@camstack/system 1.2.28 → 1.2.30

package/dist/{dist-BXmFvn3h.mjs → dist-Dr_P0DOB.mjs}

@@ -3381,14 +3381,7 @@ var RecordingConfigSchema = z.object({
 	* windows only — existing sheets are immutable, and each window's index
 	* carries its own tile dims so mixed-preset history renders correctly.
 	*/
-	scrubThumbnails: ScrubThumbnailPresetSchema.optional(),
-	/**
-	* OPT-IN thumbnail-strip generation for this camera: every keyframe of the
-	* low recording saved as a JPEG (the fast-drag scrub depth), a derived
-	* cache that eviction reclaims with the footage. Absent/false = no strips
-	* are written and scrub reads exact keyframes at every velocity.
-	*/
-	stripsEnabled: z.boolean().optional()
+	scrubThumbnails: ScrubThumbnailPresetSchema.optional()
 }).strict();
 /**
 * Ops-log — the durable, append-only operations audit shared by the
@@ -3450,7 +3443,7 @@ var OpsLogQueryInputSchema = z.object({
 /**
 * Entity-relocation job state (storage entity-routing spec, Phase 4).
 *
-* One shape shared by the recorder's `relocateFootage` (segments + strips) and
+* One shape shared by the recorder's `relocateFootage` (segments) and
 * pipeline-analytics' `relocateMedia` (event media blobs) so the admin Data
 * page renders both movers with one component. Jobs are in-RAM (a restart
 * forgets them — re-running is safe by construction: copy-if-absent, delete
@@ -3472,7 +3465,7 @@ var RelocateJobSchema = z.object({
 	toLocationId: z.string(),
 	/** Scoped device, or null = every device. */
 	deviceId: z.number().nullable(),
-	/** What the job moves (owner-addon specific: segments/strips or media). */
+	/** What the job moves (owner-addon specific: segments or media). */
 	entities: z.array(z.string()),
 	filesMoved: z.number().int(),
 	bytesMoved: z.number().int(),
@@ -3486,7 +3479,7 @@ var RelocateFootageInputSchema = z.object({
 	deviceId: z.number().optional(),
 	fromLocationId: z.string(),
 	toLocationId: z.string(),
-	entities: z.array(z.enum(["segments", "strips"])).optional(),
+	entities: z.array(z.enum(["segments"])).optional(),
 	/** Copy throttle in MB/s (default 40) — the drain is a background chore,
 	*  never allowed to starve live writers. */
 	throttleMbps: z.number().min(1).max(1e3).optional()
@@ -14538,6 +14531,349 @@ var decoderCapability = {
 	}
 };
 /**
+* Query filter for settings-store collections.
+*/
+var QueryFilterSchema = z.object({
+	where: z.record(z.string(), z.unknown()).optional(),
+	whereIn: z.record(z.string(), z.array(z.unknown())).optional(),
+	whereBetween: z.record(z.string(), z.tuple([z.unknown(), z.unknown()])).optional(),
+	orderBy: z.object({
+		field: z.string(),
+		direction: z.enum(["asc", "desc"])
+	}).optional(),
+	limit: z.number().optional(),
+	offset: z.number().optional()
+});
+/**
+* The predicate half of a filter, for BULK MUTATIONS.
+*
+* Deliberately not `QueryFilterSchema`: `orderBy` / `limit` / `offset` have no
+* meaning for a statement that rewrites a set, and accepting them would invite
+* a caller to believe `limit` bounds the damage. Every field is optional here
+* only so the shape stays composable — the implementation REJECTS a filter
+* that compiles to no predicate, because that is the whole collection.
+*/
+var MutationFilterSchema = z.object({
+	where: z.record(z.string(), z.unknown()).optional(),
+	whereIn: z.record(z.string(), z.array(z.unknown())).optional(),
+	whereBetween: z.record(z.string(), z.tuple([z.unknown(), z.unknown()])).optional()
+});
+/** A single stored record: `{ id, data }`. */
+var SettingsRecordSchema = z.object({
+	id: z.string(),
+	data: z.record(z.string(), z.unknown())
+});
+/**
+* Column declaration for a structured (SQL-backed) collection.
