@camstack/system 1.2.455 → 1.2.457

package/dist/builtins/device-history/query/history-query.d.ts

@@ -1,23 +1,33 @@
 /**
-* Reads: `listSeries` and `query` (plan §5.1).
+* Reads: `listSeries`, `query` and `queryMany` (plan §5.1).
 *
 * `auto` resolution picks the finest tier whose retention covers `from` and
 * whose point count fits `maxPoints`: a rollup tier fits when
 * `ceil(range / bucket) <= maxPoints`, raw fits when a read of `maxPoints + 1`
 * rows comes back short. The coarsest covering tier is the last resort and is
 * truncated to its newest `maxPoints` points (`truncated: true`) rather than
-* answering nothing.
+* answering nothing. A series fed by closed buckets has NO raw rows, so raw is
+* never a candidate for it: an empty raw read "fits" every window.
 *
 * `before` is the last point strictly before the window in the chosen tier, so a
 * step chart can start at the value in force when the window opens — a quiet
 * bucket has no row, and the held value is otherwise invisible.
+*
+* {@link DEVICE_HISTORY_ENERGY_KEY} is computed here at read time, never stored:
+* the device's `kwhTotal` meter when it has one (per-bucket growth), else the
+* time-weighted integral of its `watts` (`tw_sum`, already in every rollup).
+* One place makes that choice, so two charts of one device cannot disagree, and
+* it covers every hour of history recorded before the key existed.
 */
-import type { DeviceHistoryQueryPoint, DeviceHistoryResolution, DeviceHistorySeriesInfo, DeviceHistorySubject } from "@camstack/types";
+import { type DeviceHistoryQueryManyEntry, type DeviceHistoryQueryManyItem, type DeviceHistoryQueryPoint, type DeviceHistoryResolution, type DeviceHistorySeriesInfo, type DeviceHistorySubject } from "@camstack/types";
 import { type RetentionPolicy } from "../retention/retention.js";
 import type { HistoryStore } from "../store/history-store.js";
 import { type SeriesRegistry } from "../store/series-registry.js";
 import { type HistoryCatalog } from "../capture/capture-engine.js";
 type Tier = DeviceHistoryResolution;
+/** The power-meter series the energy key is derived from, meter first. */
+export declare const ENERGY_METER_KEY: string;
+export declare const ENERGY_POWER_KEY: string;
 export interface QueryInput {
 	readonly key: string;
 	readonly subject: DeviceHistorySubject;
@@ -27,19 +37,29 @@ export interface QueryInput {
 	readonly resolution: Tier | "auto";
 	readonly maxPoints: number;
 }
+export interface QueryBefore {
+	readonly t: number;
+	readonly value: number | null;
+	readonly state: string | null;
+}
 export interface QuerySeries {
 	readonly scope: string;
-	readonly before: {
-		readonly t: number;
-		readonly value: number | null;
-	} | null;
+	readonly before: QueryBefore | null;
 	readonly points: readonly DeviceHistoryQueryPoint[];
+	readonly derivedFrom: string | null;
 }
 export interface QueryOutput {
 	readonly resolution: Tier;
 	readonly series: readonly QuerySeries[];
 	readonly truncated: boolean;
 }
+export interface QueryManyInput {
+	readonly items: readonly DeviceHistoryQueryManyItem[];
+	readonly from: number;
+	readonly to: number;
+	readonly resolution: Tier | "auto";
+	readonly maxPoints: number;
+}
 export interface QueryDeps {
 	readonly registry: SeriesRegistry;
 	readonly store: HistoryStore;
@@ -53,14 +73,20 @@ export declare class HistoryQuery {
 	private readonly deps;
 	constructor(deps: QueryDeps);
 	query(input: QueryInput): Promise<QueryOutput>;
+	/** Several reads over one window; one failing item answers its error, not the batch's. */
+	queryMany(input: QueryManyInput): Promise<readonly DeviceHistoryQueryManyEntry[]>;
+	private seriesOf;
+	/** The tier to answer from and its reads. `noRaw`: the series has no raw rows to read. */
+	private choose;
 	/** Tiers whose retention covers `from`, finest first; the coarsest is always present. */
 	private coveringTiers;
 	/** Cheap fit test for rollup tiers; raw is decided by the read itself. */
 	private fits;
 	private readTier;
-	/** Rows arrive newest first and one over the bound; keep the newest `maxPoints`, oldest first. */
-	private shape;
 	private before;
+	/** The series energy is derived from for a device: the meter when it has one, else its power. */
+	private energySource;
+	private queryEnergy;
 	listSeries(subject: DeviceHistorySubject): Promise<readonly DeviceHistorySeriesInfo[]>;
 	/** The metric's fixed unit, else the device's own (a `unitFrom` field), else unknown. */
 	private unitOf;

