@camstack/system 1.2.419 → 1.2.421

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
+const require_dist = require("../../dist-Df7s77se.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { W as addonPagesCapability, cr as BaseAddon, ei as EventCategory, sr as errMsg } from "../../dist-C0wYvAHC.mjs";
+import { W as addonPagesCapability, cr as BaseAddon, ei as EventCategory, sr as errMsg } from "../../dist-0OD9ue39.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
+const require_dist = require("../../dist-Df7s77se.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { K as addonWidgetsCapability, cr as BaseAddon, ei as EventCategory, sr as errMsg } from "../../dist-C0wYvAHC.mjs";
+import { K as addonWidgetsCapability, cr as BaseAddon, ei as EventCategory, sr as errMsg } from "../../dist-0OD9ue39.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
+const require_dist = require("../../dist-Df7s77se.js");
 //#region src/builtins/alerts/device-label.ts
 /**
 * Operator-facing device label for alert messages.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { cr as BaseAddon, ei as EventCategory, n as AlertSchema, q as alertsCapability, sr as errMsg, wr as createEvent } from "../../dist-C0wYvAHC.mjs";
+import { cr as BaseAddon, ei as EventCategory, n as AlertSchema, q as alertsCapability, sr as errMsg, wr as createEvent } from "../../dist-0OD9ue39.mjs";
 //#region src/builtins/alerts/device-label.ts
 /**
 * Operator-facing device label for alert messages.

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
+const require_dist = require("../../dist-Df7s77se.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { Nr as isEvent, S as FIRST_LEVEL_MACRO_CLASSES, X as bareAddonId, cr as BaseAddon, ei as EventCategory, mn as ptzAutotrackCapability, sr as errMsg } from "../../dist-C0wYvAHC.mjs";
+import { Nr as isEvent, S as FIRST_LEVEL_MACRO_CLASSES, X as bareAddonId, cr as BaseAddon, ei as EventCategory, mn as ptzAutotrackCapability, sr as errMsg } from "../../dist-0OD9ue39.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
-const require_restore_archive = require("../../restore-archive-DZeFVS2l.js");
+const require_dist = require("../../dist-Df7s77se.js");
+const require_restore_archive = require("../../restore-archive-W1Cg5y6C.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,5 +1,5 @@
-import { Pn as storageOccupancyCapability, Y as backupCapability, Zr as toNodeId, cr as BaseAddon, ei as EventCategory, en as mayWriteToLocation, zr as nodePin } from "../../dist-C0wYvAHC.mjs";
-import { a as BackupSnapshotRefusedError, c as BackupKeyFormatError, d as generateBackupKeyPair, f as parseBackupPublicKey, i as BackupCancelledError, n as precheckRestoreKey, o as SystemBackupService, p as parseBackupSecretKey, r as prepareRestoreArchive, u as ENCRYPTED_BACKUP_SUFFIX } from "../../restore-archive-gGHgAZsz.mjs";
+import { Pn as storageOccupancyCapability, Y as backupCapability, Zr as toNodeId, cr as BaseAddon, ei as EventCategory, en as mayWriteToLocation, zr as nodePin } from "../../dist-0OD9ue39.mjs";
+import { a as BackupSnapshotRefusedError, c as BackupKeyFormatError, d as generateBackupKeyPair, f as parseBackupPublicKey, i as BackupCancelledError, n as precheckRestoreKey, o as SystemBackupService, p as parseBackupSecretKey, r as prepareRestoreArchive, u as ENCRYPTED_BACKUP_SUFFIX } from "../../restore-archive-BUMSox6L.mjs";
 import { randomUUID } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/calendars/calendars.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
+const require_dist = require("../../dist-Df7s77se.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let zod = require("zod");
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/calendars/calendars.addon.mjs

@@ -1,4 +1,4 @@
-import { cr as BaseAddon, et as calendarsCapability, p as CalendarPreferencesSchema } from "../../dist-C0wYvAHC.mjs";
