@camstack/system 1.1.50 → 1.1.52

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,4 +1,4 @@
-import { $ as toExpressionValue, B as normalizeUnit, C as enumerateItemArrayFields, H as parseStreamParamsFormPatch, O as getByPath, Ot as sleep, S as deviceStatusCapability, St as isDeviceConfigCap, T as evaluateLinkExpression, a as DeviceStatusSchema, b as deviceManagerCapability, c as STREAM_PROFILE_META, ct as DeviceRole, g as applyTransform, i as CAP_NAMES_WITH_STATUS, lt as DeviceType, nt as errMsg, pt as WELL_KNOWN_TAB_MAP, q as setByPath, rt as BaseAddon, st as DeviceFeature, t as ALL_CAPABILITY_DEFINITIONS, tt as validateExpressionSource, ut as EventCategory, w as enumerateSchemaFields, x as deviceStateCapability, y as buildStreamParamsConfigSchema } from "../../dist-CC3E-_3h.mjs";
+import { E as evaluateLinkExpression, J as setByPath, Ot as sleep, S as deviceStatusCapability, St as isDeviceConfigCap, T as enumerateSchemaFields, U as parseStreamParamsFormPatch, V as normalizeUnit, a as DeviceStatusSchema, b as deviceManagerCapability, c as STREAM_PROFILE_META, ct as DeviceFeature, et as toExpressionValue, g as applyTransform, i as CAP_NAMES_WITH_STATUS, it as BaseAddon, k as getByPath, kt as EventCategory, lt as DeviceRole, nt as validateExpressionSource, pt as WELL_KNOWN_TAB_MAP, rt as errMsg, t as ALL_CAPABILITY_DEFINITIONS, ut as DeviceType, w as enumerateItemArrayFields, x as deviceStateCapability, y as buildStreamParamsConfigSchema } from "../../dist-B_PSvr-m.mjs";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
@@ -1742,1832 +1742,1956 @@ var DeviceEventPropagator = class {
 	}
 };
 //#endregion
-//#region src/builtins/device-manager/device-link-cycle.ts
-function nodeKey(deviceId, cap) {
-	return `${deviceId}:${cap}`;
-}
-/** The target's container stableId — its parent's (falling back to its own for
-*  a top-level target). Sibling FIELD sources resolve relative to this, the same
-*  rule `rebuildLinkDependents` / `resolveLinkedStatus` apply. */
-function containerStableId(targetRow, rowById) {
-	return targetRow.parentDeviceId !== null ? rowById.get(targetRow.parentDeviceId)?.stableId ?? targetRow.stableId : targetRow.stableId;
-}
-/** Resolve ONE field/global/literal binding to its `(deviceId, cap)` node, or
-*  null when it is a literal or resolves to no known device. */
-function resolveBindingNode(binding, targetRow, rowById, idByStableId) {
-	if (binding.kind === "literal") return null;
-	const wantedStableId = binding.kind === "global" ? binding.sourceStableId : `${containerStableId(targetRow, rowById)}-${binding.sourceKey}`;
-	const srcId = idByStableId.get(wantedStableId);
-	if (srcId === void 0) return null;
-	return nodeKey(srcId, binding.cap);
-}
+//#region src/builtins/device-manager/device-queries.ts
 /**
-* Resolve a link source to the set of `(deviceId, cap)` nodes it depends on.
-* A literal source depends on nothing; a field/global source depends on exactly
-* one node; an EXPRESSION source depends on one node per resolvable non-literal
-* binding. Unresolvable (dangling) bindings contribute no edge — they cannot
-* loop while dangling; a cycle that only becomes resolvable later is bounded by
-* the resolve-time re-entrancy guard.
+* Device query + live-runtime + provider/adoption operations for the
+* device-manager addon — the read/live half of the `IDeviceManagerProvider`
+* surface. Extracted verbatim from the `onInitialize` provider literal as free
+* functions taking a `ProviderContext` (DI). Input/return types are pinned to
+* the cap contract via `Parameters<IDeviceManagerProvider['x']>[0]` /
+* `ReturnType<…>` so the typed surface is identical to the inferred methods.
+*
+* Covers: persisted/live device queries (listPersistedByAddon, listAll,
+* getDevice, getChildren), live runtime methods (getStreamSources,
+* getConfigSchema, getSettingsSchema, updateConfig, enable, disable, remove,
+* removeByIntegration, getStreamProfileMap, setStreamProfileMap, probeStreams),
+* device-provider ops (discoverDevices, adoptDevice, getCreationSchema,
+* createDevice, testCreationField), and device-adoption ops
+* (adoptionListCandidates/Refresh/Adopt/Release/Resync, testField).
+*
+* The hub-live-then-persisted-fallback union, the cross-process device-ops
+* dispatch, the depth-first remove cascade, and the resetToSource resync purge
+* are byte-for-byte preserved. `remove`/`removeByIntegration`/`enable`/`disable`/
+* `probeStreams`/`getStreamProfileMap` self-call sibling cap methods via
+* `pctx.provider`. Pure refactor — no behavior change.
 */
-function resolveSourceNodes(link, targetRow, rowById, idByStableId) {
-	const src = link.source;
-	if (src.kind === "expression") {
-		const nodes = [];
-		for (const binding of Object.values(src.bindings)) {
-			const node = resolveBindingNode(binding, targetRow, rowById, idByStableId);
-			if (node !== null) nodes.push(node);
-		}
-		return nodes;
-	}
-	const node = resolveBindingNode(src, targetRow, rowById, idByStableId);
-	return node !== null ? [node] : [];
+async function listPersistedByAddon(pctx, input) {
+	const { addonId } = input;
+	const [index, meta] = await Promise.all([pctx.metaStore.readIndex(), pctx.metaStore.readMeta()]);
+	const stableIds = index[addonId] ?? [];
+	const byStableId = /* @__PURE__ */ new Map();
+	for (const m of Object.values(meta)) if (m.addonId === addonId) byStableId.set(m.stableId, m);
+	return stableIds.map((stableId) => {
+		const m = byStableId.get(stableId);
+		return {
+			id: m.id,
+			stableId,
+			type: m.type,
+			name: m.name,
+			location: m.location ?? null,
+			disabled: m.disabled ?? false,
+			parentDeviceId: m.parentDeviceId
+		};
+	});
 }
-/**
-* Detect whether replacing `editedDeviceId`'s links with `editedLinks` closes
-* a dependency cycle. Returns the cycle as an ordered list of node keys
-* (first node repeated at the end) or null when the set is safe.
-*/
-function findDeviceLinkCycle(allMeta, editedDeviceId, editedLinks) {
-	const rows = Object.values(allMeta);
-	const rowById = /* @__PURE__ */ new Map();
-	const idByStableId = /* @__PURE__ */ new Map();
-	for (const r of rows) {
-		rowById.set(r.id, r);
-		if (!idByStableId.has(r.stableId)) idByStableId.set(r.stableId, r.id);
-	}
-	const dependsOn = /* @__PURE__ */ new Map();
-	const addEdges = (row, links) => {
-		for (const link of links) {
-			const srcNodes = resolveSourceNodes(link, row, rowById, idByStableId);
-			if (srcNodes.length === 0) continue;
-			const tNode = nodeKey(row.id, link.target.cap);
-			const list = dependsOn.get(tNode) ?? [];
-			for (const srcNode of srcNodes) list.push(srcNode);
-			dependsOn.set(tNode, list);
+async function listAll(pctx, input) {
+	const { addonId } = input;
+	const results = [];
+	const seen = /* @__PURE__ */ new Set();
+	const meta = await pctx.metaStore.readMeta();
+	const metadataMap = await pctx.metaStore.readMetadataMap();
+	if (pctx.registry) {
+		const liveEntries = addonId ? pctx.registry.getAllForAddon(addonId).map((device) => ({
+			addonId,
+			device
+		})) : pctx.registry.getAllWithAddonId();
+		for (const { addonId: aid, device } of liveEntries) {
+			const key = String(device.id);
+			const metadata = metadataMap[key] ?? null;
+			const metaRow = meta[key] ?? null;
+			results.push(toDeviceInfo(aid, device, metadata, metaRow));
+			seen.add(key);
 		}
-	};
-	for (const r of rows) {
-		const links = r.id === editedDeviceId ? editedLinks : r.deviceLinks ?? [];
-		if (links.length > 0) addEdges(r, links);
 	}
-	const roots = [...new Set(editedLinks.map((l) => nodeKey(editedDeviceId, l.target.cap)))];
-	for (const root of roots) {
-		const cycle = dfsFindCycle(root, dependsOn);
-		if (cycle) return cycle;
+	const index = await pctx.metaStore.readIndex();
+	const metaByAddonStable = /* @__PURE__ */ new Map();
+	for (const m of Object.values(meta)) metaByAddonStable.set(`${m.addonId}${m.stableId}`, m);
+	const targetAddons = addonId ? [addonId] : Object.keys(index);
+	for (const aid of targetAddons) for (const stableId of index[aid] ?? []) {
+		const m = metaByAddonStable.get(`${aid}${stableId}`);
+		const key = String(m.id);
+		if (seen.has(key)) continue;
+		const persistedType = m.type;
+		const persistedConfig = await pctx.settings.readDeviceStore(m.id);
+		const metadata = metadataMap[key] ?? null;
+		results.push({
+			id: m.id,
+			stableId,
+			addonId: aid,
+			type: persistedType,
+			name: m?.name ?? stableId,
+			location: m?.location ?? null,
+			disabled: m?.disabled ?? false,
+			parentDeviceId: m?.parentDeviceId ?? null,
+			role: toDeviceRole(m?.role),
+			online: pctx.host.resolveDeviceOnline(m.id, pctx.registry !== null),
+			probed: pctx.host.resolveDeviceProbed(m.id),
+			features: persistedFeatures(m?.features),
+			isCamera: persistedType === DeviceType.Camera,
+			config: persistedConfig ?? {},
+			metadata,
+			...m?.integrationId !== void 0 ? { integrationId: m.integrationId } : {},
+			...m?.linkDeviceId !== void 0 ? { linkDeviceId: m.linkDeviceId } : {},
+			...m?.primaryChildEntityId !== void 0 ? { primaryChildEntityId: m.primaryChildEntityId } : {},
+			...m?.childLayout !== void 0 ? { childLayout: m.childLayout } : {},
+			...m?.deviceLinks !== void 0 ? { deviceLinks: m.deviceLinks } : {},
+			...m?.display !== void 0 ? { display: m.display } : {},
+			...(() => {
+				const si = buildSourceInfoFromConfig(persistedConfig ?? {}, stableId, aid);
+				return si !== void 0 ? { sourceInfo: si } : {};
+			})()
+		});
 	}
-	return null;
+	return results;
 }
-/** Iterative DFS from `root` over `dependsOn`; returns the first back-edge
-*  cycle path (closed — first node repeated last) or null. */
-function dfsFindCycle(root, dependsOn) {
-	const onPath = /* @__PURE__ */ new Set();
-	const done = /* @__PURE__ */ new Set();
-	const path = [];
-	const stack = [{
-		node: root,
-		nextChild: 0
-	}];
-	onPath.add(root);
-	path.push(root);
-	while (stack.length > 0) {
-		const frame = stack[stack.length - 1];
-		const children = dependsOn.get(frame.node) ?? [];
-		if (frame.nextChild < children.length) {
-			const child = children[frame.nextChild];
-			frame.nextChild += 1;
-			if (onPath.has(child)) {
-				const start = path.indexOf(child);
-				return [...path.slice(start), child];
-			}
-			if (done.has(child)) continue;
-			stack.push({
-				node: child,
-				nextChild: 0
-			});
-			onPath.add(child);
-			path.push(child);
-			continue;
+async function getDevice(pctx, input) {
+	const { deviceId } = input;
+	if (pctx.registry) {
+		const found = resolveDeviceById(pctx.registry, deviceId);
+		if (found) {
+			const key = String(found.device.id);
+			const [map, metaMap] = await Promise.all([pctx.metaStore.readMetadataMap(), pctx.metaStore.readMeta()]);
+			const metadata = map[key] ?? null;
+			const metaRow = metaMap[key] ?? null;
+			return toDeviceInfo(found.addonId, found.device, metadata, metaRow);
 		}
-		stack.pop();
-		onPath.delete(frame.node);
-		path.pop();
-		done.add(frame.node);
 	}
-	return null;
+	const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
+	if (!persisted) return null;
+	const { addonId: aid, stableId, meta: m } = persisted;
+	const persistedConfig = await pctx.settings.readDeviceStore(m.id);
+	const key = String(deviceId);
+	const metadata = (await pctx.metaStore.readMetadataMap())[key] ?? null;
+	const sourceInfoGetDevice = buildSourceInfoFromConfig(persistedConfig ?? {}, stableId, aid);
+	return {
+		id: deviceId,
+		stableId,
+		addonId: aid,
+		type: m.type,
+		name: m.name,
+		location: m.location ?? null,
+		disabled: m.disabled ?? false,
+		parentDeviceId: m.parentDeviceId,
+		role: toDeviceRole(m.role),
+		online: pctx.host.resolveDeviceOnline(deviceId, true),
+		probed: pctx.host.resolveDeviceProbed(deviceId),
+		features: persistedFeatures(m.features),
+		isCamera: false,
+		config: persistedConfig ?? {},
+		metadata,
+		...m.integrationId !== void 0 ? { integrationId: m.integrationId } : {},
+		...m.linkDeviceId !== void 0 ? { linkDeviceId: m.linkDeviceId } : {},
+		...m.primaryChildEntityId !== void 0 ? { primaryChildEntityId: m.primaryChildEntityId } : {},
+		...m.childLayout !== void 0 ? { childLayout: m.childLayout } : {},
+		...m.deviceLinks !== void 0 ? { deviceLinks: m.deviceLinks } : {},
+		...m.display !== void 0 ? { display: m.display } : {},
+		...sourceInfoGetDevice !== void 0 ? { sourceInfo: sourceInfoGetDevice } : {}
+	};
 }
-//#endregion
-//#region src/builtins/device-manager/device-meta-actions.ts
-/**
-* Device meta-mutation + persistence actions for the device-manager addon —
-* the `IDeviceManagerProvider` write/load surface. Extracted verbatim from the
-* `onInitialize` provider literal as free functions taking a `ProviderContext`
-* (DI). Each function's input/return types are pinned to the cap contract via
-* `Parameters<IDeviceManagerProvider['x']>[0]` / `ReturnType<…>` so the typed
-* surface is identical to the inferred object-literal methods.
-*
-* Covers: id allocation + registration (allocateDeviceId, registerDevice,
-* removeDevice), config persistence (persistConfig, loadConfig), the meta
-* surface load (loadMeta, loadRuntimeState), every meta setter (setName,
-* setLocation, setType, setIntegrationId, setLinkDeviceId,
-* setPrimaryChildEntityId, setChildLayout, setDeviceLinks, setRole, setDisplay,
-* applyInitialMeta, setMetadata, setDisabled), and the location registry
-* (listLocations, addLocation, removeLocation).
-*
-* EXACT ordering and side effects preserved — notably registerDevice's
-* name-precedence reconcile + field-preservation spreads, the
-* withMetaWriteLock-serialised read-modify-writes, the event emissions, and the
-* link reverse-index rebuild gating. Pure refactor — no behavior change.
-*/
-/**
-* Stamp (or update) the owning integration id on a device's meta row + emit
-* `DeviceMetaChanged`. The device-manager chokepoint shared by the
-* `setIntegrationId` cap handler AND the create/adopt forwarders (queries)
-* that stamp an integration's ownership onto every device it materializes.
-* Idempotent. Takes its low-level deps directly (not the full `ProviderContext`)
-* because `ProviderContext.stampIntegrationId` delegates HERE — passing the
-* context would be a capture cycle.
