@camstack/system 1.2.122 → 1.2.124

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnhGRFEn.js");
+const require_dist = require("../../dist-CIDgcxPk.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as EventCategory, yt as BaseAddon } from "../../dist-CEhrHp3u.mjs";
+import { Gt as EventCategory, yt as BaseAddon } from "../../dist-CvJrtLkw.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnhGRFEn.js");
+const require_dist = require("../../dist-CIDgcxPk.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Ct as DeviceFeature, Gt as EventCategory, M as deriveBatteryPresence, Rt as nodePin, T as batteryCapability, Tt as DeviceType, i as BatteryStatusSchema, mt as streamQualityLabel, ut as snapshotCapability, vt as errMsg, w as bareAddonId, yt as BaseAddon } from "../../dist-CEhrHp3u.mjs";
+import { Ct as DeviceFeature, Gt as EventCategory, M as deriveBatteryPresence, Rt as nodePin, T as batteryCapability, Tt as DeviceType, i as BatteryStatusSchema, mt as streamQualityLabel, ut as snapshotCapability, vt as errMsg, w as bareAddonId, yt as BaseAddon } from "../../dist-CvJrtLkw.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { signExpiringUrl, verifyExpiringUrl } from "@camstack/types/node";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnhGRFEn.js");
+const require_dist = require("../../dist-CIDgcxPk.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { V as filesystemBrowseCapability, pt as storageProviderCapability, yt as BaseAddon } from "../../dist-CEhrHp3u.mjs";
+import { V as filesystemBrowseCapability, pt as storageProviderCapability, yt as BaseAddon } from "../../dist-CvJrtLkw.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnhGRFEn.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-D6Jy_SsO.js");
+const require_dist = require("../../dist-CIDgcxPk.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-D7c0n9jO.js");
 let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
 let node_module = require("node:module");

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,5 +1,5 @@
-import { A as dataStoreProviderCapability, Bt as parseJsonUnknown, _t as vectorStoreCapability, f as RUNTIME_DEFAULTS, gt as vectorDimFromBase64, j as decodeVectorBase64, kt as asJsonObject, vt as errMsg, w as bareAddonId, yt as BaseAddon } from "../../dist-CEhrHp3u.mjs";
-import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-VAyOhu_a.mjs";
+import { A as dataStoreProviderCapability, Bt as parseJsonUnknown, _t as vectorStoreCapability, f as RUNTIME_DEFAULTS, gt as vectorDimFromBase64, j as decodeVectorBase64, kt as asJsonObject, vt as errMsg, w as bareAddonId, yt as BaseAddon } from "../../dist-CvJrtLkw.mjs";
+import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-B1aZcoS0.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { statSync } from "node:fs";

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnhGRFEn.js");
+const require_dist = require("../../dist-CIDgcxPk.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { dt as storageCapability, ft as storageMigrationCapability, g as StorageMigrationJobSchema, h as StorageLocationTypeSchema, lt as settingsStoreCapability, yt as BaseAddon, zt as parseJsonObject } from "../../dist-CEhrHp3u.mjs";
+import { dt as storageCapability, ft as storageMigrationCapability, g as StorageMigrationJobSchema, h as StorageLocationTypeSchema, lt as settingsStoreCapability, yt as BaseAddon, zt as parseJsonObject } from "../../dist-CvJrtLkw.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnhGRFEn.js");
+const require_dist = require("../../dist-CIDgcxPk.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { It as hydrateSchema, vt as errMsg, yt as BaseAddon } from "../../dist-CEhrHp3u.mjs";
+import { It as hydrateSchema, vt as errMsg, yt as BaseAddon } from "../../dist-CvJrtLkw.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnhGRFEn.js");
+const require_dist = require("../../dist-CIDgcxPk.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-CEhrHp3u.mjs";
+import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-CvJrtLkw.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{dist-DnhGRFEn.js → dist-CIDgcxPk.js}

@@ -9213,6 +9213,27 @@ var LinkedDeviceSchema = zod.z.object({
 	features: zod.z.array(zod.z.string()),
 	producesTrackedEvents: zod.z.boolean().optional()
 });
+/** One camera's resolved linked set, tagged with the camera it belongs to.
