@camstack/system 1.2.439 → 1.2.441

package/dist/builtins/keychain/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BOWdLjoK.js");
-const require_device_ca = require("../../device-ca-DHG9OW2m.js");
-const require_constants = require("../../constants-BRsjQwi-.js");
+const require_dist = require("../../dist-BiTCcaf-.js");
+const require_device_ca = require("../../device-ca-196DAEZT.js");
+const require_constants = require("../../constants-UojhAJcm.js");
 const require_platform_key_source = require("../../platform-key-source-Di7HrlGR.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -388,6 +388,8 @@ var NOT_INITIALIZED = {
 	state: "locked",
 	reason: "not-initialized"
 };
+/** The only refs `importSecret` accepts: a camera's restream tokens (D870 migration). */
+var IMPORTABLE_REF = /^secret:\/\/stream-broker\/device\/[0-9]+\/rtspTokens$/;
 var KeychainService = class {
 	deps;
 	unlock = NOT_INITIALIZED;
@@ -782,6 +784,17 @@ var KeychainService = class {
 		const ref = SYSTEM_HELD_SECRET_REFS[name];
 		return this.put(require_device_ca.SYSTEM_SECRET_OWNER, ref, value, `user:${userId}`);
 	}
+	/**
+	* An operator tool stores a carried-over value at an addon's own ref (D870).
+	* Stored under the ref's owner, audited as the operator.
+	*/
+	async importSecret(userId, ref, value) {
+		if (!IMPORTABLE_REF.test(ref)) throw new Error(`keychain: "${ref}" is not an importable ref (restream tokens only)`);
+		if ((await this.deps.repo.getSecrets([ref])).has(ref)) throw new Error(`keychain: a value is already stored at ${ref} - import refuses to overwrite`);
+		const parts = require_dist.parseSecretRef(ref);
+		if (parts === null) throw new Error(`keychain: "${ref}" is not a secret ref`);
+		return this.put(parts.owner, ref, value, `user:${userId}`);
+	}
 	async listAudit(limit) {
 		return this.deps.repo.listAudit(limit);
 	}
@@ -1670,24 +1683,28 @@ async function blobsFor(door, owner, scope) {
 	switch (scope.kind) {
 		case "global":
 		case "node": {
-			const forked = await door.get({
+			const legacyBlob = await door.get({
 				namespace: owner,
 				collection: "addon-settings",
 				key: "root"
 			});
-			const inProcess = await prefixRows(door, "addon-settings", `${owner}.`);
-			if (inProcess === null) return null;
-			return [forked, ...inProcess];
+			const rows = await prefixRows(door, "addon-settings", `${owner}.`);
+			return rows === null ? null : [legacyBlob, ...rows];
 		}
 		case "device": {
-			const forked = await door.get({
+			const legacyBlob = await door.get({
 				namespace: owner,
 				collection: "addon-devices",
 				key: String(scope.deviceId)
 			});
-			const doorRows = await prefixRows(door, "addon-device-settings", `device-manager:${scope.deviceId}.`);
-			if (doorRows === null) return null;
-			return [forked, ...doorRows];
+			const own = await prefixRows(door, "addon-device-settings", `${owner}:${scope.deviceId}.`);
+			const connection = owner === "device-manager" ? [] : await prefixRows(door, "addon-device-settings", `device-manager:${scope.deviceId}.`);
+			if (own === null || connection === null) return null;
+			return [
+				legacyBlob,
+				...own,
+				...connection
+			];
 		}
 		case "integration": return (await door.query({
 			collection: "integration_settings",
@@ -1861,6 +1878,7 @@ var KeychainAddon = class extends require_dist.BaseAddon {
 				listAudit: (input) => service.listAudit(input.limit ?? 100),
 				reveal: (input) => service.reveal(input.caller.userId, input.ref),
 				setSystemSecret: (input) => service.setSystemSecret(input.caller.userId, input.name, input.value),
+				importSecret: (input) => service.importSecret(input.caller.userId, input.ref, input.value),
 				deleteOrphans: (input) => service.deleteOrphans(input.caller.userId, input.refs),
 				rotateMasterKey: (input) => service.rotateMasterKey(input.caller.userId),
 				purgeRetiredKeys: async (input) => ({ purged: await service.purgeRetiredKeys(input.caller.userId) }),

package/dist/builtins/keychain/index.mjs

@@ -1,6 +1,6 @@
-import { L as KEYCHAIN_RESET_TRIGGER_ACTOR, Or as BaseAddon, Xr as formatSecretScope, ai as normalizeSecretOwner, ci as parseSecretRef, cn as keychainCapability, sn as keychainAdminCapability, yi as EventCategory } from "../../dist-yI6kF6r6.mjs";
-import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-46BUsWD1.mjs";
