@camstack/system 1.2.439 → 1.2.441

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,6 +1,6 @@
-import { Dr as errMsg, Dt as dataStoreProviderCapability, Nr as RUNTIME_DEFAULTS, Or as BaseAddon, Ot as databaseSnapshotCapability, S as DATA_STORE_DATABASES, b as DATABASE_SNAPSHOT_SUFFIX, ct as bareAddonId, ur as vectorStoreCapability, x as DATABASE_SNAPSHOT_TIMEOUT_MS, y as DATABASE_SNAPSHOT_PARTIAL_SUFFIX } from "../../dist-yI6kF6r6.mjs";
-import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-UsVtLOT0.mjs";
-import { C as callControl, E as controlTargetOf, S as trustResult, T as callVector, _ as collectTransferables, a as WalMaintenance, c as SqliteSettingsBackend, d as CrossDatabaseTransactError, f as DatabaseBusyError, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callData } from "../../wal-maintenance-xsvdT5Go.mjs";
+import { Ar as errMsg, At as databaseSnapshotCapability, Ir as RUNTIME_DEFAULTS, J as STORAGE_ADMIN_SCOPED_BASES, S as DATA_STORE_DATABASES, b as DATABASE_SNAPSHOT_SUFFIX, er as storageAdminCapability, jr as BaseAddon, kt as dataStoreProviderCapability, pr as vectorStoreCapability, q as STORAGE_ADMIN_MOVED_COLLECTIONS, ut as bareAddonId, x as DATABASE_SNAPSHOT_TIMEOUT_MS, y as DATABASE_SNAPSHOT_PARTIAL_SUFFIX } from "../../dist-BWvkuc31.mjs";
+import { i as retiredKeyStoreOf, n as purgeRetiredSettingsKeys } from "../../retired-settings-keys-Bhwe4ymb.mjs";
+import { C as callData, S as callControl, T as controlTargetOf, _ as isFileHostMessage, a as WalMaintenance, c as SqliteSettingsBackend, d as DatabaseBusyError, f as DuplicatePlacementError, g as collectTransferables, l as CollectionPlacementError, o as createVectorIndex, p as rehydrateError, s as vectorProviderOf, u as CrossDatabaseTransactError, w as callVector, x as trustResult } from "../../wal-maintenance-B57SAp4a.mjs";
 import { r as isSnapshotWorkerMessage } from "../../sqlite-snapshot-protocol-2QaTouWV.mjs";
 import { a as isWorkerMessage, t as WAL_CHECKPOINT_LARGE_PASS_FRAMES } from "../../wal-checkpoint-policy-BahrTtyD.mjs";
 import { createRequire } from "node:module";
@@ -1198,6 +1198,68 @@ var PlacementRouter = class {
 	}
 };
 //#endregion
+//#region src/builtins/sqlite-storage/storage-admin-provider.ts
+/**
+* The `storage-admin` provider of the SQLite engine (D870): the operator's
+* maintenance reach into the settings database - list its tables, drop one that
+* nothing owns any more. Every call is logged with its table and counts.
+*
+* `dropCollection` is a one-shot of the D870 migration: remove it, and the
+* capability's method, once the last hub ran `migrate-device-store.ts --drop`.
+*/
+var StorageAdminProvider = class {
+	backend;
+	logger;
+	installedOwners;
+	constructor(backend, logger, installedOwners) {
+		this.backend = backend;
+		this.logger = logger;
+		this.installedOwners = installedOwners;
+	}
+	/** May this table be dropped AT ALL? Throws with the reason when not. */
+	async assertDroppable(collection) {
+		const colon = collection.indexOf(":");
+		const base = colon > 0 ? collection.slice(colon + 1) : "";
+		if (colon > 0 && STORAGE_ADMIN_SCOPED_BASES.includes(base)) return;
+		if (STORAGE_ADMIN_MOVED_COLLECTIONS.includes(collection)) return;
+		if (colon <= 0) throw new Error(`drop refused: "${collection}" is not a scoped table`);
+		const installed = await this.installedOwners().catch((err) => {
+			throw new Error(`drop refused: the installed addons could not be read (${err instanceof Error ? err.message : String(err)})`);
+		});
+		const owner = collection.slice(0, colon);
+		if (installed.has(owner)) throw new Error(`drop refused: "${collection}" belongs to the installed addon "${owner}"`);
+	}
+	async listTables(input) {
+		const tables = this.backend.listTables(input.ownerPrefix);
+		this.logger.info("storage-admin: listed tables", { meta: {
+			tables: tables.length,
+			ownerPrefix: input.ownerPrefix ?? null
+		} });
+		return { tables: [...tables] };
+	}
+	async dropCollection(input) {
+		try {
+			await this.assertDroppable(input.collection);
+			const rows = this.backend.dropTable(input.collection, input.expectRows);
+			this.logger.warn("storage-admin: DROPPED a table", { meta: {
+				collection: input.collection,
+				rows
+			} });
+			return {
+				dropped: true,
+				rows
+			};
+		} catch (err) {
+			this.logger.warn("storage-admin: drop refused", { meta: {
+				collection: input.collection,
+				expectRows: input.expectRows,
+				error: err instanceof Error ? err.message : String(err)
+			} });
+			throw err;
+		}
+	}
+};
+//#endregion
 //#region src/builtins/sqlite-storage/retired-collections.ts
 /**
 * The dead tables.
@@ -1414,6 +1476,10 @@ var SqliteSettingsAddon = class extends BaseAddon {
 			{
 				capability: databaseSnapshotCapability,
 				provider: new DatabaseSnapshotProvider(router)
+			},
+			{
+				capability: storageAdminCapability,
+				provider: new StorageAdminProvider(settings.backend, this.ctx.logger.child("StorageAdmin"), async () => new Set((await this.ctx.api.addons.list.query()).map((addon) => addon.manifest.id)))
 			}
 		];
 	}