+*  The batch answer needs the tag; the single-device answer already has it
+*  from the input, which is why `getLinkedDevices` keeps the untagged shape. */
+var LinkedDevicesForDeviceSchema = zod.z.object({
+	deviceId: zod.z.number(),
+	mode: LinkedDevicesModeSchema,
+	devices: zod.z.array(LinkedDeviceSchema)
+});
+/** One device's binding map — the shape `getBindings`, `getBindingsBatch` and
+*  `getAllBindings` all answer in. Declared once: three copies of the same
+*  object literal is exactly how the three drift apart. */
+var DeviceBindingsForDeviceSchema = zod.z.object({
+	deviceId: zod.z.number(),
+	entries: zod.z.array(zod.z.object({
+		capName: zod.z.string(),
+		kind: zod.z.enum(["native", "wrapped"]),
+		providerAddonId: zod.z.string(),
+		providerNodeId: zod.z.string(),
+		nativeAddonId: zod.z.string()
+	}))
+});
 var SavedDeviceRowSchema = zod.z.object({
 	/** Numeric id reserved at allocateDeviceId time. */
 	id: zod.z.number(),
@@ -9575,7 +9596,21 @@ var deviceManagerCapability = {
 			projection: zod.z.enum(["full", "slim"]).optional(),
 			/** Return only camera devices. Filtering server-side instead of
 			*  shipping 293 rows to find 12. */
-			isCamera: zod.z.boolean().optional()
+			isCamera: zod.z.boolean().optional(),
+			/**
+			* Return only these device ids. For the caller that already KNOWS the
+			* handful it wants and needs a field the id-bearing answer does not
+			* carry — the viewer's linked-devices panel joins `type` and `online`
+			* onto ~8 linked ids and, unfiltered, dragged the fleet across to do
+			* it: 433 KB slim / 958 KB full for 967 devices, on a query that
+			* refetches on the reconcile interval, on a phone.
+			*
+			* Safe to send at a hub that predates it: Zod STRIPS unknown input
+			* keys rather than rejecting them (verified against the live hub
+			* 2026-08-25 — 967 rows came back), so an old hub answers exactly what
+			* it answers today and the caller filters as it already does.
+			*/
+			deviceIds: zod.z.array(zod.z.number()).optional()
 		}), zod.z.array(DeviceInfoSchema)),
 		/** Get a single device by numeric deviceId. */
 		getDevice: method(zod.z.object({ deviceId: zod.z.number() }), DeviceInfoSchema.nullable()),
@@ -9594,6 +9629,23 @@ var deviceManagerCapability = {
 			mode: LinkedDevicesModeSchema,
 			devices: zod.z.array(LinkedDeviceSchema)
 		})),
+		/**
+		* `getLinkedDevices` for MANY cameras, in one call.
+		*
+		* Not a convenience wrapper — a cost fix. Resolving one camera's linked set
+		* needs the whole fleet as candidates (children ∪ same-location), so the
+		* single-device path runs a full `listAll` per call. Asked per camera that
+		* is N full-fleet sweeps of device-manager's event loop, and they do not
+		* overlap: measured on the live hub 2026-08-25, 30 concurrent
+		* `getLinkedDevices` took 4110 ms wall (median 4060 ms each) to return
+		* 7260 bytes in total. The batch takes ONE sweep and one settings read per
+		* camera.
+		*
+		* A device id that resolves to nothing still gets a row (`devices: []`) —
+		* a caller that asked for thirty and got twenty-eight cannot tell which two
+		* are missing, or that any are.
+		*/
+		getLinkedDevicesBatch: method(zod.z.object({ deviceIds: zod.z.array(zod.z.number()) }), zod.z.array(LinkedDevicesForDeviceSchema)),
 		/** Get stream sources for a camera device. */
 		getStreamSources: method(zod.z.object({ deviceId: zod.z.number() }), zod.z.array(StreamSourceEntrySchema$1)),
 		/** Get config entries (key + value + description) for a device. */
@@ -9651,16 +9703,22 @@ var deviceManagerCapability = {
 		* currently-active provider (native or wrapper) + the underlying native
 		* addon id, so consumers can decide routing without re-running discovery.
 		*/
-		getBindings: method(zod.z.object({ deviceId: zod.z.number() }), zod.z.object({
-			deviceId: zod.z.number(),
-			entries: zod.z.array(zod.z.object({
-				capName: zod.z.string(),
-				kind: zod.z.enum(["native", "wrapped"]),
-				providerAddonId: zod.z.string(),
-				providerNodeId: zod.z.string(),
-				nativeAddonId: zod.z.string()
-			}))
-		})),
+		getBindings: method(zod.z.object({ deviceId: zod.z.number() }), DeviceBindingsForDeviceSchema),
+		/**
+		* `getBindings` for a NAMED set of devices, in one call.