-*/
-async function stampIntegrationId(metaStore, settings, ctx, deviceId, integrationId) {
-	await metaStore.withMetaWriteLock(async () => {
-		const persisted = await metaStore.resolvePersistedById(deviceId);
-		if (!persisted) throw new Error(`[device-manager] stampIntegrationId: unknown device id=${deviceId}`);
-		const { meta: m } = persisted;
-		const key = String(deviceId);
-		const allMeta = await metaStore.readMeta();
-		await settings.writeAddonStore({ deviceMeta: {
-			...allMeta,
-			[key]: {
-				...m,
-				integrationId
-			}
-		} });
-	});
-	ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id: deviceId
-		},
-		category: EventCategory.DeviceMetaChanged,
-		data: {
-			deviceId,
-			field: "integrationId",
-			value: integrationId
+async function getChildren(pctx, input) {
+	const { parentDeviceId } = input;
+	let ownerAddonId = null;
+	if (pctx.registry) {
+		if (pctx.registry.getById(parentDeviceId)) ownerAddonId = pctx.registry.getAddonId(parentDeviceId);
+	}
+	if (!ownerAddonId) {
+		const persisted = await pctx.metaStore.resolvePersistedById(parentDeviceId);
+		if (!persisted) return [];
+		ownerAddonId = persisted.addonId;
+	}
+	const results = [];
+	const seen = /* @__PURE__ */ new Set();
+	const [index, meta, metadataMap] = await Promise.all([
+		pctx.metaStore.readIndex(),
+		pctx.metaStore.readMeta(),
+		pctx.metaStore.readMetadataMap()
+	]);
+	if (pctx.registry) {
+		const liveChildren = pctx.registry.getChildren(parentDeviceId);
+		for (const device of liveChildren) {
+			const key = String(device.id);
+			const metadata = metadataMap[key] ?? null;
+			const metaRow = meta[key] ?? null;
+			results.push(toDeviceInfo(ownerAddonId, device, metadata, metaRow));
+			seen.add(key);
 		}
-	});
-}
-async function allocateDeviceId(pctx, input) {
-	const { addonId, stableId } = input;
-	return await pctx.metaStore.withMetaWriteLock(async () => {
-		const meta = await pctx.metaStore.readMeta();
-		const existing = Object.values(meta).find((m) => m.addonId === addonId && m.stableId === stableId);
-		if (existing) return { id: existing.id };
-		const id = await pctx.metaStore.allocateNextDeviceId();
-		await pctx.settings.writeAddonStore({ deviceMeta: {
-			...meta,
-			[String(id)]: {
-				addonId,
-				stableId,
-				type: "generic",
-				name: stableId,
-				location: null,
-				disabled: false,
-				parentDeviceId: null,
-				id
-			}
-		} });
-		return { id };
-	});
-}
-async function registerDevice(pctx, input) {
-	const { addonId, stableId, id, type, name, parentDeviceId, features, config } = input;
-	const key = String(id);
-	const featuresArr = Array.isArray(features) ? [...features] : [];
-	const { isFirstRegistration, exportFingerprint, fingerprintChanged } = await pctx.metaStore.withMetaWriteLock(async () => {
-		const index = await pctx.metaStore.readIndex();
-		const existing = index[addonId] ?? [];
-		const wasInIndex = existing.includes(stableId);
-		if (!wasInIndex) await pctx.settings.writeAddonStore({ deviceIndex: {
-			...index,
-			[addonId]: [...existing, stableId]
-		} });
-		const meta = await pctx.metaStore.readMeta();
-		const existingMeta = meta[key];
-		const wasUserNamed = existingMeta?.userNamed ?? (existingMeta !== void 0 && existingMeta.name !== stableId);
-		const resolvedName = wasUserNamed && existingMeta !== void 0 ? existingMeta.name : name;
-		const isFirst = !existingMeta || !wasInIndex;
-		const fingerprint = canonicalDeviceFingerprint({
-			deviceId: id,
-			deviceType: type,
-			features: featuresArr
+	}
+	const ownerMetaByStableId = /* @__PURE__ */ new Map();
+	for (const m of Object.values(meta)) if (m.addonId === ownerAddonId) ownerMetaByStableId.set(m.stableId, m);
+	const persistedChildren = (index[ownerAddonId] ?? []).filter((sid) => ownerMetaByStableId.get(sid)?.parentDeviceId === parentDeviceId);
+	for (const childStableId of persistedChildren) {
+		const m = ownerMetaByStableId.get(childStableId);
+		const key = String(m.id);
+		if (seen.has(key)) continue;
+		const persistedConfig = await pctx.settings.readDeviceStore(m.id);
+		const metadata = metadataMap[key] ?? null;
+		const sourceInfoChild = buildSourceInfoFromConfig(persistedConfig ?? {}, childStableId, ownerAddonId);
+		results.push({
+			id: m.id,
+			stableId: childStableId,
+			addonId: ownerAddonId,
+			type: m.type,
+			name: m.name,
+			location: m.location ?? null,
+			disabled: m.disabled ?? false,
+			parentDeviceId,
+			role: toDeviceRole(m.role),
+			online: pctx.host.resolveDeviceOnline(m.id, pctx.registry !== null),
+			probed: pctx.host.resolveDeviceProbed(m.id),
+			features: persistedFeatures(m.features),
+			isCamera: false,
+			config: persistedConfig ?? {},
+			metadata,
+			...m.integrationId !== void 0 ? { integrationId: m.integrationId } : {},
+			...m.linkDeviceId !== void 0 ? { linkDeviceId: m.linkDeviceId } : {},
+			...m.primaryChildEntityId !== void 0 ? { primaryChildEntityId: m.primaryChildEntityId } : {},
+			...m.childLayout !== void 0 ? { childLayout: m.childLayout } : {},
+			...m.deviceLinks !== void 0 ? { deviceLinks: m.deviceLinks } : {},
+			...m.display !== void 0 ? { display: m.display } : {},
+			...sourceInfoChild !== void 0 ? { sourceInfo: sourceInfoChild } : {}
 		});
-		await pctx.settings.writeAddonStore({ deviceMeta: {
-			...meta,
-			[key]: {
-				addonId,
-				stableId,
-				type,
-				name: resolvedName,
-				userNamed: wasUserNamed,
-				location: existingMeta?.location ?? null,
-				disabled: existingMeta?.disabled ?? false,
-				...existingMeta?.integrationId !== void 0 ? { integrationId: existingMeta.integrationId } : {},
-				...existingMeta?.linkDeviceId !== void 0 ? { linkDeviceId: existingMeta.linkDeviceId } : {},
-				...existingMeta?.primaryChildEntityId !== void 0 ? { primaryChildEntityId: existingMeta.primaryChildEntityId } : {},
-				...existingMeta?.childLayout !== void 0 ? { childLayout: existingMeta.childLayout } : {},
-				...existingMeta?.deviceLinks !== void 0 ? { deviceLinks: existingMeta.deviceLinks } : {},
-				...existingMeta?.role !== void 0 ? { role: existingMeta.role } : {},
-				...existingMeta?.display !== void 0 ? { display: existingMeta.display } : {},
-				parentDeviceId,
-				id,
-				features: featuresArr,
-				exportFingerprint: fingerprint
-			}
-		} });
-		return {
-			isFirstRegistration: isFirst,
-			exportFingerprint: fingerprint,
-			fingerprintChanged: existingMeta?.exportFingerprint !== fingerprint
-		};
-	});
-	if (Object.keys(config).length > 0) await pctx.settings.writeDeviceStore(id, config);
-	pctx.metaStore.idToAddonId.set(id, addonId);
-	if (isFirstRegistration) pctx.host.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id
-		},
-		category: EventCategory.DeviceRegistered,
-		data: {
-			deviceId: id,
-			name: name.length > 0 ? name : stableId,
-			providerId: addonId,
-			parentDeviceId: parentDeviceId ?? null
-		}
-	});
-	else pctx.host.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id
-		},
-		category: EventCategory.DeviceMetaChanged,
-		data: {
-			deviceId: id,
-			name: name.length > 0 ? name : stableId,
-			providerId: addonId,
-			parentDeviceId: parentDeviceId ?? null,
-			features: featuresArr
-		}
-	});
-	if (isFirstRegistration || fingerprintChanged) pctx.host.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id
-		},
-		category: EventCategory.DeviceProvisioned,
-		data: {
-			deviceId: id,
-			fingerprint: exportFingerprint,
-			generation: Date.now()
+	}
+	return results;
+}
+async function getStreamSources(pctx, input) {
+	const { deviceId } = input;
+	if (pctx.registry) {
+		const found = resolveDeviceById(pctx.registry, deviceId);
+		if (found) {
+			if (!isCameraDevice(found.device)) return [];
+			return (await found.device.getStreamSources()).map((s) => ({
+				id: s.id,
+				label: s.label,
+				protocol: s.protocol,
+				url: s.url,
+				resolution: s.resolution,
+				fps: s.fps,
+				bitrate: s.bitrate,
+				codec: s.codec,
+				profileHint: s.profileHint
+			}));
 		}
-	});
-	if (pctx.host.devicesWithLinks.size > 0 && pctx.host.expectedSourceStableIds.has(stableId)) await pctx.metaStore.rebuildLinkDependents();
+	}
+	if (!await pctx.metaStore.resolvePersistedById(deviceId)) throw new Error(`[device-manager] Device with id ${deviceId} not found`);
+	return (await pctx.requireDeviceOps(deviceId).getStreamSources({ deviceId })).map((s) => ({ ...s }));
 }
-async function removeDevice(pctx, input) {
+async function getConfigSchema(pctx, input) {
 	const { deviceId } = input;
-	const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
-	if (!persisted) return;
-	const { addonId, stableId, meta: persistedMeta } = persisted;
-	const key = String(deviceId);
-	const deviceName = persistedMeta.name;
-	await pctx.metaStore.withMetaWriteLock(async () => {
-		const index = await pctx.metaStore.readIndex();
-		const remaining = (index[addonId] ?? []).filter((sid) => sid !== stableId);
-		const updatedIndex = remaining.length > 0 ? {
-			...index,
-			[addonId]: remaining
-		} : (() => {
-			const { [addonId]: _removed, ...rest } = index;
-			return rest;
-		})();
-		await pctx.settings.writeAddonStore({ deviceIndex: updatedIndex });
-		const { [key]: _removedMeta, ...restMeta } = await pctx.metaStore.readMeta();
-		await pctx.settings.writeAddonStore({ deviceMeta: restMeta });
-		const map = await pctx.metaStore.readMetadataMap();
-		if (key in map) {
-			const { [key]: _removedMetadata, ...restMap } = map;
-			await pctx.settings.writeAddonStore({ deviceMetadata: restMap });
-		}
-	});
-	await pctx.settings.clearDeviceStore(deviceId);
-	await pctx.settings.clearDeviceRuntimeState(deviceId);
-	const bindingsStore = await readBindingsStore(pctx.bindingsDeps);
-	const bindingKey = String(deviceId);
-	if (bindingsStore.deviceBindings[bindingKey]) {
-		const { [bindingKey]: _removedBindings, ...restBindings } = bindingsStore.deviceBindings;
-		await writeBindingsStore(pctx.bindingsDeps, { deviceBindings: restBindings });
-	}
-	pctx.host.remoteNativeCaps.delete(deviceId);
-	pctx.host.capabilityRegistry?.unregisterAllNativeForDevice(deviceId);
-	pctx.metaStore.idToAddonId.delete(deviceId);
-	pctx.host.devicesWithLinks.delete(deviceId);
-	pctx.host.dropDeviceOverlays(deviceId);
-	await pctx.metaStore.rebuildLinkDependents();
-	pctx.host.ctx.logger.info("removed device", { tags: {
-		deviceId,
-		deviceName: deviceName.length > 0 ? deviceName : stableId
-	} });
-	pctx.host.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id: deviceId
-		},
-		category: EventCategory.DeviceUnregistered,
-		data: {
-			deviceId,
-			providerId: addonId,
-			parentDeviceId: persistedMeta.parentDeviceId ?? null
-		}
-	});
-}
-async function persistConfig(pctx, input) {
-	const { deviceId, data } = input;
-	if (!await pctx.metaStore.resolvePersistedById(deviceId)) throw new Error(`[device-manager] persistConfig: unknown device id=${deviceId}`);
-	await pctx.settings.writeDeviceStore(deviceId, data);
-}
-async function loadConfig(pctx, input) {
-	const { deviceId } = input;
-	if (!await pctx.metaStore.resolvePersistedById(deviceId)) return {};
-	return pctx.settings.readDeviceStore(deviceId);
-}
-/**
-* Load the operator-organisational meta surface for one device
-* (`name` / `location` / `disabled` / `type` / `parentDeviceId`
-* / `addonId` + `id` / `stableId`). Used by the kernel proxy's
-* device-context factory to populate `ctx.deviceMeta` before
-* the device class constructor runs. Returns `null` when no
-* persisted row exists for the id.
-*
-* Reads default `location` to `null` and `disabled` to `false`
-* for legacy rows that predate the field — production code
-* relies on the IDevice type contract that both are present.
-*/
-async function loadMeta(pctx, input) {
-	const { deviceId } = input;
-	const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
-	if (!persisted) return null;
-	const { addonId, stableId, meta: m } = persisted;
-	const key = String(deviceId);
-	const metadata = (await pctx.metaStore.readMetadataMap())[key] ?? null;
-	return {
-		id: m.id,
-		stableId,
-		addonId,
-		type: m.type,
-		name: m.name,
-		location: m.location ?? null,
-		disabled: m.disabled ?? false,
-		parentDeviceId: m.parentDeviceId,
-		metadata,
-		...m.integrationId !== void 0 ? { integrationId: m.integrationId } : {},
-		...m.linkDeviceId !== void 0 ? { linkDeviceId: m.linkDeviceId } : {},
-		...m.role !== void 0 ? { role: m.role } : {}
-	};
-}
-/**
-* Update the operator-edited display name. Writes the meta
-* row, emits a `DeviceMetaChanged` event so live consumers
-* (UI device list, alert center) see the rename without
-* polling. The live `IDevice.name` mirror is updated by the
-* kernel proxy on its side (`device-cap-proxy.ts`).
-*/
-async function setName(pctx, input) {
-	const { deviceId, name } = input;
-	const cascaded = [];
-	await pctx.metaStore.withMetaWriteLock(async () => {
-		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
-		if (!persisted) throw new Error(`[device-manager] setName: unknown device id=${deviceId}`);
-		const { meta: m } = persisted;
-		const key = String(deviceId);
-		const oldName = m.name;
-		const allMeta = await pctx.metaStore.readMeta();
-		const nextMeta = {
-			...allMeta,
-			[key]: {
-				...m,
-				name,
-				userNamed: true
-			}
-		};
-		if (oldName.length > 0 && oldName !== name) for (const [childKey, childMeta] of Object.entries(allMeta)) {
-			if (childKey === key) continue;
-			if (!(childMeta.parentDeviceId === deviceId || childMeta.linkDeviceId === deviceId)) continue;
-			if (childMeta.name !== oldName && !childMeta.name.startsWith(`${oldName} `)) continue;
-			const childName = childMeta.name === oldName ? name : `${name}${childMeta.name.slice(oldName.length)}`;
-			nextMeta[childKey] = {
-				...childMeta,
-				name: childName
-			};
-			cascaded.push({
-				id: Number(childKey),
-				name: childName
-			});
-		}
-		await pctx.settings.writeAddonStore({ deviceMeta: nextMeta });
-	});
-	pctx.host.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id: deviceId
-		},
-		category: EventCategory.DeviceMetaChanged,
-		data: {
-			deviceId,
-			field: "name",
-			value: name
-		}
-	});
-	for (const child of cascaded) pctx.host.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id: child.id
-		},
-		category: EventCategory.DeviceMetaChanged,
-		data: {
-			deviceId: child.id,
-			field: "name",
-			value: child.name
-		}
-	});
-}
-/**
-* Update the operator-organisational location label. `null`
-* clears it. Mirrors the same persist-then-emit shape as
-* `setName`; consumers subscribe to `DeviceMetaChanged` and
-* filter on `field: 'location'`.
-*/
-async function setLocation(pctx, input) {
-	const { deviceId, location } = input;
-	await pctx.metaStore.withMetaWriteLock(async () => {
-		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
-		if (!persisted) throw new Error(`[device-manager] setLocation: unknown device id=${deviceId}`);
-		const { meta: m } = persisted;
-		const key = String(deviceId);
-		const allMeta = await pctx.metaStore.readMeta();
-		await pctx.settings.writeAddonStore({ deviceMeta: {
-			...allMeta,
-			[key]: {
-				...m,
-				location
-			}
-		} });
-	});
-	pctx.host.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id: deviceId
-		},
-		category: EventCategory.DeviceMetaChanged,
-		data: {
-			deviceId,
-			field: "location",
-			value: location
-		}
-	});
-}
-/**
-* Update the device type. Writes the meta row, emits a
-* `DeviceMetaChanged` event. Used by the kernel to apply
-* `initialMeta.type` before device construction so the device
-* constructs with its real type instead of the `allocateDeviceId`
-* placeholder `'generic'`.
-*/
-async function setType(pctx, input) {
-	const { deviceId, type } = input;
-	await pctx.metaStore.withMetaWriteLock(async () => {
-		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
-		if (!persisted) throw new Error(`[device-manager] setType: unknown device id=${deviceId}`);
-		const { meta: m } = persisted;
-		const key = String(deviceId);
-		const allMeta = await pctx.metaStore.readMeta();
-		await pctx.settings.writeAddonStore({ deviceMeta: {
-			...allMeta,
-			[key]: {
-				...m,
-				type
-			}
-		} });
-	});
-	pctx.host.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id: deviceId
-		},
-		category: EventCategory.DeviceMetaChanged,
-		data: {
-			deviceId,
-			field: "type",
-			value: type
-		}
-	});
-}
-/**
-* Stamp (or update) the owning integration id on the device's
-* meta row. Called by the kernel's `create()` pre-seed path
-* when `initialMeta.integrationId` is set (analogous to
-* `setName` / `setType`). Idempotent.
-*/
-async function setIntegrationId(pctx, input) {
-	await pctx.stampIntegrationId(input.deviceId, input.integrationId);
-}
-/**
-* Stamp (or update) the linked device id on the device's meta
-* row. Called by the kernel's `create()` pre-seed path when
-* `initialMeta.linkDeviceId` is set (analogous to `setIntegrationId`).
-* Idempotent. `null` explicitly clears a previous link.
-*/
-async function setLinkDeviceId(pctx, input) {
-	const { deviceId, linkDeviceId } = input;
-	await pctx.metaStore.withMetaWriteLock(async () => {
-		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
-		if (!persisted) throw new Error(`[device-manager] setLinkDeviceId: unknown device id=${deviceId}`);
-		const { meta: m } = persisted;
-		const key = String(deviceId);
-		const allMeta = await pctx.metaStore.readMeta();
-		await pctx.settings.writeAddonStore({ deviceMeta: {
-			...allMeta,
-			[key]: {
-				...m,
-				linkDeviceId
-			}
-		} });
-	});
-	pctx.host.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id: deviceId
-		},
-		category: EventCategory.DeviceMetaChanged,
-		data: {
-			deviceId,
-			field: "linkDeviceId",
-			value: linkDeviceId
-		}
-	});
-}
-/**
-* Set (or clear) the durable primary-child override on a CONTAINER
-* device's meta row, keyed on the chosen child's re-sync/rename-stable
-* `entityId`. Mirrors `setLinkDeviceId` but persists a string entityId
-* (survives a re-sync that reallocates the child's numeric id) instead
-* of the numeric child id. `null` clears the override → priority default.
-*/
-async function setPrimaryChildEntityId(pctx, input) {
-	const { deviceId, primaryChildEntityId } = input;
-	await pctx.metaStore.withMetaWriteLock(async () => {
-		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
-		if (!persisted) throw new Error(`[device-manager] setPrimaryChildEntityId: unknown device id=${deviceId}`);
-		const { meta: m } = persisted;
-		const key = String(deviceId);
-		const allMeta = await pctx.metaStore.readMeta();
-		await pctx.settings.writeAddonStore({ deviceMeta: {
-			...allMeta,
-			[key]: {
-				...m,
-				primaryChildEntityId
-			}
-		} });
-	});
-	pctx.host.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id: deviceId
-		},
-		category: EventCategory.DeviceMetaChanged,
-		data: {
-			deviceId,
-			field: "primaryChildEntityId",
-			value: primaryChildEntityId
-		}
-	});
-}
-/**
-* Set (or replace) the container-level `childLayout` on a device's
-* meta row. Mirrors `setPrimaryChildEntityId` but persists the
-* accordion-section layout array (parent-only). Persisted, projected,
-* and preserved across re-register/restore.
-*/
-async function setChildLayout(pctx, input) {
-	const { deviceId, childLayout } = input;
-	await pctx.metaStore.withMetaWriteLock(async () => {
-		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
-		if (!persisted) throw new Error(`[device-manager] setChildLayout: unknown device id=${deviceId}`);
-		const { meta: m } = persisted;
-		const key = String(deviceId);
-		const allMeta = await pctx.metaStore.readMeta();
-		await pctx.settings.writeAddonStore({ deviceMeta: {
-			...allMeta,
-			[key]: {
-				...m,
-				childLayout
-			}
-		} });
-	});
-	pctx.host.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id: deviceId
-		},
-		category: EventCategory.DeviceMetaChanged,
-		data: {
-			deviceId,
-			field: "childLayout",
-			value: childLayout
-		}
-	});
-}
-/**
-* Set (or replace) the operator-authored cross-device field wirings on
-* a device's meta row. Mirrors `setChildLayout` but persists the
-* `deviceLinks` array. Persisted, projected, and preserved across
-* re-register/restore. Also maintains the in-memory `devicesWithLinks`
-* Set used as an O(1) gate by `resolveLinkedStatus`.