+*
+* Logical types — the backend translates each to the matching SQLite
+* storage class and handles per-type marshaling:
+*   - `TEXT` / `INTEGER` / `REAL` — native SQLite types, pass-through
+*   - `JSON`    — TEXT under the hood; serialised on write, parsed on read
+*   - `BOOLEAN` — INTEGER 0/1 under the hood; coerced both directions
+*/
+var CollectionColumnSchema = z.object({
+	name: z.string(),
+	type: z.enum([
+		"TEXT",
+		"INTEGER",
+		"REAL",
+		"JSON",
+		"BOOLEAN"
+	]),
+	primaryKey: z.boolean().optional(),
+	notNull: z.boolean().optional(),
+	unique: z.boolean().optional()
+});
+var CollectionIndexSchema = z.object({
+	name: z.string(),
+	columns: z.array(z.string()).readonly(),
+	unique: z.boolean().optional()
+});
+/**
+* settings-store — singleton capability for addon-scoped persistence.
+*
+* Every method operates within a `collection`. An optional `namespace`
+* field provides access to additional data spaces beyond the default
+* addon settings — useful for business data (events, tracks, faces, etc.).
+*
+* **Scoping is the CALLER's, and it is opt-in.** The table is
+* `namespace ? `${namespace}:${collection}` : collection` — nothing
+* consults the identity of the caller. An earlier version of this comment
+* claimed the implementation prefixes every collection with the calling
+* addon's ID and that "addons never see each other's data"; that was never
+* true, and this same file contradicted it under `declareCollection`. What
+* exists is `addon-context-factory`, which passes `namespace: addonId` ON
+* THE ADDON'S BEHALF for the `addon-settings` / `addon-devices` paths only.
+* Business collections use bare names, and any caller may name any
+* namespace, or none. Making the door enforce it is tracked separately —
+* it renames tables, so it needs a migration.
+*
+*   - `{ collection: 'addon-settings' }` → table `addon-settings`
+*   - `{ namespace: 'my-addon', collection: 'addon-settings' }` →
+*     table `my-addon:addon-settings`
+*
+* Served by the **storage-orchestrator** builtin, which dispatches to the
+* `data-store-provider` engine registered for the collection
+* (`sqlite-settings`, a SQLite WAL backend, today). One addon owns the
+* data door; engines sit behind it
+* ([D44](../../../../docs/decisions/adr-0044.md)).
+* Addons access it via `ctx.api.settingsStore.*`.
+*/
+var settingsStoreCapability = {
+	name: "settings-store",
+	scope: "system",
+	mode: "singleton",
+	methods: {
+		/** Get a single value by key from a collection. */
+		get: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			key: z.string()
+		}), z.unknown()),
+		/** Set a value by key in a collection (upsert). */
+		set: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			key: z.string(),
+			value: z.unknown()
+		}), z.void(), { kind: "mutation" }),
+		/** Get all entries matching an optional filter. */
+		query: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			filter: QueryFilterSchema.optional()
+		}), z.array(SettingsRecordSchema).readonly()),
+		/** Insert a new record. */
+		insert: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			record: SettingsRecordSchema
+		}), z.void(), { kind: "mutation" }),
+		/** Update an existing record by ID. */
+		update: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			id: z.string(),
+			data: z.record(z.string(), z.unknown())
+		}), z.void(), { kind: "mutation" }),
+		/** Delete a record by key/ID. */
+		delete: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			key: z.string()
+		}), z.void(), { kind: "mutation" }),
+		/**
+		* Delete every record matching `filter`, in ONE statement, returning how
+		* many rows went. This exists because its absence made every retention
+		* path in the system an N+1 drain loop: `delete` takes a key, so a sweep
+		* had to SELECT a page of full rows — every column, including the fat
+		* ones — purely to learn their ids, then issue one call per row.
