camstack 1.2.5 → 1.2.6

package/dist/{chunk-BLUPPTTH.js → chunk-BRUAXYPT.js}

@@ -14522,7 +14522,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-DiOnzenz.mjs
+// ../types/dist/sleep-C3ceNSsf.mjs
 var WELL_KNOWN_TABS = [
   {
     id: "overview",
@@ -16914,617 +16914,1118 @@ var BATTERY_DEVICE_PROFILE = {
     "streamBroker.preBufferEnabled": false
   }
 };
-var DeviceStatusSchema = external_exports.object({
+var MaskPointSchema = external_exports.object({
+  x: external_exports.number(),
+  y: external_exports.number()
+});
+var MaskRectShapeSchema = external_exports.object({
+  kind: external_exports.literal("rect"),
+  x: external_exports.number(),
+  y: external_exports.number(),
+  width: external_exports.number(),
+  height: external_exports.number()
+});
+var MaskPolygonShapeSchema = external_exports.object({
+  kind: external_exports.literal("polygon"),
+  points: external_exports.array(MaskPointSchema)
+});
+var MaskGridShapeSchema = external_exports.object({
+  kind: external_exports.literal("grid"),
+  gridWidth: external_exports.number(),
+  gridHeight: external_exports.number(),
+  cells: external_exports.array(external_exports.boolean())
+});
+var MaskLineShapeSchema = external_exports.object({
+  kind: external_exports.literal("line"),
+  points: external_exports.array(MaskPointSchema)
+});
+var MaskShapeSchema = external_exports.discriminatedUnion("kind", [
+  MaskRectShapeSchema,
+  MaskPolygonShapeSchema,
+  MaskGridShapeSchema,
+  MaskLineShapeSchema
+]);
+var MaskShapeKindSchema = external_exports.enum([
+  "rect",
+  "polygon",
+  "grid",
+  "line"
+]);
+var MaskPolygonVerticesSchema = external_exports.object({
+  min: external_exports.number(),
+  max: external_exports.number()
+});
+var MaskGridDimsSchema = external_exports.object({
+  width: external_exports.number(),
+  height: external_exports.number()
+});
+var NcDeliverySchema = external_exports.enum([
+  "immediate",
+  "track-end",
+  "device-event",
+  "package-event"
+]);
+var NcScheduleWindowSchema = external_exports.object({
+  /** Days of week the window STARTS on (0 = Sunday … 6 = Saturday). */
+  days: external_exports.array(external_exports.number().int().min(0).max(6)).min(1),
+  startMinute: external_exports.number().int().min(0).max(1439),
+  endMinute: external_exports.number().int().min(0).max(1439)
+});
+var NcScheduleSchema = external_exports.object({
+  windows: external_exports.array(NcScheduleWindowSchema).min(1),
+  /** IANA timezone; default = hub host timezone. */
+  timezone: external_exports.string().optional(),
+  /** Active OUTSIDE the windows (e.g. "only outside business hours"). */
+  invert: external_exports.boolean().optional()
+});
+var NcPlateMatcherSchema = external_exports.object({
+  values: external_exports.array(external_exports.string().min(1)).min(1),
+  /** Max Levenshtein distance after normalization (uppercase alphanumeric). */
+  maxDistance: external_exports.number().int().min(0).max(3).default(1)
+});
+var NcOccupancyConditionSchema = external_exports.object({
+  /** Admin zone id to scope the count to; absent = whole-frame occupancy. */
+  zoneId: external_exports.string().optional(),
+  /** Object class to count; absent = any class. */
+  className: external_exports.string().optional(),
+  op: external_exports.enum([
+    "became-occupied",
+    "became-free",
+    ">=",
+    "<="
+  ]).default("became-occupied"),
+  count: external_exports.number().int().min(0).default(1),
+  sustainSeconds: external_exports.number().int().min(0).max(3600).default(15)
+});
+var NcZoneConditionSchema = external_exports.object({
+  ids: external_exports.array(external_exports.string().min(1)).min(1),
+  /** Quantifier over `ids` — at least one / every one visited. */
+  match: external_exports.enum(["any", "all"]).default("any")
+});
+var NcConditionsSchema = external_exports.object({
+  /** Device scope — absent = all devices. */
+  devices: external_exports.array(external_exports.number()).optional(),
+  /** Detector class names (any overlap with the record's class set). */
+  classes: external_exports.array(external_exports.string().min(1)).optional(),
+  /** Veto classes — any overlap fails the rule. */
+  classesExclude: external_exports.array(external_exports.string().min(1)).optional(),
+  /** Minimum detection confidence 0–1 (fails when the record has none). */
+  minConfidence: external_exports.number().min(0).max(1).optional(),
+  /** Admin zone membership over event `zones` / track `zonesVisited`. */
+  zones: NcZoneConditionSchema.optional(),
+  /** Veto zones — any hit fails the rule. */
+  zonesExclude: external_exports.array(external_exports.string().min(1)).optional(),
   /**
-  * Device-level liveness. Drivers flip via `markOnline(boolean)` on
-  * `BaseDevice`. Provider semantics vary — RTSP aggregates broker
-  * stream-health, Reolink reads firmware push events, ONVIF tracks
-  * ping responses. This cap intentionally does NOT prescribe which
-  * signal drives the flag.
+  * Exact (case-insensitive) match on the record's collapsed `label`
+  * (identity name / plate text / subclass).
   */
-  online: external_exports.boolean(),
-  /** Ms epoch of the last `online` transition. Lets consumers tell
-  *  apart "just came online" from "still online". */
-  lastChangedAt: external_exports.number()
-});
-var deviceStatusCapability = {
-  name: "device-status",
-  scope: "device",
-  deviceNative: true,
-  mode: "singleton",
-  methods: {},
-  events: {
-    /** Emitted when `online` transitions. Mirrors the semantics of
-    *  `battery.onStatusChanged`. */
-    onStatusChanged: { data: external_exports.object({
-      deviceId: external_exports.number(),
-      status: DeviceStatusSchema
-    }) }
-  },
-  status: {
-    schema: DeviceStatusSchema,
-    kind: "push"
-  },
-  runtimeState: DeviceStatusSchema
-};
-var FeatureProbeStatusSchema = external_exports.object({
+  labelEquals: external_exports.array(external_exports.string().min(1)).optional(),
   /**
-  * Driver-specific flag bag. Each driver picks its own key names — the
-  * cap deliberately does NOT enforce a closed enum here. Reolink keys:
-  * `hasPtz`, `hasIntercom`, `hasDoorbell`, `hasFloodlight`, `hasSiren`,
-  * `hasPirSensor`, `hasAutotrack`, `hasBattery`. Hikvision keys:
-  * `hasSupplementalLight`, `lightHasWhiteLight`, `hasAlarmIo`, `hasPtz`.
+  * Identity matcher. P1 boundary: matched against the record's collapsed
+  * `label` (the identity display name propagated by the face pipeline) —
+  * identity-ID matching rides in P2 when identity ids reach the record.
   */
-  flags: external_exports.record(external_exports.string(), external_exports.unknown()),
+  identities: external_exports.array(external_exports.string().min(1)).optional(),
+  /** Fuzzy plate matcher against the record's `label` (plate text). */
+  plates: NcPlateMatcherSchema.optional(),
   /**
-  * Coarse driver-classification — lets cross-process consumers tell apart
-  * cameras / battery-cams / NVRs without re-running the probe. `null`
-  * before the first probe completes.
+  * Identity EXCLUDE — mirror of {@link identities} with `notIn` semantics.
+  * Same P1 boundary: matched against the record's collapsed `label` (the
+  * identity display name). A record with NO label passes (nothing to
+  * exclude), unlike the include variant which fails on an absent label.
   */
-  deviceType: external_exports.string().nullable(),
-  /** Camera/firmware model string. `null` when the firmware doesn't expose it. */
-  model: external_exports.string().nullable(),
-  /** Channel count for NVR/Hub devices; `1` for standalone cameras; `null` pre-probe. */
-  channelCount: external_exports.number().nullable(),
+  identitiesExclude: external_exports.array(external_exports.string().min(1)).optional(),
   /**
-  * Ms epoch of the last SUCCESSFUL probe. `0` before the first probe
-  * completes — drivers' `getAccessoryChildren()` should treat zero as
-  * "probe not done yet, return empty" so accessories aren't spawned
-  * before the firmware is queried.
+  * Minimum server-computed key-event importance in [0,1] (`Track.importance`).
+  * TRACK-END only: importance is scored at track close, so it does not exist
+  * at immediate / object-event evaluation time (see catalog `appliesTo`). At
+  * close the value is threaded via the close-time info (the `Track` clone is
+  * captured before the DB row is updated, so it would otherwise read stale).
+  * Fails when the record carries no importance (never guess quality — the
+  * `minConfidence` precedent). MVP cut: a single scalar threshold.
   */
-  lastProbedAt: external_exports.number(),
+  minImportance: external_exports.number().min(0).max(1).optional(),
   /**
-  * Framework convention: every runtime-state slice carries this for the
-  * createRuntimeStateBridge stale-check helper. We keep it in sync with
-  * `lastProbedAt` on every write.
+  * Minimum track dwell in SECONDS — `(lastSeen − firstSeen) / 1000`.
+  * TRACK-END only: an `immediate` / object-event subject has no closed
+  * lifespan, so a dwell condition never matches immediate delivery
+  * (documented choice — the object-event record carries no `firstSeen`,
+  * so dwell cannot be computed from what the subject actually carries).
   */
-  lastFetchedAt: external_exports.number()
+  minDwellSeconds: external_exports.number().min(0).optional(),
+  /**
+  * Detection provenance filter. `any` (default / absent) matches every
+  * source; otherwise the subject's source must equal it. Legacy records
+  * with no stamped source are treated as `pipeline`. The union spans both
+  * record kinds — object events carry `pipeline` | `onboard`, synthetic
+  * tracks carry `sensor`.
+  */
+  source: external_exports.enum([
+    "pipeline",
+    "onboard",
+    "sensor",
+    "any"
+  ]).optional(),
+  /**
+  * Minimum identity / plate MATCH confidence in [0,1] — DISTINCT from the
+  * detector `minConfidence` (that gates the object-detection score; this
+  * gates the recognition/OCR match score). Fails when the subject carries
+  * no label-match confidence (never guess). TRACK-END only: the confidence
+  * lives on the recognition result and reaches the subject at track close.
+  *
+  * What it measures precisely (plumbed at track close — the closer threads
+  * the value into `NcTrackClosedInfo.labelConfidence`, the same seam as
+  * `importance`): the BEST recognition match confidence observed for the
+  * label the track carries at close — for a face, the peak cosine similarity
+  * of the ASSIGNED identity (`FaceMatch.score`, reset on an identity switch);
+  * for a plate, the peak OCR read score of the best-held plate
+  * (`plateText.confidence`). When BOTH a face and a plate were recognized on
+  * one track the higher of the two is used. A track that ended with no
+  * confident identity/plate match carries no value, so the condition fails
+  * closed for it (an un-recognized subject).
+  */
+  minLabelConfidence: external_exports.number().min(0).max(1).optional(),
+  /**
+  * DEVICE-EVENT only. Raw device event-type tokens (`EventFire.eventType`,
+  * e.g. a doorbell `press` / `press_long`) — matched case-insensitively
+  * against the token carried on the device-event subject (extracted from the
+  * event-emitter runtime slice's `lastEvent.eventType`). Fails when the
+  * subject carries no token. Doorbell-pulse / passive-sensor kinds emit no
+  * eventType, so gate those with {@link sensorKinds} instead.
+  */
+  eventTypeTokens: external_exports.array(external_exports.string().min(1)).optional(),
+  /**
+  * DEVICE-EVENT only. Sensor/control taxonomy kinds (e.g. `doorbell`,
+  * `contact`, `button`, `device-event`) — matched against the persisted
+  * `SensorEvent.kind` (see `sensor-event-kinds.ts`). Membership is OR.
+  */
+  sensorKinds: external_exports.array(external_exports.string().min(1)).optional(),
+  /**
+  * PACKAGE-EVENT only. Which package phase fires the rule — `delivered`
+  * (a parked parcel appeared), `picked-up` (it departed), or `both`. Fails
+  * when the subject's phase does not match (a subject always carries a phase
+  * on the package-event trigger).
+  */
+  packagePhase: external_exports.enum([
+    "delivered",
+    "picked-up",
+    "both"
+  ]).optional(),
+  /**
+  * PERSONAL-RULE custom zones (viewer-drawn). Inline normalized polygons
+  * (MaskShape vocabulary). A record passes when its bbox overlaps ANY
+  * listed polygon (ZoneEngine membership semantics). Evaluated only when
+  * the subject carries a bbox; absent bbox ⇒ the condition FAILS.
+  */
+  customZones: external_exports.array(MaskPolygonShapeSchema).optional(),
+  /**
+  * DEVICE-EVENT only. ZoneAnalytics occupancy edge — fires when a device's
+  * (optionally zone/class-scoped) occupancy count crosses the configured
+  * threshold and holds for `sustainSeconds`. Fail-closed on missing
+  * substrate (no snapshot / missing zone). See {@link NcOccupancyCondition}.
+  */
+  occupancy: NcOccupancyConditionSchema.optional()
 });
-var featureProbeCapability = {
-  name: "feature-probe",
-  scope: "device",
-  deviceNative: true,
-  mode: "singleton",
-  methods: {},
-  events: {
-    /** Fires whenever a fresh probe completes (kernel-driven `reprobe()`
-    *  or driver-initiated re-detect after a state change). */
-    onProbeChanged: { data: external_exports.object({
-      deviceId: external_exports.number(),
-      status: FeatureProbeStatusSchema
-    }) }
-  },
-  status: {
-    schema: FeatureProbeStatusSchema,
-    kind: "push"
-  },
-  runtimeState: FeatureProbeStatusSchema
-};
-var AirQualitySensorStatusSchema = external_exports.object({
-  /** Carbon dioxide concentration in ppm. */
-  co2Ppm: external_exports.number().min(0).optional(),
-  /** Total volatile organic compounds in ppb. */
-  vocPpb: external_exports.number().min(0).optional(),
-  /** Particulate matter ≤ 2.5 μm in µg/m³. */
-  pm25: external_exports.number().min(0).optional(),
-  /** Particulate matter ≤ 10 μm in µg/m³. */
-  pm10: external_exports.number().min(0).optional(),
-  /** Composite AQI value (typically 0..500). */
-  aqi: external_exports.number().optional(),
-  /** Ms epoch when the slice was last updated. */
-  lastFetchedAt: external_exports.number(),
-  /** Live display unit of the single metric this slice carries (e.g. HA
-  *  `attributes.unit_of_measurement` → 'ppm' / 'ppb' / 'µg/m³'). Each
-  *  upstream `sensor.*` entity surfaces ONE device_class, so one unit
-  *  per slice is unambiguous. */
-  unit: external_exports.string().optional(),
-  /** Suggested decimal places for numeric display.