-*/
-async function setDeviceLinks(pctx, input) {
-	const { deviceId, deviceLinks } = input;
-	const cycle = findDeviceLinkCycle(await pctx.metaStore.readMeta(), deviceId, deviceLinks);
-	if (cycle) throw new Error(`[device-manager] setDeviceLinks: cross-device link cycle: ${cycle.join(" → ")}`);
-	for (const link of deviceLinks) {
-		if (link.source.kind !== "expression") continue;
-		const err = validateExpressionSource(link.source);
-		if (err) throw new Error(`[device-manager] setDeviceLinks: invalid expression on link '${link.id}': ${err}`);
-	}
-	await pctx.metaStore.withMetaWriteLock(async () => {
-		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
-		if (!persisted) throw new Error(`[device-manager] setDeviceLinks: unknown device id=${deviceId}`);
-		const { meta: m } = persisted;
-		const key = String(deviceId);
-		const allMeta = await pctx.metaStore.readMeta();
-		await pctx.settings.writeAddonStore({ deviceMeta: {
-			...allMeta,
-			[key]: {
-				...m,
-				deviceLinks
-			}
-		} });
-	});
-	if (deviceLinks.length > 0) pctx.host.devicesWithLinks.add(deviceId);
-	else pctx.host.devicesWithLinks.delete(deviceId);
-	await pctx.metaStore.rebuildLinkDependents();
-	pctx.host.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id: deviceId
-		},
-		category: EventCategory.DeviceMetaChanged,
-		data: {
-			deviceId,
-			field: "deviceLinks",
-			value: deviceLinks
-		}
-	});
-}
-/**
-* Stamp (or update) the semantic role on the device's meta row.
-* Called by the kernel's `create()` / `spawnAccessoryChild`
-* pre-seed when `initialMeta.role` is set (analogous to
-* `setIntegrationId`). Idempotent. `null` clears a previous role.
-*/
-async function setRole(pctx, input) {
-	const { deviceId, role } = input;
-	await pctx.metaStore.withMetaWriteLock(async () => {
-		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
-		if (!persisted) throw new Error(`[device-manager] setRole: unknown device id=${deviceId}`);
-		const { meta: m } = persisted;
-		const key = String(deviceId);
-		const allMeta = await pctx.metaStore.readMeta();
-		await pctx.settings.writeAddonStore({ deviceMeta: {
-			...allMeta,
-			[key]: {
-				...m,
-				role
-			}
-		} });
-	});
-	pctx.host.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id: deviceId
-		},
-		category: EventCategory.DeviceMetaChanged,
-		data: {
-			deviceId,
-			field: "role",
-			value: role
-		}
-	});
-}
-/**
-* Normalize an operator-authored display override at write time so the render
-* path's `UNIT_TABLE` lookups always hit canonical spellings — maps `unit` and
-* every `perCap[*].unit` through `normalizeUnit`. Pure: rebuilds new objects,
-* never mutates the input. A unit `normalizeUnit` cannot canonicalize is left
-* as-is (the render path refuses conversion for unknown spellings).
-*/
-function normalizeDisplayOverride(display) {
-	return {
-		...display,
-		...display.unit !== void 0 ? { unit: normalizeUnit(display.unit) ?? display.unit } : {},
-		...display.perCap !== void 0 ? { perCap: Object.fromEntries(Object.entries(display.perCap).map(([cap, refine]) => [cap, refine.unit !== void 0 ? {
-			...refine,
-			unit: normalizeUnit(refine.unit) ?? refine.unit
-		} : refine])) } : {}
-	};
-}
-/**
-* Set (or clear) the per-device display override on a device's meta row.
-* Mirrors `setChildLayout` persistence; `null` REMOVES the `display` key
-* entirely (immutable rest-destructure — matches the "absent ⇒ no override"
-* projection contract, never persists `display: undefined`). Override units are
-* normalized at write so the render path always looks up canonical spellings.
-*/
-async function setDisplay(pctx, input) {
-	const { deviceId, display } = input;
-	const normalized = display === null ? null : normalizeDisplayOverride(display);
-	await pctx.metaStore.withMetaWriteLock(async () => {
-		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
-		if (!persisted) throw new Error(`[device-manager] setDisplay: unknown device id=${deviceId}`);
-		const { meta: m } = persisted;
-		const key = String(deviceId);
-		const allMeta = await pctx.metaStore.readMeta();
-		const nextRow = normalized === null ? (({ display: _drop, ...rest }) => rest)(m) : {
-			...m,
-			display: normalized
-		};
-		await pctx.settings.writeAddonStore({ deviceMeta: {
-			...allMeta,
-			[key]: nextRow
-		} });
-	});
-	pctx.host.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id: deviceId
-		},
-		category: EventCategory.DeviceMetaChanged,
-		data: {
-			deviceId,
-			field: "display",
-			value: normalized
-		}
-	});
-}
-/**
-* Read the operator-authored per-role display defaults. Empty record when none
-* set. Not per-device — a plain top-level-key read.
-*/
-async function getRoleDisplayDefaults(pctx, _input) {
-	return { defaults: (await pctx.metaStore.readStore()).roleDisplayDefaults ?? {} };
-}
-/**
-* Replace the per-role display defaults whole-record (full replace). Override
-* units are normalized (`normalizeUnit`) at write so the render path always
-* looks up canonical spellings. Single-writer top-level key — no lock, no RMW,
-* no interaction with the `deviceMeta` write lock. Not per-device, so no event
-* is emitted; the UI invalidates its own query on mutate.
-*/
-async function setRoleDisplayDefaults(pctx, input) {
-	const normalized = Object.fromEntries(Object.entries(input.defaults).map(([role, def]) => [role, def.unit !== void 0 ? {
-		...def,
-		unit: normalizeUnit(def.unit) ?? def.unit
-	} : def]));
-	await pctx.settings.writeAddonStore({ roleDisplayDefaults: normalized });
-}
-/**
-* Batched meta pre-seed. Applies every provided field to the
-* device's meta row in ONE read-modify-write under a single
-* `withMetaWriteLock` acquisition (one `deviceMeta` blob write),
-* then emits one `DeviceMetaChanged` event per field that was
-* supplied — preserving the exact semantics of the individual
-* setters (`setName` / `setLocation` / `setType` /
-* `setIntegrationId` / `setLinkDeviceId` / `setRole`). Omitted
-* fields are left untouched; `null` clears `location` /
-* `linkDeviceId` / `role`. Idempotent.
-*
-* Collapses the per-child meta pre-seed (up to 6 individual
-* setter round-trips, each its own lock + write) into one — the
-* dominant cost when the kernel's `spawnAccessoryChild` reconciles
-* a many-entity container.
-*/
-async function applyInitialMeta(pctx, input) {
-	const { deviceId, name, location, type, integrationId, linkDeviceId, role } = input;
-	await pctx.metaStore.withMetaWriteLock(async () => {
-		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
-		if (!persisted) throw new Error(`[device-manager] applyInitialMeta: unknown device id=${deviceId}`);
-		const { meta: m } = persisted;
-		const key = String(deviceId);
-		const allMeta = await pctx.metaStore.readMeta();
-		const merged = {
-			...m,
-			...name !== void 0 ? { name } : {},
-			...location !== void 0 ? { location } : {},
-			...type !== void 0 ? { type } : {},
-			...integrationId !== void 0 ? { integrationId } : {},
-			...linkDeviceId !== void 0 ? { linkDeviceId } : {},
-			...role !== void 0 ? { role } : {}
-		};
-		await pctx.settings.writeAddonStore({ deviceMeta: {
-			...allMeta,
-			[key]: merged
-		} });
-	});
-	const emitMetaChanged = (field, value) => {
-		pctx.host.ctx.eventBus.emit({
-			id: randomUUID(),
-			timestamp: /* @__PURE__ */ new Date(),
-			source: {
-				type: "device",
-				id: deviceId
-			},
-			category: EventCategory.DeviceMetaChanged,
-			data: {
-				deviceId,
-				field,
-				value
-			}
-		});
-	};
-	if (name !== void 0) emitMetaChanged("name", name);
-	if (location !== void 0) emitMetaChanged("location", location);
-	if (type !== void 0) emitMetaChanged("type", type);
-	if (integrationId !== void 0) emitMetaChanged("integrationId", integrationId);
-	if (linkDeviceId !== void 0) emitMetaChanged("linkDeviceId", linkDeviceId);
-	if (role !== void 0) emitMetaChanged("role", role);
-}
-/**
-* Patch the device's hardware-identity metadata blob. Shallow
-* merge — `null` removes a key, anything else overwrites.
-* Drivers populate factual fields on first probe; operators
-* augment via the Device Info tab. Idempotent: a no-op patch
-* (every key already present with the same value) doesn't emit
-* the meta-changed event.
-*/
-async function setMetadata(pctx, input) {
-	const { deviceId, patch } = input;
-	const result = await pctx.metaStore.withMetaWriteLock(async () => {
-		if (!await pctx.metaStore.resolvePersistedById(deviceId)) throw new Error(`[device-manager] setMetadata: unknown device id=${deviceId}`);
-		const key = String(deviceId);
-		const map = await pctx.metaStore.readMetadataMap();
-		const next = { ...map[key] ?? {} };
-		let changed = false;
-		for (const [k, v] of Object.entries(patch)) if (v === null) {
-			if (k in next) {
-				delete next[k];
-				changed = true;
-			}
-		} else if (next[k] !== v) {
-			next[k] = v;
-			changed = true;
-		}
-		if (!changed) return { changed: false };
-		const hasFields = Object.keys(next).length > 0;
-		const updatedMap = { ...map };
-		if (hasFields) updatedMap[key] = next;
-		else delete updatedMap[key];
-		await pctx.settings.writeAddonStore({ deviceMetadata: updatedMap });
-		return {
-			changed: true,
-			finalMeta: hasFields ? next : null
-		};
-	});
-	if (!result.changed) return;
-	pctx.host.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id: deviceId
-		},
-		category: EventCategory.DeviceMetaChanged,
-		data: {
-			deviceId,
-			field: "metadata",
-			value: result.finalMeta
+	if (pctx.registry) {
+		const found = resolveDeviceById(pctx.registry, deviceId);
+		if (found) return found.device.config.entries().map((entry) => ({
+			key: entry.key,
+			value: entry.value,
+			...entry.description !== void 0 ? { description: entry.description } : {}
+		}));
+	}
+	if (!await pctx.metaStore.resolvePersistedById(deviceId)) throw new Error(`[device-manager] Device with id ${deviceId} not found`);
+	return (await pctx.requireDeviceOps(deviceId).getConfigEntries({ deviceId })).map((e) => ({ ...e }));
+}
+async function getSettingsSchema(pctx, input) {
+	const { deviceId } = input;
+	if (pctx.registry) {
+		const found = resolveDeviceById(pctx.registry, deviceId);
+		if (found) return found.device.getSettingsUISchema();
+	}
+	if (!await pctx.metaStore.resolvePersistedById(deviceId)) return null;
+	return await pctx.requireDeviceOps(deviceId).getSettingsSchema({ deviceId }) ?? null;
+}
+async function updateConfig(pctx, input) {
+	const { deviceId } = input;
+	if (pctx.registry) {
+		const found = resolveDeviceById(pctx.registry, deviceId);
+		if (found) {
+			await found.device.config.setAll(input.values);
+			return { success: true };
 		}
+	}
+	if (!await pctx.metaStore.resolvePersistedById(deviceId)) throw new Error(`[device-manager] Device with id ${deviceId} not found`);
+	await pctx.requireDeviceOps(deviceId).setConfig({
+		deviceId,
+		values: input.values
 	});
+	return { success: true };
 }
-/**
-* Soft-disable the device. Persisted on the meta row;
-* lifecycle gating is the driver's responsibility (BaseDevice
-* exposes `this.disabled` for the driver to consult at the top
-* of its lifecycle methods).
-*/
-async function setDisabled(pctx, input) {
-	const { deviceId, disabled } = input;
-	await pctx.metaStore.withMetaWriteLock(async () => {
-		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
-		if (!persisted) throw new Error(`[device-manager] setDisabled: unknown device id=${deviceId}`);
-		const { meta: m } = persisted;
-		const key = String(deviceId);
-		const allMeta = await pctx.metaStore.readMeta();
-		await pctx.settings.writeAddonStore({ deviceMeta: {
-			...allMeta,
-			[key]: {
-				...m,
-				disabled
-			}
-		} });
+async function enable(pctx, input) {
+	await pctx.provider.setDisabled({
+		deviceId: input.deviceId,
+		disabled: false
 	});
-	pctx.host.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id: deviceId
-		},
-		category: EventCategory.DeviceMetaChanged,
-		data: {
-			deviceId,
-			field: "disabled",
-			value: disabled
-		}
+	return { success: true };
+}
+async function disable(pctx, input) {
+	await pctx.provider.setDisabled({
+		deviceId: input.deviceId,
+		disabled: true
 	});
+	return { success: true };
 }
-async function loadRuntimeState(pctx, input) {
+async function remove(pctx, input) {
 	const { deviceId } = input;
-	if (!await pctx.metaStore.resolvePersistedById(deviceId)) return {};
-	const data = await pctx.settings.readDeviceRuntimeState(deviceId);
-	pctx.host.seedMirror(deviceId, pctx.host.withResetSessionProbe(data));
-	return data;
-}
-/**
-* Union of (1) operator-curated location registry and (2) labels
-* currently in use on persisted devices. Case-insensitive
-* dedupe (preserves the first-seen casing). Sorted
-* case-insensitively for stable UI. Drives the Device Info
-* location autocomplete.
-*/
-async function listLocations(pctx) {
-	const store = await pctx.settings.readAddonStore();
-	const meta = store.deviceMeta ?? {};
-	const locations = store.locations ?? [];
-	const seen = /* @__PURE__ */ new Map();
-	const consider = (raw) => {
-		if (typeof raw !== "string") return;
-		const trimmed = raw.trim();
-		if (trimmed.length === 0) return;
-		const key = trimmed.toLowerCase();
-		if (!seen.has(key)) seen.set(key, trimmed);
+	const removeOne = async (id) => {
+		if (pctx.registry) {
+			const live = resolveDeviceById(pctx.registry, id);
+			if (live) {
+				const deviceName = live.device.name;
+				await live.device.removeDevice();
+				pctx.registry.remove(id);
+				await pctx.provider.removeDevice({ deviceId: id });
+				pctx.host.ctx.logger.info("removed hub-local device", { tags: {
+					deviceId: id,
+					deviceName
+				} });
+				return;
+			}
+		}
+		const persisted = await pctx.metaStore.resolvePersistedById(id);
+		if (!persisted) return;
+		const { meta: persistedMeta } = persisted;
+		try {
+			await pctx.requireDeviceOps(id).removeDevice({ deviceId: id });
+		} catch (err) {
+			pctx.host.ctx.logger.warn("remove via device-ops failed — clearing persistence anyway", {
+				tags: {
+					deviceId: id,
+					deviceName: persistedMeta.name
+				},
+				meta: { error: errMsg(err) }
+			});
+		}
+		await pctx.provider.removeDevice({ deviceId: id });
 	};
-	for (const label of locations) consider(label);
-	for (const m of Object.values(meta)) consider(m.location);
-	return [...seen.values()].toSorted((a, b) => a.localeCompare(b, void 0, { sensitivity: "base" }));
-}
-/**
-* Add a label to the curated location registry. Idempotent:
-* existing entries (case-insensitive match) are silently kept.
-* Empty / whitespace-only inputs throw — operators must supply a
-* meaningful label.
-*/
-async function addLocation(pctx, input) {
-	const trimmed = input.name.trim();
-	if (trimmed.length === 0) throw new Error("[device-manager] addLocation: name must be non-empty");
-	const current = (await pctx.settings.readAddonStore()).locations ?? [];
-	if (current.some((l) => l.toLowerCase() === trimmed.toLowerCase())) return;
-	await pctx.settings.writeAddonStore({ locations: [...current, trimmed] });
+	const removeCascade = async (id) => {
+		for (const childId of await pctx.metaStore.directChildIds(id)) await removeCascade(childId);
+		await removeOne(id);
+	};
+	await removeCascade(deviceId);
+	return { success: true };
 }
 /**
-* Remove a label from the curated registry. Match is
-* case-insensitive. Devices that still reference this label keep
-* their `meta.location` value (the registry is a suggestion
-* list, not a foreign key) — pass `cascade: true` to also clear
-* `setLocation` on every device that referenced this exact
-* label. Cascade only matches case-insensitively + trimmed, same
-* as the registry equality check.
+* Cascade-delete every top-level device whose `integrationId`
+* matches. Enumerates a SNAPSHOT of the meta map so concurrent
+* removals don't clobber each other. Only top-level parents are
+* enumerated — children cascade via the per-parent `removeCascade`
+* inside the delegated `remove` call. Idempotent: devices with no
+* `integrationId` never match.
