@camstack/system 1.2.295 → 1.2.297

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Bn as EventCategory, L as addonPagesCapability, dn as errMsg, pn as BaseAddon } from "../../dist-D1_rTUOS.mjs";
+import { Bn as EventCategory, L as addonPagesCapability, dn as errMsg, pn as BaseAddon } from "../../dist-O_Cf9RQm.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Bn as EventCategory, dn as errMsg, pn as BaseAddon, z as addonWidgetsCapability } from "../../dist-D1_rTUOS.mjs";
+import { Bn as EventCategory, dn as errMsg, pn as BaseAddon, z as addonWidgetsCapability } from "../../dist-O_Cf9RQm.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { B as alertsCapability, Bn as EventCategory, En as createEvent, dn as errMsg, n as AlertSchema, pn as BaseAddon } from "../../dist-D1_rTUOS.mjs";
+import { B as alertsCapability, Bn as EventCategory, En as createEvent, dn as errMsg, n as AlertSchema, pn as BaseAddon } from "../../dist-O_Cf9RQm.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { Bn as EventCategory, Mn as isEvent, U as bareAddonId, Ut as ptzAutotrackCapability, dn as errMsg, g as FIRST_LEVEL_MACRO_CLASSES, pn as BaseAddon } from "../../dist-D1_rTUOS.mjs";
+import { Bn as EventCategory, Mn as isEvent, U as bareAddonId, Ut as ptzAutotrackCapability, dn as errMsg, g as FIRST_LEVEL_MACRO_CLASSES, pn as BaseAddon } from "../../dist-O_Cf9RQm.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Bn as EventCategory, H as backupCapability, Nt as mayWriteToLocation, pn as BaseAddon, rn as storageOccupancyCapability } from "../../dist-D1_rTUOS.mjs";
+import { Bn as EventCategory, H as backupCapability, Nt as mayWriteToLocation, pn as BaseAddon, rn as storageOccupancyCapability } from "../../dist-O_Cf9RQm.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { An as hydrateSchema, Bn as EventCategory, En as createEvent, It as motionCapability, K as cameraGridLayoutCapability, Q as declarationOwnerNodeId, S as MOTION_CLOSE_AFTER_MS, _n as DeviceFeature, an as streamCatalogCapability, dn as errMsg, en as snapshotCapability, fn as buildFfmpegArgs, i as BaseDevice, m as DeclaredDevices, p as DERIVED_CAMERA_SILENCED_CAP_NAMES, pn as BaseAddon, yn as DeviceType } from "../../dist-D1_rTUOS.mjs";
+import { An as hydrateSchema, Bn as EventCategory, En as createEvent, It as motionCapability, K as cameraGridLayoutCapability, Q as declarationOwnerNodeId, S as MOTION_CLOSE_AFTER_MS, _n as DeviceFeature, an as streamCatalogCapability, dn as errMsg, en as snapshotCapability, fn as buildFfmpegArgs, i as BaseDevice, m as DeclaredDevices, p as DERIVED_CAMERA_SILENCED_CAP_NAMES, pn as BaseAddon, yn as DeviceType } from "../../dist-O_Cf9RQm.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { kt as logDestinationCapability, pn as BaseAddon } from "../../dist-D1_rTUOS.mjs";
+import { kt as logDestinationCapability, pn as BaseAddon } from "../../dist-O_Cf9RQm.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,4 +1,4 @@
-import { J as coreBlockAddonId, X as coreBlocksCapability, Y as coreBlockIdFromAddonId, c as CORE_BLOCKS_ADDON_ID, dn as errMsg, l as CORE_BLOCK_ADDON_PREFIX, m as DeclaredDevices, pn as BaseAddon, u as CoreBlockSchema } from "../../dist-D1_rTUOS.mjs";
+import { J as coreBlockAddonId, X as coreBlocksCapability, Y as coreBlockIdFromAddonId, c as CORE_BLOCKS_ADDON_ID, dn as errMsg, l as CORE_BLOCK_ADDON_PREFIX, m as DeclaredDevices, pn as BaseAddon, u as CoreBlockSchema } from "../../dist-O_Cf9RQm.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/device-manager/device-bindings-store.d.ts

@@ -235,6 +235,18 @@ export declare function getAllBindings(deps: BindingsDeps): Promise<Array<{
     deviceId: number;
     entries: DeviceBindingEntry[];
 }>>;
+/**
+ * The ids of every device bound to at least one of `capNames`, ascending.
+ *
+ * Built on {@link getAllBindings} so the routing rules (native, wrapped,
+ * remote) are the ones `getBindings` applies — a second resolver is how the
+ * two would drift. Only ids leave: the whole point is that a caller asking
+ * "which devices are openings" does not receive 1 000 binding maps (D636).
+ */
+export interface ListDeviceIdsByCapsInput {
+    readonly capNames: readonly string[];
+}
+export declare function listDeviceIdsByCaps(deps: BindingsDeps, input: ListDeviceIdsByCapsInput): Promise<number[]>;
 /**
  * Resolve a numeric deviceId to a stableId via persisted meta.