package/dist/builtins/device-history/query/point-shape.d.ts

@@ -0,0 +1,33 @@
+/**
+* Stored rows → the wire points of a query (PURE). What a point MEANS depends on
+* the series' kind:
+*
+*  - `gauge` / `boolean`: the stored numbers as they are (`twMean` of a boolean
+*    is the fraction of time true);
+*  - `counter`: plus `delta`, the growth since the previous point or bucket. A
+*    reading LOWER than the previous one is a reset (a replaced meter, a
+*    firmware wipe): the growth is counted from zero, never negative. With no
+*    previous reading, a bucket's own growth is `last - min`;
+*  - `enum`: the stored number is an ordinal, so `mean` / `twMean` mean nothing
+*    and are `null`; `state` names the ordinal and a rollup's `states` gives the
+*    milliseconds spent in each state, by name.
+*/
+import type { DeviceHistoryKind, DeviceHistoryQueryPoint } from "@camstack/types";
+import type { RawPoint, RollupRow } from "../rollup/rollup-math.js";
+export interface SeriesMeaning {
+	readonly kind: DeviceHistoryKind;
+	/** `enum`: the value of each ordinal; `null` otherwise. */
+	readonly values: readonly string[] | null;
+}
+/** kWh in one W·ms: 1 kWh = 1 000 W × 3 600 000 ms. */
+export declare const KWH_PER_WATT_MS: number;
+/** Growth from `prev` to `cur`; a drop is a reset counted from zero. `fallback` when `prev` is unknown. */
+export declare function counterDelta(prev: number | null, cur: number | null, fallback: number | null): number | null;
+/** The name of an ordinal, or `null` when the series is not an enum or the ordinal is unknown. */
+export declare function stateName(meaning: SeriesMeaning, ordinal: number | null): string | null;
+/** Raw points, oldest first; `prev` is the value of the point before the first one. */
+export declare function rawPoints(rows: readonly RawPoint[], meaning: SeriesMeaning, prev: number | null): readonly DeviceHistoryQueryPoint[];
+/** Rollup rows, oldest first; `prevLast` is the `last` of the bucket before the first one. */
+export declare function rollupPoints(rows: readonly RollupRow[], meaning: SeriesMeaning, prevLast: number | null): readonly DeviceHistoryQueryPoint[];
+/** Energy used in each bucket of a `watts` gauge: its time-weighted integral, in kWh. */
+export declare function integratedEnergyPoints(rows: readonly RollupRow[]): readonly DeviceHistoryQueryPoint[];

package/dist/builtins/device-history/retention/retention.d.ts

@@ -1,5 +1,5 @@
 /**
-* Retention (plan §5.5, operator answer §13): raw 7 days, 5m 14 days, 1h 1 year,
+* Retention (plan §5.5, operator answer §13): raw 7 days, 5m 30 days, 1h 1 year,
 * 1d forever — global addon settings.
 *
 * Per series and per tier the delete is a PRIMARY KEY range

package/dist/builtins/device-history/rollup/rollup-engine.d.ts

@@ -58,6 +58,8 @@ export declare class RollupEngine {
 	private tickFiveMinute;
 	private tickHour;
 	private tickDay;
+	/** An `enum` series keeps the time spent in each state in its rollups. */
+	private isEnum;
 	/** Raw → 5m rows for buckets in `[from, toExclusive)`; writes them and marks their hours. */
 	recomputeFiveMinute(seriesId: number, from: number, toExclusive: number, horizon: number): Promise<number>;
 	private recomputeHour;