 */
-async function removeLocation(pctx, input) {
-	const trimmed = input.name.trim();
-	if (trimmed.length === 0) return;
-	const store = await pctx.settings.readAddonStore();
-	const current = store.locations ?? [];
-	const remaining = current.filter((l) => l.toLowerCase() !== trimmed.toLowerCase());
-	if (remaining.length !== current.length) await pctx.settings.writeAddonStore({ locations: remaining });
-	if (input.cascade !== true) return;
-	const meta = store.deviceMeta ?? {};
-	const updates = { ...meta };
-	const cleared = [];
-	for (const [key, m] of Object.entries(meta)) {
-		if (typeof m.location !== "string") continue;
-		if (m.location.trim().toLowerCase() !== trimmed.toLowerCase()) continue;
-		updates[key] = {
-			...m,
-			location: null
-		};
-		cleared.push(m.id);
-	}
-	if (cleared.length === 0) return;
-	await pctx.settings.writeAddonStore({ deviceMeta: updates });
-	for (const deviceId of cleared) pctx.host.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "device",
-			id: deviceId
-		},
-		category: EventCategory.DeviceMetaChanged,
-		data: {
-			deviceId,
-			field: "location",
-			value: null
-		}
+async function removeByIntegration(pctx, input) {
+	const { integrationId } = input;
+	const meta = await pctx.metaStore.readMeta();
+	const parentKeys = Object.keys(meta).filter((key) => {
+		const m = meta[key];
+		return m !== void 0 && m.integrationId === integrationId && m.parentDeviceId === null;
 	});
+	let removed = 0;
+	for (const _key of parentKeys) {
+		const m = meta[_key];
+		if (!m) continue;
+		await pctx.provider.remove({ deviceId: m.id });
+		removed++;
+	}
+	return { removed };
 }
-//#endregion
-//#region src/builtins/device-manager/device-link-overlay.ts
-/** Build both lookup maps from resolved link entries. Pure — order-preserving. */
-function buildLinkIndexes(entries) {
-	const targets = /* @__PURE__ */ new Map();
-	const dependents = /* @__PURE__ */ new Map();
-	for (const { targetDeviceId, link, sourceDeviceId, bindingSourceIds } of entries) {
-		const tKey = `${targetDeviceId}:${link.target.cap}`;
-		const tList = targets.get(tKey) ?? [];
-		tList.push({
-			link,
-			sourceDeviceId,
-			...bindingSourceIds !== void 0 ? { bindingSourceIds } : {}
-		});
-		targets.set(tKey, tList);
-		const addDependent = (sourceId, sourceCap) => {
-			const sKey = `${sourceId}:${sourceCap}`;
-			const sList = dependents.get(sKey) ?? [];
-			sList.push({
-				targetDeviceId,
-				targetCap: link.target.cap
+async function getStreamProfileMap(pctx, input) {
+	if (!pctx.registry) return {};
+	const found = resolveDeviceById(pctx.registry, input.deviceId);
+	if (!found) return {};
+	const storedMap = found.device.config.entries().find((e) => e.key === "_profileMap")?.value;
+	if (storedMap !== void 0 && typeof storedMap === "object" && storedMap !== null) return storedMap;
+	if (!isCameraDevice(found.device)) return {};
+	const sources = await found.device.getStreamSources();
+	const profileMap = {};
+	for (const s of sources) if (s.profileHint && s.id) profileMap[s.profileHint] = s.id;
+	return profileMap;
+}
+async function setStreamProfileMap(pctx, input) {
+	const { deviceId } = input;
+	if (pctx.registry) {
+		const found = resolveDeviceById(pctx.registry, deviceId);
+		if (found) {
+			await found.device.config.setAll({ _profileMap: input.profileMap });
+			return { success: true };
+		}
+	}
+	if (!await pctx.metaStore.resolvePersistedById(deviceId)) throw new Error(`[device-manager] Device with id ${deviceId} not found`);
+	await pctx.requireDeviceOps(deviceId).setConfig({
+		deviceId,
+		values: { _profileMap: input.profileMap }
+	});
+	return { success: true };
+}
+async function probeStreams(pctx, input) {
+	const streamProbe = pctx.host.ctx.kernel.streamProbe;
+	if (!streamProbe) return [];
+	const sources = await pctx.provider.getStreamSources({ deviceId: input.deviceId });
+	const results = [];
+	for (const s of sources) {
+		if (!s.url) continue;
+		try {
+			const metadata = await streamProbe.probe(s.url, { force: true });
+			results.push({
+				streamId: s.id,
+				width: metadata.width,
+				height: metadata.height,
+				codec: metadata.codec,
+				fps: metadata.fps,
+				bitrateKbps: metadata.bitrateKbps
 			});
-			dependents.set(sKey, sList);
-		};
-		if (link.source.kind === "expression") {
-			if (bindingSourceIds !== void 0) for (const [name, bindingDeviceId] of Object.entries(bindingSourceIds)) {
-				const binding = link.source.bindings[name];
-				if (binding === void 0 || binding.kind === "literal") continue;
-				addDependent(bindingDeviceId, binding.cap);
-			}
-			continue;
+		} catch (err) {
+			pctx.host.ctx.logger.debug("streamProbe.probe failed — returning placeholder", { meta: {
+				deviceId: input.deviceId,
+				streamId: s.id,
+				error: err instanceof Error ? err.message : String(err)
+			} });
+			results.push({ streamId: s.id });
 		}
-		if (link.source.kind !== "literal") addDependent(sourceDeviceId, link.source.cap);
 	}
-	return {
-		targets,
-		dependents
-	};
+	return results;
 }
-//#endregion
-//#region src/builtins/device-manager/device-meta-store.ts
-/**
-* Meta persistence layer for the device-manager addon.
-*
-* `DeviceMetaStore` encapsulates the read/modify/write helpers that previously
-* lived as closures inside `onInitialize`: the `ctx.settings`-backed reads
-* (`readStore` / `readIndex` / `readMeta` / `readMetadataMap`), the
-* single-writer mutex (`withMetaWriteLock`), id allocation
-* (`allocateNextDeviceId`), ownership/child resolution, link-source resolution,
-* and the cross-device link reverse-index rebuild. Extracting it as a class
-* (constructed once per `onInitialize`) keeps the EXACT semantics — the
-* `withMetaWriteLock` promise-chain is per-instance state, identical to the
-* former closure — while letting the meta-action + query modules depend on a
-* named, injectable surface instead of captured closures.
-*
-* Cross-device link state (the `linkTargets` / `linkDependents` /
-* `expectedSourceStableIds` maps + the `devicesWithLinks` gate) lives on the
-* addon; the store reaches it through the injected `LinkIndexHost` so the
-* single owner of that state stays the addon instance.
-*/
-var DeviceMetaStore = class {
-	settings;
-	registry;
-	linkHost;
-	/** Synchronous ownership cache, keyed by NUMERIC deviceId → owning addonId.
-	*  The persisted meta store is authoritative but reads are async; hub-side
-	*  callers (e.g. `CapabilityRegistry.getNativeProvider` fallback) need
-	*  ownership without awaiting. Kept in sync with every register/remove and
-	*  warmed from persistence on boot. */
-	idToAddonId = /* @__PURE__ */ new Map();
-	/** Serialises every read-modify-write of the deviceMeta / deviceIndex blob
-	*  through one promise chain (see `withMetaWriteLock`). Per-instance state —
-	*  identical to the former `onInitialize` closure variable. */
-	metaWriteChain = Promise.resolve();
-	constructor(settings, registry, linkHost) {
-		this.settings = settings;
-		this.registry = registry;
-		this.linkHost = linkHost;
+async function discoverDevices(pctx, input) {
+	const dp = await pctx.host.requireDeviceProvider(input.addonId);
+	if (!await dp.supportsDiscovery({})) throw new Error(`Addon "${input.addonId}" does not support device discovery`);
+	return (await dp.discoverDevices({})).map((d) => ({
+		stableId: d.stableId,
+		type: d.type,
+		suggestedName: d.suggestedName,
+		prefilledConfig: d.prefilledConfig
+	}));
+}
+async function adoptDevice(pctx, input) {
+	const dp = await pctx.host.requireDeviceProvider(input.addonId);
+	if (!await dp.supportsDiscovery({})) throw new Error(`Addon "${input.addonId}" does not support device adoption`);
+	const summary = await dp.adoptDiscoveredDevice({ candidate: input.candidate });
+	if (input.integrationId !== void 0) try {
+		await pctx.stampIntegrationId(summary.id, input.integrationId);
+	} catch (err) {
+		pctx.host.ctx.logger.warn("adoptDevice: integrationId stamp failed (device adopted)", {
+			tags: {
+				deviceId: summary.id,
+				integrationId: input.integrationId
+			},
+			meta: { error: errMsg(err) }
+		});
 	}
-	readStore = async () => {
-		return await this.settings.readAddonStore();
-	};
-	readIndex = async () => {
-		return (await this.readStore()).deviceIndex ?? {};
-	};
-	readMeta = async () => {
-		return (await this.readStore()).deviceMeta ?? {};
-	};
-	/** Hardware-identity metadata map. Lives in a sibling key on the
-	*  device-manager addon store so its writers (`setMetadata`) never
-	*  collide with the lifecycle writers on `deviceMeta`
-	*  (`registerDevice` / `setName` / `setLocation` / `setDisabled`).
-	*  Single-writer per row eliminates the "writer X clobbers writer
-	*  Y's field" bug class — `setMetadata` is the only producer. */
-	readMetadataMap = async () => {
-		return (await this.readStore()).deviceMetadata ?? {};
-	};
-	withMetaWriteLock = async (fn) => {
-		const previous = this.metaWriteChain;
-		let release = () => {};
-		const next = new Promise((resolve) => {
-			release = resolve;
+	return summary;
+}
+async function getCreationSchema(pctx, input) {
+	const dp = await pctx.host.requireDeviceProvider(input.addonId);
+	if (!await dp.supportsManualCreation({})) return null;
+	return await dp.getChildCreationSchema({ type: input.type }) ?? null;
+}
+async function createDevice(pctx, input) {
+	const dp = await pctx.host.requireDeviceProvider(input.addonId);
+	if (!await dp.supportsManualCreation({})) throw new Error(`Addon "${input.addonId}" does not support manual device creation`);
+	const summary = await dp.createDevice({
+		type: input.type,
+		config: input.config
+	});
+	if (input.integrationId !== void 0) try {
+		await pctx.stampIntegrationId(summary.id, input.integrationId);
+	} catch (err) {
+		pctx.host.ctx.logger.warn("createDevice: integrationId stamp failed (device created)", {
+			tags: {
+				deviceId: summary.id,
+				integrationId: input.integrationId
+			},
+			meta: { error: errMsg(err) }
 		});
-		this.metaWriteChain = next;
-		try {
-			await previous.catch(() => {});
-			return await fn();
-		} finally {
-			release();
+	}
+	return summary;
+}
+async function testCreationField(pctx, input) {
+	return (await pctx.host.requireDeviceProvider(input.addonId)).testCreationField({
+		type: input.type,
+		key: input.key,
+		value: input.value,
+		...input.formValues !== void 0 ? { formValues: input.formValues } : {}
+	});
+}
+async function adoptionListCandidates(pctx, input) {
+	const { addonId, ...rest } = input;
+	return (await pctx.host.requireDeviceAdoptionProvider(addonId)).listCandidates(rest);
+}
+async function adoptionRefresh(pctx, input) {
+	const { addonId, integrationId } = input;
+	return (await pctx.host.requireDeviceAdoptionProvider(addonId)).refresh({ integrationId });
+}
+async function adoptionAdopt(pctx, input) {
+	const { addonId, ...rest } = input;
+	return (await pctx.host.requireDeviceAdoptionProvider(addonId)).adopt(rest);
+}
+async function adoptionRelease(pctx, input) {
+	const { addonId, ...rest } = input;
+	return (await pctx.host.requireDeviceAdoptionProvider(addonId)).release(rest);
+}
+async function adoptionResync(pctx, input) {
+	const { camDeviceId, resetToSource } = input;
+	let owningAddonId = pctx.registry?.getAddonId(camDeviceId) ?? null;
+	if (!owningAddonId) owningAddonId = (await pctx.metaStore.resolvePersistedById(camDeviceId))?.addonId ?? null;
+	if (!owningAddonId) throw new Error(`adoptionResync: device ${camDeviceId} not found`);
+	let removedChildren = 0;
+	if (resetToSource === true) {
+		const childIds = await pctx.metaStore.directChildIds(camDeviceId);
+		for (const childId of childIds) {
+			await pctx.provider.remove({ deviceId: childId });
+			removedChildren += 1;
 		}
+		pctx.host.ctx.logger.info("resetToSource purge before resync", { tags: {
+			deviceId: camDeviceId,
+			removedChildren
+		} });
+	}
+	return {
+		...await (await pctx.host.requireDeviceAdoptionProvider(owningAddonId)).resync({
+			camDeviceId,
+			resetToSource
+		}),
+		removedChildren
 	};
-	/**
-	* Resolve a numeric deviceId to the owning `(addonId, stableId)` pair.
-	* Scans persisted meta — live IDevice lookup (hub registry) is handled
-	* separately per call site so callers can decide whether to route to
-	* an in-process driver or to the cross-process `device-ops` bridge.
-	* Returns null when no device with that id is known to the hub.
-	*/
-	resolvePersistedById = async (deviceId) => {
-		const m = (await this.readMeta())[String(deviceId)];
-		if (!m) return null;
-		return {
-			addonId: m.addonId,
-			stableId: m.stableId,
-			meta: m
-		};
-	};
-	/** Direct children of a device: the union of the live registry's children
-	*  and the persisted-meta scan (`parentDeviceId === parentId`), deduplicated
-	*  and excluding self. Shared by the `remove` cascade and the `resetToSource`
-	*  resync purge (#19). */
-	directChildIds = async (parentId) => {
-		const ids = /* @__PURE__ */ new Set();
-		if (this.registry) for (const c of this.registry.getChildren(parentId)) ids.add(c.id);
-		const meta = await this.readMeta();
-		for (const m of Object.values(meta)) if (m.parentDeviceId === parentId) ids.add(m.id);
-		ids.delete(parentId);
-		return [...ids];
+}
+async function testField(pctx, input) {
+	const { deviceId } = input;
+	let owningAddonId = null;
+	if (pctx.registry) owningAddonId = pctx.registry.getAddonId(deviceId);
+	if (!owningAddonId) owningAddonId = (await pctx.metaStore.resolvePersistedById(deviceId))?.addonId ?? null;
+	if (!owningAddonId) throw new Error(`Device with id ${deviceId} not found`);
+	const dp = await pctx.host.waitDeviceProvider(owningAddonId);
+	if (!dp) return {
+		status: "ok",
+		labels: [],
+		error: void 0
 	};
-	/** Resolve a link's `sourceKey` to a live device id: the sibling accessory
-	*  whose stableId is `${parentStableId}-${sourceKey}`. Null when absent.
-	*  Pure over a pre-read meta map so a multi-link resolve reads the store once. */
-	resolveSourceDeviceId = (parentStableId, sourceKey, meta) => {
-		const wanted = `${parentStableId}-${sourceKey}`;
-		for (const m of Object.values(meta)) if (m.stableId === wanted) return m.id;
-		return null;
+	if (typeof dp.testCreationField !== "function") return {
+		status: "ok",
+		labels: [],
+		error: void 0
 	};
-	/** Resolve a GLOBAL link source (P2e) to a live device id: the device whose
-	*  FULL stableId equals `sourceStableId`, regardless of parent container.
-	*  First match wins (stableIds are effectively unique cluster-wide — see the
-	*  `DeviceLinkGlobalSource` docblock). Null when absent. Pure over a
-	*  pre-read meta map so a multi-link resolve reads the store once. */
-	resolveGlobalSourceDeviceId = (sourceStableId, meta) => {
-		for (const m of Object.values(meta)) if (m.stableId === sourceStableId) return m.id;
-		return null;
+	return dp.testCreationField({
+		type: DeviceType.Camera,
+		key: input.key,
+		value: input.value
+	});
+}
+//#endregion
+//#region src/builtins/device-manager/device-linked-devices.ts
+/** Reserved device-config keys (cf. `_profileMap`). */
+var LINKED_MODE_CONFIG_KEY = "_linkedDevicesMode";
+var LINKED_IDS_CONFIG_KEY = "_linkedDeviceIds";
+/** Parse the two reserved keys out of a device-config blob. Tolerant:
+*  ids may arrive as numbers or numeric strings (the multiselect field
+*  stores string option values); anything else is dropped. */
+function parseLinkedDevicesConfig(blob) {
+	const mode = blob["_linkedDevicesMode"] === "manual" ? "manual" : "auto";
+	const rawIds = blob[LINKED_IDS_CONFIG_KEY];
+	const manualIds = [];
+	if (Array.isArray(rawIds)) for (const v of rawIds) {
+		const n = typeof v === "number" ? v : typeof v === "string" ? Number(v) : NaN;
+		if (Number.isInteger(n) && !manualIds.includes(n)) manualIds.push(n);
+	}
+	return {
+		mode,
+		manualIds
 	};
-	allocateNextDeviceId = async () => {
-		const current = (await this.readStore()).nextDeviceId ?? 1;
-		await this.settings.writeAddonStore({ nextDeviceId: current + 1 });
-		return current;
+}
+/**
+* Pure resolution core: children ∪ (auto → same-location | manual → list),
+* minus self, deduped. Order: children first, then mode additions.
+*/
+function resolveLinkedDeviceIds(params) {
+	const { selfId, selfLocation, config, candidates } = params;
+	const ids = /* @__PURE__ */ new Set();
+	for (const c of candidates) if (c.parentDeviceId === selfId) ids.add(c.id);
+	if (config.mode === "auto") {
+		if (selfLocation !== null && selfLocation.length > 0) {
+			for (const c of candidates) if (c.location === selfLocation) ids.add(c.id);
+		}
+	} else {
+		const known = new Set(candidates.map((c) => c.id));
+		for (const id of config.manualIds) if (known.has(id)) ids.add(id);
+	}
+	ids.delete(selfId);
+	return [...ids];
+}
+/** Cap implementation of `getLinkedDevices`. */
+async function getLinkedDevices(pctx, input) {
+	const { deviceId } = input;
+	const [all, blob] = await Promise.all([listAll(pctx, {}), pctx.settings.readDeviceStore(deviceId)]);
+	const config = parseLinkedDevicesConfig(blob);
+	const byId = new Map(all.map((d) => [d.id, d]));
+	const ids = resolveLinkedDeviceIds({
+		selfId: deviceId,
+		selfLocation: byId.get(deviceId)?.location ?? null,
+		config,
+		candidates: all
+	});
+	const devices = [];
+	for (const id of ids) {
+		const d = byId.get(id);
+		if (!d) continue;
+		devices.push({
+			deviceId: d.id,
+			name: d.name,
+			location: d.location,
+			features: d.features
+		});
+	}
+	return {
+		mode: config.mode,
+		devices
 	};
-	/** Rebuild the `linkTargets` / `linkDependents` reverse-index maps from the
-	*  current persisted meta. Called at boot (once the `devicesWithLinks` seed
-	*  has run) and whenever the link topology can change: `setDeviceLinks`,
-	*  `registerDevice` (a new sibling source may resolve previously-dangling
-	*  links), and `removeDevice` (its entries must be evicted). */
-	rebuildLinkDependents = async () => {
-		if (this.linkHost.devicesWithLinks.size === 0) {
-			this.linkHost.setLinkIndexes(/* @__PURE__ */ new Map(), /* @__PURE__ */ new Map(), /* @__PURE__ */ new Set());
-			return;
+}
+/**
+* "Linked devices" settings section for a CAMERA (null for every other
+* device type — the association is camera-anchored). Contributed through
+* `collectSystemDeviceContributions`; saves route through the existing
+* `writerCapName: 'device-manager'` path into the device config blob.
+*/
+async function buildLinkedDevicesContribution(pctx, deviceId) {
+	const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
+	if (!persisted || persisted.meta.type !== DeviceType.Camera) return null;
+	const [all, blob] = await Promise.all([listAll(pctx, {}), pctx.settings.readDeviceStore(deviceId)]);
+	const config = parseLinkedDevicesConfig(blob);
+	const options = all.filter((d) => d.id !== deviceId).map((d) => ({
+		value: String(d.id),
+		label: d.location !== null ? `${d.name} (${d.location})` : d.name
+	}));
+	return { sections: [{
+		id: "linked-devices",
+		title: "Linked devices",
+		description: "Companion devices associated with this camera. Device-tree children are always linked; auto mode also links every device sharing the camera location, manual mode links the picked list instead.",
+		order: 70,
+		fields: [{
+			type: "select",
+			key: LINKED_MODE_CONFIG_KEY,
+			label: "Link mode",
+			description: "Auto: children + same-location devices. Manual: children + the list below.",
+			options: [{
+				value: "auto",
+				label: "Auto (location-based)"
+			}, {
+				value: "manual",
+				label: "Manual"
+			}],
+			value: config.mode
+		}, {
+			type: "multiselect",
+			key: LINKED_IDS_CONFIG_KEY,
+			label: "Manually linked devices",
+			description: "Used in manual mode (children stay linked regardless).",
+			options,
+			value: config.manualIds.map(String)
+		}]
+	}] };
+}
+/**
+* Direct `applyDeviceSettingsPatch` normalization for the two reserved keys.
