camstack 1.2.23 → 1.2.25

package/dist/{launcher-SELE3BGC.js → launcher-B477E3FR.js}

@@ -23631,9 +23631,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-BV5Bug9t.js
-var require_dist_BV5Bug9t = __commonJS({
-  "../system/dist/dist-BV5Bug9t.js"(exports) {
+// ../system/dist/dist-B4WyhfjH.js
+var require_dist_B4WyhfjH = __commonJS({
+  "../system/dist/dist-B4WyhfjH.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -29091,7 +29091,14 @@ var require_dist_BV5Bug9t = __commonJS({
           low: zod.z.string().optional()
         }),
         lastChangedAt: zod.z.number()
-      })
+      }),
+      /**
+      * Runtime-state durability: **session** — a restored `slotStatuses: streaming` for a camera that has been dark for two hours is a lie the UI renders as truth.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     function isVoidInput(schema) {
       const def = schema._def;
@@ -29761,6 +29768,13 @@ var require_dist_BV5Bug9t = __commonJS({
         kind: "poll"
       },
       runtimeState: DeviceDiscoveryStatusSchema.extend({ lastFetchedAt: zod.z.number().int().nonnegative() }),
+      /**
+      * Runtime-state durability: **session** — 5.7 KB of scan output on the largest device, fully re-derivable by re-scanning.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session",
       methods: {
         /**
         * Snapshot of the current `discovered` list. Returns the
@@ -31961,6 +31975,7 @@ var require_dist_BV5Bug9t = __commonJS({
       "acknowledge",
       "dismiss",
       "silence",
+      "snooze",
       "view",
       "play",
       "open",
@@ -31968,9 +31983,13 @@ var require_dist_BV5Bug9t = __commonJS({
       "lock",
       "unlock",
       "arm",
+      "arm-home",
+      "arm-away",
+      "arm-night",
       "disarm",
       "light",
-      "alert"
+      "alert",
+      "camera"
     ]);
     var NotificationActionSchema = zod.z.object({
       id: zod.z.string(),
@@ -31985,7 +32004,23 @@ var require_dist_BV5Bug9t = __commonJS({
       * else — see `notification-center/action-token.ts` for what that does and
       * does not buy.
       */
-      destructive: zod.z.boolean().optional()
+      destructive: zod.z.boolean().optional(),
+      /**
+      * How the tap should REACH the url.
+      *
+      * `navigate` (absent, and every button authored before this field) opens it:
+      * the phone leaves the notification and shows whatever the callback returns.
+      * That is right for a button whose answer the operator wants to read.
+      *
+      * `background` fires it as a POST and stays put. It exists for the buttons
+      * whose whole point is not to interrupt — "silence this for 30 minutes" is
+      * an answer to the notification, and being thrown into a browser tab to
+      * confirm it costs more attention than the notification did. A backend that
+      * cannot do a background call renders it as an ordinary link (the adapters
+      * fall back rather than dropping the button), so this is a preference, never
+      * a requirement.
+      */
+      mode: zod.z.enum(["navigate", "background"]).optional()
     });
     var NotificationSchema = zod.z.object({
       body: zod.z.string(),
@@ -32143,6 +32178,24 @@ var require_dist_BV5Bug9t = __commonJS({
         }), zod.z.void(), { kind: "mutation" })
       }
     };
+    new Set([
+      {
+        id: "person",
+        name: "Person"
+      },
+      {
+        id: "vehicle",
+        name: "Vehicle"
+      },
+      {
+        id: "animal",
+        name: "Animal"
+      },
+      {
+        id: "package",
+        name: "Package"
+      }
+    ].map((l) => l.id));
     var COCO_TO_MACRO = {
       mapping: {
         person: "person",
@@ -32763,7 +32816,17 @@ var require_dist_BV5Bug9t = __commonJS({
       * full slice; renders an arm button per `availableModes` entry and
       * a PIN field iff `requiresCode === true`.
       */
-      runtimeState: AlarmPanelStatusSchema
+      runtimeState: AlarmPanelStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — armed state is the one thing a panel must not lose across a restart.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var MaskPointSchema = zod.z.object({
       x: zod.z.number(),
@@ -32831,6 +32894,8 @@ var require_dist_BV5Bug9t = __commonJS({
       "alarm-triggered",
       "alarm-armed",
       "alarm-disarmed",
+      "alarm-arming",
+      "alarm-arm-refused",
       "camera-online",
       "camera-offline",
       "camera-disabled",
@@ -32861,6 +32926,7 @@ var require_dist_BV5Bug9t = __commonJS({
       nodeIds: zod.z.array(zod.z.string().min(1)).min(1).optional(),
       packageNames: zod.z.array(zod.z.string().min(1)).min(1).optional()
     });
+    var NC_SNOOZE_MAX_MINUTES = 1440;
     var NcScheduleWindowSchema = zod.z.object({
       /** Days of week the window STARTS on (0 = Sunday … 6 = Saturday). */
       days: zod.z.array(zod.z.number().int().min(0).max(6)).min(1),
@@ -33117,15 +33183,15 @@ var require_dist_BV5Bug9t = __commonJS({
       * (an `immediate` rule naming an `audio-*` class, one notification per
       * classified sample) stays exactly as it was for rules that already use it.
       *
-      * NOT in {@link NC_CONDITION_CATALOG} yet, and that is the sequencing rule
-      * rather than an oversight: the viewer mirrors the descriptor enums BY HAND
-      * (`camstack/src/data/notification-center.ts`, guarded by
-      * `scripts/check-viewer-condition-mirror.ts`) and its rule editor STRIPS the
+      * In {@link NC_CONDITION_CATALOG} since P2, and the ORDER it got there is the
+      * rule rather than an accident: the viewer mirrors the descriptor enums BY
+      * HAND (`camstack/src/data/notification-center.ts`, guarded by
+      * `scripts/check-viewer-condition-mirror.ts`) and its rule editor strips the
       * condition fields it does not know when a rule is saved from the phone.
       * Publishing an editor for a condition the app cannot round-trip is how an
-      * operator loses a rule's conditions by opening it — so the descriptor, the
-      * admin widget and the viewer mirror land together (P2 + P3), and only then
-      * does an audio rule become authorable.
+      * operator loses a rule's conditions by opening it — so the viewer mirror
+      * (P3, shipped) went FIRST, and the descriptor an editor renders from
+      * follows here.
       */
       audio: NcAudioConditionSchema.optional()
     });
@@ -33294,6 +33360,30 @@ var require_dist_BV5Bug9t = __commonJS({
       */
       snoozeAllowGlobal: zod.z.boolean().optional(),
       /**
+      * The snooze durations THIS rule's notification offers as buttons, in
+      * minutes.
+      *
+      * Three states, and all three are distinct — which is exactly why this is
+      * `.optional()` and never `.default()`. A Zod default does not run on the
+      * addon cap path (three production failures in one day), so a schema default
+      * would collapse the first two:
+      *
+      * | value | meaning |
+      * | --- | --- |
+      * | absent | the operator never said ⇒ {@link NC_DEFAULT_SNOOZE_MINUTES} |
+      * | `[]` | **no snooze buttons on this rule** — the explicit override |
+      * | a list | these choices, de-duplicated and sorted, at most four |
+      *
+      * `.max(4)` because the notifier's own action budget is small (ntfy allows
+      * three buttons in total) and a rule that spent it all on snooze choices
+      * would push its own tap-through actions off the notification.
+      *
+      * An empty list is NOT an alarm exemption: a rule the alarm is about, or
+      * that arms the panel, is exempt automatically and cannot be silenced by a
+      * window from anywhere (D133).
+      */
+      snoozeOptions: zod.z.array(zod.z.number().int().min(1).max(NC_SNOOZE_MAX_MINUTES)).max(4).optional(),
+      /**
       * Devices this rule ACTUATES — arm the alarm, open a gate, turn on a light.
       *
       * This is what makes the rule set the alarm's trigger set without the alarm
@@ -33383,6 +33473,7 @@ var require_dist_BV5Bug9t = __commonJS({
         "device",
         "package",
         "occupancy",
+        "audio",
         "system"
       ]),
       label: zod.z.string(),
@@ -33401,6 +33492,7 @@ var require_dist_BV5Bug9t = __commonJS({
         "crossingSelect",
         "polygonDraw",
         "occupancy",
+        "audio",
         "deviceState",
         "systemEvent"
       ]),
@@ -33511,7 +33603,20 @@ var require_dist_BV5Bug9t = __commonJS({
       ruleId: zod.z.string().optional(),
       /** Required when `scope: 'device'`. */
       deviceId: zod.z.number().int().optional(),
-      durationMinutes: zod.z.number().int().min(1).max(1440),
+      /**
+      * Narrow the window to these subject classes — "the cat, not the person".
+      *
+      * ORTHOGONAL to `scope`, deliberately, and absent means EVERY class: that is
+      * what every window authored before this field meant, so no persisted row
+      * changes meaning and no client has to learn anything to keep working.
+      *
+      * It is what makes the window's real key `(deviceId, classes[])` and lets it
+      * cross rules (D133): the operator points at a camera and a kind of thing,
+      * not at whichever of their four rules happened to produce the notification
+      * they are dismissing.
+      */
+      classes: zod.z.array(zod.z.string().min(1)).min(1).optional(),
+      durationMinutes: zod.z.number().int().min(1).max(NC_SNOOZE_MAX_MINUTES),
       /**
       * Silence this for EVERY recipient, not just the caller. Permission is
       * checked server-side (the rule's `snoozeAllowGlobal`, or admin for the
@@ -33535,6 +33640,10 @@ var require_dist_BV5Bug9t = __commonJS({
       scope: NcSnoozeScopeSchema,
       ruleId: zod.z.string().optional(),
       deviceId: zod.z.number().int().optional(),
+      /** Subject classes this window covers. ABSENT = every class — see
+      *  {@link NcSnoozeInputSchema.shape.classes}. Lives in the JSON blob and has
+      *  no SQLite column: nothing queries a window by class. */
+      classes: zod.z.array(zod.z.string().min(1)).min(1).optional(),
       startedAt: zod.z.number(),
       /** Exclusive: at exactly this instant the snooze is over. Expiry is a
       *  COMPARISON, not a job — no sweeper can leave the operator silenced. */
@@ -35807,7 +35916,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * handle. Slice shape is `{ zones: Zone[] }` so future extensions
       * (e.g. zone groupings) can sit alongside the polygon list.
       */
-      runtimeState: zod.z.object({ zones: zod.z.array(ZoneSchema).readonly() })
+      runtimeState: zod.z.object({ zones: zod.z.array(ZoneSchema).readonly() }),
+      /**
+      * Runtime-state durability: **restored** — written only on operator mutation, so a camera that never had one has nothing to re-derive from. This is the slice `zone-mirror-hydration.ts` exists to paper over.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored"
     };
     var NativeCropBboxSchema = zod.z.object({
       x: zod.z.number(),
@@ -36071,15 +36187,21 @@ var require_dist_BV5Bug9t = __commonJS({
       */
       onboardMotionDrivesAnalyzer: zod.z.boolean().default(true),
       /**
-      * Master toggle for the occupancy re-check. When `false` (DEFAULT) the runner
-      * never arms the periodic recheck timer, regardless of `occupancyRecheckSec` —
-      * this is off by default because the recheck re-subscribes a detection session
-      * every N seconds while `watching`, a major source of pull-decoder re-dial
-      * churn (each cycle creates+tears a session → RTSP re-dial → latency). The
+      * Master toggle for the occupancy re-check. When `false` the runner never arms
+      * the periodic recheck timer, regardless of `occupancyRecheckSec`; the
       * `occupancyRecheckSec` / `occupancyRecheckFrames` sliders only take effect
       * (and only render) when this is enabled.
+      *
+      * DEFAULT `true` since 2026-08-13 (was `false`). It was off because the
+      * recheck re-subscribes a detection session every N seconds while `watching`
+      * — each cycle creates+tears a session ⇒ an RTSP re-dial ⇒ latency, a major
+      * pull-decoder churn source. What that bought was a blind spot: a STATIONARY
+      * object is counted only while the stationary registry holds it, and the
+      * registry rebuilds from motion, so after a restart a parked car was invisible
+      * to every occupancy rule until something moved in front of it. The churn is
+      * now paid on the interval instead — see `occupancyRecheckSecField`.
       */
-      occupancyRecheckEnabled: zod.z.boolean().default(false),
+      occupancyRecheckEnabled: zod.z.boolean().default(true),
       occupancyRecheckSec: zod.z.number().min(occupancyRecheckSecField.min).max(occupancyRecheckSecField.max).default(occupancyRecheckSecField.default),
       occupancyRecheckFrames: zod.z.number().min(occupancyRecheckFramesField.min).max(occupancyRecheckFramesField.max).default(occupancyRecheckFramesField.default),
       /**
@@ -39110,7 +39232,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: AirQualitySensorStatusSchema,
         kind: "push"
       },
-      runtimeState: AirQualitySensorStatusSchema
+      runtimeState: AirQualitySensorStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `numeric-sensor`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var AmbientLightSensorStatusSchema = zod.z.object({
       /** Current illuminance in lux (lx). */
@@ -39138,7 +39270,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: AmbientLightSensorStatusSchema,
         kind: "push"
       },
-      runtimeState: AmbientLightSensorStatusSchema
+      runtimeState: AmbientLightSensorStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `numeric-sensor`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var AudioClassSummarySchema = zod.z.object({
       className: zod.z.string(),
@@ -39228,7 +39370,14 @@ var require_dist_BV5Bug9t = __commonJS({
         }), AudioMetricsHistorySchema)
       },
       /** Reactive runtime-state mirror — live `device.state.audioMetrics.value`. */
-      runtimeState: AudioMetricsSnapshotSchema
+      runtimeState: AudioMetricsSnapshotSchema,
+      /**
+      * Runtime-state durability: **session** — 1 Hz per camera at the mirror and ~63 % of the fleet's whole runtime-state write rate. `avgDbfs` is a rolling 60 s mean that genuinely moves every second, so no equality fix reclaims it — and a two-hour-old dB reading rendered as current is worse than no reading.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var AutomationControlStatusSchema = zod.z.object({
       /** Whether the automation is currently enabled. Disabled automations
@@ -39279,7 +39428,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * reads `enabled` (toggle) + `isRunning` (spinner) + `lastError`
       * (badge) directly.
       */
-      runtimeState: AutomationControlStatusSchema
+      runtimeState: AutomationControlStatusSchema,
+      /**
+      * Runtime-state durability: **session** — the authority for an automation being enabled is the automation store; a restored `isRunning` would be a lie. D62: one authority per switch.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var BatteryStatusSchema = zod.z.object({
       /** 0..100 inclusive. Firmware-reported. */
@@ -39380,7 +39536,17 @@ var require_dist_BV5Bug9t = __commonJS({
       * via `device.runtimeState.getCapState('battery')` regardless of
       * the underlying driver.
       */
-      runtimeState: BatteryStatusSchema
+      runtimeState: BatteryStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — a sleeping battery camera may not report for hours; the restored percentage is the only thing the UI and the sleep gate have. Zero churn once `lastUpdated` is excluded — 526 writes, 0 value changes, in 25 minutes.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastUpdated"]
     };
     var BinaryStatusSchema = zod.z.object({
       on: zod.z.boolean(),
@@ -39398,7 +39564,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: BinaryStatusSchema,
         kind: "push"
       },
-      runtimeState: BinaryStatusSchema
+      runtimeState: BinaryStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — transition-driven sensor state; the restored value gives the boot comparison.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var BrightnessStatusSchema = zod.z.object({
       /** Current level as 0..100 inclusive. Firmware-reported. */
@@ -39440,7 +39616,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * by the kernel. Read via `device.state.brightness.value` so UI
       * sliders surface the current level without polling the provider.