  * Used only by the device-identity section of the device-details

package/dist/builtins/device-manager/device-manager.addon.d.ts

@@ -1,5 +1,6 @@
 import { DeviceBindingEntry, BaseAddon, ProviderRegistration } from '@camstack/types';
 import { mergeAggregates } from './device-aggregation-merge.js';
+import { ListDeviceIdsByCapsInput } from './device-bindings-store.js';
 import { ContributionShape } from './device-meta-types.js';
 export { mergeAggregates };
 export declare class DeviceManagerAddon extends BaseAddon {
@@ -123,6 +124,7 @@ export declare class DeviceManagerAddon extends BaseAddon {
         deviceId: number;
         entries: DeviceBindingEntry[];
     }>>;
+    listDeviceIdsByCaps(input: ListDeviceIdsByCapsInput): Promise<number[]>;
     /** Build the dependency context the extracted aggregation functions consume. */
     private get aggregationDeps();
     getDeviceAggregate(deviceId: number, kind: 'settings' | 'live'): Promise<ContributionShape | null>;

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-BJbgHvQf.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-_jB8F9wE.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 //#region src/builtins/device-manager/adoption-job-engine.ts
@@ -988,6 +988,10 @@ async function getAllBindings(deps) {
 	for (const deviceId of [...ids].sort((a, b) => a - b)) out.push(await resolveBindingsForDevice(deps, deviceId, rowById.get(deviceId) ?? null, pass));
 	return out;
 }
+async function listDeviceIdsByCaps(deps, input) {
+	const wanted = new Set(input.capNames);
+	return (await getAllBindings(deps)).filter((row) => row.entries.some((entry) => wanted.has(entry.capName))).map((row) => row.deviceId);
+}
 /**
 * Resolve a numeric deviceId to a stableId via persisted meta.
 * Used only by the device-identity section of the device-details
@@ -7759,6 +7763,9 @@ var DeviceManagerAddon = class extends require_dist.BaseAddon {
 	async getAllBindings() {
 		return getAllBindings(this.bindingsDeps);
 	}
+	async listDeviceIdsByCaps(input) {
+		return listDeviceIdsByCaps(this.bindingsDeps, input);
+	}
 	/** Build the dependency context the extracted aggregation functions consume. */
 	get aggregationDeps() {
 		return {
@@ -7983,6 +7990,7 @@ var DeviceManagerAddon = class extends require_dist.BaseAddon {
 			getAllBindings: async () => {
 				return this.getAllBindings();
 			},
+			listDeviceIdsByCaps: (input) => this.listDeviceIdsByCaps({ capNames: input.capNames }),
 			setWrapperActive: async (input) => {
 				return this.setWrapperActive({
 					deviceId: input.deviceId,

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { $t as siteZoneKey, A as STREAM_PROFILE_META, Bn as EventCategory, Bt as parseStreamParamsFormPatch, G as buildStreamParamsConfigSchema, Jt as runtimeStatePolicyFor, Lt as normalizeUnit, Ot as locationIconKey, Sn as WELL_KNOWN_TAB_MAP, _n as DeviceFeature, d as DAY_NAMES, dn as errMsg, h as DeviceStatusSchema, jn as isDeviceConfigCap, mt as formatMinutes, nt as deviceStateCapability, o as CAMERA_SWITCH_ORDER, ot as enumerateItemArrayFields, pn as BaseAddon, rt as deviceStatusCapability, s as CAP_NAMES_WITH_STATUS, st as enumerateSchemaFields, t as ALL_CAPABILITY_DEFINITIONS, tt as deviceManagerCapability, ut as expandContainer, vn as DeviceRole, wt as legacyAutoLinkIds, x as MINUTES_PER_DAY, y as LocationIconIdSchema, yn as DeviceType, zn as sleep$1 } from "../../dist-D1_rTUOS.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-jivjXc-s.mjs";
+import { $t as siteZoneKey, A as STREAM_PROFILE_META, Bn as EventCategory, Bt as parseStreamParamsFormPatch, G as buildStreamParamsConfigSchema, Jt as runtimeStatePolicyFor, Lt as normalizeUnit, Ot as locationIconKey, Sn as WELL_KNOWN_TAB_MAP, _n as DeviceFeature, d as DAY_NAMES, dn as errMsg, h as DeviceStatusSchema, jn as isDeviceConfigCap, mt as formatMinutes, nt as deviceStateCapability, o as CAMERA_SWITCH_ORDER, ot as enumerateItemArrayFields, pn as BaseAddon, rt as deviceStatusCapability, s as CAP_NAMES_WITH_STATUS, st as enumerateSchemaFields, t as ALL_CAPABILITY_DEFINITIONS, tt as deviceManagerCapability, ut as expandContainer, vn as DeviceRole, wt as legacyAutoLinkIds, x as MINUTES_PER_DAY, y as LocationIconIdSchema, yn as DeviceType, zn as sleep$1 } from "../../dist-O_Cf9RQm.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-DCcJa0nH.mjs";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 //#region src/builtins/device-manager/adoption-job-engine.ts
@@ -983,6 +983,10 @@ async function getAllBindings(deps) {
 	for (const deviceId of [...ids].sort((a, b) => a - b)) out.push(await resolveBindingsForDevice(deps, deviceId, rowById.get(deviceId) ?? null, pass));
 	return out;
 }
+async function listDeviceIdsByCaps(deps, input) {
+	const wanted = new Set(input.capNames);
+	return (await getAllBindings(deps)).filter((row) => row.entries.some((entry) => wanted.has(entry.capName))).map((row) => row.deviceId);
+}
 /**
 * Resolve a numeric deviceId to a stableId via persisted meta.
