmGenerateBaseInputSchema, LlmGenerateErrSchema, LlmGenerateOkSchema, LlmGenerateResultSchema, LlmImageSchema, LlmNodeModelSchema, LlmProfileKindDescriptorSchema, LlmProfileKindSchema, LlmProfileSchema, LlmRuntimeCompleteInputSchema, LlmRuntimeDiskUsageSchema, LlmRuntimeNodeSchema, LlmRuntimeStatusSchema, LlmUsageRollupSchema, LlmUsageSchema, LocateSegmentResultSchema, LocationStatSchema, LockControlStatusSchema, LockStateSchema, LogEntrySchema, LogLevelSchema, LogStreamEntrySchema, LoginMethodContributionSchema, LoginStageEnum, MACRO_LABELS, MAX_EXPRESSION_AST_NODES, MAX_EXPRESSION_BINDINGS, MAX_EXPRESSION_CALL_ARGS, MAX_EXPRESSION_EVAL_STEPS, MAX_EXPRESSION_SOURCE_LENGTH, METHOD_ACCESS_MAP, MODEL_FORMATS, MOTION_TRIGGER_FEATURE, ManagedModelCatalogEntrySchema, ManagedModelRefSchema, ManagedRuntimeConfigSchema, MaskGridDimsSchema, MaskGridShapeSchema, MaskLineShapeSchema, MaskPointSchema, MaskPolygonShapeSchema, MaskPolygonVerticesSchema, MaskRectShapeSchema, MaskShapeKindSchema, MaskShapeSchema, MediaFileSchema, MediaPlayerRepeatSchema, MediaPlayerStateSchema, MediaPlayerStatusSchema, MeshPeerSchema, MeshStatusSchema, MethodAccessSchema, ModelCatalogEntrySchema, ModelConvertInputSchema, ModelConvertMetadataSchema, ModelDistributeInputSchema, ModelDistributeResultSchema, ModelExtraFileSchema, ModelFormatEntrySchema, ModelFormatsSchema, ModelSubstitutionSchema, ModelVariantGroupSchema, MotionAnalysisResultSchema, MotionEventSchema, MotionOnMotionChangedDataSchema, MotionRegionSchema, MotionSourceEnum, MotionSourcesSchema, MotionStatusSchema, MotionTriggerRuntimeStateSchema, MotionTriggerStatusSchema, MotionZoneOptionsSchema, MotionZonePatchSchema, MotionZoneRegionSchema, MotionZoneStatusSchema, StatusSchema as MqttBrokerStatusSchema, NC_CONDITION_CATALOG, NC_HISTORY_LIMIT_DEFAULT, NC_HISTORY_LIMIT_MAX, NC_MAX_PER_TRACK_IMMEDIATE, NC_TAXONOMY, NativeCropBboxSchema, NativeCropRefSchema, NativeCropResultSchema, NativeDetectionSchema, NativeObjectClassEnum, NativeObjectDetectionRuntimeStateSchema, NativeObjectDetectionStatusSchema, NcConditionDescriptorSchema, NcConditionsSchema, NcDeliverySchema, NcHistoryEntrySchema, NcHistoryFilterSchema, NcHistoryRecordKindSchema, NcHistoryStatusSchema, NcHistorySubjectSchema, NcMediaPolicySchema, NcOccupancyConditionSchema, NcPlateMatcherSchema, NcRuleInputSchema, NcRulePatchSchema, NcRuleSchema, NcRuleTargetSchema, NcScheduleSchema, NcScheduleWindowSchema, NcTaxonomyEntrySchema, NcTaxonomySchema, NcTestResultSchema, NcThrottleSchema, NcZoneConditionSchema, NetworkAccessStatusSchema, NetworkAddressSchema, NetworkEndpointSchema, NotificationActionSchema, NotificationFormatSchema, NotificationSchema, NotifierStatusSchema, NumericSensorStatusSchema, OPS_LOG_DEFAULT_LIMIT, OPS_LOG_RING_DEFAULT_MAX, OauthIntegrationDescriptorSchema, ObjectEventSchema, OpsLogDomainSchema, OpsLogEntrySchema, OpsLogOpSchema, OpsLogQueryInputSchema, OpsLogReasonSchema, OrchestratorMetricsSchema, OsdOverlayKindEnum, OsdOverlayPatchSchema, OsdOverlaySchema, OsdPositionEnum, OsdStatusSchema, PET_FEEDER_MANUAL_FEED_MAX, PET_FEEDER_MANUAL_FEED_MIN, PIPELINE_FLOW_CAPABILITY_NAMES, PIPELINE_OWNER_CAPABILITY_NAMES, PROVIDER_KIND_CAP_NAMES, PYTHON_SCRIPT, PackageUpdateSchema, PackageVersionInfoSchema, PasskeyLoginMethodSchema, PasskeySummarySchema, PcmSampleFormatSchema, PerScopeBreakdownSchema, PetFeederStatusSchema, PickStreamPreferencesSchema, PickStreamRequirementsSchema, PickedCamStreamSchema, PipelineAssignmentSchema, PipelineDefaultStepSchema, PipelineEngineChoiceSchema, PipelineRunResultBridge, PipelineStepInputSchema, PipelineValidationIssueSchema, PipelineValidationResultSchema, PlaceholderReasonSchema, PolygonPointSchema, PowerMeterStatusSchema, PresenceStatusSchema, PressureSensorStatusSchema, PrivacyMaskOptionsSchema, PrivacyMaskPatchSchema, PrivacyMaskRegionSchema, PrivacyMaskShapeSchema, PrivacyMaskStatusSchema, ProfileRtspEntrySchema, ProfileSlotSchema, ProfileSlotStatusSchema, ProviderStatusSchema, PtzAutotrackRuntimeStateSchema, PtzAutotrackSettingsSchema, PtzAutotrackStatusSchema, PtzAutotrackTargetOptionSchema, PtzMoveCommandSchema, PtzOptionsSchema, PtzPositionSchema, PtzPresetSchema, PtzStatusSchema, QueryFilterSchema, REACHABILITY_FAILURES_TO_OFFLINE, REACHABILITY_POLL_INTERVAL_MS, REACHABILITY_PROBE_TIMEOUT_MS, RECOGNITION_TYPES, RESERVED_BINDING_NAMES, RUNTIME_DEFAULTS, RUNTIME_TO_FORMAT, RawStateResultSchema, ReadSegmentBytesResultSchema, ReadinessRegistry, ReadinessTimeoutError, RecentTracksPageSchema, RecentTracksQueryInput, RecordingAvailabilitySchema, RecordingBandModeSchema, RecordingBandSchema, RecordingBandTriggersSchema, RecordingConfigSchema, RecordingDaysSchema, RecordingDeviceUsageSchema, RecordingLocationUsageSchema, RecordingManifestSchema, RecordingModeSchema, RecordingRangeSchema, RecordingRetentionSchema, RecordingRuleSchema, RecordingScheduleSchema, RecordingStatusSchema, RecordingStorageModeSchema, RecordingStorageUsageSchema, RecordingTriggersSchema, RecordingWeekdaySchema, RedirectLoginMethodSchema, RenderedAsSchema, ReportMotionInputSchema, RingBuffer, RtpSourceSchema, RtspRestreamEntrySchema, RunnerCameraConfigSchema, RunnerCameraDeviceUIFields, RunnerFrameSourceSchema, RunnerInferenceDeviceSchema, RunnerLocalLoadSchema, RunnerLocalMetricsSchema, SCOPE_PRESETS, SCRUB_THUMBNAIL_PRESETS, SCRUB_THUMBNAIL_PRESET_LABELS, SCRUB_THUMBNAIL_PRESET_ORDER, SENSOR_FEATURES, SENSOR_MAP, SOURCE_INFO_METADATA_KEY, STREAM_PROFILE_META, STREAM_QUALITY_LABELS, SUB_DETECTION_TYPES, SYSTEM_CAP_NAMES, SceneCheckSchema, SceneConditionSchema, SceneMonitorSchema, SceneMonitorStateSchema, SceneMonitorStatusSchema, SceneReferenceSchema, ScopedTokenSchema, ScopedTokenSummarySchema, ScoredObjectEventSchema, ScriptRunnerStatusSchema, ScrubThumbnailPresetSchema, SearchResultSchema, SendEmailInputSchema, SendEmailResultSchema, SendResultSchema, SensorEventSchema, ServerBootModeSchema, ServerPackageStatusSchema, ServerRollbackInfoSchema, ServerUpdateActionResultSchema, ServerUpdateCheckResultSchema, ServerUpdateStateSchema, SettingsPatchSchema, SettingsRecordSchema, SettingsSchemaWithValuesSchema, SettingsUpdateResultSchema, ShmRingStatsSchema, SmokeStatusSchema, SmtpStatusSchema, SnapshotImageSchema, SourceInfoSchema, SpatialDetectionSchema, SsoBridgeClaimsSchema, StartEmbeddedInputSchema, StationaryObjectSchema, AbortUploadInputSchema as StorageAbortUploadInputSchema, BeginDownloadInputSchema as StorageBeginDownloadInputSchema, BeginDownloadResultSchema as StorageBeginDownloadResultSchema, BeginUploadInputSchema as StorageBeginUploadInputSchema, BeginUploadResultSchema as StorageBeginUploadResultSchema, EndDownloadInputSchema as StorageEndDownloadInputSchema, FinalizeUploadInputSchema as StorageFinalizeUploadInputSchema, StorageLocationDeclarationSchema, StorageLocationRefSchema, StorageLocationSchema, StorageLocationTypeSchema, ProviderInfoSchema as StorageProviderInfoSchema, ReadChunkInputSchema as StorageReadChunkInputSchema, TestLocationResultSchema as StorageTestLocationResultSchema, WriteChunkInputSchema as StorageWriteChunkInputSchema, StreamCodecSchema, StreamFormatSchema, StreamNetworkStatsSchema, StreamParamsOptionsSchema, StreamParamsStatusSchema, StreamProfileConfigSchema, StreamProfileOptionsSchema, StreamProfilePatchSchema, StreamProfileSchema, StreamSourceEntrySchema, StreamSourceSchema, SubscribeAudioChunksInputSchema, SubscribeAudioChunksResultSchema, SubscribeFramesInputSchema, SubscribeFramesResultSchema, SwitchStatusSchema, SystemMetricsSchema, SystemMirror, TAXONOMY_COLORS, TIMEZONES, TamperStatusSchema, TankStatusSchema, TargetKindCapsSchema, TargetKindLevelSchema, TargetKindSchema, TargetSchema, TemperatureSensorStatusSchema, TestConnectionResultSchema$1 