@camstack/system 1.2.140 → 1.2.141

package/dist/addon-runner.js

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_manifest_python_deps = require("./manifest-python-deps-Bu8H1_rg.js");
+const require_manifest_python_deps = require("./manifest-python-deps-DBQarwp9.js");
 const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/addon-runner.mjs

@@ -1,4 +1,4 @@
-import { F as createUdsLoggerWithControl, I as LocalChildClient, Nt as startRunnerHeapWatch, bt as resolveAddonClass, i as createUdsAddonContext, it as setWorkerNativeCapsChangeListener, nt as getWorkerNativeCapSnapshot, ot as validateProviderRegistrations, t as installManifestPythonDeps, tt as getWorkerNativeCapProvider, yt as installManifestNativeDeps } from "./manifest-python-deps-Dxifi-o0.mjs";
+import { F as createUdsLoggerWithControl, I as LocalChildClient, Nt as startRunnerHeapWatch, bt as resolveAddonClass, i as createUdsAddonContext, it as setWorkerNativeCapsChangeListener, nt as getWorkerNativeCapSnapshot, ot as validateProviderRegistrations, t as installManifestPythonDeps, tt as getWorkerNativeCapProvider, yt as installManifestNativeDeps } from "./manifest-python-deps-D3zYlMEa.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";
 import { register } from "node:module";
 import * as path$1 from "node:path";

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D5Jhh8Vk.js");
+const require_dist = require("../../dist-BNhvXrQk.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Kt as EventCategory, bt as BaseAddon, v as addonPagesCapability, yt as errMsg } from "../../dist-Clses4Bs.mjs";
+import { Kt as EventCategory, bt as BaseAddon, v as addonPagesCapability, yt as errMsg } from "../../dist-6mn3LQvB.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D5Jhh8Vk.js");
+const require_dist = require("../../dist-BNhvXrQk.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Kt as EventCategory, b as addonWidgetsCapability, bt as BaseAddon, yt as errMsg } from "../../dist-Clses4Bs.mjs";
+import { Kt as EventCategory, b as addonWidgetsCapability, bt as BaseAddon, yt as errMsg } from "../../dist-6mn3LQvB.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D5Jhh8Vk.js");
+const require_dist = require("../../dist-BNhvXrQk.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Kt as EventCategory, Nt as createEvent, bt as BaseAddon, n as AlertSchema, x as alertsCapability, yt as errMsg } from "../../dist-Clses4Bs.mjs";
+import { Kt as EventCategory, Nt as createEvent, bt as BaseAddon, n as AlertSchema, x as alertsCapability, yt as errMsg } from "../../dist-6mn3LQvB.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D5Jhh8Vk.js");
+const require_dist = require("../../dist-BNhvXrQk.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { C as backupCapability, Kt as EventCategory, bt as BaseAddon } from "../../dist-Clses4Bs.mjs";
+import { C as backupCapability, Kt as EventCategory, bt as BaseAddon } from "../../dist-6mn3LQvB.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D5Jhh8Vk.js");
+const require_dist = require("../../dist-BNhvXrQk.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { X as logDestinationCapability, bt as BaseAddon } from "../../dist-Clses4Bs.mjs";
+import { X as logDestinationCapability, bt as BaseAddon } from "../../dist-6mn3LQvB.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D5Jhh8Vk.js");
+const require_dist = require("../../dist-BNhvXrQk.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,4 +1,4 @@
-import { D as coreBlockAddonId, O as coreBlockIdFromAddonId, bt as BaseAddon, c as CoreBlockSchema, k as coreBlocksCapability, l as DeclaredDevices, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX, yt as errMsg } from "../../dist-Clses4Bs.mjs";
+import { D as coreBlockAddonId, O as coreBlockIdFromAddonId, bt as BaseAddon, c as CoreBlockSchema, k as coreBlocksCapability, l as DeclaredDevices, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX, yt as errMsg } from "../../dist-6mn3LQvB.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/device-manager/device-linked-devices.d.ts

@@ -1,4 +1,4 @@
-import { ConfigUISchemaWithValues, IDeviceManagerProvider, LinkedDevicesMode } from '@camstack/types';
+import { ConfigUISchemaWithValues, IDeviceManagerProvider, LinkedDevicesMode, DeviceType } from '@camstack/types';
 import { ProviderContext } from './device-provider-context.js';
 /** Reserved device-config keys (cf. `_profileMap`). */
 export declare const LINKED_MODE_CONFIG_KEY = "_linkedDevicesMode";
@@ -21,10 +21,12 @@ export interface LinkCandidate {
     readonly id: number;
     readonly parentDeviceId: number | null;
     readonly location: string | null;
+    readonly type: DeviceType;
 }
 /**
  * Pure resolution core: children ∪ (auto → same-location | manual → list),
- * minus self, deduped. Order: children first, then mode additions.
