@camstack/system 1.2.444 → 1.2.446

package/dist/builtins/local-auth/oauth-session-manager.d.ts

@@ -1,4 +1,5 @@
-import type { SettingsStoreClient, TokenScope } from "@camstack/types";
+import type { RecordKindHandle, SettingsStoreClient, TokenScope } from "@camstack/types";
+import type { OauthSessionBody } from "./record-kinds.js";
 export interface OauthSession {
 	readonly id: string;
 	readonly userId: string;
@@ -15,61 +16,20 @@ interface CreateInput {
 	readonly integrationId: string;
 	readonly scopes: TokenScope[];
 }
+export interface OauthSessionRecordsDeps {
+	readonly oauthSessionsKind: RecordKindHandle<OauthSessionBody>;
+	readonly legacyStore?: SettingsStoreClient;
+}
 export declare class OauthSessionManager {
+	private readonly kind;
 	private readonly store;
-	constructor(store: SettingsStoreClient);
-	/**
-	* Create a new OAuth session record. Generates a UUID as the session id,
-	* sets `createdAt` and `lastUsedAt` to now, `revokedAt` to null.
-	*/
+	constructor(deps: SettingsStoreClient | OauthSessionRecordsDeps);
 	create(input: CreateInput): Promise<OauthSession>;
-	/**
-	* Return all sessions — both active and revoked. Callers decide
-	* whether to filter by `revokedAt`.
-	*/
 	list(): Promise<OauthSession[]>;
-	/**
-	* Look up a session by its id. Returns null when not found.
-	*/
 	getById(id: string): Promise<OauthSession | null>;
-	/**
-	* Mark a session as revoked by setting `revokedAt = now`.
-	*
-	* - Returns `true` on success (including idempotent re-revoke — the
-	*   existing `revokedAt` timestamp is preserved; it is NOT updated).
-	* - Returns `false` when the session id is not found.
-	*/
 	markRevoked(id: string): Promise<boolean>;
-	/**
-	* Delete one session row. Used by hub bulk revoke when the link is already
-	* revoked ("Remove revoked"): absence fails closed the same way as a
-	* revoked row, so dropping it only clears the list.
-	*/
 	remove(id: string): Promise<boolean>;
-	/**
-	* Delete sessions revoked longer ago than `horizonMs`.
-	*
-	* Safe because an ABSENT session already fails closed exactly like a revoked
-	* one: every consumer in `oauth-grants.ts` reads
-	* `if (!session || session.revokedAt != null) return null`. Deleting the row
-	* therefore cannot re-enable a link that was cut — it removes a record whose
-	* only remaining job was to say "no", which the absence says too.
-	*
-	* A retention window rather than an immediate delete: a revoked account link
-	* is the kind of thing an operator looks up AFTER the fact ("when did I
-	* unlink that?"), and the row is tiny. Active sessions are never touched —
-	* the filter matches only rows with a `revokedAt` timestamp in range, and
-	* `revokedAt` is NULL on every live session, which SQL's `BETWEEN` never
-	* matches.
-	*
-	* Returns how many rows went.
-	*/
 	reapRevoked(horizonMs: number): Promise<number>;
-	/**
-	* Update `lastUsedAt` to now. No-op (does not throw) when the session
-	* id is not found — the caller (token-use hot path) should not fail
-	* for a missing session that may have been concurrently revoked.
-	*/
 	touch(id: string): Promise<void>;
 }
 export {};

