@camstack/system 1.2.444 → 1.2.445

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D1vECb_6.js");
+const require_dist = require("../../dist-DgOG8flk.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Fr as BaseAddon, _n as logDestinationCapability } from "../../dist-DERK-gP5.mjs";
+import { Rr as BaseAddon, xn as logDestinationCapability } from "../../dist-BNunRyXT.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{composition-sources-C3rKncIF.mjs → composition-sources-BMt5cFYb.mjs}

@@ -1,4 +1,4 @@
-import { Dr as compositionSourceKey, Pr as errMsg } from "./dist-DERK-gP5.mjs";
+import { Ar as compositionSourceKey, Lr as errMsg } from "./dist-BNunRyXT.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-NAPZddic.js → composition-sources-D3fi9Xns.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-D1vECb_6.js");
+const require_dist = require("./dist-DgOG8flk.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{constants-BKX2QnIg.mjs → constants-BMHCxRzb.mjs}

@@ -1,4 +1,4 @@
-import { mi as buildSecretRef } from "./dist-DERK-gP5.mjs";
+import { vi as buildSecretRef } from "./dist-BNunRyXT.mjs";
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
 var MESH_CA_KEY_REF = buildSecretRef({
 	owner: "system",

package/dist/{constants-BXiNEIeV.js → constants-Br879Axi.js}

@@ -1,5 +1,5 @@
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
-var MESH_CA_KEY_REF = require("./dist-D1vECb_6.js").buildSecretRef({
+var MESH_CA_KEY_REF = require("./dist-DgOG8flk.js").buildSecretRef({
 	owner: "system",
 	scope: { kind: "global" },
 	fieldPath: "meshCaKey"

package/dist/{device-ca-DT9X2S6d.js → device-ca-CnJ_va7i.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-D1vECb_6.js");
+const require_dist = require("./dist-DgOG8flk.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
 let node_crypto = require("node:crypto");
 //#region src/auth/jwt-signing-key.ts

package/dist/{device-ca-jxjSL8Ov.mjs → device-ca-T8osSMos.mjs}

@@ -1,4 +1,4 @@
-import { O as DEVICE_SAN_CREDENTIAL_PREFIX, k as DEVICE_SAN_USER_PREFIX, mi as buildSecretRef } from "./dist-DERK-gP5.mjs";
+import { D as DEVICE_SAN_CREDENTIAL_PREFIX, O as DEVICE_SAN_USER_PREFIX, vi as buildSecretRef } from "./dist-BNunRyXT.mjs";
 import { S as backdatedNotBefore, a as KeyUsageFlags, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension, u as SubjectAlternativeNameExtension } from "./x509.es-DK__ETIe.mjs";
 import { X509Certificate, createPublicKey, randomBytes, verify, webcrypto } from "node:crypto";
 //#region src/auth/jwt-signing-key.ts

package/dist/{dist-DERK-gP5.mjs → dist-BNunRyXT.mjs}

@@ -736,7 +736,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/sleep-WsrozGDL.mjs
+//#region ../types/dist/sleep-bZIhUvjd.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -848,21 +848,21 @@ function collectSecretConfigKeys(schema) {
 	for (const section of sectionsOf(schema)) for (const field of fieldsOf(section)) walkField(field, keys);
 	return keys;
 }
-function isRecord$5(value) {
+function isRecord$6(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function sectionsOf(schema) {
-	if (!isRecord$5(schema)) return [];
+	if (!isRecord$6(schema)) return [];
 	const sections = schema["sections"];
 	return Array.isArray(sections) ? sections : [];
 }
 function fieldsOf(node) {
-	if (!isRecord$5(node)) return [];
+	if (!isRecord$6(node)) return [];
 	const fields = node["fields"];
 	return Array.isArray(fields) ? fields : [];
 }
 function walkField(field, out) {
-	if (!isRecord$5(field)) return;
+	if (!isRecord$6(field)) return;
 	const type = field["type"];
 	const key = field["key"];
 	if ((type === "password" || field["secret"] === true) && typeof key === "string" && key.length > 0) out.add(key);
@@ -900,7 +900,7 @@ function walkField(field, out) {
 var SECRET_CLEAR = { $secretClear: true };
 /** The `'***'` token D634 redaction writes for non-admins. */
 var LEGACY_DEVICE_REDACTION = "***";
-function isRecord$4(value) {
+function isRecord$5(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function makeSecretMarker(ref) {
@@ -911,16 +911,16 @@ function makeSecretMarker(ref) {
 }
 /** A stored marker: an object whose `$secret` is a non-empty string. */
 function isSecretMarker(value) {
-	if (!isRecord$4(value)) return false;
+	if (!isRecord$5(value)) return false;
 	const ref = value["$secret"];
 	return typeof ref === "string" && ref.length > 0;
 }
 /** Anything carrying a `$secret` key — a stored marker or a UI view of one. */