+import { cr as BaseAddon, et as calendarsCapability, p as CalendarPreferencesSchema } from "../../dist-0OD9ue39.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { z } from "zod";
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
+const require_dist = require("../../dist-Df7s77se.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { In as streamCatalogCapability, N as MOTION_CLOSE_AFTER_MS, b as DeclaredDevices, cr as BaseAddon, ei as EventCategory, i as BaseDevice, in as motionCapability, ir as DeviceFeature, jn as snapshotCapability, jr as hydrateSchema, mt as declarationOwnerNodeId, or as DeviceType, qn as buildFfmpegArgs, sr as errMsg, tn as memoizePinnedFfmpeg, tt as cameraGridLayoutCapability, wr as createEvent, y as DERIVED_CAMERA_SILENCED_CAP_NAMES } from "../../dist-C0wYvAHC.mjs";
+import { In as streamCatalogCapability, N as MOTION_CLOSE_AFTER_MS, b as DeclaredDevices, cr as BaseAddon, ei as EventCategory, i as BaseDevice, in as motionCapability, ir as DeviceFeature, jn as snapshotCapability, jr as hydrateSchema, mt as declarationOwnerNodeId, or as DeviceType, qn as buildFfmpegArgs, sr as errMsg, tn as memoizePinnedFfmpeg, tt as cameraGridLayoutCapability, wr as createEvent, y as DERIVED_CAMERA_SILENCED_CAP_NAMES } from "../../dist-0OD9ue39.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/composer/composer.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
-const require_composition_sources = require("../../composition-sources-OaDYklhR.js");
+const require_dist = require("../../dist-Df7s77se.js");
+const require_composition_sources = require("../../composition-sources-DxlTUSI1.js");
 let zod = require("zod");
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/composer/composer.addon.mjs

@@ -1,5 +1,5 @@
-import { $n as compositionSliceKey, Et as evaluateCompositionField, Jn as cloneStatefulExpressionMemory, Kn as COMPOSER_ADDON_ID, Q as buildCapabilityLookup, Qn as compositionItemFieldPath, Xn as composedDeviceStableId, Yn as composedDeviceRef, Zn as compositionFeatureEnabled, b as DeclaredDevices, cr as BaseAddon, dn as planComposition, ei as EventCategory, er as compositionSourceKey, i as BaseDevice, it as compositionFieldKey, kt as expressionContainsBuiltinCall, l as COMPOSED_ITEM_FIXED_FIELDS, nr as disarmRoseMemory, or as DeviceType, rr as toExpressionValue, rt as composerCapability, sr as errMsg, t as ALL_CAPABILITY_DEFINITIONS, tr as createStatefulExpressionMemory, wr as createEvent } from "../../dist-C0wYvAHC.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-562ib2dL.mjs";
+import { $n as compositionSliceKey, Et as evaluateCompositionField, Jn as cloneStatefulExpressionMemory, Kn as COMPOSER_ADDON_ID, Q as buildCapabilityLookup, Qn as compositionItemFieldPath, Xn as composedDeviceStableId, Yn as composedDeviceRef, Zn as compositionFeatureEnabled, b as DeclaredDevices, cr as BaseAddon, dn as planComposition, ei as EventCategory, er as compositionSourceKey, i as BaseDevice, it as compositionFieldKey, kt as expressionContainsBuiltinCall, l as COMPOSED_ITEM_FIXED_FIELDS, nr as disarmRoseMemory, or as DeviceType, rr as toExpressionValue, rt as composerCapability, sr as errMsg, t as ALL_CAPABILITY_DEFINITIONS, tr as createStatefulExpressionMemory, wr as createEvent } from "../../dist-0OD9ue39.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-DoYpCPtl.mjs";
 import { z } from "zod";
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
+const require_dist = require("../../dist-Df7s77se.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Xt as logDestinationCapability, cr as BaseAddon } from "../../dist-C0wYvAHC.mjs";
+import { Xt as logDestinationCapability, cr as BaseAddon } from "../../dist-0OD9ue39.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
-const require_composition_sources = require("../../composition-sources-OaDYklhR.js");
+const require_dist = require("../../dist-Df7s77se.js");