+		*
+		* Between `getBindings` (one device) and `getAllBindings` (all 988) there
+		* was nothing, so a caller that needs seventy-five either pays
+		* seventy-five round-trips or drags the whole fleet across. Measured on
+		* the live hub 2026-08-25: 75 concurrent `getBindings` = 1211 ms / 118 KB,
+		* `getAllBindings({})` = 511 ms / 679 KB. Neither is the right answer to
+		* "these seventy-five".
+		*
+		* Same resolver, same routing rules, same per-device shape as
+		* `getBindings`; ids are deduped and a device with no bindings answers
+		* `entries: []` rather than dropping out.
+		*/
+		getBindingsBatch: method(zod.z.object({ deviceIds: zod.z.array(zod.z.number()) }), zod.z.array(DeviceBindingsForDeviceSchema)),
 		/**
 		* Return the binding map for every device known to the hub. Used by
 		* `SystemManager` warm-boot: a single round-trip resolves the
@@ -9669,16 +9727,7 @@ var deviceManagerCapability = {
 		* device add/remove) — clients invalidate via the
 		* `capability.binding-changed` event.
 		*/
-		getAllBindings: method(zod.z.object({}), zod.z.array(zod.z.object({
-			deviceId: zod.z.number(),
-			entries: zod.z.array(zod.z.object({
-				capName: zod.z.string(),
-				kind: zod.z.enum(["native", "wrapped"]),
-				providerAddonId: zod.z.string(),
-				providerNodeId: zod.z.string(),
-				nativeAddonId: zod.z.string()
-			}))
-		}))),
+		getAllBindings: method(zod.z.object({}), zod.z.array(DeviceBindingsForDeviceSchema)),
 		/**
 		* Activate (or deactivate) a wrapper addon for a (device, cap) pair.
 		* Persists the binding via ctx.settings. active=false clears the wrapper
@@ -31810,6 +31859,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.getBindingsBatch": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.getChildren": {
 		capName: "device-manager",
 		capScope: "system",
@@ -31870,6 +31925,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.getLinkedDevicesBatch": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.getRoleDisplayDefaults": {
 		capName: "device-manager",
 		capScope: "system",
@@ -36517,6 +36578,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.getBindingsBatch": [{
+		name: "deviceIds",
+		form: "array",
+		optional: false
+	}],
 	"deviceManager.getChildren": [{
 		name: "parentDeviceId",
 		form: "single",
@@ -36562,6 +36628,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.getLinkedDevicesBatch": [{
+		name: "deviceIds",
+		form: "array",
+		optional: false
+	}],
 	"deviceManager.getSettingsSchema": [{
 		name: "deviceId",
 		form: "single",
@@ -36582,6 +36653,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.listAll": [{
+		name: "deviceIds",
+		form: "array",
+		optional: true
+	}],
 	"deviceManager.loadConfig": [{
 		name: "deviceId",
 		form: "single",

package/dist/{dist-CEhrHp3u.mjs → dist-CvJrtLkw.mjs}

@@ -9213,6 +9213,27 @@ var LinkedDeviceSchema = z.object({
 	features: z.array(z.string()),
 	producesTrackedEvents: z.boolean().optional()
 });
+/** One camera's resolved linked set, tagged with the camera it belongs to.
+*  The batch answer needs the tag; the single-device answer already has it
+*  from the input, which is why `getLinkedDevices` keeps the untagged shape. */
+var LinkedDevicesForDeviceSchema = z.object({
+	deviceId: z.number(),
+	mode: LinkedDevicesModeSchema,
+	devices: z.array(LinkedDeviceSchema)
+});
+/** One device's binding map — the shape `getBindings`, `getBindingsBatch` and
+*  `getAllBindings` all answer in. Declared once: three copies of the same
+*  object literal is exactly how the three drift apart. */
+var DeviceBindingsForDeviceSchema = z.object({
+	deviceId: z.number(),
+	entries: z.array(z.object({
+		capName: z.string(),
+		kind: z.enum(["native", "wrapped"]),
+		providerAddonId: z.string(),
+		providerNodeId: z.string(),
+		nativeAddonId: z.string()
+	}))
+});
 var SavedDeviceRowSchema = z.object({
 	/** Numeric id reserved at allocateDeviceId time. */
 	id: z.number(),
@@ -9575,7 +9596,21 @@ var deviceManagerCapability = {
 			projection: z.enum(["full", "slim"]).optional(),
 			/** Return only camera devices. Filtering server-side instead of
 			*  shipping 293 rows to find 12. */
-			isCamera: z.boolean().optional()
+			isCamera: z.boolean().optional(),
+			/**
+			* Return only these device ids. For the caller that already KNOWS the
+			* handful it wants and needs a field the id-bearing answer does not
+			* carry — the viewer's linked-devices panel joins `type` and `online`
+			* onto ~8 linked ids and, unfiltered, dragged the fleet across to do
+			* it: 433 KB slim / 958 KB full for 967 devices, on a query that
+			* refetches on the reconcile interval, on a phone.
