@camstack/system 1.2.276 → 1.2.278

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Fn as EventCategory, P as addonPagesCapability, cn as BaseAddon, on as errMsg } from "../../dist-AHdiIdJH.mjs";
+import { Fn as EventCategory, P as addonPagesCapability, cn as BaseAddon, on as errMsg } from "../../dist-D1atncyi.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Fn as EventCategory, I as addonWidgetsCapability, cn as BaseAddon, on as errMsg } from "../../dist-AHdiIdJH.mjs";
+import { Fn as EventCategory, I as addonWidgetsCapability, cn as BaseAddon, on as errMsg } from "../../dist-D1atncyi.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Fn as EventCategory, L as alertsCapability, cn as BaseAddon, n as AlertSchema, on as errMsg, xn as createEvent } from "../../dist-AHdiIdJH.mjs";
+import { Fn as EventCategory, L as alertsCapability, cn as BaseAddon, n as AlertSchema, on as errMsg, xn as createEvent } from "../../dist-D1atncyi.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { B as bareAddonId, Dn as isEvent, Fn as EventCategory, Lt as ptzAutotrackCapability, cn as BaseAddon, h as FIRST_LEVEL_MACRO_CLASSES, on as errMsg } from "../../dist-AHdiIdJH.mjs";
+import { B as bareAddonId, Dn as isEvent, Fn as EventCategory, Lt as ptzAutotrackCapability, cn as BaseAddon, h as FIRST_LEVEL_MACRO_CLASSES, on as errMsg } from "../../dist-D1atncyi.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Dt as mayWriteToLocation, Fn as EventCategory, Qt as storageOccupancyCapability, cn as BaseAddon, z as backupCapability } from "../../dist-AHdiIdJH.mjs";
+import { Dt as mayWriteToLocation, Fn as EventCategory, Qt as storageOccupancyCapability, cn as BaseAddon, z as backupCapability } from "../../dist-D1atncyi.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { At as motionCapability, Fn as EventCategory, Tn as hydrateSchema, U as cameraGridLayoutCapability, Y as declarationOwnerNodeId, Yt as snapshotCapability, b as MOTION_CLOSE_AFTER_MS, cn as BaseAddon, en as streamCatalogCapability, f as DERIVED_CAMERA_SILENCED_CAP_NAMES, fn as DeviceFeature, i as BaseDevice, mn as DeviceType, on as errMsg, p as DeclaredDevices, sn as buildFfmpegArgs, xn as createEvent } from "../../dist-AHdiIdJH.mjs";
+import { At as motionCapability, Fn as EventCategory, Tn as hydrateSchema, U as cameraGridLayoutCapability, Y as declarationOwnerNodeId, Yt as snapshotCapability, b as MOTION_CLOSE_AFTER_MS, cn as BaseAddon, en as streamCatalogCapability, f as DERIVED_CAMERA_SILENCED_CAP_NAMES, fn as DeviceFeature, i as BaseDevice, mn as DeviceType, on as errMsg, p as DeclaredDevices, sn as buildFfmpegArgs, xn as createEvent } from "../../dist-D1atncyi.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Ct as logDestinationCapability, cn as BaseAddon } from "../../dist-AHdiIdJH.mjs";
+import { Ct as logDestinationCapability, cn as BaseAddon } from "../../dist-D1atncyi.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,4 +1,4 @@
-import { G as coreBlockAddonId, K as coreBlockIdFromAddonId, c as CORE_BLOCKS_ADDON_ID, cn as BaseAddon, l as CORE_BLOCK_ADDON_PREFIX, on as errMsg, p as DeclaredDevices, q as coreBlocksCapability, u as CoreBlockSchema } from "../../dist-AHdiIdJH.mjs";
+import { G as coreBlockAddonId, K as coreBlockIdFromAddonId, c as CORE_BLOCKS_ADDON_ID, cn as BaseAddon, l as CORE_BLOCK_ADDON_PREFIX, on as errMsg, p as DeclaredDevices, q as coreBlocksCapability, u as CoreBlockSchema } from "../../dist-D1atncyi.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/device-manager/device-bindings-store.d.ts

@@ -161,6 +161,16 @@ export type LedgerNonEmpty = () => Promise<boolean>;
  *     changes nothing (D49: a read that fails must not destroy work).