-import { a as MESH_CA_KEY_REF } from "../../constants-B92BjObl.mjs";
+import { $r as formatSecretScope, L as KEYCHAIN_RESET_TRIGGER_ACTOR, Si as EventCategory, ci as normalizeSecretOwner, di as parseSecretRef, jr as BaseAddon, ln as keychainAdminCapability, un as keychainCapability } from "../../dist-BWvkuc31.mjs";
+import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-D8Ri9TVz.mjs";
+import { a as MESH_CA_KEY_REF } from "../../constants-DJILnUSb.mjs";
 import { n as getPlatformKeychainKey } from "../../platform-key-source-BWlq0jjn.mjs";
 import { createCipheriv, createDecipheriv, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { restrictDirToOwnerSync, restrictFileToOwnerSync, writeOwnerOnlyFileSync } from "@camstack/types/node";
@@ -382,6 +382,8 @@ var NOT_INITIALIZED = {
 	state: "locked",
 	reason: "not-initialized"
 };
+/** The only refs `importSecret` accepts: a camera's restream tokens (D870 migration). */
+var IMPORTABLE_REF = /^secret:\/\/stream-broker\/device\/[0-9]+\/rtspTokens$/;
 var KeychainService = class {
 	deps;
 	unlock = NOT_INITIALIZED;
@@ -776,6 +778,17 @@ var KeychainService = class {
 		const ref = SYSTEM_HELD_SECRET_REFS[name];
 		return this.put(SYSTEM_SECRET_OWNER, ref, value, `user:${userId}`);
 	}
+	/**
+	* An operator tool stores a carried-over value at an addon's own ref (D870).
+	* Stored under the ref's owner, audited as the operator.
+	*/
+	async importSecret(userId, ref, value) {
+		if (!IMPORTABLE_REF.test(ref)) throw new Error(`keychain: "${ref}" is not an importable ref (restream tokens only)`);
+		if ((await this.deps.repo.getSecrets([ref])).has(ref)) throw new Error(`keychain: a value is already stored at ${ref} - import refuses to overwrite`);
+		const parts = parseSecretRef(ref);
+		if (parts === null) throw new Error(`keychain: "${ref}" is not a secret ref`);
+		return this.put(parts.owner, ref, value, `user:${userId}`);
+	}
 	async listAudit(limit) {
 		return this.deps.repo.listAudit(limit);
 	}
@@ -1664,24 +1677,28 @@ async function blobsFor(door, owner, scope) {
 	switch (scope.kind) {
 		case "global":
 		case "node": {
-			const forked = await door.get({
+			const legacyBlob = await door.get({
 				namespace: owner,
 				collection: "addon-settings",
 				key: "root"
 			});
-			const inProcess = await prefixRows(door, "addon-settings", `${owner}.`);
-			if (inProcess === null) return null;
-			return [forked, ...inProcess];
+			const rows = await prefixRows(door, "addon-settings", `${owner}.`);
+			return rows === null ? null : [legacyBlob, ...rows];
 		}
 		case "device": {
-			const forked = await door.get({
+			const legacyBlob = await door.get({
 				namespace: owner,
 				collection: "addon-devices",
 				key: String(scope.deviceId)
 			});
-			const doorRows = await prefixRows(door, "addon-device-settings", `device-manager:${scope.deviceId}.`);
-			if (doorRows === null) return null;
-			return [forked, ...doorRows];
+			const own = await prefixRows(door, "addon-device-settings", `${owner}:${scope.deviceId}.`);
+			const connection = owner === "device-manager" ? [] : await prefixRows(door, "addon-device-settings", `device-manager:${scope.deviceId}.`);
+			if (own === null || connection === null) return null;
+			return [
+				legacyBlob,
+				...own,
+				...connection
+			];
 		}
 		case "integration": return (await door.query({
 			collection: "integration_settings",
@@ -1855,6 +1872,7 @@ var KeychainAddon = class extends BaseAddon {
 				listAudit: (input) => service.listAudit(input.limit ?? 100),
 				reveal: (input) => service.reveal(input.caller.userId, input.ref),
 				setSystemSecret: (input) => service.setSystemSecret(input.caller.userId, input.name, input.value),
+				importSecret: (input) => service.importSecret(input.caller.userId, input.ref, input.value),
 				deleteOrphans: (input) => service.deleteOrphans(input.caller.userId, input.refs),
 				rotateMasterKey: (input) => service.rotateMasterKey(input.caller.userId),
 				purgeRetiredKeys: async (input) => ({ purged: await service.purgeRetiredKeys(input.caller.userId) }),

package/dist/builtins/keychain/keychain-service.d.ts

@@ -96,6 +96,14 @@ export declare class KeychainService {
 		ref: string;
 		version: number;
 	}>;
+	/**
+	* An operator tool stores a carried-over value at an addon's own ref (D870).
