@camstack/system 1.2.92 → 1.2.94

package/dist/builtins/snapshot/snapshot.addon.d.ts

@@ -40,9 +40,14 @@ export declare class SnapshotAddon extends BaseAddon<SnapshotAddonConfig> {
      * A courtesy frame is a pure function of those three, so it is rendered once
      * and reused for as long as the process lives — a disabled camera must not
      * cost an ffmpeg run per poll. Unbounded on purpose: the key space is
-     * (3 reasons × this node's own cameras), not user input.
+     * (state reasons × this node's own cameras), not user input.
      */
     private readonly courtesyFrames;
+    /** State overlays over real cached frames, grouped by device so invalidation
+     *  can discard every generation in O(1). */
+    private readonly stateFrames;
+    /** Devices inside the explicit battery wake-in-progress window. */
+    private readonly wakingDevices;
     /**
      * De-dupes concurrent captures per `${deviceId}:${streamId}` and holds a
      * settled SUCCESS for COALESCE_MS so a grid-mount burst (and a row of refresh
@@ -201,9 +206,7 @@ export declare class SnapshotAddon extends BaseAddon<SnapshotAddonConfig> {
      * the Viewer's 15-second currency contract and the link-mint wait bound.
      */
     private awaitFreshEnough;
-    /** True only for a BATTERY device that is currently asleep. Kept as one
-     *  question so the link path cannot accidentally treat "battery" as "asleep"
-     *  and stop refreshing a camera that is awake and streaming. */
+    /** True only for a battery device that must not be snapshot-refreshed. */
     private isSleepingBatteryDevice;
     /**
      * Resolve a device (+ optional stream, + force) to renderable JPEG bytes for
@@ -225,8 +228,8 @@ export declare class SnapshotAddon extends BaseAddon<SnapshotAddonConfig> {
      */
     private peekFreshFrame;
     /**
-     * The frame at a card-sized width, derived once per (device, stream, width)
-     * per capture.
+     * The frame at a card-sized width, derived once per
+     * (device, stream, width, state treatment) per capture.
      *
      * A failed resize falls back to the FULL frame — a visible card beats a
      * broken one — but never silently: the card would otherwise keep costing a
@@ -355,25 +358,26 @@ export declare class SnapshotAddon extends BaseAddon<SnapshotAddonConfig> {
      */
     private deviceStillExists;
     /**
-     * Sleep state from the device-state MIRROR, not from a cap round-trip.
+     * Resolve the state that must be visible on a snapshot.
      *
-     * `fetchDevice(id).state.battery` is a `SliceHandle` over the hub's
-     * runtime-state mirror: a local read, no RPC, no failure branch to get
-     * wrong. It is the same mirror that feeds the battery badge elsewhere
-     * in the UI, so if the operator can see "sleeping" on screen, this
-     * sees it too. (Both spec harnesses already model exactly this wiring
-     * — like the orphaned doc comment above, it outlived the gate it was
-     * built for.)
+     * Uses the same two canonical sources as wake-on-play:
+     *  1. `deviceManager.getDevice` for the registry's BatteryOperated feature;
+     *  2. `deviceState.getCapSlice('battery')` for the durable runtime mirror.
      *
-     * `undefined` slice → the device has no battery state we know of →
-     * treated as awake. The caller has already established the device is
-     * battery-operated from its feature flags, so this only decides
-     * WHETHER IT IS ASLEEP, never whether it has a battery.
+     * A valid battery slice is itself positive evidence that the device is
+     * battery-operated. That closes the field failure where "Baby monitor" had a
+     * sleeping battery slice but a stale persisted feature projection, so the
+     * snapshot wrapper classified it as mains and a Viewer thumbnail logged in
+     * to the sleeping camera. The reverse is deliberately not guessed: no
+     * feature + no valid slice remains a mains/unknown camera and follows the
+     * ordinary capture path.
      *
-     * Only consulted on the path that would otherwise CAPTURE — a fresh
-     * cache hit returns before we get here.
