@camstack/system 1.2.55 → 1.2.57

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CblJsHb-.js");
+const require_dist = require("../../dist-BupxnZOi.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Lt as EventCategory, dt as BaseAddon, m as addonPagesCapability, ut as errMsg } from "../../dist-BOpRqInW.mjs";
+import { Lt as EventCategory, dt as BaseAddon, m as addonPagesCapability, ut as errMsg } from "../../dist-DhL_zGRT.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CblJsHb-.js");
+const require_dist = require("../../dist-BupxnZOi.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Lt as EventCategory, dt as BaseAddon, g as addonWidgetsCapability, ut as errMsg } from "../../dist-BOpRqInW.mjs";
+import { Lt as EventCategory, dt as BaseAddon, g as addonWidgetsCapability, ut as errMsg } from "../../dist-DhL_zGRT.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CblJsHb-.js");
+const require_dist = require("../../dist-BupxnZOi.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Lt as EventCategory, _ as alertsCapability, dt as BaseAddon, n as AlertSchema, ut as errMsg, wt as createEvent } from "../../dist-BOpRqInW.mjs";
+import { Lt as EventCategory, _ as alertsCapability, dt as BaseAddon, n as AlertSchema, ut as errMsg, wt as createEvent } from "../../dist-DhL_zGRT.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CblJsHb-.js");
+const require_dist = require("../../dist-BupxnZOi.js");
 let node_fs = require("node:fs");
 let node_fs$1 = require_chunk.__toESM(node_fs, 1);
 node_fs = require_chunk.__toESM(node_fs);

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Lt as EventCategory, b as backupCapability, dt as BaseAddon } from "../../dist-BOpRqInW.mjs";
+import { Lt as EventCategory, b as backupCapability, dt as BaseAddon } from "../../dist-DhL_zGRT.mjs";
 import * as fs from "node:fs";
 import Kt from "node:fs";
 import * as path$1 from "node:path";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CblJsHb-.js");
+const require_dist = require("../../dist-BupxnZOi.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { U as logDestinationCapability, dt as BaseAddon } from "../../dist-BOpRqInW.mjs";
+import { U as logDestinationCapability, dt as BaseAddon } from "../../dist-DhL_zGRT.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CblJsHb-.js");
+const require_dist = require("../../dist-BupxnZOi.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);
 let node_crypto = require("node:crypto");

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { S as coreBlocksCapability, dt as BaseAddon, o as CoreBlockSchema } from "../../dist-BOpRqInW.mjs";
+import { S as coreBlocksCapability, dt as BaseAddon, o as CoreBlockSchema } from "../../dist-DhL_zGRT.mjs";
 import * as path$1 from "node:path";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CblJsHb-.js");
+const require_dist = require("../../dist-BupxnZOi.js");
 let _camstack_types_node = require("@camstack/types/node");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,4 +1,4 @@
-import { $ as setByPath, A as enumerateItemArrayFields, D as deviceStatusCapability, E as deviceStateCapability, F as getByPath, It as sleep, Lt as EventCategory, M as evaluateLinkExpression, T as deviceManagerCapability, Y as parseStreamParamsFormPatch, _t as DeviceType, a as CAP_NAMES_WITH_STATUS, at as toExpressionValue, bt as WELL_KNOWN_TAB_MAP, dt as BaseAddon, gt as DeviceRole, ht as DeviceFeature, j as enumerateSchemaFields, kt as isDeviceConfigCap, q as normalizeUnit, s as DeviceStatusSchema, st as validateExpressionSource, t as ALL_CAPABILITY_DEFINITIONS, u as STREAM_PROFILE_META, ut as errMsg, v as applyTransform, x as buildStreamParamsConfigSchema } from "../../dist-BOpRqInW.mjs";
+import { $ as setByPath, A as enumerateItemArrayFields, D as deviceStatusCapability, E as deviceStateCapability, F as getByPath, It as sleep, Lt as EventCategory, M as evaluateLinkExpression, T as deviceManagerCapability, Y as parseStreamParamsFormPatch, _t as DeviceType, a as CAP_NAMES_WITH_STATUS, at as toExpressionValue, bt as WELL_KNOWN_TAB_MAP, dt as BaseAddon, gt as DeviceRole, ht as DeviceFeature, j as enumerateSchemaFields, kt as isDeviceConfigCap, q as normalizeUnit, s as DeviceStatusSchema, st as validateExpressionSource, t as ALL_CAPABILITY_DEFINITIONS, u as STREAM_PROFILE_META, ut as errMsg, v as applyTransform, x as buildStreamParamsConfigSchema } from "../../dist-DhL_zGRT.mjs";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/doorbell/binding-mirror.d.ts

