@camstack/system 1.2.275 → 1.2.277

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYXhwfDf.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-DEFtUH8o.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-BwE6S2eQ.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 //#region src/builtins/device-manager/adoption-job-engine.ts
@@ -722,6 +722,52 @@ function capAppliesToDeviceType(def, deviceType) {
 	if (!declared || declared.length === 0) return true;
 	return declared.some((t) => t === deviceType);
 }
+/**
+* An addon's identity, with the node it happens to run on stripped.
+*
+* A capability registered on an agent arrives under `<addonId>@<nodeId>` —
+* `pipeline-analytics@little-unraid`. That is the same ADDON as the hub-local
+* `pipeline-analytics`, and treating the two as different providers is what
+* put `analytics` in device 592's clip picker three times (D554 amended).
+* Where a provider RUNS is a routing fact; it is not part of who it is.
+*/
+function addonIdentityOf(addonId) {
+	const at = addonId.indexOf("@");
+	return at === -1 ? addonId : addonId.slice(0, at);
+}
+/**
+* Every provider addon of every COLLECTION capability that applies to this
+* device, one entry each.
+*
+* Deduped by {@link addonIdentityOf}, so the hub-local registration, the
+* agent's `<addon>@<node>` one and the device's native registration of the same
+* addon are ONE provider — the defect this exists to make unrepresentable.
+* Gated only by the cap's declared `deviceTypes` (D4), like step 2's auto-bind.
+*/
+function collectionBindings(deps, deviceId, deviceType) {
+	const registry = deps.capabilityRegistry;
+	if (!registry) return [];
+	const out = [];
+	for (const declared of registry.listCapabilities()) {
+		if (declared.mode !== "collection") continue;
+		if (!capAppliesToDeviceType(registry.getDefinition(declared.name), deviceType)) continue;
+		const nativeAddonId = registry.getNativeAddonId(declared.name, deviceId);
+		const seen = /* @__PURE__ */ new Set();
+		for (const addonId of [...declared.providers, ...nativeAddonId ? [nativeAddonId] : []]) {
+			const identity = addonIdentityOf(addonId);
+			if (identity.length === 0 || seen.has(identity)) continue;
+			seen.add(identity);
+			out.push({
+				capName: declared.name,
+				kind: "wrapped",
+				providerAddonId: identity,
+				providerNodeId: resolveWrapperNodeId(identity),
+				nativeAddonId: nativeAddonId === null ? "" : addonIdentityOf(nativeAddonId)
+			});
+		}
+	}
+	return out;
+}
 async function getBindings(deps, input) {
 	const [row, store] = await Promise.all([deps.rows.get(input.deviceId), readBindingsStore(deps)]);
 	return resolveBindingsForDevice(deps, input.deviceId, row, {
@@ -760,8 +806,14 @@ async function resolveBindingsForDevice(deps, deviceId, row, pass) {
 	const presence = await resolveDevicePresence(deps, row, deviceId, pass.ledgerNonEmpty);
 	const entries = [];
 	const seenCaps = /* @__PURE__ */ new Set();
+	const collectionEntries = collectionBindings(deps, deviceId, deviceType);
+	for (const entry of collectionEntries) {
+		entries.push(entry);
+		seenCaps.add(entry.capName);
+	}
 	const resolveRemote = (capName) => deps.remoteNativeCaps.get(deviceId)?.get(capName) ?? resolveRemoteNativeCapFromRegistry(deps, capName, deviceId);
 	for (const [capName, { wrapperAddonId }] of Object.entries(perDevice)) {
+		if (wrapperAddonId === void 0) continue;
 		const hubLocalNative = deps.capabilityRegistry?.getNativeAddonId(capName, deviceId) ?? null;
 		const remoteNative = resolveRemote(capName);
 		const nativeAddonId = hubLocalNative ?? remoteNative?.addonId ?? "";
@@ -2526,28 +2578,6 @@ function splitDeviceStoreKeys(patch) {
 //#endregion
 //#region src/builtins/device-manager/device-aggregation.ts
 /**
-* Device-details aggregation + field-update routing for the device-manager
-* addon. Extracted from `device-manager.addon.ts` as free functions that
-* receive an explicit `AggregationDeps` context (DI) rather than closing over
-* the addon instance.