+     * Once battery-operated is established, a missing slice fails safe toward
+     * `sleeping` through the shared `deriveBatteryPresence` function. This avoids
+     * a background wake without inventing an `unreachable` fault.
      */
-    private isDeviceSleeping;
+    private resolveSnapshotState;
+    private isDeviceWaking;
     /**
      * True when at least one of the device's brokers is actively
      * streaming (status === 'streaming'). Used by the battery-cam guard
@@ -421,13 +425,18 @@ export declare class SnapshotAddon extends BaseAddon<SnapshotAddonConfig> {
     private courtesyFrame;
     /** A courtesy frame shaped as the cap's response, or null when unrenderable. */
     private courtesyImage;
+    /**
+     * Render a state-labelled answer. A cached real frame is the background, not
+     * the answer by itself; if it cannot be decoded, fall back to the generated
+     * courtesy background rather than leaking an unlabelled stale frame.
+     */
+    private stateImage;
     /**
      * Single-trip device lookup against device-manager. Returns the
-     * fields the wrapper actually consults — name (logging) + battery
-     * flag (cache window + broker-fallback gate). Sourced from the
-     * device-manager registry rather than the battery cap so the answer
-     * survives a momentarily-unreachable provider (the very condition
-     * we're trying to be resilient to).
+     * stable registry fields the wrapper consults. Battery classification is
+     * completed by `resolveSnapshotState` from this feature flag PLUS the
+     * canonical runtime-state mirror, so a stale persisted feature projection
+     * cannot authorize a snapshot dial against a known sleeping battery camera.
      *
      * Logged at debug + null return on failure: every call site already
      * has a sensible fallback path (cache hit, conservative default, …),

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BH2tZ9ZN.js");
+const require_dist = require("../../dist-BspfS8Q7.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { _t as BaseAddon, dt as storageProviderCapability, z as filesystemBrowseCapability } from "../../dist-DXDvrBi0.mjs";
+import { V as filesystemBrowseCapability, pt as storageProviderCapability, yt as BaseAddon } from "../../dist-COd223t-.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BH2tZ9ZN.js");
+const require_dist = require("../../dist-BspfS8Q7.js");
 let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
 let node_module = require("node:module");

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,4 +1,4 @@
-import { A as decodeVectorBase64, Dt as asJsonObject, Rt as parseJsonUnknown, _t as BaseAddon, f as RUNTIME_DEFAULTS, gt as errMsg, ht as vectorStoreCapability, k as dataStoreProviderCapability, mt as vectorDimFromBase64, w as bareAddonId } from "../../dist-DXDvrBi0.mjs";
+import { A as dataStoreProviderCapability, Bt as parseJsonUnknown, _t as vectorStoreCapability, f as RUNTIME_DEFAULTS, gt as vectorDimFromBase64, j as decodeVectorBase64, kt as asJsonObject, vt as errMsg, w as bareAddonId, yt as BaseAddon } from "../../dist-COd223t-.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { statSync } from "node:fs";

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BH2tZ9ZN.js");
+const require_dist = require("../../dist-BspfS8Q7.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Lt as parseJsonObject, _t as BaseAddon, g as StorageMigrationJobSchema, h as StorageLocationTypeSchema, lt as storageCapability, st as settingsStoreCapability, ut as storageMigrationCapability } from "../../dist-DXDvrBi0.mjs";
+import { dt as storageCapability, ft as storageMigrationCapability, g as StorageMigrationJobSchema, h as StorageLocationTypeSchema, lt as settingsStoreCapability, yt as BaseAddon, zt as parseJsonObject } from "../../dist-COd223t-.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BH2tZ9ZN.js");
+const require_dist = require("../../dist-BspfS8Q7.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { Pt as hydrateSchema, _t as BaseAddon, gt as errMsg } from "../../dist-DXDvrBi0.mjs";
+import { It as hydrateSchema, vt as errMsg, yt as BaseAddon } from "../../dist-COd223t-.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BH2tZ9ZN.js");
+const require_dist = require("../../dist-BspfS8Q7.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { J as logDestinationCapability, _t as BaseAddon } from "../../dist-DXDvrBi0.mjs";
+import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-COd223t-.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{dist-BH2tZ9ZN.js → dist-BspfS8Q7.js}

@@ -20825,6 +20825,25 @@ var BatteryStatusSchema = zod.z.object({
 	/** Ms epoch of the last observation. Lets consumers reason about freshness. */
 	lastUpdated: zod.z.number(),
 	/**
+	* Ms epoch of the last time the device PROVED it was reachable — a
+	* completed firmware round-trip, an observed wake, or an inbound push
+	* (firmware event, email). `0`/absent = never since this slice was born.
