@camstack/types 1.2.380 → 1.2.381

package/dist/addon.d.ts

@@ -24,6 +24,7 @@ export type { IAdminUiProvider } from './capabilities/admin-ui.cap.js';
 export { adminUiCapability } from './capabilities/admin-ui.cap.js';
 export { expandCapMethods } from './capabilities/capability-definition.js';
 export { describeCustomActions } from './capabilities/custom-actions.js';
+export { CALLER_STAMPED_CAPABILITIES, withoutCallerStamp, } from './capabilities/caller-stamp.js';
 export { deviceOpsCapability } from './capabilities/device-ops.cap.js';
 export type { IViewerUiProvider } from './capabilities/viewer-ui.cap.js';
 export { viewerUiCapability } from './capabilities/viewer-ui.cap.js';
@@ -44,6 +45,7 @@ export type { CapStateLeaf } from './generated/addon-cap-facts.js';
 export { createDeviceProxy } from './generated/device-proxy.js';
 export { createEventBusSliceSource } from './device/device-state-handle.js';
 export type { SliceEventBus, SliceHandleApi } from './device/device-state-handle.js';
+export { addonSliceHandleApi } from './helpers/addon-slice-handle.js';
 export { DEVICE_SCOPED_CAPS, isDeviceScopedCap } from './generated/device-scoped-caps.js';
 export type { AddonDeclaration, AddonInitResult, ICamstackAddon, ProviderRegistration, } from './interfaces/addon.js';
 export { DATAPLANE_SECRET_HEADER } from './interfaces/addon-data-plane.js';

package/dist/addon.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-CIGOw58l.js");
+const require_sleep = require("./sleep-D8yJVc4r.js");
 const require_event_category = require("./event-category-Hoe-mqbd.js");
 const require_err_msg = require("./err-msg-Bb-s4Xuj.js");
 //#region src/generated/cap-input-defaults.ts
@@ -2139,6 +2139,7 @@ exports.AdoptionPendingError = require_sleep.AdoptionPendingError;
 exports.BOOT_RECOVERY_BACKOFF_MS = require_sleep.BOOT_RECOVERY_BACKOFF_MS;
 exports.BaseAddon = require_sleep.BaseAddon;
 exports.BatchTooLargeError = require_sleep.BatchTooLargeError;
+exports.CALLER_STAMPED_CAPABILITIES = require_sleep.CALLER_STAMPED_CAPABILITIES;
 exports.CAP_ADVANCE_FIELDS = CAP_ADVANCE_FIELDS;
 exports.CAP_INPUT_DEFAULTS = CAP_INPUT_DEFAULTS;
 exports.CAP_STATE_LEAVES = CAP_STATE_LEAVES;
@@ -2197,8 +2198,11 @@ exports.RecordsError = require_sleep.RecordsError;
 exports.RevConflictError = require_sleep.RevConflictError;
 exports.SECRET_CLEAR = require_sleep.SECRET_CLEAR;
 exports.SECRET_REF_SCHEME = require_sleep.SECRET_REF_SCHEME;
+exports.SETTINGS_ARRAY_ADOPTS_PREFIX = require_sleep.SETTINGS_ARRAY_ADOPTS_PREFIX;
+exports.SETTINGS_BROKERS_ADOPTS_PREFIX = require_sleep.SETTINGS_BROKERS_ADOPTS_PREFIX;
 exports.UnindexedFilterError = require_sleep.UnindexedFilterError;
 exports.UnknownRecordKindError = require_sleep.UnknownRecordKindError;
+exports.addonSliceHandleApi = require_sleep.addonSliceHandleApi;
 exports.adminUiCapability = require_sleep.adminUiCapability;
 exports.arrayItemFieldPath = require_sleep.arrayItemFieldPath;
 exports.asJsonObject = require_sleep.asJsonObject;
@@ -2238,6 +2242,7 @@ exports.isSecretMarkerLike = require_sleep.isSecretMarkerLike;
 exports.isSecretRef = require_sleep.isSecretRef;
 exports.isZodSecret = require_sleep.isZodSecret;
 exports.knownSecretCount = require_sleep.knownSecretCount;
+exports.makeInMemoryRecords = require_sleep.makeInMemoryRecords;
 exports.makeSecretMarker = require_sleep.makeSecretMarker;
 exports.mapSecretLeaves = require_sleep.mapSecretLeaves;
 exports.maskUrlCredentials = require_sleep.maskUrlCredentials;
@@ -2247,6 +2252,8 @@ exports.normalizeSecretOwner = require_sleep.normalizeSecretOwner;
 exports.parseJsonUnknown = require_sleep.parseJsonUnknown;
 exports.parseSecretPath = require_sleep.parseSecretPath;
 exports.parseSecretRef = require_sleep.parseSecretRef;
+exports.parseSettingsArrayAdoptsFrom = require_sleep.parseSettingsArrayAdoptsFrom;
+exports.parseSettingsBrokersAdoptsFrom = require_sleep.parseSettingsBrokersAdoptsFrom;
 exports.readErrorI18n = require_sleep.readErrorI18n;
 exports.readNodePin = require_sleep.readNodePin;
 exports.recordArrayItemPath = require_sleep.recordArrayItemPath;
@@ -2258,8 +2265,11 @@ exports.resolveSecretViewsIn = require_sleep.resolveSecretViewsIn;
 exports.scopeKey = require_sleep.scopeKey;
 exports.scrubKnownSecrets = require_sleep.scrubKnownSecrets;
 exports.secretArrayPrefixes = require_sleep.secretArrayPrefixes;
+exports.settingsArrayAdoptsFrom = require_sleep.settingsArrayAdoptsFrom;
+exports.settingsBrokersAdoptsFrom = require_sleep.settingsBrokersAdoptsFrom;
 exports.shortSecretRefHash = require_sleep.shortSecretRefHash;
 exports.sleep = require_sleep.sleep;
 exports.toSecretFieldView = require_sleep.toSecretFieldView;
 exports.viewerUiCapability = require_sleep.viewerUiCapability;
 exports.withCapInputDefaults = withCapInputDefaults;
+exports.withoutCallerStamp = require_sleep.withoutCallerStamp;

