@camstack/system 1.2.313 → 1.2.315

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-CkRwnhbo.js");
+const require_dist = require("./dist-DVKv5i-e.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_builtins_composer_composer_addon = require("./builtins/composer/composer.addon.js");
@@ -29,7 +29,7 @@ require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_event_loop_stall_monitor = require("./event-loop-stall-monitor-ey4mbofz.js");
 const require_tls$1 = require("./tls-D_wUeOTD.js");
-const require_child_cap_dispatch = require("./child-cap-dispatch-Dyn_7ezH.js");
+const require_child_cap_dispatch = require("./child-cap-dispatch-DzcUd_ct.js");
 const require_resource_monitor = require("./resource-monitor-DzNn_IZK.js");
 const require_custom_action_registry = require("./custom-action-registry-acBY3mHA.js");
 let zod = require("zod");
@@ -5853,6 +5853,36 @@ function scheduleSelfRestart(options = {}) {
 	}, delayMs);
 }
 //#endregion
+//#region src/kernel/status-overlay.ts
+/** The answer for a device KNOWN to carry no claim — the old path, no overlay. */
+var UNCLAIMED = { kind: "unclaimed" };
+var GET_STATUS = "getStatus";
+/**
+* Wrap `provider` so that `getStatus` awaits the overlay, re-read at CALL time
+* (a claim released between resolve and call falls back to the native's own
+* `getStatus`; a device whose claims are not yet known has them resolved
+* first), and every other property is the provider's own.
+*
+* Other properties are read off the TARGET with the target as receiver, and a
+* function is bound to it: a class instance's methods then see their real
+* `this` — a Proxy as `this` would break `#private` fields and prototype
+* getters. The HA-shaped forwarding Proxy is unaffected either way.
+*/
+function overlayGetStatus(provider, answer) {
+	return new Proxy(provider, { get(target, prop) {
+		if (prop === GET_STATUS) return async (...args) => {
+			const current = await answer();
+			if (current.kind === "claimed") return current.slice;
+			if (current.kind === "unknown") return null;
+			const native = Reflect.get(target, prop, target);
+			if (typeof native !== "function") throw new Error("getStatus: the claim was released and the native provider implements no getStatus");
+			return await native.apply(target, args);
+		};
+		const value = Reflect.get(target, prop, target);
+		return typeof value === "function" ? value.bind(target) : value;
+	} });
+}
+//#endregion
 //#region src/kernel/capability-registry.ts
 /**
 * Type-level bridge: the `providers` map stores heterogeneous capability
@@ -5865,6 +5895,19 @@ function scheduleSelfRestart(options = {}) {
 function asProvider(value) {
 	return value;
 }
+/**
+* A parsed `status.schema` output is a record — every status schema is a
+* `z.object` (the `status` block's contract) — but `CapabilityStatusSchema`
+* types it as `ZodType<unknown>`, so the parsed value comes back `unknown`.
+* Narrowed structurally, never cast: a non-record output is answered `null`
+* ("not reported", D315), which is also what the aggregate does with it.
+*/
+function asStatusSlice(parsed) {
+	if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return null;
+	const slice = {};
+	for (const [key, value] of Object.entries(parsed)) slice[key] = value;
+	return slice;
+}
 var CapabilityRegistry = class CapabilityRegistry {
 	capabilities = /* @__PURE__ */ new Map();
 	logger;
@@ -6354,13 +6397,95 @@ var CapabilityRegistry = class CapabilityRegistry {
 	setNativeFallback(resolver) {
 		this.nativeFallback = resolver;
 	}
-	/** Resolve the native provider for `(capName, deviceId)` or null. */
+	/**
+	* Resolve the native provider for `(capName, deviceId)` or null. A CLAIMED
+	* cap's provider is handed back with its `getStatus` overlaid (D663, S3) —
+	* on the in-process branch AND the `nativeFallback` branch, which is the
+	* path the HA feeder's devices take.
+	*/
 	getNativeProvider(capName, deviceId) {
 		const entry = this.nativeProviders.get(capName)?.get(deviceId);
-		if (entry) return entry.provider;
-		if (this.nativeFallback) return this.nativeFallback(capName, deviceId) ?? null;
+		if (entry) return this.withOverlay(capName, deviceId, entry.provider);
+		if (this.nativeFallback) {
+			const fallback = this.nativeFallback(capName, deviceId);
+			return this.withOverlay(capName, deviceId, fallback ?? null);
+		}
 		return null;
 	}
+	/** The device-manager's view over its mirror; `null` until installed. */
+	statusOverlay = null;
+	/** `(cap, device)` pairs whose merged slice currently fails its status schema — one warn per transition. */
+	overlayParseFailing = /* @__PURE__ */ new Set();
+	/**
+	* Install (or remove, with `null`) the claimed-status overlay. Installed once
+	* by the device-manager at init over its `DeviceStateMirror`; removed on its
+	* shutdown. Wrappers already resolved re-read it at call time, so an
+	* uninstall hands `getStatus` back to the native immediately.
+	*/
+	setStatusOverlay(overlay) {
+		this.statusOverlay = overlay;
+		this.overlayParseFailing.clear();
+	}
+	/**
+	* THE question every `getStatus` awaits before it is answered (the registry's
+	* own wrappers at call time, and the three transport entries through
+	* `answerClaimedGetStatus`). The overlay resolves the device's claims first;
+	* `unknown` survives only when its row cannot be read, and the caller then
+	* answers "not reported", never the native (D315, D49).
+	*
+	* A claimed slice is parsed with the cap's `status.schema` — S4 makes
+	* `status ⊆ runtimeState`, so the merged runtime slice parses and a
+	* runtime-only key such as `lastFetchedAt` is stripped. A slice that does not
+	* parse is `null`, logged once per `(cap, device)` transition with the device
+	* tag; a held claim is `null` without a parse. A cap with no `status` block
+	* passes its merged slice through as is.
