@camstack/system 1.2.85 → 1.2.87

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, gt as BaseAddon, ht as errMsg, v as addonPagesCapability } from "../../dist-DWuNENzg.mjs";
+import { Ut as EventCategory, _t as BaseAddon, gt as errMsg, v as addonPagesCapability } from "../../dist-CuAaqtdt.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, b as addonWidgetsCapability, gt as BaseAddon, ht as errMsg } from "../../dist-DWuNENzg.mjs";
+import { Ut as EventCategory, _t as BaseAddon, b as addonWidgetsCapability, gt as errMsg } from "../../dist-CuAaqtdt.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, gt as BaseAddon, ht as errMsg, kt as createEvent, n as AlertSchema, x as alertsCapability } from "../../dist-DWuNENzg.mjs";
+import { At as createEvent, Ut as EventCategory, _t as BaseAddon, gt as errMsg, n as AlertSchema, x as alertsCapability } from "../../dist-CuAaqtdt.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { C as backupCapability, Ht as EventCategory, gt as BaseAddon } from "../../dist-DWuNENzg.mjs";
+import { C as backupCapability, Ut as EventCategory, _t as BaseAddon } from "../../dist-CuAaqtdt.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-DWuNENzg.mjs";
+import { J as logDestinationCapability, _t as BaseAddon } from "../../dist-CuAaqtdt.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,4 +1,4 @@
-import { D as coreBlockIdFromAddonId, E as coreBlockAddonId, O as coreBlocksCapability, c as CoreBlockSchema, gt as BaseAddon, l as DeclaredDevices, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX } from "../../dist-DWuNENzg.mjs";
+import { D as coreBlockIdFromAddonId, E as coreBlockAddonId, O as coreBlocksCapability, _t as BaseAddon, c as CoreBlockSchema, l as DeclaredDevices, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX } from "../../dist-CuAaqtdt.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 //#region src/builtins/device-manager/adoption-job-engine.ts
@@ -3942,6 +3942,88 @@ var DeviceMetaStore = class {
 	};
 };
 //#endregion
+//#region src/builtins/device-manager/runtime-state-persist-gate.ts
+/**
+* The subset of `blob` that is allowed on disk: slices whose capability
+* declared `durability: 'restored'`.
+*
+* A cap the lookup does not know resolves to `'session'` and is dropped. That
+* direction is deliberate: the cost of losing a session value is a cold window
+* until the provider republishes; the cost of persisting an unasked-for one is
+* a commit per second on the fleet's busiest write path.
+*/
+function persistableBlob(blob, policyFor) {
+	const out = {};
+	for (const [capName, slice] of Object.entries(blob)) {
+		if (policyFor(capName).durability !== "restored") continue;
+		out[capName] = { ...slice };
+	}
+	return out;
+}
+/**
+* Are two slices the same, ignoring the fields the cap declared volatile?
+*
+* A volatile field is still WRITTEN — it simply does not, on its own, justify
+* the write. A field the cap did NOT declare volatile is content, even when its
+* name looks like a clock: the capability is the only authority on which of its
+* fields carry meaning (D4), and the guard makes an undeclared clock visible in
+* the diff rather than assuming it.
+*/
+function sliceEffectivelyEqual(a, b, volatileFields) {
+	const skip = new Set(volatileFields);
+	const keys = /* @__PURE__ */ new Set();
+	for (const k of Object.keys(a)) if (!skip.has(k)) keys.add(k);
+	for (const k of Object.keys(b)) if (!skip.has(k)) keys.add(k);
+	for (const k of keys) {
+		if (!deepEqual(a[k], b[k])) return false;
+		if (Object.hasOwn(a, k) !== Object.hasOwn(b, k)) return false;
+	}
+	return true;
+}
+/**
+* Is the whole persistable blob unchanged in every way that matters?
+*
+* A cap slice APPEARING or DISAPPEARING is always a change — the write is a
+* whole-blob replace, so a dropped slice only leaves disk if the write happens.
+*/
+function effectivelyEqual(before, after, policyFor) {
+	const caps = new Set([...Object.keys(before), ...Object.keys(after)]);
+	for (const capName of caps) {
+		const a = before[capName];
+		const b = after[capName];
+		if (a === void 0 || b === void 0) return false;
+		if (!sliceEffectivelyEqual(a, b, policyFor(capName).volatileFields)) return false;
+	}
+	return true;
+}
+/**
+* Structural equality over the JSON values a runtime-state slice can hold.
