@camstack/system 1.2.276 → 1.2.278

package/dist/{dist-AHdiIdJH.mjs → dist-D1atncyi.mjs}

@@ -691,7 +691,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/sleep-CopaBJss.mjs
+//#region ../types/dist/sleep-CaB_hL5g.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -892,12 +892,6 @@ var WELL_KNOWN_TAB_MAP = Object.fromEntries([
 		icon: "circle-dot",
 		order: 40
 	},
-	{
-		id: "clips",
-		label: "Clips",
-		icon: "clapperboard",
-		order: 41
-	},
 	{
 		id: "engine",
 		label: "Inference Engine",
@@ -3860,6 +3854,20 @@ var EVENT_OWNER_TYPES = [
 * nothing failing until a caller asked.
 */
 var EventOwnerTypeSchema = z.enum(EVENT_OWNER_TYPES);
+/**
+* The owner kinds a media-PRESENCE probe may ask about: the three event tables
+* plus `track`.
+*
+* `videoclips` resolves a clip's still the way `resolveDefaultEventMedia` does
+* — the event's OWN media when it has any, else its owning TRACK's — so the
+* probe needs exactly this union and no more of {@link MediaOwnerType}. Built
+* FROM {@link EVENT_OWNER_TYPES} so a fourth event table reaches the probe the
+* day it is declared, rather than being accepted by one side and refused by the
+* other.
+*/
+var MEDIA_PRESENCE_OWNER_KINDS = [...EVENT_OWNER_TYPES, "track"];
+/** The same list as a Zod enum, for the cap input that carries it. */
+var MediaPresenceOwnerKindSchema = z.enum(MEDIA_PRESENCE_OWNER_KINDS);
 new Set(EVENT_OWNER_TYPES);
 /**
 * Shared video / audio encode profile schemas used by every consumer
@@ -13244,30 +13252,30 @@ var deviceManagerCapability = {
 		*/
 		getAllBindings: method(z.object({}), z.array(DeviceBindingsForDeviceSchema)),
 		/**
-		* Activate (or deactivate) a wrapper addon — or ONE of its sources — for a
-		* (device, cap) pair.
-		*
-		* Persists the binding via ctx.settings; `active: false` on a SINGLETON cap
-		* clears the wrapper (falling back to native if one is registered). On a
-		* COLLECTION cap it adds to the per-device DENY set instead, and the
-		* wrapper binding is left exactly as it was — a cap with several sources
-		* has no "which one" for `getBindings` to answer (D556).
-		*
-		* `sourceId` is what makes the switch match its label. One addon can serve
-		* several of a device's sources (`addon-provider-reolink` answers a hub
-		* child with `native:reolink:onboard` AND `native:reolink:hub`), so a
-		* toggle keyed by addon would turn off both while saying it turned off one
-		* — the D62 defect with the polarity reversed (D557). Naming the source
-		* denies exactly that source. OMITTING it keeps the cap-wide meaning
-		* D556 shipped: every source this addon serves for this device, which is
-		* also how a deny entry persisted before the re-key is still read.
+		* Activate (or deactivate) a wrapper addon for a (device, cap) pair — the
+		* per-camera function switch's ONE authority (D62).
+		*
+		* SINGLETON capabilities only. Persists the binding via ctx.settings;
+		* `active: false` clears the wrapper (falling back to native if one is
+		* registered) by persisting the explicit `{ wrapperAddonId: null }` marker,
+		* which is what stops `getBindings` re-binding a `defaultActive` wrapper.
+		*
+		* **A COLLECTION capability is REFUSED by name.** It briefly took a
+		* `sourceId` and wrote a per-device DENY set, so one of an addon's several
+		* sources could be switched off without switching off the rest (D556, then
+		* D555's re-key by source). The operator removed the whole idea the same
+		* day: *"tutti i providers funzionano sempre, non serve
+		* disattivarli/attivarli … loro vivono lì"* (D557 amended, third). A
+		* collection cap's providers are a DERIVED set — every addon that provides
+		* the cap for this device type, computed on every read and persisted
+		* nowhere — so there is nothing here to activate, and a verb that accepted
+		* the call could only write a field the enumeration does not read. That is
+		* the D62 shape, and this repo has shipped it four times.