  */
 export declare function capAppliesToDeviceType(def: CapabilityDefinition | undefined, deviceType: string | undefined): boolean;
+/**
+ * An addon's identity, with the node it happens to run on stripped.
+ *
+ * A capability registered on an agent arrives under `<addonId>@<nodeId>` —
+ * `pipeline-analytics@little-unraid`. That is the same ADDON as the hub-local
+ * `pipeline-analytics`, and treating the two as different providers is what
+ * put `analytics` in device 592's clip picker three times (D554 amended).
+ * Where a provider RUNS is a routing fact; it is not part of who it is.
+ */
+export declare function addonIdentityOf(addonId: string): string;
 export declare function getBindings(deps: BindingsDeps, input: {
     deviceId: number;
 }): Promise<{

package/dist/builtins/device-manager/device-manager.addon.d.ts

@@ -166,8 +166,6 @@ export declare class DeviceManagerAddon extends BaseAddon {
         deviceId: number;
         capName: string;
         wrapperAddonId: string;
-        /** The source to toggle on a collection cap. Absent = all of the addon's. */
-        sourceId?: string;
         active: boolean;
     }): Promise<void>;
     /** The narrow dependency bag the activation verb needs (D556). */

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-LwFyTKun.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-Ek9MPzCi.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 //#region src/builtins/device-manager/adoption-job-engine.ts
@@ -722,6 +722,52 @@ function capAppliesToDeviceType(def, deviceType) {
 	if (!declared || declared.length === 0) return true;
 	return declared.some((t) => t === deviceType);
 }
+/**
+* An addon's identity, with the node it happens to run on stripped.
+*
+* A capability registered on an agent arrives under `<addonId>@<nodeId>` —
+* `pipeline-analytics@little-unraid`. That is the same ADDON as the hub-local
+* `pipeline-analytics`, and treating the two as different providers is what
+* put `analytics` in device 592's clip picker three times (D554 amended).
+* Where a provider RUNS is a routing fact; it is not part of who it is.
+*/
+function addonIdentityOf(addonId) {
+	const at = addonId.indexOf("@");
+	return at === -1 ? addonId : addonId.slice(0, at);
+}
+/**
+* Every provider addon of every COLLECTION capability that applies to this
+* device, one entry each.
+*
+* Deduped by {@link addonIdentityOf}, so the hub-local registration, the
+* agent's `<addon>@<node>` one and the device's native registration of the same
+* addon are ONE provider — the defect this exists to make unrepresentable.
+* Gated only by the cap's declared `deviceTypes` (D4), like step 2's auto-bind.
+*/
+function collectionBindings(deps, deviceId, deviceType) {
+	const registry = deps.capabilityRegistry;
+	if (!registry) return [];
+	const out = [];
+	for (const declared of registry.listCapabilities()) {
+		if (declared.mode !== "collection") continue;
+		if (!capAppliesToDeviceType(registry.getDefinition(declared.name), deviceType)) continue;
+		const nativeAddonId = registry.getNativeAddonId(declared.name, deviceId);
+		const seen = /* @__PURE__ */ new Set();
+		for (const addonId of [...declared.providers, ...nativeAddonId ? [nativeAddonId] : []]) {
+			const identity = addonIdentityOf(addonId);
+			if (identity.length === 0 || seen.has(identity)) continue;
+			seen.add(identity);
+			out.push({
+				capName: declared.name,
+				kind: "wrapped",
+				providerAddonId: identity,
+				providerNodeId: resolveWrapperNodeId(identity),
+				nativeAddonId: nativeAddonId === null ? "" : addonIdentityOf(nativeAddonId)
+			});
+		}
+	}
+	return out;
+}
 async function getBindings(deps, input) {
 	const [row, store] = await Promise.all([deps.rows.get(input.deviceId), readBindingsStore(deps)]);
 	return resolveBindingsForDevice(deps, input.deviceId, row, {
@@ -760,6 +806,11 @@ async function resolveBindingsForDevice(deps, deviceId, row, pass) {
 	const presence = await resolveDevicePresence(deps, row, deviceId, pass.ledgerNonEmpty);
 	const entries = [];
 	const seenCaps = /* @__PURE__ */ new Set();
+	const collectionEntries = collectionBindings(deps, deviceId, deviceType);
+	for (const entry of collectionEntries) {
+		entries.push(entry);
+		seenCaps.add(entry.capName);
+	}
 	const resolveRemote = (capName) => deps.remoteNativeCaps.get(deviceId)?.get(capName) ?? resolveRemoteNativeCapFromRegistry(deps, capName, deviceId);
 	for (const [capName, { wrapperAddonId }] of Object.entries(perDevice)) {
 		if (wrapperAddonId === void 0) continue;
@@ -3303,114 +3354,30 @@ async function getWireableFields(deps, input) {
 }
 //#endregion
 //#region src/builtins/device-manager/device-source-activation.ts
-/**
-* Is `source` denied for a device, given the persisted deny set?
