@camstack/system 1.2.276 → 1.2.277

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-D_OlSf31.js");
+const require_dist = require("./dist-Bu8HN-KS.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");
@@ -5908,7 +5908,6 @@ var CapabilityRegistry = class CapabilityRegistry {
 	* camera keeps every provider it has today, and a provider that registers
 	* after the operator's last toggle needs no second write to be seen.
 	*/
-	deviceDisabledSources = /* @__PURE__ */ new Map();
 	/** autoActivate flags per (capability, addonId) — from addon manifests */
 	autoActivateFlags = /* @__PURE__ */ new Map();
 	/**
@@ -6805,72 +6804,23 @@ var CapabilityRegistry = class CapabilityRegistry {
 		return null;
 	}
 	/**
-	* Mirror ONE device's persisted source deactivations for `capability` into
-	* the projection (D556). The authority is the device-manager's
-	* `deviceBindings` store; this is the read side of that write and the only
-	* way the set changes.
-	*
-	* No check that `capability` is declared, and none that the addons are
-	* registered: a persisted operator decision is a fact about the fleet, not a
-	* reference to a live object, and replaying it at boot must not depend on
-	* which addon happened to register first. An empty list drops the entry
-	* (unset = every source).
-	*/
-	setDeviceDisabledSources(deviceId, capability, addonIds) {
-		let deviceMap = this.deviceDisabledSources.get(deviceId);
-		if (addonIds.length === 0) {
-			if (!deviceMap) return;
-			deviceMap.delete(capability);
-			if (deviceMap.size === 0) this.deviceDisabledSources.delete(deviceId);
-			this.logger.debug("Device source deactivations cleared", {
-				tags: { deviceId: Number(deviceId) },
-				meta: { capability }
-			});
-			return;
-		}
-		if (!deviceMap) {
-			deviceMap = /* @__PURE__ */ new Map();
-			this.deviceDisabledSources.set(deviceId, deviceMap);
-		}
-		deviceMap.set(capability, new Set(addonIds));
-		this.logger.debug("Device source deactivations mirrored", {
-			tags: { deviceId: Number(deviceId) },
-			meta: {
-				capability,
-				disabledAddonIds: [...addonIds]
-			}
-		});
-	}
-	/**
-	* The addon ids the operator switched OFF as sources of this device for
-	* `capability`. Empty means every source — never "none".
-	*/
-	getDeviceDisabledSources(deviceId, capability) {
-		const disabled = this.deviceDisabledSources.get(deviceId)?.get(capability);
-		return disabled === void 0 ? [] : [...disabled];
-	}
-	/** Is `addonId` switched off as a source of this device for `capability`? */
-	isDeviceSourceDisabled(deviceId, capability, addonId) {
-		return this.deviceDisabledSources.get(deviceId)?.get(capability)?.has(addonId) === true;
-	}
-	/**
 	* Resolve collection providers for a specific device.
-	* Filters by activation (the manifest's autoActivate) and by the per-device
-	* source deactivations the operator persisted (D556).
 	*
-	* `includeSwitchedOff` keeps the providers the operator switched off for this
-	* device. It exists for ONE caller — the source LISTING path — because a
-	* switched-off source must still produce a row to be switched back on from
-	* (D554 decision 4, D556 as amended), and only its own provider can name it.
-	* Every other path takes the default and sees the SERVING set: the sources
-	* that may actually contribute.
-	*/
-	resolveCollectionForDevice(capability, deviceId, options) {
+	* Filters by activation (the manifest's autoActivate) and by nothing else.
+	* The per-device DENY set that used to filter here is gone with the switch
+	* it projected (2026-09-20): *"tutti i providers funzionano sempre"*. WHICH
+	* providers a device has is now answered by its BINDINGS
+	* (`device-bindings-store.ts` step 0), which is a different question from
+	* which of them are registered and running — this one.
+	*
+	* `deviceId` is kept in the signature and deliberately unused: the resolution
+	* is per-device by CONTRACT, and a caller that stops passing one is a caller
+	* that has stopped asking about a device.