+	*/
+	async resolveClaimedStatus(capName, deviceId) {
+		if (this.statusOverlay === null) return UNCLAIMED;
+		return this.parseClaimed(capName, deviceId, await this.statusOverlay.resolve(capName, deviceId));
+	}
+	parseClaimed(capName, deviceId, answer) {
+		if (answer.kind !== "claimed" || answer.slice === null) return answer;
+		const schema = this.getDefinition(capName)?.status?.schema;
+		if (schema === void 0) return answer;
+		const key = `${capName}:${deviceId}`;
+		const parsed = schema.safeParse(answer.slice);
+		if (parsed.success) {
+			this.overlayParseFailing.delete(key);
+			return {
+				kind: "claimed",
+				slice: asStatusSlice(parsed.data)
+			};
+		}
+		if (!this.overlayParseFailing.has(key)) {
+			this.overlayParseFailing.add(key);
+			this.logger.warn("claimed cap: merged slice fails its status schema — answering null", {
+				tags: { deviceId },
+				meta: {
+					capName,
+					issues: parsed.error.issues.slice(0, 3)
+				}
+			});
+		}
+		return {
+			kind: "claimed",
+			slice: null
+		};
+	}
+	/**
+	* Hand `provider` back untouched when `(capName, deviceId)` is KNOWN to be
+	* unclaimed; otherwise wrap it so `getStatus` awaits `resolveClaimedStatus`
+	* (re-read at call time — the parse, and for an unknown device the row read,
+	* happen only when `getStatus` is actually called) and everything else stays
+	* the provider's own. An unclaimed device pays one in-memory lookup; with no
+	* overlay installed it pays nothing.
+	*/
+	withOverlay(capName, deviceId, provider) {
+		if (this.statusOverlay === null) return provider;
+		if (typeof provider !== "object" || provider === null) return provider;
+		if (this.statusOverlay.peek(capName, deviceId).kind === "unclaimed") return provider;
+		return overlayGetStatus(provider, () => this.resolveClaimedStatus(capName, deviceId));
+	}
 	/** Resolve the addonId that registered the native provider for `(capName, deviceId)`. */
 	getNativeAddonId(capName, deviceId) {
 		return this.nativeProviders.get(capName)?.get(deviceId)?.addonId ?? null;
@@ -6445,9 +6570,9 @@ var CapabilityRegistry = class CapabilityRegistry {
 		if (native !== null) return native;
 		const state = this.capabilities.get(capName);
 		if (!state) return null;
-		if (state.definition.mode === "singleton") return this.resolveForDevice(capName, String(deviceId));
+		if (state.definition.mode === "singleton") return this.withOverlay(capName, deviceId, this.resolveForDevice(capName, String(deviceId)));
 		const first = state.providers.values().next();
-		return first.done ? null : asProvider(first.value);
+		return first.done ? null : this.withOverlay(capName, deviceId, asProvider(first.value));
 	}
 	getAllProviders(capabilityName) {
 		if (!this._ready) return [];
@@ -95987,6 +96112,7 @@ exports.FilesystemStorageAddon = require_builtins_sqlite_storage_filesystem_stor
 exports.FilesystemStorageProvider = require_builtins_sqlite_storage_filesystem_storage_addon.FilesystemStorageProvider;
 exports.FrameDecoder = require_child_cap_dispatch.FrameDecoder;
 exports.FsStorageBackend = FsStorageBackend;
+exports.GET_STATUS_METHOD = require_child_cap_dispatch.GET_STATUS_METHOD;
 exports.HEALTH_MONITOR_GRACE_PERIOD_MS = HEALTH_MONITOR_GRACE_PERIOD_MS;
 exports.HEALTH_MONITOR_RETRY_INTERVALS_MS = HEALTH_MONITOR_RETRY_INTERVALS_MS;
 exports.HEALTH_MONITOR_TICK_MS = HEALTH_MONITOR_TICK_MS;
@@ -96076,6 +96202,7 @@ exports.SystemEventBus = SystemEventBus;
 exports.TRADITIONAL_NATIVE_PACKAGES = TRADITIONAL_NATIVE_PACKAGES;
 exports.ToastService = ToastService;
 exports.UDS_NO_ROUTE_PREFIX = require_child_cap_dispatch.UDS_NO_ROUTE_PREFIX;
+exports.UNCLAIMED = UNCLAIMED;
 exports.UdsLocalTransportClient = require_child_cap_dispatch.UdsLocalTransportClient;
 exports.UdsLocalTransportServer = require_child_cap_dispatch.UdsLocalTransportServer;
 exports.UserManager = require_builtins_local_auth_local_auth_addon.UserManager;
@@ -96087,6 +96214,7 @@ exports.__resetLoggingGateForTests = __resetLoggingGateForTests;
 exports.adaptBrokerToCluster = require_child_cap_dispatch.adaptBrokerToCluster;
 exports.addonSettingsCapability = require_dist.addonSettingsCapability;
 exports.allFamiliesListenHost = require_tls$1.allFamiliesListenHost;
+exports.answerClaimedGetStatus = require_child_cap_dispatch.answerClaimedGetStatus;
 exports.applyLanHttp = require_tls$1.applyLanHttp;
 exports.attributeStall = require_event_loop_stall_monitor.attributeStall;
 exports.bindPendingLanHttp = require_tls$1.bindPendingLanHttp;
@@ -96106,7 +96234,6 @@ exports.buildNativeCapProxy = require_child_cap_dispatch.buildNativeCapProxy;
 exports.buildNodeManifest = buildNodeManifest;
 exports.buildNpmChildEnv = require_child_cap_dispatch.buildNpmChildEnv;
 exports.buildStorageLocationRegistry = require_builtins_storage_orchestrator_storage_orchestrator_addon.buildStorageLocationRegistry;
-exports.buildUdsNativeCapProxy = require_child_cap_dispatch.buildUdsNativeCapProxy;
 exports.builderMountedCapNames = builderMountedCapNames;
 exports.callRegisterNodeWithRetry = callRegisterNodeWithRetry;
 exports.callWithServiceDiscovery = require_child_cap_dispatch.callWithServiceDiscovery;
@@ -96171,6 +96298,7 @@ exports.describeProviderKindDrift = describeProviderKindDrift;
 exports.describeRss = require_child_cap_dispatch.describeRss;
 exports.detectWorkspacePackagesDir = detectWorkspacePackagesDir;
 exports.deviceCapResolverLink = require_child_cap_dispatch.deviceCapResolverLink;
+exports.deviceOfGetStatus = require_child_cap_dispatch.deviceOfGetStatus;
