@camstack/system 1.2.461 → 1.2.463

package/dist/builtins/sqlite-storage/owned-sqlite-file.d.ts

@@ -19,10 +19,6 @@ import type { DataStoreInput, DataStoreOp, DataStoreOutput, OwnedSqliteFileSpec,
 import { SqliteSettingsBackend } from "./sqlite-settings-backend.js";
 import type { SqliteVecVectorIndex } from "./vector-index-vec.js";
 export type { OwnedSqliteFileSpec } from "./file-host-protocol.js";
-/** A table a retired-collection purge dropped, and the rows that went with it. */
-export interface DroppedRetiredTable {
-	readonly rows: number;
-}
 export interface OwnedSqliteFile {
 	readonly databaseId: DataStoreDatabase;
 	readonly livePath: string;
@@ -43,7 +39,6 @@ export interface OwnedSqliteFile {
 		readonly bytes: number | null;
 		readonly declaredThisBoot: boolean;
 	}[]>;
-	dropRetiredTable(name: string): Promise<DroppedRetiredTable | null>;
 	/** Which thread serves this file: 0 is the engine's main thread. */
 	servingThreadId(): Promise<number>;
 	/** The owner's verified copy of this file (D693). */
@@ -106,7 +101,6 @@ declare abstract class OwnedFileBase implements OwnedSqliteFile {
 		readonly bytes: number | null;
 		readonly declaredThisBoot: boolean;
 	}[]>;
-	abstract dropRetiredTable(name: string): Promise<DroppedRetiredTable | null>;
 	abstract servingThreadId(): Promise<number>;
 	protected abstract stopConnection(): Promise<void>;
 	protected abstract stopMaintenance(): void;
@@ -141,7 +135,6 @@ export declare class InlineOwnedFile extends OwnedFileBase {
 		readonly bytes: number | null;
 		readonly declaredThisBoot: boolean;
 	}[]>;
-	dropRetiredTable(name: string): Promise<DroppedRetiredTable | null>;
 	servingThreadId(): Promise<number>;
 	protected stopMaintenance(): void;
 	protected stopConnection(): Promise<void>;
@@ -163,7 +156,6 @@ export declare class WorkerOwnedFile extends OwnedFileBase {
 		readonly bytes: number | null;
 		readonly declaredThisBoot: boolean;
 	}[]>;
-	dropRetiredTable(name: string): Promise<DroppedRetiredTable | null>;
 	servingThreadId(): Promise<number>;
 	protected stopMaintenance(): void;
 	protected stopConnection(): Promise<void>;

package/dist/builtins/sqlite-storage/records/records-sql.d.ts

@@ -18,8 +18,6 @@ export declare const RECORD_KINDS_TABLE = "_record_kinds";
 export declare const RECORD_SEQUENCES_TABLE = "_record_sequences";
 /** The statements that create the shared tables. Idempotent. */
 export declare const RECORDS_SCHEMA_SQL = "\nCREATE TABLE IF NOT EXISTS records (\n  rid        INTEGER PRIMARY KEY,\n  kind_id    INTEGER NOT NULL,\n  id         TEXT    NOT NULL,\n  device_id  INTEGER,\n  at         INTEGER,\n  expires_at INTEGER,\n  rev        INTEGER NOT NULL DEFAULT 1,\n  updated_at INTEGER NOT NULL,\n  data       BLOB    NOT NULL,\n  UNIQUE (kind_id, id)\n);\nCREATE INDEX IF NOT EXISTS records_kind_device_at ON records(kind_id, device_id, at);\nCREATE INDEX IF NOT EXISTS records_kind_at ON records(kind_id, at);\nCREATE INDEX IF NOT EXISTS records_expires ON records(expires_at) WHERE expires_at IS NOT NULL;\nCREATE TABLE IF NOT EXISTS _record_kinds (\n  kind_id       INTEGER PRIMARY KEY AUTOINCREMENT,\n  owner         TEXT NOT NULL,\n  kind          TEXT NOT NULL,\n  database      TEXT NOT NULL,\n  manifest_hash TEXT NOT NULL,\n  declaration   TEXT NOT NULL,\n  state         TEXT NOT NULL,\n  orphaned_at   INTEGER,\n  -- RETIRED (D900): the records-migration boot guard's flag. Nothing reads it;\n  -- the column stays so an older build can still open a file this one created.\n  adopted_at    INTEGER,\n  UNIQUE (owner, kind)\n);\nCREATE TABLE IF NOT EXISTS _record_sequences (\n  kind_id INTEGER PRIMARY KEY,\n  next    INTEGER NOT NULL\n);\n";
-/** The tables the records engine owns: never droppable through `dropCollection`. */
-export declare const RECORDS_ENGINE_TABLES: readonly string[];
 /** The built-in indexes. */
 export declare const INDEX_KIND_DEVICE_AT = "records_kind_device_at";
 export declare const INDEX_KIND_AT = "records_kind_at";

package/dist/builtins/sqlite-storage/sqlite-settings-backend.d.ts

@@ -91,11 +91,6 @@ interface SettingsUpdateWhereInput {
 interface SettingsUpdateWhereResult {
 	readonly updated: number;
 }
-/** What {@link SqliteSettingsBackend.dropRetiredTable} destroyed. */
-export interface DroppedTable {
-	/** Rows the table held at the moment it was dropped. */
-	readonly rows: number;
-}
 /**
 * The addon that owns a scoped row, lifted out of the filter that names it.