+	*/
+	resolveCollectionForDevice(capability, _deviceId) {
 		const state = this.capabilities.get(capability);
 		if (!state || state.definition.mode !== "collection") return [];
-		const disabledForDevice = this.deviceDisabledSources.get(deviceId)?.get(capability);
-		const keepSwitchedOff = options?.includeSwitchedOff === true;
-		return [...state.providers.entries()].filter(([addonId]) => !state.disabledProviders.has(addonId)).filter(([addonId]) => this.isActiveForSystem(capability, addonId)).filter(([addonId]) => keepSwitchedOff || disabledForDevice?.has(addonId) !== true).map(([, provider]) => asProvider(provider));
+		return [...state.providers.entries()].filter(([addonId]) => !state.disabledProviders.has(addonId)).filter(([addonId]) => this.isActiveForSystem(capability, addonId)).map(([, provider]) => asProvider(provider));
 	}
 	/** Check if all dependencies for a capability are satisfied. */
 	areDependenciesMet(capabilityName) {
@@ -96239,14 +96189,12 @@ exports.isClusterSecretMismatchError = isClusterSecretMismatchError;
 exports.isCollectionArrayMethod = require_dist.isCollectionArrayMethod;
 exports.isInfraCapability = isInfraCapability;
 exports.isModelDownloaded = require_event_loop_stall_monitor.isModelDownloaded;
-exports.isSourceDenied = require_builtins_device_manager_device_manager_addon.isSourceDenied;
 exports.isSourceNewer = isSourceNewer;
 exports.isolatedBuiltinPhase = isolatedBuiltinPhase;
 exports.loadTlsCert = require_tls$1.loadTlsCert;
 exports.localEndpointPath = require_manifest_system_deps.localEndpointPath;
 exports.localProviderLink = require_manifest_system_deps.localProviderLink;
 exports.mountNativeCapService = require_manifest_system_deps.mountNativeCapService;
-exports.nextDisabledSources = require_builtins_device_manager_device_manager_addon.nextDisabledSources;
 exports.nextRssBudgetState = require_manifest_system_deps.nextRssBudgetState;
 exports.parseCapAction = require_manifest_system_deps.parseCapAction;
 exports.parseRangeHeader = require_event_loop_stall_monitor.parseRangeHeader;
@@ -96272,7 +96220,6 @@ exports.reissueTlsLeaf = require_tls$1.reissueTlsLeaf;
 exports.resolveFilePath = require_event_loop_stall_monitor.resolveFilePath;
 exports.resolveHwAccel = require_manifest_system_deps.resolveHwAccel;
 exports.resolveNpmInvocation = require_manifest_system_deps.resolveNpmInvocation;
-exports.restoreDeviceSourceActivations = require_builtins_device_manager_device_manager_addon.restoreDeviceSourceActivations;
 exports.runHubAddonBoot = runHubAddonBoot;
 exports.runNpm = require_manifest_system_deps.runNpm;
 exports.sampleSocketDirection = require_manifest_system_deps.sampleSocketDirection;

package/dist/index.mjs

@@ -1,12 +1,12 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { An as parseJsonUnknown, F as addonSettingsCapability, Fn as EventCategory$1, Gt as scopesAllowDeviceCap, Ht as resolveMethodAuth, It as procedureAuthKey, Mn as resolveCapMount, Mt as objectInputDeclaresAddonId, Nn as scopeKey, Nt as objectInputDeclaresRequiredDeviceId, S as RUNTIME_DEFAULTS, Sn as emitDownForOwnedCaps, Tt as looseSchema, Wt as scopesAllowAddon, _t as isVoidInput, bn as asString$1, bt as lifecycleJobSchema, dn as DEVICE_STATUS_METHOD, dt as isArrayOutputSchema, ft as isCollectionArrayMethod, g as LOG_LEVEL_RANK, gn as ReadinessTimeoutError, hn as ReadinessRegistry, jn as readinessKey, kn as parseJsonObject, ln as DATAPLANE_SECRET_HEADER$1, mt as isObjectInput, on as errMsg$1, st as extractNestedAddonId, t as ALL_CAPABILITY_DEFINITIONS, un as DEVICE_SETTINGS_CONTRIBUTION_METHODS, vn as asJsonObject$1, vt as kebabToCamel, wn as expandCapMethods, wt as logLevelAtMost, xn as createEvent, y as METHOD_ACCESS_MAP, yn as asNumber } from "./dist-AHdiIdJH.mjs";
