@camstack/system 1.2.332 → 1.2.334

package/dist/{dist-CH3jfPMi.js → dist-Ex-rbzic.js}

@@ -3521,7 +3521,7 @@ function errMsg(err) {
 	return String(err);
 }
 //#endregion
-//#region ../types/dist/composition-43aqsZQj.mjs
+//#region ../types/dist/composition-D7ULvLdD.mjs
 var AUDIO_ENCODER_BY_CODEC = {
 	opus: "libopus",
 	aac: "aac",
@@ -3967,20 +3967,20 @@ function portable(target) {
 }
 portable("linux64"), portable("linuxarm64"), portable("macarm64"), portable("mac64");
 /**
-* LA tabella "quale booleano di questo tipo di device conta come ALTO", e il
-* valutatore puro del suo FRONTE.
+* THE table "which boolean of this device type counts as HIGH", and the
+* pure evaluator of its EDGE.
 *
-* UNA tabella per tutti quelli che chiedono "questo device è ALTO?": il
-* trigger `RecordingTriggers.sensorDeviceIds` del recorder, i marker dei
-* sensori della post-analysis, il bridge camera-sensors dell'orchestratore e
-* le sorgenti di un campanello composto (`doorbellFeatureSources`, D671).
-* Una seconda copia divergerebbe alla prima cap aggiunta, e il sintomo — "il
-* sensore fa suonare il campanello ma non registra" — è esattamente D62.
+* ONE table for everyone who asks "is this device HIGH?": the
+* recorder's `RecordingTriggers.sensorDeviceIds` trigger, the post-analysis
+* sensor markers, the orchestrator's camera-sensors bridge and
+* the sources of a composite doorbell (`doorbellFeatureSources`, D671).
+* A second copy would diverge at the first cap added, and the symptom — "the
+* sensor rings the doorbell but does not record" — is exactly D62.
 *
-* ⚠ NON è `DEVICE_STATE_READERS` (`catalogs/device-state-vocabulary.ts`), e le
-* due non vanno unificate: quella risponde a "qual è la PAROLA di stato per una
-* regola" (e include `presence`, `cover`, `alarm-panel`), questa a "qual è il
-* booleano il cui FRONTE conta". Vocabolari deliberatamente diversi.
+* ⚠ NOT `DEVICE_STATE_READERS` (`catalogs/device-state-vocabulary.ts`), and the
+* two must not be unified: that one answers "what is the state WORD for a
+* rule" (and includes `presence`, `cover`, `alarm-panel`), this one "which
+* boolean's EDGE counts". Deliberately different vocabularies.
 */
 /**
 * Known binary / switch source caps → the boolean slice field whose
@@ -6149,22 +6149,22 @@ var CLASS_MAP_MACRO_TARGETS = [
 	"package"
 ];
 /**
-* Le macro classi di PRIMO LIVELLO: quelle che un object detector emette e che
-* un operatore può selezionare.
+* The FIRST-LEVEL macro classes: those an object detector emits and that
+* an operator can select.
 *
-* Sono le tre offerte dallo step `object-detection`
+* They are the three offered by the `object-detection` step
 * (`addon-pipeline/src/detection-pipeline/registry/step-definitions.ts`,
-* `enabledMacroClasses`). `package` sta in {@link CLASS_MAP_MACRO_TARGETS} e in
-* `MACRO_LABELS` — è una macro vera — ma NON qui: appartiene allo step
-* `package-detection`, la cui abilitazione è guidata dalle zone, e offrire la
-* stessa parola due volte ha già fatto accendere a un operatore il proxy COCO
+* `enabledMacroClasses`). `package` is in {@link CLASS_MAP_MACRO_TARGETS} and in
+* `MACRO_LABELS` — it is a true macro — but NOT here: it belongs to the step
+* `package-detection`, whose enablement is driven by zones, and offering the
+* same word twice has already made an operator turn on the COCO proxy
 * (suitcase/backpack/handbag) lasciando spento il detector dedicato.
 *
-* UNA lista. Prima di oggi le stesse tre erano scritte a mano nell'offerta
-* dello step e una seconda volta come union `FirstLevelMacro`
-* (`types/detection.ts`); una terza copia per il trigger di registrazione
-* (`RecordingTriggers.objectClasses`) avrebbe reso invisibile la divergenza
-* successiva.
+* ONE list. Before today the same three were hand-written in the step's offer
+* and a second time as the union `FirstLevelMacro`
+* (`types/detection.ts`); a third copy for the recording trigger
+* (`RecordingTriggers.objectClasses`) would have made the later divergence
+* invisible.
 */
 var FIRST_LEVEL_MACRO_CLASSES = [
 	"person",
@@ -6229,17 +6229,17 @@ var RecordingStorageModeSchema = zod.z.enum([
 	"on-device-decision"
 ]);
 /**
-* Le macro classi che possono aprire una finestra di registrazione — le stesse
-* tre offerte dallo step `object-detection`, da UNA lista
+* The macro classes that can open a recording window — the same
+* three offered by the `object-detection` step, from ONE list
 * ({@link FIRST_LEVEL_MACRO_CLASSES}).
 */
 var RecordingObjectTriggerClassSchema = zod.z.enum(FIRST_LEVEL_MACRO_CLASSES);
 /**
-* True quando `values` non ripete un elemento.
+* True when `values` does not repeat an element.
 *
-* Un duplicato non è innocuo: ogni voce di `objectClasses` / `sensorDeviceIds`
-* diventa una SORGENTE in `bandTriggerSources`, e la stessa sorgente due volte
-* conterebbe due volte le sue finestre in `segmentMissedByMs`.
