@camstack/system 1.2.438 → 1.2.440

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-GgG-7amw.js");
+const require_dist = require("../../dist-BKhlcYz6.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Or as BaseAddon, mn as logDestinationCapability } from "../../dist-Dc8GKC5H.mjs";
+import { gn as logDestinationCapability, jr as BaseAddon } from "../../dist-9fcsrFU3.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-GgG-7amw.js");
+const require_dist = require("../../dist-BKhlcYz6.js");
 let node_fs_promises = require("node:fs/promises");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Dr as errMsg, In as resolveBucketMs, Jt as foldSnapshotByFunction, Nn as reducePoints, Or as BaseAddon, Wr as createEvent, bn as metricsProviderCapability, yi as EventCategory } from "../../dist-Dc8GKC5H.mjs";
+import { Ar as errMsg, Fn as reducePoints, Rn as resolveBucketMs, Si as EventCategory, Sn as metricsProviderCapability, Xt as foldSnapshotByFunction, jr as BaseAddon, qr as createEvent } from "../../dist-9fcsrFU3.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import * as os$1 from "node:os";
 import { platform } from "node:os";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-GgG-7amw.js");
+const require_dist = require("../../dist-BKhlcYz6.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_fs = require("node:fs");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM, r as __exportAll } from "../../chunk-CNf5ZN-e.mjs";
-import { An as platformProbeCapability, Dr as errMsg, Jr as emitReadiness, Kn as scoreRuntimes, Or as BaseAddon, yi as EventCategory, zt as enumerateInferenceDevices } from "../../dist-Dc8GKC5H.mjs";
+import { Ar as errMsg, Jn as scoreRuntimes, Mn as platformProbeCapability, Si as EventCategory, Vt as enumerateInferenceDevices, Zr as emitReadiness, jr as BaseAddon } from "../../dist-9fcsrFU3.mjs";
 import * as os$1 from "node:os";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-GgG-7amw.js");
+const require_dist = require("../../dist-BKhlcYz6.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Or as BaseAddon, yi as EventCategory } from "../../dist-Dc8GKC5H.mjs";
+import { Si as EventCategory, jr as BaseAddon } from "../../dist-9fcsrFU3.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-GgG-7amw.js");
+const require_dist = require("../../dist-BKhlcYz6.js");
 const require_snapshot_courtesy = require("../../snapshot-courtesy-D_C5-nC0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Dr as errMsg, Er as DeviceType, Mt as deriveBatteryPresence, Or as BaseAddon, Xn as snapshotCapability, ct as bareAddonId, ii as nodePin, lt as batteryCapability, rr as streamQualityLabel, s as BatteryStatusSchema, wr as DeviceFeature, yi as EventCategory, yn as memoizePinnedFfmpeg } from "../../dist-Dc8GKC5H.mjs";
+import { Ar as errMsg, Dr as DeviceFeature, Pt as deriveBatteryPresence, Qn as snapshotCapability, Si as EventCategory, dt as batteryCapability, jr as BaseAddon, kr as DeviceType, or as streamQualityLabel, s as BatteryStatusSchema, si as nodePin, ut as bareAddonId, xn as memoizePinnedFfmpeg } from "../../dist-9fcsrFU3.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg } from "../../snapshot-courtesy-CyFs1M3I.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-GgG-7amw.js");
+const require_dist = require("../../dist-BKhlcYz6.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { Or as BaseAddon, qt as filesystemBrowseCapability, tr as storageProviderCapability } from "../../dist-Dc8GKC5H.mjs";
+import { Yt as filesystemBrowseCapability, ir as storageProviderCapability, jr as BaseAddon } from "../../dist-9fcsrFU3.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/sqlite-storage/index.js

