@camstack/system 1.2.85 → 1.2.87

package/dist/builtins/device-manager/device-state-mirror.d.ts

@@ -1,7 +1,14 @@
 import { AddonContext } from '@camstack/types';
 import { DeviceManagerSettings } from './device-meta-store.js';
+import { RuntimeStatePolicyLookup } from './runtime-state-persist-gate.js';
 export declare class DeviceStateMirror {
     private readonly ctx;
+    /**
+     * Per-cap durability + volatile-field policy. Defaults to the codegen'd
+     * projection of every `*.cap.ts` (D4: the cap declares, the kernel reads).
+     * Injectable so a spec can exercise the gate without the real cap set.
+     */
+    private readonly policyFor;
     /**
      * Hub-side mirror of every device's cap-keyed runtime state.
      * Key: deviceId. Value: per-cap slice map. Empty by default —
@@ -15,7 +22,28 @@ export declare class DeviceStateMirror {
      */
     private readonly runtimeStateDebounce;
     private static readonly RUNTIME_STATE_DEBOUNCE_MS;
-    constructor(ctx: AddonContext);
+    /**
+     * What is believed to be ON DISK for each device — the persistable projection
+     * of the last blob actually written (or seeded at boot). The effective-change
+     * gate compares against THIS, not against the previous mirror state: two
+     * clock-only ticks in a row must not add up to a write just because each was
+     * compared with its immediate predecessor.
+     */
+    private readonly lastPersisted;
+    /**
+     * Per-device count of writes the effective-change gate skipped since the last
+     * real one. Reported on the next write that DOES happen, so the log says how
+     * much churn the gate absorbed instead of saying nothing at all — a branch
+     * that drops work silently reads as "never happened".
+     */
+    private readonly skippedSinceWrite;
+    constructor(ctx: AddonContext, 
+    /**
+     * Per-cap durability + volatile-field policy. Defaults to the codegen'd
+     * projection of every `*.cap.ts` (D4: the cap declares, the kernel reads).
+     * Injectable so a spec can exercise the gate without the real cap set.
+     */
+    policyFor?: RuntimeStatePolicyLookup);
     /**
      * Single-cap mirror update — diff against the current mirror,
      * persist the new slice in-memory, emit `DeviceStateChanged` for
@@ -30,13 +58,30 @@ export declare class DeviceStateMirror {
      */
     applySingleCapUpdate(deviceId: number, capName: string, slice: Record<string, unknown>): boolean;
     /**
-     * Debounced disk writer. Coalesces frequent writes (motion phase
-     * transitions, battery pushes) into one `writeDeviceRuntimeState`
-     * per `RUNTIME_STATE_DEBOUNCE_MS` window. Reads the per-device
-     * blob from the live mirror at flush time so the disk picture is
+     * Debounced disk writer, behind two gates.
+     *
+     * GATE — DURABILITY: a change to a `durability: 'session'` cap never even
+     * arms the timer. That is where the fleet's write rate goes: `audio-metrics`
+     * and `zone-analytics` are ~90 % of the offered 12–19 writes/s, they change
+     * genuinely every second, and their restored value is worthless.
+     *
+     * GATE — EFFECTIVE CHANGE (at flush): the persistable blob is compared with
+     * what is believed to be on disk, ignoring the clock fields each cap declared
+     * volatile. `battery` wrote its blob 526 times in 25 minutes without one
+     * percentage moving; this is the gate that turns those into one write.
+     *
+     * The blob is read from the live mirror at flush time, so the disk picture is
      * always the latest state — no risk of writing a stale snapshot.
      */
-    scheduleRuntimeStateDiskWrite(deviceId: number, settings: DeviceManagerSettings): void;
+    scheduleRuntimeStateDiskWrite(deviceId: number, settings: DeviceManagerSettings, changedCap: string): void;
+    /**
+     * True when `blob` differs from what is believed to be on disk only in fields
+     * the owning caps declared volatile. Counts the skip so the next real write
+     * can report how much churn was absorbed.
+     */
+    private isAlreadyPersisted;
+    /** The device's mirror, restricted to the slices that may reach disk. */
+    private persistableForDevice;
     /**
      * One-shot mirror seed used by `loadRuntimeState` at boot so the
      * hub knows about every persisted slice without waiting for the

