@camstack/system 1.2.353 → 1.2.355

package/dist/addon-runner.js

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_child_cap_dispatch = require("./child-cap-dispatch-CvYlCq60.js");
+const require_child_cap_dispatch = require("./child-cap-dispatch-CqV-7-QZ.js");
 const require_custom_action_registry = require("./custom-action-registry-acBY3mHA.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/addon-runner.mjs

@@ -1,4 +1,4 @@
-import { Ft as installManifestNativeDeps, H as createUdsLoggerWithControl, It as resolveAddonClass, St as validateProviderRegistrations, Tn as emitHeapDiagnosticReport, U as LocalChildClient, _t as getWorkerNativeCapProvider, bt as setWorkerNativeCapsChangeListener, en as RUNNER_RSS_BUDGET_ENV, f as installManifestSystemDeps, g as createUdsAddonContext, i as killOwnRunnerGroupAfterParentLoss, n as createChildCapDispatch, p as installManifestPythonDeps, pn as startRunnerHeapWatch, u as startRunnerParentDeathWatchdog, vt as getWorkerNativeCapSnapshot } from "./child-cap-dispatch-C6IpRb4P.mjs";
+import { $t as RUNNER_RSS_BUDGET_ENV, Ft as resolveAddonClass, H as createUdsLoggerWithControl, Pt as installManifestNativeDeps, U as LocalChildClient, _t as getWorkerNativeCapSnapshot, f as installManifestSystemDeps, fn as startRunnerHeapWatch, g as createUdsAddonContext, gt as getWorkerNativeCapProvider, i as killOwnRunnerGroupAfterParentLoss, n as createChildCapDispatch, p as installManifestPythonDeps, u as startRunnerParentDeathWatchdog, wn as emitHeapDiagnosticReport, xt as validateProviderRegistrations, yt as setWorkerNativeCapsChangeListener } from "./child-cap-dispatch-DMx2axev.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-B4Cf4O_X.mjs";
 import { register } from "node:module";
 import * as path$1 from "node:path";

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { H as addonPagesCapability, Jn as errMsg, Yn as BaseAddon, br as EventCategory } from "../../dist-Cm556q2j.mjs";
+import { Cr as EventCategory, Qn as BaseAddon, U as addonPagesCapability, Zn as errMsg } from "../../dist-OCi0K-iM.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Jn as errMsg, W as addonWidgetsCapability, Yn as BaseAddon, br as EventCategory } from "../../dist-Cm556q2j.mjs";
+import { Cr as EventCategory, G as addonWidgetsCapability, Qn as BaseAddon, Zn as errMsg } from "../../dist-OCi0K-iM.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 //#region src/builtins/alerts/device-label.ts
 /**
 * Operator-facing device label for alert messages.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { G as alertsCapability, Jn as errMsg, Yn as BaseAddon, ar as createEvent, br as EventCategory, n as AlertSchema } from "../../dist-Cm556q2j.mjs";
+import { Cr as EventCategory, K as alertsCapability, Qn as BaseAddon, Zn as errMsg, cr as createEvent, n as AlertSchema } from "../../dist-OCi0K-iM.mjs";
 //#region src/builtins/alerts/device-label.ts
 /**
 * Operator-facing device label for alert messages.

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { J as bareAddonId, Jn as errMsg, Yn as BaseAddon, br as EventCategory, dr as isEvent, on as ptzAutotrackCapability, x as FIRST_LEVEL_MACRO_CLASSES } from "../../dist-Cm556q2j.mjs";
+import { Cr as EventCategory, Qn as BaseAddon, S as FIRST_LEVEL_MACRO_CLASSES, Y as bareAddonId, Zn as errMsg, ln as ptzAutotrackCapability, mr as isEvent } from "../../dist-OCi0K-iM.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Cn as storageOccupancyCapability, Yn as BaseAddon, br as EventCategory, fr as nodePin, h as DATABASE_SNAPSHOT_SUFFIX, q as backupCapability, qt as mayWriteToLocation, yr as toNodeId } from "../../dist-Cm556q2j.mjs";
+import { Cr as EventCategory, En as storageOccupancyCapability, J as backupCapability, Qn as BaseAddon, Sr as toNodeId, Yt as mayWriteToLocation, g as DATABASE_SNAPSHOT_SUFFIX, hr as nodePin } from "../../dist-OCi0K-iM.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/calendars/calendar-prefs-store.d.ts

