@camstack/system 1.2.29 → 1.2.30

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CPmFYLqq.js");
+const require_dist = require("../../dist-VIwdvws5.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as EventCategory, at as errMsg, ot as BaseAddon, p as addonPagesCapability } from "../../dist-B7hOpr5i.mjs";
+import { Mt as EventCategory, at as errMsg, ot as BaseAddon, p as addonPagesCapability } from "../../dist-Dr_P0DOB.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CPmFYLqq.js");
+const require_dist = require("../../dist-VIwdvws5.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as EventCategory, at as errMsg, h as addonWidgetsCapability, ot as BaseAddon } from "../../dist-B7hOpr5i.mjs";
+import { Mt as EventCategory, at as errMsg, h as addonWidgetsCapability, ot as BaseAddon } from "../../dist-Dr_P0DOB.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CPmFYLqq.js");
+const require_dist = require("../../dist-VIwdvws5.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as EventCategory, at as errMsg, g as alertsCapability, n as AlertSchema, ot as BaseAddon, yt as createEvent } from "../../dist-B7hOpr5i.mjs";
+import { Mt as EventCategory, at as errMsg, g as alertsCapability, n as AlertSchema, ot as BaseAddon, yt as createEvent } from "../../dist-Dr_P0DOB.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CPmFYLqq.js");
+const require_dist = require("../../dist-VIwdvws5.js");
 let node_fs = require("node:fs");
 let node_fs$1 = require_chunk.__toESM(node_fs, 1);
 node_fs = require_chunk.__toESM(node_fs);

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as EventCategory, ot as BaseAddon, y as backupCapability } from "../../dist-B7hOpr5i.mjs";
+import { Mt as EventCategory, ot as BaseAddon, y as backupCapability } from "../../dist-Dr_P0DOB.mjs";
 import * as fs from "node:fs";
 import Kt from "node:fs";
 import * as path$1 from "node:path";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CPmFYLqq.js");
+const require_dist = require("../../dist-VIwdvws5.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { B as logDestinationCapability, ot as BaseAddon } from "../../dist-B7hOpr5i.mjs";
+import { B as logDestinationCapability, ot as BaseAddon } from "../../dist-Dr_P0DOB.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CPmFYLqq.js");
+const require_dist = require("../../dist-VIwdvws5.js");
 let _camstack_types_node = require("@camstack/types/node");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,4 +1,4 @@
-import { C as deviceStateCapability, D as enumerateItemArrayFields, K as parseStreamParamsFormPatch, M as getByPath, Mt as EventCategory, O as enumerateSchemaFields, S as deviceManagerCapability, W as normalizeUnit, X as setByPath, _ as applyTransform, a as CAP_NAMES_WITH_STATUS, at as errMsg, b as buildStreamParamsConfigSchema, dt as DeviceRole, ft as DeviceType, ht as WELL_KNOWN_TAB_MAP, it as validateExpressionSource, jt as sleep, k as evaluateLinkExpression, l as STREAM_PROFILE_META, nt as toExpressionValue, o as DeviceStatusSchema, ot as BaseAddon, t as ALL_CAPABILITY_DEFINITIONS, ut as DeviceFeature, w as deviceStatusCapability, wt as isDeviceConfigCap } from "../../dist-B7hOpr5i.mjs";
+import { C as deviceStateCapability, D as enumerateItemArrayFields, K as parseStreamParamsFormPatch, M as getByPath, Mt as EventCategory, O as enumerateSchemaFields, S as deviceManagerCapability, W as normalizeUnit, X as setByPath, _ as applyTransform, a as CAP_NAMES_WITH_STATUS, at as errMsg, b as buildStreamParamsConfigSchema, dt as DeviceRole, ft as DeviceType, ht as WELL_KNOWN_TAB_MAP, it as validateExpressionSource, jt as sleep, k as evaluateLinkExpression, l as STREAM_PROFILE_META, nt as toExpressionValue, o as DeviceStatusSchema, ot as BaseAddon, t as ALL_CAPABILITY_DEFINITIONS, ut as DeviceFeature, w as deviceStatusCapability, wt as isDeviceConfigCap } from "../../dist-Dr_P0DOB.mjs";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CPmFYLqq.js");