-*
-* This module owns the binding-driven settings/live/status aggregators
-* (`getDeviceAggregate`, `collectSystemDeviceContributions`,
-* `deriveDeviceConfigContribution`, `buildBaseDeviceSection`,
-* `getDeviceStatusAggregate`, `resolveDriverConfigSchema`) and the
-* field-update routing (`updateDeviceField`, `updateDeviceFieldsBatch`,
-* `applyGroupPatch`, `resolveContributionProvider`, `dispatchDeviceAction`)
-* plus the wrapper-activation mutators (`setWrapperActive`,
-* `listWrappersForCap`, `listBindableCapsForDeviceType`).
-*
-* Sibling aggregator functions call each other directly (passing `deps`);
-* cross-domain leaf calls (`getBindings`, `lookupPersistedStableId`,
-* `resolveRemoteNativeCapFromRegistry`, read/writeBindingsStore) route through
-* the bindings-store module via `deps.bindingsDeps`. EXACT semantics, ordering,
-* and side effects of the original class methods are preserved; the addon keeps
-* thin delegator methods over these functions.
-*/
-/**
 * One process-wide cache behind every device-details fan-out.
 *
 * Module-level on purpose: the page re-polls every 2.5 s and a per-call cache
@@ -3250,39 +3280,6 @@ async function listBindableCapsForDeviceType(deps, input) {
 		wrappers: [...registry.getWrappersForCap(capName)]
 	}));
 }
-async function setWrapperActive(deps, input) {
-	const storeKey = String(input.deviceId);
-	await deps.bindingsDeps.withAddonStoreWriteLock(async () => {
-		const store = await readBindingsStore(deps.bindingsDeps);
-		const perDevice = { ...store.deviceBindings[storeKey] };
-		if (input.active) perDevice[input.capName] = { wrapperAddonId: input.wrapperAddonId };
-		else perDevice[input.capName] = { wrapperAddonId: null };
-		const nextDeviceBindings = Object.keys(perDevice).length > 0 ? {
-			...store.deviceBindings,
-			[storeKey]: perDevice
-		} : (() => {
-			const { [storeKey]: _drop, ...rest } = store.deviceBindings;
-			return rest;
-		})();
-		await writeBindingsStore(deps.bindingsDeps, { deviceBindings: nextDeviceBindings });
-	});
-	deps.ctx.eventBus.emit({
-		id: (0, node_crypto.randomUUID)(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "addon",
-			id: deps.ctx.id
-		},
-		category: require_dist.EventCategory.DeviceBindingsChanged,
-		data: {
-			deviceId: input.deviceId,
-			capName: input.capName,
-			reason: input.active ? "wrapper-activated" : "wrapper-deactivated",
-			addonId: input.wrapperAddonId,
-			nodeId: resolveWrapperNodeId(input.wrapperAddonId)
-		}
-	});
-}
 /**
 * Build the wireable-cap entry for one capability definition: the status
 * schema's scalar leaf fields plus — for an item-array cap
@@ -3356,6 +3353,64 @@ async function getWireableFields(deps, input) {
 	return { caps };
 }
 //#endregion
+//#region src/builtins/device-manager/device-source-activation.ts
+/** Is `capName` a COLLECTION cap — a cap whose device has several SOURCES? */
+function isCollectionCap(registry, capName) {
+	return registry?.getDefinition(capName)?.mode === "collection";
+}
+/**
+* Activate or deactivate a wrapper for one device.
+*
+* SINGLETON caps only, and that is now enforced rather than assumed: one
+* `wrapperAddonId`, or the explicit `null` "operator disabled" marker that
+* stops `getBindings` step 2 re-binding a `defaultActive` wrapper.