 *
@@ -438,12 +433,6 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
 		declaredThisBoot: boolean;
 	}[];
 	/**
-	* Drop one table nobody owns (D870 migration, one-shot). Refuses a canonical
-	* or engine table, one a running addon declared since boot, a table that is
-	* not there, and a row count other than the one the caller stated.
-	*/
-	dropTable(name: string, expectRows: number): number;
-	/**
 	* The tables this file's own `_collection_declarations` names — the
 	* placement authority (D851). Read from DISK, not from memory, so a table
 	* created and declared by an earlier life of the process still counts.
@@ -584,23 +573,6 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
 	/** Serialise per-column values for SQL binding: objects → JSON, booleans → 0/1. */
 	private serializeColumnValue;
 	private ensureTable;
-	/**
-	* Drop a table nothing declares any more, reporting what went with it.
-	*
-	* The DDL lives here because the engine owns the handle AND the two memos
-	* that outlive a table: `structuredTables` (schema fingerprint) and
-	* `declaredCollections` (the column set `compileFilter` resolves against).
-	* Dropping behind their backs would leave a ghost — a later declaration of
-	* the same name would be memoised as "already materialised" against a table
-	* that no longer exists.
-	*
-	* WHICH tables are retired, and the logging, are policy: they live in
-	* `retired-collections.ts`. This method knows only how to drop one.
-	*
-	* Answers `null` when the table is not there — the steady state after the
-	* first boot that ran the purge, and the case on a fresh install.
-	*/
-	dropRetiredTable(table: string): DroppedTable | null;
 	/** Returns SQLite's `lastInsertRowid` — the only place an auto-assigned key
 	*  is knowable (D473). */
 	private tableInsert;

package/dist/builtins/sqlite-storage/sqlite-settings.addon.d.ts

@@ -46,8 +46,7 @@ export declare class SqliteSettingsAddon extends BaseAddon {
 	protected onInitialize(): Promise<ProviderRegistration[]>;
 	/**
 	* Housekeeping that must happen BEFORE anything can read a file: the
-	* retired-key purge (settings only) and the retired-table purge (every
-	* open file).
+	* retired-key purge (settings file only).
 	*/
 	private purgeBeforeServing;
 	/**

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bn-RNanh.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-D_VwZiDt.js");
-const require_wal_maintenance = require("../../wal-maintenance-CaJjuLHq.js");
+const require_dist = require("../../dist-D9aw_d0G.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-CGUqX-Oz.js");
+const require_wal_maintenance = require("../../wal-maintenance-jXcOxm2T.js");
 const require_sqlite_snapshot_protocol = require("../../sqlite-snapshot-protocol-B9OndqZv.js");
 const require_wal_checkpoint_policy = require("../../wal-checkpoint-policy-d2z2qPqx.js");
 let node_fs_promises = require("node:fs/promises");
@@ -937,9 +937,6 @@ var InlineOwnedFile = class extends OwnedFileBase {
 	listPhysicalTables(ownerPrefix) {
 		return Promise.resolve(require_wal_maintenance.callControl(require_wal_maintenance.controlTargetOf(this.backend, 0), "listPhysicalTables", { ownerPrefix }));
 	}
-	async dropRetiredTable(name) {
-		return require_wal_maintenance.callControl(require_wal_maintenance.controlTargetOf(this.backend, 0), "dropRetiredTable", { name });
-	}
 	async servingThreadId() {
 		return 0;
 	}
@@ -994,9 +991,6 @@ var WorkerOwnedFile = class extends OwnedFileBase {
 	listPhysicalTables(ownerPrefix) {
 		return this.client.control("listPhysicalTables", { ownerPrefix });
 	}
-	dropRetiredTable(name) {
-		return this.client.control("dropRetiredTable", { name });
-	}
 	servingThreadId() {
 		return this.client.control("threadId", {});
 	}
@@ -1504,25 +1498,14 @@ var RecordsProvider = class {
 };
 //#endregion
 //#region src/builtins/sqlite-storage/storage-admin-provider.ts
-/**
-* The `storage-admin` provider of the SQLite engine (D870): the operator's
-* maintenance reach into the settings database - list its tables and record
-* kinds, read a kind for diagnosis, drop a table that nothing owns any more.