+			*
+			* Safe to send at a hub that predates it: Zod STRIPS unknown input
+			* keys rather than rejecting them (verified against the live hub
+			* 2026-08-25 — 967 rows came back), so an old hub answers exactly what
+			* it answers today and the caller filters as it already does.
+			*/
+			deviceIds: z.array(z.number()).optional()
 		}), z.array(DeviceInfoSchema)),
 		/** Get a single device by numeric deviceId. */
 		getDevice: method(z.object({ deviceId: z.number() }), DeviceInfoSchema.nullable()),
@@ -9594,6 +9629,23 @@ var deviceManagerCapability = {
 			mode: LinkedDevicesModeSchema,
 			devices: z.array(LinkedDeviceSchema)
 		})),
+		/**
+		* `getLinkedDevices` for MANY cameras, in one call.
+		*
+		* Not a convenience wrapper — a cost fix. Resolving one camera's linked set
+		* needs the whole fleet as candidates (children ∪ same-location), so the
+		* single-device path runs a full `listAll` per call. Asked per camera that
+		* is N full-fleet sweeps of device-manager's event loop, and they do not
+		* overlap: measured on the live hub 2026-08-25, 30 concurrent
+		* `getLinkedDevices` took 4110 ms wall (median 4060 ms each) to return
+		* 7260 bytes in total. The batch takes ONE sweep and one settings read per
+		* camera.
+		*
+		* A device id that resolves to nothing still gets a row (`devices: []`) —
+		* a caller that asked for thirty and got twenty-eight cannot tell which two
+		* are missing, or that any are.
+		*/
+		getLinkedDevicesBatch: method(z.object({ deviceIds: z.array(z.number()) }), z.array(LinkedDevicesForDeviceSchema)),
 		/** Get stream sources for a camera device. */
 		getStreamSources: method(z.object({ deviceId: z.number() }), z.array(StreamSourceEntrySchema$1)),
 		/** Get config entries (key + value + description) for a device. */
@@ -9651,16 +9703,22 @@ var deviceManagerCapability = {
 		* currently-active provider (native or wrapper) + the underlying native
 		* addon id, so consumers can decide routing without re-running discovery.
 		*/
-		getBindings: method(z.object({ deviceId: z.number() }), z.object({
-			deviceId: z.number(),
-			entries: z.array(z.object({
-				capName: z.string(),
-				kind: z.enum(["native", "wrapped"]),
-				providerAddonId: z.string(),
-				providerNodeId: z.string(),
-				nativeAddonId: z.string()
-			}))
-		})),
+		getBindings: method(z.object({ deviceId: z.number() }), DeviceBindingsForDeviceSchema),
+		/**
+		* `getBindings` for a NAMED set of devices, in one call.
+		*
+		* Between `getBindings` (one device) and `getAllBindings` (all 988) there
+		* was nothing, so a caller that needs seventy-five either pays
+		* seventy-five round-trips or drags the whole fleet across. Measured on
+		* the live hub 2026-08-25: 75 concurrent `getBindings` = 1211 ms / 118 KB,
+		* `getAllBindings({})` = 511 ms / 679 KB. Neither is the right answer to
+		* "these seventy-five".
+		*
+		* Same resolver, same routing rules, same per-device shape as
+		* `getBindings`; ids are deduped and a device with no bindings answers
+		* `entries: []` rather than dropping out.
+		*/
+		getBindingsBatch: method(z.object({ deviceIds: z.array(z.number()) }), z.array(DeviceBindingsForDeviceSchema)),
 		/**
 		* Return the binding map for every device known to the hub. Used by
 		* `SystemManager` warm-boot: a single round-trip resolves the
@@ -9669,16 +9727,7 @@ var deviceManagerCapability = {
 		* device add/remove) — clients invalidate via the
 		* `capability.binding-changed` event.
