@camstack/system 1.2.353 → 1.2.354

package/dist/addon-runner.js

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_child_cap_dispatch = require("./child-cap-dispatch-CvYlCq60.js");
+const require_child_cap_dispatch = require("./child-cap-dispatch-CRqYKHAb.js");
 const require_custom_action_registry = require("./custom-action-registry-acBY3mHA.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/addon-runner.mjs

@@ -1,4 +1,4 @@
-import { Ft as installManifestNativeDeps, H as createUdsLoggerWithControl, It as resolveAddonClass, St as validateProviderRegistrations, Tn as emitHeapDiagnosticReport, U as LocalChildClient, _t as getWorkerNativeCapProvider, bt as setWorkerNativeCapsChangeListener, en as RUNNER_RSS_BUDGET_ENV, f as installManifestSystemDeps, g as createUdsAddonContext, i as killOwnRunnerGroupAfterParentLoss, n as createChildCapDispatch, p as installManifestPythonDeps, pn as startRunnerHeapWatch, u as startRunnerParentDeathWatchdog, vt as getWorkerNativeCapSnapshot } from "./child-cap-dispatch-C6IpRb4P.mjs";
+import { Ft as installManifestNativeDeps, H as createUdsLoggerWithControl, It as resolveAddonClass, St as validateProviderRegistrations, Tn as emitHeapDiagnosticReport, U as LocalChildClient, _t as getWorkerNativeCapProvider, bt as setWorkerNativeCapsChangeListener, en as RUNNER_RSS_BUDGET_ENV, f as installManifestSystemDeps, g as createUdsAddonContext, i as killOwnRunnerGroupAfterParentLoss, n as createChildCapDispatch, p as installManifestPythonDeps, pn as startRunnerHeapWatch, u as startRunnerParentDeathWatchdog, vt as getWorkerNativeCapSnapshot } from "./child-cap-dispatch-C1x1kNJK.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-B4Cf4O_X.mjs";
 import { register } from "node:module";
 import * as path$1 from "node:path";

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-DePB7uwU.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { H as addonPagesCapability, Jn as errMsg, Yn as BaseAddon, br as EventCategory } from "../../dist-Cm556q2j.mjs";
+import { Sr as EventCategory, U as addonPagesCapability, Xn as errMsg, Zn as BaseAddon } from "../../dist-DVyXxn41.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-DePB7uwU.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Jn as errMsg, W as addonWidgetsCapability, Yn as BaseAddon, br as EventCategory } from "../../dist-Cm556q2j.mjs";
+import { G as addonWidgetsCapability, Sr as EventCategory, Xn as errMsg, Zn as BaseAddon } from "../../dist-DVyXxn41.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-DePB7uwU.js");
 //#region src/builtins/alerts/device-label.ts
 /**
 * Operator-facing device label for alert messages.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { G as alertsCapability, Jn as errMsg, Yn as BaseAddon, ar as createEvent, br as EventCategory, n as AlertSchema } from "../../dist-Cm556q2j.mjs";
+import { K as alertsCapability, Sr as EventCategory, Xn as errMsg, Zn as BaseAddon, n as AlertSchema, sr as createEvent } from "../../dist-DVyXxn41.mjs";
 //#region src/builtins/alerts/device-label.ts
 /**
 * Operator-facing device label for alert messages.

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-DePB7uwU.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { J as bareAddonId, Jn as errMsg, Yn as BaseAddon, br as EventCategory, dr as isEvent, on as ptzAutotrackCapability, x as FIRST_LEVEL_MACRO_CLASSES } from "../../dist-Cm556q2j.mjs";
+import { S as FIRST_LEVEL_MACRO_CLASSES, Sr as EventCategory, Xn as errMsg, Y as bareAddonId, Zn as BaseAddon, cn as ptzAutotrackCapability, pr as isEvent } from "../../dist-DVyXxn41.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-DePB7uwU.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Cn as storageOccupancyCapability, Yn as BaseAddon, br as EventCategory, fr as nodePin, h as DATABASE_SNAPSHOT_SUFFIX, q as backupCapability, qt as mayWriteToLocation, yr as toNodeId } from "../../dist-Cm556q2j.mjs";
+import { J as backupCapability, Jt as mayWriteToLocation, Sr as EventCategory, Tn as storageOccupancyCapability, Zn as BaseAddon, g as DATABASE_SNAPSHOT_SUFFIX, mr as nodePin, xr as toNodeId } from "../../dist-DVyXxn41.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/calendars/calendars.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-DePB7uwU.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let zod = require("zod");
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/calendars/calendars.addon.mjs