+	*
+	* This is the ONLY input that separates "asleep" from "gone", and it is
+	* fed exclusively by PASSIVE signals: nothing may write it by reaching
+	* for the radio, because a poll that confirms reachability is the same
+	* poll that drains the battery. See {@link deriveBatteryPresence} — the
+	* single derivation every consumer must use; no surface computes its own.
+	*
+	* It is deliberately NOT a clock in the
+	* `scripts/check-runtime-state-durability.ts` sense: it is the
+	* observation itself, and it is the only thing a 30-hour silence is
+	* visible in. Writers quantise it (see `CONTACT_WRITE_QUANTUM_MS` in the
+	* Reolink provider) so a value that means "recently" cannot cost a
+	* SQLite commit per round-trip.
+	*/
+	lastContactAt: zod.z.number().optional(),
+	/**
 	* True when the source is a BINARY low-battery indicator (HA
 	* `binary_sensor` device_class=battery / `LOW_BAT`) that has no real
 	* charge level — `percentage` is then a coarse stand-in (100 = normal,
@@ -27507,13 +27526,63 @@ var CamStreamDescriptorSchema = zod.z.object({
 * set of stream descriptors it can offer for the device, synchronously, so the
 * broker can reconcile its registry against the authoritative provider state.
 */
+/**
+* The catalog as a DURABLE fact rather than a live answer.
+*
+* A battery camera's descriptors are profile-stable — they change when the
+* operator rewrites an encoder profile, not minute to minute — but building
+* them costs a Baichuan login, which on a sleeping Argus IS a wake. So the
+* provider is allowed to build them exactly once per profile and must serve
+* every later pull from a cache.
+*
+* Holding that cache only in RAM is what turned a restart into an outage. The
+* runner comes back with the camera asleep, `buildStreamCatalogUncached`
+* correctly refuses to wake it, the pull answers `[]`, the broker has no
+* cam-stream entry to build a broker from, and `webrtcSession.handleOffer`
+* fails with a flat "No broker for stream" — for as long as the camera sleeps,
+* which on a battery cam is most of the day. The camera was fine. The stream
+* was unreachable because the process had forgotten what the camera offers.
+*
+* Declaring it here puts it in `device-runtime-state`, the kernel's canonical
+* declared collection, with the same `restored` durability `battery` uses for
+* the same reason: the last known value is the only value there is while the
+* device is asleep. The broker's brokers are therefore always DEFINABLE — it
+* is the DIAL that wakes a camera, never the catalog (D173).
+*/
+var StreamCatalogStateSchema = zod.z.object({
+	/** The descriptors as last built from a real camera response. Never a guess:
+	*  a failed or refused build writes NOTHING, so a restored catalog is always
+	*  one the camera itself once produced. */
+	descriptors: zod.z.array(CamStreamDescriptorSchema),
+	/** Ms epoch of the build that produced {@link descriptors}. Lets the wake
+	*  path decide whether the camera's own awake window is worth spending on a
+	*  re-read. */
+	lastFetchedAt: zod.z.number()
+});
 var streamCatalogCapability = {
 	name: "stream-catalog",
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
 	deviceTypes: [DeviceType.Camera],
-	methods: { getCatalog: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.array(CamStreamDescriptorSchema).readonly()) }
+	methods: { getCatalog: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.array(CamStreamDescriptorSchema).readonly()) },
+	runtimeState: StreamCatalogStateSchema,
+	/**
+	* Runtime-state durability: **restored** — see the schema doc. A cold
+	* catalog on a sleeping battery camera is not a slow first frame, it is a
+	* camera that cannot be watched at all until it happens to wake.
