@camstack/system 1.2.247 → 1.2.249

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { A as addonPagesCapability, Cn as EventCategory, Xt as errMsg, Zt as BaseAddon } from "../../dist-C8v6cK8N.mjs";
+import { A as addonPagesCapability, Cn as EventCategory, Xt as errMsg, Zt as BaseAddon } from "../../dist-B67DC-Ss.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Cn as EventCategory, M as addonWidgetsCapability, Xt as errMsg, Zt as BaseAddon } from "../../dist-C8v6cK8N.mjs";
+import { Cn as EventCategory, M as addonWidgetsCapability, Xt as errMsg, Zt as BaseAddon } from "../../dist-B67DC-Ss.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Cn as EventCategory, N as alertsCapability, Xt as errMsg, Zt as BaseAddon, n as AlertSchema, un as createEvent } from "../../dist-C8v6cK8N.mjs";
+import { Cn as EventCategory, N as alertsCapability, Xt as errMsg, Zt as BaseAddon, n as AlertSchema, un as createEvent } from "../../dist-B67DC-Ss.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Cn as EventCategory, F as backupCapability, Ut as storageOccupancyCapability, Zt as BaseAddon, xt as mayWriteToLocation } from "../../dist-C8v6cK8N.mjs";
+import { Cn as EventCategory, F as backupCapability, Ut as storageOccupancyCapability, Zt as BaseAddon, xt as mayWriteToLocation } from "../../dist-B67DC-Ss.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as BaseAddon, _t as logDestinationCapability } from "../../dist-C8v6cK8N.mjs";
+import { Zt as BaseAddon, _t as logDestinationCapability } from "../../dist-B67DC-Ss.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,4 +1,4 @@
-import { B as coreBlockAddonId, H as coreBlocksCapability, V as coreBlockIdFromAddonId, Xt as errMsg, Zt as BaseAddon, c as CORE_BLOCK_ADDON_PREFIX, d as DeclaredDevices, l as CoreBlockSchema, s as CORE_BLOCKS_ADDON_ID } from "../../dist-C8v6cK8N.mjs";
+import { B as coreBlockAddonId, H as coreBlocksCapability, V as coreBlockIdFromAddonId, Xt as errMsg, Zt as BaseAddon, c as CORE_BLOCK_ADDON_PREFIX, d as DeclaredDevices, l as CoreBlockSchema, s as CORE_BLOCKS_ADDON_ID } from "../../dist-B67DC-Ss.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-1sEBolVU.js");
+const require_dist = require("../../dist-DluLUTzR.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-VcrnwKN0.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { C as STREAM_PROFILE_META, Cn as EventCategory, Et as parseStreamParamsFormPatch, J as deviceStatusCapability, K as deviceManagerCapability, Pt as runtimeStatePolicyFor, Q as enumerateSchemaFields, R as buildStreamParamsConfigSchema, Sn as sleep$1, Xt as errMsg, Z as enumerateItemArrayFields, Zt as BaseAddon, a as CAMERA_SWITCH_ORDER, f as DeviceStatusSchema, gt as locationIconKey, h as LocationIconIdSchema, hn as isDeviceConfigCap, jt as resolveContainerPrimaryChild, nn as DeviceRole, o as CAP_NAMES_WITH_STATUS, on as WELL_KNOWN_TAB_MAP, q as deviceStateCapability, rn as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, tn as DeviceFeature, wt as normalizeUnit, zt as siteZoneKey } from "../../dist-C8v6cK8N.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-Dv044bmH.mjs";
+import { C as STREAM_PROFILE_META, Cn as EventCategory, Et as parseStreamParamsFormPatch, J as deviceStatusCapability, K as deviceManagerCapability, Pt as runtimeStatePolicyFor, Q as enumerateSchemaFields, R as buildStreamParamsConfigSchema, Sn as sleep$1, Xt as errMsg, Z as enumerateItemArrayFields, Zt as BaseAddon, a as CAMERA_SWITCH_ORDER, f as DeviceStatusSchema, gt as locationIconKey, h as LocationIconIdSchema, hn as isDeviceConfigCap, jt as resolveContainerPrimaryChild, nn as DeviceRole, o as CAP_NAMES_WITH_STATUS, on as WELL_KNOWN_TAB_MAP, q as deviceStateCapability, rn as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, tn as DeviceFeature, wt as normalizeUnit, zt as siteZoneKey } from "../../dist-B67DC-Ss.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-oN5dGOi5.mjs";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { $ as evaluateSensorEdge, Cn as EventCategory, I as bareAddonId, Xt as errMsg, Y as doorbellCapability, Zt as BaseAddon, b as SOURCE_CAPS, lt as isSameAddonId, rn as DeviceType, un as createEvent, ut as isSourceCap, x as SOURCE_DEVICE_TYPES } from "../../dist-C8v6cK8N.mjs";
+import { $ as evaluateSensorEdge, Cn as EventCategory, I as bareAddonId, Xt as errMsg, Y as doorbellCapability, Zt as BaseAddon, b as SOURCE_CAPS, lt as isSameAddonId, rn as DeviceType, un as createEvent, ut as isSourceCap, x as SOURCE_DEVICE_TYPES } from "../../dist-B67DC-Ss.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as BaseAddon, _t as logDestinationCapability } from "../../dist-C8v6cK8N.mjs";
+import { Zt as BaseAddon, _t as logDestinationCapability } from "../../dist-B67DC-Ss.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Cn as EventCategory, Xt as errMsg, Zt as BaseAddon, un as createEvent, y as RecordingStatusSchema } from "../../dist-C8v6cK8N.mjs";
+import { Cn as EventCategory, Xt as errMsg, Zt as BaseAddon, un as createEvent, y as RecordingStatusSchema } from "../../dist-B67DC-Ss.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Kt as userManagementCapability, P as authProviderCapability, Zt as BaseAddon, k as UserRecordSchema, r as ApiKeyRecordSchema, w as ScopedTokenSchema } from "../../dist-C8v6cK8N.mjs";