 * Used only by the device-identity section of the device-details
@@ -7754,6 +7758,9 @@ var DeviceManagerAddon = class extends BaseAddon {
 	async getAllBindings() {
 		return getAllBindings(this.bindingsDeps);
 	}
+	async listDeviceIdsByCaps(input) {
+		return listDeviceIdsByCaps(this.bindingsDeps, input);
+	}
 	/** Build the dependency context the extracted aggregation functions consume. */
 	get aggregationDeps() {
 		return {
@@ -7978,6 +7985,7 @@ var DeviceManagerAddon = class extends BaseAddon {
 			getAllBindings: async () => {
 				return this.getAllBindings();
 			},
+			listDeviceIdsByCaps: (input) => this.listDeviceIdsByCaps({ capNames: input.capNames }),
 			setWrapperActive: async (input) => {
 				return this.setWrapperActive({
 					deviceId: input.deviceId,

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { Bn as EventCategory, D as SOURCE_CAPS, En as createEvent, O as SOURCE_DEVICE_TYPES, U as bareAddonId, bt as isSameAddonId, ct as evaluateSensorEdge, dn as errMsg, it as doorbellCapability, pn as BaseAddon, xt as isSourceCap, yn as DeviceType } from "../../dist-D1_rTUOS.mjs";
+import { Bn as EventCategory, D as SOURCE_CAPS, En as createEvent, O as SOURCE_DEVICE_TYPES, U as bareAddonId, bt as isSameAddonId, ct as evaluateSensorEdge, dn as errMsg, it as doorbellCapability, pn as BaseAddon, xt as isSourceCap, yn as DeviceType } from "../../dist-O_Cf9RQm.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { kt as logDestinationCapability, pn as BaseAddon } from "../../dist-D1_rTUOS.mjs";
+import { kt as logDestinationCapability, pn as BaseAddon } from "../../dist-O_Cf9RQm.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Bn as EventCategory, C as RECORDING_SOURCE_CAMSTACK_ADDON, E as RecordingStatusSchema, En as createEvent, dn as errMsg, pn as BaseAddon } from "../../dist-D1_rTUOS.mjs";
+import { Bn as EventCategory, C as RECORDING_SOURCE_CAMSTACK_ADDON, E as RecordingStatusSchema, En as createEvent, dn as errMsg, pn as BaseAddon } from "../../dist-O_Cf9RQm.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { I as UserRecordSchema, V as authProviderCapability, j as ScopedTokenSchema, pn as BaseAddon, r as ApiKeyRecordSchema, sn as userManagementCapability } from "../../dist-D1_rTUOS.mjs";
+import { I as UserRecordSchema, V as authProviderCapability, j as ScopedTokenSchema, pn as BaseAddon, r as ApiKeyRecordSchema, sn as userManagementCapability } from "../../dist-O_Cf9RQm.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 const require_tls = require("../../tls-D_wUeOTD.js");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Bn as EventCategory, Dt as localNetworkCapability, pn as BaseAddon } from "../../dist-D1_rTUOS.mjs";
+import { Bn as EventCategory, Dt as localNetworkCapability, pn as BaseAddon } from "../../dist-O_Cf9RQm.mjs";
 import { S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, i as writeExtraSans, l as reissueTlsLeaf, n as readTlsAccessStatus, o as validateUploadedTls, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, y as applyLanHttp } from "../../tls-IM-v7JV4.mjs";
 import { mkdir, writeFile } from "node:fs/promises";
 import { join } from "node:path";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { kt as logDestinationCapability, pn as BaseAddon } from "../../dist-D1_rTUOS.mjs";
+import { kt as logDestinationCapability, pn as BaseAddon } from "../../dist-O_Cf9RQm.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 let node_fs_promises = require("node:fs/promises");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Bn as EventCategory, En as createEvent, Gt as resolveBucketMs, Pt as metricsProviderCapability, Wt as reducePoints, dn as errMsg, pn as BaseAddon, pt as foldSnapshotByFunction } from "../../dist-D1_rTUOS.mjs";
+import { Bn as EventCategory, En as createEvent, Gt as resolveBucketMs, Pt as metricsProviderCapability, Wt as reducePoints, dn as errMsg, pn as BaseAddon, pt as foldSnapshotByFunction } from "../../dist-O_Cf9RQm.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import * as fs from "node:fs";
 import { constants, readFileSync } from "node:fs";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_child_process = require("node:child_process");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { Bn as EventCategory, On as emitReadiness, Vt as platformProbeCapability, Zt as scoreRuntimes, at as enumerateInferenceDevices, dn as errMsg, pn as BaseAddon } from "../../dist-D1_rTUOS.mjs";
+import { Bn as EventCategory, On as emitReadiness, Vt as platformProbeCapability, Zt as scoreRuntimes, at as enumerateInferenceDevices, dn as errMsg, pn as BaseAddon } from "../../dist-O_Cf9RQm.mjs";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";