+const require_composition_sources = require("../../composition-sources-DxlTUSI1.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,5 +1,5 @@
-import { Bn as validateComposition, Q as buildCapabilityLookup, Yn as composedDeviceRef, an as normalizeCoreBlockWrite, at as compositionSourceRefs, b as DeclaredDevices, bn as resolveCoreBlockFiles, cr as BaseAddon, ct as coreBlockIdFromAddonId, d as CORE_BLOCKS_ADDON_ID, dn as planComposition, er as compositionSourceKey, f as CORE_BLOCK_ADDON_PREFIX, gn as replacedFieldKeys, jr as hydrateSchema, lt as coreBlockSourceKind, m as CoreBlockSchema, ot as coreBlockAddonId, sr as errMsg, st as coreBlockComposition, t as ALL_CAPABILITY_DEFINITIONS, u as COMPOSER_RUNNER_ID, ut as coreBlocksCapability, vt as describeComposableCaps, yn as resolveCoreBlockEntry } from "../../dist-C0wYvAHC.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-562ib2dL.mjs";
+import { Bn as validateComposition, Q as buildCapabilityLookup, Yn as composedDeviceRef, an as normalizeCoreBlockWrite, at as compositionSourceRefs, b as DeclaredDevices, bn as resolveCoreBlockFiles, cr as BaseAddon, ct as coreBlockIdFromAddonId, d as CORE_BLOCKS_ADDON_ID, dn as planComposition, er as compositionSourceKey, f as CORE_BLOCK_ADDON_PREFIX, gn as replacedFieldKeys, jr as hydrateSchema, lt as coreBlockSourceKind, m as CoreBlockSchema, ot as coreBlockAddonId, sr as errMsg, st as coreBlockComposition, t as ALL_CAPABILITY_DEFINITIONS, u as COMPOSER_RUNNER_ID, ut as coreBlocksCapability, vt as describeComposableCaps, yn as resolveCoreBlockEntry } from "../../dist-0OD9ue39.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-DoYpCPtl.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { customizationBlockName } from "@camstack/types/node";

package/dist/builtins/device-manager/contribution-cache.d.ts

@@ -42,6 +42,14 @@ export declare const CONTRIBUTION_BUDGET_MS = 1500;
 * pays the budget again.
 */
 export declare const CONTRIBUTION_CACHE_MAX_ENTRIES = 512;
+/**
+* How long a read waits for a provider's answer when the entry was WRITTEN to
+* since it last answered. Longer than the page budget on purpose: right after a
+* write the only honest answers are the provider's new one or "not yet" — the
+* last cached answer is the pre-write view, and showing it is how a saved
+* setting appeared to snap back.
+*/
+export declare const WRITE_READBACK_BUDGET_MS = 8e3;
 /** How a single provider's contribution was resolved. */
 export type ContributionOutcome<T> = {
 	readonly kind: "fresh";
@@ -63,6 +71,15 @@ export declare class ContributionCache<T = unknown> {
 	* The call is never cancelled: it keeps running and its answer refreshes the
 	* cache, so the provider that overran this page pays for the next one.
 	*/
-	resolve(key: string, call: () => Promise<T | null>, budgetMs?: number): Promise<ContributionOutcome<T>>;
+	resolve(key: string, call: () => Promise<T | null>, budgetMs?: number, readbackBudgetMs?: number): Promise<ContributionOutcome<T>>;
+	/**
+	* Record that the provider behind `key` was written to. What the cache holds
+	* for it is now the pre-write view: it is never served again, a call already
+	* in flight no longer counts as a refresh to wait for, and the next read asks
+	* afresh and is given {@link WRITE_READBACK_BUDGET_MS} to be answered.
+	*/
+	markWritten(key: string): void;
+	/** {@link markWritten} for every held key the predicate accepts. */
+	markWrittenWhere(matches: (key: string) => boolean): void;
 	private remember;
 }

package/dist/builtins/device-manager/device-aggregation.d.ts

@@ -296,7 +296,13 @@ export declare function updateDeviceFieldsBatch(deps: AggregationDeps, input: {
 }>;
 /** Apply a single grouped patch to the appropriate provider. Mirrors
 * `updateDeviceField` routing (special-case device-manager, else
-* registry lookup). Used by `updateDeviceFieldsBatch`. */
+* registry lookup). Used by `updateDeviceFieldsBatch`.
