@camstack/system 1.2.330 → 1.2.331

package/dist/addon-runner.js

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_child_cap_dispatch = require("./child-cap-dispatch-C8uts1P4.js");
+const require_child_cap_dispatch = require("./child-cap-dispatch-93MfsaZL.js");
 const require_custom_action_registry = require("./custom-action-registry-acBY3mHA.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/addon-runner.mjs

@@ -1,4 +1,4 @@
-import { $t as RUNNER_RSS_BUDGET_ENV, Ft as resolveAddonClass, H as createUdsLoggerWithControl, Pt as installManifestNativeDeps, U as LocalChildClient, _t as getWorkerNativeCapSnapshot, f as installManifestSystemDeps, fn as startRunnerHeapWatch, g as createUdsAddonContext, gt as getWorkerNativeCapProvider, i as killOwnRunnerGroupAfterParentLoss, n as createChildCapDispatch, p as installManifestPythonDeps, u as startRunnerParentDeathWatchdog, wn as emitHeapDiagnosticReport, xt as validateProviderRegistrations, yt as setWorkerNativeCapsChangeListener } from "./child-cap-dispatch-C2VINHu1.mjs";
+import { $t as RUNNER_RSS_BUDGET_ENV, Ft as resolveAddonClass, H as createUdsLoggerWithControl, Pt as installManifestNativeDeps, U as LocalChildClient, _t as getWorkerNativeCapSnapshot, f as installManifestSystemDeps, fn as startRunnerHeapWatch, g as createUdsAddonContext, gt as getWorkerNativeCapProvider, i as killOwnRunnerGroupAfterParentLoss, n as createChildCapDispatch, p as installManifestPythonDeps, u as startRunnerParentDeathWatchdog, wn as emitHeapDiagnosticReport, xt as validateProviderRegistrations, yt as setWorkerNativeCapsChangeListener } from "./child-cap-dispatch-kLIiU1CG.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-B4Cf4O_X.mjs";
 import { register } from "node:module";
 import * as path$1 from "node:path";

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bx4zxM9N.js");
+const require_dist = require("../../dist-DRUzy1SF.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Sr as EventCategory, V as addonPagesCapability, Xn as errMsg, Zn as BaseAddon } from "../../dist-Dp043AI0.mjs";
+import { Hn as errMsg, Un as BaseAddon, V as addonPagesCapability, mr as EventCategory } from "../../dist-CoG8lY6H.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bx4zxM9N.js");
+const require_dist = require("../../dist-DRUzy1SF.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Sr as EventCategory, U as addonWidgetsCapability, Xn as errMsg, Zn as BaseAddon } from "../../dist-Dp043AI0.mjs";
+import { Hn as errMsg, U as addonWidgetsCapability, Un as BaseAddon, mr as EventCategory } from "../../dist-CoG8lY6H.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bx4zxM9N.js");
+const require_dist = require("../../dist-DRUzy1SF.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Sr as EventCategory, W as alertsCapability, Xn as errMsg, Zn as BaseAddon, n as AlertSchema, sr as createEvent } from "../../dist-Dp043AI0.mjs";
+import { $n as createEvent, Hn as errMsg, Un as BaseAddon, W as alertsCapability, mr as EventCategory, n as AlertSchema } from "../../dist-CoG8lY6H.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bx4zxM9N.js");
+const require_dist = require("../../dist-DRUzy1SF.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,
@@ -33,8 +33,8 @@ var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 *
 * ## One switch, not two (D62, D520)
 *
-* Binding this wrapper to a camera chooses the IMPLEMENTATION — the same act as
-* binding `virtual-doorbell`. `setEnabled` is the switch for the function, and
+* Binding this wrapper to a camera chooses the IMPLEMENTATION.
+* `setEnabled` is the switch for the function, and
 * it is the cap's own switch: a camera with firmware autotrack uses its native
 * provider for exactly the same method, so the operator never sees two
 * controls that can disagree.