+* `NaN` compares equal to itself so a sensor that reports it does not rewrite
+* the blob forever.
+*/
+function deepEqual(a, b) {
+	if (a === b) return true;
+	if (typeof a === "number" && typeof b === "number") return Number.isNaN(a) && Number.isNaN(b);
+	if (a === null || b === null || typeof a !== "object" || typeof b !== "object") return false;
+	const aIsArray = Array.isArray(a);
+	if (aIsArray !== Array.isArray(b)) return false;
+	if (aIsArray) {
+		const bArr = b;
+		if (a.length !== bArr.length) return false;
+		for (let i = 0; i < a.length; i += 1) if (!deepEqual(a[i], bArr[i])) return false;
+		return true;
+	}
+	const aRec = a;
+	const bRec = b;
+	const aKeys = Object.keys(aRec);
+	if (aKeys.length !== Object.keys(bRec).length) return false;
+	for (const k of aKeys) {
+		if (!Object.hasOwn(bRec, k)) return false;
+		if (!deepEqual(aRec[k], bRec[k])) return false;
+	}
+	return true;
+}
+//#endregion
 //#region src/builtins/device-manager/device-state-mirror.ts
 /**
 * Hub-side runtime-state mirror for the device-manager addon.
@@ -3960,6 +4042,7 @@ var DeviceMetaStore = class {
 */
 var DeviceStateMirror = class DeviceStateMirror {
 	ctx;
+	policyFor;
 	/**
 	* Hub-side mirror of every device's cap-keyed runtime state.
 	* Key: deviceId. Value: per-cap slice map. Empty by default —
@@ -3973,8 +4056,24 @@ var DeviceStateMirror = class DeviceStateMirror {
 	*/
 	runtimeStateDebounce = /* @__PURE__ */ new Map();
 	static RUNTIME_STATE_DEBOUNCE_MS = 1e3;
-	constructor(ctx) {
+	/**
+	* What is believed to be ON DISK for each device — the persistable projection
+	* of the last blob actually written (or seeded at boot). The effective-change
+	* gate compares against THIS, not against the previous mirror state: two
+	* clock-only ticks in a row must not add up to a write just because each was
+	* compared with its immediate predecessor.
+	*/
+	lastPersisted = /* @__PURE__ */ new Map();
+	/**
+	* Per-device count of writes the effective-change gate skipped since the last
+	* real one. Reported on the next write that DOES happen, so the log says how
+	* much churn the gate absorbed instead of saying nothing at all — a branch
+	* that drops work silently reads as "never happened".
+	*/
+	skippedSinceWrite = /* @__PURE__ */ new Map();
+	constructor(ctx, policyFor = require_dist.runtimeStatePolicyFor) {
 		this.ctx = ctx;
+		this.policyFor = policyFor;
 	}
 	/**
 	* Single-cap mirror update — diff against the current mirror,
@@ -4001,13 +4100,23 @@ var DeviceStateMirror = class DeviceStateMirror {
 		return true;
 	}
 	/**
-	* Debounced disk writer. Coalesces frequent writes (motion phase
-	* transitions, battery pushes) into one `writeDeviceRuntimeState`
-	* per `RUNTIME_STATE_DEBOUNCE_MS` window. Reads the per-device
-	* blob from the live mirror at flush time so the disk picture is
+	* Debounced disk writer, behind two gates.
+	*
+	* GATE — DURABILITY: a change to a `durability: 'session'` cap never even
+	* arms the timer. That is where the fleet's write rate goes: `audio-metrics`
+	* and `zone-analytics` are ~90 % of the offered 12–19 writes/s, they change
+	* genuinely every second, and their restored value is worthless.
+	*
+	* GATE — EFFECTIVE CHANGE (at flush): the persistable blob is compared with
+	* what is believed to be on disk, ignoring the clock fields each cap declared
+	* volatile. `battery` wrote its blob 526 times in 25 minutes without one
+	* percentage moving; this is the gate that turns those into one write.
+	*
+	* The blob is read from the live mirror at flush time, so the disk picture is
 	* always the latest state — no risk of writing a stale snapshot.