+	*
+	* Churn is nil by construction: the slice is written only by a SUCCESSFUL
+	* build, and a build only runs when there is no cached copy (or the copy is
+	* a day old and the camera is awake anyway).
+	*
+	* See `RuntimeStateDurability`. Enforced by
+	* `scripts/check-runtime-state-durability.ts`.
+	*/
+	durability: "restored",
+	/** Clock field: written, but excluded from the compare that decides whether
+	*  persisting is worth a SQLite commit — the descriptors are the value. */
+	volatileStateFields: ["lastFetchedAt"]
 };
 /** One of the camera's stream profiles. */
 var StreamProfileSchema = zod.z.enum([
@@ -29510,6 +29579,24 @@ var DeclaredDevices = class {
 DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Camera, DeviceType.Hub, DeviceType.Switch, DeviceType.Siren, DeviceType.Light, DeviceType.Fan, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder;
 new Set(Object.values(DeviceType));
 DeviceFeature.BatteryOperated;
+/**
+* THE derivation. One crop rectangle, one presence verdict — see D52 for why
+* this repo insists a derived value has exactly one implementation.
+*
+* `undefined` status ⇒ `sleeping`. A device with no slice has made no claim,
+* and the caller decides separately whether it is even battery-operated
+* (`DeviceFeature.BatteryOperated`); this function never answers that
+* question, only what a battery device is doing.
+*/
+function deriveBatteryPresence(input) {
+	const status = input.status;
+	if (!status) return "sleeping";
+	if (status.sleeping !== true) return "awake";
+	const lastContactAt = status.lastContactAt;
+	if (typeof lastContactAt !== "number" || lastContactAt <= 0) return "sleeping";
+	const budget = input.unreachableAfterMs ?? 216e5;
+	return input.nowMs - lastContactAt > budget ? "unreachable" : "sleeping";
+}
 /** Unwrap ZodNullable / ZodOptional / ZodDefault wrappers to reach the inner type.
 *  Zod v4 exposes `.unwrap()` on all three wrapper classes. */
 function unwrap(schema) {
@@ -37123,7 +37210,7 @@ Object.freeze({
 });
 /**
 * Per-cap runtime-state policy, projected from every `*.cap.ts` that declares
-* `runtimeState`. 63 caps: 33 `restored`, 30 `session`.
+* `runtimeState`. 64 caps: 34 `restored`, 30 `session`.
 *
 * A cap absent from this map has no runtime-state slice at all. A cap PRESENT
 * with `durability: 'session'` has one and has decided not to keep it.
@@ -37329,6 +37416,10 @@ var RUNTIME_STATE_POLICY = {
 		durability: "restored",
 		volatileFields: ["lastChangedAt"]
 	},
+	"stream-catalog": {
+		durability: "restored",
+		volatileFields: ["lastFetchedAt"]
+	},
 	"stream-params": {
 		durability: "restored",
 		volatileFields: ["lastFetchedAt"]
@@ -38162,6 +38253,12 @@ Object.defineProperty(exports, "bareAddonId", {
 		return bareAddonId;
 	}
 });
+Object.defineProperty(exports, "batteryCapability", {
+	enumerable: true,
+	get: function() {
+		return batteryCapability;
+	}
+});
 Object.defineProperty(exports, "buildStreamParamsConfigSchema", {
 	enumerable: true,
 	get: function() {
@@ -38204,6 +38301,12 @@ Object.defineProperty(exports, "decodeVectorBase64", {
 		return decodeVectorBase64;
 	}
 });
+Object.defineProperty(exports, "deriveBatteryPresence", {
+	enumerable: true,
+	get: function() {
+		return deriveBatteryPresence;
+	}
+});
 Object.defineProperty(exports, "deviceManagerCapability", {
 	enumerable: true,
 	get: function() {

package/dist/{dist-DXDvrBi0.mjs → dist-COd223t-.mjs}

@@ -20825,6 +20825,25 @@ var BatteryStatusSchema = z.object({
 	/** Ms epoch of the last observation. Lets consumers reason about freshness. */
 	lastUpdated: z.number(),
 	/**
+	* Ms epoch of the last time the device PROVED it was reachable — a
+	* completed firmware round-trip, an observed wake, or an inbound push
+	* (firmware event, email). `0`/absent = never since this slice was born.