 		*/
-		getAllBindings: method(z.object({}), z.array(z.object({
-			deviceId: z.number(),
-			entries: z.array(z.object({
-				capName: z.string(),
-				kind: z.enum(["native", "wrapped"]),
-				providerAddonId: z.string(),
-				providerNodeId: z.string(),
-				nativeAddonId: z.string()
-			}))
-		}))),
+		getAllBindings: method(z.object({}), z.array(DeviceBindingsForDeviceSchema)),
 		/**
 		* Activate (or deactivate) a wrapper addon for a (device, cap) pair.
 		* Persists the binding via ctx.settings. active=false clears the wrapper
@@ -31810,6 +31859,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.getBindingsBatch": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.getChildren": {
 		capName: "device-manager",
 		capScope: "system",
@@ -31870,6 +31925,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.getLinkedDevicesBatch": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.getRoleDisplayDefaults": {
 		capName: "device-manager",
 		capScope: "system",
@@ -36517,6 +36578,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.getBindingsBatch": [{
+		name: "deviceIds",
+		form: "array",
+		optional: false
+	}],
 	"deviceManager.getChildren": [{
 		name: "parentDeviceId",
 		form: "single",
@@ -36562,6 +36628,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.getLinkedDevicesBatch": [{
+		name: "deviceIds",
+		form: "array",
+		optional: false
+	}],
 	"deviceManager.getSettingsSchema": [{
 		name: "deviceId",
 		form: "single",
@@ -36582,6 +36653,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.listAll": [{
+		name: "deviceIds",
+		form: "array",
+		optional: true
+	}],
 	"deviceManager.loadConfig": [{
 		name: "deviceId",
 		form: "single",

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DnhGRFEn.js");
+const require_dist = require("./dist-CIDgcxPk.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");
@@ -25,7 +25,7 @@ const require_builtins_system_config_system_config_addon = require("./builtins/s
 require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_file_data_plane = require("./file-data-plane-DO8KbxCe.js");
-const require_manifest_python_deps = require("./manifest-python-deps-76dZLxD0.js");
+const require_manifest_python_deps = require("./manifest-python-deps-DB_4H3tR.js");
 const require_resource_monitor = require("./resource-monitor-CdnzxBLP.js");
 const require_lan_http_bind = require("./lan-http-bind-DmgpFP6_.js");
 const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { At as asNumber, B as extractNestedAddonId, Bt as parseJsonUnknown$1, Dt as ReadinessTimeoutError, Et as ReadinessRegistry, Ft as expandCapMethods, Gt as EventCategory$1, H as isArrayOutputSchema, Ht as resolveCapMount, J as lifecycleJobSchema, K as isVoidInput, Mt as createEvent, Nt as emitDownForOwnedCaps, Q as looseSchema, St as DEVICE_STATUS_METHOD, U as isCollectionArrayMethod, Ut as scopeKey, Vt as readinessKey, W as isObjectInput, Z as logLevelAtMost, bt as DATAPLANE_SECRET_HEADER$1, d as METHOD_ACCESS_MAP, f as RUNTIME_DEFAULTS, it as procedureAuthKey, jt as asString$1, kt as asJsonObject$1, ot as scopesAllowAddon, q as kebabToCamel, st as scopesAllowDeviceCap, t as ALL_CAPABILITY_DEFINITIONS, tt as objectInputDeclaresAddonId, vt as errMsg$1, xt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, y as addonSettingsCapability, zt as parseJsonObject } from "./dist-CEhrHp3u.mjs";
+import { At as asNumber, B as extractNestedAddonId, Bt as parseJsonUnknown$1, Dt as ReadinessTimeoutError, Et as ReadinessRegistry, Ft as expandCapMethods, Gt as EventCategory$1, H as isArrayOutputSchema, Ht as resolveCapMount, J as lifecycleJobSchema, K as isVoidInput, Mt as createEvent, Nt as emitDownForOwnedCaps, Q as looseSchema, St as DEVICE_STATUS_METHOD, U as isCollectionArrayMethod, Ut as scopeKey, Vt as readinessKey, W as isObjectInput, Z as logLevelAtMost, bt as DATAPLANE_SECRET_HEADER$1, d as METHOD_ACCESS_MAP, f as RUNTIME_DEFAULTS, it as procedureAuthKey, jt as asString$1, kt as asJsonObject$1, ot as scopesAllowAddon, q as kebabToCamel, st as scopesAllowDeviceCap, t as ALL_CAPABILITY_DEFINITIONS, tt as objectInputDeclaresAddonId, vt as errMsg$1, xt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, y as addonSettingsCapability, zt as parseJsonObject } from "./dist-CvJrtLkw.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
@@ -24,7 +24,7 @@ import { SystemConfigAddon } from "./builtins/system-config/system-config.addon.