+const require_dist = require("../../dist-VIwdvws5.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as EventCategory, T as doorbellCapability, at as errMsg, ft as DeviceType, ot as BaseAddon, yt as createEvent } from "../../dist-B7hOpr5i.mjs";
+import { Mt as EventCategory, T as doorbellCapability, at as errMsg, ft as DeviceType, ot as BaseAddon, yt as createEvent } from "../../dist-Dr_P0DOB.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CPmFYLqq.js");
+const require_dist = require("../../dist-VIwdvws5.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { B as logDestinationCapability, ot as BaseAddon } from "../../dist-B7hOpr5i.mjs";
+import { B as logDestinationCapability, ot as BaseAddon } from "../../dist-Dr_P0DOB.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CPmFYLqq.js");
+const require_dist = require("../../dist-VIwdvws5.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { f as UserRecordSchema, ot as BaseAddon, r as ApiKeyRecordSchema, rt as userManagementCapability, u as ScopedTokenSchema, v as authProviderCapability } from "../../dist-B7hOpr5i.mjs";
+import { f as UserRecordSchema, ot as BaseAddon, r as ApiKeyRecordSchema, rt as userManagementCapability, u as ScopedTokenSchema, v as authProviderCapability } from "../../dist-Dr_P0DOB.mjs";
 import * as crypto$1 from "node:crypto";
 import { randomUUID } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CPmFYLqq.js");
+const require_dist = require("../../dist-VIwdvws5.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 //#region src/builtins/local-network/local-network.addon.ts

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as EventCategory, ot as BaseAddon, z as localNetworkCapability } from "../../dist-B7hOpr5i.mjs";
+import { Mt as EventCategory, ot as BaseAddon, z as localNetworkCapability } from "../../dist-Dr_P0DOB.mjs";
 import * as os from "node:os";
 //#region src/builtins/local-network/local-network.addon.ts
 /**

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CPmFYLqq.js");
+const require_dist = require("../../dist-VIwdvws5.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { B as logDestinationCapability, ot as BaseAddon } from "../../dist-B7hOpr5i.mjs";
+import { B as logDestinationCapability, ot as BaseAddon } from "../../dist-Dr_P0DOB.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CPmFYLqq.js");
+const require_dist = require("../../dist-VIwdvws5.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_child_process = require("node:child_process");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as EventCategory, U as metricsProviderCapability, ot as BaseAddon, yt as createEvent } from "../../dist-B7hOpr5i.mjs";
+import { Mt as EventCategory, U as metricsProviderCapability, ot as BaseAddon, yt as createEvent } from "../../dist-Dr_P0DOB.mjs";
 import * as fs from "node:fs";
 import { execFile, execFileSync } from "node:child_process";
 import { promisify } from "node:util";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CPmFYLqq.js");
+const require_dist = require("../../dist-VIwdvws5.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_child_process = require("node:child_process");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { E as enumerateInferenceDevices, Mt as EventCategory, Y as scoreRuntimes, at as errMsg, ot as BaseAddon, q as platformProbeCapability, xt as emitReadiness } from "../../dist-B7hOpr5i.mjs";
+import { E as enumerateInferenceDevices, Mt as EventCategory, Y as scoreRuntimes, at as errMsg, ot as BaseAddon, q as platformProbeCapability, xt as emitReadiness } from "../../dist-Dr_P0DOB.mjs";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CPmFYLqq.js");