       */
-      runtimeState: BrightnessStatusSchema
+      runtimeState: BrightnessStatusSchema,
+      /**
+      * Runtime-state durability: **session** — live lamp state, re-published by the provider on connect.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var buttonCapability = {
       name: "button",
@@ -39520,7 +39703,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: CarbonMonoxideStatusSchema,
         kind: "push"
       },
-      runtimeState: CarbonMonoxideStatusSchema
+      runtimeState: CarbonMonoxideStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `smoke`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var HvacModeSchema = zod.z.enum([
       "off",
@@ -39649,7 +39842,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * the full slice via `device.state.climate-control.value` and refresh
       * on every push without re-querying the provider.
       */
-      runtimeState: ClimateControlStatusSchema
+      runtimeState: ClimateControlStatusSchema,
+      /**
+      * Runtime-state durability: **session** — as `brightness`; `currentTemp` moves continuously and is re-published on connect.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var RgbTripletSchema = zod.z.object({
       r: zod.z.number().int().min(0).max(255),
@@ -39736,7 +39936,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * kernel. Read via `device.state.color.value` so UI pickers surface
       * the current chromaticity without polling the provider.
       */
-      runtimeState: ColorStatusSchema
+      runtimeState: ColorStatusSchema,
+      /**
+      * Runtime-state durability: **session** — as `brightness`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var ConnectionTestOutcomeSchema = zod.z.discriminatedUnion("outcome", [
       zod.z.object({
@@ -39790,7 +39997,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: ConnectivityStatusSchema,
         kind: "push"
       },
-      runtimeState: ConnectivityStatusSchema
+      runtimeState: ConnectivityStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — same shape and same argument as `device-status`, for links rather than devices.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var ConsumableItemSchema = zod.z.object({
       /** Stable id, e.g. 'main-brush'. */
@@ -39857,7 +40074,14 @@ var require_dist_BV5Bug9t = __commonJS({
           }
         }
       },
-      runtimeState: ConsumablesStatusSchema.extend({ lastFetchedAt: zod.z.number() })
+      runtimeState: ConsumablesStatusSchema.extend({ lastFetchedAt: zod.z.number() }),
+      /**
+      * Runtime-state durability: **session** — the authority is the appliance; the provider re-reads the whole item array on connect.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var ContactStatusSchema = zod.z.object({
       /** True when the entry is open; false when closed. */
@@ -39876,7 +40100,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: ContactStatusSchema,
         kind: "push"
       },
-      runtimeState: ContactStatusSchema
+      runtimeState: ContactStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — a door left open across a restart must still read open.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var ControlKindSchema = zod.z.enum([
       "numeric",
@@ -39963,7 +40197,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * dropdown / text field / date picker) read the slice's discriminant
       * and value directly without polling the provider.
       */
-      runtimeState: ControlStatusSchema
+      runtimeState: ControlStatusSchema,
+      /**
+      * Runtime-state durability: **session** — a generic control mirrors an external entity that re-publishes on connect; the options array is re-derived with it.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var CoverStateSchema = zod.z.enum([
       "open",
@@ -40025,7 +40266,17 @@ var require_dist_BV5Bug9t = __commonJS({
       * Runtime-state slice — mirrored by the kernel. UI controls watch
       * the slice for live position changes during a move.
       */
-      runtimeState: CoverStatusSchema
+      runtimeState: CoverStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — position survives a restart on the device; the mirror should agree at boot rather than read blank.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var DayNightModeSchema = zod.z.enum([
       "auto",
@@ -40086,7 +40337,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: DayNightStatusSchema,
         kind: "poll"
       },
-      runtimeState: DayNightStatusSchema
+      runtimeState: DayNightStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — operator-set IR-cut behaviour; mutation-driven.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var DeviceStatusSchema = zod.z.object({
       /**
@@ -40119,7 +40380,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: DeviceStatusSchema,
         kind: "push"
       },
-      runtimeState: DeviceStatusSchema
+      runtimeState: DeviceStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — the previous observation is what makes the first reading after a restart a COMPARISON instead of a phantom transition (D130). 32 real flips across 16 devices in 25 min — the busiest slice in the cold half.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var DoorbellStatusSchema = zod.z.object({
       /** Ms epoch of the last press. null = never observed since this provider started. */
@@ -40159,7 +40430,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * `device.state.doorbell.value`. UIs can show "last ring 5m ago"
       * without subscribing.
       */
-      runtimeState: DoorbellStatusSchema
+      runtimeState: DoorbellStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — a monotonic accumulator: the slice IS the record. `lastPressedAt` is content here, not a clock, so it is deliberately NOT volatile.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored"
     };
     var EnumSensorDateTimeFormatSchema = zod.z.enum([
       "date",
@@ -40189,7 +40467,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: EnumSensorStatusSchema,
         kind: "push"
       },
-      runtimeState: EnumSensorStatusSchema
+      runtimeState: EnumSensorStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `numeric-sensor`; 80 devices.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var EventFireSchema = zod.z.object({
       deviceId: zod.z.number(),
@@ -40215,7 +40503,14 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: EventEmitterStatusSchema,
         kind: "push"
       },
-      runtimeState: EventEmitterStatusSchema
+      runtimeState: EventEmitterStatusSchema,
+      /**
+      * Runtime-state durability: **session** — `eventCountSinceStart` names its own scope.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var EventItemSchema = zod.z.object({
       id: zod.z.string(),
@@ -40514,7 +40809,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * Runtime-state slice — mirrored by the kernel. UI fan speed
       * sliders read `percentage` for live updates.
       */
-      runtimeState: FanControlStatusSchema
+      runtimeState: FanControlStatusSchema,
+      /**
+      * Runtime-state durability: **session** — as `brightness`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var FeatureProbeStatusSchema = zod.z.object({
       /**
@@ -40567,7 +40869,14 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: FeatureProbeStatusSchema,
         kind: "push"
       },
-      runtimeState: FeatureProbeStatusSchema
+      runtimeState: FeatureProbeStatusSchema,
+      /**
+      * Runtime-state durability: **session** — per-session by definition — `lastProbedAt` means "this worker completed a probe THIS session", which is why the mirror seed already blanks it. Persisting it only creates something to blank.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var FloodStatusSchema = zod.z.object({
       /** True when leak is currently detected. */
@@ -40586,7 +40895,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: FloodStatusSchema,
         kind: "push"
       },
-      runtimeState: FloodStatusSchema
+      runtimeState: FloodStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `smoke`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var GasStatusSchema = zod.z.object({
       detected: zod.z.boolean(),
@@ -40604,7 +40923,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: GasStatusSchema,
         kind: "push"
       },
-      runtimeState: GasStatusSchema
+      runtimeState: GasStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `smoke`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var HumidifierStatusSchema = zod.z.object({
       /** Whether the humidifier is currently on. */
@@ -40665,7 +40994,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * Runtime-state slice — mirrored by the kernel. UI controls watch the
       * slice for live humidity / mode changes.
       */
-      runtimeState: HumidifierStatusSchema
+      runtimeState: HumidifierStatusSchema,
+      /**
+      * Runtime-state durability: **session** — as `climate-control`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var HumiditySensorStatusSchema = zod.z.object({
       /** Current relative humidity, 0..100. */
@@ -40693,7 +41029,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: HumiditySensorStatusSchema,
         kind: "push"
       },
-      runtimeState: HumiditySensorStatusSchema
+      runtimeState: HumiditySensorStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `numeric-sensor` (67 of 75 writes were the clock alone).
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var ImageStatusSchema = zod.z.object({
       /** Absolute signed URL the browser loads directly. Null when the
@@ -40717,7 +41063,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * Runtime-state slice — mirrored by the kernel. The UI reads `url`
       * directly and renders the still image.
       */
-      runtimeState: ImageStatusSchema
+      runtimeState: ImageStatusSchema,
+      /**
+      * Runtime-state durability: **session** — a snapshot URL is a session-scoped handle; a restored one points at nothing.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var ImageRotateSchema = zod.z.enum([
       "0",
@@ -40818,7 +41171,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: ImageSettingsStatusSchema,
         kind: "poll"
       },
-      runtimeState: ImageSettingsStatusSchema
+      runtimeState: ImageSettingsStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — operator-set camera imaging; mutation-driven.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var IntegrationWithStateSchema = zod.z.object({
       id: zod.z.string(),
@@ -41149,7 +41512,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * Runtime-state slice — mirrored by the kernel. UI controls watch the
       * slice for live activity + battery changes.
       */
-      runtimeState: LawnMowerControlStatusSchema
+      runtimeState: LawnMowerControlStatusSchema,
+      /**
+      * Runtime-state durability: **session** — as `vacuum-control`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var InterfaceKindEnum = zod.z.enum([
       "lan",
@@ -41398,7 +41768,17 @@ var require_dist_BV5Bug9t = __commonJS({
       * read `state` and disable themselves during `locking`/`unlocking`
       * transitions.
       */
-      runtimeState: LockControlStatusSchema
+      runtimeState: LockControlStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — a lock left locked must still read locked.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var MediaPlayerStateSchema = zod.z.enum([
       "off",
@@ -41548,7 +41928,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * full slice for live now-playing, volume, and progress updates
       * without polling.
       */
-      runtimeState: MediaPlayerStatusSchema
+      runtimeState: MediaPlayerStatusSchema,
+      /**
+      * Runtime-state durability: **session** — a restored transport position describes a playback that stopped when the hub did.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var MeshEndpointSchema = zod.z.object({
       /** Stable identifier within the provider (e.g. `mesh-ipv4`, `magicdns`, `funnel`). */
@@ -41832,7 +42219,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * `device.state.motion.value`. Reads never invoke the provider, so
       * UIs and other addons can poll the cached state safely.
       */
-      runtimeState: MotionStatusSchema
+      runtimeState: MotionStatusSchema,
+      /**
+      * Runtime-state durability: **session** — self-clearing by construction (`autoClearAfterMs`); a restored `detected: true` is a frozen event, and the next frame re-publishes the real one.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var MotionTriggerStatusSchema = zod.z.object({
       enabled: zod.z.boolean(),
@@ -41869,7 +42263,14 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: MotionTriggerStatusSchema,
         kind: "command-driven"
       },
-      runtimeState: MotionTriggerRuntimeStateSchema
+      runtimeState: MotionTriggerRuntimeStateSchema,
+      /**
+      * Runtime-state durability: **session** — the authority for motion-trigger enablement is the provider's own config; the slice is a mirror of it, re-published on connect.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var MotionZoneRegionSchema = zod.z.object({
       id: zod.z.number(),
@@ -41924,7 +42325,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: MotionZoneStatusSchema,
         kind: "poll"
       },
-      runtimeState: MotionZoneStatusSchema
+      runtimeState: MotionZoneStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — the 14 KB polygon list is the single largest slice on the fleet and has not changed since the operator drew it. Highest value per byte in the table.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var NativeObjectClassEnum = zod.z.enum([
       "person",
@@ -41987,7 +42398,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: NativeObjectDetectionStatusSchema,
         kind: "push"
       },
-      runtimeState: NativeObjectDetectionRuntimeStateSchema
+      runtimeState: NativeObjectDetectionRuntimeStateSchema,
+      /**
+      * Runtime-state durability: **restored** — `enabled` is an operator toggle on a camera whose refresh is a no-op and whose staleMs is Infinity. There is no hardware value to re-read — losing it loses the setting.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var StreamNetworkStatsSchema = zod.z.object({
       nominalBitrateKbps: zod.z.number(),
@@ -42310,7 +42731,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * form reads `supports` to gate optional fields; history pane reads
       * `lastSentAt` / `lastError` / `queueDepth`.
       */
-      runtimeState: NotifierStatusSchema
+      runtimeState: NotifierStatusSchema,
+      /**
+      * Runtime-state durability: **session** — live queue depth and last-send state; a restored queue depth describes a queue that no longer exists.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var NumericSensorStatusSchema = zod.z.object({
       value: zod.z.number(),
@@ -42336,7 +42764,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: NumericSensorStatusSchema,
         kind: "push"
       },
-      runtimeState: NumericSensorStatusSchema
+      runtimeState: NumericSensorStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — polled value, low churn once the clock is excluded (251 of 669 writes were the clock alone); restoring it removes the cold window before the first poll.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var OsdOverlayKindEnum = zod.z.enum([
       "text",
@@ -42759,7 +43197,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * the full slice via `device.state.petFeeder.value` and refresh on
       * every poll without re-querying the provider.
       */
-      runtimeState: PetFeederStatusSchema
+      runtimeState: PetFeederStatusSchema,
+      /**
+      * Runtime-state durability: **session** — live appliance state re-published on connect.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var VehicleSchema = zod.z.object({
       id: zod.z.string(),
@@ -43093,7 +43538,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: PowerMeterStatusSchema,
         kind: "push"
       },
-      runtimeState: PowerMeterStatusSchema
+      runtimeState: PowerMeterStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `numeric-sensor`; `kwhTotal` is an accumulator whose restored value is the baseline.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var GpsLocationSchema = zod.z.object({
       /** Latitude in decimal degrees, -90..90. */
@@ -43134,7 +43589,17 @@ var require_dist_BV5Bug9t = __commonJS({
       * the map pin is rendered (use `DeviceFeature.PresenceGps` for the
       * pre-fetch fast-path check).
       */
-      runtimeState: PresenceStatusSchema
+      runtimeState: PresenceStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — occupancy-relevant: the restored state is what an occupancy rule compares the first post-restart observation against.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var PressureSensorStatusSchema = zod.z.object({
       /** Current pressure in hPa. */
@@ -43162,7 +43627,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: PressureSensorStatusSchema,
         kind: "push"
       },
-      runtimeState: PressureSensorStatusSchema
+      runtimeState: PressureSensorStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `numeric-sensor`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var PrivacyMaskShapeSchema = zod.z.discriminatedUnion("kind", [MaskRectShapeSchema, MaskPolygonShapeSchema]);
     var PrivacyMaskRegionSchema = zod.z.object({
@@ -43261,7 +43736,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: PrivacyMaskStatusSchema,
         kind: "poll"
       },
-      runtimeState: PrivacyMaskStatusSchema
+      runtimeState: PrivacyMaskStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — operator-drawn regions, zero real churn — 22 writes in 25 minutes, every one of them the clock.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var PtzPresetSchema = zod.z.object({
       id: zod.z.string(),
@@ -43447,7 +43932,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * fetch / cache / fallback logic out of the four cap methods —
       * they become trampolines over `runtimeState`.
       */
-      runtimeState: PtzAutotrackRuntimeStateSchema
+      runtimeState: PtzAutotrackRuntimeStateSchema,
+      /**
+      * Runtime-state durability: **session** — mirrors the camera's own autotrack config, re-read on connect.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var rebootCapability = {
       name: "reboot",
@@ -44115,7 +44607,14 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: SceneMonitorStatusSchema,
         kind: "push"
       },
-      runtimeState: SceneMonitorStatusSchema
+      runtimeState: SceneMonitorStatusSchema,
+      /**
+      * Runtime-state durability: **session** — re-derived from the current scene on the next evaluation.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var ZoneRuleModeEnum = zod.z.enum(["include", "exclude"]);
     var ZoneRuleSchema = zod.z.object({
@@ -44217,7 +44716,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * `isRunning` to render a spinner during execution and surfaces
       * `lastError` / `lastRunSuccess` in the recent-runs panel.