-  *  Populated live from the upstream source when provided (e.g. HA
-  *  `attributes.suggested_display_precision`). Falls back to
-  *  auto-formatting when absent. */
-  precision: external_exports.number().int().min(0).max(10).optional()
-});
-var airQualitySensorCapability = {
-  name: "air-quality-sensor",
-  scope: "device",
-  deviceNative: true,
-  mode: "singleton",
-  deviceTypes: [DeviceType.Sensor],
-  methods: {},
-  status: {
-    schema: AirQualitySensorStatusSchema,
-    kind: "push"
-  },
-  runtimeState: AirQualitySensorStatusSchema
-};
-var AlarmStateSchema = external_exports.enum([
-  "disarmed",
-  "armed_home",
-  "armed_away",
-  "armed_night",
-  "armed_vacation",
-  "armed_custom_bypass",
-  "arming",
-  "disarming",
-  "pending",
-  "triggered"
-]);
-var AlarmArmModeSchema = external_exports.enum([
-  "home",
-  "away",
-  "night",
-  "vacation",
-  "custom_bypass"
-]);
-var AlarmPanelStatusSchema = external_exports.object({
-  /** Current lifecycle state. */
-  state: AlarmStateSchema,
-  /** Subset of arm modes the panel accepts. UI renders one button per
-  *  mode in this list. */
-  availableModes: external_exports.array(AlarmArmModeSchema),
-  /** Whether the panel requires a PIN on arm / disarm. Mirrors
-  *  `DeviceFeature.AlarmPinRequired` for slice consumers. */
-  requiresCode: external_exports.boolean(),
-  /** Ms epoch when the slice was last updated. */
-  lastChangedAt: external_exports.number()
-});
-var alarmPanelCapability = {
-  name: "alarm-panel",
-  scope: "device",
-  deviceNative: true,
-  mode: "singleton",
-  deviceTypes: [DeviceType.AlarmPanel],
-  methods: {
-    arm: method(external_exports.object({
-      deviceId: external_exports.number().int().nonnegative(),
-      mode: AlarmArmModeSchema,
-      /** Optional PIN code. Required when `requiresCode === true`.
-      *  Passed through to the upstream service; never persisted. */
-      code: external_exports.string().min(1).optional()
-    }), external_exports.void(), {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    disarm: method(external_exports.object({
-      deviceId: external_exports.number().int().nonnegative(),
-      code: external_exports.string().min(1).optional()
-    }), external_exports.void(), {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    /**
-    * Force the panel into the `triggered` state — used by HA
-    * automations to surface external sensor events through the panel
-    * (e.g. a Reolink camera intrusion event firing the security
-    * system). Provider rejects when the panel hardware doesn't
-    * support a software-initiated trigger.
-    */
-    trigger: method(external_exports.object({ deviceId: external_exports.number().int().nonnegative() }), external_exports.void(), {
-      kind: "mutation",
-      auth: "admin"
-    })
-  },
-  status: {
-    schema: AlarmPanelStatusSchema,
-    kind: "push"
-  },
+var NcRuleTargetSchema = external_exports.object({
+  /** `notification-output` Target id. */
+  targetId: external_exports.string().min(1),
   /**
-  * Runtime-state slice — mirrored by the kernel. UI panel reads the
-  * full slice; renders an arm button per `availableModes` entry and
-  * a PIN field iff `requiresCode === true`.
+  * Per-backend passthrough. Recognized keys are mapped onto the canonical
+  * Notification (`priority`, `level`, `sound`, `clickUrl`, `ttl`); the
+  * degrade engine drops what the backend can't render.
   */
-  runtimeState: AlarmPanelStatusSchema
-};
-var AmbientLightSensorStatusSchema = external_exports.object({
-  /** Current illuminance in lux (lx). */
-  lux: external_exports.number().min(0),
-  /** Ms epoch when the slice was last updated. */
-  lastFetchedAt: external_exports.number(),
-  /** Live display unit from the upstream source (e.g. HA
-  *  `attributes.unit_of_measurement`). The UI prefers this over the
-  *  role's canonical unit. Absent → fall back to the canonical unit. */
-  unit: external_exports.string().optional(),
-  /** Suggested decimal places for numeric display.
-  *  Populated live from the upstream source when provided (e.g. HA
-  *  `attributes.suggested_display_precision`). Falls back to
-  *  auto-formatting when absent. */
-  precision: external_exports.number().int().min(0).max(10).optional()
+  params: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
 });
-var ambientLightSensorCapability = {
-  name: "ambient-light-sensor",
-  scope: "device",
-  deviceNative: true,
-  mode: "singleton",
-  deviceTypes: [DeviceType.Sensor],
-  methods: {},
-  status: {
-    schema: AmbientLightSensorStatusSchema,
-    kind: "push"
-  },
-  runtimeState: AmbientLightSensorStatusSchema
-};
-var AudioClassSummarySchema = external_exports.object({
-  className: external_exports.string(),
-  /** Number of windows (chunks) where this class was the top hit. */
-  hits: external_exports.number().int().nonnegative(),
-  /** Mean score across those hits, clamped to [0,1]. */
-  avgScore: external_exports.number().min(0).max(1),
-  /** Peak score in the window. */
-  peakScore: external_exports.number().min(0).max(1)
+var NcMediaPolicySchema = external_exports.object({ attach: external_exports.enum([
+  "best",
+  "best-matching",
+  "keyFrame",
+  "none"
+]).default("best") });
+var NcThrottleSchema = external_exports.object({
+  cooldownSec: external_exports.number().int().min(0).max(86400).default(60),
+  /** `rule` = one shared cooldown; `rule-device` = per-camera cooldown. */
+  scope: external_exports.enum(["rule", "rule-device"]).default("rule-device")
 });
-var AudioMetricsSnapshotSchema = external_exports.object({
-  /** Wall-clock timestamp (ms) of the most recent audio window. */
-  ts: external_exports.number().int(),
-  /** Sliding-window length (seconds) used for aggregation. */
-  windowSec: external_exports.number().int().positive(),
-  /** Latest level reading from the most recent window. */
-  level: external_exports.object({
-    rms: external_exports.number(),
-    dbfs: external_exports.number()
+var NcRuleInputSchema = external_exports.object({
+  name: external_exports.string().min(1).max(200),
+  enabled: external_exports.boolean().default(true),
+  delivery: NcDeliverySchema,
+  conditions: NcConditionsSchema.default({}),
+  schedule: NcScheduleSchema.optional(),
+  targets: external_exports.array(NcRuleTargetSchema).min(1),
+  media: NcMediaPolicySchema.default({ attach: "best" }),
+  throttle: NcThrottleSchema.default({
+    cooldownSec: 60,
+    scope: "rule-device"
   }),
-  /** Peak dBFS observed across the rolling window. */
-  peakDbfs: external_exports.number(),
-  /** Mean dBFS across the rolling window. */
-  avgDbfs: external_exports.number(),
-  /** Most recent above-threshold classification, or null on silence. */
-  current: external_exports.object({
-    className: external_exports.string(),
-    score: external_exports.number().min(0).max(1),
-    timestamp: external_exports.number().int()
-  }).nullable(),
-  /** Per-class summary across the rolling window — keys are
-  *  `macroClass` strings (e.g. `dog_bark`, `speech`, `glass_break`). */
-  byClass: external_exports.array(AudioClassSummarySchema).readonly()
-});
-var AudioMetricsHistoryPointSchema = external_exports.object({
-  /** Wall-clock ms when this sample was recorded. */
-  ts: external_exports.number().int(),
-  /** Instantaneous dBFS level at sample time. `null` for windows where
-  *  the source had no level reading (rare; happens at decode startup). */
-  dbfs: external_exports.number().nullable(),
-  /** Rolling-window peak dBFS at sample time. Same window the live
-  *  snapshot reports. */
-  peakDbfs: external_exports.number(),
-  /** Rolling-window mean dBFS at sample time. */
-  avgDbfs: external_exports.number(),
-  /** Dominant above-threshold class at sample time, or null on silence. */
-  topClass: external_exports.string().nullable(),
-  /** Score of the dominant class (`null` whenever `topClass` is null). */
-  topScore: external_exports.number().min(0).max(1).nullable()
-});
-var AudioMetricsHistorySchema = external_exports.object({
-  points: external_exports.array(AudioMetricsHistoryPointSchema).readonly(),
-  /** Actual ms between adjacent samples after any subsampling. */
-  effectiveSampleEveryMs: external_exports.number().int().positive(),
-  /** Wall-clock window covered by `points` (`points[N-1].ts - points[0].ts`),
-  *  or `0` when there's fewer than 2 samples. */
-  windowMsActual: external_exports.number().int().nonnegative()
+  /** `{{var}}` templating over camera/class/label/zones/confidence/time. */
+  template: external_exports.object({
+    title: external_exports.string().max(500).optional(),
+    body: external_exports.string().max(2e3).optional()
+  }).optional(),
+  /** Canonical notification priority ordinal (1..5); per-target overridable. */
+  priority: external_exports.number().int().min(1).max(5).default(3),
+  /**
+  * Ownership/visibility key. Absent = admin/global rule (unchanged legacy
+  * behaviour, visible to all, read-only in the viewer). Present = personal
+  * rule owned by this userId. Server-stamped; never trusted from a client.
+  */
+  ownerUserId: external_exports.string().optional()
 });
-var audioMetricsCapability = {
-  name: "audio-metrics",
-  scope: "device",
-  mode: "singleton",
-  deviceTypes: [DeviceType.Camera],
-  methods: {
-    /** Latest snapshot for this device. Null until the analytics
-    *  pipeline has processed at least one audio window. */
-    getCurrentSnapshot: method(external_exports.object({ deviceId: external_exports.number() }), AudioMetricsSnapshotSchema.nullable()),
-    /**
-    * Time-series view of recent audio-metrics samples. The provider
-    * keeps an in-memory ring of ~1Hz samples (matching the slice-
-    * write rate) capped at `MAX_HISTORY_POINTS_KEPT` (provider-side).
-    * `windowSec` selects how far back to read; `sampleEveryMs`
-    * downsamples by bucketed averaging when finer than the kept
-    * granularity. Empty `points` array on freshly-booted providers
-    * with no audio yet — same convention as `getCurrentSnapshot`.
-    */
-    getHistory: method(external_exports.object({
-      deviceId: external_exports.number(),
-      /** History window in seconds. Default 300 (5 minutes).
-      *  Provider clamps to its retention cap if larger. */
-      windowSec: external_exports.number().int().positive().optional(),
-      /** Target sample interval in ms. Default 1000 (1 sample/second).
-      *  Provider clamps to natural sample rate if smaller, and
-      *  bucket-averages when bigger than the requested window
-      *  would produce more than `maxPoints` samples. */
-      sampleEveryMs: external_exports.number().int().positive().optional()
-    }), AudioMetricsHistorySchema)
-  },
-  /** Reactive runtime-state mirror — live `device.state.audioMetrics.value`. */
-  runtimeState: AudioMetricsSnapshotSchema
-};
-var AutomationControlStatusSchema = external_exports.object({
-  /** Whether the automation is currently enabled. Disabled automations
-  *  ignore their trigger block — manual `trigger` still works. */
-  enabled: external_exports.boolean(),
-  /** Whether the automation is currently executing its action block. */
-  isRunning: external_exports.boolean(),
-  /** Ms epoch of the last successful run. 0 when never run. */
-  lastTriggeredAt: external_exports.number(),
-  /** Failure description from the last completed run. Null on success
-  *  or when never run. */
-  lastError: external_exports.string().nullable(),
-  /** Ms epoch when the slice was last updated. */
-  lastChangedAt: external_exports.number()
+var NcRulePatchSchema = NcRuleInputSchema.partial().extend({ disabledTargetIds: external_exports.array(external_exports.string()).optional() });
+var NcRuleSchema = NcRuleInputSchema.extend({
+  id: external_exports.string(),
+  /** userId of the admin who created the rule (server-stamped caller). */
+  createdBy: external_exports.string(),
+  createdAt: external_exports.number(),
+  updatedAt: external_exports.number(),
+  /**
+  * Per-target opt-out set. A targetId here is suppressed for THIS rule at
+  * send time. Only a target's OWNER may add/remove its id (server-checked
+  * in `nc.setRuleTargetEnabled`). Defaults to empty.
