@camstack/system 1.2.422 → 1.2.424

package/dist/builtins/sqlite-storage/sqlite-settings-backend.d.ts

@@ -1,7 +1,25 @@
-import type { BulkRecord, CollectionColumn, CollectionIndex, DataStoreEngineInfo, HistogramBucket, IScopedLogger, ISettingsBackend, QueryFilter, SettingsAggregateInput, SettingsAggregateResult, SettingsCountInput, SettingsDeleteInput, SettingsGetInput, SettingsHistogramInput, SettingsInsertInput, SettingsIsEmptyInput, SettingsQueryInput, SettingsRecord, SettingsSetInput, SettingsUpdateInput, SettingsUpsertInput } from "@camstack/types";
+import type { BulkRecord, DataStoreDatabase, DataStoreEngineInfo, DeclareCollectionInput, HistogramBucket, IScopedLogger, ISettingsBackend, QueryFilter, SettingsAggregateInput, SettingsAggregateResult, SettingsCountInput, SettingsDeleteInput, SettingsGetInput, SettingsHistogramInput, SettingsInsertInput, SettingsIsEmptyInput, SettingsQueryInput, SettingsRecord, SettingsSetInput, SettingsUpdateInput, SettingsUpsertInput } from "@camstack/types";
 import Database from "better-sqlite3";
 import { type MutationFilterInput } from "./filter-compiler.js";
 import { SqliteOpProfiler } from "./query-profiler.js";
+/** How one file of the engine is opened. All optional: the defaults are `camstack.db`'s. */
+export interface SqliteSettingsBackendOptions {
+	/** Which file this is — names it in log lines. Default `settings`. */
+	readonly databaseId?: DataStoreDatabase;
+	/**
+	* `incremental` sets `auto_vacuum = INCREMENTAL` — but ONLY on a file this
+	* open CREATES: the mode is fixed when the first table is written, and
+	* changing it on an existing file means a full `VACUUM`, which is the ops
+	* script's job (D853), never a boot step. Default `none`.
+	*/
+	readonly autoVacuum?: "none" | "incremental";
+	/**
+	* Declare the canonical key/value collections and seed the defaults. True
+	* only for `settings`: canonical KV collections are settings by definition,
+	* and a second copy of them in `events.db` would be a table nobody reads.
+	*/
+	readonly canonicalKv?: boolean;
+}
 /** Input for {@link SqliteSettingsBackend.insertMany}. */
 interface SettingsInsertManyInput {
 	readonly namespace?: string;
@@ -11,6 +29,16 @@ interface SettingsInsertManyInput {
 interface SettingsInsertManyResult {
 	readonly inserted: number;
 }
+/** Input for {@link SqliteSettingsBackend.upsertMany}. */
+interface SettingsUpsertManyInput {
+	readonly namespace?: string;
+	readonly collection: string;
+	readonly conflict: readonly string[];
+	readonly records: readonly BulkRecord[];
+}
+interface SettingsUpsertManyResult {
+	readonly upserted: number;
+}
 /** Input for {@link SqliteSettingsBackend.transact}. */
 interface SettingsTransactInput {
 	readonly namespace?: string;
@@ -33,6 +61,11 @@ interface SettingsTransactInput {
 		readonly collection: string;
 		readonly id: string;
 		readonly data: Record<string, unknown>;
+	} | {
+		readonly op: "upsertMany";
+		readonly collection: string;
+		readonly conflict: readonly string[];
+		readonly records: readonly BulkRecord[];
 	})[];
 }
 interface SettingsTransactResult {
@@ -157,7 +190,8 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
 	* is the failure this was built for (`query-profiler.ts`).
 	*/
 	private readonly profiler;
-	constructor(dbPath: string, runtimeDefaults?: Record<string, unknown>, logger?: IScopedLogger);
+	private readonly options;
+	constructor(dbPath: string, runtimeDefaults?: Record<string, unknown>, logger?: IScopedLogger, options?: SqliteSettingsBackendOptions);
 	initialize(): Promise<void>;
 	private requireDeclared;
 	/**
@@ -229,6 +263,18 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
 	/** The synchronous body of {@link insertMany}, shared with {@link transact}. */
 	private insertManySync;
 	/**
+	* Upsert a batch in ONE transaction, on ONE prepared statement.
+	*
+	* {@link upsert}'s batch twin: `INSERT … ON CONFLICT(<slot>) DO UPDATE`. One
+	* statement shape means every record must name the SAME declared columns and
+	* every `conflict` column — a record that mentioned fewer would otherwise
+	* bind NULL over a value the caller never meant to touch, so a heterogeneous
+	* batch is refused whole, before any SQL runs.
+	*/
+	upsertMany({ namespace, collection, conflict, records }: SettingsUpsertManyInput): Promise<SettingsUpsertManyResult>;
+	/** The synchronous body of {@link upsertMany}, shared with {@link transact}. */
+	private upsertManySync;
+	/**
 	* Several writes, one transaction, behind an optional guard.
 	*
 	* `better-sqlite3`'s `transaction()` is synchronous and rolls the whole call
@@ -372,6 +418,25 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
 	* Returns null if the backend has not been initialized yet.
 	*/
 	getDatabase(): Database.Database | null;
+	/** Which file this backend serves. */
+	getDatabaseId(): DataStoreDatabase;
+	/**
+	* The tables this file's own `_collection_declarations` names — the
+	* placement authority (D851). Read from DISK, not from memory, so a table
+	* created and declared by an earlier life of the process still counts.
+	*/
+	declaredCollectionNames(): ReadonlySet<string>;
+	/** Does a table of this name exist in THIS file? */
+	hasTable(name: string): boolean;
+	/** Refuse an id-addressed call on a composite-keyed collection. */
+	private requireSingleKey;
+	/**
+	* The composite key of a declaration, validated: every name is a declared
+	* column, no column also claims `primaryKey: true`, and `withoutRowid` has a
+	* key to be keyed by. A single-name `primaryKey` is the single-column key it
+	* always was and returns empty.
+	*/
+	private resolveKeyColumns;
 	/**
 	* `EXPLAIN QUERY PLAN` for a statement, as one string per plan row.
 	*
@@ -494,12 +559,7 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
 	* had the chance to re-declare — which on a respawn none of them will.
 	*/
 	private restorePersistedDeclarations;
-	declareCollection(input: {
-		namespace?: string;
-		collection: string;
-		columns: readonly CollectionColumn[];
-		indexes?: readonly CollectionIndex[];
-	}): Promise<void>;
+	declareCollection(declared: DeclareCollectionInput): Promise<void>;
 	/** Serialise per-column values for SQL binding: objects → JSON, booleans → 0/1. */
 	private serializeColumnValue;
 	private ensureTable;

