@camstack/system 1.2.134 → 1.2.136

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DqcaE-k1.js");
+const require_dist = require("../../dist-D-R0SuP-.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as EventCategory, v as addonPagesCapability, vt as errMsg, yt as BaseAddon } from "../../dist-BUEU7B1V.mjs";
+import { Gt as EventCategory, v as addonPagesCapability, vt as errMsg, yt as BaseAddon } from "../../dist-Bh25kEUH.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DqcaE-k1.js");
+const require_dist = require("../../dist-D-R0SuP-.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as EventCategory, b as addonWidgetsCapability, vt as errMsg, yt as BaseAddon } from "../../dist-BUEU7B1V.mjs";
+import { Gt as EventCategory, b as addonWidgetsCapability, vt as errMsg, yt as BaseAddon } from "../../dist-Bh25kEUH.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DqcaE-k1.js");
+const require_dist = require("../../dist-D-R0SuP-.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as EventCategory, Mt as createEvent, n as AlertSchema, vt as errMsg, x as alertsCapability, yt as BaseAddon } from "../../dist-BUEU7B1V.mjs";
+import { Gt as EventCategory, Mt as createEvent, n as AlertSchema, vt as errMsg, x as alertsCapability, yt as BaseAddon } from "../../dist-Bh25kEUH.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DqcaE-k1.js");
+const require_dist = require("../../dist-D-R0SuP-.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { C as backupCapability, Gt as EventCategory, yt as BaseAddon } from "../../dist-BUEU7B1V.mjs";
+import { C as backupCapability, Gt as EventCategory, yt as BaseAddon } from "../../dist-Bh25kEUH.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DqcaE-k1.js");
+const require_dist = require("../../dist-D-R0SuP-.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-BUEU7B1V.mjs";
+import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-Bh25kEUH.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DqcaE-k1.js");
+const require_dist = require("../../dist-D-R0SuP-.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,4 +1,4 @@
-import { D as coreBlockAddonId, O as coreBlockIdFromAddonId, c as CoreBlockSchema, k as coreBlocksCapability, l as DeclaredDevices, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX, vt as errMsg, yt as BaseAddon } from "../../dist-BUEU7B1V.mjs";
+import { D as coreBlockAddonId, O as coreBlockIdFromAddonId, c as CoreBlockSchema, k as coreBlocksCapability, l as DeclaredDevices, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX, vt as errMsg, yt as BaseAddon } from "../../dist-Bh25kEUH.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DqcaE-k1.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-KZnmtfsh.js");
+const require_dist = require("../../dist-D-R0SuP-.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-CqD6rSQx.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 //#region src/builtins/device-manager/adoption-job-engine.ts
@@ -1280,6 +1280,32 @@ async function listPersistedByAddon(pctx, input) {
 		parentDeviceId: m.parentDeviceId
 	}));
 }
+/**
+* Every requested device's persisted config, in as few store round trips as the
+* settings view allows.
+*
+* One call when the view can batch (the in-process door, which keys
+* `addon-device-settings` by `<addonId>:<deviceId>.` and answers a whole addon
+* with one indexed range scan). Otherwise the per-device form, unchanged — a
+* fallback and not a silent downgrade: `readDeviceStoreBatch` is optional
+* precisely because a forked addon's view has nothing to batch, and refusing
+* would break the only implementation that cannot comply.
+*
+* A read that THROWS yields `{}` for that device rather than failing the whole
+* listing: one unreadable settings row must not make the fleet unlistable.