@@ -4,7 +4,7 @@ Object.defineProperties(exports, {
 });
 require("../../chunk-Cek0wNdY.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./filesystem-storage.addon.js");
-const require_wal_maintenance = require("../../wal-maintenance-mjB2i-VR.js");
+const require_wal_maintenance = require("../../wal-maintenance-C041zn6V.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./sqlite-settings.addon.js");
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {

package/dist/builtins/sqlite-storage/index.mjs

@@ -1,5 +1,5 @@
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./filesystem-storage.addon.mjs";
-import { A as SQLITE_PAGE_CACHE_CEILING_KIB, B as sqliteEngineStorm, D as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, F as SQLITE_PROFILE_REPORT_FLOOR_MS, I as SQLITE_PROFILE_REPORT_INTERVAL_MS, L as SQLITE_PROFILE_TOP_N, M as sqliteMmapSizeFor, N as sqlitePageCacheKibFor, O as SQLITE_MMAP_CEILING_BYTES, P as SQLITE_ENGINE_STORM_WALL_SHARE, R as SQLITE_SLOW_CALL_MS, a as WalMaintenance, c as SqliteSettingsBackend, i as WAL_MAINTENANCE_INTERVAL_MS, j as SQLITE_PAGE_CACHE_FLOOR_KIB, k as SQLITE_MMAP_FLOOR_BYTES, n as WAL_HIGH_WATER_BYTES, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, z as SqliteOpProfiler } from "../../wal-maintenance-Bx3lcVA7.mjs";
+import { A as SQLITE_PAGE_CACHE_FLOOR_KIB, D as SQLITE_MMAP_CEILING_BYTES, E as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, F as SQLITE_PROFILE_REPORT_INTERVAL_MS, I as SQLITE_PROFILE_TOP_N, L as SQLITE_SLOW_CALL_MS, M as sqlitePageCacheKibFor, N as SQLITE_ENGINE_STORM_WALL_SHARE, O as SQLITE_MMAP_FLOOR_BYTES, P as SQLITE_PROFILE_REPORT_FLOOR_MS, R as SqliteOpProfiler, a as WalMaintenance, c as SqliteSettingsBackend, i as WAL_MAINTENANCE_INTERVAL_MS, j as sqliteMmapSizeFor, k as SQLITE_PAGE_CACHE_CEILING_KIB, n as WAL_HIGH_WATER_BYTES, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, z as sqliteEngineStorm } from "../../wal-maintenance-BZGmF-3U.mjs";
 import { SqliteSettingsAddon } from "./sqlite-settings.addon.mjs";
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {

package/dist/builtins/sqlite-storage/sqlite-settings-backend.d.ts

@@ -167,6 +167,8 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
 	*  the structured schema owns. Routes set/get/insert/update/query to
 	*  typed columns. Every collection MUST be declared here before use. */
 	private readonly declaredCollections;
+	/** Tables an addon declared since THIS process started - a running addon claims them. */
+	private readonly declaredThisBoot;
 	private readonly runtimeDefaults;
 	/**
 	* Canonical key/value collections — declared with a `(id TEXT PK,
@@ -193,6 +195,23 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
 	private readonly options;
 	constructor(dbPath: string, runtimeDefaults?: Record<string, unknown>, logger?: IScopedLogger, options?: SqliteSettingsBackendOptions);
 	initialize(): Promise<void>;
+	/**
+	* The declaration a READ needs, or `null` when the table does not exist.
+	*
+	* A per-addon scoped canonical table (`<addonId>:addon-settings`, ...) is
+	* auto-declared on first use, and that used to include a READ: asking
+	* `count` or `get` about a scoped name that was never written CREATED the
+	* table. A read of a table nobody wrote is "absent" (D870), and creating an
+	* empty table per probed name is how an enumeration litters the database.
+	*/
+	private declaredForRead;
+	/**
+	* Per-addon tables the runner used to keep (`<addonId>:addon-devices`, D870).
+	* Nothing writes them any more; they stay READABLE, by their old name, until
+	* the migration's drop phase removes them.
+	*/
+	private static readonly LEGACY_SCOPED_KV_COLLECTIONS;
+	private declareLegacyScopedKv;
 	private requireDeclared;
 	/**
 	* Decode a single column value off a SQLite row into the JS shape the
@@ -392,13 +411,8 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
 	getAllDevice(deviceId: string): Record<string, unknown>;
 	/** Set a device setting */
 	setDevice(deviceId: string, key: string, value: unknown): void;
-	getAddonDevice(addonId: string, deviceId: string): Record<string, unknown>;
-	setAddonDevice(addonId: string, deviceId: string, values: Record<string, unknown>): void;
-	clearAddonDevice(addonId: string, deviceId: string): void;
-	private static readonly LEGACY_RUNTIME_STATE_ADDON_ID;
 	/**
-	* The device's whole cap-slice map. Canonical row first, legacy prefix as the
-	* fallback. `{}` — never null — when the device has never persisted a slice,
+	* The device's whole cap-slice map. `{}` — never null — when the device has never persisted a slice,
 	* because every caller treats the result as a cap map to iterate.
 	*/
 	getDeviceRuntimeState(deviceId: string): Record<string, unknown>;
@@ -408,7 +422,7 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
 	* slice the durability policy has since stopped persisting.
 	*/
 	setDeviceRuntimeState(deviceId: string, blob: Record<string, unknown>): void;
-	/** Forget the device's runtime state in BOTH stores (device removal). */
+	/** Forget the device's runtime state (device removal). */
 	clearDeviceRuntimeState(deviceId: string): void;
 	/** Seed system-settings with runtime defaults (first boot) */
 	private seedDefaults;
@@ -421,6 +435,23 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
 	/** Which file this backend serves. */
 	getDatabaseId(): DataStoreDatabase;
 	/**
+	* Every table of this file with rows and size. READ-ONLY: nothing is created,
+	* and no declaration is consulted or changed.
+	*/
+	listTables(ownerPrefix?: string): readonly {
+		name: string;
+		owner: string | null;
+		rows: number;
+		bytes: number | null;
+		declaredThisBoot: boolean;
+	}[];
+	/**
+	* Drop one table nobody owns (D870 migration, one-shot). Refuses a canonical
+	* or engine table, one a running addon declared since boot, a table that is
+	* not there, and a row count other than the one the caller stated.
+	*/
+	dropTable(name: string, expectRows: number): number;
+	/**
 	* The tables this file's own `_collection_declarations` names — the
 	* placement authority (D851). Read from DISK, not from memory, so a table
 	* created and declared by an earlier life of the process still counts.