package/dist/builtins/sqlite-storage/sqlite-settings.addon.d.ts

@@ -1,7 +1,8 @@
 import type { ProviderRegistration } from "@camstack/types";
 import { BaseAddon } from "@camstack/types";
-import { SqliteSettingsBackend } from "./sqlite-settings-backend.js";
-import { SqliteVecVectorIndex } from "./vector-index-vec.js";
+import { PlacementRouter } from "./placement-router.js";
+import type { SqliteSettingsBackend } from "./sqlite-settings-backend.js";
+import type { SqliteVecVectorIndex } from "./vector-index-vec.js";
 /**
 * SQLite Settings addon — the relational ENGINE behind the data door.
 *
@@ -12,22 +13,25 @@ import { SqliteVecVectorIndex } from "./vector-index-vec.js";
 * engine only through the door — which is the point, because it is what
 * makes the engine replaceable.
 *
+* ONE engine process, SEVERAL owned files ([D851](../../../../../docs/decisions/adr-0851-one-sqlite-engine-serves-several-owned-files-one-thread-per-file.md)):
+* `camstack.db` (settings) is served on this thread exactly as it always was;
+* `events.db` and `history.db`, when a collection names them, are each served
+* by a worker thread. A {@link PlacementRouter} is the provider the door sees.
+* The layout of the files is documented in `docs/architecture/storage-files.md`.
+*
 * It also serves `database-snapshot` (singleton, internal): the verified copy
 * of its database that the nightly backup archives in place of the live files
 * (D693).
 *
-* It ALSO serves `vector-store` (singleton, internal), from the same database
-* file and the same open handle. That capability first shipped as its own addon
-* and the separation cost two round trips per write — caller → door → engine —
-* plus a runner process, to reach a database this addon already has open. The
+* It ALSO serves `vector-store` (singleton, internal), from the settings file's
+* open handle. That capability first shipped as its own addon and the
+* separation cost two round trips per write — caller → door → engine — plus a
+* runner process, to reach a database this addon already has open. The
 * capability is what keeps the backend swappable; the package never was.
 */
 export declare class SqliteSettingsAddon extends BaseAddon {
-	private backend;
-	private vectorIndex;
-	private walMaintenance;
-	private walCheckpointer;
-	private shmLockCanary;
+	private settingsFile;
+	private router;
 	constructor();
 	/**
 	* The engine behind `settings-store` cannot read that door during
@@ -40,23 +44,16 @@ export declare class SqliteSettingsAddon extends BaseAddon {
 	*/
 	protected override resolveConfig(): Promise<void>;
 	protected onInitialize(): Promise<ProviderRegistration[]>;
-	protected onShutdown(): Promise<void>;
-	getBackend(): SqliteSettingsBackend | null;
 	/**
-	* Build the vector index.
-	*
-	* ONE implementation, deliberately. A second backend behind a flag means two
-	* code paths that can disagree, two sets of gotchas, and a silent fallback
-	* that turns "the extension is missing" into "search is mysteriously slow" —
-	* the failure this codebase keeps paying for. The capability is the swap
-	* point: another provider replaces this one wholesale, it does not hide
-	* inside it.
-	*
-	* So a failed extension load THROWS. A node without the native binary must
-	* fail at boot with a message naming sqlite-vec, not serve degraded results
-	* nobody knows are degraded.
+	* Housekeeping that must happen BEFORE anything can read a file: the
+	* retired-key purge (settings only) and the retired-table purge (every
+	* open file).
 	*/
-	private createVectorIndex;
+	private purgeBeforeServing;
+	protected onShutdown(): Promise<void>;
+	getBackend(): SqliteSettingsBackend | null;
+	/** The placement router; null before `onInitialize`. */
+	getRouter(): PlacementRouter | null;
 	/** Exposed for tests; null before `onInitialize`. */
 	getVectorIndex(): SqliteVecVectorIndex | null;
 }

