@camstack/system 1.2.458 → 1.2.459

package/dist/builtins/calendars/calendars.addon.mjs

@@ -1,4 +1,4 @@
-import { Ki as defineRecordKinds, Pt as calendarsCapability, _ as CalendarPreferencesSchema, ni as BaseAddon } from "../../dist-B_GRPhnY.mjs";
+import { Gi as defineRecordKinds, Pt as calendarsCapability, _ as CalendarPreferencesSchema, ni as BaseAddon } from "../../dist-Wy8cTxg6.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { z } from "zod";
 //#region src/builtins/calendars/calendar-color.ts
@@ -39,8 +39,7 @@ var _calendarsRecordKinds = defineRecordKinds({ "user-prefs": {
 		name: "updated_at",
 		fields: ["updatedAt"]
 	}],
-	retention: { none: "a missing row reads as empty prefs (all visible, system colours)" },
-	adoptsFrom: "calendars:user-prefs"
+	retention: { none: "a missing row reads as empty prefs (all visible, system colours)" }
 } });
 var calendarsRecordKinds = _calendarsRecordKinds;
 _calendarsRecordKinds["user-prefs"];

package/dist/builtins/calendars/record-kinds.d.ts

@@ -3,7 +3,7 @@
 */
 import { CalendarPreferencesSchema, type DefinedRecordKind } from "@camstack/types";
 import { z } from "zod";
-/** Legacy collection / adoptsFrom target. */
+/** The legacy collection the kind replaced; read only without records. */
 export declare const CALENDARS_USER_PREFS_COLLECTION = "calendars:user-prefs";
 export type CalendarUserPrefsBody = {
 	readonly calendars: z.infer<typeof CalendarPreferencesSchema.shape.calendars>;

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { Ar as streamCatalogCapability, Cr as snapshotCapability, E as DERIVED_CAMERA_SILENCED_CAP_NAMES, Ft as cameraGridLayoutCapability, Hi as createEvent, Oa as EventCategory, P as DeclaredDevices, Qr as DeviceFeature, Vr as buildFfmpegArgs, Wn as memoizePinnedFfmpeg, X as MOTION_CLOSE_AFTER_MS, Yt as declarationOwnerNodeId, Zi as hydrateSchema, ei as DeviceType, ni as BaseAddon, o as BaseDevice, qn as motionCapability, ti as errMsg } from "../../dist-B_GRPhnY.mjs";
+import { Ar as streamCatalogCapability, Cr as snapshotCapability, E as DERIVED_CAMERA_SILENCED_CAP_NAMES, Ft as cameraGridLayoutCapability, Hi as createEvent, P as DeclaredDevices, Qr as DeviceFeature, Ta as EventCategory, Vr as buildFfmpegArgs, Wn as memoizePinnedFfmpeg, X as MOTION_CLOSE_AFTER_MS, Xi as hydrateSchema, Yt as declarationOwnerNodeId, ei as DeviceType, ni as BaseAddon, o as BaseDevice, qn as motionCapability, ti as errMsg } from "../../dist-Wy8cTxg6.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/composer/composer.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
-const require_composition_sources = require("../../composition-sources-DURQNDJ4.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
+const require_composition_sources = require("../../composition-sources-b0e_2I-D.js");
 let zod = require("zod");
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/composer/composer.addon.mjs