       */
-      runtimeState: ScriptRunnerStatusSchema
+      runtimeState: ScriptRunnerStatusSchema,
+      /**
+      * Runtime-state durability: **session** — a restored `isRunning: true` describes a process that died with the previous hub.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var SmokeStatusSchema = zod.z.object({
       detected: zod.z.boolean(),
@@ -44235,7 +44741,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: SmokeStatusSchema,
         kind: "push"
       },
-      runtimeState: SmokeStatusSchema
+      runtimeState: SmokeStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — a safety sensor must not read "clear" merely because the hub restarted.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var CamStreamDescriptorSchema = zod.z.object({
       camStreamId: zod.z.string().min(1),
@@ -44386,7 +44902,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: StreamParamsStatusSchema,
         kind: "poll"
       },
-      runtimeState: StreamParamsStatusSchema
+      runtimeState: StreamParamsStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — operator-set encoder profile; mutation-driven.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var STREAM_PROFILE_META = [
       {
@@ -44657,6 +45183,16 @@ var require_dist_BV5Bug9t = __commonJS({
       * not need to re-query the provider after a setState mutation.
       */
       runtimeState: SwitchStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — device state an operator reads as authoritative; 55 devices, transition-driven.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"],
       settings: { bindings: [{
         kind: "scalar",
         statusPath: "on",
@@ -44729,7 +45265,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: TamperStatusSchema,
         kind: "push"
       },
-      runtimeState: TamperStatusSchema
+      runtimeState: TamperStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `smoke`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var TemperatureSensorStatusSchema = zod.z.object({
       /** Current temperature in Celsius. */
@@ -44758,7 +45304,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: TemperatureSensorStatusSchema,
         kind: "push"
       },
-      runtimeState: TemperatureSensorStatusSchema
+      runtimeState: TemperatureSensorStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `numeric-sensor` (69 of 125 writes were the clock alone).
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var ToastSchema = zod.z.object({
       title: zod.z.string(),
@@ -44809,7 +45365,14 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: UpdateStatusSchema,
         kind: "poll"
       },
-      runtimeState: UpdateStatusSchema
+      runtimeState: UpdateStatusSchema,
+      /**
+      * Runtime-state durability: **session** — a restored `inProgress: true` describes an update that is no longer running; versions are re-probed at boot.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var UserSummarySchema = zod.z.object({
       id: zod.z.string(),
@@ -45143,7 +45706,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * Runtime-state slice — mirrored by the kernel. UI controls watch the
       * slice for live state + battery + fan-speed changes.
       */
-      runtimeState: VacuumControlStatusSchema
+      runtimeState: VacuumControlStatusSchema,
+      /**
+      * Runtime-state durability: **session** — as `media-player` — a restored `state: cleaning` is a robot that is not cleaning.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var ValveStateSchema = zod.z.enum([
       "open",
@@ -45196,7 +45766,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * Runtime-state slice — mirrored by the kernel. UI controls watch the
       * slice for live position changes during a move.
       */
-      runtimeState: ValveStatusSchema
+      runtimeState: ValveStatusSchema,
+      /**
+      * Runtime-state durability: **session** — as `brightness`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var VibrationStatusSchema = zod.z.object({
       detected: zod.z.boolean(),
@@ -45214,7 +45791,17 @@ var require_dist_BV5Bug9t = __commonJS({
         schema: VibrationStatusSchema,
         kind: "push"
       },
-      runtimeState: VibrationStatusSchema
+      runtimeState: VibrationStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `smoke`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var WaterHeaterStatusSchema = zod.z.object({
       /** Current measured temperature. Null when not reported. */
@@ -45274,7 +45861,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * Runtime-state slice — mirrored by the kernel. UI controls watch the
       * slice for live temperature / mode / away changes.
       */
-      runtimeState: WaterHeaterStatusSchema
+      runtimeState: WaterHeaterStatusSchema,
+      /**
+      * Runtime-state durability: **session** — as `climate-control`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var WeatherStatusSchema = zod.z.object({
       /** Verbatim HA condition state (`sunny`, `cloudy`, `rainy`, …). Null
@@ -45314,7 +45908,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * Runtime-state slice — mirrored by the kernel. The UI reads the
       * current conditions directly from the slice on each weather push.
       */
-      runtimeState: WeatherStatusSchema
+      runtimeState: WeatherStatusSchema,
+      /**
+      * Runtime-state durability: **session** — a forecast is stale the moment the hub is down; the provider re-fetches on connect.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var PerScopeBreakdownSchema = zod.z.object({
       /** Total tracked objects in this scope (frame / zone / unzoned). */
@@ -45423,7 +46024,14 @@ var require_dist_BV5Bug9t = __commonJS({
       * automatically; the explicit `getCurrentSnapshot` cap method is
       * still useful for one-off polls without a subscription.
       */
-      runtimeState: CameraOccupancySnapshotSchema
+      runtimeState: CameraOccupancySnapshotSchema,
+      /**
+      * Runtime-state durability: **session** — per-frame analytics; with `audio-metrics` it is ~90 % of the offered write rate. Re-derived on the next frame.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var ZoneRuleStageEnum = zod.z.enum([
       "motion",
@@ -45475,7 +46083,14 @@ var require_dist_BV5Bug9t = __commonJS({
         motion: zod.z.array(ZoneRuleSchema).readonly(),
         detection: zod.z.array(ZoneRuleSchema).readonly(),
         package: zod.z.array(ZoneRuleSchema).readonly()
-      })
+      }),
+      /**
+      * Runtime-state durability: **restored** — operator intent, mutation-only, same argument as `zones`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored"
     };
     var RUNTIME_DEFAULTS = {
       "features.streaming": true,
@@ -51618,6 +52233,264 @@ var require_dist_BV5Bug9t = __commonJS({
       "network-access": "ingress",
       "smtp-provider": "email"
     });
+    var RUNTIME_STATE_POLICY = {
+      "air-quality-sensor": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "alarm-panel": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "ambient-light-sensor": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "audio-metrics": {
+        durability: "session",
+        volatileFields: []
+      },
+      "automation-control": {
+        durability: "session",
+        volatileFields: []
+      },
+      "battery": {
+        durability: "restored",
+        volatileFields: ["lastUpdated"]
+      },
+      "binary": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "brightness": {
+        durability: "session",
+        volatileFields: []
+      },
+      "camera-streams": {
+        durability: "session",
+        volatileFields: []
+      },
+      "carbon-monoxide": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "climate-control": {
+        durability: "session",
+        volatileFields: []
+      },
+      "color": {
+        durability: "session",
+        volatileFields: []
+      },
+      "connectivity": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "consumables": {
+        durability: "session",
+        volatileFields: []
+      },
+      "contact": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "control": {
+        durability: "session",
+        volatileFields: []
+      },
+      "cover": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "day-night": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "device-discovery": {
+        durability: "session",
+        volatileFields: []
+      },
+      "device-status": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "doorbell": {
+        durability: "restored",
+        volatileFields: []
+      },
+      "enum-sensor": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "event-emitter": {
+        durability: "session",
+        volatileFields: []
+      },
+      "fan-control": {
+        durability: "session",
+        volatileFields: []
+      },
+      "feature-probe": {
+        durability: "session",
+        volatileFields: []
+      },
+      "flood": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "gas": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "humidifier": {
+        durability: "session",
+        volatileFields: []
+      },
+      "humidity-sensor": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "image": {
+        durability: "session",
+        volatileFields: []
+      },
+      "image-settings": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "lawn-mower-control": {
+        durability: "session",
+        volatileFields: []
+      },
+      "lock-control": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "media-player": {
+        durability: "session",
+        volatileFields: []
+      },
+      "motion": {
+        durability: "session",
+        volatileFields: []
+      },
+      "motion-trigger": {
+        durability: "session",
+        volatileFields: []
+      },
+      "motion-zones": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "native-object-detection": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "notifier": {
+        durability: "session",
+        volatileFields: []
+      },
+      "numeric-sensor": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "pet-feeder": {
+        durability: "session",
+        volatileFields: []
+      },
+      "power-meter": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "presence": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "pressure-sensor": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "privacy-mask": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "ptz-autotrack": {
+        durability: "session",
+        volatileFields: []
+      },
+      "scene-monitor": {
+        durability: "session",
+        volatileFields: []
+      },
+      "script-runner": {
+        durability: "session",
+        volatileFields: []
+      },
+      "smoke": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "stream-params": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "switch": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "tamper": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "temperature-sensor": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "update": {
+        durability: "session",
+        volatileFields: []
+      },
+      "vacuum-control": {
+        durability: "session",
+        volatileFields: []
+      },
+      "valve": {
+        durability: "session",
+        volatileFields: []
+      },
+      "vibration": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "water-heater": {
+        durability: "session",
+        volatileFields: []
+      },
+      "weather": {
+        durability: "session",
+        volatileFields: []
+      },
+      "zone-analytics": {
+        durability: "session",
+        volatileFields: []
+      },
+      "zone-rules": {
+        durability: "restored",
+        volatileFields: []
+      },
+      "zones": {
+        durability: "restored",
+        volatileFields: []
+      }
+    };
+    function runtimeStatePolicyFor(capName) {
+      return RUNTIME_STATE_POLICY[capName] ?? SESSION_ONLY_POLICY;
+    }
+    var SESSION_ONLY_POLICY = {
+      durability: "session",
+      volatileFields: []
+    };
+    new Map(AUDIO_MACRO_LABELS.flatMap((macro2) => macro2.icon === void 0 ? [] : [[macro2.id, macro2.icon]]));
     var TimelapseTemplateSchema = zod.z.object({
       title: zod.z.string().max(500).optional(),
       body: zod.z.string().max(2e3).optional()
@@ -52435,6 +53308,12 @@ var require_dist_BV5Bug9t = __commonJS({
         return resolveCapMount;
       }
     });
+    Object.defineProperty(exports, "runtimeStatePolicyFor", {
+      enumerable: true,
+      get: function() {
+        return runtimeStatePolicyFor;
+      }
+    });
     Object.defineProperty(exports, "scopeKey", {
       enumerable: true,
       get: function() {
@@ -52531,7 +53410,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BV5Bug9t();
+    var require_dist10 = require_dist_B4WyhfjH();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -53344,7 +54223,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BV5Bug9t();
+    var require_dist10 = require_dist_B4WyhfjH();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -53438,7 +54317,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BV5Bug9t();
+    var require_dist10 = require_dist_B4WyhfjH();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -56136,7 +57015,7 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BV5Bug9t();
+    var require_dist10 = require_dist_B4WyhfjH();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -59332,8 +60211,60 @@ var require_device_manager_addon = __commonJS({
         return current;
       };
     };
+    function persistableBlob(blob, policyFor) {
+      const out = {};
+      for (const [capName, slice] of Object.entries(blob)) {
+        if (policyFor(capName).durability !== "restored") continue;
+        out[capName] = { ...slice };
+      }
+      return out;
+    }
+    function sliceEffectivelyEqual(a, b, volatileFields) {
+      const skip = new Set(volatileFields);
+      const keys = /* @__PURE__ */ new Set();
+      for (const k of Object.keys(a)) if (!skip.has(k)) keys.add(k);
+      for (const k of Object.keys(b)) if (!skip.has(k)) keys.add(k);
+      for (const k of keys) {
+        if (!deepEqual(a[k], b[k])) return false;
+        if (Object.hasOwn(a, k) !== Object.hasOwn(b, k)) return false;
+      }
+      return true;
+    }
+    function effectivelyEqual(before, after, policyFor) {
+      const caps = /* @__PURE__ */ new Set([...Object.keys(before), ...Object.keys(after)]);
+      for (const capName of caps) {
+        const a = before[capName];
+        const b = after[capName];
+        if (a === void 0 || b === void 0) return false;
+        if (!sliceEffectivelyEqual(a, b, policyFor(capName).volatileFields)) return false;
+      }
+      return true;
+    }
+    function deepEqual(a, b) {
+      if (a === b) return true;
+      if (typeof a === "number" && typeof b === "number") return Number.isNaN(a) && Number.isNaN(b);
+      if (a === null || b === null || typeof a !== "object" || typeof b !== "object") return false;
+      const aIsArray = Array.isArray(a);
+      if (aIsArray !== Array.isArray(b)) return false;
+      if (aIsArray) {
+        const bArr = b;
+        if (a.length !== bArr.length) return false;
+        for (let i = 0; i < a.length; i += 1) if (!deepEqual(a[i], bArr[i])) return false;
+        return true;
+      }
+      const aRec = a;
+      const bRec = b;
+      const aKeys = Object.keys(aRec);
+      if (aKeys.length !== Object.keys(bRec).length) return false;
+      for (const k of aKeys) {
+        if (!Object.hasOwn(bRec, k)) return false;
+        if (!deepEqual(aRec[k], bRec[k])) return false;
+      }
+      return true;
+    }
     var DeviceStateMirror = class DeviceStateMirror2 {
       ctx;
+      policyFor;
       /**
       * Hub-side mirror of every device's cap-keyed runtime state.
       * Key: deviceId. Value: per-cap slice map. Empty by default —
@@ -59347,8 +60278,24 @@ var require_device_manager_addon = __commonJS({
       */
       runtimeStateDebounce = /* @__PURE__ */ new Map();
       static RUNTIME_STATE_DEBOUNCE_MS = 1e3;
-      constructor(ctx) {
+      /**
+      * What is believed to be ON DISK for each device — the persistable projection
+      * of the last blob actually written (or seeded at boot). The effective-change
+      * gate compares against THIS, not against the previous mirror state: two
+      * clock-only ticks in a row must not add up to a write just because each was
+      * compared with its immediate predecessor.
+      */
+      lastPersisted = /* @__PURE__ */ new Map();
+      /**
+      * Per-device count of writes the effective-change gate skipped since the last
+      * real one. Reported on the next write that DOES happen, so the log says how
+      * much churn the gate absorbed instead of saying nothing at all — a branch
+      * that drops work silently reads as "never happened".
+      */
+      skippedSinceWrite = /* @__PURE__ */ new Map();
+      constructor(ctx, policyFor = require_dist10.runtimeStatePolicyFor) {
         this.ctx = ctx;
+        this.policyFor = policyFor;
       }
       /**
       * Single-cap mirror update — diff against the current mirror,
@@ -59375,13 +60322,23 @@ var require_device_manager_addon = __commonJS({
         return true;
       }
       /**
-      * Debounced disk writer. Coalesces frequent writes (motion phase
-      * transitions, battery pushes) into one `writeDeviceRuntimeState`
-      * per `RUNTIME_STATE_DEBOUNCE_MS` window. Reads the per-device
-      * blob from the live mirror at flush time so the disk picture is
+      * Debounced disk writer, behind two gates.
+      *
+      * GATE — DURABILITY: a change to a `durability: 'session'` cap never even
+      * arms the timer. That is where the fleet's write rate goes: `audio-metrics`
+      * and `zone-analytics` are ~90 % of the offered 12–19 writes/s, they change
+      * genuinely every second, and their restored value is worthless.