+		*
+		* **The filter is required and must resolve.** A predicate naming
+		* something the collection cannot express is an ERROR here, not a
+		* widening as it is on `query`, and a filter with no predicates is an
+		* error rather than "every row". Deleting a whole collection is a
+		* legitimate intent, but it must be asked for by name — not reached by
+		* an empty object.
+		*/
+		deleteWhere: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			filter: MutationFilterSchema
+		}), z.object({ deleted: z.number().int() }), { kind: "mutation" }),
+		/**
+		* Apply `data` to every record matching `filter`, in one statement,
+		* returning how many rows changed. Same filter contract as
+		* {@link deleteWhere} — an unresolvable predicate is an error.
+		*/
+		updateWhere: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			filter: MutationFilterSchema,
+			data: z.record(z.string(), z.unknown())
+		}), z.object({ updated: z.number().int() }), { kind: "mutation" }),
+		/** Count entries in a collection, optionally filtered. */
+		count: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			filter: QueryFilterSchema.optional()
+		}), z.number()),
+		/** Grouped counts per ((field-origin)/bucketSize) bucket, filtered. */
+		histogram: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			field: z.string(),
+			bucketSize: z.number().int().positive(),
+			origin: z.number().int(),
+			filter: QueryFilterSchema.optional()
+		}), z.array(z.object({
+			bucket: z.number().int(),
+			count: z.number().int()
+		})).readonly()),
+		/** Check if a collection is empty. */
+		isEmpty: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string()
+		}), z.boolean()),
+		/**
+		* Declare a typed (SQL-backed) collection with explicit columns +
+		* indexes. Idempotent: re-declaring an existing collection with the
+		* same shape is a no-op; shape changes (new columns, new indexes)
+		* are applied additively. Subsequent `insert` / `update` / `delete`
+		* / `query` calls on this collection use typed columns instead of
+		* JSON-blob storage — `record.data` fields are spread across
+		* columns, `query.filter.where` matches real columns (no
+		* `json_extract` overhead), `orderBy` uses column indexes.
+		*
+		* Addons call this in `onInitialize` before their first read/write.
+		* Collection names should be namespaced by addon (e.g.
+		* `pipeline-analytics:object-events`) to avoid cross-addon
+		* clashes — no automatic prefix is added.
+		*/
+		declareCollection: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			columns: z.array(CollectionColumnSchema).readonly(),
+			indexes: z.array(CollectionIndexSchema).readonly().optional()
+		}), z.void(), { kind: "mutation" })
+	}
+};
+/**
+* What one engine says about itself. The orchestrator uses `kind` to pick
+* a registrant for a collection; `engineId` is what a log line names when
+* a call is routed or refused.
+*/
+var EngineInfoSchema = z.object({
+	engineId: z.string(),
+	/**
+	* `relational` — rows, columns, indexes, the surface `settings-store`
+	* has always described. `vector` — an embedding store answering
+	* similarity queries. A registrant declares exactly one; an engine that
+	* does both registers twice, because "both" would make the routing
+	* decision ambiguous at exactly the point it must not be.
+	*/
+	kind: z.enum(["relational", "vector"]),
+	displayName: z.string()
+});
+/**
+* data-store-provider — the engine contract behind the data door.
+*
+* The sibling of `storage-provider`, for rows instead of bytes. The
+* orchestrator (singleton `settings-store` cap, owned by the
+* storage-orchestrator builtin) dispatches every call to the registrant
+* that serves the collection.
+*
+* `internal: true` — consumed only by the orchestrator. Public consumers
+* go through `settings-store`; they never see this cap, and an engine
+* never sees a caller.
+*
+* Design notes:
+*   - **Stateless dispatch.** Every method carries its own
+*     `namespace` + `collection`, so an engine keeps no per-caller state
+*     and the orchestrator forwards the payload verbatim. Scoping is a
+*     property of the input, not of the connection — see the note on
+*     `settings-store` about what that does and does not guarantee.