+const require_dist = require("../../dist-VIwdvws5.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as EventCategory, ot as BaseAddon } from "../../dist-B7hOpr5i.mjs";
+import { Mt as EventCategory, ot as BaseAddon } from "../../dist-Dr_P0DOB.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CPmFYLqq.js");
+const require_dist = require("../../dist-VIwdvws5.js");
 let node_child_process = require("node:child_process");
 //#region src/builtins/snapshot/snapshot-coalescing.ts
 /**

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Q as snapshotCapability, Tt as nodePin, at as errMsg, ft as DeviceType, i as BatteryStatusSchema, ot as BaseAddon, tt as streamQualityLabel, ut as DeviceFeature } from "../../dist-B7hOpr5i.mjs";
+import { Q as snapshotCapability, Tt as nodePin, at as errMsg, ft as DeviceType, i as BatteryStatusSchema, ot as BaseAddon, tt as streamQualityLabel, ut as DeviceFeature } from "../../dist-Dr_P0DOB.mjs";
 import { execFile } from "node:child_process";
 //#region src/builtins/snapshot/snapshot-coalescing.ts
 /**

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CPmFYLqq.js");
+const require_dist = require("../../dist-VIwdvws5.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { et as storageProviderCapability, j as filesystemBrowseCapability, ot as BaseAddon } from "../../dist-B7hOpr5i.mjs";
+import { et as storageProviderCapability, j as filesystemBrowseCapability, ot as BaseAddon } from "../../dist-Dr_P0DOB.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";
 import { basename, dirname, join, resolve, sep } from "node:path";

package/dist/builtins/sqlite-storage/filter-compiler.d.ts

@@ -0,0 +1,61 @@
+/**
+ * One filter compiler for both the read and the bulk-mutation paths.
+ *
+ * It exists because those two paths must NOT behave the same way, and until
+ * now the only compiler lived inline in `query` — where being forgiving is
+ * correct. Reusing it verbatim for `deleteWhere` would have shipped two
+ * data-loss shapes:
+ *
+ *  - **A dropped predicate.** A field that is not a column of a structured
+ *    table is skipped, so `{ deviceId: 615, kind: 'motion' }` can compile to
+ *    `WHERE "deviceId" = ?` — on a SELECT that returns extra rows, on a DELETE
+ *    it removes rows the caller meant to keep.
+ *  - **No predicate at all.** An empty filter compiles to an empty WHERE,
+ *    which on a DELETE is the entire collection.
+ *
+ * `select` mode keeps the historical behaviour, because every existing caller
+ * was written against it. `mutate` mode refuses both, before any SQL exists.
+ * Emptying a collection is a legitimate thing to want, and it should be a
+ * differently-named operation rather than a filter that happens to be empty.
+ */
+/** The part of a declared collection this compiler needs. */
+export interface CollectionShape {
+    readonly primaryKey: string;
+    readonly columns: ReadonlySet<string>;
+    /**
+     * The single JSON blob column for a KV-shaped collection (fields inside it
+     * are reachable via `json_extract`), or `null` for a structured table whose
+     * fields are real columns.
+     */
+    readonly kvBlobColumn: string | null;
+}
+export type FilterMode = 'select' | 'mutate';
+/** Marshals a JS value to what the driver should bind. */
+export type SerializeValue = (value: unknown) => unknown;
+export interface QueryFilterInput {
+    readonly where?: Readonly<Record<string, unknown>>;
+    readonly whereIn?: Readonly<Record<string, readonly unknown[]>>;
+    readonly whereBetween?: Readonly<Record<string, readonly [unknown, unknown]>>;
+}
+/**
+ * The predicate-only filter a bulk mutation accepts — no ordering, no limit.
+ * Structurally the mutation half of {@link QueryFilterInput}.