@@ -0,0 +1,50 @@
+/**
+ * The virtual-doorbell wrapper's in-memory mirror of ONE durable fact per
+ * camera: is this wrapper still the active `doorbell` binding for it?
+ *
+ * WHY A MIRROR AND NOT A READ. A doorbell press is a one-shot event: there
+ * is no retry, no reconcile, nothing downstream that can notice it went
+ * missing. The wrapper used to re-derive the binding on the ring path via
+ * `deviceManager.getBindings` and treat ANY answer that omitted its own
+ * activation as "the operator unbound this". On 2026-08-04/05 camera 615
+ * rang zero times out of three real presses: the binding was persisted (a
+ * same-day backup taken before the presses proves it, and the same process
+ * later returned it correctly to a tRPC query), but the store answered
+ * transiently without it — `getBindings` reads the device-manager addon
+ * store, which is exactly the surface that can silently answer `{}` (D44,
+ * `addon-registry.service.ts`). Three presses, three drops, at `debug`.
+ *
+ * WHY CORROBORATION AND NOT A BETTER DISCRIMINATOR. There isn't one. A
+ * genuinely unbound pure-wrapper cap and a store answering from an empty
+ * snapshot produce the SAME `getBindings` response — no `doorbell` entry,
+ * with the camera's native entries (snapshot, motion, …) still present in
+ * both cases because those come from the capability registry, not the
+ * store. The response cannot be graded. What CAN be graded is repetition: a
+ * real unbind is permanent and every later read agrees, a store blip does
+ * not survive the next read. So a negative read ARMS the revocation and a
+ * second consecutive negative applies it.
+ *
+ * ERRING. `undefined` (never read) and `unbind-pending` both ring. Reaching
+ * the ring path at all means the camera has a configured trigger source,
+ * and a source can only be configured through this wrapper's own
+ * binding-gated settings surface — so a configured source is itself
+ * evidence the wrapper was bound. The cost of erring open is a spurious
+ * ring on a camera the operator unbound but left configured, for at most
+ * two reload cycles. The cost of erring closed is the press.
+ */
+/**
+ * `bound` — a read saw the wrapper's activation.
+ * `unbind-pending` — one read did not; NOT yet believed, still rings.
+ * `unbound` — two consecutive reads did not; believed, silences the camera.
+ */
+export type DoorbellBindingState = 'bound' | 'unbind-pending' | 'unbound';
+/**
+ * Fold one SUCCESSFUL bindings read into the mirror. A read that failed must
+ * never reach this function — an unanswerable store carries no information
+ * and must leave the mirror exactly as it was.
+ */
+export declare function nextBindingState(previous: DoorbellBindingState | undefined, boundNow: boolean): DoorbellBindingState;
+/** May a ring proceed? Only a corroborated unbind stops one. */
+export declare function allowsRing(state: DoorbellBindingState | undefined): boolean;
+/** True only when a read has positively confirmed the binding. */
+export declare function hasConfirmedBinding(state: DoorbellBindingState | undefined): boolean;