@@ -1,4 +1,4 @@
-import { Q as calendarsCapability, Yn as BaseAddon, f as CalendarPreferencesSchema } from "../../dist-Cm556q2j.mjs";
+import { $ as calendarsCapability, Zn as BaseAddon, p as CalendarPreferencesSchema } from "../../dist-DVyXxn41.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { z } from "zod";
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-DePB7uwU.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { $ as cameraGridLayoutCapability, Gn as DeviceFeature, Jn as errMsg, Jt as memoizePinnedFfmpeg, Pn as buildFfmpegArgs, Tn as streamCatalogCapability, Yn as BaseAddon, Zt as motionCapability, ar as createEvent, bn as snapshotCapability, br as EventCategory, ft as declarationOwnerNodeId, i as BaseDevice, k as MOTION_CLOSE_AFTER_MS, lr as hydrateSchema, qn as DeviceType, v as DERIVED_CAMERA_SILENCED_CAP_NAMES, y as DeclaredDevices } from "../../dist-Cm556q2j.mjs";
+import { A as MOTION_CLOSE_AFTER_MS, Dn as streamCatalogCapability, In as buildFfmpegArgs, Qt as motionCapability, Sn as snapshotCapability, Sr as EventCategory, Xn as errMsg, Yn as DeviceType, Yt as memoizePinnedFfmpeg, Zn as BaseAddon, b as DeclaredDevices, dr as hydrateSchema, et as cameraGridLayoutCapability, i as BaseDevice, pt as declarationOwnerNodeId, qn as DeviceFeature, sr as createEvent, y as DERIVED_CAMERA_SILENCED_CAP_NAMES } from "../../dist-DVyXxn41.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/composer/composer.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
-const require_composition_sources = require("../../composition-sources-CAFDvTRs.js");
+const require_dist = require("../../dist-DePB7uwU.js");
+const require_composition_sources = require("../../composition-sources-0nuWOdNd.js");
 let zod = require("zod");
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */
@@ -1308,6 +1308,16 @@ function ownFieldReading(records, key) {
 * - Derived fields are evaluated before accumulators, and every field reading
 *   an own field that changed is re-evaluated in the same pass.
 */
+/**
+* Whether a `rose` call of this field has ever committed a level. Only such a
+* field can FLAP: a source that never answered (late at boot, or an
+* expression that never succeeded) has no level to protect, so its first
+* answered reading is a first observation, not a recovery, and must count.
+*/
+function hasObservedRoseLevel(memory) {
+	for (const call of memory.calls.values()) if (call.kind === "rose" && call.priorLevel !== void 0) return true;
+	return false;
+}
 function strictFiniteAdvance(previous, next) {
 	return typeof next === "number" && Number.isFinite(next) && (previous === null || next > previous);
 }
@@ -1355,7 +1365,7 @@ function evaluateFields(host, keys, now) {
 			const record = next.get(key);
 			if (record === void 0) continue;
 			const candidateMemory = require_dist.cloneStatefulExpressionMemory(record.expressionMemory);
-			if (record.outcome?.state === "unavailable") require_dist.disarmRoseMemory(candidateMemory);
+			if (record.outcome?.state === "unavailable" && hasObservedRoseLevel(record.expressionMemory)) require_dist.disarmRoseMemory(candidateMemory);
 			const outcome = require_dist.evaluateCompositionField({
 				source: record.plan.source,
 				read,

