@camstack/system 1.2.439 → 1.2.441

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,10 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BOWdLjoK.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-CyQ7uvta.js");
+const require_dist = require("../../dist-BiTCcaf-.js");
+const require_prefix_range = require("../../prefix-range-D_KueXbQ.js");
+const require_prefix_walk = require("../../prefix-walk-Dv6MLZlM.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-D_VwZiDt.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -2730,30 +2732,13 @@ async function listPersistedByAddon(pctx, input) {
 	return saved;
 }
 /**
-* Every requested device's persisted config, in as few store round trips as the
-* settings view allows.
-*
-* One call when the view can batch (the in-process door, which keys
-* `addon-device-settings` by `<addonId>:<deviceId>.` and answers a whole addon
-* with one indexed range scan). Otherwise the per-device form, unchanged — a
-* fallback and not a silent downgrade: `readDeviceStoreBatch` is optional
-* precisely because a forked addon's view has nothing to batch, and refusing
-* would break the only implementation that cannot comply.
-*
-* A read that THROWS yields `{}` for that device rather than failing the whole
-* listing: one unreadable settings row must not make the fleet unlistable.
+* Every requested device's persisted config in ONE store round trip (D870). A
+* store that cannot be asked THROWS and the listing fails with it: an
+* unreadable row is not a device with no settings (D49).
 */
 async function readDeviceConfigs(pctx, deviceIds) {
 	if (deviceIds.length === 0) return /* @__PURE__ */ new Map();
-	const batch = pctx.settings.readDeviceStoreBatch;
-	if (batch !== void 0) return batch.call(pctx.settings, deviceIds);
-	const out = /* @__PURE__ */ new Map();
-	for (const id of deviceIds) try {
-		out.set(id, await pctx.settings.readDeviceStore(id));
-	} catch {
-		out.set(id, {});
-	}
-	return out;
+	return pctx.settings.readDeviceStoreBatch(deviceIds);
 }
 async function listAll(pctx, input) {
 	const ownerFilter = Reflect.get(input, "addonId");
@@ -4856,6 +4841,170 @@ function createDeviceManagerExtensionProvider(pctx) {
 	});
 }
 //#endregion
+//#region src/kernel/device-settings-store.ts
+/** The collection every addon's per-device settings share. Named nowhere else. */
+var DEVICE_SETTINGS_COLLECTION = "addon-device-settings";
+function scopeOf(addonId, deviceId) {
+	return `${addonId}:${String(deviceId)}.`;
+}
+function assertDeviceId(deviceId) {
+	if (!Number.isInteger(deviceId) || deviceId <= 0) throw new Error(`device settings: "${String(deviceId)}" is not a device id`);
+}
+function deviceIdOfSuffix(suffix) {
+	const dot = suffix.indexOf(".");
+	if (dot <= 0) return null;
+	const id = Number(suffix.slice(0, dot));
+	return Number.isInteger(id) && id > 0 ? id : null;
+}
+/** Every field row of one device scope, or a throw. */
+async function readScope(door, addonId, deviceId) {
+	return require_prefix_walk.loadPrefixed(door, DEVICE_SETTINGS_COLLECTION, scopeOf(addonId, deviceId));
+}
+function createDeviceSettingsStore(door, addonId) {
+	return {
+		async read(deviceId) {
+			try {
+				assertDeviceId(deviceId);
+				const value = await readScope(door, addonId, deviceId);
+				return Object.keys(value).length === 0 ? { kind: "absent" } : {
+					kind: "present",
+					value
+				};
+			} catch (err) {
+				return {
+					kind: "unreadable",
+					error: err instanceof Error ? err.message : String(err)
+				};
+			}
+		},
+		async readBatch(deviceIds) {
+			const out = /* @__PURE__ */ new Map();
+			if (deviceIds.length === 0) return out;
+			for (const id of deviceIds) out.set(id, {});
+			const wanted = new Set(deviceIds);
+			const all = await require_prefix_walk.loadPrefixed(door, DEVICE_SETTINGS_COLLECTION, `${addonId}:`);
+			for (const [suffix, value] of Object.entries(all)) {
+				const id = deviceIdOfSuffix(suffix);
+				if (id === null || !wanted.has(id)) continue;
+				const blob = out.get(id);
+				if (blob !== void 0) blob[suffix.slice(suffix.indexOf(".") + 1)] = value;
+			}
+			return out;
+		},
+		async listIds() {