-* Every call is logged with its table and counts.
-*
-* `dropCollection` is a one-shot of the D870 migration: remove it, and the
-* capability's method, once the last hub ran `migrate-device-store.ts --drop`.
-*/
 var StorageAdminProvider = class {
 	backend;
 	logger;
-	installedOwners;
 	records;
 	peerFiles;
-	constructor(backend, logger, installedOwners, records, peerFiles = async () => []) {
+	constructor(backend, logger, records, peerFiles = async () => []) {
 		this.backend = backend;
 		this.logger = logger;
-		this.installedOwners = installedOwners;
 		this.records = records;
 		this.peerFiles = peerFiles;
 	}
@@ -1532,19 +1515,6 @@ var StorageAdminProvider = class {
 	readRecords(input) {
 		return this.records.readRecords(input);
 	}
-	/** May this table be dropped AT ALL? Throws with the reason when not. */
-	async assertDroppable(collection) {
-		const colon = collection.indexOf(":");
-		const base = colon > 0 ? collection.slice(colon + 1) : "";
-		if (colon > 0 && require_dist.STORAGE_ADMIN_SCOPED_BASES.includes(base)) return;
-		if (require_dist.STORAGE_ADMIN_MOVED_COLLECTIONS.includes(collection)) return;
-		if (colon <= 0) throw new Error(`drop refused: "${collection}" is not a scoped table`);
-		const installed = await this.installedOwners().catch((err) => {
-			throw new Error(`drop refused: the installed addons could not be read (${err instanceof Error ? err.message : String(err)})`);
-		});
-		const owner = collection.slice(0, colon);
-		if (installed.has(owner)) throw new Error(`drop refused: "${collection}" belongs to the installed addon "${owner}"`);
-	}
 	async listTables(input) {
 		const tables = [...this.backend.listTables(input.ownerPrefix)];
 		for (const file of await this.peerFiles()) tables.push(...await file.listPhysicalTables(input.ownerPrefix));
@@ -1555,140 +1525,8 @@ var StorageAdminProvider = class {
 		} });
 		return { tables };
 	}
-	async dropCollection(input) {
-		try {
-			await this.assertDroppable(input.collection);
-			const rows = this.backend.dropTable(input.collection, input.expectRows);
-			this.logger.warn("storage-admin: DROPPED a table", { meta: {
-				collection: input.collection,
-				rows
-			} });
-			return {
-				dropped: true,
-				rows
-			};
-		} catch (err) {
-			this.logger.warn("storage-admin: drop refused", { meta: {
-				collection: input.collection,
-				expectRows: input.expectRows,
-				error: err instanceof Error ? err.message : String(err)
-			} });
-			throw err;
-		}
-	}
 };
 //#endregion
-//#region src/builtins/sqlite-storage/retired-collections.ts
-/**
-* The dead tables.
-*
-* `devices` / `device_settings_kv` — the device half of the
-* integration-registry ([D183](../../../../../docs/decisions/adr-0183.md)).
-* The registry's INTEGRATION half is live (`integrations`,
-* `integration_settings`); its device half never had a production caller and
-* never had a row. The fleet lives in `device-manager:devices`, under numeric
-* ids, while these tables key on `dev_NNNN` — the two id-spaces could not be
-* reconciled even if something had wanted to.
-*
-* `pipeline-analytics:track-groups` / `:track-group-members` — the co-moving
-* GROUP entity. It shipped on 2026-08-24 and was kill-switched the same day
-* (duplicate sealed rows made Library → Gruppi unusable); the operator decided
-* on 2026-09-01 to delete it rather than re-open it. The clusterer, the live
-* buffer, the sealer, the query, the two cap methods and the two custom
-* actions are gone, so nothing declares these tables any more. The group-owned
-* MEDIA rows are NOT here — they live in the shared `pipeline-analytics:media`
-* and are collected by the orphan audit through `RETIRED_OWNER_KINDS`.
-*
-* `pipeline-analytics:summaries` / `:summary-members` — the session SUMMARY,
-* the entity that grouped tracks by proximity at birth (D489) and split them
-* when they walked apart (D490). Its production path was switched off on
-* 2026-09-16 and the operator decided on 2026-09-29 to delete it (D680): the
-* sealer, the store, the group shot, the three cap methods and the digest's
-* `groups` reading are gone, so nothing declares these tables. The group
-* shots were `summary`-owned rows in `pipeline-analytics:media` and go the
-* same way as the group entity's — through `RETIRED_OWNER_KINDS`.