+	* Stored under the ref's owner, audited as the operator.
+	*/
+	importSecret(userId: string, ref: string, value: string): Promise<{
+		ref: string;
+		version: number;
+	}>;
 	listAudit(limit: number): Promise<readonly KeychainAuditEntry[]>;
 	reveal(userId: string, ref: string): Promise<{
 		value: string;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BOWdLjoK.js");
+const require_dist = require("../../dist-BiTCcaf-.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Dr as errMsg, G as RecordingStatusSchema, Or as BaseAddon, W as RECORDING_SOURCE_CAMSTACK_ADDON, Wr as createEvent, yi as EventCategory } from "../../dist-yI6kF6r6.mjs";
+import { Ar as errMsg, G as RecordingStatusSchema, Si as EventCategory, W as RECORDING_SOURCE_CAMSTACK_ADDON, jr as BaseAddon, qr as createEvent } from "../../dist-BWvkuc31.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,10 +3,10 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BOWdLjoK.js");
+const require_dist = require("../../dist-BiTCcaf-.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_ms$1 = require("../../ms-LB3giGoU.js");
-const require_device_ca = require("../../device-ca-DHG9OW2m.js");
+const require_device_ca = require("../../device-ca-196DAEZT.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,8 +1,8 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { E as DEVICE_NONCE_TTL_MS, J as ScopedTokenSchema, Or as BaseAddon, Pt as deviceCredentialsCapability, T as DEVICE_ENROLLMENT_TTL_MS, X as SsoBridgeClaimsSchema, Yt as formatDeviceRevoker, a as ApiKeyRecordSchema, ar as userManagementCapability, dt as buildDeviceEnrollmentLink, ft as buildDeviceSignatureMessage, ot as authProviderCapability, tt as UserRecordSchema, vi as userError } from "../../dist-yI6kF6r6.mjs";
+import { E as DEVICE_NONCE_TTL_MS, It as deviceCredentialsCapability, Q as SsoBridgeClaimsSchema, T as DEVICE_ENROLLMENT_TTL_MS, X as ScopedTokenSchema, Zt as formatDeviceRevoker, a as ApiKeyRecordSchema, cr as userManagementCapability, ct as authProviderCapability, jr as BaseAddon, mt as buildDeviceSignatureMessage, pt as buildDeviceEnrollmentLink, rt as UserRecordSchema, xi as userError } from "../../dist-BWvkuc31.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { t as require_ms } from "../../ms-CgH2OFlD.mjs";
-import { _ as setProcessJwtSigningKey, a as importDevicePublicKey, c as rebuildDeviceCaCertificate, d as JWT_SIGNING_KEY_REF, g as processJwtSigningKey, h as loadJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, r as DEVICE_CA_SETTINGS_SECTION, s as loadDeviceCa, t as DEVICE_CA_FIELD, u as verifyDeviceSignature } from "../../device-ca-46BUsWD1.mjs";
+import { _ as setProcessJwtSigningKey, a as importDevicePublicKey, c as rebuildDeviceCaCertificate, d as JWT_SIGNING_KEY_REF, g as processJwtSigningKey, h as loadJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, r as DEVICE_CA_SETTINGS_SECTION, s as loadDeviceCa, t as DEVICE_CA_FIELD, u as verifyDeviceSignature } from "../../device-ca-D8Ri9TVz.mjs";
 import * as crypto$1 from "node:crypto";
 import { X509Certificate, createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BOWdLjoK.js");
-const require_hub_mdns_ciao = require("../../hub-mdns-ciao-D7S5AJRU.js");
+const require_dist = require("../../dist-BiTCcaf-.js");
+const require_hub_mdns_ciao = require("../../hub-mdns-ciao-DOBTq8qr.js");
 let zod = require("zod");
 let node_net = require("node:net");
 let node_os = require("node:os");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,5 +1,5 @@
