@camstack/system 1.2.423 → 1.2.425

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-VIIxVsBW.js");
-const require_composition_sources = require("../../composition-sources-CgiAeG-2.js");
+const require_dist = require("../../dist-DnALrQF-.js");
+const require_composition_sources = require("../../composition-sources-197keifF.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,5 +1,5 @@
-import { Bn as validateComposition, Q as buildCapabilityLookup, Yn as composedDeviceRef, an as normalizeCoreBlockWrite, at as compositionSourceRefs, b as DeclaredDevices, bn as resolveCoreBlockFiles, cr as BaseAddon, ct as coreBlockIdFromAddonId, d as CORE_BLOCKS_ADDON_ID, dn as planComposition, er as compositionSourceKey, f as CORE_BLOCK_ADDON_PREFIX, gn as replacedFieldKeys, jr as hydrateSchema, lt as coreBlockSourceKind, m as CoreBlockSchema, ot as coreBlockAddonId, sr as errMsg, st as coreBlockComposition, t as ALL_CAPABILITY_DEFINITIONS, u as COMPOSER_RUNNER_ID, ut as coreBlocksCapability, vt as describeComposableCaps, yn as resolveCoreBlockEntry } from "../../dist-DimotS8e.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-BXDchWFn.mjs";
+import { $ as buildCapabilityLookup, Mr as hydrateSchema, Vn as validateComposition, Xn as composedDeviceRef, _n as replacedFieldKeys, bn as resolveCoreBlockEntry, cr as errMsg, ct as coreBlockComposition, d as CORE_BLOCKS_ADDON_ID, dt as coreBlocksCapability, f as CORE_BLOCK_ADDON_PREFIX, fn as planComposition, lr as BaseAddon, lt as coreBlockIdFromAddonId, m as CoreBlockSchema, on as normalizeCoreBlockWrite, ot as compositionSourceRefs, st as coreBlockAddonId, t as ALL_CAPABILITY_DEFINITIONS, tr as compositionSourceKey, u as COMPOSER_RUNNER_ID, ut as coreBlockSourceKind, x as DeclaredDevices, xn as resolveCoreBlockFiles, yt as describeComposableCaps } from "../../dist-DMWeqeTF.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-DmzTSy26.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { customizationBlockName } from "@camstack/types/node";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-VIIxVsBW.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-_muTvNyh.js");
+const require_dist = require("../../dist-DnALrQF-.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-0FOsnzIE.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { $ as buildStreamParamsConfigSchema, $r as transformSecretWrite, A as LocationIconIdSchema, An as siteZoneKey, C as FieldClaimModeSchema, Cr as collectZodSecretPaths, Fr as isSecretClear, Gt as legacyAutoLinkIds, Ir as isSecretMarker, Jr as secretTreeFromPaths, Kr as resolveSecretMarkers, L as STREAM_PROFILE_META, Lr as isSecretMarkerLike, M as MINUTES_PER_DAY, Mr as isDeviceConfigCap, Nt as formatMinutes, Ot as expandContainer, Pr as isKeychainStoredField, Qr as toSecretFieldView, St as deviceStatusCapability, Tn as runtimeStatePolicyFor, Tt as enumerateSchemaFields, Xr as sleep$1, Yt as locationIconKey, _r as WELL_KNOWN_TAB_MAP, ar as DeviceRole, bt as deviceManagerCapability, c as CAP_NAMES_WITH_STATUS, cr as BaseAddon, dt as createDeviceExtensionProvider, ei as EventCategory, gr as SECRET_CLEAR, gt as defineExtensionSlotProvider, ir as DeviceFeature, ln as parseStreamParamsFormPatch, o as CAMERA_SWITCH_ORDER, on as normalizeUnit, or as DeviceType, sr as errMsg, t as ALL_CAPABILITY_DEFINITIONS, v as DAY_NAMES, w as FieldClaimSchema, wt as enumerateItemArrayFields, x as DeviceStatusSchema, xt as deviceStateCapability, yt as deviceExtensionCapability } from "../../dist-DimotS8e.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-BYnjMBE-.mjs";
+import { $r as toSecretFieldView, Ct as deviceStatusCapability, En as runtimeStatePolicyFor, Et as enumerateSchemaFields, Fr as isKeychainStoredField, Ir as isSecretClear, Kt as legacyAutoLinkIds, Lr as isSecretMarker, N as MINUTES_PER_DAY, Nr as isDeviceConfigCap, Pt as formatMinutes, R as STREAM_PROFILE_META, Rr as isSecretMarkerLike, S as DeviceStatusSchema, St as deviceStateCapability, T as FieldClaimSchema, Tt as enumerateItemArrayFields, Xt as locationIconKey, Yr as secretTreeFromPaths, Zr as sleep$1, _r as SECRET_CLEAR, _t as defineExtensionSlotProvider, ar as DeviceFeature, bt as deviceExtensionCapability, c as CAP_NAMES_WITH_STATUS, cr as errMsg, ei as transformSecretWrite, et as buildStreamParamsConfigSchema, ft as createDeviceExtensionProvider, j as LocationIconIdSchema, jn as siteZoneKey, kt as expandContainer, lr as BaseAddon, o as CAMERA_SWITCH_ORDER, or as DeviceRole, qr as resolveSecretMarkers, sn as normalizeUnit, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, ti as EventCategory, un as parseStreamParamsFormPatch, vr as WELL_KNOWN_TAB_MAP, w as FieldClaimModeSchema, wr as collectZodSecretPaths, xt as deviceManagerCapability, y as DAY_NAMES } from "../../dist-DMWeqeTF.