@camstack/system 1.2.390 → 1.2.392

package/dist/builtins/device-manager/device-meta-types.d.ts

@@ -1,264 +1,273 @@
-import { ChildLayout, DeviceDisplayOverride, LocationIconId, RoleDisplayDefault } from '@camstack/types';
 /**
- * Wire shape matching `z.infer<typeof SettingsSchemaWithValuesSchema>` —
- * duplicated as a plain interface because importing the Zod schema across
- * package boundaries confuses `tsc` when the types package pins a
- * different `zod` minor than the core package. Keeping the shape local
- * keeps the addon decoupled from the schema's internal type encoding.
- */
+* Shared persistence + contribution wire types for the device-manager addon.
+*
+* Extracted verbatim from `device-manager.addon.ts` so the focused modules
+* (`device-projection`, `device-aggregation-merge`, the bindings store, …)
+* can import the same shapes without depending on the addon class. Types plus
+* the decoders that turn an untyped store read into one of them — nothing that
+* touches a store, a device or an event.
+*/
+import type { ChildLayout, DeviceDisplayOverride, LocationIconId, RoleDisplayDefault } from "@camstack/types";
+/**
+* Wire shape matching `z.infer<typeof SettingsSchemaWithValuesSchema>` —
+* duplicated as a plain interface because importing the Zod schema across
+* package boundaries confuses `tsc` when the types package pins a
+* different `zod` minor than the core package. Keeping the shape local
+* keeps the addon decoupled from the schema's internal type encoding.
+*/
 export interface ContributionShape {
-    tabs?: Array<{
-        id: string;
-        label: string;
-        icon: string;
-        order?: number;
-    }>;
-    sections: Array<{
-        id: string;
-        title: string;
-        description?: string;
-        style?: 'card' | 'accordion';
-        defaultCollapsed?: boolean;
-        columns?: 1 | 2 | 3 | 4;
-        tab?: string;
-        /** Where the section renders. Default 'settings' (Config tab); 'top-tab' hoists into the device-detail tab bar via DeviceDetail discovery. */
-        location?: 'settings' | 'top-tab';
-        order?: number;
-        fields: unknown[];
-    }>;
+	tabs?: Array<{
+		id: string;
+		label: string;
+		icon: string;
+		order?: number;
+	}>;
+	sections: Array<{
+		id: string;
+		title: string;
+		description?: string;
+		style?: "card" | "accordion";
+		defaultCollapsed?: boolean;
+		columns?: 1 | 2 | 3 | 4;
+		tab?: string;
+		/** Where the section renders. Default 'settings' (Config tab); 'top-tab' hoists into the device-detail tab bar via DeviceDetail discovery. */
+		location?: "settings" | "top-tab";
+		order?: number;
+		fields: unknown[];
+	}>;
 }
-export type AggregateTabDecl = NonNullable<ContributionShape['tabs']>[number];
-export type AggregateSection = ContributionShape['sections'][number];
+export type AggregateTabDecl = NonNullable<ContributionShape["tabs"]>[number];
+export type AggregateSection = ContributionShape["sections"][number];
 /**
- * Discriminated result from `resolveDriverConfigSchema`:
- *   'ok'          – schema obtained; `schema` field is present.
- *   'none'        – driver has no settings schema (legitimate empty).
- *   'unavailable' – cross-process call failed after retries (transient).
- */
+* Discriminated result from `resolveDriverConfigSchema`:
+*   'ok'          – schema obtained; `schema` field is present.
+*   'none'        – driver has no settings schema (legitimate empty).
+*   'unavailable' – cross-process call failed after retries (transient).
+*/
 export type DriverConfigSchemaResult = {
-    status: 'ok';
-    schema: ContributionShape;
+	status: "ok";
+	schema: ContributionShape;
 } | {
-    status: 'none';
+	status: "none";
 } | {
-    status: 'unavailable';
+	status: "unavailable";
 };
 /**
- * One `(device, capability)` row of the persisted wrapper-activation store —
- * the authority for every per-camera function switch (D62).
- *
- * SINGLETON capabilities only. `wrapperAddonId` is the bound wrapper, or the
- * explicit `null` "operator disabled" marker that stops `getBindings` step 2
- * re-binding a `defaultActive` wrapper; absent means the operator never touched
- * this cap on this device.