+*
+* Whatever the outcome, the contribution cache is told the provider was
+* written to: a write that threw may still have landed part of its patch, and
+* either way the answer cached for the panel is the PRE-write view. Serving it
+* on the read-back is the operator's "it snapped back, I had to change it
+* twice" (see `ContributionCache.markWritten`). */
 export declare function applyGroupPatch(deps: AggregationDeps, deviceId: number, group: {
 	writerCapName: string;
 	writerAddonId: string;

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-DibNtLmU.js");
+const require_dist = require("../../dist-Df7s77se.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-D-Xv1Zyv.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -825,6 +825,14 @@ function installClaimedStatusOverlay(registry, deps) {
 */
 /** How long the page waits for ONE provider before serving what it has. */
 var CONTRIBUTION_BUDGET_MS = 1500;
+/**
+* How long a read waits for a provider's answer when the entry was WRITTEN to
+* since it last answered. Longer than the page budget on purpose: right after a
+* write the only honest answers are the provider's new one or "not yet" — the
+* last cached answer is the pre-write view, and showing it is how a saved
+* setting appeared to snap back.
+*/
+var WRITE_READBACK_BUDGET_MS = 8e3;
 var ContributionCache = class {
 	maxEntries;
 	entries = /* @__PURE__ */ new Map();
@@ -837,9 +845,9 @@ var ContributionCache = class {
 	* The call is never cancelled: it keeps running and its answer refreshes the
 	* cache, so the provider that overran this page pays for the next one.
 	*/
-	async resolve(key, call, budgetMs = CONTRIBUTION_BUDGET_MS) {
+	async resolve(key, call, budgetMs = CONTRIBUTION_BUDGET_MS, readbackBudgetMs = WRITE_READBACK_BUDGET_MS) {
 		const existing = this.entries.get(key);
-		if (existing?.inFlight) return existing.value !== null ? {
+		if (existing?.inFlight && !existing.written) return existing.value !== null ? {
 			kind: "stale",
 			value: existing.value
 		} : {
@@ -848,29 +856,36 @@ var ContributionCache = class {
 		};
 		const entry = existing ?? {
 			value: null,
-			inFlight: null
+			inFlight: null,
+			generation: 0,
+			written: false
 		};
 		if (!existing) this.remember(key, entry);
+		const generation = entry.generation;
+		const afterWrite = entry.written;
 		let settled = false;
 		let answer = null;
 		let failed = false;
 		const refresh = call().then((value) => {
 			answer = value;
 			settled = true;
+			if (entry.generation !== generation) return;
 			entry.value = value;
 			entry.inFlight = null;
+			entry.written = false;
 		}, () => {
 			failed = true;
 			settled = true;
+			if (entry.generation !== generation) return;
 			entry.inFlight = null;
 		});
 		entry.inFlight = refresh;
-		await Promise.race([refresh, sleep(budgetMs)]);
+		await Promise.race([refresh, sleep(afterWrite ? readbackBudgetMs : budgetMs)]);
 		if (settled && !failed) return {
 			kind: "fresh",
 			value: answer
 		};
-		if (entry.value !== null) return {
+		if (entry.value !== null && !entry.written) return {
 			kind: "stale",
 			value: entry.value
 		};
@@ -879,6 +894,23 @@ var ContributionCache = class {
 			reason: failed ? "failed" : "slow"
 		};
 	}
+	/**
+	* Record that the provider behind `key` was written to. What the cache holds
+	* for it is now the pre-write view: it is never served again, a call already
+	* in flight no longer counts as a refresh to wait for, and the next read asks
+	* afresh and is given {@link WRITE_READBACK_BUDGET_MS} to be answered.