 import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { a as parseTokenizedUrl, c as collectModelFiles, d as downloadModel, f as ensureModel, h as isModelDownloaded, i as parseRangeHeader, l as deleteModelFromDisk, m as getModelFilePath, n as contentTypeFor, o as resolveFilePath, p as fetchJson, r as createAuthenticatedFileServer, s as ModelDownloadService, t as createFileDataPlaneHandler, u as downloadFile } from "./file-data-plane-BhKdxJgf.mjs";
-import { $ as buildNativeCapProxy, A as createHubCapForwardService, At as buildHeapSample, B as AGENT_CAP_FWD_ACTION, C as brokerTransportLink, Ct as runNpm, D as localProviderLink, Dt as HEAP_WATCH_INTERVAL_MS, E as ipcParentLink, Et as HEAP_RECLAIM_TRIGGER_MB, F as createUdsLogger, Ft as strandedMb, G as callWithServiceDiscovery, H as CapRouteResolver, I as createUdsLoggerWithControl, J as UdsLocalTransportServer, K as createLocalTransport, L as LocalChildClient, M as createUdsEventBridge, Mt as shouldReclaim, N as createUdsEventBus, Nt as startHeapWatch, O as HUB_CAP_FWD_ACTION, Ot as HEAP_WATCH_WARN_RATIO, P as udsChildLogToWorkerEntry, Pt as startRunnerHeapWatch, Q as encodeFrame, R as LocalChildRegistry, S as brokerCallForCap, St as resolveNpmInvocation, T as ipcChildLink, Tt as HEAP_RECLAIM_MIN_INTERVAL_MS, U as CapRouteError, V as AGENT_CAP_FWD_SERVICE, W as classifyCapRoute, X as localEndpointPath, Y as SocketChannel, Z as FrameDecoder, _ as createKernelHwAccel, _t as CapabilityHandle, a as getWorkerDeviceRegistry, b as __resetCapUsageRegistryForTests, bt as installManifestNativeDeps, c as setHubConnected, ct as NATIVE_PROVIDER_SERVICE_INFIX, d as getBrokerEventBus, dt as capBareAction, et as buildUdsNativeCapProxy, f as getMoleculerEventStats, ft as capServiceName, g as AddonDepsManager, gt as DeviceRegistry, h as subscribePassthrough, ht as serializeTypedArrays, i as createUdsAddonContext, it as mountNativeCapService, j as createParentUnownedCallHandler, jt as createV8Reclaimer, k as HUB_CAP_FWD_SERVICE, kt as RUNNER_HEAP_WATCH_INTERVAL_MS, l as EVENT_TOPIC_PREFIX, lt as capActionName, m as setNodeEventInterest, mt as deserializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as createAddonService, p as registerEventBusService, pt as parseCapAction, q as UdsLocalTransportClient, r as createAddonContext, s as getOrInitReadinessRegistryForClient, st as validateProviderRegistrations, t as installManifestPythonDeps, tt as createBrokerDeviceManagerApi, u as clusterEventTopic, ut as capActionSuffix, v as resolveHwAccel, vt as CapabilityUnavailableError, w as buildLinkChain, wt as createAddonDataPlaneFacility, x as getCapUsageRegistry, xt as resolveAddonClass, y as CapUsageRegistry, yt as copyBundledNativeModules, z as UDS_NO_ROUTE_PREFIX } from "./manifest-python-deps-DZSNlHjU.mjs";
+import { $ as buildNativeCapProxy, A as createHubCapForwardService, At as buildHeapSample, B as AGENT_CAP_FWD_ACTION, C as brokerTransportLink, Ct as runNpm, D as localProviderLink, Dt as HEAP_WATCH_INTERVAL_MS, E as ipcParentLink, Et as HEAP_RECLAIM_TRIGGER_MB, F as createUdsLogger, Ft as strandedMb, G as callWithServiceDiscovery, H as CapRouteResolver, I as createUdsLoggerWithControl, J as UdsLocalTransportServer, K as createLocalTransport, L as LocalChildClient, M as createUdsEventBridge, Mt as shouldReclaim, N as createUdsEventBus, Nt