 function isSecretMarkerLike(value) {
-	return isRecord$4(value) && Object.prototype.hasOwnProperty.call(value, "$secret");
+	return isRecord$5(value) && Object.prototype.hasOwnProperty.call(value, "$secret");
 }
 function isSecretClear(value) {
-	return isRecord$4(value) && value["$secretClear"] === true;
+	return isRecord$5(value) && value["$secretClear"] === true;
 }
 /**
 * The UI view of a stored secret field value: a marker becomes "set", inline
@@ -1589,7 +1589,7 @@ var KeychainWriteRefusedError = class extends Error {
 	}
 };
 var KEEP = { kind: "keep" };
-function isRecord$3(value) {
+function isRecord$4(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function defaultMintId() {
@@ -1602,7 +1602,7 @@ function collectSecretMarkerRefs(value, out = []) {
 		return out;
 	}
 	if (Array.isArray(value)) for (const item of value) collectSecretMarkerRefs(item, out);
-	else if (isRecord$3(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
+	else if (isRecord$4(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
 	return out;
 }
 async function storedValueEquals(secrets, marker, candidate) {
@@ -1657,7 +1657,7 @@ function rowId(row, idKey) {
 	return null;
 }
 async function writeArray(ctx, node, incoming, stored, fieldPath) {
-	const storedRows = Array.isArray(stored) ? stored.filter(isRecord$3) : [];
+	const storedRows = Array.isArray(stored) ? stored.filter(isRecord$4) : [];
 	if (!Array.isArray(incoming)) {
 		ctx.deletes.push(...collectSecretMarkerRefs(storedRows));
 		return {
@@ -1673,7 +1673,7 @@ async function writeArray(ctx, node, incoming, stored, fieldPath) {
 	const kept = /* @__PURE__ */ new Set();
 	const rows = [];
 	for (const row of incoming) {
-		if (!isRecord$3(row)) {
+		if (!isRecord$4(row)) {
 			rows.push(row);
 			continue;
 		}
@@ -1698,7 +1698,7 @@ async function writeNode(ctx, node, incoming, stored, fieldPath) {
 		case "leaf": return writeLeaf(ctx, incoming, stored, fieldPath);
 		case "array": return writeArray(ctx, node, incoming, stored, fieldPath);
 		case "object": {
-			if (!isRecord$3(incoming)) {
+			if (!isRecord$4(incoming)) {
 				if (incoming === void 0) return KEEP;
 				ctx.deletes.push(...collectSecretMarkerRefs(stored));
 				return {
@@ -1706,7 +1706,7 @@ async function writeNode(ctx, node, incoming, stored, fieldPath) {
 					value: incoming
 				};
 			}
-			const storedObj = isRecord$3(stored) ? stored : {};
+			const storedObj = isRecord$4(stored) ? stored : {};
 			return {
 				kind: "value",
 				value: await writeMembers(ctx, node.children, incoming, storedObj, (m) => `${fieldPath}.${m}`)
@@ -1829,7 +1829,7 @@ async function resolveSecretMarkers(value, secrets, options = {}) {
 				value: items
 			};
 		}
-		if (isRecord$3(v)) {
+		if (isRecord$4(v)) {
 			const out = {};
 			for (const [k, child] of Object.entries(v)) {
 				const s = substitute(child);
@@ -1861,7 +1861,7 @@ var SecretOverwriteRefusedError = class extends Error {
 		this.name = "SecretOverwriteRefusedError";
 	}
 };
-function isRecord$2(value) {
+function isRecord$3(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function resolvedValue(pass, marker) {
@@ -1890,7 +1890,7 @@ function inArray(pass, incoming, stored) {
 	return incoming.map((item, index) => {
 		const twin = stored[index];
 		if (isSecretMarker(twin)) return typeof item === "string" && item === resolvedValue(pass, twin) ? twin : item;
-		if (isRecord$2(item) && isRecord$2(twin)) return inArrayRow(pass, item, twin);
+		if (isRecord$3(item) && isRecord$3(twin)) return inArrayRow(pass, item, twin);
 		if (Array.isArray(item) && Array.isArray(twin)) return inArray(pass, item, twin);
 		return item;
 	});
@@ -1901,7 +1901,7 @@ function inArrayRow(pass, incoming, stored) {
 		const twin = stored[key];
 		if (isSecretMarker(twin)) {
 			if (typeof value === "string" && value === resolvedValue(pass, twin)) out[key] = twin;
-		} else if (isRecord$2(value) && isRecord$2(twin)) out[key] = inArrayRow(pass, value, twin);
+		} else if (isRecord$3(value) && isRecord$3(twin)) out[key] = inArrayRow(pass, value, twin);
 		else if (Array.isArray(value) && Array.isArray(twin)) out[key] = inArray(pass, value, twin);
 	}
 	return out;
@@ -1909,7 +1909,7 @@ function inArrayRow(pass, incoming, stored) {
 async function walk(pass, incoming, stored) {
 	if (isSecretMarker(stored)) return atMarker(pass, incoming, stored);
 	if (Array.isArray(incoming) && Array.isArray(stored)) return inArray(pass, incoming, stored);
-	if (!isRecord$2(incoming) || !isRecord$2(stored)) return incoming;