+import { Kt as userManagementCapability, P as authProviderCapability, Zt as BaseAddon, k as UserRecordSchema, r as ApiKeyRecordSchema, w as ScopedTokenSchema } from "../../dist-B67DC-Ss.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 const require_tls = require("../../tls-BFs4PzoW.js");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Cn as EventCategory, Zt as BaseAddon, ht as localNetworkCapability } from "../../dist-C8v6cK8N.mjs";
+import { Cn as EventCategory, Zt as BaseAddon, ht as localNetworkCapability } from "../../dist-B67DC-Ss.mjs";
 import { S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, i as writeExtraSans, l as reissueTlsLeaf, n as readTlsAccessStatus, o as validateUploadedTls, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, y as applyLanHttp } from "../../tls-2xbgg78V.mjs";
 import { mkdir, writeFile } from "node:fs/promises";
 import { join } from "node:path";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as BaseAddon, _t as logDestinationCapability } from "../../dist-C8v6cK8N.mjs";
+import { Zt as BaseAddon, _t as logDestinationCapability } from "../../dist-B67DC-Ss.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 let node_fs_promises = require("node:fs/promises");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { At as resolveBucketMs, Cn as EventCategory, St as metricsProviderCapability, Xt as errMsg, Zt as BaseAddon, kt as reducePoints, rt as foldSnapshotByFunction, un as createEvent } from "../../dist-C8v6cK8N.mjs";
+import { At as resolveBucketMs, Cn as EventCategory, St as metricsProviderCapability, Xt as errMsg, Zt as BaseAddon, kt as reducePoints, rt as foldSnapshotByFunction, un as createEvent } from "../../dist-B67DC-Ss.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import * as fs from "node:fs";
 import { constants, readFileSync } from "node:fs";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_child_process = require("node:child_process");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { Cn as EventCategory, Dt as platformProbeCapability, Lt as scoreRuntimes, X as enumerateInferenceDevices, Xt as errMsg, Zt as BaseAddon, fn as emitReadiness } from "../../dist-C8v6cK8N.mjs";
+import { Cn as EventCategory, Dt as platformProbeCapability, Lt as scoreRuntimes, X as enumerateInferenceDevices, Xt as errMsg, Zt as BaseAddon, fn as emitReadiness } from "../../dist-B67DC-Ss.mjs";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";
 import * as os from "node:os";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Cn as EventCategory, Zt as BaseAddon } from "../../dist-C8v6cK8N.mjs";
+import { Cn as EventCategory, Zt as BaseAddon } from "../../dist-B67DC-Ss.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,11 +3,13 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 const require_snapshot_courtesy = require("../../snapshot-courtesy-Cqs7GkOV.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
+let node_path = require("node:path");
+let node_fs = require("node:fs");
 let node_child_process = require("node:child_process");
 let sharp = require("sharp");
 sharp = require_chunk.__toESM(sharp);
@@ -129,6 +131,105 @@ var SnapshotCache = class {
 	}
 };
 //#endregion
+//#region src/builtins/snapshot/snapshot-durable-store.ts
+/**
+* The last good frame per camera, on disk, so it outlives the process.
+*
+* ## Why
+*
+* The snapshot cache is RAM-only and says so: *"after a hub restart this
+* legitimately answers nothing and the generated card is the picture"*. That is
+* accurate and it is also the whole defect, because the cameras that most need
+* a cached frame are the ones that can never be asked for a fresh one. A
+* sleeping battery camera refuses every snapshot that does not carry `force`,
+* and the sentry deliberately never passes it — forcing would wake the very
+* camera the window exists so as not to disturb.
+*
+* Measured 2026-09-17: the baby monitor showed the courtesy card all morning.
+* Nothing was broken. Three server updates had emptied the cache, and the
+* camera had been asleep since.
+*
+* ## Shape
+*
+* One file per device under the addon's OWN private directory (`ctx.dataDir` —
+* `<nodeDataDir>/addons-data/<addonId>`, which the addon owns exclusively), and
+* it is overwritten rather than appended: what is wanted is A recent frame, not
+* a history. A history here would grow without a reaper and compete with the
+* recordings for the same disk.
+*
+* Writes are THROTTLED per device. Snapshots are captured far more often than a
+* process restarts, and persisting every one buys nothing — one recent frame is
+* the entire value.
+*
+* Nothing here throws. The caller already has its picture; persistence is a
+* bonus for the NEXT boot, and a disk that refuses must never cost a snapshot
+* that succeeded. A frame that cannot be read is reported ABSENT, never as an
+* error and never as an empty buffer — absent is the truth and the courtesy
+* card is the correct answer to it.
+*/
+/** One recent frame is the value; a newer one is not worth the disk. */
+var DEFAULT_MIN_INTERVAL_MS = 6e4;
+/** Its own subdirectory, so the addon's other state is never mistaken for a frame. */
+var SUBDIR = "last-frame";
+var SnapshotDurableStore = class {
+	dir;
+	minIntervalMs;
+	now;
+	/** Last write per device, so the throttle survives without touching disk. */
+	lastWriteMs = /* @__PURE__ */ new Map();