+			const all = await require_prefix_walk.loadPrefixed(door, DEVICE_SETTINGS_COLLECTION, `${addonId}:`, () => null);
+			const ids = /* @__PURE__ */ new Set();
+			for (const suffix of Object.keys(all)) {
+				const id = deviceIdOfSuffix(suffix);
+				if (id !== null) ids.add(id);
+			}
+			return [...ids].toSorted((a, b) => a - b);
+		},
+		async merge(deviceId, patch) {
+			assertDeviceId(deviceId);
+			const scope = scopeOf(addonId, deviceId);
+			const records = [];
+			const removed = [];
+			for (const [key, value] of Object.entries(patch)) if (value === void 0) removed.push(`${scope}${key}`);
+			else records.push({
+				id: `${scope}${key}`,
+				data: {
+					addonId,
+					deviceId: String(deviceId),
+					key,
+					value
+				}
+			});
+			if (records.length === 0 && removed.length === 0) return;
+			await door.transact({ ops: [...removed.length > 0 ? [{
+				op: "deleteWhere",
+				collection: DEVICE_SETTINGS_COLLECTION,
+				filter: { whereIn: { id: removed } }
+			}] : [], ...records.length > 0 ? [{
+				op: "upsertMany",
+				collection: DEVICE_SETTINGS_COLLECTION,
+				conflict: ["id"],
+				records
+			}] : []] });
+		},
+		async clear(deviceId) {
+			assertDeviceId(deviceId);
+			const range = require_prefix_range.prefixRange(scopeOf(addonId, deviceId));
+			if (range === null) throw new Error(`device settings: no id range for addon "${addonId}"`);
+			await door.deleteWhere({
+				collection: DEVICE_SETTINGS_COLLECTION,
+				filter: { whereBetween: { id: [range.lo, range.hi] } }
+			});
+		}
+	};
+}
+/** The `Record` form of a read: `{}` for a store that answered with no row, a THROW for one that did not. */
+async function readDeviceOrThrow(store, deviceId) {
+	const read = await store.read(deviceId);
+	switch (read.kind) {
+		case "present": return { ...read.value };
+		case "absent": return {};
+		case "unreadable": throw new Error(`device settings of ${String(deviceId)} could not be read: ${read.error}`);
+	}
+}
+/**
+* Remove a device's rows for EVERY addon, in one statement (D865's central
+* delete). Matched on the device id each row carries, so no addon needs a
+* handler. Returns how many rows went.
+*/
+async function clearDeviceSettings(door, deviceId) {
+	assertDeviceId(deviceId);
+	const { deleted } = await door.deleteWhere({
+		collection: DEVICE_SETTINGS_COLLECTION,
+		filter: { where: { deviceId: String(deviceId) } }
+	});
+	return deleted;
+}
+/** Rows one page of the scope walk asks for. */
+var SCOPE_PAGE_ROWS = 1e3;
+/** Pages the walk may take before it refuses (a bound, never a silent cut). */
+var SCOPE_PAGE_BUDGET = 512;
+/** Above every id: ids are ASCII. */
+var SCOPE_TAIL = "";
+/**
+* Every (addon, device) pair holding rows, across all addons - the admin
+* "deleted devices" listing. A keyset walk by primary key (never one query cut
+* at a row cap): a read that cannot be completed THROWS.
+*/
+async function listDeviceSettingsScopes(door) {
+	const seen = /* @__PURE__ */ new Map();
+	let cursor = "";
+	for (let page = 0;; page++) {
+		if (page >= SCOPE_PAGE_BUDGET) throw new Error(`device settings scopes: more than ${SCOPE_PAGE_BUDGET} pages - refusing a partial list`);
+		const rows = await door.query({
+			collection: DEVICE_SETTINGS_COLLECTION,
+			filter: {
+				whereBetween: { id: [cursor, SCOPE_TAIL] },
+				orderBy: {
+					field: "id",
+					direction: "asc"
+				},
+				limit: SCOPE_PAGE_ROWS
+			}
+		});
+		for (const row of rows) {
+			const addonId = row.data["addonId"];
+			const raw = row.data["deviceId"];
+			if (typeof addonId !== "string" || typeof raw !== "string") continue;
+			const deviceId = Number(raw);
+			if (!Number.isInteger(deviceId) || deviceId <= 0) continue;
+			seen.set(`${addonId}:${deviceId}`, {
+				deviceId,
+				addonId
+			});
+		}
+		const last = rows[rows.length - 1];
+		if (rows.length < SCOPE_PAGE_ROWS || last === void 0) return [...seen.values()];
+		if (last.id === cursor) throw new Error(`device settings scopes: no progress at "${last.id}"`);
+		cursor = last.id;
+	}
+}
+//#endregion
 //#region src/builtins/device-manager/migration-refused.ts
 /**
 * A migration step that REFUSED with nothing moved.
