@camstack/system 1.2.170 → 1.2.172

package/dist/index.js

@@ -5316,7 +5316,6 @@ var CapabilityRegistry = class CapabilityRegistry {
 	routerFactory = null;
 	configReader = null;
 	collectionConfigReader = null;
-	configManager = null;
 	_ready = false;
 	/** Boot-time dependency graph: capability → dependsOn names (from CapabilityDeclaration) */
 	capabilityDeps = /* @__PURE__ */ new Map();
@@ -5401,10 +5400,6 @@ var CapabilityRegistry = class CapabilityRegistry {
 	setCollectionConfigReader(reader) {
 		this.collectionConfigReader = reader;
 	}
-	/** Set the config manager for persisted device activation state. */
-	setConfigManager(manager) {
-		this.configManager = manager;
-	}
 	/** Register boot-time dependency edges (from CapabilityDeclaration.dependsOn). */
 	setDependencies(capabilityName, dependsOn) {
 		this.capabilityDeps.set(capabilityName, dependsOn);
@@ -6140,88 +6135,18 @@ var CapabilityRegistry = class CapabilityRegistry {
 		});
 	}
 	/**
-	* Check if a specific addon's capability is active system-wide.
+	* Check if a specific addon's capability is active.
 	*
-	* Resolution: 1. explicit system override → 2. autoActivate flag → 3. default true
+	* Resolution: the manifest's `autoActivate` flag, else active. There is no
+	* persisted override layer — see D334: an activation map keyed by
+	* `{capability}/{addonId}` is a second authority over a function some addon
+	* already owns, which is what D62 forbids.
 	*/
 	isActiveForSystem(capability, addonId) {
-		if (this.configManager) {
-			const explicit = this.configManager.getSystemActivation()[`${capability}/${addonId}`];
-			if (explicit !== void 0) return explicit;
-		}
 		const autoActivate = this.autoActivateFlags.get(`${capability}/${addonId}`);
 		if (autoActivate !== void 0) return autoActivate;
 		return true;
 	}
-	/** Set system-wide activation for a capability/addon pair. */
-	setSystemActivation(capability, addonId, active) {
-		if (!this.configManager) {
-			this.logger.warn("Cannot set system activation: ConfigManager not wired");
-			return;
-		}
-		this.configManager.setSystemActivation(capability, addonId, active);
-		this.logger.info("System activation set", {
-			tags: { addonId },
-			meta: {
-				capability,
-				active
-			}
-		});
-		this.emitEvent("capability:system-activation-changed", {
-			capability,
-			addonId,
-			active
-		});
-	}
-	/**
-	* Check if a specific addon's capability is active for a device.
-	*
-	* Resolution: 1. explicit device override → 2. system activation → 3. autoActivate → 4. default true
-	*/
-	isActiveForDevice(capability, addonId, deviceId) {
-		if (this.configManager) {
-			const explicit = this.configManager.getDeviceActivation(deviceId)[`${capability}/${addonId}`];
-			if (explicit !== void 0) return explicit;
-		}
-		return this.isActiveForSystem(capability, addonId);
-	}
-	/** Set device activation for a capability/addon pair. */
-	setDeviceActivation(deviceId, capability, addonId, active) {
-		if (!this.configManager) {
-			this.logger.warn("Cannot set device activation: ConfigManager not wired");
-			return;
-		}
-		this.configManager.setDeviceActivation(deviceId, capability, addonId, active);
-		this.logger.info("Device activation set", {
-			tags: {
-				deviceId: Number(deviceId),
-				addonId
-			},
-			meta: {
-				capability,
-				active
-			}
-		});
-		this.emitEvent("capability:device-activation-changed", {
-			deviceId,
-			capability,
-			addonId,
-			active
-		});
-	}
-	/**
-	* Get all addon/capability activations for a device.
-	* Returns every registered provider with its resolved active status.
-	*/
-	getDeviceActivations(deviceId) {
-		const result = [];
-		for (const [capName, state] of this.capabilities) for (const addonId of state.providers.keys()) result.push({
-			capability: capName,
-			addonId,
-			active: this.isActiveForDevice(capName, addonId, deviceId)
-		});
-		return result;
-	}
 	/**
 	* Get all addon/capability activations at system level.
 	* Returns every registered provider with its resolved active status.
@@ -6280,7 +6205,8 @@ var CapabilityRegistry = class CapabilityRegistry {
 	}
 	/**
 	* Resolve a singleton provider for a specific device.
-	* Checks activation (autoActivate + explicit overrides) then per-device override.
+	* Checks activation (the manifest's autoActivate) then the per-device
+	* singleton override — the in-memory provider pin, not a persisted flag.