+	if (!isRecord$3(incoming) || !isRecord$3(stored)) return incoming;
 	const out = { ...incoming };
 	for (const [key, value] of Object.entries(incoming)) out[key] = await walk(pass, value, stored[key]);
 	return out;
@@ -1940,7 +1940,7 @@ async function restoreUnchangedSecrets(input) {
 function isJsonEqual(a, b) {
 	if (Object.is(a, b)) return true;
 	if (Array.isArray(a)) return Array.isArray(b) && a.length === b.length && a.every((v, i) => isJsonEqual(v, b[i]));
-	if (isRecord$2(a) && isRecord$2(b)) {
+	if (isRecord$3(a) && isRecord$3(b)) {
 		const keys = Object.keys(a);
 		if (keys.length !== Object.keys(b).length) return false;
 		return keys.every((k) => Object.prototype.hasOwnProperty.call(b, k) && isJsonEqual(a[k], b[k]));
@@ -1964,7 +1964,7 @@ function markerKeysOf(blob, owner) {
 }
 function nodeFromStored(value, owner) {
 	if (isSecretMarker(value)) return isSecretRefOwnedBy(value.$secret, owner) ? { kind: "leaf" } : null;
-	if (!isRecord$2(value)) return null;
+	if (!isRecord$3(value)) return null;
 	const children = /* @__PURE__ */ new Map();
 	for (const [key, child] of Object.entries(value)) {
 		const node = nodeFromStored(child, owner);
@@ -2765,7 +2765,7 @@ var BaseAddon = class {
 		if (!ctx) return;
 		const addonId = ctx.id;
 		setImmediate(() => {
-			ctx.api.addons?.restartAddon?.mutate({ addonId }).then(() => {
+			ctx.api.addons.restartAddon.mutate({ addonId }).then(() => {
 				ctx.logger.info("addon auto-restart triggered by restart-required setting change", { meta: { changedFields: patchKeys.filter((k) => restartKeys.has(k)) } });
 			}).catch((err) => {
 				ctx.logger.error("addon auto-restart failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
@@ -3390,7 +3390,11 @@ var BatchTooLargeError = class extends RecordsError {
 	}
 };
 function defOf(schema) {
-	return schema._zod?.def ?? {};
+	const zodBag = Reflect.get(schema, "_zod");
+	if (typeof zodBag !== "object" || zodBag === null) return {};
+	const def = Reflect.get(zodBag, "def");
+	if (typeof def !== "object" || def === null) return {};
+	return def;
 }
 function declaredHere(schema) {
 	return z.globalRegistry.get(schema)?.secret === true;
@@ -3488,11 +3492,11 @@ function secretArrayPrefixes(path) {
 	}
 	return prefixes;
 }
-function isRecord$1(value) {
+function isRecord$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function elementId(element, idKey, declared, prefix) {
-	const id = isRecord$1(element) ? element[idKey] : void 0;
+	const id = isRecord$2(element) ? element[idKey] : void 0;
 	if (typeof id !== "string" || id.length === 0) throw new InvalidRecordError(`"${declared}": every element of "${prefix}" needs a non-empty string "${idKey}" to carry a secret`);
 	return id;
 }
@@ -3503,7 +3507,7 @@ function elementId(element, idKey, declared, prefix) {
 */
 var REMOVE_LEAF = Symbol("remove-leaf");
 function mapAt(node, segments, index, walkedKeys, concretePrefix, declared, arrayKeys, visit) {
-	if (!isRecord$1(node)) return node;
+	if (!isRecord$2(node)) return node;
 	const segment = segments[index];
 	if (segment === void 0) return node;
 	if (!Object.prototype.hasOwnProperty.call(node, segment.key)) return node;
@@ -3673,6 +3677,87 @@ function assertValidDeclaration(name, decl) {
 	if (decl.deviceRemoval === "delete" && decl.device === "none") refuse("deviceRemoval: \"delete\" needs a device: \"required\" or \"optional\"");
 	for (const path of decl.secretPaths) for (const prefix of secretArrayPrefixes(path)) if (decl.secretArrayKeys[prefix] === void 0) refuse(`secret path "${path}" crosses the array "${prefix}": declare its id key in secretArrayKeys`);
 }
+function bodyFieldsOf(schema) {
+	return { ...z.toJSONSchema(schema, {
+		unrepresentable: "any",
+		io: "input"
+	}) };
+}
+function isRecordLike(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Does every branch of the body schema carry `field`? (A discriminated union has several.) */
+function hasNameField(json, field) {
+	const branches = json["oneOf"] ?? json["anyOf"];
+	if (Array.isArray(branches)) return branches.length > 0 && branches.every((b) => isRecordLike(b) && hasNameField(b, field));
+	const properties = json["properties"];
+	return isRecordLike(properties) && Object.prototype.hasOwnProperty.call(properties, field);
+}
+/**
+* Declare the kinds of a package. The keys are the kind names. The result is
+* what `ctx.records.declare` sends to the engine and what `ctx.records.kind`
+* types its handle from.