+*/
+async function readDeviceConfigs(pctx, deviceIds) {
+	if (deviceIds.length === 0) return /* @__PURE__ */ new Map();
+	const batch = pctx.settings.readDeviceStoreBatch;
+	if (batch !== void 0) return batch.call(pctx.settings, deviceIds);
+	const out = /* @__PURE__ */ new Map();
+	for (const id of deviceIds) try {
+		out.set(id, await pctx.settings.readDeviceStore(id));
+	} catch {
+		out.set(id, {});
+	}
+	return out;
+}
 async function listAll(pctx, input) {
 	const ownerFilter = Reflect.get(input, "addonId");
 	if (ownerFilter !== void 0 && (typeof ownerFilter !== "string" || ownerFilter.length === 0)) throw new Error(`deviceManager.listAll: addonId must be a non-empty string or be omitted — got ${JSON.stringify(ownerFilter)}. An owner filter that is present but empty is never widened to every device. On an addon context the id is \`ctx.id\`; there is no \`ctx.addonId\`.`);
@@ -1289,7 +1315,10 @@ async function listAll(pctx, input) {
 	const idFilter = input.deviceIds === void 0 ? null : new Set(input.deviceIds);
 	const results = [];
 	const seen = /* @__PURE__ */ new Set();
-	const fleet = addonId ? await pctx.metaStore.rows.listByAddon(addonId) : await pctx.metaStore.rows.listAll();
+	const fleet = addonId ? await pctx.metaStore.rows.listByAddon(addonId) : await pctx.metaStore.rows.listFleet({
+		...input.deviceIds !== void 0 ? { deviceIds: input.deviceIds } : {},
+		slim
+	});
 	const rowById = /* @__PURE__ */ new Map();
 	for (const row of fleet) rowById.set(row.meta.id, row);
 	if (pctx.registry) {
@@ -1311,6 +1340,7 @@ async function listAll(pctx, input) {
 			} : info);
 		}
 	}
+	const configs = await readDeviceConfigs(pctx, slim ? [] : fleet.filter((row) => !seen.has(String(row.meta.id))).filter((row) => idFilter === null || idFilter.has(row.meta.id)).filter((row) => !camerasOnly || row.meta.type === require_dist.DeviceType.Camera).map((row) => row.meta.id));
 	for (const row of fleet) {
 		const m = row.meta;
 		const aid = m.addonId;
@@ -1319,7 +1349,7 @@ async function listAll(pctx, input) {
 		if (idFilter !== null && !idFilter.has(m.id)) continue;
 		const persistedType = m.type;
 		if (camerasOnly && persistedType !== require_dist.DeviceType.Camera) continue;
-		const persistedConfig = slim ? {} : await pctx.settings.readDeviceStore(m.id);
+		const persistedConfig = configs.get(m.id) ?? {};
 		const metadata = slim ? null : row.metadata;
 		results.push({
 			id: m.id,
@@ -1848,6 +1878,26 @@ function resolveTrackedEventDeviceIds(config, linkedIds) {
 	return linkedIds.filter((id) => picked.has(id));
 }
 /**
+* The fleet listing every function here needs, and the ONLY projection any of
+* them may ask for.
+*
+* Linked-device policy reads five fields off a candidate — `id`,
+* `parentDeviceId`, `location`, `name`, `features` — and `slim` carries all
+* five. What `slim` drops is `config`, and `config` is not a column: `listAll`
+* materialises it with ONE `readDeviceStore` per device, sequentially, on
+* device-manager's event loop. This module asked for the full projection three
+* times, so every linked-devices read swept the whole fleet's settings rows to
+* use none of them.
+*
+* Measured on the live hub 2026-08-25: `query addon-device-settings` ran
+* 36 814 times a minute against a 967-device fleet — ~38 full-fleet sweeps a
+* minute, ~31 of them the `pipeline-analytics` reverse index rebuilding itself
+* one camera at a time through `getLinkedDevices`. The per-camera `config`
+* this query DOES need is the separate `readDeviceStore(deviceId)` below, and
+* it is one row, not the fleet.
+*/
+var LINK_CANDIDATE_PROJECTION = { projection: "slim" };
+/**
 * Resolve ONE camera's linked set against an ALREADY-FETCHED fleet.