 	*/
 	resolveForDevice(capability, deviceId) {
 		const state = this.capabilities.get(capability);
@@ -6289,7 +6215,7 @@ var CapabilityRegistry = class CapabilityRegistry {
 		if (deviceMap) {
 			const overrideAddonId = deviceMap.get(capability);
 			if (overrideAddonId) {
-				if (this.isActiveForDevice(capability, overrideAddonId, deviceId)) {
+				if (this.isActiveForSystem(capability, overrideAddonId)) {
 					const provider = state.providers.get(overrideAddonId);
 					if (provider) return asProvider(provider);
 				}
@@ -6302,11 +6228,11 @@ var CapabilityRegistry = class CapabilityRegistry {
 				});
 			}
 		}
-		if (state.activeAddonId && this.isActiveForDevice(capability, state.activeAddonId, deviceId)) {
+		if (state.activeAddonId && this.isActiveForSystem(capability, state.activeAddonId)) {
 			const active = state.providers.get(state.activeAddonId);
 			return active !== void 0 ? asProvider(active) : null;
 		}
-		for (const [addonId, provider] of state.providers) if (this.isActiveForDevice(capability, addonId, deviceId)) return asProvider(provider);
+		for (const [addonId, provider] of state.providers) if (this.isActiveForSystem(capability, addonId)) return asProvider(provider);
 		return null;
 	}
 	/** Set a per-device collection filter. */
@@ -6342,12 +6268,12 @@ var CapabilityRegistry = class CapabilityRegistry {
 	}
 	/**
 	* Resolve collection providers for a specific device.
-	* Filters by activation (autoActivate + explicit overrides) and optional collection filter.
+	* Filters by activation (the manifest's autoActivate) and optional collection filter.
 	*/
 	resolveCollectionForDevice(capability, deviceId) {
 		const state = this.capabilities.get(capability);
 		if (!state || state.definition.mode !== "collection") return [];
-		let entries = [...state.providers.entries()].filter(([addonId]) => !state.disabledProviders.has(addonId)).filter(([addonId]) => this.isActiveForDevice(capability, addonId, deviceId));
+		let entries = [...state.providers.entries()].filter(([addonId]) => !state.disabledProviders.has(addonId)).filter(([addonId]) => this.isActiveForSystem(capability, addonId));
 		const deviceMap = this.deviceCollectionFilters.get(deviceId);
 		if (deviceMap) {
 			const filterAddonIds = deviceMap.get(capability);
@@ -9485,26 +9411,17 @@ var ENV_VAR_MAP = {
 	CAMSTACK_ADMIN_USER: "auth.adminUsername",
 	CAMSTACK_ADMIN_PASS: "auth.adminPassword"
 };
-var EMPTY_RUNTIME_STATE = {
-	systemActivation: {},
-	deviceActivation: {}
-};
 var ConfigManager = class ConfigManager {
 	configPath;
 	bootstrapConfig;
 	settingsStore = null;
 	settingsDoor = null;
-	runtimeState;
-	runtimeStatePath;
 	constructor(configPath) {
 		this.configPath = configPath;
 		const rawYaml = this.loadYaml();
 		const merged = this.applyEnvOverrides((0, _camstack_types_addon.asJsonObject)(rawYaml) ?? {});
 		this.bootstrapConfig = bootstrapSchema.parse(merged);
 		this.warnDefaultCredentials();
-		const dataPath = this.bootstrapConfig.server.dataPath ?? "camstack-data";
-		this.runtimeStatePath = node_path.resolve(dataPath, "runtime-state.json");
-		this.runtimeState = this.loadRuntimeState();
 	}
 	/**
 	* Wire the settings-store backend. Called once, after the `settings-store`
@@ -9789,72 +9706,6 @@ var ConfigManager = class ConfigManager {
 			}
 		};
 	}
-	/** Get all system-wide activation overrides. */
-	getSystemActivation() {
-		return this.runtimeState.systemActivation;
-	}
-	/** Set system-wide activation for a capability/addon pair. */
-	setSystemActivation(capability, addonId, active) {
-		const key = `${capability}/${addonId}`;
-		this.runtimeState = {
-			...this.runtimeState,
-			systemActivation: {
-				...this.runtimeState.systemActivation,
-				[key]: active
-			}
-		};
-		this.saveRuntimeState();
-	}
-	/**
-	* Get activation overrides for a device.
-	* Returns a map of `{capability}/{addonId}` → active boolean.
-	* Missing entries mean "use system activation or autoActivate default".
-	*/
-	getDeviceActivation(deviceId) {
-		return this.runtimeState.deviceActivation[deviceId] ?? {};
-	}
-	/**
-	* Get all device activation overrides.
-	* Returns deviceId → (`{capability}/{addonId}` → active).
-	*/
-	getAllDeviceActivation() {
-		return this.runtimeState.deviceActivation;
-	}
-	/**
-	* Set activation for a specific capability/addon on a device.
-	* Persists immediately to runtime-state.json.