+      *
+      * GATE — EFFECTIVE CHANGE (at flush): the persistable blob is compared with
+      * what is believed to be on disk, ignoring the clock fields each cap declared
+      * volatile. `battery` wrote its blob 526 times in 25 minutes without one
+      * percentage moving; this is the gate that turns those into one write.
+      *
+      * The blob is read from the live mirror at flush time, so the disk picture is
       * always the latest state — no risk of writing a stale snapshot.
       */
-      scheduleRuntimeStateDiskWrite(deviceId, settings) {
+      scheduleRuntimeStateDiskWrite(deviceId, settings, changedCap) {
+        if (this.policyFor(changedCap).durability !== "restored") return;
         let slot = this.runtimeStateDebounce.get(deviceId);
         if (!slot) {
           slot = {
@@ -59393,10 +60350,21 @@ var require_device_manager_addon = __commonJS({
         if (slot.timer) return;
         slot.timer = setTimeout(() => {
           slot.timer = null;
-          const blob = this.snapshotForDevice(deviceId);
+          const blob = this.persistableForDevice(deviceId);
+          if (this.isAlreadyPersisted(deviceId, blob)) return;
+          const skipped = this.skippedSinceWrite.get(deviceId) ?? 0;
+          this.skippedSinceWrite.delete(deviceId);
           const write = (async () => {
             try {
               await settings.writeDeviceRuntimeState(deviceId, blob);
+              this.lastPersisted.set(deviceId, blob);
+              if (skipped > 0) this.ctx.logger.debug("runtime state persisted", {
+                tags: { deviceId },
+                meta: {
+                  caps: Object.keys(blob).length,
+                  skippedSinceLastWrite: skipped
+                }
+              });
             } catch (err) {
               this.ctx.logger.warn("writeDeviceRuntimeState failed", {
                 tags: { deviceId },
@@ -59410,6 +60378,22 @@ var require_device_manager_addon = __commonJS({
         }, DeviceStateMirror2.RUNTIME_STATE_DEBOUNCE_MS);
       }
       /**
+      * True when `blob` differs from what is believed to be on disk only in fields
+      * the owning caps declared volatile. Counts the skip so the next real write
+      * can report how much churn was absorbed.
+      */
+      isAlreadyPersisted(deviceId, blob) {
+        const onDisk = this.lastPersisted.get(deviceId);
+        if (!onDisk) return false;
+        if (!effectivelyEqual(onDisk, blob, this.policyFor)) return false;
+        this.skippedSinceWrite.set(deviceId, (this.skippedSinceWrite.get(deviceId) ?? 0) + 1);
+        return true;
+      }
+      /** The device's mirror, restricted to the slices that may reach disk. */
+      persistableForDevice(deviceId) {
+        return persistableBlob(this.snapshotForDevice(deviceId), this.policyFor);
+      }
+      /**
       * One-shot mirror seed used by `loadRuntimeState` at boot so the
       * hub knows about every persisted slice without waiting for the
       * first `setCapSlice` call. No events emitted — this is
@@ -59429,6 +60413,7 @@ var require_device_manager_addon = __commonJS({
           if (!raw || typeof raw !== "object" || Array.isArray(raw)) continue;
           perCap.set(capName, { ...raw });
         }
+        this.lastPersisted.set(deviceId, persistableBlob(this.snapshotForDevice(deviceId), this.policyFor));
       }
       /**
       * The hub mirror's `feature-probe.lastProbedAt` is a PER-SESSION liveness
@@ -59542,15 +60527,15 @@ var require_device_manager_addon = __commonJS({
           if (slot.timer) {
             clearTimeout(slot.timer);
             slot.timer = null;
-            if (settings) {
-              const blob = this.snapshotForDevice(deviceId);
-              pending.push(settings.writeDeviceRuntimeState(deviceId, blob).catch((err) => {
-                this.ctx.logger.warn("shutdown writeDeviceRuntimeState failed", {
-                  tags: { deviceId },
-                  meta: { error: err instanceof Error ? err.message : String(err) }
-                });
-              }));
-            }
+            const blob = settings ? this.persistableForDevice(deviceId) : null;
+            if (settings && blob !== null && !this.isAlreadyPersisted(deviceId, blob)) pending.push(settings.writeDeviceRuntimeState(deviceId, blob).then(() => {
+              this.lastPersisted.set(deviceId, blob);
+            }).catch((err) => {
+              this.ctx.logger.warn("shutdown writeDeviceRuntimeState failed", {
+                tags: { deviceId },
+                meta: { error: err instanceof Error ? err.message : String(err) }
+              });
+            }));
           }
           if (slot.inFlight) pending.push(slot.inFlight);
         }
@@ -59977,7 +60962,7 @@ var require_device_manager_addon = __commonJS({
             setCapSlice: async (input) => {
               const { deviceId, capName, slice } = input;
               if (!await resolvePersistedById(deviceId)) throw new Error(`[device-manager] setCapSlice: unknown device id=${deviceId}`);
-              if (stateMirror.applySingleCapUpdate(deviceId, capName, slice)) stateMirror.scheduleRuntimeStateDiskWrite(deviceId, settings);
+              if (stateMirror.applySingleCapUpdate(deviceId, capName, slice)) stateMirror.scheduleRuntimeStateDiskWrite(deviceId, settings, capName);
             }
           }
         }];
@@ -60018,7 +61003,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BV5Bug9t();
+    var require_dist10 = require_dist_B4WyhfjH();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -60155,7 +61140,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BV5Bug9t();
+    var require_dist10 = require_dist_B4WyhfjH();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -60345,7 +61330,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BV5Bug9t();
+    var require_dist10 = require_dist_B4WyhfjH();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -68029,7 +69014,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BV5Bug9t();
+    var require_dist10 = require_dist_B4WyhfjH();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -68594,7 +69579,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BV5Bug9t();
+    var require_dist10 = require_dist_B4WyhfjH();
     var node_child_process = __require("child_process");
     var node_util = __require("util");
     var node_os = __require("os");
@@ -69536,7 +70521,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BV5Bug9t();
+    var require_dist10 = require_dist_B4WyhfjH();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -70652,7 +71637,7 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BV5Bug9t();
+    var require_dist10 = require_dist_B4WyhfjH();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -71324,6 +72309,42 @@ var require_sqlite_settings_addon = __commonJS({
         const where = this.prefixWhere(`${addonId}:${deviceId}.`);
         this.getDb().prepare(`DELETE FROM "addon-device-settings" WHERE ${where.sql}`).run(...where.params);
       }
+      static LEGACY_RUNTIME_STATE_ADDON_ID = "__device-state";
+      /**
+      * The device's whole cap-slice map. Canonical row first, legacy prefix as the
+      * fallback. `{}` — never null — when the device has never persisted a slice,
+      * because every caller treats the result as a cap map to iterate.
+      */
+      getDeviceRuntimeState(deviceId) {
+        this.requireDeclared("device-runtime-state");
+        const row = this.getDb().prepare('SELECT data FROM "device-runtime-state" WHERE id = ?').get(deviceId);
+        if (row) return parseRowData(row.data);
+        return this.getAddonDevice(SqliteSettingsBackend2.LEGACY_RUNTIME_STATE_ADDON_ID, deviceId);
+      }
+      /**
+      * Replace the device's whole cap-slice map. Replace, not merge — the caller
+      * always hands over the full persistable blob, and merging would resurrect a
+      * slice the durability policy has since stopped persisting.
+      */
+      setDeviceRuntimeState(deviceId, blob) {
+        this.requireDeclared("device-runtime-state");
+        this.requireDeclared("addon-device-settings");
+        const db = this.getDb();
+        const upsert = db.prepare(`INSERT INTO "device-runtime-state" (id, data) VALUES (?, ?)
+       ON CONFLICT(id) DO UPDATE SET data = excluded.data`);
+        const legacy = this.prefixWhere(`${SqliteSettingsBackend2.LEGACY_RUNTIME_STATE_ADDON_ID}:${deviceId}.`);
+        const retire = db.prepare(`DELETE FROM "addon-device-settings" WHERE ${legacy.sql}`);
+        db.transaction(() => {
+          upsert.run(deviceId, JSON.stringify(blob));
+          retire.run(...legacy.params);
+        })();
+      }
+      /** Forget the device's runtime state in BOTH stores (device removal). */
+      clearDeviceRuntimeState(deviceId) {
+        this.requireDeclared("device-runtime-state");
+        this.getDb().prepare('DELETE FROM "device-runtime-state" WHERE id = ?').run(deviceId);
+        this.clearAddonDevice(SqliteSettingsBackend2.LEGACY_RUNTIME_STATE_ADDON_ID, deviceId);
+      }
       /** Seed system-settings with runtime defaults (first boot) */
       async seedDefaults() {
         this.requireDeclared("system-settings");
@@ -72167,7 +73188,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BV5Bug9t();
+    var require_dist10 = require_dist_B4WyhfjH();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -74008,7 +75029,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BV5Bug9t();
+    var require_dist10 = require_dist_B4WyhfjH();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -92069,7 +93090,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BV5Bug9t();
+    var require_dist10 = require_dist_B4WyhfjH();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -93220,9 +94241,9 @@ var require_event_category_DxZbWydC = __commonJS({
   }
 });
 
-// ../types/dist/sleep-BszXLEvP.js
-var require_sleep_BszXLEvP = __commonJS({
-  "../types/dist/sleep-BszXLEvP.js"(exports) {
+// ../types/dist/sleep-Dh1EJSqF.js
+var require_sleep_Dh1EJSqF = __commonJS({
+  "../types/dist/sleep-Dh1EJSqF.js"(exports) {
     "use strict";
     var require_event_category = require_event_category_DxZbWydC();
     var zod = require_zod();
@@ -94830,6 +95851,7 @@ var require_sleep_BszXLEvP = __commonJS({
       const value = Reflect.get(context, CAP_NODE_PIN_CONTEXT_KEY);
       return typeof value === "string" ? value : void 0;
     }
+    var DEFAULT_RUNTIME_STATE_DURABILITY = "session";
     function resolveCapMount(def) {
       if (def.mount) return def.mount;
       if (def.deviceNative === true) return { kind: "device-native" };
@@ -96215,6 +97237,12 @@ var require_sleep_BszXLEvP = __commonJS({
         return DATAPLANE_SECRET_HEADER;
       }
     });
+    Object.defineProperty(exports, "DEFAULT_RUNTIME_STATE_DURABILITY", {
+      enumerable: true,
+      get: function() {
+        return DEFAULT_RUNTIME_STATE_DURABILITY;
+      }
+    });
     Object.defineProperty(exports, "DEVICE_SCOPED_CAPS", {
       enumerable: true,
       get: function() {
@@ -96638,7 +97666,7 @@ var require_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_DxZbWydC();
-    var require_sleep = require_sleep_BszXLEvP();
+    var require_sleep = require_sleep_Dh1EJSqF();
     var require_err_msg = require_err_msg_COpsHMw2();
     var COLLECTION_ARRAY_METHODS = Object.freeze({
       "addon-pages-source": ["listPages"],
@@ -96786,7 +97814,7 @@ var require_addon = __commonJS({
           "pipelineEnabled": true,
           "zones": [],
           "onboardMotionDrivesAnalyzer": true,
-          "occupancyRecheckEnabled": false,
+          "occupancyRecheckEnabled": true,
           "occupancyRecheckSec": 30,
           "occupancyRecheckFrames": 4,
           "frameSource": { "kind": "local-broker" }
@@ -114082,7 +115110,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BV5Bug9t();
+    var require_dist10 = require_dist_B4WyhfjH();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -122793,6 +123821,32 @@ var require_dist3 = __commonJS({
         if (this.settingsStore === null) return;
         this.settingsStore.clearAddonDevice(addonId, deviceId);
       }
+      /**
+      * The device's persisted runtime-state blob. `{}` before the settings store
+      * is wired — the same answer as "this device has never persisted a slice",
+      * which is what every caller already handles.
+      */
+      getDeviceRuntimeState(deviceId) {
+        if (this.settingsStore === null) return {};
+        return this.settingsStore.getDeviceRuntimeState(deviceId);
+      }
+      /**
+      * Replace the device's persisted runtime-state blob.
+      *
+      * THROWS when the store is not wired, and that is deliberate: the caller
+      * (`DeviceStateMirror.scheduleRuntimeStateDiskWrite`) catches and logs, so a
+      * persist that cannot happen leaves a line naming the device. A silent no-op
+      * here is the shape that let a whole collection read zero for months.
+      */
+      setDeviceRuntimeState(deviceId, blob) {
+        if (this.settingsStore === null) throw new Error("[ConfigManager] SettingsStore not initialized -- call setSettingsStore() first");
+        this.settingsStore.setDeviceRuntimeState(deviceId, blob);
+      }
+      /** Forget the device's runtime state. No-op before the store is wired. */
+      clearDeviceRuntimeState(deviceId) {
+        if (this.settingsStore === null) return;
+        this.settingsStore.clearDeviceRuntimeState(deviceId);
+      }
       createSettingsView(addonId) {
         const cm = this;
         return {
@@ -122821,13 +123875,13 @@ var require_dist3 = __commonJS({
             cm.clearAddonDevice(addonId, String(deviceId));
           },
           async readDeviceRuntimeState(deviceId) {
-            return cm.getAddonDevice("__device-state", String(deviceId));
+            return cm.getDeviceRuntimeState(String(deviceId));
           },
           async writeDeviceRuntimeState(deviceId, data) {
-            cm.setAddonDevice("__device-state", String(deviceId), data);
+            cm.setDeviceRuntimeState(String(deviceId), data);
           },
           async clearDeviceRuntimeState(deviceId) {
-            cm.clearAddonDevice("__device-state", String(deviceId));
+            cm.clearDeviceRuntimeState(String(deviceId));
           },
           async getSection(section) {
             return cm.getSection(section);
@@ -233388,7 +234442,7 @@ var require_dist9 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_DxZbWydC();
-    var require_sleep = require_sleep_BszXLEvP();
+    var require_sleep = require_sleep_Dh1EJSqF();
     var require_canonical_hash = require_canonical_hash_DNV8S5ET();
     var require_enums2 = require_enums();
     var require_err_msg = require_err_msg_COpsHMw2();
@@ -238479,7 +239533,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           low: zod.z.string().optional()
         }),
         lastChangedAt: zod.z.number()
-      })
+      }),
+      /**
+      * Runtime-state durability: **session** — a restored `slotStatuses: streaming` for a camera that has been dark for two hours is a lie the UI renders as truth.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     function isVoidInput(schema) {
       const def2 = schema._def;
@@ -239258,6 +240319,13 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         kind: "poll"
       },
       runtimeState: DeviceDiscoveryStatusSchema.extend({ lastFetchedAt: zod.z.number().int().nonnegative() }),
+      /**
+      * Runtime-state durability: **session** — 5.7 KB of scan output on the largest device, fully re-derivable by re-scanning.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session",
       methods: {
         /**
         * Snapshot of the current `discovered` list. Returns the
@@ -241462,6 +242530,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "acknowledge",
       "dismiss",
       "silence",
+      "snooze",
       "view",
       "play",
       "open",
@@ -241469,9 +242538,13 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "lock",
       "unlock",
       "arm",
+      "arm-home",
+      "arm-away",
+      "arm-night",
       "disarm",
       "light",
-      "alert"
+      "alert",
+      "camera"
     ]);
     var NotificationActionSchema = zod.z.object({
       id: zod.z.string(),
@@ -241486,7 +242559,23 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * else — see `notification-center/action-token.ts` for what that does and
       * does not buy.