+*   - **One registrant today** (`sqlite-settings`). The collection shape
+*     exists so a second engine is a registration rather than a second
+*     door ([D44](../../../../docs/decisions/adr-0044.md)).
+*
+* The method set is deliberately identical to `settings-store`'s: the
+* orchestrator is a router, not a translator. A capability the door
+* gains, an engine must be able to answer.
+*/
+var dataStoreProviderCapability = {
+	name: "data-store-provider",
+	scope: "system",
+	mode: "collection",
+	internal: true,
+	methods: {
+		/** Self-description — how the orchestrator picks a registrant. */
+		getEngineInfo: method(z.void(), EngineInfoSchema),
+		/** Get a single value by key from a collection. */
+		get: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			key: z.string()
+		}), z.unknown()),
+		/** Set a value by key in a collection (upsert). */
+		set: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			key: z.string(),
+			value: z.unknown()
+		}), z.void(), { kind: "mutation" }),
+		/** Get all entries matching an optional filter. */
+		query: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			filter: QueryFilterSchema.optional()
+		}), z.array(SettingsRecordSchema).readonly()),
+		/** Insert a new record. */
+		insert: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			record: SettingsRecordSchema
+		}), z.void(), { kind: "mutation" }),
+		/** Update an existing record by ID. */
+		update: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			id: z.string(),
+			data: z.record(z.string(), z.unknown())
+		}), z.void(), { kind: "mutation" }),
+		/** Delete a record by key/ID. */
+		delete: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			key: z.string()
+		}), z.void(), { kind: "mutation" }),
+		/** Delete every record matching `filter`, in one statement. */
+		deleteWhere: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			filter: MutationFilterSchema
+		}), z.object({ deleted: z.number().int() }), { kind: "mutation" }),
+		/** Apply `data` to every record matching `filter`, in one statement. */
+		updateWhere: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			filter: MutationFilterSchema,
+			data: z.record(z.string(), z.unknown())
+		}), z.object({ updated: z.number().int() }), { kind: "mutation" }),
+		/** Count entries in a collection, optionally filtered. */
+		count: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			filter: QueryFilterSchema.optional()
+		}), z.number()),
+		/** Grouped counts per ((field-origin)/bucketSize) bucket, filtered. */
+		histogram: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			field: z.string(),
+			bucketSize: z.number().int().positive(),
+			origin: z.number().int(),
+			filter: QueryFilterSchema.optional()
+		}), z.array(z.object({
+			bucket: z.number().int(),
+			count: z.number().int()
+		})).readonly()),
+		/** Check if a collection is empty. */
+		isEmpty: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string()
+		}), z.boolean()),
+		/** Declare a typed (SQL-backed) collection with columns + indexes. */
+		declareCollection: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			columns: z.array(CollectionColumnSchema).readonly(),
+			indexes: z.array(CollectionIndexSchema).readonly().optional()
+		}), z.void(), { kind: "mutation" })
+	}
+};
+/**
 * detection-pipeline — device-scoped facade over the system
 * `pipeline-executor`.
 *
@@ -18926,6 +19262,52 @@ var ServerUpdateStateSchema = z.enum([
 	"pending-restart",
 	"awaiting-confirmation"
 ]);
+/**
+* Verdict of comparing the node's IMMUTABLE baked seed (the Docker image / the
+* desktop app bundle) against the release the deployment contract would
+* deliver today. `applyServerUpdate` swaps the data-root closure and NEVER
+* touches the image, so `runningVersion` can be perfectly current while the
+* container is weeks old, from a renamed repository nothing rebuilds — which
+* is exactly what happened on 2026-08-02 (hub on `camstack-server:intel-1.1.74`
+* while every existing surface said "up to date"). The seed version is the one
+* image fingerprint a container can see from inside (no docker socket).
+*
+*  - `in-sync`       — seed equals the current release; the node runs the
+*                      contract image.