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-GgG-7amw.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-Dr_4lfKu.js");
-const require_wal_maintenance = require("../../wal-maintenance-mjB2i-VR.js");
+const require_dist = require("../../dist-BKhlcYz6.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-D_VwZiDt.js");
+const require_wal_maintenance = require("../../wal-maintenance-C041zn6V.js");
 const require_sqlite_snapshot_protocol = require("../../sqlite-snapshot-protocol-B9OndqZv.js");
 const require_wal_checkpoint_policy = require("../../wal-checkpoint-policy-d2z2qPqx.js");
 let node_fs_promises = require("node:fs/promises");
@@ -1204,6 +1204,68 @@ var PlacementRouter = class {
 	}
 };
 //#endregion
+//#region src/builtins/sqlite-storage/storage-admin-provider.ts
+/**
+* The `storage-admin` provider of the SQLite engine (D870): the operator's
+* maintenance reach into the settings database - list its tables, drop one that
+* nothing owns any more. Every call is logged with its table and counts.
+*
+* `dropCollection` is a one-shot of the D870 migration: remove it, and the
+* capability's method, once the last hub ran `migrate-device-store.ts --drop`.
+*/
+var StorageAdminProvider = class {
+	backend;
+	logger;
+	installedOwners;
+	constructor(backend, logger, installedOwners) {
+		this.backend = backend;
+		this.logger = logger;
+		this.installedOwners = installedOwners;
+	}
+	/** May this table be dropped AT ALL? Throws with the reason when not. */
+	async assertDroppable(collection) {
+		const colon = collection.indexOf(":");
+		const base = colon > 0 ? collection.slice(colon + 1) : "";
+		if (colon > 0 && require_dist.STORAGE_ADMIN_SCOPED_BASES.includes(base)) return;
+		if (require_dist.STORAGE_ADMIN_MOVED_COLLECTIONS.includes(collection)) return;
+		if (colon <= 0) throw new Error(`drop refused: "${collection}" is not a scoped table`);
+		const installed = await this.installedOwners().catch((err) => {
+			throw new Error(`drop refused: the installed addons could not be read (${err instanceof Error ? err.message : String(err)})`);
+		});
+		const owner = collection.slice(0, colon);
+		if (installed.has(owner)) throw new Error(`drop refused: "${collection}" belongs to the installed addon "${owner}"`);
+	}
+	async listTables(input) {
+		const tables = this.backend.listTables(input.ownerPrefix);
+		this.logger.info("storage-admin: listed tables", { meta: {
+			tables: tables.length,
+			ownerPrefix: input.ownerPrefix ?? null
+		} });
+		return { tables: [...tables] };
+	}
+	async dropCollection(input) {
+		try {
+			await this.assertDroppable(input.collection);
+			const rows = this.backend.dropTable(input.collection, input.expectRows);
+			this.logger.warn("storage-admin: DROPPED a table", { meta: {
+				collection: input.collection,
+				rows
+			} });
+			return {
+				dropped: true,
+				rows
+			};
+		} catch (err) {
+			this.logger.warn("storage-admin: drop refused", { meta: {
+				collection: input.collection,
+				expectRows: input.expectRows,
+				error: err instanceof Error ? err.message : String(err)
+			} });
+			throw err;
+		}
+	}
+};
+//#endregion
 //#region src/builtins/sqlite-storage/retired-collections.ts
 /**
 * The dead tables.
@@ -1420,6 +1482,10 @@ var SqliteSettingsAddon = class extends require_dist.BaseAddon {
 			{
 				capability: require_dist.databaseSnapshotCapability,
 				provider: new DatabaseSnapshotProvider(router)
+			},
+			{
+				capability: require_dist.storageAdminCapability,
+				provider: new StorageAdminProvider(settings.backend, this.ctx.logger.child("StorageAdmin"), async () => new Set((await this.ctx.api.addons.list.query()).map((addon) => addon.manifest.id)))
 			}
 		];
 	}