+*/
+function defineRecordKinds(specs) {
+	const out = {};
+	for (const [name, spec] of Object.entries(specs)) {
+		const secretPaths = collectZodSecretPaths(spec.schema);
+		const nameField = spec.entry?.nameField ?? "name";
+		const fields = bodyFieldsOf(spec.schema);
+		if (spec.entry !== void 0 && !hasNameField(fields, nameField)) throw new DeclarationRefusedError(`kind "${name}": an entry kind's schema needs a "${nameField}" field`);
+		const parsed = RecordKindDeclarationSchema.parse({
+			database: spec.database,
+			class: spec.class,
+			writeTrigger: spec.writeTrigger,
+			device: spec.device,
+			at: spec.at,
+			indexes: spec.indexes === void 0 ? void 0 : [...spec.indexes],
+			retention: spec.retention,
+			deviceRemoval: spec.deviceRemoval,
+			maxDataBytes: spec.maxDataBytes,
+			secretPaths: [...secretPaths],
+			secretArrayKeys: spec.secretArrayKeys === void 0 ? void 0 : { ...spec.secretArrayKeys },
+			adoptsFrom: spec.adoptsFrom,
+			transactFamily: spec.transactFamily,
+			entry: spec.entry === void 0 ? void 0 : {
+				title: spec.entry.title,
+				nameField,
+				fields
+			}
+		});
+		assertValidDeclaration(name, parsed);
+		out[name] = {
+			name,
+			schema: spec.schema,
+			declaration: parsed
+		};
+	}
+	return out;
+}
+/** The wire form of a package's kinds: name -> declaration. */
+function declarationsOf(kinds) {
+	return Object.fromEntries(Object.entries(kinds).map(([name, kind]) => [name, kind.declaration]));
+}
+/** When non-null, `from` names an addon-settings brokers blob, not a SQL table. */
+function parseSettingsBrokersAdoptsFrom(from) {
+	if (!from.startsWith("@settings-brokers/")) return null;
+	const addonId = from.slice(18);
+	return addonId.length > 0 ? addonId : null;
+}
+/** When non-null, `from` names an addon-settings array blob, not a SQL table. */
+function parseSettingsArrayAdoptsFrom(from) {
+	if (!from.startsWith("@settings-array/")) return null;
+	const rest = from.slice(16);
+	const slash = rest.indexOf("/");
+	if (slash <= 0 || slash >= rest.length - 1) return null;
+	const addonId = rest.slice(0, slash);
+	const settingsKey = rest.slice(slash + 1);
+	if (addonId.length === 0 || settingsKey.length === 0) return null;
+	return {
+		addonId,
+		settingsKey
+	};
+}
 /** Shared Zod schemas used across streaming capabilities. */
 var CamProfileSchema = z.enum([
 	"high",
@@ -4682,6 +4767,28 @@ function customAction(input, output, options) {
 		...options?.caller ? { caller: "required" } : {}
 	};
 }
+/**
+* Every cap whose provider reads a `callerAddonId` in its input (the keychain's
+* owner check, device-history's `not-owner`, records' owner).
+*
+* The stamp is set ONLY by the transport (`stampCallerAddonId`, or stated by a
+* hub in-process caller). The generated HTTP/tRPC mount parses input with
+* `.loose()`, so without this a session could add the key itself and act as
+* another addon. The mount strips it for these caps.
+*/
+var CALLER_STAMPED_CAPABILITIES = [
+	"keychain",
+	"device-history",
+	"records",
+	"integrations",
+	"device-manager"
+];
+/** A copy of `input` without the caller stamp. Anything that is not a plain object passes through. */
+function withoutCallerStamp(input) {
+	if (input === null || typeof input !== "object" || Array.isArray(input)) return input;
+	if (!Object.prototype.hasOwnProperty.call(input, "callerAddonId")) return input;
+	return Object.fromEntries(Object.entries(input).filter(([key]) => key !== "callerAddonId"));
+}
 var StaticDirOutputSchema = z.object({ staticDir: z.string() });
 var VersionOutputSchema = z.object({ version: z.string() });
 /**
@@ -16673,28 +16780,6 @@ id: z.union([z.string(), z.number()]) }), {
 	}
 };
 /**
-* Every cap whose provider reads a `callerAddonId` in its input (the keychain's
-* owner check, device-history's `not-owner`, records' owner).
-*
-* The stamp is set ONLY by the transport (`stampCallerAddonId`, or stated by a
-* hub in-process caller). The generated HTTP/tRPC mount parses input with
-* `.loose()`, so without this a session could add the key itself and act as
-* another addon. The mount strips it for these caps.
-*/
-var CALLER_STAMPED_CAPABILITIES = [
-	"keychain",
-	"device-history",
-	"records",
-	"integrations",
-	"device-manager"
-];
-/** A copy of `input` without the caller stamp. Anything that is not a plain object passes through. */
-function withoutCallerStamp(input) {
-	if (input === null || typeof input !== "object" || Array.isArray(input)) return input;
-	if (!Object.prototype.hasOwnProperty.call(input, "callerAddonId")) return input;
-	return Object.fromEntries(Object.entries(input).filter(([key]) => key !== "callerAddonId"));
-}
-/**
 * records - an addon's own facts and documents (D881): ledgers, audit rows,
 * config documents, mirrors. The third storage API next to `ctx.settings`
 * (operator intent, D870) and device-history (numbers over time, D850).
@@ -17078,13 +17163,31 @@ var storageAdminCapability = {
 		adoptRecords: method(z.object({
 			owner: z.string().min(1),
 			kind: RecordKindNameSchema,
-			records: z.array(RecordInputSchema).min(1).max(RECORD_BATCH_MAX),
+			records: z.array(RecordInputSchema).max(RECORD_BATCH_MAX),
 			/** The LAST batch: the copy is complete, the boot guard stops asking. */
 			complete: z.boolean().optional()
-		}), z.object({ adopted: z.number().int() }), {
+		}).refine((input) => input.records.length > 0 || input.complete === true, { message: "records must be non-empty unless complete is true" }), z.object({ adopted: z.number().int() }), {
 			kind: "mutation",
 			auth: "admin"
-		})
+		}),
+		/**
+		* Read rows from a legacy KV table by physical name, without a running
+		* `declareCollection`. Used by `records-adopt.ts` when the owner already
+		* moved to records and the collection door refuses the name.