+  */
+  disabledTargetIds: external_exports.array(external_exports.string()).default([])
 });
-var automationControlCapability = {
-  name: "automation-control",
-  scope: "device",
-  deviceNative: true,
+var NcTestResultSchema = external_exports.object({
+  recordId: external_exports.string(),
+  recordKind: external_exports.enum([
+    "object-event",
+    "track",
+    "device-event",
+    "package-event"
+  ]),
+  deviceId: external_exports.number(),
+  timestamp: external_exports.number(),
+  wouldFire: external_exports.boolean(),
+  /** Condition id that failed (first failing group), when `wouldFire` is false. */
+  failedCondition: external_exports.string().optional(),
+  className: external_exports.string().optional(),
+  label: external_exports.string().optional()
+});
+var NcConditionDescriptorSchema = external_exports.object({
+  /** Field id inside `NcConditions` (or `'schedule'` for the rule-level group). */
+  id: external_exports.string(),
+  group: external_exports.enum([
+    "scope",
+    "class",
+    "zones",
+    "quality",
+    "label",
+    "schedule",
+    "device",
+    "package",
+    "occupancy"
+  ]),
+  label: external_exports.string(),
+  /** Editor widget the UI renders — never hardcode per-condition forms. */
+  valueType: external_exports.enum([
+    "deviceIdList",
+    "stringList",
+    "number01",
+    "number",
+    "sourceSelect",
+    "zoneSelection",
+    "zoneIdList",
+    "schedule",
+    "plateMatcher",
+    "packagePhase",
+    "polygonDraw",
+    "occupancy"
+  ]),
+  operator: external_exports.enum([
+    "in",
+    "notIn",
+    "anyOf",
+    "allOf",
+    "gte",
+    "fuzzyIn",
+    "withinSchedule"
+  ]),
+  /** Which delivery kinds the condition applies to. */
+  appliesTo: external_exports.array(NcDeliverySchema),
+  phase: external_exports.string(),
+  description: external_exports.string().optional()
+});
+var NcHistoryStatusSchema = external_exports.enum([
+  "pending",
+  "sent",
+  "dead"
+]);
+var NcHistoryRecordKindSchema = external_exports.enum([
+  "object-event",
+  "track-end",
+  "device-event",
+  "package-event"
+]);
+var NcHistorySubjectSchema = external_exports.object({
+  className: external_exports.string(),
+  label: external_exports.string().optional(),
+  confidence: external_exports.number().optional(),
+  zones: external_exports.array(external_exports.string()),
+  timestamp: external_exports.number()
+});
+var NcHistoryEntrySchema = external_exports.object({
+  /** Outbox row id — the stable dedup id `ruleId:dedupRef:targetId`. */
+  id: external_exports.string(),
+  ruleId: external_exports.string(),
+  /** Rule name frozen at fire time (outlives a later rename / delete). */
+  ruleName: external_exports.string(),
+  /** The rule urgency/trigger that produced this delivery. */
+  delivery: NcDeliverySchema,
+  targetId: external_exports.string(),
+  deviceId: external_exports.number(),
+  recordKind: NcHistoryRecordKindSchema,
+  /** Event / track ref of the evaluated record (§3.2 `eventRef`). */
+  recordId: external_exports.string(),
+  /** Present for track-scoped deliveries (object-event / track-end). */
+  trackId: external_exports.string().optional(),
+  status: NcHistoryStatusSchema,
+  /** Delivery attempts made so far. */
+  attempts: external_exports.number().int(),
+  /** Fire time (outbox enqueue). */
+  createdAt: external_exports.number(),
+  /** Last transition time (terminal for sent / dead). */
+  updatedAt: external_exports.number(),
+  /** Failure detail — present on a `dead` row. */
+  error: external_exports.string().optional(),
+  subject: NcHistorySubjectSchema
+});
+var NcHistoryFilterSchema = external_exports.object({
+  ruleId: external_exports.string().optional(),
+  deviceId: external_exports.number().optional(),
+  status: NcHistoryStatusSchema.optional(),
+  since: external_exports.number().optional(),
+  until: external_exports.number().optional(),
+  limit: external_exports.number().int().min(1).max(500).default(100)
+});
+var notificationRulesCapability = {
+  name: "notification-rules",
+  scope: "system",
   mode: "singleton",
-  deviceTypes: [DeviceType.Automation],
   methods: {
-    enable: method(external_exports.object({ deviceId: external_exports.number().int().nonnegative() }), external_exports.void(), {
+    listRules: method(external_exports.object({}), external_exports.object({ rules: external_exports.array(NcRuleSchema) }), { auth: "admin" }),
+    getRule: method(external_exports.object({ ruleId: external_exports.string() }), external_exports.object({ rule: NcRuleSchema.nullable() }), { auth: "admin" }),
+    createRule: method(external_exports.object({ rule: NcRuleInputSchema }), external_exports.object({ rule: NcRuleSchema }), {
+      kind: "mutation",
+      auth: "admin",
+      caller: "required"
+    }),
+    updateRule: method(external_exports.object({
+      ruleId: external_exports.string(),
+      patch: NcRulePatchSchema
+    }), external_exports.object({ rule: NcRuleSchema }), {
+      kind: "mutation",
+      auth: "admin",
+      caller: "required"
+    }),
+    deleteRule: method(external_exports.object({ ruleId: external_exports.string() }), external_exports.object({ success: external_exports.literal(true) }), {
       kind: "mutation",
       auth: "admin"
     }),
-    disable: method(external_exports.object({ deviceId: external_exports.number().int().nonnegative() }), external_exports.void(), {
+    setRuleEnabled: method(external_exports.object({
+      ruleId: external_exports.string(),
+      enabled: external_exports.boolean()
+    }), external_exports.object({ success: external_exports.literal(true) }), {
       kind: "mutation",
       auth: "admin"
     }),
-    trigger: method(external_exports.object({
-      deviceId: external_exports.number().int().nonnegative(),
-      /** When true, fires the action block while bypassing the
-      *  automation's condition evaluation. Gated by
-      *  `DeviceFeature.AutomationSkipCondition`. */
-      skipCondition: external_exports.boolean().optional()
-    }), external_exports.void(), {
+    /**
+    * Dry-run a rule against recently persisted records (object events for
+    * `immediate`, closed tracks for `track-end`). Mutation kind only to
+    * carry the full rule object safely; no side effects.
+    */
+    testRule: method(external_exports.object({
+      rule: NcRuleInputSchema,
+      lookbackMinutes: external_exports.number().int().min(1).max(1440).default(60)
+    }), external_exports.object({ results: external_exports.array(NcTestResultSchema) }), {
       kind: "mutation",
       auth: "admin"
-    })
-  },
-  status: {
-    schema: AutomationControlStatusSchema,
-    kind: "push"
-  },
+    }),
+    getConditionCatalog: method(external_exports.object({}), external_exports.object({ catalog: external_exports.array(NcConditionDescriptorSchema) })),
+    /**
+    * Queryable delivery history — a read-only view over the durable outbox
+    * (fired rule, subject summary, target, status, timestamps, error on a
+    * dead row). Newest-first, bounded by `filter.limit`. Retention follows
+    * the outbox's own terminal-row prune horizon (no separate history
+    * horizon — single collection, single source of truth). Admin-only in
+    * P1 (no user dimension); the P2 viewer History screen adds per-caller
+    * scoping on the same method.
+    */
+    getHistory: method(external_exports.object({ filter: NcHistoryFilterSchema.default({ limit: 100 }) }), external_exports.object({ entries: external_exports.array(NcHistoryEntrySchema) }), { auth: "admin" })
+  }
+};
+var TimelapseTemplateSchema = external_exports.object({
+  title: external_exports.string().max(500).optional(),
+  body: external_exports.string().max(2e3).optional()
+});
+var NameField = external_exports.string().min(1).max(200);
+var DeviceIdsField = external_exports.array(external_exports.number()).min(1);
+var CadenceSecField = external_exports.number().int().min(2).max(3600);
+var FramerateField = external_exports.number().int().min(1).max(60);
+var TargetsField = external_exports.array(NcRuleTargetSchema).min(1);
+var PriorityField = external_exports.number().int().min(1).max(5);
+var TimelapseRuleInputSchema = external_exports.object({
+  name: NameField,
+  enabled: external_exports.boolean().default(true),
+  /** Cameras sampled by this rule — one scratch dir + one artifact per device. */
+  deviceIds: DeviceIdsField,
   /**
-  * Runtime-state slice — mirrored by the kernel. UI automation tile
-  * reads `enabled` (toggle) + `isRunning` (spinner) + `lastError`
-  * (badge) directly.
+  * Activation window(s). REQUIRED (unlike `NcRule`, where an absent schedule
+  * means "always active"): a timelapse is defined by its window boundaries —
+  * open clears the scratch, close assembles and delivers.
   */
-  runtimeState: AutomationControlStatusSchema
-};
-var BatteryStatusSchema = external_exports.object({
-  /** 0..100 inclusive. Firmware-reported. */
-  percentage: external_exports.number().min(0).max(100),
+  schedule: NcScheduleSchema,
+  /** Force-snapshot cadence inside the window, seconds (predecessor parity). */
+  cadenceSec: CadenceSecField.default(15),
+  /** Output frames per second of the assembled mp4 (predecessor parity). */
+  framerate: FramerateField.default(10),
+  /** `notification-output` targets the finished video/thumbnail is sent to. */
+  targets: TargetsField,
+  template: TimelapseTemplateSchema.optional(),
+  /** Canonical notification priority ordinal (1..5); per-target overridable. */
+  priority: PriorityField.default(3)
+});
+var TimelapseRulePatchSchema = external_exports.object({
+  name: NameField.optional(),
+  enabled: external_exports.boolean().optional(),
+  deviceIds: DeviceIdsField.optional(),
+  schedule: NcScheduleSchema.optional(),
+  cadenceSec: CadenceSecField.optional(),
+  framerate: FramerateField.optional(),
+  targets: TargetsField.optional(),
+  template: TimelapseTemplateSchema.nullable().optional(),
+  priority: PriorityField.optional()
+});
+var TimelapseRuleSchema = TimelapseRuleInputSchema.extend({
+  id: external_exports.string(),
   /**
-  * Charging source. `'dc'` covers wall/USB adapters; `'solar'` is
-  * Reolink-specific for the Solar Panel 2 accessory (will become
-  * common on other battery cams). `'none'` means running on battery
-  * alone.
+  * Ownership/visibility key. Absent = admin/global rule (visible to all).
+  * Present = personal rule owned by this userId. Server-stamped from the
+  * resolved caller; never trusted from a client payload.
   */
-  charging: external_exports.enum([
-    "dc",
-    "solar",
-    "none"
-  ]),
+  ownerUserId: external_exports.string().optional(),
   /**
-  * True when the camera firmware has gone into low-power mode. Battery
-  * providers MUST avoid polling during sleep — reading the battery
-  * wakes the camera up and drains charge.
+  * Epoch-ms of the last successful generation — the 1-hour re-generation
+  * guard's durable state (predecessor parity). Absent = never generated.
   */
-  sleeping: external_exports.boolean(),
-  /** Ms epoch of the last observation. Lets consumers reason about freshness. */
-  lastUpdated: external_exports.number(),
+  lastGeneratedAt: external_exports.number().optional(),
+  /** userId of the caller who created the rule (server-stamped). */
+  createdBy: external_exports.string(),
+  createdAt: external_exports.number(),
+  updatedAt: external_exports.number()
+});
+var DeviceStatusSchema = external_exports.object({
   /**
-  * True when the source is a BINARY low-battery indicator (HA
-  * `binary_sensor` device_class=battery / `LOW_BAT`) that has no real
-  * charge level — `percentage` is then a coarse stand-in (100 = normal,
-  * sub-threshold = low). UI MUST render "Normal"/"Low" instead of a
-  * misleading exact percentage. Absent/false → genuine 0–100 % reading.
+  * Device-level liveness. Drivers flip via `markOnline(boolean)` on
+  * `BaseDevice`. Provider semantics vary — RTSP aggregates broker
+  * stream-health, Reolink reads firmware push events, ONVIF tracks
+  * ping responses. This cap intentionally does NOT prescribe which
+  * signal drives the flag.
   */
-  binary: external_exports.boolean().optional()
+  online: external_exports.boolean(),
+  /** Ms epoch of the last `online` transition. Lets consumers tell
+  *  apart "just came online" from "still online". */
+  lastChangedAt: external_exports.number()
 });
-var batteryCapability = {
-  name: "battery",
+var deviceStatusCapability = {
+  name: "device-status",
   scope: "device",
   deviceNative: true,
   mode: "singleton",
-  deviceTypes: [
-    DeviceType.Camera,
-    DeviceType.Sensor,
-    DeviceType.Button,
-    DeviceType.Switch
-  ],
-  methods: {
-    /**
-    * Explicitly wake the camera from low-power sleep ahead of a
-    * streaming session start. Consumers that initiate a stream
-    * against a sleeping battery cam (HomeKit Secure Video, Alexa
-    * RTCSession, snapshot wrappers) call this with a short timeout
-    * before establishing the media pipeline — the broker's own
-    * passive wake-on-dial works but adds 5–7 seconds to first-frame,
-    * during which the consumer renders a black screen. Pre-waking
-    * compresses that gap.
-    *
-    * Returns `awoke: true` when the firmware acknowledged the wake
-    * before `timeoutMs`. Returns `awoke: false` when it timed out OR
-    * the cap surface is unavailable (no Baichuan / firmware
-    * channel); the caller should still attempt the stream — the
-    * passive broker wake remains as fallback.
-    */
-    wakeForStream: method(external_exports.object({
-      deviceId: external_exports.number(),
-      /** Bound on the wait. Sensible range 3000–10000ms. */
-      timeoutMs: external_exports.number().int().min(500).max(3e4).default(8e3)
-    }), external_exports.object({
-      awoke: external_exports.boolean(),
-      durationMs: external_exports.number()
-    }), { kind: "mutation" })
-  },
+  methods: {},
   events: {
-    /**
-    * Emitted whenever the cached status changes (firmware push OR
-    * poll observes a delta). The DeviceEventPropagator mirrors this
-    * event on the parent chain — subscribing to a camera's source
-    * receives battery events from child accessories automatically.
-    */
+    /** Emitted when `online` transitions. Mirrors the semantics of
+    *  `battery.onStatusChanged`. */
     onStatusChanged: { data: external_exports.object({
       deviceId: external_exports.number(),
-      status: BatteryStatusSchema
+      status: DeviceStatusSchema
     }) }
   },
   status: {
-    schema: BatteryStatusSchema,
-    kind: "push",
-    empty: {
-      percentage: 0,
-      charging: "none",
-      sleeping: false,
-      lastUpdated: 0
-    }
+    schema: DeviceStatusSchema,
+    kind: "push"
   },
+  runtimeState: DeviceStatusSchema
+};
+var FeatureProbeStatusSchema = external_exports.object({
   /**
-  * Runtime-state slice — every provider that registers this cap
-  * stores the same shape under `device.runtimeState[battery]`.
-  * Cross-provider uniformity: a Reolink Argus, a Frigate sensor
-  * proxy, an ONVIF battery cam all read/write the same keys.
-  * Consumers (BatteryBadge, snapshot wrapper sleep gate) read once
-  * via `device.runtimeState.getCapState('battery')` regardless of
-  * the underlying driver.
+  * Driver-specific flag bag. Each driver picks its own key names — the
+  * cap deliberately does NOT enforce a closed enum here. Reolink keys:
+  * `hasPtz`, `hasIntercom`, `hasDoorbell`, `hasFloodlight`, `hasSiren`,
+  * `hasPirSensor`, `hasAutotrack`, `hasBattery`. Hikvision keys:
+  * `hasSupplementalLight`, `lightHasWhiteLight`, `hasAlarmIo`, `hasPtz`.
   */
-  runtimeState: BatteryStatusSchema
+  flags: external_exports.record(external_exports.string(), external_exports.unknown()),
+  /**
+  * Coarse driver-classification — lets cross-process consumers tell apart
+  * cameras / battery-cams / NVRs without re-running the probe. `null`
+  * before the first probe completes.
+  */
+  deviceType: external_exports.string().nullable(),
+  /** Camera/firmware model string. `null` when the firmware doesn't expose it. */
+  model: external_exports.string().nullable(),
+  /** Channel count for NVR/Hub devices; `1` for standalone cameras; `null` pre-probe. */
+  channelCount: external_exports.number().nullable(),
+  /**
+  * Ms epoch of the last SUCCESSFUL probe. `0` before the first probe
+  * completes — drivers' `getAccessoryChildren()` should treat zero as
+  * "probe not done yet, return empty" so accessories aren't spawned
+  * before the firmware is queried.
+  */
+  lastProbedAt: external_exports.number(),
+  /**
+  * Framework convention: every runtime-state slice carries this for the
+  * createRuntimeStateBridge stale-check helper. We keep it in sync with
+  * `lastProbedAt` on every write.
