@camstack/addon-terminal 0.1.68 → 0.1.70

package/dist/addon.js

@@ -12945,6 +12945,24 @@ method(_void(), _void(), { kind: "mutation" }), method(_void(), _void(), { kind:
 	kind: "mutation",
 	auth: "admin"
 });
+/**
+* Device Manager capability — hub-side singleton that unifies device persistence,
+* live registry access, and all management operations into a single tRPC surface.
+*
+* Replaces:
+*   - `device-persistence` capability (persistence methods absorbed here)
+*   - `device-management.router.ts` (deleted in Phase 2)
+*   - `device-ops.router.ts` (compat layer — deleted; device-provider ops absorbed here)
+*
+* All device provider addons (rtsp, onvif, frigate, …) are hub-local: they may
+* fork into separate processes but never run on remote cluster agents. Therefore:
+*   - No nodeId routing needed — this is a pure hub singleton.
+*   - The hub's DeviceRegistry is the single source of truth for all live devices.
+*   - No shadow registry or cross-node aggregation required.
+*
+* Forked workers register devices back to the hub via `ctx.devices`
+* (DeviceManagerApi → ctx.api.deviceManager.registerDevice), same as today.
+*/
 /** One child-placement directive on a container's `childLayout`. Structurally
 *  identical to `ChildLayoutEntry` in `device-management.ts` — the cap wire
 *  shape for the same field. The child is identified by its re-sync-stable
@@ -13043,7 +13061,12 @@ var ConfigEntrySchema = object({
 	value: unknown(),
 	description: string().optional()
 });
-var LinkedDevicesModeSchema = _enum(["auto", "manual"]);
+/**
+* Only `manual` since D356: the operator picks, nothing links itself. The
+* field survives on the wire because a viewer already OTA'd parses it —
+* drop it once no shipped client reads `mode`.
+*/
+var LinkedDevicesModeSchema = _enum(["manual"]);
 /** One resolved linked device — the compact projection consumers need. */
 var LinkedDeviceSchema = object({
 	deviceId: number(),
@@ -18671,6 +18694,9 @@ var RetrainStatusSchema = _enum([
 *
 * `debug` does NOT pin; it is attention, not durability.
 *
+* `debugNote` is the operator's own words about WHAT should be checked on this
+* track, and it lives and dies with `debug` — see {@link MAX_TRACK_DEBUG_NOTE_LEN}.
+*
 * `favourited` IS a BOOLEAN pin (durability bit), not a retrain lifecycle.
 * A favourited track is skipped by retention the same way `staging` is, but
 * it does not enter `none|staging|trained` and has no staging budget.
@@ -18681,6 +18707,21 @@ var TrackFlagFields = {
 	markForTrain: boolean().optional(),
 	/** Operator marked this track for diagnostic attention. */
 	debug: boolean().optional(),
+	/**
+	* What the operator wants CHECKED on this track, in their own words.
+	*
+	* The flag alone says "look at this" and nothing about what for; a debug set
+	* reviewed hours later is a list of tracks with no question attached. Bound
+	* to `debug` on the WRITE side — the body clears it when `debug` goes off,
+	* and refuses it on a track whose debug is off — so a note can never outlive
+	* the attention it belongs to.
+	*
+	* `''` is a real value ("marked, nothing to add"); the ABSENT key means
+	* "leave whatever is stored alone", which is what lets a surface turn debug
+	* on without a note (a cancelled prompt) and what lets it edit the note
+	* without touching the flag.
+	*/
+	debugNote: string().max(500).optional(),
 	/** Operator favourited this track. Pins it against pruning. */
 	favourited: boolean().optional()
 };
@@ -18707,6 +18748,12 @@ var TrackFlagsSchema = object({
 	trackId: string(),
 	markForTrain: boolean(),
 	debug: boolean(),
+	/** The note as it STANDS after the write — never absent here (a track with no
+	*  note reports `''`), for the same reason the booleans are required: a
+	*  surface that has just written must be able to render the note it now owns
+	*  without a re-fetch, and an absent key would read as "unchanged" on a
+	*  screen that has no previous value to keep. */
+	debugNote: string(),
 	favourited: boolean(),
 	/** The lifecycle state the boolean was derived from. Required here (unlike on
 	*  a track row) because this shape is only ever produced by the write body,
@@ -47469,6 +47516,29 @@ var TerminalInstanceReconcileCoordinator = class {
 		return this.running;
 	}
 };
+/**
+* Instances bound to a node the cluster no longer lists at all.
+*
+* An OFFLINE node is still in the topology; a FORGOTTEN one
+* (`clusterNodes.forgetNode`) is not. An instance bound to a forgotten node
+* warned every minute ("terminal profiles unavailable … node hub-test is
+* offline", 2026-09-05) and could never come back, so it is removed — but
+* only when two consecutive reads agree (D49): a topology answer that lost a
+* node once must not destroy an operator's configuration on its own.