@@ -1,4 +1,11 @@
 import { CalendarPreferences, SettingsStoreClient } from '@camstack/types';
+/**
+ * @durable class=config owner=calendars
+ *   write="`setCalendarPreference` upserts the caller's row"
+ *   retention="none — a missing row reads as empty prefs (all visible,
+ *     system colours). Losing the table silently resets every operator's
+ *     colour/hide choices."
+ */
 export declare const CALENDARS_USER_PREFS_COLLECTION = "calendars:user-prefs";
 export declare function declareCalendarPrefsSchema(store: SettingsStoreClient): Promise<void>;
 export declare function loadCalendarPreferences(store: SettingsStoreClient, userId: string): Promise<CalendarPreferences>;

package/dist/builtins/calendars/calendars.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let zod = require("zod");
 //#region src/builtins/calendars/calendar-color.ts
@@ -38,7 +38,8 @@ function defaultCalendarColor(calendarId) {
 *
 * One row per `userId`. The calendars builtin owns declare + read/write;
 * the browser never talks to `settingsStore` directly.
-*
+*/
+/**
 * @durable class=config owner=calendars
 *   write="`setCalendarPreference` upserts the caller's row"
 *   retention="none — a missing row reads as empty prefs (all visible,

package/dist/builtins/calendars/calendars.addon.mjs

@@ -1,4 +1,4 @@
-import { Q as calendarsCapability, Yn as BaseAddon, f as CalendarPreferencesSchema } from "../../dist-Cm556q2j.mjs";
+import { $ as calendarsCapability, Qn as BaseAddon, p as CalendarPreferencesSchema } from "../../dist-OCi0K-iM.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { z } from "zod";
 //#region src/builtins/calendars/calendar-color.ts
@@ -33,7 +33,8 @@ function defaultCalendarColor(calendarId) {
 *
 * One row per `userId`. The calendars builtin owns declare + read/write;
 * the browser never talks to `settingsStore` directly.
-*
+*/
+/**
 * @durable class=config owner=calendars
 *   write="`setCalendarPreference` upserts the caller's row"
 *   retention="none — a missing row reads as empty prefs (all visible,