+* A duplicate is not harmless: every entry of `objectClasses` / `sensorDeviceIds`
+* becomes a SOURCE in `bandTriggerSources`, and the same source twice
+* would count its windows twice in `segmentMissedByMs`.
 */
 var noDuplicates = (values) => new Set(values).size === values.length;
 /** Which detectors trigger an `events`-mode band. */
@@ -6247,34 +6247,34 @@ var RecordingTriggersSchema = zod.z.object({
 	motion: zod.z.boolean().optional(),
 	audioThresholdDbfs: zod.z.number().optional(),
 	/**
-	* Le macro classi la cui detection apre una finestra. ASSENTE = la sorgente
-	* non è ascoltata; un array VUOTO è rifiutato, perché "banda events, trigger
-	* object acceso, nessuna classe" è la stessa forma "abilitata e non registra
-	* nulla, per sempre" contro cui è scritto `eventsBandCanEverDemand`.
+	* The macro classes whose detection opens a window. ABSENT = the source
+	* is not listened to; an EMPTY array is rejected, because "events band, object
+	* trigger on, no class" is the same shape "enabled and records
+	* nothing, forever" that `eventsBandCanEverDemand` is written against.
 	*
-	* Il segnale letto è GIÀ FILTRATO: solo detection `source: 'pipeline'`, cioè
-	* quelle che hanno attraversato `enabledMacroClasses`, i
-	* `minConfidence<Macro>` e il full-frame guard. L'AI a bordo camera
-	* (`source: 'onboard'`) non attraversa nessuno di quei gate e NON apre
-	* finestre — vedi `recorder/object-trigger.ts`.
+	* The signal read is ALREADY FILTERED: only `source: 'pipeline'` detections, i.e.
+	* those that went through `enabledMacroClasses`, the
+	* `minConfidence<Macro>` and the full-frame guard. The camera's onboard AI
+	* (`source: 'onboard'`) goes through none of those gates and does NOT open
+	* windows — see `recorder/object-trigger.ts`.
 	*/
 	objectClasses: zod.z.array(RecordingObjectTriggerClassSchema).min(1).refine(noDuplicates, { message: "objectClasses must not repeat a class" }).optional(),
 	/**
-	* I device LINKED il cui FRONTE ALTO apre una finestra. Assente = la sorgente
-	* non è ascoltata; un array vuoto è rifiutato per la stessa ragione di
+	* The LINKED devices whose RISING EDGE opens a window. Absent = the source
+	* is not listened to; an empty array is rejected for the same reason as
 	* `objectClasses`.
 	*
-	* Sono id di device SORGENTE, non camere: la banda li nomina, quindi il
-	* percorso caldo (`DeviceStateChanged`, a ritmo di bus su tutta la flotta)
-	* non fa RPC. L'OFFERTA da cui l'operatore li sceglie è un'altra domanda, e
-	* si risolve con `deviceManager.getLinkedDevices` + `getBindingsBatch` per
-	* device (D12) — mai un elenco globale di cap.
+	* These are SOURCE device ids, not cameras: the band names them, so the
+	* hot path (`DeviceStateChanged`, at bus rate across the whole fleet)
+	* does no RPC. The OFFER from which the operator picks them is another question, and
+	* is resolved with `deviceManager.getLinkedDevices` + `getBindingsBatch` per
+	* device (D12) — never a global list of caps.
 	*
-	* Cosa vuol dire "alto" dipende dal TIPO di device e non è deciso qui:
-	* `SOURCE_CAP_ACTIVE_FIELD` (`catalogs/sensor-active-state.ts`) è LA tabella,
-	* la stessa del campanello composto (D671). Ed è il FRONTE, non
-	* il livello: un contatto trovato già aperto al riavvio del runner non fa
-	* registrare.
+	* What "high" means depends on the device TYPE and is not decided here:
+	* `SOURCE_CAP_ACTIVE_FIELD` (`catalogs/sensor-active-state.ts`) is THE table,
+	* the same one as the composite doorbell (D671). And it is the EDGE, not
+	* the level: a contact found already open at runner restart does not
+	* record.
 	*/
 	sensorDeviceIds: zod.z.array(zod.z.number().int().positive()).min(1).max(16).refine(noDuplicates, { message: "sensorDeviceIds must not repeat a device" }).optional()
 });
@@ -7545,7 +7545,7 @@ var DecoderSessionConfigSchema = zod.z.object({
 * - **VALUE** — at which level, for which scope, until when. That stays ONE
 *   thing: the logging settings document on the `system` cap. Two authorities
 *   over the values is the exact defect
-*   `docs/design/plans/2026-08-26-logging-per-componente.md` was written to
+*   `docs/design/plans/2026-08-26-per-component-logging.md` was written to
 *   remove; re-introducing it from the cure side would be grotesque.
 *
 * Nothing in this file reads a clock, an env var or a store. The registry is
@@ -13660,7 +13660,7 @@ var dataStoreProviderCapability = {
 			*
 			* ⚠ An earlier version of this comment blamed Zod stripping, and that
 			* was wrong — corrected 2026-08-26 after the hop map
-			* (`docs/design/2026-08-26-mappa-hop-argomenti.md`) traced the path.
+			* (`docs/design/2026-08-26-topic-hop-map.md`) traced the path.
 			* There is **no Zod parse at all** between the door and the engine: the
 			* dispatcher forwards the payload verbatim and UDS carries it whole. A
 			* field declared here reaches `SqliteSettingsBackend` either way.