package/dist/builtins/device-manager/runtime-state-persist-gate.d.ts

@@ -0,0 +1,32 @@
+import { RuntimeStatePolicy } from '@camstack/types';
+/** Resolves the declared policy for a cap name. */
+export type RuntimeStatePolicyLookup = (capName: string) => RuntimeStatePolicy;
+/** A device's cap-keyed slice map, as mirrored and as persisted. */
+export type RuntimeStateBlob = Readonly<Record<string, Readonly<Record<string, unknown>>>>;
+/**
+ * The subset of `blob` that is allowed on disk: slices whose capability
+ * declared `durability: 'restored'`.
+ *
+ * A cap the lookup does not know resolves to `'session'` and is dropped. That
+ * direction is deliberate: the cost of losing a session value is a cold window
+ * until the provider republishes; the cost of persisting an unasked-for one is
+ * a commit per second on the fleet's busiest write path.
+ */
+export declare function persistableBlob(blob: RuntimeStateBlob, policyFor: RuntimeStatePolicyLookup): Record<string, Record<string, unknown>>;
+/**
+ * Are two slices the same, ignoring the fields the cap declared volatile?
+ *
+ * A volatile field is still WRITTEN — it simply does not, on its own, justify
+ * the write. A field the cap did NOT declare volatile is content, even when its
+ * name looks like a clock: the capability is the only authority on which of its
+ * fields carry meaning (D4), and the guard makes an undeclared clock visible in
+ * the diff rather than assuming it.
+ */
+export declare function sliceEffectivelyEqual(a: Readonly<Record<string, unknown>>, b: Readonly<Record<string, unknown>>, volatileFields: readonly string[]): boolean;
+/**
+ * Is the whole persistable blob unchanged in every way that matters?
+ *
+ * A cap slice APPEARING or DISAPPEARING is always a change — the write is a
+ * whole-blob replace, so a dropped slice only leaves disk if the write happens.
+ */
+export declare function effectivelyEqual(before: RuntimeStateBlob, after: RuntimeStateBlob, policyFor: RuntimeStatePolicyLookup): boolean;

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, P as doorbellCapability, St as DeviceType, U as isSameAddonId, gt as BaseAddon, ht as errMsg, kt as createEvent, w as bareAddonId } from "../../dist-DWuNENzg.mjs";
+import { At as createEvent, Ct as DeviceType, P as doorbellCapability, U as isSameAddonId, Ut as EventCategory, _t as BaseAddon, gt as errMsg, w as bareAddonId } from "../../dist-CuAaqtdt.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-DWuNENzg.mjs";
+import { J as logDestinationCapability, _t as BaseAddon } from "../../dist-CuAaqtdt.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, gt as BaseAddon, ht as errMsg, kt as createEvent } from "../../dist-DWuNENzg.mjs";
+import { At as createEvent, Ut as EventCategory, _t as BaseAddon, gt as errMsg } from "../../dist-CuAaqtdt.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { S as authProviderCapability, _ as UserRecordSchema, ft as userManagementCapability, gt as BaseAddon, m as ScopedTokenSchema, r as ApiKeyRecordSchema } from "../../dist-DWuNENzg.mjs";
+import { S as authProviderCapability, _ as UserRecordSchema, _t as BaseAddon, m as ScopedTokenSchema, pt as userManagementCapability, r as ApiKeyRecordSchema } from "../../dist-CuAaqtdt.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 //#region src/builtins/local-network/local-network.addon.ts

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, gt as BaseAddon, q as localNetworkCapability } from "../../dist-DWuNENzg.mjs";
+import { Ut as EventCategory, _t as BaseAddon, q as localNetworkCapability } from "../../dist-CuAaqtdt.mjs";
 import * as os from "node:os";
 //#region src/builtins/local-network/local-network.addon.ts
 /**

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-DWuNENzg.mjs";
+import { J as logDestinationCapability, _t as BaseAddon } from "../../dist-CuAaqtdt.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, Z as metricsProviderCapability, gt as BaseAddon, kt as createEvent } from "../../dist-DWuNENzg.mjs";
+import { At as createEvent, Ut as EventCategory, Z as metricsProviderCapability, _t as BaseAddon } from "../../dist-CuAaqtdt.mjs";
 import { execFile, execFileSync } from "node:child_process";
 import { promisify } from "node:util";
 import * as os from "node:os";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { F as enumerateInferenceDevices, Ht as EventCategory, at as scoreRuntimes, gt as BaseAddon, ht as errMsg, jt as emitReadiness, tt as platformProbeCapability } from "../../dist-DWuNENzg.mjs";
+import { F as enumerateInferenceDevices, Mt as emitReadiness, Ut as EventCategory, _t as BaseAddon, gt as errMsg, ot as scoreRuntimes, tt as platformProbeCapability } from "../../dist-CuAaqtdt.mjs";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import * as os from "node:os";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, gt as BaseAddon } from "../../dist-DWuNENzg.mjs";
+import { Ut as EventCategory, _t as BaseAddon } from "../../dist-CuAaqtdt.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Ft as nodePin, Ht as EventCategory, St as DeviceType, bt as DeviceFeature, dt as streamQualityLabel, gt as BaseAddon, ht as errMsg, i as BatteryStatusSchema, st as snapshotCapability, w as bareAddonId } from "../../dist-DWuNENzg.mjs";
+import { Ct as DeviceType, It as nodePin, Ut as EventCategory, _t as BaseAddon, ct as snapshotCapability, ft as streamQualityLabel, gt as errMsg, i as BatteryStatusSchema, w as bareAddonId, xt as DeviceFeature } from "../../dist-CuAaqtdt.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { signExpiringUrl, verifyExpiringUrl } from "@camstack/types/node";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { gt as BaseAddon, ut as storageProviderCapability, z as filesystemBrowseCapability } from "../../dist-DWuNENzg.mjs";
+import { _t as BaseAddon, dt as storageProviderCapability, z as filesystemBrowseCapability } from "../../dist-CuAaqtdt.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/sqlite-storage/sqlite-settings-backend.d.ts