-	*
-	* @param deviceId - The device to configure
-	* @param capability - Capability name (e.g., 'motion-detection')
-	* @param addonId - Addon providing the capability (e.g., 'wasm-motion')
-	* @param active - Whether the capability is active on this device
-	*/
-	setDeviceActivation(deviceId, capability, addonId, active) {
-		const key = `${capability}/${addonId}`;
-		const updated = {
-			...this.runtimeState.deviceActivation[deviceId] ?? {},
-			[key]: active
-		};
-		this.runtimeState = {
-			...this.runtimeState,
-			deviceActivation: {
-				...this.runtimeState.deviceActivation,
-				[deviceId]: updated
-			}
-		};
-		this.saveRuntimeState();
-	}
-	/**
-	* Clear all activation overrides for a device (resets to autoActivate defaults).
-	*/
-	clearDeviceActivation(deviceId) {
-		const { [deviceId]: _removed, ...rest } = this.runtimeState.deviceActivation;
-		this.runtimeState = {
-			...this.runtimeState,
-			deviceActivation: rest
-		};
-		this.saveRuntimeState();
-	}
 	getBootstrap(configPath) {
 		return this.getFromBootstrap(configPath);
 	}
@@ -10024,39 +9875,6 @@ var ConfigManager = class ConfigManager {
 		}
 		return found ? result : null;
 	}
-	loadRuntimeState() {
-		if (!node_fs.existsSync(this.runtimeStatePath)) return EMPTY_RUNTIME_STATE;
-		try {
-			const parsed = (0, _camstack_types_addon.asJsonObject)((0, _camstack_types_addon.parseJsonUnknown)(node_fs.readFileSync(this.runtimeStatePath, "utf-8")));
-			if (parsed === null) return EMPTY_RUNTIME_STATE;
-			const systemActivation = (0, _camstack_types_addon.asJsonObject)(parsed.systemActivation) ?? {};
-			const deviceActivationRaw = (0, _camstack_types_addon.asJsonObject)(parsed.deviceActivation) ?? {};
-			const deviceActivation = {};
-			for (const [deviceId, entry] of Object.entries(deviceActivationRaw)) {
-				const nested = (0, _camstack_types_addon.asJsonObject)(entry);
-				if (nested === null) continue;
-				const bools = {};
-				for (const [k, v] of Object.entries(nested)) if (typeof v === "boolean") bools[k] = v;
-				deviceActivation[deviceId] = bools;
-			}
-			const systemBools = {};
-			for (const [k, v] of Object.entries(systemActivation)) if (typeof v === "boolean") systemBools[k] = v;
-			return {
-				systemActivation: systemBools,
-				deviceActivation
-			};
-		} catch {
-			console.warn(`[ConfigManager] Failed to parse runtime state at ${this.runtimeStatePath}, using defaults`);
-			return EMPTY_RUNTIME_STATE;
-		}
-	}
-	saveRuntimeState() {
-		const dir = node_path.dirname(this.runtimeStatePath);
-		if (!node_fs.existsSync(dir)) node_fs.mkdirSync(dir, { recursive: true });
-		const tmpPath = `${this.runtimeStatePath}.tmp`;
-		node_fs.writeFileSync(tmpPath, JSON.stringify(this.runtimeState, null, 2), "utf-8");
-		node_fs.renameSync(tmpPath, this.runtimeStatePath);
-	}
 };
 //#endregion
 //#region ../../node_modules/moleculer/src/constants.js

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { $ as isCollectionArrayMethod, $t as parseJsonObject, Bt as ReadinessRegistry, E as addonSettingsCapability, Ft as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Gt as asString$1, It as DEVICE_STATUS_METHOD, Kt as createEvent, Mt as errMsg$1, Pt as DATAPLANE_SECRET_HEADER$1, Q as isArrayOutputSchema, Ut as asJsonObject$1, Vt as ReadinessTimeoutError, Wt as asNumber, Y as extractNestedAddonId, Yt as expandCapMethods, an as EventCategory$1, at as lifecycleJobSchema, bt as scopesAllowAddon, ct as logLevelAtMost, en as parseJsonUnknown$1, et as isObjectInput, f as LOG_LEVEL_RANK, ft as objectInputDeclaresAddonId, h as RUNTIME_DEFAULTS, ht as procedureAuthKey, it as kebabToCamel, lt as looseSchema, nn as resolveCapMount, p as METHOD_ACCESS_MAP, qt as emitDownForOwnedCaps, rn as scopeKey, rt as isVoidInput, t as ALL_CAPABILITY_DEFINITIONS, tn as readinessKey, vt as resolveMethodAuth, xt as scopesAllowDeviceCap } from "./dist-1DEQFmTq.mjs";
+import { $ as isCollectionArrayMethod, $t as parseJsonObject, Bt as ReadinessRegistry, E as addonSettingsCapability, Ft as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Gt as asString$1, It as DEVICE_STATUS_METHOD, Kt as createEvent, Mt as errMsg$1, Pt as DATAPLANE_SECRET_HEADER$1, Q as isArrayOutputSchema, Ut as asJsonObject$1, Vt as ReadinessTimeoutError, Wt as asNumber, Y as extractNestedAddonId, Yt as expandCapMethods, an as EventCategory$1, at as lifecycleJobSchema, bt as scopesAllowAddon, ct as logLevelAtMost, en as parseJsonUnknown, et as isObjectInput, f as LOG_LEVEL_RANK, ft as objectInputDeclaresAddonId, h as RUNTIME_DEFAULTS, ht as procedureAuthKey, it as kebabToCamel, lt as looseSchema, nn as resolveCapMount, p as METHOD_ACCESS_MAP, qt as emitDownForOwnedCaps, rn as scopeKey, rt as isVoidInput, t as ALL_CAPABILITY_DEFINITIONS, tn as readinessKey, vt as resolveMethodAuth, xt as scopesAllowDeviceCap } from "./dist-1DEQFmTq.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