+*  - `behind-patch`  — same release series, older patch: the image predates
+*                      the current release. Normal between deliberate image
+*                      refreshes, but the starter/entrypoint are still old.
+*  - `behind-series` — the seed's major/minor predates the current release
+*                      series. The shape of a pinned tag or a dead image
+*                      repository; a `docker pull` may fix nothing.
+*  - `ahead`         — seed newer than the best-known release (stale registry
+*                      check).
+*  - `unknown`       — no seed (dev workspace) or nothing to compare against
+*                      yet.
+*/
+var ImageContractStateSchema = z.enum([
+	"in-sync",
+	"behind-patch",
+	"behind-series",
+	"ahead",
+	"unknown"
+]);
+var ImageContractSchema = z.object({
+	state: ImageContractStateSchema,
+	/** The baked seed closure version — the image/app-bundle fingerprint. */
+	seedVersion: z.string().nullable(),
+	/** Best-known version the deployment contract delivers today. */
+	contractVersion: z.string().nullable(),
+	/**
+	* Where `contractVersion` came from: a real registry check (`registry`), or
+	* the node's own running version (`running` — a node can never run code
+	* newer than the newest release, so `seed < running` proves image staleness
+	* even before any registry check has run).
+	*/
+	contractSource: z.enum(["registry", "running"]).nullable(),
+	/** One operator-grade sentence: this node runs image X; the contract says Y. */
+	message: z.string()
+});
 var ServerRollbackInfoSchema = z.object({
 	/** The version that failed (or was manually rolled back). */
 	fromVersion: z.string(),
@@ -18962,7 +19344,12 @@ var ServerPackageStatusSchema = z.object({
 	* versions are being IGNORED. Surfaced as a warning in the UI.
 	*/
 	stateFileCorrupt: z.boolean(),
-	lastCheckedAtMs: z.number().nullable()
+	lastCheckedAtMs: z.number().nullable(),
+	/**
+	* Seed-vs-contract verdict (see {@link ImageContractSchema}). Optional for
+	* version skew: an older provider's payload simply omits it.
+	*/
+	imageContract: ImageContractSchema.optional()
 });
 var ServerUpdateCheckResultSchema = z.object({
 	packageName: z.string(),
@@ -19017,158 +19404,6 @@ version: z.string().optional() }), ServerUpdateActionResultSchema, {
 	mount: { kind: "server-provided" }
 };
 /**
-* Query filter for settings-store collections.
-*/
-var QueryFilterSchema = z.object({
-	where: z.record(z.string(), z.unknown()).optional(),
-	whereIn: z.record(z.string(), z.array(z.unknown())).optional(),
-	whereBetween: z.record(z.string(), z.tuple([z.unknown(), z.unknown()])).optional(),
-	orderBy: z.object({
-		field: z.string(),
-		direction: z.enum(["asc", "desc"])
-	}).optional(),
-	limit: z.number().optional(),
-	offset: z.number().optional()
-});
-/** A single stored record: `{ id, data }`. */
-var SettingsRecordSchema = z.object({
-	id: z.string(),
-	data: z.record(z.string(), z.unknown())
-});
-/**
-* Column declaration for a structured (SQL-backed) collection.
-*
-* Logical types — the backend translates each to the matching SQLite
-* storage class and handles per-type marshaling:
-*   - `TEXT` / `INTEGER` / `REAL` — native SQLite types, pass-through
-*   - `JSON`    — TEXT under the hood; serialised on write, parsed on read
-*   - `BOOLEAN` — INTEGER 0/1 under the hood; coerced both directions
-*/
-var CollectionColumnSchema = z.object({
-	name: z.string(),
-	type: z.enum([
-		"TEXT",
-		"INTEGER",
-		"REAL",
-		"JSON",
-		"BOOLEAN"
-	]),
-	primaryKey: z.boolean().optional(),
-	notNull: z.boolean().optional(),
-	unique: z.boolean().optional()
-});
-var CollectionIndexSchema = z.object({
-	name: z.string(),
-	columns: z.array(z.string()).readonly(),
-	unique: z.boolean().optional()
-});
-/**
-* settings-store — singleton capability for addon-scoped persistence.