package/dist/builtins/device-history/rollup/rollup-math.d.ts

@@ -12,6 +12,8 @@ export interface RollupRow {
 	readonly twSum: number | null;
 	/** Milliseconds `twSum` covers. */
 	readonly twMs: number | null;
+	/** `enum` series: ms spent in each state (keyed by ordinal) over the covered time; `null` otherwise. */
+	readonly states: Readonly<Record<string, number>> | null;
 }
 export interface RawPoint {
 	readonly ts: number;
@@ -25,6 +27,8 @@ export interface RawToFiveMinuteInput {
 	readonly carryIn: RawPoint | null;
 	/** Time-weighting stops here for a bucket that has not closed yet. */
 	readonly horizon: number;
+	/** An `enum` series: also keep the ms spent in each state (keyed by ordinal). */
+	readonly trackStates?: boolean;
 }
 /** One row per 5-minute bucket that has at least one point. */
 export declare function rawToFiveMinuteRows(input: RawToFiveMinuteInput): readonly RollupRow[];
@@ -39,6 +43,8 @@ export interface CombineInput {
 	readonly carryIn: number | null;
 	/** Time-weighting stops here for a window that has not closed yet. */
 	readonly horizon: number;
+	/** An `enum` series: also sum the time in each state, gaps credited to the held state. */
+	readonly trackStates?: boolean;
 }
 /** One row of the next tier from the child rows of its window; `null` when there are none. */
 export declare function combineRows(input: CombineInput): RollupRow | null;

package/dist/builtins/device-history/store/history-store.d.ts

@@ -22,6 +22,8 @@ export interface MetricRecord {
 	readonly displayName: string;
 	readonly ingest: "points" | "buckets";
 	readonly declaredAt: number;
+	/** `enum`: the value of each ordinal (index = ordinal), append-only; `null` for every other kind. */
+	readonly values: readonly string[] | null;
 }
 export interface SeriesRecord {
 	readonly id: number;
@@ -52,6 +54,11 @@ export declare class HistoryStore {
 	constructor(door: HistoryDoor);
 	declare(): Promise<void>;
 	loadMetrics(): Promise<readonly MetricRecord[]>;
+	/**
+	* Delete metric rows no lookup can reach: rows an earlier build wrote under an
+	* engine-minted random key (every metric key is `cap:` / `addon:` prefixed).
+	*/
+	deleteMetrics(keys: readonly string[]): Promise<void>;
 	upsertMetric(metric: MetricRecord): Promise<void>;
 	/** Series with `id > afterId`, ascending — the boot load pages with this. */
 	loadSeriesPage(afterId: number, limit: number): Promise<readonly SeriesRecord[]>;

package/dist/builtins/device-history/store/series-registry.d.ts

@@ -8,21 +8,46 @@ import type { DeviceHistorySubject } from "@camstack/types";
 import { HistoryStore, type MetricRecord, type SeriesRecord } from "./history-store.js";
 export declare function subjectIdOf(subject: DeviceHistorySubject): string;
 export declare function deviceIdOf(subject: DeviceHistorySubject): number | null;
+/** Every metric key is a cap field (`cap:`), an addon's series (`addon:`) or derived. */
+export declare function isMetricKey(key: string): boolean;
 export declare function identityOf(key: string, subjectId: string, scope: string): string;
+/**
+* Values one `enum` key may learn. A field that keeps producing new values is
+* free text, not a state: past this its new values are refused (counted), never
+* allowed to grow the dictionary — and so every stored row — without bound.
+*/
+export declare const MAX_ENUM_VALUES = 1024;
+/** Append what `next` names that `stored` lacks, in `next`'s order: an ordinal never moves. */
+export declare function mergeEnumValues(stored: readonly string[] | null, next: readonly string[] | null): readonly string[] | null;
 export declare class SeriesRegistry {
 	private readonly store;
 	private readonly metrics;
 	private readonly byIdentity;
 	private readonly byId;
 	private readonly inflight;
+	/** Enum metrics whose value list grew in memory and is not stored yet. */
+	private readonly dirtyMetrics;
 	private readonly removeListeners;
 	constructor(store: HistoryStore);
 	load(): Promise<void>;
 	private index;
 	metric(key: string): MetricRecord | undefined;
 	allMetrics(): readonly MetricRecord[];
-	/** Persist and remember a metric; idempotent. */
+	/**
+	* Persist and remember a metric; idempotent. An `enum` value list is MERGED
+	* append-only with the stored one, so reordering a `z.enum` never changes
+	* what a stored ordinal means.
+	*/
 	declareMetric(metric: MetricRecord): Promise<void>;
+	/**
+	* The ordinal of `value` in an `enum` metric's list, learning (appending) a
+	* value seen for the first time. `null` when the key is not an enum metric or
+	* its list is full ({@link MAX_ENUM_VALUES}). A learned value is stored by
+	* {@link persistDirtyMetrics} BEFORE any point that uses it.
+	*/
+	ordinalOf(key: string, value: string): number | null;
+	/** Store every value list that grew in memory. Throws (and keeps them dirty) on a failed write. */
+	persistDirtyMetrics(): Promise<void>;
 	find(key: string, subjectId: string, scope: string): SeriesRecord | undefined;
 	byIdOf(id: number): SeriesRecord | undefined;
 	all(): readonly SeriesRecord[];