+	constructor(options) {
+		this.dir = (0, node_path.join)(options.dataDir, SUBDIR);
+		this.minIntervalMs = options.minIntervalMs ?? DEFAULT_MIN_INTERVAL_MS;
+		this.now = options.now ?? (() => Date.now());
+	}
+	/** @returns whether the frame was written. `false` is throttled or refused. */
+	async put(deviceId, jpeg) {
+		if (jpeg.length === 0) return false;
+		const at = this.now();
+		const previous = this.lastWriteMs.get(deviceId);
+		if (previous !== void 0 && at - previous < this.minIntervalMs) return false;
+		try {
+			await node_fs.promises.mkdir(this.dir, { recursive: true });
+			const target = this.pathFor(deviceId);
+			const staging = `${target}.writing`;
+			await node_fs.promises.writeFile(staging, jpeg);
+			await node_fs.promises.rename(staging, target);
+			this.lastWriteMs.set(deviceId, at);
+			return true;
+		} catch {
+			return false;
+		}
+	}
+	/** The frame from a previous process, or `null` — which is a real answer. */
+	async get(deviceId) {
+		return (await this.getDated(deviceId))?.jpeg ?? null;
+	}
+	/**
+	* The frame WITH the moment it was captured.
+	*
+	* The age travels with it because everything downstream decides on age, and
+	* a frame restored from disk that claims to be new is worse than no frame:
+	* it would satisfy a freshness gate it has no right to pass. The file's own
+	* mtime is the honest answer — it is when this frame was written.
+	*/
+	async getDated(deviceId) {
+		try {
+			const path = this.pathFor(deviceId);
+			const [jpeg, stat] = await Promise.all([node_fs.promises.readFile(path), node_fs.promises.stat(path)]);
+			if (jpeg.length === 0) return null;
+			return {
+				jpeg,
+				capturedAtMs: stat.mtimeMs
+			};
+		} catch {
+			return null;
+		}
+	}
+	pathFor(deviceId) {
+		return (0, node_path.join)(this.dir, `${String(deviceId)}.jpg`);
+	}
+};
+//#endregion
 //#region src/builtins/snapshot/snapshot-coalescing.ts
 /**
 * Pure, side-effect-free coalescing / stale-while-revalidate / bounded-pool
@@ -948,6 +1049,26 @@ var SnapshotAddon = class SnapshotAddon extends require_dist.BaseAddon {
 	*/
 	/** Cameras resting after a native miss — see `snapshot-fatigue.ts`. */
 	fatigue = new NativeSnapshotFatigue();
+	/**
+	* The last good frame per camera, on disk, so it outlives the process.
+	*
+	* The cache above is RAM-only and the cameras that most need it are the ones
+	* that can never be asked for a fresh frame: a sleeping battery camera
+	* refuses every snapshot without `force`, and the background callers that
+	* would want one deliberately never pass it. Measured 2026-09-17 — the baby
+	* monitor showed the courtesy card all morning because three server updates
+	* had emptied this cache and the camera had been asleep since.
+	*/
+	durableStore = null;
+	/**
+	* Built on first use, never in a field initializer: `ctx` does not exist
+	* until `initialize()`, and reading it at construction throws
+	* "ctx accessed before initialize()" for the whole addon.
+	*/
+	get durable() {
+		this.durableStore ??= new SnapshotDurableStore({ dataDir: this.ctx.dataDir });
+		return this.durableStore;
+	}
 	cache = new SnapshotCache({ onEvict: (deviceId, streamId, reason) => {
 		this.ctx.logger.debug("snapshot cache evicted", {
 			tags: { deviceId },
@@ -1611,7 +1732,8 @@ var SnapshotAddon = class SnapshotAddon extends require_dist.BaseAddon {
 					ageMs: hit ? now - hit.ts : null
 				}
 			});
-			return await this.stateImage(deviceId, state.reason, deviceName, hit);
+			const base = hit ?? await this.durableEntry(deviceId);
+			return await this.stateImage(deviceId, state.reason, deviceName, base);
 		}
 		const effectiveMaxAgeMs = Math.min(maximumCacheAgeMs, Math.max(0, effectiveMaxAgeS(prefs, isBatteryDevice) * 1e3));
 		const decision = decideSnapshotServe({
@@ -1766,6 +1888,7 @@ var SnapshotAddon = class SnapshotAddon extends require_dist.BaseAddon {
 						ts: now,
 						streamId: effectiveStreamId ?? null
 					});
+					this.durable.put(deviceId, Buffer.from(result.base64, "base64"));
 					return {
 						ok: true,
 						image: result
@@ -1813,6 +1936,7 @@ var SnapshotAddon = class SnapshotAddon extends require_dist.BaseAddon {
 					ts: now,
 					streamId: effectiveStreamId ?? null
 				});
+				this.durable.put(deviceId, Buffer.from(fallback.base64, "base64"));
 				return {
 					ok: true,
 					image: fallback
@@ -2278,6 +2402,23 @@ var SnapshotAddon = class SnapshotAddon extends require_dist.BaseAddon {
 	* the answer by itself; if it cannot be decoded, fall back to the generated
 	* courtesy background rather than leaking an unlabelled stale frame.
 	*/
+	/** The persisted frame as a cache entry, with its real age. */
+	async durableEntry(deviceId) {
+		const dated = await this.durable.getDated(deviceId);
+		if (dated === null) return void 0;
+		this.ctx.logger.debug("snapshot: serving the frame kept from a previous process", {
+			tags: { deviceId },
+			meta: { ageMs: Date.now() - dated.capturedAtMs }
+		});
+		return {
+			data: {
+				base64: dated.jpeg.toString("base64"),
+				contentType: "image/jpeg"
+			},
+			ts: dated.capturedAtMs,
+			streamId: null
+		};
+	}
 	async stateImage(deviceId, reason, deviceName, hit) {
 		const resolvedName = deviceName ?? `#${String(deviceId)}`;
 		if (!hit) return await this.courtesyImage(deviceId, reason, resolvedName);

