@camstack/system 1.2.31 → 1.2.32

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CDv5YTHQ.js");
+const require_dist = require("../../dist-CSs1A90r.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as EventCategory, at as errMsg, ot as BaseAddon, p as addonPagesCapability } from "../../dist-CNmXITJ-.mjs";
+import { Mt as EventCategory, at as errMsg, ot as BaseAddon, p as addonPagesCapability } from "../../dist-BL_FHWPP.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CDv5YTHQ.js");
+const require_dist = require("../../dist-CSs1A90r.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as EventCategory, at as errMsg, h as addonWidgetsCapability, ot as BaseAddon } from "../../dist-CNmXITJ-.mjs";
+import { Mt as EventCategory, at as errMsg, h as addonWidgetsCapability, ot as BaseAddon } from "../../dist-BL_FHWPP.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.d.ts

@@ -57,6 +57,16 @@ export declare class AlertCenterAddon extends BaseAddon<AlertCenterConfig> {
      * Dismiss the matching alert so the operator's badge count drops.
      */
     private handleAddonLoadRecovered;
+    /**
+     * SystemLivenessFailed — a liveness invariant of this node is false.
+     *
+     * `findingId` is already stable across ticks (`liveness:no-devices`,
+     * `liveness:no-footage:<deviceId>`, …), so it IS the alert id: an ongoing
+     * fault updates one alert instead of producing one every five minutes.
+     */
+    private handleLivenessFailed;
+    /** SystemLivenessRecovered — the invariant holds again; drop the alert. */
+    private handleLivenessRecovered;
     private buildMessage;
     private emitAlert;
     private updateAlert;

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CDv5YTHQ.js");
+const require_dist = require("../../dist-CSs1A90r.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.
@@ -93,6 +93,10 @@ var CATEGORY_MAPPINGS = {
 		severity: "error",
 		titleTemplate: "Addon failed to load"
 	},
+	"system.liveness-failed": {
+		severity: "error",
+		titleTemplate: "Node liveness"
+	},
 	"addon.load-recovered": {
 		severity: "info",
 		titleTemplate: "Addon recovered"
@@ -289,6 +293,14 @@ var AlertCenterAddon = class extends require_dist.BaseAddon {
 				await this.handleAddonLoadRecovered(event);
 				return;
 			}
+			if (category === require_dist.EventCategory.SystemLivenessFailed) {
+				await this.handleLivenessFailed(event);
+				return;
+			}
+			if (category === require_dist.EventCategory.SystemLivenessRecovered) {
+				await this.handleLivenessRecovered(event);
+				return;
+			}
 			const mapping = CATEGORY_MAPPINGS[category];
 			if (!mapping) return;
 			if (this.shouldSuppressByRate(category, event)) return;
@@ -480,6 +492,53 @@ var AlertCenterAddon = class extends require_dist.BaseAddon {
 			} });
 		}
 	}
+	/**
+	* SystemLivenessFailed — a liveness invariant of this node is false.
+	*
+	* `findingId` is already stable across ticks (`liveness:no-devices`,
+	* `liveness:no-footage:<deviceId>`, …), so it IS the alert id: an ongoing
+	* fault updates one alert instead of producing one every five minutes.
+	*/
+	async handleLivenessFailed(event) {
+		const data = event.data;
+		const findingId = String(data["findingId"] ?? "");
+		if (!findingId) return;
+		const deviceId = typeof data["deviceId"] === "number" ? data["deviceId"] : void 0;
+		const severity = data["severity"] === "warning" ? "warning" : "error";
+		const alert = {
+			id: findingId,
+			category: require_dist.EventCategory.SystemLivenessFailed,
+			severity,
+			title: String(data["title"] ?? "Node liveness"),
+			message: String(data["message"] ?? ""),
+			status: "active",
+			read: false,
+			createdAt: Date.now(),
+			updatedAt: Date.now(),
+			source: {
+				type: "liveness",
+				id: findingId
+			},
+			metadata: {
+				findingId,
+				...deviceId !== void 0 ? { deviceId } : {}
+			}
+		};
+		await this.emitAlert(alert);
+	}
+	/** SystemLivenessRecovered — the invariant holds again; drop the alert. */
+	async handleLivenessRecovered(event) {
+		const findingId = String(event.data["findingId"] ?? "");
+		if (!findingId) return;
+		try {
+			await this.dismiss(findingId);
+		} catch (err) {
+			this.ctx.logger?.debug("LivenessRecovered: dismiss failed (likely already dismissed)", { meta: {
+				findingId,
+				error: require_dist.errMsg(err)
+			} });
+		}
+	}
 	buildMessage(category, data, sourceId) {
 		const addonId = data.addonId ?? sourceId;
 		const deviceId = data.deviceId;