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-CdVFl7m2.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-VIIxVsBW.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Xt as logDestinationCapability, cr as BaseAddon } from "../../dist-DimotS8e.mjs";
+import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DMWeqeTF.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/keychain/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-VIIxVsBW.js");
-const require_jwt_signing_key = require("../../jwt-signing-key-C8s9syVg.js");
-const require_constants = require("../../constants-1_7QtPNo.js");
+const require_dist = require("../../dist-DnALrQF-.js");
+const require_jwt_signing_key = require("../../jwt-signing-key-DeqG7LD9.js");
+const require_constants = require("../../constants-B5Jd8Zch.js");
 const require_platform_key_source = require("../../platform-key-source-Di7HrlGR.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/keychain/index.mjs

@@ -1,6 +1,6 @@
-import { Ar as formatSecretScope, Br as normalizeSecretOwner, D as KEYCHAIN_RESET_TRIGGER_ACTOR, Ur as parseSecretRef, Ut as keychainAdminCapability, Wt as keychainCapability, cr as BaseAddon, ei as EventCategory } from "../../dist-DimotS8e.mjs";
-import { r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-C8nMdNYW.mjs";
-import { a as MESH_CA_KEY_REF, p as CLUSTER_SECRET_SETTINGS_KEY } from "../../constants-C2dhkIuF.mjs";
+import { Gt as keychainCapability, O as KEYCHAIN_RESET_TRIGGER_ACTOR, Vr as normalizeSecretOwner, Wr as parseSecretRef, Wt as keychainAdminCapability, jr as formatSecretScope, lr as BaseAddon, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
+import { r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-CCHXAtrs.mjs";
+import { a as MESH_CA_KEY_REF, p as CLUSTER_SECRET_SETTINGS_KEY } from "../../constants-CkNLi-XW.mjs";
 import { n as getPlatformKeychainKey } from "../../platform-key-source-BWlq0jjn.mjs";
 import { createCipheriv, createDecipheriv, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { restrictDirToOwnerSync, restrictFileToOwnerSync, writeOwnerOnlyFileSync } from "@camstack/types/node";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-VIIxVsBW.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { F as RecordingStatusSchema, P as RECORDING_SOURCE_CAMSTACK_ADDON, cr as BaseAddon, ei as EventCategory, sr as errMsg, wr as createEvent } from "../../dist-DimotS8e.mjs";
+import { F as RECORDING_SOURCE_CAMSTACK_ADDON, I as RecordingStatusSchema, Tr as createEvent, cr as errMsg, lr as BaseAddon, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,10 +3,10 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-VIIxVsBW.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_ms$1 = require("../../ms-LB3giGoU.js");
-const require_jwt_signing_key = require("../../jwt-signing-key-C8s9syVg.js");
+const require_jwt_signing_key = require("../../jwt-signing-key-DeqG7LD9.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,8 +1,8 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { J as authProviderCapability, R as ScopedTokenSchema, U as UserRecordSchema, cr as BaseAddon, r as ApiKeyRecordSchema, zn as userManagementCapability } from "../../dist-DimotS8e.mjs";
+import { Bn as userManagementCapability, W as UserRecordSchema, Y as authProviderCapability, lr as BaseAddon, r as ApiKeyRecordSchema, z as ScopedTokenSchema } from "../../dist-DMWeqeTF.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { t as require_ms } from "../../ms-CgH2OFlD.mjs";
-import { a as loadJwtSigningKey, i as getProcessJwtSigningKeyState, o as processJwtSigningKey, s as setProcessJwtSigningKey, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-C8nMdNYW.mjs";
+import { a as loadJwtSigningKey, i as getProcessJwtSigningKeyState, o as processJwtSigningKey, s as setProcessJwtSigningKey, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-CCHXAtrs.mjs";
