@camstack/system 1.2.465 → 1.2.466

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Dwi4JA96.js");
+const require_dist = require("../../dist-QyW9hVO2.js");
 const require_retired_settings_keys = require("../../retired-settings-keys-CGUqX-Oz.js");
-const require_wal_maintenance = require("../../wal-maintenance-BQlvAduo.js");
+const require_wal_maintenance = require("../../wal-maintenance-BIpPCYDi.js");
 const require_sqlite_snapshot_protocol = require("../../sqlite-snapshot-protocol-B9OndqZv.js");
 const require_wal_checkpoint_policy = require("../../wal-checkpoint-policy-d2z2qPqx.js");
 let node_fs_promises = require("node:fs/promises");
@@ -1245,8 +1245,7 @@ var PlacementRouter = class {
 *   declaration. A kind declared for another file than the one it lives in is
 *   refused (the engine never moves data, D853).
 * - **No adoption** (D900): the records migration is closed. A declaration
-*   reads no legacy table, and a retired `adoptsFrom` an older addon still
-*   sends is dropped before the catalog stores the declaration.
+*   reads no legacy table.
 */
 /** The caller the transport stamped, or a refusal. */
 function recordsCallerOf(input) {
@@ -1257,16 +1256,6 @@ function recordsCallerOf(input) {
 function keyOf(owner, kind) {
 	return `${owner}\u0000${kind}`;
 }
-/**
-* A declaration as the catalog stores it: the retired `adoptsFrom` (D900) left
-* out, so the row an older addon's redeclaration writes no longer carries it.
-*/
-function withoutRetiredKeys(declaration) {
-	return {
-		...declaration,
-		adoptsFrom: void 0
-	};
-}
 var RecordsProvider = class {
 	router;
 	logger;
@@ -1300,7 +1289,7 @@ var RecordsProvider = class {
 		const owner = recordsCallerOf(input);
 		const byDatabase = /* @__PURE__ */ new Map();
 		const parsed = /* @__PURE__ */ new Map();
-		for (const [kind, raw] of Object.entries(input.kinds)) parsed.set(kind, withoutRetiredKeys(require_dist.RecordKindDeclarationSchema.parse(raw)));
+		for (const [kind, raw] of Object.entries(input.kinds)) parsed.set(kind, require_dist.RecordKindDeclarationSchema.parse(raw));
 		await this.assertFamiliesInOneFile(owner, parsed);
 		for (const [kind, declaration] of parsed) {
 			const known = this.placement.get(keyOf(owner, kind));
@@ -1444,6 +1433,27 @@ var RecordsProvider = class {
 			owner
 		});
 	}
+	/**
+	* All ops must resolve to ONE file (`records/transact-refused` `cross-file`
+	* otherwise); that file's engine then checks the family and runs one SQLite
+	* transaction.
+	*/
+	async transact(input) {
+		const owner = recordsCallerOf(input);
+		const files = /* @__PURE__ */ new Map();
+		for (const op of input.ops) {
+			const database = this.placement.get(keyOf(owner, op.kind));
+			if (database === void 0) throw new require_dist.UnknownRecordKindError(`"${owner}" declared no kind "${op.kind}"`);
+			files.set(database, [...files.get(database) ?? [], op.kind]);
+		}
+		if (files.size > 1) throw new require_dist.TransactRefusedError(`cross-file: the ops span more than one database file (${[...files.entries()].map(([db, kinds]) => `${[...new Set(kinds)].join("+")}@${db}`).join(", ")}); a transaction lives in ONE file`);
+		const first = input.ops[0];
+		if (first === void 0) throw new require_dist.InvalidRecordError("transact: no ops");
+		return (await this.fileOf(owner, first.kind)).records("transact", {
+			...input,
+			owner
+		});
+	}
 	async allocateId(input) {
 		const owner = recordsCallerOf(input);
 		return (await this.fileOf(owner, input.kind)).records("allocateId", {

