@camstack/system 1.2.83 → 1.2.85

package/dist/addon-runner.js

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_manifest_python_deps = require("./manifest-python-deps-DG_LLcZF.js");
+const require_manifest_python_deps = require("./manifest-python-deps-C0zkl1Ae.js");
 const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/addon-runner.mjs

@@ -1,4 +1,4 @@
-import { I as createUdsLoggerWithControl, L as LocalChildClient, at as setWorkerNativeCapsChangeListener, bt as installManifestNativeDeps, i as createUdsAddonContext, nt as getWorkerNativeCapProvider, rt as getWorkerNativeCapSnapshot, st as validateProviderRegistrations, t as installManifestPythonDeps, xt as resolveAddonClass } from "./manifest-python-deps-C1DMs1J9.mjs";
+import { I as createUdsLoggerWithControl, L as LocalChildClient, at as setWorkerNativeCapsChangeListener, bt as installManifestNativeDeps, i as createUdsAddonContext, nt as getWorkerNativeCapProvider, rt as getWorkerNativeCapSnapshot, st as validateProviderRegistrations, t as installManifestPythonDeps, xt as resolveAddonClass } from "./manifest-python-deps-fWzdEasI.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";
 import { register } from "node:module";
 import * as path$1 from "node:path";

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-DiScsb8j.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, gt as BaseAddon, ht as errMsg, v as addonPagesCapability } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, gt as BaseAddon, ht as errMsg, v as addonPagesCapability } from "../../dist-DWuNENzg.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-DiScsb8j.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, b as addonWidgetsCapability, gt as BaseAddon, ht as errMsg } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, b as addonWidgetsCapability, gt as BaseAddon, ht as errMsg } from "../../dist-DWuNENzg.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-DiScsb8j.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, gt as BaseAddon, ht as errMsg, kt as createEvent, n as AlertSchema, x as alertsCapability } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, gt as BaseAddon, ht as errMsg, kt as createEvent, n as AlertSchema, x as alertsCapability } from "../../dist-DWuNENzg.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-DiScsb8j.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { C as backupCapability, Ht as EventCategory, gt as BaseAddon } from "../../dist-EAvNJD24.mjs";
+import { C as backupCapability, Ht as EventCategory, gt as BaseAddon } from "../../dist-DWuNENzg.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-DiScsb8j.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-EAvNJD24.mjs";
+import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-DWuNENzg.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-DiScsb8j.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,4 +1,4 @@
-import { D as coreBlockIdFromAddonId, E as coreBlockAddonId, O as coreBlocksCapability, c as CoreBlockSchema, gt as BaseAddon, l as DeclaredDevices, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX } from "../../dist-EAvNJD24.mjs";
+import { D as coreBlockIdFromAddonId, E as coreBlockAddonId, O as coreBlocksCapability, c as CoreBlockSchema, gt as BaseAddon, l as DeclaredDevices, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX } from "../../dist-DWuNENzg.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-DiScsb8j.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 //#region src/builtins/device-manager/adoption-job-engine.ts
@@ -3705,10 +3705,22 @@ async function setMetadata(pctx, input) {
 * lifecycle gating is the driver's responsibility (BaseDevice
 * exposes `this.disabled` for the driver to consult at the top
 * of its lifecycle methods).
+*
+* TWO events leave here, and they are not the same message:
+*
+*  - `device.meta-changed` fires on EVERY call. It is the meta-surface echo
+*    every UI redraws on, and idempotence is not interesting to it.
+*  - `device.disabled` / `device.enabled` fire ONLY when the flag actually
+*    MOVES. They are the lifecycle announcement — the operator asked to be
+*    told when a camera is switched off, and a write that re-states a flag the
+*    device already had is not that. Telemetry semantics (D8) are fine here: a
+*    dropped announcement costs a notification, never durable state, and the
+*    meta row is the authority either way (D62 — this switch stores nothing of
+*    its own).
 */
 async function setDisabled(pctx, input) {
 	const { deviceId, disabled } = input;
-	await pctx.metaStore.withMetaWriteLock(async () => {
+	const moved = await pctx.metaStore.withMetaWriteLock(async () => {
 		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
 		if (!persisted) throw new Error(`[device-manager] setDisabled: unknown device id=${deviceId}`);
 		const { meta: m } = persisted;
@@ -3721,6 +3733,10 @@ async function setDisabled(pctx, input) {
 				disabled
 			}
 		} });
+		return {
+			changed: (m.disabled ?? false) !== disabled,
+			integrationId: m.integrationId ?? ""
+		};
 	});
 	pctx.host.ctx.eventBus.emit({
 		id: (0, node_crypto.randomUUID)(),
@@ -3736,6 +3752,20 @@ async function setDisabled(pctx, input) {
 			value: disabled
 		}
 	});
+	if (!moved.changed) return;
+	pctx.host.ctx.eventBus.emit({
+		id: (0, node_crypto.randomUUID)(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: deviceId
+		},
+		category: disabled ? require_dist.EventCategory.DeviceDisabled : require_dist.EventCategory.DeviceEnabled,
+		data: {
+			deviceId,
+			integrationId: moved.integrationId
+		}
+	});
 }
 async function loadRuntimeState(pctx, input) {
 	const { deviceId } = input;