+ */
+export type MutationFilterInput = QueryFilterInput;
+export interface CompiledFilter {
+    /** Either `''` or a leading-space ` WHERE …` clause, ready to concatenate. */
+    readonly whereSql: string;
+    readonly params: readonly unknown[];
+}
+/** Thrown by `mutate` mode. Distinct type so a caller can map it to a 400. */
+export declare class UnsafeFilterError extends Error {
+    constructor(message: string);
+}
+/**
+ * SQL expression for `field` on this collection, or `null` when it cannot be
+ * expressed: a real column → `"field"`; a KV blob field → `json_extract`;
+ * anything else on a structured table → unresolvable. Exported because
+ * `histogram` needs the same resolution for its bucketed column.
+ */
+export declare function fieldExprFor(field: string, shape: CollectionShape): string | null;
+export declare function compileFilter(filter: QueryFilterInput | undefined, shape: CollectionShape, mode: FilterMode, serialize: SerializeValue): CompiledFilter;

package/dist/builtins/sqlite-storage/sqlite-settings-backend.d.ts

@@ -1,5 +1,25 @@
 import { default as Database } from 'better-sqlite3';
 import { DataStoreEngineInfo, ISettingsBackend, SettingsRecord, TableSchema, TableQueryOptions, SettingsGetInput, SettingsSetInput, SettingsQueryInput, SettingsInsertInput, SettingsUpdateInput, SettingsDeleteInput, SettingsCountInput, SettingsIsEmptyInput, SettingsHistogramInput, HistogramBucket, CollectionColumn, CollectionIndex } from '@camstack/types';
+import { MutationFilterInput } from './filter-compiler.js';
+/** Input for {@link SqliteSettingsBackend.deleteWhere}. */
+interface SettingsDeleteWhereInput {
+    readonly namespace?: string;
+    readonly collection: string;
+    readonly filter: MutationFilterInput;
+}
+interface SettingsDeleteWhereResult {
+    readonly deleted: number;
+}
+/** Input for {@link SqliteSettingsBackend.updateWhere}. */
+interface SettingsUpdateWhereInput {
+    readonly namespace?: string;
+    readonly collection: string;
+    readonly filter: MutationFilterInput;
+    readonly data: Readonly<Record<string, unknown>>;
+}
+interface SettingsUpdateWhereResult {
+    readonly updated: number;
+}
 /**
  * SQLite implementation of ISettingsBackend.
  *
@@ -51,6 +71,23 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
     insert<T extends object = Record<string, unknown>>({ namespace, collection, record, }: SettingsInsertInput<T>): Promise<void>;
     update({ namespace, collection, id, data }: SettingsUpdateInput): Promise<void>;
     delete({ namespace, collection, key }: SettingsDeleteInput): Promise<void>;
+    /**
+     * Bulk delete. One statement, whatever the row count — this is what every
+     * retention path in the system was hand-rolling as a select-then-delete
+     * loop. The filter is compiled in `mutate` mode, so an unresolvable
+     * predicate or an empty one throws before any SQL exists.
+     */
+    deleteWhere({ namespace, collection, filter, }: SettingsDeleteWhereInput): Promise<SettingsDeleteWhereResult>;
+    /**
+     * Bulk update. Same filter contract as {@link deleteWhere}.
+     *
+     * Every key of `data` must be a REAL column. A KV-shaped collection keeps
+     * its fields inside a JSON blob, and setting one would need `json_set` with
+     * read-modify-write semantics this method does not have — so it refuses
+     * rather than writing a column that does not exist, which is what the
+     * uncapped `tableUpdate` would have done.
+     */
+    updateWhere({ namespace, collection, filter, data, }: SettingsUpdateWhereInput): Promise<SettingsUpdateWhereResult>;
     count({ namespace, collection, filter }: SettingsCountInput): Promise<number>;
     histogram({ namespace, collection, field, bucketSize, origin, filter, }: SettingsHistogramInput): Promise<readonly HistogramBucket[]>;
     isEmpty({ namespace, collection }: SettingsIsEmptyInput): Promise<boolean>;
@@ -88,6 +125,12 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
     private getAllScoped;
     private setScopedKey;
     private scopedName;
+    /**
+     * Project a declared collection onto what {@link compileFilter} needs. A
+     * collection whose only column is `data` is KV-shaped: its fields live
+     * inside that blob and are reached with `json_extract`.