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,6 +1,6 @@
-import { Dr as errMsg, Dt as dataStoreProviderCapability, Nr as RUNTIME_DEFAULTS, Or as BaseAddon, Ot as databaseSnapshotCapability, S as DATA_STORE_DATABASES, b as DATABASE_SNAPSHOT_SUFFIX, ct as bareAddonId, ur as vectorStoreCapability, x as DATABASE_SNAPSHOT_TIMEOUT_MS, y as DATABASE_SNAPSHOT_PARTIAL_SUFFIX } from "../../dist-Dc8GKC5H.mjs";
-import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-Is0zO8gX.mjs";
-import { C as callControl, E as controlTargetOf, S as trustResult, T as callVector, _ as collectTransferables, a as WalMaintenance, c as SqliteSettingsBackend, d as CrossDatabaseTransactError, f as DatabaseBusyError, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callData } from "../../wal-maintenance-Bx3lcVA7.mjs";
+import { Ar as errMsg, At as databaseSnapshotCapability, Ir as RUNTIME_DEFAULTS, J as STORAGE_ADMIN_SCOPED_BASES, S as DATA_STORE_DATABASES, b as DATABASE_SNAPSHOT_SUFFIX, er as storageAdminCapability, jr as BaseAddon, kt as dataStoreProviderCapability, pr as vectorStoreCapability, q as STORAGE_ADMIN_MOVED_COLLECTIONS, ut as bareAddonId, x as DATABASE_SNAPSHOT_TIMEOUT_MS, y as DATABASE_SNAPSHOT_PARTIAL_SUFFIX } from "../../dist-9fcsrFU3.mjs";
+import { i as retiredKeyStoreOf, n as purgeRetiredSettingsKeys } from "../../retired-settings-keys-Bhwe4ymb.mjs";
+import { C as callData, S as callControl, T as controlTargetOf, _ as isFileHostMessage, a as WalMaintenance, c as SqliteSettingsBackend, d as DatabaseBusyError, f as DuplicatePlacementError, g as collectTransferables, l as CollectionPlacementError, o as createVectorIndex, p as rehydrateError, s as vectorProviderOf, u as CrossDatabaseTransactError, w as callVector, x as trustResult } from "../../wal-maintenance-BZGmF-3U.mjs";
 import { r as isSnapshotWorkerMessage } from "../../sqlite-snapshot-protocol-2QaTouWV.mjs";
 import { a as isWorkerMessage, t as WAL_CHECKPOINT_LARGE_PASS_FRAMES } from "../../wal-checkpoint-policy-BahrTtyD.mjs";
 import { createRequire } from "node:module";
@@ -1198,6 +1198,68 @@ var PlacementRouter = class {
 	}
 };
 //#endregion
+//#region src/builtins/sqlite-storage/storage-admin-provider.ts
+/**
+* The `storage-admin` provider of the SQLite engine (D870): the operator's
+* maintenance reach into the settings database - list its tables, drop one that
+* nothing owns any more. Every call is logged with its table and counts.
+*
+* `dropCollection` is a one-shot of the D870 migration: remove it, and the
+* capability's method, once the last hub ran `migrate-device-store.ts --drop`.
+*/
+var StorageAdminProvider = class {
+	backend;
+	logger;
+	installedOwners;
+	constructor(backend, logger, installedOwners) {
+		this.backend = backend;
+		this.logger = logger;
+		this.installedOwners = installedOwners;
+	}
+	/** May this table be dropped AT ALL? Throws with the reason when not. */
+	async assertDroppable(collection) {
+		const colon = collection.indexOf(":");
+		const base = colon > 0 ? collection.slice(colon + 1) : "";
+		if (colon > 0 && STORAGE_ADMIN_SCOPED_BASES.includes(base)) return;
+		if (STORAGE_ADMIN_MOVED_COLLECTIONS.includes(collection)) return;
+		if (colon <= 0) throw new Error(`drop refused: "${collection}" is not a scoped table`);
+		const installed = await this.installedOwners().catch((err) => {
+			throw new Error(`drop refused: the installed addons could not be read (${err instanceof Error ? err.message : String(err)})`);
+		});
+		const owner = collection.slice(0, colon);
+		if (installed.has(owner)) throw new Error(`drop refused: "${collection}" belongs to the installed addon "${owner}"`);
+	}
+	async listTables(input) {
+		const tables = this.backend.listTables(input.ownerPrefix);
+		this.logger.info("storage-admin: listed tables", { meta: {
+			tables: tables.length,
+			ownerPrefix: input.ownerPrefix ?? null
+		} });
+		return { tables: [...tables] };
+	}
+	async dropCollection(input) {
+		try {
+			await this.assertDroppable(input.collection);
+			const rows = this.backend.dropTable(input.collection, input.expectRows);
+			this.logger.warn("storage-admin: DROPPED a table", { meta: {
+				collection: input.collection,
+				rows
+			} });
+			return {
+				dropped: true,
+				rows
+			};
+		} catch (err) {
+			this.logger.warn("storage-admin: drop refused", { meta: {
+				collection: input.collection,
+				expectRows: input.expectRows,
+				error: err instanceof Error ? err.message : String(err)
+			} });
+			throw err;
+		}
+	}
+};
+//#endregion
 //#region src/builtins/sqlite-storage/retired-collections.ts
 /**
 * The dead tables.
@@ -1414,6 +1476,10 @@ var SqliteSettingsAddon = class extends BaseAddon {
 			{
 				capability: databaseSnapshotCapability,
 				provider: new DatabaseSnapshotProvider(router)
+			},
+			{
+				capability: storageAdminCapability,
+				provider: new StorageAdminProvider(settings.backend, this.ctx.logger.child("StorageAdmin"), async () => new Set((await this.ctx.api.addons.list.query()).map((addon) => addon.manifest.id)))
 			}
 		];
 	}