       */
-      destructive: zod.z.boolean().optional()
+      destructive: zod.z.boolean().optional(),
+      /**
+      * How the tap should REACH the url.
+      *
+      * `navigate` (absent, and every button authored before this field) opens it:
+      * the phone leaves the notification and shows whatever the callback returns.
+      * That is right for a button whose answer the operator wants to read.
+      *
+      * `background` fires it as a POST and stays put. It exists for the buttons
+      * whose whole point is not to interrupt — "silence this for 30 minutes" is
+      * an answer to the notification, and being thrown into a browser tab to
+      * confirm it costs more attention than the notification did. A backend that
+      * cannot do a background call renders it as an ordinary link (the adapters
+      * fall back rather than dropping the button), so this is a preference, never
+      * a requirement.
+      */
+      mode: zod.z.enum(["navigate", "background"]).optional()
     });
     var NotificationSchema = zod.z.object({
       body: zod.z.string(),
@@ -241984,6 +243073,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         name: "Package"
       }
     ];
+    var DETECTION_MACRO_CLASSES = new Set(MACRO_LABELS.map((l) => l.id));
+    function isDetectionMacroClass(className) {
+      return DETECTION_MACRO_CLASSES.has(className.trim().toLowerCase());
+    }
     var COCO_TO_MACRO = {
       mapping: {
         person: "person",
@@ -242622,7 +243715,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * full slice; renders an arm button per `availableModes` entry and
       * a PIN field iff `requiresCode === true`.
       */
-      runtimeState: AlarmPanelStatusSchema
+      runtimeState: AlarmPanelStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — armed state is the one thing a panel must not lose across a restart.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var MaskPointSchema = zod.z.object({
       x: zod.z.number(),
@@ -242690,6 +243793,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "alarm-triggered",
       "alarm-armed",
       "alarm-disarmed",
+      "alarm-arming",
+      "alarm-arm-refused",
       "camera-online",
       "camera-offline",
       "camera-disabled",
@@ -242703,8 +243808,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     ]);
     var NC_AUTHORABLE_SYSTEM_EVENT_KINDS = NcSystemEventKindSchema.options.filter((kind) => !NC_LEGACY_SYSTEM_EVENT_KINDS.has(kind));
     var NC_ALARM_SYSTEM_EVENT_KINDS = [
-      "alarm-triggered",
+      "alarm-arm-refused",
+      "alarm-arming",
       "alarm-armed",
+      "alarm-triggered",
       "alarm-disarmed"
     ];
     var NcSystemEventConditionSchema = zod.z.object({
@@ -242726,6 +243833,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       packageNames: zod.z.array(zod.z.string().min(1)).min(1).optional()
     });
     var NC_MAX_PER_TRACK_IMMEDIATE = 1;
+    var NC_SNOOZE_MAX_MINUTES = 1440;
+    var NC_DEFAULT_SNOOZE_MINUTES = [
+      10,
+      30,
+      60
+    ];
     var NcScheduleWindowSchema = zod.z.object({
       /** Days of week the window STARTS on (0 = Sunday … 6 = Saturday). */
       days: zod.z.array(zod.z.number().int().min(0).max(6)).min(1),
@@ -242983,15 +244096,15 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * (an `immediate` rule naming an `audio-*` class, one notification per
       * classified sample) stays exactly as it was for rules that already use it.
       *
-      * NOT in {@link NC_CONDITION_CATALOG} yet, and that is the sequencing rule
-      * rather than an oversight: the viewer mirrors the descriptor enums BY HAND
-      * (`camstack/src/data/notification-center.ts`, guarded by
-      * `scripts/check-viewer-condition-mirror.ts`) and its rule editor STRIPS the
+      * In {@link NC_CONDITION_CATALOG} since P2, and the ORDER it got there is the
+      * rule rather than an accident: the viewer mirrors the descriptor enums BY
+      * HAND (`camstack/src/data/notification-center.ts`, guarded by
+      * `scripts/check-viewer-condition-mirror.ts`) and its rule editor strips the
       * condition fields it does not know when a rule is saved from the phone.
       * Publishing an editor for a condition the app cannot round-trip is how an
-      * operator loses a rule's conditions by opening it — so the descriptor, the
-      * admin widget and the viewer mirror land together (P2 + P3), and only then
-      * does an audio rule become authorable.
+      * operator loses a rule's conditions by opening it — so the viewer mirror
+      * (P3, shipped) went FIRST, and the descriptor an editor renders from
+      * follows here.
       */
       audio: NcAudioConditionSchema.optional()
     });
@@ -243161,6 +244274,30 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       */
       snoozeAllowGlobal: zod.z.boolean().optional(),
       /**
+      * The snooze durations THIS rule's notification offers as buttons, in
+      * minutes.
+      *
+      * Three states, and all three are distinct — which is exactly why this is
+      * `.optional()` and never `.default()`. A Zod default does not run on the
+      * addon cap path (three production failures in one day), so a schema default
+      * would collapse the first two:
+      *
+      * | value | meaning |
+      * | --- | --- |
+      * | absent | the operator never said ⇒ {@link NC_DEFAULT_SNOOZE_MINUTES} |
+      * | `[]` | **no snooze buttons on this rule** — the explicit override |
+      * | a list | these choices, de-duplicated and sorted, at most four |
+      *
+      * `.max(4)` because the notifier's own action budget is small (ntfy allows
+      * three buttons in total) and a rule that spent it all on snooze choices
+      * would push its own tap-through actions off the notification.
+      *
+      * An empty list is NOT an alarm exemption: a rule the alarm is about, or
+      * that arms the panel, is exempt automatically and cannot be silenced by a
+      * window from anywhere (D133).
+      */
+      snoozeOptions: zod.z.array(zod.z.number().int().min(1).max(NC_SNOOZE_MAX_MINUTES)).max(4).optional(),
+      /**
       * Devices this rule ACTUATES — arm the alarm, open a gate, turn on a light.
       *
       * This is what makes the rule set the alarm's trigger set without the alarm
@@ -243250,6 +244387,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         "device",
         "package",
         "occupancy",
+        "audio",
         "system"
       ]),
       label: zod.z.string(),
@@ -243268,6 +244406,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         "crossingSelect",
         "polygonDraw",
         "occupancy",
+        "audio",
         "deviceState",
         "systemEvent"
       ]),
@@ -243354,13 +244493,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
             label: "Server update available"
           },
           {
-            value: "alarm-triggered",
-            label: "Alarm triggered"
+            value: "alarm-arming",
+            label: "Alarm arming (exit delay)"
           },
           {
             value: "alarm-armed",
             label: "Alarm armed"
           },
+          {
+            value: "alarm-triggered",
+            label: "Alarm triggered"
+          },
           {
             value: "alarm-disarmed",
             label: "Alarm disarmed"
@@ -243661,6 +244804,16 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         phase: "P1",
         description: "ZoneAnalytics occupancy edge (optionally zone/class-scoped): count crosses the threshold and holds for sustainSeconds. Fail-closed on a missing snapshot."
       },
+      {
+        id: "audio",
+        group: "audio",
+        label: "Sound",
+        valueType: "audio",
+        operator: "anyOf",
+        appliesTo: ["immediate"],
+        phase: "P2",
+        description: "Fires when at least hitPercent% of the samples in a samplingSeconds window are hits \u2014 a hit clears the dBFS floor AND carries one of the chosen sounds. Both filters are optional and independent, but naming NEITHER never matches: every sample would be a hit, so the engine refuses rather than notifying on silence. dBFS is negative-going (0 = full scale, -96 = silence)."
+      },
       {
         id: "customZones",
         group: "zones",
@@ -243759,7 +244912,6 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "device",
       "all"
     ]);
-    var NC_SNOOZE_MAX_MINUTES = 1440;
     var NcSnoozeInputSchema = zod.z.object({
       scope: NcSnoozeScopeSchema,
       /** Required when `scope: 'rule'` — a scoped snooze with no id matches
@@ -243767,6 +244919,19 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       ruleId: zod.z.string().optional(),
       /** Required when `scope: 'device'`. */
       deviceId: zod.z.number().int().optional(),
+      /**
+      * Narrow the window to these subject classes — "the cat, not the person".
+      *
+      * ORTHOGONAL to `scope`, deliberately, and absent means EVERY class: that is
+      * what every window authored before this field meant, so no persisted row
+      * changes meaning and no client has to learn anything to keep working.
+      *
+      * It is what makes the window's real key `(deviceId, classes[])` and lets it
+      * cross rules (D133): the operator points at a camera and a kind of thing,
+      * not at whichever of their four rules happened to produce the notification
+      * they are dismissing.
+      */
+      classes: zod.z.array(zod.z.string().min(1)).min(1).optional(),
       durationMinutes: zod.z.number().int().min(1).max(NC_SNOOZE_MAX_MINUTES),
       /**
       * Silence this for EVERY recipient, not just the caller. Permission is
@@ -243791,6 +244956,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       scope: NcSnoozeScopeSchema,
       ruleId: zod.z.string().optional(),
       deviceId: zod.z.number().int().optional(),
+      /** Subject classes this window covers. ABSENT = every class — see
+      *  {@link NcSnoozeInputSchema.shape.classes}. Lives in the JSON blob and has
+      *  no SQLite column: nothing queries a window by class. */
+      classes: zod.z.array(zod.z.string().min(1)).min(1).optional(),
       startedAt: zod.z.number(),
       /** Exclusive: at exactly this instant the snooze is over. Expiry is a
       *  COMPARISON, not a job — no sweeper can leave the operator silenced. */
@@ -246063,7 +247232,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * handle. Slice shape is `{ zones: Zone[] }` so future extensions
       * (e.g. zone groupings) can sit alongside the polygon list.
       */
-      runtimeState: zod.z.object({ zones: zod.z.array(ZoneSchema).readonly() })
+      runtimeState: zod.z.object({ zones: zod.z.array(ZoneSchema).readonly() }),
+      /**
+      * Runtime-state durability: **restored** — written only on operator mutation, so a camera that never had one has nothing to re-derive from. This is the slice `zone-mirror-hydration.ts` exists to paper over.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored"
     };
     var NativeCropBboxSchema = zod.z.object({
       x: zod.z.number(),
@@ -246327,15 +247503,21 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       */
       onboardMotionDrivesAnalyzer: zod.z.boolean().default(true),
       /**
-      * Master toggle for the occupancy re-check. When `false` (DEFAULT) the runner
-      * never arms the periodic recheck timer, regardless of `occupancyRecheckSec` —
-      * this is off by default because the recheck re-subscribes a detection session
-      * every N seconds while `watching`, a major source of pull-decoder re-dial
-      * churn (each cycle creates+tears a session → RTSP re-dial → latency). The
+      * Master toggle for the occupancy re-check. When `false` the runner never arms
+      * the periodic recheck timer, regardless of `occupancyRecheckSec`; the
       * `occupancyRecheckSec` / `occupancyRecheckFrames` sliders only take effect
       * (and only render) when this is enabled.
+      *
+      * DEFAULT `true` since 2026-08-13 (was `false`). It was off because the
+      * recheck re-subscribes a detection session every N seconds while `watching`
+      * — each cycle creates+tears a session ⇒ an RTSP re-dial ⇒ latency, a major
+      * pull-decoder churn source. What that bought was a blind spot: a STATIONARY
+      * object is counted only while the stationary registry holds it, and the
+      * registry rebuilds from motion, so after a restart a parked car was invisible
+      * to every occupancy rule until something moved in front of it. The churn is
+      * now paid on the interval instead — see `occupancyRecheckSecField`.
       */
-      occupancyRecheckEnabled: zod.z.boolean().default(false),
+      occupancyRecheckEnabled: zod.z.boolean().default(true),
       occupancyRecheckSec: zod.z.number().min(occupancyRecheckSecField.min).max(occupancyRecheckSecField.max).default(occupancyRecheckSecField.default),
       occupancyRecheckFrames: zod.z.number().min(occupancyRecheckFramesField.min).max(occupancyRecheckFramesField.max).default(occupancyRecheckFramesField.default),
       /**
@@ -246453,8 +247635,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         type: "boolean",
         style: "checkbox",
         label: "Occupancy re-check",
-        description: "Periodically re-sample a few frames during the watching phase to confirm the scene is truly empty (catches stationary objects motion-gating would miss). Off by default \u2014 it adds decoder re-dial churn.",
-        default: false
+        description: "Periodically re-sample a few frames during the watching phase, so objects that are simply parked are still counted (motion gating alone loses them after a restart). On by default at a wide interval; turn it off on cameras where the extra decoder re-dial is expensive.",
+        default: true
       },
       {
         key: "occupancyRecheckSec",
@@ -249510,7 +250692,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: AirQualitySensorStatusSchema,
         kind: "push"
       },
-      runtimeState: AirQualitySensorStatusSchema
+      runtimeState: AirQualitySensorStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `numeric-sensor`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var AmbientLightSensorStatusSchema = zod.z.object({
       /** Current illuminance in lux (lx). */
@@ -249538,7 +250730,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: AmbientLightSensorStatusSchema,
         kind: "push"
       },
-      runtimeState: AmbientLightSensorStatusSchema
+      runtimeState: AmbientLightSensorStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `numeric-sensor`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var AudioClassSummarySchema = zod.z.object({
       className: zod.z.string(),
@@ -249628,7 +250830,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         }), AudioMetricsHistorySchema)
       },
       /** Reactive runtime-state mirror — live `device.state.audioMetrics.value`. */
-      runtimeState: AudioMetricsSnapshotSchema
+      runtimeState: AudioMetricsSnapshotSchema,
+      /**
+      * Runtime-state durability: **session** — 1 Hz per camera at the mirror and ~63 % of the fleet's whole runtime-state write rate. `avgDbfs` is a rolling 60 s mean that genuinely moves every second, so no equality fix reclaims it — and a two-hour-old dB reading rendered as current is worse than no reading.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var AutomationControlStatusSchema = zod.z.object({
       /** Whether the automation is currently enabled. Disabled automations
@@ -249679,7 +250888,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * reads `enabled` (toggle) + `isRunning` (spinner) + `lastError`
       * (badge) directly.
       */
-      runtimeState: AutomationControlStatusSchema
+      runtimeState: AutomationControlStatusSchema,
+      /**
+      * Runtime-state durability: **session** — the authority for an automation being enabled is the automation store; a restored `isRunning` would be a lie. D62: one authority per switch.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var BatteryStatusSchema = zod.z.object({
       /** 0..100 inclusive. Firmware-reported. */
@@ -249780,7 +250996,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * via `device.runtimeState.getCapState('battery')` regardless of
       * the underlying driver.
       */
-      runtimeState: BatteryStatusSchema
+      runtimeState: BatteryStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — a sleeping battery camera may not report for hours; the restored percentage is the only thing the UI and the sleep gate have. Zero churn once `lastUpdated` is excluded — 526 writes, 0 value changes, in 25 minutes.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastUpdated"]
     };
     var BinaryStatusSchema = zod.z.object({
       on: zod.z.boolean(),
@@ -249798,7 +251024,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: BinaryStatusSchema,
         kind: "push"
       },
-      runtimeState: BinaryStatusSchema
+      runtimeState: BinaryStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — transition-driven sensor state; the restored value gives the boot comparison.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var BrightnessStatusSchema = zod.z.object({
       /** Current level as 0..100 inclusive. Firmware-reported. */
@@ -249840,7 +251076,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * by the kernel. Read via `device.state.brightness.value` so UI
       * sliders surface the current level without polling the provider.
