@camstack/system 1.2.276 → 1.2.277

package/dist/builtins/device-manager/device-meta-types.d.ts

@@ -45,38 +45,26 @@ export type DriverConfigSchemaResult = {
 };
 /**
  * One `(device, capability)` row of the persisted wrapper-activation store —
- * the authority for every per-camera function switch (D62) and, since D556,
- * for which SOURCES a camera's collection cap has.
+ * the authority for every per-camera function switch (D62).
  *
- * The two fields answer two different cardinalities and are never both the
- * answer for one cap:
+ * SINGLETON capabilities only. `wrapperAddonId` is the bound wrapper, or the
+ * explicit `null` "operator disabled" marker that stops `getBindings` step 2
+ * re-binding a `defaultActive` wrapper; absent means the operator never touched
+ * this cap on this device.
  *
- * - `wrapperAddonId` — a SINGLETON cap's bound wrapper, or the explicit
- *   `null` "operator disabled" marker that stops `getBindings` step 2
- *   re-binding a `defaultActive` wrapper. Absent means the operator never
- *   touched this cap on this device.
- * - `disabledSourceIds` — a COLLECTION cap's switched-OFF sources. A DENY
- *   list on purpose: absence means every source the camera has, which is both
- *   today's behaviour and the only shape under which a provider registered
- *   later is seen without a second write (D556).
- *
- * `disabledSourceIds` holds SOURCE ids (`native:reolink:hub`), not addon ids.
- * One addon can serve several of a device's sources, so an addon-keyed entry
- * could only ever mean "all of them" — which is exactly how a LEGACY entry is
- * still read: {@link DeviceCapBinding.disabledSourceAddonIds} is never written
- * any more and every id in it denies every source that addon serves for this
- * device. One predicate, stated once, so an operator's existing decision does
- * not silently stop applying (D555).
+ * **A COLLECTION capability has no row here, by design.** Its providers are a
+ * SET, and the set is DERIVED from who provides the cap
+ * (`device-bindings-store.ts` step 0) — *"tutti i providers funzionano sempre,
+ * non serve disattivarli/attivarli … loro vivono lì"* (operator, 2026-09-20).
+ * Nothing persists it, so nothing has to be back-filled onto a fleet and
+ * nothing goes stale when an addon is deployed to a camera later.
+ * `setWrapperActive` REFUSES a collection cap rather than writing a field the
+ * enumeration does not read — `disabledSourceIds` / `disabledSourceAddonIds`
+ * (D556, D555) were exactly that, and
+ * `scripts/check-device-selection-authority.ts` now makes it unrepresentable.
  */
 export interface DeviceCapBinding {
     readonly wrapperAddonId?: string | null;
-    /** SOURCE ids the operator switched off for this device. */
-    readonly disabledSourceIds?: readonly string[];
-    /**
-     * @deprecated Pre-re-key entries, keyed by ADDON id. Read, never written:
-     *   an id here denies every source that addon serves for this device.
-     */
-    readonly disabledSourceAddonIds?: readonly string[];
 }
 export interface DeviceBindingsStore {
     readonly deviceBindings: Record<string, Record<string, DeviceCapBinding>>;