package/dist/builtins/sqlite-storage/vector-provider.d.ts

@@ -0,0 +1,24 @@
+import type { IScopedLogger, IVectorStoreProvider } from "@camstack/types";
+import type { SqliteSettingsBackend } from "./sqlite-settings-backend.js";
+import { SqliteVecVectorIndex } from "./vector-index-vec.js";
+/**
+* Build the vector index over a backend's connection.
+*
+* ONE implementation, deliberately. A second backend behind a flag means two
+* code paths that can disagree, two sets of gotchas, and a silent fallback
+* that turns "the extension is missing" into "search is mysteriously slow" —
+* the failure this codebase keeps paying for. The capability is the swap
+* point: another provider replaces this one wholesale, it does not hide
+* inside it.
+*
+* So a failed extension load THROWS. A node without the native binary must
+* fail at boot with a message naming sqlite-vec, not serve degraded results
+* nobody knows are degraded.
+*/
+export declare function createVectorIndex(backend: SqliteSettingsBackend, logger: IScopedLogger): SqliteVecVectorIndex;
+/**
+* The `vector-store` provider surface over one sqlite-vec index. Extracted
+* from the addon so the main thread (settings) and the file-host worker
+* (events) serve the SAME mapping.
+*/
+export declare function vectorProviderOf(vectorIndex: SqliteVecVectorIndex): IVectorStoreProvider;

package/dist/builtins/sqlite-storage/wal-maintenance.d.ts

@@ -74,6 +74,14 @@ export interface WalMaintenanceOptions {
 	readonly idleQuietMs?: number;
 	readonly intervalMs?: number;
 	readonly busyTimeoutMs?: number;
+	/**
+	* Pages to hand back to the filesystem per idle tick with
+	* `PRAGMA incremental_vacuum(N)`. Absent or 0 = never. Only a file created
+	* with `auto_vacuum = INCREMENTAL` (D851) has a freelist this can shrink; on
+	* any other the pragma is a no-op, and the tick checks the mode first so it
+	* does not even try.
+	*/
+	readonly incrementalVacuumPages?: number;
 }
 /**
 * Periodic, heavily gated `wal_checkpoint(TRUNCATE)`.
@@ -92,11 +100,20 @@ export declare class WalMaintenance {
 	private readonly idleQuietMs;
 	private readonly intervalMs;
 	private readonly busyTimeoutMs;
+	private readonly incrementalVacuumPages;
 	private timer;
 	constructor(options: WalMaintenanceOptions);
 	start(): void;
 	stop(): void;
 	isRunning(): boolean;
+	/**
+	* Give up to `incrementalVacuumPages` free pages back, when the file is in
+	* incremental auto-vacuum mode, has a freelist, and nothing has written for
+	* the idle window (the same gate the checkpoint uses — reclaiming pages
+	* takes the writer lock). Returns the pages released; 0 when it did nothing.
+	* Never throws.
+	*/
+	vacuumOnce(): number;
 	/** Evaluate the gate once and act. Never throws. */
 	runOnce(): WalMaintenanceOutcome;
 	private evaluate;

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-FSNJUw7p.js");
+const require_dist = require("../../dist-CiUKtVkX.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -1237,6 +1237,7 @@ function createDataStoreDispatch(getEngines, getRemote) {
 		insert: async (input) => (await engine()).insert(input),
 		upsert: async (input) => (await engine()).upsert(input),
 		insertMany: async (input) => (await engine()).insertMany(input),
+		upsertMany: async (input) => (await engine()).upsertMany(input),
 		transact: async (input) => (await engine()).transact(input),
 		update: async (input) => (await engine()).update(input),
 		delete: async (input) => (await engine()).delete(input),
@@ -1554,6 +1555,7 @@ function createHubSettingsForward(forward) {
 		insert: (input) => send("insert", input),
 		upsert: (input) => send("upsert", input),
 		insertMany: (input) => send("insertMany", input),
+		upsertMany: (input) => send("upsertMany", input),
 		transact: (input) => send("transact", input),
 		update: (input) => send("update", input),
 		delete: (input) => send("delete", input),

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { $r as transformSecretWrite, $t as mayReadLocation, B as StorageLocationModeSchema, Dt as evictionPolicyOfLocation, Gn as withLocationMode, H as StorageMigrationJobSchema, Ir as isSecretMarker, Jr as secretTreeFromPaths, Kr as resolveSecretMarkers, Kt as legacyModeOf, Mn as storageCapability, Nn as storageMigrationCapability, Pt as gbToBytes, Sn as resolveLocationMode, Sr as collectSecretConfigKeys, V as StorageLocationTypeSchema, Vr as parseJsonObject, cr as BaseAddon, ei as EventCategory, en as mayWriteToLocation, fr as REDACTED_SECRET, k as LegacyStorageLocationDefaultSchema, kn as settingsStoreCapability, rn as modeMayWrite, z as StorageCleanupJobSchema, zt as isLocationEnabled } from "../../dist-CHsJCqrf.mjs";
+import { A as LegacyStorageLocationDefaultSchema, An as settingsStoreCapability, B as StorageCleanupJobSchema, Bt as isLocationEnabled, Cn as resolveLocationMode, Cr as collectSecretConfigKeys, Ft as gbToBytes, H as StorageLocationTypeSchema, Hr as parseJsonObject, Kn as withLocationMode, Lr as isSecretMarker, Nn as storageCapability, Ot as evictionPolicyOfLocation, Pn as storageMigrationCapability, U as StorageMigrationJobSchema, V as StorageLocationModeSchema, Yr as secretTreeFromPaths, ei as transformSecretWrite, en as mayReadLocation, in as modeMayWrite, lr as BaseAddon, pr as REDACTED_SECRET, qr as resolveSecretMarkers, qt as legacyModeOf, ti as EventCategory, tn as mayWriteToLocation } from "../../dist-B-NmfvVC.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { containsOrEquals, physicalRootOf } from "@camstack/types/node";
@@ -1232,6 +1232,7 @@ function createDataStoreDispatch(getEngines, getRemote) {
 		insert: async (input) => (await engine()).insert(input),
 		upsert: async (input) => (await engine()).upsert(input),
 		insertMany: async (input) => (await engine()).insertMany(input),
+		upsertMany: async (input) => (await engine()).upsertMany(input),
 		transact: async (input) => (await engine()).transact(input),
 		update: async (input) => (await engine()).update(input),
 		delete: async (input) => (await engine()).delete(input),
@@ -1549,6 +1550,7 @@ function createHubSettingsForward(forward) {
 		insert: (input) => send("insert", input),
 		upsert: (input) => send("upsert", input),
 		insertMany: (input) => send("insertMany", input),
+		upsertMany: (input) => send("upsertMany", input),
 		transact: (input) => send("transact", input),
 		update: (input) => send("update", input),
 		delete: (input) => send("delete", input),