+		*/
+		readLegacyCollection: method(z.object({
+			collection: z.string().min(1),
+			cursor: z.string().optional(),
+			limit: z.number().int().min(1).max(1e3).optional()
+		}), z.object({
+			rows: z.array(z.object({
+				id: z.string(),
+				data: z.record(z.string(), z.unknown())
+			})),
+			nextCursor: z.string().nullable()
+		}), { auth: "admin" }),
+		/** True when a declared kind lists `collection` as `adoptsFrom` and adoption finished. */
+		isAdoptedLegacyTable: method(z.object({ collection: z.string().min(1) }), z.object({ adopted: z.boolean() }), { auth: "admin" })
 	}
 };
 /**
@@ -73417,13 +73520,14 @@ var BaseDevice = class {
 	get state() {
 		if (!this._stateProxyCache) {
 			const cache = {};
-			const handler = { get: (_target, key) => {
+			const handler = { get: (target, key) => {
 				const k = key;
-				if (k in cache) return cache[k];
+				const existing = Reflect.get(target, k);
+				if (existing !== void 0) return existing;
 				const cap = DEVICE_LOCAL_STATE_CAPS[k];
 				if (!cap) return void 0;
 				const proxy = this.sliceProxy(cap);
-				cache[k] = proxy;
+				Reflect.set(target, k, proxy);
 				return proxy;
 			} };
 			this._stateProxyCache = new Proxy(cache, handler);
@@ -73622,7 +73726,7 @@ var BaseDevice = class {
 	async updateSourceInfo(patch) {
 		const next = mergeSourceInfo(this.sourceInfo, patch);
 		this._sourceInfoCache = Object.freeze({ ...next });
-		const action = this.ctx.api?.deviceManager?.setMetadata;
+		const action = this.ctx.api.deviceManager?.setMetadata;
 		if (action) try {
 			await action.mutate({
 				deviceId: this.id,
@@ -73657,7 +73761,7 @@ var BaseDevice = class {
 	* device boot on a meta refresh.
 	*/
 	async refreshFeatures() {
-		const action = this.ctx.api?.deviceManager?.registerDevice;
+		const action = this.ctx.api.deviceManager?.registerDevice;
 		if (!action) return;
 		try {
 			await action.mutate({
@@ -81136,6 +81240,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"storageAdmin.isAdoptedLegacyTable": {
+		capName: "storage-admin",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"storageAdmin.listKinds": {
 		capName: "storage-admin",
 		capScope: "system",
@@ -81148,6 +81258,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"storageAdmin.readLegacyCollection": {
+		capName: "storage-admin",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"storageAdmin.readRecords": {
 		capName: "storage-admin",
 		capScope: "system",
@@ -87217,4 +87333,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { SsoBridgeClaimsSchema as $, EventCategory as $i, shortHostname as $n, ReadinessRegistry as $r, formatMinutes as $t, DEVICE_TOMBSTONE_RETENTION_MS as A, isSecretClear as Ai, parseStreamParamsFormPatch as An, toExpressionValue as Ar, dataStoreProviderCapability as At, LegacyStorageLocationDefaultSchema as B, parseSecretRef as Bi, resolveAppConnections as Bn, DeclarationRefusedError as Br, deviceStateCapability as Bt, DATA_STORE_DATABASES as C, emitReadiness as Ci, metricsProviderCapability as Cn, composedDeviceStableId as Cr, compositionSourceRefs as Ct, DEVICE_NONCE_TTL_MS as D, isDeviceConfigCap as Di, normalizeUnit as Dn, compositionSourceKey as Dr, coreBlockSourceKind as Dt, DEVICE_ENROLLMENT_TTL_MS as E, hydrateSchema as Ei, normalizeCoreBlockWrite as En, compositionSliceKey as Er, coreBlockIdFromAddonId as Et, FieldClaimSchema as F, mapSecretLeaves as Fi, ptzAutotrackCapability as Fn, BaseAddon as Fr, deriveBatteryPresence as Ft, RECORDING_SOURCE_CAMSTACK_ADDON as G, scopeKey as Gi, resolveLocationMode as Gn, PlaintextSecretError as Gr, evaluateCompositionField as Gt, MINUTES_PER_DAY as H, recordSecretRef as Hi, resolveCoreBlockEntry as Hn, ForeignSecretMarkerError as Hr, enumerateInferenceDevices as Ht, HUB_MDNS_SERVICE_TYPE as I, nodePin as Ii, recordEntriesCapability as In, BatchTooLargeError as Ir, describeComposableCaps as It, STORAGE_ADMIN_MOVED_COLLECTIONS as J, sleep as Ji, runtimeStatePolicyFor as Jn, RECORD_DELETE_BATCH as Jr, expressionContainsBuiltinCall as Jt, RecordingStatusSchema as K, secretTreeFromPaths as Ki, resolveMethodAuth as Kn, RECORD_BATCH_MAX as Kr, evictionPolicyOfLocation as Kt, HUB_MDNS_TXT_KEYS as L, normalizeSecretOwner as Li, recordsCapability as Ln, DATAPLANE_SECRET_HEADER as Lr, deviceCredentialsCapability as Lt, DeviceStatusSchema as M, isSecretMarkerLike as Mi, planComposition