package/dist/builtins/composer/composer.addon.mjs

@@ -1,5 +1,5 @@
-import { Bn as compositionSliceKey, Fn as cloneStatefulExpressionMemory, Hn as createStatefulExpressionMemory, In as composedDeviceRef, Jn as errMsg, Ln as composedDeviceStableId, Nn as COMPOSER_ADDON_ID, Rn as compositionFeatureEnabled, Un as disarmRoseMemory, Vn as compositionSourceKey, Wn as toExpressionValue, X as buildCapabilityLookup, Yn as BaseAddon, ar as createEvent, br as EventCategory, c as COMPOSED_ITEM_FIXED_FIELDS, i as BaseDevice, nt as compositionFieldKey, qn as DeviceType, rn as planComposition, t as ALL_CAPABILITY_DEFINITIONS, tt as composerCapability, wt as evaluateCompositionField, y as DeclaredDevices, zn as compositionItemFieldPath } from "../../dist-Cm556q2j.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-BGlDi3CT.mjs";
+import { Bn as compositionFeatureEnabled, Fn as COMPOSER_ADDON_ID, Gn as disarmRoseMemory, Hn as compositionSliceKey, Kn as toExpressionValue, Ln as cloneStatefulExpressionMemory, Rn as composedDeviceRef, Sr as EventCategory, Tt as evaluateCompositionField, Un as compositionSourceKey, Vn as compositionItemFieldPath, Wn as createStatefulExpressionMemory, Xn as errMsg, Yn as DeviceType, Z as buildCapabilityLookup, Zn as BaseAddon, an as planComposition, b as DeclaredDevices, i as BaseDevice, l as COMPOSED_ITEM_FIXED_FIELDS, nt as composerCapability, rt as compositionFieldKey, sr as createEvent, t as ALL_CAPABILITY_DEFINITIONS, zn as composedDeviceStableId } from "../../dist-DVyXxn41.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-DzkEFd8q.mjs";
 import { z } from "zod";
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */
@@ -1303,6 +1303,16 @@ function ownFieldReading(records, key) {
 * - Derived fields are evaluated before accumulators, and every field reading
 *   an own field that changed is re-evaluated in the same pass.
 */
+/**
+* Whether a `rose` call of this field has ever committed a level. Only such a
+* field can FLAP: a source that never answered (late at boot, or an
+* expression that never succeeded) has no level to protect, so its first
+* answered reading is a first observation, not a recovery, and must count.
+*/
+function hasObservedRoseLevel(memory) {
+	for (const call of memory.calls.values()) if (call.kind === "rose" && call.priorLevel !== void 0) return true;
+	return false;
+}
 function strictFiniteAdvance(previous, next) {
 	return typeof next === "number" && Number.isFinite(next) && (previous === null || next > previous);
 }
@@ -1350,7 +1360,7 @@ function evaluateFields(host, keys, now) {
 			const record = next.get(key);
 			if (record === void 0) continue;
 			const candidateMemory = cloneStatefulExpressionMemory(record.expressionMemory);
-			if (record.outcome?.state === "unavailable") disarmRoseMemory(candidateMemory);
+			if (record.outcome?.state === "unavailable" && hasObservedRoseLevel(record.expressionMemory)) disarmRoseMemory(candidateMemory);
 			const outcome = evaluateCompositionField({
 				source: record.plan.source,
 				read,

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-DePB7uwU.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Ut as logDestinationCapability, Yn as BaseAddon } from "../../dist-Cm556q2j.mjs";
+import { Wt as logDestinationCapability, Zn as BaseAddon } from "../../dist-DVyXxn41.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
-const require_composition_sources = require("../../composition-sources-CAFDvTRs.js");
+const require_dist = require("../../dist-DePB7uwU.js");
+const require_composition_sources = require("../../composition-sources-0nuWOdNd.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,5 +1,5 @@
-import { In as composedDeviceRef, Jn as errMsg, On as validateComposition, Qt as normalizeCoreBlockWrite, Vn as compositionSourceKey, X as buildCapabilityLookup, Yn as BaseAddon, at as coreBlockComposition, cn as replacedFieldKeys, ct as coreBlocksCapability, d as CORE_BLOCK_ADDON_PREFIX, dn as resolveCoreBlockFiles, gt as describeComposableCaps, it as coreBlockAddonId, l as COMPOSER_RUNNER_ID, lr as hydrateSchema, ot as coreBlockIdFromAddonId, p as CoreBlockSchema, rn as planComposition, rt as compositionSourceRefs, st as coreBlockSourceKind, t as ALL_CAPABILITY_DEFINITIONS, u as CORE_BLOCKS_ADDON_ID, un as resolveCoreBlockEntry, y as DeclaredDevices } from "../../dist-Cm556q2j.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-BGlDi3CT.mjs";
+import { $t as normalizeCoreBlockWrite, An as validateComposition, Rn as composedDeviceRef, Un as compositionSourceKey, Xn as errMsg, Z as buildCapabilityLookup, Zn as BaseAddon, _t as describeComposableCaps, an as planComposition, at as coreBlockAddonId, b as DeclaredDevices, ct as coreBlockSourceKind, d as CORE_BLOCKS_ADDON_ID, dr as hydrateSchema, f as CORE_BLOCK_ADDON_PREFIX, fn as resolveCoreBlockEntry, it as compositionSourceRefs, lt as coreBlocksCapability, m as CoreBlockSchema, ot as coreBlockComposition, pn as resolveCoreBlockFiles, st as coreBlockIdFromAddonId, t as ALL_CAPABILITY_DEFINITIONS, u as COMPOSER_RUNNER_ID, un as replacedFieldKeys } from "../../dist-DVyXxn41.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-DzkEFd8q.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { customizationBlockName } from "@camstack/types/node";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-D24IW4qo.js");
+const require_dist = require("../../dist-DePB7uwU.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-BTKZdPn6.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -4898,7 +4898,7 @@ async function reloadMigratedDevices(pctx, targets) {
 * keyed by the number in a separate store, and until 2026-09-01 they simply
 * stayed put. Measured on the live hub after replacing a Hikvision (id 618)
 * with a Reolink: device 618 — Reolink hardware — was dialled at
-* `192.168.x.x:80` with `deviceCache.model="DS-2DE2A404IW-DE3/W"`, the
+* `192.168.10.245:80` with `deviceCache.model="DS-2DE2A404IW-DE3/W"`, the
 * Hikvision's address, credentials and cached model, and never came online.
 * Device 4362 wore the Reolink's config on Hikvision hardware. The two devices
 * were wearing each other's identity.