 	*/
-	scheduleRuntimeStateDiskWrite(deviceId, settings) {
+	scheduleRuntimeStateDiskWrite(deviceId, settings, changedCap) {
+		if (this.policyFor(changedCap).durability !== "restored") return;
 		let slot = this.runtimeStateDebounce.get(deviceId);
 		if (!slot) {
 			slot = {
@@ -4019,10 +4128,21 @@ var DeviceStateMirror = class DeviceStateMirror {
 		if (slot.timer) return;
 		slot.timer = setTimeout(() => {
 			slot.timer = null;
-			const blob = this.snapshotForDevice(deviceId);
+			const blob = this.persistableForDevice(deviceId);
+			if (this.isAlreadyPersisted(deviceId, blob)) return;
+			const skipped = this.skippedSinceWrite.get(deviceId) ?? 0;
+			this.skippedSinceWrite.delete(deviceId);
 			const write = (async () => {
 				try {
 					await settings.writeDeviceRuntimeState(deviceId, blob);
+					this.lastPersisted.set(deviceId, blob);
+					if (skipped > 0) this.ctx.logger.debug("runtime state persisted", {
+						tags: { deviceId },
+						meta: {
+							caps: Object.keys(blob).length,
+							skippedSinceLastWrite: skipped
+						}
+					});
 				} catch (err) {
 					this.ctx.logger.warn("writeDeviceRuntimeState failed", {
 						tags: { deviceId },
@@ -4036,6 +4156,22 @@ var DeviceStateMirror = class DeviceStateMirror {
 		}, DeviceStateMirror.RUNTIME_STATE_DEBOUNCE_MS);
 	}
 	/**
+	* True when `blob` differs from what is believed to be on disk only in fields
+	* the owning caps declared volatile. Counts the skip so the next real write
+	* can report how much churn was absorbed.
+	*/
+	isAlreadyPersisted(deviceId, blob) {
+		const onDisk = this.lastPersisted.get(deviceId);
+		if (!onDisk) return false;
+		if (!effectivelyEqual(onDisk, blob, this.policyFor)) return false;
+		this.skippedSinceWrite.set(deviceId, (this.skippedSinceWrite.get(deviceId) ?? 0) + 1);
+		return true;
+	}
+	/** The device's mirror, restricted to the slices that may reach disk. */
+	persistableForDevice(deviceId) {
+		return persistableBlob(this.snapshotForDevice(deviceId), this.policyFor);
+	}
+	/**
 	* One-shot mirror seed used by `loadRuntimeState` at boot so the
 	* hub knows about every persisted slice without waiting for the
 	* first `setCapSlice` call. No events emitted — this is
@@ -4055,6 +4191,7 @@ var DeviceStateMirror = class DeviceStateMirror {
 			if (!raw || typeof raw !== "object" || Array.isArray(raw)) continue;
 			perCap.set(capName, { ...raw });
 		}
+		this.lastPersisted.set(deviceId, persistableBlob(this.snapshotForDevice(deviceId), this.policyFor));
 	}
 	/**
 	* The hub mirror's `feature-probe.lastProbedAt` is a PER-SESSION liveness
@@ -4168,15 +4305,15 @@ var DeviceStateMirror = class DeviceStateMirror {
 			if (slot.timer) {
 				clearTimeout(slot.timer);
 				slot.timer = null;
-				if (settings) {
-					const blob = this.snapshotForDevice(deviceId);
-					pending.push(settings.writeDeviceRuntimeState(deviceId, blob).catch((err) => {
-						this.ctx.logger.warn("shutdown writeDeviceRuntimeState failed", {
-							tags: { deviceId },
-							meta: { error: err instanceof Error ? err.message : String(err) }
-						});
-					}));
-				}
+				const blob = settings ? this.persistableForDevice(deviceId) : null;
+				if (settings && blob !== null && !this.isAlreadyPersisted(deviceId, blob)) pending.push(settings.writeDeviceRuntimeState(deviceId, blob).then(() => {
+					this.lastPersisted.set(deviceId, blob);
+				}).catch((err) => {
+					this.ctx.logger.warn("shutdown writeDeviceRuntimeState failed", {
+						tags: { deviceId },
+						meta: { error: err instanceof Error ? err.message : String(err) }
+					});
+				}));
 			}
 			if (slot.inFlight) pending.push(slot.inFlight);
 		}
@@ -4642,7 +4779,7 @@ var DeviceManagerAddon = class extends require_dist.BaseAddon {
 				setCapSlice: async (input) => {
 					const { deviceId, capName, slice } = input;
 					if (!await resolvePersistedById(deviceId)) throw new Error(`[device-manager] setCapSlice: unknown device id=${deviceId}`);