package/dist/builtins/system-config/system-config.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-FSNJUw7p.js");
+const require_dist = require("../../dist-CiUKtVkX.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
-const require_constants$8 = require("../../constants-CY4vXTV-.js");
+const require_constants$8 = require("../../constants-BBWZlnpQ.js");
 const require_x509_es = require("../../x509.es-Dzl0BbmG.js");
 const require_src$1 = require("../../src-CnAqG6EF.js");
 let zod = require("zod");

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,7 +1,7 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { $r as transformSecretWrite, Er as defineCustomActions, Fr as isSecretClear, Ir as isSecretMarker, Rr as makeSecretMarker, Tr as customAction, Yr as secretTreeFromSchema, cr as BaseAddon, jr as hydrateSchema, sr as errMsg } from "../../dist-CHsJCqrf.mjs";
+import { Dr as defineCustomActions, Er as customAction, Ir as isSecretClear, Lr as isSecretMarker, Mr as hydrateSchema, Xr as secretTreeFromSchema, cr as errMsg, ei as transformSecretWrite, lr as BaseAddon, zr as makeSecretMarker } from "../../dist-B-NmfvVC.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
-import { a as MESH_CA_KEY_REF, b as setProcessClusterSecretGate, c as MESH_JOIN_TOKEN_MAX_TTL_SEC, d as CLUSTER_SECRET_REF, i as MESH_CA_FIELD, l as SERVER_AUTH_OID, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID, v as hashClusterSecret } from "../../constants-iLQM7god.mjs";
+import { a as MESH_CA_KEY_REF, b as setProcessClusterSecretGate, c as MESH_JOIN_TOKEN_MAX_TTL_SEC, d as CLUSTER_SECRET_REF, i as MESH_CA_FIELD, l as SERVER_AUTH_OID, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID, v as hashClusterSecret } from "../../constants-DHhhVjkt.mjs";
 import { a as KeyUsagesExtension, c as Pkcs10CertificateRequestGenerator, d as X509Certificate$1, f as X509CertificateGenerator, i as KeyUsageFlags, n as BasicConstraintsExtension, o as PemConverter, p as cryptoProvider, r as ExtendedKeyUsageExtension, s as Pkcs10CertificateRequest, t as AuthorityKeyIdentifierExtension, u as SubjectKeyIdentifierExtension } from "../../x509.es-CAjSsrkk.mjs";
 import { t as require_src } from "../../src-hG4grMU4.mjs";
 import { z } from "zod";

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-FSNJUw7p.js");
+const require_dist = require("../../dist-CiUKtVkX.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Xt as logDestinationCapability, cr as BaseAddon } from "../../dist-CHsJCqrf.mjs";
+import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-B-NmfvVC.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{composition-sources-BstNkBVe.js → composition-sources-BWNs-ZeH.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-FSNJUw7p.js");
+const require_dist = require("./dist-CiUKtVkX.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-f_VjTBgs.mjs → composition-sources-tRG7nKWK.mjs}

@@ -1,4 +1,4 @@
-import { er as compositionSourceKey, sr as errMsg } from "./dist-CHsJCqrf.mjs";
+import { cr as errMsg, tr as compositionSourceKey } from "./dist-B-NmfvVC.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{constants-CY4vXTV-.js → constants-BBWZlnpQ.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-FSNJUw7p.js");
+const require_dist = require("./dist-CiUKtVkX.js");
 let node_crypto = require("node:crypto");
 //#region src/kernel/moleculer/cluster-secret.ts
 /**

package/dist/{constants-iLQM7god.mjs → constants-DHhhVjkt.mjs}

@@ -1,4 +1,4 @@
-import { xr as buildSecretRef } from "./dist-CHsJCqrf.mjs";
+import { Sr as buildSecretRef } from "./dist-B-NmfvVC.mjs";
 import { createHash, timingSafeEqual } from "node:crypto";
 //#region src/kernel/moleculer/cluster-secret.ts
 /**