 *
 * The fleet is a parameter, not a fetch, because it is the entire cost of this
@@ -1884,7 +1934,7 @@ function resolveFor(deviceId, all, byId, blob) {
 /** Cap implementation of `getLinkedDevices`. */
 async function getLinkedDevices(pctx, input) {
 	const { deviceId } = input;
-	const [all, blob] = await Promise.all([listAll(pctx, {}), pctx.settings.readDeviceStore(deviceId)]);
+	const [all, blob] = await Promise.all([listAll(pctx, LINK_CANDIDATE_PROJECTION), pctx.settings.readDeviceStore(deviceId)]);
 	return resolveFor(deviceId, all, new Map(all.map((d) => [d.id, d])), blob);
 }
 /**
@@ -1903,7 +1953,7 @@ async function getLinkedDevices(pctx, input) {
 async function getLinkedDevicesBatch(pctx, input) {
 	const deviceIds = [...new Set(input.deviceIds)];
 	if (deviceIds.length === 0) return [];
-	const [all, blobs] = await Promise.all([listAll(pctx, {}), Promise.all(deviceIds.map((id) => pctx.settings.readDeviceStore(id).catch((err) => {
+	const [all, blobs] = await Promise.all([listAll(pctx, LINK_CANDIDATE_PROJECTION), Promise.all(deviceIds.map((id) => pctx.settings.readDeviceStore(id).catch((err) => {
 		pctx.host.ctx.logger.warn("getLinkedDevicesBatch: settings read failed — children only", {
 			tags: { deviceId: id },
 			meta: { error: err instanceof Error ? err.message : String(err) }
@@ -1925,7 +1975,7 @@ async function getLinkedDevicesBatch(pctx, input) {
 async function buildLinkedDevicesContribution(pctx, deviceId) {
 	const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
 	if (!persisted || persisted.meta.type !== require_dist.DeviceType.Camera) return null;
-	const [all, blob] = await Promise.all([listAll(pctx, {}), pctx.settings.readDeviceStore(deviceId)]);
+	const [all, blob] = await Promise.all([listAll(pctx, LINK_CANDIDATE_PROJECTION), pctx.settings.readDeviceStore(deviceId)]);
 	const config = parseLinkedDevicesConfig(blob);
 	const options = all.filter((d) => d.id !== deviceId).map((d) => ({
 		value: String(d.id),
@@ -4004,6 +4054,36 @@ var DEVICE_ROWS_COLUMNS = [
 		type: "JSON"
 	}
 ];
+/**
+* The columns a SLIM fleet read selects: every declared column except the
+* primary key (always returned) and `metadata`.
+*
+* ## Why this is a DENYLIST and must stay one
+*
+* `decodeDeviceRow` returns `null` when `deviceId`, `addonId`, `stableId`,
+* `type` or `name` is missing, and `list()` then SKIPS the row with a warn. A
+* hand-written allowlist that forgot one of the five would not make the fleet
+* slower — it would make devices vanish from every listing, quietly, and the
+* only trace would be a log line nobody is reading at the time. Deriving the
+* list by subtraction means a column added tomorrow is carried by default and
+* the only way to lose one is to name it here.
+*
+* `metadata` is the one slim provably discards: `device-queries.ts#listAll`
+* sets `metadata: null` on every slim row. It is also the largest JSON column
+* on the row, which is why this is worth doing at all.
+*
+* ## What is NOT here, and will not be
+*
+* There is no `where: { type: 'camera' }` companion to this. `isCameraDevice`
+* is a method-presence check (`getStreamSources`), not the persisted `type`, so
+* a doorbell with a camera answers YES while its row says `doorbell`. Filtering
+* the rows by type would strip exactly those devices of their row — and
+* `toDeviceInfo` reads `name` / `location` / `disabled` from the ROW precisely
+* because the live device's copies are stale by construction. The fleet would
+* keep working and start reporting pre-rename names on doorbells. The
+* `isCamera` filter stays in JS.
+*/
+var DEVICE_ROWS_SLIM_COLUMNS = DEVICE_ROWS_COLUMNS.map((c) => c.name).filter((name) => name !== "id" && name !== "metadata");
 var DEVICE_ROWS_INDEXES = [
 	{
 		name: "idx_dm_devices_addon_stable",
@@ -4222,6 +4302,33 @@ var DeviceRowStore = class {
 		});
 	}
 	/**
+	* The fleet, read as narrowly as the question allows.