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,6 +1,6 @@
-import { $r as errMsg, C as DATABASE_SNAPSHOT_TIMEOUT_MS, Cr as storageAdminCapability, Et as bareAddonId, Gt as dataStoreProviderCapability, Ir as vectorStoreCapability, Kt as databaseSnapshotCapability, S as DATABASE_SNAPSHOT_SUFFIX, Si as RecordKindDeclarationSchema, di as NoCallerError, ei as BaseAddon, gi as RECORD_SWEEP_INTERVAL_MS, ki as UnknownRecordKindError, oa as normalizeSecretOwner, oi as DeclarationRefusedError, rr as recordsCapability, w as DATA_STORE_DATABASES, x as DATABASE_SNAPSHOT_PARTIAL_SUFFIX, yi as RUNTIME_DEFAULTS } from "../../dist-CR7idLer.mjs";
+import { $r as BaseAddon, Ai as UnknownRecordKindError, C as DATA_STORE_DATABASES, Fr as vectorStoreCapability, Gt as databaseSnapshotCapability, Oi as TransactRefusedError, Qr as errMsg, S as DATABASE_SNAPSHOT_TIMEOUT_MS, Sr as storageAdminCapability, Tt as bareAddonId, Wt as dataStoreProviderCapability, ai as DeclarationRefusedError, b as DATABASE_SNAPSHOT_PARTIAL_SUFFIX, ca as normalizeSecretOwner, hi as RECORD_SWEEP_INTERVAL_MS, li as InvalidRecordError, nr as recordsCapability, ui as NoCallerError, vi as RUNTIME_DEFAULTS, x as DATABASE_SNAPSHOT_SUFFIX, xi as RecordKindDeclarationSchema } from "../../dist-CfjkLTZV.mjs";
 import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-C_Kjp-Bj.mjs";
-import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, S as trustResult, T as callData, _ as collectTransferables, a as WalMaintenance, c as vectorProviderOfOwnedFile, d as CrossDatabaseTransactError, f as DatabaseBusyError, l as SqliteSettingsBackend, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callControl } from "../../wal-maintenance-BDQT7TIi.mjs";
+import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, S as trustResult, T as callData, _ as collectTransferables, a as WalMaintenance, c as vectorProviderOfOwnedFile, d as CrossDatabaseTransactError, f as DatabaseBusyError, l as SqliteSettingsBackend, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callControl } from "../../wal-maintenance-Bs_X-di6.mjs";
 import { r as isSnapshotWorkerMessage } from "../../sqlite-snapshot-protocol-2QaTouWV.mjs";
 import { a as isWorkerMessage, t as WAL_CHECKPOINT_LARGE_PASS_FRAMES } from "../../wal-checkpoint-policy-BahrTtyD.mjs";
 import { createRequire } from "node:module";
@@ -1239,8 +1239,7 @@ var PlacementRouter = class {
 *   declaration. A kind declared for another file than the one it lives in is
 *   refused (the engine never moves data, D853).
 * - **No adoption** (D900): the records migration is closed. A declaration
-*   reads no legacy table, and a retired `adoptsFrom` an older addon still
-*   sends is dropped before the catalog stores the declaration.
+*   reads no legacy table.
 */
 /** The caller the transport stamped, or a refusal. */
 function recordsCallerOf(input) {
@@ -1251,16 +1250,6 @@ function recordsCallerOf(input) {
 function keyOf(owner, kind) {
 	return `${owner}\u0000${kind}`;
 }
-/**
-* A declaration as the catalog stores it: the retired `adoptsFrom` (D900) left
-* out, so the row an older addon's redeclaration writes no longer carries it.
-*/
-function withoutRetiredKeys(declaration) {
-	return {
-		...declaration,
-		adoptsFrom: void 0
-	};
-}
 var RecordsProvider = class {
 	router;
 	logger;
@@ -1294,7 +1283,7 @@ var RecordsProvider = class {
 		const owner = recordsCallerOf(input);
 		const byDatabase = /* @__PURE__ */ new Map();
 		const parsed = /* @__PURE__ */ new Map();
-		for (const [kind, raw] of Object.entries(input.kinds)) parsed.set(kind, withoutRetiredKeys(RecordKindDeclarationSchema.parse(raw)));
+		for (const [kind, raw] of Object.entries(input.kinds)) parsed.set(kind, RecordKindDeclarationSchema.parse(raw));
 		await this.assertFamiliesInOneFile(owner, parsed);
 		for (const [kind, declaration] of parsed) {
 			const known = this.placement.get(keyOf(owner, kind));
@@ -1438,6 +1427,27 @@ var RecordsProvider = class {
 			owner
 		});
 	}
+	/**
+	* All ops must resolve to ONE file (`records/transact-refused` `cross-file`
+	* otherwise); that file's engine then checks the family and runs one SQLite
+	* transaction.
+	*/
+	async transact(input) {
+		const owner = recordsCallerOf(input);
+		const files = /* @__PURE__ */ new Map();
+		for (const op of input.ops) {
+			const database = this.placement.get(keyOf(owner, op.kind));
+			if (database === void 0) throw new UnknownRecordKindError(`"${owner}" declared no kind "${op.kind}"`);
+			files.set(database, [...files.get(database) ?? [], op.kind]);
+		}
+		if (files.size > 1) throw new TransactRefusedError(`cross-file: the ops span more than one database file (${[...files.entries()].map(([db, kinds]) => `${[...new Set(kinds)].join("+")}@${db}`).join(", ")}); a transaction lives in ONE file`);
+		const first = input.ops[0];
+		if (first === void 0) throw new InvalidRecordError("transact: no ops");
+		return (await this.fileOf(owner, first.kind)).records("transact", {
+			...input,
+			owner
+		});
+	}
 	async allocateId(input) {
 		const owner = recordsCallerOf(input);
 		return (await this.fileOf(owner, input.kind)).records("allocateId", {