@@ -1,5 +1,5 @@
-import { At as buildCapabilityLookup, Br as COMPOSER_ADDON_ID, Gr as compositionFeatureEnabled, Hi as createEvent, Hr as cloneStatefulExpressionMemory, Jr as compositionSourceKey, Kr as compositionItemFieldPath, Oa as EventCategory, P as DeclaredDevices, Rt as composerCapability, Ur as composedDeviceRef, Wr as composedDeviceStableId, Xr as disarmRoseMemory, Yr as createStatefulExpressionMemory, Zr as toExpressionValue, ei as DeviceType, er as planComposition, f as COMPOSED_ITEM_FIXED_FIELDS, ni as BaseAddon, o as BaseDevice, pn as expressionContainsBuiltinCall, qr as compositionSliceKey, r as ALL_CAPABILITY_DEFINITIONS, ti as errMsg, un as evaluateCompositionField, zt as compositionFieldKey } from "../../dist-B_GRPhnY.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-BVguN7VV.mjs";
+import { At as buildCapabilityLookup, Br as COMPOSER_ADDON_ID, Gr as compositionFeatureEnabled, Hi as createEvent, Hr as cloneStatefulExpressionMemory, Jr as compositionSourceKey, Kr as compositionItemFieldPath, P as DeclaredDevices, Rt as composerCapability, Ta as EventCategory, Ur as composedDeviceRef, Wr as composedDeviceStableId, Xr as disarmRoseMemory, Yr as createStatefulExpressionMemory, Zr as toExpressionValue, ei as DeviceType, er as planComposition, f as COMPOSED_ITEM_FIXED_FIELDS, ni as BaseAddon, o as BaseDevice, pn as expressionContainsBuiltinCall, qr as compositionSliceKey, r as ALL_CAPABILITY_DEFINITIONS, ti as errMsg, un as evaluateCompositionField, zt as compositionFieldKey } from "../../dist-Wy8cTxg6.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-DNRZWR1j.mjs";
 import { z } from "zod";
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { ni as BaseAddon, zn as logDestinationCapability } from "../../dist-B_GRPhnY.mjs";
+import { ni as BaseAddon, zn as logDestinationCapability } from "../../dist-Wy8cTxg6.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
-const require_composition_sources = require("../../composition-sources-DURQNDJ4.js");
+const require_composition_sources = require("../../composition-sources-b0e_2I-D.js");
 const require_prefix_range = require("../../prefix-range-D_KueXbQ.js");
 const require_prefix_walk = require("../../prefix-walk-Dv6MLZlM.js");
 let zod = require("zod");
@@ -531,8 +531,7 @@ var _coreBlocksRecordKinds = require_dist.defineRecordKinds({
 			fields: ["enabled"]
 		}],
 		retention: { none: "operator delete only" },
-		maxDataBytes: 256 * 1024,
-		adoptsFrom: CORE_BLOCKS_COLLECTION
+		maxDataBytes: 256 * 1024
 	},
 	settings: {
 		schema: CoreBlockSettingsBodySchema,
@@ -540,8 +539,7 @@ var _coreBlocksRecordKinds = require_dist.defineRecordKinds({
 		writeTrigger: "legacy only — migrateRawSecrets reads then deletes rows (D880)",
 		device: "none",
 		at: "none",
-		retention: { none: "rows deleted by migrateRawSecrets" },
-		adoptsFrom: CORE_BLOCK_SETTINGS_COLLECTION
+		retention: { none: "rows deleted by migrateRawSecrets" }
 	}
 });
 var coreBlocksRecordKinds = _coreBlocksRecordKinds;