+import { An as parseJsonUnknown, F as addonSettingsCapability, Fn as EventCategory$1, Gt as scopesAllowDeviceCap, Ht as resolveMethodAuth, It as procedureAuthKey, Mn as resolveCapMount, Mt as objectInputDeclaresAddonId, Nn as scopeKey, Nt as objectInputDeclaresRequiredDeviceId, S as RUNTIME_DEFAULTS, Sn as emitDownForOwnedCaps, Tt as looseSchema, Wt as scopesAllowAddon, _t as isVoidInput, bn as asString$1, bt as lifecycleJobSchema, dn as DEVICE_STATUS_METHOD, dt as isArrayOutputSchema, ft as isCollectionArrayMethod, g as LOG_LEVEL_RANK, gn as ReadinessTimeoutError, hn as ReadinessRegistry, jn as readinessKey, kn as parseJsonObject, ln as DATAPLANE_SECRET_HEADER$1, mt as isObjectInput, on as errMsg$1, st as extractNestedAddonId, t as ALL_CAPABILITY_DEFINITIONS, un as DEVICE_SETTINGS_CONTRIBUTION_METHODS, vn as asJsonObject$1, vt as kebabToCamel, wn as expandCapMethods, wt as logLevelAtMost, xn as createEvent, y as METHOD_ACCESS_MAP, yn as asNumber } from "./dist-DOF9wnat.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
 import { ConsoleDestination, ConsoleLoggingAddon } from "./builtins/console-logging/index.mjs";
 import { CoreBlocksAddon } from "./builtins/core-blocks/core-blocks.addon.mjs";
 import "./builtins/core-blocks/index.mjs";
-import { DeviceManagerAddon, i as setWrapperActive, n as nextDisabledSources, r as restoreDeviceSourceActivations, t as isSourceDenied } from "./builtins/device-manager/device-manager.addon.mjs";
+import { DeviceManagerAddon, t as setWrapperActive } from "./builtins/device-manager/device-manager.addon.mjs";
 import "./builtins/device-manager/index.mjs";
 import { HubForwarderAddon, HubForwarderDestination } from "./builtins/hub-forwarder/index.mjs";
 import { LivenessMonitorAddon } from "./builtins/liveness-monitor/liveness-monitor.addon.mjs";
@@ -5901,7 +5901,6 @@ var CapabilityRegistry = class CapabilityRegistry {
 	* camera keeps every provider it has today, and a provider that registers
 	* after the operator's last toggle needs no second write to be seen.
 	*/
-	deviceDisabledSources = /* @__PURE__ */ new Map();
 	/** autoActivate flags per (capability, addonId) — from addon manifests */
 	autoActivateFlags = /* @__PURE__ */ new Map();
 	/**
@@ -6798,72 +6797,23 @@ var CapabilityRegistry = class CapabilityRegistry {
 		return null;
 	}
 	/**
-	* Mirror ONE device's persisted source deactivations for `capability` into
-	* the projection (D556). The authority is the device-manager's
-	* `deviceBindings` store; this is the read side of that write and the only
-	* way the set changes.
-	*
-	* No check that `capability` is declared, and none that the addons are
-	* registered: a persisted operator decision is a fact about the fleet, not a
-	* reference to a live object, and replaying it at boot must not depend on
-	* which addon happened to register first. An empty list drops the entry
-	* (unset = every source).