@@ -43,7 +43,7 @@ import { accessSync, constants, existsSync } from "node:fs";
 import * as os$18 from "node:os";
 import { request } from "node:http";
 import * as vm from "node:vm";
-import { asJsonObject, errMsg, parseJsonUnknown } from "@camstack/types/addon";
+import { asJsonObject, errMsg } from "@camstack/types/addon";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { EventEmitter } from "node:events";
 import As from "node:stream";
@@ -2757,7 +2757,7 @@ function readOwningPackageVersion(entryPath) {
 	let dir = path$39.dirname(entryPath);
 	for (let hop = 0; hop < PACKAGE_JSON_LOOKUP_DEPTH; hop++) {
 		try {
-			const version = asJsonObject$1(parseJsonUnknown$1(fs$17.readFileSync(path$39.join(dir, "package.json"), "utf-8")))?.["version"];
+			const version = asJsonObject$1(parseJsonUnknown(fs$17.readFileSync(path$39.join(dir, "package.json"), "utf-8")))?.["version"];
 			if (typeof version === "string" && version.length > 0) return version;
 		} catch {}
 		const parent = path$39.dirname(dir);
@@ -2947,7 +2947,7 @@ var AddonLoader = class {
 	/** Load addon from a specific directory (package.json + dist/) */
 	async loadFromAddonDir(addonDir) {
 		const pkgJsonPath = path$39.join(addonDir, "package.json");
-		const pkgJson = asJsonObject$1(parseJsonUnknown$1(fs$17.readFileSync(pkgJsonPath, "utf-8"))) ?? {};
+		const pkgJson = asJsonObject$1(parseJsonUnknown(fs$17.readFileSync(pkgJsonPath, "utf-8"))) ?? {};
 		const packageNameRaw = pkgJson["name"];
 		const packageName = typeof packageNameRaw === "string" ? packageNameRaw : "";
 		const packageVersionRaw = pkgJson["version"];
@@ -3384,7 +3384,7 @@ async function installPackageFromNpm(packageName, targetDir) {
 		const distSrc = path$39.join(srcPkgJsonDir, "dist");
 		if (fs$17.existsSync(distSrc)) await copyDirRecursive(distSrc, path$39.join(targetDir, "dist"));
 		try {
-			const npmPkg = asJsonObject$1(parseJsonUnknown$1(await fs$17.promises.readFile(path$39.join(srcPkgJsonDir, "package.json"), "utf-8")));
+			const npmPkg = asJsonObject$1(parseJsonUnknown(await fs$17.promises.readFile(path$39.join(srcPkgJsonDir, "package.json"), "utf-8")));
 			if (npmPkg) await copyExtraFileDirs(npmPkg, srcPkgJsonDir, targetDir);
 		} catch {}
 	} finally {
@@ -3685,7 +3685,7 @@ function parseInstallSource(value) {
 function readPackageJson(pkgJsonPath) {
 	let raw;
 	try {
-		raw = asJsonObject$1(parseJsonUnknown$1(fs$17.readFileSync(pkgJsonPath, "utf-8")));
+		raw = asJsonObject$1(parseJsonUnknown(fs$17.readFileSync(pkgJsonPath, "utf-8")));
 	} catch {
 		return null;
 	}
@@ -4904,7 +4904,7 @@ var AddonInstaller = class AddonInstaller {
 		]) {
 			const candidate = path$39.join(this.workspaceDir, dirName);
 			try {
-				const pkg = asJsonObject$1(parseJsonUnknown$1(fs$17.readFileSync(path$39.join(candidate, "package.json"), "utf-8")));
+				const pkg = asJsonObject$1(parseJsonUnknown(fs$17.readFileSync(path$39.join(candidate, "package.json"), "utf-8")));
 				if (pkg && asString$1(pkg["name"]) === packageName) return candidate;
 			} catch {}
 		}
@@ -5231,7 +5231,7 @@ function readPendingRestart(dataDir) {
 	}
 	let parsed;
 	try {
-		parsed = asJsonObject$1(parseJsonUnknown$1(raw));
+		parsed = asJsonObject$1(parseJsonUnknown(raw));
 	} catch (err) {
 		console.error("[restart-coordinator] Marker JSON invalid — clearing:", err);
 		clearPendingRestart(dataDir);
@@ -5309,7 +5309,6 @@ var CapabilityRegistry = class CapabilityRegistry {
 	routerFactory = null;
 	configReader = null;
 	collectionConfigReader = null;
-	configManager = null;
 	_ready = false;
 	/** Boot-time dependency graph: capability → dependsOn names (from CapabilityDeclaration) */
 	capabilityDeps = /* @__PURE__ */ new Map();
@@ -5394,10 +5393,6 @@ var CapabilityRegistry = class CapabilityRegistry {
 	setCollectionConfigReader(reader) {
 		this.collectionConfigReader = reader;
 	}
-	/** Set the config manager for persisted device activation state. */
-	setConfigManager(manager) {
-		this.configManager = manager;
-	}
 	/** Register boot-time dependency edges (from CapabilityDeclaration.dependsOn). */
 	setDependencies(capabilityName, dependsOn) {
 		this.capabilityDeps.set(capabilityName, dependsOn);
@@ -6133,88 +6128,18 @@ var CapabilityRegistry = class CapabilityRegistry {
 		});
 	}
 	/**
-	* Check if a specific addon's capability is active system-wide.