package/dist/addon.mjs

@@ -1,4 +1,4 @@
-import { $ as nodePin, $t as AdoptionPendingError, An as RECORD_SETTINGS_MAX_ROWS, Ar as isSecretFieldView, At as defineEntryKind, Bn as scrubKnownSecrets, Bt as declarationsOf, Cn as RECORD_DELETE_BATCH, Dn as RECORD_MAX_INDEX_FIELDS, Dr as SECRET_CLEAR, En as RECORD_MAX_INDEXES, Fn as MIN_SCRUBBED_LENGTH, Ft as RecordIndexSchema, Gn as PEER_BYTES_TICKET_TTL_MS, Gt as parseSecretPath, Hn as PEER_BYTES_CHUNK_BYTES, Ht as REMOVE_LEAF, I as describeCustomActions, In as clearKnownSecrets, It as RecordKindDeclarationSchema, Jt as recordSecretRef, K as expandCapMethods, Kt as recordArrayItemPath, Ln as forgetKnownSecret, Lt as RecordKindNameSchema, M as viewerUiCapability, Mn as resolveSecretViewsIn, Mr as isSecretMarkerLike, Mt as createRecordsAccess, N as DEVICE_CHILDREN_BATCH_MAX, Nn as REVALIDATE_AFTER_MS, Nr as makeSecretMarker, Nt as EntryDescriptorSchema, O as HF_REPO, On as RECORD_QUERY_MAX, Or as classifySecretWrite, Pn as createSecretsAccess, Pr as toSecretFieldView, Pt as RecordFieldPathSchema, Qn as normalizeAddonInitResult, Qt as isZodSecret, R as adminUiCapability, Rn as knownSecretCount, Rt as RecordRetentionSchema, S as createEventBusSliceSource, Sn as RECORD_DEFAULT_MAX_DATA_BYTES, Tn as RECORD_MAX_DATA_BYTES, Un as PEER_BYTES_MAX_OUTSTANDING, Ut as collectSecretLeaves, Vn as shortSecretRefHash, Vt as defineRecordKinds, Wn as PEER_BYTES_STALL_MS, Wt as mapSecretLeaves, Xn as BaseAddon, Yn as DisposerChain, Yt as secretArrayPrefixes, Zt as collectZodSecretPaths, _ as readErrorI18n, _n as recordsErrorFromMessage, an as NoCallerError, b as isDeviceScopedCap, bn as RECORD_CLASSES, c as asString, cn as RecordNotFoundError, cr as SECRET_REF_SCHEME, d as parseJsonUnknown, dn as RecordUniqueViolationError, dr as formatSecretScope, en as BatchTooLargeError, et as readNodePin, f as hfModelUrl, fn as RecordsError, fr as globalSecretScope, g as ErrorI18nPayloadSchema, gn as asRecordsError, hn as UnknownRecordKindError, hr as parseSecretRef, in as InvalidRecordError, it as ReadinessTimeoutError, j as deviceOpsCapability, jn as RECORD_SWEEP_INTERVAL_MS, jr as isSecretMarker, jt as entryBody, kn as RECORD_SECRET_COLLECTION_PREFIX, kr as isSecretClear, ln as RecordSecretUnavailableError, lr as arrayItemFieldPath, mn as UnindexedFilterError, mr as normalizeSecretOwner, nn as FilterRequiredError, nt as MODEL_FORMATS, o as asJsonObject, on as PlaintextSecretError, p as BOOT_RECOVERY_BACKOFF_MS, pn as RevConflictError, pr as isSecretRef, qn as DATAPLANE_SECRET_HEADER, qt as recordSecretCollection, r as maskUrlCredentials, rn as ForeignSecretMarkerError, rt as ReadinessRegistry, sn as RECORDS_ERROR_CODES, st as scopeKey, t as sleep, tn as DeclarationRefusedError, un as RecordTooLargeError, ur as buildSecretRef, vn as RECORD_BATCH_MAX, vr as createEvent, wn as RECORD_ID_MAX_LENGTH, x as createDeviceProxy, xn as RECORD_DATABASES, y as DEVICE_SCOPED_CAPS, yn as RECORD_BATCH_MAX_BYTES, yr as emitReadiness, zn as registerKnownSecret, zt as assertValidDeclaration } from "./sleep-WsrozGDL.mjs";
+import { $n as PEER_BYTES_CHUNK_BYTES, $t as REMOVE_LEAF, A as HF_REPO, An as RECORD_BATCH_MAX_BYTES, Ar as emitReadiness, B as describeCustomActions, Bn as RECORD_SECRET_COLLECTION_PREFIX, Br as SECRET_CLEAR, Bt as settingsBrokersAdoptsFrom, C as addonSliceHandleApi, Cn as RecordsError, Cr as globalSecretScope, Dn as asRecordsError, En as UnknownRecordKindError, Er as parseSecretRef, F as DEVICE_CHILDREN_BATCH_MAX, Fn as RECORD_ID_MAX_LENGTH, Ft as SETTINGS_ARRAY_ADOPTS_PREFIX, Gn as createSecretsAccess, Gr as isSecretMarkerLike, Gt as RecordFieldPathSchema, H as adminUiCapability, Hn as RECORD_SWEEP_INTERVAL_MS, Hr as isSecretClear, Ht as entryBody, I as CALLER_STAMPED_CAPABILITIES, In as RECORD_MAX_DATA_BYTES, It as parseSettingsArrayAdoptsFrom, Jn as forgetKnownSecret, Jt as RecordKindNameSchema, Kn as MIN_SCRUBBED_LENGTH, Kr as makeSecretMarker, Kt as RecordIndexSchema, L as withoutCallerStamp, Ln as