-*/
-var RETIRED_COLLECTIONS = [
-	{
-		collection: "devices",
-		owner: "integration-registry",
-		reason: "the device half of the integration-registry is deleted; the fleet is `device-manager:devices` and always was (0 rows here against 974 live devices)"
-	},
-	{
-		collection: "device_settings_kv",
-		owner: "integration-registry",
-		reason: "per-device settings of a device table that never had a row; the live per-camera store is the device-manager row plus `addon-device-settings`"
-	},
-	{
-		collection: "pipeline-analytics:track-groups",
-		owner: "pipeline-analytics",
-		reason: "the co-moving group entity is deleted (operator decision 2026-09-01, after the 2026-08-24 kill switch); nothing declares, writes or reads it"
-	},
-	{
-		collection: "pipeline-analytics:track-group-members",
-		owner: "pipeline-analytics",
-		reason: "membership rows of the deleted group entity; the track cascade that used to carry them away no longer has a group leg"
-	},
-	{
-		collection: "pipeline-analytics:summaries",
-		owner: "pipeline-analytics",
-		reason: "the session summary (proximity track grouping, D489/D490) is deleted (operator decision 2026-09-29, D680, after the 2026-09-16 switch-off); nothing declares, writes or reads it"
-	},
-	{
-		collection: "pipeline-analytics:summary-members",
-		owner: "pipeline-analytics",
-		reason: "membership rows of the deleted session summary; the track cascade no longer has a summary leg (D680)"
-	}
-];
-/**
-* The same adapter over an {@link OwnedSqliteFile} — the purge runs against
-* EVERY open database file (D851), and a file served by a worker answers the
-* drop through its thread.
-*/
-function retiredCollectionStoreOfFile(file) {
-	return { async drop(collection) {
-		return file.dropRetiredTable(collection);
-	} };
-}
-/**
-* Drop every retired table that is still present. Returns one entry per table
-* actually dropped — empty when the schema is already clean, which is the
-* steady state after the first boot that ran it.
-*/
-async function purgeRetiredCollections(store, logger, specs = RETIRED_COLLECTIONS) {
-	const results = [];
-	for (const spec of specs) {
-		let dropped;
-		try {
-			dropped = await store.drop(spec.collection);
-		} catch (err) {
-			logger.warn("retired collection — drop failed, table left in place", { meta: {
-				addon: spec.owner,
-				collection: spec.collection,
-				error: err instanceof Error ? err.message : String(err)
-			} });
-			continue;
-		}
-		if (dropped === null) continue;
-		const result = {
-			collection: spec.collection,
-			owner: spec.owner,
-			rows: dropped.rows
-		};
-		results.push(result);
-		const line = "dropped a retired collection";
-		if (dropped.rows > 0) logger.warn(`${line} — it still held rows`, { meta: {
-			...result,
-			reason: spec.reason
-		} });
-		else logger.info(line, { meta: {
-			...result,
-			reason: spec.reason
-		} });
-	}
-	return results;
-}
-//#endregion
 //#region src/builtins/sqlite-storage/sqlite-settings.addon.ts
 /** The file name of each database inside the addon's private directory. */
 var DATABASE_FILE_NAMES = {
@@ -1803,14 +1641,13 @@ var SqliteSettingsAddon = class extends require_dist.BaseAddon {
 			},
 			{
 				capability: require_dist.storageAdminCapability,
-				provider: new StorageAdminProvider(settings.backend, this.ctx.logger.child("StorageAdmin"), async () => new Set((await this.ctx.api.addons.list.query()).map((addon) => addon.manifest.id)), records, async () => router.openFiles().filter((file) => file.databaseId !== "settings"))
+				provider: new StorageAdminProvider(settings.backend, this.ctx.logger.child("StorageAdmin"), records, async () => router.openFiles().filter((file) => file.databaseId !== "settings"))
 			}
 		];
 	}
 	/**
 	* Housekeeping that must happen BEFORE anything can read a file: the
-	* retired-key purge (settings only) and the retired-table purge (every
-	* open file).
+	* retired-key purge (settings file only).