package/dist/builtins/doorbell/trigger-engine.d.ts

@@ -19,6 +19,19 @@
  * reconnect is not a doorbell press.
  */
 export declare const SOURCE_CAP_ACTIVE_FIELD: Readonly<Record<string, string>>;
+/**
+ * The same caps → the slice field carrying the ms-epoch timestamp of the
+ * last transition. Every source cap MUST appear here (guarded by a spec):
+ * without a transition timestamp the engine cannot tell a genuine press
+ * from a boot-time hydration when the FIRST slice it ever sees is already
+ * active, and errs towards silence — swallowing the press.
+ *
+ * These timestamps are UPSTREAM ones, not ingest ones: the Home Assistant
+ * provider derives them from `state.last_changed`, so they survive our own
+ * restarts and correctly read as "hours ago" for a state that has been
+ * active for hours. `motion` names its rise timestamp `lastDetectedAt`.
+ */
+export declare const SOURCE_CAP_CHANGED_AT_FIELD: Readonly<Record<string, string>>;
 /** Cap names whose presence in a device's bindings qualify it as a source. */
 export declare const SOURCE_CAPS: readonly string[];
 /**
@@ -41,6 +54,45 @@ export declare const SOURCE_CAPS: readonly string[];
 export declare const SOURCE_DEVICE_TYPES: readonly string[];
 /** True when a cap is a recognised binary/switch doorbell source. */
 export declare function isSourceCap(capName: string): boolean;
+/**
+ * Why a slice produced no ring. Every value names a DROPPED evaluation, so
+ * the addon can log the ones that may have cost a real press instead of
+ * returning an empty array that reads as "nothing happened".
+ */
+export type DoorbellIgnoreReason = 
+/** Not a recognised binary/switch source cap. */
+'unknown-cap'
+/** Recognised cap, but its active field is missing or not a boolean. */
+ | 'non-boolean-value'
+/** First sighting, INACTIVE — nothing can have been lost. */
+ | 'baseline-seeded-inactive'
+/** First sighting, ALREADY ACTIVE, and we could not prove it is a fresh
+ *  transition. A genuine press MAY have been swallowed here. */
+ | 'baseline-seeded-stale-active'
+/** Re-emission carrying the same binary value. */
+ | 'no-change'
+/** The falling edge — switch-off / contact-close never rings. */
+ | 'falling-edge'
+/** A real rise, but no camera is wired to this source. */
+ | 'no-assignment';
+/**
+ * The outcome of feeding one slice. `fired` is what rings; `debounced` and
+ * `ignored` exist so that no suppression is invisible.
+ */
+export interface DoorbellTriggerResult {
+    /** Cameras to ring now. */
+    readonly fired: readonly number[];
+    /** Cameras that WOULD have rung but are inside their debounce window. */
+    readonly debounced: readonly number[];
+    /** Set when the slice carried no ring at all; null once a rise was matched. */
+    readonly ignored: DoorbellIgnoreReason | null;
+}
+/**
+ * How recent a source's own transition timestamp must be for a FIRST
+ * sighting that is already active to count as a genuine press rather than a
+ * hydration of long-standing state.
+ */
+export declare const DEFAULT_FIRST_SIGHTING_FRESHNESS_MS = 30000;
 /**
  * One camera's virtual-doorbell wiring: a source device that rings it. A
  * camera with several sources produces several assignments (one per source).
@@ -57,9 +109,25 @@ export declare const DEFAULT_DEBOUNCE_MS = 2000;
  *
  * Tracks the last observed binary value per (sourceDevice, cap) so a
  * `DeviceStateChanged` re-emission (the slice's `lastChangedAt` moves while
- * the binary value does not) never double-fires, and the FIRST observation
- * after boot only seeds the baseline — a state hydration at startup must not
- * ring anybody's doorbell.
+ * the binary value does not) never double-fires.
+ *
+ * FIRST SIGHTINGS. Seeding the baseline and never firing was wrong for the
+ * one case that matters: a momentary source (a button wired to a Home
+ * Assistant switch) is NOT re-pushed in its resting `off` state after a hub
+ * restart, so after every restart — several a day — the first slice the
+ * engine ever sees for it is the PRESS ITSELF, already active. That press
+ * was eaten whole; a real one on 2026-08-05 left no trace anywhere.
+ *
+ * The discriminator is the source's own transition timestamp. A first
+ * sighting that is already active rings only when its transition can be
+ * proved to have happened AFTER this engine started watching AND within
+ * `firstSightingFreshnessMs`. Both halves earn their keep: freshness alone
+ * would ring on a boot hydration of a state that flipped seconds before the
+ * restart, and "after we started" alone would ring, on a long-lived
+ * process, for a source adopted today whose state flipped yesterday. An
+ * undateable first sighting (no timestamp, or a zero sentinel) does NOT
+ * ring — the ambiguous case errs towards silence, but reports
+ * `baseline-seeded-stale-active` so the caller can say so out loud.
  */
 export declare class DoorbellTriggerEngine {
     private assignments;
@@ -69,9 +137,13 @@ export declare class DoorbellTriggerEngine {
     private readonly lastFiredAt;
     private readonly debounceMs;
     private readonly now;
+    private readonly firstSightingFreshnessMs;
+    /** When this engine started watching — the floor for a first-sighting rise. */
+    private readonly startedAt;
     constructor(options?: {
         readonly debounceMs?: number;
         readonly now?: () => number;
+        readonly firstSightingFreshnessMs?: number;
     });
     /** Replace the full assignment set (rebuilt whenever settings change). */
     setAssignments(assignments: readonly DoorbellAssignment[]): void;
@@ -79,11 +151,16 @@ export declare class DoorbellTriggerEngine {
     /** True when any assignment references `deviceId` as its source. */
     hasSource(deviceId: number): boolean;
     /**
-     * Feed one `DeviceStateChanged` slice. Returns the camera ids whose
-     * doorbell should ring (already debounced). Only a false→true rise on a
-     * recognised source cap fires; baseline-only sightings, re-emissions, and
-     * the falling edge return an empty array.
+     * Feed one `DeviceStateChanged` slice. Reports which cameras should ring,
+     * which were suppressed by the debounce window, and — when nothing was
+     * matched at all — WHY. Only a rise to active on a recognised source cap
+     * can ring; re-emissions and the falling edge never do.
+     */
+    onStateSlice(deviceId: number, capName: string, slice: Record<string, unknown>): DoorbellTriggerResult;
+    /**
+     * Can this slice PROVE its active state is a transition we would have
+     * witnessed had we been listening — i.e. recent, and after we started?
      */
-    onStateSlice(deviceId: number, capName: string, slice: Record<string, unknown>): number[];
+    private roseAfterWeStartedWatching;
     private matchAndDebounce;
 }