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { Sr as EventCategory, Xn as errMsg, Zn as BaseAddon, b as FIRST_LEVEL_MACRO_CLASSES, pr as isEvent, q as bareAddonId, sn as ptzAutotrackCapability } from "../../dist-Dp043AI0.mjs";
+import { Hn as errMsg, Un as BaseAddon, ar as isEvent, b as FIRST_LEVEL_MACRO_CLASSES, mr as EventCategory, q as bareAddonId, rn as ptzAutotrackCapability } from "../../dist-CoG8lY6H.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,
@@ -28,8 +28,8 @@ var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 *
 * ## One switch, not two (D62, D520)
 *
-* Binding this wrapper to a camera chooses the IMPLEMENTATION — the same act as
-* binding `virtual-doorbell`. `setEnabled` is the switch for the function, and
+* Binding this wrapper to a camera chooses the IMPLEMENTATION.
+* `setEnabled` is the switch for the function, and
 * it is the cap's own switch: a camera with firmware autotrack uses its native
 * provider for exactly the same method, so the operator never sees two
 * controls that can disagree.

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bx4zxM9N.js");
+const require_dist = require("../../dist-DRUzy1SF.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { K as backupCapability, Sn as storageOccupancyCapability, Sr as EventCategory, Yt as mayWriteToLocation, Zn as BaseAddon, m as DATABASE_SNAPSHOT_SUFFIX, mr as nodePin, xr as toNodeId } from "../../dist-Dp043AI0.mjs";
+import { Gt as mayWriteToLocation, K as backupCapability, Un as BaseAddon, m as DATABASE_SNAPSHOT_SUFFIX, mr as EventCategory, or as nodePin, pr as toNodeId, vn as storageOccupancyCapability } from "../../dist-CoG8lY6H.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bx4zxM9N.js");
+const require_dist = require("../../dist-DRUzy1SF.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { $t as motionCapability, Fn as buildFfmpegArgs, O as MOTION_CLOSE_AFTER_MS, Q as cameraGridLayoutCapability, Sr as EventCategory, Xn as errMsg, Xt as memoizePinnedFfmpeg, Yn as DeviceType, Zn as BaseAddon, _ as DERIVED_CAMERA_SILENCED_CAP_NAMES, dr as hydrateSchema, dt as declarationOwnerNodeId, i as BaseDevice, qn as DeviceFeature, sr as createEvent, v as DeclaredDevices, wn as streamCatalogCapability, yn as snapshotCapability } from "../../dist-Dp043AI0.mjs";
+import { $n as createEvent, Hn as errMsg, Kt as memoizePinnedFfmpeg, O as MOTION_CLOSE_AFTER_MS, Un as BaseAddon, Vn as DeviceType, Yt as motionCapability, Z as cameraGridLayoutCapability, _ as DERIVED_CAMERA_SILENCED_CAP_NAMES, bn as streamCatalogCapability, hn as snapshotCapability, i as BaseDevice, kn as buildFfmpegArgs, mr as EventCategory, rr as hydrateSchema, ut as declarationOwnerNodeId, v as DeclaredDevices, zn as DeviceFeature } from "../../dist-CoG8lY6H.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/composer/composer.addon.js