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, I as enumerateItemArrayFields, L as enumerateSchemaFields, M as deviceStateCapability, N as deviceStatusCapability, Pt as isDeviceConfigCap, Q as normalizeUnit, St as DeviceType, T as buildStreamParamsConfigSchema, Tt as WELL_KNOWN_TAB_MAP, Vt as sleep, a as CAP_NAMES_WITH_STATUS, bt as DeviceFeature, et as parseStreamParamsFormPatch, gt as BaseAddon, ht as errMsg, j as deviceManagerCapability, p as STREAM_PROFILE_META, t as ALL_CAPABILITY_DEFINITIONS, u as DeviceStatusSchema, xt as DeviceRole } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, I as enumerateItemArrayFields, L as enumerateSchemaFields, M as deviceStateCapability, N as deviceStatusCapability, Pt as isDeviceConfigCap, Q as normalizeUnit, St as DeviceType, T as buildStreamParamsConfigSchema, Tt as WELL_KNOWN_TAB_MAP, Vt as sleep, a as CAP_NAMES_WITH_STATUS, bt as DeviceFeature, et as parseStreamParamsFormPatch, gt as BaseAddon, ht as errMsg, j as deviceManagerCapability, p as STREAM_PROFILE_META, t as ALL_CAPABILITY_DEFINITIONS, u as DeviceStatusSchema, xt as DeviceRole } from "../../dist-DWuNENzg.mjs";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 //#region src/builtins/device-manager/adoption-job-engine.ts
@@ -3700,10 +3700,22 @@ async function setMetadata(pctx, input) {
 * lifecycle gating is the driver's responsibility (BaseDevice
 * exposes `this.disabled` for the driver to consult at the top
 * of its lifecycle methods).
+*
+* TWO events leave here, and they are not the same message:
+*
+*  - `device.meta-changed` fires on EVERY call. It is the meta-surface echo
+*    every UI redraws on, and idempotence is not interesting to it.
+*  - `device.disabled` / `device.enabled` fire ONLY when the flag actually
+*    MOVES. They are the lifecycle announcement — the operator asked to be
+*    told when a camera is switched off, and a write that re-states a flag the
+*    device already had is not that. Telemetry semantics (D8) are fine here: a
+*    dropped announcement costs a notification, never durable state, and the
+*    meta row is the authority either way (D62 — this switch stores nothing of
+*    its own).
 */
 async function setDisabled(pctx, input) {
 	const { deviceId, disabled } = input;
-	await pctx.metaStore.withMetaWriteLock(async () => {
+	const moved = await pctx.metaStore.withMetaWriteLock(async () => {
 		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
 		if (!persisted) throw new Error(`[device-manager] setDisabled: unknown device id=${deviceId}`);
 		const { meta: m } = persisted;
@@ -3716,6 +3728,10 @@ async function setDisabled(pctx, input) {
 				disabled
 			}
 		} });
+		return {
+			changed: (m.disabled ?? false) !== disabled,
+			integrationId: m.integrationId ?? ""
+		};
 	});
 	pctx.host.ctx.eventBus.emit({
 		id: randomUUID(),
@@ -3731,6 +3747,20 @@ async function setDisabled(pctx, input) {
 			value: disabled
 		}
 	});
+	if (!moved.changed) return;
+	pctx.host.ctx.eventBus.emit({
+		id: randomUUID(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: deviceId
+		},
+		category: disabled ? EventCategory.DeviceDisabled : EventCategory.DeviceEnabled,
+		data: {
+			deviceId,
+			integrationId: moved.integrationId
+		}
+	});
 }
 async function loadRuntimeState(pctx, input) {
 	const { deviceId } = input;