+ * minus self, deduped, CONTAINERS expanded to their children (see file
+ * header). Order: children first, then mode additions.
  */
 export declare function resolveLinkedDeviceIds(params: {
     readonly selfId: number;

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D5Jhh8Vk.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-Dflres-F.js");
+const require_dist = require("../../dist-BNhvXrQk.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-DVgdWTd7.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 //#region src/builtins/device-manager/adoption-job-engine.ts
@@ -1298,6 +1298,20 @@ function resolveDeviceById(registry, deviceId) {
 }
 //#endregion
 //#region src/builtins/device-manager/device-queries.ts
+/**
+* The ORIGINATING addon id off a cap-channel call's `args`, or `undefined`.
+*
+* Not part of `IDeviceManagerProvider['listAll']`'s public Zod schema —
+* `CapRouteResolver`'s hub-in-process dispatch merges it into `args` as an
+* out-of-band field (mirrors how `nodeId` already rides inline in args on
+* this same path), so it never crosses the tRPC/HTTP boundary and never
+* reaches a browser client. Only ever present on a call the parent itself
+* routed from a registered UDS child, never client-suppliable.
+*/
+function extractCallerAddonId(input) {
+	const raw = Reflect.get(input, "callerAddonId");
+	return typeof raw === "string" && raw.length > 0 ? raw : void 0;
+}
 async function listPersistedByAddon(pctx, input) {
 	const { addonId } = input;
 	return (await pctx.metaStore.rows.listByAddon(addonId)).map(({ meta: m }) => ({
@@ -1339,6 +1353,7 @@ async function readDeviceConfigs(pctx, deviceIds) {
 async function listAll(pctx, input) {
 	const ownerFilter = Reflect.get(input, "addonId");
 	if (ownerFilter !== void 0 && (typeof ownerFilter !== "string" || ownerFilter.length === 0)) throw new Error(`deviceManager.listAll: addonId must be a non-empty string or be omitted — got ${JSON.stringify(ownerFilter)}. An owner filter that is present but empty is never widened to every device. On an addon context the id is \`ctx.id\`; there is no \`ctx.addonId\`.`);
+	const callerAddonId = pctx.metaStore.rows.censusArmed ? extractCallerAddonId(input) : void 0;
 	const { addonId } = input;
 	const slim = input.projection === "slim";
 	const camerasOnly = input.isCamera === true;
@@ -1348,7 +1363,7 @@ async function listAll(pctx, input) {
 	const fleet = addonId ? await pctx.metaStore.rows.listByAddon(addonId) : await pctx.metaStore.rows.listFleet({
 		...input.deviceIds !== void 0 ? { deviceIds: input.deviceIds } : {},
 		slim
-	});
+	}, callerAddonId);
 	const rowById = /* @__PURE__ */ new Map();
 	for (const row of fleet) rowById.set(row.meta.id, row);
 	if (pctx.registry) {
@@ -1869,21 +1884,58 @@ function parseLinkedDevicesConfig(blob) {
 	};
 }
 /**
+* Resolve one candidate id to the ids it should actually contribute to a
+* linked set: itself, unless it is a CONTAINER, in which case its own
+* children (recursively expanded the same way — a container-of-containers
+* is vanishingly unlikely per `DeviceType.Container`'s contract, but this
+* costs nothing to handle). `visited` guards a pathological parent-cycle in
+* persisted data from recursing forever; a candidate already on the current
+* expansion path is dropped rather than re-expanded.
+*
+* This is the STRUCTURAL, location-independent way a container's child
+* becomes reachable: the device-tree "children of the camera" rule and a
+* persisted manual pick are parentDeviceId chains, never location-based —
+* a container named there is excluded by expanding into whatever it
+* actually contains, regardless of what its (or its children's) `location`
+* column holds.