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as EventCategory, at as errMsg, g as alertsCapability, n as AlertSchema, ot as BaseAddon, yt as createEvent } from "../../dist-CNmXITJ-.mjs";
+import { Mt as EventCategory, at as errMsg, g as alertsCapability, n as AlertSchema, ot as BaseAddon, yt as createEvent } from "../../dist-BL_FHWPP.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.
@@ -88,6 +88,10 @@ var CATEGORY_MAPPINGS = {
 		severity: "error",
 		titleTemplate: "Addon failed to load"
 	},
+	"system.liveness-failed": {
+		severity: "error",
+		titleTemplate: "Node liveness"
+	},
 	"addon.load-recovered": {
 		severity: "info",
 		titleTemplate: "Addon recovered"
@@ -284,6 +288,14 @@ var AlertCenterAddon = class extends BaseAddon {
 				await this.handleAddonLoadRecovered(event);
 				return;
 			}
+			if (category === EventCategory.SystemLivenessFailed) {
+				await this.handleLivenessFailed(event);
+				return;
+			}
+			if (category === EventCategory.SystemLivenessRecovered) {
+				await this.handleLivenessRecovered(event);
+				return;
+			}
 			const mapping = CATEGORY_MAPPINGS[category];
 			if (!mapping) return;
 			if (this.shouldSuppressByRate(category, event)) return;
@@ -475,6 +487,53 @@ var AlertCenterAddon = class extends BaseAddon {
 			} });
 		}
 	}
+	/**
+	* SystemLivenessFailed — a liveness invariant of this node is false.
+	*
+	* `findingId` is already stable across ticks (`liveness:no-devices`,
+	* `liveness:no-footage:<deviceId>`, …), so it IS the alert id: an ongoing
+	* fault updates one alert instead of producing one every five minutes.
+	*/
+	async handleLivenessFailed(event) {
+		const data = event.data;
+		const findingId = String(data["findingId"] ?? "");
+		if (!findingId) return;
+		const deviceId = typeof data["deviceId"] === "number" ? data["deviceId"] : void 0;
+		const severity = data["severity"] === "warning" ? "warning" : "error";
+		const alert = {
+			id: findingId,
+			category: EventCategory.SystemLivenessFailed,
+			severity,
+			title: String(data["title"] ?? "Node liveness"),
+			message: String(data["message"] ?? ""),
+			status: "active",
+			read: false,
+			createdAt: Date.now(),
+			updatedAt: Date.now(),
+			source: {
+				type: "liveness",
+				id: findingId
+			},
+			metadata: {
+				findingId,
+				...deviceId !== void 0 ? { deviceId } : {}
+			}
+		};
+		await this.emitAlert(alert);
+	}
+	/** SystemLivenessRecovered — the invariant holds again; drop the alert. */
+	async handleLivenessRecovered(event) {
+		const findingId = String(event.data["findingId"] ?? "");
+		if (!findingId) return;
+		try {
+			await this.dismiss(findingId);
+		} catch (err) {
+			this.ctx.logger?.debug("LivenessRecovered: dismiss failed (likely already dismissed)", { meta: {
+				findingId,
+				error: errMsg(err)
+			} });
+		}
+	}
 	buildMessage(category, data, sourceId) {
 		const addonId = data.addonId ?? sourceId;
 		const deviceId = data.deviceId;

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CDv5YTHQ.js");
+const require_dist = require("../../dist-CSs1A90r.js");
 let node_fs = require("node:fs");
 let node_fs$1 = require_chunk.__toESM(node_fs, 1);
 node_fs = require_chunk.__toESM(node_fs);