+*
+* A COLLECTION cap is REFUSED by name. Its providers are a derived SET
+* (`device-bindings-store.ts` step 0) — there is nothing to activate, and a
+* verb that accepted the call and wrote a store nobody reads is exactly what
+* this module shipped until 2026-09-20.
+*/
+async function setWrapperActive(deps, input) {
+	const storeKey = String(input.deviceId);
+	if (isCollectionCap(deps.capabilityRegistry, input.capName)) throw new Error(`setWrapperActive: "${input.capName}" is a COLLECTION capability — its providers are a derived set, not an operator choice, so there is nothing to activate. Every provider that serves this device is already one of its sources.`);
+	await deps.withAddonStoreWriteLock(async () => {
+		const store = await readBindingsStore(deps);
+		const perDevice = { ...store.deviceBindings[storeKey] };
+		const existing = perDevice[input.capName];
+		if (input.active) perDevice[input.capName] = {
+			...existing,
+			wrapperAddonId: input.wrapperAddonId
+		};
+		else perDevice[input.capName] = {
+			...existing,
+			wrapperAddonId: null
+		};
+		await writeBindingsStore(deps, { deviceBindings: Object.keys(perDevice).length > 0 ? {
+			...store.deviceBindings,
+			[storeKey]: perDevice
+		} : (() => {
+			const { [storeKey]: _drop, ...rest } = store.deviceBindings;
+			return rest;
+		})() });
+	});
+	deps.ctx.eventBus.emit({
+		id: (0, node_crypto.randomUUID)(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "addon",
+			id: deps.ctx.id
+		},
+		category: require_dist.EventCategory.DeviceBindingsChanged,
+		data: {
+			deviceId: input.deviceId,
+			capName: input.capName,
+			reason: input.active ? "wrapper-activated" : "wrapper-deactivated",
+			addonId: input.wrapperAddonId,
+			nodeId: resolveWrapperNodeId(input.wrapperAddonId)
+		}
+	});
+}
+//#endregion
 //#region src/builtins/device-manager/device-event-propagator.ts
 /**
 * Walks the parent chain for every device-sourced event and re-emits a
@@ -7327,7 +7382,15 @@ var DeviceManagerAddon = class extends require_dist.BaseAddon {
 		return listBindableCapsForDeviceType(this.aggregationDeps, input);
 	}
 	async setWrapperActive(input) {
-		return setWrapperActive(this.aggregationDeps, input);
+		return setWrapperActive(this.wrapperActivationDeps, input);
+	}
+	/** The narrow dependency bag the activation verb needs (D556). */
+	get wrapperActivationDeps() {
+		return {
+			ctx: this.ctx,
+			capabilityRegistry: this.capabilityRegistry,
+			withAddonStoreWriteLock: this.addonStoreWriteLock
+		};
 	}
 	async onInitialize() {
 		const settings = this.ctx.settings;
@@ -7603,3 +7666,4 @@ var DeviceManagerAddon = class extends require_dist.BaseAddon {
 exports.DeviceManagerAddon = DeviceManagerAddon;
 exports.default = DeviceManagerAddon;
 exports.mergeAggregates = mergeAggregates;
+exports.setWrapperActive = setWrapperActive;