-import { $t as isAppLinkBase, F as HUB_MDNS_SERVICE_TYPE, Fn as resolveAppConnections, Hn as resolveNotificationTapAddress, I as HUB_MDNS_TXT_KEYS, On as pickAppLinkHub, Or as BaseAddon, U as NetworkTunnelStartedDataSchema, _t as checkRoleAddress, fn as localNetworkCapability, l as CAMSTACK_APP_LINK_ORIGIN, nn as isDefaultAppConnectionEndpoint, sr as validateCustomAddress, yi as EventCategory, zn as resolveHubAddressRoles } from "../../dist-yI6kF6r6.mjs";
-import { P as readLanHttpState, a as storeUploadedCertificate, d as servedHttpsLeafFingerprint, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, r as regenerateCertificate, t as createCiaoPublisher, v as writeExtraSans, w as ensureTlsCert } from "../../hub-mdns-ciao-DGwVc2uh.mjs";
+import { An as pickAppLinkHub, F as HUB_MDNS_SERVICE_TYPE, I as HUB_MDNS_TXT_KEYS, Ln as resolveAppConnections, Si as EventCategory, U as NetworkTunnelStartedDataSchema, Vn as resolveHubAddressRoles, Wn as resolveNotificationTapAddress, in as isDefaultAppConnectionEndpoint, jr as BaseAddon, l as CAMSTACK_APP_LINK_ORIGIN, mn as localNetworkCapability, tn as isAppLinkBase, ur as validateCustomAddress, yt as checkRoleAddress } from "../../dist-BWvkuc31.mjs";
+import { P as readLanHttpState, a as storeUploadedCertificate, d as servedHttpsLeafFingerprint, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, r as regenerateCertificate, t as createCiaoPublisher, v as writeExtraSans, w as ensureTlsCert } from "../../hub-mdns-ciao-Cnd0bTB9.mjs";
 import { z } from "zod";
 import { isIP } from "node:net";
 import * as os$1 from "node:os";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BOWdLjoK.js");
+const require_dist = require("../../dist-BiTCcaf-.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Or as BaseAddon, mn as logDestinationCapability } from "../../dist-yI6kF6r6.mjs";
+import { gn as logDestinationCapability, jr as BaseAddon } from "../../dist-BWvkuc31.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BOWdLjoK.js");
+const require_dist = require("../../dist-BiTCcaf-.js");
 let node_fs_promises = require("node:fs/promises");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Dr as errMsg, In as resolveBucketMs, Jt as foldSnapshotByFunction, Nn as reducePoints, Or as BaseAddon, Wr as createEvent, bn as metricsProviderCapability, yi as EventCategory } from "../../dist-yI6kF6r6.mjs";
+import { Ar as errMsg, Fn as reducePoints, Rn as resolveBucketMs, Si as EventCategory, Sn as metricsProviderCapability, Xt as foldSnapshotByFunction, jr as BaseAddon, qr as createEvent } from "../../dist-BWvkuc31.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import * as os$1 from "node:os";
 import { platform } from "node:os";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BOWdLjoK.js");
+const require_dist = require("../../dist-BiTCcaf-.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_fs = require("node:fs");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM, r as __exportAll } from "../../chunk-CNf5ZN-e.mjs";
-import { An as platformProbeCapability, Dr as errMsg, Jr as emitReadiness, Kn as scoreRuntimes, Or as BaseAddon, yi as EventCategory, zt as enumerateInferenceDevices } from "../../dist-yI6kF6r6.mjs";
+import { Ar as errMsg, Jn as scoreRuntimes, Mn as platformProbeCapability, Si as EventCategory, Vt as enumerateInferenceDevices, Zr as emitReadiness, jr as BaseAddon } from "../../dist-BWvkuc31.mjs";
 import * as os$1 from "node:os";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BOWdLjoK.js");
+const require_dist = require("../../dist-BiTCcaf-.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Or as BaseAddon, yi as EventCategory } from "../../dist-yI6kF6r6.mjs";
+import { Si as EventCategory, jr as BaseAddon } from "../../dist-BWvkuc31.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BOWdLjoK.js");