@@ -14746,7 +14746,17 @@ function siteZoneKey(label) {
 var ProviderStatusSchema = zod.z.object({
 	connected: zod.z.boolean(),
 	deviceCount: zod.z.number(),
-	error: zod.z.string().optional()
+	error: zod.z.string().optional(),
+	/**
+	* `'orchestrator'`: this provider writes NO camera's `motion` runtime slice
+	* — the orchestrator is its only writer (D696). Set by `BaseDeviceProvider`,
+	* which every provider bundles, so only a provider BUILT from D696-amended
+	* code says it. ABSENT means an older provider that may still write it (raw
+	* VMD writes, a boot seed), and the orchestrator's provider gate keeps that
+	* provider's cameras unwritten (`camera-sensors/motion-slice-provider-gate.ts`)
+	* — the provider twin of the runner's `getLocalLoad().motionSliceWriter`.
+	*/
+	motionSliceWriter: zod.z.literal("orchestrator").optional()
 });
 zod.z.object({
 	externalId: zod.z.string(),
@@ -15937,7 +15947,7 @@ var deviceManagerCapability = {
 		* sources could be switched off without switching off the rest (D556, then
 		* D555's re-key by source). The operator removed the whole idea the same
 		* day: *"tutti i providers funzionano sempre, non serve
-		* disattivarli/attivarli … loro vivono lì"* (D557 amended, third). A
+		* disattivarli/attivarli … loro vivono lì"* [all the providers always work, there is no need to deactivate/activate them … they live there] (D557 amended, third). A
 		* collection cap's providers are a DERIVED set — every addon that provides
 		* the cap for this device type, computed on every read and persisted
 		* nowhere — so there is nothing here to activate, and a verb that accepted
@@ -16789,7 +16799,7 @@ var embeddingEncoderCapability = {
 * per-device window, `KeyFrameCaptureLog`, `bumpCropMetric`. Every one of them
 * ends in a log line, and a log line is the thing the operator asked to stop
 * needing: *"possiamo armare questi errori intanto? Così al prossimo giro
-* ricontrolliamo tutti questi punti"*. Reading them meant grepping Loki and
+* ricontrolliamo tutti questi punti"* [can we instrument these errors in the meantime? That way next round we recheck all these points]. Reading them meant grepping Loki and
 * hand-correlating timestamps, which is how a 22% thumbnail gap and a 3-hour
 * media blackout were both diagnosed. The counters stay; this is where they can
 * be READ.
@@ -23060,14 +23070,14 @@ var TrackSchema = zod.z.object({
 	* `derive-returned-null tile=standin`,
 	* `native-tile tile=native no-key-frame-at-close`, …) written at close and
 	* CLEARED by the late-keyFrame upgrade when a native tile lands after all.
-	* The operator-facing answer to "perché manca l'immagine?" on a track whose
+	* The operator-facing answer to "perché manca l'immagine?" [why is the image missing?] on a track whose
 	* tile is a face/plate stand-in, a raster crop, or an icon.
 	*
 	* **`no-key-frame-at-close` (D400).** The line used to be written ONLY when
 	* the TILE ranked below native, so a track whose thumbnail landed natively
 	* while its key frame missed carried no reason at all — three of the four
 	* `MISSING_KEYFRAME` tracks in the 2026-09-07 operator audit were exactly
-	* that shape, and their "niente ultimo" had no cause anywhere on the row.
+	* that shape, and their "niente ultimo" [no last frame] had no cause anywhere on the row.
 	* The key frame is the head of a cascade (`keyFrame ⇒ keyFrameSmall ⇒ the
 	* lastFrame copy source`), so its absence is now on this line whatever the
 	* tile ended up being.
@@ -23154,7 +23164,7 @@ var MotionEventSchema = zod.z.object({
 	/**
 	* Ms offsets from `timestamp` (the episode's own first rising edge, so the
 	* first entry is always `0`) of every genuine off→on transition the
-	* episode saw — "ogni evento on si deve salvare" (D475). NOT one entry per
+	* episode saw — "ogni evento on si deve salvare" [every ON event must be saved] (D475). NOT one entry per
 	* push: a firmware source that keepalives at ~1 Hz for the whole burst
 	* (Reolink, Hikvision) produces exactly one edge; a source that reports an
 	* explicit `false` mid-episode and then resumes before the quiet window
@@ -30483,7 +30493,7 @@ var ClipPlaybackSchema = zod.z.object({
 * **One authorised yes is one wake.** `next-natural` — take the clip the next
 * time the camera is awake for its own reasons — is deliberately not a member:
 * it was proposed, it is free on the battery, and the operator declined it on
-* 2026-09-20 (*"Quando un export viene richiesto si sveglia la camera."*,
+* 2026-09-20 (*"Quando un export viene richiesto si sveglia la camera."* [When an export is requested the camera wakes up],
 * D558 "Considered and not taken").
 */
 var ClipWakeSchema = zod.z.enum(["authorised"]);
@@ -30728,7 +30738,7 @@ var videoclipsCapability = {
 	* **It is a SECTION of the Recording tab, at the end of it — not a tab of
 	* its own.** It shipped as a `clips` top-tab and the operator rejected the
 	* placement: *"utilizzerei la stessa tab recordings, lì abbiamo già tutto il
-	* necessario, una nuova sezione alla fine per le clips"*. The Recording tab
+	* necessario, una nuova sezione alla fine per le clips"* [I would use the same recordings tab, there we already have everything necessary, a new section at the end for the clips]. The Recording tab
 	* already holds the recorder's panel, the schedule bands and the unified
 	* retention policy; footage the camera itself holds is the same question,
 	* asked of a different store. `order: 100` puts it after all of them with
@@ -30789,7 +30799,7 @@ var videoclipsCapability = {
 			* It replaced `sources?: string[]`, a VIEW filter over source ids that
 			* assumed the answer was a fan-out over everything a camera has. The
 			* operator settled otherwise on 2026-09-20 — *"l'utilizzatore è uno
-			* solo"* — so the list is asked of one provider at a time and there is
+			* solo"* [there is only one user] — so the list is asked of one provider at a time and there is
 			* nothing to filter out of it.