- *
- * **A COLLECTION capability has no row here, by design.** Its providers are a
- * SET, and the set is DERIVED from who provides the cap
- * (`device-bindings-store.ts` step 0) — *"tutti i providers funzionano sempre,
- * non serve disattivarli/attivarli … loro vivono lì"* [all the providers always work, there is no need to deactivate/activate them … they live there] (operator, 2026-09-20).
- * Nothing persists it, so nothing has to be back-filled onto a fleet and
- * nothing goes stale when an addon is deployed to a camera later.
- * `setWrapperActive` REFUSES a collection cap rather than writing a field the
- * enumeration does not read — `disabledSourceIds` / `disabledSourceAddonIds`
- * (D556, D555) were exactly that, and
- * `scripts/check-device-selection-authority.ts` now makes it unrepresentable.
- */
+* One `(device, capability)` row of the persisted wrapper-activation store —
+* the authority for every per-camera function switch (D62).
+*
+* SINGLETON capabilities only. `wrapperAddonId` is the bound wrapper, or the
+* explicit `null` "operator disabled" marker that stops `getBindings` step 2
+* re-binding a `defaultActive` wrapper; absent means the operator never touched
+* this cap on this device.
+*
+* **A COLLECTION capability has no row here, by design.** Its providers are a
+* SET, and the set is DERIVED from who provides the cap
+* (`device-bindings-store.ts` step 0) — *"tutti i providers funzionano sempre,
+* non serve disattivarli/attivarli … loro vivono lì"* [all the providers always work, there is no need to deactivate/activate them … they live there] (operator, 2026-09-20).
+* Nothing persists it, so nothing has to be back-filled onto a fleet and
+* nothing goes stale when an addon is deployed to a camera later.
+* `setWrapperActive` REFUSES a collection cap rather than writing a field the
+* enumeration does not read — `disabledSourceIds` / `disabledSourceAddonIds`
+* (D556, D555) were exactly that, and
+* `scripts/check-device-selection-authority.ts` now makes it unrepresentable.
+*/
 export interface DeviceCapBinding {
-    readonly wrapperAddonId?: string | null;
+	readonly wrapperAddonId?: string | null;
 }
 export interface DeviceBindingsStore {
-    readonly deviceBindings: Record<string, Record<string, DeviceCapBinding>>;
+	readonly deviceBindings: Record<string, Record<string, DeviceCapBinding>>;
 }
 export interface PersistedDeviceMeta {
-    type: string;
-    name: string;
-    /** The owning addon's own identifier for this device (`stableId`) and the
-     *  owning addon id (`addonId`). Both are now stored as FIELDS on the record
-     *  because the `deviceMeta` map is keyed by the numeric device `id` (not the
-     *  former composite `${addonId}:${stableId}` key). They make each row
-     *  self-describing — meta lookups resolve `(addonId, stableId)` directly from
-     *  the record instead of parsing a composite key. */
-    addonId: string;
-    stableId: string;
-    /** True once an operator explicitly renamed the device via `setName` (#17).
-     *  Drives the `registerDevice` reconcile name-precedence: when set, the
-     *  operator's name is PRESERVED; when unset, the fresh provider/construction
-     *  name wins so an improved auto-name propagates instead of freezing. Absent on
-     *  legacy rows — the reconcile treats a non-placeholder name as user-named for
-     *  safety and stamps the resolved decision forward. */
-    userNamed?: boolean;
-    /**
-     * Operator-organisational label (room / area / zone). `null` when
-     * unset. Mutable through `setLocation` action; surfaced on
-     * `IDevice.location` via the kernel-built `DeviceContext.deviceMeta`
-     * snapshot. Free-text — providers don't interpret it.
-     */
-    location: string | null;
-    /**
-     * Soft-disabled flag. When `true`, the device class is still
-     * instantiated and visible in the UI (so the operator can flip
-     * back on without re-adding) but lifecycle hooks are gated by
-     * `BaseDevice.disabled`. Mutable through `setDisabled` action.
-     */
-    disabled: boolean;
-    /** Numeric parent id (or null for standalone). The hub resolves the
-     *  parent's stableId to its numeric id at registration time, and from
-     *  there everything internal references the parent by `parentDeviceId`
-     *  — `stableId` only crosses the external boundary (autodiscovery and
-     *  `(addonId, stableId)` row lookups). */
-    parentDeviceId: number | null;
-    /** Progressive, system-wide unique id. Allocated through
-     *  `allocateDeviceId` before `registerDevice` runs; backfilled at boot
-     *  for any legacy meta entry missing it (see init migration below).