 import * as os from "node:os";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Bn as EventCategory, pn as BaseAddon } from "../../dist-D1_rTUOS.mjs";
+import { Bn as EventCategory, pn as BaseAddon } from "../../dist-O_Cf9RQm.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 const require_snapshot_courtesy = require("../../snapshot-courtesy-Cqs7GkOV.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Bn as EventCategory, Nn as nodePin, U as bareAddonId, W as batteryCapability, _n as DeviceFeature, a as BatteryStatusSchema, dn as errMsg, en as snapshotCapability, et as deriveBatteryPresence, on as streamQualityLabel, pn as BaseAddon, yn as DeviceType } from "../../dist-D1_rTUOS.mjs";
+import { Bn as EventCategory, Nn as nodePin, U as bareAddonId, W as batteryCapability, _n as DeviceFeature, a as BatteryStatusSchema, dn as errMsg, en as snapshotCapability, et as deriveBatteryPresence, on as streamQualityLabel, pn as BaseAddon, yn as DeviceType } from "../../dist-O_Cf9RQm.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg } from "../../snapshot-courtesy-CZPvteq2.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { ft as filesystemBrowseCapability, in as storageProviderCapability, pn as BaseAddon } from "../../dist-D1_rTUOS.mjs";
+import { ft as filesystemBrowseCapability, in as storageProviderCapability, pn as BaseAddon } from "../../dist-O_Cf9RQm.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 const require_hub_cap_forward = require("../../hub-cap-forward-DmHNjbB0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Bn as EventCategory, F as StorageMigrationJobSchema, Ft as modeMayWrite, Kt as resolveLocationMode, M as StorageCleanupJobSchema, Mt as mayReadLocation, N as StorageLocationModeSchema, Nt as mayWriteToLocation, P as StorageLocationTypeSchema, Pn as parseJsonObject, Qt as settingsStoreCapability, Tt as legacyModeOf, ht as gbToBytes, lt as evictionPolicyOfLocation, nn as storageMigrationCapability, pn as BaseAddon, q as collectSecretConfigKeys, tn as storageCapability, un as withLocationMode, v as LegacyStorageLocationDefaultSchema, vt as isLocationEnabled, w as REDACTED_SECRET } from "../../dist-D1_rTUOS.mjs";
+import { Bn as EventCategory, F as StorageMigrationJobSchema, Ft as modeMayWrite, Kt as resolveLocationMode, M as StorageCleanupJobSchema, Mt as mayReadLocation, N as StorageLocationModeSchema, Nt as mayWriteToLocation, P as StorageLocationTypeSchema, Pn as parseJsonObject, Qt as settingsStoreCapability, Tt as legacyModeOf, ht as gbToBytes, lt as evictionPolicyOfLocation, nn as storageMigrationCapability, pn as BaseAddon, q as collectSecretConfigKeys, tn as storageCapability, un as withLocationMode, v as LegacyStorageLocationDefaultSchema, vt as isLocationEnabled, w as REDACTED_SECRET } from "../../dist-O_Cf9RQm.mjs";
 import { t as HUB_CAP_FWD_ACTION } from "../../hub-cap-forward-BdT320dq.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { An as hydrateSchema, dn as errMsg, pn as BaseAddon } from "../../dist-D1_rTUOS.mjs";
+import { An as hydrateSchema, dn as errMsg, pn as BaseAddon } from "../../dist-O_Cf9RQm.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C-fXee7n.js");
+const require_dist = require("../../dist-DaqbC6N5.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { kt as logDestinationCapability, pn as BaseAddon } from "../../dist-D1_rTUOS.mjs";
+import { kt as logDestinationCapability, pn as BaseAddon } from "../../dist-O_Cf9RQm.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{dist-C-fXee7n.js → dist-DaqbC6N5.js}

@@ -13380,6 +13380,23 @@ var deviceManagerCapability = {
 		*/
 		getAllBindings: method(zod.z.object({}), zod.z.array(DeviceBindingsForDeviceSchema)),
 		/**
+		* The ids of every device bound to AT LEAST ONE of `capNames` — ids only,
+		* ascending (D636).
+		*
+		* The targeted form of "which devices are openings / carry a battery":
+		* before it, the alarm's household scan and the battery section's picker
+		* read the whole fleet (~433 KB slim) and then `getBindingsBatch` over
+		* ~900 ids in five calls. Same resolver as `getBindings` (so a WRAPPED
+		* binding counts exactly as the routing does), walked server-side like
+		* `getAllBindings`; only the matching ids cross the wire. Names are the
+		* caller's to resolve with the targeted `listAll({ deviceIds })`.
+		*
+		* Tier: `protected`, like its siblings `getBindings` / `getBindingsBatch` /
+		* `getAllBindings` — which devices carry a cap is routing metadata every
+		* signed-in client already reads, and it reveals nothing those do not.