@@ -5788,41 +5937,16 @@ async function cleanupDeletedDevicesData(deps, input) {
 		unreachable: [...unreachable]
 	};
 }
-/** The settings-store collection every addon's per-device settings share. */
-var ADDON_DEVICE_SETTINGS_COLLECTION = "addon-device-settings";
-/** The engine's hard ceiling on one read; a result this long may be a truncated one. */
-var SCOPE_READ_LIMIT = 2e4;
 /** Scope access over the settings store; undefined when the store is unavailable. */
 function settingsScopes(store) {
 	if (store === void 0) return void 0;
+	const door = {
+		query: (input) => store.query.query(input),
+		deleteWhere: (input) => store.deleteWhere.mutate(input)
+	};
 	return {
-		list: async () => {
-			const rows = await store.query.query({
-				collection: ADDON_DEVICE_SETTINGS_COLLECTION,
-				filter: { limit: SCOPE_READ_LIMIT }
-			});
-			if (rows.length >= SCOPE_READ_LIMIT) throw new Error(`the settings read returned ${rows.length} rows — possibly truncated`);
-			const seen = /* @__PURE__ */ new Map();
-			for (const row of rows) {
-				const addonId = row.data["addonId"];
-				const raw = row.data["deviceId"];
-				if (typeof addonId !== "string" || typeof raw !== "string") continue;
-				const deviceId = Number(raw);
-				if (!Number.isInteger(deviceId) || deviceId <= 0) continue;
-				seen.set(`${addonId}:${deviceId}`, {
-					deviceId,
-					addonId
-				});
-			}
-			return [...seen.values()];
-		},
-		clear: async (deviceId) => {
-			const { deleted } = await store.deleteWhere.mutate({
-				collection: ADDON_DEVICE_SETTINGS_COLLECTION,
-				filter: { where: { deviceId: String(deviceId) } }
-			});
-			return deleted;
-		}
+		list: () => listDeviceSettingsScopes(door),
+		clear: (deviceId) => clearDeviceSettings(door, deviceId)
 	};
 }
 //#endregion
@@ -6267,11 +6391,7 @@ function removalSteps(pctx, deviceId, providerAddonId, deletedAt) {
 			run: async () => {
 				const api = pctx.host.ctx.api?.settingsStore;
 				if (api === void 0) throw new Error("settings-store api not available");
-				const { deleted } = await api.deleteWhere.mutate({
-					collection: "addon-device-settings",
-					filter: { where: { deviceId: String(deviceId) } }
-				});
-				return deleted;
+				return clearDeviceSettings({ deleteWhere: (input) => api.deleteWhere.mutate(input) }, deviceId);
 			}
 		},
 		{
@@ -11089,5 +11209,7 @@ var DeviceManagerAddon = class extends require_dist.BaseAddon {
 //#endregion
 exports.DeviceManagerAddon = DeviceManagerAddon;
 exports.default = DeviceManagerAddon;
+exports.createDeviceSettingsStore = createDeviceSettingsStore;
 exports.mergeAggregates = mergeAggregates;
+exports.readDeviceOrThrow = readDeviceOrThrow;
 exports.setWrapperActive = setWrapperActive;

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,7 @@
-import { Bt as enumerateItemArrayFields, C as DAY_NAMES, Dn as parseStreamParamsFormPatch, Dr as errMsg, Er as DeviceType, Et as createDeviceExtensionProvider, Ft as deviceExtensionCapability, Ir as SECRET_CLEAR, It as deviceManagerCapability, Lr as WELL_KNOWN_TAB_MAP, Lt as deviceStateCapability, N as FieldClaimModeSchema, Or as BaseAddon, P as FieldClaimSchema, Qr as isDeviceConfigCap, Rt as deviceStatusCapability, Tr as DeviceRole, Un as runtimeStatePolicyFor, Ur as collectZodSecretPaths, V as