RECORD_MAX_INDEXES, Lt as settingsArrayAdoptsFrom, Mn as RECORD_DATABASES, N as deviceOpsCapability, Nn as RECORD_DEFAULT_MAX_DATA_BYTES, On as recordsErrorFromMessage, P as viewerUiCapability, Pn as RECORD_DELETE_BATCH, Pt as makeInMemoryRecords, Qn as shortSecretRefHash, Qt as defineRecordKinds, Rn as RECORD_MAX_INDEX_FIELDS, Rt as SETTINGS_BROKERS_ADOPTS_PREFIX, Sn as RecordUniqueViolationError, Sr as formatSecretScope, Tn as UnindexedFilterError, Tr as normalizeSecretOwner, Un as resolveSecretViewsIn, Ur as isSecretFieldView, Ut as createRecordsAccess, Vn as RECORD_SETTINGS_MAX_ROWS, Vr as classifySecretWrite, Vt as defineEntryKind, Wn as REVALIDATE_AFTER_MS, Wr as isSecretMarker, Wt as EntryDescriptorSchema, X as expandCapMethods, Xn as registerKnownSecret, Xt as assertValidDeclaration, Yn as knownSecretCount, Yt as RecordRetentionSchema, Zn as scrubKnownSecrets, Zt as declarationsOf, _ as readErrorI18n, _n as PlaintextSecretError, an as recordSecretRef, b as isDeviceScopedCap, bn as RecordSecretUnavailableError, br as arrayItemFieldPath, c as asString, cn as collectZodSecretPaths, ct as ReadinessTimeoutError, d as parseJsonUnknown, dn as BatchTooLargeError, dt as scopeKey, en as collectSecretLeaves, er as PEER_BYTES_MAX_OUTSTANDING, f as hfModelUrl, fn as DeclarationRefusedError, g as ErrorI18nPayloadSchema, gn as NoCallerError, hn as InvalidRecordError, in as recordSecretCollection, ir as DATAPLANE_SECRET_HEADER, it as readNodePin, jn as RECORD_CLASSES, kn as RECORD_BATCH_MAX, kr as createEvent, ln as isZodSecret, lr as normalizeAddonInitResult, mn as ForeignSecretMarkerError, nn as parseSecretPath, nr as PEER_BYTES_TICKET_TTL_MS, o as asJsonObject, on as secretArrayPrefixes, or as DisposerChain, ot as MODEL_FORMATS, p as BOOT_RECOVERY_BACKOFF_MS, pn as FilterRequiredError, qn as clearKnownSecrets, qr as toSecretFieldView, qt as RecordKindDeclarationSchema, r as maskUrlCredentials, rn as recordArrayItemPath, rt as nodePin, sr as BaseAddon, st as ReadinessRegistry, t as sleep, tn as mapSecretLeaves, tr as PEER_BYTES_STALL_MS, un as AdoptionPendingError, vn as RECORDS_ERROR_CODES, w as createEventBusSliceSource, wn as RevConflictError, wr as isSecretRef, x as createDeviceProxy, xn as RecordTooLargeError, xr as buildSecretRef, y as DEVICE_SCOPED_CAPS, yn as RecordNotFoundError, yr as SECRET_REF_SCHEME, zn as RECORD_QUERY_MAX, zt as parseSettingsBrokersAdoptsFrom } from "./sleep-bZIhUvjd.mjs";
 import { t as EventCategory } from "./event-category-BvOFi6PY.mjs";
 import { a as DeviceType, t as errMsg } from "./err-msg--2RrYiLO.mjs";
 //#region src/generated/cap-input-defaults.ts
@@ -2134,4 +2134,4 @@ var CAP_STATE_LEAVES = Object.freeze({
 	]
 });
 //#endregion
-export { AdoptionPendingError, BOOT_RECOVERY_BACKOFF_MS, BaseAddon, BatchTooLargeError, CAP_ADVANCE_FIELDS, CAP_INPUT_DEFAULTS, CAP_STATE_LEAVES, COLLECTION_ARRAY_METHODS, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DEVICE_SCOPED_CAPS, DeclarationRefusedError, DeviceType, DisposerChain, EntryDescriptorSchema, ErrorI18nPayloadSchema, EventCategory, FilterRequiredError, ForeignSecretMarkerError, HF_REPO, InvalidRecordError, MIN_SCRUBBED_LENGTH, MODEL_FORMATS, NoCallerError, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, PROVIDER_OPTIONAL_METHODS, PlaintextSecretError, RECORDS_ERROR_CODES, RECORD_BATCH_MAX, RECORD_BATCH_MAX_BYTES, RECORD_CLASSES, RECORD_DATABASES, RECORD_DEFAULT_MAX_DATA_BYTES, RECORD_DELETE_BATCH, RECORD_ID_MAX_LENGTH, RECORD_MAX_DATA_BYTES, RECORD_MAX_INDEXES, RECORD_MAX_INDEX_FIELDS, RECORD_QUERY_MAX, RECORD_SECRET_COLLECTION_PREFIX, RECORD_SETTINGS_MAX_ROWS, RECORD_SWEEP_INTERVAL_MS, REMOVE_LEAF, REVALIDATE_AFTER_MS, ReadinessRegistry, ReadinessTimeoutError, RecordFieldPathSchema, RecordIndexSchema, RecordKindDeclarationSchema, RecordKindNameSchema, RecordNotFoundError, RecordRetentionSchema, RecordSecretUnavailableError, RecordTooLargeError, RecordUniqueViolationError, RecordsError, RevConflictError, SECRET_CLEAR, SECRET_REF_SCHEME, UnindexedFilterError, UnknownRecordKindError, adminUiCapability, arrayItemFieldPath, asJsonObject, asRecordsError, asString, assertValidDeclaration, buildSecretRef, classifySecretWrite, clearKnownSecrets, collectSecretLeaves, collectZodSecretPaths, createDeviceProxy, createEvent, createEventBusSliceSource, createRecordsAccess, createSecretsAccess, declarationsOf, defineEntryKind, defineRecordKinds, describeCustomActions, deviceOpsCapability, emitReadiness, entryBody, errMsg, expandCapMethods, forgetKnownSecret, formatSecretScope, globalSecretScope, hfModelUrl, isCollectionArrayMethodName, isDeviceScopedCap, isProviderOptionalMethodName, isSecretClear, isSecretFieldView, isSecretMarker, isSecretMarkerLike, isSecretRef, isZodSecret, knownSecretCount, makeSecretMarker, mapSecretLeaves, maskUrlCredentials, nodePin, normalizeAddonInitResult, normalizeSecretOwner, parseJsonUnknown, parseSecretPath, parseSecretRef, readErrorI18n, readNodePin, recordArrayItemPath, recordSecretCollection, recordSecretRef, recordsErrorFromMessage, registerKnownSecret, resolveSecretViewsIn, scopeKey, scrubKnownSecrets, secretArrayPrefixes, shortSecretRefHash, sleep, toSecretFieldView, viewerUiCapability, withCapInputDefaults };
+export { AdoptionPendingError, BOOT_RECOVERY_BACKOFF_MS, BaseAddon, BatchTooLargeError, CALLER_STAMPED_CAPABILITIES, CAP_ADVANCE_FIELDS, CAP_INPUT_DEFAULTS, CAP_STATE_LEAVES, COLLECTION_ARRAY_METHODS, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DEVICE_SCOPED_CAPS, DeclarationRefusedError, DeviceType, DisposerChain, EntryDescriptorSchema, ErrorI18nPayloadSchema, EventCategory, FilterRequiredError, ForeignSecretMarkerError, HF_REPO, InvalidRecordError, MIN_SCRUBBED_LENGTH, MODEL_FORMATS, NoCallerError, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, PROVIDER_OPTIONAL_METHODS, PlaintextSecretError, RECORDS_ERROR_CODES, RECORD_BATCH_MAX, RECORD_BATCH_MAX_BYTES, RECORD_CLASSES, RECORD_DATABASES, RECORD_DEFAULT_MAX_DATA_BYTES, RECORD_DELETE_BATCH, RECORD_ID_MAX_LENGTH, RECORD_MAX_DATA_BYTES, RECORD_MAX_INDEXES, RECORD_MAX_INDEX_FIELDS, RECORD_QUERY_MAX, RECORD_SECRET_COLLECTION_PREFIX, RECORD_SETTINGS_MAX_ROWS, RECORD_SWEEP_INTERVAL_MS, REMOVE_LEAF, REVALIDATE_AFTER_MS, ReadinessRegistry, ReadinessTimeoutError, RecordFieldPathSchema, RecordIndexSchema, RecordKindDeclarationSchema, RecordKindNameSchema, RecordNotFoundError, RecordRetentionSchema, RecordSecretUnavailableError, RecordTooLargeError, RecordUniqueViolationError, RecordsError, RevConflictError, SECRET_CLEAR, SECRET_REF_SCHEME, SETTINGS_ARRAY_ADOPTS_PREFIX, SETTINGS_BROKERS_ADOPTS_PREFIX, UnindexedFilterError, UnknownRecordKindError, addonSliceHandleApi, adminUiCapability, arrayItemFieldPath, asJsonObject, asRecordsError, asString, assertValidDeclaration, buildSecretRef, classifySecretWrite, clearKnownSecrets, collectSecretLeaves, collectZodSecretPaths, createDeviceProxy, createEvent, createEventBusSliceSource, createRecordsAccess, createSecretsAccess, declarationsOf, defineEntryKind, defineRecordKinds, describeCustomActions, deviceOpsCapability, emitReadiness, entryBody, errMsg, expandCapMethods, forgetKnownSecret, formatSecretScope, globalSecretScope, hfModelUrl, isCollectionArrayMethodName, isDeviceScopedCap, isProviderOptionalMethodName, isSecretClear, isSecretFieldView, isSecretMarker, isSecretMarkerLike, isSecretRef, isZodSecret, knownSecretCount, makeInMemoryRecords, makeSecretMarker, mapSecretLeaves, maskUrlCredentials, nodePin, normalizeAddonInitResult, normalizeSecretOwner, parseJsonUnknown, parseSecretPath, parseSecretRef, parseSettingsArrayAdoptsFrom, parseSettingsBrokersAdoptsFrom, readErrorI18n, readNodePin, recordArrayItemPath, recordSecretCollection, recordSecretRef, recordsErrorFromMessage, registerKnownSecret, resolveSecretViewsIn, scopeKey, scrubKnownSecrets, secretArrayPrefixes, settingsArrayAdoptsFrom, settingsBrokersAdoptsFrom, shortSecretRefHash, sleep, toSecretFieldView, viewerUiCapability, withCapInputDefaults, withoutCallerStamp };