+		*/
+		listDeviceIdsByCaps: method(zod.z.object({ capNames: zod.z.array(zod.z.string().min(1)).min(1).max(16) }), zod.z.array(zod.z.number())),
+		/**
 		* Activate (or deactivate) a wrapper addon for a (device, cap) pair — the
 		* per-camera function switch's ONE authority (D62).
 		*
@@ -16797,6 +16814,19 @@ var NcSystemEventConditionSchema = zod.z.object({
 	* does not carry) matches no `deviceTypes` list.
 	*/
 	deviceTypes: zod.z.array(zod.z.string().min(1)).min(1).optional(),
+	/**
+	* Devices this rule NEVER speaks about, whatever else matched. Scoped to the
+	* same kind family as `deviceIds` (`systemEventFilterApplies(kind,
+	* 'deviceIds')`) and applied AFTER it: include first, then exclude. A
+	* consumable subject (`consumable:<id>:<key>`) is excluded by its device id.
+	*
+	* It never fails closed: a subject that carries no device id is not in the
+	* list, so it is not excluded. "Every battery except the one thermometer that
+	* reads 0 % forever" is the question this answers — expressed as an include
+	* list it would have to name every other battery device, and every device
+	* adopted later would be silently left out (D636).
+	*/
+	excludeDeviceIds: zod.z.array(zod.z.number().int()).min(1).optional(),
 	nodeIds: zod.z.array(zod.z.string().min(1)).min(1).optional(),
 	packageNames: zod.z.array(zod.z.string().min(1)).min(1).optional()
 });
@@ -27369,7 +27399,67 @@ var WebrtcLadderDecisionSchema = zod.z.object({
 	serverSending: zod.z.boolean().nullable(),
 	/** Epoch ms. The overlay prints its age; a decision from 40 minutes ago
 	*  must not read like one from this second. */
-	at: zod.z.number()
+	at: zod.z.number(),
+	/** The broker's own cause when it is finer than `cause` can carry, e.g.
+	*  `trial-revert` (reported as `stall`/`loss` for older consumers). Optional:
+	*  an older server strips it instead of rejecting the answer. */
+	causeDetail: zod.z.string().optional()
+});
+var WebrtcClimbHoldSchema = zod.z.object({
+	/** `stall-building` — the client receives ≪ what is sent; `delivery` — the
+	*  current rung is not landing whole; `no-evidence` — no receiver feedback;
+	*  `warming` — healthy, accumulating the streak; `cooldown` — too soon after
+	*  a change; `capacity` — a MEASURED probe below the next rung's bar;
+	*  `try-unclean` — no capacity evidence, and the path is not clean enough to
+	*  try; `try-backoff` — a try reverted, waiting out its backoff; `trial` —
+	*  this rung IS a try, reverting if it does not land; `suspended` —
+	*  recorded playback on the track. */
+	code: zod.z.string(),
+	/** The rung a climb would go to. */
+	nextTier: CamProfileSchema,
+	/** Bytes received ÷ bytes sent over the delivery window (≥ one GOP). */
+	deliveryRatio: zod.z.number().nullable(),
+	deliveryWindowMs: zod.z.number().nullable(),
+	/** The ratio a climb requires. */
+	climbDeliveryRatio: zod.z.number(),
+	/** The receiver's bandwidth estimate (REMB), kbps. Capped by what is sent. */
+	capacityKbps: zod.z.number().nullable(),
+	/** The viewer's downlink probe for this session, kbps. */
+	probeKbps: zod.z.number().nullable(),
+	/** The next rung's measured bitrate, kbps. */
+	nextTierKbps: zod.z.number().nullable(),
+	capacityMargin: zod.z.number(),
+	/** The capacity a climb to `nextTier` needs, kbps (bitrate × margin, or the
+	*  client ladder threshold when the rung has measured nothing). */
+	neededKbps: zod.z.number().nullable(),
+	/** For `try-unclean`: which clean-path condition failed (a `WebrtcTryBlocker`,
+	*  carried as a string for the same reason as `code`). */
+	tryBlockedBy: zod.z.string().nullable(),
+	/** The delivery ratio and the loss ratio a try requires / must stay under.
+	*  Optional, like every field added to this schema after it first shipped:
+	*  the router validates output, so a REQUIRED new field makes a newer server
+	*  reject an older broker's whole answer (review m1). */
+	tryDeliveryRatio: zod.z.number().optional(),
+	tryMaxLossRatio: zod.z.number().optional(),
+	/** For `try-backoff`: time until the next try, ms. */
+	retryInMs: zod.z.number().nullable(),
+	/** The last try that reverted in this viewer session. */
+	lastRevert: zod.z.object({
+		tier: CamProfileSchema,
+		deliveryRatio: zod.z.number().nullable(),
+		stalled: zod.z.boolean(),
+		at: zod.z.number()
+	}).nullable(),
+	/** For `trial`: how long this rung has been on trial, and for how long it must hold. */
+	trialForMs: zod.z.number().nullable(),
+	trialMs: zod.z.number().nullable(),
+	healthyForMs: zod.z.number().nullable(),
+	requiredHealthyMs: zod.z.number().nullable(),
+	/** Epoch ms this hold's code began. */
+	since: zod.z.number(),
+	/** The same one-line account the broker logs, e.g.