package/dist/{dist-CHsJCqrf.mjs → dist-B-NmfvVC.mjs}

@@ -15133,8 +15133,23 @@ var BulkRecordSchema = z.object({
 	data: z.record(z.string(), z.unknown())
 });
 /**
+* The database FILES one `sqlite-settings` engine process owns (D851).
+* Closed on purpose: a file is a thing the engine opens, backs up and gives a
+* serving thread, so a new one is a code change, never a string a caller
+* invents. `settings` is `camstack.db` and the default for every collection
+* that names no file.
+*/
+var DataStoreDatabaseSchema = z.enum([
+	"settings",
+	"events",
+	"history"
+]);
+/** Every database file, in a stable order (settings first). */
+var DATA_STORE_DATABASES = DataStoreDatabaseSchema.options;
+/**
 * One write inside a {@link settingsStoreCapability.methods.transact} call.
-* Only the three that a "replace this set, bump that revision" write needs.
+* The three that a "replace this set, bump that revision" write needs, plus
+* the batched upsert a rollup writer needs.
 */
 var TransactOpSchema = z.discriminatedUnion("op", [
 	z.object({
@@ -15152,6 +15167,12 @@ var TransactOpSchema = z.discriminatedUnion("op", [
 		collection: z.string(),
 		id: z.string(),
 		data: z.record(z.string(), z.unknown())
+	}),
+	z.object({
+		op: z.literal("upsertMany"),
+		collection: z.string(),
+		conflict: z.array(z.string()).readonly(),
+		records: z.array(BulkRecordSchema).readonly()
 	})
 ]);
 /**
@@ -15203,6 +15224,30 @@ var CollectionIndexSchema = z.object({
 	unique: z.boolean().optional()
 });
 /**
+* The input of `declareCollection` — ONE schema for the door and for the
+* engine behind it, so the two surfaces cannot drift (the dispatcher forwards
+* the payload untouched).
+*
+* - `database` — the file the collection lives in (D851). Absent means
+*   `settings`. A declaration naming a file other than the one the table is
+*   already in is REFUSED by the engine, never moved.
+* - `primaryKey` — a COMPOSITE key, as column names. A single name is the same
+*   as `primaryKey: true` on that column. A composite-keyed collection has no
+*   `id`: it is written with `insertMany` / `upsertMany` / `transact` and read
+*   with `query` / `count` / `aggregate` / `deleteWhere`; the calls that
+*   address one row by id are refused.
+* - `withoutRowid` — emit `WITHOUT ROWID`. Requires a primary key.
+*/
+var DeclareCollectionInputSchema = z.object({
+	namespace: z.string().optional(),
+	collection: z.string(),
+	columns: z.array(CollectionColumnSchema).readonly(),
+	indexes: z.array(CollectionIndexSchema).readonly().optional(),
+	database: DataStoreDatabaseSchema.optional(),
+	primaryKey: z.array(z.string()).readonly().optional(),
+	withoutRowid: z.boolean().optional()
+});
+/**
 * settings-store — singleton capability for addon-scoped persistence.
 *
 * Every method operates within a `collection`. An optional `namespace`
@@ -15340,6 +15385,29 @@ id: z.union([z.string(), z.number()]) }), {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/**
+		* {@link upsert} for a BATCH, in ONE transaction on ONE prepared statement.
+		*
+		* The write-side twin of {@link insertMany} for rows that may already
+		* exist: a rollup writer recomputes a bucket and must overwrite it, and
+		* N round trips with N COMMITs is the cost {@link insertMany} was added to
+		* avoid. `conflict` has the meaning it has on {@link upsert} (declared
+		* columns covered by a UNIQUE index or the primary key, never empty).
+		*
+		* Every record of a batch must carry the SAME set of declared columns and
+		* every `conflict` column: one batch is one statement shape, and a record
+		* that silently bound NULL over a column it did not mention would erase
+		* it. A heterogeneous batch is refused whole. **All or nothing.**
+		*/
+		upsertMany: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			conflict: z.array(z.string()).readonly(),
+			records: z.array(BulkRecordSchema).readonly()
+		}), z.object({ upserted: z.number().int() }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Insert a new record. */
 		insert: method(z.object({
 			namespace: z.string().optional(),
@@ -15538,12 +15606,7 @@ id: z.union([z.string(), z.number()]) }), {
 		* `pipeline-analytics:object-events`) to avoid cross-addon
 		* clashes — no automatic prefix is added.
 		*/
-		declareCollection: method(z.object({
-			namespace: z.string().optional(),
-			collection: z.string(),
-			columns: z.array(CollectionColumnSchema).readonly(),
-			indexes: z.array(CollectionIndexSchema).readonly().optional()
-		}), z.void(), {
+		declareCollection: method(DeclareCollectionInputSchema, z.void(), {
 			kind: "mutation",
 			auth: "admin"
