@camstack/system 1.2.276 → 1.2.278

package/dist/builtins/device-manager/device-meta-types.d.ts

@@ -45,38 +45,26 @@ export type DriverConfigSchemaResult = {
 };
 /**
  * One `(device, capability)` row of the persisted wrapper-activation store —
- * the authority for every per-camera function switch (D62) and, since D556,
- * for which SOURCES a camera's collection cap has.
+ * the authority for every per-camera function switch (D62).
  *
- * The two fields answer two different cardinalities and are never both the
- * answer for one cap:
+ * SINGLETON capabilities only. `wrapperAddonId` is the bound wrapper, or the
+ * explicit `null` "operator disabled" marker that stops `getBindings` step 2
+ * re-binding a `defaultActive` wrapper; absent means the operator never touched
+ * this cap on this device.
  *
- * - `wrapperAddonId` — a SINGLETON cap's bound wrapper, or the explicit
- *   `null` "operator disabled" marker that stops `getBindings` step 2
- *   re-binding a `defaultActive` wrapper. Absent means the operator never
- *   touched this cap on this device.
- * - `disabledSourceIds` — a COLLECTION cap's switched-OFF sources. A DENY
- *   list on purpose: absence means every source the camera has, which is both
- *   today's behaviour and the only shape under which a provider registered
- *   later is seen without a second write (D556).
- *
- * `disabledSourceIds` holds SOURCE ids (`native:reolink:hub`), not addon ids.
- * One addon can serve several of a device's sources, so an addon-keyed entry
- * could only ever mean "all of them" — which is exactly how a LEGACY entry is
- * still read: {@link DeviceCapBinding.disabledSourceAddonIds} is never written
- * any more and every id in it denies every source that addon serves for this
- * device. One predicate, stated once, so an operator's existing decision does
- * not silently stop applying (D555).
+ * **A COLLECTION capability has no row here, by design.** Its providers are a
+ * SET, and the set is DERIVED from who provides the cap
+ * (`device-bindings-store.ts` step 0) — *"tutti i providers funzionano sempre,
+ * non serve disattivarli/attivarli … loro vivono lì"* (operator, 2026-09-20).
+ * Nothing persists it, so nothing has to be back-filled onto a fleet and
+ * nothing goes stale when an addon is deployed to a camera later.
+ * `setWrapperActive` REFUSES a collection cap rather than writing a field the
+ * enumeration does not read — `disabledSourceIds` / `disabledSourceAddonIds`
+ * (D556, D555) were exactly that, and
+ * `scripts/check-device-selection-authority.ts` now makes it unrepresentable.
  */
 export interface DeviceCapBinding {
     readonly wrapperAddonId?: string | null;
-    /** SOURCE ids the operator switched off for this device. */
-    readonly disabledSourceIds?: readonly string[];
-    /**
-     * @deprecated Pre-re-key entries, keyed by ADDON id. Read, never written:
-     *   an id here denies every source that addon serves for this device.
-     */
-    readonly disabledSourceAddonIds?: readonly string[];
 }
 export interface DeviceBindingsStore {
     readonly deviceBindings: Record<string, Record<string, DeviceCapBinding>>;