 import * as crypto$1 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-VIIxVsBW.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 const require_tls = require("../../tls-BgImdxCO.js");
 let zod = require("zod");
 let node_net = require("node:net");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { E as HUB_MDNS_TXT_KEYS, Ft as isAppLinkBase, Jt as localNetworkCapability, Rt as isDefaultAppConnectionEndpoint, T as HUB_MDNS_SERVICE_TYPE, Vn as validateCustomAddress, _n as resolveAppConnections, cr as BaseAddon, ei as EventCategory, nt as checkRoleAddress, s as CAMSTACK_APP_LINK_ORIGIN, un as pickAppLinkHub, wn as resolveNotificationTapAddress, xn as resolveHubAddressRoles } from "../../dist-DimotS8e.mjs";
+import { D as HUB_MDNS_TXT_KEYS, E as HUB_MDNS_SERVICE_TYPE, Hn as validateCustomAddress, It as isAppLinkBase, Sn as resolveHubAddressRoles, Tn as resolveNotificationTapAddress, Yt as localNetworkCapability, dn as pickAppLinkHub, lr as BaseAddon, rt as checkRoleAddress, s as CAMSTACK_APP_LINK_ORIGIN, ti as EventCategory, vn as resolveAppConnections, zt as isDefaultAppConnectionEndpoint } from "../../dist-DMWeqeTF.mjs";
 import { P as readLanHttpState, _ as writeExtraSans, h as readTlsMode, i as storeUploadedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readTlsAccessStatus, n as regenerateCertificate, p as readExtraSans, r as revertToGeneratedCertificate, t as applyCertificateToListener, u as servedHttpsLeafFingerprint, y as ensureTlsCert } from "../../tls-CaOLZ09W.mjs";
 import { z } from "zod";
 import { isIP } from "node:net";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-VIIxVsBW.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Xt as logDestinationCapability, cr as BaseAddon } from "../../dist-DimotS8e.mjs";
+import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DMWeqeTF.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-VIIxVsBW.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 let node_fs_promises = require("node:fs/promises");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as foldSnapshotByFunction, cr as BaseAddon, ei as EventCategory, hn as reducePoints, nn as metricsProviderCapability, sr as errMsg, vn as resolveBucketMs, wr as createEvent } from "../../dist-DimotS8e.mjs";
+import { Nt as foldSnapshotByFunction, Tr as createEvent, cr as errMsg, gn as reducePoints, lr as BaseAddon, rn as metricsProviderCapability, ti as EventCategory, yn as resolveBucketMs } from "../../dist-DMWeqeTF.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import * as os from "node:os";
 import { platform } from "node:os";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-VIIxVsBW.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_fs = require("node:fs");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM, r as __exportAll } from "../../chunk-CNf5ZN-e.mjs";
-import { Ct as enumerateInferenceDevices, On as scoreRuntimes, Or as emitReadiness, cr as BaseAddon, ei as EventCategory, fn as platformProbeCapability, sr as errMsg } from "../../dist-DimotS8e.mjs";
+import { cr as errMsg, kn as scoreRuntimes, kr as emitReadiness, lr as BaseAddon, pn as platformProbeCapability, ti as EventCategory, wt as enumerateInferenceDevices } from "../../dist-DMWeqeTF.mjs";
 import * as os from "node:os";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-VIIxVsBW.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { cr as BaseAddon, ei as EventCategory } from "../../dist-DimotS8e.mjs";
+import { lr as BaseAddon, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-VIIxVsBW.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 const require_snapshot_courtesy = require("../../snapshot-courtesy-D_C5-nC0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Ln as streamQualityLabel, X as bareAddonId, Z as batteryCapability, _t as deriveBatteryPresence, a as BatteryStatusSchema, cr as BaseAddon, ei as EventCategory, ir as DeviceFeature, jn as snapshotCapability, or as DeviceType, sr as errMsg, tn as memoizePinnedFfmpeg, zr as nodePin } from "../../dist-DimotS8e.mjs";
+import { Br as nodePin, Mn as snapshotCapability, Q as batteryCapability, Rn as streamQualityLabel, Z as bareAddonId, a as BatteryStatusSchema, ar as DeviceFeature, cr as errMsg, lr as BaseAddon, nn as memoizePinnedFfmpeg, sr as DeviceType, ti as EventCategory, vt as deriveBatteryPresence } from "../../dist-DMWeqeTF.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg } from "../../snapshot-courtesy-CyFs1M3I.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/sqlite-storage/database-snapshot-provider.d.ts