+	*  `held: delivery 0.97 over 4.0s ok, REMB 480 kbps < mid 1800 kbps × 1.2`. */
+	summary: zod.z.string()
 });
 /** Per-tier count of MEASURED downgrades this viewer session has suffered. */
 var WebrtcTierFailureSchema = zod.z.object({
@@ -27433,7 +27523,12 @@ var WebrtcSessionDebugSchema = zod.z.object({
 	tierFailures: zod.z.array(WebrtcTierFailureSchema),
 	/** Successful promotions in this viewer session (drives the progressive
 	*  healthy timer). Null when no ladder is running. */
-	upgradeCount: zod.z.number().nullable()
+	upgradeCount: zod.z.number().nullable(),
+	/** Why the ladder is not climbing right now. Null when no ladder runs, it
+	*  is at the top rung, or it just moved. Optional because this output is
+	*  validated by the router: a server carrying this schema must still accept
+	*  the answer of a stream-broker deployed before the field existed. */
+	climbHold: WebrtcClimbHoldSchema.nullable().optional()
 });
 /**
 * WebRTC session — device-scoped facade over the system `webrtc` cap.
@@ -33385,6 +33480,11 @@ var ClientNetworkStatsSchema = zod.z.object({
 	jitterMs: zod.z.number(),
 	estimatedBandwidthKbps: zod.z.number(),
 	packetLossPercent: zod.z.number().min(0).max(100),
+	/** The viewer's latest `/adaptive-probe` reading, Mbps — whatever it read
+	*  (D635 I4). Absent when it never probed or the probe failed (unknown). */
+	downlinkMbps: zod.z.number().optional(),
+	/** Age of that reading when this report was sent, ms. */
+	downlinkAgeMs: zod.z.number().optional(),
 	lastUpdated: zod.z.number()
 });
 var DeviceNetworkStatsSchema = zod.z.object({
@@ -33404,7 +33504,11 @@ var networkQualityCapability = {
 			rttMs: zod.z.number().min(0).max(6e4),
 			jitterMs: zod.z.number().min(0).max(1e4),
 			estimatedBandwidthKbps: zod.z.number().min(0).max(1e6),
-			packetLossPercent: zod.z.number().min(0).max(100)
+			packetLossPercent: zod.z.number().min(0).max(100),
+			/** Latest downlink probe, Mbps, whatever it read; absent = never / failed. */
+			downlinkMbps: zod.z.number().min(0).max(1e5).optional(),
+			/** Age of that probe when this report is sent, ms. */
+			downlinkAgeMs: zod.z.number().min(0).max(864e5).optional()
 		}), zod.z.void(), { kind: "mutation" })
 	},
 	/** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
@@ -45063,6 +45167,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.listDeviceIdsByCaps": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.listLocationDescriptions": {
 		capName: "device-manager",
 		capScope: "system",

package/dist/{dist-D1_rTUOS.mjs → dist-O_Cf9RQm.mjs}

@@ -13380,6 +13380,23 @@ var deviceManagerCapability = {
 		*/
 		getAllBindings: method(z.object({}), z.array(DeviceBindingsForDeviceSchema)),
 		/**
+		* The ids of every device bound to AT LEAST ONE of `capNames` — ids only,
+		* ascending (D636).
+		*
+		* The targeted form of "which devices are openings / carry a battery":
+		* before it, the alarm's household scan and the battery section's picker
+		* read the whole fleet (~433 KB slim) and then `getBindingsBatch` over
+		* ~900 ids in five calls. Same resolver as `getBindings` (so a WRAPPED
+		* binding counts exactly as the routing does), walked server-side like
+		* `getAllBindings`; only the matching ids cross the wire. Names are the
+		* caller's to resolve with the targeted `listAll({ deviceIds })`.
+		*
+		* Tier: `protected`, like its siblings `getBindings` / `getBindingsBatch` /
+		* `getAllBindings` — which devices carry a cap is routing metadata every
+		* signed-in client already reads, and it reveals nothing those do not.
+		*/
+		listDeviceIdsByCaps: method(z.object({ capNames: z.array(z.string().min(1)).min(1).max(16) }), z.array(z.number())),
+		/**
 		* Activate (or deactivate) a wrapper addon for a (device, cap) pair — the
 		* per-camera function switch's ONE authority (D62).
 		*
@@ -16797,6 +16814,19 @@ var NcSystemEventConditionSchema = z.object({
 	* does not carry) matches no `deviceTypes` list.
 	*/
 	deviceTypes: z.array(z.string().min(1)).min(1).optional(),
+	/**
+	* Devices this rule NEVER speaks about, whatever else matched. Scoped to the
+	* same kind family as `deviceIds` (`systemEventFilterApplies(kind,
+	* 'deviceIds')`) and applied AFTER it: include first, then exclude. A
+	* consumable subject (`consumable:<id>:<key>`) is excluded by its device id.