as startHeapWatch, O as HUB_CAP_FWD_ACTION, Ot as HEAP_WATCH_WARN_RATIO, P as udsChildLogToWorkerEntry, Pt as startRunnerHeapWatch, Q as encodeFrame, R as LocalChildRegistry, S as brokerCallForCap, St as resolveNpmInvocation, T as ipcChildLink, Tt as HEAP_RECLAIM_MIN_INTERVAL_MS, U as CapRouteError, V as AGENT_CAP_FWD_SERVICE, W as classifyCapRoute, X as localEndpointPath, Y as SocketChannel, Z as FrameDecoder, _ as createKernelHwAccel, _t as CapabilityHandle, a as getWorkerDeviceRegistry, b as __resetCapUsageRegistryForTests, bt as installManifestNativeDeps, c as setHubConnected, ct as NATIVE_PROVIDER_SERVICE_INFIX, d as getBrokerEventBus, dt as capBareAction, et as buildUdsNativeCapProxy, f as getMoleculerEventStats, ft as capServiceName, g as AddonDepsManager, gt as DeviceRegistry, h as subscribePassthrough, ht as serializeTypedArrays, i as createUdsAddonContext, it as mountNativeCapService, j as createParentUnownedCallHandler, jt as createV8Reclaimer, k as HUB_CAP_FWD_SERVICE, kt as RUNNER_HEAP_WATCH_INTERVAL_MS, l as EVENT_TOPIC_PREFIX, lt as capActionName, m as setNodeEventInterest, mt as deserializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as createAddonService, p as registerEventBusService, pt as parseCapAction, q as UdsLocalTransportClient, r as createAddonContext, s as getOrInitReadinessRegistryForClient, st as validateProviderRegistrations, t as installManifestPythonDeps, tt as createBrokerDeviceManagerApi, u as clusterEventTopic, ut as capActionSuffix, v as resolveHwAccel, vt as CapabilityUnavailableError, w as buildLinkChain, wt as createAddonDataPlaneFacility, x as getCapUsageRegistry, xt as resolveAddonClass, y as CapUsageRegistry, yt as copyBundledNativeModules, z as UDS_NO_ROUTE_PREFIX } from "./manifest-python-deps-D1Ydw7J0.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BWmQ5i-o.mjs";
 import { C as evaluateExistingCert, S as SERVER_AUTH_OID, _ as CA_COMMON_NAME, a as closeLanHttp, b as LEAF_RENEWAL_WINDOW_DAYS, c as readExtraSans, d as writeExtraSans, f as writeTlsMode, g as reissueTlsLeaf, h as loadTlsCert, i as bindPendingLanHttp, l as readTlsAccessStatus, m as ensureTlsCert, n as allFamiliesListenHost, o as readLanHttpState, p as validateUploadedTls, r as applyLanHttp, s as registerLanHttpHandler, t as DEFAULT_LAN_HTTP_PORT, u as readTlsMode, v as collectCertIdentity, x as MAX_LEAF_VALIDITY_DAYS, y as CA_VALIDITY_DAYS } from "./lan-http-bind-jKrj6OjQ.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";

package/dist/kernel/heap-watch.d.ts

@@ -99,6 +99,85 @@ export declare const HEAP_RECLAIM_TRIGGER_MB = 1024;
  * router's time, against a ~1.5GiB peak it removes each pass.
  */
 export declare const HEAP_RECLAIM_MIN_INTERVAL_MS = 120000;
+/**
+ * Consecutive floor-to-floor passes after which the reclaim is announced as
+ * STEADY STATE rather than a rescue.
+ *
+ * The floor above is documented as a bound on a BURST, on the measured premise
+ * that re-stranding the trigger takes ~20 minutes. Measured on the live hub
+ * 2026-08-25 it takes under two: 13 passes in 30 minutes, every one of them
+ * firing the instant {@link HEAP_RECLAIM_MIN_INTERVAL_MS} elapsed, `took=`
+ * 556-695ms each. Nothing in the record said so, because a pass that fires
+ * every floor period and a pass that fires once an hour print the same line.