@@ -0,0 +1,18 @@
+import type { DatabaseSnapshotRequest, DatabaseSnapshotTargets, DatabaseSnapshotWritten, IDatabaseSnapshotProvider } from "@camstack/types";
+import type { OwnedSqliteFile } from "./owned-sqlite-file.js";
+/** What the provider needs from an owned file. */
+export type SnapshotableFile = Pick<OwnedSqliteFile, "databaseId" | "livePath" | "snapshot">;
+/** What the provider needs from the placement router. */
+export interface OpenFileSource {
+	openFiles(): readonly SnapshotableFile[];
+}
+export declare class DatabaseSnapshotProvider implements IDatabaseSnapshotProvider {
+	private readonly source;
+	/** Same database asked twice: the second call joins the first. */
+	private readonly inFlight;
+	/** Different databases run one after the other: the disk reserve check is per copy. */
+	private tail;
+	constructor(source: OpenFileSource);
+	listDatabases(): Promise<DatabaseSnapshotTargets>;
+	writeSnapshot(input: DatabaseSnapshotRequest): Promise<DatabaseSnapshotWritten>;
+}

package/dist/builtins/sqlite-storage/file-host-client.d.ts

@@ -0,0 +1,59 @@
+import type { IScopedLogger } from "@camstack/types";
+import { type ControlOp, type ControlOps, type DataStoreInput, type DataStoreOp, type DataStoreOutput, type FileHostWorkerData, type OwnedSqliteFileSpec, type VectorInput, type VectorOp, type VectorOutput } from "./file-host-protocol.js";
+/** The members of a `Worker` this class touches — structural, so a spec can substitute. */
+export interface FileHostThread {
+	on(event: "message", listener: (message: unknown) => void): unknown;
+	on(event: "error", listener: (err: unknown) => void): unknown;
+	on(event: "exit", listener: (code: number) => void): unknown;
+	postMessage(message: unknown, transfer?: readonly ArrayBuffer[]): void;
+	terminate(): Promise<number>;
+}
+export type FileHostThreadFactory = (data: FileHostWorkerData) => FileHostThread;
+/** Where the built worker entry lives (`dist/file-host-worker.js`, next to the checkpoint worker). */
+export declare function defaultFileHostWorkerPath(): string;
+export interface FileHostClientOptions {
+	readonly spec: OwnedSqliteFileSpec;
+	/** The runner's logger; this class writes through `child('Db/<id>')`. */
+	readonly logger: IScopedLogger;
+	/** Called when the thread dies unexpectedly. Production: log, then `process.exit(1)`. */
+	readonly onFatal: (reason: string) => void;
+	readonly workerPath?: string;
+	readonly workerExecArgv?: readonly string[];
+	readonly threadFactory?: FileHostThreadFactory;
+	readonly maxInFlight?: number;
+	readonly now?: () => number;
+}
+export declare class FileHostClient {
+	private readonly spec;
+	private readonly logger;
+	private readonly onFatal;
+	private readonly maxInFlight;
+	private readonly now;
+	private readonly thread;
+	private readonly pending;
+	private nextId;
+	private lastOp;
+	private stopping;
+	private dead;
+	private lastBusyLogAt;
+	private declared;
+	private bootSettled;
+	constructor(options: FileHostClientOptions);
+	/** Resolves once the thread has opened its file; rejects if it could not. */
+	ready(): Promise<void>;
+	/** The collections this file's own declarations table names (updated as declarations land). */
+	declaredCollections(): ReadonlySet<string>;
+	noteDeclared(table: string): void;
+	data<K extends DataStoreOp>(op: K, input: DataStoreInput<K>): Promise<DataStoreOutput<K>>;
+	vector<K extends VectorOp>(op: K, input: VectorInput<K>): Promise<VectorOutput<K>>;
+	control<K extends ControlOp>(op: K, input: ControlOps[K]["input"]): Promise<ControlOps[K]["output"]>;
+	/** Ask the thread to close its connection, then end it. */
+	stop(): Promise<void>;
+	inFlight(): number;
+	private request;
+	private logBusy;
+	private onMessage;
+	private writeLog;
+	/** The thread is gone and nobody asked it to be: say so, fail what waits, fail the runner. */
+	private die;
+}

package/dist/builtins/sqlite-storage/file-host-handlers.d.ts

@@ -0,0 +1,23 @@
+/**
+* What a thread does with a request once it has one — shared by the main
+* thread (which serves `camstack.db` in place) and the file-host worker (which
+* serves `events.db` / `history.db`), so the two cannot disagree about what an
+* op means.