+	*
+	* It never fails closed: a subject that carries no device id is not in the
+	* list, so it is not excluded. "Every battery except the one thermometer that
+	* reads 0 % forever" is the question this answers — expressed as an include
+	* list it would have to name every other battery device, and every device
+	* adopted later would be silently left out (D636).
+	*/
+	excludeDeviceIds: z.array(z.number().int()).min(1).optional(),
 	nodeIds: z.array(z.string().min(1)).min(1).optional(),
 	packageNames: z.array(z.string().min(1)).min(1).optional()
 });
@@ -27369,7 +27399,67 @@ var WebrtcLadderDecisionSchema = z.object({
 	serverSending: z.boolean().nullable(),
 	/** Epoch ms. The overlay prints its age; a decision from 40 minutes ago
 	*  must not read like one from this second. */
-	at: z.number()
+	at: z.number(),
+	/** The broker's own cause when it is finer than `cause` can carry, e.g.
+	*  `trial-revert` (reported as `stall`/`loss` for older consumers). Optional:
+	*  an older server strips it instead of rejecting the answer. */
+	causeDetail: z.string().optional()
+});
+var WebrtcClimbHoldSchema = z.object({
+	/** `stall-building` — the client receives ≪ what is sent; `delivery` — the
+	*  current rung is not landing whole; `no-evidence` — no receiver feedback;
+	*  `warming` — healthy, accumulating the streak; `cooldown` — too soon after
+	*  a change; `capacity` — a MEASURED probe below the next rung's bar;
+	*  `try-unclean` — no capacity evidence, and the path is not clean enough to
+	*  try; `try-backoff` — a try reverted, waiting out its backoff; `trial` —
+	*  this rung IS a try, reverting if it does not land; `suspended` —
+	*  recorded playback on the track. */
+	code: z.string(),
+	/** The rung a climb would go to. */
+	nextTier: CamProfileSchema,
+	/** Bytes received ÷ bytes sent over the delivery window (≥ one GOP). */
+	deliveryRatio: z.number().nullable(),
+	deliveryWindowMs: z.number().nullable(),
+	/** The ratio a climb requires. */
+	climbDeliveryRatio: z.number(),
+	/** The receiver's bandwidth estimate (REMB), kbps. Capped by what is sent. */
+	capacityKbps: z.number().nullable(),
+	/** The viewer's downlink probe for this session, kbps. */
+	probeKbps: z.number().nullable(),
+	/** The next rung's measured bitrate, kbps. */
+	nextTierKbps: z.number().nullable(),
+	capacityMargin: z.number(),
+	/** The capacity a climb to `nextTier` needs, kbps (bitrate × margin, or the
+	*  client ladder threshold when the rung has measured nothing). */
+	neededKbps: z.number().nullable(),
+	/** For `try-unclean`: which clean-path condition failed (a `WebrtcTryBlocker`,
+	*  carried as a string for the same reason as `code`). */
+	tryBlockedBy: z.string().nullable(),
+	/** The delivery ratio and the loss ratio a try requires / must stay under.
+	*  Optional, like every field added to this schema after it first shipped:
+	*  the router validates output, so a REQUIRED new field makes a newer server
+	*  reject an older broker's whole answer (review m1). */
+	tryDeliveryRatio: z.number().optional(),
+	tryMaxLossRatio: z.number().optional(),
+	/** For `try-backoff`: time until the next try, ms. */
+	retryInMs: z.number().nullable(),
+	/** The last try that reverted in this viewer session. */
+	lastRevert: z.object({
+		tier: CamProfileSchema,
+		deliveryRatio: z.number().nullable(),
+		stalled: z.boolean(),
+		at: z.number()
+	}).nullable(),
+	/** For `trial`: how long this rung has been on trial, and for how long it must hold. */
+	trialForMs: z.number().nullable(),
+	trialMs: z.number().nullable(),
+	healthyForMs: z.number().nullable(),
+	requiredHealthyMs: z.number().nullable(),
+	/** Epoch ms this hold's code began. */
+	since: z.number(),
+	/** The same one-line account the broker logs, e.g.
+	*  `held: delivery 0.97 over 4.0s ok, REMB 480 kbps < mid 1800 kbps × 1.2`. */
+	summary: z.string()
 });
 /** Per-tier count of MEASURED downgrades this viewer session has suffered. */
 var WebrtcTierFailureSchema = z.object({
@@ -27433,7 +27523,12 @@ var WebrtcSessionDebugSchema = z.object({
 	tierFailures: z.array(WebrtcTierFailureSchema),
 	/** Successful promotions in this viewer session (drives the progressive
 	*  healthy timer). Null when no ladder is running. */
-	upgradeCount: z.number().nullable()
+	upgradeCount: z.number().nullable(),
+	/** Why the ladder is not climbing right now. Null when no ladder runs, it
+	*  is at the top rung, or it just moved. Optional because this output is
+	*  validated by the router: a server carrying this schema must still accept
+	*  the answer of a stream-broker deployed before the field existed. */
+	climbHold: WebrtcClimbHoldSchema.nullable().optional()
 });
 /**
 * WebRTC session — device-scoped facade over the system `webrtc` cap.