package/dist/builtins/device-manager/device-meta-actions.d.ts

@@ -141,6 +141,18 @@ export declare function setMetadata(pctx: ProviderContext, input: Parameters<IDe
  * lifecycle gating is the driver's responsibility (BaseDevice
  * exposes `this.disabled` for the driver to consult at the top
  * of its lifecycle methods).
+ *
+ * TWO events leave here, and they are not the same message:
+ *
+ *  - `device.meta-changed` fires on EVERY call. It is the meta-surface echo
+ *    every UI redraws on, and idempotence is not interesting to it.
+ *  - `device.disabled` / `device.enabled` fire ONLY when the flag actually
+ *    MOVES. They are the lifecycle announcement — the operator asked to be
+ *    told when a camera is switched off, and a write that re-states a flag the
+ *    device already had is not that. Telemetry semantics (D8) are fine here: a
+ *    dropped announcement costs a notification, never durable state, and the
+ *    meta row is the authority either way (D62 — this switch stores nothing of
+ *    its own).
  */
 export declare function setDisabled(pctx: ProviderContext, input: Parameters<IDeviceManagerProvider['setDisabled']>[0]): ReturnType<IDeviceManagerProvider['setDisabled']>;
 export declare function loadRuntimeState(pctx: ProviderContext, input: Parameters<IDeviceManagerProvider['loadRuntimeState']>[0]): ReturnType<IDeviceManagerProvider['loadRuntimeState']>;

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-DiScsb8j.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, P as doorbellCapability, St as DeviceType, U as isSameAddonId, gt as BaseAddon, ht as errMsg, kt as createEvent, w as bareAddonId } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, P as doorbellCapability, St as DeviceType, U as isSameAddonId, gt as BaseAddon, ht as errMsg, kt as createEvent, w as bareAddonId } from "../../dist-DWuNENzg.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-DiScsb8j.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-EAvNJD24.mjs";
+import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-DWuNENzg.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-DiScsb8j.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, gt as BaseAddon, ht as errMsg, kt as createEvent } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, gt as BaseAddon, ht as errMsg, kt as createEvent } from "../../dist-DWuNENzg.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-DiScsb8j.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { S as authProviderCapability, _ as UserRecordSchema, ft as userManagementCapability, gt as BaseAddon, m as ScopedTokenSchema, r as ApiKeyRecordSchema } from "../../dist-EAvNJD24.mjs";
+import { S as authProviderCapability, _ as UserRecordSchema, ft as userManagementCapability, gt as BaseAddon, m as ScopedTokenSchema, r as ApiKeyRecordSchema } from "../../dist-DWuNENzg.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-DiScsb8j.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 //#region src/builtins/local-network/local-network.addon.ts

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, gt as BaseAddon, q as localNetworkCapability } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, gt as BaseAddon, q as localNetworkCapability } from "../../dist-DWuNENzg.mjs";
 import * as os from "node:os";
 //#region src/builtins/local-network/local-network.addon.ts
 /**