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { $ as cameraGridLayoutCapability, Gn as DeviceFeature, Jn as errMsg, Jt as memoizePinnedFfmpeg, Pn as buildFfmpegArgs, Tn as streamCatalogCapability, Yn as BaseAddon, Zt as motionCapability, ar as createEvent, bn as snapshotCapability, br as EventCategory, ft as declarationOwnerNodeId, i as BaseDevice, k as MOTION_CLOSE_AFTER_MS, lr as hydrateSchema, qn as DeviceType, v as DERIVED_CAMERA_SILENCED_CAP_NAMES, y as DeclaredDevices } from "../../dist-Cm556q2j.mjs";
+import { $t as motionCapability, A as MOTION_CLOSE_AFTER_MS, Cn as snapshotCapability, Cr as EventCategory, Jn as DeviceFeature, Ln as buildFfmpegArgs, On as streamCatalogCapability, Qn as BaseAddon, Xn as DeviceType, Xt as memoizePinnedFfmpeg, Zn as errMsg, b as DeclaredDevices, cr as createEvent, et as cameraGridLayoutCapability, fr as hydrateSchema, i as BaseDevice, pt as declarationOwnerNodeId, y as DERIVED_CAMERA_SILENCED_CAP_NAMES } from "../../dist-OCi0K-iM.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/composer/composer.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
-const require_composition_sources = require("../../composition-sources-CAFDvTRs.js");
+const require_dist = require("../../dist-BWicEEVA.js");
+const require_composition_sources = require("../../composition-sources-Bk-MjK1D.js");
 let zod = require("zod");
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */
@@ -1307,7 +1307,57 @@ function ownFieldReading(records, key) {
 *   to a synchronous subscriber first.
 * - Derived fields are evaluated before accumulators, and every field reading
 *   an own field that changed is re-evaluated in the same pass.
+* - An edge-latched (`rose`) field holds its last edge through a source
+*   outage: the field goes stale, its value does not change (D713).
 */
+/**
+* Whether the field's last outcome said a SOURCE did not answer — unavailable
+* for that reason, or held over it. An expression that failed on answered
+* values is not an outage: its rose memory was never committed, so the next
+* success compares against the level from before (D716).
+*/
+function wasDown(outcome) {
+	if (outcome === null) return false;
+	if (outcome.state === "unavailable") return outcome.expressionFailed !== true;
+	return outcome.held === true;
+}
+function isExpressionValue(value) {
+	return value === null || typeof value === "number" || typeof value === "string" || typeof value === "boolean";
+}
+/** Whether the field's output is LATCHED by `rose`: it is the last edge, not a reading of now. */
+function isEdgeLatch(record) {
+	const source = record.plan.source;
+	return source.kind === "expression" && require_dist.expressionContainsBuiltinCall(source.expr, "rose");
+}
+/**
+* D713: an edge-latched field keeps its last known value when a source stops
+* answering. `rose` already returns its current output whenever no edge
+* happened, so its value is the last edge — a doorbell's `lastPressedAt` is
+* history, not a reading of now — and a source outage marks the FIELD stale
+* and leaves the value alone (the `count` accumulator already did, D670). A
+* provider redeploy used to write `null` over the restored stamp. Only for
+* the policies that would otherwise WRITE a stand-in (`null`, `'unknown'`): a
+* `release` field still goes back to its native provider and an `offline` one
+* still takes its device offline. A GONE source (fatal) is not held — the
+* block must fail. An expression that FAILED on answered values is not an
+* outage and is not held. Nothing known (no seed, nothing written) stays
+* unavailable.
+* A measurement (`battery.percentage = level`) is NOT held: D393.
+*/
+function holdLatchedValue(record, outcome) {
+	if (outcome.state !== "unavailable" || outcome.fatal || outcome.expressionFailed) return outcome;
+	if (record.plan.unavailable !== "null" && record.plan.unavailable !== "unknown") return outcome;
+	if (!isEdgeLatch(record)) return outcome;
+	const last = currentOutput(record);
+	if (last === void 0 || !isExpressionValue(last)) return outcome;
+	return {
+		state: "stale",
+		value: last,
+		reason: `${outcome.reason}; holding the last edge`,
+		deadline: null,
+		held: true
+	};
+}
 function strictFiniteAdvance(previous, next) {
 	return typeof next === "number" && Number.isFinite(next) && (previous === null || next > previous);
 }
@@ -1355,8 +1405,8 @@ function evaluateFields(host, keys, now) {
 			const record = next.get(key);
 			if (record === void 0) continue;
 			const candidateMemory = require_dist.cloneStatefulExpressionMemory(record.expressionMemory);
-			if (record.outcome?.state === "unavailable") require_dist.disarmRoseMemory(candidateMemory);
-			const outcome = require_dist.evaluateCompositionField({
+			if (wasDown(record.outcome)) require_dist.disarmRoseMemory(candidateMemory);
+			const evaluatedOutcome = require_dist.evaluateCompositionField({
 				source: record.plan.source,
 				read,
 				now,
@@ -1367,7 +1417,8 @@ function evaluateFields(host, keys, now) {
 					callPathPrefix: fieldKey(record.plan)
 				}
 			});
-			const expressionSucceeded = outcome.state !== "unavailable";
+			const expressionSucceeded = evaluatedOutcome.state !== "unavailable";
+			const outcome = holdLatchedValue(record, evaluatedOutcome);
 			if (expressionSucceeded) candidateMemory.disarmRoseNext = false;
 			let evaluated = {
 				...record,