+* The admin-ui save path reaches the device config blob via the
+* `writerCapName: 'device-manager'` routing (never this method), but the cap
+* contract includes the method — keep it correct for direct callers.
+*/
+async function applyLinkedDevicesPatch(pctx, deviceId, patch) {
+	const next = { ...await pctx.settings.readDeviceStore(deviceId) };
+	if ("_linkedDevicesMode" in patch) next[LINKED_MODE_CONFIG_KEY] = patch["_linkedDevicesMode"] === "manual" ? "manual" : "auto";
+	if ("_linkedDeviceIds" in patch) next[LINKED_IDS_CONFIG_KEY] = [...parseLinkedDevicesConfig({ [LINKED_IDS_CONFIG_KEY]: patch[LINKED_IDS_CONFIG_KEY] }).manualIds];
+	await pctx.settings.writeDeviceStore(deviceId, next);
+	return { success: true };
+}
+//#endregion
+//#region src/builtins/device-manager/device-link-cycle.ts
+function nodeKey(deviceId, cap) {
+	return `${deviceId}:${cap}`;
+}
+/** The target's container stableId — its parent's (falling back to its own for
+*  a top-level target). Sibling FIELD sources resolve relative to this, the same
+*  rule `rebuildLinkDependents` / `resolveLinkedStatus` apply. */
+function containerStableId(targetRow, rowById) {
+	return targetRow.parentDeviceId !== null ? rowById.get(targetRow.parentDeviceId)?.stableId ?? targetRow.stableId : targetRow.stableId;
+}
+/** Resolve ONE field/global/literal binding to its `(deviceId, cap)` node, or
+*  null when it is a literal or resolves to no known device. */
+function resolveBindingNode(binding, targetRow, rowById, idByStableId) {
+	if (binding.kind === "literal") return null;
+	const wantedStableId = binding.kind === "global" ? binding.sourceStableId : `${containerStableId(targetRow, rowById)}-${binding.sourceKey}`;
+	const srcId = idByStableId.get(wantedStableId);
+	if (srcId === void 0) return null;
+	return nodeKey(srcId, binding.cap);
+}
+/**
+* Resolve a link source to the set of `(deviceId, cap)` nodes it depends on.
+* A literal source depends on nothing; a field/global source depends on exactly
+* one node; an EXPRESSION source depends on one node per resolvable non-literal
+* binding. Unresolvable (dangling) bindings contribute no edge — they cannot
+* loop while dangling; a cycle that only becomes resolvable later is bounded by
+* the resolve-time re-entrancy guard.
+*/
+function resolveSourceNodes(link, targetRow, rowById, idByStableId) {
+	const src = link.source;
+	if (src.kind === "expression") {
+		const nodes = [];
+		for (const binding of Object.values(src.bindings)) {
+			const node = resolveBindingNode(binding, targetRow, rowById, idByStableId);
+			if (node !== null) nodes.push(node);
 		}
-		const allMeta = await this.readMeta();
-		const stableIdById = /* @__PURE__ */ new Map();
-		const idByStableId = /* @__PURE__ */ new Map();
-		for (const m of Object.values(allMeta)) {
-			stableIdById.set(m.id, m.stableId);
-			idByStableId.set(m.stableId, m.id);
+		return nodes;
+	}
+	const node = resolveBindingNode(src, targetRow, rowById, idByStableId);
+	return node !== null ? [node] : [];
+}
+/**
+* Detect whether replacing `editedDeviceId`'s links with `editedLinks` closes
+* a dependency cycle. Returns the cycle as an ordered list of node keys
+* (first node repeated at the end) or null when the set is safe.
+*/
+function findDeviceLinkCycle(allMeta, editedDeviceId, editedLinks) {
+	const rows = Object.values(allMeta);
+	const rowById = /* @__PURE__ */ new Map();
+	const idByStableId = /* @__PURE__ */ new Map();
+	for (const r of rows) {
+		rowById.set(r.id, r);
+		if (!idByStableId.has(r.stableId)) idByStableId.set(r.stableId, r.id);
+	}
+	const dependsOn = /* @__PURE__ */ new Map();
+	const addEdges = (row, links) => {
+		for (const link of links) {
+			const srcNodes = resolveSourceNodes(link, row, rowById, idByStableId);
+			if (srcNodes.length === 0) continue;
+			const tNode = nodeKey(row.id, link.target.cap);
+			const list = dependsOn.get(tNode) ?? [];
+			for (const srcNode of srcNodes) list.push(srcNode);
+			dependsOn.set(tNode, list);
 		}
-		const entries = [];
-		const expectedSources = /* @__PURE__ */ new Set();
-		for (const targetId of this.linkHost.devicesWithLinks) {
-			const targetMeta = Object.values(allMeta).find((m) => m.id === targetId);
-			if (!targetMeta) continue;
-			const container = targetMeta.parentDeviceId !== null ? stableIdById.get(targetMeta.parentDeviceId) ?? stableIdById.get(targetId) : stableIdById.get(targetId);
-			if (container === void 0) continue;
-			for (const link of targetMeta.deviceLinks ?? []) {
-				const src = link.source;
-				if (src.kind === "expression") {
-					const bindingSourceIds = {};
-					for (const [name, b] of Object.entries(src.bindings)) {
-						if (b.kind === "literal") continue;
-						const wanted = b.kind === "global" ? b.sourceStableId : `${container}-${b.sourceKey}`;
-						expectedSources.add(wanted);
-						const bid = idByStableId.get(wanted);
-						if (bid !== void 0) bindingSourceIds[name] = bid;
-					}
-					entries.push({
-						targetDeviceId: targetId,
-						link,
-						sourceDeviceId: -1,
-						bindingSourceIds
-					});
-					continue;
-				}
-				if (src.kind === "literal") {
-					entries.push({
-						targetDeviceId: targetId,
-						link,
-						sourceDeviceId: -1
-					});
-					continue;
-				}
-				const wantedStableId = src.kind === "global" ? src.sourceStableId : `${container}-${src.sourceKey}`;
-				expectedSources.add(wantedStableId);
-				const srcId = idByStableId.get(wantedStableId);
-				if (srcId === void 0) continue;
-				entries.push({
-					targetDeviceId: targetId,
-					link,
-					sourceDeviceId: srcId
-				});
+	};
+	for (const r of rows) {
+		const links = r.id === editedDeviceId ? editedLinks : r.deviceLinks ?? [];
+		if (links.length > 0) addEdges(r, links);
+	}
+	const roots = [...new Set(editedLinks.map((l) => nodeKey(editedDeviceId, l.target.cap)))];
+	for (const root of roots) {
+		const cycle = dfsFindCycle(root, dependsOn);
+		if (cycle) return cycle;
+	}
+	return null;
+}
+/** Iterative DFS from `root` over `dependsOn`; returns the first back-edge
+*  cycle path (closed — first node repeated last) or null. */
+function dfsFindCycle(root, dependsOn) {
+	const onPath = /* @__PURE__ */ new Set();
+	const done = /* @__PURE__ */ new Set();
+	const path = [];
+	const stack = [{
+		node: root,
+		nextChild: 0
+	}];
+	onPath.add(root);
+	path.push(root);
+	while (stack.length > 0) {
+		const frame = stack[stack.length - 1];
+		const children = dependsOn.get(frame.node) ?? [];
+		if (frame.nextChild < children.length) {
+			const child = children[frame.nextChild];
+			frame.nextChild += 1;
+			if (onPath.has(child)) {
+				const start = path.indexOf(child);
+				return [...path.slice(start), child];
 			}
+			if (done.has(child)) continue;
+			stack.push({
+				node: child,
+				nextChild: 0
+			});
+			onPath.add(child);
+			path.push(child);
+			continue;
 		}
-		const { targets, dependents } = buildLinkIndexes(entries);
-		this.linkHost.setLinkIndexes(targets, dependents, expectedSources);
-	};
-};
+		stack.pop();
+		onPath.delete(frame.node);
+		path.pop();
+		done.add(frame.node);
+	}
+	return null;
+}
 //#endregion
-//#region src/builtins/device-manager/device-queries.ts
+//#region src/builtins/device-manager/device-meta-actions.ts
 /**
-* Device query + live-runtime + provider/adoption operations for the
-* device-manager addon — the read/live half of the `IDeviceManagerProvider`
-* surface. Extracted verbatim from the `onInitialize` provider literal as free
-* functions taking a `ProviderContext` (DI). Input/return types are pinned to
-* the cap contract via `Parameters<IDeviceManagerProvider['x']>[0]` /
-* `ReturnType<…>` so the typed surface is identical to the inferred methods.
+* Device meta-mutation + persistence actions for the device-manager addon —
+* the `IDeviceManagerProvider` write/load surface. Extracted verbatim from the
+* `onInitialize` provider literal as free functions taking a `ProviderContext`
+* (DI). Each function's input/return types are pinned to the cap contract via
+* `Parameters<IDeviceManagerProvider['x']>[0]` / `ReturnType<…>` so the typed
+* surface is identical to the inferred object-literal methods.
 *
-* Covers: persisted/live device queries (listPersistedByAddon, listAll,
-* getDevice, getChildren), live runtime methods (getStreamSources,
-* getConfigSchema, getSettingsSchema, updateConfig, enable, disable, remove,
-* removeByIntegration, getStreamProfileMap, setStreamProfileMap, probeStreams),
-* device-provider ops (discoverDevices, adoptDevice, getCreationSchema,
-* createDevice, testCreationField), and device-adoption ops
-* (adoptionListCandidates/Refresh/Adopt/Release/Resync, testField).
+* Covers: id allocation + registration (allocateDeviceId, registerDevice,
+* removeDevice), config persistence (persistConfig, loadConfig), the meta
+* surface load (loadMeta, loadRuntimeState), every meta setter (setName,
+* setLocation, setType, setIntegrationId, setLinkDeviceId,
+* setPrimaryChildEntityId, setChildLayout, setDeviceLinks, setRole, setDisplay,
+* applyInitialMeta, setMetadata, setDisabled), and the location registry
+* (listLocations, addLocation, removeLocation).
 *
-* The hub-live-then-persisted-fallback union, the cross-process device-ops
-* dispatch, the depth-first remove cascade, and the resetToSource resync purge
-* are byte-for-byte preserved. `remove`/`removeByIntegration`/`enable`/`disable`/
-* `probeStreams`/`getStreamProfileMap` self-call sibling cap methods via
-* `pctx.provider`. Pure refactor — no behavior change.
+* EXACT ordering and side effects preserved — notably registerDevice's
+* name-precedence reconcile + field-preservation spreads, the
+* withMetaWriteLock-serialised read-modify-writes, the event emissions, and the
+* link reverse-index rebuild gating. Pure refactor — no behavior change.
 */
-async function listPersistedByAddon(pctx, input) {
-	const { addonId } = input;
-	const [index, meta] = await Promise.all([pctx.metaStore.readIndex(), pctx.metaStore.readMeta()]);
-	const stableIds = index[addonId] ?? [];
-	const byStableId = /* @__PURE__ */ new Map();
-	for (const m of Object.values(meta)) if (m.addonId === addonId) byStableId.set(m.stableId, m);
-	return stableIds.map((stableId) => {
-		const m = byStableId.get(stableId);
+/**
+* Stamp (or update) the owning integration id on a device's meta row + emit
+* `DeviceMetaChanged`. The device-manager chokepoint shared by the
+* `setIntegrationId` cap handler AND the create/adopt forwarders (queries)
+* that stamp an integration's ownership onto every device it materializes.
+* Idempotent. Takes its low-level deps directly (not the full `ProviderContext`)
+* because `ProviderContext.stampIntegrationId` delegates HERE — passing the
+* context would be a capture cycle.
+*/
+async function stampIntegrationId(metaStore, settings, ctx, deviceId, integrationId) {
+	await metaStore.withMetaWriteLock(async () => {
+		const persisted = await metaStore.resolvePersistedById(deviceId);
+		if (!persisted) throw new Error(`[device-manager] stampIntegrationId: unknown device id=${deviceId}`);
+		const { meta: m } = persisted;
+		const key = String(deviceId);
+		const allMeta = await metaStore.readMeta();
+		await settings.writeAddonStore({ deviceMeta: {
+			...allMeta,
+			[key]: {
+				...m,
+				integrationId
+			}
+		} });
+	});
+	ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: deviceId
+		},
+		category: EventCategory.DeviceMetaChanged,
+		data: {
+			deviceId,
+			field: "integrationId",
+			value: integrationId
+		}
+	});
+}
+async function allocateDeviceId(pctx, input) {
+	const { addonId, stableId } = input;
+	return await pctx.metaStore.withMetaWriteLock(async () => {
+		const meta = await pctx.metaStore.readMeta();
+		const existing = Object.values(meta).find((m) => m.addonId === addonId && m.stableId === stableId);
+		if (existing) return { id: existing.id };
+		const id = await pctx.metaStore.allocateNextDeviceId();
+		await pctx.settings.writeAddonStore({ deviceMeta: {
+			...meta,
+			[String(id)]: {
+				addonId,
+				stableId,
+				type: "generic",
+				name: stableId,
+				location: null,
+				disabled: false,
+				parentDeviceId: null,
+				id
+			}
+		} });
+		return { id };
+	});
+}
+async function registerDevice(pctx, input) {
+	const { addonId, stableId, id, type, name, parentDeviceId, features, config } = input;
+	const key = String(id);
+	const featuresArr = Array.isArray(features) ? [...features] : [];
+	const { isFirstRegistration, exportFingerprint, fingerprintChanged } = await pctx.metaStore.withMetaWriteLock(async () => {
+		const index = await pctx.metaStore.readIndex();
+		const existing = index[addonId] ?? [];
+		const wasInIndex = existing.includes(stableId);
+		if (!wasInIndex) await pctx.settings.writeAddonStore({ deviceIndex: {
+			...index,
+			[addonId]: [...existing, stableId]
+		} });
+		const meta = await pctx.metaStore.readMeta();
+		const existingMeta = meta[key];
+		const wasUserNamed = existingMeta?.userNamed ?? (existingMeta !== void 0 && existingMeta.name !== stableId);
+		const resolvedName = wasUserNamed && existingMeta !== void 0 ? existingMeta.name : name;
+		const isFirst = !existingMeta || !wasInIndex;
+		const fingerprint = canonicalDeviceFingerprint({
+			deviceId: id,
+			deviceType: type,
+			features: featuresArr
+		});
+		await pctx.settings.writeAddonStore({ deviceMeta: {
+			...meta,
+			[key]: {
+				addonId,
+				stableId,
+				type,
+				name: resolvedName,
+				userNamed: wasUserNamed,
+				location: existingMeta?.location ?? null,
+				disabled: existingMeta?.disabled ?? false,
+				...existingMeta?.integrationId !== void 0 ? { integrationId: existingMeta.integrationId } : {},
+				...existingMeta?.linkDeviceId !== void 0 ? { linkDeviceId: existingMeta.linkDeviceId } : {},
+				...existingMeta?.primaryChildEntityId !== void 0 ? { primaryChildEntityId: existingMeta.primaryChildEntityId } : {},
+				...existingMeta?.childLayout !== void 0 ? { childLayout: existingMeta.childLayout } : {},
+				...existingMeta?.deviceLinks !== void 0 ? { deviceLinks: existingMeta.deviceLinks } : {},
+				...existingMeta?.role !== void 0 ? { role: existingMeta.role } : {},
+				...existingMeta?.display !== void 0 ? { display: existingMeta.display } : {},
+				parentDeviceId,
+				id,
+				features: featuresArr,
+				exportFingerprint: fingerprint
+			}
+		} });
 		return {
-			id: m.id,
-			stableId,
-			type: m.type,
-			name: m.name,
-			location: m.location ?? null,
-			disabled: m.disabled ?? false,
-			parentDeviceId: m.parentDeviceId
+			isFirstRegistration: isFirst,
+			exportFingerprint: fingerprint,
+			fingerprintChanged: existingMeta?.exportFingerprint !== fingerprint
 		};
 	});
+	if (Object.keys(config).length > 0) await pctx.settings.writeDeviceStore(id, config);
+	pctx.metaStore.idToAddonId.set(id, addonId);
+	if (isFirstRegistration) pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id
+		},
+		category: EventCategory.DeviceRegistered,
+		data: {
+			deviceId: id,
+			name: name.length > 0 ? name : stableId,
+			providerId: addonId,
+			parentDeviceId: parentDeviceId ?? null
+		}
+	});
+	else pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id
+		},
+		category: EventCategory.DeviceMetaChanged,
+		data: {
+			deviceId: id,
+			name: name.length > 0 ? name : stableId,
+			providerId: addonId,
+			parentDeviceId: parentDeviceId ?? null,
+			features: featuresArr
+		}
+	});
+	if (isFirstRegistration || fingerprintChanged) pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id
+		},
+		category: EventCategory.DeviceProvisioned,
+		data: {
+			deviceId: id,
+			fingerprint: exportFingerprint,
+			generation: Date.now()
+		}
+	});
+	if (pctx.host.devicesWithLinks.size > 0 && pctx.host.expectedSourceStableIds.has(stableId)) await pctx.metaStore.rebuildLinkDependents();
 }
-async function listAll(pctx, input) {
-	const { addonId } = input;
-	const results = [];
-	const seen = /* @__PURE__ */ new Set();
-	const meta = await pctx.metaStore.readMeta();
-	const metadataMap = await pctx.metaStore.readMetadataMap();
-	if (pctx.registry) {
-		const liveEntries = addonId ? pctx.registry.getAllForAddon(addonId).map((device) => ({
-			addonId,
-			device
-		})) : pctx.registry.getAllWithAddonId();
-		for (const { addonId: aid, device } of liveEntries) {
-			const key = String(device.id);
-			const metadata = metadataMap[key] ?? null;
-			const metaRow = meta[key] ?? null;
-			results.push(toDeviceInfo(aid, device, metadata, metaRow));
-			seen.add(key);
+async function removeDevice(pctx, input) {
+	const { deviceId } = input;
+	const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
+	if (!persisted) return;
+	const { addonId, stableId, meta: persistedMeta } = persisted;
+	const key = String(deviceId);
+	const deviceName = persistedMeta.name;
+	await pctx.metaStore.withMetaWriteLock(async () => {
+		const index = await pctx.metaStore.readIndex();
+		const remaining = (index[addonId] ?? []).filter((sid) => sid !== stableId);
+		const updatedIndex = remaining.length > 0 ? {
+			...index,
+			[addonId]: remaining
+		} : (() => {
+			const { [addonId]: _removed, ...rest } = index;
+			return rest;
+		})();
+		await pctx.settings.writeAddonStore({ deviceIndex: updatedIndex });
+		const { [key]: _removedMeta, ...restMeta } = await pctx.metaStore.readMeta();
+		await pctx.settings.writeAddonStore({ deviceMeta: restMeta });
+		const map = await pctx.metaStore.readMetadataMap();
+		if (key in map) {
+			const { [key]: _removedMetadata, ...restMap } = map;
+			await pctx.settings.writeAddonStore({ deviceMetadata: restMap });
 		}
+	});
+	await pctx.settings.clearDeviceStore(deviceId);
+	await pctx.settings.clearDeviceRuntimeState(deviceId);
+	const bindingsStore = await readBindingsStore(pctx.bindingsDeps);
+	const bindingKey = String(deviceId);
+	if (bindingsStore.deviceBindings[bindingKey]) {
+		const { [bindingKey]: _removedBindings, ...restBindings } = bindingsStore.deviceBindings;
+		await writeBindingsStore(pctx.bindingsDeps, { deviceBindings: restBindings });
 	}
-	const index = await pctx.metaStore.readIndex();
-	const metaByAddonStable = /* @__PURE__ */ new Map();
-	for (const m of Object.values(meta)) metaByAddonStable.set(`${m.addonId}${m.stableId}`, m);
-	const targetAddons = addonId ? [addonId] : Object.keys(index);
-	for (const aid of targetAddons) for (const stableId of index[aid] ?? []) {
-		const m = metaByAddonStable.get(`${aid}${stableId}`);
-		const key = String(m.id);
-		if (seen.has(key)) continue;
-		const persistedType = m.type;
-		const persistedConfig = await pctx.settings.readDeviceStore(m.id);
-		const metadata = metadataMap[key] ?? null;
-		results.push({
-			id: m.id,
-			stableId,
-			addonId: aid,
-			type: persistedType,
-			name: m?.name ?? stableId,
-			location: m?.location ?? null,
-			disabled: m?.disabled ?? false,
-			parentDeviceId: m?.parentDeviceId ?? null,
-			role: toDeviceRole(m?.role),
-			online: pctx.host.resolveDeviceOnline(m.id, pctx.registry !== null),
-			probed: pctx.host.resolveDeviceProbed(m.id),
-			features: persistedFeatures(m?.features),
-			isCamera: persistedType === DeviceType.Camera,
-			config: persistedConfig ?? {},
-			metadata,
-			...m?.integrationId !== void 0 ? { integrationId: m.integrationId } : {},
-			...m?.linkDeviceId !== void 0 ? { linkDeviceId: m.linkDeviceId } : {},
-			...m?.primaryChildEntityId !== void 0 ? { primaryChildEntityId: m.primaryChildEntityId } : {},
-			...m?.childLayout !== void 0 ? { childLayout: m.childLayout } : {},
-			...m?.deviceLinks !== void 0 ? { deviceLinks: m.deviceLinks } : {},
-			...m?.display !== void 0 ? { display: m.display } : {},
-			...(() => {
-				const si = buildSourceInfoFromConfig(persistedConfig ?? {}, stableId, aid);
-				return si !== void 0 ? { sourceInfo: si } : {};
-			})()
-		});
-	}
-	return results;
+	pctx.host.remoteNativeCaps.delete(deviceId);
+	pctx.host.capabilityRegistry?.unregisterAllNativeForDevice(deviceId);
+	pctx.metaStore.idToAddonId.delete(deviceId);
+	pctx.host.devicesWithLinks.delete(deviceId);
+	pctx.host.dropDeviceOverlays(deviceId);
+	await pctx.metaStore.rebuildLinkDependents();
+	pctx.host.ctx.logger.info("removed device", { tags: {
+		deviceId,
+		deviceName: deviceName.length > 0 ? deviceName : stableId
+	} });
+	pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: deviceId
+		},
+		category: EventCategory.DeviceUnregistered,
+		data: {
+			deviceId,
+			providerId: addonId,
+			parentDeviceId: persistedMeta.parentDeviceId ?? null
+		}
+	});
 }
-async function getDevice(pctx, input) {
+async function persistConfig(pctx, input) {
+	const { deviceId, data } = input;
+	if (!await pctx.metaStore.resolvePersistedById(deviceId)) throw new Error(`[device-manager] persistConfig: unknown device id=${deviceId}`);
+	await pctx.settings.writeDeviceStore(deviceId, data);
+}
+async function loadConfig(pctx, input) {
+	const { deviceId } = input;
+	if (!await pctx.metaStore.resolvePersistedById(deviceId)) return {};
+	return pctx.settings.readDeviceStore(deviceId);
+}
+/**
+* Load the operator-organisational meta surface for one device
+* (`name` / `location` / `disabled` / `type` / `parentDeviceId`
+* / `addonId` + `id` / `stableId`). Used by the kernel proxy's
+* device-context factory to populate `ctx.deviceMeta` before
+* the device class constructor runs. Returns `null` when no
+* persisted row exists for the id.