package/dist/builtins/device-manager/device-source-activation.d.ts

@@ -1,5 +1,4 @@
-import { AddonContext, ICapabilityRegistry, IScopedLogger } from '@camstack/types';
-import { DeviceBindingsStore } from './device-meta-types.js';
+import { AddonContext, ICapabilityRegistry } from '@camstack/types';
 import { WriteLock } from './write-lock.js';
 /**
  * What a wrapper-activation write needs, and nothing more.
@@ -20,51 +19,18 @@ export interface WrapperActivationInput {
     readonly deviceId: number;
     readonly capName: string;
     readonly wrapperAddonId: string;
-    /**
-     * The SOURCE to toggle, for a collection cap. Absent keeps the cap-wide
-     * meaning D556 shipped — every source this addon serves for this device —
-     * which is also how a pre-re-key entry is read.
-     */
-    readonly sourceId?: string;
     readonly active: boolean;
 }
-/**
- * Is `source` denied for a device, given the persisted deny set?
- *
- * The ONE place the migration rule lives: an entry matches either the source's
- * own id or the id of the addon that serves it. New writes are always source
- * ids; an addon id can only be a pre-re-key entry, and it still means "every
- * source this addon serves here".
- */
-export declare function isSourceDenied(denied: readonly string[], source: {
-    readonly sourceId?: string;
-    readonly addonId: string;
-}): boolean;
-/**
- * The deny list after one toggle. Pure, order-preserving, idempotent — a
- * second "off" on an addon already off changes nothing.
- */
-export declare function nextDisabledSources(current: readonly string[], key: string, active: boolean): readonly string[];
-/**
- * Replay the whole persisted store onto a fresh registry.
- *
- * The projection is in-memory, so a hub restart starts it empty — and an empty
- * deny list means "every source", which would silently switch every source the
- * operator turned off back ON. That is precisely the D62 failure (an off switch
- * that reports on), so the replay is not an optimisation: it is what makes the
- * authority durable. Called from the device-manager's `onInitialize`, before
- * any camera can be asked for its clips, and safe to call again.
- */
-export declare function restoreDeviceSourceActivations(registry: ICapabilityRegistry, store: Partial<DeviceBindingsStore>, logger: IScopedLogger): number;
 /**
  * Activate or deactivate a wrapper for one device.
  *
- * Singleton caps keep the shape D62 fixed: one `wrapperAddonId`, or the
- * explicit `null` marker that stops `getBindings` step 2 re-binding a
- * `defaultActive` wrapper. Collection caps write `disabledSourceAddonIds`
- * instead — their `wrapperAddonId` is left exactly as it was, because a cap
- * with several sources has no "which one" for `getBindings` to answer (D554
- * context 3) and inventing one would turn a source toggle into a cap-wide off
- * switch.
+ * SINGLETON caps only, and that is now enforced rather than assumed: one
+ * `wrapperAddonId`, or the explicit `null` "operator disabled" marker that
+ * stops `getBindings` step 2 re-binding a `defaultActive` wrapper.
+ *
+ * A COLLECTION cap is REFUSED by name. Its providers are a derived SET
+ * (`device-bindings-store.ts` step 0) — there is nothing to activate, and a
+ * verb that accepted the call and wrote a store nobody reads is exactly what
+ * this module shipped until 2026-09-20.
  */
 export declare function setWrapperActive(deps: WrapperActivationDeps, input: WrapperActivationInput): Promise<void>;