-*
-* The ONE place the migration rule lives: an entry matches either the source's
-* own id or the id of the addon that serves it. New writes are always source
-* ids; an addon id can only be a pre-re-key entry, and it still means "every
-* source this addon serves here".
-*/
-function isSourceDenied(denied, source) {
-	if (denied.includes(source.addonId)) return true;
-	return source.sourceId !== void 0 && denied.includes(source.sourceId);
-}
-/**
-* The deny list after one toggle. Pure, order-preserving, idempotent — a
-* second "off" on an addon already off changes nothing.
-*/
-function nextDisabledSources(current, key, active) {
-	if (active) return current.filter((id) => id !== key);
-	return current.includes(key) ? current : [...current, key];
-}
 /** Is `capName` a COLLECTION cap — a cap whose device has several SOURCES? */
 function isCollectionCap(registry, capName) {
 	return registry?.getDefinition(capName)?.mode === "collection";
 }
 /**
-* The persisted deny list for one `(device, cap)`, empty when never written.
-*
-* Reads the current field AND the pre-re-key one, unioned: a legacy addon id
-* is still an entry and still denies every source that addon serves here. The
-* union is what makes the migration a read rule rather than a data rewrite —
-* nothing has to walk a thousand cameras to keep an operator's decision.
-*/
-function disabledSourcesOf(record) {
-	const current = record?.disabledSourceIds ?? [];
-	const legacy = record?.disabledSourceAddonIds ?? [];
-	const out = [...current];
-	for (const id of legacy) if (!out.includes(id)) out.push(id);
-	return out;
-}
-/**
-* Push ONE device's persisted source deactivations onto the resolution path.
-* The only writer of the registry's per-device source set.
-*/
-function mirrorDeviceSources(registry, deviceId, capName, disabledAddonIds) {
-	registry?.setDeviceDisabledSources(String(deviceId), capName, disabledAddonIds);
-}
-/**
-* Replay the whole persisted store onto a fresh registry.
-*
-* The projection is in-memory, so a hub restart starts it empty — and an empty
-* deny list means "every source", which would silently switch every source the
-* operator turned off back ON. That is precisely the D62 failure (an off switch
-* that reports on), so the replay is not an optimisation: it is what makes the
-* authority durable. Called from the device-manager's `onInitialize`, before
-* any camera can be asked for its clips, and safe to call again.
-*/
-function restoreDeviceSourceActivations(registry, store, logger) {
-	const deviceBindings = store.deviceBindings;
-	if (deviceBindings === void 0) return 0;
-	let restored = 0;
-	for (const [deviceKey, perDevice] of Object.entries(deviceBindings)) {
-		const deviceId = Number(deviceKey);
-		for (const [capName, record] of Object.entries(perDevice)) {
-			const disabled = disabledSourcesOf(record);
-			if (disabled.length === 0) continue;
-			registry.setDeviceDisabledSources(deviceKey, capName, disabled);
-			restored += 1;
-			logger.info("restored per-device source deactivations", {
-				tags: { deviceId },
-				meta: {
-					capability: capName,
-					disabledSourceIds: disabled
-				}
-			});
-		}
-	}
-	return restored;
-}
-/**
 * Activate or deactivate a wrapper for one device.
 *
-* Singleton caps keep the shape D62 fixed: one `wrapperAddonId`, or the
-* explicit `null` marker that stops `getBindings` step 2 re-binding a
-* `defaultActive` wrapper. Collection caps write `disabledSourceAddonIds`
-* instead — their `wrapperAddonId` is left exactly as it was, because a cap
-* with several sources has no "which one" for `getBindings` to answer (D554
-* context 3) and inventing one would turn a source toggle into a cap-wide off
-* switch.
+* SINGLETON caps only, and that is now enforced rather than assumed: one
+* `wrapperAddonId`, or the explicit `null` "operator disabled" marker that
+* stops `getBindings` step 2 re-binding a `defaultActive` wrapper.