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Dwi4JA96.js");
+const require_dist = require("../../dist-QyW9hVO2.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { $i as isSecretMarker, Bn as mayReadLocation, Ca as EventCategory, En as isLocationEnabled, Ii as collectSecretConfigKeys, Lr as withLocationMode, Nn as legacyModeOf, Tr as storageMigrationCapability, Ui as defineRecordKinds, Vn as mayWriteToLocation, Wn as modeMayWrite, _i as REDACTED_SECRET, _n as gbToBytes, aa as normalizeNodeId, ba as transformSecretWrite, dr as resolveLocationMode, dt as StorageLocationModeSchema, ei as BaseAddon, ft as StorageLocationTypeSchema, ha as secretTreeFromPaths, ln as evictionPolicyOfLocation, pa as resolveSecretMarkers, pt as StorageMigrationJobSchema, q as LegacyStorageLocationDefaultSchema, sa as parseJsonObject, ut as StorageCleanupJobSchema, vr as settingsStoreCapability, wr as storageCapability } from "../../dist-CR7idLer.mjs";
+import { $r as BaseAddon, Bn as mayWriteToLocation, Cr as storageCapability, Gi as defineRecordKinds, Ir as withLocationMode, K as LegacyStorageLocationDefaultSchema, Mn as legacyModeOf, Ri as collectSecretConfigKeys, Sa as transformSecretWrite, Ta as EventCategory, Tn as isLocationEnabled, Un as modeMayWrite, _a as secretTreeFromPaths, _r as settingsStoreCapability, cn as evictionPolicyOfLocation, dt as StorageLocationTypeSchema, ft as StorageMigrationJobSchema, gi as REDACTED_SECRET, gn as gbToBytes, ha as resolveSecretMarkers, la as parseJsonObject, lt as StorageCleanupJobSchema, sa as normalizeNodeId, ta as isSecretMarker, ur as resolveLocationMode, ut as StorageLocationModeSchema, wr as storageMigrationCapability, zn as mayReadLocation } from "../../dist-CfjkLTZV.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Dwi4JA96.js");
+const require_dist = require("../../dist-QyW9hVO2.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_x509_es = require("../../x509.es-C4cOo48M.js");
-const require_agent_https = require("../../agent-https-CzA1AmyI.js");
-const require_constants$8 = require("../../constants-BYJ4ni7h.js");
+const require_agent_https = require("../../agent-https-OIvfjiTx.js");
+const require_constants$8 = require("../../constants-CdgJF4V6.js");
 const require_src$1 = require("../../src-CnAqG6EF.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,9 +1,9 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { $r as errMsg, Hi as defineCustomActions, Ji as hydrateSchema, Vi as customAction, ct as ServerNameSchema, ei as BaseAddon, yr as shortHostname } from "../../dist-CR7idLer.mjs";
+import { $r as BaseAddon, Qr as errMsg, Ui as customAction, Wi as defineCustomActions, Xi as hydrateSchema, st as ServerNameSchema, vr as shortHostname } from "../../dist-CfjkLTZV.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { S as backdatedNotBefore, a as KeyUsageFlags, c as Pkcs10CertificateRequest, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, l as Pkcs10CertificateRequestGenerator, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension } from "../../x509.es-DK__ETIe.mjs";
-import { B as setProcessAgentHttpsNames, I as AGENT_HTTPS_NAMES_COLLECTION, L as AGENT_HTTPS_NAMES_COLUMNS, M as isLocalOnlyHostname, R as AgentHttpsNames, V as systemConfigRecordKinds, u as isPrivateAddress, z as getProcessAgentHttpsNames } from "../../agent-https-CPJ7FTs0.mjs";
-import { a as MESH_CA_KEY_REF, c as SERVER_AUTH_OID, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID } from "../../constants-CmGw1liQ.mjs";
+import { B as setProcessAgentHttpsNames, I as AGENT_HTTPS_NAMES_COLLECTION, L as AGENT_HTTPS_NAMES_COLUMNS, M as isLocalOnlyHostname, R as AgentHttpsNames, V as systemConfigRecordKinds, u as isPrivateAddress, z as getProcessAgentHttpsNames } from "../../agent-https-DDzIuZY_.mjs";
+import { a as MESH_CA_KEY_REF, c as SERVER_AUTH_OID, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID } from "../../constants-Dknv37yZ.mjs";
 import { t as require_src } from "../../src-hG4grMU4.mjs";
 import { z } from "zod";
 import { X509Certificate, createHash, createPrivateKey, randomBytes, randomInt, sign, timingSafeEqual, verify, webcrypto } from "node:crypto";