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { $ as deviceStateCapability, D as STREAM_PROFILE_META, H as buildStreamParamsConfigSchema, Ht as runtimeStatePolicyFor, Nn as sleep$1, Nt as parseStreamParamsFormPatch, Pn as EventCategory, Q as deviceManagerCapability, St as locationIconKey, Tn as isDeviceConfigCap, an as errMsg, dn as DeviceFeature, et as deviceStatusCapability, fn as DeviceRole, gn as WELL_KNOWN_TAB_MAP, it as enumerateSchemaFields, jt as normalizeUnit, m as DeviceStatusSchema, o as CAMERA_SWITCH_ORDER, pn as DeviceType, qt as siteZoneKey, rt as enumerateItemArrayFields, s as CAP_NAMES_WITH_STATUS, sn as BaseAddon, t as ALL_CAPABILITY_DEFINITIONS, v as LocationIconIdSchema, zt as resolveContainerPrimaryChild } from "../../dist-DWSJVcZe.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-BHGnCLW0.mjs";
+import { $ as deviceStateCapability, Bt as resolveContainerPrimaryChild, D as STREAM_PROFILE_META, En as isDeviceConfigCap, Fn as EventCategory, H as buildStreamParamsConfigSchema, Jt as siteZoneKey, Pn as sleep$1, Pt as parseStreamParamsFormPatch, Q as deviceManagerCapability, St as locationIconKey, Ut as runtimeStatePolicyFor, _n as WELL_KNOWN_TAB_MAP, cn as BaseAddon, et as deviceStatusCapability, fn as DeviceFeature, it as enumerateSchemaFields, jt as normalizeUnit, m as DeviceStatusSchema, mn as DeviceType, o as CAMERA_SWITCH_ORDER, on as errMsg, pn as DeviceRole, rt as enumerateItemArrayFields, s as CAP_NAMES_WITH_STATUS, t as ALL_CAPABILITY_DEFINITIONS, v as LocationIconIdSchema } from "../../dist-DOF9wnat.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-DXMfts8c.mjs";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 //#region src/builtins/device-manager/adoption-job-engine.ts
@@ -717,6 +717,52 @@ function capAppliesToDeviceType(def, deviceType) {
 	if (!declared || declared.length === 0) return true;
 	return declared.some((t) => t === deviceType);
 }
+/**
+* An addon's identity, with the node it happens to run on stripped.
+*
+* A capability registered on an agent arrives under `<addonId>@<nodeId>` —
+* `pipeline-analytics@little-unraid`. That is the same ADDON as the hub-local
+* `pipeline-analytics`, and treating the two as different providers is what
+* put `analytics` in device 592's clip picker three times (D554 amended).
+* Where a provider RUNS is a routing fact; it is not part of who it is.
+*/
+function addonIdentityOf(addonId) {
+	const at = addonId.indexOf("@");
+	return at === -1 ? addonId : addonId.slice(0, at);
+}
+/**
+* Every provider addon of every COLLECTION capability that applies to this
+* device, one entry each.
+*
+* Deduped by {@link addonIdentityOf}, so the hub-local registration, the
+* agent's `<addon>@<node>` one and the device's native registration of the same
+* addon are ONE provider — the defect this exists to make unrepresentable.
+* Gated only by the cap's declared `deviceTypes` (D4), like step 2's auto-bind.
+*/
+function collectionBindings(deps, deviceId, deviceType) {
+	const registry = deps.capabilityRegistry;
+	if (!registry) return [];
+	const out = [];
+	for (const declared of registry.listCapabilities()) {
+		if (declared.mode !== "collection") continue;
+		if (!capAppliesToDeviceType(registry.getDefinition(declared.name), deviceType)) continue;
+		const nativeAddonId = registry.getNativeAddonId(declared.name, deviceId);