 			*/
 			provider: zod.z.string().min(1)
@@ -36456,7 +36466,7 @@ authKey: zod.z.string().optional() }), zod.z.object({
 */
 /**
 * How long after a camera's last rising edge `pipeline-analytics` closes the
-* motion EPISODE row it kept open for it (D475) — "il delay della cap", in
+* motion EPISODE row it kept open for it (D475) — "il delay della cap" [the cap's delay], in
 * the operator's words. One authority for the whole system: the writer of a
 * `Camera` device's slice (the orchestrator, D696) writes this SAME constant
 * in `autoClearAfterMs` while `detected: true` (never a camera's own clock —
@@ -40079,7 +40089,7 @@ var ReadGopBytesResultSchema = zod.z.object({
 /**
 * A time WINDOW of one finalized segment, cut by byte range — the multi-GOP
 * twin of {@link ReadGopBytesResultSchema}'s single instant. Built for the
-* replay clip's `recording` source (`docs/design/plans/2026-08-26-replay-clip-su-pipeline.md`):
+* replay clip's `recording` source (`docs/design/plans/2026-08-26-clip-replay-on-pipeline.md`):
 * a replay needs several seconds of native pixels, not one frame.
 *
 * `ok.data` is standalone-demuxable, same as a GOP read. `ok.reachesRequestedEnd`
@@ -43031,7 +43041,7 @@ var systemCapability = {
 		*
 		* This is the surface the operator asked for on 2026-08-28 (*"possiamo
 		* armare questi errori intanto? Così al prossimo giro ricontrolliamo tutti
-		* questi punti"*). Before it, four live failure modes could only be counted
+		* questi punti"* [can we instrument these errors in the meantime? That way next round we recheck all these points]). Before it, four live failure modes could only be counted
 		* by grepping Loki and hand-correlating timestamps, which is exactly how a
 		* 22% thumbnail gap and a 3-hour media blackout were diagnosed — twice.
 		*
@@ -57853,7 +57863,7 @@ var PreviewTextField = zod.z.string().max(200);
 * Whether the notification's preview is a STILL or a short animation.
 *
 * The operator's ask, verbatim: *"inviato come gif o video (come per le altre
-* rule)"* — the other rules already offer an animated preview, and a ten-hour
+* rule)"* [sent as a gif or video (as for the other rules)] — the other rules already offer an animated preview, and a ten-hour
 * night reads better as three seconds of motion than as one frame of it. Both
 * modes get the SAME treatment (blurred frame, large centred title); `'gif'`
 * simply applies it to a dozen frames sampled across the render and assembles

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-CH3jfPMi.js");
+const require_dist = require("./dist-Ex-rbzic.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_builtins_composer_composer_addon = require("./builtins/composer/composer.addon.js");
@@ -29,7 +29,7 @@ require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_event_loop_stall_monitor = require("./event-loop-stall-monitor-ey4mbofz.js");
 const require_tls$1 = require("./tls-D_wUeOTD.js");
-const require_child_cap_dispatch = require("./child-cap-dispatch-93MfsaZL.js");
+const require_child_cap_dispatch = require("./child-cap-dispatch-Cy56Y66E.js");
 const require_resource_monitor = require("./resource-monitor-DzNn_IZK.js");
 const require_custom_action_registry = require("./custom-action-registry-acBY3mHA.js");
 let zod = require("zod");
@@ -735,7 +735,7 @@ var LogRingBuffer = class {
 * the hub forwarder). It does NOT gate the in-memory ring buffer: the ring
 * keeps everything it has room for and prunes by level only under pressure,
 * which the plan
-* (`docs/design/plans/2026-08-26-logging-per-componente.md`) settles as the
+* (`docs/design/plans/2026-08-26-per-component-logging.md`) settles as the
 * better policy — an admission level for the ring would make the log viewer go
 * blind exactly when an operator raises the level to quieten a disk.
 *
@@ -6989,7 +6989,7 @@ var CapabilityRegistry = class CapabilityRegistry {
 	*
 	* Filters by activation (the manifest's autoActivate) and by nothing else.
 	* The per-device DENY set that used to filter here is gone with the switch
-	* it projected (2026-09-20): *"tutti i providers funzionano sempre"*. WHICH
+	* it projected (2026-09-20): *"tutti i providers funzionano sempre"* [all the providers always work]. WHICH
 	* providers a device has is now answered by its BINDINGS
 	* (`device-bindings-store.ts` step 0), which is a different question from
 	* which of them are registered and running — this one.