+	*
+	* `listAll` is a full-table `SELECT … ORDER BY "deviceId"` — ~1 017 rows a
+	* call on the live hub, 14–54 calls a minute — and its callers then filtered
+	* the result in JS. The two filters that CAN be pushed down are here:
+	*
+	*  - `deviceIds` becomes a `whereIn`. The viewer's linked-devices panel asks
+	*    about ~8 named ids; it was answered by reading the whole ledger. An
+	*    EMPTY set reads nothing at all rather than degrading to "everything" —
+	*    a request for no devices is a request, not an omission.
+	*  - `slim` becomes a column projection, {@link DEVICE_ROWS_SLIM_COLUMNS}.
+	*
+	* `isCamera` is deliberately NOT one of them — see that constant's note and
+	* `device-row-store-filtered.spec.ts`.
+	*/
+	async listFleet(opts) {
+		if (opts.deviceIds !== void 0 && opts.deviceIds.length === 0) return [];
+		return this.list({
+			...opts.deviceIds !== void 0 ? { whereIn: { deviceId: [...new Set(opts.deviceIds)] } } : {},
+			orderBy: {
+				field: "deviceId",
+				direction: "asc"
+			},
+			limit: DEVICE_ROWS_FLEET_LIMIT
+		}, opts.slim === true ? DEVICE_ROWS_SLIM_COLUMNS : void 0);
+	}
+	/**
 	* The device an addon knows as `stableId`, or `null`.
 	*
 	* `(addonId, stableId)` is the addon-facing identity — unique by
@@ -4292,11 +4399,12 @@ var DeviceRowStore = class {
 		await this.declare();
 		return this.backend.count({ collection: DEVICE_ROWS_COLLECTION });
 	}
-	async list(filter) {
+	async list(filter, columns) {
 		await this.declare();
 		const records = await this.backend.query({
 			collection: DEVICE_ROWS_COLLECTION,
-			filter
+			filter,
+			...columns === void 0 ? {} : { columns }
 		});
 		const out = [];
 		for (const record of records) {

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { Ct as DeviceFeature, E as buildStreamParamsConfigSchema, F as deviceStatusCapability, Gt as EventCategory, Lt as isDeviceConfigCap, N as deviceManagerCapability, Ot as WELL_KNOWN_TAB_MAP, P as deviceStateCapability, R as enumerateItemArrayFields, Tt as DeviceType, Wt as sleep, a as CAP_NAMES_WITH_STATUS, at as runtimeStatePolicyFor, et as normalizeUnit, nt as parseStreamParamsFormPatch, p as STREAM_PROFILE_META, t as ALL_CAPABILITY_DEFINITIONS, u as DeviceStatusSchema, vt as errMsg, wt as DeviceRole, yt as BaseAddon, z as enumerateSchemaFields } from "../../dist-BUEU7B1V.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-BhPleRL7.mjs";
+import { Ct as DeviceFeature, E as buildStreamParamsConfigSchema, F as deviceStatusCapability, Gt as EventCategory, Lt as isDeviceConfigCap, N as deviceManagerCapability, Ot as WELL_KNOWN_TAB_MAP, P as deviceStateCapability, R as enumerateItemArrayFields, Tt as DeviceType, Wt as sleep, a as CAP_NAMES_WITH_STATUS, at as runtimeStatePolicyFor, et as normalizeUnit, nt as parseStreamParamsFormPatch, p as STREAM_PROFILE_META, t as ALL_CAPABILITY_DEFINITIONS, u as DeviceStatusSchema, vt as errMsg, wt as DeviceRole, yt as BaseAddon, z as enumerateSchemaFields } from "../../dist-Bh25kEUH.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-BZbOXqch.mjs";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 //#region src/builtins/device-manager/adoption-job-engine.ts
@@ -1275,6 +1275,32 @@ async function listPersistedByAddon(pctx, input) {
 		parentDeviceId: m.parentDeviceId
 	}));
 }
+/**
+* Every requested device's persisted config, in as few store round trips as the
+* settings view allows.