 		*/
 		setWrapperActive: method(z.object({
 			deviceId: z.number(),
 			capName: z.string(),
 			wrapperAddonId: z.string(),
-			/** The `ClipSource.source` id to toggle. Absent = all of the addon's. */
-			sourceId: z.string().optional(),
 			active: z.boolean()
 		}), z.void(), {
 			kind: "mutation",
@@ -21800,6 +21808,35 @@ var pipelineAnalyticsCapability = {
 			deviceId: z.number()
 		}), z.array(MediaFileInfoSchema).readonly()),
 		/**
+		* Which of `ownerIds` hold at least ONE media row — an INDEX read, never a
+		* blob read, and the LICENCE `videoclips` needs to publish a `thumbnail`.
+		*
+		* The event-media URL is stamped from a template for every event in the
+		* system, so "the plane is up" was being served as "there are bytes": 64 of
+		* one camera's 179 clips pointed at a 404 (device 3836, 2026-08-17). This
+		* is the question that turns the stamp into a claim.
+		*
+		* It is on the WIRE because the clip source is registered by the addon that
+		* owns the FOOTAGE, not by this one (D560) — the probe used to be an
+		* in-process `MediaStore` read. One call per OWNER KIND, never one per
+		* owner: that N+1 is what `MediaStore.ownersWithMedia` was written to
+		* prevent, and crossing a process boundary makes it worse, not better.
+		* `ownerIds` is bounded at the same 5 000 the annotation fetch is bounded
+		* at, so one pathological camera-day cannot mint an unbounded request.
+		*
+		* THROWS rather than answering partially. A probe that quietly
+		* under-reports reads as "these owners have nothing" and the caller drops
+		* thumbnails that exist — the opposite failure to the one above, and
+		* equally invisible.
+		*
+		* `deviceId` is the authorization subject, exactly as on `getEventMedia`.
+		*/
+		ownersWithMedia: method(z.object({
+			deviceId: z.number(),
+			ownerKind: MediaPresenceOwnerKindSchema,
+			ownerIds: z.array(z.string()).max(5e3)
+		}), z.array(z.string()).readonly()),
+		/**
 		* Search object events by text query using CLIP cosine similarity.
 		* Encodes `text` via the `embedding-encoder` cap, queries the
 		* `ObjectEmbeddingStore` with optional prefilters, ranks all matching
@@ -25951,6 +25988,18 @@ var vectorStoreCapability = {
 		stats: method(VectorStatsInputSchema, VectorStatsResultSchema, { auth: "admin" })
 	}
 };
+z.enum([
+	"queue-full",
+	"camera-backoff",
+	"sleeping",
+	"camera-refused",
+	"no-keyframe",
+	"no-catalog-row",
+	"unsupported",
+	"unknown-device",
+	"uid-missing"
+]);
+z.enum(["deferred", "final"]);
 var ClipSchema = z.object({
 	/** Opaque, provider-namespaced id. The default provider encodes the time
 	*  window so `getClipPlayback` is self-contained (no event re-query). */
@@ -26101,7 +26150,25 @@ var ClipSchema = z.object({
 	*/
 	playable: z.boolean().optional(),
 	/** Why {@link playable} is false, verbatim (`no-file-for-window`). */
-	unplayableReason: z.string().optional()
+	unplayableReason: z.string().optional(),
+	/**
+	* This clip is STILL BEING WRITTEN, so {@link ClipSchema.timeRange}`.endMs`
+	* is not its end.
+	*
+	* Absent — the common case — means the row is closed and its `endMs` is the
+	* end of the recording. Present and `true` means the source told us the file
+	* has no end yet, and the `endMs` we carry is whatever the camera's index
+	* entry happened to hold: on a Reolink E1 Outdoor PoE (592, measured
+	* 2026-09-20) the newest file `…_192927_000000_…_0.mp4` reported an `endTime`
+	* of 19:29:56 and STILL reported it eight minutes later, while the file went
+	* on growing. A surface that drew 29 s there was lying about a clip that
+	* plays for minutes, on the one row the operator looks at first.
+	*
+	* `endMs` is deliberately still a number: it is the best bound anything has
+	* for a mint window or a byte fetch, and every consumer already requires it.
+	* This flag says what it is WORTH, and a duration is not drawn from it.
+	*/
+	inProgress: z.boolean().optional()
 });
 var ClipPlaybackSchema = z.object({
 	/**
@@ -26184,59 +26251,17 @@ var ClipSourceSchema = z.object({
 	* alternative — a `native:reolink:* → provider-reolink` table inside the
 	* widget — is a second authority on provider identity living in the one
 	* package with no business knowing it, wrong the day a third source appears
-	* (D557). One addon may serve SEVERAL sources: `addon-provider-reolink`
-	* answers a hub child with both `native:reolink:onboard` and
-	* `native:reolink:hub`, which is why the per-device switch is keyed by
-	* SOURCE and not by this (D555).