package/dist/builtins/device-manager/device-source-activation.d.ts

@@ -1,5 +1,4 @@
-import { AddonContext, ICapabilityRegistry, IScopedLogger } from '@camstack/types';
-import { DeviceBindingsStore } from './device-meta-types.js';
+import { AddonContext, ICapabilityRegistry } from '@camstack/types';
 import { WriteLock } from './write-lock.js';
 /**
  * What a wrapper-activation write needs, and nothing more.
@@ -20,51 +19,18 @@ export interface WrapperActivationInput {
     readonly deviceId: number;
     readonly capName: string;
     readonly wrapperAddonId: string;
-    /**
-     * The SOURCE to toggle, for a collection cap. Absent keeps the cap-wide
-     * meaning D556 shipped — every source this addon serves for this device —
-     * which is also how a pre-re-key entry is read.
-     */
-    readonly sourceId?: string;
     readonly active: boolean;
 }
-/**
- * Is `source` denied for a device, given the persisted deny set?
- *
- * The ONE place the migration rule lives: an entry matches either the source's
- * own id or the id of the addon that serves it. New writes are always source
- * ids; an addon id can only be a pre-re-key entry, and it still means "every
- * source this addon serves here".
- */
-export declare function isSourceDenied(denied: readonly string[], source: {
-    readonly sourceId?: string;
-    readonly addonId: string;
-}): boolean;
-/**
- * The deny list after one toggle. Pure, order-preserving, idempotent — a
- * second "off" on an addon already off changes nothing.
- */
-export declare function nextDisabledSources(current: readonly string[], key: string, active: boolean): readonly string[];
-/**
- * Replay the whole persisted store onto a fresh registry.
- *
- * The projection is in-memory, so a hub restart starts it empty — and an empty
- * deny list means "every source", which would silently switch every source the
- * operator turned off back ON. That is precisely the D62 failure (an off switch
- * that reports on), so the replay is not an optimisation: it is what makes the
- * authority durable. Called from the device-manager's `onInitialize`, before
- * any camera can be asked for its clips, and safe to call again.
- */
-export declare function restoreDeviceSourceActivations(registry: ICapabilityRegistry, store: Partial<DeviceBindingsStore>, logger: IScopedLogger): number;
 /**
  * Activate or deactivate a wrapper for one device.
  *
- * Singleton caps keep the shape D62 fixed: one `wrapperAddonId`, or the
- * explicit `null` marker that stops `getBindings` step 2 re-binding a
- * `defaultActive` wrapper. Collection caps write `disabledSourceAddonIds`
- * instead — their `wrapperAddonId` is left exactly as it was, because a cap
- * with several sources has no "which one" for `getBindings` to answer (D554
- * context 3) and inventing one would turn a source toggle into a cap-wide off
- * switch.
+ * SINGLETON caps only, and that is now enforced rather than assumed: one
+ * `wrapperAddonId`, or the explicit `null` "operator disabled" marker that
+ * stops `getBindings` step 2 re-binding a `defaultActive` wrapper.
+ *
+ * A COLLECTION cap is REFUSED by name. Its providers are a derived SET
+ * (`device-bindings-store.ts` step 0) — there is nothing to activate, and a
+ * verb that accepted the call and wrote a store nobody reads is exactly what
+ * this module shipped until 2026-09-20.
  */
 export declare function setWrapperActive(deps: WrapperActivationDeps, input: WrapperActivationInput): Promise<void>;