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DjQ8C-ku.js");
+const require_dist = require("../../dist-C89nqNnn.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
 const require_prefix_range = require("../../prefix-range-D_KueXbQ.js");
 const require_prefix_walk = require("../../prefix-walk-Dv6MLZlM.js");

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,4 +1,4 @@
-import { Bn as normalizeUnit, Ci as WELL_KNOWN_TAB_MAP, Gi as isKeychainStoredField, Gr as DeviceType, I as FieldClaimModeSchema, Ji as isSecretMarkerLike, Ki as isSecretClear, Kr as errMsg, L as FieldClaimSchema, Li as defineRecordKinds, Mi as collectZodSecretPaths, N as DeviceStatusSchema, Ot as canonicalIconKey, P as DeviceTombstoneSchema, Qt as deviceStatusCapability, Rt as createDeviceExtensionProvider, Tn as legacyAutoLinkIds, Tt as buildStreamParamsConfigSchema, Ui as isDeviceConfigCap, Un as parseStreamParamsFormPatch, Ur as DeviceFeature, Ut as defineExtensionSlotProvider, Wr as DeviceRole, Yt as deviceManagerCapability, Zt as deviceStateCapability, _a as userError, bi as SECRET_CLEAR, c as CAMERA_SWITCH_ORDER, da as secretTreeFromPaths, en as enumerateItemArrayFields, ga as transformSecretWrite, ha as toSecretFieldView, in as expandContainer, kn as locationIconKey, la as resolveSecretMarkers, pa as sleep$1, pr as siteZoneKey, q as MINUTES_PER_DAY, qi as isSecretMarker, qr as BaseAddon, qt as deviceExtensionCapability, r as ALL_CAPABILITY_DEFINITIONS, sr as runtimeStatePolicyFor, tn as enumerateSchemaFields, tt as STREAM_PROFILE_META, u as CAP_NAMES_WITH_STATUS, un as formatMinutes, w as DAY_NAMES, ya as EventCategory } from "../../dist-BpSENkRJ.mjs";
+import { $r as DeviceRole, Ea as userError, F as DeviceStatusSchema, I as DeviceTombstoneSchema, It as canonicalIconKey, Ki as defineRecordKinds, Kt as createDeviceExtensionProvider, Mi as WELL_KNOWN_TAB_MAP, Nt as buildStreamParamsConfigSchema, Oa as EventCategory, Pn as legacyAutoLinkIds, Qi as isDeviceConfigCap, Qn as parseStreamParamsFormPatch, Qr as DeviceFeature, R as FieldClaimModeSchema, Rn as locationIconKey, Sa as sleep$1, Sr as siteZoneKey, T as DAY_NAMES, Ta as transformSecretWrite, Vi as collectZodSecretPaths, Y as MINUTES_PER_DAY, Yn as normalizeUnit, Zt as defineExtensionSlotProvider, an as deviceStateCapability, ba as secretTreeFromPaths, c as CAMERA_SWITCH_ORDER, cn as enumerateItemArrayFields, ct as STREAM_PROFILE_META, ea as isKeychainStoredField, ei as DeviceType, fn as expandContainer, gr as runtimeStatePolicyFor, ki as SECRET_CLEAR, ln as enumerateSchemaFields, na as isSecretMarker, ni as BaseAddon, on as deviceStatusCapability, r as ALL_CAPABILITY_DEFINITIONS, ra as isSecretMarkerLike, rn as deviceManagerCapability, ta as isSecretClear, ti as errMsg, tn as deviceExtensionCapability, u as CAP_NAMES_WITH_STATUS, va as resolveSecretMarkers, vn as formatMinutes, wa as toSecretFieldView, z as FieldClaimSchema } from "../../dist-Dhux90yB.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 import { t as prefixRange } from "../../prefix-range-Dl0znowN.mjs";
 import { t as loadPrefixed } from "../../prefix-walk-DAOBSyH1.mjs";