+	* Check if a specific addon's capability is active.
 	*
-	* Resolution: 1. explicit system override → 2. autoActivate flag → 3. default true
+	* Resolution: the manifest's `autoActivate` flag, else active. There is no
+	* persisted override layer — see D334: an activation map keyed by
+	* `{capability}/{addonId}` is a second authority over a function some addon
+	* already owns, which is what D62 forbids.
 	*/
 	isActiveForSystem(capability, addonId) {
-		if (this.configManager) {
-			const explicit = this.configManager.getSystemActivation()[`${capability}/${addonId}`];
-			if (explicit !== void 0) return explicit;
-		}
 		const autoActivate = this.autoActivateFlags.get(`${capability}/${addonId}`);
 		if (autoActivate !== void 0) return autoActivate;
 		return true;
 	}
-	/** Set system-wide activation for a capability/addon pair. */
-	setSystemActivation(capability, addonId, active) {
-		if (!this.configManager) {
-			this.logger.warn("Cannot set system activation: ConfigManager not wired");
-			return;
-		}
-		this.configManager.setSystemActivation(capability, addonId, active);
-		this.logger.info("System activation set", {
-			tags: { addonId },
-			meta: {
-				capability,
-				active
-			}
-		});
-		this.emitEvent("capability:system-activation-changed", {
-			capability,
-			addonId,
-			active
-		});
-	}
-	/**
-	* Check if a specific addon's capability is active for a device.
-	*
-	* Resolution: 1. explicit device override → 2. system activation → 3. autoActivate → 4. default true
-	*/
-	isActiveForDevice(capability, addonId, deviceId) {
-		if (this.configManager) {
-			const explicit = this.configManager.getDeviceActivation(deviceId)[`${capability}/${addonId}`];
-			if (explicit !== void 0) return explicit;
-		}
-		return this.isActiveForSystem(capability, addonId);
-	}
-	/** Set device activation for a capability/addon pair. */
-	setDeviceActivation(deviceId, capability, addonId, active) {
-		if (!this.configManager) {
-			this.logger.warn("Cannot set device activation: ConfigManager not wired");
-			return;
-		}
-		this.configManager.setDeviceActivation(deviceId, capability, addonId, active);
-		this.logger.info("Device activation set", {
-			tags: {
-				deviceId: Number(deviceId),
-				addonId
-			},
-			meta: {
-				capability,
-				active
-			}
-		});
-		this.emitEvent("capability:device-activation-changed", {
-			deviceId,
-			capability,
-			addonId,
-			active
-		});
-	}
-	/**
-	* Get all addon/capability activations for a device.
-	* Returns every registered provider with its resolved active status.
-	*/
-	getDeviceActivations(deviceId) {
-		const result = [];
-		for (const [capName, state] of this.capabilities) for (const addonId of state.providers.keys()) result.push({
-			capability: capName,
-			addonId,
-			active: this.isActiveForDevice(capName, addonId, deviceId)
-		});
-		return result;
-	}
 	/**
 	* Get all addon/capability activations at system level.
 	* Returns every registered provider with its resolved active status.
@@ -6273,7 +6198,8 @@ var CapabilityRegistry = class CapabilityRegistry {
 	}
 	/**
 	* Resolve a singleton provider for a specific device.
-	* Checks activation (autoActivate + explicit overrides) then per-device override.
+	* Checks activation (the manifest's autoActivate) then the per-device
+	* singleton override — the in-memory provider pin, not a persisted flag.