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { B as bareAddonId, Fn as EventCategory, T as SOURCE_DEVICE_TYPES, at as evaluateSensorEdge, cn as BaseAddon, gt as isSourceCap, ht as isSameAddonId, mn as DeviceType, on as errMsg, tt as doorbellCapability, w as SOURCE_CAPS, xn as createEvent } from "../../dist-AHdiIdJH.mjs";
+import { B as bareAddonId, Fn as EventCategory, T as SOURCE_DEVICE_TYPES, at as evaluateSensorEdge, cn as BaseAddon, gt as isSourceCap, ht as isSameAddonId, mn as DeviceType, on as errMsg, tt as doorbellCapability, w as SOURCE_CAPS, xn as createEvent } from "../../dist-DOF9wnat.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Ct as logDestinationCapability, cn as BaseAddon } from "../../dist-AHdiIdJH.mjs";
+import { Ct as logDestinationCapability, cn as BaseAddon } from "../../dist-DOF9wnat.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { C as RecordingStatusSchema, Fn as EventCategory, cn as BaseAddon, on as errMsg, xn as createEvent } from "../../dist-AHdiIdJH.mjs";
+import { C as RecordingStatusSchema, Fn as EventCategory, cn as BaseAddon, on as errMsg, xn as createEvent } from "../../dist-DOF9wnat.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { N as UserRecordSchema, O as ScopedTokenSchema, R as authProviderCapability, cn as BaseAddon, nn as userManagementCapability, r as ApiKeyRecordSchema } from "../../dist-AHdiIdJH.mjs";
+import { N as UserRecordSchema, O as ScopedTokenSchema, R as authProviderCapability, cn as BaseAddon, nn as userManagementCapability, r as ApiKeyRecordSchema } from "../../dist-DOF9wnat.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 const require_tls = require("../../tls-D_wUeOTD.js");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Fn as EventCategory, cn as BaseAddon, xt as localNetworkCapability } from "../../dist-AHdiIdJH.mjs";
+import { Fn as EventCategory, cn as BaseAddon, xt as localNetworkCapability } from "../../dist-DOF9wnat.mjs";
 import { S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, i as writeExtraSans, l as reissueTlsLeaf, n as readTlsAccessStatus, o as validateUploadedTls, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, y as applyLanHttp } from "../../tls-IM-v7JV4.mjs";
 import { mkdir, writeFile } from "node:fs/promises";
 import { join } from "node:path";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Ct as logDestinationCapability, cn as BaseAddon } from "../../dist-AHdiIdJH.mjs";
+import { Ct as logDestinationCapability, cn as BaseAddon } from "../../dist-DOF9wnat.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 let node_fs_promises = require("node:fs/promises");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Fn as EventCategory, Ot as metricsProviderCapability, Rt as reducePoints, cn as BaseAddon, lt as foldSnapshotByFunction, on as errMsg, xn as createEvent, zt as resolveBucketMs } from "../../dist-AHdiIdJH.mjs";
+import { Fn as EventCategory, Ot as metricsProviderCapability, Rt as reducePoints, cn as BaseAddon, lt as foldSnapshotByFunction, on as errMsg, xn as createEvent, zt as resolveBucketMs } from "../../dist-DOF9wnat.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import * as fs from "node:fs";
 import { constants, readFileSync } from "node:fs";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_child_process = require("node:child_process");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { Cn as emitReadiness, Fn as EventCategory, Ft as platformProbeCapability, Kt as scoreRuntimes, cn as BaseAddon, nt as enumerateInferenceDevices, on as errMsg } from "../../dist-AHdiIdJH.mjs";
+import { Cn as emitReadiness, Fn as EventCategory, Ft as platformProbeCapability, Kt as scoreRuntimes, cn as BaseAddon, nt as enumerateInferenceDevices, on as errMsg } from "../../dist-DOF9wnat.mjs";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";
 import * as os from "node:os";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Fn as EventCategory, cn as BaseAddon } from "../../dist-AHdiIdJH.mjs";
+import { Fn as EventCategory, cn as BaseAddon } from "../../dist-DOF9wnat.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 const require_snapshot_courtesy = require("../../snapshot-courtesy-Cqs7GkOV.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { B as bareAddonId, Fn as EventCategory, On as nodePin, V as batteryCapability, Yt as snapshotCapability, Z as deriveBatteryPresence, a as BatteryStatusSchema, cn as BaseAddon, fn as DeviceFeature, mn as DeviceType, on as errMsg, tn as streamQualityLabel } from "../../dist-AHdiIdJH.mjs";
+import { B as bareAddonId, Fn as EventCategory, On as nodePin, V as batteryCapability, Yt as snapshotCapability, Z as deriveBatteryPresence, a as BatteryStatusSchema, cn as BaseAddon, fn as DeviceFeature, mn as DeviceType, on as errMsg, tn as streamQualityLabel } from "../../dist-DOF9wnat.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg } from "../../snapshot-courtesy-CZPvteq2.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { $t as storageProviderCapability, cn as BaseAddon, ct as filesystemBrowseCapability } from "../../dist-AHdiIdJH.mjs";
+import { $t as storageProviderCapability, cn as BaseAddon, ct as filesystemBrowseCapability } from "../../dist-DOF9wnat.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 const require_hub_cap_forward = require("../../hub-cap-forward-DmHNjbB0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { A as StorageLocationModeSchema, Dt as mayWriteToLocation, Et as mayReadLocation, Fn as EventCategory, M as StorageMigrationJobSchema, Vt as resolveLocationMode, W as collectSecretConfigKeys, Xt as storageCapability, Zt as storageMigrationCapability, _ as LegacyStorageLocationDefaultSchema, an as withLocationMode, cn as BaseAddon, j as StorageLocationTypeSchema, k as StorageCleanupJobSchema, kn as parseJsonObject, kt as modeMayWrite, ot as evictionPolicyOfLocation, pt as isLocationEnabled, qt as settingsStoreCapability, ut as gbToBytes, x as REDACTED_SECRET, yt as legacyModeOf } from "../../dist-AHdiIdJH.mjs";
+import { A as StorageLocationModeSchema, Dt as mayWriteToLocation, Et as mayReadLocation, Fn as EventCategory, M as StorageMigrationJobSchema, Vt as resolveLocationMode, W as collectSecretConfigKeys, Xt as storageCapability, Zt as storageMigrationCapability, _ as LegacyStorageLocationDefaultSchema, an as withLocationMode, cn as BaseAddon, j as StorageLocationTypeSchema, k as StorageCleanupJobSchema, kn as parseJsonObject, kt as modeMayWrite, ot as evictionPolicyOfLocation, pt as isLocationEnabled, qt as settingsStoreCapability, ut as gbToBytes, x as REDACTED_SECRET, yt as legacyModeOf } from "../../dist-DOF9wnat.mjs";
 import { t as HUB_CAP_FWD_ACTION } from "../../hub-cap-forward-BdT320dq.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { Tn as hydrateSchema, cn as BaseAddon, on as errMsg } from "../../dist-AHdiIdJH.mjs";
+import { Tn as hydrateSchema, cn as BaseAddon, on as errMsg } from "../../dist-DOF9wnat.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-Bu8HN-KS.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Ct as logDestinationCapability, cn as BaseAddon } from "../../dist-AHdiIdJH.mjs";
+import { Ct as logDestinationCapability, cn as BaseAddon } from "../../dist-DOF9wnat.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{dist-D_OlSf31.js → dist-Bu8HN-KS.js}