+*
+* One call when the view can batch (the in-process door, which keys
+* `addon-device-settings` by `<addonId>:<deviceId>.` and answers a whole addon
+* with one indexed range scan). Otherwise the per-device form, unchanged — a
+* fallback and not a silent downgrade: `readDeviceStoreBatch` is optional
+* precisely because a forked addon's view has nothing to batch, and refusing
+* would break the only implementation that cannot comply.
+*
+* A read that THROWS yields `{}` for that device rather than failing the whole
+* listing: one unreadable settings row must not make the fleet unlistable.
+*/
+async function readDeviceConfigs(pctx, deviceIds) {
+	if (deviceIds.length === 0) return /* @__PURE__ */ new Map();
+	const batch = pctx.settings.readDeviceStoreBatch;
+	if (batch !== void 0) return batch.call(pctx.settings, deviceIds);
+	const out = /* @__PURE__ */ new Map();
+	for (const id of deviceIds) try {
+		out.set(id, await pctx.settings.readDeviceStore(id));
+	} catch {
+		out.set(id, {});
+	}
+	return out;
+}
 async function listAll(pctx, input) {
 	const ownerFilter = Reflect.get(input, "addonId");
 	if (ownerFilter !== void 0 && (typeof ownerFilter !== "string" || ownerFilter.length === 0)) throw new Error(`deviceManager.listAll: addonId must be a non-empty string or be omitted — got ${JSON.stringify(ownerFilter)}. An owner filter that is present but empty is never widened to every device. On an addon context the id is \`ctx.id\`; there is no \`ctx.addonId\`.`);
@@ -1284,7 +1310,10 @@ async function listAll(pctx, input) {
 	const idFilter = input.deviceIds === void 0 ? null : new Set(input.deviceIds);
 	const results = [];
 	const seen = /* @__PURE__ */ new Set();
-	const fleet = addonId ? await pctx.metaStore.rows.listByAddon(addonId) : await pctx.metaStore.rows.listAll();
+	const fleet = addonId ? await pctx.metaStore.rows.listByAddon(addonId) : await pctx.metaStore.rows.listFleet({
+		...input.deviceIds !== void 0 ? { deviceIds: input.deviceIds } : {},
+		slim
+	});
 	const rowById = /* @__PURE__ */ new Map();
 	for (const row of fleet) rowById.set(row.meta.id, row);
 	if (pctx.registry) {
@@ -1306,6 +1335,7 @@ async function listAll(pctx, input) {
 			} : info);
 		}
 	}
+	const configs = await readDeviceConfigs(pctx, slim ? [] : fleet.filter((row) => !seen.has(String(row.meta.id))).filter((row) => idFilter === null || idFilter.has(row.meta.id)).filter((row) => !camerasOnly || row.meta.type === DeviceType.Camera).map((row) => row.meta.id));
 	for (const row of fleet) {
 		const m = row.meta;
 		const aid = m.addonId;
@@ -1314,7 +1344,7 @@ async function listAll(pctx, input) {
 		if (idFilter !== null && !idFilter.has(m.id)) continue;
 		const persistedType = m.type;
 		if (camerasOnly && persistedType !== DeviceType.Camera) continue;
-		const persistedConfig = slim ? {} : await pctx.settings.readDeviceStore(m.id);
+		const persistedConfig = configs.get(m.id) ?? {};
 		const metadata = slim ? null : row.metadata;
 		results.push({
 			id: m.id,
@@ -1843,6 +1873,26 @@ function resolveTrackedEventDeviceIds(config, linkedIds) {
 	return linkedIds.filter((id) => picked.has(id));
 }
 /**
+* The fleet listing every function here needs, and the ONLY projection any of
+* them may ask for.