+*/
+function expandContainer(id, byId, byParent, visited, out) {
+	if (visited.has(id)) return;
+	const candidate = byId.get(id);
+	if (!candidate) return;
+	if (candidate.type !== require_dist.DeviceType.Container) {
+		out.add(id);
+		return;
+	}
+	const nextVisited = new Set(visited);
+	nextVisited.add(id);
+	const children = byParent.get(id) ?? [];
+	for (const child of children) expandContainer(child.id, byId, byParent, nextVisited, out);
+}
+/**
 * Pure resolution core: children ∪ (auto → same-location | manual → list),
-* minus self, deduped. Order: children first, then mode additions.
+* minus self, deduped, CONTAINERS expanded to their children (see file
+* header). Order: children first, then mode additions.
 */
 function resolveLinkedDeviceIds(params) {
 	const { selfId, selfLocation, config, candidates } = params;
+	const byId = new Map(candidates.map((c) => [c.id, c]));
+	const byParent = /* @__PURE__ */ new Map();
+	for (const c of candidates) {
+		if (c.parentDeviceId === null) continue;
+		const siblings = byParent.get(c.parentDeviceId);
+		if (siblings) siblings.push(c);
+		else byParent.set(c.parentDeviceId, [c]);
+	}
 	const ids = /* @__PURE__ */ new Set();
-	for (const c of candidates) if (c.parentDeviceId === selfId) ids.add(c.id);
+	const expand = (id) => expandContainer(id, byId, byParent, /* @__PURE__ */ new Set(), ids);
+	for (const c of candidates) if (c.parentDeviceId === selfId) expand(c.id);
 	if (config.mode === "auto") {
-		if (selfLocation !== null && selfLocation.length > 0) {
-			for (const c of candidates) if (c.location === selfLocation) ids.add(c.id);
+		if (selfLocation !== null && selfLocation.length > 0) for (const c of candidates) {
+			if (c.type === require_dist.DeviceType.Container) continue;
+			if (c.location === selfLocation) ids.add(c.id);
 		}
-	} else {
-		const known = new Set(candidates.map((c) => c.id));
-		for (const id of config.manualIds) if (known.has(id)) ids.add(id);
-	}
+	} else for (const id of config.manualIds) if (byId.has(id)) expand(id);
 	ids.delete(selfId);
 	return [...ids];
 }
@@ -2007,7 +2059,7 @@ async function buildLinkedDevicesContribution(pctx, deviceId) {
 	if (!persisted || persisted.meta.type !== require_dist.DeviceType.Camera) return null;
 	const [all, blob] = await Promise.all([listAll(pctx, LINK_CANDIDATE_PROJECTION), pctx.settings.readDeviceStore(deviceId)]);
 	const config = parseLinkedDevicesConfig(blob);
-	const options = all.filter((d) => d.id !== deviceId).map((d) => ({
+	const options = all.filter((d) => d.id !== deviceId && d.type !== require_dist.DeviceType.Container).map((d) => ({
 		value: String(d.id),
 		label: d.location !== null ? `${d.name} (${d.location})` : d.name
 	}));
@@ -3343,16 +3395,83 @@ async function setName(pctx, input) {
 	});
 }
 /**
+* Every descendant of `rootId`, walked via `parentDeviceId` chains
+* (BFS, `listByParent` per level — the same indexed lookup `setName`'s
+* rename cascade uses one level of). `visited` seeded with `rootId` guards a
+* pathological parent-cycle in persisted data from recursing forever; a row
+* already seen is never re-queued or re-emitted. Depth is unbounded on
+* purpose — a nested container's own children are still `rootId`'s
+* descendants and must align too.
+*/
+async function collectDescendants(metaStore, rootId) {
+	const out = [];
+	const visited = new Set([rootId]);
+	const queue = [rootId];
+	while (queue.length > 0) {
+		const parentId = queue.shift();
+		if (parentId === void 0) break;
+		for (const row of await metaStore.rows.listByParent(parentId)) {
+			if (visited.has(row.meta.id)) continue;
+			visited.add(row.meta.id);
+			out.push(row.meta);
+			queue.push(row.meta.id);
+		}
+	}
+	return out;
+}
+/**
 * Update the operator-organisational location label. `null`
 * clears it. Mirrors the same persist-then-emit shape as
 * `setName`; consumers subscribe to `DeviceMetaChanged` and
 * filter on `field: 'location'`.