package/dist/builtins/hub-forwarder/hub-forwarder-destination.d.ts

@@ -1,4 +1,4 @@
-import type { IClusterBroker, ILogDestination, IScopedLogger, LogEntry, LogFilter } from "@camstack/types";
+import type { IClusterBroker, ILogDestination, IScopedLogger, LogEntry } from "@camstack/types";
 /**
 * Log destination for agent mode.
 *
@@ -36,7 +36,6 @@ export declare class HubForwarderDestination implements ILogDestination {
 	*/
 	connectBroker(broker: IClusterBroker): void;
 	write(entry: LogEntry): void;
-	query(_filter: LogFilter): Promise<readonly LogEntry[]>;
 	shutdown(): Promise<void>;
 	private bufferOutbound;
 	private flushOutbound;

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DjQ8C-ku.js");
+const require_dist = require("../../dist-C89nqNnn.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
@@ -82,9 +82,6 @@ var HubForwarderDestination = class {
 		else if (entry.level === "warn") console.warn(line);
 		else console.log(line);
 	}
-	async query(_filter) {
-		return [];
-	}
 	async shutdown() {
 		this.hubConnected = false;
 		this.broker = null;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { An as logDestinationCapability, qr as BaseAddon } from "../../dist-BpSENkRJ.mjs";
+import { ni as BaseAddon, zn as logDestinationCapability } from "../../dist-Dhux90yB.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
@@ -77,9 +77,6 @@ var HubForwarderDestination = class {
 		else if (entry.level === "warn") console.warn(line);
 		else console.log(line);
 	}
-	async query(_filter) {
-		return [];
-	}
 	async shutdown() {
 		this.hubConnected = false;
 		this.broker = null;

package/dist/builtins/keychain/index.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DjQ8C-ku.js");
+const require_dist = require("../../dist-C89nqNnn.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
-const require_device_ca = require("../../device-ca-QPBgfqVY.js");
-const require_phase6_declare_gate = require("../../phase6-declare-gate-DrmTtz7F.js");
-const require_constants = require("../../constants-DruwCkfp.js");
+const require_device_ca = require("../../device-ca-CVK3YcR_.js");
+const require_phase6_declare_gate = require("../../phase6-declare-gate-BO-_jLh_.js");
+const require_constants = require("../../constants-B_X9cWEK.js");
 const require_platform_key_source = require("../../platform-key-source-Di7HrlGR.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/keychain/index.mjs

@@ -1,8 +1,8 @@
-import { Cn as keychainAdminCapability, H as KeychainAuditEntrySchema, Li as defineRecordKinds, U as KeychainResetRecordSchema, V as KEYCHAIN_RESET_TRIGGER_ACTOR, Vi as formatSecretScope, ea as normalizeSecretOwner, qr as BaseAddon, ra as parseSecretRef, wn as keychainCapability, ya as EventCategory } from "../../dist-BpSENkRJ.mjs";
+import { G as KeychainResetRecordSchema, Ki as defineRecordKinds, Mn as keychainAdminCapability, Nn as keychainCapability, Oa as EventCategory, U as KEYCHAIN_RESET_TRIGGER_ACTOR, W as KeychainAuditEntrySchema, Xi as formatSecretScope, fa as parseSecretRef, la as normalizeSecretOwner, ni as BaseAddon } from "../../dist-Dhux90yB.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-uFbTyY_o.mjs";
-import { t as resolvePhase6UseRecordsPathForHub } from "../../phase6-declare-gate-JQUqgQgq.mjs";
-import { a as MESH_CA_KEY_REF } from "../../constants-DOlYt1t1.mjs";
+import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-BB6nHAL5.mjs";
+import { t as resolvePhase6UseRecordsPathForHub } from "../../phase6-declare-gate-x9ZCbQJP.mjs";
+import { a as MESH_CA_KEY_REF } from "../../constants-cxKcZRMi.mjs";
 import { n as getPlatformKeychainKey } from "../../platform-key-source-BWlq0jjn.mjs";
 import { createCipheriv, createDecipheriv, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { restrictDirToOwnerSync, restrictFileToOwnerSync, writeOwnerOnlyFileSync } from "@camstack/types/node";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DjQ8C-ku.js");
+const require_dist = require("../../dist-C89nqNnn.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Kr as errMsg, Ni as createEvent, X as RECORDING_SOURCE_CAMSTACK_ADDON, Z as RecordingStatusSchema, qr as BaseAddon, ya as EventCategory } from "../../dist-BpSENkRJ.mjs";
+import { Hi as createEvent, Oa as EventCategory, it as RecordingStatusSchema, ni as BaseAddon, nt as RECORDING_SOURCE_CAMSTACK_ADDON, ti as errMsg } from "../../dist-Dhux90yB.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/auth-schema.d.ts