+*
+* A COLLECTION cap is REFUSED by name. Its providers are a derived SET
+* (`device-bindings-store.ts` step 0) — there is nothing to activate, and a
+* verb that accepted the call and wrote a store nobody reads is exactly what
+* this module shipped until 2026-09-20.
 */
 async function setWrapperActive(deps, input) {
 	const storeKey = String(input.deviceId);
-	const collection = isCollectionCap(deps.capabilityRegistry, input.capName);
-	let mirrored = [];
+	if (isCollectionCap(deps.capabilityRegistry, input.capName)) throw new Error(`setWrapperActive: "${input.capName}" is a COLLECTION capability — its providers are a derived set, not an operator choice, so there is nothing to activate. Every provider that serves this device is already one of its sources.`);
 	await deps.withAddonStoreWriteLock(async () => {
 		const store = await readBindingsStore(deps);
 		const perDevice = { ...store.deviceBindings[storeKey] };
 		const existing = perDevice[input.capName];
-		if (collection) {
-			const key = input.sourceId ?? input.wrapperAddonId;
-			const disabled = nextDisabledSources(disabledSourcesOf(existing), key, input.active);
-			mirrored = disabled;
-			const wrapperAddonId = existing?.wrapperAddonId;
-			perDevice[input.capName] = {
-				...wrapperAddonId === void 0 ? {} : { wrapperAddonId },
-				...disabled.length === 0 ? {} : { disabledSourceIds: disabled }
-			};
-			if (Object.keys(perDevice[input.capName] ?? {}).length === 0) delete perDevice[input.capName];
-		} else if (input.active) perDevice[input.capName] = {
+		if (input.active) perDevice[input.capName] = {
 			...existing,
 			wrapperAddonId: input.wrapperAddonId
 		};
@@ -3426,20 +3393,6 @@ async function setWrapperActive(deps, input) {
 			return rest;
 		})() });
 	});
-	if (collection) {
-		mirrorDeviceSources(deps.capabilityRegistry, input.deviceId, input.capName, mirrored);
-		deps.ctx.logger.info(input.active ? "source activated for device" : "source deactivated for device", {
-			tags: {
-				deviceId: input.deviceId,
-				addonId: input.wrapperAddonId
-			},
-			meta: {
-				capability: input.capName,
-				sourceId: input.sourceId ?? null,
-				disabledSourceIds: [...mirrored]
-			}
-		});
-	}
 	deps.ctx.eventBus.emit({
 		id: (0, node_crypto.randomUUID)(),
 		timestamp: /* @__PURE__ */ new Date(),
@@ -7458,11 +7411,6 @@ var DeviceManagerAddon = class extends require_dist.BaseAddon {
 		const deviceRows = new DeviceRowStore(deviceRowBackendOf(settingsStoreApi), this.ctx.logger.child("rows"));
 		await deviceRows.declare();
 		this.deviceRows = deviceRows;
-		const capRegistryForRestore = this.capabilityRegistry;
-		if (capRegistryForRestore) {
-			const restored = restoreDeviceSourceActivations(capRegistryForRestore, await readBindingsStore({ ctx: this.ctx }), this.ctx.logger);
-			if (restored > 0) this.ctx.logger.info("per-device source deactivations restored", { meta: { rows: restored } });
-		}
 		try {
 			await require_retired_settings_keys.purgeRetiredSettingsRows(deviceRows.retiredRowStore(), this.ctx.logger.child("RetiredRows"));
 		} catch (err) {
@@ -7717,8 +7665,5 @@ var DeviceManagerAddon = class extends require_dist.BaseAddon {
 //#endregion
 exports.DeviceManagerAddon = DeviceManagerAddon;
 exports.default = DeviceManagerAddon;
-exports.isSourceDenied = isSourceDenied;
 exports.mergeAggregates = mergeAggregates;
-exports.nextDisabledSources = nextDisabledSources;
-exports.restoreDeviceSourceActivations = restoreDeviceSourceActivations;
 exports.setWrapperActive = setWrapperActive;

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { $ as deviceStateCapability, Bt as resolveContainerPrimaryChild, D as STREAM_PROFILE_META, En as isDeviceConfigCap, Fn as EventCategory, H as buildStreamParamsConfigSchema, Jt as siteZoneKey, Pn as sleep$1, Pt as parseStreamParamsFormPatch, Q as deviceManagerCapability, St as locationIconKey, Ut as runtimeStatePolicyFor, _n as WELL_KNOWN_TAB_MAP, cn as BaseAddon, et as deviceStatusCapability, fn as DeviceFeature, it as enumerateSchemaFields, jt as normalizeUnit, m as DeviceStatusSchema, mn as DeviceType, o as CAMERA_SWITCH_ORDER, on as errMsg, pn as DeviceRole, rt as enumerateItemArrayFields, s as CAP_NAMES_WITH_STATUS, t as ALL_CAPABILITY_DEFINITIONS, v as LocationIconIdSchema } from "../../dist-AHdiIdJH.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-Cp3oG_aH.mjs";