 	*/
 	resolveForDevice(capability, deviceId) {
 		const state = this.capabilities.get(capability);
@@ -6282,7 +6208,7 @@ var CapabilityRegistry = class CapabilityRegistry {
 		if (deviceMap) {
 			const overrideAddonId = deviceMap.get(capability);
 			if (overrideAddonId) {
-				if (this.isActiveForDevice(capability, overrideAddonId, deviceId)) {
+				if (this.isActiveForSystem(capability, overrideAddonId)) {
 					const provider = state.providers.get(overrideAddonId);
 					if (provider) return asProvider(provider);
 				}
@@ -6295,11 +6221,11 @@ var CapabilityRegistry = class CapabilityRegistry {
 				});
 			}
 		}
-		if (state.activeAddonId && this.isActiveForDevice(capability, state.activeAddonId, deviceId)) {
+		if (state.activeAddonId && this.isActiveForSystem(capability, state.activeAddonId)) {
 			const active = state.providers.get(state.activeAddonId);
 			return active !== void 0 ? asProvider(active) : null;
 		}
-		for (const [addonId, provider] of state.providers) if (this.isActiveForDevice(capability, addonId, deviceId)) return asProvider(provider);
+		for (const [addonId, provider] of state.providers) if (this.isActiveForSystem(capability, addonId)) return asProvider(provider);
 		return null;
 	}
 	/** Set a per-device collection filter. */
@@ -6335,12 +6261,12 @@ var CapabilityRegistry = class CapabilityRegistry {
 	}
 	/**
 	* Resolve collection providers for a specific device.
-	* Filters by activation (autoActivate + explicit overrides) and optional collection filter.
+	* Filters by activation (the manifest's autoActivate) and optional collection filter.
 	*/
 	resolveCollectionForDevice(capability, deviceId) {
 		const state = this.capabilities.get(capability);
 		if (!state || state.definition.mode !== "collection") return [];
-		let entries = [...state.providers.entries()].filter(([addonId]) => !state.disabledProviders.has(addonId)).filter(([addonId]) => this.isActiveForDevice(capability, addonId, deviceId));
+		let entries = [...state.providers.entries()].filter(([addonId]) => !state.disabledProviders.has(addonId)).filter(([addonId]) => this.isActiveForSystem(capability, addonId));
 		const deviceMap = this.deviceCollectionFilters.get(deviceId);
 		if (deviceMap) {
 			const filterAddonIds = deviceMap.get(capability);
@@ -9478,26 +9404,17 @@ var ENV_VAR_MAP = {
 	CAMSTACK_ADMIN_USER: "auth.adminUsername",
 	CAMSTACK_ADMIN_PASS: "auth.adminPassword"
 };
-var EMPTY_RUNTIME_STATE = {
-	systemActivation: {},
-	deviceActivation: {}
-};
 var ConfigManager = class ConfigManager {
 	configPath;
 	bootstrapConfig;
 	settingsStore = null;
 	settingsDoor = null;
-	runtimeState;
-	runtimeStatePath;
 	constructor(configPath) {
 		this.configPath = configPath;
 		const rawYaml = this.loadYaml();
 		const merged = this.applyEnvOverrides(asJsonObject(rawYaml) ?? {});
 		this.bootstrapConfig = bootstrapSchema.parse(merged);
 		this.warnDefaultCredentials();
-		const dataPath = this.bootstrapConfig.server.dataPath ?? "camstack-data";
-		this.runtimeStatePath = path$39.resolve(dataPath, "runtime-state.json");
-		this.runtimeState = this.loadRuntimeState();
 	}
 	/**
 	* Wire the settings-store backend. Called once, after the `settings-store`
@@ -9782,72 +9699,6 @@ var ConfigManager = class ConfigManager {
 			}
 		};
 	}
-	/** Get all system-wide activation overrides. */
-	getSystemActivation() {
-		return this.runtimeState.systemActivation;
-	}
-	/** Set system-wide activation for a capability/addon pair. */
-	setSystemActivation(capability, addonId, active) {
-		const key = `${capability}/${addonId}`;
-		this.runtimeState = {
-			...this.runtimeState,
-			systemActivation: {
-				...this.runtimeState.systemActivation,
-				[key]: active
-			}
-		};
-		this.saveRuntimeState();
-	}
-	/**
-	* Get activation overrides for a device.
-	* Returns a map of `{capability}/{addonId}` → active boolean.
-	* Missing entries mean "use system activation or autoActivate default".
-	*/
-	getDeviceActivation(deviceId) {
-		return this.runtimeState.deviceActivation[deviceId] ?? {};
-	}
-	/**
-	* Get all device activation overrides.
-	* Returns deviceId → (`{capability}/{addonId}` → active).
-	*/
-	getAllDeviceActivation() {
-		return this.runtimeState.deviceActivation;
-	}
-	/**
-	* Set activation for a specific capability/addon on a device.
-	* Persists immediately to runtime-state.json.