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as EventCategory, ot as BaseAddon, y as backupCapability } from "../../dist-CNmXITJ-.mjs";
+import { Mt as EventCategory, ot as BaseAddon, y as backupCapability } from "../../dist-BL_FHWPP.mjs";
 import * as fs from "node:fs";
 import Kt from "node:fs";
 import * as path$1 from "node:path";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CDv5YTHQ.js");
+const require_dist = require("../../dist-CSs1A90r.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { B as logDestinationCapability, ot as BaseAddon } from "../../dist-CNmXITJ-.mjs";
+import { B as logDestinationCapability, ot as BaseAddon } from "../../dist-BL_FHWPP.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CDv5YTHQ.js");
+const require_dist = require("../../dist-CSs1A90r.js");
 let _camstack_types_node = require("@camstack/types/node");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,4 +1,4 @@
-import { C as deviceStateCapability, D as enumerateItemArrayFields, K as parseStreamParamsFormPatch, M as getByPath, Mt as EventCategory, O as enumerateSchemaFields, S as deviceManagerCapability, W as normalizeUnit, X as setByPath, _ as applyTransform, a as CAP_NAMES_WITH_STATUS, at as errMsg, b as buildStreamParamsConfigSchema, dt as DeviceRole, ft as DeviceType, ht as WELL_KNOWN_TAB_MAP, it as validateExpressionSource, jt as sleep, k as evaluateLinkExpression, l as STREAM_PROFILE_META, nt as toExpressionValue, o as DeviceStatusSchema, ot as BaseAddon, t as ALL_CAPABILITY_DEFINITIONS, ut as DeviceFeature, w as deviceStatusCapability, wt as isDeviceConfigCap } from "../../dist-CNmXITJ-.mjs";
+import { C as deviceStateCapability, D as enumerateItemArrayFields, K as parseStreamParamsFormPatch, M as getByPath, Mt as EventCategory, O as enumerateSchemaFields, S as deviceManagerCapability, W as normalizeUnit, X as setByPath, _ as applyTransform, a as CAP_NAMES_WITH_STATUS, at as errMsg, b as buildStreamParamsConfigSchema, dt as DeviceRole, ft as DeviceType, ht as WELL_KNOWN_TAB_MAP, it as validateExpressionSource, jt as sleep, k as evaluateLinkExpression, l as STREAM_PROFILE_META, nt as toExpressionValue, o as DeviceStatusSchema, ot as BaseAddon, t as ALL_CAPABILITY_DEFINITIONS, ut as DeviceFeature, w as deviceStatusCapability, wt as isDeviceConfigCap } from "../../dist-BL_FHWPP.mjs";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CDv5YTHQ.js");
+const require_dist = require("../../dist-CSs1A90r.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as EventCategory, T as doorbellCapability, at as errMsg, ft as DeviceType, ot as BaseAddon, yt as createEvent } from "../../dist-CNmXITJ-.mjs";
+import { Mt as EventCategory, T as doorbellCapability, at as errMsg, ft as DeviceType, ot as BaseAddon, yt as createEvent } from "../../dist-BL_FHWPP.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CDv5YTHQ.js");
+const require_dist = require("../../dist-CSs1A90r.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { B as logDestinationCapability, ot as BaseAddon } from "../../dist-CNmXITJ-.mjs";
+import { B as logDestinationCapability, ot as BaseAddon } from "../../dist-BL_FHWPP.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/index.d.ts

@@ -0,0 +1,2 @@
+export { LivenessMonitorAddon } from './liveness-monitor.addon.js';
+export { evaluateLiveness, isLivenessFindingId, type CameraFootage, type LivenessFacts, type LivenessFinding, } from './liveness-checks.js';

package/dist/builtins/liveness-monitor/index.js

@@ -0,0 +1,6 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+require("../../chunk-Cek0wNdY.js");
+const require_builtins_liveness_monitor_liveness_monitor_addon = require("./liveness-monitor.addon.js");
+exports.LivenessMonitorAddon = require_builtins_liveness_monitor_liveness_monitor_addon.LivenessMonitorAddon;
+exports.evaluateLiveness = require_builtins_liveness_monitor_liveness_monitor_addon.evaluateLiveness;
+exports.isLivenessFindingId = require_builtins_liveness_monitor_liveness_monitor_addon.isLivenessFindingId;

package/dist/builtins/liveness-monitor/index.mjs

@@ -0,0 +1,2 @@
+import { LivenessMonitorAddon, n as isLivenessFindingId, t as evaluateLiveness } from "./liveness-monitor.addon.mjs";
+export { LivenessMonitorAddon, evaluateLiveness, isLivenessFindingId };