package/dist/builtins/sqlite-storage/storage-admin-provider.d.ts

@@ -0,0 +1,31 @@
+/**
+* The `storage-admin` provider of the SQLite engine (D870): the operator's
+* maintenance reach into the settings database - list its tables, drop one that
+* nothing owns any more. Every call is logged with its table and counts.
+*
+* `dropCollection` is a one-shot of the D870 migration: remove it, and the
+* capability's method, once the last hub ran `migrate-device-store.ts --drop`.
+*/
+import { type IScopedLogger, type IStorageAdminProvider, type StorageTable } from "@camstack/types";
+import type { SqliteSettingsBackend } from "./sqlite-settings-backend.js";
+export declare class StorageAdminProvider implements IStorageAdminProvider {
+	private readonly backend;
+	private readonly logger;
+	/** The addon ids installed on this hub; a throw means "cannot tell" and refuses the drop. */
+	private readonly installedOwners;
+	constructor(backend: SqliteSettingsBackend, logger: IScopedLogger, installedOwners: () => Promise<ReadonlySet<string>>);
+	/** May this table be dropped AT ALL? Throws with the reason when not. */
+	private assertDroppable;
+	listTables(input: {
+		ownerPrefix?: string | undefined;
+	}): Promise<{
+		tables: StorageTable[];
+	}>;
+	dropCollection(input: {
+		collection: string;
+		expectRows: number;
+	}): Promise<{
+		dropped: true;
+		rows: number;
+	}>;
+}

package/dist/builtins/storage-orchestrator/hub-settings-forward.d.ts

@@ -30,9 +30,9 @@
 *
 * Per-node scoping already exists, one layer up, and it is per FIELD:
 * `BaseAddon` persists a `perNode: true` schema field as `<key>@<nodeId>`
-* inside the addon's single shared blob (`packages/types/src/addon/
-* per-node-store.ts`). The agent therefore reads and writes the SAME row the
-* hub's copy of that addon reads — `<addonId>:addon-settings` / `root` — and
+* inside the addon's settings (`packages/types/src/addon/
+* per-node-store.ts`). The agent therefore reads and writes the SAME rows the
+* hub's copy of that addon reads — `addon-settings` `<addonId>.<field>` (D870) — and
 * the two agree by construction. Introducing a second, addon-level
 * `(nodeId, addonId)` row here would be a second authority over one fact,
 * which is the shape [D224](../../../../../docs/decisions/adr-0224-the-freshness-of-a-camera-fact-lives-in-its-provider.md)