+*/
+function instancesOnForgottenNodes(instances, knownNodeIds, absentBefore) {
+	const absentNow = /* @__PURE__ */ new Set();
+	const remove = [];
+	for (const instance of instances) {
+		if (knownNodeIds.has(instance.nodeId)) continue;
+		absentNow.add(instance.id);
+		if (absentBefore.has(instance.id)) remove.push(instance);
+	}
+	return {
+		remove,
+		absentNow
+	};
+}
 //#endregion
 //#region src/profiles.ts
 /**
@@ -47997,6 +48067,8 @@ var TerminalAddon = class extends BaseAddon {
 	/** Prevent repeat writes when a legacy device stays live after migration. */
 	migratedTerminalCameraConfigIds = /* @__PURE__ */ new Set();
 	terminalCameraTombstones = /* @__PURE__ */ new Set();
+	/** Instance ids whose node was absent from the last topology read (D49 streak). */
+	instancesOnAbsentNodes = /* @__PURE__ */ new Set();
 	instanceMutationQueue = new TerminalInstanceMutationQueue();
 	terminalReconcileCoordinator = new TerminalInstanceReconcileCoordinator(this.instanceMutationQueue);
 	glancesPythonPath = "";
@@ -48177,6 +48249,16 @@ var TerminalAddon = class extends BaseAddon {
 		const nodes = topology.filter((node) => typeof node.id === "string" && node.id.length > 0);
 		const nodeIds = new Set(nodes.map((node) => node.id));
 		for (const cachedNodeId of this.cameraProfilesByNode.keys()) if (!nodeIds.has(cachedNodeId)) this.cameraProfilesByNode.delete(cachedNodeId);
+		const forgotten = instancesOnForgottenNodes(this.terminalInstances(), nodeIds, this.instancesOnAbsentNodes);
+		this.instancesOnAbsentNodes = forgotten.absentNow;
+		for (const instance of forgotten.remove) {
+			this.ctx.logger.info("terminal instance removed — its node is no longer in the cluster", { meta: {
+				instanceId: instance.id,
+				nodeId: instance.nodeId,
+				name: instance.name
+			} });
+			await this.instanceMutationQueue.run(() => this.deleteTerminalInstanceUnlocked(instance.id));
+		}
 		const unavailableNodeIds = /* @__PURE__ */ new Set();
 		await Promise.all(nodes.map(async (node) => {
 			try {

package/dist/addon.mjs

@@ -12922,6 +12922,24 @@ method(_void(), _void(), { kind: "mutation" }), method(_void(), _void(), { kind:
 	kind: "mutation",
 	auth: "admin"
 });
+/**
+* Device Manager capability — hub-side singleton that unifies device persistence,
+* live registry access, and all management operations into a single tRPC surface.
+*
+* Replaces:
+*   - `device-persistence` capability (persistence methods absorbed here)
+*   - `device-management.router.ts` (deleted in Phase 2)
+*   - `device-ops.router.ts` (compat layer — deleted; device-provider ops absorbed here)
+*
+* All device provider addons (rtsp, onvif, frigate, …) are hub-local: they may
+* fork into separate processes but never run on remote cluster agents. Therefore:
+*   - No nodeId routing needed — this is a pure hub singleton.
+*   - The hub's DeviceRegistry is the single source of truth for all live devices.
+*   - No shadow registry or cross-node aggregation required.
+*
+* Forked workers register devices back to the hub via `ctx.devices`
+* (DeviceManagerApi → ctx.api.deviceManager.registerDevice), same as today.
+*/
 /** One child-placement directive on a container's `childLayout`. Structurally
 *  identical to `ChildLayoutEntry` in `device-management.ts` — the cap wire
 *  shape for the same field. The child is identified by its re-sync-stable
@@ -13020,7 +13038,12 @@ var ConfigEntrySchema = object({
 	value: unknown(),
 	description: string().optional()
 });
-var LinkedDevicesModeSchema = _enum(["auto", "manual"]);
+/**
+* Only `manual` since D356: the operator picks, nothing links itself. The
+* field survives on the wire because a viewer already OTA'd parses it —
+* drop it once no shipped client reads `mode`.
+*/
+var LinkedDevicesModeSchema = _enum(["manual"]);
 /** One resolved linked device — the compact projection consumers need. */
 var LinkedDeviceSchema = object({
 	deviceId: number(),
@@ -18648,6 +18671,9 @@ var RetrainStatusSchema = _enum([
 *
 * `debug` does NOT pin; it is attention, not durability.
 *
+* `debugNote` is the operator's own words about WHAT should be checked on this
+* track, and it lives and dies with `debug` — see {@link MAX_TRACK_DEBUG_NOTE_LEN}.
+*
 * `favourited` IS a BOOLEAN pin (durability bit), not a retrain lifecycle.
 * A favourited track is skipped by retention the same way `staging` is, but
 * it does not enter `none|staging|trained` and has no staging budget.