package/dist/builtins/snapshot/index.mjs

@@ -1,8 +1,10 @@
-import { Bt as snapshotCapability, Cn as EventCategory, G as deriveBatteryPresence, Gt as streamQualityLabel, I as bareAddonId, L as batteryCapability, Xt as errMsg, Zt as BaseAddon, gn as nodePin, i as BatteryStatusSchema, rn as DeviceType, tn as DeviceFeature } from "../../dist-C8v6cK8N.mjs";
+import { Bt as snapshotCapability, Cn as EventCategory, G as deriveBatteryPresence, Gt as streamQualityLabel, I as bareAddonId, L as batteryCapability, Xt as errMsg, Zt as BaseAddon, gn as nodePin, i as BatteryStatusSchema, rn as DeviceType, tn as DeviceFeature } from "../../dist-B67DC-Ss.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg } from "../../snapshot-courtesy-CZPvteq2.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { signExpiringUrl, verifyExpiringUrl } from "@camstack/types/node";
+import { join } from "node:path";
+import { promises } from "node:fs";
 import { execFile } from "node:child_process";
 import sharp from "sharp";
 //#region src/builtins/snapshot/snapshot-cache.ts
@@ -123,6 +125,105 @@ var SnapshotCache = class {
 	}
 };
 //#endregion
+//#region src/builtins/snapshot/snapshot-durable-store.ts
+/**
+* The last good frame per camera, on disk, so it outlives the process.
+*
+* ## Why
+*
+* The snapshot cache is RAM-only and says so: *"after a hub restart this
+* legitimately answers nothing and the generated card is the picture"*. That is
+* accurate and it is also the whole defect, because the cameras that most need
+* a cached frame are the ones that can never be asked for a fresh one. A
+* sleeping battery camera refuses every snapshot that does not carry `force`,
+* and the sentry deliberately never passes it — forcing would wake the very
+* camera the window exists so as not to disturb.
+*
+* Measured 2026-09-17: the baby monitor showed the courtesy card all morning.
+* Nothing was broken. Three server updates had emptied the cache, and the
+* camera had been asleep since.
+*
+* ## Shape
+*
+* One file per device under the addon's OWN private directory (`ctx.dataDir` —
+* `<nodeDataDir>/addons-data/<addonId>`, which the addon owns exclusively), and
+* it is overwritten rather than appended: what is wanted is A recent frame, not
+* a history. A history here would grow without a reaper and compete with the
+* recordings for the same disk.
+*
+* Writes are THROTTLED per device. Snapshots are captured far more often than a
+* process restarts, and persisting every one buys nothing — one recent frame is
+* the entire value.
+*
+* Nothing here throws. The caller already has its picture; persistence is a
+* bonus for the NEXT boot, and a disk that refuses must never cost a snapshot
+* that succeeded. A frame that cannot be read is reported ABSENT, never as an
+* error and never as an empty buffer — absent is the truth and the courtesy
+* card is the correct answer to it.
+*/
+/** One recent frame is the value; a newer one is not worth the disk. */
+var DEFAULT_MIN_INTERVAL_MS = 6e4;
+/** Its own subdirectory, so the addon's other state is never mistaken for a frame. */
+var SUBDIR = "last-frame";
+var SnapshotDurableStore = class {
+	dir;
+	minIntervalMs;
+	now;
+	/** Last write per device, so the throttle survives without touching disk. */
+	lastWriteMs = /* @__PURE__ */ new Map();
+	constructor(options) {
+		this.dir = join(options.dataDir, SUBDIR);
+		this.minIntervalMs = options.minIntervalMs ?? DEFAULT_MIN_INTERVAL_MS;
+		this.now = options.now ?? (() => Date.now());
+	}
+	/** @returns whether the frame was written. `false` is throttled or refused. */
+	async put(deviceId, jpeg) {
+		if (jpeg.length === 0) return false;
+		const at = this.now();
+		const previous = this.lastWriteMs.get(deviceId);
+		if (previous !== void 0 && at - previous < this.minIntervalMs) return false;
+		try {
+			await promises.mkdir(this.dir, { recursive: true });
+			const target = this.pathFor(deviceId);
+			const staging = `${target}.writing`;
+			await promises.writeFile(staging, jpeg);
+			await promises.rename(staging, target);
+			this.lastWriteMs.set(deviceId, at);
+			return true;
+		} catch {
+			return false;
+		}
+	}
+	/** The frame from a previous process, or `null` — which is a real answer. */
+	async get(deviceId) {