+		const seen = /* @__PURE__ */ new Set();
+		for (const addonId of [...declared.providers, ...nativeAddonId ? [nativeAddonId] : []]) {
+			const identity = addonIdentityOf(addonId);
+			if (identity.length === 0 || seen.has(identity)) continue;
+			seen.add(identity);
+			out.push({
+				capName: declared.name,
+				kind: "wrapped",
+				providerAddonId: identity,
+				providerNodeId: resolveWrapperNodeId(identity),
+				nativeAddonId: nativeAddonId === null ? "" : addonIdentityOf(nativeAddonId)
+			});
+		}
+	}
+	return out;
+}
 async function getBindings(deps, input) {
 	const [row, store] = await Promise.all([deps.rows.get(input.deviceId), readBindingsStore(deps)]);
 	return resolveBindingsForDevice(deps, input.deviceId, row, {
@@ -755,8 +801,14 @@ async function resolveBindingsForDevice(deps, deviceId, row, pass) {
 	const presence = await resolveDevicePresence(deps, row, deviceId, pass.ledgerNonEmpty);
 	const entries = [];
 	const seenCaps = /* @__PURE__ */ new Set();
+	const collectionEntries = collectionBindings(deps, deviceId, deviceType);
+	for (const entry of collectionEntries) {
+		entries.push(entry);
+		seenCaps.add(entry.capName);
+	}
 	const resolveRemote = (capName) => deps.remoteNativeCaps.get(deviceId)?.get(capName) ?? resolveRemoteNativeCapFromRegistry(deps, capName, deviceId);
 	for (const [capName, { wrapperAddonId }] of Object.entries(perDevice)) {
+		if (wrapperAddonId === void 0) continue;
 		const hubLocalNative = deps.capabilityRegistry?.getNativeAddonId(capName, deviceId) ?? null;
 		const remoteNative = resolveRemote(capName);
 		const nativeAddonId = hubLocalNative ?? remoteNative?.addonId ?? "";
@@ -2521,28 +2573,6 @@ function splitDeviceStoreKeys(patch) {
 //#endregion
 //#region src/builtins/device-manager/device-aggregation.ts
 /**
-* Device-details aggregation + field-update routing for the device-manager
-* addon. Extracted from `device-manager.addon.ts` as free functions that
-* receive an explicit `AggregationDeps` context (DI) rather than closing over
-* the addon instance.
-*
-* This module owns the binding-driven settings/live/status aggregators
-* (`getDeviceAggregate`, `collectSystemDeviceContributions`,
-* `deriveDeviceConfigContribution`, `buildBaseDeviceSection`,
-* `getDeviceStatusAggregate`, `resolveDriverConfigSchema`) and the
-* field-update routing (`updateDeviceField`, `updateDeviceFieldsBatch`,
-* `applyGroupPatch`, `resolveContributionProvider`, `dispatchDeviceAction`)
-* plus the wrapper-activation mutators (`setWrapperActive`,
-* `listWrappersForCap`, `listBindableCapsForDeviceType`).
-*
-* Sibling aggregator functions call each other directly (passing `deps`);
-* cross-domain leaf calls (`getBindings`, `lookupPersistedStableId`,
-* `resolveRemoteNativeCapFromRegistry`, read/writeBindingsStore) route through
-* the bindings-store module via `deps.bindingsDeps`. EXACT semantics, ordering,
-* and side effects of the original class methods are preserved; the addon keeps
-* thin delegator methods over these functions.
-*/
-/**
 * One process-wide cache behind every device-details fan-out.