@@ -12,7 +12,7 @@
 *   - scoped_tokens
 *   - oauth_sessions
 *   - login_sessions, login_session_cutoffs (`login-session-manager.ts`)
-*   - admin_tokens (`admin-token-manager.ts`), auth_audit (`auth-audit-log.ts`)
+*   - admin_tokens (`legacy-token-tables.ts`, read by nothing since D895), auth_audit (`auth-audit-log.ts`)
 *
 * Schema migration: when the backend receives `declareCollection` for
 * a name that already exists with a legacy `(id, data)` KV shape, the
@@ -44,12 +44,9 @@ export declare const USERS_COLLECTION = "users";
 export declare const API_KEYS_COLLECTION = "api_keys";
 /**
 * @durable class=config owner=local-auth
-*   write="an operator or the CLI mints a scoped token; `validate` fires
-*     `updateLastUsed` on every accepted call"
-*   retention="`revoke` deletes one. The daily sweep `reapExpired` drops rows past
-*     `expiresAt` — a NULL expiry is a deliberate never-expires token and BETWEEN
-*     never matches it. `cleanupOrphans` drops tokens owned by the legacy 'system'
-*     id or by a user that no longer exists."
+*   write="none since D895 — the pre-D892 scoped-token rows are kept on disk,
+*     read by nothing (a scoped token is a `credential-tokens` row)"
+*   retention="the operator drops the table by hand"
 */
 export declare const SCOPED_TOKENS_COLLECTION = "scoped_tokens";
 /**

package/dist/builtins/local-auth/local-auth.addon.d.ts

@@ -4,17 +4,16 @@ export declare class LocalAuthAddon extends BaseAddon {
 	private authManager;
 	private userManager;
 	private apiKeyManager;
-	private scopedTokenManager;
 	private oauthSessionManager;
 	private reapTimer;
 	private totpManager;
 	private externalIdentities;
 	private signingKeyKeeper;
 	private loginSessions;
-	private adminTokens;
 	private auditLog;
 	private deviceCredentials;
 	private deviceCa;
+	private preferences;
 	constructor();
 	protected onInitialize(): Promise<ProviderRegistration[]>;
 	private readDeviceCertificateSettings;
@@ -35,13 +34,13 @@ export declare class LocalAuthAddon extends BaseAddon {
 	*/
 	private endAllAccess;
 	/**
-	* Drop auth rows that are dead but were never removed: scoped tokens past
-	* their expiry, and OAuth sessions revoked longer ago than
-	* {@link OAUTH_REVOKED_RETENTION_MS}.
+	* Drop auth rows that are dead but were never removed: OAuth sessions
+	* revoked longer ago than {@link OAUTH_REVOKED_RETENTION_MS}, dead login
+	* sessions, old audit rows, dead device credentials. (Tokens are the hub's
+	* `credential-tokens` rows, reaped there.)
 	*
-	* Neither row could authorise anything — `validate` rejects an expired
-	* token, and every consumer treats a missing session exactly like a revoked
-	* one. So this is hygiene, and it is best-effort: a failed sweep is logged
+	* No such row could authorise anything — every consumer treats a missing
+	* session exactly like a revoked one. So this is hygiene, and it is best-effort: a failed sweep is logged
 	* and the next tick tries again. It must never be able to fail boot.
 	*/
 	private reapAuthRows;