package/dist/builtins/composer/composer.addon.mjs

@@ -1,5 +1,5 @@
-import { Bn as compositionSliceKey, Fn as cloneStatefulExpressionMemory, Hn as createStatefulExpressionMemory, In as composedDeviceRef, Jn as errMsg, Ln as composedDeviceStableId, Nn as COMPOSER_ADDON_ID, Rn as compositionFeatureEnabled, Un as disarmRoseMemory, Vn as compositionSourceKey, Wn as toExpressionValue, X as buildCapabilityLookup, Yn as BaseAddon, ar as createEvent, br as EventCategory, c as COMPOSED_ITEM_FIXED_FIELDS, i as BaseDevice, nt as compositionFieldKey, qn as DeviceType, rn as planComposition, t as ALL_CAPABILITY_DEFINITIONS, tt as composerCapability, wt as evaluateCompositionField, y as DeclaredDevices, zn as compositionItemFieldPath } from "../../dist-Cm556q2j.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-BGlDi3CT.mjs";
+import { Bn as composedDeviceStableId, Cr as EventCategory, Gn as createStatefulExpressionMemory, Hn as compositionItemFieldPath, In as COMPOSER_ADDON_ID, Kn as disarmRoseMemory, Ot as expressionContainsBuiltinCall, Qn as BaseAddon, Rn as cloneStatefulExpressionMemory, Tt as evaluateCompositionField, Un as compositionSliceKey, Vn as compositionFeatureEnabled, Wn as compositionSourceKey, Xn as DeviceType, Z as buildCapabilityLookup, Zn as errMsg, b as DeclaredDevices, cr as createEvent, i as BaseDevice, l as COMPOSED_ITEM_FIXED_FIELDS, nt as composerCapability, on as planComposition, qn as toExpressionValue, rt as compositionFieldKey, t as ALL_CAPABILITY_DEFINITIONS, zn as composedDeviceRef } from "../../dist-OCi0K-iM.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-Dpl1G0Gr.mjs";
 import { z } from "zod";
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */
@@ -1302,7 +1302,57 @@ function ownFieldReading(records, key) {
 *   to a synchronous subscriber first.
 * - Derived fields are evaluated before accumulators, and every field reading
 *   an own field that changed is re-evaluated in the same pass.
+* - An edge-latched (`rose`) field holds its last edge through a source
+*   outage: the field goes stale, its value does not change (D713).
 */
+/**
+* Whether the field's last outcome said a SOURCE did not answer — unavailable
+* for that reason, or held over it. An expression that failed on answered
+* values is not an outage: its rose memory was never committed, so the next
+* success compares against the level from before (D716).
+*/
+function wasDown(outcome) {
+	if (outcome === null) return false;
+	if (outcome.state === "unavailable") return outcome.expressionFailed !== true;
+	return outcome.held === true;
+}
+function isExpressionValue(value) {
+	return value === null || typeof value === "number" || typeof value === "string" || typeof value === "boolean";
+}
+/** Whether the field's output is LATCHED by `rose`: it is the last edge, not a reading of now. */
+function isEdgeLatch(record) {
+	const source = record.plan.source;
+	return source.kind === "expression" && expressionContainsBuiltinCall(source.expr, "rose");
+}
+/**
+* D713: an edge-latched field keeps its last known value when a source stops
+* answering. `rose` already returns its current output whenever no edge
+* happened, so its value is the last edge — a doorbell's `lastPressedAt` is
+* history, not a reading of now — and a source outage marks the FIELD stale
+* and leaves the value alone (the `count` accumulator already did, D670). A
+* provider redeploy used to write `null` over the restored stamp. Only for
+* the policies that would otherwise WRITE a stand-in (`null`, `'unknown'`): a
+* `release` field still goes back to its native provider and an `offline` one
+* still takes its device offline. A GONE source (fatal) is not held — the
+* block must fail. An expression that FAILED on answered values is not an
+* outage and is not held. Nothing known (no seed, nothing written) stays
+* unavailable.
+* A measurement (`battery.percentage = level`) is NOT held: D393.
+*/
+function holdLatchedValue(record, outcome) {
+	if (outcome.state !== "unavailable" || outcome.fatal || outcome.expressionFailed) return outcome;
+	if (record.plan.unavailable !== "null" && record.plan.unavailable !== "unknown") return outcome;
+	if (!isEdgeLatch(record)) return outcome;
+	const last = currentOutput(record);
+	if (last === void 0 || !isExpressionValue(last)) return outcome;
+	return {
+		state: "stale",
+		value: last,
+		reason: `${outcome.reason}; holding the last edge`,
+		deadline: null,
+		held: true
+	};
+}
 function strictFiniteAdvance(previous, next) {
 	return typeof next === "number" && Number.isFinite(next) && (previous === null || next > previous);
 }
@@ -1350,8 +1400,8 @@ function evaluateFields(host, keys, now) {
 			const record = next.get(key);
 			if (record === void 0) continue;
 			const candidateMemory = cloneStatefulExpressionMemory(record.expressionMemory);
-			if (record.outcome?.state === "unavailable") disarmRoseMemory(candidateMemory);
-			const outcome = evaluateCompositionField({
+			if (wasDown(record.outcome)) disarmRoseMemory(candidateMemory);
+			const evaluatedOutcome = evaluateCompositionField({
 				source: record.plan.source,
 				read,
 				now,
@@ -1362,7 +1412,8 @@ function evaluateFields(host, keys, now) {
 					callPathPrefix: fieldKey(record.plan)
 				}
 			});
-			const expressionSucceeded = outcome.state !== "unavailable";
+			const expressionSucceeded = evaluatedOutcome.state !== "unavailable";
+			const outcome = holdLatchedValue(record, evaluatedOutcome);
 			if (expressionSucceeded) candidateMemory.disarmRoseNext = false;
 			let evaluated = {
 				...record,