 		})
@@ -15694,6 +15757,16 @@ id: z.union([z.string(), z.number()]) }), {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/** Upsert many records in ONE transaction; see the door's `upsertMany`. */
+		upsertMany: method(z.object({
+			namespace: z.string().optional(),
+			collection: z.string(),
+			conflict: z.array(z.string()).readonly(),
+			records: z.array(BulkRecordSchema).readonly()
+		}), z.object({ upserted: z.number().int() }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Insert many records in ONE transaction. All or nothing. */
 		insertMany: method(z.object({
 			namespace: z.string().optional(),
@@ -15786,12 +15859,7 @@ id: z.union([z.string(), z.number()]) }), {
 			collection: z.string()
 		}), z.boolean(), { auth: "admin" }),
 		/** Declare a typed (SQL-backed) collection with columns + indexes. */
-		declareCollection: method(z.object({
-			namespace: z.string().optional(),
-			collection: z.string(),
-			columns: z.array(CollectionColumnSchema).readonly(),
-			indexes: z.array(CollectionIndexSchema).readonly().optional()
-		}), z.void(), {
+		declareCollection: method(DeclareCollectionInputSchema, z.void(), {
 			kind: "mutation",
 			auth: "admin"
 		})
@@ -26434,6 +26502,9 @@ var RetrainBoxReviewSchema = z.object({
 	/** The baseline was re-derived, not snapshotted (a pre-origin row). */
 	approximate: z.boolean(),
 	origin: RetrainOriginSchema.optional(),
+	/** The class / label the box carries NOW (a removed box: its origin's). Absent on an older hub. */
+	macroClass: RetrainMacroClassSchema.optional(),
+	label: z.string().optional(),
 	iou: z.number().optional()
 });
 var RetrainFrameReviewSchema = z.object({
@@ -53095,6 +53166,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"dataStoreProvider.upsertMany": {
+		capName: "data-store-provider",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"dayNight.getOptions": {
 		capName: "day-night",
 		capScope: "device",
@@ -57943,6 +58020,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"settingsStore.upsertMany": {
+		capName: "settings-store",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"smoke.getStatus": {
 		capName: "smoke",
 		capScope: "device",
@@ -65445,4 +65528,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { buildStreamParamsConfigSchema as $, compositionSliceKey as $n, transformSecretWrite as $r, mayReadLocation as $t, LocationIconIdSchema as A, siteZoneKey as An, formatSecretScope as Ar, extractNestedAddonId as At, StorageLocationModeSchema as B, validateComposition as Bn, normalizeSecretOwner as Br, isObjectInput as Bt, FieldClaimModeSchema as C, resolveMethodAuth as Cn, collectZodSecretPaths as Cr, enumerateInferenceDevices as Ct, KEYCHAIN_RESET_TRIGGER_ACTOR as D, scopesAllowDeviceCap as Dn, emitDownForOwnedCaps as Dr, evictionPolicyOfLocation as Dt, HUB_MDNS_TXT_KEYS as E, scopesAllowAddon as En, defineCustomActions as Er, evaluateCompositionField as Et, RecordingStatusSchema as F, storageProviderCapability as Fn, isSecretClear as Fr, isAppLinkBase as Ft, addonSettingsCapability as G, withLocationMode as Gn, resolveCapMount as Gr, legacyAutoLinkIds as Gt, StorageMigrationJobSchema as H, vectorDimFromBase64 as Hn, parseJsonUnknown as Hr, kebabToCamel as Ht, STORAGE_ACCESS_FALLBACK as I, streamCatalogCapability as In, isSecretMarker as Ir, isArrayOutputSchema as It, authProviderCapability as J, cloneStatefulExpressionMemory as Jn, secretTreeFromPaths as Jr, localNetworkCapability as Jt, addonWidgetsCapability as K, COMPOSER_ADDON_ID as Kn, resolveSecretMarkers as Kr, legacyModeOf as Kt, STREAM_PROFILE_META as L, streamQualityLabel as Ln, isSecretMarkerLike as Lr, isCollectionArrayMethod as Lt, MINUTES_PER_DAY as M, storageCapability as Mn, isDeviceConfigCap as Mr, foldSnapshotByFunction as Mt, MOTION_CLOSE_AFTER_MS as N, storageMigrationCapability as Nn, isEvent as Nr, formatMinutes as Nt, LOG_LEVEL_RANK as O, scoreRuntimes as On, emitReadiness as Or, expandContainer as Ot, RECORDING_SOURCE_CAMSTACK_ADDON as P, storageOccupancyCapability as Pn, isKeychainStoredField as Pr, gbToBytes as Pt, buildCapabilityLookup as Q, compositionItemFieldPath as Qn, toSecretFieldView as Qr, looseSchema as Qt, ScopedTokenSchema as R, supportedRuntimes as Rn, makeSecretMarker as Rr, isDefaultAppConnectionEndpoint as Rt, FIRST_LEVEL_MACRO_CLASSES as S, resolveLocationMode as Sn, collectSecretConfigKeys as Sr, deviceStatusCapability as St, HUB_MDNS_SERVICE_TYPE as T, runtimeStatePolicyFor as Tn, customAction as Tr, enumerateSchemaFields as Tt, UserRecordSchema as U, vectorIndexDimConflictError as Un, parseSecretRef as Ur, keychainAdminCapability as Ut, StorageLocationTypeSchema