-     *  Post-init invariant: every persisted device has a numeric id. */
-    id: number;
-    /** Snapshot of `device.features` from the most recent `registerDevice`
-     *  call. Used by `getDevice` when the live `IDevice` instance lives
-     *  on a forked-worker / remote agent and isn't reachable from the
-     *  hub registry. Optional for legacy rows that predate the field —
-     *  callers fall back to an empty array. */
-    features?: readonly string[];
-    /** Stable hash of the device's EXPORT-relevant shape
-     *  (`canonicalDeviceFingerprint({ deviceType, features })`). Recomputed on
-     *  every `registerDevice`; when it changes, a `DeviceProvisioned` event is
-     *  emitted so export adapters reconcile with ONE delta instead of reacting
-     *  to the chatty per-cap `DeviceBindingsChanged`. Optional for legacy rows
-     *  that predate the field. Spec:
-     *  docs/superpowers/specs/2026-06-01-alexa-hap-export-reconciler-design.md */
-    exportFingerprint?: string;
-    /** Owning integration id, stamped at create via `setIntegrationId`. Optional:
-     *  only present when the device was adopted through an integration (e.g. HA).
-     *  Used by `removeByIntegration` to cascade-delete an integration's fleet. */
-    integrationId?: string;
-    /** Linked device id, stamped at create via `setLinkDeviceId`. Optional:
-     *  only present when the device is linked to another device (e.g. HA entity
-     *  linked to a parent camera). `null` explicitly clears a previous link. */
-    linkDeviceId?: number | null;
-    /** Durable primary-child override for a CONTAINER device, set via
-     *  `setPrimaryChildEntityId`. Keyed on the chosen child's
-     *  re-sync/rename-stable `entityId` (its `sourceInfo.id`, falling back to
-     *  `stableId`) so it survives a re-sync that reallocates the child's numeric
-     *  id — unlike the numeric `linkDeviceId`. `null` clears the override. */
-    primaryChildEntityId?: string | null;
-    /** Container-level layout hint: assigns specific child/accessory devices to
-     *  named accordion sections (with optional order). Keyed on each child's
-     *  re-sync-stable accessory `stableIdSuffix`. Set at create, preserved across
-     *  re-register/restore — same lifecycle as `primaryChildEntityId`. */
-    childLayout?: ChildLayout;
-    /** Semantic role string (`DeviceRole`), stamped at create via `setRole`.
-     *  Optional: only present for accessory children that carry a known role
-     *  (e.g. 'numeric-sensor', 'binary-sensor'). `null` clears a previous role. */
-    role?: string | null;
-    /** Operator-authored per-device display override (icon/label/unit/precision/
-     *  hidden), set via `setDisplay`. Same create/persist/project/restore
-     *  lifecycle as `childLayout`. Absent ⇒ no override. Applied at render time
-     *  only — storage stays in source units. */
-    display?: DeviceDisplayOverride;
+	type: string;
+	name: string;
+	/** The owning addon's own identifier for this device (`stableId`) and the
+	*  owning addon id (`addonId`). Both are now stored as FIELDS on the record
+	*  because the `deviceMeta` map is keyed by the numeric device `id` (not the
+	*  former composite `${addonId}:${stableId}` key). They make each row
+	*  self-describing — meta lookups resolve `(addonId, stableId)` directly from
+	*  the record instead of parsing a composite key. */
+	addonId: string;
+	stableId: string;
+	/** True once an operator explicitly renamed the device via `setName` (#17).
+	*  Drives the `registerDevice` reconcile name-precedence: when set, the
+	*  operator's name is PRESERVED; when unset, the fresh provider/construction
+	*  name wins so an improved auto-name propagates instead of freezing. Absent on
+	*  legacy rows — the reconcile treats a non-placeholder name as user-named for
+	*  safety and stamps the resolved decision forward. */
+	userNamed?: boolean;
+	/**
+	* Operator-organisational label (room / area / zone). `null` when
+	* unset. Mutable through `setLocation` action; surfaced on
+	* `IDevice.location` via the kernel-built `DeviceContext.deviceMeta`
+	* snapshot. Free-text — providers don't interpret it.