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { $t as normalizeUnit, At as formatMinutes, C as FieldClaimSchema, Ct as enumerateSchemaFields, E as LocationIconIdSchema, Et as expandContainer, F as STREAM_PROFILE_META, Gn as DeviceFeature, Ht as locationIconKey, Jn as errMsg, Kn as DeviceRole, O as MINUTES_PER_DAY, Rt as legacyAutoLinkIds, S as FieldClaimModeSchema, St as enumerateItemArrayFields, Yn as BaseAddon, Z as buildStreamParamsConfigSchema, _ as DAY_NAMES, _t as deviceExtensionCapability, b as DeviceStatusSchema, br as EventCategory, bt as deviceStatusCapability, lt as createDeviceExtensionProvider, mn as runtimeStatePolicyFor, mt as defineExtensionSlotProvider, nn as parseStreamParamsFormPatch, o as CAMERA_SWITCH_ORDER, qn as DeviceType, s as CAP_NAMES_WITH_STATUS, t as ALL_CAPABILITY_DEFINITIONS, tr as WELL_KNOWN_TAB_MAP, ur as isDeviceConfigCap, vr as sleep$1, vt as deviceManagerCapability, yn as siteZoneKey, yt as deviceStateCapability } from "../../dist-Cm556q2j.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-DzkSqnH0.mjs";
+import { C as FieldClaimModeSchema, Ct as enumerateItemArrayFields, D as LocationIconIdSchema, Dt as expandContainer, I as STREAM_PROFILE_META, Jn as DeviceRole, Q as buildStreamParamsConfigSchema, Sr as EventCategory, Ut as locationIconKey, Xn as errMsg, Yn as DeviceType, Zn as BaseAddon, br as sleep$1, bt as deviceStateCapability, c as CAP_NAMES_WITH_STATUS, en as normalizeUnit, fr as isDeviceConfigCap, gn as runtimeStatePolicyFor, ht as defineExtensionSlotProvider, jt as formatMinutes, k as MINUTES_PER_DAY, o as CAMERA_SWITCH_ORDER, qn as DeviceFeature, rn as parseStreamParamsFormPatch, rr as WELL_KNOWN_TAB_MAP, t as ALL_CAPABILITY_DEFINITIONS, ut as createDeviceExtensionProvider, v as DAY_NAMES, vt as deviceExtensionCapability, w as FieldClaimSchema, wt as enumerateSchemaFields, x as DeviceStatusSchema, xn as siteZoneKey, xt as deviceStatusCapability, yt as deviceManagerCapability, zt as legacyAutoLinkIds } from "../../dist-DVyXxn41.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-DFur4hJF.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
@@ -4893,7 +4893,7 @@ async function reloadMigratedDevices(pctx, targets) {
 * keyed by the number in a separate store, and until 2026-09-01 they simply
 * stayed put. Measured on the live hub after replacing a Hikvision (id 618)
 * with a Reolink: device 618 — Reolink hardware — was dialled at
-* `192.168.x.x:80` with `deviceCache.model="DS-2DE2A404IW-DE3/W"`, the
+* `192.168.10.245:80` with `deviceCache.model="DS-2DE2A404IW-DE3/W"`, the
 * Hikvision's address, credentials and cached model, and never came online.
 * Device 4362 wore the Reolink's config on Hikvision hardware. The two devices
 * were wearing each other's identity.