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Ut as logDestinationCapability, Yn as BaseAddon } from "../../dist-Cm556q2j.mjs";
+import { Gt as logDestinationCapability, Qn as BaseAddon } from "../../dist-OCi0K-iM.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/block-settings-store.d.ts

@@ -1,4 +1,9 @@
 import { SettingsStoreClient } from '@camstack/types';
+/**
+ * @durable class=config owner=core-blocks
+ *   write="`setValues` / `mergeValues` persist the operator's prefs for one block"
+ *   retention="`delete` when the block is deleted. Nothing ages out."
+ */
 export declare const CORE_BLOCK_SETTINGS_COLLECTION = "core-blocks:settings";
 export declare const CORE_BLOCK_SETTINGS_COLUMNS: readonly [{
     readonly name: "id";

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
-const require_composition_sources = require("../../composition-sources-CAFDvTRs.js");
+const require_dist = require("../../dist-BWicEEVA.js");
+const require_composition_sources = require("../../composition-sources-Bk-MjK1D.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");
@@ -491,6 +491,11 @@ var BlockSupervisor = class {
 };
 //#endregion
 //#region src/builtins/core-blocks/block-settings-store.ts
+/**
+* @durable class=config owner=core-blocks
+*   write="`setValues` / `mergeValues` persist the operator's prefs for one block"
+*   retention="`delete` when the block is deleted. Nothing ages out."
+*/
 var CORE_BLOCK_SETTINGS_COLLECTION = "core-blocks:settings";
 var CORE_BLOCK_SETTINGS_COLUMNS = [{
 	name: "id",

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,5 +1,5 @@
-import { In as composedDeviceRef, Jn as errMsg, On as validateComposition, Qt as normalizeCoreBlockWrite, Vn as compositionSourceKey, X as buildCapabilityLookup, Yn as BaseAddon, at as coreBlockComposition, cn as replacedFieldKeys, ct as coreBlocksCapability, d as CORE_BLOCK_ADDON_PREFIX, dn as resolveCoreBlockFiles, gt as describeComposableCaps, it as coreBlockAddonId, l as COMPOSER_RUNNER_ID, lr as hydrateSchema, ot as coreBlockIdFromAddonId, p as CoreBlockSchema, rn as planComposition, rt as compositionSourceRefs, st as coreBlockSourceKind, t as ALL_CAPABILITY_DEFINITIONS, u as CORE_BLOCKS_ADDON_ID, un as resolveCoreBlockEntry, y as DeclaredDevices } from "../../dist-Cm556q2j.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-BGlDi3CT.mjs";
+import { Qn as BaseAddon, Wn as compositionSourceKey, Z as buildCapabilityLookup, Zn as errMsg, _t as describeComposableCaps, at as coreBlockAddonId, b as DeclaredDevices, ct as coreBlockSourceKind, d as CORE_BLOCKS_ADDON_ID, dn as replacedFieldKeys, en as normalizeCoreBlockWrite, f as CORE_BLOCK_ADDON_PREFIX, fr as hydrateSchema, it as compositionSourceRefs, jn as validateComposition, lt as coreBlocksCapability, m as CoreBlockSchema, mn as resolveCoreBlockFiles, on as planComposition, ot as coreBlockComposition, pn as resolveCoreBlockEntry, st as coreBlockIdFromAddonId, t as ALL_CAPABILITY_DEFINITIONS, u as COMPOSER_RUNNER_ID, zn as composedDeviceRef } from "../../dist-OCi0K-iM.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-Dpl1G0Gr.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { customizationBlockName } from "@camstack/types/node";
@@ -486,6 +486,11 @@ var BlockSupervisor = class {
 };
 //#endregion
 //#region src/builtins/core-blocks/block-settings-store.ts
+/**
+* @durable class=config owner=core-blocks
+*   write="`setValues` / `mergeValues` persist the operator's prefs for one block"
+*   retention="`delete` when the block is deleted. Nothing ages out."
+*/
 var CORE_BLOCK_SETTINGS_COLLECTION = "core-blocks:settings";
 var CORE_BLOCK_SETTINGS_COLUMNS = [{
 	name: "id",