MINUTES_PER_DAY, Vt as enumerateSchemaFields, Wt as expandContainer, Xt as formatMinutes, Yn as siteZoneKey, _i as transformSecretWrite, c as CAMERA_SWITCH_ORDER, di as resolveSecretMarkers, ei as isKeychainStoredField, gi as toSecretFieldView, gt as canonicalIconKey, j as DeviceStatusSchema, jt as defineExtensionSlotProvider, ln as legacyAutoLinkIds, mi as sleep$1, ni as isSecretMarker, pi as secretTreeFromPaths, pn as locationIconKey, pt as buildStreamParamsConfigSchema, q as STREAM_PROFILE_META, r as ALL_CAPABILITY_DEFINITIONS, ri as isSecretMarkerLike, ti as isSecretClear, u as CAP_NAMES_WITH_STATUS, vi as userError, wn as normalizeUnit, wr as DeviceFeature, yi as EventCategory } from "../../dist-yI6kF6r6.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-UsVtLOT0.mjs";
+import { Ar as errMsg, Br as WELL_KNOWN_TAB_MAP, Bt as deviceStatusCapability, C as DAY_NAMES, Dr as DeviceFeature, En as normalizeUnit, Gn as runtimeStatePolicyFor, Ht as enumerateItemArrayFields, Kr as collectZodSecretPaths, Kt as expandContainer, Lt as deviceExtensionCapability, N as FieldClaimModeSchema, Nt as defineExtensionSlotProvider, Or as DeviceRole, Ot as createDeviceExtensionProvider, P as FieldClaimSchema, Qt as formatMinutes, Rt as deviceManagerCapability, Si as EventCategory, Ut as enumerateSchemaFields, V as MINUTES_PER_DAY, Y as STREAM_PROFILE_META, Zn as siteZoneKey, _i as sleep$1, ai as isSecretMarker, bi as transformSecretWrite, c as CAMERA_SWITCH_ORDER, dn as legacyAutoLinkIds, gi as secretTreeFromPaths, hn as locationIconKey, ht as buildStreamParamsConfigSchema, ii as isSecretClear, j as DeviceStatusSchema, jr as BaseAddon, kn as parseStreamParamsFormPatch, kr as DeviceType, mi as resolveSecretMarkers, oi as isSecretMarkerLike, r as ALL_CAPABILITY_DEFINITIONS, ri as isKeychainStoredField, ti as isDeviceConfigCap, u as CAP_NAMES_WITH_STATUS, vt as canonicalIconKey, xi as userError, yi as toSecretFieldView, zr as SECRET_CLEAR, zt as deviceStateCapability } from "../../dist-BWvkuc31.mjs";
+import { t as prefixRange } from "../../prefix-range-Dl0znowN.mjs";
+import { t as loadPrefixed } from "../../prefix-walk-DAOBSyH1.mjs";
+import { r as purgeRetiredSettingsRows } from "../../retired-settings-keys-Bhwe4ymb.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
@@ -2725,30 +2727,13 @@ async function listPersistedByAddon(pctx, input) {
 	return saved;
 }
 /**
-* Every requested device's persisted config, in as few store round trips as the
-* settings view allows.
-*
-* One call when the view can batch (the in-process door, which keys
-* `addon-device-settings` by `<addonId>:<deviceId>.` and answers a whole addon
-* with one indexed range scan). Otherwise the per-device form, unchanged — a
-* fallback and not a silent downgrade: `readDeviceStoreBatch` is optional
-* precisely because a forked addon's view has nothing to batch, and refusing
-* would break the only implementation that cannot comply.
-*
-* A read that THROWS yields `{}` for that device rather than failing the whole
-* listing: one unreadable settings row must not make the fleet unlistable.
+* Every requested device's persisted config in ONE store round trip (D870). A
+* store that cannot be asked THROWS and the listing fails with it: an
+* unreadable row is not a device with no settings (D49).