+		return (await this.getDated(deviceId))?.jpeg ?? null;
+	}
+	/**
+	* The frame WITH the moment it was captured.
+	*
+	* The age travels with it because everything downstream decides on age, and
+	* a frame restored from disk that claims to be new is worse than no frame:
+	* it would satisfy a freshness gate it has no right to pass. The file's own
+	* mtime is the honest answer — it is when this frame was written.
+	*/
+	async getDated(deviceId) {
+		try {
+			const path = this.pathFor(deviceId);
+			const [jpeg, stat] = await Promise.all([promises.readFile(path), promises.stat(path)]);
+			if (jpeg.length === 0) return null;
+			return {
+				jpeg,
+				capturedAtMs: stat.mtimeMs
+			};
+		} catch {
+			return null;
+		}
+	}
+	pathFor(deviceId) {
+		return join(this.dir, `${String(deviceId)}.jpg`);
+	}
+};
+//#endregion
 //#region src/builtins/snapshot/snapshot-coalescing.ts
 /**
 * Pure, side-effect-free coalescing / stale-while-revalidate / bounded-pool
@@ -942,6 +1043,26 @@ var SnapshotAddon = class SnapshotAddon extends BaseAddon {
 	*/
 	/** Cameras resting after a native miss — see `snapshot-fatigue.ts`. */
 	fatigue = new NativeSnapshotFatigue();
+	/**
+	* The last good frame per camera, on disk, so it outlives the process.
+	*
+	* The cache above is RAM-only and the cameras that most need it are the ones
+	* that can never be asked for a fresh frame: a sleeping battery camera
+	* refuses every snapshot without `force`, and the background callers that
+	* would want one deliberately never pass it. Measured 2026-09-17 — the baby
+	* monitor showed the courtesy card all morning because three server updates
+	* had emptied this cache and the camera had been asleep since.
+	*/
+	durableStore = null;
+	/**
+	* Built on first use, never in a field initializer: `ctx` does not exist
+	* until `initialize()`, and reading it at construction throws
+	* "ctx accessed before initialize()" for the whole addon.
+	*/
+	get durable() {
+		this.durableStore ??= new SnapshotDurableStore({ dataDir: this.ctx.dataDir });
+		return this.durableStore;
+	}
 	cache = new SnapshotCache({ onEvict: (deviceId, streamId, reason) => {
 		this.ctx.logger.debug("snapshot cache evicted", {
 			tags: { deviceId },
@@ -1605,7 +1726,8 @@ var SnapshotAddon = class SnapshotAddon extends BaseAddon {
 					ageMs: hit ? now - hit.ts : null
 				}
 			});
-			return await this.stateImage(deviceId, state.reason, deviceName, hit);
+			const base = hit ?? await this.durableEntry(deviceId);
+			return await this.stateImage(deviceId, state.reason, deviceName, base);
 		}
 		const effectiveMaxAgeMs = Math.min(maximumCacheAgeMs, Math.max(0, effectiveMaxAgeS(prefs, isBatteryDevice) * 1e3));
 		const decision = decideSnapshotServe({
@@ -1760,6 +1882,7 @@ var SnapshotAddon = class SnapshotAddon extends BaseAddon {
 						ts: now,
 						streamId: effectiveStreamId ?? null
 					});
+					this.durable.put(deviceId, Buffer.from(result.base64, "base64"));
 					return {
 						ok: true,
 						image: result
@@ -1807,6 +1930,7 @@ var SnapshotAddon = class SnapshotAddon extends BaseAddon {
 					ts: now,
 					streamId: effectiveStreamId ?? null
 				});
+				this.durable.put(deviceId, Buffer.from(fallback.base64, "base64"));
 				return {
 					ok: true,
 					image: fallback
@@ -2272,6 +2396,23 @@ var SnapshotAddon = class SnapshotAddon extends BaseAddon {
 	* the answer by itself; if it cannot be decoded, fall back to the generated
 	* courtesy background rather than leaking an unlabelled stale frame.
 	*/
+	/** The persisted frame as a cache entry, with its real age. */
+	async durableEntry(deviceId) {
+		const dated = await this.durable.getDated(deviceId);
+		if (dated === null) return void 0;
+		this.ctx.logger.debug("snapshot: serving the frame kept from a previous process", {
+			tags: { deviceId },
+			meta: { ageMs: Date.now() - dated.capturedAtMs }
+		});
+		return {
+			data: {
+				base64: dated.jpeg.toString("base64"),
+				contentType: "image/jpeg"
+			},
+			ts: dated.capturedAtMs,
+			streamId: null
+		};
+	}
 	async stateImage(deviceId, reason, deviceName, hit) {
 		const resolvedName = deviceName ?? `#${String(deviceId)}`;
 		if (!hit) return await this.courtesyImage(deviceId, reason, resolvedName);