as Mn, DeviceRole as Mr, declarationOwnerNodeId as Mt, FIRST_LEVEL_MACRO_CLASSES as N, isSecretRefOwnedBy as Ni, platformProbeCapability as Nn, DeviceType as Nr, decodeVectorBase64 as Nt, DEVICE_SAN_CREDENTIAL_PREFIX as O, isEvent as Oi, objectInputDeclaresAddonId as On, createStatefulExpressionMemory as Or, coreBlocksCapability as Ot, FieldClaimModeSchema as P, makeSecretMarker as Pi, procedureAuthKey as Pn, errMsg as Pr, defineExtensionSlotProvider as Pt, ServerNameSchema as Q, userError as Qi, settingsStoreCapability as Qn, RUNTIME_DEFAULTS as Qr, formatDeviceRevoker as Qt, KEYCHAIN_RESET_TRIGGER_ACTOR as R, parseJsonObject as Ri, reducePoints as Rn, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Rr, deviceExtensionCapability as Rt, DATABASE_SNAPSHOT_TIMEOUT_MS as S, emitDownForOwnedCaps as Si, memoizePinnedFfmpeg as Sn, composedDeviceRef as Sr, compositionFieldKey as St, DERIVED_CAMERA_SILENCED_CAP_NAMES as T, formatSecretScope as Ti, motionCapability as Tn, compositionItemFieldPath as Tr, coreBlockComposition as Tt, MOTION_CLOSE_AFTER_MS as U, resolveCapMount as Ui, resolveCoreBlockFiles as Un, InvalidRecordError as Ur, enumerateItemArrayFields as Ut, METHOD_ACCESS_MAP as V, readinessKey as Vi, resolveBucketMs as Vn, FilterRequiredError as Vr, deviceStatusCapability as Vt, NetworkTunnelStartedDataSchema as W, resolveSecretMarkers as Wi, resolveHubAddressRoles as Wn, NoCallerError as Wr, enumerateSchemaFields as Wt, STREAM_PROFILE_META as X, toSecretFieldView as Xi, scopesAllowDeviceCap as Xn, REDACTED_SECRET as Xr, filesystemBrowseCapability as Xt, STORAGE_ADMIN_SCOPED_BASES as Y, toNodeId as Yi, scopesAllowAddon as Yn, RECORD_SWEEP_INTERVAL_MS as Yr, extractNestedAddonId as Yt, ScopedTokenSchema as Z, transformSecretWrite as Zi, scoreRuntimes as Zn, REMOVE_LEAF as Zr, foldSnapshotByFunction as Zt, CalendarPreferencesSchema as _, collectSecretMarkerRefs as _i, logDestinationCapability as _n, withLocationMode as _r, calendarsCapability as _t, ApiKeyRecordSchema as a, RevConflictError as ai, isDefaultAppConnectionEndpoint as an, storageMigrationCapability as ar, addonPagesCapability as at, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as b, customAction as bi, mayReadLocation as bn, buildFfmpegArgs as br, checkRoleAddress as bt, CALLER_STAMPED_CAPABILITIES as c, UnknownRecordKindError as ci, isVoidInput as cn, streamCatalogCapability as cr, alertsCapability as ct, CAP_NAMES_WITH_STATUS as d, asNumber as di, keychainCapability as dn, userManagementCapability as dr, bareAddonId as dt, ReadinessTimeoutError as ei, gbToBytes as en, siteZoneKey as er, StorageCleanupJobSchema as et, CATALOG_LANGS as f, asString$1 as fi, legacyAutoLinkIds as fn, validateComposition as fr, batteryCapability as ft, CORE_BLOCK_ADDON_PREFIX as g, collectSecretLeaves as gi, locationIconKey as gn, vectorStoreCapability as gr, buildStreamParamsConfigSchema as gt, CORE_BLOCKS_ADDON_ID as h, collectSecretConfigKeys as hi, localNetworkCapability as hn, vectorIndexDimConflictError as hr, buildDeviceSignatureMessage as ht, AlertSchema as i, RecordUniqueViolationError as ii, isCollectionArrayMethod as in, storageCapability as ir, UserRecordSchema as it, DeclaredDevices as j, isSecretMarker as ji, pickAppLinkHub as jn, DeviceFeature as jr, databaseSnapshotCapability as jt, DEVICE_SAN_USER_PREFIX as k, isKeychainStoredField as ki, objectInputDeclaresRequiredDeviceId as kn, disarmRoseMemory as kr, createDeviceExtensionProvider as kt, CAMERA_SWITCH_ORDER as l, WELL_KNOWN_TAB_MAP as li, kebabToCamel as ln, streamQualityLabel as lr, authProviderCapability as lt, COMPOSER_RUNNER_ID as m, buildSecretRef as mi, lifecycleJobSchema as mn, vectorDimFromBase64 as mr, buildDeviceEnrollmentLink as mt, AGENT_MDNS_TXT_KEYS as n, RecordNotFoundError as ni, isAppLinkBase as nn, splitTranslationRef as nr, StorageLocationTypeSchema as nt, BaseDevice as o, SECRET_CLEAR as oi, isLocationEnabled as on, storageOccupancyCapability as or, addonSettingsCapability as ot, COMPOSED_ITEM_FIXED_FIELDS as p, assertValidDeclaration as pi, legacyModeOf as pn, validateCustomAddress as pr, buildCapabilityLookup as pt, STORAGE_ACCESS_FALLBACK as q, secretTreeFromSchema as qi, resolveNotificationTapAddress as qn, RECORD_BATCH_MAX_BYTES as qr, expandContainer as qt, ALL_CAPABILITY_DEFINITIONS as r, RecordTooLargeError as ri, isArrayOutputSchema as