@camstack/system 1.2.315 → 1.2.317

package/dist/{dist-MzYJVCLE.mjs → dist-Dori4pf3.mjs}

@@ -701,7 +701,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/sleep-E6eD4yQS.mjs
+//#region ../types/dist/sleep-DlrgY4Qb.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -3512,7 +3512,7 @@ function errMsg(err) {
 	return String(err);
 }
 //#endregion
-//#region ../types/dist/composition-D5BQywfe.mjs
+//#region ../types/dist/composition-BK-GTFYb.mjs
 var AUDIO_ENCODER_BY_CODEC = {
 	opus: "libopus",
 	aac: "aac",
@@ -4153,14 +4153,37 @@ function evaluateRose(level, changedAt, debounceMs, call, field, env) {
 	field.acceptedEdgeAt = verdict.timestamp;
 	return verdict.timestamp;
 }
+/**
+* `count(x)`: how many times `x` strictly advanced (D670). It starts on the
+* first ANSWERED read of `x`:
+*  - an answered `null` ("never happened") primes it with no high-water, so the
+*    next finite value is a real advance and counts 1;
+*  - an answered finite value primes it with that value as the high-water and
+*    no increment — it is history, not an event;
+*  - anything else (a read that did not answer reaches here as neither) does
+*    NOT prime it (D393: unknown is not null).
+* An unavailable binding never reaches this function at all: the field is
+* judged unavailable before the expression runs.
+*
+* Edge case, accepted: an input that answers `null` and LATER reports a
+* historical value (a sensor's `lastChangedAt` that was null until its first
+* report) counts that value once. For the doorbell it cannot happen — its
+* input is its own `lastPressedAt`, which only advances on a `rose` edge that
+* also emits the press — but an external input can overcount by one.
+*/
 function evaluateCount(input, call, currentOutput) {
 	const currentCount = typeof currentOutput === "number" && Number.isFinite(currentOutput) && currentOutput >= 0 ? currentOutput : 0;
+	if (input === null) {
+		call.primed = true;
+		return currentCount;
+	}
 	if (typeof input !== "number" || !Number.isFinite(input)) return currentCount;
-	if (call.highWater === null) {
+	if (!call.primed) {
+		call.primed = true;
 		call.highWater = input;
 		return currentCount;
 	}
-	if (input <= call.highWater) return currentCount;
+	if (call.highWater !== null && input <= call.highWater) return currentCount;
 	call.highWater = input;
 	return currentCount + 1;
 }
@@ -4876,7 +4899,8 @@ function evaluateStatefulExpressionCall(invocation, memory, env) {
 		case "count": {
 			const call = existing?.kind === "count" ? existing : {
 				kind: "count",
-				highWater: null
+				highWater: null,
+				primed: false
 			};
 			memory.calls.set(invocation.path, call);
 			return evaluateCount(invocation.args[0], call, env.currentOutput);
@@ -14038,6 +14062,34 @@ var DeviceBindingsForDeviceSchema = z.object({
 		nativeAddonId: z.string()
 	}))
 });
+/**
+* The STORED wrapper activation for one `(device, capability)` pair — the row
+* `setWrapperActive` writes, read back three-way (D675):
+*
+* - `value` — the store answered and holds an activation: the bound wrapper's
+*   addon id, or `null`, the operator's explicit "off" marker (D62);
+* - `missing` — the store answered, its activation map exists, and it holds
+*   nothing for this pair: the operator never activated or deactivated a
+*   wrapper here;
+* - `failed` — the store could not be read, holds no activation map at all
+*   (an empty or unready snapshot, D44), or holds something that is not an
+*   activation. It carries NO information: a consumer must never read it as
+*   `missing` (D315, D393).
+*
+* This is the persisted INPUT, not the derived `getBindings` view — no registry
+* resolution, no `defaultActive` auto-binding, no cluster native-cap folding.
+*/
+var WrapperActivationReadSchema = z.discriminatedUnion("kind", [
+	z.object({
+		kind: z.literal("value"),
+		wrapperAddonId: z.string().nullable()
+	}),
+	z.object({ kind: z.literal("missing") }),
+	z.object({
+		kind: z.literal("failed"),
+		error: z.string()
+	})
+]);
 var SavedDeviceRowSchema = z.object({
 	/** Numeric id reserved at allocateDeviceId time. */
 	id: z.number(),
@@ -14836,6 +14888,21 @@ var deviceManagerCapability = {
 			auth: "admin"
 		}),
 		/**
+		* The STORED wrapper activation for one `(device, capName)` pair, three-way
+		* (`value` / `missing` / `failed`, see {@link WrapperActivationReadSchema}).
+		*
+		* The narrow read of the durable authority behind `getBindings`: a
+		* consumer that must know what the operator PERSISTED (virtual-doorbell,
+		* before it drops a press) asks this instead of pulling device-manager's
+		* whole addon store through `addonSettingsRaw.getGlobal` — which answered
+		* `{}` on every isolated-engine hub and so never worked (D675). It reads
+		* ONE row (the activation map, ~1.6 KB), never the ~625 KB store.