package/dist/builtins/local-auth/record-kinds.d.ts

@@ -0,0 +1,141 @@
+/**
+* Record kinds owned by `local-auth` (records plan phase 6 / §2.8).
+*
+* Operator-only legacy drop: auth tables are NEVER removed by the orphan job —
+* use `storageAdmin.dropCollection` with `expectRows` after verify (see
+* `docs/design/records-phase-6-auth-migration.md`).
+*
+* Before hub restart: mint and test an admin token (`csa_`); snapshot every kind.
+*/
+import { ApiKeyRecordSchema, type DefinedRecordKind, type RecordKindHandle, type RecordsAccess, ScopedTokenSchema, TokenScopeSchema, UserRecordSchema } from "@camstack/types";
+import { z } from "zod";
+export type UserBody = Omit<z.infer<typeof UserRecordSchema>, "id">;
+export declare const UserBodySchema: z.ZodType<UserBody>;
+export type ApiKeyBody = Omit<z.infer<typeof ApiKeyRecordSchema>, "id">;
+export declare const ApiKeyBodySchema: z.ZodType<ApiKeyBody>;
+export type ScopedTokenBody = Omit<z.infer<typeof ScopedTokenSchema>, "id">;
+export declare const ScopedTokenBodySchema: z.ZodType<ScopedTokenBody>;
+export type AdminTokenBody = {
+	readonly createdBy: string;
+	readonly name: string;
+	readonly tokenHash: string;
+	readonly tokenPrefix: string;
+	readonly createdAt: number;
+	readonly expiresAt: number;
+	readonly lastUsedAt?: number | null;
+	readonly revokedAt?: number | null;
+};
+export declare const AdminTokenBodySchema: z.ZodType<AdminTokenBody>;
+export type LoginSessionBody = {
+	readonly userId: string;
+	readonly method: string;
+	readonly refreshable: boolean;
+	readonly createdAt: number;
+	readonly lastUsedAt: number;
+	readonly expiresAt: number;
+	readonly revokedAt?: number | null;
+	readonly revokedReason?: string | null;
+	readonly refreshHash?: string | null;
+	readonly previousRefreshHash?: string | null;
+	readonly rotatedAt?: number | null;
+	readonly client?: string | null;
+	readonly ip?: string | null;
+	readonly credentialId?: string | null;
+};
+export declare const LoginSessionBodySchema: z.ZodType<LoginSessionBody>;
+export type LoginSessionCutoffBody = {
+	readonly notBefore: number;
+};
+export declare const LoginSessionCutoffBodySchema: z.ZodType<LoginSessionCutoffBody>;
+export type OauthSessionBody = {
+	readonly userId: string;
+	readonly username: string;
+	readonly integrationId: string;
+	readonly scopes: z.infer<typeof TokenScopeSchema>[];
+	readonly createdAt: number;
+	readonly lastUsedAt: number;
+	readonly revokedAt?: number | null;
+};
+export declare const OauthSessionBodySchema: z.ZodType<OauthSessionBody>;
+/** TOTP seed is a keychain-backed secret (D878); the row holds only a marker. */
+export type UserTotpBody = {
+	readonly confirmedAt?: number | null;
+	readonly createdAt: number;
+	readonly secret: string;
+};
+export declare const UserTotpBodySchema: z.ZodType<UserTotpBody>;
+export type ExternalIdentityBody = {
+	readonly provider: string;
+	readonly subject: string;
+	readonly issuer: string;
+	readonly userId: string;
+	readonly label?: string | null;
+	readonly linkedAt: number;
+};
+export declare const ExternalIdentityBodySchema: z.ZodType<ExternalIdentityBody>;
+export type DeviceCredentialBody = {
+	readonly userId: string;
+	readonly deviceName: string;
+	readonly platform: string;
+	readonly enrolledVia: string;
+	readonly fingerprint: string;
+	readonly serial: string;
+	readonly previousFingerprint?: string | null;
+	readonly renewedAt?: number | null;
+	readonly publicKey: string;
+	readonly issuedAt: number;
+	readonly expiresAt: number;