+	*/
+	location: string | null;
+	/**
+	* Soft-disabled flag. When `true`, the device class is still
+	* instantiated and visible in the UI (so the operator can flip
+	* back on without re-adding) but lifecycle hooks are gated by
+	* `BaseDevice.disabled`. Mutable through `setDisabled` action.
+	*/
+	disabled: boolean;
+	/** Numeric parent id (or null for standalone). The hub resolves the
+	*  parent's stableId to its numeric id at registration time, and from
+	*  there everything internal references the parent by `parentDeviceId`
+	*  — `stableId` only crosses the external boundary (autodiscovery and
+	*  `(addonId, stableId)` row lookups). */
+	parentDeviceId: number | null;
+	/** Progressive, system-wide unique id. Allocated through
+	*  `allocateDeviceId` before `registerDevice` runs; backfilled at boot
+	*  for any legacy meta entry missing it (see init migration below).
+	*  Post-init invariant: every persisted device has a numeric id. */
+	id: number;
+	/** Snapshot of `device.features` from the most recent `registerDevice`
+	*  call. Used by `getDevice` when the live `IDevice` instance lives
+	*  on a forked-worker / remote agent and isn't reachable from the
+	*  hub registry. Optional for legacy rows that predate the field —
+	*  callers fall back to an empty array. */
+	features?: readonly string[];
+	/** Stable hash of the device's EXPORT-relevant shape
+	*  (`canonicalDeviceFingerprint({ deviceType, features })`). Recomputed on
+	*  every `registerDevice`; when it changes, a `DeviceProvisioned` event is
+	*  emitted so export adapters reconcile with ONE delta instead of reacting
+	*  to the chatty per-cap `DeviceBindingsChanged`. Optional for legacy rows
+	*  that predate the field. Spec:
+	*  docs/superpowers/specs/2026-06-01-alexa-hap-export-reconciler-design.md */
+	exportFingerprint?: string;
+	/** Owning integration id, stamped at create via `setIntegrationId`. Optional:
+	*  only present when the device was adopted through an integration (e.g. HA).
+	*  Used by `removeByIntegration` to cascade-delete an integration's fleet. */
+	integrationId?: string;
+	/** Linked device id, stamped at create via `setLinkDeviceId`. Optional:
+	*  only present when the device is linked to another device (e.g. HA entity
+	*  linked to a parent camera). `null` explicitly clears a previous link. */
+	linkDeviceId?: number | null;
+	/** Durable primary-child override for a CONTAINER device, set via
+	*  `setPrimaryChildEntityId`. Keyed on the chosen child's
+	*  re-sync/rename-stable `entityId` (its `sourceInfo.id`, falling back to
+	*  `stableId`) so it survives a re-sync that reallocates the child's numeric
+	*  id — unlike the numeric `linkDeviceId`. `null` clears the override. */
+	primaryChildEntityId?: string | null;
+	/** Container-level layout hint: assigns specific child/accessory devices to
+	*  named accordion sections (with optional order). Keyed on each child's
+	*  re-sync-stable accessory `stableIdSuffix`. Set at create, preserved across
+	*  re-register/restore — same lifecycle as `primaryChildEntityId`. */
+	childLayout?: ChildLayout;
+	/** Semantic role string (`DeviceRole`), stamped at create via `setRole`.
+	*  Optional: only present for accessory children that carry a known role
+	*  (e.g. 'numeric-sensor', 'binary-sensor'). `null` clears a previous role. */
+	role?: string | null;
+	/** Operator-authored per-device display override (icon/label/unit/precision/
+	*  hidden), set via `setDisplay`. Same create/persist/project/restore
+	*  lifecycle as `childLayout`. Absent ⇒ no override. Applied at render time
+	*  only — storage stays in source units. */
+	display?: DeviceDisplayOverride;
 }
 /**
- * The device-manager's own `addon-settings` row set — everything that is NOT a
- * device.
- *
- * The three fleet blobs that used to live here (`deviceMeta`, `deviceMetadata`,
- * `deviceIndex`) are gone: devices are rows in `device-manager:devices`
- * (`device-row-store.ts`). What is left is four small keys, together under a
- * kilobyte on the reference hub — which matters because `writeAddonStore` for a
- * hub builtin is `setAllAddon`, a DELETE + re-INSERT of every key the addon owns.
- */
+* The device-manager's own `addon-settings` row set — everything that is NOT a
+* device.