 exports.diffCapActionCensus = require_child_cap_dispatch.diffCapActionCensus;
 exports.diffEventPlane = require_child_cap_dispatch.diffEventPlane;
 exports.diffSocketPlane = require_child_cap_dispatch.diffSocketPlane;
@@ -96290,6 +96418,7 @@ exports.localEndpointPath = require_child_cap_dispatch.localEndpointPath;
 exports.localProviderLink = require_child_cap_dispatch.localProviderLink;
 exports.mountNativeCapService = require_child_cap_dispatch.mountNativeCapService;
 exports.nextRssBudgetState = require_child_cap_dispatch.nextRssBudgetState;
+exports.overlayGetStatus = overlayGetStatus;
 exports.parseCapAction = require_child_cap_dispatch.parseCapAction;
 exports.parseRangeHeader = require_event_loop_stall_monitor.parseRangeHeader;
 exports.parseRssBudgetMb = require_child_cap_dispatch.parseRssBudgetMb;

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { $n as parseJsonUnknown, $t as objectInputDeclaresRequiredDeviceId, At as isArrayOutputSchema, Bt as lifecycleJobSchema, D as RUNTIME_DEFAULTS, Gn as emitDownForOwnedCaps, Gt as looseSchema, Hn as asNumber, It as isVoidInput, Lt as kebabToCamel, Mn as DATAPLANE_SECRET_HEADER$1, Nn as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Nt as isObjectInput, Pn as DEVICE_STATUS_METHOD, Qn as parseJsonObject, Qt as objectInputDeclaresAddonId, Rn as ReadinessRegistry, S as METHOD_ACCESS_MAP, Tt as extractNestedAddonId, Un as asString$1, Vn as asJsonObject$1, Wn as createEvent, Wt as logLevelAtMost, cn as resolveMethodAuth, dn as scopesAllowDeviceCap, er as readinessKey, ir as EventCategory$1, jt as isCollectionArrayMethod, kn as errMsg$1, nr as scopeKey, qn as expandCapMethods, rn as procedureAuthKey, t as ALL_CAPABILITY_DEFINITIONS, tr as resolveCapMount, un as scopesAllowAddon, y as LOG_LEVEL_RANK, z as addonSettingsCapability, zn as ReadinessTimeoutError } from "./dist-Cj7pJmXq.mjs";
+import { $n as asNumber, Bt as looseSchema, C as METHOD_ACCESS_MAP, Dt as isCollectionArrayMethod, Et as isArrayOutputSchema, Ft as lifecycleJobSchema, Jn as DEVICE_STATUS_METHOD, Jt as objectInputDeclaresRequiredDeviceId, Kn as DATAPLANE_SECRET_HEADER$1, Mt as kebabToCamel, O as RUNTIME_DEFAULTS, Qn as asJsonObject$1, Qt as procedureAuthKey, Wn as errMsg$1, Xn as ReadinessTimeoutError, Yn as ReadinessRegistry, b as LOG_LEVEL_RANK, dr as readinessKey, er as asString$1, fr as resolveCapMount, hr as EventCategory$1, in as resolveMethodAuth, ir as expandCapMethods, jt as isVoidInput, kt as isObjectInput, lr as parseJsonObject, nr as emitDownForOwnedCaps, on as scopesAllowAddon, pr as scopeKey, qn as DEVICE_SETTINGS_CONTRIBUTION_METHODS, qt as objectInputDeclaresAddonId, sn as scopesAllowDeviceCap, t as ALL_CAPABILITY_DEFINITIONS, tr as createEvent, ur as parseJsonUnknown, xt as extractNestedAddonId, z as addonSettingsCapability, zt as logLevelAtMost } from "./dist-MzYJVCLE.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { ComposerAddon } from "./builtins/composer/composer.addon.mjs";
@@ -28,7 +28,7 @@ import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { _ as ensureModel, a as createFileDataPlaneHandler, c as parseRangeHeader, d as ModelDownloadService, g as downloadModel, h as downloadFile, i as startEventLoopStallMonitor, l as parseTokenizedUrl, m as deleteModelFromDisk, n as STALL_TICK_MS, o as contentTypeFor, p as collectModelFiles, r as attributeStall, s as createAuthenticatedFileServer, t as STALL_REPORT_MS, u as resolveFilePath, v as fetchJson, x as isModelDownloaded, y as getModelFilePath } from "./event-loop-stall-monitor-EXjzIxDz.mjs";
 import { C as registerLanHttpHandler, S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, b as bindPendingLanHttp, c as loadTlsCert, d as collectCertIdentity, f as CA_VALIDITY_DAYS, g as evaluateExistingCert, h as SERVER_AUTH_OID, i as writeExtraSans, l as reissueTlsLeaf, m as MAX_LEAF_VALIDITY_DAYS, n as readTlsAccessStatus, o as validateUploadedTls, p as LEAF_RENEWAL_WINDOW_DAYS, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, u as CA_COMMON_NAME, v as allFamiliesListenHost, x as closeLanHttp, y as applyLanHttp } from "./tls-IM-v7JV4.mjs";
-import { $ as CapUsageRegistry, $n as capActionLabel, $t as buildHeapSample, A as resolveHwAccel, An as createOutboundQueueGate, At as CapabilityUnavailableError, B as udsChildLogToWorkerEntry, Bn as diffSocketPlane, Bt as HEAP_RECLAIM_MIN_INTERVAL_MS, C as getBrokerEventBus, Cn as formatHeapSpaces, Ct as capBareAction, D as subscribePassthrough, Dn as OUTBOUND_QUEUE_COOLDOWN_MS, Dt as serializeTypedArrays, E as setNodeEventInterest, En as selectReportedSpaces, Et as deserializeTypedArrays, F as ipcParentLink, Fn as EMPTY_SOCKET_PLANE_BASELINE, Ft as resolveNpmInvocation, G as CapRouteResolver, Gn as recordSocketFrame, Gt as HUB_MAIN_HEAP_WATCH_LABEL, H as createUdsLoggerWithControl, Hn as readSocketQueues, Ht as HEAP_RECLAIM_TRIGGER_MB, I as localProviderLink, In as SOCKET_PLANE_TOP_N, It as runNpm, J as classifyCapRoute, Jn as socketDirectionMessages, Jt as RSS_BUDGET_REANNOUNCE_MIN_MS, K as callWithServiceDiscovery, Kn as sampleSocketDirection, Kt as HUB_MAIN_RSS_BUDGET_MB, L as createParentUnownedCallHandler, Ln as SOCKET_QUEUE_TOP_N, Lt as createAddonPeerBytesFacility, M as brokerTransportLink, Mn as MESH_QUEUE_TOP_N, Mt as installManifestNativeDeps, N as buildLinkChain, Nn as createMeshQueueReader, Nt as resolveAddonClass, O as AddonDepsManager, On as OUTBOUND_QUEUE_SUSTAIN_MS, Ot as DeviceRegistry, P as deviceCapResolverLink, Pn as formatMeshQueue, Pt as buildNpmChildEnv, Q as readMoleculerFanoutMode, Qn as