+	*
+	* This is the ONLY input that separates "asleep" from "gone", and it is
+	* fed exclusively by PASSIVE signals: nothing may write it by reaching
+	* for the radio, because a poll that confirms reachability is the same
+	* poll that drains the battery. See {@link deriveBatteryPresence} — the
+	* single derivation every consumer must use; no surface computes its own.
+	*
+	* It is deliberately NOT a clock in the
+	* `scripts/check-runtime-state-durability.ts` sense: it is the
+	* observation itself, and it is the only thing a 30-hour silence is
+	* visible in. Writers quantise it (see `CONTACT_WRITE_QUANTUM_MS` in the
+	* Reolink provider) so a value that means "recently" cannot cost a
+	* SQLite commit per round-trip.
+	*/
+	lastContactAt: z.number().optional(),
+	/**
 	* True when the source is a BINARY low-battery indicator (HA
 	* `binary_sensor` device_class=battery / `LOW_BAT`) that has no real
 	* charge level — `percentage` is then a coarse stand-in (100 = normal,
@@ -27507,13 +27526,63 @@ var CamStreamDescriptorSchema = z.object({
 * set of stream descriptors it can offer for the device, synchronously, so the
 * broker can reconcile its registry against the authoritative provider state.
 */
+/**
+* The catalog as a DURABLE fact rather than a live answer.
+*
+* A battery camera's descriptors are profile-stable — they change when the
+* operator rewrites an encoder profile, not minute to minute — but building
+* them costs a Baichuan login, which on a sleeping Argus IS a wake. So the
+* provider is allowed to build them exactly once per profile and must serve
+* every later pull from a cache.
+*
+* Holding that cache only in RAM is what turned a restart into an outage. The
+* runner comes back with the camera asleep, `buildStreamCatalogUncached`
+* correctly refuses to wake it, the pull answers `[]`, the broker has no
+* cam-stream entry to build a broker from, and `webrtcSession.handleOffer`
+* fails with a flat "No broker for stream" — for as long as the camera sleeps,
+* which on a battery cam is most of the day. The camera was fine. The stream
+* was unreachable because the process had forgotten what the camera offers.
+*
+* Declaring it here puts it in `device-runtime-state`, the kernel's canonical
+* declared collection, with the same `restored` durability `battery` uses for
+* the same reason: the last known value is the only value there is while the
+* device is asleep. The broker's brokers are therefore always DEFINABLE — it
+* is the DIAL that wakes a camera, never the catalog (D173).
+*/
+var StreamCatalogStateSchema = z.object({
+	/** The descriptors as last built from a real camera response. Never a guess:
+	*  a failed or refused build writes NOTHING, so a restored catalog is always
+	*  one the camera itself once produced. */
+	descriptors: z.array(CamStreamDescriptorSchema),
+	/** Ms epoch of the build that produced {@link descriptors}. Lets the wake
+	*  path decide whether the camera's own awake window is worth spending on a
+	*  re-read. */
+	lastFetchedAt: z.number()
+});
 var streamCatalogCapability = {
 	name: "stream-catalog",
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
 	deviceTypes: [DeviceType.Camera],
-	methods: { getCatalog: method(z.object({ deviceId: z.number().int().nonnegative() }), z.array(CamStreamDescriptorSchema).readonly()) }
+	methods: { getCatalog: method(z.object({ deviceId: z.number().int().nonnegative() }), z.array(CamStreamDescriptorSchema).readonly()) },
+	runtimeState: StreamCatalogStateSchema,
+	/**
+	* Runtime-state durability: **restored** — see the schema doc. A cold
+	* catalog on a sleeping battery camera is not a slow first frame, it is a
+	* camera that cannot be watched at all until it happens to wake.