-*
-* Every method operates within a `collection`. An optional `namespace`
-* field provides access to additional data spaces beyond the default
-* addon settings — useful for business data (events, tracks, faces, etc.).
-*
-* Scoping: the implementation prefixes every collection with the calling
-* addon's ID automatically. Addons never see each other's data.
-*
-*   - No namespace (default): `"addon-settings"` → `"<addonId>:addon-settings"`
-*   - With namespace: `{ namespace: 'events', collection: 'detections' }` →
-*     `"<addonId>:events:detections"`
-*
-* Implemented by `@camstack/system/builtins/sqlite-settings` (SQLite WAL backend).
-* Addons access it via `ctx.api.settingsStore.*`.
-*/
-var settingsStoreCapability = {
-	name: "settings-store",
-	scope: "system",
-	mode: "singleton",
-	methods: {
-		/** Get a single value by key from a collection. */
-		get: method(z.object({
-			namespace: z.string().optional(),
-			collection: z.string(),
-			key: z.string()
-		}), z.unknown()),
-		/** Set a value by key in a collection (upsert). */
-		set: method(z.object({
-			namespace: z.string().optional(),
-			collection: z.string(),
-			key: z.string(),
-			value: z.unknown()
-		}), z.void(), { kind: "mutation" }),
-		/** Get all entries matching an optional filter. */
-		query: method(z.object({
-			namespace: z.string().optional(),
-			collection: z.string(),
-			filter: QueryFilterSchema.optional()
-		}), z.array(SettingsRecordSchema).readonly()),
-		/** Insert a new record. */
-		insert: method(z.object({
-			namespace: z.string().optional(),
-			collection: z.string(),
-			record: SettingsRecordSchema
-		}), z.void(), { kind: "mutation" }),
-		/** Update an existing record by ID. */
-		update: method(z.object({
-			namespace: z.string().optional(),
-			collection: z.string(),
-			id: z.string(),
-			data: z.record(z.string(), z.unknown())
-		}), z.void(), { kind: "mutation" }),
-		/** Delete a record by key/ID. */
-		delete: method(z.object({
-			namespace: z.string().optional(),
-			collection: z.string(),
-			key: z.string()
-		}), z.void(), { kind: "mutation" }),
-		/** Count entries in a collection, optionally filtered. */
-		count: method(z.object({
-			namespace: z.string().optional(),
-			collection: z.string(),
-			filter: QueryFilterSchema.optional()
-		}), z.number()),
-		/** Grouped counts per ((field-origin)/bucketSize) bucket, filtered. */
-		histogram: method(z.object({
-			namespace: z.string().optional(),
-			collection: z.string(),
-			field: z.string(),
-			bucketSize: z.number().int().positive(),
-			origin: z.number().int(),
-			filter: QueryFilterSchema.optional()
-		}), z.array(z.object({
-			bucket: z.number().int(),
-			count: z.number().int()
-		})).readonly()),
-		/** Check if a collection is empty. */
-		isEmpty: method(z.object({
-			namespace: z.string().optional(),
-			collection: z.string()
-		}), z.boolean()),
-		/**
-		* Declare a typed (SQL-backed) collection with explicit columns +
-		* indexes. Idempotent: re-declaring an existing collection with the
-		* same shape is a no-op; shape changes (new columns, new indexes)
-		* are applied additively. Subsequent `insert` / `update` / `delete`
-		* / `query` calls on this collection use typed columns instead of
-		* JSON-blob storage — `record.data` fields are spread across
-		* columns, `query.filter.where` matches real columns (no
-		* `json_extract` overhead), `orderBy` uses column indexes.
-		*
-		* Addons call this in `onInitialize` before their first read/write.
-		* Collection names should be namespaced by addon (e.g.
-		* `pipeline-analytics:object-events`) to avoid cross-addon
-		* clashes — no automatic prefix is added.