+	* (D557). One addon may serve SEVERAL sources, which is why the per-device
+	* switch is keyed by SOURCE and not by this (D555) — `addon-provider-reolink`
+	* served a hub child two of them until the two views were measured to be one
+	* store read twice (D555) and then read ONE way (D565).
 	*
 	* Optional for version skew only. The collection dispatcher stamps it from
 	* the registry, so a row that travelled through the fan-out carries the
 	* authoritative id whatever the provider filled in.
 	*/
 	addonId: z.string().optional(),
-	/**
-	* Which API this source resolved to FOR THIS CAMERA, when it has a choice.
-	*
-	* A source may cover one store through more than one surface — the Reolink
-	* provider reads a hub child through the parent's event log and a standalone
-	* through its own file list, because that is what each camera answers. The
-	* CHOICE is the provider's, made from what the camera is, and is never a row
-	* the operator has to understand; but it is REPORTED, because a source that
-	* silently reads a different API on two cameras and then behaves differently
-	* is the thing nobody can debug later. Absent when the source has only one
-	* way to read its store.
-	*/
-	via: z.string().optional(),
-	availability: ClipSourceAvailabilitySchema,
-	/**
-	* The operator switched this source OFF for this camera.
-	*
-	* Deliberately NOT a member of {@link ClipSourceAvailabilitySchema}'s
-	* vocabulary. That enum models what the source CAN do — a sleeping camera, an
-	* unmounted card, an index that disagrees with its own calendar — and a
-	* switched-off source could answer perfectly well; the operator decided it
-	* should not. Folding the choice in is how `disabled` and `broken` stop being
-	* distinguishable, which is the D62 rule this repo has already paid for twice:
-	* an off switch is REPORTED off (`CameraStatus.switchedOff`, the same word),
-	* and disabled must never look like broken. It is also what lets every
-	* exhaustive consumer of the availability enum keep compiling.
-	*
-	* A switched-off source contributes NO clips (`listClips` never calls it) and
-	* its row carries no `catalogAsOf`: nothing confirms a catalog it is not
-	* allowed to serve, and a frozen age that can only grow draws a stalling
-	* source rather than an off switch.
-	*
-	* The row survives BECAUSE it is the control the operator switches the source
-	* back on from — D554 decision 4's rule ("a source that cannot answer
-	* produces a ROW, not an absence") applied to the one case D556 carved out of
-	* it, and D557's own kept property ("a source is never hidden, only its
-	* rows"). Absent means on.
-	*
-	* A provider never sets this — like {@link ClipSourceSchema.addonId} it is
-	* stamped by the collection dispatcher, which holds the registry's projection
-	* of the persisted authority (D556) and is the only place that knows it.
-	*/
-	switchedOff: z.boolean().optional()
+	availability: ClipSourceAvailabilitySchema
 });
 var videoclipsCapability = {
 	name: "videoclips",
@@ -26256,17 +26281,31 @@ var videoclipsCapability = {
 	* `device-config-widget-wrapped-binding.spec.ts` pins that a `kind:'wrapped'`
 	* binding entry derives the same section a native one does.
 	*
-	* `topTab` because the browser owns the whole pane (a day's clips, a source
-	* list and a player), exactly as `ptz` does; the widget itself is
-	* `host/clips-browser` in ui-library's `HOST_WIDGETS`.
+	* **It is a SECTION of the Recording tab, at the end of it — not a tab of
+	* its own.** It shipped as a `clips` top-tab and the operator rejected the
+	* placement: *"utilizzerei la stessa tab recordings, lì abbiamo già tutto il
+	* necessario, una nuova sezione alla fine per le clips"*. The Recording tab
+	* already holds the recorder's panel, the schedule bands and the unified
+	* retention policy; footage the camera itself holds is the same question,
+	* asked of a different store. `order: 100` puts it after all of them with
+	* room left in front. The `clips` entry in `WELL_KNOWN_TABS` went with it —
+	* a well-known id nobody declares is an invitation to mint the tab again.