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,6 +1,6 @@
-import { $t as describeComposableCaps, At as buildCapabilityLookup, Bi as collectSecretMarkerRefs, Bt as compositionSourceRefs, Gt as coreBlocksCapability, Ht as coreBlockComposition, Jn as normalizeCoreBlockWrite, Jr as compositionSourceKey, Ki as defineRecordKinds, P as DeclaredDevices, Pr as validateComposition, Ta as transformSecretWrite, Ur as composedDeviceRef, Ut as coreBlockIdFromAddonId, Vt as coreBlockAddonId, Wt as coreBlockSourceKind, Zi as hydrateSchema, dr as resolveCoreBlockFiles, er as planComposition, h as CORE_BLOCK_ADDON_PREFIX, ia as isSecretRefOwnedBy, m as CORE_BLOCKS_ADDON_ID, na as isSecretMarker, ni as BaseAddon, p as COMPOSER_RUNNER_ID, r as ALL_CAPABILITY_DEFINITIONS, sr as replacedFieldKeys, ti as errMsg, ur as resolveCoreBlockEntry, va as resolveSecretMarkers, xa as secretTreeFromSchema, y as CoreBlockSchema } from "../../dist-B_GRPhnY.mjs";
+import { $t as describeComposableCaps, At as buildCapabilityLookup, Bi as collectSecretMarkerRefs, Bt as compositionSourceRefs, Gi as defineRecordKinds, Gt as coreBlocksCapability, Ht as coreBlockComposition, Jn as normalizeCoreBlockWrite, Jr as compositionSourceKey, P as DeclaredDevices, Pr as validateComposition, Sa as transformSecretWrite, Ur as composedDeviceRef, Ut as coreBlockIdFromAddonId, Vt as coreBlockAddonId, Wt as coreBlockSourceKind, Xi as hydrateSchema, dr as resolveCoreBlockFiles, er as planComposition, h as CORE_BLOCK_ADDON_PREFIX, ha as resolveSecretMarkers, m as CORE_BLOCKS_ADDON_ID, ni as BaseAddon, p as COMPOSER_RUNNER_ID, r as ALL_CAPABILITY_DEFINITIONS, ra as isSecretRefOwnedBy, sr as replacedFieldKeys, ta as isSecretMarker, ti as errMsg, ur as resolveCoreBlockEntry, va as secretTreeFromSchema, y as CoreBlockSchema } from "../../dist-Wy8cTxg6.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-BVguN7VV.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-DNRZWR1j.mjs";
 import { t as prefixRange } from "../../prefix-range-Dl0znowN.mjs";
 import { n as unwrapStoredValue, t as loadPrefixed } from "../../prefix-walk-DAOBSyH1.mjs";
 import { createRequire } from "node:module";
@@ -526,8 +526,7 @@ var _coreBlocksRecordKinds = defineRecordKinds({
 			fields: ["enabled"]
 		}],
 		retention: { none: "operator delete only" },
-		maxDataBytes: 256 * 1024,
-		adoptsFrom: CORE_BLOCKS_COLLECTION
+		maxDataBytes: 256 * 1024
 	},
 	settings: {
 		schema: CoreBlockSettingsBodySchema,
@@ -535,8 +534,7 @@ var _coreBlocksRecordKinds = defineRecordKinds({
 		writeTrigger: "legacy only — migrateRawSecrets reads then deletes rows (D880)",
 		device: "none",
 		at: "none",
-		retention: { none: "rows deleted by migrateRawSecrets" },
-		adoptsFrom: CORE_BLOCK_SETTINGS_COLLECTION
+		retention: { none: "rows deleted by migrateRawSecrets" }
 	}
 });
 var coreBlocksRecordKinds = _coreBlocksRecordKinds;

package/dist/builtins/device-history/device-history.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
 //#region src/builtins/device-history/time/bucket-time.ts
 /**
 * Bucket arithmetic for the three rollup tiers (D850, plan §4/§5.5).

package/dist/builtins/device-history/device-history.addon.mjs

@@ -1,4 +1,4 @@
-import { B as HISTORY_CATALOG, Ji as emitReadiness, O as DEVICE_HISTORY_ENERGY_KEY, Oa as EventCategory, Tt as armRemovalReconcile, di as HISTORY_DEFAULT_MIN_INTERVAL_MS, ei as DeviceType, in as deviceRemovalHookCapability, ni as BaseAddon, nn as deviceHistoryCapability } from "../../dist-B_GRPhnY.mjs";
+import { B as HISTORY_CATALOG, O as DEVICE_HISTORY_ENERGY_KEY, Ta as EventCategory, Tt as armRemovalReconcile, di as HISTORY_DEFAULT_MIN_INTERVAL_MS, ei as DeviceType, in as deviceRemovalHookCapability, ni as BaseAddon, nn as deviceHistoryCapability, qi as emitReadiness } from "../../dist-Wy8cTxg6.mjs";
 //#region src/builtins/device-history/time/bucket-time.ts
 /**
 * Bucket arithmetic for the three rollup tiers (D850, plan §4/§5.5).