+		*/
+		getWrapperActivation: method(z.object({
+			deviceId: z.number(),
+			capName: z.string().min(1)
+		}), WrapperActivationReadSchema),
+		/**
 		* Return the addon ids that declared a wrapper provider for `capName`.
 		* Backs the device-bindings UI's wrapper-picker dropdown. Entries are
 		* sourced from `CapabilityRegistry.wrapperProviders`, populated when
@@ -38591,12 +38658,21 @@ var RecordingStorageUsageSchema = z.object({
 	*/
 	devicesRead: z.enum(["archive", "unavailable"]).optional(),
 	/**
+	* Is the `archive` answer WHOLE (D674): the hour ledger loaded without
+	* hitting its row cap, and at least one location resolved? Only then may a
+	* camera ABSENT from `devices[]` be read as "no footage" — and only then is a
+	* row's `oldestMs` the archive's oldest rather than the oldest of a fraction.
+	* OPTIONAL: a recorder predating D674 omits it, and a consumer must read the
+	* absence as `false`. A retention floor is a delete; it never guesses.
+	*/
+	complete: z.boolean().optional(),
+	/**
 	* Per-physical-volume capacity. OPTIONAL, and consumers must render the rest
-	* of the payload without it: the hub serves this method through a BAKED
-	* router, so a hub whose framework train predates a change to this array
-	* strips it out of an answer a newer recorder happily produced. A UI that
-	* dereferences it unconditionally crashes the whole Storage page over a
-	* missing disk bar.
+	* of the payload without it: a recorder that could not build it omits it. A
+	* UI that dereferences it unconditionally crashes the whole Storage page over
+	* a missing disk bar. (The hub's cap routers pass output through unvalidated
+	* since 2026-07-11 — `cap-router-builder.ts` — so a newer recorder's fields
+	* are not stripped by an older hub.)
 	*/
 	locations: z.array(RecordingLocationUsageSchema).optional()
 });
@@ -43518,7 +43594,8 @@ function expressionOutcome(source, read, now, stateful) {
 			state: "stale",
 			value: evaluateCount(null, {
 				kind: "count",
-				highWater: null
+				highWater: null,
+				primed: false
 			}, stateful.currentOutput),
 			reason: `${unavailable.reason}; holding the last accumulator value`,
 			deadline: null
@@ -48570,6 +48647,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.getWrapperActivation": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.listAll": {
 		capName: "device-manager",
 		capScope: "system",
@@ -54379,6 +54462,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.getWrapperActivation": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"deviceManager.listAll": [{
 		name: "deviceIds",
 		form: "array",

package/dist/{dist-DVKv5i-e.js → dist-a6p0V-IL.js}

@@ -701,7 +701,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/sleep-E6eD4yQS.mjs
+//#region ../types/dist/sleep-DlrgY4Qb.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -3512,7 +3512,7 @@ function errMsg(err) {
 	return String(err);
 }
 //#endregion
-//#region ../types/dist/composition-D5BQywfe.mjs
+//#region ../types/dist/composition-BK-GTFYb.mjs
 var AUDIO_ENCODER_BY_CODEC = {
 	opus: "libopus",
 	aac: "aac",
@@ -4153,14 +4153,37 @@ function evaluateRose(level, changedAt, debounceMs, call, field, env) {
 	field.acceptedEdgeAt = verdict.timestamp;
 	return verdict.timestamp;
 }
+/**
+* `count(x)`: how many times `x` strictly advanced (D670). It starts on the
+* first ANSWERED read of `x`:
+*  - an answered `null` ("never happened") primes it with no high-water, so the
+*    next finite value is a real advance and counts 1;
+*  - an answered finite value primes it with that value as the high-water and
+*    no increment — it is history, not an event;
+*  - anything else (a read that did not answer reaches here as neither) does
+*    NOT prime it (D393: unknown is not null).
+* An unavailable binding never reaches this function at all: the field is
+* judged unavailable before the expression runs.
+*
+* Edge case, accepted: an input that answers `null` and LATER reports a
+* historical value (a sensor's `lastChangedAt` that was null until its first
+* report) counts that value once. For the doorbell it cannot happen — its
+* input is its own `lastPressedAt`, which only advances on a `rose` edge that
+* also emits the press — but an external input can overcount by one.