+*
+* Linked-device policy reads five fields off a candidate — `id`,
+* `parentDeviceId`, `location`, `name`, `features` — and `slim` carries all
+* five. What `slim` drops is `config`, and `config` is not a column: `listAll`
+* materialises it with ONE `readDeviceStore` per device, sequentially, on
+* device-manager's event loop. This module asked for the full projection three
+* times, so every linked-devices read swept the whole fleet's settings rows to
+* use none of them.
+*
+* Measured on the live hub 2026-08-25: `query addon-device-settings` ran
+* 36 814 times a minute against a 967-device fleet — ~38 full-fleet sweeps a
+* minute, ~31 of them the `pipeline-analytics` reverse index rebuilding itself
+* one camera at a time through `getLinkedDevices`. The per-camera `config`
+* this query DOES need is the separate `readDeviceStore(deviceId)` below, and
+* it is one row, not the fleet.
+*/
+var LINK_CANDIDATE_PROJECTION = { projection: "slim" };
+/**
 * Resolve ONE camera's linked set against an ALREADY-FETCHED fleet.
 *
 * The fleet is a parameter, not a fetch, because it is the entire cost of this
@@ -1879,7 +1929,7 @@ function resolveFor(deviceId, all, byId, blob) {
 /** Cap implementation of `getLinkedDevices`. */
 async function getLinkedDevices(pctx, input) {
 	const { deviceId } = input;
-	const [all, blob] = await Promise.all([listAll(pctx, {}), pctx.settings.readDeviceStore(deviceId)]);
+	const [all, blob] = await Promise.all([listAll(pctx, LINK_CANDIDATE_PROJECTION), pctx.settings.readDeviceStore(deviceId)]);
 	return resolveFor(deviceId, all, new Map(all.map((d) => [d.id, d])), blob);
 }
 /**
@@ -1898,7 +1948,7 @@ async function getLinkedDevices(pctx, input) {
 async function getLinkedDevicesBatch(pctx, input) {
 	const deviceIds = [...new Set(input.deviceIds)];
 	if (deviceIds.length === 0) return [];
-	const [all, blobs] = await Promise.all([listAll(pctx, {}), Promise.all(deviceIds.map((id) => pctx.settings.readDeviceStore(id).catch((err) => {
+	const [all, blobs] = await Promise.all([listAll(pctx, LINK_CANDIDATE_PROJECTION), Promise.all(deviceIds.map((id) => pctx.settings.readDeviceStore(id).catch((err) => {
 		pctx.host.ctx.logger.warn("getLinkedDevicesBatch: settings read failed — children only", {
 			tags: { deviceId: id },
 			meta: { error: err instanceof Error ? err.message : String(err) }
@@ -1920,7 +1970,7 @@ async function getLinkedDevicesBatch(pctx, input) {
 async function buildLinkedDevicesContribution(pctx, deviceId) {
 	const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
 	if (!persisted || persisted.meta.type !== DeviceType.Camera) return null;
-	const [all, blob] = await Promise.all([listAll(pctx, {}), pctx.settings.readDeviceStore(deviceId)]);
+	const [all, blob] = await Promise.all([listAll(pctx, LINK_CANDIDATE_PROJECTION), pctx.settings.readDeviceStore(deviceId)]);
 	const config = parseLinkedDevicesConfig(blob);
 	const options = all.filter((d) => d.id !== deviceId).map((d) => ({
 		value: String(d.id),
@@ -3999,6 +4049,36 @@ var DEVICE_ROWS_COLUMNS = [
 		type: "JSON"
 	}
 ];
+/**
+* The columns a SLIM fleet read selects: every declared column except the
+* primary key (always returned) and `metadata`.
+*
+* ## Why this is a DENYLIST and must stay one
+*
+* `decodeDeviceRow` returns `null` when `deviceId`, `addonId`, `stableId`,
+* `type` or `name` is missing, and `list()` then SKIPS the row with a warn. A
+* hand-written allowlist that forgot one of the five would not make the fleet
+* slower — it would make devices vanish from every listing, quietly, and the
+* only trace would be a log line nobody is reading at the time. Deriving the
+* list by subtraction means a column added tomorrow is carried by default and
+* the only way to lose one is to name it here.