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-D24IW4qo.js");
+const require_dist = require("../../dist-BWicEEVA.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-DLJ7MvIB.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -4898,7 +4898,7 @@ async function reloadMigratedDevices(pctx, targets) {
 * keyed by the number in a separate store, and until 2026-09-01 they simply
 * stayed put. Measured on the live hub after replacing a Hikvision (id 618)
 * with a Reolink: device 618 — Reolink hardware — was dialled at
-* `192.168.x.x:80` with `deviceCache.model="DS-2DE2A404IW-DE3/W"`, the
+* `192.168.10.245:80` with `deviceCache.model="DS-2DE2A404IW-DE3/W"`, the
 * Hikvision's address, credentials and cached model, and never came online.
 * Device 4362 wore the Reolink's config on Hikvision hardware. The two devices
 * were wearing each other's identity.

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { $t as normalizeUnit, At as formatMinutes, C as FieldClaimSchema, Ct as enumerateSchemaFields, E as LocationIconIdSchema, Et as expandContainer, F as STREAM_PROFILE_META, Gn as DeviceFeature, Ht as locationIconKey, Jn as errMsg, Kn as DeviceRole, O as MINUTES_PER_DAY, Rt as legacyAutoLinkIds, S as FieldClaimModeSchema, St as enumerateItemArrayFields, Yn as BaseAddon, Z as buildStreamParamsConfigSchema, _ as DAY_NAMES, _t as deviceExtensionCapability, b as DeviceStatusSchema, br as EventCategory, bt as deviceStatusCapability, lt as createDeviceExtensionProvider, mn as runtimeStatePolicyFor, mt as defineExtensionSlotProvider, nn as parseStreamParamsFormPatch, o as CAMERA_SWITCH_ORDER, qn as DeviceType, s as CAP_NAMES_WITH_STATUS, t as ALL_CAPABILITY_DEFINITIONS, tr as WELL_KNOWN_TAB_MAP, ur as isDeviceConfigCap, vr as sleep$1, vt as deviceManagerCapability, yn as siteZoneKey, yt as deviceStateCapability } from "../../dist-Cm556q2j.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-DzkSqnH0.mjs";
+import { Bt as legacyAutoLinkIds, C as FieldClaimModeSchema, Cr as EventCategory, Ct as enumerateItemArrayFields, D as LocationIconIdSchema, Dt as expandContainer, I as STREAM_PROFILE_META, Jn as DeviceFeature, Mt as formatMinutes, Q as buildStreamParamsConfigSchema, Qn as BaseAddon, Sn as siteZoneKey, Wt as locationIconKey, Xn as DeviceType, Yn as DeviceRole, Zn as errMsg, _n as runtimeStatePolicyFor, bt as deviceStateCapability, c as CAP_NAMES_WITH_STATUS, ht as defineExtensionSlotProvider, in as parseStreamParamsFormPatch, ir as WELL_KNOWN_TAB_MAP, k as MINUTES_PER_DAY, o as CAMERA_SWITCH_ORDER, pr as isDeviceConfigCap, t as ALL_CAPABILITY_DEFINITIONS, tn as normalizeUnit, ut as createDeviceExtensionProvider, v as DAY_NAMES, vt as deviceExtensionCapability, w as FieldClaimSchema, wt as enumerateSchemaFields, x as DeviceStatusSchema, xr as sleep$1, xt as deviceStatusCapability, yt as deviceManagerCapability } from "../../dist-OCi0K-iM.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-TDzxE6GA.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
@@ -4893,7 +4893,7 @@ async function reloadMigratedDevices(pctx, targets) {
 * keyed by the number in a separate store, and until 2026-09-01 they simply
 * stayed put. Measured on the live hub after replacing a Hikvision (id 618)
 * with a Reolink: device 618 — Reolink hardware — was dialled at
-* `192.168.x.x:80` with `deviceCache.model="DS-2DE2A404IW-DE3/W"`, the
+* `192.168.10.245:80` with `deviceCache.model="DS-2DE2A404IW-DE3/W"`, the
 * Hikvision's address, credentials and cached model, and never came online.
 * Device 4362 wore the Reolink's config on Hikvision hardware. The two devices
 * were wearing each other's identity.