+  */
+  lastFetchedAt: external_exports.number()
+});
+var featureProbeCapability = {
+  name: "feature-probe",
+  scope: "device",
+  deviceNative: true,
+  mode: "singleton",
+  methods: {},
+  events: {
+    /** Fires whenever a fresh probe completes (kernel-driven `reprobe()`
+    *  or driver-initiated re-detect after a state change). */
+    onProbeChanged: { data: external_exports.object({
+      deviceId: external_exports.number(),
+      status: FeatureProbeStatusSchema
+    }) }
+  },
+  status: {
+    schema: FeatureProbeStatusSchema,
+    kind: "push"
+  },
+  runtimeState: FeatureProbeStatusSchema
 };
-var BinaryStatusSchema = external_exports.object({
-  on: external_exports.boolean(),
-  /** Ms epoch of the last transition. 0 if never observed. */
-  lastChangedAt: external_exports.number()
+var AirQualitySensorStatusSchema = external_exports.object({
+  /** Carbon dioxide concentration in ppm. */
+  co2Ppm: external_exports.number().min(0).optional(),
+  /** Total volatile organic compounds in ppb. */
+  vocPpb: external_exports.number().min(0).optional(),
+  /** Particulate matter ≤ 2.5 μm in µg/m³. */
+  pm25: external_exports.number().min(0).optional(),
+  /** Particulate matter ≤ 10 μm in µg/m³. */
+  pm10: external_exports.number().min(0).optional(),
+  /** Composite AQI value (typically 0..500). */
+  aqi: external_exports.number().optional(),
+  /** Ms epoch when the slice was last updated. */
+  lastFetchedAt: external_exports.number(),
+  /** Live display unit of the single metric this slice carries (e.g. HA
+  *  `attributes.unit_of_measurement` → 'ppm' / 'ppb' / 'µg/m³'). Each
+  *  upstream `sensor.*` entity surfaces ONE device_class, so one unit
+  *  per slice is unambiguous. */
+  unit: external_exports.string().optional(),
+  /** Suggested decimal places for numeric display.
+  *  Populated live from the upstream source when provided (e.g. HA
+  *  `attributes.suggested_display_precision`). Falls back to
+  *  auto-formatting when absent. */
+  precision: external_exports.number().int().min(0).max(10).optional()
 });
-var binaryCapability = {
-  name: "binary",
+var airQualitySensorCapability = {
+  name: "air-quality-sensor",
   scope: "device",
   deviceNative: true,
   mode: "singleton",
   deviceTypes: [DeviceType.Sensor],
   methods: {},
   status: {
-    schema: BinaryStatusSchema,
+    schema: AirQualitySensorStatusSchema,
     kind: "push"
   },
-  runtimeState: BinaryStatusSchema
+  runtimeState: AirQualitySensorStatusSchema
 };
-var BrightnessStatusSchema = external_exports.object({
-  /** Current level as 0..100 inclusive. Firmware-reported. */
-  percentage: external_exports.number().min(0).max(100),
-  /** Ms epoch of the last operator-driven change. Useful for UI freshness. */
+var AlarmStateSchema = external_exports.enum([
+  "disarmed",
+  "armed_home",
+  "armed_away",
+  "armed_night",
+  "armed_vacation",
+  "armed_custom_bypass",
+  "arming",
+  "disarming",
+  "pending",
+  "triggered"
+]);
+var AlarmArmModeSchema = external_exports.enum([
+  "home",
+  "away",
+  "night",
+  "vacation",
+  "custom_bypass"
+]);
+var AlarmPanelStatusSchema = external_exports.object({
+  /** Current lifecycle state. */
+  state: AlarmStateSchema,
+  /** Subset of arm modes the panel accepts. UI renders one button per
+  *  mode in this list. */
+  availableModes: external_exports.array(AlarmArmModeSchema),
+  /** Whether the panel requires a PIN on arm / disarm. Mirrors
+  *  `DeviceFeature.AlarmPinRequired` for slice consumers. */
+  requiresCode: external_exports.boolean(),
+  /** Ms epoch when the slice was last updated. */
   lastChangedAt: external_exports.number()
 });
-var brightnessCapability = {
-  name: "brightness",
+var alarmPanelCapability = {
+  name: "alarm-panel",
   scope: "device",
   deviceNative: true,
   mode: "singleton",
-  deviceTypes: [DeviceType.Light],
-  methods: { setBrightness: method(external_exports.object({
-    deviceId: external_exports.number().int().nonnegative(),
-    percentage: external_exports.number().min(0).max(100)
-  }), external_exports.void(), {
-    kind: "mutation",
-    auth: "admin"
-  }) },
-  events: {
+  deviceTypes: [DeviceType.AlarmPanel],
+  methods: {
+    arm: method(external_exports.object({
+      deviceId: external_exports.number().int().nonnegative(),
+      mode: AlarmArmModeSchema,
+      /** Optional PIN code. Required when `requiresCode === true`.
+      *  Passed through to the upstream service; never persisted. */
+      code: external_exports.string().min(1).optional()
+    }), external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    disarm: method(external_exports.object({
+      deviceId: external_exports.number().int().nonnegative(),
+      code: external_exports.string().min(1).optional()
+    }), external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    }),
     /**
-    * Emitted whenever the brightness changes — operator action OR
-    * firmware push. Subscribers (UI sliders, automation engines) react
-    * without polling.
+    * Force the panel into the `triggered` state — used by HA
+    * automations to surface external sensor events through the panel
+    * (e.g. a Reolink camera intrusion event firing the security
+    * system). Provider rejects when the panel hardware doesn't
+    * support a software-initiated trigger.
     */
-    onBrightnessChanged: { data: external_exports.object({
-      deviceId: external_exports.number(),
-      percentage: external_exports.number().min(0).max(100),
-      lastChangedAt: external_exports.number()
-    }) }
+    trigger: method(external_exports.object({ deviceId: external_exports.number().int().nonnegative() }), external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    })
   },
   status: {
-    schema: BrightnessStatusSchema,
-    kind: "command-driven"
+    schema: AlarmPanelStatusSchema,
+    kind: "push"
   },
   /**
-  * Runtime-state slice — the last applied brightness level, mirrored
-  * by the kernel. Read via `device.state.brightness.value` so UI
-  * sliders surface the current level without polling the provider.
+  * Runtime-state slice — mirrored by the kernel. UI panel reads the
+  * full slice; renders an arm button per `availableModes` entry and
+  * a PIN field iff `requiresCode === true`.
   */
-  runtimeState: BrightnessStatusSchema
+  runtimeState: AlarmPanelStatusSchema
 };
-var StreamFormatSchema = external_exports.enum([
-  "webrtc",
-  "hls",
-  "mjpeg",
-  "rtsp"
-]);
-var RtspRestreamEntrySchema = external_exports.object({
-  brokerId: external_exports.string(),
-  url: external_exports.string(),
-  mutedUrl: external_exports.string(),
-  enabled: external_exports.boolean(),
-  /**
-  * Source-stream codec / resolution for the camStream this entry serves
-  * (the broker's "high"/"mid"/"low" profile slot for this device).
-  * Used by exporter pickers (`pickPreferredRtspEntry`) to resolve
-  * `streamPreference: 'auto'` to the slot whose source is closest to
-  * the consumer's target — Alexa wants ~720p, HomeKit wants ~1080p,
-  * and there's no point dialling the 4K slot for an Echo Show. Absent
-  * when the source publisher never advertised the field; pickers fall
-  * back to first-enabled in that case.
-  */
-  codec: external_exports.string().optional(),
-  resolution: external_exports.object({
-    width: external_exports.number().int().positive(),
-    height: external_exports.number().int().positive()
-  }).optional()
+var AmbientLightSensorStatusSchema = external_exports.object({
+  /** Current illuminance in lux (lx). */
+  lux: external_exports.number().min(0),
+  /** Ms epoch when the slice was last updated. */
+  lastFetchedAt: external_exports.number(),
+  /** Live display unit from the upstream source (e.g. HA
+  *  `attributes.unit_of_measurement`). The UI prefers this over the
+  *  role's canonical unit. Absent → fall back to the canonical unit. */
+  unit: external_exports.string().optional(),
+  /** Suggested decimal places for numeric display.
+  *  Populated live from the upstream source when provided (e.g. HA
+  *  `attributes.suggested_display_precision`). Falls back to
+  *  auto-formatting when absent. */
+  precision: external_exports.number().int().min(0).max(10).optional()
 });
-var BrokerRtspClientSchema = external_exports.object({
-  sessionId: external_exports.string(),
-  remoteAddr: external_exports.string(),
-  /** Client `User-Agent` (e.g. `recorder` for the recorder's RTSP pull), or
-  *  null/absent when the client sent none. Lets the UI label a consumer by
-  *  purpose. Optional so a client built against an older schema stays valid. */
-  userAgent: external_exports.string().nullish(),
-  playing: external_exports.boolean(),
-  muted: external_exports.boolean(),
-  connectedAt: external_exports.number(),
-  lastRtpAt: external_exports.number(),
-  bytesSent: external_exports.number()
+var ambientLightSensorCapability = {
+  name: "ambient-light-sensor",
+  scope: "device",
+  deviceNative: true,
+  mode: "singleton",
+  deviceTypes: [DeviceType.Sensor],
+  methods: {},
+  status: {
+    schema: AmbientLightSensorStatusSchema,
+    kind: "push"
+  },
+  runtimeState: AmbientLightSensorStatusSchema
+};
+var AudioClassSummarySchema = external_exports.object({
+  className: external_exports.string(),
+  /** Number of windows (chunks) where this class was the top hit. */
+  hits: external_exports.number().int().nonnegative(),
+  /** Mean score across those hits, clamped to [0,1]. */
+  avgScore: external_exports.number().min(0).max(1),
+  /** Peak score in the window. */
+  peakScore: external_exports.number().min(0).max(1)
 });
-var BrokerDecodedClientSchema = external_exports.object({
-  tag: external_exports.string(),
-  subscribedAt: external_exports.number(),
-  maxFps: external_exports.number(),
-  framesDelivered: external_exports.number(),
-  framesDropped: external_exports.number()
+var AudioMetricsSnapshotSchema = external_exports.object({
+  /** Wall-clock timestamp (ms) of the most recent audio window. */
+  ts: external_exports.number().int(),
+  /** Sliding-window length (seconds) used for aggregation. */
+  windowSec: external_exports.number().int().positive(),
+  /** Latest level reading from the most recent window. */
+  level: external_exports.object({
+    rms: external_exports.number(),
+    dbfs: external_exports.number()
+  }),
+  /** Peak dBFS observed across the rolling window. */
+  peakDbfs: external_exports.number(),
+  /** Mean dBFS across the rolling window. */
+  avgDbfs: external_exports.number(),
+  /** Most recent above-threshold classification, or null on silence. */
+  current: external_exports.object({
+    className: external_exports.string(),
+    score: external_exports.number().min(0).max(1),
+    timestamp: external_exports.number().int()
+  }).nullable(),
+  /** Per-class summary across the rolling window — keys are
+  *  `macroClass` strings (e.g. `dog_bark`, `speech`, `glass_break`). */
+  byClass: external_exports.array(AudioClassSummarySchema).readonly()
 });
-var BrokerAudioClientSchema = external_exports.object({
-  tag: external_exports.string(),
-  subscribedAt: external_exports.number(),
-  chunksDelivered: external_exports.number()
+var AudioMetricsHistoryPointSchema = external_exports.object({
+  /** Wall-clock ms when this sample was recorded. */
+  ts: external_exports.number().int(),
+  /** Instantaneous dBFS level at sample time. `null` for windows where
+  *  the source had no level reading (rare; happens at decode startup). */
+  dbfs: external_exports.number().nullable(),
+  /** Rolling-window peak dBFS at sample time. Same window the live
+  *  snapshot reports. */
+  peakDbfs: external_exports.number(),
+  /** Rolling-window mean dBFS at sample time. */
+  avgDbfs: external_exports.number(),
+  /** Dominant above-threshold class at sample time, or null on silence. */
+  topClass: external_exports.string().nullable(),
+  /** Score of the dominant class (`null` whenever `topClass` is null). */
+  topScore: external_exports.number().min(0).max(1).nullable()
 });
-var BrokerConsumerKindSchema = external_exports.enum([
-  "alexa",
-  "homekit",
-  "webrtc-browser",
-  "webrtc-mobile",
-  "webrtc-whep",
-  "rtsp-listen",
-  "derived-broker",
-  "recording",
-  "pipeline",
-  "snapshot",
-  "warmup",
-  "unknown"
-]);
-var BrokerConsumerAttributionSchema = external_exports.object({
-  kind: BrokerConsumerKindSchema,
+var AudioMetricsHistorySchema = external_exports.object({
+  points: external_exports.array(AudioMetricsHistoryPointSchema).readonly(),
+  /** Actual ms between adjacent samples after any subsampling. */
+  effectiveSampleEveryMs: external_exports.number().int().positive(),
+  /** Wall-clock window covered by `points` (`points[N-1].ts - points[0].ts`),
+  *  or `0` when there's fewer than 2 samples. */
+  windowMsActual: external_exports.number().int().nonnegative()
+});
+var audioMetricsCapability = {
+  name: "audio-metrics",
+  scope: "device",
+  mode: "singleton",
+  deviceTypes: [DeviceType.Camera],
+  methods: {
+    /** Latest snapshot for this device. Null until the analytics
+    *  pipeline has processed at least one audio window. */
+    getCurrentSnapshot: method(external_exports.object({ deviceId: external_exports.number() }), AudioMetricsSnapshotSchema.nullable()),
+    /**
+    * Time-series view of recent audio-metrics samples. The provider
+    * keeps an in-memory ring of ~1Hz samples (matching the slice-
+    * write rate) capped at `MAX_HISTORY_POINTS_KEPT` (provider-side).
+    * `windowSec` selects how far back to read; `sampleEveryMs`
+    * downsamples by bucketed averaging when finer than the kept
+    * granularity. Empty `points` array on freshly-booted providers
+    * with no audio yet — same convention as `getCurrentSnapshot`.
+    */
+    getHistory: method(external_exports.object({
+      deviceId: external_exports.number(),
+      /** History window in seconds. Default 300 (5 minutes).
+      *  Provider clamps to its retention cap if larger. */
+      windowSec: external_exports.number().int().positive().optional(),
+      /** Target sample interval in ms. Default 1000 (1 sample/second).