+	readonly lastUsedAt?: number | null;
+	readonly lastUsedFrom?: string | null;
+	readonly revokedAt?: number | null;
+	readonly revokedBy?: string | null;
+};
+export declare const DeviceCredentialBodySchema: z.ZodType<DeviceCredentialBody>;
+export type AuthAuditBody = {
+	readonly action: string;
+	readonly userId?: string | null;
+	readonly ip?: string | null;
+	readonly detail?: string | null;
+};
+export declare const AuthAuditBodySchema: z.ZodType<AuthAuditBody>;
+export type LocalAuthRecordKindsMap = {
+	readonly users: DefinedRecordKind<z.ZodType<UserBody>>;
+	readonly "api-keys": DefinedRecordKind<z.ZodType<ApiKeyBody>>;
+	readonly "scoped-tokens": DefinedRecordKind<z.ZodType<ScopedTokenBody>>;
+	readonly "admin-tokens": DefinedRecordKind<z.ZodType<AdminTokenBody>>;
+	readonly "login-sessions": DefinedRecordKind<z.ZodType<LoginSessionBody>>;
+	readonly "login-session-cutoffs": DefinedRecordKind<z.ZodType<LoginSessionCutoffBody>>;
+	readonly "oauth-sessions": DefinedRecordKind<z.ZodType<OauthSessionBody>>;
+	readonly "user-totp": DefinedRecordKind<z.ZodType<UserTotpBody>>;
+	readonly "user-external-identities": DefinedRecordKind<z.ZodType<ExternalIdentityBody>>;
+	readonly "device-credentials": DefinedRecordKind<z.ZodType<DeviceCredentialBody>>;
+	readonly "auth-audit": DefinedRecordKind<z.ZodType<AuthAuditBody>>;
+};
+export declare const localAuthRecordKinds: LocalAuthRecordKindsMap;
+export declare const localAuthUsersRecordKind: DefinedRecordKind<z.ZodType<UserBody>>;
+export declare const localAuthApiKeysRecordKind: DefinedRecordKind<z.ZodType<ApiKeyBody>>;
+export declare const localAuthScopedTokensRecordKind: DefinedRecordKind<z.ZodType<ScopedTokenBody>>;
+export declare const localAuthAdminTokensRecordKind: DefinedRecordKind<z.ZodType<AdminTokenBody>>;
+export declare const localAuthLoginSessionsRecordKind: DefinedRecordKind<z.ZodType<LoginSessionBody>>;
+export declare const localAuthLoginSessionCutoffsRecordKind: DefinedRecordKind<z.ZodType<LoginSessionCutoffBody>>;
+export declare const localAuthOauthSessionsRecordKind: DefinedRecordKind<z.ZodType<OauthSessionBody>>;
+export declare const localAuthUserTotpRecordKind: DefinedRecordKind<z.ZodType<UserTotpBody>>;
+export declare const localAuthUserExternalIdentitiesRecordKind: DefinedRecordKind<z.ZodType<ExternalIdentityBody>>;
+export declare const localAuthDeviceCredentialsRecordKind: DefinedRecordKind<z.ZodType<DeviceCredentialBody>>;
+export declare const localAuthAuthAuditRecordKind: DefinedRecordKind<z.ZodType<AuthAuditBody>>;
+/** Legacy collections that must not be `declareCollection` once these kinds are live. */
+export declare const LOCAL_AUTH_RECORDS_LEGACY_COLLECTIONS: readonly string[];
+export interface LocalAuthRecordStores {
+	readonly users: RecordKindHandle<UserBody>;
+	readonly apiKeys: RecordKindHandle<ApiKeyBody>;
+	readonly scopedTokens: RecordKindHandle<ScopedTokenBody>;
+	readonly adminTokens: RecordKindHandle<AdminTokenBody>;
+	readonly loginSessions: RecordKindHandle<LoginSessionBody>;
+	readonly loginSessionCutoffs: RecordKindHandle<LoginSessionCutoffBody>;
+	readonly oauthSessions: RecordKindHandle<OauthSessionBody>;
+	readonly userTotp: RecordKindHandle<UserTotpBody>;
+	readonly userExternalIdentities: RecordKindHandle<ExternalIdentityBody>;
+	readonly deviceCredentials: RecordKindHandle<DeviceCredentialBody>;
+	readonly authAudit: RecordKindHandle<AuthAuditBody>;
+}
+export declare function localAuthRecordStoresOf(records: Pick<RecordsAccess, "kind">): LocalAuthRecordStores;