@@ -138,6 +138,21 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
     getAddonDevice(addonId: string, deviceId: string): Record<string, unknown>;
     setAddonDevice(addonId: string, deviceId: string, values: Record<string, unknown>): void;
     clearAddonDevice(addonId: string, deviceId: string): void;
+    private static readonly LEGACY_RUNTIME_STATE_ADDON_ID;
+    /**
+     * The device's whole cap-slice map. Canonical row first, legacy prefix as the
+     * fallback. `{}` — never null — when the device has never persisted a slice,
+     * because every caller treats the result as a cap map to iterate.
+     */
+    getDeviceRuntimeState(deviceId: string): Record<string, unknown>;
+    /**
+     * Replace the device's whole cap-slice map. Replace, not merge — the caller
+     * always hands over the full persistable blob, and merging would resurrect a
+     * slice the durability policy has since stopped persisting.
+     */
+    setDeviceRuntimeState(deviceId: string, blob: Record<string, unknown>): void;
+    /** Forget the device's runtime state in BOTH stores (device removal). */
+    clearDeviceRuntimeState(deviceId: string): void;
     /** Seed system-settings with runtime defaults (first boot) */
     private seedDefaults;
     /**

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
 let node_module = require("node:module");
@@ -961,6 +961,42 @@ var SqliteSettingsBackend = class SqliteSettingsBackend {
 		const where = this.prefixWhere(`${addonId}:${deviceId}.`);
 		this.getDb().prepare(`DELETE FROM "addon-device-settings" WHERE ${where.sql}`).run(...where.params);
 	}
+	static LEGACY_RUNTIME_STATE_ADDON_ID = "__device-state";
+	/**
+	* The device's whole cap-slice map. Canonical row first, legacy prefix as the
+	* fallback. `{}` — never null — when the device has never persisted a slice,
+	* because every caller treats the result as a cap map to iterate.
+	*/
+	getDeviceRuntimeState(deviceId) {
+		this.requireDeclared("device-runtime-state");
+		const row = this.getDb().prepare("SELECT data FROM \"device-runtime-state\" WHERE id = ?").get(deviceId);
+		if (row) return parseRowData(row.data);
+		return this.getAddonDevice(SqliteSettingsBackend.LEGACY_RUNTIME_STATE_ADDON_ID, deviceId);
+	}
+	/**
+	* Replace the device's whole cap-slice map. Replace, not merge — the caller
+	* always hands over the full persistable blob, and merging would resurrect a
+	* slice the durability policy has since stopped persisting.
+	*/
+	setDeviceRuntimeState(deviceId, blob) {
+		this.requireDeclared("device-runtime-state");
+		this.requireDeclared("addon-device-settings");
+		const db = this.getDb();
+		const upsert = db.prepare(`INSERT INTO "device-runtime-state" (id, data) VALUES (?, ?)
+       ON CONFLICT(id) DO UPDATE SET data = excluded.data`);
+		const legacy = this.prefixWhere(`${SqliteSettingsBackend.LEGACY_RUNTIME_STATE_ADDON_ID}:${deviceId}.`);
+		const retire = db.prepare(`DELETE FROM "addon-device-settings" WHERE ${legacy.sql}`);
+		db.transaction(() => {
+			upsert.run(deviceId, JSON.stringify(blob));
+			retire.run(...legacy.params);
+		})();
+	}
+	/** Forget the device's runtime state in BOTH stores (device removal). */
+	clearDeviceRuntimeState(deviceId) {
+		this.requireDeclared("device-runtime-state");
+		this.getDb().prepare("DELETE FROM \"device-runtime-state\" WHERE id = ?").run(deviceId);
+		this.clearAddonDevice(SqliteSettingsBackend.LEGACY_RUNTIME_STATE_ADDON_ID, deviceId);
+	}
 	/** Seed system-settings with runtime defaults (first boot) */
 	async seedDefaults() {
 		this.requireDeclared("system-settings");