as TestConnectionResultSchema, TestResultSchema, ToastSchema, TokenScopeSchema, TopologyNodeSchema, TopologyProcessSchema, TopologyServiceSchema, TrackCascadeCountsSchema, TrackEnvelopeSchema, TrackProjectionSchema, TrackSchema, TrackStateSchema, TrackZoneFilterSchema, TrackedDetectionSchema, TurnServerSchema, UNIT_TABLE, BrokerInfoSchema$1 as UnifiedBrokerInfoSchema, UnitConversionError, UpdateIntegrationInputSchema, UpdateStatusSchema, UpdateUserInputSchema, UserRecordSchema, UserSummarySchema, VacuumControlStatusSchema, VacuumStateSchema, ValveStateSchema, ValveStatusSchema, VibrationStatusSchema, VideoEncodeSchema, WELL_KNOWN_TABS, WELL_KNOWN_TAB_MAP, WaterHeaterStatusSchema, WeatherStatusSchema, WebrtcStreamChoiceSchema, WebrtcStreamTargetSchema, WhiteBalanceModeSchema, WidgetHostEnum, WidgetLoginMethodSchema, WidgetMetadataSchema, WidgetRemoteSchema, WidgetSizeEnum, YAMNET_TO_MACRO, ZoneKindEnum, ZoneRuleModeEnum, ZoneRuleSchema, ZoneRuleStageEnum, ZoneRulesArraySchema, ZoneSchema, ZoneScopeBreakdownSchema, accessoriesCapability, accessoryStableId, addonPagesCapability, addonPagesSourceCapability, addonRoutesCapability, addonSettingsCapability, addonWidgetsCapability, addonWidgetsSourceCapability, addonsCapability, adminUiCapability, airQualitySensorCapability, alarmPanelCapability, alertsCapability, ambientLightSensorCapability, applyTransform, asBoolean, asJsonArray, asJsonObject, asNumber, asString, audioAnalysisCapability, audioAnalyzerCapability, audioCodecCapability, audioMetricsCapability, authProviderCapability, autoAssignProfiles, automationControlCapability, backupCapability, batteryCapability, bestLocationMatch, binaryCapability, bindAddonActions, brightnessCapability, brokerCapability, buildAddonRouteProvider, buildEventKindDescriptor, buildModelVariantGroups, buildNcTaxonomy, buildStreamParamsConfigSchema, buttonCapability, cameraCredentialsCapability, cameraPipelineConfigCapability, cameraStreamsCapability, canConvertUnit, carbonMonoxideCapability, cellsToRects, classifyStream, classifyStreams, climateControlCapability, collectHydratedFieldEntries, collectHydratedFieldValues, colorCapability, colorForKind, compileExpression, compileExpressionSafe, connectivityCapability, consumablesCapability, contactCapability, controlCapability, convertUnit, cosineSimilarity, coverCapability, createDeviceProxy, createDurableState, createEvent, createExpressionScope, createLazyTrpcSource, createMirrorSource, createRuntimeStateBridge, createSliceHandle, createSystemProxy, customAction, customModelRegistryCapability, dayNightCapability, decoderCapability, defaultDeviceFor, defineCustomActions, describeModelVariant, detectionPipelineCapability, deviceAdoptionCapability, deviceBackendToFormat, deviceCustomAction, deviceDiscoveryCapability, deviceExportCapability, deviceManagerCapability, deviceMatchesProfile, deviceOpsCapability, deviceProviderCapability, deviceStateCapability, deviceStatusCapability, doorbellCapability, embeddingEncoderCapability, emitDownForOwnedCaps, emitReadiness, encodeProfileFromStreamShape, enumSensorCapability, enumerateInferenceDevices, enumerateItemArrayFields, enumerateSchemaFields, errMsg, evaluateAst, evaluateLinkExpression, evaluateZoneRules, event, eventEmitterCapability, eventsCapability, expandCapMethods, extractNestedAddonId, extractSourceInfoFromMetadata, faceGalleryCapability, fanControlCapability, featureProbeCapability, filesystemBrowseCapability, findTimezone, floodCapability, formatForBackend, formatForRuntime, gasCapability, getAudioMacroClassIds, getByPath, getCapsByProviderKind, getTaxonomyEntry, hasMotionTrigger, hfModelUrl, htmlToText, humidifierCapability, humiditySensorCapability, hydrateSchema, imageCapability, imageSettingsCapability, integrationsCapability, intercomCapability, isAgentOnlyPlacement, isArrayOutputSchema, isCollectionArrayMethod, isDeployableToAgent, isDeviceConfigCap, isEvent, isNode, isObjectInput, isVoidInput, jobKindSchema, kebabToCamel, lawnMowerControlCapability, lifecycleJobSchema, lifecycleJobScopeSchema, lifecycleJobStateSchema, lifecycleTaskSchema, llmCapability, llmRuntimeCapability, localNetworkCapability, locationSimilarity, lockControlCapability, logDestinationCapability, loginMethodCapability, looseSchema, makeProfileBrokerId, makeSourceBrokerId, mapAudioLabelToMacro, markdownToHtmlLite, markdownToText, maskUrlCredentials, mediaPlayerCapability, mergeSourceInfo, meshNetworkCapability, method, metricsProviderCapability, migrateConfigToBands, modelConvertCapability, modelDistributorCapability, modelFormatForRuntime, motionCapability, motionDetectionCapability, motionTriggerCapability, motionZonesCapability, mqttBrokerCapability, nativeObjectDetectionCapability, networkAccessCapability, networkQualityCapability, nodePin, nodesCapability, normalizeAddonInitResult, normalizeUnit, notificationOutputCapability, notificationRulesCapability, notifierCapability, numericSensorCapability, oauthIntegrationCapability, objectInputDeclaresAddonId, osdCapability, parseCameraStreamConfig, parseExpression, parseJsonArray, parseJsonObject, parseJsonUnknown, parseProfileBrokerId, parseStreamParamsFormPatch, petFeederCapability, pickAccessoryControl, pickPreferredRtspEntry, pipelineAnalyticsCapability, pipelineExecutorCapability, pipelineOrchestratorCapability, pipelineRunnerCapability, plateGalleryCapability, platformProbeCapability, powerMeterCapability, prepareNotification, presenceCapability, pressureSensorCapability, privacyMaskCapability, procedureAuthKey, ptzAutotrackCapability, ptzCapability, pythonScriptForBackend, readNodePin, readinessKey, rebootCapability, recordingCapability, recordingExportCapability, rectsToCells, requiresPython, resolveAddonExecution, resolveAddonGroup, resolveAddonPlacement, resolveAddonRuntime, resolveCapMount, resolveDetectionRuntime, resolveDeviceControlKind, resolveDeviceProfile, resolveFormat, resolveHydratedFieldValue, resolveModelFormat, resolveMutate, resolveRunnerId, resolveScrubThumbnailGeometry, resolveVariantModelId, runInferenceStep, runtimeDevices, sceneMonitorCapability, scopeKey, scoreRuntimes, scriptRunnerCapability, selectAssignedProfileSlots, serverManagementCapability, setByPath, settingsStoreCapability, sleep, sleepCancellable, smokeCapability, smtpProviderCapability, snapshotCapability, ssoBridgeCapability, startReachabilityPoll, storageCapability, storageEvictableCapability, storageProviderCapability, streamBrokerCapability, streamCatalogCapability, streamParamsCapability, streamPixels, streamQualityLabel, subKindsOf, supportedRuntimes, switchCapability, synthesizeSourceInfo, systemCapability, tamperCapability, taskLogEntrySchema, taskPhaseSchema, taskTargetSchema, temperatureSensorCapability, textToHtml, toDeviceSummary, toExpressionValue, toStreamSourceEntry, toastCapability, tokenize, transcodeBody, tryConvertUnit, turnProviderCapability, unitDimension, unitsForDimension, updateCapability, userManagementCapability, userPasskeysCapability, vacuumControlCapability, validateExpressionSource, valveCapability, vibrationCapability, videoclipsCapability, viewerUiCapability, waterHeaterCapability, weatherCapability, webrtcClientHintsSchema, webrtcSessionCapability, wiringAddonHealthSchema, wiringHealthSnapshotSchema, wiringNodeHealthSchema, wiringProbeKindSchema, wiringProbeResultSchema, zodEntriesToConfigUI, zoneAnalyticsCapability, zoneRulesCapability, zonesCapability };