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
 const require_prefix_range = require("../../prefix-range-D_KueXbQ.js");
 const require_prefix_walk = require("../../prefix-walk-Dv6MLZlM.js");
@@ -7894,8 +7894,7 @@ var _deviceManagerRecordKinds = require_dist.defineRecordKinds({ tombstones: {
 	retention: {
 		owner: "device-manager",
 		reason: "90 days (`DEVICE_TOMBSTONE_RETENTION_MS`), pruned whenever a tombstone is written or the list is read"
-	},
-	adoptsFrom: DEVICE_TOMBSTONES_COLLECTION
+	}
 } });
 var deviceManagerRecordKinds = _deviceManagerRecordKinds;
 _deviceManagerRecordKinds.tombstones;
@@ -7904,7 +7903,6 @@ _deviceManagerRecordKinds.tombstones;
 /**
 * The tombstones of deleted devices (D865) — `tombstones` record kind (phase 4).
 */
-var DEVICE_TOMBSTONES_COLLECTION = "device-manager:tombstones";
 /** More than the engine's default row cap, so a read is never silently truncated. */
 var TOMBSTONE_READ_LIMIT = 2e4;
 function rowToTombstone(id, body) {

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,4 +1,4 @@
-import { $r as DeviceRole, Ea as userError, F as DeviceStatusSchema, I as DeviceTombstoneSchema, It as canonicalIconKey, Ki as defineRecordKinds, Kt as createDeviceExtensionProvider, Mi as WELL_KNOWN_TAB_MAP, Nt as buildStreamParamsConfigSchema, Oa as EventCategory, Pn as legacyAutoLinkIds, Qi as isDeviceConfigCap, Qn as parseStreamParamsFormPatch, Qr as DeviceFeature, R as FieldClaimModeSchema, Rn as locationIconKey, Sa as sleep$1, Sr as siteZoneKey, T as DAY_NAMES, Ta as transformSecretWrite, Vi as collectZodSecretPaths, Y as MINUTES_PER_DAY, Yn as normalizeUnit, Zt as defineExtensionSlotProvider, an as deviceStateCapability, ba as secretTreeFromPaths, c as CAMERA_SWITCH_ORDER, cn as enumerateItemArrayFields, ct as STREAM_PROFILE_META, ea as isKeychainStoredField, ei as DeviceType, fn as expandContainer, gr as runtimeStatePolicyFor, ki as SECRET_CLEAR, ln as enumerateSchemaFields, na as isSecretMarker, ni as BaseAddon, on as deviceStatusCapability, r as ALL_CAPABILITY_DEFINITIONS, ra as isSecretMarkerLike, rn as deviceManagerCapability, ta as isSecretClear, ti as errMsg, tn as deviceExtensionCapability, u as CAP_NAMES_WITH_STATUS, va as resolveSecretMarkers, vn as formatMinutes, wa as toSecretFieldView, z as FieldClaimSchema } from "../../dist-B_GRPhnY.mjs";
+import { $i as isKeychainStoredField, $r as DeviceRole, Ca as userError, F as DeviceStatusSchema, Gi as defineRecordKinds, I as DeviceTombstoneSchema, It as canonicalIconKey, Kt as createDeviceExtensionProvider, Mi as WELL_KNOWN_TAB_MAP, Nt as buildStreamParamsConfigSchema, Pn as legacyAutoLinkIds, Qn as parseStreamParamsFormPatch, Qr as DeviceFeature, R as FieldClaimModeSchema, Rn as locationIconKey, Sa as transformSecretWrite, Sr as siteZoneKey, T as DAY_NAMES, Ta as EventCategory, Vi as collectZodSecretPaths, Y as MINUTES_PER_DAY, Yn as normalizeUnit, Zi as isDeviceConfigCap, Zt as defineExtensionSlotProvider, _a as secretTreeFromPaths, an as deviceStateCapability, c as CAMERA_SWITCH_ORDER, cn as enumerateItemArrayFields, ct as STREAM_PROFILE_META, ea as isSecretClear, ei as DeviceType, fn as expandContainer, gr as runtimeStatePolicyFor, ha as resolveSecretMarkers, ki as SECRET_CLEAR, ln as enumerateSchemaFields, na as isSecretMarkerLike, ni as BaseAddon, on as deviceStatusCapability, r as ALL_CAPABILITY_DEFINITIONS, rn as deviceManagerCapability, ta as isSecretMarker, ti as errMsg, tn as deviceExtensionCapability, u as CAP_NAMES_WITH_STATUS, vn as formatMinutes, xa as toSecretFieldView, ya as sleep$1, z as FieldClaimSchema } from "../../dist-Wy8cTxg6.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 import { t as prefixRange } from "../../prefix-range-Dl0znowN.mjs";
 import { t as loadPrefixed } from "../../prefix-walk-DAOBSyH1.mjs";
@@ -7888,8 +7888,7 @@ var _deviceManagerRecordKinds = defineRecordKinds({ tombstones: {
 	retention: {
 		owner: "device-manager",
 		reason: "90 days (`DEVICE_TOMBSTONE_RETENTION_MS`), pruned whenever a tombstone is written or the list is read"
-	},
-	adoptsFrom: DEVICE_TOMBSTONES_COLLECTION
+	}
 } });
 var deviceManagerRecordKinds = _deviceManagerRecordKinds;
 _deviceManagerRecordKinds.tombstones;
@@ -7898,7 +7897,6 @@ _deviceManagerRecordKinds.tombstones;
 /**
 * The tombstones of deleted devices (D865) — `tombstones` record kind (phase 4).
 */
-var DEVICE_TOMBSTONES_COLLECTION = "device-manager:tombstones";
 /** More than the engine's default row cap, so a read is never silently truncated. */
 var TOMBSTONE_READ_LIMIT = 2e4;
 function rowToTombstone(id, body) {