+*
+* The three fleet blobs that used to live here (`deviceMeta`, `deviceMetadata`,
+* `deviceIndex`) are gone: devices are rows in `device-manager:devices`
+* (`device-row-store.ts`). What is left is four small keys, together under a
+* kilobyte on the reference hub — which matters because `writeAddonStore` for a
+* hub builtin is `setAllAddon`, a DELETE + re-INSERT of every key the addon owns.
+*/
 export interface AddonStore {
-    /** Monotonic counter that feeds `PersistedDeviceMeta.id` for every
-     *  new device. Incremented exactly once per registerDevice; never
-     *  decremented. */
-    nextDeviceId?: number;
-    /**
-     * Operator-curated location registry. Each entry is a free-form room/
-     * area label (e.g. "Cucina", "Garage") that drives the
-     * autocomplete in the Device Info location editor. Devices reference
-     * these as plain strings via `PersistedDeviceMeta.location` — the
-     * registry is purely a suggestion list, NOT a foreign key. Removing a
-     * location from the registry leaves devices that still reference it
-     * intact; `listLocations` returns the union of registered labels +
-     * labels currently in use, so nothing disappears from the UI even if
-     * the operator forgot to register a label before assigning it.
-     */
-    locations?: readonly string[];
-    /**
-     * Icon per location, keyed by `locationIconKey(label)` — trimmed and
-     * lower-cased, the same equality the registry itself matches on. Lives HERE,
-     * beside `locations`, because that is where a location exists at all: a
-     * location is a label, not a row, so there is no record to hang an icon on.
-     *
-     * Keyed on the folded label rather than the operator's casing on purpose. A
-     * case-only rename (`cucina` → `Cucina`) is a real edit this repo supports,
-     * and a map keyed on the displayed spelling would silently orphan its entry
-     * on exactly that edit — the icon would vanish and nothing would say why.
-     *
-     * A value outside `LOCATION_ICON_IDS` is DROPPED on decode, not trusted: the
-     * store is JSON on disk and a renderer handed an unknown id can only draw a
-     * hole. Dropping it degrades the location to the fallback pin instead.
-     */
-    locationIcons?: Readonly<Record<string, LocationIconId>>;
-    /**
-     * What each location LOOKS like, in the operator's own words, keyed the same
-     * way as {@link AddonStore.locationIcons}.
-     *
-     * Beside the icon and not in the consumer that reads it (the summary AI)
-     * because it is a fact about the PLACE, not about the digest. It lived in
-     * the post-analysis addon's settings, keyed by a hand-typed label matched
-     * exactly and case-sensitively, and the cost was invisible: a rename in the
-     * Locations page carried the icon and left the description on a key no
-     * location would ever carry again.
-     *
-     * A value that is not a non-empty string is DROPPED on decode — an empty
-     * description costs the model attention and says nothing, so it must never
-     * reach it.
-     */
-    locationDescriptions?: Readonly<Record<string, string>>;
-    /**
-     * SITE ZONES — named parts of the property that group locations, keyed by
-     * `siteZoneKey(label)`. The label is stored as the operator typed it; the
-     * key is what everything else joins on.
-     *
-     * Split from {@link AddonStore.locationZones} on purpose: a zone EXISTS
-     * independently of anything being in it. Folding the two into one map would
-     * make an empty zone unrepresentable, so creating one and then filling it —
-     * the obvious order — would be impossible, and clearing the last room would
-     * silently delete the zone and its icon.
-     */
-    siteZones?: Readonly<Record<string, SiteZoneRecord>>;
-    /**
-     * Which zone each location belongs to: `locationKey → zoneKey`.
-     *
-     * This direction, not `zone → locations`, because it makes "at most one zone
-     * per location" true BY CONSTRUCTION rather than by a check somebody has to
-     * remember — there is one slot, so a second assignment moves the room
-     * instead of duplicating it.
-     *
-     * Keyed on the folded location label, like the icon and the description, and
-     * carried by `renameLocation` / dropped by `removeLocation` for the same
-     * reason they are: this repo has already lost an icon to a rename once.