+import { $ as deviceStateCapability, Bt as resolveContainerPrimaryChild, D as STREAM_PROFILE_META, En as isDeviceConfigCap, Fn as EventCategory, H as buildStreamParamsConfigSchema, Jt as siteZoneKey, Pn as sleep$1, Pt as parseStreamParamsFormPatch, Q as deviceManagerCapability, St as locationIconKey, Ut as runtimeStatePolicyFor, _n as WELL_KNOWN_TAB_MAP, cn as BaseAddon, et as deviceStatusCapability, fn as DeviceFeature, it as enumerateSchemaFields, jt as normalizeUnit, m as DeviceStatusSchema, mn as DeviceType, o as CAMERA_SWITCH_ORDER, on as errMsg, pn as DeviceRole, rt as enumerateItemArrayFields, s as CAP_NAMES_WITH_STATUS, t as ALL_CAPABILITY_DEFINITIONS, v as LocationIconIdSchema } from "../../dist-D1atncyi.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-rG_QVMT3.mjs";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 //#region src/builtins/device-manager/adoption-job-engine.ts
@@ -717,6 +717,52 @@ function capAppliesToDeviceType(def, deviceType) {
 	if (!declared || declared.length === 0) return true;
 	return declared.some((t) => t === deviceType);
 }
+/**
+* An addon's identity, with the node it happens to run on stripped.
+*
+* A capability registered on an agent arrives under `<addonId>@<nodeId>` —
+* `pipeline-analytics@little-unraid`. That is the same ADDON as the hub-local
+* `pipeline-analytics`, and treating the two as different providers is what
+* put `analytics` in device 592's clip picker three times (D554 amended).
+* Where a provider RUNS is a routing fact; it is not part of who it is.
+*/
+function addonIdentityOf(addonId) {
+	const at = addonId.indexOf("@");
+	return at === -1 ? addonId : addonId.slice(0, at);
+}
+/**
+* Every provider addon of every COLLECTION capability that applies to this
+* device, one entry each.
+*
+* Deduped by {@link addonIdentityOf}, so the hub-local registration, the
+* agent's `<addon>@<node>` one and the device's native registration of the same
+* addon are ONE provider — the defect this exists to make unrepresentable.
+* Gated only by the cap's declared `deviceTypes` (D4), like step 2's auto-bind.
+*/
+function collectionBindings(deps, deviceId, deviceType) {
+	const registry = deps.capabilityRegistry;
+	if (!registry) return [];
+	const out = [];
+	for (const declared of registry.listCapabilities()) {
+		if (declared.mode !== "collection") continue;
+		if (!capAppliesToDeviceType(registry.getDefinition(declared.name), deviceType)) continue;
+		const nativeAddonId = registry.getNativeAddonId(declared.name, deviceId);
+		const seen = /* @__PURE__ */ new Set();
+		for (const addonId of [...declared.providers, ...nativeAddonId ? [nativeAddonId] : []]) {
+			const identity = addonIdentityOf(addonId);
+			if (identity.length === 0 || seen.has(identity)) continue;
+			seen.add(identity);
+			out.push({
+				capName: declared.name,
+				kind: "wrapped",
+				providerAddonId: identity,
+				providerNodeId: resolveWrapperNodeId(identity),
+				nativeAddonId: nativeAddonId === null ? "" : addonIdentityOf(nativeAddonId)
+			});
+		}
+	}
+	return out;
+}
 async function getBindings(deps, input) {
 	const [row, store] = await Promise.all([deps.rows.get(input.deviceId), readBindingsStore(deps)]);
 	return resolveBindingsForDevice(deps, input.deviceId, row, {
@@ -755,6 +801,11 @@ async function resolveBindingsForDevice(deps, deviceId, row, pass) {
 	const presence = await resolveDevicePresence(deps, row, deviceId, pass.ledgerNonEmpty);
 	const entries = [];
 	const seenCaps = /* @__PURE__ */ new Set();
+	const collectionEntries = collectionBindings(deps, deviceId, deviceType);
+	for (const entry of collectionEntries) {
+		entries.push(entry);
+		seenCaps.add(entry.capName);
+	}
 	const resolveRemote = (capName) => deps.remoteNativeCaps.get(deviceId)?.get(capName) ?? resolveRemoteNativeCapFromRegistry(deps, capName, deviceId);
 	for (const [capName, { wrapperAddonId }] of Object.entries(perDevice)) {
 		if (wrapperAddonId === void 0) continue;
@@ -3298,114 +3349,30 @@ async function getWireableFields(deps, input) {
 }
 //#endregion
 //#region src/builtins/device-manager/device-source-activation.ts
-/**
-* Is `source` denied for a device, given the persisted deny set?