@@ -3,9 +3,28 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bx4zxM9N.js");
-const require_device_state_changed = require("../../device-state-changed-Bk7cvTnz.js");
-const require_composition_sources = require("../../composition-sources-2XxNEet3.js");
+const require_dist = require("../../dist-DRUzy1SF.js");
+const require_composition_sources = require("../../composition-sources-BXZorHDO.js");
+let zod = require("zod");
+//#region src/builtins/shared/device-state-changed.ts
+/** Structural narrowing helper for untrusted bus payloads. */
+function isRecord$2(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseDeviceStateChanged(data) {
+	if (!isRecord$2(data)) return null;
+	const deviceId = data["deviceId"];
+	const capName = data["capName"];
+	const slice = data["slice"];
+	if (typeof deviceId !== "number" || typeof capName !== "string") return null;
+	if (!isRecord$2(slice)) return null;
+	return {
+		deviceId,
+		capName,
+		slice
+	};
+}
+//#endregion
 //#region src/builtins/composer/composed-device.ts
 /**
 * A composed device: an ordinary `BaseDevice` whose caps are served by the
@@ -29,7 +48,7 @@ const require_composition_sources = require("../../composition-sources-2XxNEet3.
 * `deviceMeta`: a failed meta read builds a device as `generic`, and the
 * declaration is the authority for what this device is.
 */
-var COMPOSED_DEVICE_CONFIG_SCHEMA = require("zod").z.object({});
+var COMPOSED_DEVICE_CONFIG_SCHEMA = zod.z.object({});
 var ComposedDevice = class extends require_dist.BaseDevice {
 	features = [];
 	constructor(ctx, type, caps) {
@@ -3310,7 +3329,7 @@ function entriesOf(request) {
 	}))];
 }
 function valueAtPath(slice, path) {
-	return path.split(".").reduce((node, segment) => require_device_state_changed.isRecord(node) ? node[segment] : void 0, slice);
+	return path.split(".").reduce((node, segment) => isRecord$2(node) ? node[segment] : void 0, slice);
 }
 function onlineOf(slice) {
 	const online = slice["online"];
@@ -3975,12 +3994,12 @@ var SourceTracker = class {
 var DECLARED_INTEGRATION_NAME_UNUSED = "Blocks";
 /** The owner-only shadow payload is not in the typed catalog: narrowed at the boundary, like `device.state-changed`. */
 function parseNativeShadowChanged(data) {
-	if (!require_device_state_changed.isRecord(data)) return null;
+	if (!isRecord$2(data)) return null;
 	const deviceId = data["deviceId"];
 	const capName = data["capName"];
 	const native = data["native"];
 	if (typeof deviceId !== "number" || typeof capName !== "string") return null;
-	if (!require_device_state_changed.isRecord(native)) return null;
+	if (!isRecord$2(native)) return null;
 	return {
 		deviceId,
 		capName,
@@ -4127,7 +4146,7 @@ var ComposerAddon = class extends require_dist.BaseAddon {
 			newTimer: () => new NodeDeadlineTimer(() => Date.now())
 		});
 		this.subscribe({ category: require_dist.EventCategory.DeviceStateChanged }, (event) => {
-			const data = require_device_state_changed.parseDeviceStateChanged(event.data);
+			const data = parseDeviceStateChanged(event.data);
 			if (data !== null) this.composer?.onStateChanged(data).catch((err) => {
 				this.logEventFailure("device.state-changed", data.deviceId, err);
 			});