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-DePB7uwU.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Ut as logDestinationCapability, Yn as BaseAddon } from "../../dist-Cm556q2j.mjs";
+import { Wt as logDestinationCapability, Zn as BaseAddon } from "../../dist-DVyXxn41.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-DePB7uwU.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { A as RECORDING_SOURCE_CAMSTACK_ADDON, Jn as errMsg, N as RecordingStatusSchema, Yn as BaseAddon, ar as createEvent, br as EventCategory } from "../../dist-Cm556q2j.mjs";
+import { P as RecordingStatusSchema, Sr as EventCategory, Xn as errMsg, Zn as BaseAddon, j as RECORDING_SOURCE_CAMSTACK_ADDON, sr as createEvent } from "../../dist-DVyXxn41.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-DePB7uwU.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Dn as userManagementCapability, I as ScopedTokenSchema, K as authProviderCapability, V as UserRecordSchema, Yn as BaseAddon, r as ApiKeyRecordSchema } from "../../dist-Cm556q2j.mjs";
+import { H as UserRecordSchema, L as ScopedTokenSchema, Zn as BaseAddon, kn as userManagementCapability, q as authProviderCapability, r as ApiKeyRecordSchema } from "../../dist-DVyXxn41.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.d.ts

@@ -1,4 +1,4 @@
-import { ProviderRegistration, LocalInterface, ConnectionEndpoint, AdvertisedLocalPort, BaseAddon } from '@camstack/types';
+import { AdvertisedLocalPort, ConnectionEndpoint, LocalInterface, ProviderRegistration, BaseAddon } from '@camstack/types';
 /**
  * Cached mesh-reachable endpoint, learned from the `mesh-network`
  * provider via the `MeshNetworkChanged` event-tail + pull-reconcile.
@@ -68,13 +68,20 @@ export declare class LocalNetworkAddon extends BaseAddon<LocalNetworkConfig> {
     private meshEndpoint;
     constructor();
     /**
-     * What AUTO currently resolves to for outbound artifact links: the first
-     * PUBLIC candidate, never loopback and never a LAN address — a link is
-     * opened on someone's phone, off this network, possibly hours later.
-     * `null` when nothing public is reachable (the caller then ships bytes only
-     * rather than a link that 404s).
+     * The effective flagged notification address: the operator's explicit
+     * choice, else AUTO — the CamStack app link (D709, operator decision
+     * 2026-10-06; before it AUTO was the tunnel, then the mesh). The app link is
+     * not a hub address: the NC's signed media and buttons keep their own hub
+     * ladder when it is flagged; only viewer taps take the app form.
      */
     private resolveNotificationEndpoint;
+    /**
+     * The `hub=` an app link carries: the best public HTTPS address in this
+     * cap's own palette (tunnel, then mesh) — so it can never disagree with
+     * what the Network page lists. See `pickAppLinkHub`.
+     */
+    private resolveAppLinkHub;
+    private notificationEndpointSnapshot;
     private snapshotViewerEndpoints;
     /**
      * Palette shown in the Network tab: LAN IPv4, stable LAN IPv6, public,
@@ -205,6 +212,14 @@ export interface LanHttpAdvertisement {
     readonly httpsPort: number;
     readonly localHostname: string | null;
 }
+/**
+ * The CamStack app link as a palette entry (D709): the one address on the
+ * Network page that is not this hub's. Flagging it for notifications (the
+ * default) makes viewer taps open the native app, with the hub carried as
+ * `hub=`. `kind: 'app-link'` keeps it out of every race and ranking; it is
+ * only emitted on `includeAppLink: true`.
+ */
+export declare function appLinkEndpoint(): ConnectionEndpoint;
 export declare function buildEndpoints(interfaces: readonly LocalInterface[], port: number, includeLoopback: boolean, ipv4Only: boolean, publicHostname: string, scheme?: 'http' | 'https', meshEndpoint?: MeshEndpointCache | null, lanHttp?: LanHttpAdvertisement | null): ConnectionEndpoint[];
 /** AUTO viewer race: LAN IPv4 + the public tunnel. Never IPv6, mesh, or loopback. */
 export declare function isDefaultViewerEndpoint(endpoint: ConnectionEndpoint): boolean;