+*
+* `metadata` is the one slim provably discards: `device-queries.ts#listAll`
+* sets `metadata: null` on every slim row. It is also the largest JSON column
+* on the row, which is why this is worth doing at all.
+*
+* ## What is NOT here, and will not be
+*
+* There is no `where: { type: 'camera' }` companion to this. `isCameraDevice`
+* is a method-presence check (`getStreamSources`), not the persisted `type`, so
+* a doorbell with a camera answers YES while its row says `doorbell`. Filtering
+* the rows by type would strip exactly those devices of their row — and
+* `toDeviceInfo` reads `name` / `location` / `disabled` from the ROW precisely
+* because the live device's copies are stale by construction. The fleet would
+* keep working and start reporting pre-rename names on doorbells. The
+* `isCamera` filter stays in JS.
+*/
+var DEVICE_ROWS_SLIM_COLUMNS = DEVICE_ROWS_COLUMNS.map((c) => c.name).filter((name) => name !== "id" && name !== "metadata");
 var DEVICE_ROWS_INDEXES = [
 	{
 		name: "idx_dm_devices_addon_stable",
@@ -4217,6 +4297,33 @@ var DeviceRowStore = class {
 		});
 	}
 	/**
+	* The fleet, read as narrowly as the question allows.
+	*
+	* `listAll` is a full-table `SELECT … ORDER BY "deviceId"` — ~1 017 rows a
+	* call on the live hub, 14–54 calls a minute — and its callers then filtered
+	* the result in JS. The two filters that CAN be pushed down are here:
+	*
+	*  - `deviceIds` becomes a `whereIn`. The viewer's linked-devices panel asks
+	*    about ~8 named ids; it was answered by reading the whole ledger. An
+	*    EMPTY set reads nothing at all rather than degrading to "everything" —
+	*    a request for no devices is a request, not an omission.
+	*  - `slim` becomes a column projection, {@link DEVICE_ROWS_SLIM_COLUMNS}.
+	*
+	* `isCamera` is deliberately NOT one of them — see that constant's note and
+	* `device-row-store-filtered.spec.ts`.
+	*/
+	async listFleet(opts) {
+		if (opts.deviceIds !== void 0 && opts.deviceIds.length === 0) return [];
+		return this.list({
+			...opts.deviceIds !== void 0 ? { whereIn: { deviceId: [...new Set(opts.deviceIds)] } } : {},
+			orderBy: {
+				field: "deviceId",
+				direction: "asc"
+			},
+			limit: DEVICE_ROWS_FLEET_LIMIT
+		}, opts.slim === true ? DEVICE_ROWS_SLIM_COLUMNS : void 0);
+	}
+	/**
 	* The device an addon knows as `stableId`, or `null`.
 	*
 	* `(addonId, stableId)` is the addon-facing identity — unique by
@@ -4287,11 +4394,12 @@ var DeviceRowStore = class {
 		await this.declare();
 		return this.backend.count({ collection: DEVICE_ROWS_COLLECTION });
 	}
-	async list(filter) {
+	async list(filter, columns) {
 		await this.declare();
 		const records = await this.backend.query({
 			collection: DEVICE_ROWS_COLLECTION,
-			filter
+			filter,
+			...columns === void 0 ? {} : { columns }
 		});
 		const out = [];
 		for (const record of records) {

package/dist/builtins/device-manager/device-row-store.d.ts

@@ -43,6 +43,36 @@ export declare const DEVICE_ROWS_COLLECTION = "device-manager:devices";
  */
 export declare const DEVICE_ROWS_FLEET_LIMIT = 20000;
 export declare const DEVICE_ROWS_COLUMNS: readonly CollectionColumn[];
+/**
+ * The columns a SLIM fleet read selects: every declared column except the
+ * primary key (always returned) and `metadata`.