       */
-      runtimeState: BrightnessStatusSchema
+      runtimeState: BrightnessStatusSchema,
+      /**
+      * Runtime-state durability: **session** — live lamp state, re-published by the provider on connect.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var buttonCapability = {
       name: "button",
@@ -249920,7 +251163,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: CarbonMonoxideStatusSchema,
         kind: "push"
       },
-      runtimeState: CarbonMonoxideStatusSchema
+      runtimeState: CarbonMonoxideStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `smoke`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var HvacModeSchema = zod.z.enum([
       "off",
@@ -250049,7 +251302,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * the full slice via `device.state.climate-control.value` and refresh
       * on every push without re-querying the provider.
       */
-      runtimeState: ClimateControlStatusSchema
+      runtimeState: ClimateControlStatusSchema,
+      /**
+      * Runtime-state durability: **session** — as `brightness`; `currentTemp` moves continuously and is re-published on connect.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var RgbTripletSchema = zod.z.object({
       r: zod.z.number().int().min(0).max(255),
@@ -250136,7 +251396,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * kernel. Read via `device.state.color.value` so UI pickers surface
       * the current chromaticity without polling the provider.
       */
-      runtimeState: ColorStatusSchema
+      runtimeState: ColorStatusSchema,
+      /**
+      * Runtime-state durability: **session** — as `brightness`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var CONNECTION_TEST_TIMEOUT_MS = 2e4;
     var ConnectionTestOutcomeSchema = zod.z.discriminatedUnion("outcome", [
@@ -250191,7 +251458,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: ConnectivityStatusSchema,
         kind: "push"
       },
-      runtimeState: ConnectivityStatusSchema
+      runtimeState: ConnectivityStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — same shape and same argument as `device-status`, for links rather than devices.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var ConsumableItemSchema = zod.z.object({
       /** Stable id, e.g. 'main-brush'. */
@@ -250258,7 +251535,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           }
         }
       },
-      runtimeState: ConsumablesStatusSchema.extend({ lastFetchedAt: zod.z.number() })
+      runtimeState: ConsumablesStatusSchema.extend({ lastFetchedAt: zod.z.number() }),
+      /**
+      * Runtime-state durability: **session** — the authority is the appliance; the provider re-reads the whole item array on connect.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var ContactStatusSchema = zod.z.object({
       /** True when the entry is open; false when closed. */
@@ -250277,7 +251561,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: ContactStatusSchema,
         kind: "push"
       },
-      runtimeState: ContactStatusSchema
+      runtimeState: ContactStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — a door left open across a restart must still read open.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var ControlKindSchema = zod.z.enum([
       "numeric",
@@ -250364,7 +251658,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * dropdown / text field / date picker) read the slice's discriminant
       * and value directly without polling the provider.
       */
-      runtimeState: ControlStatusSchema
+      runtimeState: ControlStatusSchema,
+      /**
+      * Runtime-state durability: **session** — a generic control mirrors an external entity that re-publishes on connect; the options array is re-derived with it.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var CoverStateSchema = zod.z.enum([
       "open",
@@ -250426,7 +251727,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * Runtime-state slice — mirrored by the kernel. UI controls watch
       * the slice for live position changes during a move.
       */
-      runtimeState: CoverStatusSchema
+      runtimeState: CoverStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — position survives a restart on the device; the mirror should agree at boot rather than read blank.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var DayNightModeSchema = zod.z.enum([
       "auto",
@@ -250487,7 +251798,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: DayNightStatusSchema,
         kind: "poll"
       },
-      runtimeState: DayNightStatusSchema
+      runtimeState: DayNightStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — operator-set IR-cut behaviour; mutation-driven.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var DeviceStatusSchema = zod.z.object({
       /**
@@ -250520,7 +251841,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: DeviceStatusSchema,
         kind: "push"
       },
-      runtimeState: DeviceStatusSchema
+      runtimeState: DeviceStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — the previous observation is what makes the first reading after a restart a COMPARISON instead of a phantom transition (D130). 32 real flips across 16 devices in 25 min — the busiest slice in the cold half.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var DoorbellStatusSchema = zod.z.object({
       /** Ms epoch of the last press. null = never observed since this provider started. */
@@ -250560,7 +251891,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * `device.state.doorbell.value`. UIs can show "last ring 5m ago"
       * without subscribing.
       */
-      runtimeState: DoorbellStatusSchema
+      runtimeState: DoorbellStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — a monotonic accumulator: the slice IS the record. `lastPressedAt` is content here, not a clock, so it is deliberately NOT volatile.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored"
     };
     var EnumSensorDateTimeFormatSchema = zod.z.enum([
       "date",
@@ -250590,7 +251928,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: EnumSensorStatusSchema,
         kind: "push"
       },
-      runtimeState: EnumSensorStatusSchema
+      runtimeState: EnumSensorStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `numeric-sensor`; 80 devices.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var EventFireSchema = zod.z.object({
       deviceId: zod.z.number(),
@@ -250616,7 +251964,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: EventEmitterStatusSchema,
         kind: "push"
       },
-      runtimeState: EventEmitterStatusSchema
+      runtimeState: EventEmitterStatusSchema,
+      /**
+      * Runtime-state durability: **session** — `eventCountSinceStart` names its own scope.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var EventItemSchema = zod.z.object({
       id: zod.z.string(),
@@ -250915,7 +252270,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * Runtime-state slice — mirrored by the kernel. UI fan speed
       * sliders read `percentage` for live updates.
       */
-      runtimeState: FanControlStatusSchema
+      runtimeState: FanControlStatusSchema,
+      /**
+      * Runtime-state durability: **session** — as `brightness`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var FeatureProbeStatusSchema = zod.z.object({
       /**
@@ -250968,7 +252330,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: FeatureProbeStatusSchema,
         kind: "push"
       },
-      runtimeState: FeatureProbeStatusSchema
+      runtimeState: FeatureProbeStatusSchema,
+      /**
+      * Runtime-state durability: **session** — per-session by definition — `lastProbedAt` means "this worker completed a probe THIS session", which is why the mirror seed already blanks it. Persisting it only creates something to blank.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var FloodStatusSchema = zod.z.object({
       /** True when leak is currently detected. */
@@ -250987,7 +252356,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: FloodStatusSchema,
         kind: "push"
       },
-      runtimeState: FloodStatusSchema
+      runtimeState: FloodStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `smoke`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var GasStatusSchema = zod.z.object({
       detected: zod.z.boolean(),
@@ -251005,7 +252384,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: GasStatusSchema,
         kind: "push"
       },
-      runtimeState: GasStatusSchema
+      runtimeState: GasStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `smoke`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var HumidifierStatusSchema = zod.z.object({
       /** Whether the humidifier is currently on. */
@@ -251066,7 +252455,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * Runtime-state slice — mirrored by the kernel. UI controls watch the
       * slice for live humidity / mode changes.
       */
-      runtimeState: HumidifierStatusSchema
+      runtimeState: HumidifierStatusSchema,
+      /**
+      * Runtime-state durability: **session** — as `climate-control`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var HumiditySensorStatusSchema = zod.z.object({
       /** Current relative humidity, 0..100. */
@@ -251094,7 +252490,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: HumiditySensorStatusSchema,
         kind: "push"
       },
-      runtimeState: HumiditySensorStatusSchema
+      runtimeState: HumiditySensorStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `numeric-sensor` (67 of 75 writes were the clock alone).
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var ImageStatusSchema = zod.z.object({
       /** Absolute signed URL the browser loads directly. Null when the
@@ -251118,7 +252524,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * Runtime-state slice — mirrored by the kernel. The UI reads `url`
       * directly and renders the still image.
       */
-      runtimeState: ImageStatusSchema
+      runtimeState: ImageStatusSchema,
+      /**
+      * Runtime-state durability: **session** — a snapshot URL is a session-scoped handle; a restored one points at nothing.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var ImageRotateSchema = zod.z.enum([
       "0",
@@ -251219,7 +252632,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: ImageSettingsStatusSchema,
         kind: "poll"
       },
-      runtimeState: ImageSettingsStatusSchema
+      runtimeState: ImageSettingsStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — operator-set camera imaging; mutation-driven.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var IntegrationWithStateSchema = zod.z.object({
       id: zod.z.string(),
@@ -251550,7 +252973,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * Runtime-state slice — mirrored by the kernel. UI controls watch the
       * slice for live activity + battery changes.
       */
-      runtimeState: LawnMowerControlStatusSchema
+      runtimeState: LawnMowerControlStatusSchema,
+      /**
+      * Runtime-state durability: **session** — as `vacuum-control`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var InterfaceKindEnum = zod.z.enum([
       "lan",
@@ -251799,7 +253229,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * read `state` and disable themselves during `locking`/`unlocking`
       * transitions.
       */
-      runtimeState: LockControlStatusSchema
+      runtimeState: LockControlStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — a lock left locked must still read locked.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var MediaPlayerStateSchema = zod.z.enum([
       "off",
@@ -251949,7 +253389,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * full slice for live now-playing, volume, and progress updates
       * without polling.
       */
-      runtimeState: MediaPlayerStatusSchema
+      runtimeState: MediaPlayerStatusSchema,
+      /**
+      * Runtime-state durability: **session** — a restored transport position describes a playback that stopped when the hub did.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var MeshEndpointSchema = zod.z.object({
       /** Stable identifier within the provider (e.g. `mesh-ipv4`, `magicdns`, `funnel`). */
@@ -252233,7 +253680,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * `device.state.motion.value`. Reads never invoke the provider, so
       * UIs and other addons can poll the cached state safely.
       */
-      runtimeState: MotionStatusSchema
+      runtimeState: MotionStatusSchema,
+      /**
+      * Runtime-state durability: **session** — self-clearing by construction (`autoClearAfterMs`); a restored `detected: true` is a frozen event, and the next frame re-publishes the real one.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var MotionTriggerStatusSchema = zod.z.object({
       enabled: zod.z.boolean(),
@@ -252270,7 +253724,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: MotionTriggerStatusSchema,
         kind: "command-driven"
       },
-      runtimeState: MotionTriggerRuntimeStateSchema
+      runtimeState: MotionTriggerRuntimeStateSchema,
+      /**
+      * Runtime-state durability: **session** — the authority for motion-trigger enablement is the provider's own config; the slice is a mirror of it, re-published on connect.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var MotionZoneRegionSchema = zod.z.object({
       id: zod.z.number(),
@@ -252325,7 +253786,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: MotionZoneStatusSchema,
         kind: "poll"
       },
-      runtimeState: MotionZoneStatusSchema
+      runtimeState: MotionZoneStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — the 14 KB polygon list is the single largest slice on the fleet and has not changed since the operator drew it. Highest value per byte in the table.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var NativeObjectClassEnum = zod.z.enum([
       "person",
@@ -252388,7 +253859,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: NativeObjectDetectionStatusSchema,
         kind: "push"
       },
-      runtimeState: NativeObjectDetectionRuntimeStateSchema
+      runtimeState: NativeObjectDetectionRuntimeStateSchema,
+      /**
+      * Runtime-state durability: **restored** — `enabled` is an operator toggle on a camera whose refresh is a no-op and whose staleMs is Infinity. There is no hardware value to re-read — losing it loses the setting.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var StreamNetworkStatsSchema = zod.z.object({
       nominalBitrateKbps: zod.z.number(),
@@ -252711,7 +254192,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * form reads `supports` to gate optional fields; history pane reads
       * `lastSentAt` / `lastError` / `queueDepth`.
       */
-      runtimeState: NotifierStatusSchema
+      runtimeState: NotifierStatusSchema,
+      /**
+      * Runtime-state durability: **session** — live queue depth and last-send state; a restored queue depth describes a queue that no longer exists.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var NumericSensorStatusSchema = zod.z.object({
       value: zod.z.number(),
@@ -252737,7 +254225,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: NumericSensorStatusSchema,
         kind: "push"
       },
-      runtimeState: NumericSensorStatusSchema
+      runtimeState: NumericSensorStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — polled value, low churn once the clock is excluded (251 of 669 writes were the clock alone); restoring it removes the cold window before the first poll.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var OsdOverlayKindEnum = zod.z.enum([
       "text",
@@ -253162,7 +254660,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * the full slice via `device.state.petFeeder.value` and refresh on
       * every poll without re-querying the provider.
       */
-      runtimeState: PetFeederStatusSchema
+      runtimeState: PetFeederStatusSchema,
+      /**
+      * Runtime-state durability: **session** — live appliance state re-published on connect.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var VehicleSchema = zod.z.object({
       id: zod.z.string(),
@@ -253496,7 +255001,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: PowerMeterStatusSchema,
         kind: "push"
       },
-      runtimeState: PowerMeterStatusSchema
+      runtimeState: PowerMeterStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `numeric-sensor`; `kwhTotal` is an accumulator whose restored value is the baseline.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var GpsLocationSchema = zod.z.object({
       /** Latitude in decimal degrees, -90..90. */
@@ -253537,7 +255052,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * the map pin is rendered (use `DeviceFeature.PresenceGps` for the
       * pre-fetch fast-path check).
       */
-      runtimeState: PresenceStatusSchema
+      runtimeState: PresenceStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — occupancy-relevant: the restored state is what an occupancy rule compares the first post-restart observation against.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var PressureSensorStatusSchema = zod.z.object({
       /** Current pressure in hPa. */
@@ -253565,7 +255090,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: PressureSensorStatusSchema,
         kind: "push"
       },
-      runtimeState: PressureSensorStatusSchema
+      runtimeState: PressureSensorStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `numeric-sensor`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var PrivacyMaskShapeSchema = zod.z.discriminatedUnion("kind", [MaskRectShapeSchema, MaskPolygonShapeSchema]);
     var PrivacyMaskRegionSchema = zod.z.object({
@@ -253664,7 +255199,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: PrivacyMaskStatusSchema,
         kind: "poll"
       },
-      runtimeState: PrivacyMaskStatusSchema
+      runtimeState: PrivacyMaskStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — operator-drawn regions, zero real churn — 22 writes in 25 minutes, every one of them the clock.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     function summarisePrivacyAudio(profiles) {
       if (profiles.length === 0) return null;
@@ -253854,7 +255399,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * fetch / cache / fallback logic out of the four cap methods —
       * they become trampolines over `runtimeState`.
       */
-      runtimeState: PtzAutotrackRuntimeStateSchema
+      runtimeState: PtzAutotrackRuntimeStateSchema,
+      /**
+      * Runtime-state durability: **session** — mirrors the camera's own autotrack config, re-read on connect.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var rebootCapability = {
       name: "reboot",
@@ -254524,7 +256076,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: SceneMonitorStatusSchema,
         kind: "push"
       },
-      runtimeState: SceneMonitorStatusSchema
+      runtimeState: SceneMonitorStatusSchema,
+      /**
+      * Runtime-state durability: **session** — re-derived from the current scene on the next evaluation.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var ZoneRuleModeEnum = zod.z.enum(["include", "exclude"]);
     var ZoneRuleSchema = zod.z.object({
@@ -254626,7 +256185,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * `isRunning` to render a spinner during execution and surfaces
       * `lastError` / `lastRunSuccess` in the recent-runs panel.