@@ -691,7 +691,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/sleep-CopaBJss.mjs
+//#region ../types/dist/sleep-7AN_Txmu.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -892,12 +892,6 @@ var WELL_KNOWN_TAB_MAP = Object.fromEntries([
 		icon: "circle-dot",
 		order: 40
 	},
-	{
-		id: "clips",
-		label: "Clips",
-		icon: "clapperboard",
-		order: 41
-	},
 	{
 		id: "engine",
 		label: "Inference Engine",
@@ -26256,17 +26250,31 @@ var videoclipsCapability = {
 	* `device-config-widget-wrapped-binding.spec.ts` pins that a `kind:'wrapped'`
 	* binding entry derives the same section a native one does.
 	*
-	* `topTab` because the browser owns the whole pane (a day's clips, a source
-	* list and a player), exactly as `ptz` does; the widget itself is
-	* `host/clips-browser` in ui-library's `HOST_WIDGETS`.
+	* **It is a SECTION of the Recording tab, at the end of it — not a tab of
+	* its own.** It shipped as a `clips` top-tab and the operator rejected the
+	* placement: *"utilizzerei la stessa tab recordings, lì abbiamo già tutto il
+	* necessario, una nuova sezione alla fine per le clips"*. The Recording tab
+	* already holds the recorder's panel, the schedule bands and the unified
+	* retention policy; footage the camera itself holds is the same question,
+	* asked of a different store. `order: 100` puts it after all of them with
+	* room left in front. The `clips` entry in `WELL_KNOWN_TABS` went with it —
+	* a well-known id nobody declares is an invitation to mint the tab again.
+	*
+	* `topTab` stays: the browser owns a pane (a day's tiles, a source list and
+	* a player) and the Config tab's inner bar has no room for one. The widget
+	* itself is `host/clips-browser` in ui-library's `HOST_WIDGETS`, and because
+	* the admin Recordings page renders every `location:'top-tab'` +
+	* `tab:'recording'` section behind its camera picker
+	* (`CameraRecordingSettingsSection`), this declaration lands the section on
+	* BOTH surfaces with no second wiring.
 	*/
 	deviceConfig: { ui: {
 		kind: "widget",
 		widgetId: "host/clips-browser",
-		tab: "clips",
+		tab: "recording",
 		topTab: true,
 		label: "Clips",
-		order: 0
+		order: 100
 	} },
 	methods: {
 		listClips: method(zod.z.object({
@@ -26275,13 +26283,23 @@ var videoclipsCapability = {
 			until: zod.z.number(),
 			limit: zod.z.number().int().positive().optional(),
 			/**
-			* View filter over {@link ClipSourceSchema.source} values — the
-			* picker's selection, forwarded so a provider need not list what
-			* nobody is looking at. ABSENT means every source this camera has,
-			* which is the honest default for a surface whose whole point is that
-			* nothing is hidden (D554 3). A provider with one source ignores it.
+			* WHICH provider to ask — the `addonId` a {@link ClipSourceSchema} row
+			* carries, never a source id and never a list.
+			*
+			* Absent means the device's BOUND provider, which is CamStack on every
+			* camera today because that is what `deviceManager.getBindings`
+			* answers with. A provider the device is not bound to is refused by
+			* name rather than answered by another one (D552's
+			* `rejectUnresolvedAddonPin` rule).
+			*
+			* It replaced `sources?: string[]`, a VIEW filter over source ids that
+			* assumed the answer was a fan-out over everything a camera has. The
+			* operator settled otherwise on 2026-09-20 — *"il get videoclips
+			* prendere un provider opzionale, di default va su camstack"*,
+			* *"l'utilizzatore è uno solo"* — so the list is asked of one provider
+			* at a time and there is nothing to filter out of it.
 			*/
-			sources: zod.z.array(zod.z.string()).optional()
+			provider: zod.z.string().optional()
 		}), zod.z.array(ClipSchema).readonly(), {
 			kind: "query",
 			auth: "protected"