package/dist/builtins/liveness-monitor/liveness-checks.d.ts

@@ -0,0 +1,67 @@
+/**
+ * The liveness invariants, as pure functions.
+ *
+ * On 2026-08-03 the hub ran for four hours with zero devices, zero published
+ * streams and zero recordings, and nothing said a word. Three separate defects
+ * caused it — optional chaining that no-oped, an `if` with no `else`, a JSON
+ * parse that returned `{}` — and each was silent at the point of failure. All
+ * three were fixed and a log line added at each. This module exists for the
+ * CLASS rather than the instances: assert what must be true of a working node,
+ * and report when it is not.
+ *
+ * **Every check here is unambiguous, on purpose.** An alert that fires on a
+ * quiet night is one an operator learns to ignore, and an ignored alert is
+ * worse than no alert. So "the pipeline emitted no tracks recently" is NOT a
+ * check — a camera can legitimately see nothing for hours — while "a camera
+ * that has been recording all day stopped producing segments" is: continuous
+ * recording produces segments whether or not anything moves.
+ *
+ * I/O lives in the addon; everything here is a function of facts, so the
+ * outage can be replayed in a test.
+ */
+/** What the monitor learned about one camera this tick. */
+export interface CameraFootage {
+    readonly deviceId: number;
+    readonly online: boolean;
+    /**
+     * ms-epoch of the newest recorded segment within the lookback window, or
+     * `null` when the camera has produced NO footage in it.
+     *
+     * `null` means "this camera does not record" and is deliberately not a
+     * finding — it is what makes the check self-calibrating. Nothing has to be
+     * told which cameras are supposed to record: a camera that was recording and
+     * stopped is a fault, a camera that never records is a configuration.
+     */
+    readonly lastSegmentMs: number | null;
+}
+export interface LivenessFacts {
+    readonly nowMs: number;
+    /** Every device the node knows about, cameras and accessories alike. */
+    readonly deviceCount: number;
+    readonly cameras: readonly CameraFootage[];
+    /** How long a recording camera may stay silent before it is a fault. */
+    readonly staleAfterMs: number;
+}
+export interface LivenessFinding {
+    /**
+     * Stable across ticks, so an ongoing fault UPDATES one alert instead of
+     * producing a new one every minute. Same contract as the kernel's
+     * `addon-load-failed:<packageName>` ids.
+     */
+    readonly id: string;
+    readonly severity: 'error' | 'warning';
+    readonly title: string;
+    readonly message: string;
+    /** Present on per-camera findings. Always the numeric id. */
+    readonly deviceId?: number;
+}
+/**
+ * Evaluate every invariant against one tick's facts.
+ *
+ * Ordered most-fundamental first, and it STOPS at "no devices": when the node
+ * has nothing, every camera is also silent, and reporting twelve consequences
+ * of one cause is how an operator ends up reading none of them.
+ */
+export declare function evaluateLiveness(facts: LivenessFacts): readonly LivenessFinding[];
+/** Every finding id this module can produce, for the recovery sweep. */
+export declare function isLivenessFindingId(id: string): boolean;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.d.ts

@@ -0,0 +1,32 @@
+import { BaseAddon, ProviderRegistration } from '@camstack/types';
+import { LivenessFinding } from './liveness-checks.js';
+interface LivenessMonitorConfig extends Record<string, unknown> {
+    readonly staleAfterMs?: number;
+}
+export declare class LivenessMonitorAddon extends BaseAddon<LivenessMonitorConfig> {
+    private tickTimer;
+    private startedAtMs;
+    /** Finding ids currently reported, so recovery can be detected and announced. */
+    private active;
+    constructor();
+    protected onInitialize(): Promise<ProviderRegistration[]>;
+    protected onShutdown(): Promise<void>;
+    /**
+     * One evaluation. Public so a test or an operator-facing action can force it
+     * without waiting out the interval.
+     */
+    tick(): Promise<readonly LivenessFinding[]>;
+    /** Read the facts through the cap surface. Changes nothing. */
+    private gather;
+    /**
+     * Newest segment for a camera, or null when it has produced none in a day.
+     *
+     * Two steps on purpose: the healthy case asks only for the recent window,
+     * which is a handful of ranges, and only a camera that looks silent pays for
+     * the 24-hour lookback that decides whether it records at all.
+     */
+    private lastSegmentMs;
+    /** Announce new faults and recoveries; say nothing about an unchanged fault. */
+    private report;
+}
+export {};