-					if (stateMirror.applySingleCapUpdate(deviceId, capName, slice)) stateMirror.scheduleRuntimeStateDiskWrite(deviceId, settings);
+					if (stateMirror.applySingleCapUpdate(deviceId, capName, slice)) stateMirror.scheduleRuntimeStateDiskWrite(deviceId, settings, capName);
 				}
 			}
 		}];

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, I as enumerateItemArrayFields, L as enumerateSchemaFields, M as deviceStateCapability, N as deviceStatusCapability, Pt as isDeviceConfigCap, Q as normalizeUnit, St as DeviceType, T as buildStreamParamsConfigSchema, Tt as WELL_KNOWN_TAB_MAP, Vt as sleep, a as CAP_NAMES_WITH_STATUS, bt as DeviceFeature, et as parseStreamParamsFormPatch, gt as BaseAddon, ht as errMsg, j as deviceManagerCapability, p as STREAM_PROFILE_META, t as ALL_CAPABILITY_DEFINITIONS, u as DeviceStatusSchema, xt as DeviceRole } from "../../dist-DWuNENzg.mjs";
+import { Ct as DeviceType, Et as WELL_KNOWN_TAB_MAP, Ft as isDeviceConfigCap, Ht as sleep, I as enumerateItemArrayFields, L as enumerateSchemaFields, M as deviceStateCapability, N as deviceStatusCapability, Q as normalizeUnit, St as DeviceRole, T as buildStreamParamsConfigSchema, Ut as EventCategory, _t as BaseAddon, a as CAP_NAMES_WITH_STATUS, et as parseStreamParamsFormPatch, gt as errMsg, j as deviceManagerCapability, p as STREAM_PROFILE_META, rt as runtimeStatePolicyFor, t as ALL_CAPABILITY_DEFINITIONS, u as DeviceStatusSchema, xt as DeviceFeature } from "../../dist-CuAaqtdt.mjs";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 //#region src/builtins/device-manager/adoption-job-engine.ts
@@ -3937,6 +3937,88 @@ var DeviceMetaStore = class {
 	};
 };
 //#endregion
+//#region src/builtins/device-manager/runtime-state-persist-gate.ts
+/**
+* The subset of `blob` that is allowed on disk: slices whose capability
+* declared `durability: 'restored'`.
+*
+* A cap the lookup does not know resolves to `'session'` and is dropped. That
+* direction is deliberate: the cost of losing a session value is a cold window
+* until the provider republishes; the cost of persisting an unasked-for one is
+* a commit per second on the fleet's busiest write path.
+*/
+function persistableBlob(blob, policyFor) {
+	const out = {};
+	for (const [capName, slice] of Object.entries(blob)) {
+		if (policyFor(capName).durability !== "restored") continue;
+		out[capName] = { ...slice };
+	}
+	return out;
+}
+/**
+* Are two slices the same, ignoring the fields the cap declared volatile?
+*
+* A volatile field is still WRITTEN — it simply does not, on its own, justify
+* the write. A field the cap did NOT declare volatile is content, even when its
+* name looks like a clock: the capability is the only authority on which of its
+* fields carry meaning (D4), and the guard makes an undeclared clock visible in
+* the diff rather than assuming it.
+*/
+function sliceEffectivelyEqual(a, b, volatileFields) {
+	const skip = new Set(volatileFields);
+	const keys = /* @__PURE__ */ new Set();
+	for (const k of Object.keys(a)) if (!skip.has(k)) keys.add(k);
+	for (const k of Object.keys(b)) if (!skip.has(k)) keys.add(k);
+	for (const k of keys) {
+		if (!deepEqual(a[k], b[k])) return false;
+		if (Object.hasOwn(a, k) !== Object.hasOwn(b, k)) return false;
+	}
+	return true;
+}
+/**
+* Is the whole persistable blob unchanged in every way that matters?
+*
+* A cap slice APPEARING or DISAPPEARING is always a change — the write is a
+* whole-blob replace, so a dropped slice only leaves disk if the write happens.
+*/
+function effectivelyEqual(before, after, policyFor) {
+	const caps = new Set([...Object.keys(before), ...Object.keys(after)]);
+	for (const capName of caps) {
+		const a = before[capName];
+		const b = after[capName];
+		if (a === void 0 || b === void 0) return false;
+		if (!sliceEffectivelyEqual(a, b, policyFor(capName).volatileFields)) return false;
+	}
+	return true;
+}
+/**
+* Structural equality over the JSON values a runtime-state slice can hold.
+* `NaN` compares equal to itself so a sensor that reports it does not rewrite
+* the blob forever.