package/dist/builtins/snapshot/snapshot-durable-store.d.ts

@@ -0,0 +1,32 @@
+export interface SnapshotDurableStoreOptions {
+    /** `ctx.dataDir` — the addon's exclusive directory. */
+    readonly dataDir: string;
+    readonly minIntervalMs?: number;
+    /** Injectable for tests; `Date.now` otherwise. */
+    readonly now?: () => number;
+}
+export declare class SnapshotDurableStore {
+    private readonly dir;
+    private readonly minIntervalMs;
+    private readonly now;
+    /** Last write per device, so the throttle survives without touching disk. */
+    private readonly lastWriteMs;
+    constructor(options: SnapshotDurableStoreOptions);
+    /** @returns whether the frame was written. `false` is throttled or refused. */
+    put(deviceId: number, jpeg: Buffer): Promise<boolean>;
+    /** The frame from a previous process, or `null` — which is a real answer. */
+    get(deviceId: number): Promise<Buffer | null>;
+    /**
+     * The frame WITH the moment it was captured.
+     *
+     * The age travels with it because everything downstream decides on age, and
+     * a frame restored from disk that claims to be new is worse than no frame:
+     * it would satisfy a freshness gate it has no right to pass. The file's own
+     * mtime is the honest answer — it is when this frame was written.
+     */
+    getDated(deviceId: number): Promise<{
+        jpeg: Buffer;
+        capturedAtMs: number;
+    } | null>;
+    private pathFor;
+}

package/dist/builtins/snapshot/snapshot.addon.d.ts

@@ -38,6 +38,23 @@ export declare class SnapshotAddon extends BaseAddon<SnapshotAddonConfig> {
      */
     /** Cameras resting after a native miss — see `snapshot-fatigue.ts`. */
     private readonly fatigue;
+    /**
+     * The last good frame per camera, on disk, so it outlives the process.
+     *
+     * The cache above is RAM-only and the cameras that most need it are the ones
+     * that can never be asked for a fresh frame: a sleeping battery camera
+     * refuses every snapshot without `force`, and the background callers that
+     * would want one deliberately never pass it. Measured 2026-09-17 — the baby
+     * monitor showed the courtesy card all morning because three server updates
+     * had emptied this cache and the camera had been asleep since.
+     */
+    private durableStore;
+    /**
+     * Built on first use, never in a field initializer: `ctx` does not exist
+     * until `initialize()`, and reading it at construction throws
+     * "ctx accessed before initialize()" for the whole addon.
+     */
+    private get durable();
     private readonly cache;
     /** Card-sized derivatives of the frames above, keyed by width and validated
      *  against the source frame's timestamp. */
@@ -487,6 +504,8 @@ export declare class SnapshotAddon extends BaseAddon<SnapshotAddonConfig> {
      * the answer by itself; if it cannot be decoded, fall back to the generated
      * courtesy background rather than leaking an unlabelled stale frame.
      */
+    /** The persisted frame as a cache entry, with its real age. */
+    private durableEntry;
     private stateImage;
     /**
      * Single-trip device lookup against device-manager — memoized for

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { Wt as storageProviderCapability, Zt as BaseAddon, nt as filesystemBrowseCapability } from "../../dist-C8v6cK8N.mjs";
+import { Wt as storageProviderCapability, Zt as BaseAddon, nt as filesystemBrowseCapability } from "../../dist-B67DC-Ss.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 const require_hub_cap_forward = require("../../hub-cap-forward-DmHNjbB0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Cn as EventCategory, Ct as modeMayWrite, D as StorageLocationTypeSchema, E as StorageLocationModeSchema, Ht as storageMigrationCapability, Mt as resolveLocationMode, O as StorageMigrationJobSchema, Rt as settingsStoreCapability, T as StorageCleanupJobSchema, Vt as storageCapability, Yt as withLocationMode, Zt as BaseAddon, _ as REDACTED_SECRET, _n as parseJsonObject, bt as mayReadLocation, et as evictionPolicyOfLocation, it as gbToBytes, m as LegacyStorageLocationDefaultSchema, pt as legacyModeOf, st as isLocationEnabled, xt as mayWriteToLocation, z as collectSecretConfigKeys } from "../../dist-C8v6cK8N.mjs";
+import { Cn as EventCategory, Ct as modeMayWrite, D as StorageLocationTypeSchema, E as StorageLocationModeSchema, Ht as storageMigrationCapability, Mt as resolveLocationMode, O as StorageMigrationJobSchema, Rt as settingsStoreCapability, T as StorageCleanupJobSchema, Vt as storageCapability, Yt as withLocationMode, Zt as BaseAddon, _ as REDACTED_SECRET, _n as parseJsonObject, bt as mayReadLocation, et as evictionPolicyOfLocation, it as gbToBytes, m as LegacyStorageLocationDefaultSchema, pt as legacyModeOf, st as isLocationEnabled, xt as mayWriteToLocation, z as collectSecretConfigKeys } from "../../dist-B67DC-Ss.mjs";
 import { t as HUB_CAP_FWD_ACTION } from "../../hub-cap-forward-BdT320dq.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { Xt as errMsg, Zt as BaseAddon, mn as hydrateSchema } from "../../dist-C8v6cK8N.mjs";
+import { Xt as errMsg, Zt as BaseAddon, mn as hydrateSchema } from "../../dist-B67DC-Ss.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CpXBoZOv.js");
+const require_dist = require("../../dist-DluLUTzR.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as BaseAddon, _t as logDestinationCapability } from "../../dist-C8v6cK8N.mjs";
+import { Zt as BaseAddon, _t as logDestinationCapability } from "../../dist-B67DC-Ss.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{dist-C8v6cK8N.mjs → dist-B67DC-Ss.mjs}