       */
-      runtimeState: ScriptRunnerStatusSchema
+      runtimeState: ScriptRunnerStatusSchema,
+      /**
+      * Runtime-state durability: **session** — a restored `isRunning: true` describes a process that died with the previous hub.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var SmokeStatusSchema = zod.z.object({
       detected: zod.z.boolean(),
@@ -254644,7 +256210,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: SmokeStatusSchema,
         kind: "push"
       },
-      runtimeState: SmokeStatusSchema
+      runtimeState: SmokeStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — a safety sensor must not read "clear" merely because the hub restarted.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var CamStreamDescriptorSchema = zod.z.object({
       camStreamId: zod.z.string().min(1),
@@ -254795,7 +256371,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: StreamParamsStatusSchema,
         kind: "poll"
       },
-      runtimeState: StreamParamsStatusSchema
+      runtimeState: StreamParamsStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — operator-set encoder profile; mutation-driven.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var STREAM_PROFILE_META = [
       {
@@ -255066,6 +256652,16 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * not need to re-query the provider after a setState mutation.
       */
       runtimeState: SwitchStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — device state an operator reads as authoritative; 55 devices, transition-driven.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"],
       settings: { bindings: [{
         kind: "scalar",
         statusPath: "on",
@@ -255138,7 +256734,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: TamperStatusSchema,
         kind: "push"
       },
-      runtimeState: TamperStatusSchema
+      runtimeState: TamperStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `smoke`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var TemperatureSensorStatusSchema = zod.z.object({
       /** Current temperature in Celsius. */
@@ -255167,7 +256773,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: TemperatureSensorStatusSchema,
         kind: "push"
       },
-      runtimeState: TemperatureSensorStatusSchema
+      runtimeState: TemperatureSensorStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `numeric-sensor` (69 of 125 writes were the clock alone).
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastFetchedAt"]
     };
     var ToastSchema = zod.z.object({
       title: zod.z.string(),
@@ -255218,7 +256834,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: UpdateStatusSchema,
         kind: "poll"
       },
-      runtimeState: UpdateStatusSchema
+      runtimeState: UpdateStatusSchema,
+      /**
+      * Runtime-state durability: **session** — a restored `inProgress: true` describes an update that is no longer running; versions are re-probed at boot.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var UserSummarySchema = zod.z.object({
       id: zod.z.string(),
@@ -255552,7 +257175,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * Runtime-state slice — mirrored by the kernel. UI controls watch the
       * slice for live state + battery + fan-speed changes.
       */
-      runtimeState: VacuumControlStatusSchema
+      runtimeState: VacuumControlStatusSchema,
+      /**
+      * Runtime-state durability: **session** — as `media-player` — a restored `state: cleaning` is a robot that is not cleaning.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var ValveStateSchema = zod.z.enum([
       "open",
@@ -255605,7 +257235,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * Runtime-state slice — mirrored by the kernel. UI controls watch the
       * slice for live position changes during a move.
       */
-      runtimeState: ValveStatusSchema
+      runtimeState: ValveStatusSchema,
+      /**
+      * Runtime-state durability: **session** — as `brightness`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var VibrationStatusSchema = zod.z.object({
       detected: zod.z.boolean(),
@@ -255623,7 +257260,17 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         schema: VibrationStatusSchema,
         kind: "push"
       },
-      runtimeState: VibrationStatusSchema
+      runtimeState: VibrationStatusSchema,
+      /**
+      * Runtime-state durability: **restored** — as `smoke`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored",
+      /** Clock fields: written, but excluded from the compare that decides
+      *  whether persisting is worth a SQLite commit. */
+      volatileStateFields: ["lastChangedAt"]
     };
     var WaterHeaterStatusSchema = zod.z.object({
       /** Current measured temperature. Null when not reported. */
@@ -255683,7 +257330,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * Runtime-state slice — mirrored by the kernel. UI controls watch the
       * slice for live temperature / mode / away changes.
       */
-      runtimeState: WaterHeaterStatusSchema
+      runtimeState: WaterHeaterStatusSchema,
+      /**
+      * Runtime-state durability: **session** — as `climate-control`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var WeatherStatusSchema = zod.z.object({
       /** Verbatim HA condition state (`sunny`, `cloudy`, `rainy`, …). Null
@@ -255723,7 +257377,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * Runtime-state slice — mirrored by the kernel. The UI reads the
       * current conditions directly from the slice on each weather push.
       */
-      runtimeState: WeatherStatusSchema
+      runtimeState: WeatherStatusSchema,
+      /**
+      * Runtime-state durability: **session** — a forecast is stale the moment the hub is down; the provider re-fetches on connect.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var PerScopeBreakdownSchema = zod.z.object({
       /** Total tracked objects in this scope (frame / zone / unzoned). */
@@ -255832,7 +257493,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * automatically; the explicit `getCurrentSnapshot` cap method is
       * still useful for one-off polls without a subscription.
       */
-      runtimeState: CameraOccupancySnapshotSchema
+      runtimeState: CameraOccupancySnapshotSchema,
+      /**
+      * Runtime-state durability: **session** — per-frame analytics; with `audio-metrics` it is ~90 % of the offered write rate. Re-derived on the next frame.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "session"
     };
     var ZoneRuleStageEnum = zod.z.enum([
       "motion",
@@ -255884,7 +257552,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         motion: zod.z.array(ZoneRuleSchema).readonly(),
         detection: zod.z.array(ZoneRuleSchema).readonly(),
         package: zod.z.array(ZoneRuleSchema).readonly()
-      })
+      }),
+      /**
+      * Runtime-state durability: **restored** — operator intent, mutation-only, same argument as `zones`.
+      *
+      * See `RuntimeStateDurability`. Enforced by
+      * `scripts/check-runtime-state-durability.ts`.
+      */
+      durability: "restored"
     };
     var PIPELINE_FLOW_CAPABILITY_NAMES = [
       "decoder",
@@ -258156,11 +259831,40 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         } catch {
         }
       }
+      /**
+      * ONE device's bindings, not the fleet's.
+      *
+      * This runs on every `capability.binding-changed` AND on every
+      * `device.registered`, per mirror. It used to answer that with
+      * `getAllBindings` and `.find()` the one row — measured on the live
+      * hub (524 devices): 903 ms and 373 KB per call, against 21 ms and
+      * 613 bytes for `getBindings({deviceId})`.
+      *
+      * Adopting 20 Home Assistant devices registers 166 devices (parents +
+      * accessories), so an operator with the admin UI open bought 166
+      * full-fleet binding sweeps: ~150 s of hub main-thread time inside a
+      * 219 s adoption, with every other RPC — including the adoption's own —
+      * queued behind them. Same defect, same fix, as `refreshDeviceMetadata`
+      * below (`listAll` → `getDevice`).
+      *
+      * Removal is the destructive direction (every proxy handle a consumer
+      * holds goes inert), and an EMPTY binding list is not a claim that the
+      * device is gone — a device can legitimately bind nothing. So it needs
+      * a second read to agree (D49); `device.unregistered` remains the
+      * primary removal path.
+      */
       async refreshBinding(deviceId) {
         try {
-          const fresh = (await this.api.deviceManager.getAllBindings.query({})).find((b) => b.deviceId === deviceId);
-          if (fresh) this.bindings.set(deviceId, fresh);
-          else this.applyDeviceRemoval(deviceId);
+          const fresh = await this.api.deviceManager.getBindings.query({ deviceId });
+          if (fresh.entries.length > 0) {
+            this.bindings.set(deviceId, fresh);
+            return;
+          }
+          if (await this.api.deviceManager.getDevice.query({ deviceId }) === null) {
+            this.applyDeviceRemoval(deviceId);
+            return;
+          }
+          this.bindings.set(deviceId, fresh);
         } catch {
         }
       }
@@ -265134,6 +266838,301 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       for (const [capName, capKind] of Object.entries(CAP_PROVIDER_KIND_MAP)) if (capKind === kind) out.push(capName);
       return out;
     }
+    var RUNTIME_STATE_POLICY = {
+      "air-quality-sensor": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "alarm-panel": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "ambient-light-sensor": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "audio-metrics": {
+        durability: "session",
+        volatileFields: []
+      },
+      "automation-control": {
+        durability: "session",
+        volatileFields: []
+      },
+      "battery": {
+        durability: "restored",
+        volatileFields: ["lastUpdated"]
+      },
+      "binary": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "brightness": {
+        durability: "session",
+        volatileFields: []
+      },
+      "camera-streams": {
+        durability: "session",
+        volatileFields: []
+      },
+      "carbon-monoxide": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "climate-control": {
+        durability: "session",
+        volatileFields: []
+      },
+      "color": {
+        durability: "session",
+        volatileFields: []
+      },
+      "connectivity": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "consumables": {
+        durability: "session",
+        volatileFields: []
+      },
+      "contact": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "control": {
+        durability: "session",
+        volatileFields: []
+      },
+      "cover": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "day-night": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "device-discovery": {
+        durability: "session",
+        volatileFields: []
+      },
+      "device-status": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "doorbell": {
+        durability: "restored",
+        volatileFields: []
+      },
+      "enum-sensor": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "event-emitter": {
+        durability: "session",
+        volatileFields: []
+      },
+      "fan-control": {
+        durability: "session",
+        volatileFields: []
+      },
+      "feature-probe": {
+        durability: "session",
+        volatileFields: []
+      },
+      "flood": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "gas": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "humidifier": {
+        durability: "session",
+        volatileFields: []
+      },
+      "humidity-sensor": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "image": {
+        durability: "session",
+        volatileFields: []
+      },
+      "image-settings": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "lawn-mower-control": {
+        durability: "session",
+        volatileFields: []
+      },
+      "lock-control": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "media-player": {
+        durability: "session",
+        volatileFields: []
+      },
+      "motion": {
+        durability: "session",
+        volatileFields: []
+      },
+      "motion-trigger": {
+        durability: "session",
+        volatileFields: []
+      },
+      "motion-zones": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "native-object-detection": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "notifier": {
+        durability: "session",
+        volatileFields: []
+      },
+      "numeric-sensor": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "pet-feeder": {
+        durability: "session",
+        volatileFields: []
+      },
+      "power-meter": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "presence": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "pressure-sensor": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "privacy-mask": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "ptz-autotrack": {
+        durability: "session",
+        volatileFields: []
+      },
+      "scene-monitor": {
+        durability: "session",
+        volatileFields: []
+      },
+      "script-runner": {
+        durability: "session",
+        volatileFields: []
+      },
+      "smoke": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "stream-params": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "switch": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "tamper": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "temperature-sensor": {
+        durability: "restored",
+        volatileFields: ["lastFetchedAt"]
+      },
+      "update": {
+        durability: "session",
+        volatileFields: []
+      },
+      "vacuum-control": {
+        durability: "session",
+        volatileFields: []
+      },
+      "valve": {
+        durability: "session",
+        volatileFields: []
+      },
+      "vibration": {
+        durability: "restored",
+        volatileFields: ["lastChangedAt"]
+      },
+      "water-heater": {
+        durability: "session",
+        volatileFields: []
+      },
+      "weather": {
+        durability: "session",
+        volatileFields: []
+      },
+      "zone-analytics": {
+        durability: "session",
+        volatileFields: []
+      },
+      "zone-rules": {
+        durability: "restored",
+        volatileFields: []
+      },
+      "zones": {
+        durability: "restored",
+        volatileFields: []
+      }
+    };
+    function runtimeStatePolicyFor(capName) {
+      return RUNTIME_STATE_POLICY[capName] ?? SESSION_ONLY_POLICY;
+    }
+    var SESSION_ONLY_POLICY = {
+      durability: "session",
+      volatileFields: []
+    };
+    function isRestoredCap(capName) {
+      return runtimeStatePolicyFor(capName).durability === "restored";
+    }
+    var RESTORED_CAP_NAMES = [
+      "air-quality-sensor",
+      "alarm-panel",
+      "ambient-light-sensor",
+      "battery",
+      "binary",
+      "carbon-monoxide",
+      "connectivity",
+      "contact",
+      "cover",
+      "day-night",
+      "device-status",
+      "doorbell",
+      "enum-sensor",
+      "flood",
+      "gas",
+      "humidity-sensor",
+      "image-settings",
+      "lock-control",
+      "motion-zones",
+      "native-object-detection",
+      "numeric-sensor",
+      "power-meter",
+      "presence",
+      "pressure-sensor",
+      "privacy-mask",
+      "smoke",
+      "stream-params",
+      "switch",
+      "tamper",
+      "temperature-sensor",
+      "vibration",
+      "zone-rules",
+      "zones"
+    ];
     var SCOPE_PRESETS = [
       {