package/dist/builtins/composer/composer.addon.mjs

@@ -1,7 +1,25 @@
-import { Bn as compositionItemFieldPath, Hn as compositionSourceKey, In as cloneStatefulExpressionMemory, Kn as toExpressionValue, Ln as composedDeviceRef, Mn as COMPOSER_ADDON_ID, Rn as composedDeviceStableId, Sr as EventCategory, Tt as evaluateCompositionField, Un as createStatefulExpressionMemory, Vn as compositionSliceKey, Xn as errMsg, Y as buildCapabilityLookup, Yn as DeviceType, Zn as BaseAddon, c as COMPOSED_ITEM_FIXED_FIELDS, et as composerCapability, i as BaseDevice, in as planComposition, sr as createEvent, t as ALL_CAPABILITY_DEFINITIONS, tt as compositionFieldKey, v as DeclaredDevices, zn as compositionFeatureEnabled } from "../../dist-Dp043AI0.mjs";
-import { n as parseDeviceStateChanged, t as isRecord$2 } from "../../device-state-changed-DoBbkyEI.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-Wj2kWund.mjs";
+import { $ as composerCapability, $n as createEvent, An as cloneStatefulExpressionMemory, Fn as compositionSliceKey, Hn as errMsg, In as compositionSourceKey, Ln as createStatefulExpressionMemory, Mn as composedDeviceStableId, Nn as compositionFeatureEnabled, On as COMPOSER_ADDON_ID, Pn as compositionItemFieldPath, Rn as toExpressionValue, St as evaluateCompositionField, Un as BaseAddon, Vn as DeviceType, Y as buildCapabilityLookup, c as COMPOSED_ITEM_FIXED_FIELDS, en as planComposition, et as compositionFieldKey, i as BaseDevice, jn as composedDeviceRef, mr as EventCategory, t as ALL_CAPABILITY_DEFINITIONS, v as DeclaredDevices } from "../../dist-CoG8lY6H.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-aEEer5gE.mjs";
 import { z } from "zod";
+//#region src/builtins/shared/device-state-changed.ts
+/** Structural narrowing helper for untrusted bus payloads. */
+function isRecord$2(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseDeviceStateChanged(data) {
+	if (!isRecord$2(data)) return null;
+	const deviceId = data["deviceId"];
+	const capName = data["capName"];
+	const slice = data["slice"];
+	if (typeof deviceId !== "number" || typeof capName !== "string") return null;
+	if (!isRecord$2(slice)) return null;
+	return {
+		deviceId,
+		capName,
+		slice
+	};
+}
+//#endregion
 //#region src/builtins/composer/composed-device.ts
 /**
 * A composed device: an ordinary `BaseDevice` whose caps are served by the

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bx4zxM9N.js");
+const require_dist = require("../../dist-DRUzy1SF.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Gt as logDestinationCapability, Zn as BaseAddon } from "../../dist-Dp043AI0.mjs";
+import { Un as BaseAddon, Vt as logDestinationCapability } from "../../dist-CoG8lY6H.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bx4zxM9N.js");
-const require_composition_sources = require("../../composition-sources-2XxNEet3.js");
+const require_dist = require("../../dist-DRUzy1SF.js");
+const require_composition_sources = require("../../composition-sources-BXZorHDO.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,5 +1,5 @@
-import { Dn as validateComposition, Hn as compositionSourceKey, Ln as composedDeviceRef, Xn as errMsg, Y as buildCapabilityLookup, Zn as BaseAddon, at as coreBlockIdFromAddonId, d as CORE_BLOCK_ADDON_PREFIX, f as CoreBlockSchema, ht as describeComposableCaps, in as planComposition, it as coreBlockComposition, l as COMPOSER_RUNNER_ID, ln as replacedFieldKeys, nt as compositionSourceRefs, ot as coreBlockSourceKind, rt as coreBlockAddonId, st as coreBlocksCapability, t as ALL_CAPABILITY_DEFINITIONS, u as CORE_BLOCKS_ADDON_ID, v as DeclaredDevices } from "../../dist-Dp043AI0.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-Wj2kWund.mjs";
+import { Cn as validateComposition, Hn as errMsg, In as compositionSourceKey, Un as BaseAddon, Y as buildCapabilityLookup, an as replacedFieldKeys, at as coreBlockSourceKind, d as CORE_BLOCK_ADDON_PREFIX, en as planComposition, f as CoreBlockSchema, it as coreBlockIdFromAddonId, jn as composedDeviceRef, l as COMPOSER_RUNNER_ID, mt as describeComposableCaps, nt as coreBlockAddonId, ot as coreBlocksCapability, rt as coreBlockComposition, t as ALL_CAPABILITY_DEFINITIONS, tt as compositionSourceRefs, u as CORE_BLOCKS_ADDON_ID, v as DeclaredDevices } from "../../dist-CoG8lY6H.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-aEEer5gE.mjs";
 import { randomUUID } from "node:crypto";
 import { customizationBlockName } from "@camstack/types/node";
 import * as fs from "node:fs/promises";