package/dist/builtins/sqlite-storage/storage-admin-provider.d.ts

@@ -0,0 +1,31 @@
+/**
+* The `storage-admin` provider of the SQLite engine (D870): the operator's
+* maintenance reach into the settings database - list its tables, drop one that
+* nothing owns any more. Every call is logged with its table and counts.
+*
+* `dropCollection` is a one-shot of the D870 migration: remove it, and the
+* capability's method, once the last hub ran `migrate-device-store.ts --drop`.
+*/
+import { type IScopedLogger, type IStorageAdminProvider, type StorageTable } from "@camstack/types";
+import type { SqliteSettingsBackend } from "./sqlite-settings-backend.js";
+export declare class StorageAdminProvider implements IStorageAdminProvider {
+	private readonly backend;
+	private readonly logger;
+	/** The addon ids installed on this hub; a throw means "cannot tell" and refuses the drop. */
+	private readonly installedOwners;
+	constructor(backend: SqliteSettingsBackend, logger: IScopedLogger, installedOwners: () => Promise<ReadonlySet<string>>);
+	/** May this table be dropped AT ALL? Throws with the reason when not. */
+	private assertDroppable;
+	listTables(input: {
+		ownerPrefix?: string | undefined;
+	}): Promise<{
+		tables: StorageTable[];
+	}>;
+	dropCollection(input: {
+		collection: string;
+		expectRows: number;
+	}): Promise<{
+		dropped: true;
+		rows: number;
+	}>;
+}

package/dist/builtins/storage-orchestrator/hub-settings-forward.d.ts

@@ -30,9 +30,9 @@
 *
 * Per-node scoping already exists, one layer up, and it is per FIELD:
 * `BaseAddon` persists a `perNode: true` schema field as `<key>@<nodeId>`
-* inside the addon's single shared blob (`packages/types/src/addon/
-* per-node-store.ts`). The agent therefore reads and writes the SAME row the
-* hub's copy of that addon reads — `<addonId>:addon-settings` / `root` — and
+* inside the addon's settings (`packages/types/src/addon/
+* per-node-store.ts`). The agent therefore reads and writes the SAME rows the
+* hub's copy of that addon reads — `addon-settings` `<addonId>.<field>` (D870) — and
 * the two agree by construction. Introducing a second, addon-level
 * `(nodeId, addonId)` row here would be a second authority over one fact,
 * which is the shape [D224](../../../../../docs/decisions/adr-0224-the-freshness-of-a-camera-fact-lives-in-its-provider.md)

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-GgG-7amw.js");
+const require_dist = require("../../dist-BKhlcYz6.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -1491,9 +1491,9 @@ function createHubCapForwardService(onUnownedCall, options = {}) {
 *
 * Per-node scoping already exists, one layer up, and it is per FIELD:
 * `BaseAddon` persists a `perNode: true` schema field as `<key>@<nodeId>`
-* inside the addon's single shared blob (`packages/types/src/addon/
-* per-node-store.ts`). The agent therefore reads and writes the SAME row the
-* hub's copy of that addon reads — `<addonId>:addon-settings` / `root` — and
+* inside the addon's settings (`packages/types/src/addon/
+* per-node-store.ts`). The agent therefore reads and writes the SAME rows the
+* hub's copy of that addon reads — `addon-settings` `<addonId>.<field>` (D870) — and
 * the two agree by construction. Introducing a second, addon-level
 * `(nodeId, addonId)` row here would be a second authority over one fact,
 * which is the shape [D224](../../../../../docs/decisions/adr-0224-the-freshness-of-a-camera-fact-lives-in-its-provider.md)