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BOWdLjoK.js");
+const require_dist = require("../../dist-BiTCcaf-.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -1491,9 +1491,9 @@ function createHubCapForwardService(onUnownedCall, options = {}) {
 *
 * Per-node scoping already exists, one layer up, and it is per FIELD:
 * `BaseAddon` persists a `perNode: true` schema field as `<key>@<nodeId>`
-* inside the addon's single shared blob (`packages/types/src/addon/
-* per-node-store.ts`). The agent therefore reads and writes the SAME row the
-* hub's copy of that addon reads — `<addonId>:addon-settings` / `root` — and
+* inside the addon's settings (`packages/types/src/addon/
+* per-node-store.ts`). The agent therefore reads and writes the SAME rows the
+* hub's copy of that addon reads — `addon-settings` `<addonId>.<field>` (D870) — and
 * the two agree by construction. Introducing a second, addon-level
 * `(nodeId, addonId)` row here would be a second authority over one fact,
 * which is the shape [D224](../../../../../docs/decisions/adr-0224-the-freshness-of-a-camera-fact-lives-in-its-provider.md)

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { $ as StorageLocationTypeSchema, $n as storageMigrationCapability, Bn as resolveLocationMode, Hr as collectSecretConfigKeys, Mr as REDACTED_SECRET, Or as BaseAddon, Q as StorageLocationModeSchema, Qn as storageCapability, Ut as evictionPolicyOfLocation, Z as StorageCleanupJobSchema, Zt as gbToBytes, _i as transformSecretWrite, _n as mayReadLocation, di as resolveSecretMarkers, dr as withLocationMode, et as StorageMigrationJobSchema, ni as isSecretMarker, oi as parseJsonObject, pi as secretTreeFromPaths, qn as settingsStoreCapability, rn as isLocationEnabled, un as legacyModeOf, vn as mayWriteToLocation, xn as modeMayWrite, yi as EventCategory, z as LegacyStorageLocationDefaultSchema } from "../../dist-yI6kF6r6.mjs";
+import { $ as StorageCleanupJobSchema, $t as gbToBytes, Cn as modeMayWrite, Fr as REDACTED_SECRET, Gr as collectSecretConfigKeys, Gt as evictionPolicyOfLocation, Hn as resolveLocationMode, Si as EventCategory, Yn as settingsStoreCapability, ai as isSecretMarker, an as isLocationEnabled, bi as transformSecretWrite, bn as mayWriteToLocation, et as StorageLocationModeSchema, fn as legacyModeOf, gi as secretTreeFromPaths, jr as BaseAddon, li as parseJsonObject, mi as resolveSecretMarkers, mr as withLocationMode, nr as storageMigrationCapability, nt as StorageMigrationJobSchema, tr as storageCapability, tt as StorageLocationTypeSchema, yn as mayReadLocation, z as LegacyStorageLocationDefaultSchema } from "../../dist-BWvkuc31.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { containsOrEquals, physicalRootOf } from "@camstack/types/node";
@@ -1486,9 +1486,9 @@ function createHubCapForwardService(onUnownedCall, options = {}) {
 *
 * Per-node scoping already exists, one layer up, and it is per FIELD:
 * `BaseAddon` persists a `perNode: true` schema field as `<key>@<nodeId>`
-* inside the addon's single shared blob (`packages/types/src/addon/
-* per-node-store.ts`). The agent therefore reads and writes the SAME row the
-* hub's copy of that addon reads — `<addonId>:addon-settings` / `root` — and
+* inside the addon's settings (`packages/types/src/addon/
+* per-node-store.ts`). The agent therefore reads and writes the SAME rows the
+* hub's copy of that addon reads — `addon-settings` `<addonId>.<field>` (D870) — and
 * the two agree by construction. Introducing a second, addon-level
 * `(nodeId, addonId)` row here would be a second authority over one fact,
 * which is the shape [D224](../../../../../docs/decisions/adr-0224-the-freshness-of-a-camera-fact-lives-in-its-provider.md)