         id: "camera-viewer",
@@ -265777,8 +267776,99 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         }
       };
     }
+    var AUDIO_KIND_PREFIX = "audio-";
+    function normalizeAudioLabel(value) {
+      return value.startsWith(AUDIO_KIND_PREFIX) ? value.slice(6) : value;
+    }
+    var NC_AUDIO_DB_MIN = -96;
+    var NC_AUDIO_DB_MAX = 0;
+    var NC_AUDIO_DB_STEP = 3;
+    var NC_AUDIO_DB_OFFERED = -30;
+    var NC_AUDIO_HIT_PERCENT_MIN = 1;
+    var NC_AUDIO_HIT_PERCENT_MAX = 100;
+    var NC_AUDIO_SAMPLING_MIN_SEC = 1;
+    var NC_AUDIO_SAMPLING_MAX_SEC = 300;
+    var NC_AUDIO_DEFAULTS = {
+      hitPercent: 60,
+      samplingSeconds: 10
+    };
+    function audioOrDefaults(value) {
+      return value ?? NC_AUDIO_DEFAULTS;
+    }
+    function audioIsFailClosed(value) {
+      if (value === void 0) return false;
+      return value.dbThreshold === void 0 && (value.labels === void 0 || value.labels.length === 0);
+    }
+    function clampInt(value, min, max) {
+      if (!Number.isFinite(value)) return min;
+      return Math.min(max, Math.max(min, Math.round(value)));
+    }
+    function has(patch, key) {
+      return Object.prototype.hasOwnProperty.call(patch, key);
+    }
+    function patchAudio(current, patch) {
+      const base = audioOrDefaults(current);
+      const labels = has(patch, "labels") ? patch.labels : base.labels;
+      const dbThreshold = has(patch, "dbThreshold") ? patch.dbThreshold : base.dbThreshold;
+      return {
+        ...labels !== void 0 && labels.length > 0 ? { labels: [...labels] } : {},
+        ...dbThreshold !== void 0 ? { dbThreshold: clampInt(dbThreshold, NC_AUDIO_DB_MIN, 0) } : {},
+        hitPercent: clampInt(patch.hitPercent ?? base.hitPercent, 1, 100),
+        samplingSeconds: clampInt(patch.samplingSeconds ?? base.samplingSeconds, 1, 300)
+      };
+    }
+    var UNKNOWN_LABEL_ICON = "\u{1F508}";
+    var ICON_BY_ID = new Map(AUDIO_MACRO_LABELS.flatMap((macro2) => macro2.icon === void 0 ? [] : [[macro2.id, macro2.icon]]));
+    function audioLabelChoices(taxonomy, selected) {
+      const fromHub = taxonomy?.audioKinds ?? [];
+      const choices = fromHub.length > 0 ? fromHub.map((entry) => {
+        const id = normalizeAudioLabel(entry.kind);
+        return {
+          value: id,
+          label: entry.label,
+          icon: ICON_BY_ID.get(id) ?? UNKNOWN_LABEL_ICON,
+          unknown: false
+        };
+      }) : AUDIO_MACRO_LABELS.map((macro2) => ({
+        value: macro2.id,
+        label: macro2.name,
+        icon: macro2.icon ?? UNKNOWN_LABEL_ICON,
+        unknown: false
+      }));
+      const known = new Set(choices.map((choice) => choice.value));
+      const unknownLabels = [];
+      for (const stored of selected ?? []) {
+        const id = normalizeAudioLabel(stored);
+        if (known.has(id) || unknownLabels.includes(id)) continue;
+        unknownLabels.push(id);
+        choices.push({
+          value: id,
+          label: id,
+          icon: UNKNOWN_LABEL_ICON,
+          unknown: true
+        });
+      }
+      return {
+        choices,
+        unknownLabels
+      };
+    }
+    function isAudioLabelSelected(labels, id) {
+      const wanted = normalizeAudioLabel(id);
+      return (labels ?? []).some((stored) => normalizeAudioLabel(stored) === wanted);
+    }
+    function toggleAudioLabel(labels, id) {
+      const wanted = normalizeAudioLabel(id);
+      const current = labels ?? [];
+      if (isAudioLabelSelected(current, wanted)) {
+        const next = current.filter((stored) => normalizeAudioLabel(stored) !== wanted);
+        return next.length > 0 ? next : void 0;
+      }
+      return [...current, wanted];
+    }
     var CLASS_CONDITION_IDS = /* @__PURE__ */ new Set(["classes", "classesExclude"]);
     var LABEL_CONDITION_IDS = /* @__PURE__ */ new Set(["sensorKinds"]);
+    var COUNT_CLASS_CONDITION_IDS = /* @__PURE__ */ new Set(["occupancy"]);
     function toOption(entry) {
       return {
         value: entry.kind,
@@ -265845,6 +267935,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         });
         return groups.length > 0 ? { groups } : null;
       }
+      if (COUNT_CLASS_CONDITION_IDS.has(conditionId)) {
+        const options = taxonomy.videoClasses.filter((e) => e.parentKind === null).map(toOption);
+        return options.length > 0 ? { groups: [{
+          key: "macro",
+          fallbackLabel: "Classes",
+          options
+        }] } : null;
+      }
       if (LABEL_CONDITION_IDS.has(conditionId)) {
         const groups = groupLabels(taxonomy.labels);
         return groups.length > 0 ? { groups } : null;
@@ -267629,12 +269727,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.DEFAULT_FEATURES = DEFAULT_FEATURES;
     exports.DEFAULT_NATIVE_LEASE_SETTINGS = DEFAULT_NATIVE_LEASE_SETTINGS;
     exports.DEFAULT_RETENTION = DEFAULT_RETENTION;
+    exports.DEFAULT_RUNTIME_STATE_DURABILITY = require_sleep.DEFAULT_RUNTIME_STATE_DURABILITY;
     exports.DEFAULT_SCRUB_THUMBNAIL_PRESET = DEFAULT_SCRUB_THUMBNAIL_PRESET;
     exports.DEFAULT_TIMELAPSE_PREVIEW_TEXT = DEFAULT_TIMELAPSE_PREVIEW_TEXT;
     exports.DETAIL_CROP_PADDING_FIELD = DETAIL_CROP_PADDING_FIELD;
     exports.DETAIL_CROP_PADDING_KEY = DETAIL_CROP_PADDING_KEY;
     exports.DETAIL_CROP_SECTION_ID = DETAIL_CROP_SECTION_ID;
     exports.DETAIL_CROP_SQUARE_KEY = DETAIL_CROP_SQUARE_KEY;
+    exports.DETECTION_MACRO_CLASSES = DETECTION_MACRO_CLASSES;
     exports.DETECTION_PIPELINE_CAP_NAME = DETECTION_PIPELINE_CAP_NAME;
     exports.DEVICE_BACKEND_TO_FORMAT = DEVICE_BACKEND_TO_FORMAT;
     exports.DEVICE_CAP_NAMES = DEVICE_CAP_NAMES;
@@ -267878,6 +269978,15 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.NATIVE_LEASE_TILE_BUDGET_KEY = NATIVE_LEASE_TILE_BUDGET_KEY;
     exports.NC_ALARM_SYSTEM_EVENT_KINDS = NC_ALARM_SYSTEM_EVENT_KINDS;
     exports.NC_AUDIO_DBFS_FLOOR = NC_AUDIO_DBFS_FLOOR;
+    exports.NC_AUDIO_DB_MAX = NC_AUDIO_DB_MAX;
+    exports.NC_AUDIO_DB_MIN = NC_AUDIO_DB_MIN;
+    exports.NC_AUDIO_DB_OFFERED = NC_AUDIO_DB_OFFERED;
+    exports.NC_AUDIO_DB_STEP = NC_AUDIO_DB_STEP;
+    exports.NC_AUDIO_DEFAULTS = NC_AUDIO_DEFAULTS;
+    exports.NC_AUDIO_HIT_PERCENT_MAX = NC_AUDIO_HIT_PERCENT_MAX;
+    exports.NC_AUDIO_HIT_PERCENT_MIN = NC_AUDIO_HIT_PERCENT_MIN;
+    exports.NC_AUDIO_SAMPLING_MAX_SEC = NC_AUDIO_SAMPLING_MAX_SEC;
+    exports.NC_AUDIO_SAMPLING_MIN_SEC = NC_AUDIO_SAMPLING_MIN_SEC;
     exports.NC_AUTHORABLE_SYSTEM_EVENT_KINDS = NC_AUTHORABLE_SYSTEM_EVENT_KINDS;
     exports.NC_BASE_CONDITION_KEYS = NC_BASE_CONDITION_KEYS;
     exports.NC_CONDITION_CATALOG = NC_CONDITION_CATALOG;
@@ -267885,6 +269994,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.NC_CONFIRM_DEFAULT_TIMEOUT_MS = NC_CONFIRM_DEFAULT_TIMEOUT_MS;
     exports.NC_CONFIRM_MAX_TIMEOUT_MS = NC_CONFIRM_MAX_TIMEOUT_MS;
     exports.NC_CONFIRM_MIN_TIMEOUT_MS = NC_CONFIRM_MIN_TIMEOUT_MS;
+    exports.NC_DEFAULT_SNOOZE_MINUTES = NC_DEFAULT_SNOOZE_MINUTES;
     exports.NC_HISTORY_LIMIT_DEFAULT = NC_HISTORY_LIMIT_DEFAULT;
     exports.NC_HISTORY_LIMIT_MAX = NC_HISTORY_LIMIT_MAX;
     exports.NC_MAX_PER_TRACK_IMMEDIATE = NC_MAX_PER_TRACK_IMMEDIATE;
@@ -268031,7 +270141,9 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.RECOGNITION_TYPES = RECOGNITION_TYPES;
     exports.RECORDING_EXPORT_MAX_READ_BYTES = RECORDING_EXPORT_MAX_READ_BYTES;
     exports.RESERVED_BINDING_NAMES = RESERVED_BINDING_NAMES;
+    exports.RESTORED_CAP_NAMES = RESTORED_CAP_NAMES;
     exports.RUNTIME_DEFAULTS = RUNTIME_DEFAULTS;
+    exports.RUNTIME_STATE_POLICY = RUNTIME_STATE_POLICY;
     exports.RUNTIME_TO_FORMAT = RUNTIME_TO_FORMAT;
     exports.RawStateResultSchema = require_sleep.RawStateResultSchema;
     exports.ReadGopBytesResultSchema = ReadGopBytesResultSchema;
@@ -268303,7 +270415,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.audioAnalysisCapability = audioAnalysisCapability;
     exports.audioAnalyzerCapability = audioAnalyzerCapability;
     exports.audioCodecCapability = audioCodecCapability;
+    exports.audioIsFailClosed = audioIsFailClosed;
+    exports.audioLabelChoices = audioLabelChoices;
     exports.audioMetricsCapability = audioMetricsCapability;
+    exports.audioOrDefaults = audioOrDefaults;
     exports.audioPlanFromEncodeProfile = require_canonical_hash.audioPlanFromEncodeProfile;
     exports.authProviderCapability = authProviderCapability;
     exports.autoAssignProfiles = autoAssignProfiles;
@@ -268441,15 +270556,18 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.invocationFromEncodeProfile = require_canonical_hash.invocationFromEncodeProfile;
     exports.isAgentOnlyPlacement = isAgentOnlyPlacement;
     exports.isArrayOutputSchema = isArrayOutputSchema;
+    exports.isAudioLabelSelected = isAudioLabelSelected;
     exports.isBaseConditionKey = isBaseConditionKey;
     exports.isCollectionArrayMethod = isCollectionArrayMethod;
     exports.isDeployableToAgent = isDeployableToAgent;
+    exports.isDetectionMacroClass = isDetectionMacroClass;
     exports.isDeviceConfigCap = require_sleep.isDeviceConfigCap;
     exports.isDeviceScopedCap = require_sleep.isDeviceScopedCap;
     exports.isEvent = require_sleep.isEvent;
     exports.isIsolatedBuiltin = isIsolatedBuiltin;
     exports.isNode = isNode;
     exports.isObjectInput = isObjectInput;
+    exports.isRestoredCap = isRestoredCap;
     exports.isSameAddonId = isSameAddonId;
     exports.isScheduleActive = isScheduleActive;
     exports.isSoftwareDecode = require_canonical_hash.isSoftwareDecode;
@@ -268498,6 +270616,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.nodePin = require_sleep.nodePin;
     exports.nodesCapability = nodesCapability;
     exports.normalizeAddonInitResult = require_sleep.normalizeAddonInitResult;
+    exports.normalizeAudioLabel = normalizeAudioLabel;
     exports.normalizeUnit = normalizeUnit;
     exports.notificationOutputCapability = notificationOutputCapability;
     exports.notificationRulesCapability = notificationRulesCapability;
@@ -268514,6 +270633,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.parseJsonUnknown = require_sleep.parseJsonUnknown;
     exports.parseProfileBrokerId = require_sleep.parseProfileBrokerId;
     exports.parseStreamParamsFormPatch = parseStreamParamsFormPatch;
+    exports.patchAudio = patchAudio;
     exports.petFeederCapability = petFeederCapability;
     exports.pickAccessoryControl = pickAccessoryControl;
     exports.pickDetailCropConvention = pickDetailCropConvention;
@@ -268566,6 +270686,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.resolveVariantModelId = resolveVariantModelId;
     exports.runInferenceStep = runInferenceStep;
     exports.runtimeDevices = runtimeDevices;
+    exports.runtimeStatePolicyFor = runtimeStatePolicyFor;
     exports.sceneMonitorCapability = sceneMonitorCapability;
     exports.scopeKey = require_sleep.scopeKey;
     exports.scopesAllowAddon = scopesAllowAddon;
@@ -268612,6 +270733,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.toNodeId = require_sleep.toNodeId;
     exports.toStreamSourceEntry = toStreamSourceEntry;
     exports.toastCapability = toastCapability;
+    exports.toggleAudioLabel = toggleAudioLabel;
     exports.tokenize = tokenize;
     exports.transcodeBody = transcodeBody;
     exports.tryConvertUnit = tryConvertUnit;
@@ -389744,7 +391866,10 @@ var require_addon_registry_service = __commonJS({
         "setDevice",
         "getAddonDevice",
         "setAddonDevice",
-        "clearAddonDevice"
+        "clearAddonDevice",
+        "getDeviceRuntimeState",
+        "setDeviceRuntimeState",
+        "clearDeviceRuntimeState"
       ];
       for (const key of required) {
         if (typeof Reflect.get(backend, key) !== "function")
@@ -397201,6 +399326,18 @@ var require_cluster_node_history_store = __commonJS({
       descriptor: DescriptorSchema
     });
     var COLLECTION = "cluster-node-history";
+    var LAST_ACTIVE_HEARTBEAT_MS = 5 * 6e4;
+    function descriptorsEqual(a, b) {
+      return a.id === b.id && a.name === b.name && a.hostname === b.hostname && a.platform === b.platform && a.arch === b.arch && a.cpuModel === b.cpuModel && a.cpuCores === b.cpuCores && a.memoryMB === b.memoryMB && a.isHub === b.isHub && sameStrings(a.engines, b.engines) && sameStrings(a.localIps, b.localIps) && sameStrings(a.addonIds, b.addonIds) && samePackages(a.packages, b.packages);
+    }
+    function sameStrings(a, b) {
+      return a.length === b.length && a.every((v, i) => v === b[i]);
+    }
+    function samePackages(a, b) {
+      if (a === void 0 || b === void 0)
+        return a === b;
+      return a.length === b.length && a.every((p, i) => p.name === b[i]?.name && p.version === b[i]?.version);
+    }
     var ClusterNodeHistoryStore = class _ClusterNodeHistoryStore {
       resolveSettingsStore;
       logger;
@@ -397242,6 +399379,19 @@ var require_cluster_node_history_store = __commonJS({
        * Upsert a node's descriptor + addon roster while it is ONLINE, stamping
        * `lastActive = Date.now()`. Called on each `listNodes()` refresh for every
        * live node (R2 capture point).
+       *
+       * WRITES ONLY ON A CHANGE, OR ONCE PER {@link LAST_ACTIVE_HEARTBEAT_MS}.
+       * `listNodes()` runs off the 30 s topology heartbeat, so the unconditional
+       * upsert this used to be was the worst write:row ratio in the whole system —
+       * measured on the live hub at ~6 upserts/minute = **8,640 a day to maintain
+       * three rows**, i.e. 40 % of every ledger write on the hub, on the same shfs
+       * SQLite file whose WAL checkpoint can stall hub-main for seconds (D96).
+       *
+       * Nothing is lost. `lastActive` exists to answer "when was this node last
+       * seen", which only matters at OFFLINE resolution — and the disconnect edge
+       * is written by {@link touch}, which is unbounded. The bound costs at most
+       * five minutes of precision on a node that then disappeared without a
+       * `$node.disconnected`, and buys 288 writes/day/node instead of 2,880.
        */
       async snapshot(descriptor) {
         const store = await this.ensureDeclared();
@@ -397250,13 +399400,13 @@ var require_cluster_node_history_store = __commonJS({
         try {
           const existing = await this.readRow(store, descriptor.id);
           const packages = descriptor.packages ?? existing?.descriptor.packages;
+          const next = packages === void 0 ? descriptor : { ...descriptor, packages };
+          if (existing !== null && !this.worthWriting(existing, next))
+            return;
           await store.set({
             collection: COLLECTION,
             key: descriptor.id,
-            value: {
-              lastActive: Date.now(),
-              descriptor: packages === void 0 ? descriptor : { ...descriptor, packages }
-            }
+            value: { lastActive: Date.now(), descriptor: next }
           });
         } catch (err) {
           this.logger.warn("snapshot upsert failed (best-effort)", {
@@ -397265,6 +399415,16 @@ var require_cluster_node_history_store = __commonJS({
           });
         }
       }
+      /**
+       * Is this snapshot worth a commit? Yes when the descriptor CHANGED, or when
+       * the stored `lastActive` has aged past the heartbeat bound. A read that
+       * fails never reaches here — `snapshot` writes when there is no existing row.
+       */
+      worthWriting(existing, next) {
+        if (Date.now() - existing.lastActive >= LAST_ACTIVE_HEARTBEAT_MS)
+          return true;
+        return !descriptorsEqual(existing.descriptor, next);
+      }
       /** Read one node's row, validated. `null` when absent or malformed. */
       async readRow(store, nodeId) {
         const raw = await store.get({ collection: COLLECTION, key: nodeId });