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { $n as createEvent, At as isArrayOutputSchema, C as LOG_LEVEL_RANK, E as METHOD_ACCESS_MAP, Ft as kebabToCamel, Gn as DEVICE_SETTINGS_CONTRIBUTION_METHODS, H as addonSettingsCapability, Hn as errMsg$1, Ht as logLevelAtMost, Jn as ReadinessTimeoutError, Kn as DEVICE_STATUS_METHOD, Nt as isObjectInput, Pt as isVoidInput, Qn as asString$1, Qt as objectInputDeclaresRequiredDeviceId, Rt as lifecycleJobSchema, Tt as extractNestedAddonId, Ut as looseSchema, Wn as DATAPLANE_SECRET_HEADER$1, Xn as asJsonObject$1, Zn as asNumber, Zt as objectInputDeclaresAddonId, cn as resolveMethodAuth, cr as parseJsonUnknown, dn as scopesAllowDeviceCap, dr as scopeKey, er as emitDownForOwnedCaps, j as RUNTIME_DEFAULTS, jt as isCollectionArrayMethod, lr as readinessKey, mr as EventCategory$1, nn as procedureAuthKey, nr as expandCapMethods, qn as ReadinessRegistry, sr as parseJsonObject, t as ALL_CAPABILITY_DEFINITIONS, un as scopesAllowAddon, ur as resolveCapMount } from "./dist-BEPK2RUO.mjs";
+import { $n as createEvent, At as isArrayOutputSchema, C as LOG_LEVEL_RANK, E as METHOD_ACCESS_MAP, Ft as kebabToCamel, Gn as DEVICE_SETTINGS_CONTRIBUTION_METHODS, H as addonSettingsCapability, Hn as errMsg$1, Ht as logLevelAtMost, Jn as ReadinessTimeoutError, Kn as DEVICE_STATUS_METHOD, Nt as isObjectInput, Pt as isVoidInput, Qn as asString$1, Qt as objectInputDeclaresRequiredDeviceId, Rt as lifecycleJobSchema, Tt as extractNestedAddonId, Ut as looseSchema, Wn as DATAPLANE_SECRET_HEADER$1, Xn as asJsonObject$1, Zn as asNumber, Zt as objectInputDeclaresAddonId, cn as resolveMethodAuth, cr as parseJsonUnknown, dn as scopesAllowDeviceCap, dr as scopeKey, er as emitDownForOwnedCaps, j as RUNTIME_DEFAULTS, jt as isCollectionArrayMethod, lr as readinessKey, mr as EventCategory$1, nn as procedureAuthKey, nr as expandCapMethods, qn as ReadinessRegistry, sr as parseJsonObject, t as ALL_CAPABILITY_DEFINITIONS, un as scopesAllowAddon, ur as resolveCapMount } from "./dist-COj36Fwm.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { ComposerAddon } from "./builtins/composer/composer.addon.mjs";
@@ -28,7 +28,7 @@ import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { _ as ensureModel, a as createFileDataPlaneHandler, c as parseRangeHeader, d as ModelDownloadService, g as downloadModel, h as downloadFile, i as startEventLoopStallMonitor, l as parseTokenizedUrl, m as deleteModelFromDisk, n as STALL_TICK_MS, o as contentTypeFor, p as collectModelFiles, r as attributeStall, s as createAuthenticatedFileServer, t as STALL_REPORT_MS, u as resolveFilePath, v as fetchJson, x as isModelDownloaded, y as getModelFilePath } from "./event-loop-stall-monitor-EXjzIxDz.mjs";
 import { C as registerLanHttpHandler, S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, b as bindPendingLanHttp, c as loadTlsCert, d as collectCertIdentity, f as CA_VALIDITY_DAYS, g as evaluateExistingCert, h as SERVER_AUTH_OID, i as writeExtraSans, l as reissueTlsLeaf, m as MAX_LEAF_VALIDITY_DAYS, n as readTlsAccessStatus, o as validateUploadedTls, p as LEAF_RENEWAL_WINDOW_DAYS, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, u as CA_COMMON_NAME, v as allFamiliesListenHost, x as closeLanHttp, y as applyLanHttp } from "./tls-IM-v7JV4.mjs";
-import { $ as classifyCapRoute, $n as EMPTY_CAP_ACTION_READING, $t as RUNNER_RSS_BUDGET_ENV, A as resolveHwAccel, An as OUTBOUND_QUEUE_SUSTAIN_MS, At as DeviceRegistry, B as udsChildLogToWorkerEntry, Bn as createSocketPlaneMeter, Bt as hostNodeIdOf, C as getBrokerEventBus, Cn as HEAP_SPACE_REPORT_MIN_MB, Ct as capActionName, D as subscribePassthrough, Dn as readHeapSpaces, Dt as parseCapAction, E as setNodeEventInterest, En as heapSpaceField, Et as capServiceName, F as ipcParentLink, Fn as createMeshQueueReader, Ft as resolveAddonClass, G as UDS_NO_ROUTE_PREFIX, Gn as EMPTY_SOCKET_DIRECTION, Gt as HEAP_WATCH_INTERVAL_MS, H as createUdsLoggerWithControl, Hn as diffSocketPlane, Ht as HEAP_RECLAIM_MIN_INTERVAL_MS, I as localProviderLink, In as formatMeshQueue, It as buildNpmChildEnv, J as deviceOfGetStatus, Jn as sampleSocketDirection, Jt as HUB_MAIN_RSS_BUDGET_MB, K as GET_STATUS_METHOD, Kn as createSocketDirectionCounters, Kt as HEAP_WATCH_WARN_RATIO, L as createParentUnownedCallHandler, Ln as EMPTY_SOCKET_PLANE_BASELINE, Lt as resolveNpmInvocation, M as brokerTransportLink, Mn as createOutboundQueueGate, Mt as CapabilityUnavailableError, N as buildLinkChain, Nn as formatOutboundQueueVerdict, Nt as copyBundledNativeModules, O as AddonDepsManager, On as selectReportedSpaces, Ot as deserializeTypedArrays, P as deviceCapResolverLink, Pn as MESH_QUEUE_TOP_N, Pt as