package/dist/{dist-AHdiIdJH.mjs → dist-DOF9wnat.mjs}

@@ -691,7 +691,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/sleep-CopaBJss.mjs
+//#region ../types/dist/sleep-7AN_Txmu.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -892,12 +892,6 @@ var WELL_KNOWN_TAB_MAP = Object.fromEntries([
 		icon: "circle-dot",
 		order: 40
 	},
-	{
-		id: "clips",
-		label: "Clips",
-		icon: "clapperboard",
-		order: 41
-	},
 	{
 		id: "engine",
 		label: "Inference Engine",
@@ -26256,17 +26250,31 @@ var videoclipsCapability = {
 	* `device-config-widget-wrapped-binding.spec.ts` pins that a `kind:'wrapped'`
 	* binding entry derives the same section a native one does.
 	*
-	* `topTab` because the browser owns the whole pane (a day's clips, a source
-	* list and a player), exactly as `ptz` does; the widget itself is
-	* `host/clips-browser` in ui-library's `HOST_WIDGETS`.
+	* **It is a SECTION of the Recording tab, at the end of it — not a tab of
+	* its own.** It shipped as a `clips` top-tab and the operator rejected the
+	* placement: *"utilizzerei la stessa tab recordings, lì abbiamo già tutto il
+	* necessario, una nuova sezione alla fine per le clips"*. The Recording tab
+	* already holds the recorder's panel, the schedule bands and the unified
+	* retention policy; footage the camera itself holds is the same question,
+	* asked of a different store. `order: 100` puts it after all of them with
+	* room left in front. The `clips` entry in `WELL_KNOWN_TABS` went with it —
+	* a well-known id nobody declares is an invitation to mint the tab again.
+	*
+	* `topTab` stays: the browser owns a pane (a day's tiles, a source list and
+	* a player) and the Config tab's inner bar has no room for one. The widget
+	* itself is `host/clips-browser` in ui-library's `HOST_WIDGETS`, and because
+	* the admin Recordings page renders every `location:'top-tab'` +
+	* `tab:'recording'` section behind its camera picker
+	* (`CameraRecordingSettingsSection`), this declaration lands the section on
+	* BOTH surfaces with no second wiring.
 	*/
 	deviceConfig: { ui: {
 		kind: "widget",
 		widgetId: "host/clips-browser",
-		tab: "clips",
+		tab: "recording",
 		topTab: true,
 		label: "Clips",
-		order: 0
+		order: 100
 	} },
 	methods: {
 		listClips: method(z.object({
@@ -26275,13 +26283,23 @@ var videoclipsCapability = {
 			until: z.number(),
 			limit: z.number().int().positive().optional(),
 			/**
-			* View filter over {@link ClipSourceSchema.source} values — the
-			* picker's selection, forwarded so a provider need not list what
-			* nobody is looking at. ABSENT means every source this camera has,
-			* which is the honest default for a surface whose whole point is that
-			* nothing is hidden (D554 3). A provider with one source ignores it.
+			* WHICH provider to ask — the `addonId` a {@link ClipSourceSchema} row
+			* carries, never a source id and never a list.
+			*
+			* Absent means the device's BOUND provider, which is CamStack on every
+			* camera today because that is what `deviceManager.getBindings`
+			* answers with. A provider the device is not bound to is refused by
+			* name rather than answered by another one (D552's
+			* `rejectUnresolvedAddonPin` rule).
+			*
+			* It replaced `sources?: string[]`, a VIEW filter over source ids that
+			* assumed the answer was a fan-out over everything a camera has. The
+			* operator settled otherwise on 2026-09-20 — *"il get videoclips
+			* prendere un provider opzionale, di default va su camstack"*,
+			* *"l'utilizzatore è uno solo"* — so the list is asked of one provider
+			* at a time and there is nothing to filter out of it.
 			*/
-			sources: z.array(z.string()).optional()
+			provider: z.string().optional()
 		}), z.array(ClipSchema).readonly(), {
 			kind: "query",
 			auth: "protected"

package/dist/index.d.ts

@@ -22,7 +22,7 @@ export { DeviceManagerAddon } from './builtins/device-manager/index.js';
  * projection — a spec that proves "activate, then list" must be able to drive
  * the real one, not a re-implementation of it.
  */
-export { isSourceDenied, nextDisabledSources, restoreDeviceSourceActivations, setWrapperActive, type WrapperActivationDeps, type WrapperActivationInput, } from './builtins/device-manager/device-source-activation.js';
+export { setWrapperActive, type WrapperActivationDeps, type WrapperActivationInput, } from './builtins/device-manager/device-source-activation.js';
 export { HubForwarderAddon, HubForwarderDestination } from './builtins/hub-forwarder/index.js';
 export { LivenessMonitorAddon } from './builtins/liveness-monitor/index.js';
 export { LocalAuthAddon } from './builtins/local-auth/index.js';