 */
 async function readDeviceConfigs(pctx, deviceIds) {
 	if (deviceIds.length === 0) return /* @__PURE__ */ new Map();
-	const batch = pctx.settings.readDeviceStoreBatch;
-	if (batch !== void 0) return batch.call(pctx.settings, deviceIds);
-	const out = /* @__PURE__ */ new Map();
-	for (const id of deviceIds) try {
-		out.set(id, await pctx.settings.readDeviceStore(id));
-	} catch {
-		out.set(id, {});
-	}
-	return out;
+	return pctx.settings.readDeviceStoreBatch(deviceIds);
 }
 async function listAll(pctx, input) {
 	const ownerFilter = Reflect.get(input, "addonId");
@@ -4851,6 +4836,170 @@ function createDeviceManagerExtensionProvider(pctx) {
 	});
 }
 //#endregion
+//#region src/kernel/device-settings-store.ts
+/** The collection every addon's per-device settings share. Named nowhere else. */
+var DEVICE_SETTINGS_COLLECTION = "addon-device-settings";
+function scopeOf(addonId, deviceId) {
+	return `${addonId}:${String(deviceId)}.`;
+}
+function assertDeviceId(deviceId) {
+	if (!Number.isInteger(deviceId) || deviceId <= 0) throw new Error(`device settings: "${String(deviceId)}" is not a device id`);
+}
+function deviceIdOfSuffix(suffix) {
+	const dot = suffix.indexOf(".");
+	if (dot <= 0) return null;
+	const id = Number(suffix.slice(0, dot));
+	return Number.isInteger(id) && id > 0 ? id : null;
+}
+/** Every field row of one device scope, or a throw. */
+async function readScope(door, addonId, deviceId) {
+	return loadPrefixed(door, DEVICE_SETTINGS_COLLECTION, scopeOf(addonId, deviceId));
+}
+function createDeviceSettingsStore(door, addonId) {
+	return {
+		async read(deviceId) {
+			try {
+				assertDeviceId(deviceId);
+				const value = await readScope(door, addonId, deviceId);
+				return Object.keys(value).length === 0 ? { kind: "absent" } : {
+					kind: "present",
+					value
+				};
+			} catch (err) {
+				return {
+					kind: "unreadable",
+					error: err instanceof Error ? err.message : String(err)
+				};
+			}
+		},
+		async readBatch(deviceIds) {
+			const out = /* @__PURE__ */ new Map();
+			if (deviceIds.length === 0) return out;
+			for (const id of deviceIds) out.set(id, {});
+			const wanted = new Set(deviceIds);
+			const all = await loadPrefixed(door, DEVICE_SETTINGS_COLLECTION, `${addonId}:`);
+			for (const [suffix, value] of Object.entries(all)) {
+				const id = deviceIdOfSuffix(suffix);
+				if (id === null || !wanted.has(id)) continue;
+				const blob = out.get(id);
+				if (blob !== void 0) blob[suffix.slice(suffix.indexOf(".") + 1)] = value;
+			}
+			return out;
+		},
+		async listIds() {
+			const all = await loadPrefixed(door, DEVICE_SETTINGS_COLLECTION, `${addonId}:`, () => null);
+			const ids = /* @__PURE__ */ new Set();
+			for (const suffix of Object.keys(all)) {
+				const id = deviceIdOfSuffix(suffix);
+				if (id !== null) ids.add(id);
+			}
+			return [...ids].toSorted((a, b) => a - b);
+		},
+		async merge(deviceId, patch) {
+			assertDeviceId(deviceId);
+			const scope = scopeOf(addonId, deviceId);
+			const records = [];
+			const removed = [];
+			for (const [key, value] of Object.entries(patch)) if (value === void 0) removed.push(`${scope}${key}`);
+			else records.push({
+				id: `${scope}${key}`,
+				data: {
+					addonId,
+					deviceId: String(deviceId),
+					key,
+					value
+				}
+			});
+			if (records.length === 0 && removed.length === 0) return;
+			await door.transact({ ops: [...removed.length > 0 ? [{
+				op: "deleteWhere",
+				collection: DEVICE_SETTINGS_COLLECTION,
+				filter: { whereIn: { id: removed } }
+			}] : [], ...records.length > 0 ? [{
+				op: "upsertMany",
+				collection: DEVICE_SETTINGS_COLLECTION,
+				conflict: ["id"],
+				records
+			}] : []] });
+		},
+		async clear(deviceId) {
+			assertDeviceId(deviceId);
+			const range = prefixRange(scopeOf(addonId, deviceId));
+			if (range === null) throw new Error(`device settings: no id range for addon "${addonId}"`);
+			await door.deleteWhere({
+				collection: DEVICE_SETTINGS_COLLECTION,
+				filter: { whereBetween: { id: [range.lo, range.hi] } }
+			});
+		}
+	};
+}
+/** The `Record` form of a read: `{}` for a store that answered with no row, a THROW for one that did not. */
+async function readDeviceOrThrow(store, deviceId) {
+	const read = await store.read(deviceId);
+	switch (read.kind) {
+		case "present": return { ...read.value };
+		case "absent": return {};
+		case "unreadable": throw new Error(`device settings of ${String(deviceId)} could not be read: ${read.error}`);
+	}
+}
+/**
+* Remove a device's rows for EVERY addon, in one statement (D865's central
+* delete). Matched on the device id each row carries, so no addon needs a
+* handler. Returns how many rows went.