package/dist/builtins/device-manager/device-bindings-store.d.ts

@@ -1,6 +1,7 @@
 import { AddonContext, CapabilityDefinition, DeviceBindingEntry, ICapabilityRegistry } from '@camstack/types';
 import { DeviceBindingsStore } from './device-meta-types.js';
 import { DeviceRow, DeviceRowStore } from './device-row-store.js';
+import { StaleWrapperActivations } from './stale-wrapper-activations.js';
 import { WriteLock } from './write-lock.js';
 /** Push-fed remote native-cap cache shape (numeric deviceId → capName → owner). */
 export type RemoteNativeCaps = Map<number, Map<string, {
@@ -40,6 +41,12 @@ export interface BindingsDeps {
      * whatever toggle happens to be in flight.
      */
     readonly withAddonStoreWriteLock: WriteLock;
+    /**
+     * The per-process memory of stored activations that name a RETIRED wrapper
+     * (a cap with no `kind: 'wrapper'` any more): each is ignored by step 1 and
+     * said once (task 17 review M1, `stale-wrapper-activations.ts`).
+     */
+    readonly staleWrapperActivations: StaleWrapperActivations;
 }
 /**
  * Wire the push-fed cross-process native-cap cache (`remoteNativeCaps`).

package/dist/builtins/device-manager/device-manager.addon.d.ts

@@ -122,6 +122,9 @@ export declare class DeviceManagerAddon extends BaseAddon {
      * one key range is the same defect one level up. Handed to both.
      */
     private readonly addonStoreWriteLock;
+    /** Stored activations of RETIRED wrappers, said once per process (task 17 review M1). */
+    private staleWrapperActivationsImpl;
+    private get staleWrapperActivations();
     /** Build the dependency context the extracted binding resolvers consume. */
     private get bindingsDeps();
     getBindings(input: {