+const require_dist = require("../../dist-BiTCcaf-.js");
 const require_snapshot_courtesy = require("../../snapshot-courtesy-D_C5-nC0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Dr as errMsg, Er as DeviceType, Mt as deriveBatteryPresence, Or as BaseAddon, Xn as snapshotCapability, ct as bareAddonId, ii as nodePin, lt as batteryCapability, rr as streamQualityLabel, s as BatteryStatusSchema, wr as DeviceFeature, yi as EventCategory, yn as memoizePinnedFfmpeg } from "../../dist-yI6kF6r6.mjs";
+import { Ar as errMsg, Dr as DeviceFeature, Pt as deriveBatteryPresence, Qn as snapshotCapability, Si as EventCategory, dt as batteryCapability, jr as BaseAddon, kr as DeviceType, or as streamQualityLabel, s as BatteryStatusSchema, si as nodePin, ut as bareAddonId, xn as memoizePinnedFfmpeg } from "../../dist-BWvkuc31.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg } from "../../snapshot-courtesy-CyFs1M3I.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BOWdLjoK.js");
+const require_dist = require("../../dist-BiTCcaf-.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { Or as BaseAddon, qt as filesystemBrowseCapability, tr as storageProviderCapability } from "../../dist-yI6kF6r6.mjs";
+import { Yt as filesystemBrowseCapability, ir as storageProviderCapability, jr as BaseAddon } from "../../dist-BWvkuc31.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/sqlite-storage/index.js

@@ -4,7 +4,7 @@ Object.defineProperties(exports, {
 });
 require("../../chunk-Cek0wNdY.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./filesystem-storage.addon.js");
-const require_wal_maintenance = require("../../wal-maintenance-DEL_jeG0.js");
+const require_wal_maintenance = require("../../wal-maintenance-CgZTNWAz.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./sqlite-settings.addon.js");
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {

package/dist/builtins/sqlite-storage/index.mjs

@@ -1,5 +1,5 @@
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./filesystem-storage.addon.mjs";
-import { A as SQLITE_PAGE_CACHE_CEILING_KIB, B as sqliteEngineStorm, D as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, F as SQLITE_PROFILE_REPORT_FLOOR_MS, I as SQLITE_PROFILE_REPORT_INTERVAL_MS, L as SQLITE_PROFILE_TOP_N, M as sqliteMmapSizeFor, N as sqlitePageCacheKibFor, O as SQLITE_MMAP_CEILING_BYTES, P as SQLITE_ENGINE_STORM_WALL_SHARE, R as SQLITE_SLOW_CALL_MS, a as WalMaintenance, c as SqliteSettingsBackend, i as WAL_MAINTENANCE_INTERVAL_MS, j as SQLITE_PAGE_CACHE_FLOOR_KIB, k as SQLITE_MMAP_FLOOR_BYTES, n as WAL_HIGH_WATER_BYTES, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, z as SqliteOpProfiler } from "../../wal-maintenance-xsvdT5Go.mjs";
+import { A as SQLITE_PAGE_CACHE_FLOOR_KIB, D as SQLITE_MMAP_CEILING_BYTES, E as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, F as SQLITE_PROFILE_REPORT_INTERVAL_MS, I as SQLITE_PROFILE_TOP_N, L as SQLITE_SLOW_CALL_MS, M as sqlitePageCacheKibFor, N as SQLITE_ENGINE_STORM_WALL_SHARE, O as SQLITE_MMAP_FLOOR_BYTES, P as SQLITE_PROFILE_REPORT_FLOOR_MS, R as SqliteOpProfiler, a as WalMaintenance, c as SqliteSettingsBackend, i as WAL_MAINTENANCE_INTERVAL_MS, j as sqliteMmapSizeFor, k as SQLITE_PAGE_CACHE_CEILING_KIB, n as WAL_HIGH_WATER_BYTES, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, z as sqliteEngineStorm } from "../../wal-maintenance-B57SAp4a.mjs";
 import { SqliteSettingsAddon } from "./sqlite-settings.addon.mjs";
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {

package/dist/builtins/sqlite-storage/sqlite-settings-backend.d.ts

@@ -167,6 +167,8 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