package/dist/builtins/doorbell/virtual-doorbell.addon.d.ts

@@ -2,6 +2,13 @@ import { ProviderRegistration, BaseAddon } from '@camstack/types';
 interface VirtualDoorbellAddonConfig {
     /** Per-camera debounce window (ms) against sensor chatter. */
     readonly debounceMs: number;
+    /**
+     * Reload the camera→source assignment map (and the binding mirror) at
+     * most this often — lazily, on trigger traffic. Covers devices/settings
+     * appearing after boot without a settings save, and is the cadence on
+     * which an unbind gets corroborated.
+     */
+    readonly assignmentsTtlMs: number;
 }
 /**
  * VirtualDoorbellAddon — WRAPPER over the `doorbell` capability.
@@ -27,28 +34,63 @@ interface VirtualDoorbellAddonConfig {
  *      bumps the camera's `doorbell` runtime-state counters via the
  *      standard `deviceState.setCapSlice` plumbing.
  *
- * Fires ONLY for cameras where the wrapper is BOUND (checked against
- * `deviceManager.getBindings`) and at least one source device is configured.
+ * Fires ONLY for cameras with at least one configured source device that
+ * this wrapper is BOUND to. The binding is NOT re-derived on the ring path:
+ * it is mirrored in memory (`binding-mirror.ts`) and refreshed on the
+ * assignment-reload cadence, because a fallible read must never be able to
+ * destroy a one-shot press.
  */
 export declare class VirtualDoorbellAddon extends BaseAddon<VirtualDoorbellAddonConfig> {
-    private readonly engine;
+    private engine;
     /** Monotonic guard: assignments are reloaded lazily on trigger traffic. */
     private assignmentsLoadedAt;
     private assignmentsLoading;
+    /**
+     * Per-camera mirror of "is this wrapper still the active doorbell
+     * binding". Written ONLY off the ring path; read on it. See
+     * `binding-mirror.ts` for why a single negative read is not believed.
+     */
+    private readonly bindingMirror;
     constructor();
     protected onInitialize(): Promise<ProviderRegistration[]>;
     private handleStateChanged;
     /**
-     * Ring the camera's virtual doorbell: verify the wrapper is BOUND to
-     * the camera, bump the `doorbell` runtime-state counters through the
-     * canonical `deviceState.setCapSlice` write, and emit the typed
-     * `DoorbellOnPressed` event with the CAMERA as source — byte-shaped
-     * like a native firmware ring so every downstream consumer (UI
-     * toast, notifier rules, exporters) is agnostic to the origin.
+     * Say out loud every case where a rise did NOT become a ring. Silence
+     * reads as "never happened": three real presses on camera 615 produced
+     * zero operator-visible lines because the drop logged at `debug`.
+     */
+    private logSuppressions;
+    /**
+     * Ring the camera's virtual doorbell: bump the `doorbell` runtime-state
+     * counters through the canonical `deviceState.setCapSlice` write, and
+     * emit the typed `DoorbellOnPressed` event with the CAMERA as source —
+     * byte-shaped like a native firmware ring so every downstream consumer
+     * (UI toast, notifier rules, exporters) is agnostic to the origin.
+     *
+     * The binding gate here is a pure in-memory read. It performs NO I/O and
+     * cannot fail: the whole point of the mirror is that the ring path can no
+     * longer be talked out of ringing by a store that answered badly.
      */
     private fireDoorbell;
-    /** True when THIS wrapper is the active `doorbell` binding for the camera. */
-    private isWrapperBound;
+    /**
+     * Fold one bindings read for `cameraId` into the mirror. Runs on the
+     * assignment-reload cadence, never while firing.
+     *
+     * A read that THROWS carries no information and leaves the mirror exactly
+     * as it was — the previous verdict keeps standing. A read that succeeds
+     * but omits our activation only ARMS a revocation; `nextBindingState`
+     * requires a second consecutive negative before the camera goes silent,
+     * because a genuine unbind and a store answering from an empty snapshot
+     * (D44) are indistinguishable in a single response.
+     */
+    private refreshBindingMirror;
+    /**
+     * Record a binding we observed FIRST-HAND. Both callers are cap methods
+     * the router only reaches by resolving this wrapper for this device —
+     * which it can only do through the binding — so a call is direct evidence
+     * and outranks anything the store says.
+     */
+    private confirmBindingFromCapCall;
     /**
      * Lazily (re)build the camera→source assignment set from every
      * camera's device store. TTL-bounded so devices/settings appearing