package/dist/capabilities/storage-admin.cap.d.ts

@@ -317,6 +317,28 @@ export declare const storageAdminCapability: {
         }, z.core.$strip>, z.ZodObject<{
             adopted: z.ZodNumber;
         }, z.core.$strip>, "mutation">;
+        /**
+         * Read rows from a legacy KV table by physical name, without a running
+         * `declareCollection`. Used by `records-adopt.ts` when the owner already
+         * moved to records and the collection door refuses the name.
+         */
+        readonly readLegacyCollection: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            collection: z.ZodString;
+            cursor: z.ZodOptional<z.ZodString>;
+            limit: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>, z.ZodObject<{
+            rows: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            }, z.core.$strip>>;
+            nextCursor: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
+        /** True when a declared kind lists `collection` as `adoptsFrom` and adoption finished. */
+        readonly isAdoptedLegacyTable: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            collection: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            adopted: z.ZodBoolean;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
     };
 };
 export type IStorageAdminProvider = InferProvider<typeof storageAdminCapability>;

package/dist/client.js

@@ -25895,6 +25895,50 @@ function isSource(x) {
 	return typeof x.read === "function" && typeof x.watch === "function";
 }
 //#endregion
+//#region src/helpers/addon-slice-handle.ts
+/** Structural bridge: every `AddonApi` client carries `deviceState` (+ optional `live`). */
+function addonSliceHandleApi(api) {
+	return api;
+}
+//#endregion
+//#region src/helpers/trpc-leaf.ts
+function isTrpcProcedureLeaf(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const record = value;
+	return (typeof record.query === "function" || typeof record.mutate === "function" || typeof record.subscribe === "function") && !Array.isArray(value);
+}
+function readCapRecord(api, capProp) {
+	const cap = Reflect.get(api, capProp);
+	if (typeof cap !== "object" || cap === null || Array.isArray(cap)) return void 0;
+	return cap;
+}
+function readTrpcLeaf(api, capProp, method) {
+	const capRecord = readCapRecord(api, capProp);
+	if (!capRecord) throw new Error(`tRPC client has no router '${capProp}'`);
+	const leaf = capRecord[method];
+	if (!isTrpcProcedureLeaf(leaf)) throw new Error(`tRPC client has no '${capProp}.${method}'`);
+	return leaf;
+}
+/**
+* Invoke `api.<capProp>.<method>.{query|mutate|subscribe}(input)`.
+* `Result` is the generated proxy method's return. The leaf itself is only
+* `unknown` (the client is a structural bag), so the assertion is the one
+* boundary between that bag and the typed proxy.
+*/
+function invokeTrpcLeaf(api, capProp, method, kind, input, push) {
+	const fn = readTrpcLeaf(api, capProp, method);
+	if (kind === "mutation") {
+		if (typeof fn.mutate !== "function") throw new Error(`tRPC '${capProp}.${method}' has no mutate()`);
+		return fn.mutate(input);
+	}
+	if (kind === "subscription") {
+		if (typeof fn.subscribe !== "function") throw new Error(`tRPC '${capProp}.${method}' has no subscribe()`);
+		return fn.subscribe(input, push);
+	}
+	if (typeof fn.query !== "function") throw new Error(`tRPC '${capProp}.${method}' has no query()`);
+	return fn.query(input);
+}
+//#endregion
 //#region src/generated/device-proxy.ts
 /**
 * Build a DeviceProxy that pre-binds deviceId + nodeId on every method call
@@ -25912,8 +25956,7 @@ function isSource(x) {
 * field on the returned object.
 */
 function createDeviceProxy(api, binding, opts) {
-	const typedApi = api;
-	const stateSource = opts?.stateSource ?? createLazyTrpcSource(api);
+	const stateSource = opts?.stateSource ?? createLazyTrpcSource(addonSliceHandleApi(api));
 	/** Merge `{deviceId, nodeId?}` into the caller-supplied input. */
 	function mergeInput(input, nodeId) {
 		const base = typeof input === "object" && input !== null ? input : {};
@@ -25926,20 +25969,8 @@ function createDeviceProxy(api, binding, opts) {
 			deviceId: binding.deviceId
 		};
 	}
-	/**
-	* Invoke `api.<capProp>.<method>.{query|mutate|subscribe}(merged)`.
-	* Returns `any` so the caller-side per-method declaration assigns
-	* cleanly into the strongly-typed `InferDeviceProxyCap<...>` shape on
-	* the `DeviceProxy` interface — the proxy's contract is enforced by
-	* the interface, not the dispatch helper.
-	*/
 	function callLeaf(capProp, method, kind, merged, push) {
-		const leaf = typedApi[capProp]?.[method];
-		if (!leaf) throw new Error(`DeviceProxy: api has no '${capProp}.${method}'`);
-		const fn = leaf;
-		if (kind === "mutation") return fn.mutate(merged);
-		if (kind === "subscription") return fn.subscribe(merged, push);
-		return fn.query(merged);
+		return invokeTrpcLeaf(api, capProp, method, kind, merged, push);
 	}
 	/**
 	* Device-scoped cap dispatch. Looks up the binding entry for `capName`
@@ -27252,9 +27283,10 @@ var SystemMirror = class {
 		for (let i = 0; i < targets.length; i += parallelism) {
 			const chunk = targets.slice(i, i + parallelism);
 			const settled = await Promise.allSettled(chunk.map(async (proxy) => {
-				const cap = proxy[capName];
-				if (!cap || typeof cap[methodName] !== "function") throw new Error(`device '${proxy.deviceId}' does not expose '${capName}.${methodName}'`);
-				return await cap[methodName](args);
+				const cap = Reflect.get(proxy, capName);
+				const method = typeof cap === "object" && cap !== null ? Reflect.get(cap, methodName) : void 0;
+				if (typeof method !== "function") throw new Error(`device '${proxy.deviceId}' does not expose '${capName}.${methodName}'`);
+				return await Reflect.apply(method, cap, [args]);
 			}));
 			for (let j = 0; j < settled.length; j++) {
 				const proxy = chunk[j];
@@ -27489,21 +27521,8 @@ function matchesString(haystack, match) {
 * dropping the reference.
 */
 function createSystemProxy(api) {
-	const typedApi = api;
-	/**
-	* Invoke `api.<capProp>.<method>.{query|mutate|subscribe}(input)`.
-	* Returns `any` so the caller-side per-method declaration assigns
-	* cleanly into the strongly-typed `Pick<InferProvider<...>, ...>`
-	* shape on the `SystemProxy` interface — the proxy's contract is
-	* enforced by the interface, not the dispatch helper.
-	*/
 	function dispatch(capProp, method, kind, input, push) {
-		const leaf = typedApi[capProp]?.[method];
-		if (!leaf) throw new Error(`SystemProxy: api has no '${capProp}.${method}'`);
-		const fn = leaf;
-		if (kind === "mutation") return fn.mutate(input);
-		if (kind === "subscription") return fn.subscribe(input, push);
-		return fn.query(input);
+		return invokeTrpcLeaf(api, capProp, method, kind, input, push);
 	}
 	return {
 		addonPages: { listPages: (input) => dispatch("addonPages", "listPages", "query", input) },