installManifestNativeDeps, Q as CapRouteError, Qn as CAP_ACTION_UNLABELLED, Qt as RUNNER_HEAP_WATCH_INTERVAL_MS, R as createUdsEventBridge, Rn as SOCKET_PLANE_TOP_N, Rt as runNpm, S as clusterEventTopic, Sn as DECISIVE_HEAP_SPACES, St as NATIVE_PROVIDER_SERVICE_INFIX, T as registerEventBusService, Tn as formatHeapSpaces, Tt as capBareAction, U as LocalChildClient, Un as formatSocketPlane, Ut as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, V as createUdsLogger, Vn as createSocketPlaneReader, Vt as createAddonDataPlaneFacility, W as LocalChildRegistry, Wn as readSocketQueues, Wt as HEAP_RECLAIM_TRIGGER_MB, X as AGENT_CAP_FWD_SERVICE, Xn as socketDirectionMessages, Xt as RSS_BUDGET_REANNOUNCE_MIN_MS, Y as AGENT_CAP_FWD_ACTION, Yn as socketDirectionBytes, Yt as HUB_RSS_BUDGET_ENV, Z as CapRouteResolver, Zn as CAP_ACTION_OVERFLOW_LABEL, Zt as RSS_BUDGET_RELEASE_RATIO, _ as getWorkerDeviceRegistry, _n as ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, a as reapProcessGroup, an as describeRss, ar as createEventPlaneMeter, at as getCapUsageRegistry, b as setHubConnected, bn as formatArrayBufferCensus, bt as createAddonService, c as runnerOwnsProcessGroup, cn as parseRssBudgetMb, cr as formatEventPlane, ct as UdsLocalTransportServer, d as summarizeMembers, dn as startHeapWatch, dt as localEndpointPath, en as ZERO_LOOP_DELAY, er as MAX_CAP_ACTIONS_PER_PEER, et as callWithServiceDiscovery, f as installManifestSystemDeps, fn as startRunnerHeapWatch, ft as FrameDecoder, g as createUdsAddonContext, gn as ARRAY_BUFFER_CENSUS_THRESHOLD_MB, h as createAddonContext, hn as ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ht as createBrokerDeviceManagerApi, in as createV8Reclaimer, ir as EVENT_PLANE_TOP_N, it as __resetCapUsageRegistryForTests, j as brokerCallForCap, jn as OUTBOUND_QUEUE_THRESHOLD_BYTES, jt as CapabilityHandle, k as createKernelHwAccel, kn as OUTBOUND_QUEUE_COOLDOWN_MS, kt as serializeTypedArrays, l as signalAllRunnerGroups, ln as reclaimIntervalMs, lt as SocketChannel, m as adaptBrokerToCluster, mn as ARRAY_BUFFER_CENSUS_COOLDOWN_MS, mt as buildNativeCapProxy, nn as createDeferredHeapWatchSink, nr as createCapActionCensus, nt as CapUsageRegistry, o as registerRunnerGroup, on as hubMainRssBudget, or as createEventPlaneReader, ot as createLocalTransport, p as installManifestPythonDeps, pn as strandedMb, pt as encodeFrame, q as answerClaimedGetStatus, qn as recordSocketFrame, qt as HUB_MAIN_HEAP_WATCH_LABEL, r as defaultProcessGroupOps, rn as createLoopDelayMeter, rr as diffCapActionCensus, rt as PARENT_ROUTED_PROVIDER_ADDON_ID, s as releaseRunnerGroup, sn as nextRssBudgetState, sr as diffEventPlane, st as UdsLocalTransportClient, t as CAP_METHOD_NOT_IMPLEMENTED, tn as buildHeapSample, tr as capActionLabel, tt as readMoleculerFanoutMode, un as shouldReclaim, ut as PeerAnsweredError, v as getOrInitReadinessRegistry, vn as createArrayBufferCensusGate, vt as mountNativeCapService, w as getMoleculerEventStats, wn as emitHeapDiagnosticReport, wt as capActionSuffix, x as EVENT_TOPIC_PREFIX, xn as isArrayBufferCensusReport, xt as validateProviderRegistrations, y as getOrInitReadinessRegistryForClient, yn as createInspectorArrayBufferCensus, z as createUdsEventBus, zn as SOCKET_QUEUE_TOP_N, zt as createAddonPeerBytesFacility } from "./child-cap-dispatch-kLIiU1CG.mjs";
+import { $ as classifyCapRoute, $n as EMPTY_CAP_ACTION_READING, $t as RUNNER_RSS_BUDGET_ENV, A as resolveHwAccel, An as OUTBOUND_QUEUE_SUSTAIN_MS, At as DeviceRegistry, B as udsChildLogToWorkerEntry, Bn as createSocketPlaneMeter, Bt as hostNodeIdOf, C as getBrokerEventBus, Cn as HEAP_SPACE_REPORT_MIN_MB, Ct as capActionName, D as subscribePassthrough, Dn as readHeapSpaces, Dt as parseCapAction, E as setNodeEventInterest, En as heapSpaceField, Et as capServiceName, F as ipcParentLink, Fn as createMeshQueueReader, Ft as resolveAddonClass, G as UDS_NO_ROUTE_PREFIX, Gn as EMPTY_SOCKET_DIRECTION, Gt as HEAP_WATCH_INTERVAL_MS, H as createUdsLoggerWithControl, Hn as diffSocketPlane, Ht as HEAP_RECLAIM_MIN_INTERVAL_MS, I as localProviderLink, In as formatMeshQueue, It as buildNpmChildEnv, J as deviceOfGetStatus, Jn as sampleSocketDirection, Jt as HUB_MAIN_RSS_BUDGET_MB, K as GET_STATUS_METHOD, Kn as createSocketDirectionCounters, Kt as HEAP_WATCH_WARN_RATIO, L as createParentUnownedCallHandler, Ln as EMPTY_SOCKET_PLANE_BASELINE, Lt as resolveNpmInvocation, M as brokerTransportLink, Mn as createOutboundQueueGate, Mt as CapabilityUnavailableError, N as buildLinkChain, Nn as formatOutboundQueueVerdict, Nt as copyBundledNativeModules, O as AddonDepsManager, On as selectReportedSpaces, Ot as deserializeTypedArrays, P as