-		*/
-		declareCollection: method(z.object({
-			namespace: z.string().optional(),
-			collection: z.string(),
-			columns: z.array(CollectionColumnSchema).readonly(),
-			indexes: z.array(CollectionIndexSchema).readonly().optional()
-		}), z.void(), { kind: "mutation" })
-	}
-};
-/**
 * `smtp-provider` — pluggable email delivery surface.
 *
 * Collection cap: a deployment may install multiple SMTP relays (e.g.
@@ -22878,7 +23113,7 @@ var recordingCapability = {
 			auth: "admin"
 		}),
 		/**
-		* Move footage (segments and/or strips) from one recordings location to
+		* Move footage (recorded segments) from one recordings location to
 		* another — the drain workflow's mover (entity-routing spec Phase 4).
 		* Throttled copy → size-verify → delete source → index refresh; resumable
 		* by construction (copy-if-absent). Single-flight: one job at a time.
@@ -23761,6 +23996,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	controlCapability,
 	coverCapability,
 	customModelRegistryCapability,
+	dataStoreProviderCapability,
 	dayNightCapability,
 	decoderCapability,
 	detectionPipelineCapability,
@@ -24766,6 +25002,84 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"dataStoreProvider.count": {
+		capName: "data-store-provider",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"dataStoreProvider.declareCollection": {
+		capName: "data-store-provider",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"dataStoreProvider.delete": {
+		capName: "data-store-provider",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"dataStoreProvider.deleteWhere": {
+		capName: "data-store-provider",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"dataStoreProvider.get": {
+		capName: "data-store-provider",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"dataStoreProvider.getEngineInfo": {
+		capName: "data-store-provider",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"dataStoreProvider.histogram": {
+		capName: "data-store-provider",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"dataStoreProvider.insert": {
+		capName: "data-store-provider",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"dataStoreProvider.isEmpty": {
+		capName: "data-store-provider",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"dataStoreProvider.query": {
+		capName: "data-store-provider",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"dataStoreProvider.set": {
+		capName: "data-store-provider",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"dataStoreProvider.update": {
+		capName: "data-store-provider",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"dataStoreProvider.updateWhere": {
+		capName: "data-store-provider",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"dayNight.getOptions": {
 		capName: "day-night",
 		capScope: "device",
@@ -27844,6 +28158,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"settingsStore.deleteWhere": {
+		capName: "settings-store",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"settingsStore.get": {
 		capName: "settings-store",
 		capScope: "system",
@@ -27886,6 +28206,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"settingsStore.updateWhere": {
+		capName: "settings-store",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"smtpProvider.getStatus": {
 		capName: "smtp-provider",
 		capScope: "system",