MAX_CAP_ACTIONS_PER_PEER, Qt as ZERO_LOOP_DELAY, R as createUdsEventBridge, Rn as createSocketPlaneMeter, Rt as hostNodeIdOf, S as clusterEventTopic, Sn as emitHeapDiagnosticReport, St as capActionSuffix, T as registerEventBusService, Tn as readHeapSpaces, Tt as parseCapAction, U as AGENT_CAP_FWD_ACTION, Un as EMPTY_SOCKET_DIRECTION, Ut as HEAP_WATCH_INTERVAL_MS, V as createUdsLogger, Vn as formatSocketPlane, Vt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, W as AGENT_CAP_FWD_SERVICE, Wn as createSocketDirectionCounters, Wt as HEAP_WATCH_WARN_RATIO, X as LocalChildRegistry, Xn as CAP_ACTION_UNLABELLED, Xt as RUNNER_HEAP_WATCH_INTERVAL_MS, Y as LocalChildClient, Yn as CAP_ACTION_OVERFLOW_LABEL, Yt as RSS_BUDGET_RELEASE_RATIO, Z as UDS_NO_ROUTE_PREFIX, Zn as EMPTY_CAP_ACTION_READING, Zt as RUNNER_RSS_BUDGET_ENV, _ as getWorkerDeviceRegistry, _n as createInspectorArrayBufferCensus, a as reapProcessGroup, an as nextRssBudgetState, ar as diffEventPlane, at as UdsLocalTransportServer, b as setHubConnected, bn as DECISIVE_HEAP_SPACES, bt as NATIVE_PROVIDER_SERVICE_INFIX, c as runnerOwnsProcessGroup, cn as shouldReclaim, ct as localEndpointPath, d as summarizeMembers, dn as strandedMb, dt as buildNativeCapProxy, en as createDeferredHeapWatchSink, er as createCapActionCensus, et as PARENT_ROUTED_PROVIDER_ADDON_ID, f as installManifestSystemDeps, fn as ARRAY_BUFFER_CENSUS_COOLDOWN_MS, ft as buildUdsNativeCapProxy, g as createUdsAddonContext, gn as createArrayBufferCensusGate, gt as mountNativeCapService, h as createAddonContext, hn as ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, in as hubMainRssBudget, ir as createEventPlaneReader, it as UdsLocalTransportClient, j as brokerCallForCap, jn as formatOutboundQueueVerdict, jt as copyBundledNativeModules, k as createKernelHwAccel, kn as OUTBOUND_QUEUE_THRESHOLD_BYTES, kt as CapabilityHandle, l as signalAllRunnerGroups, ln as startHeapWatch, lt as FrameDecoder, m as adaptBrokerToCluster, mn as ARRAY_BUFFER_CENSUS_THRESHOLD_MB, nn as createV8Reclaimer, nr as EVENT_PLANE_TOP_N, nt as getCapUsageRegistry, o as registerRunnerGroup, on as parseRssBudgetMb, or as formatEventPlane, ot as SocketChannel, p as installManifestPythonDeps, pn as ARRAY_BUFFER_CENSUS_SUSTAIN_MS, pt as createBrokerDeviceManagerApi, q as CapRouteError, qn as socketDirectionBytes, qt as HUB_RSS_BUDGET_ENV, r as defaultProcessGroupOps, rn as describeRss, rr as createEventPlaneMeter, rt as createLocalTransport, s as releaseRunnerGroup, sn as reclaimIntervalMs, st as PeerAnsweredError, t as CAP_METHOD_NOT_IMPLEMENTED, tn as createLoopDelayMeter, tr as diffCapActionCensus, tt as __resetCapUsageRegistryForTests, un as startRunnerHeapWatch, ut as encodeFrame, v as getOrInitReadinessRegistry, vn as formatArrayBufferCensus, vt as createAddonService, w as getMoleculerEventStats, wn as heapSpaceField, wt as capServiceName, x as EVENT_TOPIC_PREFIX, xn as HEAP_SPACE_REPORT_MIN_MB, xt as capActionName, y as getOrInitReadinessRegistryForClient, yn as isArrayBufferCensusReport, yt as validateProviderRegistrations, z as createUdsEventBus, zn as createSocketPlaneReader, zt as createAddonDataPlaneFacility } from "./child-cap-dispatch-CHTiHbsv.mjs";
+import { $ as classifyCapRoute, $n as EMPTY_CAP_ACTION_READING, $t as RUNNER_RSS_BUDGET_ENV, A as resolveHwAccel, An as OUTBOUND_QUEUE_SUSTAIN_MS, At as DeviceRegistry, B as udsChildLogToWorkerEntry, Bn as createSocketPlaneMeter, Bt as hostNodeIdOf, C as getBrokerEventBus, Cn as HEAP_SPACE_REPORT_MIN_MB, Ct as capActionName, D as subscribePassthrough, Dn as readHeapSpaces, Dt as parseCapAction, E as setNodeEventInterest, En as heapSpaceField, Et as capServiceName, F as ipcParentLink, Fn as createMeshQueueReader, Ft as resolveAddonClass, G as UDS_NO_ROUTE_PREFIX, Gn as EMPTY_SOCKET_DIRECTION, Gt as HEAP_WATCH_INTERVAL_MS, H as createUdsLoggerWithControl, Hn as diffSocketPlane, Ht as HEAP_RECLAIM_MIN_INTERVAL_MS, I as localProviderLink, In as formatMeshQueue, It as buildNpmChildEnv, J as deviceOfGetStatus, Jn as sampleSocketDirection, Jt as HUB_MAIN_RSS_BUDGET_MB, K as GET_STATUS_METHOD, Kn as createSocketDirectionCounters, Kt as HEAP_WATCH_WARN_RATIO, L as createParentUnownedCallHandler, Ln as EMPTY_SOCKET_PLANE_BASELINE, Lt as resolveNpmInvocation, M as brokerTransportLink, Mn as createOutboundQueueGate, Mt as CapabilityUnavailableError, N as buildLinkChain, Nn as formatOutboundQueueVerdict, Nt as copyBundledNativeModules, O as AddonDepsManager, On as selectReportedSpaces, Ot as deserializeTypedArrays, P as deviceCapResolverLink, Pn as MESH_QUEUE_TOP_N, Pt as installManifestNativeDeps, Q as CapRouteError, Qn as CAP_ACTION_UNLABELLED, Qt as RUNNER_HEAP_WATCH_INTERVAL_MS, R as createUdsEventBridge, Rn as SOCKET_PLANE_TOP_N, Rt as runNpm, S as clusterEventTopic, Sn as DECISIVE_HEAP_SPACES, St as NATIVE_PROVIDER_SERVICE_INFIX, T as registerEventBusService, Tn as formatHeapSpaces, Tt as capBareAction, U as LocalChildClient, Un as formatSocketPlane, Ut as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, V as createUdsLogger, Vn as createSocketPlaneReader, Vt as createAddonDataPlaneFacility, W as LocalChildRegistry, Wn as readSocketQueues, Wt as HEAP_RECLAIM_TRIGGER_MB, X as AGENT_CAP_FWD_SERVICE, Xn as socketDirectionMessages, Xt as RSS_BUDGET_REANNOUNCE_MIN_MS, Y as AGENT_CAP_FWD_ACTION, Yn as socketDirectionBytes, Yt as HUB_RSS_BUDGET_ENV, Z as CapRouteResolver, Zn as CAP_ACTION_OVERFLOW_LABEL, Zt as RSS_BUDGET_RELEASE_RATIO, _ as getWorkerDeviceRegistry, _n as ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, a