as V, validateCustomAddress as Vn, parseJsonObject as Vr, isVoidInput as Vt, addonPagesCapability as W, vectorStoreCapability as Wn, readinessKey as Wr, keychainCapability as Wt, bareAddonId as X, composedDeviceStableId as Xn, sleep as Xr, logDestinationCapability as Xt, backupCapability as Y, composedDeviceRef as Yn, secretTreeFromSchema as Yr, locationIconKey as Yt, batteryCapability as Z, compositionFeatureEnabled as Zn, toNodeId as Zr, logLevelAtMost as Zt, DATABASE_SNAPSHOT_TIMEOUT_MS as _, resolveAppConnections as _n, WELL_KNOWN_TAB_MAP as _r, deriveBatteryPresence as _t, BatteryStatusSchema as a, normalizeCoreBlockWrite as an, DeviceRole as ar, compositionSourceRefs as at, DeclaredDevices as b, resolveCoreBlockFiles as bn, asString$1 as br, deviceManagerCapability as bt, CAP_NAMES_WITH_STATUS as c, objectInputDeclaresRequiredDeviceId as cn, BaseAddon as cr, coreBlockIdFromAddonId as ct, CORE_BLOCKS_ADDON_ID as d, planComposition as dn, DEVICE_STATUS_METHOD as dr, createDeviceExtensionProvider as dt, EventCategory as ei, mayWriteToLocation as en, compositionSourceKey as er, calendarsCapability as et, CORE_BLOCK_ADDON_PREFIX as f, platformProbeCapability as fn, REDACTED_SECRET as fr, dataStoreProviderCapability as ft, DATABASE_SNAPSHOT_SUFFIX as g, replacedFieldKeys as gn, SECRET_CLEAR as gr, defineExtensionSlotProvider as gt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as h, reducePoints as hn, ReadinessTimeoutError as hr, decodeVectorBase64 as ht, BaseDevice as i, motionCapability as in, DeviceFeature as ir, compositionFieldKey as it, METHOD_ACCESS_MAP as j, snapshotCapability as jn, hydrateSchema as jr, filesystemBrowseCapability as jt, LegacyStorageLocationDefaultSchema as k, settingsStoreCapability as kn, expandCapMethods as kr, expressionContainsBuiltinCall as kt, COMPOSED_ITEM_FIXED_FIELDS as l, parseStreamParamsFormPatch as ln, DATAPLANE_SECRET_HEADER as lr, coreBlockSourceKind as lt, CoreBlockSchema as m, ptzAutotrackCapability as mn, ReadinessRegistry as mr, declarationOwnerNodeId as mt, AlertSchema as n, metricsProviderCapability as nn, disarmRoseMemory as nr, checkRoleAddress as nt, CAMERA_SWITCH_ORDER as o, normalizeUnit as on, DeviceType as or, coreBlockAddonId as ot, CalendarPreferencesSchema as p, procedureAuthKey as pn, RUNTIME_DEFAULTS as pr, databaseSnapshotCapability as pt, alertsCapability as q, buildFfmpegArgs as qn, scopeKey as qr, lifecycleJobSchema as qt, ApiKeyRecordSchema as r, modeMayWrite as rn, toExpressionValue as rr, composerCapability as rt, CAMSTACK_APP_LINK_ORIGIN as s, objectInputDeclaresAddonId as sn, errMsg as sr, coreBlockComposition as st, ALL_CAPABILITY_DEFINITIONS as t, memoizePinnedFfmpeg as tn, createStatefulExpressionMemory as tr, cameraGridLayoutCapability as tt, COMPOSER_RUNNER_ID as u, pickAppLinkHub as un, DEVICE_SETTINGS_CONTRIBUTION_METHODS as ur, coreBlocksCapability as ut, DAY_NAMES as v, resolveBucketMs as vn, asJsonObject as vr, describeComposableCaps as vt, FieldClaimSchema as w, resolveNotificationTapAddress as wn, createEvent as wr, enumerateItemArrayFields as wt, DeviceStatusSchema as x, resolveHubAddressRoles as xn, buildSecretRef as xr, deviceStateCapability as xt, DERIVED_CAMERA_SILENCED_CAP_NAMES as y, resolveCoreBlockEntry as yn, asNumber as yr, deviceExtensionCapability as yt, StorageCleanupJobSchema as z, userManagementCapability as zn, nodePin as zr, isLocationEnabled as zt };
+export { buildCapabilityLookup as $, compositionItemFieldPath as $n, toSecretFieldView as $r, looseSchema as $t, LegacyStorageLocationDefaultSchema as A, settingsStoreCapability as An, expandCapMethods as Ar, expressionContainsBuiltinCall as At, StorageCleanupJobSchema as B, userManagementCapability as Bn, nodePin as Br, isLocationEnabled as Bt, FIRST_LEVEL_MACRO_CLASSES as C, resolveLocationMode as Cn, collectSecretConfigKeys as Cr, deviceStatusCapability as Ct, HUB_MDNS_TXT_KEYS as D, scopesAllowAddon as Dn, defineCustomActions as Dr, evaluateCompositionField as Dt, HUB_MDNS_SERVICE_TYPE as E, runtimeStatePolicyFor as En, customAction as Er, enumerateSchemaFields as Et, RECORDING_SOURCE_CAMSTACK_ADDON as F, storageOccupancyCapability as Fn, isKeychainStoredField as Fr, gbToBytes as Ft, addonPagesCapability as G, vectorStoreCapability as Gn, readinessKey as Gr, keychainCapability as Gt, StorageLocationTypeSchema as H, validateCustomAddress as Hn, parseJsonObject as Hr, isVoidInput as Ht, RecordingStatusSchema as I, storageProviderCapability as In, isSecretClear as Ir, isAppLinkBase as It, alertsCapability as J, buildFfmpegArgs as Jn, scopeKey as Jr, lifecycleJobSchema as Jt, addonSettingsCapability