+      *  Provider clamps to natural sample rate if smaller, and
+      *  bucket-averages when bigger than the requested window
+      *  would produce more than `maxPoints` samples. */
+      sampleEveryMs: external_exports.number().int().positive().optional()
+    }), AudioMetricsHistorySchema)
+  },
+  /** Reactive runtime-state mirror — live `device.state.audioMetrics.value`. */
+  runtimeState: AudioMetricsSnapshotSchema
+};
+var AutomationControlStatusSchema = external_exports.object({
+  /** Whether the automation is currently enabled. Disabled automations
+  *  ignore their trigger block — manual `trigger` still works. */
+  enabled: external_exports.boolean(),
+  /** Whether the automation is currently executing its action block. */
+  isRunning: external_exports.boolean(),
+  /** Ms epoch of the last successful run. 0 when never run. */
+  lastTriggeredAt: external_exports.number(),
+  /** Failure description from the last completed run. Null on success
+  *  or when never run. */
+  lastError: external_exports.string().nullable(),
+  /** Ms epoch when the slice was last updated. */
+  lastChangedAt: external_exports.number()
+});
+var automationControlCapability = {
+  name: "automation-control",
+  scope: "device",
+  deviceNative: true,
+  mode: "singleton",
+  deviceTypes: [DeviceType.Automation],
+  methods: {
+    enable: method(external_exports.object({ deviceId: external_exports.number().int().nonnegative() }), external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    disable: method(external_exports.object({ deviceId: external_exports.number().int().nonnegative() }), external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    trigger: method(external_exports.object({
+      deviceId: external_exports.number().int().nonnegative(),
+      /** When true, fires the action block while bypassing the
+      *  automation's condition evaluation. Gated by
+      *  `DeviceFeature.AutomationSkipCondition`. */
+      skipCondition: external_exports.boolean().optional()
+    }), external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    })
+  },
+  status: {
+    schema: AutomationControlStatusSchema,
+    kind: "push"
+  },
   /**
-  * Free-form label intended to disambiguate consumers OF THE SAME kind
-  * on the same broker — e.g. user name, device alias. Should NOT repeat
-  * the kind / cam / cam-stream / sessionId (those are surfaced by
-  * dedicated fields). When empty the widget falls back to `${kind} ·
-  * <sessionId tail>`.
+  * Runtime-state slice — mirrored by the kernel. UI automation tile
+  * reads `enabled` (toggle) + `isRunning` (spinner) + `lastError`
+  * (badge) directly.
   */
-  label: external_exports.string().optional(),
-  /**
-  * Which part of the encoded plane this subscription consumes:
-  *   - `'audio'` — audio packets only
-  *   - `'video'` — video packets only
+  runtimeState: AutomationControlStatusSchema
+};
+var BatteryStatusSchema = external_exports.object({
+  /** 0..100 inclusive. Firmware-reported. */
+  percentage: external_exports.number().min(0).max(100),
+  /**
+  * Charging source. `'dc'` covers wall/USB adapters; `'solar'` is
+  * Reolink-specific for the Solar Panel 2 accessory (will become
+  * common on other battery cams). `'none'` means running on battery
+  * alone.
+  */
+  charging: external_exports.enum([
+    "dc",
+    "solar",
+    "none"
+  ]),
+  /**
+  * True when the camera firmware has gone into low-power mode. Battery
+  * providers MUST avoid polling during sleep — reading the battery
+  * wakes the camera up and drains charge.
+  */
+  sleeping: external_exports.boolean(),
+  /** Ms epoch of the last observation. Lets consumers reason about freshness. */
+  lastUpdated: external_exports.number(),
+  /**
+  * True when the source is a BINARY low-battery indicator (HA
+  * `binary_sensor` device_class=battery / `LOW_BAT`) that has no real
+  * charge level — `percentage` is then a coarse stand-in (100 = normal,
+  * sub-threshold = low). UI MUST render "Normal"/"Low" instead of a
+  * misleading exact percentage. Absent/false → genuine 0–100 % reading.
+  */
+  binary: external_exports.boolean().optional()
+});
+var batteryCapability = {
+  name: "battery",
+  scope: "device",
+  deviceNative: true,
+  mode: "singleton",
+  deviceTypes: [
+    DeviceType.Camera,
+    DeviceType.Sensor,
+    DeviceType.Button,
+    DeviceType.Switch
+  ],
+  methods: {
+    /**
+    * Explicitly wake the camera from low-power sleep ahead of a
+    * streaming session start. Consumers that initiate a stream
+    * against a sleeping battery cam (HomeKit Secure Video, Alexa
+    * RTCSession, snapshot wrappers) call this with a short timeout
+    * before establishing the media pipeline — the broker's own
+    * passive wake-on-dial works but adds 5–7 seconds to first-frame,
+    * during which the consumer renders a black screen. Pre-waking
+    * compresses that gap.
+    *
+    * Returns `awoke: true` when the firmware acknowledged the wake
+    * before `timeoutMs`. Returns `awoke: false` when it timed out OR
+    * the cap surface is unavailable (no Baichuan / firmware
+    * channel); the caller should still attempt the stream — the
+    * passive broker wake remains as fallback.
+    */
+    wakeForStream: method(external_exports.object({
+      deviceId: external_exports.number(),
+      /** Bound on the wait. Sensible range 3000–10000ms. */
+      timeoutMs: external_exports.number().int().min(500).max(3e4).default(8e3)
+    }), external_exports.object({
+      awoke: external_exports.boolean(),
+      durationMs: external_exports.number()
+    }), { kind: "mutation" })
+  },
+  events: {
+    /**
+    * Emitted whenever the cached status changes (firmware push OR
+    * poll observes a delta). The DeviceEventPropagator mirrors this
+    * event on the parent chain — subscribing to a camera's source
+    * receives battery events from child accessories automatically.
+    */
+    onStatusChanged: { data: external_exports.object({
+      deviceId: external_exports.number(),
+      status: BatteryStatusSchema
+    }) }
+  },
+  status: {
+    schema: BatteryStatusSchema,
+    kind: "push",
+    empty: {
+      percentage: 0,
+      charging: "none",
+      sleeping: false,
+      lastUpdated: 0
+    }
+  },
+  /**
+  * Runtime-state slice — every provider that registers this cap
+  * stores the same shape under `device.runtimeState[battery]`.
+  * Cross-provider uniformity: a Reolink Argus, a Frigate sensor
+  * proxy, an ONVIF battery cam all read/write the same keys.
+  * Consumers (BatteryBadge, snapshot wrapper sleep gate) read once
+  * via `device.runtimeState.getCapState('battery')` regardless of
+  * the underlying driver.
+  */
+  runtimeState: BatteryStatusSchema
+};
+var BinaryStatusSchema = external_exports.object({
+  on: external_exports.boolean(),
+  /** Ms epoch of the last transition. 0 if never observed. */
+  lastChangedAt: external_exports.number()
+});
+var binaryCapability = {
+  name: "binary",
+  scope: "device",
+  deviceNative: true,
+  mode: "singleton",
+  deviceTypes: [DeviceType.Sensor],
+  methods: {},
+  status: {
+    schema: BinaryStatusSchema,
+    kind: "push"
+  },
+  runtimeState: BinaryStatusSchema
+};
+var BrightnessStatusSchema = external_exports.object({
+  /** Current level as 0..100 inclusive. Firmware-reported. */
+  percentage: external_exports.number().min(0).max(100),
+  /** Ms epoch of the last operator-driven change. Useful for UI freshness. */
+  lastChangedAt: external_exports.number()
+});
+var brightnessCapability = {
+  name: "brightness",
+  scope: "device",
+  deviceNative: true,
+  mode: "singleton",
+  deviceTypes: [DeviceType.Light],
+  methods: { setBrightness: method(external_exports.object({
+    deviceId: external_exports.number().int().nonnegative(),
+    percentage: external_exports.number().min(0).max(100)
+  }), external_exports.void(), {
+    kind: "mutation",
+    auth: "admin"
+  }) },
+  events: {
+    /**
+    * Emitted whenever the brightness changes — operator action OR
+    * firmware push. Subscribers (UI sliders, automation engines) react
+    * without polling.
+    */
+    onBrightnessChanged: { data: external_exports.object({
+      deviceId: external_exports.number(),
+      percentage: external_exports.number().min(0).max(100),
+      lastChangedAt: external_exports.number()
+    }) }
+  },
+  status: {
+    schema: BrightnessStatusSchema,
+    kind: "command-driven"
+  },
+  /**
+  * Runtime-state slice — the last applied brightness level, mirrored
+  * by the kernel. Read via `device.state.brightness.value` so UI
+  * sliders surface the current level without polling the provider.
+  */
+  runtimeState: BrightnessStatusSchema
+};
+var StreamFormatSchema = external_exports.enum([
+  "webrtc",
+  "hls",
+  "mjpeg",
+  "rtsp"
+]);
+var RtspRestreamEntrySchema = external_exports.object({
+  brokerId: external_exports.string(),
+  url: external_exports.string(),
+  mutedUrl: external_exports.string(),
+  enabled: external_exports.boolean(),
+  /**
+  * Source-stream codec / resolution for the camStream this entry serves
+  * (the broker's "high"/"mid"/"low" profile slot for this device).
+  * Used by exporter pickers (`pickPreferredRtspEntry`) to resolve
+  * `streamPreference: 'auto'` to the slot whose source is closest to
+  * the consumer's target — Alexa wants ~720p, HomeKit wants ~1080p,
+  * and there's no point dialling the 4K slot for an Echo Show. Absent
+  * when the source publisher never advertised the field; pickers fall
+  * back to first-enabled in that case.
+  */
+  codec: external_exports.string().optional(),
+  resolution: external_exports.object({
+    width: external_exports.number().int().positive(),
+    height: external_exports.number().int().positive()
+  }).optional()
+});
+var BrokerRtspClientSchema = external_exports.object({
+  sessionId: external_exports.string(),
+  remoteAddr: external_exports.string(),
+  /** Client `User-Agent` (e.g. `recorder` for the recorder's RTSP pull), or
+  *  null/absent when the client sent none. Lets the UI label a consumer by
+  *  purpose. Optional so a client built against an older schema stays valid. */
+  userAgent: external_exports.string().nullish(),
+  playing: external_exports.boolean(),
+  muted: external_exports.boolean(),
+  connectedAt: external_exports.number(),
+  lastRtpAt: external_exports.number(),
+  bytesSent: external_exports.number()
+});
+var BrokerDecodedClientSchema = external_exports.object({
+  tag: external_exports.string(),
+  subscribedAt: external_exports.number(),
+  maxFps: external_exports.number(),
+  framesDelivered: external_exports.number(),
+  framesDropped: external_exports.number()
+});
+var BrokerAudioClientSchema = external_exports.object({
+  tag: external_exports.string(),
+  subscribedAt: external_exports.number(),
+  chunksDelivered: external_exports.number()
+});
+var BrokerConsumerKindSchema = external_exports.enum([
+  "alexa",
+  "homekit",
+  "webrtc-browser",
+  "webrtc-mobile",
+  "webrtc-whep",
+  "rtsp-listen",
+  "derived-broker",
+  "recording",
+  "pipeline",
+  "snapshot",
+  "warmup",
+  "unknown"
+]);
+var BrokerConsumerAttributionSchema = external_exports.object({
+  kind: BrokerConsumerKindSchema,
+  /**
+  * Free-form label intended to disambiguate consumers OF THE SAME kind
+  * on the same broker — e.g. user name, device alias. Should NOT repeat
+  * the kind / cam / cam-stream / sessionId (those are surfaced by
+  * dedicated fields). When empty the widget falls back to `${kind} ·
+  * <sessionId tail>`.
+  */
+  label: external_exports.string().optional(),
+  /**
+  * Which part of the encoded plane this subscription consumes:
+  *   - `'audio'` — audio packets only
+  *   - `'video'` — video packets only
   *   - `'both'`  — both video + audio (typical for AnnexB push paths
   *                 that don't split the source RTP)
   *
@@ -20705,55 +21206,10 @@ var motionTriggerCapability = {
   },
   runtimeState: MotionTriggerRuntimeStateSchema
 };
-var MaskPointSchema = external_exports.object({
-  x: external_exports.number(),
-  y: external_exports.number()
-});
-var MaskRectShapeSchema = external_exports.object({
-  kind: external_exports.literal("rect"),
-  x: external_exports.number(),
-  y: external_exports.number(),
-  width: external_exports.number(),
-  height: external_exports.number()
-});
-var MaskPolygonShapeSchema = external_exports.object({
-  kind: external_exports.literal("polygon"),
-  points: external_exports.array(MaskPointSchema)
-});
-var MaskGridShapeSchema = external_exports.object({
-  kind: external_exports.literal("grid"),
-  gridWidth: external_exports.number(),
-  gridHeight: external_exports.number(),
-  cells: external_exports.array(external_exports.boolean())
-});
-var MaskLineShapeSchema = external_exports.object({
-  kind: external_exports.literal("line"),
-  points: external_exports.array(MaskPointSchema)
-});
-var MaskShapeSchema = external_exports.discriminatedUnion("kind", [
-  MaskRectShapeSchema,
-  MaskPolygonShapeSchema,
-  MaskGridShapeSchema,
-  MaskLineShapeSchema
-]);
-var MaskShapeKindSchema = external_exports.enum([
-  "rect",
-  "polygon",
-  "grid",
-  "line"
-]);
-var MaskPolygonVerticesSchema = external_exports.object({
-  min: external_exports.number(),
-  max: external_exports.number()
-});
-var MaskGridDimsSchema = external_exports.object({
-  width: external_exports.number(),
-  height: external_exports.number()
-});
-var MotionZoneRegionSchema = external_exports.object({
-  id: external_exports.number(),
-  enabled: external_exports.boolean(),
-  shape: MaskGridShapeSchema
+var MotionZoneRegionSchema = external_exports.object({
+  id: external_exports.number(),
+  enabled: external_exports.boolean(),
+  shape: MaskGridShapeSchema
 });
 var MotionZoneStatusSchema = external_exports.object({
   enabled: external_exports.boolean(),
@@ -23277,6 +23733,60 @@ var authProviderCapability = {
   /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
   mount: { kind: "skip" }
 };
+var TerminalSessionInfoSchema = external_exports.object({
+  /** Opaque session id minted by the provider on `openSession`. */
+  sessionId: external_exports.string(),
+  /** The pre-declared profile this session runs (never a free-form command). */
+  profileId: external_exports.string(),
+  /** Human-readable profile label for the UI session list. */
+  label: external_exports.string(),
+  cols: external_exports.number().int().positive(),
+  rows: external_exports.number().int().positive(),
+  /** ms-epoch the session's pty was spawned. */
+  startedAt: external_exports.number()
+});
+var TerminalProfileInfoSchema = external_exports.object({
+  profileId: external_exports.string(),
+  label: external_exports.string(),
+  description: external_exports.string().optional()
+});
+var terminalSessionCapability = {
+  name: "terminal-session",
+  scope: "system",
+  mode: "singleton",
+  methods: {
+    /** Pre-declared profiles the operator may open. */
+    listProfiles: method(external_exports.void(), external_exports.array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }),
+    /** Live sessions currently hosted by the provider. */
+    listSessions: method(external_exports.void(), external_exports.array(TerminalSessionInfoSchema).readonly(), { auth: "admin" }),
+    /**
+    * Spawn a pty for an allowlisted profile at the given grid size and return
+    * its session id. Output/input then flow over the data plane by that id.