+     */
+    private shapeOf;
     declareCollection(input: {
         namespace?: string;
         collection: string;

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,10 +3,66 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CPmFYLqq.js");
+const require_dist = require("../../dist-VIwdvws5.js");
 let node_crypto = require("node:crypto");
 let better_sqlite3 = require("better-sqlite3");
 better_sqlite3 = require_chunk.__toESM(better_sqlite3);
+//#region src/builtins/sqlite-storage/filter-compiler.ts
+/** Thrown by `mutate` mode. Distinct type so a caller can map it to a 400. */
+var UnsafeFilterError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "UnsafeFilterError";
+	}
+};
+/**
+* SQL expression for `field` on this collection, or `null` when it cannot be
+* expressed: a real column → `"field"`; a KV blob field → `json_extract`;
+* anything else on a structured table → unresolvable. Exported because
+* `histogram` needs the same resolution for its bucketed column.
+*/
+function fieldExprFor(field, shape) {
+	if (field === shape.primaryKey || shape.columns.has(field)) return `"${field}"`;
+	if (shape.kvBlobColumn !== null) return `json_extract("${shape.kvBlobColumn}", '$.${field}')`;
+	return null;
+}
+function compileFilter(filter, shape, mode, serialize) {
+	const clauses = [];
+	const params = [];
+	const resolve = (field) => {
+		const expr = fieldExprFor(field, shape);
+		if (expr === null && mode === "mutate") throw new UnsafeFilterError(`filter refers to "${field}", which this collection cannot express — refusing to run a bulk mutation with a dropped predicate`);
+		return expr;
+	};
+	for (const [field, value] of Object.entries(filter?.where ?? {})) {
+		const expr = resolve(field);
+		if (expr === null) continue;
+		clauses.push(`${expr} = ?`);
+		params.push(serialize(value));
+	}
+	for (const [field, values] of Object.entries(filter?.whereIn ?? {})) {
+		const expr = resolve(field);
+		if (expr === null) continue;
+		if (values.length === 0) {
+			if (mode === "mutate") throw new UnsafeFilterError(`filter has an empty whereIn list for "${field}" — it matches nothing, which is more likely a caller bug than an intent`);
+			continue;
+		}
+		clauses.push(`${expr} IN (${values.map(() => "?").join(", ")})`);
+		for (const v of values) params.push(serialize(v));
+	}
+	for (const [field, [low, high]] of Object.entries(filter?.whereBetween ?? {})) {
+		const expr = resolve(field);
+		if (expr === null) continue;
+		clauses.push(`${expr} BETWEEN ? AND ?`);
+		params.push(serialize(low), serialize(high));
+	}
+	if (clauses.length === 0 && mode === "mutate") throw new UnsafeFilterError("filter compiled to no predicate — that would affect every row in the collection; use the explicit clear operation if that is the intent");
+	return {
+		whereSql: clauses.length > 0 ? ` WHERE ${clauses.join(" AND ")}` : "",
+		params
+	};
+}
+//#endregion
 //#region src/builtins/sqlite-storage/sqlite-settings-backend.ts
 function parseRowData(raw) {
 	return require_dist.asJsonObject(require_dist.parseJsonUnknown(raw)) ?? {};
@@ -189,6 +245,41 @@ var SqliteSettingsBackend = class SqliteSettingsBackend {
 		const decl = this.requireDeclared(scoped);
 		await this.tableDelete(scoped, { [decl.primaryKey]: key });
 	}
+	/**
+	* Bulk delete. One statement, whatever the row count — this is what every
+	* retention path in the system was hand-rolling as a select-then-delete
+	* loop. The filter is compiled in `mutate` mode, so an unresolvable
+	* predicate or an empty one throws before any SQL exists.