+	*
+	* `topTab` stays: the browser owns a pane (a day's tiles, a source list and
+	* a player) and the Config tab's inner bar has no room for one. The widget
+	* itself is `host/clips-browser` in ui-library's `HOST_WIDGETS`, and because
+	* the admin Recordings page renders every `location:'top-tab'` +
+	* `tab:'recording'` section behind its camera picker
+	* (`CameraRecordingSettingsSection`), this declaration lands the section on
+	* BOTH surfaces with no second wiring.
 	*/
 	deviceConfig: { ui: {
 		kind: "widget",
 		widgetId: "host/clips-browser",
-		tab: "clips",
+		tab: "recording",
 		topTab: true,
 		label: "Clips",
-		order: 0
+		order: 100
 	} },
 	methods: {
 		listClips: method(z.object({
@@ -26275,13 +26314,23 @@ var videoclipsCapability = {
 			until: z.number(),
 			limit: z.number().int().positive().optional(),
 			/**
-			* View filter over {@link ClipSourceSchema.source} values — the
-			* picker's selection, forwarded so a provider need not list what
-			* nobody is looking at. ABSENT means every source this camera has,
-			* which is the honest default for a surface whose whole point is that
-			* nothing is hidden (D554 3). A provider with one source ignores it.
+			* WHICH provider to ask — the `addonId` a {@link ClipSourceSchema} row
+			* carries, never a source id and never a list.
+			*
+			* Absent means the device's BOUND provider, which is CamStack on every
+			* camera today because that is what `deviceManager.getBindings`
+			* answers with. A provider the device is not bound to is refused by
+			* name rather than answered by another one (D552's
+			* `rejectUnresolvedAddonPin` rule).
+			*
+			* It replaced `sources?: string[]`, a VIEW filter over source ids that
+			* assumed the answer was a fan-out over everything a camera has. The
+			* operator settled otherwise on 2026-09-20 — *"il get videoclips
+			* prendere un provider opzionale, di default va su camstack"*,
+			* *"l'utilizzatore è uno solo"* — so the list is asked of one provider
+			* at a time and there is nothing to filter out of it.
 			*/
-			sources: z.array(z.string()).optional()
+			provider: z.string().optional()
 		}), z.array(ClipSchema).readonly(), {
 			kind: "query",
 			auth: "protected"
@@ -43705,6 +43754,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.ownersWithMedia": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.pauseForStorageMigration": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -47605,6 +47660,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"pipelineAnalytics.ownersWithMedia": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"pipelineAnalytics.proposeRetrainAnnotations": [{
 		name: "deviceId",
 		form: "single",

package/dist/index.d.ts

@@ -22,7 +22,7 @@ export { DeviceManagerAddon } from './builtins/device-manager/index.js';
  * projection — a spec that proves "activate, then list" must be able to drive
  * the real one, not a re-implementation of it.
  */
-export { isSourceDenied, nextDisabledSources, restoreDeviceSourceActivations, setWrapperActive, type WrapperActivationDeps, type WrapperActivationInput, } from './builtins/device-manager/device-source-activation.js';
+export { setWrapperActive, type WrapperActivationDeps, type WrapperActivationInput, } from './builtins/device-manager/device-source-activation.js';
 export { HubForwarderAddon, HubForwarderDestination } from './builtins/hub-forwarder/index.js';
 export { LivenessMonitorAddon } from './builtins/liveness-monitor/index.js';
 export { LocalAuthAddon } from './builtins/local-auth/index.js';

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-D_OlSf31.js");
+const require_dist = require("./dist-BWz_gZ5l.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");
@@ -5908,7 +5908,6 @@ var CapabilityRegistry = class CapabilityRegistry {
 	* camera keeps every provider it has today, and a provider that registers
 	* after the operator's last toggle needs no second write to be seen.
 	*/
-	deviceDisabledSources = /* @__PURE__ */ new Map();
 	/** autoActivate flags per (capability, addonId) — from addon manifests */
 	autoActivateFlags = /* @__PURE__ */ new Map();
 	/**
@@ -6805,72 +6804,23 @@ var CapabilityRegistry = class CapabilityRegistry {
 		return null;
 	}
 	/**
-	* Mirror ONE device's persisted source deactivations for `capability` into
-	* the projection (D556). The authority is the device-manager's
-	* `deviceBindings` store; this is the read side of that write and the only
-	* way the set changes.
-	*
-	* No check that `capability` is declared, and none that the addons are
-	* registered: a persisted operator decision is a fact about the fleet, not a
-	* reference to a live object, and replaying it at boot must not depend on
-	* which addon happened to register first. An empty list drops the entry
-	* (unset = every source).