 	*/
 	async purgeBeforeServing(file) {
 		if (file instanceof InlineOwnedFile && file.databaseId === "settings") try {
@@ -1818,7 +1655,6 @@ var SqliteSettingsAddon = class extends require_dist.BaseAddon {
 		} catch (err) {
 			this.ctx.logger.warn("Retired-key purge failed", { meta: { error: require_dist.errMsg(err) } });
 		}
-		await purgeRetiredCollections(retiredCollectionStoreOfFile(file), this.ctx.logger.child("RetiredCollections").withTags({ database: file.databaseId }));
 	}
 	/**
 	* The engine's TTL sweep (D881): every 10 minutes, off the boot path (the

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,6 +1,6 @@
-import { C as DATABASE_SNAPSHOT_TIMEOUT_MS, Jt as databaseSnapshotCapability, Ot as bareAddonId, Rr as vectorStoreCapability, S as DATABASE_SNAPSHOT_SUFFIX, Tr as storageAdminCapability, ar as recordsCapability, ca as normalizeSecretOwner, ci as DeclarationRefusedError, ji as UnknownRecordKindError, ni as BaseAddon, ot as STORAGE_ADMIN_MOVED_COLLECTIONS, pi as NoCallerError, qt as dataStoreProviderCapability, st as STORAGE_ADMIN_SCOPED_BASES, ti as errMsg, vi as RECORD_SWEEP_INTERVAL_MS, w as DATA_STORE_DATABASES, wi as RecordKindDeclarationSchema, x as DATABASE_SNAPSHOT_PARTIAL_SUFFIX, xi as RUNTIME_DEFAULTS } from "../../dist-Wy8cTxg6.mjs";
-import { i as retiredKeyStoreOf, n as purgeRetiredSettingsKeys } from "../../retired-settings-keys-Bhwe4ymb.mjs";
-import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, S as trustResult, T as callData, _ as collectTransferables, a as WalMaintenance, c as vectorProviderOfOwnedFile, d as CrossDatabaseTransactError, f as DatabaseBusyError, l as SqliteSettingsBackend, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callControl } from "../../wal-maintenance-Bj_MmDkr.mjs";
+import { $r as errMsg, C as DATABASE_SNAPSHOT_TIMEOUT_MS, Cr as storageAdminCapability, Et as bareAddonId, Gt as dataStoreProviderCapability, Ir as vectorStoreCapability, Kt as databaseSnapshotCapability, S as DATABASE_SNAPSHOT_SUFFIX, Si as RecordKindDeclarationSchema, di as NoCallerError, ei as BaseAddon, gi as RECORD_SWEEP_INTERVAL_MS, ki as UnknownRecordKindError, oa as normalizeSecretOwner, oi as DeclarationRefusedError, rr as recordsCapability, w as DATA_STORE_DATABASES, x as DATABASE_SNAPSHOT_PARTIAL_SUFFIX, yi as RUNTIME_DEFAULTS } from "../../dist-C2OBCa-A.mjs";
+import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-C_Kjp-Bj.mjs";
+import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, S as trustResult, T as callData, _ as collectTransferables, a as WalMaintenance, c as vectorProviderOfOwnedFile, d as CrossDatabaseTransactError, f as DatabaseBusyError, l as SqliteSettingsBackend, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callControl } from "../../wal-maintenance-Dg6IzSgz.mjs";
 import { r as isSnapshotWorkerMessage } from "../../sqlite-snapshot-protocol-2QaTouWV.mjs";
 import { a as isWorkerMessage, t as WAL_CHECKPOINT_LARGE_PASS_FRAMES } from "../../wal-checkpoint-policy-BahrTtyD.mjs";
 import { createRequire } from "node:module";
@@ -931,9 +931,6 @@ var InlineOwnedFile = class extends OwnedFileBase {
 	listPhysicalTables(ownerPrefix) {
 		return Promise.resolve(callControl(controlTargetOf(this.backend, 0), "listPhysicalTables", { ownerPrefix }));
 	}
-	async dropRetiredTable(name) {
-		return callControl(controlTargetOf(this.backend, 0), "dropRetiredTable", { name });
-	}
 	async servingThreadId() {
 		return 0;
 	}
@@ -988,9 +985,6 @@ var WorkerOwnedFile = class extends OwnedFileBase {
 	listPhysicalTables(ownerPrefix) {
 		return this.client.control("listPhysicalTables", { ownerPrefix });
 	}
-	dropRetiredTable(name) {
-		return this.client.control("dropRetiredTable", { name });
-	}
 	servingThreadId() {
 		return this.client.control("threadId", {});
 	}
@@ -1498,25 +1492,14 @@ var RecordsProvider = class {
 };
 //#endregion
 //#region src/builtins/sqlite-storage/storage-admin-provider.ts
-/**
-* The `storage-admin` provider of the SQLite engine (D870): the operator's
-* maintenance reach into the settings database - list its tables and record
-* kinds, read a kind for diagnosis, drop a table that nothing owns any more.