as K, withLocationMode as Kn, resolveCapMount as Kr, legacyAutoLinkIds as Kt, STORAGE_ACCESS_FALLBACK as L, streamCatalogCapability as Ln, isSecretMarker as Lr, isArrayOutputSchema as Lt, METHOD_ACCESS_MAP as M, snapshotCapability as Mn, hydrateSchema as Mr, filesystemBrowseCapability as Mt, MINUTES_PER_DAY as N, storageCapability as Nn, isDeviceConfigCap as Nr, foldSnapshotByFunction as Nt, KEYCHAIN_RESET_TRIGGER_ACTOR as O, scopesAllowDeviceCap as On, emitDownForOwnedCaps as Or, evictionPolicyOfLocation as Ot, MOTION_CLOSE_AFTER_MS as P, storageMigrationCapability as Pn, isEvent as Pr, formatMinutes as Pt, batteryCapability as Q, compositionFeatureEnabled as Qn, toNodeId as Qr, logLevelAtMost as Qt, STREAM_PROFILE_META as R, streamQualityLabel as Rn, isSecretMarkerLike as Rr, isCollectionArrayMethod as Rt, DeviceStatusSchema as S, resolveHubAddressRoles as Sn, buildSecretRef as Sr, deviceStateCapability as St, FieldClaimSchema as T, resolveNotificationTapAddress as Tn, createEvent as Tr, enumerateItemArrayFields as Tt, StorageMigrationJobSchema as U, vectorDimFromBase64 as Un, parseJsonUnknown as Ur, kebabToCamel as Ut, StorageLocationModeSchema as V, validateComposition as Vn, normalizeSecretOwner as Vr, isObjectInput as Vt, UserRecordSchema as W, vectorIndexDimConflictError as Wn, parseSecretRef as Wr, keychainAdminCapability as Wt, backupCapability as X, composedDeviceRef as Xn, secretTreeFromSchema as Xr, locationIconKey as Xt, authProviderCapability as Y, cloneStatefulExpressionMemory as Yn, secretTreeFromPaths as Yr, localNetworkCapability as Yt, bareAddonId as Z, composedDeviceStableId as Zn, sleep as Zr, logDestinationCapability as Zt, DATABASE_SNAPSHOT_TIMEOUT_MS as _, replacedFieldKeys as _n, SECRET_CLEAR as _r, defineExtensionSlotProvider as _t, BatteryStatusSchema as a, motionCapability as an, DeviceFeature as ar, compositionFieldKey as at, DERIVED_CAMERA_SILENCED_CAP_NAMES as b, resolveCoreBlockEntry as bn, asNumber as br, deviceExtensionCapability as bt, CAP_NAMES_WITH_STATUS as c, objectInputDeclaresAddonId as cn, errMsg as cr, coreBlockComposition as ct, CORE_BLOCKS_ADDON_ID as d, pickAppLinkHub as dn, DEVICE_SETTINGS_CONTRIBUTION_METHODS as dr, coreBlocksCapability as dt, transformSecretWrite as ei, mayReadLocation as en, compositionSliceKey as er, buildStreamParamsConfigSchema as et, CORE_BLOCK_ADDON_PREFIX as f, planComposition as fn, DEVICE_STATUS_METHOD as fr, createDeviceExtensionProvider as ft, DATABASE_SNAPSHOT_SUFFIX as g, reducePoints as gn, ReadinessTimeoutError as gr, decodeVectorBase64 as gt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as h, ptzAutotrackCapability as hn, ReadinessRegistry as hr, declarationOwnerNodeId as ht, BaseDevice as i, modeMayWrite as in, toExpressionValue as ir, composerCapability as it, LocationIconIdSchema as j, siteZoneKey as jn, formatSecretScope as jr, extractNestedAddonId as jt, LOG_LEVEL_RANK as k, scoreRuntimes as kn, emitReadiness as kr, expandContainer as kt, COMPOSED_ITEM_FIXED_FIELDS as l, objectInputDeclaresRequiredDeviceId as ln, BaseAddon as lr, coreBlockIdFromAddonId as lt, CoreBlockSchema as m, procedureAuthKey as mn, RUNTIME_DEFAULTS as mr, databaseSnapshotCapability as mt, AlertSchema as n, memoizePinnedFfmpeg as nn, createStatefulExpressionMemory as nr, cameraGridLayoutCapability as nt, CAMERA_SWITCH_ORDER as o, normalizeCoreBlockWrite as on, DeviceRole as or, compositionSourceRefs as ot, CalendarPreferencesSchema as p, platformProbeCapability as pn, REDACTED_SECRET as pr, dataStoreProviderCapability as pt, addonWidgetsCapability as q, COMPOSER_ADDON_ID as qn, resolveSecretMarkers as qr, legacyModeOf as qt, ApiKeyRecordSchema as r, metricsProviderCapability as rn, disarmRoseMemory as rr, checkRoleAddress as rt, CAMSTACK_APP_LINK_ORIGIN as s, normalizeUnit as sn, DeviceType as sr, coreBlockAddonId as st, ALL_CAPABILITY_DEFINITIONS as t, EventCategory as ti, mayWriteToLocation as tn, compositionSourceKey as tr, calendarsCapability as tt, COMPOSER_RUNNER_ID as u, parseStreamParamsFormPatch as un, DATAPLANE_SECRET_HEADER as ur, coreBlockSourceKind as ut, DATA_STORE_DATABASES as v, resolveAppConnections as vn, WELL_KNOWN_TAB_MAP as vr, deriveBatteryPresence as vt, FieldClaimModeSchema as w, resolveMethodAuth as wn, collectZodSecretPaths as wr, enumerateInferenceDevices as wt, DeclaredDevices as x, resolveCoreBlockFiles as xn, asString$1 as xr, deviceManagerCapability as xt, DAY_NAMES as y, resolveBucketMs as yn, asJsonObject as yr, describeComposableCaps as yt, ScopedTokenSchema as z, supportedRuntimes as zn, makeSecretMarker as zr, isDefaultAppConnectionEndpoint as zt };