+	*/
+	async deleteWhere({ namespace, collection, filter }) {
+		const scoped = this.scopedName(namespace, collection);
+		const decl = this.requireDeclared(scoped);
+		const { whereSql, params } = compileFilter(filter, this.shapeOf(decl), "mutate", (v) => this.serializeColumnValue(v));
+		return { deleted: this.getDb().prepare(`DELETE FROM "${scoped}"${whereSql}`).run(...params).changes };
+	}
+	/**
+	* Bulk update. Same filter contract as {@link deleteWhere}.
+	*
+	* Every key of `data` must be a REAL column. A KV-shaped collection keeps
+	* its fields inside a JSON blob, and setting one would need `json_set` with
+	* read-modify-write semantics this method does not have — so it refuses
+	* rather than writing a column that does not exist, which is what the
+	* uncapped `tableUpdate` would have done.
+	*/
+	async updateWhere({ namespace, collection, filter, data }) {
+		const scoped = this.scopedName(namespace, collection);
+		const decl = this.requireDeclared(scoped);
+		const setClauses = [];
+		const setValues = [];
+		for (const [key, value] of Object.entries(data)) {
+			if (key !== decl.primaryKey && !decl.columns.has(key)) throw new UnsafeFilterError(`updateWhere cannot set "${key}" on "${scoped}" — it is not a column of this collection`);
+			setClauses.push(`"${key}" = ?`);
+			setValues.push(this.serializeColumnValue(value));
+		}
+		if (setClauses.length === 0) throw new UnsafeFilterError("updateWhere was given no fields to set");
+		const { whereSql, params } = compileFilter(filter, this.shapeOf(decl), "mutate", (v) => this.serializeColumnValue(v));
+		return { updated: this.getDb().prepare(`UPDATE "${scoped}" SET ${setClauses.join(", ")}${whereSql}`).run(...setValues, ...params).changes };
+	}
 	async count({ namespace, collection, filter }) {
 		const scoped = this.scopedName(namespace, collection);
 		const decl = this.requireDeclared(scoped);
@@ -216,30 +307,10 @@ var SqliteSettingsBackend = class SqliteSettingsBackend {
 	async histogram({ namespace, collection, field, bucketSize, origin, filter }) {
 		const scoped = this.scopedName(namespace, collection);
 		const decl = this.requireDeclared(scoped);
-		const isKvShape = decl.columns.size === 1 && decl.columns.has("data");
-		const isColumn = (f) => f === decl.primaryKey || decl.columns.has(f);
-		const fieldExpr = (f) => {
-			if (isColumn(f)) return `"${f}"`;
-			if (isKvShape) return `json_extract("data", '$.${f}')`;
-			return "";
-		};
-		const col = fieldExpr(field);
-		if (!col) return [];
-		const params = [];
-		const clauses = [];
-		if (filter?.where) for (const [f, value] of Object.entries(filter.where)) {
-			const expr = fieldExpr(f);
-			if (!expr) continue;
-			clauses.push(`${expr} = ?`);
-			params.push(this.serializeColumnValue(value));
-		}
-		if (filter?.whereBetween) for (const [f, [lo, hi]] of Object.entries(filter.whereBetween)) {
-			const expr = fieldExpr(f);
-			if (!expr) continue;
-			clauses.push(`${expr} BETWEEN ? AND ?`);
-			params.push(this.serializeColumnValue(lo), this.serializeColumnValue(hi));
-		}
-		const where = clauses.length > 0 ? ` WHERE ${clauses.join(" AND ")}` : "";
+		const shape = this.shapeOf(decl);
+		const col = fieldExprFor(field, shape);
+		if (col === null) return [];
+		const { whereSql: where, params } = compileFilter(filter, shape, "select", (v) => this.serializeColumnValue(v));
 		const sql = `SELECT ${`CAST((${col} - ?) / ? AS INTEGER)`} AS bucket, COUNT(*) AS count FROM "${scoped}"${where} GROUP BY bucket ORDER BY bucket`;
 		return this.getDb().prepare(sql).all(origin, bucketSize, ...params).map((r) => ({
 			bucket: r.bucket,
@@ -255,43 +326,13 @@ var SqliteSettingsBackend = class SqliteSettingsBackend {
 		const isKvShape = decl.columns.size === 1 && decl.columns.has("data");
 		let sql = `SELECT ${[`"${decl.primaryKey}"`, ...[...decl.columns].map((c) => `"${c}"`)].join(", ")} FROM "${table}"`;
 		const params = [];
-		const whereClauses = [];
-		const isColumn = (f) => f === decl.primaryKey || decl.columns.has(f);
-		/**
-		* SQL expression for `field` on this table.