rn, storageAdminCapability as rr, StorageMigrationJobSchema as rt, BatteryStatusSchema as s, UnindexedFilterError as si, isObjectInput as sn, storageProviderCapability as sr, addonWidgetsCapability as st, AGENT_MDNS_SERVICE_TYPE as t, RecordKindDeclarationSchema as ti, interpolate as tn, snapshotCapability as tr, StorageLocationModeSchema as tt, CAMSTACK_APP_LINK_ORIGIN as u, asJsonObject as ui, keychainAdminCapability as un, supportedRuntimes as ur, backupCapability as ut, CatalogFileSchema as v, collectZodSecretPaths as vi, logLevelAtMost as vn, withoutCallerStamp as vr, cameraGridLayoutCapability as vt, DAY_NAMES as w, expandCapMethods as wi, modeMayWrite as wn, compositionFeatureEnabled as wr, coreBlockAddonId as wt, DATABASE_SNAPSHOT_SUFFIX as x, defineCustomActions as xi, mayWriteToLocation as xn, cloneStatefulExpressionMemory as xr, composerCapability as xt, CoreBlockSchema as y, createEvent as yi, looseSchema as yn, COMPOSER_ADDON_ID as yr, canonicalIconKey as yt, LOG_LEVEL_RANK as z, parseJsonUnknown as zi, replacedFieldKeys as zn, DEVICE_STATUS_METHOD as zr, deviceManagerCapability as zt };
+export { STREAM_PROFILE_META as $, resolveSecretMarkers as $i, scopesAllowAddon as $n, RECORD_SWEEP_INTERVAL_MS as $r, extractNestedAddonId as $t, DataStoreDatabaseSchema as A, expandCapMethods as Ai, normalizeCoreBlockWrite as An, compositionSourceKey as Ar, coreBlockIdFromAddonId as At, KeychainAuditEntrySchema as B, makeSecretMarker as Bi, recordEntriesCapability as Bn, CALLER_STAMPED_CAPABILITIES as Br, describeComposableCaps as Bt, DAY_NAMES as C, createEvent as Ci, looseSchema as Cn, buildFfmpegArgs as Cr, canonicalIconKey as Ct, DEVICE_SAN_CREDENTIAL_PREFIX as D, defineRecordKinds as Di, metricsProviderCapability as Dn, compositionFeatureEnabled as Dr, compositionSourceRefs as Dt, DEVICE_NONCE_TTL_MS as E, defineCustomActions as Ei, memoizePinnedFfmpeg as En, composedDeviceStableId as Er, compositionFieldKey as Et, FieldClaimModeSchema as F, isKeychainStoredField as Fi, pickAppLinkHub as Fn, DeviceRole as Fr, databaseSnapshotCapability as Ft, MINUTES_PER_DAY as G, parseJsonObject as Gi, resolveBucketMs as Gn, FilterRequiredError as Gr, deviceStatusCapability as Gt, LOG_LEVEL_RANK as H, nodePin as Hi, reducePoints as Hn, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Hr, deviceExtensionCapability as Ht, FieldClaimSchema as I, isSecretClear as Ii, planComposition as In, DeviceType as Ir, declarationOwnerNodeId as It, RECORDING_SOURCE_CAMSTACK_ADDON as J, parseSettingsArrayAdoptsFrom as Ji, resolveHubAddressRoles as Jn, NoCallerError as Jr, enumerateSchemaFields as Jt, MOTION_CLOSE_AFTER_MS as K, parseJsonUnknown as Ki, resolveCoreBlockEntry as Kn, ForeignSecretMarkerError as Kr, enumerateInferenceDevices as Kt, HUB_MDNS_SERVICE_TYPE as L, isSecretMarker as Li, platformProbeCapability as Ln, errMsg as Lr, decodeVectorBase64 as Lt, DeviceStatusSchema as M, hydrateSchema as Mi, objectInputDeclaresAddonId as Mn, disarmRoseMemory as Mr, coreBlocksCapability as Mt, DeviceTombstoneSchema as N, isDeviceConfigCap as Ni, objectInputDeclaresRequiredDeviceId as Nn, toExpressionValue as Nr, createDeviceExtensionProvider as Nt, DEVICE_SAN_USER_PREFIX as O, emitDownForOwnedCaps as Oi, modeMayWrite as On, compositionItemFieldPath as Or, coreBlockAddonId as Ot, FIRST_LEVEL_MACRO_CLASSES as P, isEvent as Pi, parseStreamParamsFormPatch as Pn, DeviceFeature as Pr, dataStoreProviderCapability as Pt, STORAGE_ADMIN_SCOPED_BASES as Q, resolveCapMount as Qi, runtimeStatePolicyFor as Qn, RECORD_DELETE_BATCH as Qr, expressionContainsBuiltinCall as Qt, HUB_MDNS_TXT_KEYS as R, isSecretMarkerLike as Ri, procedureAuthKey as Rn, BaseAddon as Rr, defineExtensionSlotProvider as Rt, DATA_STORE_DATABASES as S, collectZodSecretPaths as Si, logLevelAtMost as Sn, COMPOSER_ADDON_ID as Sr, cameraGridLayoutCapability as St, DEVICE_ENROLLMENT_TTL_MS as T, declarationsOf as Ti, mayWriteToLocation as Tn, composedDeviceRef as Tr, composerCapability as Tt, LegacyStorageLocationDefaultSchema as U, normalizeNodeId as Ui, replacedFieldKeys as Un, DEVICE_STATUS_METHOD as Ur, deviceManagerCapability as Ut, KeychainResetRecordSchema as V, mapSecretLeaves as Vi, recordsCapability as Vn, DATAPLANE_SECRET_HEADER as Vr, deviceCredentialsCapability as Vt, METHOD_ACCESS_MAP as W, normalizeSecretOwner as Wi, resolveAppConnections as Wn, DeclarationRefusedError