@@ -18658,6 +18684,21 @@ var TrackFlagFields = {
 	markForTrain: boolean().optional(),
 	/** Operator marked this track for diagnostic attention. */
 	debug: boolean().optional(),
+	/**
+	* What the operator wants CHECKED on this track, in their own words.
+	*
+	* The flag alone says "look at this" and nothing about what for; a debug set
+	* reviewed hours later is a list of tracks with no question attached. Bound
+	* to `debug` on the WRITE side — the body clears it when `debug` goes off,
+	* and refuses it on a track whose debug is off — so a note can never outlive
+	* the attention it belongs to.
+	*
+	* `''` is a real value ("marked, nothing to add"); the ABSENT key means
+	* "leave whatever is stored alone", which is what lets a surface turn debug
+	* on without a note (a cancelled prompt) and what lets it edit the note
+	* without touching the flag.
+	*/
+	debugNote: string().max(500).optional(),
 	/** Operator favourited this track. Pins it against pruning. */
 	favourited: boolean().optional()
 };
@@ -18684,6 +18725,12 @@ var TrackFlagsSchema = object({
 	trackId: string(),
 	markForTrain: boolean(),
 	debug: boolean(),
+	/** The note as it STANDS after the write — never absent here (a track with no
+	*  note reports `''`), for the same reason the booleans are required: a
+	*  surface that has just written must be able to render the note it now owns
+	*  without a re-fetch, and an absent key would read as "unchanged" on a
+	*  screen that has no previous value to keep. */
+	debugNote: string(),
 	favourited: boolean(),
 	/** The lifecycle state the boolean was derived from. Required here (unlike on
 	*  a track row) because this shape is only ever produced by the write body,
@@ -47446,6 +47493,29 @@ var TerminalInstanceReconcileCoordinator = class {
 		return this.running;
 	}
 };
+/**
+* Instances bound to a node the cluster no longer lists at all.
+*
+* An OFFLINE node is still in the topology; a FORGOTTEN one
+* (`clusterNodes.forgetNode`) is not. An instance bound to a forgotten node
+* warned every minute ("terminal profiles unavailable … node hub-test is
+* offline", 2026-09-05) and could never come back, so it is removed — but
+* only when two consecutive reads agree (D49): a topology answer that lost a
+* node once must not destroy an operator's configuration on its own.
+*/
+function instancesOnForgottenNodes(instances, knownNodeIds, absentBefore) {
+	const absentNow = /* @__PURE__ */ new Set();
+	const remove = [];
+	for (const instance of instances) {
+		if (knownNodeIds.has(instance.nodeId)) continue;
+		absentNow.add(instance.id);
+		if (absentBefore.has(instance.id)) remove.push(instance);
+	}
+	return {
+		remove,
+		absentNow
+	};
+}
 //#endregion
 //#region src/profiles.ts
 /**
@@ -47974,6 +48044,8 @@ var TerminalAddon = class extends BaseAddon {
 	/** Prevent repeat writes when a legacy device stays live after migration. */
 	migratedTerminalCameraConfigIds = /* @__PURE__ */ new Set();
 	terminalCameraTombstones = /* @__PURE__ */ new Set();
+	/** Instance ids whose node was absent from the last topology read (D49 streak). */
+	instancesOnAbsentNodes = /* @__PURE__ */ new Set();
 	instanceMutationQueue = new TerminalInstanceMutationQueue();
 	terminalReconcileCoordinator = new TerminalInstanceReconcileCoordinator(this.instanceMutationQueue);
 	glancesPythonPath = "";
@@ -48154,6 +48226,16 @@ var TerminalAddon = class extends BaseAddon {
 		const nodes = topology.filter((node) => typeof node.id === "string" && node.id.length > 0);
 		const nodeIds = new Set(nodes.map((node) => node.id));
 		for (const cachedNodeId of this.cameraProfilesByNode.keys()) if (!nodeIds.has(cachedNodeId)) this.cameraProfilesByNode.delete(cachedNodeId);
+		const forgotten = instancesOnForgottenNodes(this.terminalInstances(), nodeIds, this.instancesOnAbsentNodes);
+		this.instancesOnAbsentNodes = forgotten.absentNow;
+		for (const instance of forgotten.remove) {
+			this.ctx.logger.info("terminal instance removed — its node is no longer in the cluster", { meta: {
+				instanceId: instance.id,
+				nodeId: instance.nodeId,
+				name: instance.name
+			} });
+			await this.instanceMutationQueue.run(() => this.deleteTerminalInstanceUnlocked(instance.id));
+		}
 		const unavailableNodeIds = /* @__PURE__ */ new Set();
 		await Promise.all(nodes.map(async (node) => {
 			try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-terminal",
-  "version": "0.1.68",
+  "version": "0.1.70",
   "description": "Interactive terminal sessions (pty + xterm) as a CamStack addon",
   "keywords": [
     "camstack",