+*/
+import type { IVectorStoreProvider } from "@camstack/types";
+import { type ControlOp, type ControlOps, type DataStoreInput, type DataStoreOp, type DataStoreOutput, type VectorInput, type VectorOp, type VectorOutput } from "./file-host-protocol.js";
+import type { SqliteSettingsBackend } from "./sqlite-settings-backend.js";
+/** The data surface as a mapped type — what lets `target[op](input)` type-check for a generic `op`. */
+export type DataTarget = { readonly [K in DataStoreOp]: (input: DataStoreInput<K>) => Promise<DataStoreOutput<K>> };
+export type VectorTarget = { readonly [K in VectorOp]: (input: VectorInput<K>) => Promise<VectorOutput<K>> };
+export declare function callData<K extends DataStoreOp>(target: DataTarget, op: K, input: DataStoreInput<K>): Promise<DataStoreOutput<K>>;
+export declare function callVector<K extends VectorOp>(target: IVectorStoreProvider, op: K, input: VectorInput<K>): Promise<VectorOutput<K>>;
+/** The control surface as a mapped type, for the same reason. */
+type ControlTarget = { readonly [K in ControlOp]: (input: ControlOps[K]["input"]) => ControlOps[K]["output"] };
+/**
+* The control answers a backend can give. `threadId` is supplied by the
+* caller: only the thread knows its own.
+*/
+export declare function controlTargetOf(backend: SqliteSettingsBackend, threadId: number): ControlTarget;
+export declare function callControl<K extends ControlOp>(target: ControlTarget, op: K, input: ControlOps[K]["input"]): ControlOps[K]["output"];
+export {};

package/dist/builtins/sqlite-storage/file-host-protocol.d.ts

@@ -0,0 +1,151 @@
+/**
+* The vocabulary between the engine's main thread and the thread that serves
+* one database file (D851). Pure: no driver, no kernel — the worker bundle
+* imports it, and so does the main thread.
+*
+* ## The shape
+*
+* A request is `{ id, kind, op, input }`; the answer is `{ id, ok: true,
+* result }` or `{ id, ok: false, error }`. `kind` is `data` (the
+* `data-store-provider` surface), `vector` (the `vector-store` surface) or
+* `control` (what the placement router needs to ask a file that no cap
+* method covers). Errors cross by NAME (`placement-errors.ts`).
+*
+* ## The type boundary
+*
+* A message is `unknown` the moment it crosses `postMessage`. `trustInput` and
+* `trustResult` are the only two places the engine asserts a type it cannot
+* prove: the message was built by {@link OwnedSqliteFile.call} /
+* {@link OwnedSqliteFile.vector}, whose signature IS the typing. Everything
+* else on either side of the boundary is typed.