-	*/
-	setDeviceDisabledSources(deviceId, capability, addonIds) {
-		let deviceMap = this.deviceDisabledSources.get(deviceId);
-		if (addonIds.length === 0) {
-			if (!deviceMap) return;
-			deviceMap.delete(capability);
-			if (deviceMap.size === 0) this.deviceDisabledSources.delete(deviceId);
-			this.logger.debug("Device source deactivations cleared", {
-				tags: { deviceId: Number(deviceId) },
-				meta: { capability }
-			});
-			return;
-		}
-		if (!deviceMap) {
-			deviceMap = /* @__PURE__ */ new Map();
-			this.deviceDisabledSources.set(deviceId, deviceMap);
-		}
-		deviceMap.set(capability, new Set(addonIds));
-		this.logger.debug("Device source deactivations mirrored", {
-			tags: { deviceId: Number(deviceId) },
-			meta: {
-				capability,
-				disabledAddonIds: [...addonIds]
-			}
-		});
-	}
-	/**
-	* The addon ids the operator switched OFF as sources of this device for
-	* `capability`. Empty means every source — never "none".
-	*/
-	getDeviceDisabledSources(deviceId, capability) {
-		const disabled = this.deviceDisabledSources.get(deviceId)?.get(capability);
-		return disabled === void 0 ? [] : [...disabled];
-	}
-	/** Is `addonId` switched off as a source of this device for `capability`? */
-	isDeviceSourceDisabled(deviceId, capability, addonId) {
-		return this.deviceDisabledSources.get(deviceId)?.get(capability)?.has(addonId) === true;
-	}
-	/**
 	* Resolve collection providers for a specific device.
-	* Filters by activation (the manifest's autoActivate) and by the per-device
-	* source deactivations the operator persisted (D556).
 	*
-	* `includeSwitchedOff` keeps the providers the operator switched off for this
-	* device. It exists for ONE caller — the source LISTING path — because a
-	* switched-off source must still produce a row to be switched back on from
-	* (D554 decision 4, D556 as amended), and only its own provider can name it.
-	* Every other path takes the default and sees the SERVING set: the sources
-	* that may actually contribute.
-	*/
-	resolveCollectionForDevice(capability, deviceId, options) {
+	* Filters by activation (the manifest's autoActivate) and by nothing else.
+	* The per-device DENY set that used to filter here is gone with the switch
+	* it projected (2026-09-20): *"tutti i providers funzionano sempre"*. WHICH
+	* providers a device has is now answered by its BINDINGS
+	* (`device-bindings-store.ts` step 0), which is a different question from
+	* which of them are registered and running — this one.
+	*
+	* `deviceId` is kept in the signature and deliberately unused: the resolution
+	* is per-device by CONTRACT, and a caller that stops passing one is a caller
+	* that has stopped asking about a device.
+	*/
+	resolveCollectionForDevice(capability, _deviceId) {
 		const state = this.capabilities.get(capability);
 		if (!state || state.definition.mode !== "collection") return [];
-		const disabledForDevice = this.deviceDisabledSources.get(deviceId)?.get(capability);
-		const keepSwitchedOff = options?.includeSwitchedOff === true;
-		return [...state.providers.entries()].filter(([addonId]) => !state.disabledProviders.has(addonId)).filter(([addonId]) => this.isActiveForSystem(capability, addonId)).filter(([addonId]) => keepSwitchedOff || disabledForDevice?.has(addonId) !== true).map(([, provider]) => asProvider(provider));
+		return [...state.providers.entries()].filter(([addonId]) => !state.disabledProviders.has(addonId)).filter(([addonId]) => this.isActiveForSystem(capability, addonId)).map(([, provider]) => asProvider(provider));
 	}
 	/** Check if all dependencies for a capability are satisfied. */
 	areDependenciesMet(capabilityName) {
@@ -96239,14 +96189,12 @@ exports.isClusterSecretMismatchError = isClusterSecretMismatchError;
 exports.isCollectionArrayMethod = require_dist.isCollectionArrayMethod;
 exports.isInfraCapability = isInfraCapability;
 exports.isModelDownloaded = require_event_loop_stall_monitor.isModelDownloaded;
-exports.isSourceDenied = require_builtins_device_manager_device_manager_addon.isSourceDenied;
 exports.isSourceNewer = isSourceNewer;
 exports.isolatedBuiltinPhase = isolatedBuiltinPhase;
 exports.loadTlsCert = require_tls$1.loadTlsCert;
 exports.localEndpointPath = require_manifest_system_deps.localEndpointPath;