+*/
+async function clearDeviceSettings(door, deviceId) {
+	assertDeviceId(deviceId);
+	const { deleted } = await door.deleteWhere({
+		collection: DEVICE_SETTINGS_COLLECTION,
+		filter: { where: { deviceId: String(deviceId) } }
+	});
+	return deleted;
+}
+/** Rows one page of the scope walk asks for. */
+var SCOPE_PAGE_ROWS = 1e3;
+/** Pages the walk may take before it refuses (a bound, never a silent cut). */
+var SCOPE_PAGE_BUDGET = 512;
+/** Above every id: ids are ASCII. */
+var SCOPE_TAIL = "";
+/**
+* Every (addon, device) pair holding rows, across all addons - the admin
+* "deleted devices" listing. A keyset walk by primary key (never one query cut
+* at a row cap): a read that cannot be completed THROWS.
+*/
+async function listDeviceSettingsScopes(door) {
+	const seen = /* @__PURE__ */ new Map();
+	let cursor = "";
+	for (let page = 0;; page++) {
+		if (page >= SCOPE_PAGE_BUDGET) throw new Error(`device settings scopes: more than ${SCOPE_PAGE_BUDGET} pages - refusing a partial list`);
+		const rows = await door.query({
+			collection: DEVICE_SETTINGS_COLLECTION,
+			filter: {
+				whereBetween: { id: [cursor, SCOPE_TAIL] },
+				orderBy: {
+					field: "id",
+					direction: "asc"
+				},
+				limit: SCOPE_PAGE_ROWS
+			}
+		});
+		for (const row of rows) {
+			const addonId = row.data["addonId"];
+			const raw = row.data["deviceId"];
+			if (typeof addonId !== "string" || typeof raw !== "string") continue;
+			const deviceId = Number(raw);
+			if (!Number.isInteger(deviceId) || deviceId <= 0) continue;
+			seen.set(`${addonId}:${deviceId}`, {
+				deviceId,
+				addonId
+			});
+		}
+		const last = rows[rows.length - 1];
+		if (rows.length < SCOPE_PAGE_ROWS || last === void 0) return [...seen.values()];
+		if (last.id === cursor) throw new Error(`device settings scopes: no progress at "${last.id}"`);
+		cursor = last.id;
+	}
+}
+//#endregion
 //#region src/builtins/device-manager/migration-refused.ts
 /**
 * A migration step that REFUSED with nothing moved.