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { ni as BaseAddon, zn as logDestinationCapability } from "../../dist-B_GRPhnY.mjs";
+import { ni as BaseAddon, zn as logDestinationCapability } from "../../dist-Wy8cTxg6.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/keychain/index.js

@@ -3,11 +3,10 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
-const require_device_ca = require("../../device-ca-BrVK_5s3.js");
-const require_phase6_declare_gate = require("../../phase6-declare-gate-Dag1_WR2.js");
-const require_constants = require("../../constants-Njka8Cv6.js");
+const require_device_ca = require("../../device-ca-CPTDs--d.js");
+const require_constants = require("../../constants-6OeJiZgi.js");
 const require_platform_key_source = require("../../platform-key-source-Di7HrlGR.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -1072,6 +1071,42 @@ function errMsg(err) {
 	return err instanceof Error ? err.message : String(err);
 }
 require_dist.EventCategory.KeychainChanged;
+var KeychainAuditBodySchema = require_dist.KeychainAuditEntrySchema.omit({
+	id: true,
+	at: true
+});
+var KeychainResetBodySchema = require_dist.KeychainResetRecordSchema.omit({
+	id: true,
+	at: true
+});
+var _keychainRecordKinds = require_dist.defineRecordKinds({
+	audit: {
+		schema: KeychainAuditBodySchema,
+		class: "audit",
+		writeTrigger: "one row per write / delete / rotation / reveal / recovery download",
+		device: "none",
+		at: "required",
+		indexes: [{
+			name: "audit_at",
+			fields: ["at"]
+		}],
+		retention: {
+			owner: "keychain",
+			reason: "90 days and at most 20_000 rows, pruned at boot and daily"
+		}
+	},
+	resets: {
+		schema: KeychainResetBodySchema,
+		class: "config",
+		writeTrigger: "one row per keychain reset (System → Secrets, or the RESET_KEYCHAIN trigger file); acknowledgeReset stamps acknowledgedAt",
+		device: "none",
+		at: "required",
+		retention: { none: "a handful of rows over a hub life; they name archive tables a reset left behind" }
+	}
+});
+var keychainRecordKinds = _keychainRecordKinds;
+_keychainRecordKinds.audit;
+_keychainRecordKinds.resets;
 //#endregion
 //#region src/builtins/keychain/keychain-store.ts
 var import_read_all_rows = require_read_all_rows$1.require_read_all_rows();
@@ -1718,44 +1753,6 @@ var KeychainRepository = class {
 		return row === void 0 ? null : toResetRecord(row.id, row.data);
 	}
 };
-var KeychainAuditBodySchema = require_dist.KeychainAuditEntrySchema.omit({
-	id: true,
-	at: true
-});
-var KeychainResetBodySchema = require_dist.KeychainResetRecordSchema.omit({
-	id: true,
-	at: true
-});
-var _keychainRecordKinds = require_dist.defineRecordKinds({
-	audit: {
-		schema: KeychainAuditBodySchema,
-		class: "audit",
-		writeTrigger: "one row per write / delete / rotation / reveal / recovery download",
-		device: "none",
-		at: "required",
-		indexes: [{
-			name: "audit_at",
-			fields: ["at"]
-		}],
-		retention: {
-			owner: "keychain",
-			reason: "90 days and at most 20_000 rows, pruned at boot and daily"
-		},
-		adoptsFrom: KEYCHAIN_AUDIT_COLLECTION
-	},
-	resets: {
-		schema: KeychainResetBodySchema,
-		class: "config",
-		writeTrigger: "one row per keychain reset (System → Secrets, or the RESET_KEYCHAIN trigger file); acknowledgeReset stamps acknowledgedAt",
-		device: "none",
-		at: "required",
-		retention: { none: "a handful of rows over a hub life; they name archive tables a reset left behind" },
-		adoptsFrom: KEYCHAIN_RESETS_COLLECTION
-	}
-});
-var keychainRecordKinds = _keychainRecordKinds;
-_keychainRecordKinds.audit;
-_keychainRecordKinds.resets;
 //#endregion
 //#region src/builtins/keychain/keychain-usage.ts
 /**
@@ -1953,8 +1950,9 @@ var KeychainAddon = class extends require_dist.BaseAddon {
 			error: (message, meta) => ctx.logger.error(message, meta ? { meta } : void 0)
 		};
 		const records = ctx.records;
+		if (records !== void 0) await records.declare(keychainRecordKinds);
 		const service = new KeychainService({
-			repo: new KeychainRepository(door, records !== void 0 && await require_phase6_declare_gate.resolvePhase6UseRecordsPathForHub(ctx, "keychain", keychainRecordKinds, ["keychain:audit", "keychain:resets"]) && records !== void 0 ? KeychainRepository.recordStoresOf(records) : void 0),
+			repo: new KeychainRepository(door, records !== void 0 ? KeychainRepository.recordStoresOf(records) : void 0),
 			candidates: async () => {
 				return buildKeySourceCandidates({
 					config: readKeyConfig(await ctx.settings?.getSection("keychain") ?? {}),