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { $ as StorageLocationTypeSchema, $n as storageMigrationCapability, Bn as resolveLocationMode, Hr as collectSecretConfigKeys, Mr as REDACTED_SECRET, Or as BaseAddon, Q as StorageLocationModeSchema, Qn as storageCapability, Ut as evictionPolicyOfLocation, Z as StorageCleanupJobSchema, Zt as gbToBytes, _i as transformSecretWrite, _n as mayReadLocation, di as resolveSecretMarkers, dr as withLocationMode, et as StorageMigrationJobSchema, ni as isSecretMarker, oi as parseJsonObject, pi as secretTreeFromPaths, qn as settingsStoreCapability, rn as isLocationEnabled, un as legacyModeOf, vn as mayWriteToLocation, xn as modeMayWrite, yi as EventCategory, z as LegacyStorageLocationDefaultSchema } from "../../dist-Dc8GKC5H.mjs";
+import { $ as StorageCleanupJobSchema, $t as gbToBytes, Cn as modeMayWrite, Fr as REDACTED_SECRET, Gr as collectSecretConfigKeys, Gt as evictionPolicyOfLocation, Hn as resolveLocationMode, Si as EventCategory, Yn as settingsStoreCapability, ai as isSecretMarker, an as isLocationEnabled, bi as transformSecretWrite, bn as mayWriteToLocation, et as StorageLocationModeSchema, fn as legacyModeOf, gi as secretTreeFromPaths, jr as BaseAddon, li as parseJsonObject, mi as resolveSecretMarkers, mr as withLocationMode, nr as storageMigrationCapability, nt as StorageMigrationJobSchema, tr as storageCapability, tt as StorageLocationTypeSchema, yn as mayReadLocation, z as LegacyStorageLocationDefaultSchema } from "../../dist-9fcsrFU3.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { containsOrEquals, physicalRootOf } from "@camstack/types/node";
@@ -1486,9 +1486,9 @@ function createHubCapForwardService(onUnownedCall, options = {}) {
 *
 * Per-node scoping already exists, one layer up, and it is per FIELD:
 * `BaseAddon` persists a `perNode: true` schema field as `<key>@<nodeId>`
-* inside the addon's single shared blob (`packages/types/src/addon/
-* per-node-store.ts`). The agent therefore reads and writes the SAME row the
-* hub's copy of that addon reads — `<addonId>:addon-settings` / `root` — and
+* inside the addon's settings (`packages/types/src/addon/
+* per-node-store.ts`). The agent therefore reads and writes the SAME rows the
+* hub's copy of that addon reads — `addon-settings` `<addonId>.<field>` (D870) — and
 * the two agree by construction. Introducing a second, addon-level
 * `(nodeId, addonId)` row here would be a second authority over one fact,
 * which is the shape [D224](../../../../../docs/decisions/adr-0224-the-freshness-of-a-camera-fact-lives-in-its-provider.md)

package/dist/builtins/system-config/system-config.addon.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-GgG-7amw.js");
+const require_dist = require("../../dist-BKhlcYz6.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
-const require_x509_es = require("../../x509.es-r7Ht1thA.js");
-const require_agent_https = require("../../agent-https-BZIwS4xF.js");
-const require_constants$8 = require("../../constants-wkcn5Ij3.js");
+const require_x509_es = require("../../x509.es-C4cOo48M.js");
+const require_agent_https = require("../../agent-https-DlpTMDqA.js");
+const require_constants$8 = require("../../constants-CRI3QzT4.js");
 const require_src$1 = require("../../src-CnAqG6EF.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");