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { B as bareAddonId, Fn as EventCategory, T as SOURCE_DEVICE_TYPES, at as evaluateSensorEdge, cn as BaseAddon, gt as isSourceCap, ht as isSameAddonId, mn as DeviceType, on as errMsg, tt as doorbellCapability, w as SOURCE_CAPS, xn as createEvent } from "../../dist-AHdiIdJH.mjs";
+import { B as bareAddonId, Fn as EventCategory, T as SOURCE_DEVICE_TYPES, at as evaluateSensorEdge, cn as BaseAddon, gt as isSourceCap, ht as isSameAddonId, mn as DeviceType, on as errMsg, tt as doorbellCapability, w as SOURCE_CAPS, xn as createEvent } from "../../dist-D1atncyi.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Ct as logDestinationCapability, cn as BaseAddon } from "../../dist-AHdiIdJH.mjs";
+import { Ct as logDestinationCapability, cn as BaseAddon } from "../../dist-D1atncyi.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { C as RecordingStatusSchema, Fn as EventCategory, cn as BaseAddon, on as errMsg, xn as createEvent } from "../../dist-AHdiIdJH.mjs";
+import { C as RecordingStatusSchema, Fn as EventCategory, cn as BaseAddon, on as errMsg, xn as createEvent } from "../../dist-D1atncyi.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { N as UserRecordSchema, O as ScopedTokenSchema, R as authProviderCapability, cn as BaseAddon, nn as userManagementCapability, r as ApiKeyRecordSchema } from "../../dist-AHdiIdJH.mjs";
+import { N as UserRecordSchema, O as ScopedTokenSchema, R as authProviderCapability, cn as BaseAddon, nn as userManagementCapability, r as ApiKeyRecordSchema } from "../../dist-D1atncyi.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 const require_tls = require("../../tls-D_wUeOTD.js");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Fn as EventCategory, cn as BaseAddon, xt as localNetworkCapability } from "../../dist-AHdiIdJH.mjs";
+import { Fn as EventCategory, cn as BaseAddon, xt as localNetworkCapability } from "../../dist-D1atncyi.mjs";
 import { S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, i as writeExtraSans, l as reissueTlsLeaf, n as readTlsAccessStatus, o as validateUploadedTls, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, y as applyLanHttp } from "../../tls-IM-v7JV4.mjs";
 import { mkdir, writeFile } from "node:fs/promises";
 import { join } from "node:path";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Ct as logDestinationCapability, cn as BaseAddon } from "../../dist-AHdiIdJH.mjs";
+import { Ct as logDestinationCapability, cn as BaseAddon } from "../../dist-D1atncyi.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 let node_fs_promises = require("node:fs/promises");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Fn as EventCategory, Ot as metricsProviderCapability, Rt as reducePoints, cn as BaseAddon, lt as foldSnapshotByFunction, on as errMsg, xn as createEvent, zt as resolveBucketMs } from "../../dist-AHdiIdJH.mjs";
+import { Fn as EventCategory, Ot as metricsProviderCapability, Rt as reducePoints, cn as BaseAddon, lt as foldSnapshotByFunction, on as errMsg, xn as createEvent, zt as resolveBucketMs } from "../../dist-D1atncyi.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import * as fs from "node:fs";
 import { constants, readFileSync } from "node:fs";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_child_process = require("node:child_process");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { Cn as emitReadiness, Fn as EventCategory, Ft as platformProbeCapability, Kt as scoreRuntimes, cn as BaseAddon, nt as enumerateInferenceDevices, on as errMsg } from "../../dist-AHdiIdJH.mjs";
+import { Cn as emitReadiness, Fn as EventCategory, Ft as platformProbeCapability, Kt as scoreRuntimes, cn as BaseAddon, nt as enumerateInferenceDevices, on as errMsg } from "../../dist-D1atncyi.mjs";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";
 import * as os from "node:os";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Fn as EventCategory, cn as BaseAddon } from "../../dist-AHdiIdJH.mjs";
+import { Fn as EventCategory, cn as BaseAddon } from "../../dist-D1atncyi.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 const require_snapshot_courtesy = require("../../snapshot-courtesy-Cqs7GkOV.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { B as bareAddonId, Fn as EventCategory, On as nodePin, V as batteryCapability, Yt as snapshotCapability, Z as deriveBatteryPresence, a as BatteryStatusSchema, cn as BaseAddon, fn as DeviceFeature, mn as DeviceType, on as errMsg, tn as streamQualityLabel } from "../../dist-AHdiIdJH.mjs";
+import { B as bareAddonId, Fn as EventCategory, On as nodePin, V as batteryCapability, Yt as snapshotCapability, Z as deriveBatteryPresence, a as BatteryStatusSchema, cn as BaseAddon, fn as DeviceFeature, mn as DeviceType, on as errMsg, tn as streamQualityLabel } from "../../dist-D1atncyi.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg } from "../../snapshot-courtesy-CZPvteq2.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { $t as storageProviderCapability, cn as BaseAddon, ct as filesystemBrowseCapability } from "../../dist-AHdiIdJH.mjs";
+import { $t as storageProviderCapability, cn as BaseAddon, ct as filesystemBrowseCapability } from "../../dist-D1atncyi.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 const require_hub_cap_forward = require("../../hub-cap-forward-DmHNjbB0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { A as StorageLocationModeSchema, Dt as mayWriteToLocation, Et as mayReadLocation, Fn as EventCategory, M as StorageMigrationJobSchema, Vt as resolveLocationMode, W as collectSecretConfigKeys, Xt as storageCapability, Zt as storageMigrationCapability, _ as LegacyStorageLocationDefaultSchema, an as withLocationMode, cn as BaseAddon, j as StorageLocationTypeSchema, k as StorageCleanupJobSchema, kn as parseJsonObject, kt as modeMayWrite, ot as evictionPolicyOfLocation, pt as isLocationEnabled, qt as settingsStoreCapability, ut as gbToBytes, x as REDACTED_SECRET, yt as legacyModeOf } from "../../dist-AHdiIdJH.mjs";
+import { A as StorageLocationModeSchema, Dt as mayWriteToLocation, Et as mayReadLocation, Fn as EventCategory, M as StorageMigrationJobSchema, Vt as resolveLocationMode, W as collectSecretConfigKeys, Xt as storageCapability, Zt as storageMigrationCapability, _ as LegacyStorageLocationDefaultSchema, an as withLocationMode, cn as BaseAddon, j as StorageLocationTypeSchema, k as StorageCleanupJobSchema, kn as parseJsonObject, kt as modeMayWrite, ot as evictionPolicyOfLocation, pt as isLocationEnabled, qt as settingsStoreCapability, ut as gbToBytes, x as REDACTED_SECRET, yt as legacyModeOf } from "../../dist-D1atncyi.mjs";
 import { t as HUB_CAP_FWD_ACTION } from "../../hub-cap-forward-BdT320dq.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { Tn as hydrateSchema, cn as BaseAddon, on as errMsg } from "../../dist-AHdiIdJH.mjs";
+import { Tn as hydrateSchema, cn as BaseAddon, on as errMsg } from "../../dist-D1atncyi.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_OlSf31.js");
+const require_dist = require("../../dist-BWz_gZ5l.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Ct as logDestinationCapability, cn as BaseAddon } from "../../dist-AHdiIdJH.mjs";
+import { Ct as logDestinationCapability, cn as BaseAddon } from "../../dist-D1atncyi.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";