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-DePB7uwU.js");
 const require_tls = require("../../tls-ue_Xefmv.js");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");
@@ -8,40 +8,6 @@ let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_fs = require("node:fs");
 let node_net = require("node:net");
-//#region src/builtins/local-network/local-hostname.ts
-var DNS_NAME = /^(?=.{1,253}$)([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])$/;
-/**
-* Parse the operator-typed local hostname.
-*
-* Empty / whitespace → `null` (advertise the raw LAN IP). A DNS name is
-* lowercased. A URL, port suffix, path, or bare IP is rejected so it cannot
-* leak into a SAN or a candidate URL.
-*/
-function parseLocalHostname(raw) {
-	const trimmed = raw.trim();
-	if (trimmed === "") return {
-		ok: true,
-		value: null
-	};
-	if (/[\s/:?#]/.test(trimmed) || trimmed.includes("\\")) return {
-		ok: false,
-		error: "Enter a DNS name such as camstack.lan, without a scheme or port."
-	};
-	const lowered = trimmed.toLowerCase();
-	if ((0, node_net.isIP)(lowered) !== 0) return {
-		ok: false,
-		error: "Use the address allowlist for IPs — this field is a DNS name."
-	};
-	if (!DNS_NAME.test(lowered)) return {
-		ok: false,
-		error: "Enter a DNS name such as camstack.lan, without a scheme or port."
-	};
-	return {
-		ok: true,
-		value: lowered
-	};
-}
-//#endregion
 //#region src/builtins/local-network/ipv6-lan.ts
 /**
 * IPv6 helpers for LAN advertisement: prefix matching (privacy addresses
@@ -147,6 +113,40 @@ function parseIpv6Groups(address) {
 	];
 }
 //#endregion
+//#region src/builtins/local-network/local-hostname.ts
+var DNS_NAME = /^(?=.{1,253}$)([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])$/;
+/**
+* Parse the operator-typed local hostname.
+*
+* Empty / whitespace → `null` (advertise the raw LAN IP). A DNS name is
+* lowercased. A URL, port suffix, path, or bare IP is rejected so it cannot
+* leak into a SAN or a candidate URL.
+*/
+function parseLocalHostname(raw) {
+	const trimmed = raw.trim();
+	if (trimmed === "") return {
+		ok: true,
+		value: null
+	};
+	if (/[\s/:?#]/.test(trimmed) || trimmed.includes("\\")) return {
+		ok: false,
+		error: "Enter a DNS name such as camstack.lan, without a scheme or port."
+	};
+	const lowered = trimmed.toLowerCase();
+	if ((0, node_net.isIP)(lowered) !== 0) return {
+		ok: false,
+		error: "Use the address allowlist for IPs — this field is a DNS name."
+	};
+	if (!DNS_NAME.test(lowered)) return {
+		ok: false,
+		error: "Enter a DNS name such as camstack.lan, without a scheme or port."
+	};
+	return {
+		ok: true,
+		value: lowered
+	};
+}
+//#endregion
 //#region src/builtins/local-network/local-network.addon.ts
 /**
 * local-network — hub-only system cap implementation.
@@ -207,19 +207,32 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 		});
 	}
 	/**
-	* What AUTO currently resolves to for outbound artifact links: the first
-	* PUBLIC candidate, never loopback and never a LAN address — a link is
-	* opened on someone's phone, off this network, possibly hours later.
-	* `null` when nothing public is reachable (the caller then ships bytes only
-	* rather than a link that 404s).
+	* The effective flagged notification address: the operator's explicit
+	* choice, else AUTO — the CamStack app link (D709, operator decision
+	* 2026-10-06; before it AUTO was the tunnel, then the mesh). The app link is
+	* not a hub address: the NC's signed media and buttons keep their own hub
+	* ladder when it is flagged; only viewer taps take the app form.
 	*/
 	resolveNotificationEndpoint() {
 		const explicit = this.config.notificationBaseUrl;
-		if (explicit !== "") return explicit;
-		if (this.publicHostname !== "") return `https://${this.publicHostname}`;