+	*
+	* Churn is nil by construction: the slice is written only by a SUCCESSFUL
+	* build, and a build only runs when there is no cached copy (or the copy is
+	* a day old and the camera is awake anyway).
+	*
+	* See `RuntimeStateDurability`. Enforced by
+	* `scripts/check-runtime-state-durability.ts`.
+	*/
+	durability: "restored",
+	/** Clock field: written, but excluded from the compare that decides whether
+	*  persisting is worth a SQLite commit — the descriptors are the value. */
+	volatileStateFields: ["lastFetchedAt"]
 };
 /** One of the camera's stream profiles. */
 var StreamProfileSchema = z.enum([
@@ -29510,6 +29579,24 @@ var DeclaredDevices = class {
 DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Camera, DeviceType.Hub, DeviceType.Switch, DeviceType.Siren, DeviceType.Light, DeviceType.Fan, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder;
 new Set(Object.values(DeviceType));
 DeviceFeature.BatteryOperated;
+/**
+* THE derivation. One crop rectangle, one presence verdict — see D52 for why
+* this repo insists a derived value has exactly one implementation.
+*
+* `undefined` status ⇒ `sleeping`. A device with no slice has made no claim,
+* and the caller decides separately whether it is even battery-operated
+* (`DeviceFeature.BatteryOperated`); this function never answers that
+* question, only what a battery device is doing.
+*/
+function deriveBatteryPresence(input) {
+	const status = input.status;
+	if (!status) return "sleeping";
+	if (status.sleeping !== true) return "awake";
+	const lastContactAt = status.lastContactAt;
+	if (typeof lastContactAt !== "number" || lastContactAt <= 0) return "sleeping";
+	const budget = input.unreachableAfterMs ?? 216e5;
+	return input.nowMs - lastContactAt > budget ? "unreachable" : "sleeping";
+}
 /** Unwrap ZodNullable / ZodOptional / ZodDefault wrappers to reach the inner type.
 *  Zod v4 exposes `.unwrap()` on all three wrapper classes. */
 function unwrap(schema) {
@@ -37123,7 +37210,7 @@ Object.freeze({
 });
 /**
 * Per-cap runtime-state policy, projected from every `*.cap.ts` that declares
-* `runtimeState`. 63 caps: 33 `restored`, 30 `session`.
+* `runtimeState`. 64 caps: 34 `restored`, 30 `session`.
 *
 * A cap absent from this map has no runtime-state slice at all. A cap PRESENT
 * with `durability: 'session'` has one and has decided not to keep it.
@@ -37329,6 +37416,10 @@ var RUNTIME_STATE_POLICY = {
 		durability: "restored",
 		volatileFields: ["lastChangedAt"]
 	},
+	"stream-catalog": {
+		durability: "restored",
+		volatileFields: ["lastFetchedAt"]
+	},
 	"stream-params": {
 		durability: "restored",
 		volatileFields: ["lastFetchedAt"]
@@ -37934,4 +38025,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { objectInputDeclaresAddonId as $, decodeVectorBase64 as A, createEvent as At, isArrayOutputSchema as B, resolveCapMount as Bt, backupCapability as C, DeviceType as Ct, coreBlockIdFromAddonId as D, asJsonObject as Dt, coreBlockAddonId as E, WELL_KNOWN_TAB_MAP as Et, enumerateInferenceDevices as F, isDeviceConfigCap as Ft, kebabToCamel as G, isObjectInput as H, sleep as Ht, enumerateItemArrayFields as I, nodePin as It, logDestinationCapability as J, lifecycleJobSchema as K, enumerateSchemaFields as L, parseJsonObject as Lt, deviceStateCapability