 exports.localProviderLink = require_manifest_system_deps.localProviderLink;
 exports.mountNativeCapService = require_manifest_system_deps.mountNativeCapService;
-exports.nextDisabledSources = require_builtins_device_manager_device_manager_addon.nextDisabledSources;
 exports.nextRssBudgetState = require_manifest_system_deps.nextRssBudgetState;
 exports.parseCapAction = require_manifest_system_deps.parseCapAction;
 exports.parseRangeHeader = require_event_loop_stall_monitor.parseRangeHeader;
@@ -96272,7 +96220,6 @@ exports.reissueTlsLeaf = require_tls$1.reissueTlsLeaf;
 exports.resolveFilePath = require_event_loop_stall_monitor.resolveFilePath;
 exports.resolveHwAccel = require_manifest_system_deps.resolveHwAccel;
 exports.resolveNpmInvocation = require_manifest_system_deps.resolveNpmInvocation;
-exports.restoreDeviceSourceActivations = require_builtins_device_manager_device_manager_addon.restoreDeviceSourceActivations;
 exports.runHubAddonBoot = runHubAddonBoot;
 exports.runNpm = require_manifest_system_deps.runNpm;
 exports.sampleSocketDirection = require_manifest_system_deps.sampleSocketDirection;

package/dist/index.mjs

@@ -1,12 +1,12 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { An as parseJsonUnknown, F as addonSettingsCapability, Fn as EventCategory$1, Gt as scopesAllowDeviceCap, Ht as resolveMethodAuth, It as procedureAuthKey, Mn as resolveCapMount, Mt as objectInputDeclaresAddonId, Nn as scopeKey, Nt as objectInputDeclaresRequiredDeviceId, S as RUNTIME_DEFAULTS, Sn as emitDownForOwnedCaps, Tt as looseSchema, Wt as scopesAllowAddon, _t as isVoidInput, bn as asString$1, bt as lifecycleJobSchema, dn as DEVICE_STATUS_METHOD, dt as isArrayOutputSchema, ft as isCollectionArrayMethod, g as LOG_LEVEL_RANK, gn as ReadinessTimeoutError, hn as ReadinessRegistry, jn as readinessKey, kn as parseJsonObject, ln as DATAPLANE_SECRET_HEADER$1, mt as isObjectInput, on as errMsg$1, st as extractNestedAddonId, t as ALL_CAPABILITY_DEFINITIONS, un as DEVICE_SETTINGS_CONTRIBUTION_METHODS, vn as asJsonObject$1, vt as kebabToCamel, wn as expandCapMethods, wt as logLevelAtMost, xn as createEvent, y as METHOD_ACCESS_MAP, yn as asNumber } from "./dist-AHdiIdJH.mjs";
+import { An as parseJsonUnknown, F as addonSettingsCapability, Fn as EventCategory$1, Gt as scopesAllowDeviceCap, Ht as resolveMethodAuth, It as procedureAuthKey, Mn as resolveCapMount, Mt as objectInputDeclaresAddonId, Nn as scopeKey, Nt as objectInputDeclaresRequiredDeviceId, S as RUNTIME_DEFAULTS, Sn as emitDownForOwnedCaps, Tt as looseSchema, Wt as scopesAllowAddon, _t as isVoidInput, bn as asString$1, bt as lifecycleJobSchema, dn as DEVICE_STATUS_METHOD, dt as isArrayOutputSchema, ft as isCollectionArrayMethod, g as LOG_LEVEL_RANK, gn as ReadinessTimeoutError, hn as ReadinessRegistry, jn as readinessKey, kn as parseJsonObject, ln as DATAPLANE_SECRET_HEADER$1, mt as isObjectInput, on as errMsg$1, st as extractNestedAddonId, t as ALL_CAPABILITY_DEFINITIONS, un as DEVICE_SETTINGS_CONTRIBUTION_METHODS, vn as asJsonObject$1, vt as kebabToCamel, wn as expandCapMethods, wt as logLevelAtMost, xn as createEvent, y as METHOD_ACCESS_MAP, yn as asNumber } from "./dist-D1atncyi.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
 import { ConsoleDestination, ConsoleLoggingAddon } from "./builtins/console-logging/index.mjs";
 import { CoreBlocksAddon } from "./builtins/core-blocks/core-blocks.addon.mjs";
 import "./builtins/core-blocks/index.mjs";
-import { DeviceManagerAddon, i as setWrapperActive, n as nextDisabledSources, r as restoreDeviceSourceActivations, t as isSourceDenied } from "./builtins/device-manager/device-manager.addon.mjs";
+import { DeviceManagerAddon, t as setWrapperActive } from "./builtins/device-manager/device-manager.addon.mjs";
 import "./builtins/device-manager/index.mjs";
 import { HubForwarderAddon, HubForwarderDestination } from "./builtins/hub-forwarder/index.mjs";
 import { LivenessMonitorAddon } from "./builtins/liveness-monitor/liveness-monitor.addon.mjs";
@@ -5901,7 +5901,6 @@ var CapabilityRegistry = class CapabilityRegistry {
 	* camera keeps every provider it has today, and a provider that registers
 	* after the operator's last toggle needs no second write to be seen.