@@ -29024,4 +29350,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { storageProviderCapability as $, filesystemBrowseCapability as A, sleep as At, logLevelAtMost as B, deviceStatusCapability as C, isDeviceConfigCap as Ct, enumerateSchemaFields as D, readinessKey as Dt, enumerateItemArrayFields as E, parseJsonUnknown as Et, isVoidInput as F, parseStreamParamsFormPatch as G, metricsProviderCapability as H, kebabToCamel as I, scoreRuntimes as J, platformProbeCapability as K, lifecycleJobSchema as L, isArrayOutputSchema as M, isCollectionArrayMethod as N, evaluateLinkExpression as O, resolveCapMount as Ot, isObjectInput as P, storageCapability as Q, localNetworkCapability as R, deviceStateCapability as S, hydrateSchema as St, enumerateInferenceDevices as T, parseJsonObject as Tt, normalizeUnit as U, looseSchema as V, objectInputDeclaresAddonId as W, settingsStoreCapability as X, setByPath as Y, snapshotCapability as Z, applyTransform as _, asString as _t, CAP_NAMES_WITH_STATUS as a, BaseAddon as at, buildStreamParamsConfigSchema as b, emitReadiness as bt, RUNTIME_DEFAULTS as c, DEVICE_STATUS_METHOD as ct, StorageLocationTypeSchema as d, DeviceType as dt, streamQualityLabel as et, UserRecordSchema as f, ReadinessRegistry as ft, alertsCapability as g, asNumber as gt, addonWidgetsCapability as h, asJsonObject as ht, BatteryStatusSchema as i, errMsg as it, getByPath as j, EventCategory as jt, extractNestedAddonId as k, scopeKey as kt, STREAM_PROFILE_META as l, DeviceFeature as lt, addonSettingsCapability as m, WELL_KNOWN_TAB_MAP as mt, AlertSchema as n, userManagementCapability as nt, DeviceStatusSchema as o, DATAPLANE_SECRET_HEADER as ot, addonPagesCapability as p, ReadinessTimeoutError as pt, procedureAuthKey as q, ApiKeyRecordSchema as r, validateExpressionSource as rt, METHOD_ACCESS_MAP as s, DEVICE_SETTINGS_CONTRIBUTION_METHODS as st, ALL_CAPABILITY_DEFINITIONS as t, toExpressionValue as tt, ScopedTokenSchema as u, DeviceRole as ut, authProviderCapability as v, createEvent as vt, doorbellCapability as w, nodePin as wt, deviceManagerCapability as x, expandCapMethods as xt, backupCapability as y, emitDownForOwnedCaps as yt, logDestinationCapability as z };
+export { storageCapability as $, extractNestedAddonId as A, scopeKey as At, logDestinationCapability as B, deviceStateCapability as C, hydrateSchema as Ct, enumerateItemArrayFields as D, parseJsonUnknown as Dt, enumerateInferenceDevices as E, parseJsonObject as Et, isObjectInput as F, objectInputDeclaresAddonId as G, looseSchema as H, isVoidInput as I, procedureAuthKey as J, parseStreamParamsFormPatch as K, kebabToCamel as L, getByPath as M, EventCategory as Mt, isArrayOutputSchema as N, enumerateSchemaFields as O, readinessKey as Ot, isCollectionArrayMethod as P, snapshotCapability as Q, lifecycleJobSchema as R, deviceManagerCapability as S, expandCapMethods as St, doorbellCapability as T, nodePin as Tt, metricsProviderCapability as U, logLevelAtMost as V, normalizeUnit as W, setByPath as X, scoreRuntimes as Y, settingsStoreCapability as Z, applyTransform as _, asNumber as _t, CAP_NAMES_WITH_STATUS as a, errMsg as at, buildStreamParamsConfigSchema as b, emitDownForOwnedCaps as bt, RUNTIME_DEFAULTS as c, DEVICE_SETTINGS_CONTRIBUTION_METHODS as ct, StorageLocationTypeSchema as d, DeviceRole as dt, storageProviderCapability as et, UserRecordSchema as f, DeviceType as ft, alertsCapability as g, asJsonObject as gt, addonWidgetsCapability as h, WELL_KNOWN_TAB_MAP as ht, BatteryStatusSchema as i, validateExpressionSource as it, filesystemBrowseCapability as j, sleep as jt, evaluateLinkExpression as k, resolveCapMount as kt, STREAM_PROFILE_META as l, DEVICE_STATUS_METHOD as lt, addonSettingsCapability as m, ReadinessTimeoutError as mt, AlertSchema as n, toExpressionValue as nt, DeviceStatusSchema as o, BaseAddon as ot, addonPagesCapability as p, ReadinessRegistry as pt, platformProbeCapability as q, ApiKeyRecordSchema as r, userManagementCapability as rt, METHOD_ACCESS_MAP as s, DATAPLANE_SECRET_HEADER as st, ALL_CAPABILITY_DEFINITIONS as t, streamQualityLabel as tt, ScopedTokenSchema as u, DeviceFeature as ut, authProviderCapability as v, asString as vt, deviceStatusCapability as w, isDeviceConfigCap as wt, dataStoreProviderCapability as x, emitReadiness as xt, backupCapability as y, createEvent as yt, localNetworkCapability as z };