package/dist/builtins/keychain/index.mjs

@@ -1,8 +1,7 @@
-import { G as KeychainResetRecordSchema, Ki as defineRecordKinds, Mn as keychainAdminCapability, Nn as keychainCapability, Oa as EventCategory, U as KEYCHAIN_RESET_TRIGGER_ACTOR, W as KeychainAuditEntrySchema, Xi as formatSecretScope, fa as parseSecretRef, la as normalizeSecretOwner, ni as BaseAddon } from "../../dist-B_GRPhnY.mjs";
+import { G as KeychainResetRecordSchema, Gi as defineRecordKinds, Mn as keychainAdminCapability, Nn as keychainCapability, Ta as EventCategory, U as KEYCHAIN_RESET_TRIGGER_ACTOR, W as KeychainAuditEntrySchema, Yi as formatSecretScope, ca as normalizeSecretOwner, da as parseSecretRef, ni as BaseAddon } from "../../dist-Wy8cTxg6.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-lEaAQ9Xi.mjs";
-import { t as resolvePhase6UseRecordsPathForHub } from "../../phase6-declare-gate-Lb-mrVvz.mjs";
-import { a as MESH_CA_KEY_REF } from "../../constants-FGjnsE2x.mjs";
+import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-Bnkw8GyU.mjs";
+import { a as MESH_CA_KEY_REF } from "../../constants-BnkOdj9Q.mjs";
 import { n as getPlatformKeychainKey } from "../../platform-key-source-BWlq0jjn.mjs";
 import { createCipheriv, createDecipheriv, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { restrictDirToOwnerSync, restrictFileToOwnerSync, writeOwnerOnlyFileSync } from "@camstack/types/node";
@@ -1066,6 +1065,42 @@ function errMsg(err) {
 	return err instanceof Error ? err.message : String(err);
 }
 EventCategory.KeychainChanged;
+var KeychainAuditBodySchema = KeychainAuditEntrySchema.omit({
+	id: true,
+	at: true
+});
+var KeychainResetBodySchema = KeychainResetRecordSchema.omit({
+	id: true,
+	at: true
+});
+var _keychainRecordKinds = defineRecordKinds({
+	audit: {
+		schema: KeychainAuditBodySchema,
+		class: "audit",
+		writeTrigger: "one row per write / delete / rotation / reveal / recovery download",
+		device: "none",
+		at: "required",
+		indexes: [{
+			name: "audit_at",
+			fields: ["at"]
+		}],
+		retention: {
+			owner: "keychain",
+			reason: "90 days and at most 20_000 rows, pruned at boot and daily"
+		}
+	},
+	resets: {
+		schema: KeychainResetBodySchema,
+		class: "config",
+		writeTrigger: "one row per keychain reset (System → Secrets, or the RESET_KEYCHAIN trigger file); acknowledgeReset stamps acknowledgedAt",
+		device: "none",
+		at: "required",
+		retention: { none: "a handful of rows over a hub life; they name archive tables a reset left behind" }
+	}
+});
+var keychainRecordKinds = _keychainRecordKinds;
+_keychainRecordKinds.audit;
+_keychainRecordKinds.resets;
 //#endregion
 //#region src/builtins/keychain/keychain-store.ts