-* Every call is logged with its table and counts.
-*
-* `dropCollection` is a one-shot of the D870 migration: remove it, and the
-* capability's method, once the last hub ran `migrate-device-store.ts --drop`.
-*/
 var StorageAdminProvider = class {
 	backend;
 	logger;
-	installedOwners;
 	records;
 	peerFiles;
-	constructor(backend, logger, installedOwners, records, peerFiles = async () => []) {
+	constructor(backend, logger, records, peerFiles = async () => []) {
 		this.backend = backend;
 		this.logger = logger;
-		this.installedOwners = installedOwners;
 		this.records = records;
 		this.peerFiles = peerFiles;
 	}
@@ -1526,19 +1509,6 @@ var StorageAdminProvider = class {
 	readRecords(input) {
 		return this.records.readRecords(input);
 	}
-	/** May this table be dropped AT ALL? Throws with the reason when not. */
-	async assertDroppable(collection) {
-		const colon = collection.indexOf(":");
-		const base = colon > 0 ? collection.slice(colon + 1) : "";
-		if (colon > 0 && STORAGE_ADMIN_SCOPED_BASES.includes(base)) return;
-		if (STORAGE_ADMIN_MOVED_COLLECTIONS.includes(collection)) return;
-		if (colon <= 0) throw new Error(`drop refused: "${collection}" is not a scoped table`);
-		const installed = await this.installedOwners().catch((err) => {
-			throw new Error(`drop refused: the installed addons could not be read (${err instanceof Error ? err.message : String(err)})`);
-		});
-		const owner = collection.slice(0, colon);
-		if (installed.has(owner)) throw new Error(`drop refused: "${collection}" belongs to the installed addon "${owner}"`);
-	}
 	async listTables(input) {
 		const tables = [...this.backend.listTables(input.ownerPrefix)];
 		for (const file of await this.peerFiles()) tables.push(...await file.listPhysicalTables(input.ownerPrefix));
@@ -1549,140 +1519,8 @@ var StorageAdminProvider = class {
 		} });
 		return { tables };
 	}
-	async dropCollection(input) {
-		try {
-			await this.assertDroppable(input.collection);
-			const rows = this.backend.dropTable(input.collection, input.expectRows);
-			this.logger.warn("storage-admin: DROPPED a table", { meta: {
-				collection: input.collection,
-				rows
-			} });
-			return {
-				dropped: true,
-				rows
-			};
-		} catch (err) {
-			this.logger.warn("storage-admin: drop refused", { meta: {
-				collection: input.collection,
-				expectRows: input.expectRows,
-				error: err instanceof Error ? err.message : String(err)
-			} });
-			throw err;
-		}
-	}
 };
 //#endregion
-//#region src/builtins/sqlite-storage/retired-collections.ts
-/**
-* The dead tables.
-*
-* `devices` / `device_settings_kv` — the device half of the
-* integration-registry ([D183](../../../../../docs/decisions/adr-0183.md)).
-* The registry's INTEGRATION half is live (`integrations`,
-* `integration_settings`); its device half never had a production caller and
-* never had a row. The fleet lives in `device-manager:devices`, under numeric
-* ids, while these tables key on `dev_NNNN` — the two id-spaces could not be
-* reconciled even if something had wanted to.
-*
-* `pipeline-analytics:track-groups` / `:track-group-members` — the co-moving
-* GROUP entity. It shipped on 2026-08-24 and was kill-switched the same day
-* (duplicate sealed rows made Library → Gruppi unusable); the operator decided
-* on 2026-09-01 to delete it rather than re-open it. The clusterer, the live
-* buffer, the sealer, the query, the two cap methods and the two custom
-* actions are gone, so nothing declares these tables any more. The group-owned
-* MEDIA rows are NOT here — they live in the shared `pipeline-analytics:media`
-* and are collected by the orphan audit through `RETIRED_OWNER_KINDS`.
-*
-* `pipeline-analytics:summaries` / `:summary-members` — the session SUMMARY,
-* the entity that grouped tracks by proximity at birth (D489) and split them
-* when they walked apart (D490). Its production path was switched off on
-* 2026-09-16 and the operator decided on 2026-09-29 to delete it (D680): the
-* sealer, the store, the group shot, the three cap methods and the digest's
-* `groups` reading are gone, so nothing declares these tables. The group
-* shots were `summary`-owned rows in `pipeline-analytics:media` and go the
-* same way as the group entity's — through `RETIRED_OWNER_KINDS`.