deviceCapResolverLink, Pn as MESH_QUEUE_TOP_N, Pt as installManifestNativeDeps, Q as CapRouteError, Qn as CAP_ACTION_UNLABELLED, Qt as RUNNER_HEAP_WATCH_INTERVAL_MS, R as createUdsEventBridge, Rn as SOCKET_PLANE_TOP_N, Rt as runNpm, S as clusterEventTopic, Sn as DECISIVE_HEAP_SPACES, St as NATIVE_PROVIDER_SERVICE_INFIX, T as registerEventBusService, Tn as formatHeapSpaces, Tt as capBareAction, U as LocalChildClient, Un as formatSocketPlane, Ut as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, V as createUdsLogger, Vn as createSocketPlaneReader, Vt as createAddonDataPlaneFacility, W as LocalChildRegistry, Wn as readSocketQueues, Wt as HEAP_RECLAIM_TRIGGER_MB, X as AGENT_CAP_FWD_SERVICE, Xn as socketDirectionMessages, Xt as RSS_BUDGET_REANNOUNCE_MIN_MS, Y as AGENT_CAP_FWD_ACTION, Yn as socketDirectionBytes, Yt as HUB_RSS_BUDGET_ENV, Z as CapRouteResolver, Zn as CAP_ACTION_OVERFLOW_LABEL, Zt as RSS_BUDGET_RELEASE_RATIO, _ as getWorkerDeviceRegistry, _n as ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, a as reapProcessGroup, an as describeRss, ar as createEventPlaneMeter, at as getCapUsageRegistry, b as setHubConnected, bn as formatArrayBufferCensus, bt as createAddonService, c as runnerOwnsProcessGroup, cn as parseRssBudgetMb, cr as formatEventPlane, ct as UdsLocalTransportServer, d as summarizeMembers, dn as startHeapWatch, dt as localEndpointPath, en as ZERO_LOOP_DELAY, er as MAX_CAP_ACTIONS_PER_PEER, et as callWithServiceDiscovery, f as installManifestSystemDeps, fn as startRunnerHeapWatch, ft as FrameDecoder, g as createUdsAddonContext, gn as ARRAY_BUFFER_CENSUS_THRESHOLD_MB, h as createAddonContext, hn as ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ht as createBrokerDeviceManagerApi, in as createV8Reclaimer, ir as EVENT_PLANE_TOP_N, it as __resetCapUsageRegistryForTests, j as brokerCallForCap, jn as OUTBOUND_QUEUE_THRESHOLD_BYTES, jt as CapabilityHandle, k as createKernelHwAccel, kn as OUTBOUND_QUEUE_COOLDOWN_MS, kt as serializeTypedArrays, l as signalAllRunnerGroups, ln as reclaimIntervalMs, lt as SocketChannel, m as adaptBrokerToCluster, mn as ARRAY_BUFFER_CENSUS_COOLDOWN_MS, mt as buildNativeCapProxy, nn as createDeferredHeapWatchSink, nr as createCapActionCensus, nt as CapUsageRegistry, o as registerRunnerGroup, on as hubMainRssBudget, or as createEventPlaneReader, ot as createLocalTransport, p as installManifestPythonDeps, pn as strandedMb, pt as encodeFrame, q as answerClaimedGetStatus, qn as recordSocketFrame, qt as HUB_MAIN_HEAP_WATCH_LABEL, r as defaultProcessGroupOps, rn as createLoopDelayMeter, rr as diffCapActionCensus, rt as PARENT_ROUTED_PROVIDER_ADDON_ID, s as releaseRunnerGroup, sn as nextRssBudgetState, sr as diffEventPlane, st as UdsLocalTransportClient, t as CAP_METHOD_NOT_IMPLEMENTED, tn as buildHeapSample, tr as capActionLabel, tt as readMoleculerFanoutMode, un as shouldReclaim, ut as PeerAnsweredError, v as getOrInitReadinessRegistry, vn as createArrayBufferCensusGate, vt as mountNativeCapService, w as getMoleculerEventStats, wn as emitHeapDiagnosticReport, wt as capActionSuffix, x as EVENT_TOPIC_PREFIX, xn as isArrayBufferCensusReport, xt as validateProviderRegistrations, y as getOrInitReadinessRegistryForClient, yn as createInspectorArrayBufferCensus, z as createUdsEventBus, zn as SOCKET_QUEUE_TOP_N, zt as createAddonPeerBytesFacility } from "./child-cap-dispatch-Dmo2YJFe.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-B1v6E07R.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-B4Cf4O_X.mjs";
 import { z } from "zod";
@@ -728,7 +728,7 @@ var LogRingBuffer = class {
 * the hub forwarder). It does NOT gate the in-memory ring buffer: the ring
 * keeps everything it has room for and prunes by level only under pressure,
 * which the plan
-* (`docs/design/plans/2026-08-26-logging-per-componente.md`) settles as the
+* (`docs/design/plans/2026-08-26-per-component-logging.md`) settles as the
 * better policy — an admission level for the ring would make the log viewer go
 * blind exactly when an operator raises the level to quieten a disk.
 *
@@ -6982,7 +6982,7 @@ var CapabilityRegistry = class CapabilityRegistry {
 	*
 	* Filters by activation (the manifest's autoActivate) and by nothing else.
 	* The per-device DENY set that used to filter here is gone with the switch
-	* it projected (2026-09-20): *"tutti i providers funzionano sempre"*. WHICH
+	* it projected (2026-09-20): *"tutti i providers funzionano sempre"* [all the providers always work]. WHICH
 	* providers a device has is now answered by its BINDINGS
 	* (`device-bindings-store.ts` step 0), which is a different question from
 	* which of them are registered and running — this one.