+*
+* Reads default `location` to `null` and `disabled` to `false`
+* for legacy rows that predate the field — production code
+* relies on the IDevice type contract that both are present.
+*/
+async function loadMeta(pctx, input) {
 	const { deviceId } = input;
-	if (pctx.registry) {
-		const found = resolveDeviceById(pctx.registry, deviceId);
-		if (found) {
-			const key = String(found.device.id);
-			const [map, metaMap] = await Promise.all([pctx.metaStore.readMetadataMap(), pctx.metaStore.readMeta()]);
-			const metadata = map[key] ?? null;
-			const metaRow = metaMap[key] ?? null;
-			return toDeviceInfo(found.addonId, found.device, metadata, metaRow);
-		}
-	}
 	const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
 	if (!persisted) return null;
-	const { addonId: aid, stableId, meta: m } = persisted;
-	const persistedConfig = await pctx.settings.readDeviceStore(m.id);
+	const { addonId, stableId, meta: m } = persisted;
 	const key = String(deviceId);
 	const metadata = (await pctx.metaStore.readMetadataMap())[key] ?? null;
-	const sourceInfoGetDevice = buildSourceInfoFromConfig(persistedConfig ?? {}, stableId, aid);
 	return {
-		id: deviceId,
+		id: m.id,
 		stableId,
-		addonId: aid,
+		addonId,
 		type: m.type,
 		name: m.name,
 		location: m.location ?? null,
 		disabled: m.disabled ?? false,
 		parentDeviceId: m.parentDeviceId,
-		role: toDeviceRole(m.role),
-		online: pctx.host.resolveDeviceOnline(deviceId, true),
-		probed: pctx.host.resolveDeviceProbed(deviceId),
-		features: persistedFeatures(m.features),
-		isCamera: false,
-		config: persistedConfig ?? {},
 		metadata,
 		...m.integrationId !== void 0 ? { integrationId: m.integrationId } : {},
 		...m.linkDeviceId !== void 0 ? { linkDeviceId: m.linkDeviceId } : {},
-		...m.primaryChildEntityId !== void 0 ? { primaryChildEntityId: m.primaryChildEntityId } : {},
-		...m.childLayout !== void 0 ? { childLayout: m.childLayout } : {},
-		...m.deviceLinks !== void 0 ? { deviceLinks: m.deviceLinks } : {},
-		...m.display !== void 0 ? { display: m.display } : {},
-		...sourceInfoGetDevice !== void 0 ? { sourceInfo: sourceInfoGetDevice } : {}
+		...m.role !== void 0 ? { role: m.role } : {}
 	};
 }
-async function getChildren(pctx, input) {
-	const { parentDeviceId } = input;
-	let ownerAddonId = null;
-	if (pctx.registry) {
-		if (pctx.registry.getById(parentDeviceId)) ownerAddonId = pctx.registry.getAddonId(parentDeviceId);
-	}
-	if (!ownerAddonId) {
-		const persisted = await pctx.metaStore.resolvePersistedById(parentDeviceId);
-		if (!persisted) return [];
-		ownerAddonId = persisted.addonId;
-	}
-	const results = [];
-	const seen = /* @__PURE__ */ new Set();
-	const [index, meta, metadataMap] = await Promise.all([
-		pctx.metaStore.readIndex(),
-		pctx.metaStore.readMeta(),
-		pctx.metaStore.readMetadataMap()
-	]);
-	if (pctx.registry) {
-		const liveChildren = pctx.registry.getChildren(parentDeviceId);
-		for (const device of liveChildren) {
-			const key = String(device.id);
-			const metadata = metadataMap[key] ?? null;
-			const metaRow = meta[key] ?? null;
-			results.push(toDeviceInfo(ownerAddonId, device, metadata, metaRow));
-			seen.add(key);
+/**
+* Update the operator-edited display name. Writes the meta
+* row, emits a `DeviceMetaChanged` event so live consumers
+* (UI device list, alert center) see the rename without
+* polling. The live `IDevice.name` mirror is updated by the
+* kernel proxy on its side (`device-cap-proxy.ts`).
+*/
+async function setName(pctx, input) {
+	const { deviceId, name } = input;
+	const cascaded = [];
+	await pctx.metaStore.withMetaWriteLock(async () => {
+		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
+		if (!persisted) throw new Error(`[device-manager] setName: unknown device id=${deviceId}`);
+		const { meta: m } = persisted;
+		const key = String(deviceId);
+		const oldName = m.name;
+		const allMeta = await pctx.metaStore.readMeta();
+		const nextMeta = {
+			...allMeta,
+			[key]: {
+				...m,
+				name,
+				userNamed: true
+			}
+		};
+		if (oldName.length > 0 && oldName !== name) for (const [childKey, childMeta] of Object.entries(allMeta)) {
+			if (childKey === key) continue;
+			if (!(childMeta.parentDeviceId === deviceId || childMeta.linkDeviceId === deviceId)) continue;
+			if (childMeta.name !== oldName && !childMeta.name.startsWith(`${oldName} `)) continue;
+			const childName = childMeta.name === oldName ? name : `${name}${childMeta.name.slice(oldName.length)}`;
+			nextMeta[childKey] = {
+				...childMeta,
+				name: childName
+			};
+			cascaded.push({
+				id: Number(childKey),
+				name: childName
+			});
 		}
-	}
-	const ownerMetaByStableId = /* @__PURE__ */ new Map();
-	for (const m of Object.values(meta)) if (m.addonId === ownerAddonId) ownerMetaByStableId.set(m.stableId, m);
-	const persistedChildren = (index[ownerAddonId] ?? []).filter((sid) => ownerMetaByStableId.get(sid)?.parentDeviceId === parentDeviceId);
-	for (const childStableId of persistedChildren) {
-		const m = ownerMetaByStableId.get(childStableId);
-		const key = String(m.id);
-		if (seen.has(key)) continue;
-		const persistedConfig = await pctx.settings.readDeviceStore(m.id);
-		const metadata = metadataMap[key] ?? null;
-		const sourceInfoChild = buildSourceInfoFromConfig(persistedConfig ?? {}, childStableId, ownerAddonId);
-		results.push({
-			id: m.id,
-			stableId: childStableId,
-			addonId: ownerAddonId,
-			type: m.type,
-			name: m.name,
-			location: m.location ?? null,
-			disabled: m.disabled ?? false,
-			parentDeviceId,
-			role: toDeviceRole(m.role),
-			online: pctx.host.resolveDeviceOnline(m.id, pctx.registry !== null),
-			probed: pctx.host.resolveDeviceProbed(m.id),
-			features: persistedFeatures(m.features),
-			isCamera: false,
-			config: persistedConfig ?? {},
-			metadata,
-			...m.integrationId !== void 0 ? { integrationId: m.integrationId } : {},
-			...m.linkDeviceId !== void 0 ? { linkDeviceId: m.linkDeviceId } : {},
-			...m.primaryChildEntityId !== void 0 ? { primaryChildEntityId: m.primaryChildEntityId } : {},
-			...m.childLayout !== void 0 ? { childLayout: m.childLayout } : {},
-			...m.deviceLinks !== void 0 ? { deviceLinks: m.deviceLinks } : {},
-			...m.display !== void 0 ? { display: m.display } : {},
-			...sourceInfoChild !== void 0 ? { sourceInfo: sourceInfoChild } : {}
-		});
-	}
-	return results;
+		await pctx.settings.writeAddonStore({ deviceMeta: nextMeta });
+	});
+	pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: deviceId
+		},
+		category: EventCategory.DeviceMetaChanged,
+		data: {
+			deviceId,
+			field: "name",
+			value: name
+		}
+	});
+	for (const child of cascaded) pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: child.id
+		},
+		category: EventCategory.DeviceMetaChanged,
+		data: {
+			deviceId: child.id,
+			field: "name",
+			value: child.name
+		}
+	});
 }
-async function getStreamSources(pctx, input) {
-	const { deviceId } = input;
-	if (pctx.registry) {
-		const found = resolveDeviceById(pctx.registry, deviceId);
-		if (found) {
-			if (!isCameraDevice(found.device)) return [];
-			return (await found.device.getStreamSources()).map((s) => ({
-				id: s.id,
-				label: s.label,
-				protocol: s.protocol,
-				url: s.url,
-				resolution: s.resolution,
-				fps: s.fps,
-				bitrate: s.bitrate,
-				codec: s.codec,
-				profileHint: s.profileHint
-			}));
+/**
+* Update the operator-organisational location label. `null`
+* clears it. Mirrors the same persist-then-emit shape as
+* `setName`; consumers subscribe to `DeviceMetaChanged` and
+* filter on `field: 'location'`.
+*/
+async function setLocation(pctx, input) {
+	const { deviceId, location } = input;
+	await pctx.metaStore.withMetaWriteLock(async () => {
+		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
+		if (!persisted) throw new Error(`[device-manager] setLocation: unknown device id=${deviceId}`);
+		const { meta: m } = persisted;
+		const key = String(deviceId);
+		const allMeta = await pctx.metaStore.readMeta();
+		await pctx.settings.writeAddonStore({ deviceMeta: {
+			...allMeta,
+			[key]: {
+				...m,
+				location
+			}
+		} });
+	});
+	pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: deviceId
+		},
+		category: EventCategory.DeviceMetaChanged,
+		data: {
+			deviceId,
+			field: "location",
+			value: location
 		}
-	}
-	if (!await pctx.metaStore.resolvePersistedById(deviceId)) throw new Error(`[device-manager] Device with id ${deviceId} not found`);
-	return (await pctx.requireDeviceOps(deviceId).getStreamSources({ deviceId })).map((s) => ({ ...s }));
+	});
 }
-async function getConfigSchema(pctx, input) {
-	const { deviceId } = input;
-	if (pctx.registry) {
-		const found = resolveDeviceById(pctx.registry, deviceId);
-		if (found) return found.device.config.entries().map((entry) => ({
-			key: entry.key,
-			value: entry.value,
-			...entry.description !== void 0 ? { description: entry.description } : {}
-		}));
-	}
-	if (!await pctx.metaStore.resolvePersistedById(deviceId)) throw new Error(`[device-manager] Device with id ${deviceId} not found`);
-	return (await pctx.requireDeviceOps(deviceId).getConfigEntries({ deviceId })).map((e) => ({ ...e }));
+/**
+* Update the device type. Writes the meta row, emits a
+* `DeviceMetaChanged` event. Used by the kernel to apply
+* `initialMeta.type` before device construction so the device
+* constructs with its real type instead of the `allocateDeviceId`
+* placeholder `'generic'`.
+*/
+async function setType(pctx, input) {
+	const { deviceId, type } = input;
+	await pctx.metaStore.withMetaWriteLock(async () => {
+		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
+		if (!persisted) throw new Error(`[device-manager] setType: unknown device id=${deviceId}`);
+		const { meta: m } = persisted;
+		const key = String(deviceId);
+		const allMeta = await pctx.metaStore.readMeta();
+		await pctx.settings.writeAddonStore({ deviceMeta: {
+			...allMeta,
+			[key]: {
+				...m,
+				type
+			}
+		} });
+	});
+	pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: deviceId
+		},
+		category: EventCategory.DeviceMetaChanged,
+		data: {
+			deviceId,
+			field: "type",
+			value: type
+		}
+	});
 }
-async function getSettingsSchema(pctx, input) {
-	const { deviceId } = input;
-	if (pctx.registry) {
-		const found = resolveDeviceById(pctx.registry, deviceId);
-		if (found) return found.device.getSettingsUISchema();
-	}
-	if (!await pctx.metaStore.resolvePersistedById(deviceId)) return null;
-	return await pctx.requireDeviceOps(deviceId).getSettingsSchema({ deviceId }) ?? null;
+/**
+* Stamp (or update) the owning integration id on the device's
+* meta row. Called by the kernel's `create()` pre-seed path
+* when `initialMeta.integrationId` is set (analogous to
+* `setName` / `setType`). Idempotent.
+*/
+async function setIntegrationId(pctx, input) {
+	await pctx.stampIntegrationId(input.deviceId, input.integrationId);
 }
-async function updateConfig(pctx, input) {
-	const { deviceId } = input;
-	if (pctx.registry) {
-		const found = resolveDeviceById(pctx.registry, deviceId);
-		if (found) {
-			await found.device.config.setAll(input.values);
-			return { success: true };
+/**
+* Stamp (or update) the linked device id on the device's meta
+* row. Called by the kernel's `create()` pre-seed path when
+* `initialMeta.linkDeviceId` is set (analogous to `setIntegrationId`).
+* Idempotent. `null` explicitly clears a previous link.
+*/
+async function setLinkDeviceId(pctx, input) {
+	const { deviceId, linkDeviceId } = input;
+	await pctx.metaStore.withMetaWriteLock(async () => {
+		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
+		if (!persisted) throw new Error(`[device-manager] setLinkDeviceId: unknown device id=${deviceId}`);
+		const { meta: m } = persisted;
+		const key = String(deviceId);
+		const allMeta = await pctx.metaStore.readMeta();
+		await pctx.settings.writeAddonStore({ deviceMeta: {
+			...allMeta,
+			[key]: {
+				...m,
+				linkDeviceId
+			}
+		} });
+	});
+	pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: deviceId
+		},
+		category: EventCategory.DeviceMetaChanged,
+		data: {
+			deviceId,
+			field: "linkDeviceId",
+			value: linkDeviceId
 		}
-	}
-	if (!await pctx.metaStore.resolvePersistedById(deviceId)) throw new Error(`[device-manager] Device with id ${deviceId} not found`);
-	await pctx.requireDeviceOps(deviceId).setConfig({
-		deviceId,
-		values: input.values
 	});
-	return { success: true };
 }
-async function enable(pctx, input) {
-	await pctx.provider.setDisabled({
-		deviceId: input.deviceId,
-		disabled: false
+/**
+* Set (or clear) the durable primary-child override on a CONTAINER
+* device's meta row, keyed on the chosen child's re-sync/rename-stable
+* `entityId`. Mirrors `setLinkDeviceId` but persists a string entityId
+* (survives a re-sync that reallocates the child's numeric id) instead
+* of the numeric child id. `null` clears the override → priority default.