+	*/
+	markWritten(key) {
+		const entry = this.entries.get(key);
+		if (entry === void 0) return;
+		entry.generation += 1;
+		entry.written = true;
+		entry.inFlight = null;
+	}
+	/** {@link markWritten} for every held key the predicate accepts. */
+	markWrittenWhere(matches) {
+		for (const key of [...this.entries.keys()]) if (matches(key)) this.markWritten(key);
+	}
 	remember(key, entry) {
 		this.entries.set(key, entry);
 		while (this.entries.size > this.maxEntries) {
@@ -4188,8 +4220,21 @@ async function updateDeviceFieldsBatch(deps, input) {
 }
 /** Apply a single grouped patch to the appropriate provider. Mirrors
 * `updateDeviceField` routing (special-case device-manager, else
-* registry lookup). Used by `updateDeviceFieldsBatch`. */
+* registry lookup). Used by `updateDeviceFieldsBatch`.
+*
+* Whatever the outcome, the contribution cache is told the provider was
+* written to: a write that threw may still have landed part of its patch, and
+* either way the answer cached for the panel is the PRE-write view. Serving it
+* on the read-back is the operator's "it snapped back, I had to change it
+* twice" (see `ContributionCache.markWritten`). */
 async function applyGroupPatch(deps, deviceId, group) {
+	try {
+		await applyGroupPatchUnmarked(deps, deviceId, group);
+	} finally {
+		contributionCache.markWrittenWhere((key) => key.startsWith(`${String(deviceId)}:`) && key.endsWith(`:${group.writerCapName}:${group.writerAddonId}`));
+	}
+}
+async function applyGroupPatchUnmarked(deps, deviceId, group) {
 	if (group.writerCapName === "device-manager") {
 		const retired = Object.keys(group.patch).filter((key) => LINKED_DEVICES_RESERVED_KEYS.has(key));
 		if (retired.length > 0) {

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { $ as buildStreamParamsConfigSchema, $r as transformSecretWrite, A as LocationIconIdSchema, An as siteZoneKey, C as FieldClaimModeSchema, Cr as collectZodSecretPaths, Fr as isSecretClear, Gt as legacyAutoLinkIds, Ir as isSecretMarker, Jr as secretTreeFromPaths, Kr as resolveSecretMarkers, L as STREAM_PROFILE_META, Lr as isSecretMarkerLike, M as MINUTES_PER_DAY, Mr as isDeviceConfigCap, Nt as formatMinutes, Ot as expandContainer, Pr as isKeychainStoredField, Qr as toSecretFieldView, St as deviceStatusCapability, Tn as runtimeStatePolicyFor, Tt as enumerateSchemaFields, Xr as sleep$1, Yt as locationIconKey, _r as WELL_KNOWN_TAB_MAP, ar as DeviceRole, bt as deviceManagerCapability, c as CAP_NAMES_WITH_STATUS, cr as BaseAddon, dt as createDeviceExtensionProvider, ei as EventCategory, gr as SECRET_CLEAR, gt as defineExtensionSlotProvider, ir as DeviceFeature, ln as parseStreamParamsFormPatch, o as CAMERA_SWITCH_ORDER, on as normalizeUnit, or as DeviceType, sr as errMsg, t as ALL_CAPABILITY_DEFINITIONS, v as DAY_NAMES, w as FieldClaimSchema, wt as enumerateItemArrayFields, x as DeviceStatusSchema, xt as deviceStateCapability, yt as deviceExtensionCapability } from "../../dist-C0wYvAHC.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-BHlKEYNL.mjs";
+import { $ as buildStreamParamsConfigSchema, $r as transformSecretWrite, A as LocationIconIdSchema, An as siteZoneKey, C as FieldClaimModeSchema, Cr as collectZodSecretPaths, Fr as isSecretClear, Gt as legacyAutoLinkIds, Ir as isSecretMarker, Jr as secretTreeFromPaths, Kr as resolveSecretMarkers, L as STREAM_PROFILE_META, Lr as isSecretMarkerLike, M as MINUTES_PER_DAY, Mr as isDeviceConfigCap, Nt as formatMinutes, Ot as expandContainer, Pr as isKeychainStoredField, Qr as toSecretFieldView, St as deviceStatusCapability, Tn as runtimeStatePolicyFor, Tt