 *
 * Module-level on purpose: the page re-polls every 2.5 s and a per-call cache
@@ -3245,39 +3275,6 @@ async function listBindableCapsForDeviceType(deps, input) {
 		wrappers: [...registry.getWrappersForCap(capName)]
 	}));
 }
-async function setWrapperActive(deps, input) {
-	const storeKey = String(input.deviceId);
-	await deps.bindingsDeps.withAddonStoreWriteLock(async () => {
-		const store = await readBindingsStore(deps.bindingsDeps);
-		const perDevice = { ...store.deviceBindings[storeKey] };
-		if (input.active) perDevice[input.capName] = { wrapperAddonId: input.wrapperAddonId };
-		else perDevice[input.capName] = { wrapperAddonId: null };
-		const nextDeviceBindings = Object.keys(perDevice).length > 0 ? {
-			...store.deviceBindings,
-			[storeKey]: perDevice
-		} : (() => {
-			const { [storeKey]: _drop, ...rest } = store.deviceBindings;
-			return rest;
-		})();
-		await writeBindingsStore(deps.bindingsDeps, { deviceBindings: nextDeviceBindings });
-	});
-	deps.ctx.eventBus.emit({
-		id: randomUUID(),
-		timestamp: /* @__PURE__ */ new Date(),
-		source: {
-			type: "addon",
-			id: deps.ctx.id
-		},
-		category: EventCategory.DeviceBindingsChanged,
-		data: {
-			deviceId: input.deviceId,
-			capName: input.capName,
-			reason: input.active ? "wrapper-activated" : "wrapper-deactivated",
-			addonId: input.wrapperAddonId,
-			nodeId: resolveWrapperNodeId(input.wrapperAddonId)
-		}
-	});
-}
 /**
 * Build the wireable-cap entry for one capability definition: the status
 * schema's scalar leaf fields plus — for an item-array cap
@@ -3351,6 +3348,64 @@ async function getWireableFields(deps, input) {
 	return { caps };
 }
 //#endregion
+//#region src/builtins/device-manager/device-source-activation.ts
+/** Is `capName` a COLLECTION cap — a cap whose device has several SOURCES? */
+function isCollectionCap(registry, capName) {
+	return registry?.getDefinition(capName)?.mode === "collection";
+}
+/**
+* Activate or deactivate a wrapper for one device.
+*
+* SINGLETON caps only, and that is now enforced rather than assumed: one
+* `wrapperAddonId`, or the explicit `null` "operator disabled" marker that
+* stops `getBindings` step 2 re-binding a `defaultActive` wrapper.
+*
+* A COLLECTION cap is REFUSED by name. Its providers are a derived SET
+* (`device-bindings-store.ts` step 0) — there is nothing to activate, and a
+* verb that accepted the call and wrote a store nobody reads is exactly what
+* this module shipped until 2026-09-20.
+*/
+async function setWrapperActive(deps, input) {
+	const storeKey = String(input.deviceId);
+	if (isCollectionCap(deps.capabilityRegistry, input.capName)) throw new Error(`setWrapperActive: "${input.capName}" is a COLLECTION capability — its providers are a derived set, not an operator choice, so there is nothing to activate. Every provider that serves this device is already one of its sources.`);
+	await deps.withAddonStoreWriteLock(async () => {
+		const store = await readBindingsStore(deps);
+		const perDevice = { ...store.deviceBindings[storeKey] };
+		const existing = perDevice[input.capName];
+		if (input.active) perDevice[input.capName] = {
+			...existing,
+			wrapperAddonId: input.wrapperAddonId
+		};
+		else perDevice[input.capName] = {
+			...existing,
+			wrapperAddonId: null
+		};
+		await writeBindingsStore(deps, { deviceBindings: Object.keys(perDevice).length > 0 ? {
+			...store.deviceBindings,
+			[storeKey]: perDevice
+		} : (() => {
+			const { [storeKey]: _drop, ...rest } = store.deviceBindings;
+			return rest;
+		})() });
+	});
+	deps.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "addon",
+			id: deps.ctx.id
+		},
+		category: EventCategory.DeviceBindingsChanged,
+		data: {
+			deviceId: input.deviceId,
+			capName: input.capName,
+			reason: input.active ? "wrapper-activated" : "wrapper-deactivated",
+			addonId: input.wrapperAddonId,
+			nodeId: resolveWrapperNodeId(input.wrapperAddonId)
+		}
+	});
+}
+//#endregion
 //#region src/builtins/device-manager/device-event-propagator.ts
 /**
 * Walks the parent chain for every device-sourced event and re-emits a
@@ -7322,7 +7377,15 @@ var DeviceManagerAddon = class extends BaseAddon {
 		return listBindableCapsForDeviceType(this.aggregationDeps, input);
 	}
 	async setWrapperActive(input) {
-		return setWrapperActive(this.aggregationDeps, input);
+		return setWrapperActive(this.wrapperActivationDeps, input);
+	}
+	/** The narrow dependency bag the activation verb needs (D556). */
+	get wrapperActivationDeps() {
+		return {
+			ctx: this.ctx,
+			capabilityRegistry: this.capabilityRegistry,
+			withAddonStoreWriteLock: this.addonStoreWriteLock
+		};
 	}
 	async onInitialize() {
 		const settings = this.ctx.settings;
@@ -7595,4 +7658,4 @@ var DeviceManagerAddon = class extends BaseAddon {
 	}
 };
 //#endregion
-export { DeviceManagerAddon, DeviceManagerAddon as default, mergeAggregates };
+export { DeviceManagerAddon, DeviceManagerAddon as default, mergeAggregates, setWrapperActive as t };

package/dist/builtins/device-manager/device-meta-types.d.ts

@@ -43,10 +43,31 @@ export type DriverConfigSchemaResult = {
 } | {
     status: 'unavailable';
 };
+/**
+ * One `(device, capability)` row of the persisted wrapper-activation store —
+ * the authority for every per-camera function switch (D62).