as Wr, deviceStateCapability as Wt, STORAGE_ACCESS_FALLBACK as X, readinessKey as Xi, resolveMethodAuth as Xn, RECORD_BATCH_MAX as Xr, evictionPolicyOfLocation as Xt, RecordingStatusSchema as Y, parseSettingsBrokersAdoptsFrom as Yi, resolveLocationMode as Yn, PlaintextSecretError as Yr, evaluateCompositionField as Yt, STORAGE_ADMIN_MOVED_COLLECTIONS as Z, recordSecretRef as Zi, resolveNotificationTapAddress as Zn, RECORD_BATCH_MAX_BYTES as Zr, expandContainer as Zt, CatalogFileSchema as _, assertValidDeclaration as _i, legacyModeOf as _n, validateCustomAddress as _r, buildCapabilityLookup as _t, ApiKeyRecordSchema as a, toSecretFieldView as aa, RecordKindDeclarationSchema as ai, interpolate as an, snapshotCapability as ar, StorageLocationTypeSchema as at, DATABASE_SNAPSHOT_SUFFIX as b, collectSecretLeaves as bi, locationIconKey as bn, vectorStoreCapability as br, buildStreamParamsConfigSchema as bt, CAMERA_SWITCH_ORDER as c, withoutCallerStamp as ca, RecordUniqueViolationError as ci, isCollectionArrayMethod as cn, storageCapability as cr, UserRecordSchema as ct, CATALOG_LANGS as d, UnindexedFilterError as di, isObjectInput as dn, storageProviderCapability as dr, addonWidgetsCapability as dt, scopeKey as ea, REDACTED_SECRET as ei, filesystemBrowseCapability as en, scopesAllowDeviceCap as er, ScopedTokenSchema as et, COMPOSED_ITEM_FIXED_FIELDS as f, UnknownRecordKindError as fi, isVoidInput as fn, streamCatalogCapability as fr, alertsCapability as ft, CalendarPreferencesSchema as g, asString$1 as gi, legacyAutoLinkIds as gn, validateComposition as gr, batteryCapability as gt, CORE_BLOCK_ADDON_PREFIX as h, asNumber as hi, keychainCapability as hn, userManagementCapability as hr, bareAddonId as ht, AlertSchema as i, toNodeId as ia, ReadinessTimeoutError as ii, gbToBytes as in, siteZoneKey as ir, StorageLocationModeSchema as it, DeclaredDevices as j, formatSecretScope as ji, normalizeUnit as jn, createStatefulExpressionMemory as jr, coreBlockSourceKind as jt, DEVICE_TOMBSTONE_RETENTION_MS as k, emitReadiness as ki, motionCapability as kn, compositionSliceKey as kr, coreBlockComposition as kt, CAMSTACK_APP_LINK_ORIGIN as l, EventCategory as la, RevConflictError as li, isDefaultAppConnectionEndpoint as ln, storageMigrationCapability as lr, addonPagesCapability as lt, CORE_BLOCKS_ADDON_ID as m, asJsonObject as mi, keychainAdminCapability as mn, supportedRuntimes as mr, backupCapability as mt, AGENT_MDNS_TXT_KEYS as n, secretTreeFromSchema as na, RUNTIME_DEFAULTS as ni, formatDeviceRevoker as nn, settingsStoreCapability as nr, SsoBridgeClaimsSchema as nt, BaseDevice as o, transformSecretWrite as oa, RecordNotFoundError as oi, isAppLinkBase as on, splitTranslationRef as or, StorageMigrationJobSchema as ot, COMPOSER_RUNNER_ID as p, WELL_KNOWN_TAB_MAP as pi, kebabToCamel as pn, streamQualityLabel as pr, authProviderCapability as pt, NetworkTunnelStartedDataSchema as q, parseSecretRef as qi, resolveCoreBlockFiles as qn, InvalidRecordError as qr, enumerateItemArrayFields as qt, ALL_CAPABILITY_DEFINITIONS as r, sleep as ra, ReadinessRegistry as ri, formatMinutes as rn, shortHostname as rr, StorageCleanupJobSchema as rt, BatteryStatusSchema as s, userError as sa, RecordTooLargeError as si, isArrayOutputSchema as sn, storageAdminCapability as sr, TokenScopeSchema as st, AGENT_MDNS_SERVICE_TYPE as t, secretTreeFromPaths as ta, REMOVE_LEAF as ti, foldSnapshotByFunction as tn, scoreRuntimes as tr, ServerNameSchema as tt, CAP_NAMES_WITH_STATUS as u, SECRET_CLEAR as ui, isLocationEnabled as un, storageOccupancyCapability as ur, addonSettingsCapability as ut, CoreBlockSchema as v, buildSecretRef as vi, lifecycleJobSchema as vn, vectorDimFromBase64 as vr, buildDeviceEnrollmentLink as vt, DERIVED_CAMERA_SILENCED_CAP_NAMES as w, customAction as wi, mayReadLocation as wn, cloneStatefulExpressionMemory as wr, checkRoleAddress as wt, DATABASE_SNAPSHOT_TIMEOUT_MS as x, collectSecretMarkerRefs as xi, logDestinationCapability as xn, withLocationMode as xr, calendarsCapability as xt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as y, collectSecretConfigKeys as yi, localNetworkCapability as yn, vectorIndexDimConflictError as yr, buildDeviceSignatureMessage as yt, KEYCHAIN_RESET_TRIGGER_ACTOR as z, isSecretRefOwnedBy as zi, ptzAutotrackCapability as zn, BatchTooLargeError as zr, deriveBatteryPresence as zt };