-*
-* The ONE place the migration rule lives: an entry matches either the source's
-* own id or the id of the addon that serves it. New writes are always source
-* ids; an addon id can only be a pre-re-key entry, and it still means "every
-* source this addon serves here".
-*/
-function isSourceDenied(denied, source) {
-	if (denied.includes(source.addonId)) return true;
-	return source.sourceId !== void 0 && denied.includes(source.sourceId);
-}
-/**
-* The deny list after one toggle. Pure, order-preserving, idempotent — a
-* second "off" on an addon already off changes nothing.
-*/
-function nextDisabledSources(current, key, active) {
-	if (active) return current.filter((id) => id !== key);
-	return current.includes(key) ? current : [...current, key];
-}
 /** Is `capName` a COLLECTION cap — a cap whose device has several SOURCES? */
 function isCollectionCap(registry, capName) {
 	return registry?.getDefinition(capName)?.mode === "collection";
 }
 /**
-* The persisted deny list for one `(device, cap)`, empty when never written.
-*
-* Reads the current field AND the pre-re-key one, unioned: a legacy addon id
-* is still an entry and still denies every source that addon serves here. The
-* union is what makes the migration a read rule rather than a data rewrite —
-* nothing has to walk a thousand cameras to keep an operator's decision.
-*/
-function disabledSourcesOf(record) {
-	const current = record?.disabledSourceIds ?? [];
-	const legacy = record?.disabledSourceAddonIds ?? [];
-	const out = [...current];
-	for (const id of legacy) if (!out.includes(id)) out.push(id);
-	return out;
-}
-/**
-* Push ONE device's persisted source deactivations onto the resolution path.
-* The only writer of the registry's per-device source set.
-*/
-function mirrorDeviceSources(registry, deviceId, capName, disabledAddonIds) {
-	registry?.setDeviceDisabledSources(String(deviceId), capName, disabledAddonIds);
-}
-/**
-* Replay the whole persisted store onto a fresh registry.
-*
-* The projection is in-memory, so a hub restart starts it empty — and an empty
-* deny list means "every source", which would silently switch every source the
-* operator turned off back ON. That is precisely the D62 failure (an off switch
-* that reports on), so the replay is not an optimisation: it is what makes the
-* authority durable. Called from the device-manager's `onInitialize`, before
-* any camera can be asked for its clips, and safe to call again.
-*/
-function restoreDeviceSourceActivations(registry, store, logger) {
-	const deviceBindings = store.deviceBindings;
-	if (deviceBindings === void 0) return 0;
-	let restored = 0;
-	for (const [deviceKey, perDevice] of Object.entries(deviceBindings)) {
-		const deviceId = Number(deviceKey);
-		for (const [capName, record] of Object.entries(perDevice)) {
-			const disabled = disabledSourcesOf(record);
-			if (disabled.length === 0) continue;
-			registry.setDeviceDisabledSources(deviceKey, capName, disabled);
-			restored += 1;
-			logger.info("restored per-device source deactivations", {
-				tags: { deviceId },
-				meta: {
-					capability: capName,
-					disabledSourceIds: disabled
-				}
-			});
-		}
-	}
-	return restored;
-}
-/**
 * Activate or deactivate a wrapper for one device.