-	*
-	* @param deviceId - The device to configure
-	* @param capability - Capability name (e.g., 'motion-detection')
-	* @param addonId - Addon providing the capability (e.g., 'wasm-motion')
-	* @param active - Whether the capability is active on this device
-	*/
-	setDeviceActivation(deviceId, capability, addonId, active) {
-		const key = `${capability}/${addonId}`;
-		const updated = {
-			...this.runtimeState.deviceActivation[deviceId] ?? {},
-			[key]: active
-		};
-		this.runtimeState = {
-			...this.runtimeState,
-			deviceActivation: {
-				...this.runtimeState.deviceActivation,
-				[deviceId]: updated
-			}
-		};
-		this.saveRuntimeState();
-	}
-	/**
-	* Clear all activation overrides for a device (resets to autoActivate defaults).
-	*/
-	clearDeviceActivation(deviceId) {
-		const { [deviceId]: _removed, ...rest } = this.runtimeState.deviceActivation;
-		this.runtimeState = {
-			...this.runtimeState,
-			deviceActivation: rest
-		};
-		this.saveRuntimeState();
-	}
 	getBootstrap(configPath) {
 		return this.getFromBootstrap(configPath);
 	}
@@ -10017,39 +9868,6 @@ var ConfigManager = class ConfigManager {
 		}
 		return found ? result : null;
 	}
-	loadRuntimeState() {
-		if (!fs$17.existsSync(this.runtimeStatePath)) return EMPTY_RUNTIME_STATE;
-		try {
-			const parsed = asJsonObject(parseJsonUnknown(fs$17.readFileSync(this.runtimeStatePath, "utf-8")));
-			if (parsed === null) return EMPTY_RUNTIME_STATE;
-			const systemActivation = asJsonObject(parsed.systemActivation) ?? {};
-			const deviceActivationRaw = asJsonObject(parsed.deviceActivation) ?? {};
-			const deviceActivation = {};
-			for (const [deviceId, entry] of Object.entries(deviceActivationRaw)) {
-				const nested = asJsonObject(entry);
-				if (nested === null) continue;
-				const bools = {};
-				for (const [k, v] of Object.entries(nested)) if (typeof v === "boolean") bools[k] = v;
-				deviceActivation[deviceId] = bools;
-			}
-			const systemBools = {};
-			for (const [k, v] of Object.entries(systemActivation)) if (typeof v === "boolean") systemBools[k] = v;
-			return {
-				systemActivation: systemBools,
-				deviceActivation
-			};
-		} catch {
-			console.warn(`[ConfigManager] Failed to parse runtime state at ${this.runtimeStatePath}, using defaults`);
-			return EMPTY_RUNTIME_STATE;
-		}
-	}
-	saveRuntimeState() {
-		const dir = path$39.dirname(this.runtimeStatePath);
-		if (!fs$17.existsSync(dir)) fs$17.mkdirSync(dir, { recursive: true });
-		const tmpPath = `${this.runtimeStatePath}.tmp`;
-		fs$17.writeFileSync(tmpPath, JSON.stringify(this.runtimeState, null, 2), "utf-8");
-		fs$17.renameSync(tmpPath, this.runtimeStatePath);
-	}
 };
 //#endregion
 //#region ../../node_modules/moleculer/src/constants.js

package/dist/kernel/capability-registry.d.ts

@@ -1,5 +1,4 @@
 import { CapabilityDeclaration, CapabilityDefinition, CapabilityInfo, CapabilityMode, CapabilityProviderMap, CollectionCapabilityMap, IEventBus, IScopedLogger, SingletonCapabilityMap } from '@camstack/types';
-import { ConfigManager } from './config-manager.js';
 /** Result of creating a capability router (opaque to the kernel). */
 export type CapabilityRouter = unknown;
 /** Factory that creates a tRPC router from a capability definition + provider getter. */
@@ -38,7 +37,6 @@ export declare class CapabilityRegistry {
     private routerFactory;
     private configReader;
     private collectionConfigReader;
-    private configManager;
     private _ready;
     /** Boot-time dependency graph: capability → dependsOn names (from CapabilityDeclaration) */
     private readonly capabilityDeps;
@@ -116,8 +114,6 @@ export declare class CapabilityRegistry {
      * in a previous session comes back disabled after a hub reboot.
      */
     setCollectionConfigReader(reader: CollectionConfigReader): void;
-    /** Set the config manager for persisted device activation state. */
-    setConfigManager(manager: ConfigManager): void;
     /** Register boot-time dependency edges (from CapabilityDeclaration.dependsOn). */
     setDependencies(capabilityName: string, dependsOn: readonly string[]): void;
     /** Set the router factory — called by the server layer once at boot. */
@@ -440,30 +436,14 @@ export declare class CapabilityRegistry {
      */
     setActiveSingleton(capability: string, addonId: string, nodeId?: string): Promise<void>;
     /**
-     * Check if a specific addon's capability is active system-wide.