+*/
+import type { IDataStoreProvider, IVectorStoreProvider } from "@camstack/types";
+import type { DataStoreDatabase, LogTags } from "@camstack/types";
+import type { SerializedError } from "./placement-errors.js";
+/** Every `data-store-provider` method a file serves (all but self-description). */
+export type DataStoreMethods = Omit<IDataStoreProvider, "getEngineInfo">;
+export type DataStoreOp = keyof DataStoreMethods;
+export type DataStoreInput<K extends DataStoreOp> = Parameters<DataStoreMethods[K]>[0];
+export type DataStoreOutput<K extends DataStoreOp> = Awaited<ReturnType<DataStoreMethods[K]>>;
+export type VectorOp = keyof IVectorStoreProvider;
+export type VectorInput<K extends VectorOp> = Parameters<IVectorStoreProvider[K]>[0];
+export type VectorOutput<K extends VectorOp> = Awaited<ReturnType<IVectorStoreProvider[K]>>;
+/** Questions about a file that are not cap methods. */
+export interface ControlOps {
+	/** Does a table of this name exist in the file? */
+	readonly hasTable: {
+		readonly input: {
+			readonly name: string;
+		};
+		readonly output: boolean;
+	};
+	/** Drop a retired table, reporting the rows that went with it (`null`: not there). */
+	readonly dropRetiredTable: {
+		readonly input: {
+			readonly name: string;
+		};
+		readonly output: {
+			readonly rows: number;
+		} | null;
+	};
+	/** Which thread serves this file. */
+	readonly threadId: {
+		readonly input: Record<string, never>;
+		readonly output: number;
+	};
+}
+export type ControlOp = keyof ControlOps;
+/** At most this many calls in flight per worker; beyond it a call is refused, never queued. */
+export declare const FILE_HOST_MAX_IN_FLIGHT = 512;
+/** A refusal for being busy is logged at most once per this many ms. */
+export declare const FILE_HOST_BUSY_LOG_INTERVAL_MS = 6e4;
+/** How one file is opened. */
+export interface OwnedSqliteFileSpec {
+	readonly databaseId: DataStoreDatabase;
+	/** `<dataDir>/<file>`, absolute. */
+	readonly livePath: string;
+	/** `settings` is served on the engine's main thread; `events`, `history` each on a worker. */
+	readonly thread: "main" | "worker";
+	/** `incremental` only takes effect on a file this open CREATES. */
+	readonly autoVacuum: "none" | "incremental";
+	/** Load sqlite-vec and serve `vector` calls (`events` only). */
+	readonly loadVectorExtension: boolean;
+}
+/** `workerData` of one file-host thread. */
+export interface FileHostWorkerData {
+	readonly kind: "file-host";
+	readonly spec: OwnedSqliteFileSpec;
+}
+export type FileHostRequest = {
+	readonly id: number;
+	readonly kind: "data";
+	readonly op: DataStoreOp;
+	readonly input: unknown;
+} | {
+	readonly id: number;
+	readonly kind: "vector";
+	readonly op: VectorOp;
+	readonly input: unknown;
+} | {
+	readonly id: number;
+	readonly kind: "control";
+	readonly op: ControlOp;
+	readonly input: unknown;
+} | {
+	readonly id: number;
+	readonly kind: "stop";
+};
+export type FileHostLogLevel = "debug" | "info" | "warn" | "error";
+export type FileHostMessage = {
+	readonly kind: "ready";
+	readonly declared: readonly string[];
+} | {
+	readonly kind: "log";
+	readonly level: FileHostLogLevel;
+	readonly message: string;
+	readonly scope: string;
+	readonly tags?: LogTags;
+	readonly meta?: Record<string, unknown>;
+} | {
+	readonly kind: "result";
+	readonly id: number;
+	readonly ok: true;
+	readonly result: unknown;
+} | {
+	readonly kind: "result";
+	readonly id: number;
+	readonly ok: false;
+	readonly error: SerializedError;
+} | {
+	readonly kind: "boot-failed";
+	readonly error: SerializedError;
+};
+export declare const DATA_STORE_OPS: readonly DataStoreOp[];
+export declare const VECTOR_OPS: readonly VectorOp[];
+export declare const CONTROL_OPS: readonly ControlOp[];
+export declare function isDataStoreOp(op: string): op is DataStoreOp;
+export declare function isVectorOp(op: string): op is VectorOp;
+export declare function isControlOp(op: string): op is ControlOp;
+/** Narrow an incoming worker message. */
+export declare function isFileHostMessage(value: unknown): value is FileHostMessage;
+/** Narrow an incoming request on the worker side. */
+export declare function isFileHostRequest(value: unknown): value is FileHostRequest;
+export declare function isFileHostWorkerData(value: unknown): value is FileHostWorkerData;
+/**
+* Type boundary (see the file header): the request was built by a typed
+* `call`/`vector`, so its `input` is the op's input.
+*/
+export declare function trustInput<T>(input: unknown): T;
+/** Type boundary (see the file header): the answer was produced by the op's handler. */
+export declare function trustResult<T>(result: unknown): T;
+/**
+* The `ArrayBuffer`s a payload carries within three levels (a typed array,
+* a `Buffer`, or an array/record of them, e.g. `{ items: [{ vector }] }`) — what `postMessage` should TRANSFER
+* rather than clone. A transferred buffer is detached on the sender: ownership
+* passes with the message, and a caller must not reuse a buffer it sent.
+*
+* Only plain, non-shared `ArrayBuffer`s qualify; a view over a pooled
+* `Buffer` slab is cloned instead, because transferring the slab would detach
+* every other `Buffer` carved from it.