+ *
+ * SINGLETON capabilities only. `wrapperAddonId` is the bound wrapper, or the
+ * explicit `null` "operator disabled" marker that stops `getBindings` step 2
+ * re-binding a `defaultActive` wrapper; absent means the operator never touched
+ * this cap on this device.
+ *
+ * **A COLLECTION capability has no row here, by design.** Its providers are a
+ * SET, and the set is DERIVED from who provides the cap
+ * (`device-bindings-store.ts` step 0) — *"tutti i providers funzionano sempre,
+ * non serve disattivarli/attivarli … loro vivono lì"* (operator, 2026-09-20).
+ * Nothing persists it, so nothing has to be back-filled onto a fleet and
+ * nothing goes stale when an addon is deployed to a camera later.
+ * `setWrapperActive` REFUSES a collection cap rather than writing a field the
+ * enumeration does not read — `disabledSourceIds` / `disabledSourceAddonIds`
+ * (D556, D555) were exactly that, and
+ * `scripts/check-device-selection-authority.ts` now makes it unrepresentable.
+ */
+export interface DeviceCapBinding {
+    readonly wrapperAddonId?: string | null;
+}
 export interface DeviceBindingsStore {
-    readonly deviceBindings: Record<string, Record<string, {
-        wrapperAddonId: string | null;
-    }>>;
+    readonly deviceBindings: Record<string, Record<string, DeviceCapBinding>>;
 }
 export interface PersistedDeviceMeta {
     type: string;

package/dist/builtins/device-manager/device-source-activation.d.ts

@@ -0,0 +1,36 @@
+import { AddonContext, ICapabilityRegistry } from '@camstack/types';
+import { WriteLock } from './write-lock.js';
+/**
+ * What a wrapper-activation write needs, and nothing more.
+ *
+ * Deliberately narrower than `AggregationDeps`: the verb touches the settings
+ * door, the event bus, the registry and the addon-store write lock. Handing it
+ * the device ledger and the remote-native cache it never reads would make this
+ * loop untestable without standing up the whole addon.
+ */
+export interface WrapperActivationDeps {
+    readonly ctx: AddonContext;
+    readonly capabilityRegistry: ICapabilityRegistry | undefined;
+    /** Ordering for every read-modify-write of the fleet-wide `deviceBindings` blob (D62). */
+    readonly withAddonStoreWriteLock: WriteLock;
+}
+/** The operator-facing activation, as it arrives from the cap router. */
+export interface WrapperActivationInput {
+    readonly deviceId: number;
+    readonly capName: string;
+    readonly wrapperAddonId: string;
+    readonly active: boolean;
+}
+/**
+ * Activate or deactivate a wrapper for one device.
+ *
+ * SINGLETON caps only, and that is now enforced rather than assumed: one
+ * `wrapperAddonId`, or the explicit `null` "operator disabled" marker that
+ * stops `getBindings` step 2 re-binding a `defaultActive` wrapper.