-     */
-    locationZones?: Readonly<Record<string, string>>;
-    /** Operator-authored per-role display defaults (unit/precision/icon), keyed
-     *  by `DeviceRole` string. Resolution merges these UNDER any per-device
-     *  `display` override. Written whole-record by `setRoleDisplayDefaults`
-     *  (full replace — no read-modify-write, single writer, so it never
-     *  interacts with the device write lock). */
-    roleDisplayDefaults?: Record<string, RoleDisplayDefault>;
+	/** Monotonic counter that feeds `PersistedDeviceMeta.id` for every
+	*  new device. Incremented exactly once per registerDevice; never
+	*  decremented. */
+	nextDeviceId?: number;
+	/**
+	* Operator-curated location registry. Each entry is a free-form room/
+	* area label (e.g. "Cucina", "Garage") that drives the
+	* autocomplete in the Device Info location editor. Devices reference
+	* these as plain strings via `PersistedDeviceMeta.location` — the
+	* registry is purely a suggestion list, NOT a foreign key. Removing a
+	* location from the registry leaves devices that still reference it
+	* intact; `listLocations` returns the union of registered labels +
+	* labels currently in use, so nothing disappears from the UI even if
+	* the operator forgot to register a label before assigning it.
+	*/
+	locations?: readonly string[];
+	/**
+	* Icon per location, keyed by `locationIconKey(label)` — trimmed and
+	* lower-cased, the same equality the registry itself matches on. Lives HERE,
+	* beside `locations`, because that is where a location exists at all: a
+	* location is a label, not a row, so there is no record to hang an icon on.
+	*
+	* Keyed on the folded label rather than the operator's casing on purpose. A
+	* case-only rename (`cucina` → `Cucina`) is a real edit this repo supports,
+	* and a map keyed on the displayed spelling would silently orphan its entry
+	* on exactly that edit — the icon would vanish and nothing would say why.
+	*
+	* A value outside `LOCATION_ICON_IDS` is DROPPED on decode, not trusted: the
+	* store is JSON on disk and a renderer handed an unknown id can only draw a
+	* hole. Dropping it degrades the location to the fallback pin instead.
+	*/
+	locationIcons?: Readonly<Record<string, LocationIconId>>;
+	/**
+	* What each location LOOKS like, in the operator's own words, keyed the same
+	* way as {@link AddonStore.locationIcons}.
+	*
+	* Beside the icon and not in the consumer that reads it (the summary AI)
+	* because it is a fact about the PLACE, not about the digest. It lived in
+	* the post-analysis addon's settings, keyed by a hand-typed label matched
+	* exactly and case-sensitively, and the cost was invisible: a rename in the
+	* Locations page carried the icon and left the description on a key no
+	* location would ever carry again.
+	*
+	* A value that is not a non-empty string is DROPPED on decode — an empty
+	* description costs the model attention and says nothing, so it must never
+	* reach it.
+	*/
+	locationDescriptions?: Readonly<Record<string, string>>;
+	/**
+	* SITE ZONES — named parts of the property that group locations, keyed by
+	* `siteZoneKey(label)`. The label is stored as the operator typed it; the
+	* key is what everything else joins on.
+	*
+	* Split from {@link AddonStore.locationZones} on purpose: a zone EXISTS
+	* independently of anything being in it. Folding the two into one map would
+	* make an empty zone unrepresentable, so creating one and then filling it —
+	* the obvious order — would be impossible, and clearing the last room would
+	* silently delete the zone and its icon.
+	*/
+	siteZones?: Readonly<Record<string, SiteZoneRecord>>;
+	/**
+	* Which zone each location belongs to: `locationKey → zoneKey`.
+	*
+	* This direction, not `zone → locations`, because it makes "at most one zone
+	* per location" true BY CONSTRUCTION rather than by a check somebody has to
+	* remember — there is one slot, so a second assignment moves the room
+	* instead of duplicating it.
+	*
+	* Keyed on the folded location label, like the icon and the description, and
+	* carried by `renameLocation` / dropped by `removeLocation` for the same
+	* reason they are: this repo has already lost an icon to a rename once.
+	*/
+	locationZones?: Readonly<Record<string, string>>;
+	/** Operator-authored per-role display defaults (unit/precision/icon), keyed
+	*  by `DeviceRole` string. Resolution merges these UNDER any per-device
+	*  `display` override. Written whole-record by `setRoleDisplayDefaults`
+	*  (full replace — no read-modify-write, single writer, so it never
+	*  interacts with the device write lock). */
+	roleDisplayDefaults?: Record<string, RoleDisplayDefault>;
 }
 /**
- * Decode the raw `ctx.settings.readAddonStore()` record into {@link AddonStore}.