 	*  the structured schema owns. Routes set/get/insert/update/query to
 	*  typed columns. Every collection MUST be declared here before use. */
 	private readonly declaredCollections;
+	/** Tables an addon declared since THIS process started - a running addon claims them. */
+	private readonly declaredThisBoot;
 	private readonly runtimeDefaults;
 	/**
 	* Canonical key/value collections — declared with a `(id TEXT PK,
@@ -193,6 +195,23 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
 	private readonly options;
 	constructor(dbPath: string, runtimeDefaults?: Record<string, unknown>, logger?: IScopedLogger, options?: SqliteSettingsBackendOptions);
 	initialize(): Promise<void>;
+	/**
+	* The declaration a READ needs, or `null` when the table does not exist.
+	*
+	* A per-addon scoped canonical table (`<addonId>:addon-settings`, ...) is
+	* auto-declared on first use, and that used to include a READ: asking
+	* `count` or `get` about a scoped name that was never written CREATED the
+	* table. A read of a table nobody wrote is "absent" (D870), and creating an
+	* empty table per probed name is how an enumeration litters the database.
+	*/
+	private declaredForRead;
+	/**
+	* Per-addon tables the runner used to keep (`<addonId>:addon-devices`, D870).
+	* Nothing writes them any more; they stay READABLE, by their old name, until
+	* the migration's drop phase removes them.
+	*/
+	private static readonly LEGACY_SCOPED_KV_COLLECTIONS;
+	private declareLegacyScopedKv;
 	private requireDeclared;
 	/**
 	* Decode a single column value off a SQLite row into the JS shape the
@@ -392,13 +411,8 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
 	getAllDevice(deviceId: string): Record<string, unknown>;
 	/** Set a device setting */
 	setDevice(deviceId: string, key: string, value: unknown): void;
-	getAddonDevice(addonId: string, deviceId: string): Record<string, unknown>;
-	setAddonDevice(addonId: string, deviceId: string, values: Record<string, unknown>): void;
-	clearAddonDevice(addonId: string, deviceId: string): void;
-	private static readonly LEGACY_RUNTIME_STATE_ADDON_ID;
 	/**
-	* The device's whole cap-slice map. Canonical row first, legacy prefix as the
-	* fallback. `{}` — never null — when the device has never persisted a slice,
+	* The device's whole cap-slice map. `{}` — never null — when the device has never persisted a slice,
 	* because every caller treats the result as a cap map to iterate.
 	*/
 	getDeviceRuntimeState(deviceId: string): Record<string, unknown>;
@@ -408,7 +422,7 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
 	* slice the durability policy has since stopped persisting.
 	*/
 	setDeviceRuntimeState(deviceId: string, blob: Record<string, unknown>): void;
-	/** Forget the device's runtime state in BOTH stores (device removal). */
+	/** Forget the device's runtime state (device removal). */
 	clearDeviceRuntimeState(deviceId: string): void;
 	/** Seed system-settings with runtime defaults (first boot) */
 	private seedDefaults;
@@ -421,6 +435,23 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
 	/** Which file this backend serves. */
 	getDatabaseId(): DataStoreDatabase;
 	/**
+	* Every table of this file with rows and size. READ-ONLY: nothing is created,
+	* and no declaration is consulted or changed.
+	*/
+	listTables(ownerPrefix?: string): readonly {
+		name: string;
+		owner: string | null;
+		rows: number;
+		bytes: number | null;
+		declaredThisBoot: boolean;
+	}[];
+	/**
+	* Drop one table nobody owns (D870 migration, one-shot). Refuses a canonical
+	* or engine table, one a running addon declared since boot, a table that is
+	* not there, and a row count other than the one the caller stated.