+ *
+ * ## Why this is a DENYLIST and must stay one
+ *
+ * `decodeDeviceRow` returns `null` when `deviceId`, `addonId`, `stableId`,
+ * `type` or `name` is missing, and `list()` then SKIPS the row with a warn. A
+ * hand-written allowlist that forgot one of the five would not make the fleet
+ * slower — it would make devices vanish from every listing, quietly, and the
+ * only trace would be a log line nobody is reading at the time. Deriving the
+ * list by subtraction means a column added tomorrow is carried by default and
+ * the only way to lose one is to name it here.
+ *
+ * `metadata` is the one slim provably discards: `device-queries.ts#listAll`
+ * sets `metadata: null` on every slim row. It is also the largest JSON column
+ * on the row, which is why this is worth doing at all.
+ *
+ * ## What is NOT here, and will not be
+ *
+ * There is no `where: { type: 'camera' }` companion to this. `isCameraDevice`
+ * is a method-presence check (`getStreamSources`), not the persisted `type`, so
+ * a doorbell with a camera answers YES while its row says `doorbell`. Filtering
+ * the rows by type would strip exactly those devices of their row — and
+ * `toDeviceInfo` reads `name` / `location` / `disabled` from the ROW precisely
+ * because the live device's copies are stale by construction. The fleet would
+ * keep working and start reporting pre-rename names on doorbells. The
+ * `isCamera` filter stays in JS.
+ */
+export declare const DEVICE_ROWS_SLIM_COLUMNS: readonly string[];
 export declare const DEVICE_ROWS_INDEXES: readonly CollectionIndex[];
 /**
  * The settings-store door this store needs, as a plain object surface.
@@ -193,6 +223,26 @@ export declare class DeviceRowStore {
     get(deviceId: number): Promise<DeviceRow | null>;
     /** Every device, ordered by numeric id. */
     listAll(): Promise<readonly DeviceRow[]>;
+    /**
+     * The fleet, read as narrowly as the question allows.
+     *
+     * `listAll` is a full-table `SELECT … ORDER BY "deviceId"` — ~1 017 rows a
+     * call on the live hub, 14–54 calls a minute — and its callers then filtered
+     * the result in JS. The two filters that CAN be pushed down are here:
+     *
+     *  - `deviceIds` becomes a `whereIn`. The viewer's linked-devices panel asks
+     *    about ~8 named ids; it was answered by reading the whole ledger. An
+     *    EMPTY set reads nothing at all rather than degrading to "everything" —
+     *    a request for no devices is a request, not an omission.
+     *  - `slim` becomes a column projection, {@link DEVICE_ROWS_SLIM_COLUMNS}.
+     *
+     * `isCamera` is deliberately NOT one of them — see that constant's note and
+     * `device-row-store-filtered.spec.ts`.
+     */
+    listFleet(opts: {
+        readonly deviceIds?: readonly number[];
+        readonly slim?: boolean;
+    }): Promise<readonly DeviceRow[]>;
     /**
      * The device an addon knows as `stableId`, or `null`.
      *

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DqcaE-k1.js");
+const require_dist = require("../../dist-D-R0SuP-.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { G as isSameAddonId, Gt as EventCategory, I as doorbellCapability, Mt as createEvent, Tt as DeviceType, vt as errMsg, w as bareAddonId, yt as BaseAddon } from "../../dist-BUEU7B1V.mjs";
+import { G as isSameAddonId, Gt as EventCategory, I as doorbellCapability, Mt as createEvent, Tt as DeviceType, vt as errMsg, w as bareAddonId, yt as BaseAddon } from "../../dist-Bh25kEUH.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DqcaE-k1.js");
+const require_dist = require("../../dist-D-R0SuP-.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-BUEU7B1V.mjs";
+import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-Bh25kEUH.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DqcaE-k1.js");
+const require_dist = require("../../dist-D-R0SuP-.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as EventCategory, Mt as createEvent, vt as errMsg, yt as BaseAddon } from "../../dist-BUEU7B1V.mjs";
+import { Gt as EventCategory, Mt as createEvent, vt as errMsg, yt as BaseAddon } from "../../dist-Bh25kEUH.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DqcaE-k1.js");
+const require_dist = require("../../dist-D-R0SuP-.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");