-	*/
-	setDeviceDisabledSources(deviceId, capability, addonIds) {
-		let deviceMap = this.deviceDisabledSources.get(deviceId);
-		if (addonIds.length === 0) {
-			if (!deviceMap) return;
-			deviceMap.delete(capability);
-			if (deviceMap.size === 0) this.deviceDisabledSources.delete(deviceId);
-			this.logger.debug("Device source deactivations cleared", {
-				tags: { deviceId: Number(deviceId) },
-				meta: { capability }
-			});
-			return;
-		}
-		if (!deviceMap) {
-			deviceMap = /* @__PURE__ */ new Map();
-			this.deviceDisabledSources.set(deviceId, deviceMap);
-		}
-		deviceMap.set(capability, new Set(addonIds));
-		this.logger.debug("Device source deactivations mirrored", {
-			tags: { deviceId: Number(deviceId) },
-			meta: {
-				capability,
-				disabledAddonIds: [...addonIds]
-			}
-		});
-	}
-	/**
-	* The addon ids the operator switched OFF as sources of this device for
-	* `capability`. Empty means every source — never "none".
-	*/
-	getDeviceDisabledSources(deviceId, capability) {
-		const disabled = this.deviceDisabledSources.get(deviceId)?.get(capability);
-		return disabled === void 0 ? [] : [...disabled];
-	}
-	/** Is `addonId` switched off as a source of this device for `capability`? */
-	isDeviceSourceDisabled(deviceId, capability, addonId) {
-		return this.deviceDisabledSources.get(deviceId)?.get(capability)?.has(addonId) === true;
-	}
-	/**
 	* Resolve collection providers for a specific device.
-	* Filters by activation (the manifest's autoActivate) and by the per-device
-	* source deactivations the operator persisted (D556).
 	*
-	* `includeSwitchedOff` keeps the providers the operator switched off for this
-	* device. It exists for ONE caller — the source LISTING path — because a
-	* switched-off source must still produce a row to be switched back on from
-	* (D554 decision 4, D556 as amended), and only its own provider can name it.
-	* Every other path takes the default and sees the SERVING set: the sources
-	* that may actually contribute.
-	*/
-	resolveCollectionForDevice(capability, deviceId, options) {
+	* Filters by activation (the manifest's autoActivate) and by nothing else.
+	* The per-device DENY set that used to filter here is gone with the switch
+	* it projected (2026-09-20): *"tutti i providers funzionano sempre"*. WHICH
+	* providers a device has is now answered by its BINDINGS
+	* (`device-bindings-store.ts` step 0), which is a different question from
+	* which of them are registered and running — this one.
+	*
+	* `deviceId` is kept in the signature and deliberately unused: the resolution
+	* is per-device by CONTRACT, and a caller that stops passing one is a caller
+	* that has stopped asking about a device.
+	*/
+	resolveCollectionForDevice(capability, _deviceId) {
 		const state = this.capabilities.get(capability);
 		if (!state || state.definition.mode !== "collection") return [];
-		const disabledForDevice = this.deviceDisabledSources.get(deviceId)?.get(capability);
-		const keepSwitchedOff = options?.includeSwitchedOff === true;
-		return [...state.providers.entries()].filter(([addonId]) => !state.disabledProviders.has(addonId)).filter(([addonId]) => this.isActiveForSystem(capability, addonId)).filter(([addonId]) => keepSwitchedOff || disabledForDevice?.has(addonId) !== true).map(([, provider]) => asProvider(provider));
+		return [...state.providers.entries()].filter(([addonId]) => !state.disabledProviders.has(addonId)).filter(([addonId]) => this.isActiveForSystem(capability, addonId)).map(([, provider]) => asProvider(provider));
 	}
 	/** Check if all dependencies for a capability are satisfied. */
 	areDependenciesMet(capabilityName) {
@@ -95879,4 +95829,4 @@ var LifecycleJobEngine = class {
 	}
 };
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, ARRAY_BUFFER_CENSUS_COOLDOWN_MS, ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ARRAY_BUFFER_CENSUS_THRESHOLD_MB, ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CAP_ACTION_OVERFLOW_LABEL, CAP_ACTION_UNLABELLED, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_CAP_ACTION_READING, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_CAP_ACTIONS_PER_PEER, MAX_LEAF_VALIDITY_DAYS, MESH_QUEUE_TOP_N, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, OUTBOUND_QUEUE_COOLDOWN_MS, OUTBOUND_QUEUE_SUSTAIN_MS, OUTBOUND_QUEUE_THRESHOLD_BYTES, PARENT_ROUTED_PROVIDER_ADDON_ID, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, SOCKET_QUEUE_TOP_N, STALL_REPORT_MS, STALL_TICK_MS, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, attributeStall, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildNpmChildEnv, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionLabel, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createArrayBufferCensusGate, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCapActionCensus, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createInspectorArrayBufferCensus, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createMeshQueueReader, createOutboundQueueGate, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, deviceCapResolverLink, diffCapActionCensus, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatArrayBufferCensus, formatEventPlane, formatHeapSpaces, formatLogLine, formatMeshQueue, formatOutboundQueueVerdict, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSpaceField, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installManifestSystemDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayBufferCensusReport, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceDenied, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextDisabledSources, nextRssBudgetState, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readSocketQueues, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, restoreDeviceSourceActivations, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, setWrapperActive, shouldReclaim, socketDirectionBytes, socketDirectionMessages, startEventLoopStallMonitor, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, ARRAY_BUFFER_CENSUS_COOLDOWN_MS, ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ARRAY_BUFFER_CENSUS_THRESHOLD_MB, ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CAP_ACTION_OVERFLOW_LABEL, CAP_ACTION_UNLABELLED, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_CAP_ACTION_READING, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_CAP_ACTIONS_PER_PEER, MAX_LEAF_VALIDITY_DAYS, MESH_QUEUE_TOP_N, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, OUTBOUND_QUEUE_COOLDOWN_MS, OUTBOUND_QUEUE_SUSTAIN_MS, OUTBOUND_QUEUE_THRESHOLD_BYTES, PARENT_ROUTED_PROVIDER_ADDON_ID, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, SOCKET_QUEUE_TOP_N, STALL_REPORT_MS, STALL_TICK_MS, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, attributeStall, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildNpmChildEnv, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionLabel, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createArrayBufferCensusGate, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCapActionCensus, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createInspectorArrayBufferCensus, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createMeshQueueReader, createOutboundQueueGate, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, deviceCapResolverLink, diffCapActionCensus, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatArrayBufferCensus, formatEventPlane, formatHeapSpaces, formatLogLine, formatMeshQueue, formatOutboundQueueVerdict, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSpaceField, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installManifestSystemDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayBufferCensusReport, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextRssBudgetState, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readSocketQueues, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, setWrapperActive, shouldReclaim, socketDirectionBytes, socketDirectionMessages, startEventLoopStallMonitor, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };

package/dist/kernel/capability-registry.d.ts

@@ -30,17 +30,6 @@ export type CollectionConfigReader = (capability: string) => readonly string[] |
  * cannot present it. See docs/decisions/adr-0188-an-unregister-carries-proof-of-ownership.md.
  */
 export type ProviderOwnerToken = string;
-/**
- * How much of a device's COLLECTION a caller is asking for.
- *
- * The default — and every caller that intends to USE the providers — is the
- * serving set: the sources that may contribute. The source LISTING path asks
- * for the whole set instead, because a source the operator switched off must
- * still produce a row to be switched back on from (D556 as amended).
- */
-export interface DeviceCollectionResolution {
-    readonly includeSwitchedOff: boolean;
-}
 export declare class CapabilityRegistry {
     private readonly capabilities;
     private readonly logger;
@@ -86,7 +75,6 @@ export declare class CapabilityRegistry {
      * camera keeps every provider it has today, and a provider that registers
      * after the operator's last toggle needs no second write to be seen.
      */
-    private readonly deviceDisabledSources;
     /** autoActivate flags per (capability, addonId) — from addon manifests */
     private readonly autoActivateFlags;
     /**
@@ -491,39 +479,21 @@ export declare class CapabilityRegistry {
      * singleton override — the in-memory provider pin, not a persisted flag.