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Dwi4JA96.js");
+const require_dist = require("../../dist-QyW9hVO2.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 const require_log_file_read_protocol = require("../../log-file-read-protocol-D0WcLbIV.js");
 let node_path = require("node:path");

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Ln as logDestinationCapability, ei as BaseAddon } from "../../dist-CR7idLer.mjs";
+import { $r as BaseAddon, In as logDestinationCapability } from "../../dist-CfjkLTZV.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import { a as LogFileIndexStore, i as serveRead, n as isFromReader, t as CancelBook } from "../../log-file-read-protocol-B7M3X3bT.mjs";
 import { createRequire } from "node:module";

package/dist/{composition-sources-BG0E76VO.js → composition-sources-DqHwltDV.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-Dwi4JA96.js");
+const require_dist = require("./dist-QyW9hVO2.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-CqRsEC0a.mjs → composition-sources-f74jlgRO.mjs}

@@ -1,4 +1,4 @@
-import { $r as errMsg, Kr as compositionSourceKey } from "./dist-CR7idLer.mjs";
+import { Gr as compositionSourceKey, Qr as errMsg } from "./dist-CfjkLTZV.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{constants-BYJ4ni7h.js → constants-CdgJF4V6.js}

@@ -1,5 +1,5 @@
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
-var MESH_CA_KEY_REF = require("./dist-Dwi4JA96.js").buildSecretRef({
+var MESH_CA_KEY_REF = require("./dist-QyW9hVO2.js").buildSecretRef({
 	owner: "system",
 	scope: { kind: "global" },
 	fieldPath: "meshCaKey"

package/dist/{constants-CmGw1liQ.mjs → constants-Dknv37yZ.mjs}

@@ -1,4 +1,4 @@
-import { Fi as buildSecretRef } from "./dist-CR7idLer.mjs";
+import { Li as buildSecretRef } from "./dist-CfjkLTZV.mjs";
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
 var MESH_CA_KEY_REF = buildSecretRef({
 	owner: "system",

package/dist/{device-ca-CQcB6yfj.mjs → device-ca-B16Mr3EY.mjs}

@@ -1,4 +1,4 @@
-import { A as DEVICE_SAN_CREDENTIAL_PREFIX, Fi as buildSecretRef, j as DEVICE_SAN_USER_PREFIX } from "./dist-CR7idLer.mjs";
+import { A as DEVICE_SAN_USER_PREFIX, Li as buildSecretRef, k as DEVICE_SAN_CREDENTIAL_PREFIX } from "./dist-CfjkLTZV.mjs";
 import { S as backdatedNotBefore, a as KeyUsageFlags, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension, u as SubjectAlternativeNameExtension } from "./x509.es-DK__ETIe.mjs";
 import { X509Certificate, createPublicKey, randomBytes, verify, webcrypto } from "node:crypto";
 //#region src/auth/jwt-signing-key.ts

package/dist/{device-ca-B-Txwl4W.js → device-ca-DpvQ5wrb.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-Dwi4JA96.js");
+const require_dist = require("./dist-QyW9hVO2.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
 let node_crypto = require("node:crypto");
 //#region src/auth/jwt-signing-key.ts