-*/
-var RETIRED_COLLECTIONS = [
-	{
-		collection: "devices",
-		owner: "integration-registry",
-		reason: "the device half of the integration-registry is deleted; the fleet is `device-manager:devices` and always was (0 rows here against 974 live devices)"
-	},
-	{
-		collection: "device_settings_kv",
-		owner: "integration-registry",
-		reason: "per-device settings of a device table that never had a row; the live per-camera store is the device-manager row plus `addon-device-settings`"
-	},
-	{
-		collection: "pipeline-analytics:track-groups",
-		owner: "pipeline-analytics",
-		reason: "the co-moving group entity is deleted (operator decision 2026-09-01, after the 2026-08-24 kill switch); nothing declares, writes or reads it"
-	},
-	{
-		collection: "pipeline-analytics:track-group-members",
-		owner: "pipeline-analytics",
-		reason: "membership rows of the deleted group entity; the track cascade that used to carry them away no longer has a group leg"
-	},
-	{
-		collection: "pipeline-analytics:summaries",
-		owner: "pipeline-analytics",
-		reason: "the session summary (proximity track grouping, D489/D490) is deleted (operator decision 2026-09-29, D680, after the 2026-09-16 switch-off); nothing declares, writes or reads it"
-	},
-	{
-		collection: "pipeline-analytics:summary-members",
-		owner: "pipeline-analytics",
-		reason: "membership rows of the deleted session summary; the track cascade no longer has a summary leg (D680)"
-	}
-];
-/**
-* The same adapter over an {@link OwnedSqliteFile} — the purge runs against
-* EVERY open database file (D851), and a file served by a worker answers the
-* drop through its thread.
-*/
-function retiredCollectionStoreOfFile(file) {
-	return { async drop(collection) {
-		return file.dropRetiredTable(collection);
-	} };
-}
-/**
-* Drop every retired table that is still present. Returns one entry per table
-* actually dropped — empty when the schema is already clean, which is the
-* steady state after the first boot that ran it.
-*/
-async function purgeRetiredCollections(store, logger, specs = RETIRED_COLLECTIONS) {
-	const results = [];
-	for (const spec of specs) {
-		let dropped;
-		try {
-			dropped = await store.drop(spec.collection);
-		} catch (err) {
-			logger.warn("retired collection — drop failed, table left in place", { meta: {
-				addon: spec.owner,
-				collection: spec.collection,
-				error: err instanceof Error ? err.message : String(err)
-			} });
-			continue;
-		}
-		if (dropped === null) continue;
-		const result = {
-			collection: spec.collection,
-			owner: spec.owner,
-			rows: dropped.rows
-		};
-		results.push(result);
-		const line = "dropped a retired collection";
-		if (dropped.rows > 0) logger.warn(`${line} — it still held rows`, { meta: {
-			...result,
-			reason: spec.reason
-		} });
-		else logger.info(line, { meta: {
-			...result,
-			reason: spec.reason
-		} });
-	}
-	return results;
-}
-//#endregion
 //#region src/builtins/sqlite-storage/sqlite-settings.addon.ts
 /** The file name of each database inside the addon's private directory. */
 var DATABASE_FILE_NAMES = {
@@ -1797,14 +1635,13 @@ var SqliteSettingsAddon = class extends BaseAddon {
 			},
 			{
 				capability: storageAdminCapability,
-				provider: new StorageAdminProvider(settings.backend, this.ctx.logger.child("StorageAdmin"), async () => new Set((await this.ctx.api.addons.list.query()).map((addon) => addon.manifest.id)), records, async () => router.openFiles().filter((file) => file.databaseId !== "settings"))
+				provider: new StorageAdminProvider(settings.backend, this.ctx.logger.child("StorageAdmin"), records, async () => router.openFiles().filter((file) => file.databaseId !== "settings"))
 			}
 		];
 	}
 	/**
 	* Housekeeping that must happen BEFORE anything can read a file: the
-	* retired-key purge (settings only) and the retired-table purge (every
-	* open file).
+	* retired-key purge (settings file only).
 	*/
 	async purgeBeforeServing(file) {
 		if (file instanceof InlineOwnedFile && file.databaseId === "settings") try {
@@ -1812,7 +1649,6 @@ var SqliteSettingsAddon = class extends BaseAddon {
 		} catch (err) {
 			this.ctx.logger.warn("Retired-key purge failed", { meta: { error: errMsg(err) } });
 		}
-		await purgeRetiredCollections(retiredCollectionStoreOfFile(file), this.ctx.logger.child("RetiredCollections").withTags({ database: file.databaseId }));
 	}
 	/**
 	* The engine's TTL sweep (D881): every 10 minutes, off the boot path (the

package/dist/builtins/sqlite-storage/storage-admin-provider.d.ts

@@ -1,11 +1,8 @@
 /**
 * The `storage-admin` provider of the SQLite engine (D870): the operator's
 * maintenance reach into the settings database - list its tables and record
-* kinds, read a kind for diagnosis, drop a table that nothing owns any more.