@@ -33385,6 +33480,11 @@ var ClientNetworkStatsSchema = z.object({
 	jitterMs: z.number(),
 	estimatedBandwidthKbps: z.number(),
 	packetLossPercent: z.number().min(0).max(100),
+	/** The viewer's latest `/adaptive-probe` reading, Mbps — whatever it read
+	*  (D635 I4). Absent when it never probed or the probe failed (unknown). */
+	downlinkMbps: z.number().optional(),
+	/** Age of that reading when this report was sent, ms. */
+	downlinkAgeMs: z.number().optional(),
 	lastUpdated: z.number()
 });
 var DeviceNetworkStatsSchema = z.object({
@@ -33404,7 +33504,11 @@ var networkQualityCapability = {
 			rttMs: z.number().min(0).max(6e4),
 			jitterMs: z.number().min(0).max(1e4),
 			estimatedBandwidthKbps: z.number().min(0).max(1e6),
-			packetLossPercent: z.number().min(0).max(100)
+			packetLossPercent: z.number().min(0).max(100),
+			/** Latest downlink probe, Mbps, whatever it read; absent = never / failed. */
+			downlinkMbps: z.number().min(0).max(1e5).optional(),
+			/** Age of that probe when this report is sent, ms. */
+			downlinkAgeMs: z.number().min(0).max(864e5).optional()
 		}), z.void(), { kind: "mutation" })
 	},
 	/** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
@@ -45063,6 +45167,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.listDeviceIdsByCaps": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.listLocationDescriptions": {
 		capName: "device-manager",
 		capScope: "system",

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-C-fXee7n.js");
+const require_dist = require("./dist-DaqbC6N5.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { At as logLevelAtMost, Bn as EventCategory$1, Cn as asJsonObject$1, Ct as kebabToCamel, Dn as emitDownForOwnedCaps, En as createEvent, Et as lifecycleJobSchema, Fn as parseJsonUnknown, Ht as procedureAuthKey, In as readinessKey, Ln as resolveCapMount, Pn as parseJsonObject, R as addonSettingsCapability, Rn as scopeKey, Rt as objectInputDeclaresAddonId, St as isVoidInput, T as RUNTIME_DEFAULTS, Tn as asString$1, Xt as scopesAllowDeviceCap, Yt as scopesAllowAddon, _ as LOG_LEVEL_RANK, _t as isCollectionArrayMethod, b as METHOD_ACCESS_MAP, bn as ReadinessRegistry, dn as errMsg$1, dt as extractNestedAddonId, gn as DEVICE_STATUS_METHOD, gt as isArrayOutputSchema, hn as DEVICE_SETTINGS_CONTRIBUTION_METHODS, jt as looseSchema, kn as expandCapMethods, mn as DATAPLANE_SECRET_HEADER$1, qt as resolveMethodAuth, t as ALL_CAPABILITY_DEFINITIONS, wn as asNumber, xn as ReadinessTimeoutError, yt as isObjectInput, zt as objectInputDeclaresRequiredDeviceId } from "./dist-D1_rTUOS.mjs";
+import { At as logLevelAtMost, Bn as EventCategory$1, Cn as asJsonObject$1, Ct as kebabToCamel, Dn as emitDownForOwnedCaps, En as createEvent, Et as lifecycleJobSchema, Fn as parseJsonUnknown, Ht as procedureAuthKey, In as readinessKey, Ln as resolveCapMount, Pn as parseJsonObject, R as addonSettingsCapability, Rn as scopeKey, Rt as objectInputDeclaresAddonId, St as isVoidInput, T as RUNTIME_DEFAULTS, Tn as asString$1, Xt as scopesAllowDeviceCap, Yt as scopesAllowAddon, _ as LOG_LEVEL_RANK, _t as isCollectionArrayMethod, b as METHOD_ACCESS_MAP, bn as ReadinessRegistry, dn as errMsg$1, dt as extractNestedAddonId, gn as DEVICE_STATUS_METHOD, gt as isArrayOutputSchema, hn as DEVICE_SETTINGS_CONTRIBUTION_METHODS, jt as looseSchema, kn as expandCapMethods, mn as DATAPLANE_SECRET_HEADER$1, qt as resolveMethodAuth, t as ALL_CAPABILITY_DEFINITIONS, wn as asNumber, xn as ReadinessTimeoutError, yt as isObjectInput, zt as objectInputDeclaresRequiredDeviceId } from "./dist-O_Cf9RQm.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";

package/dist/{retired-settings-keys-jivjXc-s.mjs → retired-settings-keys-DCcJa0nH.mjs}

@@ -1,4 +1,4 @@
-import { Cn as asJsonObject } from "./dist-D1_rTUOS.mjs";
+import { Cn as asJsonObject } from "./dist-O_Cf9RQm.mjs";
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/dist/{retired-settings-keys-BJbgHvQf.js → retired-settings-keys-_jB8F9wE.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-C-fXee7n.js");
+const require_dist = require("./dist-DaqbC6N5.js");
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.295",
+  "version": "1.2.297",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",