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-DiScsb8j.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-EAvNJD24.mjs";
+import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-DWuNENzg.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-DiScsb8j.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, Z as metricsProviderCapability, gt as BaseAddon, kt as createEvent } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, Z as metricsProviderCapability, gt as BaseAddon, kt as createEvent } from "../../dist-DWuNENzg.mjs";
 import { execFile, execFileSync } from "node:child_process";
 import { promisify } from "node:util";
 import * as os from "node:os";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-DiScsb8j.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { F as enumerateInferenceDevices, Ht as EventCategory, at as scoreRuntimes, gt as BaseAddon, ht as errMsg, jt as emitReadiness, tt as platformProbeCapability } from "../../dist-EAvNJD24.mjs";
+import { F as enumerateInferenceDevices, Ht as EventCategory, at as scoreRuntimes, gt as BaseAddon, ht as errMsg, jt as emitReadiness, tt as platformProbeCapability } from "../../dist-DWuNENzg.mjs";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import * as os from "node:os";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-DiScsb8j.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, gt as BaseAddon } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, gt as BaseAddon } from "../../dist-DWuNENzg.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-DiScsb8j.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -871,6 +871,11 @@ var SnapshotAddon = class SnapshotAddon extends require_dist.BaseAddon {
 	*  currently holding, which is a fleet-wide blank grid after each restart. */
 	linkSecret = null;
 	/**
+	* In-flight `serveLinkDataPlane` attempt, so the retry below cannot start a
+	* second one while the first is still awaiting the settings store.
+	*/
+	linkPlaneAttempt = null;
+	/**
 	* How a full frame becomes a card-sized one. Defaults to the real ffmpeg
 	* resize; injectable so the wrapper's own logic is testable without spawning a
 	* process for every fixture. `JpegResizer` was declared for exactly this and
@@ -899,7 +904,7 @@ var SnapshotAddon = class SnapshotAddon extends require_dist.BaseAddon {
 			if (typeof deviceId === "number") this.evictRemovedDevice(deviceId, "device-unregistered");
 		});
 		await this.serveMediaDataPlane();
-		await this.serveLinkDataPlane();
+		await this.ensureLinkDataPlane();
 		return [{
 			capability: require_dist.snapshotCapability,
 			provider
@@ -932,6 +937,33 @@ var SnapshotAddon = class SnapshotAddon extends require_dist.BaseAddon {
 		}
 	}
 	/**
+	* Serve the link plane if it is not already served — at init, and again on
+	* the first `getSnapshotLinks` after an attempt that could not finish.
+	*
+	* The retry is not defensive padding, it is the whole reason this wrapper
+	* exists. The plane needs a persisted signing secret, and the secret needs
+	* the settings store; this addon now boots in its OWN process, so "the store
+	* is not answering yet" is a state it can genuinely observe. A one-shot
+	* attempt turns that instant into a permanent condition: `linkDataPlane`
+	* stays null, every `getSnapshotLinks` row answers `url: null`, and every
+	* tile on every grid stays blank until someone restarts the runner. Nothing
+	* in the logs would say why, because nothing failed twice.
+	*
+	* Single-flighted: a burst of link requests joins one attempt.
+	*/
+	async ensureLinkDataPlane() {
+		if (this.linkDataPlane !== null) return;
+		if (this.linkPlaneAttempt !== null) {
+			await this.linkPlaneAttempt;
+			return;
+		}
+		const attempt = this.serveLinkDataPlane().finally(() => {
+			this.linkPlaneAttempt = null;
+		});
+		this.linkPlaneAttempt = attempt;
+		await attempt;
+	}
+	/**
 	* Serve the PUBLIC link plane: `GET /addon/snapshot/link/<deviceId>.jpg?w&v&exp&sig`.
 	*
 	* `access: 'public'` is deliberate and is the only interesting decision here.
@@ -1000,20 +1032,42 @@ var SnapshotAddon = class SnapshotAddon extends require_dist.BaseAddon {
 	linkRoutePrefix() {
 		return `/addon/${require_dist.bareAddonId(this.ctx.id)}/link`;
 	}
-	/** Mint-once-and-persist the signing secret. Null if it cannot be stored — a
-	*  secret held only in memory would break every outstanding link on restart,
-	*  so no plane is better than a plane whose links die unpredictably. */
+	/**
+	* Mint-once-and-persist the signing secret. Null when it cannot be
+	* ESTABLISHED — a secret held only in memory would break every outstanding
+	* link on restart, so no plane is better than a plane whose links die
+	* unpredictably.
+	*
+	* A null is never cached, so the next `getSnapshotLinks` tries again. That
+	* matters now the wrapper runs in its own process: the settings store can be
+	* a moment behind at boot, and this used to be a one-shot.
+	*
+	* The read-back is the gate. `state.get()` cannot distinguish "no secret
+	* yet" from "the store could not be read" — `readAddonStoreWithRetry` gives
+	* up and answers `{}` — so a store that is merely slow reads as empty and
+	* this would mint a SECOND secret over a perfectly good first one, silently
+	* invalidating every link a client is holding. Reading back what we just
+	* wrote is the only evidence available at this layer that the store is
+	* actually answering, and a mismatch means it is not.
+	*/
 	async ensureLinkSecret() {
 		if (this.linkSecret !== null) return this.linkSecret;
 		try {
 			const state = this.state("snapshotLinkSecret", zod.z.string(), "");
-			let secret = await state.get();
-			if (secret === "") {
-				secret = (0, node_crypto.randomUUID)().replace(/-/g, "");
-				await state.set(secret);
+			const stored = await state.get();
+			if (stored !== "") {
+				this.linkSecret = stored;
+				return stored;
+			}
+			const minted = (0, node_crypto.randomUUID)().replace(/-/g, "");
+			await state.set(minted);
+			const confirmed = await state.get();
+			if (confirmed !== minted) {
+				this.ctx.logger.warn("snapshot: link secret did not persist — deferring the link plane rather than signing with a secret that will not survive", { meta: { confirmedEmpty: confirmed === "" } });
+				return null;
 			}
-			this.linkSecret = secret;
-			return secret;
+			this.linkSecret = minted;
+			return minted;
 		} catch (err) {
 			this.ctx.logger.warn("snapshot: could not establish link signing secret", { meta: { error: require_dist.errMsg(err) } });
 			return null;
@@ -1044,6 +1098,7 @@ var SnapshotAddon = class SnapshotAddon extends require_dist.BaseAddon {
 	* forward.
 	*/
 	async getSnapshotLinks(input) {
+		await this.ensureLinkDataPlane();
 		const secret = await this.ensureLinkSecret();
 		const expMs = snapshotLinkExpiry(Date.now(), SNAPSHOT_LINK_TTL_MS);
 		const served = this.linkDataPlane !== null && secret !== null;