+	*/
+	dropTable(name: string, expectRows: number): number;
+	/**
 	* The tables this file's own `_collection_declarations` names — the
 	* placement authority (D851). Read from DISK, not from memory, so a table
 	* created and declared by an earlier life of the process still counts.

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BOWdLjoK.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-CyQ7uvta.js");
-const require_wal_maintenance = require("../../wal-maintenance-DEL_jeG0.js");
+const require_dist = require("../../dist-BiTCcaf-.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-D_VwZiDt.js");
+const require_wal_maintenance = require("../../wal-maintenance-CgZTNWAz.js");
 const require_sqlite_snapshot_protocol = require("../../sqlite-snapshot-protocol-B9OndqZv.js");
 const require_wal_checkpoint_policy = require("../../wal-checkpoint-policy-d2z2qPqx.js");
 let node_fs_promises = require("node:fs/promises");
@@ -1204,6 +1204,68 @@ var PlacementRouter = class {
 	}
 };
 //#endregion
+//#region src/builtins/sqlite-storage/storage-admin-provider.ts
+/**
+* The `storage-admin` provider of the SQLite engine (D870): the operator's
+* maintenance reach into the settings database - list its tables, drop one that
+* nothing owns any more. Every call is logged with its table and counts.
+*
+* `dropCollection` is a one-shot of the D870 migration: remove it, and the
+* capability's method, once the last hub ran `migrate-device-store.ts --drop`.
+*/
+var StorageAdminProvider = class {
+	backend;
+	logger;
+	installedOwners;
+	constructor(backend, logger, installedOwners) {
+		this.backend = backend;
+		this.logger = logger;
+		this.installedOwners = installedOwners;
+	}
+	/** May this table be dropped AT ALL? Throws with the reason when not. */
+	async assertDroppable(collection) {
+		const colon = collection.indexOf(":");
+		const base = colon > 0 ? collection.slice(colon + 1) : "";
+		if (colon > 0 && require_dist.STORAGE_ADMIN_SCOPED_BASES.includes(base)) return;
+		if (require_dist.STORAGE_ADMIN_MOVED_COLLECTIONS.includes(collection)) return;
+		if (colon <= 0) throw new Error(`drop refused: "${collection}" is not a scoped table`);
+		const installed = await this.installedOwners().catch((err) => {
+			throw new Error(`drop refused: the installed addons could not be read (${err instanceof Error ? err.message : String(err)})`);
+		});
+		const owner = collection.slice(0, colon);
+		if (installed.has(owner)) throw new Error(`drop refused: "${collection}" belongs to the installed addon "${owner}"`);
+	}
+	async listTables(input) {
+		const tables = this.backend.listTables(input.ownerPrefix);
+		this.logger.info("storage-admin: listed tables", { meta: {
+			tables: tables.length,
+			ownerPrefix: input.ownerPrefix ?? null
+		} });
+		return { tables: [...tables] };
+	}
+	async dropCollection(input) {
+		try {
+			await this.assertDroppable(input.collection);
+			const rows = this.backend.dropTable(input.collection, input.expectRows);
+			this.logger.warn("storage-admin: DROPPED a table", { meta: {
+				collection: input.collection,
+				rows
+			} });
+			return {
+				dropped: true,
+				rows
+			};
+		} catch (err) {
+			this.logger.warn("storage-admin: drop refused", { meta: {
+				collection: input.collection,
+				expectRows: input.expectRows,
+				error: err instanceof Error ? err.message : String(err)
+			} });
+			throw err;
+		}
+	}
+};
+//#endregion
 //#region src/builtins/sqlite-storage/retired-collections.ts
 /**
 * The dead tables.
@@ -1420,6 +1482,10 @@ var SqliteSettingsAddon = class extends require_dist.BaseAddon {
 			{
 				capability: require_dist.databaseSnapshotCapability,
 				provider: new DatabaseSnapshotProvider(router)
+			},
+			{
+				capability: require_dist.storageAdminCapability,
+				provider: new StorageAdminProvider(settings.backend, this.ctx.logger.child("StorageAdmin"), async () => new Set((await this.ctx.api.addons.list.query()).map((addon) => addon.manifest.id)))
 			}
 		];
 	}