-		const mesh = this.meshEndpoint;
-		if (mesh !== null && mesh.host !== "") return `https://${mesh.host}:${mesh.port}`;
-		return null;
+		return explicit !== "" ? explicit : require_dist.CAMSTACK_APP_LINK_ORIGIN;
+	}
+	/**
+	* The `hub=` an app link carries: the best public HTTPS address in this
+	* cap's own palette (tunnel, then mesh) — so it can never disagree with
+	* what the Network page lists. See `pickAppLinkHub`.
+	*/
+	async resolveAppLinkHub() {
+		const port = (await this.resolveAdvertisedListenPort(null)).port;
+		return require_dist.pickAppLinkHub(await this.buildAdvertisedEndpoints(false, false, "https", port));
+	}
+	async notificationEndpointSnapshot() {
+		const explicit = this.config.notificationBaseUrl;
+		return {
+			baseUrl: explicit === "" ? null : explicit,
+			resolved: this.resolveNotificationEndpoint(),
+			appLinkHub: await this.resolveAppLinkHub()
+		};
 	}
 	async snapshotViewerEndpoints() {
 		const selected = selectViewerEndpoints(await this.buildAdvertisedEndpoints(false, false, "http", (await this.resolveAdvertisedListenPort(null)).port), this.config.viewerBaseUrls);
@@ -271,22 +284,17 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 					advertised: localPort.port,
 					source: localPort.source
 				} });
+				const endpoints = await this.buildAdvertisedEndpoints(includeLoopback, input.ipv4Only ?? false, scheme, localPort.port);
 				return {
-					endpoints: await this.buildAdvertisedEndpoints(includeLoopback, input.ipv4Only ?? false, scheme, localPort.port),
+					endpoints: input.includeAppLink === true ? [appLinkEndpoint(), ...endpoints] : endpoints,
 					localPort
 				};
 			},
-			getNotificationEndpoint: async () => ({
-				baseUrl: this.config.notificationBaseUrl === "" ? null : this.config.notificationBaseUrl,
-				resolved: this.resolveNotificationEndpoint()
-			}),
+			getNotificationEndpoint: async () => this.notificationEndpointSnapshot(),
 			setNotificationEndpoint: async ({ baseUrl }) => {
 				await this.updateGlobalSettings({ notificationBaseUrl: baseUrl ?? "" });
 				this.ctx.logger.info("local-network: notification endpoint set", { meta: { baseUrl: baseUrl ?? "(auto)" } });
-				return {
-					baseUrl: baseUrl === "" ? null : baseUrl,
-					resolved: this.resolveNotificationEndpoint()
-				};
+				return this.notificationEndpointSnapshot();
 			},
 			getViewerEndpoints: async () => this.snapshotViewerEndpoints(),
 			setViewerEndpoints: async ({ baseUrls }) => {
@@ -729,6 +737,24 @@ function pickPreferred(interfaces) {
 		return prefixLen(b.netmask) - prefixLen(a.netmask);
 	})[0] ?? null;
 }
+/**
+* The CamStack app link as a palette entry (D709): the one address on the
+* Network page that is not this hub's. Flagging it for notifications (the
+* default) makes viewer taps open the native app, with the hub carried as
+* `hub=`. `kind: 'app-link'` keeps it out of every race and ranking; it is
+* only emitted on `includeAppLink: true`.
+*/
+function appLinkEndpoint() {
+	return {
+		label: "CamStack app link",
+		baseUrl: require_dist.CAMSTACK_APP_LINK_ORIGIN,
+		kind: "app-link",
+		interfaceKind: "public",
+		plausible: true,
+		plausibleReason: "",
+		priority: -1
+	};
+}
 function buildEndpoints(interfaces, port, includeLoopback, ipv4Only, publicHostname, scheme = "http", meshEndpoint = null, lanHttp = null) {
 	const out = [];
 	let priority = 0;
@@ -949,6 +975,7 @@ function readLinuxIpv6Flags() {
 //#endregion
 exports.ALLOWLIST_RECONCILE_INTERVAL_MS = ALLOWLIST_RECONCILE_INTERVAL_MS;
 exports.LocalNetworkAddon = LocalNetworkAddon;
+exports.appLinkEndpoint = appLinkEndpoint;
 exports.applyAllowlist = applyAllowlist;
 exports.autoSeedAllowlist = autoSeedAllowlist;
 exports.buildEndpoints = buildEndpoints;