+*/
 function evaluateCount(input, call, currentOutput) {
 	const currentCount = typeof currentOutput === "number" && Number.isFinite(currentOutput) && currentOutput >= 0 ? currentOutput : 0;
+	if (input === null) {
+		call.primed = true;
+		return currentCount;
+	}
 	if (typeof input !== "number" || !Number.isFinite(input)) return currentCount;
-	if (call.highWater === null) {
+	if (!call.primed) {
+		call.primed = true;
 		call.highWater = input;
 		return currentCount;
 	}
-	if (input <= call.highWater) return currentCount;
+	if (call.highWater !== null && input <= call.highWater) return currentCount;
 	call.highWater = input;
 	return currentCount + 1;
 }
@@ -4876,7 +4899,8 @@ function evaluateStatefulExpressionCall(invocation, memory, env) {
 		case "count": {
 			const call = existing?.kind === "count" ? existing : {
 				kind: "count",
-				highWater: null
+				highWater: null,
+				primed: false
 			};
 			memory.calls.set(invocation.path, call);
 			return evaluateCount(invocation.args[0], call, env.currentOutput);
@@ -14038,6 +14062,34 @@ var DeviceBindingsForDeviceSchema = zod.z.object({
 		nativeAddonId: zod.z.string()
 	}))
 });
+/**
+* The STORED wrapper activation for one `(device, capability)` pair — the row
+* `setWrapperActive` writes, read back three-way (D675):
+*
+* - `value` — the store answered and holds an activation: the bound wrapper's
+*   addon id, or `null`, the operator's explicit "off" marker (D62);
+* - `missing` — the store answered, its activation map exists, and it holds
+*   nothing for this pair: the operator never activated or deactivated a
+*   wrapper here;
+* - `failed` — the store could not be read, holds no activation map at all
+*   (an empty or unready snapshot, D44), or holds something that is not an
+*   activation. It carries NO information: a consumer must never read it as
+*   `missing` (D315, D393).
+*
+* This is the persisted INPUT, not the derived `getBindings` view — no registry
+* resolution, no `defaultActive` auto-binding, no cluster native-cap folding.
+*/
+var WrapperActivationReadSchema = zod.z.discriminatedUnion("kind", [
+	zod.z.object({
+		kind: zod.z.literal("value"),
+		wrapperAddonId: zod.z.string().nullable()
+	}),
+	zod.z.object({ kind: zod.z.literal("missing") }),
+	zod.z.object({
+		kind: zod.z.literal("failed"),
+		error: zod.z.string()
+	})
+]);
 var SavedDeviceRowSchema = zod.z.object({
 	/** Numeric id reserved at allocateDeviceId time. */
 	id: zod.z.number(),
@@ -14836,6 +14888,21 @@ var deviceManagerCapability = {
 			auth: "admin"
 		}),
 		/**
+		* The STORED wrapper activation for one `(device, capName)` pair, three-way
+		* (`value` / `missing` / `failed`, see {@link WrapperActivationReadSchema}).
+		*
+		* The narrow read of the durable authority behind `getBindings`: a
+		* consumer that must know what the operator PERSISTED (virtual-doorbell,
+		* before it drops a press) asks this instead of pulling device-manager's
+		* whole addon store through `addonSettingsRaw.getGlobal` — which answered
+		* `{}` on every isolated-engine hub and so never worked (D675). It reads
+		* ONE row (the activation map, ~1.6 KB), never the ~625 KB store.
+		*/
+		getWrapperActivation: method(zod.z.object({
+			deviceId: zod.z.number(),
+			capName: zod.z.string().min(1)
+		}), WrapperActivationReadSchema),
+		/**
 		* Return the addon ids that declared a wrapper provider for `capName`.
 		* Backs the device-bindings UI's wrapper-picker dropdown. Entries are
 		* sourced from `CapabilityRegistry.wrapperProviders`, populated when
@@ -38591,12 +38658,21 @@ var RecordingStorageUsageSchema = zod.z.object({
 	*/
 	devicesRead: zod.z.enum(["archive", "unavailable"]).optional(),
 	/**
+	* Is the `archive` answer WHOLE (D674): the hour ledger loaded without
+	* hitting its row cap, and at least one location resolved? Only then may a
+	* camera ABSENT from `devices[]` be read as "no footage" — and only then is a
+	* row's `oldestMs` the archive's oldest rather than the oldest of a fraction.
+	* OPTIONAL: a recorder predating D674 omits it, and a consumer must read the
+	* absence as `false`. A retention floor is a delete; it never guesses.
+	*/
+	complete: zod.z.boolean().optional(),
+	/**
 	* Per-physical-volume capacity. OPTIONAL, and consumers must render the rest
-	* of the payload without it: the hub serves this method through a BAKED
-	* router, so a hub whose framework train predates a change to this array
-	* strips it out of an answer a newer recorder happily produced. A UI that
-	* dereferences it unconditionally crashes the whole Storage page over a
-	* missing disk bar.
+	* of the payload without it: a recorder that could not build it omits it. A
+	* UI that dereferences it unconditionally crashes the whole Storage page over
+	* a missing disk bar. (The hub's cap routers pass output through unvalidated
+	* since 2026-07-11 — `cap-router-builder.ts` — so a newer recorder's fields
+	* are not stripped by an older hub.)
 	*/
 	locations: zod.z.array(RecordingLocationUsageSchema).optional()
 });
@@ -43518,7 +43594,8 @@ function expressionOutcome(source, read, now, stateful) {
 			state: "stale",
 			value: evaluateCount(null, {
 				kind: "count",
-				highWater: null
+				highWater: null,
+				primed: false
 			}, stateful.currentOutput),
 			reason: `${unavailable.reason}; holding the last accumulator value`,
 			deadline: null
@@ -48570,6 +48647,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.getWrapperActivation": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.listAll": {
 		capName: "device-manager",
 		capScope: "system",
@@ -54379,6 +54462,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.getWrapperActivation": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"deviceManager.listAll": [{
 		name: "deviceIds",
 		form: "array",