+*/
+export declare function collectTransferables(payload: unknown): readonly ArrayBuffer[];

package/dist/builtins/sqlite-storage/file-host-worker.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-VIIxVsBW.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { Fn as storageProviderCapability, cr as BaseAddon, jt as filesystemBrowseCapability } from "../../dist-DimotS8e.mjs";
+import { In as storageProviderCapability, Mt as filesystemBrowseCapability, lr as BaseAddon } from "../../dist-DMWeqeTF.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/sqlite-storage/index.js

@@ -4,6 +4,7 @@ Object.defineProperties(exports, {
 });
 require("../../chunk-Cek0wNdY.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./filesystem-storage.addon.js");
+const require_wal_maintenance = require("../../wal-maintenance-DJV1rde2.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./sqlite-settings.addon.js");
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {
@@ -57,25 +58,25 @@ exports.DeviceStore = DeviceStore;
 exports.DeviceStore$1 = DeviceStore;
 exports.FilesystemStorageAddon = require_builtins_sqlite_storage_filesystem_storage_addon.FilesystemStorageAddon;
 exports.FilesystemStorageProvider = require_builtins_sqlite_storage_filesystem_storage_addon.FilesystemStorageProvider;
-exports.SQLITE_ENGINE_STORM_WALL_SHARE = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_ENGINE_STORM_WALL_SHARE;
-exports.SQLITE_JOURNAL_SIZE_LIMIT_BYTES = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_JOURNAL_SIZE_LIMIT_BYTES;
-exports.SQLITE_MMAP_CEILING_BYTES = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_MMAP_CEILING_BYTES;
-exports.SQLITE_MMAP_FLOOR_BYTES = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_MMAP_FLOOR_BYTES;
-exports.SQLITE_PAGE_CACHE_CEILING_KIB = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_PAGE_CACHE_CEILING_KIB;
-exports.SQLITE_PAGE_CACHE_FLOOR_KIB = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_PAGE_CACHE_FLOOR_KIB;
-exports.SQLITE_PROFILE_REPORT_FLOOR_MS = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_PROFILE_REPORT_FLOOR_MS;
-exports.SQLITE_PROFILE_REPORT_INTERVAL_MS = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_PROFILE_REPORT_INTERVAL_MS;
-exports.SQLITE_PROFILE_TOP_N = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_PROFILE_TOP_N;
-exports.SQLITE_SLOW_CALL_MS = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_SLOW_CALL_MS;
-exports.SqliteOpProfiler = require_builtins_sqlite_storage_sqlite_settings_addon.SqliteOpProfiler;
+exports.SQLITE_ENGINE_STORM_WALL_SHARE = require_wal_maintenance.SQLITE_ENGINE_STORM_WALL_SHARE;
+exports.SQLITE_JOURNAL_SIZE_LIMIT_BYTES = require_wal_maintenance.SQLITE_JOURNAL_SIZE_LIMIT_BYTES;
+exports.SQLITE_MMAP_CEILING_BYTES = require_wal_maintenance.SQLITE_MMAP_CEILING_BYTES;
+exports.SQLITE_MMAP_FLOOR_BYTES = require_wal_maintenance.SQLITE_MMAP_FLOOR_BYTES;
+exports.SQLITE_PAGE_CACHE_CEILING_KIB = require_wal_maintenance.SQLITE_PAGE_CACHE_CEILING_KIB;
+exports.SQLITE_PAGE_CACHE_FLOOR_KIB = require_wal_maintenance.SQLITE_PAGE_CACHE_FLOOR_KIB;
+exports.SQLITE_PROFILE_REPORT_FLOOR_MS = require_wal_maintenance.SQLITE_PROFILE_REPORT_FLOOR_MS;
+exports.SQLITE_PROFILE_REPORT_INTERVAL_MS = require_wal_maintenance.SQLITE_PROFILE_REPORT_INTERVAL_MS;
+exports.SQLITE_PROFILE_TOP_N = require_wal_maintenance.SQLITE_PROFILE_TOP_N;
+exports.SQLITE_SLOW_CALL_MS = require_wal_maintenance.SQLITE_SLOW_CALL_MS;
+exports.SqliteOpProfiler = require_wal_maintenance.SqliteOpProfiler;