+*/
+async function setPrimaryChildEntityId(pctx, input) {
+	const { deviceId, primaryChildEntityId } = input;
+	await pctx.metaStore.withMetaWriteLock(async () => {
+		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
+		if (!persisted) throw new Error(`[device-manager] setPrimaryChildEntityId: unknown device id=${deviceId}`);
+		const { meta: m } = persisted;
+		const key = String(deviceId);
+		const allMeta = await pctx.metaStore.readMeta();
+		await pctx.settings.writeAddonStore({ deviceMeta: {
+			...allMeta,
+			[key]: {
+				...m,
+				primaryChildEntityId
+			}
+		} });
+	});
+	pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: deviceId
+		},
+		category: EventCategory.DeviceMetaChanged,
+		data: {
+			deviceId,
+			field: "primaryChildEntityId",
+			value: primaryChildEntityId
+		}
 	});
-	return { success: true };
 }
-async function disable(pctx, input) {
-	await pctx.provider.setDisabled({
-		deviceId: input.deviceId,
-		disabled: true
+/**
+* Set (or replace) the container-level `childLayout` on a device's
+* meta row. Mirrors `setPrimaryChildEntityId` but persists the
+* accordion-section layout array (parent-only). Persisted, projected,
+* and preserved across re-register/restore.
+*/
+async function setChildLayout(pctx, input) {
+	const { deviceId, childLayout } = input;
+	await pctx.metaStore.withMetaWriteLock(async () => {
+		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
+		if (!persisted) throw new Error(`[device-manager] setChildLayout: unknown device id=${deviceId}`);
+		const { meta: m } = persisted;
+		const key = String(deviceId);
+		const allMeta = await pctx.metaStore.readMeta();
+		await pctx.settings.writeAddonStore({ deviceMeta: {
+			...allMeta,
+			[key]: {
+				...m,
+				childLayout
+			}
+		} });
+	});
+	pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: deviceId
+		},
+		category: EventCategory.DeviceMetaChanged,
+		data: {
+			deviceId,
+			field: "childLayout",
+			value: childLayout
+		}
+	});
+}
+/**
+* Set (or replace) the operator-authored cross-device field wirings on
+* a device's meta row. Mirrors `setChildLayout` but persists the
+* `deviceLinks` array. Persisted, projected, and preserved across
+* re-register/restore. Also maintains the in-memory `devicesWithLinks`
+* Set used as an O(1) gate by `resolveLinkedStatus`.
+*/
+async function setDeviceLinks(pctx, input) {
+	const { deviceId, deviceLinks } = input;
+	const cycle = findDeviceLinkCycle(await pctx.metaStore.readMeta(), deviceId, deviceLinks);
+	if (cycle) throw new Error(`[device-manager] setDeviceLinks: cross-device link cycle: ${cycle.join(" → ")}`);
+	for (const link of deviceLinks) {
+		if (link.source.kind !== "expression") continue;
+		const err = validateExpressionSource(link.source);
+		if (err) throw new Error(`[device-manager] setDeviceLinks: invalid expression on link '${link.id}': ${err}`);
+	}
+	await pctx.metaStore.withMetaWriteLock(async () => {
+		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
+		if (!persisted) throw new Error(`[device-manager] setDeviceLinks: unknown device id=${deviceId}`);
+		const { meta: m } = persisted;
+		const key = String(deviceId);
+		const allMeta = await pctx.metaStore.readMeta();
+		await pctx.settings.writeAddonStore({ deviceMeta: {
+			...allMeta,
+			[key]: {
+				...m,
+				deviceLinks
+			}
+		} });
+	});
+	if (deviceLinks.length > 0) pctx.host.devicesWithLinks.add(deviceId);
+	else pctx.host.devicesWithLinks.delete(deviceId);
+	await pctx.metaStore.rebuildLinkDependents();
+	pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: deviceId
+		},
+		category: EventCategory.DeviceMetaChanged,
+		data: {
+			deviceId,
+			field: "deviceLinks",
+			value: deviceLinks
+		}
 	});
-	return { success: true };
 }
-async function remove(pctx, input) {
-	const { deviceId } = input;
-	const removeOne = async (id) => {
-		if (pctx.registry) {
-			const live = resolveDeviceById(pctx.registry, id);
-			if (live) {
-				const deviceName = live.device.name;
-				await live.device.removeDevice();
-				pctx.registry.remove(id);
-				await pctx.provider.removeDevice({ deviceId: id });
-				pctx.host.ctx.logger.info("removed hub-local device", { tags: {
-					deviceId: id,
-					deviceName
-				} });
-				return;
+/**
+* Stamp (or update) the semantic role on the device's meta row.
+* Called by the kernel's `create()` / `spawnAccessoryChild`
+* pre-seed when `initialMeta.role` is set (analogous to
+* `setIntegrationId`). Idempotent. `null` clears a previous role.
+*/
+async function setRole(pctx, input) {
+	const { deviceId, role } = input;
+	await pctx.metaStore.withMetaWriteLock(async () => {
+		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
+		if (!persisted) throw new Error(`[device-manager] setRole: unknown device id=${deviceId}`);
+		const { meta: m } = persisted;
+		const key = String(deviceId);
+		const allMeta = await pctx.metaStore.readMeta();
+		await pctx.settings.writeAddonStore({ deviceMeta: {
+			...allMeta,
+			[key]: {
+				...m,
+				role
 			}
+		} });
+	});
+	pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: deviceId
+		},
+		category: EventCategory.DeviceMetaChanged,
+		data: {
+			deviceId,
+			field: "role",
+			value: role
 		}
-		const persisted = await pctx.metaStore.resolvePersistedById(id);
-		if (!persisted) return;
-		const { meta: persistedMeta } = persisted;
-		try {
-			await pctx.requireDeviceOps(id).removeDevice({ deviceId: id });
-		} catch (err) {
-			pctx.host.ctx.logger.warn("remove via device-ops failed — clearing persistence anyway", {
-				tags: {
-					deviceId: id,
-					deviceName: persistedMeta.name
-				},
-				meta: { error: errMsg(err) }
-			});
-		}
-		await pctx.provider.removeDevice({ deviceId: id });
-	};
-	const removeCascade = async (id) => {
-		for (const childId of await pctx.metaStore.directChildIds(id)) await removeCascade(childId);
-		await removeOne(id);
+	});
+}
+/**
+* Normalize an operator-authored display override at write time so the render
+* path's `UNIT_TABLE` lookups always hit canonical spellings — maps `unit` and
+* every `perCap[*].unit` through `normalizeUnit`. Pure: rebuilds new objects,
+* never mutates the input. A unit `normalizeUnit` cannot canonicalize is left
+* as-is (the render path refuses conversion for unknown spellings).
+*/
+function normalizeDisplayOverride(display) {
+	return {
+		...display,
+		...display.unit !== void 0 ? { unit: normalizeUnit(display.unit) ?? display.unit } : {},
+		...display.perCap !== void 0 ? { perCap: Object.fromEntries(Object.entries(display.perCap).map(([cap, refine]) => [cap, refine.unit !== void 0 ? {
+			...refine,
+			unit: normalizeUnit(refine.unit) ?? refine.unit
+		} : refine])) } : {}
 	};
-	await removeCascade(deviceId);
-	return { success: true };
 }
 /**
-* Cascade-delete every top-level device whose `integrationId`
-* matches. Enumerates a SNAPSHOT of the meta map so concurrent
-* removals don't clobber each other. Only top-level parents are
-* enumerated — children cascade via the per-parent `removeCascade`
-* inside the delegated `remove` call. Idempotent: devices with no
-* `integrationId` never match.
+* Set (or clear) the per-device display override on a device's meta row.
+* Mirrors `setChildLayout` persistence; `null` REMOVES the `display` key
+* entirely (immutable rest-destructure — matches the "absent ⇒ no override"
+* projection contract, never persists `display: undefined`). Override units are
+* normalized at write so the render path always looks up canonical spellings.
 */
-async function removeByIntegration(pctx, input) {
-	const { integrationId } = input;
-	const meta = await pctx.metaStore.readMeta();
-	const parentKeys = Object.keys(meta).filter((key) => {
-		const m = meta[key];
-		return m !== void 0 && m.integrationId === integrationId && m.parentDeviceId === null;
+async function setDisplay(pctx, input) {
+	const { deviceId, display } = input;
+	const normalized = display === null ? null : normalizeDisplayOverride(display);
+	await pctx.metaStore.withMetaWriteLock(async () => {
+		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
+		if (!persisted) throw new Error(`[device-manager] setDisplay: unknown device id=${deviceId}`);
+		const { meta: m } = persisted;
+		const key = String(deviceId);
+		const allMeta = await pctx.metaStore.readMeta();
+		const nextRow = normalized === null ? (({ display: _drop, ...rest }) => rest)(m) : {
+			...m,
+			display: normalized
+		};
+		await pctx.settings.writeAddonStore({ deviceMeta: {
+			...allMeta,
+			[key]: nextRow
+		} });
 	});
-	let removed = 0;
-	for (const _key of parentKeys) {
-		const m = meta[_key];
-		if (!m) continue;
-		await pctx.provider.remove({ deviceId: m.id });
-		removed++;
-	}
-	return { removed };
-}
-async function getStreamProfileMap(pctx, input) {
-	if (!pctx.registry) return {};
-	const found = resolveDeviceById(pctx.registry, input.deviceId);
-	if (!found) return {};
-	const storedMap = found.device.config.entries().find((e) => e.key === "_profileMap")?.value;
-	if (storedMap !== void 0 && typeof storedMap === "object" && storedMap !== null) return storedMap;
-	if (!isCameraDevice(found.device)) return {};
-	const sources = await found.device.getStreamSources();
-	const profileMap = {};
-	for (const s of sources) if (s.profileHint && s.id) profileMap[s.profileHint] = s.id;
-	return profileMap;
-}
-async function setStreamProfileMap(pctx, input) {
-	const { deviceId } = input;
-	if (pctx.registry) {
-		const found = resolveDeviceById(pctx.registry, deviceId);
-		if (found) {
-			await found.device.config.setAll({ _profileMap: input.profileMap });
-			return { success: true };
+	pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: deviceId
+		},
+		category: EventCategory.DeviceMetaChanged,
+		data: {
+			deviceId,
+			field: "display",
+			value: normalized
 		}
-	}
-	if (!await pctx.metaStore.resolvePersistedById(deviceId)) throw new Error(`[device-manager] Device with id ${deviceId} not found`);
-	await pctx.requireDeviceOps(deviceId).setConfig({
-		deviceId,
-		values: { _profileMap: input.profileMap }
 	});
-	return { success: true };
-}
-async function probeStreams(pctx, input) {
-	const streamProbe = pctx.host.ctx.kernel.streamProbe;
-	if (!streamProbe) return [];
-	const sources = await pctx.provider.getStreamSources({ deviceId: input.deviceId });
-	const results = [];
-	for (const s of sources) {
-		if (!s.url) continue;
-		try {
-			const metadata = await streamProbe.probe(s.url, { force: true });
-			results.push({
-				streamId: s.id,
-				width: metadata.width,
-				height: metadata.height,
-				codec: metadata.codec,
-				fps: metadata.fps,
-				bitrateKbps: metadata.bitrateKbps
-			});
-		} catch (err) {
-			pctx.host.ctx.logger.debug("streamProbe.probe failed — returning placeholder", { meta: {
-				deviceId: input.deviceId,
-				streamId: s.id,
-				error: err instanceof Error ? err.message : String(err)
-			} });
-			results.push({ streamId: s.id });
-		}
-	}
-	return results;
-}
-async function discoverDevices(pctx, input) {
-	const dp = await pctx.host.requireDeviceProvider(input.addonId);
-	if (!await dp.supportsDiscovery({})) throw new Error(`Addon "${input.addonId}" does not support device discovery`);
-	return (await dp.discoverDevices({})).map((d) => ({
-		stableId: d.stableId,
-		type: d.type,
-		suggestedName: d.suggestedName,
-		prefilledConfig: d.prefilledConfig
-	}));
 }
-async function adoptDevice(pctx, input) {
-	const dp = await pctx.host.requireDeviceProvider(input.addonId);
-	if (!await dp.supportsDiscovery({})) throw new Error(`Addon "${input.addonId}" does not support device adoption`);
-	const summary = await dp.adoptDiscoveredDevice({ candidate: input.candidate });
-	if (input.integrationId !== void 0) try {
-		await pctx.stampIntegrationId(summary.id, input.integrationId);
-	} catch (err) {
-		pctx.host.ctx.logger.warn("adoptDevice: integrationId stamp failed (device adopted)", {
-			tags: {
-				deviceId: summary.id,
-				integrationId: input.integrationId
-			},
-			meta: { error: errMsg(err) }
-		});
-	}
-	return summary;
+/**
+* Read the operator-authored per-role display defaults. Empty record when none
+* set. Not per-device — a plain top-level-key read.
+*/
+async function getRoleDisplayDefaults(pctx, _input) {
+	return { defaults: (await pctx.metaStore.readStore()).roleDisplayDefaults ?? {} };
 }
-async function getCreationSchema(pctx, input) {
-	const dp = await pctx.host.requireDeviceProvider(input.addonId);
-	if (!await dp.supportsManualCreation({})) return null;
-	return await dp.getChildCreationSchema({ type: input.type }) ?? null;
+/**
+* Replace the per-role display defaults whole-record (full replace). Override
+* units are normalized (`normalizeUnit`) at write so the render path always
+* looks up canonical spellings. Single-writer top-level key — no lock, no RMW,
+* no interaction with the `deviceMeta` write lock. Not per-device, so no event
+* is emitted; the UI invalidates its own query on mutate.
+*/
+async function setRoleDisplayDefaults(pctx, input) {
+	const normalized = Object.fromEntries(Object.entries(input.defaults).map(([role, def]) => [role, def.unit !== void 0 ? {
+		...def,
+		unit: normalizeUnit(def.unit) ?? def.unit
+	} : def]));
+	await pctx.settings.writeAddonStore({ roleDisplayDefaults: normalized });
 }
-async function createDevice(pctx, input) {
-	const dp = await pctx.host.requireDeviceProvider(input.addonId);
-	if (!await dp.supportsManualCreation({})) throw new Error(`Addon "${input.addonId}" does not support manual device creation`);
-	const summary = await dp.createDevice({
-		type: input.type,
-		config: input.config
+/**
+* Batched meta pre-seed. Applies every provided field to the
+* device's meta row in ONE read-modify-write under a single
+* `withMetaWriteLock` acquisition (one `deviceMeta` blob write),
+* then emits one `DeviceMetaChanged` event per field that was
+* supplied — preserving the exact semantics of the individual
+* setters (`setName` / `setLocation` / `setType` /
+* `setIntegrationId` / `setLinkDeviceId` / `setRole`). Omitted
+* fields are left untouched; `null` clears `location` /
+* `linkDeviceId` / `role`. Idempotent.
+*
+* Collapses the per-child meta pre-seed (up to 6 individual
+* setter round-trips, each its own lock + write) into one — the
+* dominant cost when the kernel's `spawnAccessoryChild` reconciles
+* a many-entity container.
+*/
+async function applyInitialMeta(pctx, input) {
+	const { deviceId, name, location, type, integrationId, linkDeviceId, role } = input;
+	await pctx.metaStore.withMetaWriteLock(async () => {
+		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
+		if (!persisted) throw new Error(`[device-manager] applyInitialMeta: unknown device id=${deviceId}`);
+		const { meta: m } = persisted;
+		const key = String(deviceId);
+		const allMeta = await pctx.metaStore.readMeta();
+		const merged = {
+			...m,
+			...name !== void 0 ? { name } : {},
+			...location !== void 0 ? { location } : {},
+			...type !== void 0 ? { type } : {},
+			...integrationId !== void 0 ? { integrationId } : {},
+			...linkDeviceId !== void 0 ? { linkDeviceId } : {},
+			...role !== void 0 ? { role } : {}
+		};
+		await pctx.settings.writeAddonStore({ deviceMeta: {
+			...allMeta,
+			[key]: merged
+		} });
 	});
-	if (input.integrationId !== void 0) try {
-		await pctx.stampIntegrationId(summary.id, input.integrationId);
-	} catch (err) {
-		pctx.host.ctx.logger.warn("createDevice: integrationId stamp failed (device created)", {
-			tags: {
-				deviceId: summary.id,
-				integrationId: input.integrationId
+	const emitMetaChanged = (field, value) => {
+		pctx.host.ctx.eventBus.emit({
+			id: randomUUID(),
+			timestamp: /* @__PURE__ */ new Date(),
+			source: {
+				type: "device",
+				id: deviceId
 			},
-			meta: { error: errMsg(err) }
+			category: EventCategory.DeviceMetaChanged,
+			data: {
+				deviceId,
+				field,
+				value
+			}
 		});
-	}
-	return summary;
+	};
+	if (name !== void 0) emitMetaChanged("name", name);
+	if (location !== void 0) emitMetaChanged("location", location);
+	if (type !== void 0) emitMetaChanged("type", type);
+	if (integrationId !== void 0) emitMetaChanged("integrationId", integrationId);
+	if (linkDeviceId !== void 0) emitMetaChanged("linkDeviceId", linkDeviceId);
+	if (role !== void 0) emitMetaChanged("role", role);
 }
-async function testCreationField(pctx, input) {
-	return (await pctx.host.requireDeviceProvider(input.addonId)).testCreationField({
-		type: input.type,
-		key: input.key,
-		value: input.value,
-		...input.formValues !== void 0 ? { formValues: input.formValues } : {}
+/**
+* Patch the device's hardware-identity metadata blob. Shallow
+* merge — `null` removes a key, anything else overwrites.
+* Drivers populate factual fields on first probe; operators
+* augment via the Device Info tab. Idempotent: a no-op patch
+* (every key already present with the same value) doesn't emit
+* the meta-changed event.