as enumerateSchemaFields, Xr as sleep$1, Yt as locationIconKey, _r as WELL_KNOWN_TAB_MAP, ar as DeviceRole, bt as deviceManagerCapability, c as CAP_NAMES_WITH_STATUS, cr as BaseAddon, dt as createDeviceExtensionProvider, ei as EventCategory, gr as SECRET_CLEAR, gt as defineExtensionSlotProvider, ir as DeviceFeature, ln as parseStreamParamsFormPatch, o as CAMERA_SWITCH_ORDER, on as normalizeUnit, or as DeviceType, sr as errMsg, t as ALL_CAPABILITY_DEFINITIONS, v as DAY_NAMES, w as FieldClaimSchema, wt as enumerateItemArrayFields, x as DeviceStatusSchema, xt as deviceStateCapability, yt as deviceExtensionCapability } from "../../dist-0OD9ue39.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-Wz92bcuK.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
@@ -820,6 +820,14 @@ function installClaimedStatusOverlay(registry, deps) {
 */
 /** How long the page waits for ONE provider before serving what it has. */
 var CONTRIBUTION_BUDGET_MS = 1500;
+/**
+* How long a read waits for a provider's answer when the entry was WRITTEN to
+* since it last answered. Longer than the page budget on purpose: right after a
+* write the only honest answers are the provider's new one or "not yet" — the
+* last cached answer is the pre-write view, and showing it is how a saved
+* setting appeared to snap back.
+*/
+var WRITE_READBACK_BUDGET_MS = 8e3;
 var ContributionCache = class {
 	maxEntries;
 	entries = /* @__PURE__ */ new Map();
@@ -832,9 +840,9 @@ var ContributionCache = class {
 	* The call is never cancelled: it keeps running and its answer refreshes the
 	* cache, so the provider that overran this page pays for the next one.
 	*/
-	async resolve(key, call, budgetMs = CONTRIBUTION_BUDGET_MS) {
+	async resolve(key, call, budgetMs = CONTRIBUTION_BUDGET_MS, readbackBudgetMs = WRITE_READBACK_BUDGET_MS) {
 		const existing = this.entries.get(key);
-		if (existing?.inFlight) return existing.value !== null ? {
+		if (existing?.inFlight && !existing.written) return existing.value !== null ? {
 			kind: "stale",
 			value: existing.value
 		} : {
@@ -843,29 +851,36 @@ var ContributionCache = class {
 		};
 		const entry = existing ?? {
 			value: null,
-			inFlight: null
+			inFlight: null,
+			generation: 0,
+			written: false
 		};
 		if (!existing) this.remember(key, entry);
+		const generation = entry.generation;
+		const afterWrite = entry.written;
 		let settled = false;
 		let answer = null;
 		let failed = false;
 		const refresh = call().then((value) => {
 			answer = value;
 			settled = true;
+			if (entry.generation !== generation) return;
 			entry.value = value;
 			entry.inFlight = null;
+			entry.written = false;
 		}, () => {
 			failed = true;
 			settled = true;
+			if (entry.generation !== generation) return;
 			entry.inFlight = null;
 		});
 		entry.inFlight = refresh;
-		await Promise.race([refresh, sleep(budgetMs)]);
+		await Promise.race([refresh, sleep(afterWrite ? readbackBudgetMs : budgetMs)]);
 		if (settled && !failed) return {
 			kind: "fresh",
 			value: answer
 		};
-		if (entry.value !== null) return {
+		if (entry.value !== null && !entry.written) return {
 			kind: "stale",
 			value: entry.value
 		};
@@ -874,6 +889,23 @@ var ContributionCache = class {
 			reason: failed ? "failed" : "slow"
 		};
 	}
+	/**
+	* Record that the provider behind `key` was written to. What the cache holds
+	* for it is now the pre-write view: it is never served again, a call already
+	* in flight no longer counts as a refresh to wait for, and the next read asks
+	* afresh and is given {@link WRITE_READBACK_BUDGET_MS} to be answered.