+*
+* CASCADE (operator decision, 2026-08-26 — supersedes the read-time
+* inheritance `device-linked-devices.ts` used to resolve): when `deviceId`
+* is a `DeviceType.Container`, the SAME location is written to every
+* descendant's own `location` column, recursively, in this exact call —
+* never resolved live by a reader again. This DELIBERATELY overwrites a
+* descendant's own, possibly different, location: a cascade is a write, and
+* a write that stops at an existing value is not a cascade — the operator
+* setting the container's location is understood as organising the whole
+* subtree by it. Only a CONTAINER cascades; a non-container device's
+* location write is a single row, same as before.
+*
+* RETROACTIVITY: this only runs when `setLocation` is called. A container
+* that already had a location before this shipped does NOT retroactively
+* align its descendants — they stay unaligned until the operator re-saves
+* the container's location.
+*
+* ATOMICITY: the whole cascade runs inside ONE `withMetaWriteLock` critical
+* section, so no concurrent writer can interleave a read or a write into the
+* middle of it — but it is still N separate row writes, not one transaction.
+* A row write that throws does NOT abort the cascade (a swallowed continue,
+* not a silent one): it is collected as a failure, every other descendant is
+* still attempted, and if any failed the outcome is logged at `error` with
+* every failing id — never indistinguishable from a clean cascade. A
+* `DeviceMetaChanged` event fires for the container itself and for every
+* descendant actually written (never for one that failed), so linked-device
+* consumers (auto-link) see exactly what landed.
 */
 async function setLocation(pctx, input) {
 	const { deviceId, location } = input;
+	const cascaded = [];
+	const failed = [];
 	await pctx.metaStore.withMetaWriteLock(async () => {
-		if (!await pctx.metaStore.resolvePersistedById(deviceId)) throw new Error(`[device-manager] setLocation: unknown device id=${deviceId}`);
+		const persisted = await pctx.metaStore.resolvePersistedById(deviceId);
+		if (!persisted) throw new Error(`[device-manager] setLocation: unknown device id=${deviceId}`);
 		await pctx.metaStore.rows.patch(deviceId, { location });
+		if (persisted.meta.type === require_dist.DeviceType.Container) {
+			const descendants = await collectDescendants(pctx.metaStore, deviceId);
+			for (const descendant of descendants) try {
+				await pctx.metaStore.rows.patch(descendant.id, { location });
+				cascaded.push(descendant.id);
+			} catch (err) {
+				failed.push({
+					id: descendant.id,
+					error: err
+				});
+			}
+		}
 	});
 	pctx.host.ctx.eventBus.emit({
 		id: (0, node_crypto.randomUUID)(),
@@ -3368,6 +3487,36 @@ async function setLocation(pctx, input) {
 			value: location
 		}
 	});
+	for (const childId of cascaded) pctx.host.ctx.eventBus.emit({
+		id: (0, node_crypto.randomUUID)(),
+		timestamp: /* @__PURE__ */ new Date(),
+		source: {
+			type: "device",
+			id: childId
+		},
+		category: require_dist.EventCategory.DeviceMetaChanged,
+		data: {
+			deviceId: childId,
+			field: "location",
+			value: location
+		}
+	});
+	if (cascaded.length > 0 || failed.length > 0) pctx.host.ctx.logger.info("setLocation: cascaded location to container descendants", {
+		tags: { deviceId },
+		meta: {
+			location,
+			updated: cascaded.length,
+			failed: failed.length
+		}
+	});
+	if (failed.length > 0) pctx.host.ctx.logger.error("setLocation: cascade partially failed — some descendants NOT aligned to the new location", {
+		tags: { deviceId },
+		meta: {
+			location,
+			failedIds: failed.map((f) => f.id),
+			errors: failed.map((f) => f.error instanceof Error ? f.error.message : String(f.error))
+		}
+	});
 }
 /**
 * Update the device type. Writes the meta row, emits a
@@ -4000,9 +4149,29 @@ var FleetReadCensus = class FleetReadCensus {
 	* to it even if it lands after the close — otherwise the slow reads at the
 	* edge would be attributed to nobody, and the slow ones are the interesting
 	* ones.
+	*
+	* `callerAddonId`, when given, is formatted as the site VERBATIM instead of
+	* walking the local stack. A call that arrived over the cap channel — a
+	* forked addon's `ctx.api.deviceManager.listAll.query()`, routed through
+	* `LocalChildRegistry` → `onUnownedCall` → `CapRouteResolver` — carries its
+	* origin as DATA (the registered `childId` the parent captured off the UDS
+	* connection), and no amount of stack depth would ever recover it: every
+	* frame between the socket read and this call is the SAME generic
+	* dispatcher code (`onUnownedCall`, `dispatch`, `invoke`) regardless of
+	* which addon called — the 2026-08-25 boot census measured this directly,
+	* five thousand calls landing on `listAll` with nothing nameable above it.