package/dist/builtins/local-network/local-network.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D1vECb_6.js");
-const require_hub_mdns_ciao = require("../../hub-mdns-ciao-Cah9GCIg.js");
+const require_dist = require("../../dist-BkNfEJKa.js");
+const require_hub_mdns_ciao = require("../../hub-mdns-ciao-m5LIr4oA.js");
 let zod = require("zod");
 let node_net = require("node:net");
 let node_os = require("node:os");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,5 +1,5 @@
-import { $i as EventCategory, Bn as resolveAppConnections, Fr as BaseAddon, I as HUB_MDNS_SERVICE_TYPE, L as HUB_MDNS_TXT_KEYS, W as NetworkTunnelStartedDataSchema, Wn as resolveHubAddressRoles, an as isDefaultAppConnectionEndpoint, bt as checkRoleAddress, hn as localNetworkCapability, jn as pickAppLinkHub, nn as isAppLinkBase, pr as validateCustomAddress, qn as resolveNotificationTapAddress, u as CAMSTACK_APP_LINK_ORIGIN } from "../../dist-DERK-gP5.mjs";
-import { P as readLanHttpState, a as storeUploadedCertificate, d as servedHttpsLeafFingerprint, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, r as regenerateCertificate, t as createCiaoPublisher, v as writeExtraSans, w as ensureTlsCert } from "../../hub-mdns-ciao-CRaC97V0.mjs";
+import { Fn as pickAppLinkHub, Jn as resolveHubAddressRoles, L as HUB_MDNS_SERVICE_TYPE, R as HUB_MDNS_TXT_KEYS, Rr as BaseAddon, Wn as resolveAppConnections, Zn as resolveNotificationTapAddress, _r as validateCustomAddress, l as CAMSTACK_APP_LINK_ORIGIN, la as EventCategory, ln as isDefaultAppConnectionEndpoint, on as isAppLinkBase, q as NetworkTunnelStartedDataSchema, wt as checkRoleAddress, yn as localNetworkCapability } from "../../dist-CkZIrsAP.mjs";
+import { P as readLanHttpState, a as storeUploadedCertificate, d as servedHttpsLeafFingerprint, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, r as regenerateCertificate, t as createCiaoPublisher, v as writeExtraSans, w as ensureTlsCert } from "../../hub-mdns-ciao-CoyIUWHC.mjs";
 import { z } from "zod";
 import { isIP } from "node:net";
 import * as os$1 from "node:os";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D1vECb_6.js");
+const require_dist = require("../../dist-BkNfEJKa.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Fr as BaseAddon, _n as logDestinationCapability } from "../../dist-DERK-gP5.mjs";
+import { Rr as BaseAddon, xn as logDestinationCapability } from "../../dist-CkZIrsAP.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D1vECb_6.js");
+const require_dist = require("../../dist-BkNfEJKa.js");
 let node_fs_promises = require("node:fs/promises");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { $i as EventCategory, Cn as metricsProviderCapability, Fr as BaseAddon, Pr as errMsg, Rn as reducePoints, Vn as resolveBucketMs, Zt as foldSnapshotByFunction, yi as createEvent } from "../../dist-DERK-gP5.mjs";
+import { Ci as createEvent, Dn as metricsProviderCapability, Gn as resolveBucketMs, Hn as reducePoints, Lr as errMsg, Rr as BaseAddon, la as EventCategory, tn as foldSnapshotByFunction } from "../../dist-CkZIrsAP.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import { promisify } from "node:util";
 import * as os$1 from "node:os";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D1vECb_6.js");
+const require_dist = require("../../dist-BkNfEJKa.js");
 let node_util = require("node:util");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM, r as __exportAll } from "../../chunk-CNf5ZN-e.mjs";
-import { $i as EventCategory, Ci as emitReadiness, Fr as BaseAddon, Ht as enumerateInferenceDevices, Nn as platformProbeCapability, Pr as errMsg, Zn as scoreRuntimes } from "../../dist-DERK-gP5.mjs";
+import { Kt as enumerateInferenceDevices, Ln as platformProbeCapability, Lr as errMsg, Rr as BaseAddon, ki as emitReadiness, la as EventCategory, tr as scoreRuntimes } from "../../dist-CkZIrsAP.mjs";
 import { promisify } from "node:util";
 import * as os$1 from "node:os";
 import * as fs from "node:fs";