package/dist/client.mjs

@@ -25894,6 +25894,50 @@ function isSource(x) {
 	return typeof x.read === "function" && typeof x.watch === "function";
 }
 //#endregion
+//#region src/helpers/addon-slice-handle.ts
+/** Structural bridge: every `AddonApi` client carries `deviceState` (+ optional `live`). */
+function addonSliceHandleApi(api) {
+	return api;
+}
+//#endregion
+//#region src/helpers/trpc-leaf.ts
+function isTrpcProcedureLeaf(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const record = value;
+	return (typeof record.query === "function" || typeof record.mutate === "function" || typeof record.subscribe === "function") && !Array.isArray(value);
+}
+function readCapRecord(api, capProp) {
+	const cap = Reflect.get(api, capProp);
+	if (typeof cap !== "object" || cap === null || Array.isArray(cap)) return void 0;
+	return cap;
+}
+function readTrpcLeaf(api, capProp, method) {
+	const capRecord = readCapRecord(api, capProp);
+	if (!capRecord) throw new Error(`tRPC client has no router '${capProp}'`);
+	const leaf = capRecord[method];
+	if (!isTrpcProcedureLeaf(leaf)) throw new Error(`tRPC client has no '${capProp}.${method}'`);
+	return leaf;
+}
+/**
+* Invoke `api.<capProp>.<method>.{query|mutate|subscribe}(input)`.
+* `Result` is the generated proxy method's return. The leaf itself is only
+* `unknown` (the client is a structural bag), so the assertion is the one
+* boundary between that bag and the typed proxy.
+*/
+function invokeTrpcLeaf(api, capProp, method, kind, input, push) {
+	const fn = readTrpcLeaf(api, capProp, method);
+	if (kind === "mutation") {
+		if (typeof fn.mutate !== "function") throw new Error(`tRPC '${capProp}.${method}' has no mutate()`);
+		return fn.mutate(input);
+	}
+	if (kind === "subscription") {
+		if (typeof fn.subscribe !== "function") throw new Error(`tRPC '${capProp}.${method}' has no subscribe()`);
+		return fn.subscribe(input, push);
+	}
+	if (typeof fn.query !== "function") throw new Error(`tRPC '${capProp}.${method}' has no query()`);
+	return fn.query(input);
+}
+//#endregion
 //#region src/generated/device-proxy.ts
 /**
 * Build a DeviceProxy that pre-binds deviceId + nodeId on every method call
@@ -25911,8 +25955,7 @@ function isSource(x) {
 * field on the returned object.
 */
 function createDeviceProxy(api, binding, opts) {
-	const typedApi = api;
-	const stateSource = opts?.stateSource ?? createLazyTrpcSource(api);
+	const stateSource = opts?.stateSource ?? createLazyTrpcSource(addonSliceHandleApi(api));
 	/** Merge `{deviceId, nodeId?}` into the caller-supplied input. */
 	function mergeInput(input, nodeId) {
 		const base = typeof input === "object" && input !== null ? input : {};
@@ -25925,20 +25968,8 @@ function createDeviceProxy(api, binding, opts) {
 			deviceId: binding.deviceId
 		};
 	}
-	/**
-	* Invoke `api.<capProp>.<method>.{query|mutate|subscribe}(merged)`.
-	* Returns `any` so the caller-side per-method declaration assigns
-	* cleanly into the strongly-typed `InferDeviceProxyCap<...>` shape on
-	* the `DeviceProxy` interface — the proxy's contract is enforced by
-	* the interface, not the dispatch helper.
-	*/
 	function callLeaf(capProp, method, kind, merged, push) {
-		const leaf = typedApi[capProp]?.[method];
-		if (!leaf) throw new Error(`DeviceProxy: api has no '${capProp}.${method}'`);
-		const fn = leaf;
-		if (kind === "mutation") return fn.mutate(merged);
-		if (kind === "subscription") return fn.subscribe(merged, push);
-		return fn.query(merged);
+		return invokeTrpcLeaf(api, capProp, method, kind, merged, push);
 	}
 	/**
 	* Device-scoped cap dispatch. Looks up the binding entry for `capName`
@@ -27251,9 +27282,10 @@ var SystemMirror = class {
 		for (let i = 0; i < targets.length; i += parallelism) {
 			const chunk = targets.slice(i, i + parallelism);
 			const settled = await Promise.allSettled(chunk.map(async (proxy) => {
-				const cap = proxy[capName];
-				if (!cap || typeof cap[methodName] !== "function") throw new Error(`device '${proxy.deviceId}' does not expose '${capName}.${methodName}'`);
-				return await cap[methodName](args);
+				const cap = Reflect.get(proxy, capName);
+				const method = typeof cap === "object" && cap !== null ? Reflect.get(cap, methodName) : void 0;
+				if (typeof method !== "function") throw new Error(`device '${proxy.deviceId}' does not expose '${capName}.${methodName}'`);
+				return await Reflect.apply(method, cap, [args]);
 			}));
 			for (let j = 0; j < settled.length; j++) {
 				const proxy = chunk[j];
@@ -27488,21 +27520,8 @@ function matchesString(haystack, match) {
 * dropping the reference.
 */
 function createSystemProxy(api) {
-	const typedApi = api;
-	/**
-	* Invoke `api.<capProp>.<method>.{query|mutate|subscribe}(input)`.
-	* Returns `any` so the caller-side per-method declaration assigns
-	* cleanly into the strongly-typed `Pick<InferProvider<...>, ...>`
-	* shape on the `SystemProxy` interface — the proxy's contract is
-	* enforced by the interface, not the dispatch helper.
-	*/
 	function dispatch(capProp, method, kind, input, push) {
-		const leaf = typedApi[capProp]?.[method];
-		if (!leaf) throw new Error(`SystemProxy: api has no '${capProp}.${method}'`);
-		const fn = leaf;
-		if (kind === "mutation") return fn.mutate(input);
-		if (kind === "subscription") return fn.subscribe(input, push);
-		return fn.query(input);
+		return invokeTrpcLeaf(api, capProp, method, kind, input, push);
 	}
 	return {
 		addonPages: { listPages: (input) => dispatch("addonPages", "listPages", "query", input) },