 	*/
-	deviceDisabledSources = /* @__PURE__ */ new Map();
 	/** autoActivate flags per (capability, addonId) — from addon manifests */
 	autoActivateFlags = /* @__PURE__ */ new Map();
 	/**
@@ -6798,72 +6797,23 @@ var CapabilityRegistry = class CapabilityRegistry {
 		return null;
 	}
 	/**
-	* Mirror ONE device's persisted source deactivations for `capability` into
-	* the projection (D556). The authority is the device-manager's
-	* `deviceBindings` store; this is the read side of that write and the only
-	* way the set changes.
-	*
-	* No check that `capability` is declared, and none that the addons are
-	* registered: a persisted operator decision is a fact about the fleet, not a
-	* reference to a live object, and replaying it at boot must not depend on
-	* which addon happened to register first. An empty list drops the entry
-	* (unset = every source).
-	*/
-	setDeviceDisabledSources(deviceId, capability, addonIds) {
-		let deviceMap = this.deviceDisabledSources.get(deviceId);
-		if (addonIds.length === 0) {
-			if (!deviceMap) return;
-			deviceMap.delete(capability);
-			if (deviceMap.size === 0) this.deviceDisabledSources.delete(deviceId);
-			this.logger.debug("Device source deactivations cleared", {
-				tags: { deviceId: Number(deviceId) },
-				meta: { capability }
-			});
-			return;
-		}
-		if (!deviceMap) {
-			deviceMap = /* @__PURE__ */ new Map();
-			this.deviceDisabledSources.set(deviceId, deviceMap);
-		}
-		deviceMap.set(capability, new Set(addonIds));
-		this.logger.debug("Device source deactivations mirrored", {
-			tags: { deviceId: Number(deviceId) },
-			meta: {
-				capability,
-				disabledAddonIds: [...addonIds]
-			}
-		});
-	}
-	/**
-	* The addon ids the operator switched OFF as sources of this device for
-	* `capability`. Empty means every source — never "none".
-	*/
-	getDeviceDisabledSources(deviceId, capability) {
-		const disabled = this.deviceDisabledSources.get(deviceId)?.get(capability);
-		return disabled === void 0 ? [] : [...disabled];
-	}
-	/** Is `addonId` switched off as a source of this device for `capability`? */
-	isDeviceSourceDisabled(deviceId, capability, addonId) {
-		return this.deviceDisabledSources.get(deviceId)?.get(capability)?.has(addonId) === true;
-	}
-	/**
 	* Resolve collection providers for a specific device.
-	* Filters by activation (the manifest's autoActivate) and by the per-device
-	* source deactivations the operator persisted (D556).
 	*
-	* `includeSwitchedOff` keeps the providers the operator switched off for this
-	* device. It exists for ONE caller — the source LISTING path — because a
-	* switched-off source must still produce a row to be switched back on from
-	* (D554 decision 4, D556 as amended), and only its own provider can name it.
-	* Every other path takes the default and sees the SERVING set: the sources
-	* that may actually contribute.
-	*/
-	resolveCollectionForDevice(capability, deviceId, options) {
+	* Filters by activation (the manifest's autoActivate) and by nothing else.
+	* The per-device DENY set that used to filter here is gone with the switch
+	* it projected (2026-09-20): *"tutti i providers funzionano sempre"*. WHICH
+	* providers a device has is now answered by its BINDINGS
+	* (`device-bindings-store.ts` step 0), which is a different question from
+	* which of them are registered and running — this one.