package/dist/builtins/record-entries/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D1vECb_6.js");
+const require_dist = require("../../dist-BkNfEJKa.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 //#region src/builtins/record-entries/entries-service.ts

package/dist/builtins/record-entries/index.mjs

@@ -1,4 +1,4 @@
-import { Fr as BaseAddon, In as recordEntriesCapability, Ur as InvalidRecordError, ci as UnknownRecordKindError } from "../../dist-DERK-gP5.mjs";
+import { Bn as recordEntriesCapability, Rr as BaseAddon, fi as UnknownRecordKindError, qr as InvalidRecordError } from "../../dist-CkZIrsAP.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 //#region src/builtins/record-entries/entries-service.ts

package/dist/builtins/records/legacy-table-row-count.d.ts

@@ -0,0 +1,5 @@
+/** Row count for a physical settings-db table (matches the records engine `legacyRowCount`). */
+export declare function legacyTableRowCountFromList(tables: readonly {
+	readonly name: string;
+	readonly rows: number;
+}[], collection: string): number;

package/dist/builtins/records/phase6-declare-gate.d.ts

@@ -0,0 +1,28 @@
+/**
+* Phase 6 auth/alert builtins: do not call `ctx.records.declare` while legacy
+* tables still hold rows unless every kind is already adopted, or the operator
+* set {@link CAMSTACK_RECORDS_DECLARE_PHASE6} for the declare pass before
+* `records-adopt.ts --apply`.
+*/
+import { type AddonContext, type DefinedRecordKind, type RecordsAccess, type StorageKind } from "@camstack/types";
+/** Operator override: declare kinds even when adoption is still pending (legacy path until adopt completes). */
+export declare const CAMSTACK_RECORDS_DECLARE_PHASE6 = "CAMSTACK_RECORDS_DECLARE_PHASE6";
+export declare function isPhase6RecordsDeclareForced(): boolean;
+export interface Phase6DeclareGateDeps {
+	readonly owner: string;
+	readonly records: RecordsAccess;
+	readonly kinds: Readonly<Record<string, DefinedRecordKind>>;
+	readonly legacyCollections: readonly string[];
+	readonly legacyRowCount: (collection: string) => Promise<number>;
+	readonly listKindsForOwner: (owner: string) => Promise<readonly StorageKind[]>;
+	readonly isAdoptedLegacyTable: (collection: string) => Promise<boolean>;
+	readonly log: {
+		info(message: string, meta?: Record<string, unknown>): void;
+	};
+}
+/**
+* @returns `true` when stores should bind record kinds; `false` for legacy collections only.
+*/
+export declare function resolvePhase6UseRecordsPath(deps: Phase6DeclareGateDeps): Promise<boolean>;
+/** Shared wiring for hub builtins (local-auth, keychain, alert-center). */
+export declare function resolvePhase6UseRecordsPathForHub(ctx: Pick<AddonContext, "api" | "logger" | "records">, owner: string, kinds: Readonly<Record<string, DefinedRecordKind>>, legacyCollections: readonly string[]): Promise<boolean>;

package/dist/builtins/records-isolated.d.ts

@@ -0,0 +1,10 @@
+/**
+* Bounds for hub `record-kinds` modules under emit-isolated-dts (TS9010).
+*
+* Annotate with `: IsolatedZodSchema` / `: IsolatedRecordKinds` erases inference
+* (`z.infer` → `unknown`, string index → `| undefined`). Use `satisfies` instead.
+*/
+import type { DefinedRecordKind } from "@camstack/types";
+import type { z } from "zod";
+export type IsolatedZodSchema = z.ZodTypeAny;
+export type IsolatedRecordKinds = Readonly<Record<string, DefinedRecordKind>>;