@@ -8999,7 +8999,7 @@ var streamBrokerCapability = {
 		*  - the signal is ENABLED for this camera (the operator's per-camera
 		*    choice — a camera may declare a signal the operator does not want
 		*    waking anything), and
-		*  - a consumer is actually attached and waiting on the prestream. Waking
+		*  - a consumer is actually attached and waiting on the sentry. Waking
 		*    a camera nobody is watching is the one thing a battery camera must
 		*    never do, and a signal arriving with no consumer is exactly that.
 		*

package/dist/{dist-CpXBoZOv.js → dist-DluLUTzR.js}

@@ -8999,7 +8999,7 @@ var streamBrokerCapability = {
 		*  - the signal is ENABLED for this camera (the operator's per-camera
 		*    choice — a camera may declare a signal the operator does not want
 		*    waking anything), and
-		*  - a consumer is actually attached and waiting on the prestream. Waking
+		*  - a consumer is actually attached and waiting on the sentry. Waking
 		*    a camera nobody is watching is the one thing a battery camera must
 		*    never do, and a signal arriving with no consumer is exactly that.
 		*

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-CpXBoZOv.js");
+const require_dist = require("./dist-DluLUTzR.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");
@@ -4499,6 +4499,32 @@ var AddonInstaller = class AddonInstaller {
 	*     into `addonsDir/<pkg>/`. The Electron bundled-addons path
 	*     uses this so the runtime owns its on-disk copy.
 	*/
+	/**
+	* Re-install one addon from the running server closure.
+	*
+	* The closure carries a copy of every addon it declares as a dependency, and
+	* NOTHING loads an addon from there — `AddonLoader` reads the addon root and
+	* only the addon root, on every role. So those copies are transport, and
+	* this is the only thing that moves them into the place that runs code.
+	*
+	* Without it a server update advances the closure and changes nothing: six
+	* addons on the hub were behind by up to nineteen versions on 2026-09-17,
+	* each frozen at whenever somebody last ran `camstack deploy`.
+	*
+	* WHICH addons deserve this is not decided here — see `planAddonRealignment`,
+	* which needs two gates because a version comparison alone would overwrite a
+	* deliberate deploy. This only carries out a decision already made.
+	*/
+	async realignFromClosure(packageName, closureDir) {
+		const targetDir = node_path.join(this.addonsDir, packageName);
+		const result = await this.installLocal(packageName, closureDir);
+		await node_fs.promises.writeFile(node_path.join(targetDir, ".install-source"), "closure");
+		this.manifest.upsert(result.name, {
+			version: result.version,
+			source: "closure"
+		});
+		return result;
+	}
 	async installLocal(packageName, sourceDir) {
 		const pkgView = readPackageJson(node_path.join(sourceDir, "package.json"));
 		if (!pkgView) throw new Error(`Invalid package.json at ${sourceDir}`);