+	*/
+	markWritten(key) {
+		const entry = this.entries.get(key);
+		if (entry === void 0) return;
+		entry.generation += 1;
+		entry.written = true;
+		entry.inFlight = null;
+	}
+	/** {@link markWritten} for every held key the predicate accepts. */
+	markWrittenWhere(matches) {
+		for (const key of [...this.entries.keys()]) if (matches(key)) this.markWritten(key);
+	}
 	remember(key, entry) {
 		this.entries.set(key, entry);
 		while (this.entries.size > this.maxEntries) {
@@ -4183,8 +4215,21 @@ async function updateDeviceFieldsBatch(deps, input) {
 }
 /** Apply a single grouped patch to the appropriate provider. Mirrors
 * `updateDeviceField` routing (special-case device-manager, else
-* registry lookup). Used by `updateDeviceFieldsBatch`. */
+* registry lookup). Used by `updateDeviceFieldsBatch`.
+*
+* Whatever the outcome, the contribution cache is told the provider was
+* written to: a write that threw may still have landed part of its patch, and
+* either way the answer cached for the panel is the PRE-write view. Serving it
+* on the read-back is the operator's "it snapped back, I had to change it
+* twice" (see `ContributionCache.markWritten`). */
 async function applyGroupPatch(deps, deviceId, group) {
+	try {
+		await applyGroupPatchUnmarked(deps, deviceId, group);
+	} finally {
+		contributionCache.markWrittenWhere((key) => key.startsWith(`${String(deviceId)}:`) && key.endsWith(`:${group.writerCapName}:${group.writerAddonId}`));
+	}
+}
+async function applyGroupPatchUnmarked(deps, deviceId, group) {
 	if (group.writerCapName === "device-manager") {
 		const retired = Object.keys(group.patch).filter((key) => LINKED_DEVICES_RESERVED_KEYS.has(key));
 		if (retired.length > 0) {

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
+const require_dist = require("../../dist-Df7s77se.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Xt as logDestinationCapability, cr as BaseAddon } from "../../dist-C0wYvAHC.mjs";
+import { Xt as logDestinationCapability, cr as BaseAddon } from "../../dist-0OD9ue39.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/keychain/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
-const require_jwt_signing_key = require("../../jwt-signing-key-CWmNKLQi.js");
-const require_constants = require("../../constants-ik5xtasS.js");
+const require_dist = require("../../dist-Df7s77se.js");
+const require_jwt_signing_key = require("../../jwt-signing-key-BmyvxlDJ.js");
+const require_constants = require("../../constants-GXZQRcjB.js");
 const require_platform_key_source = require("../../platform-key-source-Di7HrlGR.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/keychain/index.mjs

@@ -1,6 +1,6 @@
-import { Ar as formatSecretScope, Br as normalizeSecretOwner, D as KEYCHAIN_RESET_TRIGGER_ACTOR, Ur as parseSecretRef, Ut as keychainAdminCapability, Wt as keychainCapability, cr as BaseAddon, ei as EventCategory } from "../../dist-C0wYvAHC.mjs";
-import { r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-dkTVfsLI.mjs";
-import { a as MESH_CA_KEY_REF, p as CLUSTER_SECRET_SETTINGS_KEY } from "../../constants-BeQWXybC.mjs";
+import { Ar as formatSecretScope, Br as normalizeSecretOwner, D as KEYCHAIN_RESET_TRIGGER_ACTOR, Ur as parseSecretRef, Ut as keychainAdminCapability, Wt as keychainCapability, cr as BaseAddon, ei as EventCategory } from "../../dist-0OD9ue39.mjs";
+import { r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-W-WFzAoK.mjs";
+import { a as MESH_CA_KEY_REF, p as CLUSTER_SECRET_SETTINGS_KEY } from "../../constants-CtxNK2QJ.mjs";
 import { n as getPlatformKeychainKey } from "../../platform-key-source-BWlq0jjn.mjs";
 import { createCipheriv, createDecipheriv, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { restrictDirToOwnerSync, restrictFileToOwnerSync, writeOwnerOnlyFileSync } from "@camstack/types/node";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