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D1vECb_6.js");
+const require_dist = require("../../dist-BkNfEJKa.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { $i as EventCategory, Fr as BaseAddon } from "../../dist-DERK-gP5.mjs";
+import { Rr as BaseAddon, la as EventCategory } from "../../dist-CkZIrsAP.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D1vECb_6.js");
+const require_dist = require("../../dist-BkNfEJKa.js");
 const require_snapshot_courtesy = require("../../snapshot-courtesy-D_C5-nC0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { $i as EventCategory, Fr as BaseAddon, Ft as deriveBatteryPresence, Ii as nodePin, Nr as DeviceType, Pr as errMsg, Sn as memoizePinnedFfmpeg, dt as bareAddonId, ft as batteryCapability, jr as DeviceFeature, lr as streamQualityLabel, s as BatteryStatusSchema, tr as snapshotCapability } from "../../dist-DERK-gP5.mjs";
+import { En as memoizePinnedFfmpeg, Hi as nodePin, Ir as DeviceType, Lr as errMsg, Pr as DeviceFeature, Rr as BaseAddon, ar as snapshotCapability, gt as batteryCapability, ht as bareAddonId, la as EventCategory, pr as streamQualityLabel, s as BatteryStatusSchema, zt as deriveBatteryPresence } from "../../dist-CkZIrsAP.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg } from "../../snapshot-courtesy-CyFs1M3I.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D1vECb_6.js");
+const require_dist = require("../../dist-BkNfEJKa.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { Fr as BaseAddon, Xt as filesystemBrowseCapability, sr as storageProviderCapability } from "../../dist-DERK-gP5.mjs";
+import { Rr as BaseAddon, dr as storageProviderCapability, en as filesystemBrowseCapability } from "../../dist-CkZIrsAP.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/sqlite-storage/index.js

@@ -4,7 +4,7 @@ Object.defineProperties(exports, {
 });
 require("../../chunk-Cek0wNdY.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./filesystem-storage.addon.js");
-const require_wal_maintenance = require("../../wal-maintenance-dAv4IdzC.js");
+const require_wal_maintenance = require("../../wal-maintenance-CuG1DUca.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./sqlite-settings.addon.js");
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {

package/dist/builtins/sqlite-storage/index.mjs

@@ -1,5 +1,5 @@
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./filesystem-storage.addon.mjs";
-import { A as SQLITE_MMAP_FLOOR_BYTES, B as SqliteOpProfiler, F as SQLITE_ENGINE_STORM_WALL_SHARE, I as SQLITE_PROFILE_REPORT_FLOOR_MS, L as SQLITE_PROFILE_REPORT_INTERVAL_MS, M as SQLITE_PAGE_CACHE_FLOOR_KIB, N as sqliteMmapSizeFor, O as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, P as sqlitePageCacheKibFor, R as SQLITE_PROFILE_TOP_N, V as sqliteEngineStorm, a as WalMaintenance, c as SqliteSettingsBackend, i as WAL_MAINTENANCE_INTERVAL_MS, j as SQLITE_PAGE_CACHE_CEILING_KIB, k as SQLITE_MMAP_CEILING_BYTES, n as WAL_HIGH_WATER_BYTES, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, z as SQLITE_SLOW_CALL_MS } from "../../wal-maintenance-zRc24mOC.mjs";
+import { A as SQLITE_MMAP_FLOOR_BYTES, B as SqliteOpProfiler, F as SQLITE_ENGINE_STORM_WALL_SHARE, I as SQLITE_PROFILE_REPORT_FLOOR_MS, L as SQLITE_PROFILE_REPORT_INTERVAL_MS, M as SQLITE_PAGE_CACHE_FLOOR_KIB, N as sqliteMmapSizeFor, O as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, P as sqlitePageCacheKibFor, R as SQLITE_PROFILE_TOP_N, V as sqliteEngineStorm, a as WalMaintenance, c as SqliteSettingsBackend, i as WAL_MAINTENANCE_INTERVAL_MS, j as SQLITE_PAGE_CACHE_CEILING_KIB, k as SQLITE_MMAP_CEILING_BYTES, n as WAL_HIGH_WATER_BYTES, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, z as SQLITE_SLOW_CALL_MS } from "../../wal-maintenance-Bqm4zrNA.mjs";
 import { SqliteSettingsAddon } from "./sqlite-settings.addon.mjs";
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {

package/dist/builtins/sqlite-storage/integration-record-kinds.d.ts

@@ -0,0 +1,30 @@
+/**
+* Record kinds owned by integration-registry (phase 4).
+*/
+import { type DefinedRecordKind } from "@camstack/types";
+import { z } from "zod";
+export declare const INTEGRATIONS_LEGACY = "integrations";
+export declare const INTEGRATION_SETTINGS_LEGACY = "integration_settings";
+export type IntegrationBody = {
+	readonly addonId: string;
+	readonly name: string;
+	readonly enabled: boolean;
+	readonly info: Record<string, unknown>;
+	readonly createdAt: number;
+	readonly updatedAt: number;
+};
+export declare const IntegrationBodySchema: z.ZodType<IntegrationBody>;
+export type IntegrationSettingBody = {
+	readonly integrationId: string;
+	readonly key: string;
+	readonly value: string;
+	readonly valueType: string;
+};
+export declare const IntegrationSettingBodySchema: z.ZodType<IntegrationSettingBody>;
+export type IntegrationRegistryRecordKindsMap = {
+	readonly integrations: DefinedRecordKind<z.ZodType<IntegrationBody>>;
+	readonly "integration-settings": DefinedRecordKind<z.ZodType<IntegrationSettingBody>>;
+};
+export declare const integrationRegistryRecordKinds: IntegrationRegistryRecordKindsMap;
+export declare const integrationsRecordKind: DefinedRecordKind<z.ZodType<IntegrationBody>>;
+export declare const integrationSettingsRecordKind: DefinedRecordKind<z.ZodType<IntegrationSettingBody>>;

package/dist/builtins/sqlite-storage/integration-registry.d.ts

@@ -1,22 +1,16 @@
-import type { CreateIntegrationInput, IIntegrationRegistry, Integration, ISettingsStoreProvider } from "@camstack/types";
-/**
-* The persisted INTEGRATIONS — one row per provider instance an operator (or a
-* declaring addon) added, plus that instance's settings.
-*
-* It had a device half once: `devices` + `device_settings_kv`, `dev_NNNN` ids,
-* `createDevice` / `listCameras` / `setDeviceSetting`. It was removed on
-* 2026-08-19 with both tables ([D183](../../../../../docs/decisions/adr-0183-code-that-is-deleted-takes-its-tables-with-it.md)):
-* measured on the reference hub it held 0 rows against 974 live devices, no
-* production caller ever reached it, and its id-space could not be reconciled
-* with the numeric ids every track, rule and binding in the system uses. The
-* fleet is `device-manager:devices`. Do not add a device method here — the
-* device authority is the device-manager, and a second one that agrees with
-* nothing is how this half came to exist.
-*/
+import type { CreateIntegrationInput, IIntegrationRegistry, Integration, ISettingsStoreProvider, RecordKindHandle, RecordsAccess } from "@camstack/types";
+import { type IntegrationBody, type IntegrationSettingBody } from "./integration-record-kinds.js";
+export interface IntegrationRecordStores {
+	readonly integrations: RecordKindHandle<IntegrationBody>;
+	readonly settings: RecordKindHandle<IntegrationSettingBody>;
+}
 export declare class IntegrationRegistry implements IIntegrationRegistry {
 	private readonly store;
-	constructor(backend: ISettingsStoreProvider);
+	private readonly recordStores;
+	constructor(backend: ISettingsStoreProvider, recordStores?: IntegrationRecordStores);
+	static recordStoresOf(records: Pick<RecordsAccess, "kind">): IntegrationRecordStores;
 	initialize(): Promise<void>;
+	private resumeCounter;
 	createIntegration(input: CreateIntegrationInput): Promise<Integration>;
 	getIntegration(id: string): Promise<Integration | null>;
 	getIntegrationByAddonId(addonId: string): Promise<Integration | null>;

package/dist/builtins/sqlite-storage/records/count-settings-array-legacy.d.ts

@@ -0,0 +1,5 @@
+/**
+* Boot guard (B3): addon-settings array fields block adoption until copied.
+*/
+import type { PlacementRouter } from "../placement-router.js";
+export declare function countSettingsArrayLegacy(router: PlacementRouter, addonId: string, settingsKey: string): Promise<number>;