+	*
+	* `isOpen` is checked FIRST, before the id is even looked at — a caller
+	* threading a (cheap, already-known) `callerAddonId` through on every
+	* request, armed or not, must not pay for the template string when
+	* disarmed. This is also why formatting lives HERE rather than at the call
+	* site: `DeviceRowStore` passes the raw id through unconditionally, and
+	* only this method — which already knows whether armed — decides whether
+	* to spend anything on it.
 	*/
-	siteOf(nowMs = Date.now()) {
+	siteOf(callerAddonId, nowMs = Date.now()) {
 		if (!this.isOpen(nowMs)) return null;
+		if (callerAddonId !== void 0) return `addon:${callerAddonId}`;
 		const holder = {};
 		Error.captureStackTrace(holder, this.siteOf);
 		return siteFromStack(holder.stack);
@@ -4387,6 +4556,16 @@ var DeviceRowStore = class {
 	/** Call-site attribution for fleet reads. Armed only by
 	*  `CAMSTACK_FLEET_READ_CENSUS_MS`; see `fleet-read-census.ts`. */
 	census;
+	/**
+	* Is the fleet-read census armed right now? Exposed so a caller ABOVE this
+	* store (`device-queries.ts`) can skip extracting a caller identity off its
+	* input entirely when nobody is measuring — "the boolean field read first"
+	* pattern this repo already uses elsewhere to keep a diagnostic seam at
+	* zero cost while disarmed.
+	*/
+	get censusArmed() {
+		return this.census.armed;
+	}
 	constructor(backend, logger, census) {
 		this.backend = backend;
 		this.logger = logger;
@@ -4435,15 +4614,23 @@ var DeviceRowStore = class {
 		}
 		return decoded;
 	}
-	/** Every device, ordered by numeric id. */
-	async listAll() {
+	/**
+	* Every device, ordered by numeric id.
+	*
+	* `callerAddonId`, when known, is the addon that ORIGINATED this call —
+	* captured off the cap-channel envelope (`CapCallInput.callerAddonId`, set
+	* by `LocalChildRegistry` from the registered `childId`), never guessed.
+	* Passed straight to the census; a stack walk can never name it (see
+	* `fleet-read-census.ts#siteOf`).
+	*/
+	async listAll(callerAddonId) {
 		return this.list({
 			orderBy: {
 				field: "deviceId",
 				direction: "asc"
 			},
 			limit: DEVICE_ROWS_FLEET_LIMIT
-		});
+		}, void 0, callerAddonId);
 	}
 	/**
 	* The fleet, read as narrowly as the question allows.
@@ -4460,8 +4647,10 @@ var DeviceRowStore = class {
 	*
 	* `isCamera` is deliberately NOT one of them — see that constant's note and
 	* `device-row-store-filtered.spec.ts`.
+	*
+	* `callerAddonId` — see {@link listAll}'s doc; same meaning here.
 	*/
-	async listFleet(opts) {
+	async listFleet(opts, callerAddonId) {
 		if (opts.deviceIds !== void 0 && opts.deviceIds.length === 0) return [];
 		return this.list({
 			...opts.deviceIds !== void 0 ? { whereIn: { deviceId: [...new Set(opts.deviceIds)] } } : {},
@@ -4470,7 +4659,7 @@ var DeviceRowStore = class {
 				direction: "asc"
 			},
 			limit: DEVICE_ROWS_FLEET_LIMIT
-		}, opts.slim === true ? DEVICE_ROWS_SLIM_COLUMNS : void 0);
+		}, opts.slim === true ? DEVICE_ROWS_SLIM_COLUMNS : void 0, callerAddonId);
 	}
 	/**
 	* Many devices, by numeric id, in ONE query.
@@ -4561,8 +4750,8 @@ var DeviceRowStore = class {
 		await this.declare();
 		return this.backend.count({ collection: DEVICE_ROWS_COLLECTION });
 	}
-	async list(filter, columns) {
-		const site = this.census.siteOf();
+	async list(filter, columns, callerAddonId) {
+		const site = this.census.siteOf(callerAddonId);
 		await this.declare();
 		const records = await this.backend.query({
 			collection: DEVICE_ROWS_COLLECTION,