+const require_dist = require("../../dist-Df7s77se.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { F as RecordingStatusSchema, P as RECORDING_SOURCE_CAMSTACK_ADDON, cr as BaseAddon, ei as EventCategory, sr as errMsg, wr as createEvent } from "../../dist-C0wYvAHC.mjs";
+import { F as RecordingStatusSchema, P as RECORDING_SOURCE_CAMSTACK_ADDON, cr as BaseAddon, ei as EventCategory, sr as errMsg, wr as createEvent } from "../../dist-0OD9ue39.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,10 +3,10 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
+const require_dist = require("../../dist-Df7s77se.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_ms$1 = require("../../ms-LB3giGoU.js");
-const require_jwt_signing_key = require("../../jwt-signing-key-CWmNKLQi.js");
+const require_jwt_signing_key = require("../../jwt-signing-key-BmyvxlDJ.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,8 +1,8 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { J as authProviderCapability, R as ScopedTokenSchema, U as UserRecordSchema, cr as BaseAddon, r as ApiKeyRecordSchema, zn as userManagementCapability } from "../../dist-C0wYvAHC.mjs";
+import { J as authProviderCapability, R as ScopedTokenSchema, U as UserRecordSchema, cr as BaseAddon, r as ApiKeyRecordSchema, zn as userManagementCapability } from "../../dist-0OD9ue39.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { t as require_ms } from "../../ms-CgH2OFlD.mjs";
-import { a as loadJwtSigningKey, i as getProcessJwtSigningKeyState, o as processJwtSigningKey, s as setProcessJwtSigningKey, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-dkTVfsLI.mjs";
+import { a as loadJwtSigningKey, i as getProcessJwtSigningKeyState, o as processJwtSigningKey, s as setProcessJwtSigningKey, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-W-WFzAoK.mjs";
 import * as crypto$1 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
+const require_dist = require("../../dist-Df7s77se.js");
 const require_tls = require("../../tls-BgImdxCO.js");
 let zod = require("zod");
 let node_net = require("node:net");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { E as HUB_MDNS_TXT_KEYS, Ft as isAppLinkBase, Jt as localNetworkCapability, Rt as isDefaultAppConnectionEndpoint, T as HUB_MDNS_SERVICE_TYPE, Vn as validateCustomAddress, _n as resolveAppConnections, cr as BaseAddon, ei as EventCategory, nt as checkRoleAddress, s as CAMSTACK_APP_LINK_ORIGIN, un as pickAppLinkHub, wn as resolveNotificationTapAddress, xn as resolveHubAddressRoles } from "../../dist-C0wYvAHC.mjs";
+import { E as HUB_MDNS_TXT_KEYS, Ft as isAppLinkBase, Jt as localNetworkCapability, Rt as isDefaultAppConnectionEndpoint, T as HUB_MDNS_SERVICE_TYPE, Vn as validateCustomAddress, _n as resolveAppConnections, cr as BaseAddon, ei as EventCategory, nt as checkRoleAddress, s as CAMSTACK_APP_LINK_ORIGIN, un as pickAppLinkHub, wn as resolveNotificationTapAddress, xn as resolveHubAddressRoles } from "../../dist-0OD9ue39.mjs";
 import { P as readLanHttpState, _ as writeExtraSans, h as readTlsMode, i as storeUploadedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readTlsAccessStatus, n as regenerateCertificate, p as readExtraSans, r as revertToGeneratedCertificate, t as applyCertificateToListener, u as servedHttpsLeafFingerprint, y as ensureTlsCert } from "../../tls-CaOLZ09W.mjs";
 import { z } from "zod";
 import { isIP } from "node:net";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
+const require_dist = require("../../dist-Df7s77se.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Xt as logDestinationCapability, cr as BaseAddon } from "../../dist-C0wYvAHC.mjs";
+import { Xt as logDestinationCapability, cr as BaseAddon } from "../../dist-0OD9ue39.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DLHPmdoV.js");
+const require_dist = require("../../dist-Df7s77se.js");
 let node_fs_promises = require("node:fs/promises");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);