- *
- * A field of the wrong shape reads as ABSENT rather than being trusted through
- * a cast: the store is JSON on disk and a hand-edit or a partial restore must
- * cost the caller its default, never a downstream `TypeError`.
- */
+* Decode the raw `ctx.settings.readAddonStore()` record into {@link AddonStore}.
+*
+* A field of the wrong shape reads as ABSENT rather than being trusted through
+* a cast: the store is JSON on disk and a hand-edit or a partial restore must
+* cost the caller its default, never a downstream `TypeError`.
+*/
 export declare function decodeAddonStore(raw: Record<string, unknown>): AddonStore;
 /**
- * One zone on disk. The icon is OPTIONAL and absent means "nobody chose one" —
- * never the fallback pin, which is the renderer's business.
- */
+* One zone on disk. The icon is OPTIONAL and absent means "nobody chose one" —
+* never the fallback pin, which is the renderer's business.
+*/
 export interface SiteZoneRecord {
-    readonly label: string;
-    readonly icon?: LocationIconId;
+	readonly label: string;
+	readonly icon?: LocationIconId;
 }

package/dist/builtins/device-manager/device-online-fallback.d.ts

@@ -1,35 +1,35 @@
 /**
- * What "online" means for a device the hub can only see on disk.
- *
- * The authority for a device's liveness is the addon that owns it (D224): it
- * publishes `device-status` through `markOnline`, the hub mirrors that slice,
- * and every persisted-row projection reads the mirror. The FALLBACK — what the
- * hub answers before any slice has arrived — used to be "a persisted row
- * implies a successful registration, so: online". That assumption is false for
- * exactly one shape of row, and it is the shape a bad removal leaves behind: a
- * top-level device with NO configuration, which its provider can never restore
- * (its config schema rejects an empty blob), so no owner will ever publish a
- * slice contradicting the guess.
- *
- * Device 614 was reported `online: true` for a full day that way, while its
- * provider logged `Failed to restore device` eight times. A device without
- * configuration cannot be online — the row is a leftover, not a camera. See
- * D376.
- *
- * Children are left on the legacy fallback deliberately: an accessory child
- * (siren, floodlight, PIR) legitimately carries an empty config blob and gets
- * its liveness from the parent's worker.
- */
+* What "online" means for a device the hub can only see on disk.
+*
+* The authority for a device's liveness is the addon that owns it (D224): it
+* publishes `device-status` through `markOnline`, the hub mirrors that slice,
+* and every persisted-row projection reads the mirror. The FALLBACK — what the
+* hub answers before any slice has arrived — used to be "a persisted row
+* implies a successful registration, so: online". That assumption is false for
+* exactly one shape of row, and it is the shape a bad removal leaves behind: a
+* top-level device with NO configuration, which its provider can never restore
+* (its config schema rejects an empty blob), so no owner will ever publish a
+* slice contradicting the guess.
+*
+* Device 614 was reported `online: true` for a full day that way, while its
+* provider logged `Failed to restore device` eight times. A device without
+* configuration cannot be online — the row is a leftover, not a camera. See
+* D376.
+*
+* Children are left on the legacy fallback deliberately: an accessory child
+* (siren, floodlight, PIR) legitimately carries an empty config blob and gets
+* its liveness from the parent's worker.
+*/
 export interface PersistedOnlineFallbackInput {
-    /** Is a hub-side device registry present at all? `false` is the "offline view". */
-    readonly registryPresent: boolean;
-    /** `null` for a top-level device. */
-    readonly parentDeviceId: number | null;
-    /** The device's persisted config blob, as read from its device store. */
-    readonly config: Record<string, unknown> | undefined;
+	/** Is a hub-side device registry present at all? `false` is the "offline view". */
+	readonly registryPresent: boolean;
+	/** `null` for a top-level device. */
+	readonly parentDeviceId: number | null;
+	/** The device's persisted config blob, as read from its device store. */
+	readonly config: Record<string, unknown> | undefined;
 }
 /**
- * The value to hand `resolveDeviceOnline` as its fallback. The mirrored
- * `device-status` slice, when one exists, still wins over this.
- */
+* The value to hand `resolveDeviceOnline` as its fallback. The mirrored
+* `device-status` slice, when one exists, still wins over this.
+*/
 export declare function persistedOnlineFallback(input: PersistedOnlineFallbackInput): boolean;