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { $t as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Cn as EventCategory$1, Ft as scopesAllowAddon, It as scopesAllowDeviceCap, Nt as resolveMethodAuth, Ot as procedureAuthKey, Qt as DATAPLANE_SECRET_HEADER$1, Tt as objectInputDeclaresAddonId, Xt as errMsg$1, _n as parseJsonObject, an as ReadinessTimeoutError, at as isArrayOutputSchema, bn as resolveCapMount, cn as asNumber, ct as isObjectInput, dn as emitDownForOwnedCaps, dt as isVoidInput, en as DEVICE_STATUS_METHOD, ft as kebabToCamel, g as METHOD_ACCESS_MAP, in as ReadinessRegistry, j as addonSettingsCapability, ln as asString$1, mt as lifecycleJobSchema, ot as isCollectionArrayMethod, p as LOG_LEVEL_RANK, pn as expandCapMethods, sn as asJsonObject$1, t as ALL_CAPABILITY_DEFINITIONS, tt as extractNestedAddonId, un as createEvent, v as RUNTIME_DEFAULTS, vn as parseJsonUnknown, vt as logLevelAtMost, xn as scopeKey, yn as readinessKey, yt as looseSchema } from "./dist-C8v6cK8N.mjs";
+import { $t as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Cn as EventCategory$1, Ft as scopesAllowAddon, It as scopesAllowDeviceCap, Nt as resolveMethodAuth, Ot as procedureAuthKey, Qt as DATAPLANE_SECRET_HEADER$1, Tt as objectInputDeclaresAddonId, Xt as errMsg$1, _n as parseJsonObject, an as ReadinessTimeoutError, at as isArrayOutputSchema, bn as resolveCapMount, cn as asNumber, ct as isObjectInput, dn as emitDownForOwnedCaps, dt as isVoidInput, en as DEVICE_STATUS_METHOD, ft as kebabToCamel, g as METHOD_ACCESS_MAP, in as ReadinessRegistry, j as addonSettingsCapability, ln as asString$1, mt as lifecycleJobSchema, ot as isCollectionArrayMethod, p as LOG_LEVEL_RANK, pn as expandCapMethods, sn as asJsonObject$1, t as ALL_CAPABILITY_DEFINITIONS, tt as extractNestedAddonId, un as createEvent, v as RUNTIME_DEFAULTS, vn as parseJsonUnknown, vt as logLevelAtMost, xn as scopeKey, yn as readinessKey, yt as looseSchema } from "./dist-B67DC-Ss.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
@@ -4492,6 +4492,32 @@ var AddonInstaller = class AddonInstaller {
 	*     into `addonsDir/<pkg>/`. The Electron bundled-addons path
 	*     uses this so the runtime owns its on-disk copy.
 	*/
+	/**
+	* Re-install one addon from the running server closure.
+	*
+	* The closure carries a copy of every addon it declares as a dependency, and
+	* NOTHING loads an addon from there — `AddonLoader` reads the addon root and
+	* only the addon root, on every role. So those copies are transport, and
+	* this is the only thing that moves them into the place that runs code.
+	*
+	* Without it a server update advances the closure and changes nothing: six
+	* addons on the hub were behind by up to nineteen versions on 2026-09-17,
+	* each frozen at whenever somebody last ran `camstack deploy`.
+	*
+	* WHICH addons deserve this is not decided here — see `planAddonRealignment`,
+	* which needs two gates because a version comparison alone would overwrite a
+	* deliberate deploy. This only carries out a decision already made.
+	*/
+	async realignFromClosure(packageName, closureDir) {
+		const targetDir = path$39.join(this.addonsDir, packageName);
+		const result = await this.installLocal(packageName, closureDir);
+		await fs$17.promises.writeFile(path$39.join(targetDir, ".install-source"), "closure");
+		this.manifest.upsert(result.name, {
+			version: result.version,
+			source: "closure"
+		});
+		return result;
+	}
 	async installLocal(packageName, sourceDir) {
 		const pkgView = readPackageJson(path$39.join(sourceDir, "package.json"));
 		if (!pkgView) throw new Error(`Invalid package.json at ${sourceDir}`);

package/dist/kernel/addon-installer.d.ts

@@ -290,6 +290,26 @@ export declare class AddonInstaller {
      *     into `addonsDir/<pkg>/`. The Electron bundled-addons path
      *     uses this so the runtime owns its on-disk copy.
      */
+    /**
+     * Re-install one addon from the running server closure.
+     *
+     * The closure carries a copy of every addon it declares as a dependency, and
+     * NOTHING loads an addon from there — `AddonLoader` reads the addon root and
+     * only the addon root, on every role. So those copies are transport, and
+     * this is the only thing that moves them into the place that runs code.
+     *
+     * Without it a server update advances the closure and changes nothing: six
+     * addons on the hub were behind by up to nineteen versions on 2026-09-17,
+     * each frozen at whenever somebody last ran `camstack deploy`.
+     *
+     * WHICH addons deserve this is not decided here — see `planAddonRealignment`,
+     * which needs two gates because a version comparison alone would overwrite a
+     * deliberate deploy. This only carries out a decision already made.
+     */
+    realignFromClosure(packageName: string, closureDir: string): Promise<{
+        name: string;
+        version: string;
+    }>;
     private installLocal;
     /**
      * Symlink `addonsDir/<pkg>` at the workspace source dir. Dev-only.

package/dist/kernel/addon-manifest.d.ts

@@ -1,4 +1,14 @@
-export type AddonInstallSource = 'npm' | 'local' | 'upload' | 'bundled' | 'seed';
+/**
+ * `closure` — re-aligned from the running `@camstack/server` closure at boot.
+ *
+ * Distinct from `bundled`, which is the copy an Electron app shipped with and
+ * seeds ONCE. A `closure` install is a refresh of a copy that was already
+ * there, and naming it separately is what lets an operator tell "I deployed
+ * this" from "the server update brought it" — the distinction the six stale
+ * copies of 2026-09-17 had no way to express, all of them reading `upload`
+ * because each HAD been a deliberate deploy, once. See D518.
+ */
+export type AddonInstallSource = 'npm' | 'local' | 'upload' | 'bundled' | 'seed' | 'closure';
 export interface AddonManifestEntry {
     /** Full pkg name, e.g. `@camstack/addon-pipeline`. */
     name: string;

package/dist/{retired-settings-keys-1sEBolVU.js → retired-settings-keys-VcrnwKN0.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-CpXBoZOv.js");
+const require_dist = require("./dist-DluLUTzR.js");
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/dist/{retired-settings-keys-Dv044bmH.mjs → retired-settings-keys-oN5dGOi5.mjs}

@@ -1,4 +1,4 @@
-import { sn as asJsonObject } from "./dist-C8v6cK8N.mjs";
+import { sn as asJsonObject } from "./dist-B67DC-Ss.mjs";
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.247",
+  "version": "1.2.249",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",