+ *
+ * A COLLECTION cap is REFUSED by name. Its providers are a derived SET
+ * (`device-bindings-store.ts` step 0) — there is nothing to activate, and a
+ * verb that accepted the call and wrote a store nobody reads is exactly what
+ * this module shipped until 2026-09-20.
+ */
+export declare function setWrapperActive(deps: WrapperActivationDeps, input: WrapperActivationInput): Promise<void>;

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYXhwfDf.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { B as bareAddonId, Pn as EventCategory, T as SOURCE_DEVICE_TYPES, an as errMsg, at as evaluateSensorEdge, bn as createEvent, gt as isSourceCap, ht as isSameAddonId, pn as DeviceType, sn as BaseAddon, tt as doorbellCapability, w as SOURCE_CAPS } from "../../dist-DWSJVcZe.mjs";
+import { B as bareAddonId, Fn as EventCategory, T as SOURCE_DEVICE_TYPES, at as evaluateSensorEdge, cn as BaseAddon, gt as isSourceCap, ht as isSameAddonId, mn as DeviceType, on as errMsg, tt as doorbellCapability, w as SOURCE_CAPS, xn as createEvent } from "../../dist-DOF9wnat.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYXhwfDf.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Ct as logDestinationCapability, sn as BaseAddon } from "../../dist-DWSJVcZe.mjs";
+import { Ct as logDestinationCapability, cn as BaseAddon } from "../../dist-DOF9wnat.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYXhwfDf.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { C as RecordingStatusSchema, Pn as EventCategory, an as errMsg, bn as createEvent, sn as BaseAddon } from "../../dist-DWSJVcZe.mjs";
+import { C as RecordingStatusSchema, Fn as EventCategory, cn as BaseAddon, on as errMsg, xn as createEvent } from "../../dist-DOF9wnat.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYXhwfDf.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { N as UserRecordSchema, O as ScopedTokenSchema, R as authProviderCapability, r as ApiKeyRecordSchema, sn as BaseAddon, tn as userManagementCapability } from "../../dist-DWSJVcZe.mjs";
+import { N as UserRecordSchema, O as ScopedTokenSchema, R as authProviderCapability, cn as BaseAddon, nn as userManagementCapability, r as ApiKeyRecordSchema } from "../../dist-DOF9wnat.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYXhwfDf.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 const require_tls = require("../../tls-D_wUeOTD.js");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Pn as EventCategory, sn as BaseAddon, xt as localNetworkCapability } from "../../dist-DWSJVcZe.mjs";
+import { Fn as EventCategory, cn as BaseAddon, xt as localNetworkCapability } from "../../dist-DOF9wnat.mjs";
 import { S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, i as writeExtraSans, l as reissueTlsLeaf, n as readTlsAccessStatus, o as validateUploadedTls, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, y as applyLanHttp } from "../../tls-IM-v7JV4.mjs";
 import { mkdir, writeFile } from "node:fs/promises";
 import { join } from "node:path";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYXhwfDf.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Ct as logDestinationCapability, sn as BaseAddon } from "../../dist-DWSJVcZe.mjs";
+import { Ct as logDestinationCapability, cn as BaseAddon } from "../../dist-DOF9wnat.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYXhwfDf.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 let node_fs_promises = require("node:fs/promises");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Lt as reducePoints, Ot as metricsProviderCapability, Pn as EventCategory, Rt as resolveBucketMs, an as errMsg, bn as createEvent, lt as foldSnapshotByFunction, sn as BaseAddon } from "../../dist-DWSJVcZe.mjs";
+import { Fn as EventCategory, Ot as metricsProviderCapability, Rt as reducePoints, cn as BaseAddon, lt as foldSnapshotByFunction, on as errMsg, xn as createEvent, zt as resolveBucketMs } from "../../dist-DOF9wnat.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import * as fs from "node:fs";
 import { constants, readFileSync } from "node:fs";