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Ut as logDestinationCapability, Yn as BaseAddon } from "../../dist-Cm556q2j.mjs";
+import { Gt as logDestinationCapability, Qn as BaseAddon } from "../../dist-OCi0K-iM.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { A as RECORDING_SOURCE_CAMSTACK_ADDON, Jn as errMsg, N as RecordingStatusSchema, Yn as BaseAddon, ar as createEvent, br as EventCategory } from "../../dist-Cm556q2j.mjs";
+import { Cr as EventCategory, P as RecordingStatusSchema, Qn as BaseAddon, Zn as errMsg, cr as createEvent, j as RECORDING_SOURCE_CAMSTACK_ADDON } from "../../dist-OCi0K-iM.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Dn as userManagementCapability, I as ScopedTokenSchema, K as authProviderCapability, V as UserRecordSchema, Yn as BaseAddon, r as ApiKeyRecordSchema } from "../../dist-Cm556q2j.mjs";
+import { An as userManagementCapability, H as UserRecordSchema, L as ScopedTokenSchema, Qn as BaseAddon, q as authProviderCapability, r as ApiKeyRecordSchema } from "../../dist-OCi0K-iM.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.d.ts

@@ -1,4 +1,4 @@
-import { ProviderRegistration, LocalInterface, ConnectionEndpoint, AdvertisedLocalPort, BaseAddon } from '@camstack/types';
+import { AdvertisedLocalPort, ConnectionEndpoint, LocalInterface, ProviderRegistration, BaseAddon } from '@camstack/types';
 /**
  * Cached mesh-reachable endpoint, learned from the `mesh-network`
  * provider via the `MeshNetworkChanged` event-tail + pull-reconcile.
@@ -68,13 +68,20 @@ export declare class LocalNetworkAddon extends BaseAddon<LocalNetworkConfig> {
     private meshEndpoint;
     constructor();
     /**
-     * What AUTO currently resolves to for outbound artifact links: the first
-     * PUBLIC candidate, never loopback and never a LAN address — a link is
-     * opened on someone's phone, off this network, possibly hours later.
-     * `null` when nothing public is reachable (the caller then ships bytes only
-     * rather than a link that 404s).
+     * The effective flagged notification address: the operator's explicit
+     * choice, else AUTO — the CamStack app link (D709, operator decision
+     * 2026-10-06; before it AUTO was the tunnel, then the mesh). The app link is
+     * not a hub address: the NC's signed media and buttons keep their own hub
+     * ladder when it is flagged; only viewer taps take the app form.
      */
     private resolveNotificationEndpoint;
+    /**
+     * The `hub=` an app link carries: the best public HTTPS address in this
+     * cap's own palette (tunnel, then mesh) — so it can never disagree with
+     * what the Network page lists. See `pickAppLinkHub`.
+     */
+    private resolveAppLinkHub;
+    private notificationEndpointSnapshot;
     private snapshotViewerEndpoints;
     /**
      * Palette shown in the Network tab: LAN IPv4, stable LAN IPv6, public,
@@ -205,6 +212,14 @@ export interface LanHttpAdvertisement {
     readonly httpsPort: number;
     readonly localHostname: string | null;
 }
+/**
+ * The CamStack app link as a palette entry (D709): the one address on the
+ * Network page that is not this hub's. Flagging it for notifications (the
+ * default) makes viewer taps open the native app, with the hub carried as
+ * `hub=`. `kind: 'app-link'` keeps it out of every race and ranking; it is
+ * only emitted on `includeAppLink: true`.
+ */
+export declare function appLinkEndpoint(): ConnectionEndpoint;
 export declare function buildEndpoints(interfaces: readonly LocalInterface[], port: number, includeLoopback: boolean, ipv4Only: boolean, publicHostname: string, scheme?: 'http' | 'https', meshEndpoint?: MeshEndpointCache | null, lanHttp?: LanHttpAdvertisement | null): ConnectionEndpoint[];
 /** AUTO viewer race: LAN IPv4 + the public tunnel. Never IPv6, mesh, or loopback. */
 export declare function isDefaultViewerEndpoint(endpoint: ConnectionEndpoint): boolean;