as reapProcessGroup, an as describeRss, ar as createEventPlaneMeter, at as getCapUsageRegistry, b as setHubConnected, bn as formatArrayBufferCensus, bt as createAddonService, c as runnerOwnsProcessGroup, cn as parseRssBudgetMb, cr as formatEventPlane, ct as UdsLocalTransportServer, d as summarizeMembers, dn as startHeapWatch, dt as localEndpointPath, en as ZERO_LOOP_DELAY, er as MAX_CAP_ACTIONS_PER_PEER, et as callWithServiceDiscovery, f as installManifestSystemDeps, fn as startRunnerHeapWatch, ft as FrameDecoder, g as createUdsAddonContext, gn as ARRAY_BUFFER_CENSUS_THRESHOLD_MB, h as createAddonContext, hn as ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ht as createBrokerDeviceManagerApi, in as createV8Reclaimer, ir as EVENT_PLANE_TOP_N, it as __resetCapUsageRegistryForTests, j as brokerCallForCap, jn as OUTBOUND_QUEUE_THRESHOLD_BYTES, jt as CapabilityHandle, k as createKernelHwAccel, kn as OUTBOUND_QUEUE_COOLDOWN_MS, kt as serializeTypedArrays, l as signalAllRunnerGroups, ln as reclaimIntervalMs, lt as SocketChannel, m as adaptBrokerToCluster, mn as ARRAY_BUFFER_CENSUS_COOLDOWN_MS, mt as buildNativeCapProxy, nn as createDeferredHeapWatchSink, nr as createCapActionCensus, nt as CapUsageRegistry, o as registerRunnerGroup, on as hubMainRssBudget, or as createEventPlaneReader, ot as createLocalTransport, p as installManifestPythonDeps, pn as strandedMb, pt as encodeFrame, q as answerClaimedGetStatus, qn as recordSocketFrame, qt as HUB_MAIN_HEAP_WATCH_LABEL, r as defaultProcessGroupOps, rn as createLoopDelayMeter, rr as diffCapActionCensus, rt as PARENT_ROUTED_PROVIDER_ADDON_ID, s as releaseRunnerGroup, sn as nextRssBudgetState, sr as diffEventPlane, st as UdsLocalTransportClient, t as CAP_METHOD_NOT_IMPLEMENTED, tn as buildHeapSample, tr as capActionLabel, tt as readMoleculerFanoutMode, un as shouldReclaim, ut as PeerAnsweredError, v as getOrInitReadinessRegistry, vn as createArrayBufferCensusGate, vt as mountNativeCapService, w as getMoleculerEventStats, wn as emitHeapDiagnosticReport, wt as capActionSuffix, x as EVENT_TOPIC_PREFIX, xn as isArrayBufferCensusReport, xt as validateProviderRegistrations, y as getOrInitReadinessRegistryForClient, yn as createInspectorArrayBufferCensus, z as createUdsEventBus, zn as SOCKET_QUEUE_TOP_N, zt as createAddonPeerBytesFacility } from "./child-cap-dispatch-AAltfBUH.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-B1v6E07R.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-B4Cf4O_X.mjs";
 import { z } from "zod";
@@ -5846,6 +5846,36 @@ function scheduleSelfRestart(options = {}) {
 	}, delayMs);
 }
 //#endregion
+//#region src/kernel/status-overlay.ts
+/** The answer for a device KNOWN to carry no claim — the old path, no overlay. */
+var UNCLAIMED = { kind: "unclaimed" };
+var GET_STATUS = "getStatus";
+/**
+* Wrap `provider` so that `getStatus` awaits the overlay, re-read at CALL time
+* (a claim released between resolve and call falls back to the native's own
+* `getStatus`; a device whose claims are not yet known has them resolved
+* first), and every other property is the provider's own.
+*
+* Other properties are read off the TARGET with the target as receiver, and a
+* function is bound to it: a class instance's methods then see their real
+* `this` — a Proxy as `this` would break `#private` fields and prototype
+* getters. The HA-shaped forwarding Proxy is unaffected either way.
+*/
+function overlayGetStatus(provider, answer) {
+	return new Proxy(provider, { get(target, prop) {
+		if (prop === GET_STATUS) return async (...args) => {
+			const current = await answer();
+			if (current.kind === "claimed") return current.slice;
+			if (current.kind === "unknown") return null;
+			const native = Reflect.get(target, prop, target);
+			if (typeof native !== "function") throw new Error("getStatus: the claim was released and the native provider implements no getStatus");
+			return await native.apply(target, args);
+		};
+		const value = Reflect.get(target, prop, target);
+		return typeof value === "function" ? value.bind(target) : value;
+	} });
+}
+//#endregion
 //#region src/kernel/capability-registry.ts
 /**
 * Type-level bridge: the `providers` map stores heterogeneous capability
@@ -5858,6 +5888,19 @@ function scheduleSelfRestart(options = {}) {
 function asProvider(value) {
 	return value;
 }
+/**
+* A parsed `status.schema` output is a record — every status schema is a
+* `z.object` (the `status` block's contract) — but `CapabilityStatusSchema`
+* types it as `ZodType<unknown>`, so the parsed value comes back `unknown`.
+* Narrowed structurally, never cast: a non-record output is answered `null`
+* ("not reported", D315), which is also what the aggregate does with it.
+*/
+function asStatusSlice(parsed) {
+	if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return null;
+	const slice = {};
+	for (const [key, value] of Object.entries(parsed)) slice[key] = value;
+	return slice;
+}
 var CapabilityRegistry = class CapabilityRegistry {
 	capabilities = /* @__PURE__ */ new Map();
 	logger;
@@ -6347,13 +6390,95 @@ var CapabilityRegistry = class CapabilityRegistry {
 	setNativeFallback(resolver) {
 		this.nativeFallback = resolver;
 	}
-	/** Resolve the native provider for `(capName, deviceId)` or null. */
+	/**
+	* Resolve the native provider for `(capName, deviceId)` or null. A CLAIMED
+	* cap's provider is handed back with its `getStatus` overlaid (D663, S3) —
+	* on the in-process branch AND the `nativeFallback` branch, which is the
+	* path the HA feeder's devices take.