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bx4zxM9N.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-DR2WMe5d.js");
+const require_dist = require("../../dist-DRUzy1SF.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-BY9H1I2b.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -1025,6 +1025,118 @@ function mergeAggregates(parts) {
 	return out;
 }
 //#endregion
+//#region src/builtins/device-manager/stale-wrapper-activations.ts
+/**
+* A stored wrapper activation that names a cap with NO wrapper any more.
+*
+* `deviceBindings[device][cap].wrapperAddonId` is the operator's choice of a
+* wrapper. When a wrapper is RETIRED (the `virtual-doorbell` on `doorbell`,
+* slice 6, D671), its rows outlive it: nothing deletes them (spec S1 — the
+* cluster is not written by code), and the admin UI no longer offers a toggle
+* for a cap that is not a wrapper cap. Routed as before, such a row shadows
+* the device's native (a composed doorbell) behind an addon that no longer
+* exists, keeps the cap advertised to HA / HAP / Alexa, and refuses every
+* call — without a line (task 17 review M1, D391).
+*
+* So the row is judged against the cap's DECLARED definition — static at boot,
+* never the live registry, because a wrapper runner that is still starting must
+* not read as stale. A string `wrapperAddonId` on a cap that is declared and is
+* not `kind: 'wrapper'` is treated as ABSENT: the cap resolves to its native
+* (or to nothing), exactly as if the row were not there. That loses no
+* doorbell: with a native, the native serves it; without one, the retired
+* addon could not serve it either. A cap this build does not declare is NOT
+* judged (unknown is not stale).
+*
+* It is said once per (device, cap) per process, by name, with the call that
+* clears the row. The whole store is checked once per process, read-only, so a
+* device nobody asks about is still named; a read that fails changes nothing,
+* says it could not check, and the next answered read checks instead (D49).
+* Generic on purpose: the next wrapper retirement gets the same backstop.
+*/
+var STALE_MESSAGE = "bindings: a stored wrapper activation names a cap with no wrapper — ignored, the cap resolves to its native";
+var UNCHECKED_MESSAGE = "bindings: could not read the stored wrapper activations — retired-wrapper rows not checked";
+var RECOVERY = "deviceManager.setWrapperActive({ deviceId, capName, wrapperAddonId, active: false })";
+/**
+* Every cap this build declares that is NOT a wrapper cap — built once from
+* the static table: `getAllBindings` is a scheduled hot path, and step 1 asks
+* this for every stored string activation (re-review N2).
+*/
+var DECLARED_NON_WRAPPER_CAPS = new Set(require_dist.ALL_CAPABILITY_DEFINITIONS.filter((cap) => cap.kind !== "wrapper").map((cap) => cap.name));
+/** True when `capName` is declared by this build and is NOT a wrapper cap. */
+function isDeclaredNonWrapperCap(capName) {
+	return DECLARED_NON_WRAPPER_CAPS.has(capName);
+}
+function isRecord$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** A persisted activation of a wrapper on a cap that has none (see module docblock). */
+function isRetiredWrapperActivation(capName, wrapperAddonId) {
+	return typeof wrapperAddonId === "string" && isDeclaredNonWrapperCap(capName);
+}
+/**
+* The per-process memory: which (device, cap) rows have been said, and whether
+* the whole store has been checked once. Owned by the device-manager instance.
+*/
+var StaleWrapperActivations = class {
+	logger;
+	said = /* @__PURE__ */ new Set();
+	checked = false;
+	constructor(logger) {
+		this.logger = logger;
+	}
+	/** Say one row, once per process. */
+	report(deviceId, capName, wrapperAddonId) {
+		const key = `${deviceId}\u0000${capName}`;
+		if (this.said.has(key)) return;
+		this.said.add(key);
+		this.logger.warn(STALE_MESSAGE, {
+			tags: { deviceId },
+			meta: {
+				capName,
+				wrapperAddonId,
+				recovery: RECOVERY
+			}
+		});
+	}
+	/**
+	* Check a store that was already READ (by a bindings pass) — once per
+	* process. It never throws: it runs inside every bindings pass and under the
+	* boot `void` promise, so a corrupt entry (a null device or row, a hand edit,
+	* a partial write) is skipped — a row it cannot read is not one it can judge
+	* (re-review N1).
+	*/
+	checkStore(store) {
+		if (this.checked) return;
+		this.checked = true;
+		const devices = store.deviceBindings;
+		if (!isRecord$1(devices)) return;
+		for (const [deviceKey, perDevice] of Object.entries(devices)) {