      */
     resolveForDevice<T = unknown>(capability: string, deviceId: string): T | null;
-    /**
-     * Mirror ONE device's persisted source deactivations for `capability` into
-     * the projection (D556). The authority is the device-manager's
-     * `deviceBindings` store; this is the read side of that write and the only
-     * way the set changes.
-     *
-     * No check that `capability` is declared, and none that the addons are
-     * registered: a persisted operator decision is a fact about the fleet, not a
-     * reference to a live object, and replaying it at boot must not depend on
-     * which addon happened to register first. An empty list drops the entry
-     * (unset = every source).
-     */
-    setDeviceDisabledSources(deviceId: string, capability: string, addonIds: readonly string[]): void;
-    /**
-     * The addon ids the operator switched OFF as sources of this device for
-     * `capability`. Empty means every source — never "none".
-     */
-    getDeviceDisabledSources(deviceId: string, capability: string): readonly string[];
-    /** Is `addonId` switched off as a source of this device for `capability`? */
-    isDeviceSourceDisabled(deviceId: string, capability: string, addonId: string): boolean;
     /**
      * Resolve collection providers for a specific device.
-     * Filters by activation (the manifest's autoActivate) and by the per-device
-     * source deactivations the operator persisted (D556).
      *
-     * `includeSwitchedOff` keeps the providers the operator switched off for this
-     * device. It exists for ONE caller — the source LISTING path — because a
-     * switched-off source must still produce a row to be switched back on from
-     * (D554 decision 4, D556 as amended), and only its own provider can name it.
-     * Every other path takes the default and sees the SERVING set: the sources
-     * that may actually contribute.
-     */
-    resolveCollectionForDevice<T = unknown>(capability: string, deviceId: string, options?: DeviceCollectionResolution): readonly T[];
+     * Filters by activation (the manifest's autoActivate) and by nothing else.
+     * The per-device DENY set that used to filter here is gone with the switch
+     * it projected (2026-09-20): *"tutti i providers funzionano sempre"*. WHICH
+     * providers a device has is now answered by its BINDINGS
+     * (`device-bindings-store.ts` step 0), which is a different question from
+     * which of them are registered and running — this one.
+     *
+     * `deviceId` is kept in the signature and deliberately unused: the resolution
+     * is per-device by CONTRACT, and a caller that stops passing one is a caller
+     * that has stopped asking about a device.
+     */
+    resolveCollectionForDevice<T = unknown>(capability: string, _deviceId: string): readonly T[];
     /** Check if all dependencies for a capability are satisfied. */
     areDependenciesMet(capabilityName: string): boolean;
     /** Get topologically sorted boot order based on dependsOn. */

package/dist/kernel/index.d.ts

@@ -13,7 +13,6 @@ export { RESTART_MARKER_FILE, clearPendingRestart, getRestartMarkerPath, readPen
 export type { PendingRestartMarker, RestartKind, ScheduleSelfRestartOptions, } from './restart-coordinator.js';
 export { CapabilityHandle, CapabilityUnavailableError } from './capability-handle.js';
 export { CapabilityRegistry } from './capability-registry.js';
-export type { DeviceCollectionResolution } from './capability-registry.js';
 export { buildCapRouters, builderMountedCapNames } from './cap-router-builder.js';
 export type { CapRouterPrimitives, CapRouterServices, CapProviderGetter, RemoteProxyFactory, ProcedureBuilder, ProcedureResolverArgs, } from './cap-router-builder.js';
 export { describeProviderKindDrift } from './provider-kind-drift.js';

package/dist/{retired-settings-keys-LwFyTKun.js → retired-settings-keys-BwE6S2eQ.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-D_OlSf31.js");
+const require_dist = require("./dist-Bu8HN-KS.js");
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/dist/{retired-settings-keys-Cp3oG_aH.mjs → retired-settings-keys-DXMfts8c.mjs}

@@ -1,4 +1,4 @@
-import { vn as asJsonObject } from "./dist-AHdiIdJH.mjs";
+import { vn as asJsonObject } from "./dist-DOF9wnat.mjs";
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.276",
+  "version": "1.2.277",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",