+*/
+function deepEqual(a, b) {
+	if (a === b) return true;
+	if (typeof a === "number" && typeof b === "number") return Number.isNaN(a) && Number.isNaN(b);
+	if (a === null || b === null || typeof a !== "object" || typeof b !== "object") return false;
+	const aIsArray = Array.isArray(a);
+	if (aIsArray !== Array.isArray(b)) return false;
+	if (aIsArray) {
+		const bArr = b;
+		if (a.length !== bArr.length) return false;
+		for (let i = 0; i < a.length; i += 1) if (!deepEqual(a[i], bArr[i])) return false;
+		return true;
+	}
+	const aRec = a;
+	const bRec = b;
+	const aKeys = Object.keys(aRec);
+	if (aKeys.length !== Object.keys(bRec).length) return false;
+	for (const k of aKeys) {
+		if (!Object.hasOwn(bRec, k)) return false;
+		if (!deepEqual(aRec[k], bRec[k])) return false;
+	}
+	return true;
+}
+//#endregion
 //#region src/builtins/device-manager/device-state-mirror.ts
 /**
 * Hub-side runtime-state mirror for the device-manager addon.
@@ -3955,6 +4037,7 @@ var DeviceMetaStore = class {
 */
 var DeviceStateMirror = class DeviceStateMirror {
 	ctx;
+	policyFor;
 	/**
 	* Hub-side mirror of every device's cap-keyed runtime state.
 	* Key: deviceId. Value: per-cap slice map. Empty by default —
@@ -3968,8 +4051,24 @@ var DeviceStateMirror = class DeviceStateMirror {
 	*/
 	runtimeStateDebounce = /* @__PURE__ */ new Map();
 	static RUNTIME_STATE_DEBOUNCE_MS = 1e3;
-	constructor(ctx) {
+	/**
+	* What is believed to be ON DISK for each device — the persistable projection
+	* of the last blob actually written (or seeded at boot). The effective-change
+	* gate compares against THIS, not against the previous mirror state: two
+	* clock-only ticks in a row must not add up to a write just because each was
+	* compared with its immediate predecessor.
+	*/
+	lastPersisted = /* @__PURE__ */ new Map();
+	/**
+	* Per-device count of writes the effective-change gate skipped since the last
+	* real one. Reported on the next write that DOES happen, so the log says how
+	* much churn the gate absorbed instead of saying nothing at all — a branch
+	* that drops work silently reads as "never happened".
+	*/
+	skippedSinceWrite = /* @__PURE__ */ new Map();
+	constructor(ctx, policyFor = runtimeStatePolicyFor) {
 		this.ctx = ctx;
+		this.policyFor = policyFor;
 	}
 	/**
 	* Single-cap mirror update — diff against the current mirror,
@@ -3996,13 +4095,23 @@ var DeviceStateMirror = class DeviceStateMirror {
 		return true;
 	}
 	/**
-	* Debounced disk writer. Coalesces frequent writes (motion phase
-	* transitions, battery pushes) into one `writeDeviceRuntimeState`
-	* per `RUNTIME_STATE_DEBOUNCE_MS` window. Reads the per-device
-	* blob from the live mirror at flush time so the disk picture is
+	* Debounced disk writer, behind two gates.
+	*
+	* GATE — DURABILITY: a change to a `durability: 'session'` cap never even
+	* arms the timer. That is where the fleet's write rate goes: `audio-metrics`
+	* and `zone-analytics` are ~90 % of the offered 12–19 writes/s, they change
+	* genuinely every second, and their restored value is worthless.
+	*
+	* GATE — EFFECTIVE CHANGE (at flush): the persistable blob is compared with
+	* what is believed to be on disk, ignoring the clock fields each cap declared
+	* volatile. `battery` wrote its blob 526 times in 25 minutes without one
+	* percentage moving; this is the gate that turns those into one write.
+	*
+	* The blob is read from the live mirror at flush time, so the disk picture is
 	* always the latest state — no risk of writing a stale snapshot.