@@ -5783,41 +5932,16 @@ async function cleanupDeletedDevicesData(deps, input) {
 		unreachable: [...unreachable]
 	};
 }
-/** The settings-store collection every addon's per-device settings share. */
-var ADDON_DEVICE_SETTINGS_COLLECTION = "addon-device-settings";
-/** The engine's hard ceiling on one read; a result this long may be a truncated one. */
-var SCOPE_READ_LIMIT = 2e4;
 /** Scope access over the settings store; undefined when the store is unavailable. */
 function settingsScopes(store) {
 	if (store === void 0) return void 0;
+	const door = {
+		query: (input) => store.query.query(input),
+		deleteWhere: (input) => store.deleteWhere.mutate(input)
+	};
 	return {
-		list: async () => {
-			const rows = await store.query.query({
-				collection: ADDON_DEVICE_SETTINGS_COLLECTION,
-				filter: { limit: SCOPE_READ_LIMIT }
-			});
-			if (rows.length >= SCOPE_READ_LIMIT) throw new Error(`the settings read returned ${rows.length} rows — possibly truncated`);
-			const seen = /* @__PURE__ */ new Map();
-			for (const row of rows) {
-				const addonId = row.data["addonId"];
-				const raw = row.data["deviceId"];
-				if (typeof addonId !== "string" || typeof raw !== "string") continue;
-				const deviceId = Number(raw);
-				if (!Number.isInteger(deviceId) || deviceId <= 0) continue;
-				seen.set(`${addonId}:${deviceId}`, {
-					deviceId,
-					addonId
-				});
-			}
-			return [...seen.values()];
-		},
-		clear: async (deviceId) => {
-			const { deleted } = await store.deleteWhere.mutate({
-				collection: ADDON_DEVICE_SETTINGS_COLLECTION,
-				filter: { where: { deviceId: String(deviceId) } }
-			});
-			return deleted;
-		}
+		list: () => listDeviceSettingsScopes(door),
+		clear: (deviceId) => clearDeviceSettings(door, deviceId)
 	};
 }
 //#endregion
@@ -6262,11 +6386,7 @@ function removalSteps(pctx, deviceId, providerAddonId, deletedAt) {
 			run: async () => {
 				const api = pctx.host.ctx.api?.settingsStore;
 				if (api === void 0) throw new Error("settings-store api not available");
-				const { deleted } = await api.deleteWhere.mutate({
-					collection: "addon-device-settings",
-					filter: { where: { deviceId: String(deviceId) } }
-				});
-				return deleted;
+				return clearDeviceSettings({ deleteWhere: (input) => api.deleteWhere.mutate(input) }, deviceId);
 			}
 		},
 		{
@@ -11082,4 +11202,4 @@ var DeviceManagerAddon = class extends BaseAddon {
 	}
 };
 //#endregion
-export { DeviceManagerAddon, DeviceManagerAddon as default, mergeAggregates, setWrapperActive as t };
+export { DeviceManagerAddon, DeviceManagerAddon as default, mergeAggregates, readDeviceOrThrow as n, setWrapperActive as r, createDeviceSettingsStore as t };

package/dist/builtins/device-manager/device-removal-hooks.d.ts

@@ -1,12 +1,3 @@
-/**
-* device-manager's side of `device-removal-hook` (D865): tell every implementer
-* a device was deleted, and answer the admin question "which stored data belongs
-* to devices that no longer exist?".
-*
-* Two entry points, one rule: **an implementer is told to delete only on a
-* recorded delete (a tombstone), or on an explicit operator confirm.** Nothing
-* here infers a deletion from a device being absent from a single read.
-*/
 import { type CleanupDeletedDevicesResult, type DeviceDataEntry, type DeviceRemovedInput, type DeviceRemovedResult, type IScopedLogger, type OrphanDeviceData, type SettingsStoreClient } from "@camstack/types";
 import type { RemovalCleanup, RemovalStep } from "./removal-cleanup.js";
 /** The capability name implementers register under. */
@@ -97,7 +88,5 @@ export interface CleanupDeps {
 export declare function cleanupDeletedDevicesData(deps: CleanupDeps, input: {
 	readonly confirm: boolean;
 }): Promise<CleanupDeletedDevicesResult>;
-/** The settings-store collection every addon's per-device settings share. */
-export declare const ADDON_DEVICE_SETTINGS_COLLECTION = "addon-device-settings";
 /** Scope access over the settings store; undefined when the store is unavailable. */
 export declare function settingsScopes(store: Pick<SettingsStoreClient, "query" | "deleteWhere"> | undefined): SettingsScopeAccess | undefined;

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BOWdLjoK.js");
+const require_dist = require("../../dist-BiTCcaf-.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Or as BaseAddon, mn as logDestinationCapability } from "../../dist-yI6kF6r6.mjs";
+import { gn as logDestinationCapability, jr as BaseAddon } from "../../dist-BWvkuc31.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;