-		*  - real column → `"field"`
-		*  - KV blob field (e.g. `username` inside `data`) → `json_extract`
-		*  - structured table + non-column → empty string (filter dropped,
-		*    matches legacy structured-table behaviour)
-		*/
-		const fieldExpr = (f) => {
-			if (isColumn(f)) return `"${f}"`;
-			if (isKvShape) return `json_extract("data", '$.${f}')`;
-			return "";
-		};
-		if (filter?.where) for (const [field, value] of Object.entries(filter.where)) {
-			const expr = fieldExpr(field);
-			if (!expr) continue;
-			whereClauses.push(`${expr} = ?`);
-			params.push(this.serializeColumnValue(value));
-		}
-		if (filter?.whereIn) for (const [field, values] of Object.entries(filter.whereIn)) {
-			const expr = fieldExpr(field);
-			if (!expr) continue;
-			const placeholders = values.map(() => "?").join(", ");
-			whereClauses.push(`${expr} IN (${placeholders})`);
-			for (const v of values) params.push(this.serializeColumnValue(v));
-		}
-		if (filter?.whereBetween) for (const [field, [low, high]] of Object.entries(filter.whereBetween)) {
-			const expr = fieldExpr(field);
-			if (!expr) continue;
-			whereClauses.push(`${expr} BETWEEN ? AND ?`);
-			params.push(this.serializeColumnValue(low), this.serializeColumnValue(high));
-		}
-		if (whereClauses.length > 0) sql += ` WHERE ${whereClauses.join(" AND ")}`;
+		const shape = this.shapeOf(decl);
+		const compiled = compileFilter(filter, shape, "select", (v) => this.serializeColumnValue(v));
+		sql += compiled.whereSql;
+		params.push(...compiled.params);
 		if (filter?.orderBy) {
-			const expr = fieldExpr(filter.orderBy.field);
-			if (expr) {
+			const expr = fieldExprFor(filter.orderBy.field, shape);
+			if (expr !== null) {
 				const dir = filter.orderBy.direction === "desc" ? "DESC" : "ASC";
 				sql += ` ORDER BY ${expr} ${dir}`;
 			}
@@ -467,6 +508,19 @@ var SqliteSettingsBackend = class SqliteSettingsBackend {
 	scopedName(namespace, collection) {
 		return namespace ? `${namespace}:${collection}` : collection;
 	}
+	/**
+	* Project a declared collection onto what {@link compileFilter} needs. A
+	* collection whose only column is `data` is KV-shaped: its fields live
+	* inside that blob and are reached with `json_extract`.
+	*/
+	shapeOf(decl) {
+		const isKvShape = decl.columns.size === 1 && decl.columns.has("data");
+		return {
+			primaryKey: decl.primaryKey,
+			columns: decl.columns,
+			kvBlobColumn: isKvShape ? "data" : null
+		};
+	}
 	async declareCollection(input) {
 		const table = this.scopedName(input.namespace, input.collection);
 		if (this.declaredCollections.has(table)) return;