 	*/
-	scheduleRuntimeStateDiskWrite(deviceId, settings) {
+	scheduleRuntimeStateDiskWrite(deviceId, settings, changedCap) {
+		if (this.policyFor(changedCap).durability !== "restored") return;
 		let slot = this.runtimeStateDebounce.get(deviceId);
 		if (!slot) {
 			slot = {
@@ -4014,10 +4123,21 @@ var DeviceStateMirror = class DeviceStateMirror {
 		if (slot.timer) return;
 		slot.timer = setTimeout(() => {
 			slot.timer = null;
-			const blob = this.snapshotForDevice(deviceId);
+			const blob = this.persistableForDevice(deviceId);
+			if (this.isAlreadyPersisted(deviceId, blob)) return;
+			const skipped = this.skippedSinceWrite.get(deviceId) ?? 0;
+			this.skippedSinceWrite.delete(deviceId);
 			const write = (async () => {
 				try {
 					await settings.writeDeviceRuntimeState(deviceId, blob);
+					this.lastPersisted.set(deviceId, blob);
+					if (skipped > 0) this.ctx.logger.debug("runtime state persisted", {
+						tags: { deviceId },
+						meta: {
+							caps: Object.keys(blob).length,
+							skippedSinceLastWrite: skipped
+						}
+					});
 				} catch (err) {
 					this.ctx.logger.warn("writeDeviceRuntimeState failed", {
 						tags: { deviceId },
@@ -4031,6 +4151,22 @@ var DeviceStateMirror = class DeviceStateMirror {
 		}, DeviceStateMirror.RUNTIME_STATE_DEBOUNCE_MS);
 	}
 	/**
+	* True when `blob` differs from what is believed to be on disk only in fields
+	* the owning caps declared volatile. Counts the skip so the next real write
+	* can report how much churn was absorbed.
+	*/
+	isAlreadyPersisted(deviceId, blob) {
+		const onDisk = this.lastPersisted.get(deviceId);
+		if (!onDisk) return false;
+		if (!effectivelyEqual(onDisk, blob, this.policyFor)) return false;
+		this.skippedSinceWrite.set(deviceId, (this.skippedSinceWrite.get(deviceId) ?? 0) + 1);
+		return true;
+	}
+	/** The device's mirror, restricted to the slices that may reach disk. */
+	persistableForDevice(deviceId) {
+		return persistableBlob(this.snapshotForDevice(deviceId), this.policyFor);
+	}
+	/**
 	* One-shot mirror seed used by `loadRuntimeState` at boot so the
 	* hub knows about every persisted slice without waiting for the
 	* first `setCapSlice` call. No events emitted — this is
@@ -4050,6 +4186,7 @@ var DeviceStateMirror = class DeviceStateMirror {
 			if (!raw || typeof raw !== "object" || Array.isArray(raw)) continue;
 			perCap.set(capName, { ...raw });
 		}
+		this.lastPersisted.set(deviceId, persistableBlob(this.snapshotForDevice(deviceId), this.policyFor));
 	}
 	/**
 	* The hub mirror's `feature-probe.lastProbedAt` is a PER-SESSION liveness
@@ -4163,15 +4300,15 @@ var DeviceStateMirror = class DeviceStateMirror {
 			if (slot.timer) {
 				clearTimeout(slot.timer);
 				slot.timer = null;
-				if (settings) {
-					const blob = this.snapshotForDevice(deviceId);
-					pending.push(settings.writeDeviceRuntimeState(deviceId, blob).catch((err) => {
-						this.ctx.logger.warn("shutdown writeDeviceRuntimeState failed", {
-							tags: { deviceId },
-							meta: { error: err instanceof Error ? err.message : String(err) }
-						});
-					}));
-				}
+				const blob = settings ? this.persistableForDevice(deviceId) : null;
+				if (settings && blob !== null && !this.isAlreadyPersisted(deviceId, blob)) pending.push(settings.writeDeviceRuntimeState(deviceId, blob).then(() => {
+					this.lastPersisted.set(deviceId, blob);
+				}).catch((err) => {
+					this.ctx.logger.warn("shutdown writeDeviceRuntimeState failed", {
+						tags: { deviceId },
+						meta: { error: err instanceof Error ? err.message : String(err) }
+					});
+				}));
 			}
 			if (slot.inFlight) pending.push(slot.inFlight);
 		}
@@ -4637,7 +4774,7 @@ var DeviceManagerAddon = class extends BaseAddon {
 				setCapSlice: async (input) => {
 					const { deviceId, capName, slice } = input;
 					if (!await resolvePersistedById(deviceId)) throw new Error(`[device-manager] setCapSlice: unknown device id=${deviceId}`);
-					if (stateMirror.applySingleCapUpdate(deviceId, capName, slice)) stateMirror.scheduleRuntimeStateDiskWrite(deviceId, settings);
+					if (stateMirror.applySingleCapUpdate(deviceId, capName, slice)) stateMirror.scheduleRuntimeStateDiskWrite(deviceId, settings, capName);
 				}
 			}
 		}];