+			const deviceId = Number(deviceKey);
+			if (!Number.isInteger(deviceId) || !isRecord$1(perDevice)) continue;
+			for (const [capName, row] of Object.entries(perDevice)) {
+				const wrapperAddonId = isRecord$1(row) ? row["wrapperAddonId"] : void 0;
+				if (typeof wrapperAddonId === "string" && isDeclaredNonWrapperCap(capName)) this.report(deviceId, capName, wrapperAddonId);
+			}
+		}
+	}
+	/** Read the store (read-only) and check it; a failed read changes nothing. */
+	async checkOnce(read) {
+		if (this.checked) return;
+		let store;
+		try {
+			store = await read();
+		} catch (err) {
+			this.logger.warn(UNCHECKED_MESSAGE, { meta: { error: err instanceof Error ? err.message : String(err) } });
+			return;
+		}
+		try {
+			this.checkStore(store);
+		} catch (err) {
+			this.logger.warn(UNCHECKED_MESSAGE, { meta: { error: err instanceof Error ? err.message : String(err) } });
+		}
+	}
+};
+//#endregion
 //#region src/builtins/device-manager/device-bindings-store.ts
 /**
 * Wire the push-fed cross-process native-cap cache (`remoteNativeCaps`).
@@ -1265,6 +1377,7 @@ function collectionBindings(deps, deviceId, deviceType) {
 }
 async function getBindings(deps, input) {
 	const [row, store] = await Promise.all([deps.rows.get(input.deviceId), readBindingsStore(deps)]);
+	deps.staleWrapperActivations.checkStore(store);
 	return resolveBindingsForDevice(deps, input.deviceId, row, {
 		store,
 		ledgerNonEmpty: onceLedgerNonEmpty(deps)
@@ -1309,6 +1422,10 @@ async function resolveBindingsForDevice(deps, deviceId, row, pass) {
 	const resolveRemote = (capName) => deps.remoteNativeCaps.get(deviceId)?.get(capName) ?? resolveRemoteNativeCapFromRegistry(deps, capName, deviceId);
 	for (const [capName, { wrapperAddonId }] of Object.entries(perDevice)) {
 		if (wrapperAddonId === void 0) continue;
+		if (isRetiredWrapperActivation(capName, wrapperAddonId)) {
+			deps.staleWrapperActivations.report(deviceId, capName, wrapperAddonId);
+			continue;
+		}
 		const hubLocalNative = deps.capabilityRegistry?.getNativeAddonId(capName, deviceId) ?? null;
 		const remoteNative = resolveRemote(capName);
 		const nativeAddonId = hubLocalNative ?? remoteNative?.addonId ?? "";
@@ -1433,6 +1550,7 @@ async function resolveBindingsForDevice(deps, deviceId, row, pass) {
 async function getBindingsBatch(deps, input) {
 	const ids = [...new Set(input.deviceIds)];
 	const [rows, store] = await Promise.all([deps.rows.getMany(ids), readBindingsStore(deps)]);
+	deps.staleWrapperActivations.checkStore(store);
 	const pass = {
 		store,
 		ledgerNonEmpty: onceLedgerNonEmpty(deps)
@@ -1463,6 +1581,7 @@ async function getBindingsBatch(deps, input) {
 */
 async function getAllBindings(deps) {
 	const [fleet, store] = await Promise.all([deps.rows.listAll(), readBindingsStore(deps)]);
+	deps.staleWrapperActivations.checkStore(store);
 	const rowById = /* @__PURE__ */ new Map();
 	const ids = /* @__PURE__ */ new Set();
 	for (const row of fleet) {
@@ -9638,6 +9757,12 @@ var DeviceManagerAddon = class extends require_dist.BaseAddon {
 	* one key range is the same defect one level up. Handed to both.
 	*/
 	addonStoreWriteLock = createWriteLock();
+	/** Stored activations of RETIRED wrappers, said once per process (task 17 review M1). */
+	staleWrapperActivationsImpl = null;
+	get staleWrapperActivations() {
+		this.staleWrapperActivationsImpl ??= new StaleWrapperActivations(this.ctx.logger);
+		return this.staleWrapperActivationsImpl;
+	}
 	/** Build the dependency context the extracted binding resolvers consume. */
 	get bindingsDeps() {
 		const rows = this.deviceRows;
@@ -9647,7 +9772,8 @@ var DeviceManagerAddon = class extends require_dist.BaseAddon {
 			capabilityRegistry: this.capabilityRegistry,
 			remoteNativeCaps: this.remoteNativeCaps,
 			rows,
-			withAddonStoreWriteLock: this.addonStoreWriteLock
+			withAddonStoreWriteLock: this.addonStoreWriteLock,
+			staleWrapperActivations: this.staleWrapperActivations
 		};
 	}
 	async getBindings(input) {
@@ -9722,6 +9848,7 @@ var DeviceManagerAddon = class extends require_dist.BaseAddon {
 		const deviceRows = new DeviceRowStore(deviceRowBackendOf(settingsStoreApi), this.ctx.logger.child("rows"));
 		await deviceRows.declare();
 		this.deviceRows = deviceRows;
+		this.staleWrapperActivations.checkOnce(() => readBindingsStore(this.bindingsDeps));
 		try {
 			await require_retired_settings_keys.purgeRetiredSettingsRows(deviceRows.retiredRowStore(), this.ctx.logger.child("RetiredRows"));
 		} catch (err) {