+    */
+    openSession: method(external_exports.object({
+      profileId: external_exports.string(),
+      cols: external_exports.number().int().positive(),
+      rows: external_exports.number().int().positive()
+    }), TerminalSessionInfoSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /** Resize a live session's pty (reflows the running program). */
+    resize: method(external_exports.object({
+      sessionId: external_exports.string(),
+      cols: external_exports.number().int().positive(),
+      rows: external_exports.number().int().positive()
+    }), external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /** Terminate a live session and release its pty. */
+    close: method(external_exports.object({ sessionId: external_exports.string() }), external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    })
+  }
+};
 var BackupDestinationInfoSchema = external_exports.object({
   /**
   * Sub-id within this addon. Convention `default` for single-
@@ -25595,710 +26105,314 @@ var metricsProviderCapability = {
       auth: "admin"
     })
   }
-};
-var ModelConvertInputSchema = external_exports.object({
-  sourceUrl: external_exports.string(),
-  metadata: ModelConvertMetadataSchema,
-  targets: external_exports.array(ConvertTargetSchema).min(1).readonly(),
-  calibrationRef: external_exports.string().optional(),
-  sessionId: external_exports.string().optional()
-});
-var modelConvertCapability = {
-  name: "model-convert",
-  scope: "system",
-  mode: "singleton",
-  internal: true,
-  methods: { convert: method(ModelConvertInputSchema, ConvertResultSchema, {
-    kind: "mutation",
-    auth: "admin",
-    timeoutMs: 6e5
-  }) }
-};
-var ModelDistributeInputSchema = external_exports.object({
-  nodeId: external_exports.string(),
-  modelId: external_exports.string(),
-  format: external_exports.enum(MODEL_FORMATS),
-  entry: ModelCatalogEntrySchema
-});
-var ModelDistributeResultSchema = external_exports.object({
-  ok: external_exports.boolean(),
-  /** sha256 of the staged tarball (empty for a hub-local no-op). */
-  sha256: external_exports.string(),
-  bytes: external_exports.number(),
-  /** The target node's modelsDir the artifact landed in. */
-  path: external_exports.string()
-});
-var modelDistributorCapability = {
-  name: "model-distributor",
-  scope: "system",
-  mode: "singleton",
-  internal: true,
-  methods: { distributeModel: method(ModelDistributeInputSchema, ModelDistributeResultSchema, {
-    kind: "mutation",
-    auth: "admin"
-  }) }
-};
-var BrokerKindSchema = external_exports.enum(["external", "embedded"]);
-var BrokerStatusSchema$1 = external_exports.enum([
-  "connected",
-  "disconnected",
-  "auth-failed",
-  "unreachable",
-  "tls-error"
-]);
-var BrokerInfoSchema = external_exports.object({
-  id: external_exports.string(),
-  name: external_exports.string(),
-  url: external_exports.string(),
-  kind: BrokerKindSchema,
-  status: BrokerStatusSchema$1,
-  latencyMs: external_exports.number().nullable(),
-  error: external_exports.string().optional(),
-  /** Embedded brokers only: number of MQTT clients currently connected. */
-  connectedClients: external_exports.number().int().nonnegative().optional(),
-  /** Epoch ms of the last live probe (external) or aedes snapshot (embedded). */
-  lastCheckedAt: external_exports.number().optional()
-});
-var BrokerConnectionDetailsSchema = external_exports.object({
-  url: external_exports.string(),
-  username: external_exports.string().optional(),
-  password: external_exports.string().optional(),
-  /**
-  * Suggested prefix for `clientId`. Each consumer should suffix this
-  * with its own discriminator (addon id, instance id) so reconnects
-  * don't kick each other off (MQTT spec: clientId must be unique per
-  * broker).
-  */
-  clientIdPrefix: external_exports.string().optional()
-});
-var AddBrokerInputSchema = external_exports.object({
-  name: external_exports.string().min(1),
-  url: external_exports.string().regex(/^(mqtt|mqtts|ws|wss):\/\//, "URL must start with mqtt(s):// or ws(s)://"),
-  username: external_exports.string().optional(),
-  password: external_exports.string().optional(),
-  clientIdPrefix: external_exports.string().optional()
-});
-var AddBrokerResultSchema = external_exports.object({ id: external_exports.string() });
-var IdInputSchema = external_exports.object({ id: external_exports.string() });
-var TestResultSchema$1 = external_exports.discriminatedUnion("ok", [external_exports.object({
-  ok: external_exports.literal(true),
-  latencyMs: external_exports.number()
-}), external_exports.object({
-  ok: external_exports.literal(false),
-  error: external_exports.string()
-})]);
-var StartEmbeddedInputSchema = external_exports.object({
-  port: external_exports.number().int().min(1).max(65535).default(1883),
-  /** Allow anonymous connect (no username/password). Default: false. */
-  allowAnonymous: external_exports.boolean().default(false),
-  /** Optional shared username/password for clients. */
-  username: external_exports.string().optional(),
-  password: external_exports.string().optional()
-});
-var StartEmbeddedResultSchema = external_exports.object({
-  id: external_exports.string(),
-  url: external_exports.string()
-});
-var StatusSchema = external_exports.object({
-  brokerCount: external_exports.number(),
-  embeddedRunning: external_exports.boolean()
-});
-var mqttBrokerCapability = {
-  name: "mqtt-broker",
-  scope: "system",
-  mode: "collection",
-  providerKind: "broker",
-  status: {
-    schema: StatusSchema,
-    kind: "poll"
-  },
-  methods: {
-    listBrokers: method(external_exports.void(), external_exports.array(BrokerInfoSchema)),
-    getBrokerConfig: method(IdInputSchema, BrokerConnectionDetailsSchema),
-    addBroker: method(AddBrokerInputSchema, AddBrokerResultSchema, { kind: "mutation" }),
-    removeBroker: method(IdInputSchema, external_exports.void(), { kind: "mutation" }),
-    testConnection: method(IdInputSchema, TestResultSchema$1, { kind: "mutation" }),
-    startEmbeddedBroker: method(StartEmbeddedInputSchema, StartEmbeddedResultSchema, { kind: "mutation" }),
-    stopEmbeddedBroker: method(IdInputSchema, external_exports.void(), { kind: "mutation" }),
-    getStatus: method(external_exports.void(), StatusSchema)
-  }
-};
-var NetworkEndpointSchema = external_exports.object({
-  url: external_exports.string(),
-  hostname: external_exports.string(),
-  port: external_exports.number(),
-  protocol: external_exports.enum(["http", "https"])
-});
-var NetworkAccessStatusSchema = external_exports.object({
-  connected: external_exports.boolean(),
-  endpoint: NetworkEndpointSchema.nullable(),
-  error: external_exports.string().optional()
-});
-var NetworkEndpointEntrySchema = NetworkEndpointSchema.extend({
-  /**
-  * Stable id within the provider — typically `<mode>-<sourcePort>` so
-  * the orchestrator can dedupe across `listEndpoints` polls.
-  */
-  id: external_exports.string(),
-  /** Operator-facing label (mirrors `MeshEndpoint.label`). */
-  label: external_exports.string(),
-  /** Optional provider-specific mode tag, used for icon/colour in admin UI. */
-  mode: external_exports.string().optional(),
-  /** Originating local port the ingress fronts (informational). */
-  sourcePort: external_exports.number().optional()
-});
-var networkAccessCapability = {
-  name: "network-access",
-  scope: "system",
-  mode: "collection",
-  providerKind: "ingress",
-  methods: {
-    start: method(external_exports.void(), NetworkEndpointSchema, { kind: "mutation" }),
-    stop: method(external_exports.void(), external_exports.void(), { kind: "mutation" }),
-    getEndpoint: method(external_exports.void(), NetworkEndpointSchema.nullable()),
-    getStatus: method(external_exports.void(), NetworkAccessStatusSchema),
-    /**
-    * Enumerate every active ingress entry. Providers that expose only a
-    * single endpoint may omit this method; callers fall back to
-    * `getEndpoint()` in that case.
-    */
-    listEndpoints: method(external_exports.void(), external_exports.array(NetworkEndpointEntrySchema).readonly())
-  }
-};
-var AttachmentMediaTypeSchema = external_exports.enum([
-  "image",
-  "video",
-  "gif",
-  "audio",
-  "icon"
-]);
-var AttachmentSchema = external_exports.object({
-  mediaType: AttachmentMediaTypeSchema,
-  url: external_exports.string().optional(),
-  bytes: external_exports.instanceof(Uint8Array).optional(),
-  mime: external_exports.string().optional(),
-  name: external_exports.string().optional()
-}).refine((a) => a.url !== void 0 || a.bytes !== void 0, { message: "Attachment requires either `url` or `bytes`" });
-var NotificationFormatSchema = external_exports.enum([
-  "text",
-  "markdown",
-  "html"
-]);
-var NotificationActionSchema = external_exports.object({
-  id: external_exports.string(),
-  label: external_exports.string(),
-  url: external_exports.string().optional()
-});
-var NotificationSchema = external_exports.object({
-  body: external_exports.string(),
-  title: external_exports.string().optional(),
-  format: NotificationFormatSchema.default("text"),
-  priority: external_exports.number().int().min(1).max(5).default(3),
-  level: external_exports.string().optional(),
-  attachments: external_exports.array(AttachmentSchema).optional(),
-  clickUrl: external_exports.string().optional(),
-  actions: external_exports.array(NotificationActionSchema).optional(),
-  sound: external_exports.string().optional(),
-  ttl: external_exports.number().optional(),
-  tag: external_exports.string().optional(),
-  deviceId: external_exports.number().optional(),
-  eventId: external_exports.string().optional(),
-  metadata: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
-});
-var TargetKindLevelSchema = external_exports.object({
-  id: external_exports.string(),
-  label: external_exports.string(),
-  /** Which canonical priority (1..5) this level maps to. `null` = qualitative-only. */
-  ordinal: external_exports.number().int().min(1).max(5).nullable(),
-  flags: external_exports.object({
-    critical: external_exports.boolean().optional(),
-    silent: external_exports.boolean().optional(),
-    noPush: external_exports.boolean().optional()
-  }).optional(),
-  /** e.g. Pushover `emergency` requires `retry` / `expire`. */
-  requires: external_exports.array(external_exports.string()).optional(),
-  description: external_exports.string().optional()
-});
-var TargetKindAttachmentsCapsSchema = external_exports.object({
-  mediaTypes: external_exports.array(AttachmentMediaTypeSchema),
-  mode: external_exports.enum([
-    "url",
-    "bytes",
-    "both"
-  ]),
-  max: external_exports.number().int().nonnegative(),
-  maxBytes: external_exports.number().int().positive().optional()
-});
-var TargetKindCapsSchema = external_exports.object({
-  attachments: TargetKindAttachmentsCapsSchema,
-  /** Max action buttons (0 = none). */
-  actions: external_exports.number().int().nonnegative(),
-  levels: external_exports.array(TargetKindLevelSchema),
-  format: external_exports.array(NotificationFormatSchema),
-  clickUrl: external_exports.boolean(),
-  sound: external_exports.boolean(),
-  ttl: external_exports.boolean(),
-  bodyMaxLen: external_exports.number().int().positive()
-});
-var ConfigSchemaPassthrough = external_exports.unknown();
-var TargetKindSchema = external_exports.object({
-  kind: external_exports.string(),
-  label: external_exports.string(),
-  icon: external_exports.string(),
-  /** Stamped by each provider so the concat-fanned catalog stays routable. */
-  addonId: external_exports.string(),
-  configSchema: ConfigSchemaPassthrough,
-  supportsDiscovery: external_exports.boolean(),
-  caps: TargetKindCapsSchema
-});
-var TargetSchema = external_exports.object({
-  id: external_exports.string(),
-  name: external_exports.string(),
-  kind: external_exports.string(),
-  addonId: external_exports.string(),
-  enabled: external_exports.boolean(),
-  config: external_exports.record(external_exports.string(), external_exports.unknown())
-});
-var DiscoveredTargetSchema = external_exports.object({
-  kind: external_exports.string(),
-  suggestedName: external_exports.string(),
-  config: external_exports.record(external_exports.string(), external_exports.unknown())
-});
-var RenderedAsSchema = external_exports.object({
-  level: external_exports.string(),
-  format: NotificationFormatSchema,
-  attachmentsSent: external_exports.number().int().nonnegative(),
-  actionsSent: external_exports.number().int().nonnegative(),
-  truncated: external_exports.boolean(),
-  dropped: external_exports.array(external_exports.string())
-});
-var SendResultSchema = external_exports.object({
-  success: external_exports.boolean(),
-  error: external_exports.string().optional(),
-  renderedAs: RenderedAsSchema.optional()
-});
-var TestResultSchema = SendResultSchema;
-var notificationOutputCapability = {
-  name: "notification-output",
-  scope: "system",
-  mode: "collection",
-  methods: {
-    listTargetKinds: method(external_exports.object({}), external_exports.array(TargetKindSchema)),
-    listTargets: method(external_exports.object({}), external_exports.array(TargetSchema)),
-    discoverTargets: method(external_exports.object({
-      kind: external_exports.string(),
-      config: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
-    }), external_exports.array(DiscoveredTargetSchema)),
-    send: method(external_exports.object({
-      targetId: external_exports.string(),
-      notification: NotificationSchema
-    }), SendResultSchema, { kind: "mutation" }),
-    testTarget: method(external_exports.object({
-      targetId: external_exports.string(),
-      sample: NotificationSchema.optional()
-    }), TestResultSchema, { kind: "mutation" }),
-    upsertTarget: method(external_exports.object({ target: TargetSchema }), TargetSchema, { kind: "mutation" }),
-    deleteTarget: method(external_exports.object({ targetId: external_exports.string() }), external_exports.void(), { kind: "mutation" }),
-    setTargetEnabled: method(external_exports.object({
-      targetId: external_exports.string(),
-      enabled: external_exports.boolean()
-    }), external_exports.void(), { kind: "mutation" })
-  }
-};
-var NcDeliverySchema = external_exports.enum([
-  "immediate",
-  "track-end",
-  "device-event",
-  "package-event"
-]);
-var NcScheduleWindowSchema = external_exports.object({
-  /** Days of week the window STARTS on (0 = Sunday … 6 = Saturday). */
-  days: external_exports.array(external_exports.number().int().min(0).max(6)).min(1),
-  startMinute: external_exports.number().int().min(0).max(1439),
-  endMinute: external_exports.number().int().min(0).max(1439)
-});
-var NcScheduleSchema = external_exports.object({
-  windows: external_exports.array(NcScheduleWindowSchema).min(1),
-  /** IANA timezone; default = hub host timezone. */
-  timezone: external_exports.string().optional(),
-  /** Active OUTSIDE the windows (e.g. "only outside business hours"). */
-  invert: external_exports.boolean().optional()
-});
-var NcPlateMatcherSchema = external_exports.object({
-  values: external_exports.array(external_exports.string().min(1)).min(1),
-  /** Max Levenshtein distance after normalization (uppercase alphanumeric). */
-  maxDistance: external_exports.number().int().min(0).max(3).default(1)
-});
-var NcOccupancyConditionSchema = external_exports.object({
-  /** Admin zone id to scope the count to; absent = whole-frame occupancy. */
-  zoneId: external_exports.string().optional(),
-  /** Object class to count; absent = any class. */
-  className: external_exports.string().optional(),
-  op: external_exports.enum([
-    "became-occupied",
-    "became-free",
-    ">=",
-    "<="
-  ]).default("became-occupied"),
-  count: external_exports.number().int().min(0).default(1),
-  sustainSeconds: external_exports.number().int().min(0).max(3600).default(15)
-});
-var NcZoneConditionSchema = external_exports.object({
-  ids: external_exports.array(external_exports.string().min(1)).min(1),
-  /** Quantifier over `ids` — at least one / every one visited. */
-  match: external_exports.enum(["any", "all"]).default("any")
-});
-var NcConditionsSchema = external_exports.object({
-  /** Device scope — absent = all devices. */
-  devices: external_exports.array(external_exports.number()).optional(),
-  /** Detector class names (any overlap with the record's class set). */
-  classes: external_exports.array(external_exports.string().min(1)).optional(),
-  /** Veto classes — any overlap fails the rule. */
-  classesExclude: external_exports.array(external_exports.string().min(1)).optional(),
-  /** Minimum detection confidence 0–1 (fails when the record has none). */
-  minConfidence: external_exports.number().min(0).max(1).optional(),
-  /** Admin zone membership over event `zones` / track `zonesVisited`. */
-  zones: NcZoneConditionSchema.optional(),
-  /** Veto zones — any hit fails the rule. */
-  zonesExclude: external_exports.array(external_exports.string().min(1)).optional(),
-  /**
-  * Exact (case-insensitive) match on the record's collapsed `label`
-  * (identity name / plate text / subclass).