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -0,0 +1,216 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+require("../../chunk-Cek0wNdY.js");
+const require_dist = require("../../dist-CSs1A90r.js");
+//#region src/builtins/liveness-monitor/liveness-checks.ts
+var NO_DEVICES = "liveness:no-devices";
+var ALL_OFFLINE = "liveness:all-devices-offline";
+var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
+function minutes(ms) {
+	return Math.round(ms / 6e4);
+}
+/**
+* Evaluate every invariant against one tick's facts.
+*
+* Ordered most-fundamental first, and it STOPS at "no devices": when the node
+* has nothing, every camera is also silent, and reporting twelve consequences
+* of one cause is how an operator ends up reading none of them.
+*/
+function evaluateLiveness(facts) {
+	if (facts.deviceCount === 0) return [{
+		id: NO_DEVICES,
+		severity: "error",
+		title: "No devices",
+		message: "This node has no devices. Nothing can publish a stream, record, or detect. The persisted device ledger is either unreachable or empty — check the boot log for \"SettingsStore not initialized\" and for \"[worker-restore] no persisted devices\"."
+	}];
+	const findings = [];
+	if (facts.cameras.length > 0 && facts.cameras.every((c) => !c.online)) findings.push({
+		id: ALL_OFFLINE,
+		severity: "error",
+		title: "Every camera offline",
+		message: `All ${facts.cameras.length} cameras report offline. This is a provider or network fault, not a per-camera one.`
+	});
+	for (const cam of facts.cameras) {
+		if (cam.lastSegmentMs === null) continue;
+		if (!cam.online) continue;
+		const silentFor = facts.nowMs - cam.lastSegmentMs;
+		if (silentFor <= facts.staleAfterMs) continue;
+		findings.push({
+			id: `${NO_FOOTAGE_PREFIX}${cam.deviceId}`,
+			severity: "error",
+			title: "Recording stopped",
+			message: `Camera ${cam.deviceId} is online and was recording, but has produced no segment for ${minutes(silentFor)} minutes.`,
+			deviceId: cam.deviceId
+		});
+	}
+	return findings;
+}
+/** Every finding id this module can produce, for the recovery sweep. */
+function isLivenessFindingId(id) {
+	return id === NO_DEVICES || id === ALL_OFFLINE || id.startsWith(NO_FOOTAGE_PREFIX);
+}
+//#endregion
+//#region src/builtins/liveness-monitor/liveness-monitor.addon.ts
+/**
+* liveness-monitor — the node states, out loud, when it has stopped working.
+*
+* On 2026-08-03 the hub ran for four hours with zero devices, zero published
+* streams and zero recordings. Three separate defects caused it, each silent at
+* the point of failure, and the operator found out by opening the viewer. Every
+* one of those defects has since been fixed and given a log line — but a log
+* line per known bug does not cover the next one. This addon covers the class:
+* it asserts what must be true of a working node and reports when it is not.
+*
+* It emits `SystemLivenessFailed` / `SystemLivenessRecovered` on the event bus
+* with a STABLE finding id, exactly like the kernel's addon-health monitor, so
+* AlertCenter raises one persistent alert per fault and dismisses it on
+* recovery instead of producing a stream of them. The same lines go to the log
+* at ERROR, which is what makes them alertable in Loki.
+*
+* Deliberately hub-only and deliberately read-only: it observes through
+* `ctx.api` and changes nothing. A monitor that can act is a monitor that can
+* cause the outage it was meant to report — this repo has already stopped a
+* hub that way once (the remedial-action watcher, 2026-07-30).
+*/
+/** Event source stamped on every emission — the addon that observed it. */
+var LIVENESS_SOURCE = {
+	type: "addon",
+	id: "liveness-monitor"
+};
+/** How often the invariants are checked. */
+var TICK_INTERVAL_MS = 5 * 6e4;
+/**
+* Grace period after boot before anything is reported.
+*
+* Every check would be true during startup — devices restore, providers
+* connect, the first segment takes a minute — and a monitor that cries at every
+* restart is one nobody reads. The kernel's addon-health monitor takes the same
+* position for the same reason.
+*/
+var BOOT_GRACE_MS = 6 * 6e4;
+/** How long a recording camera may stay silent before it is a fault. */
+var DEFAULT_STALE_AFTER_MS = 15 * 6e4;
+/**
+* How far back to look for "does this camera record at all". A camera with no