 *
-* Singleton caps keep the shape D62 fixed: one `wrapperAddonId`, or the
-* explicit `null` marker that stops `getBindings` step 2 re-binding a
-* `defaultActive` wrapper. Collection caps write `disabledSourceAddonIds`
-* instead — their `wrapperAddonId` is left exactly as it was, because a cap
-* with several sources has no "which one" for `getBindings` to answer (D554
-* context 3) and inventing one would turn a source toggle into a cap-wide off
-* switch.
+* SINGLETON caps only, and that is now enforced rather than assumed: one
+* `wrapperAddonId`, or the explicit `null` "operator disabled" marker that
+* stops `getBindings` step 2 re-binding a `defaultActive` wrapper.
+*
+* A COLLECTION cap is REFUSED by name. Its providers are a derived SET
+* (`device-bindings-store.ts` step 0) — there is nothing to activate, and a
+* verb that accepted the call and wrote a store nobody reads is exactly what
+* this module shipped until 2026-09-20.
 */
 async function setWrapperActive(deps, input) {
 	const storeKey = String(input.deviceId);
-	const collection = isCollectionCap(deps.capabilityRegistry, input.capName);
-	let mirrored = [];
+	if (isCollectionCap(deps.capabilityRegistry, input.capName)) throw new Error(`setWrapperActive: "${input.capName}" is a COLLECTION capability — its providers are a derived set, not an operator choice, so there is nothing to activate. Every provider that serves this device is already one of its sources.`);
 	await deps.withAddonStoreWriteLock(async () => {
 		const store = await readBindingsStore(deps);
 		const perDevice = { ...store.deviceBindings[storeKey] };
 		const existing = perDevice[input.capName];
-		if (collection) {
-			const key = input.sourceId ?? input.wrapperAddonId;
-			const disabled = nextDisabledSources(disabledSourcesOf(existing), key, input.active);
-			mirrored = disabled;
-			const wrapperAddonId = existing?.wrapperAddonId;
-			perDevice[input.capName] = {
-				...wrapperAddonId === void 0 ? {} : { wrapperAddonId },
-				...disabled.length === 0 ? {} : { disabledSourceIds: disabled }
-			};
-			if (Object.keys(perDevice[input.capName] ?? {}).length === 0) delete perDevice[input.capName];
-		} else if (input.active) perDevice[input.capName] = {
+		if (input.active) perDevice[input.capName] = {
 			...existing,
 			wrapperAddonId: input.wrapperAddonId
 		};
@@ -3421,20 +3388,6 @@ async function setWrapperActive(deps, input) {
 			return rest;
 		})() });
 	});
-	if (collection) {
-		mirrorDeviceSources(deps.capabilityRegistry, input.deviceId, input.capName, mirrored);
-		deps.ctx.logger.info(input.active ? "source activated for device" : "source deactivated for device", {
-			tags: {
-				deviceId: input.deviceId,
-				addonId: input.wrapperAddonId
-			},
-			meta: {
-				capability: input.capName,
-				sourceId: input.sourceId ?? null,
-				disabledSourceIds: [...mirrored]
-			}
-		});
-	}
 	deps.ctx.eventBus.emit({
 		id: randomUUID(),
 		timestamp: /* @__PURE__ */ new Date(),
@@ -7453,11 +7406,6 @@ var DeviceManagerAddon = class extends BaseAddon {
 		const deviceRows = new DeviceRowStore(deviceRowBackendOf(settingsStoreApi), this.ctx.logger.child("rows"));
 		await deviceRows.declare();
 		this.deviceRows = deviceRows;
-		const capRegistryForRestore = this.capabilityRegistry;
-		if (capRegistryForRestore) {
-			const restored = restoreDeviceSourceActivations(capRegistryForRestore, await readBindingsStore({ ctx: this.ctx }), this.ctx.logger);
-			if (restored > 0) this.ctx.logger.info("per-device source deactivations restored", { meta: { rows: restored } });
-		}
 		try {
 			await purgeRetiredSettingsRows(deviceRows.retiredRowStore(), this.ctx.logger.child("RetiredRows"));
 		} catch (err) {
@@ -7710,4 +7658,4 @@ var DeviceManagerAddon = class extends BaseAddon {
 	}
 };
 //#endregion
-export { DeviceManagerAddon, DeviceManagerAddon as default, setWrapperActive as i, mergeAggregates, nextDisabledSources as n, restoreDeviceSourceActivations as r, isSourceDenied as t };
+export { DeviceManagerAddon, DeviceManagerAddon as default, mergeAggregates, setWrapperActive as t };