+ *
+ * Six is 12 minutes of back-to-back passes: long enough that a genuine burst
+ * (which subsides) never reaches it, short enough that a process which has
+ * quietly made the stop-the-world part of its steady state is named within the
+ * quarter-hour. The warn changes no behaviour — the pass is load-bearing and
+ * keeps running. It exists so the OPERATOR is told that the safety net has
+ * become the mechanism, which is the moment to go after the allocation source
+ * instead of the symptom.
+ */
+export declare const RECLAIM_STEADY_STATE_PASSES = 6;
+/**
+ * Event-loop delay over the window since the previous read, in milliseconds.
+ *
+ * Why the heartbeat carries this at all: hub-main's event loop is the cluster's
+ * only queue (D181 — every settings read from every runner and every agent,
+ * every UDS handshake and every cross-runner cap call is served on it, and a
+ * live CPU profile of a boot put `(idle)` at 0.1%). The reclaim pass is a
+ * stop-the-world ON that loop, and `took=` prices the PASS without ever pricing
+ * what it delays. 590ms against a p99 of 4ms is a visible stall; the same 590ms
+ * against a p99 of 900ms is noise inside a queue that was already saturated.
+ * Those are opposite conclusions, and until now the log could not tell them
+ * apart.
+ */
+export interface LoopDelaySample {
+    readonly p50Ms: number;
+    readonly p99Ms: number;
+    readonly maxMs: number;
+}
+/** What a loop with nothing recorded yet reports. */
+export declare const ZERO_LOOP_DELAY: LoopDelaySample;
+export interface LoopDelayMeter {
+    /** Percentiles over the window since the previous read. Reading RESETS it. */
+    readonly read: () => LoopDelaySample;
+    readonly stop: () => void;
+}
+/**
+ * A `perf_hooks` interval histogram, read once per LOGGED line.
+ *
+ * The histogram samples in libuv at `resolutionMs` and costs nothing to keep
+ * enabled; the expensive part would be reading it on every 2s probe, which
+ * would also destroy the window the line claims to describe (probe and log
+ * cadences are deliberately different — see {@link startHeapWatch}).
+ *
+ * An EMPTY histogram is the trap: Node answers `min = 9223372036854776000` and
+ * `percentile()` throws on some versions, so a first heartbeat that read it
+ * naively would print `loopMax=9223372036854ms` and be read as a catastrophe on
+ * every boot. `count === 0` short-circuits to {@link ZERO_LOOP_DELAY}.
+ *
+ * Returns undefined if the platform declines, so the caller keeps a heartbeat
+ * either way.
+ */
+export declare function createLoopDelayMeter(resolutionMs?: number): LoopDelayMeter | undefined;
+/** Whether anyone CHOSE this process's old-space ceiling, or V8 derived one. */
+export type HeapCeilingOrigin = 'explicit' | 'v8-default';
+/**
+ * Read the origin of the old-space ceiling off node's own options.
+ *
+ * hub-main is the only process in the cluster whose ceiling nobody chose. Every
+ * forked runner is given V8 heap flags by `process-service.ts`; hub-main gets
+ * `--max-old-space-size` from `docker-entrypoint.sh` ONLY when the operator sets
+ * `CAMSTACK_HUB_HEAP_MB`, and on the live container it is unset — verified
+ * 2026-08-25 by reading pid 7's argv, a bare `node .../starter.js`. So the
+ * ceiling in force is whatever V8 derives from the host (4288MB there), and the
+ * only record of that was a comment inside an image nobody rebuilds to read.
+ *
+ * A fact about the running process belongs in the running process's log, and
+ * `execArgv` answers it for free at boot.
+ */
+export declare function heapCeilingOrigin(execArgv?: readonly string[]): HeapCeilingOrigin;
 export interface HeapSample {
     readonly rssMb: number;
     readonly heapUsedMb: number;
@@ -167,7 +246,7 @@ export interface HeapReclaimOptions {
  * `unref`ed so it can never hold the process open, and every read is wrapped:
  * a diagnostic that can crash the process it watches is worse than none.
  */
-export declare function startHeapWatch(label?: string, sink?: HeapWatchSink, intervalMs?: number, reclaimOptions?: HeapReclaimOptions): () => void;
+export declare function startHeapWatch(label?: string, sink?: HeapWatchSink, intervalMs?: number, reclaimOptions?: HeapReclaimOptions, loopDelay?: LoopDelayMeter | undefined, execArgv?: readonly string[], announceCeilingOrigin?: boolean): () => void;
 /**
  * Steady heartbeat period for a HEAVY addon runner.
  *