package/dist/builtins/system-config/system-config.addon.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BOWdLjoK.js");
+const require_dist = require("../../dist-BiTCcaf-.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_x509_es = require("../../x509.es-C4cOo48M.js");
 const require_agent_https = require("../../agent-https-DlpTMDqA.js");
-const require_constants$8 = require("../../constants-BRsjQwi-.js");
+const require_constants$8 = require("../../constants-UojhAJcm.js");
 const require_src$1 = require("../../src-CnAqG6EF.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,9 +1,9 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Dr as errMsg, Gr as customAction, Jn as shortHostname, Kr as defineCustomActions, Or as BaseAddon, Y as ServerNameSchema, Zr as hydrateSchema } from "../../dist-yI6kF6r6.mjs";
+import { Ar as errMsg, Jr as customAction, Xn as shortHostname, Yr as defineCustomActions, Z as ServerNameSchema, ei as hydrateSchema, jr as BaseAddon } from "../../dist-BWvkuc31.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { S as backdatedNotBefore, a as KeyUsageFlags, c as Pkcs10CertificateRequest, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, l as Pkcs10CertificateRequestGenerator, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension } from "../../x509.es-DK__ETIe.mjs";
 import { F as AGENT_HTTPS_NAMES_COLLECTION, I as AGENT_HTTPS_NAMES_COLUMNS, L as AgentHttpsNames, R as getProcessAgentHttpsNames, j as isLocalOnlyHostname, u as isPrivateAddress, z as setProcessAgentHttpsNames } from "../../agent-https-U0d4uvn2.mjs";
-import { a as MESH_CA_KEY_REF, c as SERVER_AUTH_OID, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID } from "../../constants-B92BjObl.mjs";
+import { a as MESH_CA_KEY_REF, c as SERVER_AUTH_OID, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID } from "../../constants-DJILnUSb.mjs";
 import { t as require_src } from "../../src-hG4grMU4.mjs";
 import { z } from "zod";
 import { X509Certificate, createHash, createPrivateKey, randomBytes, randomInt, sign, timingSafeEqual, verify, webcrypto } from "node:crypto";

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BOWdLjoK.js");
+const require_dist = require("../../dist-BiTCcaf-.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Or as BaseAddon, mn as logDestinationCapability } from "../../dist-yI6kF6r6.mjs";
+import { gn as logDestinationCapability, jr as BaseAddon } from "../../dist-BWvkuc31.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{composition-sources-B4jC2FC7.js → composition-sources-BG-W2U0d.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-BOWdLjoK.js");
+const require_dist = require("./dist-BiTCcaf-.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-BGOSCGWa.mjs → composition-sources-ByNISOnW.mjs}

@@ -1,4 +1,4 @@
-import { Dr as errMsg, br as compositionSourceKey } from "./dist-yI6kF6r6.mjs";
+import { Ar as errMsg, Cr as compositionSourceKey } from "./dist-BWvkuc31.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{constants-B92BjObl.mjs → constants-DJILnUSb.mjs}

@@ -1,4 +1,4 @@
-import { Vr as buildSecretRef } from "./dist-yI6kF6r6.mjs";
+import { Wr as buildSecretRef } from "./dist-BWvkuc31.mjs";
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
 var MESH_CA_KEY_REF = buildSecretRef({
 	owner: "system",

package/dist/{constants-BRsjQwi-.js → constants-UojhAJcm.js}

@@ -1,5 +1,5 @@
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
-var MESH_CA_KEY_REF = require("./dist-BOWdLjoK.js").buildSecretRef({
+var MESH_CA_KEY_REF = require("./dist-BiTCcaf-.js").buildSecretRef({
 	owner: "system",
 	scope: { kind: "global" },
 	fieldPath: "meshCaKey"

package/dist/{device-ca-DHG9OW2m.js → device-ca-196DAEZT.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-BOWdLjoK.js");
+const require_dist = require("./dist-BiTCcaf-.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
 let node_crypto = require("node:crypto");
 //#region src/auth/jwt-signing-key.ts

package/dist/{device-ca-46BUsWD1.mjs → device-ca-D8Ri9TVz.mjs}

@@ -1,4 +1,4 @@
-import { D as DEVICE_SAN_CREDENTIAL_PREFIX, O as DEVICE_SAN_USER_PREFIX, Vr as buildSecretRef } from "./dist-yI6kF6r6.mjs";
+import { D as DEVICE_SAN_CREDENTIAL_PREFIX, O as DEVICE_SAN_USER_PREFIX, Wr as buildSecretRef } from "./dist-BWvkuc31.mjs";
 import { S as backdatedNotBefore, a as KeyUsageFlags, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension, u as SubjectAlternativeNameExtension } from "./x509.es-DK__ETIe.mjs";
 import { X509Certificate, createPublicKey, randomBytes, verify, webcrypto } from "node:crypto";
 //#region src/auth/jwt-signing-key.ts