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,4 +1,4 @@
-import { A as decodeVectorBase64, Et as asJsonObject, Lt as parseJsonUnknown, f as RUNTIME_DEFAULTS, gt as BaseAddon, ht as errMsg, k as dataStoreProviderCapability, mt as vectorStoreCapability, pt as vectorDimFromBase64, w as bareAddonId } from "../../dist-DWuNENzg.mjs";
+import { A as decodeVectorBase64, Dt as asJsonObject, Rt as parseJsonUnknown, _t as BaseAddon, f as RUNTIME_DEFAULTS, gt as errMsg, ht as vectorStoreCapability, k as dataStoreProviderCapability, mt as vectorDimFromBase64, w as bareAddonId } from "../../dist-CuAaqtdt.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { statSync } from "node:fs";
@@ -955,6 +955,42 @@ var SqliteSettingsBackend = class SqliteSettingsBackend {
 		const where = this.prefixWhere(`${addonId}:${deviceId}.`);
 		this.getDb().prepare(`DELETE FROM "addon-device-settings" WHERE ${where.sql}`).run(...where.params);
 	}
+	static LEGACY_RUNTIME_STATE_ADDON_ID = "__device-state";
+	/**
+	* The device's whole cap-slice map. Canonical row first, legacy prefix as the
+	* fallback. `{}` — never null — when the device has never persisted a slice,
+	* because every caller treats the result as a cap map to iterate.
+	*/
+	getDeviceRuntimeState(deviceId) {
+		this.requireDeclared("device-runtime-state");
+		const row = this.getDb().prepare("SELECT data FROM \"device-runtime-state\" WHERE id = ?").get(deviceId);
+		if (row) return parseRowData(row.data);
+		return this.getAddonDevice(SqliteSettingsBackend.LEGACY_RUNTIME_STATE_ADDON_ID, deviceId);
+	}
+	/**
+	* Replace the device's whole cap-slice map. Replace, not merge — the caller
+	* always hands over the full persistable blob, and merging would resurrect a
+	* slice the durability policy has since stopped persisting.
+	*/
+	setDeviceRuntimeState(deviceId, blob) {
+		this.requireDeclared("device-runtime-state");
+		this.requireDeclared("addon-device-settings");
+		const db = this.getDb();
+		const upsert = db.prepare(`INSERT INTO "device-runtime-state" (id, data) VALUES (?, ?)
+       ON CONFLICT(id) DO UPDATE SET data = excluded.data`);
+		const legacy = this.prefixWhere(`${SqliteSettingsBackend.LEGACY_RUNTIME_STATE_ADDON_ID}:${deviceId}.`);
+		const retire = db.prepare(`DELETE FROM "addon-device-settings" WHERE ${legacy.sql}`);
+		db.transaction(() => {
+			upsert.run(deviceId, JSON.stringify(blob));
+			retire.run(...legacy.params);
+		})();
+	}
+	/** Forget the device's runtime state in BOTH stores (device removal). */
+	clearDeviceRuntimeState(deviceId) {
+		this.requireDeclared("device-runtime-state");
+		this.getDb().prepare("DELETE FROM \"device-runtime-state\" WHERE id = ?").run(deviceId);
+		this.clearAddonDevice(SqliteSettingsBackend.LEGACY_RUNTIME_STATE_ADDON_ID, deviceId);
+	}
 	/** Seed system-settings with runtime defaults (first boot) */
 	async seedDefaults() {
 		this.requireDeclared("system-settings");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { It as parseJsonObject, ct as storageCapability, g as StorageMigrationJobSchema, gt as BaseAddon, h as StorageLocationTypeSchema, lt as storageMigrationCapability, ot as settingsStoreCapability } from "../../dist-DWuNENzg.mjs";
+import { Lt as parseJsonObject, _t as BaseAddon, g as StorageMigrationJobSchema, h as StorageLocationTypeSchema, lt as storageCapability, st as settingsStoreCapability, ut as storageMigrationCapability } from "../../dist-CuAaqtdt.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { Nt as hydrateSchema, gt as BaseAddon, ht as errMsg } from "../../dist-DWuNENzg.mjs";
+import { Pt as hydrateSchema, _t as BaseAddon, gt as errMsg } from "../../dist-CuAaqtdt.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DiScsb8j.js");
+const require_dist = require("../../dist-D4nuaPdd.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-DWuNENzg.mjs";
+import { J as logDestinationCapability, _t as BaseAddon } from "../../dist-CuAaqtdt.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";