 var import_read_all_rows = require_read_all_rows();
@@ -1712,44 +1747,6 @@ var KeychainRepository = class {
 		return row === void 0 ? null : toResetRecord(row.id, row.data);
 	}
 };
-var KeychainAuditBodySchema = KeychainAuditEntrySchema.omit({
-	id: true,
-	at: true
-});
-var KeychainResetBodySchema = KeychainResetRecordSchema.omit({
-	id: true,
-	at: true
-});
-var _keychainRecordKinds = defineRecordKinds({
-	audit: {
-		schema: KeychainAuditBodySchema,
-		class: "audit",
-		writeTrigger: "one row per write / delete / rotation / reveal / recovery download",
-		device: "none",
-		at: "required",
-		indexes: [{
-			name: "audit_at",
-			fields: ["at"]
-		}],
-		retention: {
-			owner: "keychain",
-			reason: "90 days and at most 20_000 rows, pruned at boot and daily"
-		},
-		adoptsFrom: KEYCHAIN_AUDIT_COLLECTION
-	},
-	resets: {
-		schema: KeychainResetBodySchema,
-		class: "config",
-		writeTrigger: "one row per keychain reset (System → Secrets, or the RESET_KEYCHAIN trigger file); acknowledgeReset stamps acknowledgedAt",
-		device: "none",
-		at: "required",
-		retention: { none: "a handful of rows over a hub life; they name archive tables a reset left behind" },
-		adoptsFrom: KEYCHAIN_RESETS_COLLECTION
-	}
-});
-var keychainRecordKinds = _keychainRecordKinds;
-_keychainRecordKinds.audit;
-_keychainRecordKinds.resets;
 //#endregion
 //#region src/builtins/keychain/keychain-usage.ts
 /**
@@ -1947,8 +1944,9 @@ var KeychainAddon = class extends BaseAddon {
 			error: (message, meta) => ctx.logger.error(message, meta ? { meta } : void 0)
 		};
 		const records = ctx.records;
+		if (records !== void 0) await records.declare(keychainRecordKinds);
 		const service = new KeychainService({
-			repo: new KeychainRepository(door, records !== void 0 && await resolvePhase6UseRecordsPathForHub(ctx, "keychain", keychainRecordKinds, ["keychain:audit", "keychain:resets"]) && records !== void 0 ? KeychainRepository.recordStoresOf(records) : void 0),
+			repo: new KeychainRepository(door, records !== void 0 ? KeychainRepository.recordStoresOf(records) : void 0),
 			candidates: async () => {
 				return buildKeySourceCandidates({
 					config: readKeyConfig(await ctx.settings?.getSection("keychain") ?? {}),

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Hi as createEvent, Oa as EventCategory, it as RecordingStatusSchema, ni as BaseAddon, nt as RECORDING_SOURCE_CAMSTACK_ADDON, ti as errMsg } from "../../dist-B_GRPhnY.mjs";
+import { Hi as createEvent, Ta as EventCategory, it as RecordingStatusSchema, ni as BaseAddon, nt as RECORDING_SOURCE_CAMSTACK_ADDON, ti as errMsg } from "../../dist-Wy8cTxg6.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";