+	*/
 	getNativeProvider(capName, deviceId) {
 		const entry = this.nativeProviders.get(capName)?.get(deviceId);
-		if (entry) return entry.provider;
-		if (this.nativeFallback) return this.nativeFallback(capName, deviceId) ?? null;
+		if (entry) return this.withOverlay(capName, deviceId, entry.provider);
+		if (this.nativeFallback) {
+			const fallback = this.nativeFallback(capName, deviceId);
+			return this.withOverlay(capName, deviceId, fallback ?? null);
+		}
 		return null;
 	}
+	/** The device-manager's view over its mirror; `null` until installed. */
+	statusOverlay = null;
+	/** `(cap, device)` pairs whose merged slice currently fails its status schema — one warn per transition. */
+	overlayParseFailing = /* @__PURE__ */ new Set();
+	/**
+	* Install (or remove, with `null`) the claimed-status overlay. Installed once
+	* by the device-manager at init over its `DeviceStateMirror`; removed on its
+	* shutdown. Wrappers already resolved re-read it at call time, so an
+	* uninstall hands `getStatus` back to the native immediately.
+	*/
+	setStatusOverlay(overlay) {
+		this.statusOverlay = overlay;
+		this.overlayParseFailing.clear();
+	}
+	/**
+	* THE question every `getStatus` awaits before it is answered (the registry's
+	* own wrappers at call time, and the three transport entries through
+	* `answerClaimedGetStatus`). The overlay resolves the device's claims first;
+	* `unknown` survives only when its row cannot be read, and the caller then
+	* answers "not reported", never the native (D315, D49).
+	*
+	* A claimed slice is parsed with the cap's `status.schema` — S4 makes
+	* `status ⊆ runtimeState`, so the merged runtime slice parses and a
+	* runtime-only key such as `lastFetchedAt` is stripped. A slice that does not
+	* parse is `null`, logged once per `(cap, device)` transition with the device
+	* tag; a held claim is `null` without a parse. A cap with no `status` block
+	* passes its merged slice through as is.
+	*/
+	async resolveClaimedStatus(capName, deviceId) {
+		if (this.statusOverlay === null) return UNCLAIMED;
+		return this.parseClaimed(capName, deviceId, await this.statusOverlay.resolve(capName, deviceId));
+	}
+	parseClaimed(capName, deviceId, answer) {
+		if (answer.kind !== "claimed" || answer.slice === null) return answer;
+		const schema = this.getDefinition(capName)?.status?.schema;
+		if (schema === void 0) return answer;
+		const key = `${capName}:${deviceId}`;
+		const parsed = schema.safeParse(answer.slice);
+		if (parsed.success) {
+			this.overlayParseFailing.delete(key);
+			return {
+				kind: "claimed",
+				slice: asStatusSlice(parsed.data)
+			};
+		}
+		if (!this.overlayParseFailing.has(key)) {
+			this.overlayParseFailing.add(key);
+			this.logger.warn("claimed cap: merged slice fails its status schema — answering null", {
+				tags: { deviceId },
+				meta: {
+					capName,
+					issues: parsed.error.issues.slice(0, 3)
+				}
+			});
+		}
+		return {
+			kind: "claimed",
+			slice: null
+		};
+	}
+	/**
+	* Hand `provider` back untouched when `(capName, deviceId)` is KNOWN to be
+	* unclaimed; otherwise wrap it so `getStatus` awaits `resolveClaimedStatus`
+	* (re-read at call time — the parse, and for an unknown device the row read,
+	* happen only when `getStatus` is actually called) and everything else stays
+	* the provider's own. An unclaimed device pays one in-memory lookup; with no
+	* overlay installed it pays nothing.
+	*/
+	withOverlay(capName, deviceId, provider) {
+		if (this.statusOverlay === null) return provider;
+		if (typeof provider !== "object" || provider === null) return provider;
+		if (this.statusOverlay.peek(capName, deviceId).kind === "unclaimed") return provider;
+		return overlayGetStatus(provider, () => this.resolveClaimedStatus(capName, deviceId));
+	}
 	/** Resolve the addonId that registered the native provider for `(capName, deviceId)`. */
 	getNativeAddonId(capName, deviceId) {
 		return this.nativeProviders.get(capName)?.get(deviceId)?.addonId ?? null;
@@ -6438,9 +6563,9 @@ var CapabilityRegistry = class CapabilityRegistry {
 		if (native !== null) return native;
 		const state = this.capabilities.get(capName);
 		if (!state) return null;
-		if (state.definition.mode === "singleton") return this.resolveForDevice(capName, String(deviceId));
+		if (state.definition.mode === "singleton") return this.withOverlay(capName, deviceId, this.resolveForDevice(capName, String(deviceId)));
 		const first = state.providers.values().next();
-		return first.done ? null : asProvider(first.value);
+		return first.done ? null : this.withOverlay(capName, deviceId, asProvider(first.value));
 	}
 	getAllProviders(capabilityName) {
 		if (!this._ready) return [];
@@ -95918,4 +96043,4 @@ var LifecycleJobEngine = class {
 	}
 };
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, ARRAY_BUFFER_CENSUS_COOLDOWN_MS, ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ARRAY_BUFFER_CENSUS_THRESHOLD_MB, ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CAP_ACTION_OVERFLOW_LABEL, CAP_ACTION_UNLABELLED, CAP_METHOD_NOT_IMPLEMENTED, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ComposerAddon, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_CAP_ACTION_READING, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_CAP_ACTIONS_PER_PEER, MAX_LEAF_VALIDITY_DAYS, MESH_QUEUE_TOP_N, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, OUTBOUND_QUEUE_COOLDOWN_MS, OUTBOUND_QUEUE_SUSTAIN_MS, OUTBOUND_QUEUE_THRESHOLD_BYTES, PARENT_ROUTED_PROVIDER_ADDON_ID, PYTHON_VERSION, PeerAnsweredError, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, SOCKET_QUEUE_TOP_N, STALL_REPORT_MS, STALL_TICK_MS, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, attributeStall, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildNpmChildEnv, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionLabel, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonPeerBytesFacility, createAddonService, createArrayBufferCensusGate, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCapActionCensus, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createInspectorArrayBufferCensus, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createMeshQueueReader, createOutboundQueueGate, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, deviceCapResolverLink, diffCapActionCensus, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatArrayBufferCensus, formatEventPlane, formatHeapSpaces, formatLogLine, formatMeshQueue, formatOutboundQueueVerdict, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSpaceField, hostNodeIdOf, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installManifestSystemDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayBufferCensusReport, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextRssBudgetState, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readSocketQueues, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, setWrapperActive, shouldReclaim, signalAllRunnerGroups, socketDirectionBytes, socketDirectionMessages, startEventLoopStallMonitor, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, ARRAY_BUFFER_CENSUS_COOLDOWN_MS, ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ARRAY_BUFFER_CENSUS_THRESHOLD_MB, ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CAP_ACTION_OVERFLOW_LABEL, CAP_ACTION_UNLABELLED, CAP_METHOD_NOT_IMPLEMENTED, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ComposerAddon, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_CAP_ACTION_READING, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, GET_STATUS_METHOD, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_CAP_ACTIONS_PER_PEER, MAX_LEAF_VALIDITY_DAYS, MESH_QUEUE_TOP_N, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, OUTBOUND_QUEUE_COOLDOWN_MS, OUTBOUND_QUEUE_SUSTAIN_MS, OUTBOUND_QUEUE_THRESHOLD_BYTES, PARENT_ROUTED_PROVIDER_ADDON_ID, PYTHON_VERSION, PeerAnsweredError, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, SOCKET_QUEUE_TOP_N, STALL_REPORT_MS, STALL_TICK_MS, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UNCLAIMED, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, answerClaimedGetStatus, applyLanHttp, attributeStall, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildNpmChildEnv, buildStorageLocationRegistry, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionLabel, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonPeerBytesFacility, createAddonService, createArrayBufferCensusGate, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCapActionCensus, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createInspectorArrayBufferCensus, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createMeshQueueReader, createOutboundQueueGate, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, deviceCapResolverLink, deviceOfGetStatus, diffCapActionCensus, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatArrayBufferCensus, formatEventPlane, formatHeapSpaces, formatLogLine, formatMeshQueue, formatOutboundQueueVerdict, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSpaceField, hostNodeIdOf, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installManifestSystemDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayBufferCensusReport, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextRssBudgetState, overlayGetStatus, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readSocketQueues, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, setWrapperActive, shouldReclaim, signalAllRunnerGroups, socketDirectionBytes, socketDirectionMessages, startEventLoopStallMonitor, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };

package/dist/kernel/capability-registry.d.ts

@@ -1,4 +1,5 @@
 import { CapabilityDeclaration, CapabilityDefinition, CapabilityInfo, CapabilityMode, CapabilityProviderMap, CollectionCapabilityMap, IEventBus, IScopedLogger, SingletonCapabilityMap } from '@camstack/types';
+import { StatusOverlay, StatusOverlayAnswer } from './status-overlay.js';
 /** Result of creating a capability router (opaque to the kernel). */
 export type CapabilityRouter = unknown;
 /** Factory that creates a tRPC router from a capability definition + provider getter. */
@@ -260,8 +261,49 @@ export declare class CapabilityRegistry {
      * worker. Set once at hub boot time.
      */
     setNativeFallback(resolver: (capName: string, deviceId: number) => unknown | null): void;
-    /** Resolve the native provider for `(capName, deviceId)` or null. */
+    /**
+     * Resolve the native provider for `(capName, deviceId)` or null. A CLAIMED
+     * cap's provider is handed back with its `getStatus` overlaid (D663, S3) —
+     * on the in-process branch AND the `nativeFallback` branch, which is the
+     * path the HA feeder's devices take.
+     */
     getNativeProvider<T = unknown>(capName: string, deviceId: number): T | null;
+    /** The device-manager's view over its mirror; `null` until installed. */
+    private statusOverlay;
+    /** `(cap, device)` pairs whose merged slice currently fails its status schema — one warn per transition. */
+    private readonly overlayParseFailing;
+    /**
+     * Install (or remove, with `null`) the claimed-status overlay. Installed once
+     * by the device-manager at init over its `DeviceStateMirror`; removed on its
+     * shutdown. Wrappers already resolved re-read it at call time, so an
+     * uninstall hands `getStatus` back to the native immediately.
+     */
+    setStatusOverlay(overlay: StatusOverlay | null): void;
+    /**
+     * THE question every `getStatus` awaits before it is answered (the registry's
+     * own wrappers at call time, and the three transport entries through
+     * `answerClaimedGetStatus`). The overlay resolves the device's claims first;
+     * `unknown` survives only when its row cannot be read, and the caller then
+     * answers "not reported", never the native (D315, D49).
+     *
+     * A claimed slice is parsed with the cap's `status.schema` — S4 makes
+     * `status ⊆ runtimeState`, so the merged runtime slice parses and a
+     * runtime-only key such as `lastFetchedAt` is stripped. A slice that does not
+     * parse is `null`, logged once per `(cap, device)` transition with the device
+     * tag; a held claim is `null` without a parse. A cap with no `status` block
+     * passes its merged slice through as is.
+     */
+    resolveClaimedStatus(capName: string, deviceId: number): Promise<StatusOverlayAnswer>;
+    private parseClaimed;
+    /**
+     * Hand `provider` back untouched when `(capName, deviceId)` is KNOWN to be
+     * unclaimed; otherwise wrap it so `getStatus` awaits `resolveClaimedStatus`
+     * (re-read at call time — the parse, and for an unknown device the row read,
+     * happen only when `getStatus` is actually called) and everything else stays
+     * the provider's own. An unclaimed device pays one in-memory lookup; with no
+     * overlay installed it pays nothing.