package/dist/kernel/capability-registry.d.ts

@@ -556,7 +556,7 @@ export declare class CapabilityRegistry {
      *
      * Filters by activation (the manifest's autoActivate) and by nothing else.
      * The per-device DENY set that used to filter here is gone with the switch
-     * it projected (2026-09-20): *"tutti i providers funzionano sempre"*. WHICH
+     * it projected (2026-09-20): *"tutti i providers funzionano sempre"* [all the providers always work]. WHICH
      * providers a device has is now answered by its BINDINGS
      * (`device-bindings-store.ts` step 0), which is a different question from
      * which of them are registered and running — this one.

package/dist/kernel/transport/local-child-registry.d.ts

@@ -98,8 +98,30 @@ export interface LocalChildRegistryLogger {
  * The optional `logger` receives a single deduplicated INFO line the first time
  * each capName is routed child→sibling over UDS.
  */
+/**
+ * Where the registry says that a runner came up or went away — the parent's
+ * kernel bus. A forked runner has no Moleculer broker (Phase F), so
+ * `$node.connected` never fires for it and the Moleculer-side emitter
+ * (`agent-registry.service.ts`) never sees one: this registry is the only place
+ * that knows (fix round 1 of the 2026-10-02 motion-release-order work, C1).
+ */
+export interface ChildLifecycleEvents {
+    /** This parent's node id (`'hub'`, or the bare agent id): the `<node>` of `<node>/<childId>`. */
+    readonly parentNodeId: () => string;
+    /** The parent's kernel bus `emit`. Telemetry (D8): a consumer must survive a dropped event. */
+    readonly emit: (event: SystemEvent) => void;
+}
 export interface LocalChildRegistryOptions {
     readonly server: LocalTransportServer;
+    /**
+     * Emit `WorkerOnline { workerId: '<parent>/<childId>' }` at a new
+     * incarnation's FIRST register — the pre-init frame `LocalChildClient.start()`
+     * sends before any addon module is loaded, so before `initialize()` and any
+     * device restore; it is emitted before that frame is acked — and
+     * `WorkerOffline` when the LIVE connection closes (never for a superseded
+     * one). Omitted: nothing is emitted.
+     */
+    readonly lifecycleEvents?: ChildLifecycleEvents;
     readonly onUnownedCall?: (input: CapCallInput) => Promise<unknown>;
     readonly logger?: LocalChildRegistryLogger;
     /**
@@ -275,6 +297,9 @@ export declare class LocalChildRegistry {
     private readonly server;
     private readonly onUnownedCall?;
     private readonly logger?;
+    private readonly lifecycleEvents?;
+    /** Per childId: the incarnation `WorkerOnline` was last said for. */
+    private readonly announcedIncarnation;
     private readonly getActiveSingletonAddonId?;
     private readonly resolveChildIdForAddon?;
     /** This node's own Moleculer nodeId (see {@link LocalChildRegistryOptions.ownNodeId}). */
@@ -605,5 +630,10 @@ export declare class LocalChildRegistry {
      */
     setChildLogLevel(childId: string, level: string): boolean;
     close(): Promise<void>;
+    /** `WorkerOnline`, once per incarnation: a re-register of the same connection says nothing. */
+    private announceOnline;
+    /** `WorkerOffline` for the LIVE connection's close (a superseded close never reaches here). */
+    private announceOffline;
+    private emitLifecycle;
     private onConnection;
 }

package/dist/{retired-settings-keys-C5mSevGV.js → retired-settings-keys-Bmyl7KuD.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-CH3jfPMi.js");
+const require_dist = require("./dist-Ex-rbzic.js");
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/dist/{retired-settings-keys-tDI1g7ab.mjs → retired-settings-keys-DzbmRUhF.mjs}

@@ -1,4 +1,4 @@
-import { Xn as asJsonObject } from "./dist-BEPK2RUO.mjs";
+import { Xn as asJsonObject } from "./dist-COj36Fwm.mjs";
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/dist/{snapshot-courtesy-CZPvteq2.mjs → snapshot-courtesy-CyFs1M3I.mjs}

@@ -86,7 +86,7 @@ function buildCourtesySvg(spec) {
 * "remains visible underneath". A 38 % view of a dark room is not a view of it,
 * and the operator read the result as a placeholder rather than as their own
 * camera: *"ma perché Waking? Dovremmo mostrare l'ultimo snapshot
-* disponibile"* (Baby monitor, 2026-09-16).
+* disponibile"* [but why Waking? We should show the last available snapshot] (Baby monitor, 2026-09-16).
 *
 * The marker still has to earn its place — a stale frame shown clean gets
 * mistaken for live, which is the reason the treatment exists at all. A band

package/dist/{snapshot-courtesy-Cqs7GkOV.js → snapshot-courtesy-D_C5-nC0.js}

@@ -88,7 +88,7 @@ function buildCourtesySvg(spec) {
 * "remains visible underneath". A 38 % view of a dark room is not a view of it,
 * and the operator read the result as a placeholder rather than as their own
 * camera: *"ma perché Waking? Dovremmo mostrare l'ultimo snapshot
-* disponibile"* (Baby monitor, 2026-09-16).
+* disponibile"* [but why Waking? We should show the last available snapshot] (Baby monitor, 2026-09-16).
 *
 * The marker still has to earn its place — a stale frame shown clean gets
 * mistaken for live, which is the reason the treatment exists at all. A band

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.332",
+  "version": "1.2.334",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",