-  */
-  labelEquals: external_exports.array(external_exports.string().min(1)).optional(),
-  /**
-  * Identity matcher. P1 boundary: matched against the record's collapsed
-  * `label` (the identity display name propagated by the face pipeline) —
-  * identity-ID matching rides in P2 when identity ids reach the record.
-  */
-  identities: external_exports.array(external_exports.string().min(1)).optional(),
-  /** Fuzzy plate matcher against the record's `label` (plate text). */
-  plates: NcPlateMatcherSchema.optional(),
-  /**
-  * Identity EXCLUDE — mirror of {@link identities} with `notIn` semantics.
-  * Same P1 boundary: matched against the record's collapsed `label` (the
-  * identity display name). A record with NO label passes (nothing to
-  * exclude), unlike the include variant which fails on an absent label.
-  */
-  identitiesExclude: external_exports.array(external_exports.string().min(1)).optional(),
-  /**
-  * Minimum server-computed key-event importance in [0,1] (`Track.importance`).
-  * TRACK-END only: importance is scored at track close, so it does not exist
-  * at immediate / object-event evaluation time (see catalog `appliesTo`). At
-  * close the value is threaded via the close-time info (the `Track` clone is
-  * captured before the DB row is updated, so it would otherwise read stale).
-  * Fails when the record carries no importance (never guess quality — the
-  * `minConfidence` precedent). MVP cut: a single scalar threshold.
-  */
-  minImportance: external_exports.number().min(0).max(1).optional(),
-  /**
-  * Minimum track dwell in SECONDS — `(lastSeen − firstSeen) / 1000`.
-  * TRACK-END only: an `immediate` / object-event subject has no closed
-  * lifespan, so a dwell condition never matches immediate delivery
-  * (documented choice — the object-event record carries no `firstSeen`,
-  * so dwell cannot be computed from what the subject actually carries).
-  */
-  minDwellSeconds: external_exports.number().min(0).optional(),
-  /**
-  * Detection provenance filter. `any` (default / absent) matches every
-  * source; otherwise the subject's source must equal it. Legacy records
-  * with no stamped source are treated as `pipeline`. The union spans both
-  * record kinds — object events carry `pipeline` | `onboard`, synthetic
-  * tracks carry `sensor`.
-  */
-  source: external_exports.enum([
-    "pipeline",
-    "onboard",
-    "sensor",
-    "any"
-  ]).optional(),
-  /**
-  * Minimum identity / plate MATCH confidence in [0,1] — DISTINCT from the
-  * detector `minConfidence` (that gates the object-detection score; this
-  * gates the recognition/OCR match score). Fails when the subject carries
-  * no label-match confidence (never guess). TRACK-END only: the confidence
-  * lives on the recognition result and reaches the subject at track close.
-  *
-  * What it measures precisely (plumbed at track close — the closer threads
-  * the value into `NcTrackClosedInfo.labelConfidence`, the same seam as
-  * `importance`): the BEST recognition match confidence observed for the
-  * label the track carries at close — for a face, the peak cosine similarity
-  * of the ASSIGNED identity (`FaceMatch.score`, reset on an identity switch);
-  * for a plate, the peak OCR read score of the best-held plate
-  * (`plateText.confidence`). When BOTH a face and a plate were recognized on
-  * one track the higher of the two is used. A track that ended with no
-  * confident identity/plate match carries no value, so the condition fails
-  * closed for it (an un-recognized subject).
-  */
-  minLabelConfidence: external_exports.number().min(0).max(1).optional(),
-  /**
-  * DEVICE-EVENT only. Raw device event-type tokens (`EventFire.eventType`,
-  * e.g. a doorbell `press` / `press_long`) — matched case-insensitively
-  * against the token carried on the device-event subject (extracted from the
-  * event-emitter runtime slice's `lastEvent.eventType`). Fails when the
-  * subject carries no token. Doorbell-pulse / passive-sensor kinds emit no
-  * eventType, so gate those with {@link sensorKinds} instead.
-  */
-  eventTypeTokens: external_exports.array(external_exports.string().min(1)).optional(),
-  /**
-  * DEVICE-EVENT only. Sensor/control taxonomy kinds (e.g. `doorbell`,
-  * `contact`, `button`, `device-event`) — matched against the persisted
-  * `SensorEvent.kind` (see `sensor-event-kinds.ts`). Membership is OR.
-  */
-  sensorKinds: external_exports.array(external_exports.string().min(1)).optional(),
-  /**
-  * PACKAGE-EVENT only. Which package phase fires the rule — `delivered`
-  * (a parked parcel appeared), `picked-up` (it departed), or `both`. Fails
-  * when the subject's phase does not match (a subject always carries a phase
-  * on the package-event trigger).
-  */
-  packagePhase: external_exports.enum([
-    "delivered",
-    "picked-up",
-    "both"
-  ]).optional(),
-  /**
-  * PERSONAL-RULE custom zones (viewer-drawn). Inline normalized polygons
-  * (MaskShape vocabulary). A record passes when its bbox overlaps ANY
-  * listed polygon (ZoneEngine membership semantics). Evaluated only when
-  * the subject carries a bbox; absent bbox ⇒ the condition FAILS.
-  */
-  customZones: external_exports.array(MaskPolygonShapeSchema).optional(),
-  /**
-  * DEVICE-EVENT only. ZoneAnalytics occupancy edge — fires when a device's
-  * (optionally zone/class-scoped) occupancy count crosses the configured
-  * threshold and holds for `sustainSeconds`. Fail-closed on missing
-  * substrate (no snapshot / missing zone). See {@link NcOccupancyCondition}.
-  */
-  occupancy: NcOccupancyConditionSchema.optional()
+};
+var ModelConvertInputSchema = external_exports.object({
+  sourceUrl: external_exports.string(),
+  metadata: ModelConvertMetadataSchema,
+  targets: external_exports.array(ConvertTargetSchema).min(1).readonly(),
+  calibrationRef: external_exports.string().optional(),
+  sessionId: external_exports.string().optional()
 });
-var NcRuleTargetSchema = external_exports.object({
-  /** `notification-output` Target id. */
-  targetId: external_exports.string().min(1),
-  /**
-  * Per-backend passthrough. Recognized keys are mapped onto the canonical
-  * Notification (`priority`, `level`, `sound`, `clickUrl`, `ttl`); the
-  * degrade engine drops what the backend can't render.
-  */
-  params: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
+var modelConvertCapability = {
+  name: "model-convert",
+  scope: "system",
+  mode: "singleton",
+  internal: true,
+  methods: { convert: method(ModelConvertInputSchema, ConvertResultSchema, {
+    kind: "mutation",
+    auth: "admin",
+    timeoutMs: 6e5
+  }) }
+};
+var ModelDistributeInputSchema = external_exports.object({
+  nodeId: external_exports.string(),
+  modelId: external_exports.string(),
+  format: external_exports.enum(MODEL_FORMATS),
+  entry: ModelCatalogEntrySchema
 });
-var NcMediaPolicySchema = external_exports.object({ attach: external_exports.enum([
-  "best",
-  "best-matching",
-  "keyFrame",
-  "none"
-]).default("best") });
-var NcThrottleSchema = external_exports.object({
-  cooldownSec: external_exports.number().int().min(0).max(86400).default(60),
-  /** `rule` = one shared cooldown; `rule-device` = per-camera cooldown. */
-  scope: external_exports.enum(["rule", "rule-device"]).default("rule-device")
+var ModelDistributeResultSchema = external_exports.object({
+  ok: external_exports.boolean(),
+  /** sha256 of the staged tarball (empty for a hub-local no-op). */
+  sha256: external_exports.string(),
+  bytes: external_exports.number(),
+  /** The target node's modelsDir the artifact landed in. */
+  path: external_exports.string()
 });
-var NcRuleInputSchema = external_exports.object({
-  name: external_exports.string().min(1).max(200),
-  enabled: external_exports.boolean().default(true),
-  delivery: NcDeliverySchema,
-  conditions: NcConditionsSchema.default({}),
-  schedule: NcScheduleSchema.optional(),
-  targets: external_exports.array(NcRuleTargetSchema).min(1),
-  media: NcMediaPolicySchema.default({ attach: "best" }),
-  throttle: NcThrottleSchema.default({
-    cooldownSec: 60,
-    scope: "rule-device"
-  }),
-  /** `{{var}}` templating over camera/class/label/zones/confidence/time. */
-  template: external_exports.object({
-    title: external_exports.string().max(500).optional(),
-    body: external_exports.string().max(2e3).optional()
-  }).optional(),
-  /** Canonical notification priority ordinal (1..5); per-target overridable. */
-  priority: external_exports.number().int().min(1).max(5).default(3),
+var modelDistributorCapability = {
+  name: "model-distributor",
+  scope: "system",
+  mode: "singleton",
+  internal: true,
+  methods: { distributeModel: method(ModelDistributeInputSchema, ModelDistributeResultSchema, {
+    kind: "mutation",
+    auth: "admin"
+  }) }
+};
+var BrokerKindSchema = external_exports.enum(["external", "embedded"]);
+var BrokerStatusSchema$1 = external_exports.enum([
+  "connected",
+  "disconnected",
+  "auth-failed",
+  "unreachable",
+  "tls-error"
+]);
+var BrokerInfoSchema = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  url: external_exports.string(),
+  kind: BrokerKindSchema,
+  status: BrokerStatusSchema$1,
+  latencyMs: external_exports.number().nullable(),
+  error: external_exports.string().optional(),
+  /** Embedded brokers only: number of MQTT clients currently connected. */
+  connectedClients: external_exports.number().int().nonnegative().optional(),
+  /** Epoch ms of the last live probe (external) or aedes snapshot (embedded). */
+  lastCheckedAt: external_exports.number().optional()
+});
+var BrokerConnectionDetailsSchema = external_exports.object({
+  url: external_exports.string(),
+  username: external_exports.string().optional(),
+  password: external_exports.string().optional(),
   /**
-  * Ownership/visibility key. Absent = admin/global rule (unchanged legacy
-  * behaviour, visible to all, read-only in the viewer). Present = personal
-  * rule owned by this userId. Server-stamped; never trusted from a client.
+  * Suggested prefix for `clientId`. Each consumer should suffix this
+  * with its own discriminator (addon id, instance id) so reconnects
+  * don't kick each other off (MQTT spec: clientId must be unique per
+  * broker).
   */
-  ownerUserId: external_exports.string().optional()
+  clientIdPrefix: external_exports.string().optional()
 });
-var NcRulePatchSchema = NcRuleInputSchema.partial().extend({ disabledTargetIds: external_exports.array(external_exports.string()).optional() });
-var NcRuleSchema = NcRuleInputSchema.extend({
+var AddBrokerInputSchema = external_exports.object({
+  name: external_exports.string().min(1),
+  url: external_exports.string().regex(/^(mqtt|mqtts|ws|wss):\/\//, "URL must start with mqtt(s):// or ws(s)://"),
+  username: external_exports.string().optional(),
+  password: external_exports.string().optional(),
+  clientIdPrefix: external_exports.string().optional()
+});
+var AddBrokerResultSchema = external_exports.object({ id: external_exports.string() });
+var IdInputSchema = external_exports.object({ id: external_exports.string() });
+var TestResultSchema$1 = external_exports.discriminatedUnion("ok", [external_exports.object({
+  ok: external_exports.literal(true),
+  latencyMs: external_exports.number()
+}), external_exports.object({
+  ok: external_exports.literal(false),
+  error: external_exports.string()
+})]);
+var StartEmbeddedInputSchema = external_exports.object({
+  port: external_exports.number().int().min(1).max(65535).default(1883),
+  /** Allow anonymous connect (no username/password). Default: false. */
+  allowAnonymous: external_exports.boolean().default(false),
+  /** Optional shared username/password for clients. */
+  username: external_exports.string().optional(),
+  password: external_exports.string().optional()
+});
+var StartEmbeddedResultSchema = external_exports.object({
   id: external_exports.string(),
-  /** userId of the admin who created the rule (server-stamped caller). */
-  createdBy: external_exports.string(),
-  createdAt: external_exports.number(),
-  updatedAt: external_exports.number(),
+  url: external_exports.string()
+});
+var StatusSchema = external_exports.object({
+  brokerCount: external_exports.number(),
+  embeddedRunning: external_exports.boolean()
+});
+var mqttBrokerCapability = {
+  name: "mqtt-broker",
+  scope: "system",
+  mode: "collection",
+  providerKind: "broker",
+  status: {
+    schema: StatusSchema,
+    kind: "poll"
+  },
+  methods: {
+    listBrokers: method(external_exports.void(), external_exports.array(BrokerInfoSchema)),
+    getBrokerConfig: method(IdInputSchema, BrokerConnectionDetailsSchema),
+    addBroker: method(AddBrokerInputSchema, AddBrokerResultSchema, { kind: "mutation" }),
+    removeBroker: method(IdInputSchema, external_exports.void(), { kind: "mutation" }),
+    testConnection: method(IdInputSchema, TestResultSchema$1, { kind: "mutation" }),
+    startEmbeddedBroker: method(StartEmbeddedInputSchema, StartEmbeddedResultSchema, { kind: "mutation" }),
+    stopEmbeddedBroker: method(IdInputSchema, external_exports.void(), { kind: "mutation" }),
+    getStatus: method(external_exports.void(), StatusSchema)
+  }
+};
+var NetworkEndpointSchema = external_exports.object({
+  url: external_exports.string(),
+  hostname: external_exports.string(),
+  port: external_exports.number(),
+  protocol: external_exports.enum(["http", "https"])
+});
+var NetworkAccessStatusSchema = external_exports.object({
+  connected: external_exports.boolean(),
+  endpoint: NetworkEndpointSchema.nullable(),
+  error: external_exports.string().optional()
+});
+var NetworkEndpointEntrySchema = NetworkEndpointSchema.extend({
   /**
-  * Per-target opt-out set. A targetId here is suppressed for THIS rule at
-  * send time. Only a target's OWNER may add/remove its id (server-checked
-  * in `nc.setRuleTargetEnabled`). Defaults to empty.