as M, emitReadiness as Mt, deviceStatusCapability as N, expandCapMethods as Nt, coreBlocksCapability as O, asNumber as Ot, doorbellCapability as P, hydrateSchema as Pt, normalizeUnit as Q, extractNestedAddonId as R, parseJsonUnknown as Rt, authProviderCapability as S, DeviceRole as St, buildStreamParamsConfigSchema as T, ReadinessTimeoutError as Tt, isSameAddonId as U, EventCategory as Ut, isCollectionArrayMethod as V, scopeKey as Vt, isVoidInput as W, looseSchema as X, logLevelAtMost as Y, metricsProviderCapability as Z, UserRecordSchema as _, BaseAddon as _t, CAP_NAMES_WITH_STATUS as a, scopesAllowDeviceCap as at, addonWidgetsCapability as b, DEVICE_STATUS_METHOD as bt, CoreBlockSchema as c, snapshotCapability as ct, METHOD_ACCESS_MAP as d, storageProviderCapability as dt, parseStreamParamsFormPatch as et, RUNTIME_DEFAULTS as f, streamQualityLabel as ft, StorageMigrationJobSchema as g, errMsg as gt, StorageLocationTypeSchema as h, vectorStoreCapability as ht, BatteryStatusSchema as i, scopesAllowAddon as it, deviceManagerCapability as j, emitDownForOwnedCaps as jt, dataStoreProviderCapability as k, asString as kt, DeclaredDevices as l, storageCapability as lt, ScopedTokenSchema as m, vectorDimFromBase64 as mt, AlertSchema as n, procedureAuthKey as nt, CORE_BLOCKS_ADDON_ID as o, scoreRuntimes as ot, STREAM_PROFILE_META as p, userManagementCapability as pt, localNetworkCapability as q, ApiKeyRecordSchema as r, runtimeStatePolicyFor as rt, CORE_BLOCK_ADDON_PREFIX as s, settingsStoreCapability as st, ALL_CAPABILITY_DEFINITIONS as t, platformProbeCapability as tt, DeviceStatusSchema as u, storageMigrationCapability as ut, addonPagesCapability as v, DATAPLANE_SECRET_HEADER as vt, bareAddonId as w, ReadinessRegistry as wt, alertsCapability as x, DeviceFeature as xt, addonSettingsCapability as y, DEVICE_SETTINGS_CONTRIBUTION_METHODS as yt, filesystemBrowseCapability as z, readinessKey as zt };
+export { metricsProviderCapability as $, dataStoreProviderCapability as A, asNumber as At, extractNestedAddonId as B, parseJsonUnknown as Bt, backupCapability as C, DeviceFeature as Ct, coreBlockAddonId as D, ReadinessTimeoutError as Dt, buildStreamParamsConfigSchema as E, ReadinessRegistry as Et, deviceStatusCapability as F, expandCapMethods as Ft, isSameAddonId as G, EventCategory as Gt, isArrayOutputSchema as H, resolveCapMount as Ht, doorbellCapability as I, hydrateSchema as It, lifecycleJobSchema as J, isVoidInput as K, enumerateInferenceDevices as L, isDeviceConfigCap as Lt, deriveBatteryPresence as M, createEvent as Mt, deviceManagerCapability as N, emitDownForOwnedCaps as Nt, coreBlockIdFromAddonId as O, WELL_KNOWN_TAB_MAP as Ot, deviceStateCapability as P, emitReadiness as Pt, looseSchema as Q, enumerateItemArrayFields as R, nodePin as Rt, authProviderCapability as S, DEVICE_STATUS_METHOD as St, batteryCapability as T, DeviceType as Tt, isCollectionArrayMethod as U, scopeKey as Ut, filesystemBrowseCapability as V, readinessKey as Vt, isObjectInput as W, sleep as Wt, logDestinationCapability as X, localNetworkCapability as Y, logLevelAtMost as Z, UserRecordSchema as _, vectorStoreCapability as _t, CAP_NAMES_WITH_STATUS as a, runtimeStatePolicyFor as at, addonWidgetsCapability as b, DATAPLANE_SECRET_HEADER as bt, CoreBlockSchema