 exports.SqliteSettingsAddon = require_builtins_sqlite_storage_sqlite_settings_addon.SqliteSettingsAddon;
-exports.SqliteSettingsBackend = require_builtins_sqlite_storage_sqlite_settings_addon.SqliteSettingsBackend;
-exports.WAL_CHECKPOINT_BUSY_TIMEOUT_MS = require_builtins_sqlite_storage_sqlite_settings_addon.WAL_CHECKPOINT_BUSY_TIMEOUT_MS;
-exports.WAL_HIGH_WATER_BYTES = require_builtins_sqlite_storage_sqlite_settings_addon.WAL_HIGH_WATER_BYTES;
-exports.WAL_IDLE_QUIET_MS = require_builtins_sqlite_storage_sqlite_settings_addon.WAL_IDLE_QUIET_MS;
-exports.WAL_MAINTENANCE_INTERVAL_MS = require_builtins_sqlite_storage_sqlite_settings_addon.WAL_MAINTENANCE_INTERVAL_MS;
-exports.WalMaintenance = require_builtins_sqlite_storage_sqlite_settings_addon.WalMaintenance;
+exports.SqliteSettingsBackend = require_wal_maintenance.SqliteSettingsBackend;
+exports.WAL_CHECKPOINT_BUSY_TIMEOUT_MS = require_wal_maintenance.WAL_CHECKPOINT_BUSY_TIMEOUT_MS;
+exports.WAL_HIGH_WATER_BYTES = require_wal_maintenance.WAL_HIGH_WATER_BYTES;
+exports.WAL_IDLE_QUIET_MS = require_wal_maintenance.WAL_IDLE_QUIET_MS;
+exports.WAL_MAINTENANCE_INTERVAL_MS = require_wal_maintenance.WAL_MAINTENANCE_INTERVAL_MS;
+exports.WalMaintenance = require_wal_maintenance.WalMaintenance;
 exports.default = require_builtins_sqlite_storage_filesystem_storage_addon.FilesystemStorageAddon;
-exports.sqliteEngineStorm = require_builtins_sqlite_storage_sqlite_settings_addon.sqliteEngineStorm;
-exports.sqliteMmapSizeFor = require_builtins_sqlite_storage_sqlite_settings_addon.sqliteMmapSizeFor;
-exports.sqlitePageCacheKibFor = require_builtins_sqlite_storage_sqlite_settings_addon.sqlitePageCacheKibFor;
+exports.sqliteEngineStorm = require_wal_maintenance.sqliteEngineStorm;
+exports.sqliteMmapSizeFor = require_wal_maintenance.sqliteMmapSizeFor;
+exports.sqlitePageCacheKibFor = require_wal_maintenance.sqlitePageCacheKibFor;

package/dist/builtins/sqlite-storage/index.mjs

@@ -1,5 +1,6 @@
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./filesystem-storage.addon.mjs";
-import { SqliteSettingsAddon, _ as SQLITE_PROFILE_REPORT_INTERVAL_MS, a as WalMaintenance, b as SqliteOpProfiler, c as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, d as SQLITE_PAGE_CACHE_CEILING_KIB, f as SQLITE_PAGE_CACHE_FLOOR_KIB, g as SQLITE_PROFILE_REPORT_FLOOR_MS, h as SQLITE_ENGINE_STORM_WALL_SHARE, i as WAL_MAINTENANCE_INTERVAL_MS, l as SQLITE_MMAP_CEILING_BYTES, m as sqlitePageCacheKibFor, n as WAL_HIGH_WATER_BYTES, o as SqliteSettingsBackend, p as sqliteMmapSizeFor, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, u as SQLITE_MMAP_FLOOR_BYTES, v as SQLITE_PROFILE_TOP_N, x as sqliteEngineStorm, y as SQLITE_SLOW_CALL_MS } from "./sqlite-settings.addon.mjs";
+import { A as SQLITE_PAGE_CACHE_CEILING_KIB, B as sqliteEngineStorm, D as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, F as SQLITE_PROFILE_REPORT_FLOOR_MS, I as SQLITE_PROFILE_REPORT_INTERVAL_MS, L as SQLITE_PROFILE_TOP_N, M as sqliteMmapSizeFor, N as sqlitePageCacheKibFor, O as SQLITE_MMAP_CEILING_BYTES, P as SQLITE_ENGINE_STORM_WALL_SHARE, R as SQLITE_SLOW_CALL_MS, a as WalMaintenance, c as SqliteSettingsBackend, i as WAL_MAINTENANCE_INTERVAL_MS, j as SQLITE_PAGE_CACHE_FLOOR_KIB, k as SQLITE_MMAP_FLOOR_BYTES, n as WAL_HIGH_WATER_BYTES, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, z as SqliteOpProfiler } from "../../wal-maintenance-BtfyfuT5.mjs";
+import { SqliteSettingsAddon } from "./sqlite-settings.addon.mjs";
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {
 	db;