+     */
+    private withOverlay;
     /** Resolve the addonId that registered the native provider for `(capName, deviceId)`. */
     getNativeAddonId(capName: string, deviceId: number): string | null;
     /** List the capability names for which this device has a native provider registered. */

package/dist/kernel/index.d.ts

@@ -15,6 +15,8 @@ export { CapabilityHandle, CapabilityUnavailableError } from './capability-handl
 export { CapabilityRegistry } from './capability-registry.js';
 export { buildCapRouters, builderMountedCapNames } from './cap-router-builder.js';
 export type { CapRouterPrimitives, CapRouterServices, CapProviderGetter, RemoteProxyFactory, ProcedureBuilder, ProcedureResolverArgs, } from './cap-router-builder.js';
+export { overlayGetStatus, UNCLAIMED } from './status-overlay.js';
+export type { ClaimedStatusResolver, StatusOverlay, StatusOverlayAnswer } from './status-overlay.js';
 export { describeProviderKindDrift } from './provider-kind-drift.js';
 export type { ProviderKindHint } from './provider-kind-drift.js';
 export type { CapabilityRouter, CapabilityRouterFactory, ConfigReader, ProviderOwnerToken, } from './capability-registry.js';
@@ -66,7 +68,7 @@ export { installManifestNativeDeps } from './deps/manifest-native-deps.js';
 export { AddonHealthMonitor, HEALTH_MONITOR_TICK_MS, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, } from './addon-health-monitor.js';
 export type { AddonHealthPhase, AddonHealthState, AddonHealthSnapshot, AddonHealthMonitorOptions, } from './addon-health-monitor.js';
 export type { HubServiceDeps } from './moleculer/hub-service.js';
-export { createBrokerDeviceManagerApi, buildNativeCapProxy, buildUdsNativeCapProxy, mountNativeCapService, NATIVE_PROVIDER_SERVICE_INFIX, } from './moleculer/device-cap-proxy.js';
+export { createBrokerDeviceManagerApi, buildNativeCapProxy, mountNativeCapService, NATIVE_PROVIDER_SERVICE_INFIX, } from './moleculer/device-cap-proxy.js';
 export type { WorkerDeviceManagerOptions } from './moleculer/device-cap-proxy.js';
 export { getWorkerDeviceRegistry } from './moleculer/addon-context-factory.js';
 export { localProviderLink, brokerTransportLink, deviceCapResolverLink, ipcParentLink, buildLinkChain, brokerCallForCap, } from './moleculer/trpc-links.js';

package/dist/kernel/moleculer/device-cap-proxy.d.ts

@@ -3,7 +3,6 @@ import { deviceOpsCapability } from '@camstack/types/addon';
 import { ServiceBroker } from 'moleculer';
 import { CapabilityRegistry } from '../capability-registry.js';
 import { DeviceRegistry } from '../device-registry.js';
-import { LocalChildRegistry } from '../transport/local-child-registry.js';
 export { NATIVE_PROVIDER_SERVICE_INFIX } from '../transport/cap-action-name.js';
 export interface WorkerDeviceManagerOptions {
     readonly api: AddonApi;
@@ -67,14 +66,5 @@ export declare function getWorkerNativeCapProvider(capName: string, deviceId: nu
  * worker `broker.createService` and the hub's Moleculer registry INFO packet.
  */
 export declare function buildNativeCapProxy(broker: ServiceBroker, addonId: string, capName: string, deviceId: number): Record<string, (input: unknown) => Promise<unknown>>;
-/**
- * Hub-side proxy for a device-scoped native cap whose owning runner is a
- * HUB-LOCAL forked child reachable over UDS. Mirrors {@link buildNativeCapProxy}
- * but dispatches via `LocalChildRegistry.callCapOnChild` (UDS) instead of
- * `broker.call` — the child no longer hosts a Moleculer service after the UDS
- * cutover, so a broker call fails "is not found". The `deviceId` is merged into
- * the method args (provider convention) and carried as the routing field.
- */
-export declare function buildUdsNativeCapProxy(registry: LocalChildRegistry, childId: string, capName: string, deviceId: number): Record<string, (input: unknown) => Promise<unknown>>;
 export declare function buildDeviceOpsProvider(device: IDevice): InferProvider<typeof deviceOpsCapability>;
 export declare function createBrokerDeviceManagerApi(opts: WorkerDeviceManagerOptions): DeviceManagerApi;

package/dist/kernel/status-overlay.d.ts

@@ -0,0 +1,18 @@
+import { StatusOverlay, StatusOverlayAnswer } from '@camstack/types';
+export type { StatusOverlay, StatusOverlayAnswer };
+/** The answer for a device KNOWN to carry no claim — the old path, no overlay. */
+export declare const UNCLAIMED: StatusOverlayAnswer;
+/** Resolves the device's claims first, then answers. What every consumer awaits. */
+export type ClaimedStatusResolver = (capName: string, deviceId: number) => Promise<StatusOverlayAnswer>;
+/**
+ * Wrap `provider` so that `getStatus` awaits the overlay, re-read at CALL time
+ * (a claim released between resolve and call falls back to the native's own
+ * `getStatus`; a device whose claims are not yet known has them resolved
+ * first), and every other property is the provider's own.
+ *
+ * Other properties are read off the TARGET with the target as receiver, and a
+ * function is bound to it: a class instance's methods then see their real
+ * `this` — a Proxy as `this` would break `#private` fields and prototype
+ * getters. The HA-shaped forwarding Proxy is unaffected either way.
+ */
+export declare function overlayGetStatus<T extends object>(provider: T, answer: () => Promise<StatusOverlayAnswer>): T;

package/dist/kernel/transport/claimed-get-status.d.ts

@@ -0,0 +1,15 @@
+import { ClaimedStatusResolver } from '../status-overlay.js';
+export declare const GET_STATUS_METHOD = "getStatus";
+/** What the entry knows about the call; `deviceId` wins over one inside `args`. */
+export interface ClaimedGetStatusCall {
+    readonly capName: string;
+    readonly method: string;
+    readonly deviceId?: number;
+    readonly args?: unknown;
+}
+export interface ClaimedGetStatusAnswer {
+    readonly slice: Readonly<Record<string, unknown>> | null;
+}
+/** The device a `getStatus` is about, or `undefined` when the call is not one. */
+export declare function deviceOfGetStatus(call: ClaimedGetStatusCall): number | undefined;
+export declare function answerClaimedGetStatus(resolve: ClaimedStatusResolver | undefined, call: ClaimedGetStatusCall): Promise<ClaimedGetStatusAnswer | null>;

package/dist/kernel/transport/index.d.ts

@@ -29,6 +29,8 @@ export type { UdsEventChannel } from './uds-event-bus.js';
 export { createUdsEventBridge } from './uds-event-bridge.js';
 export type { UdsEventBridgeDeps, ChildEventBroadcaster } from './uds-event-bridge.js';
 export { createParentUnownedCallHandler } from './parent-unowned-call.js';
+export { answerClaimedGetStatus, deviceOfGetStatus, GET_STATUS_METHOD, } from './claimed-get-status.js';
+export type { ClaimedGetStatusAnswer, ClaimedGetStatusCall } from './claimed-get-status.js';
 export type { ParentUnownedCallDeps, ParentUnownedCallLogger } from './parent-unowned-call.js';
 export { createHubCapForwardService, HUB_CAP_FWD_SERVICE, HUB_CAP_FWD_ACTION, } from './hub-cap-forward.js';
 export type { HubCapForwardParams, HubUnownedCallHandler } from './hub-cap-forward.js';