package/dist/device/device-context.d.ts

@@ -137,6 +137,8 @@ export interface DeviceContext {
  *  + persistInitialConfig + createContext + register` flow.
  */
 export type DeviceConstructor<T extends IDevice = IDevice> = new (ctx: DeviceContext) => T;
+/** Map entry helper — concrete camera/hub classes widen to `DeviceConstructor<IDevice>`. */
+export declare function widenDeviceConstructor<T extends IDevice>(ctor: DeviceConstructor<T>): DeviceConstructor<IDevice>;
 export interface DeviceManagerApi {
     /**
      * Create, register, and persist a device in one call.

package/dist/ffmpeg/fmp4-fragment-child.d.ts

@@ -35,14 +35,14 @@
  * request schema on purpose (see `egressTransportFromRequest`): a plane is a
  * live object, so an off-node caller could not use one anyway.
  */
-import type { spawn as nodeSpawn } from 'node:child_process';
 import type { IScopedLogger } from '../interfaces/logging.js';
 import type { FfmpegInvocation } from './invocation.js';
+import type { FfmpegSpawnFn } from './process.js';
 import type { Fmp4FragmentPlane } from './fmp4-fragment-plane.js';
 export interface Fmp4FragmentChildDeps {
     readonly logger: IScopedLogger;
     readonly ffmpegBinaryPath: string;
-    readonly spawnFn: typeof nodeSpawn;
+    readonly spawnFn: FfmpegSpawnFn;
     /** How long the child may produce no UNIT before it is declared dead. */
     readonly firstUnitTimeoutMs?: number;
     /** The child exited, or its output stopped parsing, AFTER it went live. */

package/dist/ffmpeg/process.d.ts

@@ -32,6 +32,27 @@
  */
 import { spawn, type ChildProcess, type SpawnOptions } from 'node:child_process';
 import type { IScopedLogger } from '../interfaces/logging.js';
+/** Subset of {@link ChildProcess} every live-media ffmpeg site reads. */
+export interface SpawnedFfmpegProcess {
+    readonly pid?: number;
+    readonly killed?: boolean;
+    readonly exitCode?: number | null;
+    readonly signalCode?: NodeJS.Signals | null;
+    readonly stdin?: {
+        on(event: string, listener: () => void): void;
+        end(): void;
+    } | null;
+    readonly stdout: NodeJS.ReadableStream | null;
+    readonly stderr: NodeJS.ReadableStream | null;
+    on(event: 'exit', listener: (code: number | null, signal: NodeJS.Signals | null) => void): this;
+    on(event: 'error', listener: (err: Error) => void): this;
+    once(event: 'exit', listener: (code: number | null, signal: NodeJS.Signals | null) => void): this;
+    once(event: 'error', listener: (err: Error) => void): this;
+    kill(signal?: NodeJS.Signals): boolean;
+}
+/** Injectable ffmpeg spawn — the three-arg shape live-media sites use. */
+export type FfmpegSpawnFn = (command: string, args: readonly string[], options?: SpawnOptions) => SpawnedFfmpegProcess;
+export declare function defaultFfmpegSpawn(command: string, args: readonly string[], options?: SpawnOptions): SpawnedFfmpegProcess;
 /** How a child ended. */
 export type FfmpegExitClass = 
 /** Exited 0. */