-* Every call is logged with its table and counts.
-*
-* `dropCollection` is a one-shot of the D870 migration: remove it, and the
-* capability's method, once the last hub ran `migrate-device-store.ts --drop`.
+* kinds, read a kind for diagnosis. It never drops a table: a table the code
+* no longer creates is dropped by hand, offline, on the operator hubs (D901).
 */
 import { type IScopedLogger, type IStorageAdminProvider, type StorageTable } from "@camstack/types";
 import type { RecordsProvider } from "./records/records-provider.js";
@@ -14,27 +11,16 @@ import type { SqliteSettingsBackend } from "./sqlite-settings-backend.js";
 export declare class StorageAdminProvider implements IStorageAdminProvider {
 	private readonly backend;
 	private readonly logger;
-	/** The addon ids installed on this hub; a throw means "cannot tell" and refuses the drop. */
-	private readonly installedOwners;
 	/** The records provider the System -> Data methods delegate to (D881). */
 	private readonly records;
 	/** Non-settings files (`events.db`, `history.db`) whose tables `listTables` lists too. */
 	private readonly peerFiles;
-	constructor(backend: SqliteSettingsBackend, logger: IScopedLogger, installedOwners: () => Promise<ReadonlySet<string>>, records: Pick<RecordsProvider, "listKinds" | "readRecords">, peerFiles?: () => Promise<readonly OwnedSqliteFile[]>);
+	constructor(backend: SqliteSettingsBackend, logger: IScopedLogger, records: Pick<RecordsProvider, "listKinds" | "readRecords">, peerFiles?: () => Promise<readonly OwnedSqliteFile[]>);
 	listKinds(input: Parameters<IStorageAdminProvider["listKinds"]>[0]): ReturnType<IStorageAdminProvider["listKinds"]>;
 	readRecords(input: Parameters<IStorageAdminProvider["readRecords"]>[0]): ReturnType<IStorageAdminProvider["readRecords"]>;
-	/** May this table be dropped AT ALL? Throws with the reason when not. */
-	private assertDroppable;
 	listTables(input: {
 		ownerPrefix?: string | undefined;
 	}): Promise<{
 		tables: StorageTable[];
 	}>;
-	dropCollection(input: {
-		collection: string;
-		expectRows: number;
-	}): Promise<{
-		dropped: true;
-		rows: number;
-	}>;
 }

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bn-RNanh.js");
+const require_dist = require("../../dist-D9aw_d0G.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Dr as storageMigrationCapability, Er as storageCapability, Fn as legacyModeOf, Gi as defineRecordKinds, Hn as mayReadLocation, Kn as modeMayWrite, On as isLocationEnabled, Ri as collectSecretConfigKeys, Sa as transformSecretWrite, Ta as EventCategory, Un as mayWriteToLocation, _a as secretTreeFromPaths, br as settingsStoreCapability, dn as evictionPolicyOfLocation, ft as StorageCleanupJobSchema, ha as resolveSecretMarkers, ht as StorageMigrationJobSchema, la as parseJsonObject, mt as StorageLocationTypeSchema, ni as BaseAddon, pr as resolveLocationMode, pt as StorageLocationModeSchema, q as LegacyStorageLocationDefaultSchema, sa as normalizeNodeId, ta as isSecretMarker, yi as REDACTED_SECRET, yn as gbToBytes, zr as withLocationMode } from "../../dist-Wy8cTxg6.mjs";
+import { $i as isSecretMarker, Bn as mayReadLocation, Ca as EventCategory, En as isLocationEnabled, Ii as collectSecretConfigKeys, Lr as withLocationMode, Nn as legacyModeOf, Tr as storageMigrationCapability, Ui as defineRecordKinds, Vn as mayWriteToLocation, Wn as modeMayWrite, _i as REDACTED_SECRET, _n as gbToBytes, aa as normalizeNodeId, ba as transformSecretWrite, dr as resolveLocationMode, dt as StorageLocationModeSchema, ei as BaseAddon, ft as StorageLocationTypeSchema, ha as secretTreeFromPaths, ln as evictionPolicyOfLocation, pa as resolveSecretMarkers, pt as StorageMigrationJobSchema, q as LegacyStorageLocationDefaultSchema, sa as parseJsonObject, ut as StorageCleanupJobSchema, vr as settingsStoreCapability, wr as storageCapability } from "../../dist-C2OBCa-A.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";