+*/
+async function setMetadata(pctx, input) {
+	const { deviceId, patch } = input;
+	const result = await pctx.metaStore.withMetaWriteLock(async () => {
+		if (!await pctx.metaStore.resolvePersistedById(deviceId)) throw new Error(`[device-manager] setMetadata: unknown device id=${deviceId}`);
+		const key = String(deviceId);
+		const map = await pctx.metaStore.readMetadataMap();
+		const next = { ...map[key] ?? {} };
+		let changed = false;
+		for (const [k, v] of Object.entries(patch)) if (v === null) {
+			if (k in next) {
+				delete next[k];
+				changed = true;
+			}
+		} else if (next[k] !== v) {
+			next[k] = v;
+			changed = true;
+		}
+		if (!changed) return { changed: false };
+		const hasFields = Object.keys(next).length > 0;
+		const updatedMap = { ...map };
+		if (hasFields) updatedMap[key] = next;
+		else delete updatedMap[key];
+		await pctx.settings.writeAddonStore({ deviceMetadata: updatedMap });
+		return {
+			changed: true,
+			finalMeta: hasFields ? next : null
+		};
+	});
+	if (!result.changed) return;
+	pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: deviceId
+		},
+		category: EventCategory.DeviceMetaChanged,
+		data: {
+			deviceId,
+			field: "metadata",
+			value: result.finalMeta
+		}
 	});
 }
-async function adoptionListCandidates(pctx, input) {
-	const { addonId, ...rest } = input;
-	return (await pctx.host.requireDeviceAdoptionProvider(addonId)).listCandidates(rest);
+/**
+* Soft-disable the device. Persisted on the meta row;
+* lifecycle gating is the driver's responsibility (BaseDevice
+* exposes `this.disabled` for the driver to consult at the top
+* of its lifecycle methods).
+*/
+async function setDisabled(pctx, input) {
+	const { deviceId, disabled } = input;
+	await pctx.metaStore.withMetaWriteLock(async () => {
+		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
+		if (!persisted) throw new Error(`[device-manager] setDisabled: unknown device id=${deviceId}`);
+		const { meta: m } = persisted;
+		const key = String(deviceId);
+		const allMeta = await pctx.metaStore.readMeta();
+		await pctx.settings.writeAddonStore({ deviceMeta: {
+			...allMeta,
+			[key]: {
+				...m,
+				disabled
+			}
+		} });
+	});
+	pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: deviceId
+		},
+		category: EventCategory.DeviceMetaChanged,
+		data: {
+			deviceId,
+			field: "disabled",
+			value: disabled
+		}
+	});
 }
-async function adoptionRefresh(pctx, input) {
-	const { addonId, integrationId } = input;
-	return (await pctx.host.requireDeviceAdoptionProvider(addonId)).refresh({ integrationId });
+async function loadRuntimeState(pctx, input) {
+	const { deviceId } = input;
+	if (!await pctx.metaStore.resolvePersistedById(deviceId)) return {};
+	const data = await pctx.settings.readDeviceRuntimeState(deviceId);
+	pctx.host.seedMirror(deviceId, pctx.host.withResetSessionProbe(data));
+	return data;
 }
-async function adoptionAdopt(pctx, input) {
-	const { addonId, ...rest } = input;
-	return (await pctx.host.requireDeviceAdoptionProvider(addonId)).adopt(rest);
+/**
+* Union of (1) operator-curated location registry and (2) labels
+* currently in use on persisted devices. Case-insensitive
+* dedupe (preserves the first-seen casing). Sorted
+* case-insensitively for stable UI. Drives the Device Info
+* location autocomplete.
+*/
+async function listLocations(pctx) {
+	const store = await pctx.settings.readAddonStore();
+	const meta = store.deviceMeta ?? {};
+	const locations = store.locations ?? [];
+	const seen = /* @__PURE__ */ new Map();
+	const consider = (raw) => {
+		if (typeof raw !== "string") return;
+		const trimmed = raw.trim();
+		if (trimmed.length === 0) return;
+		const key = trimmed.toLowerCase();
+		if (!seen.has(key)) seen.set(key, trimmed);
+	};
+	for (const label of locations) consider(label);
+	for (const m of Object.values(meta)) consider(m.location);
+	return [...seen.values()].toSorted((a, b) => a.localeCompare(b, void 0, { sensitivity: "base" }));
 }
-async function adoptionRelease(pctx, input) {
-	const { addonId, ...rest } = input;
-	return (await pctx.host.requireDeviceAdoptionProvider(addonId)).release(rest);
+/**
+* Add a label to the curated location registry. Idempotent:
+* existing entries (case-insensitive match) are silently kept.
+* Empty / whitespace-only inputs throw — operators must supply a
+* meaningful label.
+*/
+async function addLocation(pctx, input) {
+	const trimmed = input.name.trim();
+	if (trimmed.length === 0) throw new Error("[device-manager] addLocation: name must be non-empty");
+	const current = (await pctx.settings.readAddonStore()).locations ?? [];
+	if (current.some((l) => l.toLowerCase() === trimmed.toLowerCase())) return;
+	await pctx.settings.writeAddonStore({ locations: [...current, trimmed] });
 }
-async function adoptionResync(pctx, input) {
-	const { camDeviceId, resetToSource } = input;
-	let owningAddonId = pctx.registry?.getAddonId(camDeviceId) ?? null;
-	if (!owningAddonId) owningAddonId = (await pctx.metaStore.resolvePersistedById(camDeviceId))?.addonId ?? null;
-	if (!owningAddonId) throw new Error(`adoptionResync: device ${camDeviceId} not found`);
-	let removedChildren = 0;
-	if (resetToSource === true) {
-		const childIds = await pctx.metaStore.directChildIds(camDeviceId);
-		for (const childId of childIds) {
-			await pctx.provider.remove({ deviceId: childId });
-			removedChildren += 1;
+/**
+* Remove a label from the curated registry. Match is
+* case-insensitive. Devices that still reference this label keep
+* their `meta.location` value (the registry is a suggestion
+* list, not a foreign key) — pass `cascade: true` to also clear
+* `setLocation` on every device that referenced this exact
+* label. Cascade only matches case-insensitively + trimmed, same
+* as the registry equality check.
+*/
+async function removeLocation(pctx, input) {
+	const trimmed = input.name.trim();
+	if (trimmed.length === 0) return;
+	const store = await pctx.settings.readAddonStore();
+	const current = store.locations ?? [];
+	const remaining = current.filter((l) => l.toLowerCase() !== trimmed.toLowerCase());
+	if (remaining.length !== current.length) await pctx.settings.writeAddonStore({ locations: remaining });
+	if (input.cascade !== true) return;
+	const meta = store.deviceMeta ?? {};
+	const updates = { ...meta };
+	const cleared = [];
+	for (const [key, m] of Object.entries(meta)) {
+		if (typeof m.location !== "string") continue;
+		if (m.location.trim().toLowerCase() !== trimmed.toLowerCase()) continue;
+		updates[key] = {
+			...m,
+			location: null
+		};
+		cleared.push(m.id);
+	}
+	if (cleared.length === 0) return;
+	await pctx.settings.writeAddonStore({ deviceMeta: updates });
+	for (const deviceId of cleared) pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: deviceId
+		},
+		category: EventCategory.DeviceMetaChanged,
+		data: {
+			deviceId,
+			field: "location",
+			value: null
 		}
-		pctx.host.ctx.logger.info("resetToSource purge before resync", { tags: {
-			deviceId: camDeviceId,
-			removedChildren
-		} });
+	});
+}
+//#endregion
+//#region src/builtins/device-manager/device-link-overlay.ts
+/** Build both lookup maps from resolved link entries. Pure — order-preserving. */
+function buildLinkIndexes(entries) {
+	const targets = /* @__PURE__ */ new Map();
+	const dependents = /* @__PURE__ */ new Map();
+	for (const { targetDeviceId, link, sourceDeviceId, bindingSourceIds } of entries) {
+		const tKey = `${targetDeviceId}:${link.target.cap}`;
+		const tList = targets.get(tKey) ?? [];
+		tList.push({
+			link,
+			sourceDeviceId,
+			...bindingSourceIds !== void 0 ? { bindingSourceIds } : {}
+		});
+		targets.set(tKey, tList);
+		const addDependent = (sourceId, sourceCap) => {
+			const sKey = `${sourceId}:${sourceCap}`;
+			const sList = dependents.get(sKey) ?? [];
+			sList.push({
+				targetDeviceId,
+				targetCap: link.target.cap
+			});
+			dependents.set(sKey, sList);
+		};
+		if (link.source.kind === "expression") {
+			if (bindingSourceIds !== void 0) for (const [name, bindingDeviceId] of Object.entries(bindingSourceIds)) {
+				const binding = link.source.bindings[name];
+				if (binding === void 0 || binding.kind === "literal") continue;
+				addDependent(bindingDeviceId, binding.cap);
+			}
+			continue;
+		}
+		if (link.source.kind !== "literal") addDependent(sourceDeviceId, link.source.cap);
 	}
 	return {
-		...await (await pctx.host.requireDeviceAdoptionProvider(owningAddonId)).resync({
-			camDeviceId,
-			resetToSource
-		}),
-		removedChildren
+		targets,
+		dependents
 	};
 }
-async function testField(pctx, input) {
-	const { deviceId } = input;
-	let owningAddonId = null;
-	if (pctx.registry) owningAddonId = pctx.registry.getAddonId(deviceId);
-	if (!owningAddonId) owningAddonId = (await pctx.metaStore.resolvePersistedById(deviceId))?.addonId ?? null;
-	if (!owningAddonId) throw new Error(`Device with id ${deviceId} not found`);
-	const dp = await pctx.host.waitDeviceProvider(owningAddonId);
-	if (!dp) return {
-		status: "ok",
-		labels: [],
-		error: void 0
+//#endregion
+//#region src/builtins/device-manager/device-meta-store.ts
+/**
+* Meta persistence layer for the device-manager addon.
+*
+* `DeviceMetaStore` encapsulates the read/modify/write helpers that previously
+* lived as closures inside `onInitialize`: the `ctx.settings`-backed reads
+* (`readStore` / `readIndex` / `readMeta` / `readMetadataMap`), the
+* single-writer mutex (`withMetaWriteLock`), id allocation
+* (`allocateNextDeviceId`), ownership/child resolution, link-source resolution,
+* and the cross-device link reverse-index rebuild. Extracting it as a class
+* (constructed once per `onInitialize`) keeps the EXACT semantics — the
+* `withMetaWriteLock` promise-chain is per-instance state, identical to the
+* former closure — while letting the meta-action + query modules depend on a
+* named, injectable surface instead of captured closures.
+*
+* Cross-device link state (the `linkTargets` / `linkDependents` /
+* `expectedSourceStableIds` maps + the `devicesWithLinks` gate) lives on the
+* addon; the store reaches it through the injected `LinkIndexHost` so the
+* single owner of that state stays the addon instance.
+*/
+var DeviceMetaStore = class {
+	settings;
+	registry;
+	linkHost;
+	/** Synchronous ownership cache, keyed by NUMERIC deviceId → owning addonId.
+	*  The persisted meta store is authoritative but reads are async; hub-side
+	*  callers (e.g. `CapabilityRegistry.getNativeProvider` fallback) need
+	*  ownership without awaiting. Kept in sync with every register/remove and
+	*  warmed from persistence on boot. */
+	idToAddonId = /* @__PURE__ */ new Map();
+	/** Serialises every read-modify-write of the deviceMeta / deviceIndex blob
+	*  through one promise chain (see `withMetaWriteLock`). Per-instance state —
+	*  identical to the former `onInitialize` closure variable. */
+	metaWriteChain = Promise.resolve();
+	constructor(settings, registry, linkHost) {
+		this.settings = settings;
+		this.registry = registry;
+		this.linkHost = linkHost;
+	}
+	readStore = async () => {
+		return await this.settings.readAddonStore();
 	};
-	if (typeof dp.testCreationField !== "function") return {
-		status: "ok",
-		labels: [],
-		error: void 0
+	readIndex = async () => {
+		return (await this.readStore()).deviceIndex ?? {};
 	};
-	return dp.testCreationField({
-		type: DeviceType.Camera,
-		key: input.key,
-		value: input.value
-	});
-}
+	readMeta = async () => {
+		return (await this.readStore()).deviceMeta ?? {};
+	};
+	/** Hardware-identity metadata map. Lives in a sibling key on the
+	*  device-manager addon store so its writers (`setMetadata`) never
+	*  collide with the lifecycle writers on `deviceMeta`
+	*  (`registerDevice` / `setName` / `setLocation` / `setDisabled`).
+	*  Single-writer per row eliminates the "writer X clobbers writer
+	*  Y's field" bug class — `setMetadata` is the only producer. */
+	readMetadataMap = async () => {
+		return (await this.readStore()).deviceMetadata ?? {};
+	};
+	withMetaWriteLock = async (fn) => {
+		const previous = this.metaWriteChain;
+		let release = () => {};
+		const next = new Promise((resolve) => {
+			release = resolve;
+		});
+		this.metaWriteChain = next;
+		try {
+			await previous.catch(() => {});
+			return await fn();
+		} finally {
+			release();
+		}
+	};
+	/**
+	* Resolve a numeric deviceId to the owning `(addonId, stableId)` pair.
+	* Scans persisted meta — live IDevice lookup (hub registry) is handled
+	* separately per call site so callers can decide whether to route to
+	* an in-process driver or to the cross-process `device-ops` bridge.
+	* Returns null when no device with that id is known to the hub.
+	*/
+	resolvePersistedById = async (deviceId) => {
+		const m = (await this.readMeta())[String(deviceId)];
+		if (!m) return null;
+		return {
+			addonId: m.addonId,
+			stableId: m.stableId,
+			meta: m
+		};
+	};
+	/** Direct children of a device: the union of the live registry's children
+	*  and the persisted-meta scan (`parentDeviceId === parentId`), deduplicated
+	*  and excluding self. Shared by the `remove` cascade and the `resetToSource`
+	*  resync purge (#19). */
+	directChildIds = async (parentId) => {
+		const ids = /* @__PURE__ */ new Set();
+		if (this.registry) for (const c of this.registry.getChildren(parentId)) ids.add(c.id);
+		const meta = await this.readMeta();
+		for (const m of Object.values(meta)) if (m.parentDeviceId === parentId) ids.add(m.id);
+		ids.delete(parentId);
+		return [...ids];
+	};
+	/** Resolve a link's `sourceKey` to a live device id: the sibling accessory
+	*  whose stableId is `${parentStableId}-${sourceKey}`. Null when absent.
+	*  Pure over a pre-read meta map so a multi-link resolve reads the store once. */
+	resolveSourceDeviceId = (parentStableId, sourceKey, meta) => {
+		const wanted = `${parentStableId}-${sourceKey}`;
+		for (const m of Object.values(meta)) if (m.stableId === wanted) return m.id;
+		return null;
+	};
+	/** Resolve a GLOBAL link source (P2e) to a live device id: the device whose
+	*  FULL stableId equals `sourceStableId`, regardless of parent container.
+	*  First match wins (stableIds are effectively unique cluster-wide — see the
+	*  `DeviceLinkGlobalSource` docblock). Null when absent. Pure over a
+	*  pre-read meta map so a multi-link resolve reads the store once. */
+	resolveGlobalSourceDeviceId = (sourceStableId, meta) => {
+		for (const m of Object.values(meta)) if (m.stableId === sourceStableId) return m.id;
+		return null;
+	};
+	allocateNextDeviceId = async () => {
+		const current = (await this.readStore()).nextDeviceId ?? 1;
+		await this.settings.writeAddonStore({ nextDeviceId: current + 1 });
+		return current;
+	};
+	/** Rebuild the `linkTargets` / `linkDependents` reverse-index maps from the
+	*  current persisted meta. Called at boot (once the `devicesWithLinks` seed
+	*  has run) and whenever the link topology can change: `setDeviceLinks`,
+	*  `registerDevice` (a new sibling source may resolve previously-dangling
+	*  links), and `removeDevice` (its entries must be evicted). */
+	rebuildLinkDependents = async () => {
+		if (this.linkHost.devicesWithLinks.size === 0) {
+			this.linkHost.setLinkIndexes(/* @__PURE__ */ new Map(), /* @__PURE__ */ new Map(), /* @__PURE__ */ new Set());
+			return;
+		}
+		const allMeta = await this.readMeta();
+		const stableIdById = /* @__PURE__ */ new Map();
+		const idByStableId = /* @__PURE__ */ new Map();
+		for (const m of Object.values(allMeta)) {
+			stableIdById.set(m.id, m.stableId);
+			idByStableId.set(m.stableId, m.id);
+		}
+		const entries = [];
+		const expectedSources = /* @__PURE__ */ new Set();
+		for (const targetId of this.linkHost.devicesWithLinks) {
+			const targetMeta = Object.values(allMeta).find((m) => m.id === targetId);
+			if (!targetMeta) continue;
+			const container = targetMeta.parentDeviceId !== null ? stableIdById.get(targetMeta.parentDeviceId) ?? stableIdById.get(targetId) : stableIdById.get(targetId);
+			if (container === void 0) continue;
+			for (const link of targetMeta.deviceLinks ?? []) {
+				const src = link.source;
+				if (src.kind === "expression") {
+					const bindingSourceIds = {};
+					for (const [name, b] of Object.entries(src.bindings)) {
+						if (b.kind === "literal") continue;
+						const wanted = b.kind === "global" ? b.sourceStableId : `${container}-${b.sourceKey}`;
+						expectedSources.add(wanted);
+						const bid = idByStableId.get(wanted);
+						if (bid !== void 0) bindingSourceIds[name] = bid;
+					}
+					entries.push({
+						targetDeviceId: targetId,
+						link,
+						sourceDeviceId: -1,
+						bindingSourceIds
+					});
+					continue;
+				}
+				if (src.kind === "literal") {
+					entries.push({
+						targetDeviceId: targetId,
+						link,
+						sourceDeviceId: -1
+					});
+					continue;
+				}
+				const wantedStableId = src.kind === "global" ? src.sourceStableId : `${container}-${src.sourceKey}`;
+				expectedSources.add(wantedStableId);
+				const srcId = idByStableId.get(wantedStableId);
+				if (srcId === void 0) continue;
+				entries.push({
+					targetDeviceId: targetId,
+					link,
+					sourceDeviceId: srcId
+				});
+			}
+		}
+		const { targets, dependents } = buildLinkIndexes(entries);
+		this.linkHost.setLinkIndexes(targets, dependents, expectedSources);
+	};
+};
 //#endregion
 //#region src/builtins/device-manager/device-link-resolver.ts
 /** Returns true when `x` is a non-null, non-array plain object. */
@@ -4538,6 +4662,10 @@ var DeviceManagerAddon = class extends BaseAddon {
 			listAll: (input) => listAll(pctx, input),
 			getDevice: (input) => getDevice(pctx, input),
 			getChildren: (input) => getChildren(pctx, input),
+			getLinkedDevices: (input) => getLinkedDevices(pctx, input),
+			getDeviceSettingsContribution: (input) => buildLinkedDevicesContribution(pctx, input.deviceId),
+			getDeviceLiveContribution: async () => null,
+			applyDeviceSettingsPatch: (input) => applyLinkedDevicesPatch(pctx, input.deviceId, input.patch),
 			getStreamSources: (input) => getStreamSources(pctx, input),
 			getConfigSchema: (input) => getConfigSchema(pctx, input),
 			getSettingsSchema: (input) => getSettingsSchema(pctx, input),