package/dist/generated/addon-api.d.ts

@@ -9031,6 +9031,20 @@ export type AppRouter = TrpcCoreRouter<{
             output: z.infer<typeof storageAdminCapability.methods.adoptRecords.output>;
             meta: object;
         }>;
+        readLegacyCollection: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof storageAdminCapability.methods.readLegacyCollection.input>;
+            output: z.infer<typeof storageAdminCapability.methods.readLegacyCollection.output>;
+            meta: object;
+        }>;
+        isAdoptedLegacyTable: TRPCQueryProcedure<{
+            input: {
+                [x: string]: unknown;
+            } & z.input<typeof storageAdminCapability.methods.isAdoptedLegacyTable.input>;
+            output: z.infer<typeof storageAdminCapability.methods.isAdoptedLegacyTable.output>;
+            meta: object;
+        }>;
     }>>;
     storageEvictable: TRPCBuiltRouter<{
         ctx: TrpcContext;

package/dist/generated/method-access-map.d.ts

@@ -6,7 +6,7 @@
  * scope+access check inside `protectedProcedure` (see
  * `server/backend/src/api/trpc/trpc.middleware.ts`).
  *
- * Coverage: 1367 method paths across 177 capabilities.
+ * Coverage: 1369 method paths across 177 capabilities.
  */
 import type { CapabilityMethodAccess } from '../capabilities/capability-definition.js';
 export interface MethodAccessRecord {

package/dist/helpers/addon-slice-handle.d.ts

@@ -0,0 +1,4 @@
+import type { SliceHandleApi } from '../device/device-state-handle.js';
+import type { AddonApi } from '../generated/addon-api.js';
+/** Structural bridge: every `AddonApi` client carries `deviceState` (+ optional `live`). */
+export declare function addonSliceHandleApi(api: AddonApi): SliceHandleApi;

package/dist/helpers/trpc-leaf.d.ts

@@ -0,0 +1,17 @@
+import type { AddonApi } from '../generated/addon-api.js';
+/** tRPC client procedure bundle (`query` / `mutate` / `subscribe`). */
+export interface TrpcProcedureLeaf {
+    readonly query?: (input?: unknown) => unknown;
+    readonly mutate?: (input?: unknown) => unknown;
+    readonly subscribe?: (input?: unknown, push?: unknown) => unknown;
+}
+export declare function isTrpcProcedureLeaf(value: unknown): value is TrpcProcedureLeaf;
+export declare function readTrpcLeaf(api: AddonApi, capProp: string, method: string): TrpcProcedureLeaf;
+export type TrpcDispatchKind = 'query' | 'mutation' | 'subscription';
+/**
+ * Invoke `api.<capProp>.<method>.{query|mutate|subscribe}(input)`.
+ * `Result` is the generated proxy method's return. The leaf itself is only
+ * `unknown` (the client is a structural bag), so the assertion is the one
+ * boundary between that bag and the typed proxy.
+ */
+export declare function invokeTrpcLeaf<Result>(api: AddonApi, capProp: string, method: string, kind: TrpcDispatchKind, input?: unknown, push?: unknown): Result;

package/dist/index.d.ts

@@ -47,7 +47,7 @@ export type * from './interfaces/capability.js';
 export type * from './interfaces/config-port.js';
 export type * from './interfaces/config-ui.js';
 export type { HydratedFieldEntry } from './interfaces/config-ui.js';
-export { collectHydratedFieldEntries, collectHydratedFieldValues, hydrateSchema, resolveHydratedFieldValue, WELL_KNOWN_TAB_MAP, WELL_KNOWN_TABS, } from './interfaces/config-ui.js';
+export { collectHydratedFieldEntries, collectHydratedFieldValues, dehydrateConfigField, dehydrateSchema, hydrateSchema, resolveHydratedFieldValue, WELL_KNOWN_TAB_MAP, WELL_KNOWN_TABS, } from './interfaces/config-ui.js';
 export { collectKeychainStoredKeys, collectSecretConfigKeys, isKeychainStoredField, isSecretConfigField, REDACTED_SECRET, schemaDeclaresAnyField, } from './interfaces/config-ui-secrets.js';
 export * from './keychain/index.js';
 export * from './records/index.js';
@@ -190,6 +190,7 @@ export type { IDevice } from './device/device.js';
 export type { DeviceBinding, DeviceBindingEntry } from './device/device-binding.js';
 export { DeviceConfig } from './device/device-config.js';
 export type { DeviceConstructor, DeviceContext, DeviceManagerApi, DevicePersistConfigOptions, IDeviceRegistry, IDeviceRegistryReader, } from './device/device-context.js';
+export { widenDeviceConstructor } from './device/device-context.js';
 export type { AccessoryControlInput, AccessoryControlKind, AccessoryControlPick, DeviceControlKind, SensorMapping, } from './device/device-control-resolution.js';
 export { DEVICE_TYPE_CONTROL_KIND, hasMotionTrigger, isNode, MOTION_TRIGGER_FEATURE, pickAccessoryControl, resolveDeviceControlKind, resolveMutate, SENSOR_FEATURES, SENSOR_MAP, } from './device/device-control-resolution.js';
 export type { DeviceDoAction, DeviceDoOpenArg } from './device/device-do-actions.js';