+     * Check if a specific addon's capability is active.
      *
-     * Resolution: 1. explicit system override → 2. autoActivate flag → 3. default true
+     * Resolution: the manifest's `autoActivate` flag, else active. There is no
+     * persisted override layer — see D334: an activation map keyed by
+     * `{capability}/{addonId}` is a second authority over a function some addon
+     * already owns, which is what D62 forbids.
      */
     isActiveForSystem(capability: string, addonId: string): boolean;
-    /** Set system-wide activation for a capability/addon pair. */
-    setSystemActivation(capability: string, addonId: string, active: boolean): void;
-    /**
-     * Check if a specific addon's capability is active for a device.
-     *
-     * Resolution: 1. explicit device override → 2. system activation → 3. autoActivate → 4. default true
-     */
-    isActiveForDevice(capability: string, addonId: string, deviceId: string): boolean;
-    /** Set device activation for a capability/addon pair. */
-    setDeviceActivation(deviceId: string, capability: string, addonId: string, active: boolean): void;
-    /**
-     * Get all addon/capability activations for a device.
-     * Returns every registered provider with its resolved active status.
-     */
-    getDeviceActivations(deviceId: string): ReadonlyArray<{
-        capability: string;
-        addonId: string;
-        active: boolean;
-    }>;
     /**
      * Get all addon/capability activations at system level.
      * Returns every registered provider with its resolved active status.
@@ -481,7 +461,8 @@ export declare class CapabilityRegistry {
     getDeviceOverrides(deviceId: string): Map<string, string>;
     /**
      * Resolve a singleton provider for a specific device.
-     * Checks activation (autoActivate + explicit overrides) then per-device override.
+     * Checks activation (the manifest's autoActivate) then the per-device
+     * singleton override — the in-memory provider pin, not a persisted flag.
      */
     resolveForDevice<T = unknown>(capability: string, deviceId: string): T | null;
     /** Set a per-device collection filter. */
@@ -490,7 +471,7 @@ export declare class CapabilityRegistry {
     clearDeviceCollectionFilter(deviceId: string, capability: string): void;
     /**
      * Resolve collection providers for a specific device.
-     * Filters by activation (autoActivate + explicit overrides) and optional collection filter.
+     * Filters by activation (the manifest's autoActivate) and optional collection filter.
      */
     resolveCollectionForDevice<T = unknown>(capability: string, deviceId: string): readonly T[];
     /** Check if all dependencies for a capability are satisfied. */

package/dist/kernel/config-manager.d.ts

@@ -94,8 +94,6 @@ export declare class ConfigManager {
     private bootstrapConfig;
     private settingsStore;
     private settingsDoor;
-    private runtimeState;
-    private readonly runtimeStatePath;
     constructor(configPath: string);
     /**
      * Wire the settings-store backend. Called once, after the `settings-store`
@@ -213,35 +211,6 @@ export declare class ConfigManager {
     private createDoorBackedSettingsView;
     /** The sync-`ISettingsStore` backend of {@link createSettingsView}. */
     private createStoreSettingsView;
-    /** Get all system-wide activation overrides. */
-    getSystemActivation(): Readonly<Record<string, boolean>>;
-    /** Set system-wide activation for a capability/addon pair. */
-    setSystemActivation(capability: string, addonId: string, active: boolean): void;
-    /**
-     * Get activation overrides for a device.
-     * Returns a map of `{capability}/{addonId}` → active boolean.
-     * Missing entries mean "use system activation or autoActivate default".
-     */
-    getDeviceActivation(deviceId: string): Readonly<Record<string, boolean>>;
-    /**
-     * Get all device activation overrides.
-     * Returns deviceId → (`{capability}/{addonId}` → active).
-     */
-    getAllDeviceActivation(): Readonly<Record<string, Record<string, boolean>>>;
-    /**
-     * Set activation for a specific capability/addon on a device.
-     * Persists immediately to runtime-state.json.
-     *
-     * @param deviceId - The device to configure
-     * @param capability - Capability name (e.g., 'motion-detection')
-     * @param addonId - Addon providing the capability (e.g., 'wasm-motion')
-     * @param active - Whether the capability is active on this device
-     */
-    setDeviceActivation(deviceId: string, capability: string, addonId: string, active: boolean): void;
-    /**
-     * Clear all activation overrides for a device (resets to autoActivate defaults).
-     */
-    clearDeviceActivation(deviceId: string): void;
     /** Get a value from the parsed bootstrap config.
      *  Generic overload is a documented type-level bridge — callers are responsible
      *  for passing a T that matches the config.yaml shape. */
@@ -281,6 +250,4 @@ export declare class ConfigManager {
      * Returns an object keyed by the sub-key, or undefined if nothing is found.
      */
     private getNestedFromSystemSettings;
-    private loadRuntimeState;
-    private saveRuntimeState;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.170",
+  "version": "1.2.172",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",