as c, scoreRuntimes as ct, METHOD_ACCESS_MAP as d, storageCapability as dt, normalizeUnit as et, RUNTIME_DEFAULTS as f, storageMigrationCapability as ft, StorageMigrationJobSchema as g, vectorDimFromBase64 as gt, StorageLocationTypeSchema as h, userManagementCapability as ht, BatteryStatusSchema as i, procedureAuthKey as it, decodeVectorBase64 as j, asString as jt, coreBlocksCapability as k, asJsonObject as kt, DeclaredDevices as l, settingsStoreCapability as lt, ScopedTokenSchema as m, streamQualityLabel as mt, AlertSchema as n, parseStreamParamsFormPatch as nt, CORE_BLOCKS_ADDON_ID as o, scopesAllowAddon as ot, STREAM_PROFILE_META as p, storageProviderCapability as pt, kebabToCamel as q, ApiKeyRecordSchema as r, platformProbeCapability as rt, CORE_BLOCK_ADDON_PREFIX as s, scopesAllowDeviceCap as st, ALL_CAPABILITY_DEFINITIONS as t, objectInputDeclaresAddonId as tt, DeviceStatusSchema as u, snapshotCapability as ut, addonPagesCapability as v, errMsg as vt, bareAddonId as w, DeviceRole as wt, alertsCapability as x, DEVICE_SETTINGS_CONTRIBUTION_METHODS as xt, addonSettingsCapability as y, BaseAddon as yt, enumerateSchemaFields as z, parseJsonObject as zt };

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-BH2tZ9ZN.js");
+const require_dist = require("./dist-BspfS8Q7.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { $ as objectInputDeclaresAddonId, At as createEvent, B as isArrayOutputSchema, Bt as resolveCapMount, Dt as asJsonObject$1, G as kebabToCamel, H as isObjectInput, K as lifecycleJobSchema, Lt as parseJsonObject, Nt as expandCapMethods, Ot as asNumber, R as extractNestedAddonId, Rt as parseJsonUnknown$1, Tt as ReadinessTimeoutError, Ut as EventCategory$1, V as isCollectionArrayMethod, Vt as scopeKey, W as isVoidInput, X as looseSchema, Y as logLevelAtMost, at as scopesAllowDeviceCap, bt as DEVICE_STATUS_METHOD, d as METHOD_ACCESS_MAP, f as RUNTIME_DEFAULTS, gt as errMsg$1, it as scopesAllowAddon, jt as emitDownForOwnedCaps, kt as asString$1, nt as procedureAuthKey, t as ALL_CAPABILITY_DEFINITIONS, vt as DATAPLANE_SECRET_HEADER$1, wt as ReadinessRegistry, y as addonSettingsCapability, yt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, zt as readinessKey } from "./dist-DXDvrBi0.mjs";
+import { At as asNumber, B as extractNestedAddonId, Bt as parseJsonUnknown$1, Dt as ReadinessTimeoutError, Et as ReadinessRegistry, Ft as expandCapMethods, Gt as EventCategory$1, H as isArrayOutputSchema, Ht as resolveCapMount, J as lifecycleJobSchema, K as isVoidInput, Mt as createEvent, Nt as emitDownForOwnedCaps, Q as looseSchema, St as DEVICE_STATUS_METHOD, U as isCollectionArrayMethod, Ut as scopeKey, Vt as readinessKey, W as isObjectInput, Z as logLevelAtMost, bt as DATAPLANE_SECRET_HEADER$1, d as METHOD_ACCESS_MAP, f as RUNTIME_DEFAULTS, it as procedureAuthKey, jt as asString$1, kt as asJsonObject$1, ot as scopesAllowAddon, q as kebabToCamel, st as scopesAllowDeviceCap, t as ALL_CAPABILITY_DEFINITIONS, tt as objectInputDeclaresAddonId, vt as errMsg$1, xt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, y as addonSettingsCapability, zt as parseJsonObject } from "./dist-COd223t-.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.92",
+  "version": "1.2.94",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",