package/dist/builtins/sqlite-storage/records/count-settings-brokers-legacy.d.ts

@@ -0,0 +1,6 @@
+/**
+* Boot guard (B2): brokers still in addon-settings block adoption until
+* `records-adopt` copies them into the entry kind.
+*/
+import type { PlacementRouter } from "../placement-router.js";
+export declare function countSettingsBrokersLegacy(router: PlacementRouter, addonId: string): Promise<number>;

package/dist/builtins/sqlite-storage/records/records-engine-types.d.ts

@@ -37,6 +37,11 @@ export interface RecordsEngineOps extends OwnedOps {
 		readonly owner: string;
 		readonly kind: string;
 	}): Promise<void>;
+	/** Undo a false `complete` when the legacy table still holds rows. */
+	revokeAdopted(input: {
+		readonly owner: string;
+		readonly kind: string;
+	}): Promise<void>;
 }
 export type RecordsOp = keyof RecordsEngineOps;
 export type RecordsInput<K extends RecordsOp> = Parameters<RecordsEngineOps[K]>[0];

package/dist/builtins/sqlite-storage/records/records-engine.d.ts

@@ -87,4 +87,8 @@ export declare class RecordsEngine implements RecordsEngineOps {
 		readonly owner: string;
 		readonly kind: string;
 	}): Promise<void>;
+	revokeAdopted(input: {
+		readonly owner: string;
+		readonly kind: string;
+	}): Promise<void>;
 }

package/dist/builtins/sqlite-storage/records/records-provider.d.ts

@@ -17,7 +17,9 @@ import { type IRecordsProvider, type IScopedLogger, type IStorageAdminProvider,
 import type { PlacementRouter } from "../placement-router.js";
 /** The caller the transport stamped, or a refusal. */
 export declare function recordsCallerOf(input: unknown): string;
-type AdminRecords = Pick<IStorageAdminProvider, "listKinds" | "readRecords" | "adoptRecords">;
+type AdminRecords = Pick<IStorageAdminProvider, "listKinds" | "readRecords" | "adoptRecords"> & {
+	isAdoptedLegacyTable(collection: string): Promise<boolean>;
+};
 export declare class RecordsProvider implements IRecordsProvider, AdminRecords {
 	private readonly router;
 	private readonly logger;
@@ -52,6 +54,8 @@ export declare class RecordsProvider implements IRecordsProvider, AdminRecords {
 		kinds: StorageKind[];
 	}>;
 	readRecords(input: Parameters<IStorageAdminProvider["readRecords"]>[0]): ReturnType<IStorageAdminProvider["readRecords"]>;
+	/** True when a declared kind lists `collection` as `adoptsFrom` and adoption finished. */
+	isAdoptedLegacyTable(collection: string): Promise<boolean>;
 	adoptRecords(input: Parameters<IStorageAdminProvider["adoptRecords"]>[0]): ReturnType<IStorageAdminProvider["adoptRecords"]>;
 	/** Housekeeping: delete rows past `expires_at` in every file that hosts kinds. */
 	sweepExpired(): Promise<number>;

package/dist/builtins/sqlite-storage/sqlite-settings-backend.d.ts

@@ -437,6 +437,23 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
 		bytes: number | null;
 		declaredThisBoot: boolean;
 	}[];
+	/** Storage-admin only: adopted legacy may still be in `declaredThisBoot` from vestigial declares. */
+	forgetDeclaredThisBoot(name: string): void;
+	/**
+	* Paginated `(id, data)` read of a physical table. Does not consult
+	* `declareCollection` — for migration scripts only.
+	*/
+	readLegacyCollection(input: {
+		readonly collection: string;
+		readonly cursor?: string | undefined;
+		readonly limit?: number | undefined;
+	}): {
+		rows: {
+			id: string;
+			data: Record<string, unknown>;
+		}[];
+		nextCursor: string | null;
+	};
 	/**
 	* Drop one table nobody owns (D870 migration, one-shot). Refuses a canonical
 	* or engine table, one a running addon declared since boot, a table that is