+  * Stable id within the provider — typically `<mode>-<sourcePort>` so
+  * the orchestrator can dedupe across `listEndpoints` polls.
   */
-  disabledTargetIds: external_exports.array(external_exports.string()).default([])
+  id: external_exports.string(),
+  /** Operator-facing label (mirrors `MeshEndpoint.label`). */
+  label: external_exports.string(),
+  /** Optional provider-specific mode tag, used for icon/colour in admin UI. */
+  mode: external_exports.string().optional(),
+  /** Originating local port the ingress fronts (informational). */
+  sourcePort: external_exports.number().optional()
 });
-var NcTestResultSchema = external_exports.object({
-  recordId: external_exports.string(),
-  recordKind: external_exports.enum([
-    "object-event",
-    "track",
-    "device-event",
-    "package-event"
-  ]),
-  deviceId: external_exports.number(),
-  timestamp: external_exports.number(),
-  wouldFire: external_exports.boolean(),
-  /** Condition id that failed (first failing group), when `wouldFire` is false. */
-  failedCondition: external_exports.string().optional(),
-  className: external_exports.string().optional(),
-  label: external_exports.string().optional()
+var networkAccessCapability = {
+  name: "network-access",
+  scope: "system",
+  mode: "collection",
+  providerKind: "ingress",
+  methods: {
+    start: method(external_exports.void(), NetworkEndpointSchema, { kind: "mutation" }),
+    stop: method(external_exports.void(), external_exports.void(), { kind: "mutation" }),
+    getEndpoint: method(external_exports.void(), NetworkEndpointSchema.nullable()),
+    getStatus: method(external_exports.void(), NetworkAccessStatusSchema),
+    /**
+    * Enumerate every active ingress entry. Providers that expose only a
+    * single endpoint may omit this method; callers fall back to
+    * `getEndpoint()` in that case.
+    */
+    listEndpoints: method(external_exports.void(), external_exports.array(NetworkEndpointEntrySchema).readonly())
+  }
+};
+var AttachmentMediaTypeSchema = external_exports.enum([
+  "image",
+  "video",
+  "gif",
+  "audio",
+  "icon"
+]);
+var AttachmentSchema = external_exports.object({
+  mediaType: AttachmentMediaTypeSchema,
+  url: external_exports.string().optional(),
+  bytes: external_exports.instanceof(Uint8Array).optional(),
+  mime: external_exports.string().optional(),
+  name: external_exports.string().optional()
+}).refine((a) => a.url !== void 0 || a.bytes !== void 0, { message: "Attachment requires either `url` or `bytes`" });
+var NotificationFormatSchema = external_exports.enum([
+  "text",
+  "markdown",
+  "html"
+]);
+var NotificationActionSchema = external_exports.object({
+  id: external_exports.string(),
+  label: external_exports.string(),
+  url: external_exports.string().optional()
+});
+var NotificationSchema = external_exports.object({
+  body: external_exports.string(),
+  title: external_exports.string().optional(),
+  format: NotificationFormatSchema.default("text"),
+  priority: external_exports.number().int().min(1).max(5).default(3),
+  level: external_exports.string().optional(),
+  attachments: external_exports.array(AttachmentSchema).optional(),
+  clickUrl: external_exports.string().optional(),
+  actions: external_exports.array(NotificationActionSchema).optional(),
+  sound: external_exports.string().optional(),
+  ttl: external_exports.number().optional(),
+  tag: external_exports.string().optional(),
+  deviceId: external_exports.number().optional(),
+  eventId: external_exports.string().optional(),
+  metadata: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
 });
-var NcConditionDescriptorSchema = external_exports.object({
-  /** Field id inside `NcConditions` (or `'schedule'` for the rule-level group). */
+var TargetKindLevelSchema = external_exports.object({
   id: external_exports.string(),
-  group: external_exports.enum([
-    "scope",
-    "class",
-    "zones",
-    "quality",
-    "label",
-    "schedule",
-    "device",
-    "package",
-    "occupancy"
-  ]),
   label: external_exports.string(),
-  /** Editor widget the UI renders — never hardcode per-condition forms. */
-  valueType: external_exports.enum([
-    "deviceIdList",
-    "stringList",
-    "number01",
-    "number",
-    "sourceSelect",
-    "zoneSelection",
-    "zoneIdList",
-    "schedule",
-    "plateMatcher",
-    "packagePhase",
-    "polygonDraw",
-    "occupancy"
-  ]),
-  operator: external_exports.enum([
-    "in",
-    "notIn",
-    "anyOf",
-    "allOf",
-    "gte",
-    "fuzzyIn",
-    "withinSchedule"
-  ]),
-  /** Which delivery kinds the condition applies to. */
-  appliesTo: external_exports.array(NcDeliverySchema),
-  phase: external_exports.string(),
+  /** Which canonical priority (1..5) this level maps to. `null` = qualitative-only. */
+  ordinal: external_exports.number().int().min(1).max(5).nullable(),
+  flags: external_exports.object({
+    critical: external_exports.boolean().optional(),
+    silent: external_exports.boolean().optional(),
+    noPush: external_exports.boolean().optional()
+  }).optional(),
+  /** e.g. Pushover `emergency` requires `retry` / `expire`. */
+  requires: external_exports.array(external_exports.string()).optional(),
   description: external_exports.string().optional()
 });
-var NcHistoryStatusSchema = external_exports.enum([
-  "pending",
-  "sent",
-  "dead"
-]);
-var NcHistoryRecordKindSchema = external_exports.enum([
-  "object-event",
-  "track-end",
-  "device-event",
-  "package-event"
-]);
-var NcHistorySubjectSchema = external_exports.object({
-  className: external_exports.string(),
-  label: external_exports.string().optional(),
-  confidence: external_exports.number().optional(),
-  zones: external_exports.array(external_exports.string()),
-  timestamp: external_exports.number()
+var TargetKindAttachmentsCapsSchema = external_exports.object({
+  mediaTypes: external_exports.array(AttachmentMediaTypeSchema),
+  mode: external_exports.enum([
+    "url",
+    "bytes",
+    "both"
+  ]),
+  max: external_exports.number().int().nonnegative(),
+  maxBytes: external_exports.number().int().positive().optional()
 });
-var NcHistoryEntrySchema = external_exports.object({
-  /** Outbox row id — the stable dedup id `ruleId:dedupRef:targetId`. */
+var TargetKindCapsSchema = external_exports.object({
+  attachments: TargetKindAttachmentsCapsSchema,
+  /** Max action buttons (0 = none). */
+  actions: external_exports.number().int().nonnegative(),
+  levels: external_exports.array(TargetKindLevelSchema),
+  format: external_exports.array(NotificationFormatSchema),
+  clickUrl: external_exports.boolean(),
+  sound: external_exports.boolean(),
+  ttl: external_exports.boolean(),
+  bodyMaxLen: external_exports.number().int().positive()
+});
+var ConfigSchemaPassthrough = external_exports.unknown();
+var TargetKindSchema = external_exports.object({
+  kind: external_exports.string(),
+  label: external_exports.string(),
+  icon: external_exports.string(),
+  /** Stamped by each provider so the concat-fanned catalog stays routable. */
+  addonId: external_exports.string(),
+  configSchema: ConfigSchemaPassthrough,
+  supportsDiscovery: external_exports.boolean(),
+  caps: TargetKindCapsSchema
+});
+var TargetSchema = external_exports.object({
   id: external_exports.string(),
-  ruleId: external_exports.string(),
-  /** Rule name frozen at fire time (outlives a later rename / delete). */
-  ruleName: external_exports.string(),
-  /** The rule urgency/trigger that produced this delivery. */
-  delivery: NcDeliverySchema,
-  targetId: external_exports.string(),
-  deviceId: external_exports.number(),
-  recordKind: NcHistoryRecordKindSchema,
-  /** Event / track ref of the evaluated record (§3.2 `eventRef`). */
-  recordId: external_exports.string(),
-  /** Present for track-scoped deliveries (object-event / track-end). */
-  trackId: external_exports.string().optional(),
-  status: NcHistoryStatusSchema,
-  /** Delivery attempts made so far. */
-  attempts: external_exports.number().int(),
-  /** Fire time (outbox enqueue). */
-  createdAt: external_exports.number(),
-  /** Last transition time (terminal for sent / dead). */
-  updatedAt: external_exports.number(),
-  /** Failure detail — present on a `dead` row. */
-  error: external_exports.string().optional(),
-  subject: NcHistorySubjectSchema
+  name: external_exports.string(),
+  kind: external_exports.string(),
+  addonId: external_exports.string(),
+  enabled: external_exports.boolean(),
+  config: external_exports.record(external_exports.string(), external_exports.unknown())
 });
-var NcHistoryFilterSchema = external_exports.object({
-  ruleId: external_exports.string().optional(),
-  deviceId: external_exports.number().optional(),
-  status: NcHistoryStatusSchema.optional(),
-  since: external_exports.number().optional(),
-  until: external_exports.number().optional(),
-  limit: external_exports.number().int().min(1).max(500).default(100)
+var DiscoveredTargetSchema = external_exports.object({
+  kind: external_exports.string(),
+  suggestedName: external_exports.string(),
+  config: external_exports.record(external_exports.string(), external_exports.unknown())
 });
-var notificationRulesCapability = {
-  name: "notification-rules",
+var RenderedAsSchema = external_exports.object({
+  level: external_exports.string(),
+  format: NotificationFormatSchema,
+  attachmentsSent: external_exports.number().int().nonnegative(),
+  actionsSent: external_exports.number().int().nonnegative(),
+  truncated: external_exports.boolean(),
+  dropped: external_exports.array(external_exports.string())
+});
+var SendResultSchema = external_exports.object({
+  success: external_exports.boolean(),
+  error: external_exports.string().optional(),
+  renderedAs: RenderedAsSchema.optional()
+});
+var TestResultSchema = SendResultSchema;
+var notificationOutputCapability = {
+  name: "notification-output",
   scope: "system",
-  mode: "singleton",
+  mode: "collection",
   methods: {
-    listRules: method(external_exports.object({}), external_exports.object({ rules: external_exports.array(NcRuleSchema) }), { auth: "admin" }),
-    getRule: method(external_exports.object({ ruleId: external_exports.string() }), external_exports.object({ rule: NcRuleSchema.nullable() }), { auth: "admin" }),
-    createRule: method(external_exports.object({ rule: NcRuleInputSchema }), external_exports.object({ rule: NcRuleSchema }), {
-      kind: "mutation",
-      auth: "admin",
-      caller: "required"
-    }),
-    updateRule: method(external_exports.object({
-      ruleId: external_exports.string(),
-      patch: NcRulePatchSchema
-    }), external_exports.object({ rule: NcRuleSchema }), {
-      kind: "mutation",
-      auth: "admin",
-      caller: "required"
-    }),
-    deleteRule: method(external_exports.object({ ruleId: external_exports.string() }), external_exports.object({ success: external_exports.literal(true) }), {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    setRuleEnabled: method(external_exports.object({
-      ruleId: external_exports.string(),
+    listTargetKinds: method(external_exports.object({}), external_exports.array(TargetKindSchema)),
+    listTargets: method(external_exports.object({}), external_exports.array(TargetSchema)),
+    discoverTargets: method(external_exports.object({
+      kind: external_exports.string(),
+      config: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
+    }), external_exports.array(DiscoveredTargetSchema)),
+    send: method(external_exports.object({
+      targetId: external_exports.string(),
+      notification: NotificationSchema
+    }), SendResultSchema, { kind: "mutation" }),
+    testTarget: method(external_exports.object({
+      targetId: external_exports.string(),
+      sample: NotificationSchema.optional()
+    }), TestResultSchema, { kind: "mutation" }),
+    upsertTarget: method(external_exports.object({ target: TargetSchema }), TargetSchema, { kind: "mutation" }),
+    deleteTarget: method(external_exports.object({ targetId: external_exports.string() }), external_exports.void(), { kind: "mutation" }),
+    setTargetEnabled: method(external_exports.object({
+      targetId: external_exports.string(),
       enabled: external_exports.boolean()
-    }), external_exports.object({ success: external_exports.literal(true) }), {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    /**
-    * Dry-run a rule against recently persisted records (object events for
-    * `immediate`, closed tracks for `track-end`). Mutation kind only to
-    * carry the full rule object safely; no side effects.
-    */
-    testRule: method(external_exports.object({
-      rule: NcRuleInputSchema,
-      lookbackMinutes: external_exports.number().int().min(1).max(1440).default(60)
-    }), external_exports.object({ results: external_exports.array(NcTestResultSchema) }), {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    getConditionCatalog: method(external_exports.object({}), external_exports.object({ catalog: external_exports.array(NcConditionDescriptorSchema) })),
-    /**
-    * Queryable delivery history — a read-only view over the durable outbox
-    * (fired rule, subject summary, target, status, timestamps, error on a
-    * dead row). Newest-first, bounded by `filter.limit`. Retention follows
-    * the outbox's own terminal-row prune horizon (no separate history
-    * horizon — single collection, single source of truth). Admin-only in
-    * P1 (no user dimension); the P2 viewer History screen adds per-caller
-    * scoping on the same method.
-    */
-    getHistory: method(external_exports.object({ filter: NcHistoryFilterSchema.default({ limit: 100 }) }), external_exports.object({ entries: external_exports.array(NcHistoryEntrySchema) }), { auth: "admin" })
+    }), external_exports.void(), { kind: "mutation" })
   }
 };
 var MethodAccessSchema = external_exports.enum([
@@ -35955,6 +36069,36 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "terminalSession.close": {
+    capName: "terminal-session",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "terminalSession.listProfiles": {
+    capName: "terminal-session",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "terminalSession.listSessions": {
+    capName: "terminal-session",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "terminalSession.openSession": {
+    capName: "terminal-session",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "terminalSession.resize": {
+    capName: "terminal-session",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "toast.onToast": {
     capName: "toast",
     capScope: "system",