+* footage in this window is treated as a non-recording camera and never
+* reported — which is what keeps the check free of any configuration coupling.
+*/
+var RECORDING_LOOKBACK_MS = 1440 * 6e4;
+var LivenessMonitorAddon = class extends require_dist.BaseAddon {
+	tickTimer = null;
+	startedAtMs = 0;
+	/** Finding ids currently reported, so recovery can be detected and announced. */
+	active = /* @__PURE__ */ new Set();
+	constructor() {
+		super({});
+	}
+	async onInitialize() {
+		this.startedAtMs = Date.now();
+		this.tickTimer = setInterval(() => {
+			this.tick();
+		}, TICK_INTERVAL_MS);
+		this.tickTimer.unref?.();
+		this.ctx.logger.info("liveness-monitor started", { meta: {
+			tickIntervalMs: TICK_INTERVAL_MS,
+			bootGraceMs: BOOT_GRACE_MS
+		} });
+		return [];
+	}
+	async onShutdown() {
+		if (this.tickTimer) clearInterval(this.tickTimer);
+		this.tickTimer = null;
+	}
+	/**
+	* One evaluation. Public so a test or an operator-facing action can force it
+	* without waiting out the interval.
+	*/
+	async tick() {
+		if (Date.now() - this.startedAtMs < BOOT_GRACE_MS) return [];
+		try {
+			const findings = evaluateLiveness(await this.gather());
+			this.report(findings);
+			return findings;
+		} catch (err) {
+			this.ctx.logger.error("liveness-monitor: check failed — node health is UNKNOWN this tick", { meta: { error: require_dist.errMsg(err) } });
+			return [];
+		}
+	}
+	/** Read the facts through the cap surface. Changes nothing. */
+	async gather() {
+		const nowMs = Date.now();
+		const staleAfterMs = this.config.staleAfterMs ?? DEFAULT_STALE_AFTER_MS;
+		const devices = await this.ctx.api.deviceManager.listAll.query({});
+		if (devices.length === 0) return {
+			nowMs,
+			deviceCount: 0,
+			cameras: [],
+			staleAfterMs
+		};
+		const cameraDevices = devices.filter((d) => d.isCamera === true);
+		const cameras = [];
+		for (const device of cameraDevices) cameras.push({
+			deviceId: device.id,
+			online: device.online === true,
+			lastSegmentMs: await this.lastSegmentMs(device.id, nowMs, staleAfterMs)
+		});
+		return {
+			nowMs,
+			deviceCount: devices.length,
+			cameras,
+			staleAfterMs
+		};
+	}
+	/**
+	* Newest segment for a camera, or null when it has produced none in a day.
+	*
+	* Two steps on purpose: the healthy case asks only for the recent window,
+	* which is a handful of ranges, and only a camera that looks silent pays for
+	* the 24-hour lookback that decides whether it records at all.
+	*/
+	async lastSegmentMs(deviceId, nowMs, staleAfterMs) {
+		const recent = await this.ctx.api.recording.getAvailability.query({
+			deviceId,
+			fromMs: nowMs - staleAfterMs,
+			toMs: nowMs
+		});
+		if (recent.ranges.length > 0) return Math.max(...recent.ranges.map((r) => r.endMs));
+		const day = await this.ctx.api.recording.getAvailability.query({
+			deviceId,
+			fromMs: nowMs - RECORDING_LOOKBACK_MS,
+			toMs: nowMs
+		});
+		if (day.ranges.length === 0) return null;
+		return Math.max(...day.ranges.map((r) => r.endMs));
+	}
+	/** Announce new faults and recoveries; say nothing about an unchanged fault. */
+	report(findings) {
+		const current = new Set(findings.map((f) => f.id));
+		for (const finding of findings) {
+			if (this.active.has(finding.id)) continue;
+			this.active.add(finding.id);
+			this.ctx.logger.error(`liveness: ${finding.title} — ${finding.message}`, {
+				...finding.deviceId !== void 0 ? { tags: { deviceId: finding.deviceId } } : {},
+				meta: {
+					findingId: finding.id,
+					severity: finding.severity
+				}
+			});
+			this.ctx.eventBus.emit(require_dist.createEvent(require_dist.EventCategory.SystemLivenessFailed, LIVENESS_SOURCE, {
+				findingId: finding.id,
+				severity: finding.severity,
+				title: finding.title,
+				message: finding.message,
+				...finding.deviceId !== void 0 ? { deviceId: finding.deviceId } : {}
+			}));
+		}
+		for (const id of [...this.active]) {
+			if (current.has(id)) continue;
+			this.active.delete(id);
+			this.ctx.logger.info(`liveness: recovered — ${id}`, { meta: { findingId: id } });
+			this.ctx.eventBus.emit(require_dist.createEvent(require_dist.EventCategory.SystemLivenessRecovered, LIVENESS_SOURCE, { findingId: id }));
+		}
+	}
+};
+//#endregion
+exports.LivenessMonitorAddon = LivenessMonitorAddon;
+exports.evaluateLiveness = evaluateLiveness;
+exports.isLivenessFindingId = isLivenessFindingId;