+	*
+	* `deviceId` is kept in the signature and deliberately unused: the resolution
+	* is per-device by CONTRACT, and a caller that stops passing one is a caller
+	* that has stopped asking about a device.
+	*/
+	resolveCollectionForDevice(capability, _deviceId) {
 		const state = this.capabilities.get(capability);
 		if (!state || state.definition.mode !== "collection") return [];
-		const disabledForDevice = this.deviceDisabledSources.get(deviceId)?.get(capability);
-		const keepSwitchedOff = options?.includeSwitchedOff === true;
-		return [...state.providers.entries()].filter(([addonId]) => !state.disabledProviders.has(addonId)).filter(([addonId]) => this.isActiveForSystem(capability, addonId)).filter(([addonId]) => keepSwitchedOff || disabledForDevice?.has(addonId) !== true).map(([, provider]) => asProvider(provider));
+		return [...state.providers.entries()].filter(([addonId]) => !state.disabledProviders.has(addonId)).filter(([addonId]) => this.isActiveForSystem(capability, addonId)).map(([, provider]) => asProvider(provider));
 	}
 	/** Check if all dependencies for a capability are satisfied. */
 	areDependenciesMet(capabilityName) {
@@ -95879,4 +95829,4 @@ var LifecycleJobEngine = class {
 	}
 };
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, ARRAY_BUFFER_CENSUS_COOLDOWN_MS, ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ARRAY_BUFFER_CENSUS_THRESHOLD_MB, ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CAP_ACTION_OVERFLOW_LABEL, CAP_ACTION_UNLABELLED, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_CAP_ACTION_READING, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_CAP_ACTIONS_PER_PEER, MAX_LEAF_VALIDITY_DAYS, MESH_QUEUE_TOP_N, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, OUTBOUND_QUEUE_COOLDOWN_MS, OUTBOUND_QUEUE_SUSTAIN_MS, OUTBOUND_QUEUE_THRESHOLD_BYTES, PARENT_ROUTED_PROVIDER_ADDON_ID, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, SOCKET_QUEUE_TOP_N, STALL_REPORT_MS, STALL_TICK_MS, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, attributeStall, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildNpmChildEnv, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionLabel, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createArrayBufferCensusGate, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCapActionCensus, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createInspectorArrayBufferCensus, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createMeshQueueReader, createOutboundQueueGate, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, deviceCapResolverLink, diffCapActionCensus, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatArrayBufferCensus, formatEventPlane, formatHeapSpaces, formatLogLine, formatMeshQueue, formatOutboundQueueVerdict, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSpaceField, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installManifestSystemDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayBufferCensusReport, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceDenied, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextDisabledSources, nextRssBudgetState, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readSocketQueues, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, restoreDeviceSourceActivations, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, setWrapperActive, shouldReclaim, socketDirectionBytes, socketDirectionMessages, startEventLoopStallMonitor, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, ARRAY_BUFFER_CENSUS_COOLDOWN_MS, ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ARRAY_BUFFER_CENSUS_THRESHOLD_MB, ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CAP_ACTION_OVERFLOW_LABEL, CAP_ACTION_UNLABELLED, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_CAP_ACTION_READING, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_CAP_ACTIONS_PER_PEER, MAX_LEAF_VALIDITY_DAYS, MESH_QUEUE_TOP_N, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, OUTBOUND_QUEUE_COOLDOWN_MS, OUTBOUND_QUEUE_SUSTAIN_MS, OUTBOUND_QUEUE_THRESHOLD_BYTES, PARENT_ROUTED_PROVIDER_ADDON_ID, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, SOCKET_QUEUE_TOP_N, STALL_REPORT_MS, STALL_TICK_MS, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, attributeStall, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildNpmChildEnv, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionLabel, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createArrayBufferCensusGate, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCapActionCensus, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createInspectorArrayBufferCensus, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createMeshQueueReader, createOutboundQueueGate, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, deviceCapResolverLink, diffCapActionCensus, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatArrayBufferCensus, formatEventPlane, formatHeapSpaces, formatLogLine, formatMeshQueue, formatOutboundQueueVerdict, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSpaceField, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installManifestSystemDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayBufferCensusReport, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextRssBudgetState, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readSocketQueues, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, setWrapperActive, shouldReclaim, socketDirectionBytes, socketDirectionMessages, startEventLoopStallMonitor, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };