camstack 1.2.197 → 1.2.199

package/dist/{launcher-I5A3WROT.js → launcher-35ZYSID7.js}

@@ -24024,9 +24024,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-Bn-RNanh.js
-var require_dist_Bn_RNanh = __commonJS({
-  "../system/dist/dist-Bn-RNanh.js"(exports) {
+// ../system/dist/dist-Ct-4tTeX.js
+var require_dist_Ct_4tTeX = __commonJS({
+  "../system/dist/dist-Ct-4tTeX.js"(exports) {
     "use strict";
     var zod = require_zod();
     __require("crypto");
@@ -37046,19 +37046,6 @@ var require_dist_Bn_RNanh = __commonJS({
       /** The whole declaration, secret paths and entry descriptor included (the entries service builds its handle from it). */
       declaration: RecordKindDeclarationSchema
     });
-    var STORAGE_ADMIN_MOVED_COLLECTIONS = [
-      "stream-broker:probe-snapshots",
-      "stream-broker:profile-map",
-      "stream-broker:rtsp-tokens",
-      "notification-center:device-mutes",
-      "recorder:recording-configs",
-      "pipeline-orchestrator:device-features"
-    ];
-    var STORAGE_ADMIN_SCOPED_BASES = [
-      "addon-settings",
-      "addon-devices",
-      "sections"
-    ];
     var storageAdminCapability = {
       name: "storage-admin",
       scope: "system",
@@ -37070,26 +37057,6 @@ var require_dist_Bn_RNanh = __commonJS({
         * optionally only those owned by `ownerPrefix`. Reads only.
         */
         listTables: method(zod.z.object({ ownerPrefix: zod.z.string().min(1).optional() }), zod.z.object({ tables: zod.z.array(StorageTableSchema) }), { auth: "admin" }),
-        /**
-        * Drop one table. REFUSES when an addon declared it since the engine
-        * started (a running addon still owns it), when it is an engine or
-        * canonical table, when it does not exist, or when its row count is not
-        * `expectRows` - the caller states what it believes it is deleting. The
-        * engine also refuses anything but `<owner>:(addon-settings|addon-devices|
-        * sections)`, the retired collections by name, and tables of owners that
-        * are not installed (and refuses when it cannot read the installed list).
-        * Removed with the D870 migration script once the last hub ran it.
-        */
-        dropCollection: method(zod.z.object({
-          collection: zod.z.string().min(1),
-          expectRows: zod.z.number().int().nonnegative()
-        }), zod.z.object({
-          dropped: zod.z.literal(true),
-          rows: zod.z.number().int().nonnegative()
-        }), {
-          kind: "mutation",
-          auth: "admin"
-        }),
         /** Every record kind of both files with rows, a size estimate, class and retention (D881). */
         listKinds: method(zod.z.object({
           owner: zod.z.string().min(1).optional(),
@@ -63642,6 +63609,15 @@ var require_dist_Bn_RNanh = __commonJS({
       * Replaces `zoneCrop`.
       */
       showTriggerZone: zod.z.boolean().optional(),
+      /**
+      * Draw the SUBJECT'S PATH on the picture — a line in the subject's colour
+      * through the track's positions up to the frame shown, the same path the
+      * debug views draw (`buildSubjectPath`, D903). Every picture mode a subject
+      * is drawn on: a `crop` maps the path into the crop and clips it. Valid only
+      * on a rule whose subject is a tracked object (refused on a sound rule);
+      * dropped on `image: 'none'`. Absent = off.
+      */
+      showSubjectPath: zod.z.boolean().optional(),
       /** @deprecated D897 — accepted from an editor that predates `image`, folded into it on save. */
       attach: zod.z.enum([
         "best",
@@ -94558,12 +94534,6 @@ var require_dist_Bn_RNanh = __commonJS({
         addonId: null,
         access: "create"
       },
-      "storageAdmin.dropCollection": {
-        capName: "storage-admin",
-        capScope: "system",
-        addonId: null,
-        access: "delete"
-      },
       "storageAdmin.listKinds": {
         capName: "storage-admin",
         capScope: "system",
@@ -101340,18 +101310,6 @@ var require_dist_Bn_RNanh = __commonJS({
         return STORAGE_ACCESS_FALLBACK;
       }
     });
-    Object.defineProperty(exports, "STORAGE_ADMIN_MOVED_COLLECTIONS", {
-      enumerable: true,
-      get: function() {
-        return STORAGE_ADMIN_MOVED_COLLECTIONS;
-      }
-    });
-    Object.defineProperty(exports, "STORAGE_ADMIN_SCOPED_BASES", {
-      enumerable: true,
-      get: function() {
-        return STORAGE_ADMIN_SCOPED_BASES;
-      }
-    });
     Object.defineProperty(exports, "STREAM_PROFILE_META", {
       enumerable: true,
       get: function() {
@@ -114066,11 +114024,11 @@ ${values.join("\n")}` : `${blockName} :`;
   }
 });
 
-// ../system/dist/device-ca-CPTDs--d.js
-var require_device_ca_CPTDs_d = __commonJS({
-  "../system/dist/device-ca-CPTDs--d.js"(exports) {
+// ../system/dist/device-ca-CUEx7sti.js
+var require_device_ca_CUEx7sti = __commonJS({
+  "../system/dist/device-ca-CUEx7sti.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var require_x509_es = require_x509_es_C4cOo48M();
     var node_crypto = __require("crypto");
     var SYSTEM_SECRET_OWNER = "system";
@@ -114494,7 +114452,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     function nextEpisodeId(input) {
       const { previous } = input;
@@ -115899,7 +115857,7 @@ var require_calendars_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var require_settle_sources = require_settle_sources_Bhsy57y();
     var zod = require_zod();
     var CALENDAR_COLOR_PALETTE = [
@@ -116115,11 +116073,11 @@ var require_calendars = __commonJS({
   }
 });
 
-// ../system/dist/composition-sources-b0e_2I-D.js
-var require_composition_sources_b0e_2I_D = __commonJS({
-  "../system/dist/composition-sources-b0e_2I-D.js"(exports) {
+// ../system/dist/composition-sources-BPnpB9XG.js
+var require_composition_sources_BPnpB9XG = __commonJS({
+  "../system/dist/composition-sources-BPnpB9XG.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     function normalizedNativeOwner(owner) {
       const trimmed = owner?.trim();
       return trimmed ? trimmed : null;
@@ -116234,8 +116192,8 @@ var require_composer_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
-    var require_composition_sources = require_composition_sources_b0e_2I_D();
+    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_composition_sources = require_composition_sources_BPnpB9XG();
     var zod = require_zod();
     function isRecord$2(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -120045,7 +120003,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -124709,9 +124667,9 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
-    var require_composition_sources = require_composition_sources_b0e_2I_D();
+    var require_composition_sources = require_composition_sources_BPnpB9XG();
     var require_prefix_range = require_prefix_range_D_KueXbQ();
     var require_prefix_walk = require_prefix_walk_Dv6MLZlM();
     var zod = require_zod();
@@ -136984,9 +136942,9 @@ var require_addon = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-D_VwZiDt.js
-var require_retired_settings_keys_D_VwZiDt = __commonJS({
-  "../system/dist/retired-settings-keys-D_VwZiDt.js"(exports) {
+// ../system/dist/retired-settings-keys-CGUqX-Oz.js
+var require_retired_settings_keys_CGUqX_Oz = __commonJS({
+  "../system/dist/retired-settings-keys-CGUqX-Oz.js"(exports) {
     "use strict";
     var _camstack_types_addon = require_addon();
     function settingsStoreIsAuthoritativeHere(env) {
@@ -137247,12 +137205,6 @@ var require_retired_settings_keys_D_VwZiDt = __commonJS({
     function errText(err) {
       return err instanceof Error ? err.message : String(err);
     }
-    Object.defineProperty(exports, "RETIRED_SETTINGS_KEYS", {
-      enumerable: true,
-      get: function() {
-        return RETIRED_SETTINGS_KEYS;
-      }
-    });
     Object.defineProperty(exports, "purgeRetiredSettingsKeys", {
       enumerable: true,
       get: function() {
@@ -137283,11 +137235,11 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     var require_prefix_range = require_prefix_range_D_KueXbQ();
     var require_prefix_walk = require_prefix_walk_Dv6MLZlM();
-    var require_retired_settings_keys = require_retired_settings_keys_D_VwZiDt();
+    var require_retired_settings_keys = require_retired_settings_keys_CGUqX_Oz();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
@@ -146355,7 +146307,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -146489,7 +146441,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -146852,11 +146804,11 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     var require_safe_buffer$1 = require_safe_buffer_D3aoa_7X();
     var require_ms$1 = require_ms_LB3giGoU();
-    var require_device_ca = require_device_ca_CPTDs_d();
+    var require_device_ca = require_device_ca_CUEx7sti();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
@@ -152443,7 +152395,6 @@ var require_local_auth_addon = __commonJS({
     var USERS_COLLECTION$1 = "users";
     var API_KEYS_COLLECTION = "api_keys";
     var SCOPED_TOKENS_COLLECTION = "scoped_tokens";
-    var OAUTH_SESSIONS_COLLECTION = "oauth_sessions";
     var USER_TOTP_COLLECTION = "user_totp";
     var USER_EXTERNAL_IDENTITIES_COLLECTION = "user_external_identities";
     var USERS_COLUMNS = [
@@ -152643,47 +152594,6 @@ var require_local_auth_addon = __commonJS({
         notNull: true
       }
     ];
-    var OAUTH_SESSIONS_COLUMNS = [
-      {
-        name: "id",
-        type: "TEXT",
-        primaryKey: true,
-        notNull: true
-      },
-      {
-        name: "userId",
-        type: "TEXT",
-        notNull: true
-      },
-      {
-        name: "username",
-        type: "TEXT",
-        notNull: true
-      },
-      {
-        name: "integrationId",
-        type: "TEXT",
-        notNull: true
-      },
-      {
-        name: "scopes",
-        type: "JSON"
-      },
-      {
-        name: "createdAt",
-        type: "INTEGER",
-        notNull: true
-      },
-      {
-        name: "lastUsedAt",
-        type: "INTEGER",
-        notNull: true
-      },
-      {
-        name: "revokedAt",
-        type: "INTEGER"
-      }
-    ];
     async function declareAuthSchema(store, options) {
       const skip = new Set(options?.skipCollections ?? []);
       if (!skip.has("users")) await store.declareCollection.mutate({
@@ -152718,14 +152628,6 @@ var require_local_auth_addon = __commonJS({
           columns: ["userId"]
         }]
       });
-      if (!skip.has("oauth_sessions")) await store.declareCollection.mutate({
-        collection: OAUTH_SESSIONS_COLLECTION,
-        columns: OAUTH_SESSIONS_COLUMNS,
-        indexes: [{
-          name: "idx_oauth_sessions_user_id",
-          columns: ["userId"]
-        }]
-      });
       if (!skip.has("login_sessions")) await store.declareCollection.mutate({
         collection: LOGIN_SESSIONS_COLLECTION,
         columns: LOGIN_SESSIONS_COLUMNS,
@@ -152926,16 +152828,19 @@ var require_local_auth_addon = __commonJS({
       "oauth-sessions": {
         schema: OauthSessionBodySchema,
         class: "ledger",
-        writeTrigger: "OAuth code exchange; refresh touches lastUsedAt",
+        writeTrigger: "OAuth code exchange; refresh touches lastUsedAt; revoke stamps revokedAt",
         device: "none",
         at: "none",
         indexes: [{
           name: "user",
           fields: ["userId"]
+        }, {
+          name: "revoked",
+          fields: ["revokedAt"]
         }],
         retention: {
           owner: "local-auth",
-          reason: "daily reap deletes revoked sessions older than 30 days; active rows never expire"
+          reason: "daily reap deletes sessions revoked more than 30 days ago; an active session has no lifetime, so no engine TTL"
         }
       },
       "user-totp": {
@@ -153015,7 +152920,6 @@ var require_local_auth_addon = __commonJS({
       ADMIN_TOKENS_COLLECTION,
       LOGIN_SESSIONS_COLLECTION,
       LOGIN_SESSION_CUTOFFS_COLLECTION,
-      OAUTH_SESSIONS_COLLECTION,
       USER_TOTP_COLLECTION,
       USER_EXTERNAL_IDENTITIES_COLLECTION,
       DEVICE_CREDENTIALS_COLLECTION,
@@ -153163,7 +153067,7 @@ var require_local_auth_addon = __commonJS({
       const value = data[key];
       return typeof value === "number" && Number.isFinite(value) ? value : null;
     }
-    function parseSession$1(data) {
+    function parseSession(data) {
       const id = str(data, "id");
       const userId = str(data, "userId");
       const createdAt = num(data, "createdAt");
@@ -153226,7 +153130,7 @@ var require_local_auth_addon = __commonJS({
         if (sessionsKind !== null) {
           const rows2 = await (0, import_read_all_rows.readAllRows)(sessionsKind);
           for (const row of rows2) {
-            const record = parseSession$1({
+            const record = parseSession({
               id: row.id,
               ...row.data
             });
@@ -153238,7 +153142,7 @@ var require_local_auth_addon = __commonJS({
         }
         const rows = await this.store.query.query({ collection: LOGIN_SESSIONS_COLLECTION });
         for (const row of rows) {
-          const record = parseSession$1(row.data);
+          const record = parseSession(row.data);
           if (record !== null) this.remember(record);
         }
         const cutoffs = await this.store.query.query({ collection: LOGIN_SESSION_CUTOFFS_COLLECTION });
@@ -156565,33 +156469,6 @@ var require_local_auth_addon = __commonJS({
         }
       };
     }
-    function parseSession(data) {
-      const id = data["id"];
-      const userId = data["userId"];
-      const username = data["username"];
-      const integrationId = data["integrationId"];
-      const scopes = data["scopes"];
-      const createdAt = data["createdAt"];
-      const lastUsedAt = data["lastUsedAt"];
-      const revokedAt = data["revokedAt"];
-      if (typeof id !== "string") throw new Error("oauth_sessions row: missing id");
-      if (typeof userId !== "string") throw new Error("oauth_sessions row: missing userId");
-      if (typeof username !== "string") throw new Error("oauth_sessions row: missing username");
-      if (typeof integrationId !== "string") throw new Error("oauth_sessions row: missing integrationId");
-      if (!Array.isArray(scopes)) throw new Error("oauth_sessions row: scopes must be an array");
-      if (typeof createdAt !== "number") throw new Error("oauth_sessions row: missing createdAt");
-      if (typeof lastUsedAt !== "number") throw new Error("oauth_sessions row: missing lastUsedAt");
-      return {
-        id,
-        userId,
-        username,
-        integrationId,
-        scopes,
-        createdAt,
-        lastUsedAt,
-        revokedAt: typeof revokedAt === "number" ? revokedAt : null
-      };
-    }
     function sessionToBody(session) {
       return {
         userId: session.userId,
@@ -156604,22 +156481,29 @@ var require_local_auth_addon = __commonJS({
       };
     }
     function rowToSession(id, body) {
-      return parseSession({
+      return {
         id,
-        ...body
-      });
+        userId: body.userId,
+        username: body.username,
+        integrationId: body.integrationId,
+        scopes: body.scopes,
+        createdAt: body.createdAt,
+        lastUsedAt: body.lastUsedAt,
+        revokedAt: typeof body.revokedAt === "number" ? body.revokedAt : null
+      };
     }
     var OauthSessionManager = class {
       kind;
-      store;
       constructor(deps) {
-        if ("oauthSessionsKind" in deps) {
-          this.kind = deps.oauthSessionsKind;
-          this.store = deps.legacyStore ?? null;
-        } else {
-          this.kind = null;
-          this.store = deps;
-        }
+        this.kind = deps.oauthSessionsKind;
+      }
+      async write(session) {
+        const parsed = localAuthRecordKinds["oauth-sessions"].schema.safeParse(sessionToBody(session));
+        if (!parsed.success) throw new Error(parsed.error.message);
+        await this.kind.put({
+          id: session.id,
+          data: parsed.data
+        });
       }
       async create(input) {
         const now = Date.now();
@@ -156633,117 +156517,53 @@ var require_local_auth_addon = __commonJS({
           lastUsedAt: now,
           revokedAt: null
         };
-        const kind = this.kind;
-        if (kind !== null) {
-          const parsed = localAuthRecordKinds["oauth-sessions"].schema.safeParse(sessionToBody(session));
-          if (!parsed.success) throw new Error(parsed.error.message);
-          await kind.put({
-            id: session.id,
-            data: parsed.data
-          });
-          return session;
-        }
-        await this.store.insert.mutate({
-          collection: OAUTH_SESSIONS_COLLECTION,
-          record: {
-            id: session.id,
-            data: { ...session }
-          }
-        });
+        await this.write(session);
         return session;
       }
       async list() {
-        const kind = this.kind;
-        if (kind !== null) return (await (0, import_read_all_rows.readAllRows)(kind)).map((row) => rowToSession(row.id, row.data));
-        return (await this.store.query.query({
-          collection: OAUTH_SESSIONS_COLLECTION,
-          filter: {}
-        })).map((r2) => parseSession(r2.data));
+        return (await (0, import_read_all_rows.readAllRows)(this.kind)).map((row) => rowToSession(row.id, row.data));
       }
       async getById(id) {
-        const kind = this.kind;
-        if (kind !== null) {
-          const row = await kind.get(id);
-          return row === null ? null : rowToSession(row.id, row.data);
-        }
-        const results = await this.store.query.query({
-          collection: OAUTH_SESSIONS_COLLECTION,
-          filter: { where: { id } }
-        });
-        if (results.length === 0) return null;
-        return parseSession(results[0].data);
+        const row = await this.kind.get(id);
+        return row === null ? null : rowToSession(row.id, row.data);
       }
       async markRevoked(id) {
         const existing = await this.getById(id);
         if (existing === null) return false;
         if (existing.revokedAt !== null) return true;
-        const updated = {
+        await this.write({
           ...existing,
           revokedAt: Date.now()
-        };
-        const kind = this.kind;
-        if (kind !== null) {
-          const parsed = localAuthRecordKinds["oauth-sessions"].schema.safeParse(sessionToBody(updated));
-          if (!parsed.success) throw new Error(parsed.error.message);
-          await kind.put({
-            id,
-            data: parsed.data
-          });
-          return true;
-        }
-        await this.store.update.mutate({
-          collection: OAUTH_SESSIONS_COLLECTION,
-          id,
-          data: { ...updated }
         });
         return true;
       }
       async remove(id) {
         if (await this.getById(id) === null) return false;
-        const kind = this.kind;
-        if (kind !== null) {
-          await kind.delete(id);
-          return true;
-        }
-        await this.store.delete.mutate({
-          collection: OAUTH_SESSIONS_COLLECTION,
-          key: id
-        });
+        await this.kind.delete(id);
         return true;
       }
+      /**
+      * Delete the sessions revoked at or before `horizonMs`. An active session
+      * (`revokedAt` null) is never matched: it has no lifetime of its own, which
+      * is why this is the owner's sweep and not an engine TTL.
+      */
       async reapRevoked(horizonMs) {
-        const kind = this.kind;
-        if (kind !== null) return kind.deleteWhere({ where: { revokedAt: {
+        return this.kind.deleteWhere({ where: { revokedAt: {
           gte: 1,
           lte: horizonMs
         } } });
-        const { deleted } = await this.store.deleteWhere.mutate({
-          collection: OAUTH_SESSIONS_COLLECTION,
-          filter: { whereBetween: { revokedAt: [1, horizonMs] } }
-        });
-        return deleted;
       }
       async touch(id) {
         const existing = await this.getById(id);
         if (existing === null) return;
-        const updated = {
+        const parsed = localAuthRecordKinds["oauth-sessions"].schema.safeParse(sessionToBody({
           ...existing,
           lastUsedAt: Date.now()
-        };
-        const kind = this.kind;
-        if (kind !== null) {
-          const parsed = localAuthRecordKinds["oauth-sessions"].schema.safeParse(sessionToBody(updated));
-          if (!parsed.success) return;
-          await kind.put({
-            id,
-            data: parsed.data
-          });
-          return;
-        }
-        await this.store.update.mutate({
-          collection: OAUTH_SESSIONS_COLLECTION,
+        }));
+        if (!parsed.success) return;
+        await this.kind.put({
           id,
-          data: { ...updated }
+          data: parsed.data
         });
       }
     };
@@ -156800,10 +156620,7 @@ var require_local_auth_addon = __commonJS({
             apiKeysKind: authStores.apiKeys,
             legacyStore: store
           });
-          this.oauthSessionManager = new OauthSessionManager({
-            oauthSessionsKind: authStores.oauthSessions,
-            legacyStore: store
-          });
+          this.oauthSessionManager = new OauthSessionManager({ oauthSessionsKind: authStores.oauthSessions });
           this.totpManager = new TotpManager({
             userTotpKind: authStores.userTotp,
             legacyStore: store
@@ -157523,7 +157340,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var require_log_read_filter = require_log_read_filter_Bi066jwU();
     var zod = require_zod();
     function sanitizeLabelName(raw) {
@@ -158484,7 +158301,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var node_fs_promises = __require("fs/promises");
     var node_util = __require("util");
     var node_os = __require("os");
@@ -161051,7 +160868,7 @@ var require_device_history_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var FIVE_MINUTES_MS = 5 * 6e4;
     var HOUR_MS = 60 * 6e4;
     var DAY_MS = 24 * HOUR_MS;
@@ -164097,7 +163914,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -165207,12 +165024,12 @@ var require_lib = __commonJS({
   }
 });
 
-// ../system/dist/wal-maintenance-CaJjuLHq.js
-var require_wal_maintenance_CaJjuLHq = __commonJS({
-  "../system/dist/wal-maintenance-CaJjuLHq.js"(exports) {
+// ../system/dist/wal-maintenance-DBvuVU9s.js
+var require_wal_maintenance_DBvuVU9s = __commonJS({
+  "../system/dist/wal-maintenance-DBvuVU9s.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var require_prefix_range = require_prefix_range_D_KueXbQ();
     var node_crypto = __require("crypto");
     var node_module = __require("module");
@@ -165496,7 +165313,6 @@ var require_wal_maintenance_CaJjuLHq = __commonJS({
     function controlTargetOf(backend, threadId) {
       return {
         hasTable: ({ name }) => backend.hasTable(name),
-        dropRetiredTable: ({ name }) => backend.dropRetiredTable(name),
         threadId: () => threadId,
         listPhysicalTables: ({ ownerPrefix }) => backend.listTables(ownerPrefix)
       };
@@ -165588,9 +165404,6 @@ var require_wal_maintenance_CaJjuLHq = __commonJS({
         params
       };
     }
-    var RECORDS_TABLE = "records";
-    var RECORD_KINDS_TABLE = "_record_kinds";
-    var RECORD_SEQUENCES_TABLE = "_record_sequences";
     var RECORDS_SCHEMA_SQL = `
 CREATE TABLE IF NOT EXISTS records (
   rid        INTEGER PRIMARY KEY,
@@ -165626,11 +165439,6 @@ CREATE TABLE IF NOT EXISTS _record_sequences (
   next    INTEGER NOT NULL
 );
 `;
-    var RECORDS_ENGINE_TABLES = [
-      RECORDS_TABLE,
-      RECORD_KINDS_TABLE,
-      RECORD_SEQUENCES_TABLE
-    ];
     var INDEX_KIND_DEVICE_AT = "records_kind_device_at";
     var INDEX_KIND_AT = "records_kind_at";
     var FIELD_PATH = /^[A-Za-z_][A-Za-z0-9_]{0,63}(\.[A-Za-z_][A-Za-z0-9_]{0,63}){0,3}$/;
@@ -166634,7 +166442,6 @@ CREATE TABLE IF NOT EXISTS _record_sequences (
     ];
     var CONTROL_OPS = [
       "hasTable",
-      "dropRetiredTable",
       "threadId",
       "listPhysicalTables"
     ];
@@ -166883,9 +166690,6 @@ CREATE TABLE IF NOT EXISTS _record_sequences (
         kind: kind === "table" || kind === "index" ? kind : "unknown"
       };
     }
-    function isCountRow(raw) {
-      return raw !== null && typeof raw === "object" && typeof Reflect.get(raw, "n") === "number";
-    }
     function parseRowData(raw) {
       return require_dist10.asJsonObject(require_dist10.parseJsonUnknown(raw)) ?? {};
     }
@@ -167848,28 +167652,6 @@ CREATE TABLE IF NOT EXISTS _record_sequences (
         return out;
       }
       /**
-      * Drop one table nobody owns (D870 migration, one-shot). Refuses a canonical
-      * or engine table, one a running addon declared since boot, a table that is
-      * not there, and a row count other than the one the caller stated.
-      */
-      dropTable(name, expectRows) {
-        if (name.startsWith("sqlite_") || name === SqliteSettingsBackend2.DECLARATIONS_TABLE) throw new Error(`drop refused: "${name}" is an engine table`);
-        if (RECORDS_ENGINE_TABLES.includes(name)) throw new Error(`drop refused: "${name}" is a table of the records engine`);
-        if (SqliteSettingsBackend2.CANONICAL_KV_COLLECTIONS.includes(name)) throw new Error(`drop refused: "${name}" is a canonical collection`);
-        if (this.declaredThisBoot.has(name)) throw new Error(`drop refused: "${name}" is declared by a running addon`);
-        if (!this.hasTable(name)) throw new Error(`drop refused: no table "${name}"`);
-        const db = this.getDb();
-        const rows = db.prepare(`SELECT COUNT(*) AS c FROM "${name}"`).get()?.c ?? 0;
-        if (rows !== expectRows) throw new Error(`drop refused: "${name}" holds ${rows} rows, the caller expected ${expectRows}`);
-        db.transaction(() => {
-          db.exec(`DROP TABLE "${name}"`);
-          this.ensureDeclarationsTable();
-          db.prepare(`DELETE FROM "${SqliteSettingsBackend2.DECLARATIONS_TABLE}" WHERE name = ?`).run(name);
-        })();
-        this.declaredCollections.delete(name);
-        return rows;
-      }
-      /**
       * The tables this file's own `_collection_declarations` names — the
       * placement authority (D851). Read from DISK, not from memory, so a table
       * created and declared by an earlier life of the process still counts.
@@ -168289,31 +168071,6 @@ CREATE TABLE IF NOT EXISTS _record_sequences (
         }
         this.structuredTables.set(table, fingerprint);
       }
-      /**
-      * Drop a table nothing declares any more, reporting what went with it.
-      *
-      * The DDL lives here because the engine owns the handle AND the two memos
-      * that outlive a table: `structuredTables` (schema fingerprint) and
-      * `declaredCollections` (the column set `compileFilter` resolves against).
-      * Dropping behind their backs would leave a ghost — a later declaration of
-      * the same name would be memoised as "already materialised" against a table
-      * that no longer exists.
-      *
-      * WHICH tables are retired, and the logging, are policy: they live in
-      * `retired-collections.ts`. This method knows only how to drop one.
-      *
-      * Answers `null` when the table is not there — the steady state after the
-      * first boot that ran the purge, and the case on a fresh install.
-      */
-      dropRetiredTable(table) {
-        if (this.getDb().prepare(`SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?`).get(table) === void 0) return null;
-        const counted = this.getDb().prepare(`SELECT COUNT(*) AS n FROM "${table}"`).get();
-        const rows = isCountRow(counted) ? counted.n : 0;
-        this.getDb().exec(`DROP TABLE "${table}"`);
-        this.structuredTables.delete(table);
-        this.declaredCollections.delete(table);
-        return { rows };
-      }
       /** Returns SQLite's `lastInsertRowid` — the only place an auto-assigned key
       *  is knowable (D473). */
       async tableInsert(table, row) {
@@ -169389,9 +169146,9 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
-    var require_retired_settings_keys = require_retired_settings_keys_D_VwZiDt();
-    var require_wal_maintenance = require_wal_maintenance_CaJjuLHq();
+    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_retired_settings_keys = require_retired_settings_keys_CGUqX_Oz();
+    var require_wal_maintenance = require_wal_maintenance_DBvuVU9s();
     var require_sqlite_snapshot_protocol = require_sqlite_snapshot_protocol_B9OndqZv();
     var require_wal_checkpoint_policy = require_wal_checkpoint_policy_d2z2qPqx();
     var node_fs_promises = __require("fs/promises");
@@ -170277,9 +170034,6 @@ var require_sqlite_settings_addon = __commonJS({
       listPhysicalTables(ownerPrefix) {
         return Promise.resolve(require_wal_maintenance.callControl(require_wal_maintenance.controlTargetOf(this.backend, 0), "listPhysicalTables", { ownerPrefix }));
       }
-      async dropRetiredTable(name) {
-        return require_wal_maintenance.callControl(require_wal_maintenance.controlTargetOf(this.backend, 0), "dropRetiredTable", { name });
-      }
       async servingThreadId() {
         return 0;
       }
@@ -170333,9 +170087,6 @@ var require_sqlite_settings_addon = __commonJS({
       listPhysicalTables(ownerPrefix) {
         return this.client.control("listPhysicalTables", { ownerPrefix });
       }
-      dropRetiredTable(name) {
-        return this.client.control("dropRetiredTable", { name });
-      }
       servingThreadId() {
         return this.client.control("threadId", {});
       }
@@ -170808,13 +170559,11 @@ var require_sqlite_settings_addon = __commonJS({
     var StorageAdminProvider = class {
       backend;
       logger;
-      installedOwners;
       records;
       peerFiles;
-      constructor(backend, logger, installedOwners, records, peerFiles = async () => []) {
+      constructor(backend, logger, records, peerFiles = async () => []) {
         this.backend = backend;
         this.logger = logger;
-        this.installedOwners = installedOwners;
         this.records = records;
         this.peerFiles = peerFiles;
       }
@@ -170824,19 +170573,6 @@ var require_sqlite_settings_addon = __commonJS({
       readRecords(input) {
         return this.records.readRecords(input);
       }
-      /** May this table be dropped AT ALL? Throws with the reason when not. */
-      async assertDroppable(collection) {
-        const colon = collection.indexOf(":");
-        const base = colon > 0 ? collection.slice(colon + 1) : "";
-        if (colon > 0 && require_dist10.STORAGE_ADMIN_SCOPED_BASES.includes(base)) return;
-        if (require_dist10.STORAGE_ADMIN_MOVED_COLLECTIONS.includes(collection)) return;
-        if (colon <= 0) throw new Error(`drop refused: "${collection}" is not a scoped table`);
-        const installed = await this.installedOwners().catch((err) => {
-          throw new Error(`drop refused: the installed addons could not be read (${err instanceof Error ? err.message : String(err)})`);
-        });
-        const owner = collection.slice(0, colon);
-        if (installed.has(owner)) throw new Error(`drop refused: "${collection}" belongs to the installed addon "${owner}"`);
-      }
       async listTables(input) {
         const tables = [...this.backend.listTables(input.ownerPrefix)];
         for (const file of await this.peerFiles()) tables.push(...await file.listPhysicalTables(input.ownerPrefix));
@@ -170847,98 +170583,7 @@ var require_sqlite_settings_addon = __commonJS({
         } });
         return { tables };
       }
-      async dropCollection(input) {
-        try {
-          await this.assertDroppable(input.collection);
-          const rows = this.backend.dropTable(input.collection, input.expectRows);
-          this.logger.warn("storage-admin: DROPPED a table", { meta: {
-            collection: input.collection,
-            rows
-          } });
-          return {
-            dropped: true,
-            rows
-          };
-        } catch (err) {
-          this.logger.warn("storage-admin: drop refused", { meta: {
-            collection: input.collection,
-            expectRows: input.expectRows,
-            error: err instanceof Error ? err.message : String(err)
-          } });
-          throw err;
-        }
-      }
     };
-    var RETIRED_COLLECTIONS = [
-      {
-        collection: "devices",
-        owner: "integration-registry",
-        reason: "the device half of the integration-registry is deleted; the fleet is `device-manager:devices` and always was (0 rows here against 974 live devices)"
-      },
-      {
-        collection: "device_settings_kv",
-        owner: "integration-registry",
-        reason: "per-device settings of a device table that never had a row; the live per-camera store is the device-manager row plus `addon-device-settings`"
-      },
-      {
-        collection: "pipeline-analytics:track-groups",
-        owner: "pipeline-analytics",
-        reason: "the co-moving group entity is deleted (operator decision 2026-09-01, after the 2026-08-24 kill switch); nothing declares, writes or reads it"
-      },
-      {
-        collection: "pipeline-analytics:track-group-members",
-        owner: "pipeline-analytics",
-        reason: "membership rows of the deleted group entity; the track cascade that used to carry them away no longer has a group leg"
-      },
-      {
-        collection: "pipeline-analytics:summaries",
-        owner: "pipeline-analytics",
-        reason: "the session summary (proximity track grouping, D489/D490) is deleted (operator decision 2026-09-29, D680, after the 2026-09-16 switch-off); nothing declares, writes or reads it"
-      },
-      {
-        collection: "pipeline-analytics:summary-members",
-        owner: "pipeline-analytics",
-        reason: "membership rows of the deleted session summary; the track cascade no longer has a summary leg (D680)"
-      }
-    ];
-    function retiredCollectionStoreOfFile(file) {
-      return { async drop(collection) {
-        return file.dropRetiredTable(collection);
-      } };
-    }
-    async function purgeRetiredCollections(store, logger, specs = RETIRED_COLLECTIONS) {
-      const results = [];
-      for (const spec of specs) {
-        let dropped;
-        try {
-          dropped = await store.drop(spec.collection);
-        } catch (err) {
-          logger.warn("retired collection \u2014 drop failed, table left in place", { meta: {
-            addon: spec.owner,
-            collection: spec.collection,
-            error: err instanceof Error ? err.message : String(err)
-          } });
-          continue;
-        }
-        if (dropped === null) continue;
-        const result = {
-          collection: spec.collection,
-          owner: spec.owner,
-          rows: dropped.rows
-        };
-        results.push(result);
-        const line = "dropped a retired collection";
-        if (dropped.rows > 0) logger.warn(`${line} \u2014 it still held rows`, { meta: {
-          ...result,
-          reason: spec.reason
-        } });
-        else logger.info(line, { meta: {
-          ...result,
-          reason: spec.reason
-        } });
-      }
-      return results;
-    }
     var DATABASE_FILE_NAMES = {
       settings: "camstack.db",
       events: "events.db",
@@ -171028,14 +170673,13 @@ var require_sqlite_settings_addon = __commonJS({
           },
           {
             capability: require_dist10.storageAdminCapability,
-            provider: new StorageAdminProvider(settings.backend, this.ctx.logger.child("StorageAdmin"), async () => new Set((await this.ctx.api.addons.list.query()).map((addon) => addon.manifest.id)), records, async () => router.openFiles().filter((file) => file.databaseId !== "settings"))
+            provider: new StorageAdminProvider(settings.backend, this.ctx.logger.child("StorageAdmin"), records, async () => router.openFiles().filter((file) => file.databaseId !== "settings"))
           }
         ];
       }
       /**
       * Housekeeping that must happen BEFORE anything can read a file: the
-      * retired-key purge (settings only) and the retired-table purge (every
-      * open file).
+      * retired-key purge (settings file only).
       */
       async purgeBeforeServing(file) {
         if (file instanceof InlineOwnedFile && file.databaseId === "settings") try {
@@ -171043,7 +170687,6 @@ var require_sqlite_settings_addon = __commonJS({
         } catch (err) {
           this.ctx.logger.warn("Retired-key purge failed", { meta: { error: require_dist10.errMsg(err) } });
         }
-        await purgeRetiredCollections(retiredCollectionStoreOfFile(file), this.ctx.logger.child("RetiredCollections").withTags({ database: file.databaseId }));
       }
       /**
       * The engine's TTL sweep (D881): every 10 minutes, off the boot path (the
@@ -171118,7 +170761,7 @@ var require_sqlite_storage = __commonJS({
     });
     require_chunk_Cek0wNdY();
     var require_builtins_sqlite_storage_filesystem_storage_addon = require_filesystem_storage_addon();
-    var require_wal_maintenance = require_wal_maintenance_CaJjuLHq();
+    var require_wal_maintenance = require_wal_maintenance_DBvuVU9s();
     var require_builtins_sqlite_storage_sqlite_settings_addon = require_sqlite_settings_addon();
     var ConfigStore = class {
       db;
@@ -171202,7 +170845,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -175789,12 +175432,12 @@ var require_storage_orchestrator = __commonJS({
   }
 });
 
-// ../system/dist/agent-https-Dnr_nIVx.js
-var require_agent_https_Dnr_nIVx = __commonJS({
-  "../system/dist/agent-https-Dnr_nIVx.js"(exports) {
+// ../system/dist/agent-https-C6M6apPV.js
+var require_agent_https_C6M6apPV = __commonJS({
+  "../system/dist/agent-https-C6M6apPV.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var require_x509_es = require_x509_es_C4cOo48M();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -176852,11 +176495,11 @@ var require_agent_https_Dnr_nIVx = __commonJS({
   }
 });
 
-// ../system/dist/constants-6OeJiZgi.js
-var require_constants_6OeJiZgi = __commonJS({
-  "../system/dist/constants-6OeJiZgi.js"(exports) {
+// ../system/dist/constants-7ZMxWr8Z.js
+var require_constants_7ZMxWr8Z = __commonJS({
+  "../system/dist/constants-7ZMxWr8Z.js"(exports) {
     "use strict";
-    var MESH_CA_KEY_REF = require_dist_Bn_RNanh().buildSecretRef({
+    var MESH_CA_KEY_REF = require_dist_Ct_4tTeX().buildSecretRef({
       owner: "system",
       scope: { kind: "global" },
       fieldPath: "meshCaKey"
@@ -193953,11 +193596,11 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var require_safe_buffer$1 = require_safe_buffer_D3aoa_7X();
     var require_x509_es = require_x509_es_C4cOo48M();
-    var require_agent_https = require_agent_https_Dnr_nIVx();
-    var require_constants$8 = require_constants_6OeJiZgi();
+    var require_agent_https = require_agent_https_C6M6apPV();
+    var require_constants$8 = require_constants_7ZMxWr8Z();
     var require_src$1 = require_src_CnAqG6EF();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -275009,7 +274652,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var require_formatter = require_formatter_DqAKDlvN();
     var require_log_file_read_protocol = require_log_file_read_protocol_D0WcLbIV();
     var node_path = __require("path");
@@ -275306,9 +274949,9 @@ var require_winston_logging = __commonJS({
   }
 });
 
-// ../system/dist/custom-action-registry-COyb49zm.js
-var require_custom_action_registry_COyb49zm = __commonJS({
-  "../system/dist/custom-action-registry-COyb49zm.js"(exports) {
+// ../system/dist/custom-action-registry-MRyes5j0.js
+var require_custom_action_registry_MRyes5j0 = __commonJS({
+  "../system/dist/custom-action-registry-MRyes5j0.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
     var node_crypto = __require("crypto");
@@ -275431,6 +275074,8 @@ var require_custom_action_registry_COyb49zm = __commonJS({
       "objectDetection/yolov9/openvino/camstack-yolov9t-320-int8.xml": "ee465e0ee5c6ad7c4edc481b506a076045b82236ada80efcf8601a6ba0a7ee86",
       "objectDetection/yolov9/openvino/camstack-yolov9t-640-fp16.xml": "d4dd2278941ccb210d0763d822353f6d951c6a4f4f5a1604d7e3536ce6ffb954",
       "objectDetection/yolov9/openvino/camstack-yolov9t-640-int8.xml": "be2c95951a9f3a6d408bbabd551c99b8a6190f9ff659ae614b9e58cf0e51202c",
+      "objectDetection/yolov9/tflite/yolov9-s-relu6-best_320_int8_edgetpu.tflite": "49a38e77439b475d0d259a6d9fe7ea32fcaa58de3748499dd120aceebad9c591",
+      "objectDetection/yolov9/tflite/yolov9-s-relu6-tpumax_512_int8_edgetpu.tflite": "f634f60259101556825fd69662f96282e74364b507f83e6382cc34d5d0e6170e",
       "packageDetection/rfdetr-package/coreml/camstack-rfdetr-package.mlpackage": "73e42f03d66011a311bd83a0a3d1890e7eb1b9b2ba2b5688552a5d4fd60e0e72",
       "packageDetection/rfdetr-package/onnx/camstack-rfdetr-package.onnx": "5af96c6b5936f179e317c9e3915b7c7f74ea3625355f97f6a071c3cd5af2475c",
       "packageDetection/rfdetr-package/openvino/camstack-rfdetr-package.xml": "e2cb5bbccb7809d5c7e691a957bc5e008084119bdf29e2c95d6b6b0791e3061a",
@@ -282810,14 +282455,14 @@ var require_lib_8oZrELLm = __commonJS({
   }
 });
 
-// ../system/dist/hub-mdns-ciao-CTBTlia4.js
-var require_hub_mdns_ciao_CTBTlia4 = __commonJS({
-  "../system/dist/hub-mdns-ciao-CTBTlia4.js"(exports) {
+// ../system/dist/hub-mdns-ciao-DJ-Amqd7.js
+var require_hub_mdns_ciao_DJ_Amqd7 = __commonJS({
+  "../system/dist/hub-mdns-ciao-DJ-Amqd7.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var require_x509_es = require_x509_es_C4cOo48M();
-    var require_agent_https = require_agent_https_Dnr_nIVx();
+    var require_agent_https = require_agent_https_C6M6apPV();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var node_fs_promises = __require("fs/promises");
@@ -283829,12 +283474,12 @@ var require_platform_key_source_Di7HrlGR = __commonJS({
   }
 });
 
-// ../system/dist/restore-archive-DM1OBYq4.js
-var require_restore_archive_DM1OBYq4 = __commonJS({
-  "../system/dist/restore-archive-DM1OBYq4.js"(exports) {
+// ../system/dist/restore-archive-HwOA83v3.js
+var require_restore_archive_HwOA83v3 = __commonJS({
+  "../system/dist/restore-archive-HwOA83v3.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     var buffer = __require("buffer");
@@ -295075,9 +294720,9 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_Ct_4tTeX();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
-    var require_device_ca = require_device_ca_CPTDs_d();
+    var require_device_ca = require_device_ca_CUEx7sti();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_builtins_calendars_calendars_addon = require_calendars_addon();
@@ -295086,11 +294731,9 @@ var require_dist3 = __commonJS({
     require_composer();
     var require_formatter = require_formatter_DqAKDlvN();
     var require_builtins_console_logging_index = require_console_logging();
-    var require_prefix_range = require_prefix_range_D_KueXbQ();
     var require_prefix_walk = require_prefix_walk_Dv6MLZlM();
     var require_builtins_core_blocks_core_blocks_addon = require_core_blocks_addon();
     require_core_blocks();
-    var require_retired_settings_keys = require_retired_settings_keys_D_VwZiDt();
     var require_builtins_device_manager_device_manager_addon = require_device_manager_addon();
     require_device_manager();
     var require_builtins_hub_forwarder_index = require_hub_forwarder();
@@ -295103,21 +294746,21 @@ var require_dist3 = __commonJS({
     var require_builtins_native_metrics_native_metrics_addon = require_native_metrics_addon();
     var require_builtins_device_history_device_history_addon = require_device_history_addon();
     var require_builtins_sqlite_storage_filesystem_storage_addon = require_filesystem_storage_addon();
-    var require_wal_maintenance = require_wal_maintenance_CaJjuLHq();
+    var require_wal_maintenance = require_wal_maintenance_DBvuVU9s();
     var require_builtins_sqlite_storage_sqlite_settings_addon = require_sqlite_settings_addon();
     var require_builtins_sqlite_storage_index = require_sqlite_storage();
     var require_builtins_storage_orchestrator_storage_orchestrator_addon = require_storage_orchestrator_addon();
     require_storage_orchestrator();
-    var require_agent_https = require_agent_https_Dnr_nIVx();
-    var require_constants15 = require_constants_6OeJiZgi();
+    var require_agent_https = require_agent_https_C6M6apPV();
+    var require_constants15 = require_constants_7ZMxWr8Z();
     var require_builtins_system_config_system_config_addon = require_system_config_addon();
     require_system_config();
     var require_builtins_winston_logging_index = require_winston_logging();
-    var require_custom_action_registry = require_custom_action_registry_COyb49zm();
-    var require_hub_mdns_ciao = require_hub_mdns_ciao_CTBTlia4();
+    var require_custom_action_registry = require_custom_action_registry_MRyes5j0();
+    var require_hub_mdns_ciao = require_hub_mdns_ciao_DJ_Amqd7();
     var require_platform_key_source = require_platform_key_source_Di7HrlGR();
     var require_resource_monitor = require_resource_monitor_mio9dSCT();
-    var require_restore_archive = require_restore_archive_DM1OBYq4();
+    var require_restore_archive = require_restore_archive_HwOA83v3();
     var require_coral_accelerators = require_coral_accelerators_oUXmmbc2();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -295907,22 +295550,22 @@ var require_dist3 = __commonJS({
       const queuedTop = window2.queued.top.map((p) => `${p.peerId}:${kb$1(p.bytes)}`).join(",");
       return ` socketPeers=${window2.peersMeasured}/${window2.peersConnected} socketTx=${formatDirection(window2.tx)} socketRx=${formatDirection(window2.rx)}` + (top.length === 0 ? "" : ` socketTop=${top}`) + (topBytes.length === 0 ? "" : ` socketTopBytes=${topBytes}`) + ` socketQueued=${kb$1(window2.queued.totalBytes)}kB` + (window2.queued.unmeasured === 0 ? "" : ` socketQueuedUnmeasured=${window2.queued.unmeasured}`) + (queuedTop.length === 0 ? "" : ` socketQueuedTop=${queuedTop}`) + (window2.forward === void 0 ? "" : ` socketFwd=${window2.forward.raw}/${window2.forward.decoded}`) + (window2.actions === void 0 ? "" : ` socketActions=${kb$1(window2.actions.labelledBytes)}/${kb$1(window2.actions.totalBytes)}kB` + (window2.actions.top.length === 0 ? "" : ` socketTopActions=${window2.actions.top.map(formatAction).join(",")}`));
     }
-    function isRecord$7(value) {
+    function isRecord$6(value) {
       return typeof value === "object" && value !== null;
     }
     function writerSocketsOf(broker) {
-      if (!isRecord$7(broker)) return void 0;
+      if (!isRecord$6(broker)) return void 0;
       const transit = broker["transit"];
-      if (!isRecord$7(transit)) return void 0;
+      if (!isRecord$6(transit)) return void 0;
       const transporter = transit["tx"];
-      if (!isRecord$7(transporter)) return void 0;
+      if (!isRecord$6(transporter)) return void 0;
       const writer = transporter["writer"];
-      if (!isRecord$7(writer)) return void 0;
+      if (!isRecord$6(writer)) return void 0;
       const sockets = writer["sockets"];
       return sockets instanceof Map ? sockets : void 0;
     }
     function readSocket(nodeId, socket) {
-      if (typeof nodeId !== "string" || !isRecord$7(socket)) return void 0;
+      if (typeof nodeId !== "string" || !isRecord$6(socket)) return void 0;
       const queuedBytes = socket["writableLength"];
       const bytesWritten = socket["bytesWritten"];
       if (typeof queuedBytes !== "number" || typeof bytesWritten !== "number") return void 0;
@@ -299528,7 +299171,6 @@ var require_dist3 = __commonJS({
         };
       }
     };
-    var CLUSTER_NODE_HISTORY_COLLECTION = "cluster-node-history";
     var NodePackageEntrySchema = zod.z.object({
       name: zod.z.string(),
       version: zod.z.string().nullable()
@@ -299821,27 +299463,27 @@ var require_dist3 = __commonJS({
         throw new Error(`no system npm on PATH and the npm bootstrap failed \u2014 cannot install addon dependencies on this node: ${err instanceof Error ? err.message : String(err)}`, { cause: err });
       }
     }
-    function isRecord$6(value) {
+    function isRecord$5(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function isAddonConstructor(fn) {
       if (typeof fn !== "function") return false;
       const proto = fn.prototype;
-      if (!isRecord$6(proto)) return false;
+      if (!isRecord$5(proto)) return false;
       return typeof proto["initialize"] === "function";
     }
     function resolveAddonClass(mod) {
       let candidate = mod["default"];
-      if (isRecord$6(candidate) && "default" in candidate) candidate = candidate["default"];
+      if (isRecord$5(candidate) && "default" in candidate) candidate = candidate["default"];
       if (isAddonConstructor(candidate)) return candidate;
-      if (isRecord$6(candidate)) {
+      if (isRecord$5(candidate)) {
         const fn = Object.values(candidate).find(isAddonConstructor);
         if (fn) return fn;
       }
       const namedAddon = Object.values(mod).find(isAddonConstructor);
       if (namedAddon) return namedAddon;
     }
-    function isRecord$5(value) {
+    function isRecord$4(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     var PACKAGE_JSON_LOOKUP_DEPTH = 4;
@@ -299881,12 +299523,12 @@ var require_dist3 = __commonJS({
       return import(`${(0, node_url.pathToFileURL)(entryPath).href}?v=${encodeURIComponent(bust)}`);
     }
     function isAddonPackageManifest(value) {
-      if (!isRecord$5(value)) return false;
+      if (!isRecord$4(value)) return false;
       if (!Array.isArray(value.addons)) return false;
-      return value.addons.every((a) => isRecord$5(a) && typeof a.id === "string");
+      return value.addons.every((a) => isRecord$4(a) && typeof a.id === "string");
     }
     function toAddonPackageManifest(value) {
-      if (!isRecord$5(value)) return void 0;
+      if (!isRecord$4(value)) return void 0;
       if (!isAddonPackageManifest(value)) return void 0;
       return value;
     }
@@ -300043,7 +299685,7 @@ var require_dist3 = __commonJS({
         }
         if (!node_fs.existsSync(entryPath)) throw new Error(`Entry not found: ${entryPath}`);
         const modUnknown = await importAddonModuleFresh(entryPath);
-        const mod = isRecord$5(modUnknown) ? modUnknown : {};
+        const mod = isRecord$4(modUnknown) ? modUnknown : {};
         const AddonClass = resolveAddonClass(mod);
         if (!AddonClass) throw new Error(`No addon class in ${entryPath}`);
         this.addons.set(declaration.id, {
@@ -300059,7 +299701,7 @@ var require_dist3 = __commonJS({
       /** Load addon from a direct path (for development/testing) */
       async loadFromPath(addonId, modulePath, packageName, declaration, packageVersion = "0.0.0") {
         const modUnknown = await importAddonModuleFresh(modulePath);
-        const mod = isRecord$5(modUnknown) ? modUnknown : {};
+        const mod = isRecord$4(modUnknown) ? modUnknown : {};
         const AddonClass = resolveAddonClass(mod);
         if (!AddonClass) throw new Error(`Module ${modulePath} has no default export`);
         this.addons.set(addonId, {
@@ -304330,11 +303972,11 @@ var require_dist3 = __commonJS({
       await steps.bootInProcessConsumers();
       await steps.spawnIsolatedConsumers();
     }
-    function isRecord$4(value) {
+    function isRecord$3(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function asBlob(value) {
-      return isRecord$4(value) ? value : {};
+      return isRecord$3(value) ? value : {};
     }
     async function loadSystemSettingsPrefix(door, prefix, mayRead = () => true) {
       const listed = await require_prefix_walk.loadPrefixed(door, "system-settings", prefix, () => null);
@@ -306882,7 +306524,7 @@ var require_dist3 = __commonJS({
     })))(), 1);
     var { Type, Schema, FAILSAFE_SCHEMA, JSON_SCHEMA, CORE_SCHEMA, DEFAULT_SCHEMA, load: load2, loadAll, dump, YAMLException, types, safeLoad, safeLoadAll, safeDump } = import_js_yaml.default;
     import_js_yaml.default;
-    function isRecord$3(value) {
+    function isRecord$2(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     var BOOTSTRAP_SECTIONS = /* @__PURE__ */ new Set([
@@ -306959,7 +306601,7 @@ var require_dist3 = __commonJS({
         [head]: value
       };
       const existing = obj[head];
-      const child = isRecord$3(existing) ? existing : {};
+      const child = isRecord$2(existing) ? existing : {};
       return {
         ...obj,
         [head]: setNested(child, rest.join("."), value)
@@ -307168,7 +306810,7 @@ var require_dist3 = __commonJS({
         }
       }
     };
-    function isRecord$2(value) {
+    function isRecord$1(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function errorText(err) {
@@ -307533,7 +307175,7 @@ var require_dist3 = __commonJS({
         const keys = configPath.split(".");
         let current = this.bootstrapConfig;
         for (const key of keys) {
-          if (!isRecord$2(current)) return void 0;
+          if (!isRecord$1(current)) return void 0;
           current = current[key];
         }
         return current;
@@ -308302,7 +307944,7 @@ var require_dist3 = __commonJS({
         this.name = "RuntimeStateLoadError";
       }
     };
-    function isRecord$1(value) {
+    function isRecord(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function errorMessage(err) {
@@ -308328,7 +307970,7 @@ var require_dist3 = __commonJS({
       } catch (err) {
         return refuse2(errorMessage(err), err);
       }
-      if (!isRecord$1(answer)) return refuse2(`answered ${answer === null ? "null" : typeof answer}`);
+      if (!isRecord(answer)) return refuse2(`answered ${answer === null ? "null" : typeof answer}`);
       return answer;
     }
     var ACCESSORY_SPAWN_CONCURRENCY = 12;
@@ -314241,8 +313883,7 @@ var require_dist3 = __commonJS({
         }
       };
     }
-    function createRunnerAddonSettings(client, addonId, before = async () => {
-    }) {
+    function createRunnerAddonSettings(client, addonId) {
       if (client === void 0) {
         const refuse2 = async () => {
           throw new Error(`settings of "${addonId}": settings store not wired`);
@@ -314264,22 +313905,10 @@ var require_dist3 = __commonJS({
         };
       }
       const door = {
-        query: async (input) => {
-          await before();
-          return client.query.query(input);
-        },
-        get: async (input) => {
-          await before();
-          return client.get.query(input);
-        },
-        set: async (input) => {
-          await before();
-          return client.set.mutate(input);
-        },
-        transact: async (input) => {
-          await before();
-          return client.transact.mutate(input);
-        }
+        query: (input) => client.query.query(input),
+        get: (input) => client.get.query(input),
+        set: (input) => client.set.mutate(input),
+        transact: (input) => client.transact.mutate(input)
       };
       const store = require_builtins_core_blocks_core_blocks_addon.createAddonSettingsStore(door, addonId);
       const sections = createSectionsStore(door);
@@ -314325,141 +313954,14 @@ var require_dist3 = __commonJS({
         setSection: (section, patch) => sections.write(section, patch)
       };
     }
-    var AddonRefusedError = class extends Error {
-      /** Stable, greppable cause, e.g. `unmigrated-settings`. */
-      code;
-      /** What the operator does about it. */
-      remedy;
-      constructor(code, message, remedy, options) {
-        super(message, options);
-        this.name = "AddonRefusedError";
-        this.code = code;
-        this.remedy = remedy;
-      }
-    };
-    function findAddonRefusal(err) {
-      const seen = /* @__PURE__ */ new Set();
-      let current = err;
-      while (current !== null && current !== void 0 && !seen.has(current)) {
-        if (current instanceof AddonRefusedError) return current;
-        seen.add(current);
-        current = current instanceof Error ? current.cause : void 0;
-      }
-      return null;
-    }
-    var OWN_RETIRED_ROOT_KEYS = /* @__PURE__ */ new Set([
-      "recordingConfigs",
-      "recordingExports",
-      "recordingOpsLog",
-      "probeSnapshots",
-      "rtspTokens",
-      "profileMap"
-    ]);
-    function isRetiredRootKey(addonId, key) {
-      if (OWN_RETIRED_ROOT_KEYS.has(key)) return true;
-      return require_retired_settings_keys.RETIRED_SETTINGS_KEYS.some((spec) => spec.namespace === addonId && (spec.keys.includes(key) || spec.perNodeKeys.some((k) => key === k || key.startsWith(`${k}@`))));
-    }
-    var UNMIGRATED_SETTINGS_CODE = "unmigrated-settings";
-    var UNMIGRATED_SETTINGS_REMEDY = "Run scripts/hub/migrate-device-store.ts --copy --apply (D870), then restart the addon.";
-    var UnmigratedSettingsError = class extends AddonRefusedError {
-      constructor(addonId, what) {
-        super(UNMIGRATED_SETTINGS_CODE, `addon "${addonId}" refuses to start: ${what} - the settings it had are still in the per-addon tables and the standard store holds none. Run scripts/hub/migrate-device-store.ts --copy --apply (D870) before starting it.`, UNMIGRATED_SETTINGS_REMEDY);
-        this.name = "UnmigratedSettingsError";
-      }
-    };
-    async function countOf(client, input) {
-      const n = await client.count.query(input);
-      if (typeof n !== "number") throw new Error("settings store answered a non-number to a count");
-      return n;
-    }
-    var LEGACY_PAGE = 500;
-    var LEGACY_PAGE_BUDGET = 200;
-    var ID_TAIL = "\x7F";
-    function isRecord(value) {
-      return typeof value === "object" && value !== null && !Array.isArray(value);
-    }
-    async function hasMigratableDeviceRow(client, addonId) {
-      let cursor = "";
-      for (let page = 0; page < LEGACY_PAGE_BUDGET; page++) {
-        const rows = await client.query.query({
-          namespace: addonId,
-          collection: "addon-devices",
-          filter: {
-            whereBetween: { id: [cursor, ID_TAIL] },
-            orderBy: {
-              field: "id",
-              direction: "asc"
-            },
-            limit: LEGACY_PAGE
-          }
-        });
-        if (!Array.isArray(rows)) throw new Error("settings store answered a non-list to a query");
-        let lastId = cursor;
-        for (const row of rows) {
-          if (!isRecord(row) || typeof row["id"] !== "string") continue;
-          lastId = row["id"];
-          const id = Number(row["id"]);
-          const data = row["data"];
-          if (Number.isInteger(id) && id > 0 && isRecord(data) && Object.keys(data).length > 0) return true;
-        }
-        if (rows.length < LEGACY_PAGE || lastId === cursor) return false;
-        cursor = lastId;
-      }
-      throw new Error(`addon "${addonId}": more legacy blob pages than the guard will read`);
-    }
-    async function assertLegacyBlobsMigrated(client, addonId, logger) {
-      const legacyDevices = await hasMigratableDeviceRow(client, addonId);
-      const root = await client.get.query({
-        namespace: addonId,
-        collection: "addon-settings",
-        key: "root"
-      });
-      const legacySettings = isRecord(root) && Object.keys(root).some((key) => !isRetiredRootKey(addonId, key));
-      if (!legacyDevices && !legacySettings) return;
-      const rangeOf = (prefix) => {
-        const range = require_prefix_range.prefixRange(prefix);
-        if (range === null) throw new Error(`no id range for addon "${addonId}"`);
-        return { whereBetween: { id: [range.lo, range.hi] } };
-      };
-      const newDevices = await countOf(client, {
-        collection: "addon-device-settings",
-        filter: rangeOf(`${addonId}:`)
-      });
-      const newSettings = await countOf(client, {
-        collection: "addon-settings",
-        filter: rangeOf(`${addonId}.`)
-      });
-      const problems = [];
-      if (legacyDevices && newDevices === 0) problems.push("per-device blobs");
-      if (legacySettings && newSettings === 0) problems.push("an addon settings blob");
-      if (problems.length === 0) return;
-      const error = new UnmigratedSettingsError(addonId, problems.join(" and "));
-      logger.error(error.message, { meta: {
-        addonId,
-        newDevices,
-        newSettings
-      } });
-      throw error;
-    }
-    function doorOverClient(client, before = async () => {
-    }) {
+    function doorOverClient(client) {
       return {
-        query: async (input) => {
-          await before();
-          return client.query.query(input);
-        },
-        transact: async (input) => {
-          await before();
-          return client.transact.mutate(input);
-        },
-        deleteWhere: async (input) => {
-          await before();
-          return client.deleteWhere.mutate(input);
-        }
+        query: (input) => client.query.query(input),
+        transact: (input) => client.transact.mutate(input),
+        deleteWhere: (input) => client.deleteWhere.mutate(input)
       };
     }
-    function createRunnerDeviceSettings(client, addonId, before = async () => {
-    }) {
+    function createRunnerDeviceSettings(client, addonId) {
       if (client === void 0) {
         const refuse2 = () => {
           throw new Error(`device settings of "${addonId}": settings store not wired`);
@@ -314472,7 +313974,7 @@ var require_dist3 = __commonJS({
           clearDeviceStore: async () => refuse2()
         };
       }
-      const store = require_builtins_device_manager_device_manager_addon.createDeviceSettingsStore(doorOverClient(client, before), addonId);
+      const store = require_builtins_device_manager_device_manager_addon.createDeviceSettingsStore(doorOverClient(client), addonId);
       return {
         readDeviceStore: (deviceId) => require_builtins_device_manager_device_manager_addon.readDeviceOrThrow(store, deviceId),
         readDeviceStoreBatch: (ids) => store.readBatch(ids),
@@ -314674,23 +314176,9 @@ var require_dist3 = __commonJS({
         }
       };
       const deviceSettingsClient = Reflect.get(api, "settingsStore");
-      let blobsChecked = null;
-      const bootGuard = () => {
-        const client = deviceSettingsClient;
-        if (client === void 0) return Promise.resolve();
-        blobsChecked ??= assertLegacyBlobsMigrated({
-          get: { query: (input) => client.get.query(input) },
-          query: { query: (input) => client.query.query(input) },
-          count: { query: (input) => client.count.query(input) }
-        }, addonId, scopedLogger).catch((err) => {
-          blobsChecked = null;
-          throw err;
-        });
-        return blobsChecked;
-      };
       const settingsView = {
-        ...createRunnerAddonSettings(deviceSettingsClient, addonId, bootGuard),
-        ...createRunnerDeviceSettings(deviceSettingsClient, addonId, bootGuard),
+        ...createRunnerAddonSettings(deviceSettingsClient, addonId),
+        ...createRunnerDeviceSettings(deviceSettingsClient, addonId),
         async readDeviceRuntimeState(deviceId) {
           return readBlob("device-runtime-state", String(deviceId));
         },
@@ -316778,6 +316266,28 @@ var require_dist3 = __commonJS({
         }
       };
     }
+    var AddonRefusedError = class extends Error {
+      /** Stable, greppable cause, e.g. `unmigrated-settings`. */
+      code;
+      /** What the operator does about it. */
+      remedy;
+      constructor(code, message, remedy, options) {
+        super(message, options);
+        this.name = "AddonRefusedError";
+        this.code = code;
+        this.remedy = remedy;
+      }
+    };
+    function findAddonRefusal(err) {
+      const seen = /* @__PURE__ */ new Set();
+      let current = err;
+      while (current !== null && current !== void 0 && !seen.has(current)) {
+        if (current instanceof AddonRefusedError) return current;
+        seen.add(current);
+        current = current instanceof Error ? current.cause : void 0;
+      }
+      return null;
+    }
     function createScopedProcessManager(broker, addonId) {
       return {
         async spawn(config) {
@@ -317866,7 +317376,6 @@ var require_dist3 = __commonJS({
     exports.CAP_METHOD_NOT_IMPLEMENTED = CAP_METHOD_NOT_IMPLEMENTED;
     exports.CA_COMMON_NAME = require_agent_https.CA_COMMON_NAME;
     exports.CA_VALIDITY_DAYS = require_agent_https.CA_VALIDITY_DAYS;
-    exports.CLUSTER_NODE_HISTORY_COLLECTION = CLUSTER_NODE_HISTORY_COLLECTION;
     exports.CORE_CAP_SERVICE_NAME = CORE_CAP_SERVICE_NAME;
     exports.CalendarsAddon = require_builtins_calendars_calendars_addon.CalendarsAddon;
     exports.CapRouteError = CapRouteError;
@@ -318042,14 +317551,11 @@ var require_dist3 = __commonJS({
     exports.ToastService = ToastService;
     exports.UDS_NO_ROUTE_PREFIX = UDS_NO_ROUTE_PREFIX;
     exports.UNCLAIMED = UNCLAIMED;
-    exports.UNMIGRATED_SETTINGS_CODE = UNMIGRATED_SETTINGS_CODE;
-    exports.UNMIGRATED_SETTINGS_REMEDY = UNMIGRATED_SETTINGS_REMEDY;
     exports.UPLOADED_CA_FILE = require_hub_mdns_ciao.UPLOADED_CA_FILE;
     exports.USER_MANAGEMENT_INTERNAL = require_builtins_local_auth_local_auth_addon.USER_MANAGEMENT_INTERNAL;
     exports.UdsLocalTransportClient = UdsLocalTransportClient;
     exports.UdsLocalTransportServer = UdsLocalTransportServer;
     exports.UnlockTicketJtiStore = require_builtins_system_config_system_config_addon.UnlockTicketJtiStore;
-    exports.UnmigratedSettingsError = UnmigratedSettingsError;
     exports.UserManager = require_builtins_local_auth_local_auth_addon.UserManager;
     exports.WinstonDestination = require_builtins_winston_logging_index.WinstonDestination$1;
     exports.WinstonLoggingAddon = require_builtins_winston_logging_index.WinstonLoggingAddon$1;
@@ -318067,7 +317573,6 @@ var require_dist3 = __commonJS({
     exports.applyCertificateToListener = require_hub_mdns_ciao.applyCertificateToListener;
     exports.applyLanHttp = require_hub_mdns_ciao.applyLanHttp;
     exports.asBrokerLike = asBrokerLike;
-    exports.assertLegacyBlobsMigrated = assertLegacyBlobsMigrated;
     exports.attachUserManagementInternal = require_builtins_local_auth_local_auth_addon.attachUserManagementInternal;
     exports.attributeStall = require_custom_action_registry.attributeStall;
     exports.backupOrchestratorRecordKinds = require_restore_archive.backupOrchestratorRecordKinds;
@@ -329229,19 +328734,6 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       /** The whole declaration, secret paths and entry descriptor included (the entries service builds its handle from it). */
       declaration: require_sleep.RecordKindDeclarationSchema
     });
-    var STORAGE_ADMIN_MOVED_COLLECTIONS = [
-      "stream-broker:probe-snapshots",
-      "stream-broker:profile-map",
-      "stream-broker:rtsp-tokens",
-      "notification-center:device-mutes",
-      "recorder:recording-configs",
-      "pipeline-orchestrator:device-features"
-    ];
-    var STORAGE_ADMIN_SCOPED_BASES = [
-      "addon-settings",
-      "addon-devices",
-      "sections"
-    ];
     var storageAdminCapability = {
       name: "storage-admin",
       scope: "system",
@@ -329253,26 +328745,6 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         * optionally only those owned by `ownerPrefix`. Reads only.
         */
         listTables: require_sleep.method(zod.z.object({ ownerPrefix: zod.z.string().min(1).optional() }), zod.z.object({ tables: zod.z.array(StorageTableSchema) }), { auth: "admin" }),
-        /**
-        * Drop one table. REFUSES when an addon declared it since the engine
-        * started (a running addon still owns it), when it is an engine or
-        * canonical table, when it does not exist, or when its row count is not
-        * `expectRows` - the caller states what it believes it is deleting. The
-        * engine also refuses anything but `<owner>:(addon-settings|addon-devices|
-        * sections)`, the retired collections by name, and tables of owners that
-        * are not installed (and refuses when it cannot read the installed list).
-        * Removed with the D870 migration script once the last hub ran it.
-        */
-        dropCollection: require_sleep.method(zod.z.object({
-          collection: zod.z.string().min(1),
-          expectRows: zod.z.number().int().nonnegative()
-        }), zod.z.object({
-          dropped: zod.z.literal(true),
-          rows: zod.z.number().int().nonnegative()
-        }), {
-          kind: "mutation",
-          auth: "admin"
-        }),
         /** Every record kind of both files with rows, a size estimate, class and retention (D881). */
         listKinds: require_sleep.method(zod.z.object({
           owner: zod.z.string().min(1).optional(),
@@ -356573,6 +356045,15 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * Replaces `zoneCrop`.
       */
       showTriggerZone: zod.z.boolean().optional(),
+      /**
+      * Draw the SUBJECT'S PATH on the picture — a line in the subject's colour
+      * through the track's positions up to the frame shown, the same path the
+      * debug views draw (`buildSubjectPath`, D903). Every picture mode a subject
+      * is drawn on: a `crop` maps the path into the crop and clips it. Valid only
+      * on a rule whose subject is a tracked object (refused on a sound rule);
+      * dropped on `image: 'none'`. Absent = off.
+      */
+      showSubjectPath: zod.z.boolean().optional(),
       /** @deprecated D897 — accepted from an editor that predates `image`, folded into it on save. */
       attach: zod.z.enum([
         "best",
@@ -390228,12 +389709,6 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
-      "storageAdmin.dropCollection": {
-        capName: "storage-admin",
-        capScope: "system",
-        addonId: null,
-        access: "delete"
-      },
       "storageAdmin.listKinds": {
         capName: "storage-admin",
         capScope: "system",
@@ -400576,15 +400051,22 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       return clampToKind(legacyImageMode(media), kind);
     }
     function normalizeNcMediaPolicy(media, rule) {
-      const image = resolveNcMediaImage(media, ruleKindOf(rule));
-      const { attach: _attach, frame: _frame, zoneCrop, showTriggerZone, image: _image, ...rest } = media;
+      const kind = ruleKindOf(rule);
+      const image = resolveNcMediaImage(media, kind);
+      const { attach: _attach, frame: _frame, zoneCrop, showTriggerZone, showSubjectPath, image: _image, ...rest } = media;
       const drawable = (showTriggerZone === true || media.image === void 0 && zoneCrop === true) && image !== "crop" && image !== "none" && ruleTriggerZoneIds(rule.conditions).length > 0;
+      const pathDrawable = showSubjectPath === true && image !== "none" && subjectHasPath(kind);
       return {
         ...rest,
         image,
-        ...drawable ? { showTriggerZone: true } : {}
+        ...drawable ? { showTriggerZone: true } : {},
+        ...pathDrawable ? { showSubjectPath: true } : {}
       };
     }
+    function subjectHasPath(kind) {
+      const spec = ruleKindSpec(kind);
+      return spec.carriesMedia && spec.carriesSubjectCrop;
+    }
     function ncMediaPolicyError(media, rule) {
       const kind = ruleKindOf(rule);
       if (media.image !== void 0) {
@@ -400592,6 +400074,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         if (offered.length > 0 && !offered.includes(media.image)) return `media.image '${media.image}' is not available for a ${kind} rule (offered: ${offered.join(", ")})`;
       }
       if (media.showTriggerZone === true && ruleTriggerZoneIds(rule.conditions).length === 0) return "media.showTriggerZone needs a rule triggered by a zone (a zones condition or an occupancy zone)";
+      if (media.showSubjectPath === true && !subjectHasPath(kind)) return `media.showSubjectPath needs a rule whose subject is a tracked object (not a ${kind} rule)`;
       return null;
     }
     var WEEKDAY_TO_DAY = {
@@ -400649,17 +400132,181 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       if (schedule === void 0) return true;
       const { day, minute } = localDayMinute(atMs, schedule.timezone);
       const prevDay = (day + 6) % 7;
-      let inside = false;
+      let inside2 = false;
       for (const w of schedule.windows) if (w.startMinute <= w.endMinute) {
         if (w.days.includes(day) && minute >= w.startMinute && minute < w.endMinute) {
-          inside = true;
+          inside2 = true;
           break;
         }
       } else if (w.days.includes(day) && minute >= w.startMinute || w.days.includes(prevDay) && minute < w.endMinute) {
-        inside = true;
+        inside2 = true;
         break;
       }
-      return schedule.invert === true ? !inside : inside;
+      return schedule.invert === true ? !inside2 : inside2;
+    }
+    var SUBJECT_PATH_FULL_FRAME_COVERAGE = 0.85;
+    var SUBJECT_PATH_DWELL_EPS = 5e-3;
+    var SUBJECT_PATH_MAX_POINTS = 120;
+    var clamp01 = (n) => n < 0 ? 0 : n > 1 ? 1 : n;
+    function subjectPathSampleFromBox(bbox, timestamp) {
+      return {
+        x: bbox.x + bbox.w / 2,
+        y: bbox.y + bbox.h / 2,
+        w: bbox.w,
+        h: bbox.h,
+        ...timestamp !== void 0 ? { timestamp } : {}
+      };
+    }
+    function isPlaceholder(s) {
+      return s.w !== void 0 && s.h !== void 0 && s.w >= 0.85 && s.h >= 0.85;
+    }
+    function downsample(xs, max) {
+      if (xs.length <= max || max < 2) return xs;
+      const step = (xs.length - 1) / (max - 1);
+      const out = [];
+      for (let i = 0; i < max - 1; i++) {
+        const x = xs[Math.round(i * step)];
+        if (x !== void 0) out.push(x);
+      }
+      const last = xs[xs.length - 1];
+      if (last !== void 0) out.push(last);
+      return out;
+    }
+    function isFiniteSample(s) {
+      return Number.isFinite(s.x) && Number.isFinite(s.y);
+    }
+    function buildSubjectPath(samples, opts) {
+      const until = opts?.untilTimestamp;
+      const nodes = [];
+      let unlocalized = 0;
+      let tail = null;
+      for (let index = 0; index < samples.length; index++) {
+        const s = samples[index];
+        if (s === void 0 || !isFiniteSample(s)) continue;
+        if (until !== void 0 && s.timestamp !== void 0 && s.timestamp > until) continue;
+        if (isPlaceholder(s)) {
+          unlocalized += 1;
+          continue;
+        }
+        const ts = s.timestamp !== void 0 && Number.isFinite(s.timestamp) ? s.timestamp : index;
+        const x = clamp01(s.x);
+        const y = clamp01(s.y);
+        const prev = nodes[nodes.length - 1];
+        if (prev !== void 0 && Math.hypot(x - prev.x, y - prev.y) < 5e-3) {
+          nodes[nodes.length - 1] = {
+            ...prev,
+            samples: prev.samples + 1,
+            lastTs: Math.max(prev.lastTs, ts)
+          };
+          tail = {
+            x,
+            y,
+            samples: 1,
+            firstTs: ts,
+            lastTs: ts
+          };
+          continue;
+        }
+        tail = null;
+        nodes.push({
+          x,
+          y,
+          samples: 1,
+          firstTs: ts,
+          lastTs: ts
+        });
+      }
+      const end = nodes[nodes.length - 1];
+      if (tail !== null && end !== void 0 && end.samples > 1 && (tail.x !== end.x || tail.y !== end.y)) {
+        nodes[nodes.length - 1] = {
+          ...end,
+          samples: end.samples - 1
+        };
+        nodes.push(tail);
+      }
+      return {
+        nodes: downsample(nodes, opts?.maxPoints ?? 120),
+        unlocalized
+      };
+    }
+    function isDrawableSubjectPath(path) {
+      return path.nodes.length >= 2;
+    }
+    function inside(p) {
+      return p.x >= 0 && p.x <= 1 && p.y >= 0 && p.y <= 1;
+    }
+    function clipSegment(a, b) {
+      const dx = b.x - a.x;
+      const dy = b.y - a.y;
+      let t0 = 0;
+      let t1 = 1;
+      const edges = [
+        [-dx, a.x],
+        [dx, 1 - a.x],
+        [-dy, a.y],
+        [dy, 1 - a.y]
+      ];
+      for (const [p, q] of edges) {
+        if (p === 0) {
+          if (q < 0) return null;
+          continue;
+        }
+        const r = q / p;
+        if (p < 0) {
+          if (r > t1) return null;
+          if (r > t0) t0 = r;
+        } else {
+          if (r < t0) return null;
+          if (r < t1) t1 = r;
+        }
+      }
+      return [{
+        x: a.x + t0 * dx,
+        y: a.y + t0 * dy
+      }, {
+        x: a.x + t1 * dx,
+        y: a.y + t1 * dy
+      }];
+    }
+    function samePoint(a, b) {
+      return Math.abs(a.x - b.x) < 1e-9 && Math.abs(a.y - b.y) < 1e-9;
+    }
+    function projectSubjectPath(points, view) {
+      if (points.length < 2 || !(view.w > 0) || !(view.h > 0)) return [];
+      const local = points.map((p) => ({
+        x: (p.x - view.x) / view.w,
+        y: (p.y - view.y) / view.h
+      }));
+      const runs = [];
+      let run = [];
+      for (let i = 1; i < local.length; i++) {
+        const a = local[i - 1];
+        const b = local[i];
+        if (a === void 0 || b === void 0) continue;
+        const seg = clipSegment(a, b);
+        if (seg === null) {
+          if (run.length >= 2) runs.push(run);
+          run = [];
+          continue;
+        }
+        const [from2, to] = seg;
+        const last = run[run.length - 1];
+        if (last === void 0 || !samePoint(last, from2)) {
+          if (run.length >= 2) runs.push(run);
+          run = [from2];
+        }
+        run.push(to);
+        if (!inside(b)) {
+          if (run.length >= 2) runs.push(run);
+          run = [];
+        }
+      }
+      if (run.length >= 2) runs.push(run);
+      return runs;
+    }
+    function subjectPathSvgPoints(run, width, height) {
+      const fmt = (v) => String(Math.round(v * 100) / 100);
+      return run.map((p) => `${fmt(p.x * width)},${fmt(p.y * height)}`).join(" ");
     }
     var ARMED_WORD_PREFIX = "armed_";
     var ALARM_PANEL_CAP = "alarm-panel";
@@ -406100,14 +405747,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     }
     function pointInPolygon(point, polygon) {
       if (polygon.length < 3) return false;
-      let inside = false;
+      let inside2 = false;
       const { x, y } = point;
       for (let i = 0, j2 = polygon.length - 1; i < polygon.length; j2 = i++) {
         const a = polygon[i];
         const b = polygon[j2];
-        if (a.y > y !== b.y > y && x < (b.x - a.x) * (y - a.y) / (b.y - a.y || Number.EPSILON) + a.x) inside = !inside;
+        if (a.y > y !== b.y > y && x < (b.x - a.x) * (y - a.y) / (b.y - a.y || Number.EPSILON) + a.x) inside2 = !inside2;
       }
-      return inside;
+      return inside2;
     }
     function bindAddonActions(api, addonId, catalog) {
       const out = {};
@@ -408040,12 +407687,13 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.STATE_LABEL_KEYS = STATE_LABEL_KEYS;
     exports.STATIONARY_OVERLAY_STYLE = STATIONARY_OVERLAY_STYLE;
     exports.STORAGE_ACCESS_FALLBACK = STORAGE_ACCESS_FALLBACK;
-    exports.STORAGE_ADMIN_MOVED_COLLECTIONS = STORAGE_ADMIN_MOVED_COLLECTIONS;
-    exports.STORAGE_ADMIN_SCOPED_BASES = STORAGE_ADMIN_SCOPED_BASES;
     exports.STORAGE_BYTES_PER_GB = STORAGE_BYTES_PER_GB;
     exports.STORAGE_LOCATION_MODES = STORAGE_LOCATION_MODES;
     exports.STREAM_PROFILE_META = STREAM_PROFILE_META;
     exports.STREAM_QUALITY_LABELS = STREAM_QUALITY_LABELS;
+    exports.SUBJECT_PATH_DWELL_EPS = SUBJECT_PATH_DWELL_EPS;
+    exports.SUBJECT_PATH_FULL_FRAME_COVERAGE = SUBJECT_PATH_FULL_FRAME_COVERAGE;
+    exports.SUBJECT_PATH_MAX_POINTS = SUBJECT_PATH_MAX_POINTS;
     exports.SUB_DETECTION_TYPES = SUB_DETECTION_TYPES;
     exports.SYSTEM_CAP_NAMES = SYSTEM_CAP_NAMES;
     exports.SYSTEM_SCOPE_DEVICE_METHODS = SYSTEM_SCOPE_DEVICE_METHODS;
@@ -408437,6 +408085,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.buildRoleScopes = buildRoleScopes;
     exports.buildSecretRef = require_sleep.buildSecretRef;
     exports.buildStreamParamsConfigSchema = buildStreamParamsConfigSchema;
+    exports.buildSubjectPath = buildSubjectPath;
     exports.buildVideoArgs = require_composition.buildVideoArgs;
     exports.buildViewerLink = buildViewerLink;
     exports.builtCapabilityBlockers = builtCapabilityBlockers;
@@ -408758,6 +408407,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.isDeviceScopedCap = require_sleep.isDeviceScopedCap;
     exports.isDoActionActuatable = isDoActionActuatable;
     exports.isDoPickerDeviceType = isDoPickerDeviceType;
+    exports.isDrawableSubjectPath = isDrawableSubjectPath;
     exports.isEmbeddingModelFailed = isEmbeddingModelFailed;
     exports.isEvent = require_sleep.isEvent;
     exports.isEventKindLabelKey = isEventKindLabelKey;
@@ -408971,6 +408621,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.principalMayReachAddon = principalMayReachAddon;
     exports.privacyMaskCapability = privacyMaskCapability;
     exports.procedureAuthKey = procedureAuthKey;
+    exports.projectSubjectPath = projectSubjectPath;
     exports.providerMotionEvent = providerMotionEvent;
     exports.ptzAutotrackCapability = ptzAutotrackCapability;
     exports.ptzCapability = ptzCapability;
@@ -409150,6 +408801,9 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.stripRetiredBandPreBufferSec = stripRetiredBandPreBufferSec;
     exports.strippedOfLegacyReadOnly = strippedOfLegacyReadOnly;
     exports.subKindsOf = subKindsOf;
+    exports.subjectHasPath = subjectHasPath;
+    exports.subjectPathSampleFromBox = subjectPathSampleFromBox;
+    exports.subjectPathSvgPoints = subjectPathSvgPoints;
     exports.summarisePrivacyAudio = summarisePrivacyAudio;
     exports.summarizeEffectiveScope = summarizeEffectiveScope;
     exports.summarizeReview = summarizeReview;
@@ -590919,10 +590573,6 @@ var require_addon_registry_service = __commonJS({
       plannedRunnerIds() {
         return [...this.buildAddonGroupPlan([...this.addonEntries.keys()]).keys()];
       }
-      /** The forked addon ids (the ones whose Init the D870 guard gates). */
-      forkedAddonIds() {
-        return [...this.buildAddonGroupPlan([...this.addonEntries.keys()]).values()].flatMap((roster) => roster.map((r) => r.addonId));
-      }
       /**
        * Snapshot of the live runner subprocesses (`$process.list`), reduced to the
        * `{ runnerId, addonIds }` shape the convergence planner needs. Returns `[]`
@@ -595513,7 +595163,6 @@ var require_cluster_node_history_store = __commonJS({
       lastActive: zod_1.z.number(),
       descriptor: DescriptorSchema
     });
-    var COLLECTION = "cluster-node-history";
     var LAST_ACTIVE_HEARTBEAT_MS = 5 * 6e4;
     function descriptorsEqual(a, b) {
       return a.id === b.id && a.name === b.name && a.hostname === b.hostname && a.platform === b.platform && a.arch === b.arch && a.cpuModel === b.cpuModel && a.cpuCores === b.cpuCores && a.memoryMB === b.memoryMB && a.isHub === b.isHub && sameStrings(a.engines, b.engines) && sameStrings(a.localIps, b.localIps) && sameStrings(a.addonIds, b.addonIds) && samePackages(a.packages, b.packages);
@@ -595527,12 +595176,9 @@ var require_cluster_node_history_store = __commonJS({
       return a.length === b.length && a.every((p, i) => p.name === b[i]?.name && p.version === b[i]?.version);
     }
     var ClusterNodeHistoryStore = class _ClusterNodeHistoryStore {
-      resolveSettingsStore;
       logger;
-      declared = false;
       resolveKind;
-      constructor(resolveSettingsStore, logger, resolveKind = () => null) {
-        this.resolveSettingsStore = resolveSettingsStore;
+      constructor(logger, resolveKind = () => null) {
         this.logger = logger;
         this.resolveKind = resolveKind;
       }
@@ -595540,37 +595186,6 @@ var require_cluster_node_history_store = __commonJS({
       bindRecordsKind(resolver) {
         this.resolveKind = resolver;
       }
-      /**
-       * Idempotently declare the typed collection. Returns the resolved provider
-       * or null if the settings-store isn't available yet (early boot / hub
-       * unreachable) — callers treat null as "skip, best-effort".
-       */
-      async ensureDeclared() {
-        if (this.resolveKind() !== null)
-          return this.resolveSettingsStore();
-        const store = this.resolveSettingsStore();
-        if (!store)
-          return null;
-        if (this.declared)
-          return store;
-        try {
-          await store.declareCollection({
-            collection: COLLECTION,
-            columns: [
-              { name: "id", type: "TEXT", primaryKey: true, notNull: true },
-              { name: "lastActive", type: "INTEGER", notNull: true },
-              { name: "descriptor", type: "JSON", notNull: true }
-            ]
-          });
-          this.declared = true;
-          return store;
-        } catch (err) {
-          this.logger.warn("declareCollection failed (best-effort)", {
-            meta: { error: (0, types_1.errMsg)(err) }
-          });
-          return null;
-        }
-      }
       /**
        * Upsert a node's descriptor + addon roster while it is ONLINE, stamping
        * `lastActive = Date.now()`. Called on each `listNodes()` refresh for every
@@ -595590,16 +595205,16 @@ var require_cluster_node_history_store = __commonJS({
        * `$node.disconnected`, and buys 288 writes/day/node instead of 2,880.
        */
       async snapshot(descriptor) {
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
           return;
         try {
-          const existing = await this.readStored(descriptor.id);
+          const existing = await this.readStored(kind, descriptor.id);
           const packages = descriptor.packages ?? existing?.descriptor.packages;
           const next = packages === void 0 ? descriptor : { ...descriptor, packages };
           if (existing !== null && !this.worthWriting(existing, next))
             return;
-          await this.writeStored(descriptor.id, Date.now(), next);
+          await this.writeStored(kind, descriptor.id, Date.now(), next);
         } catch (err) {
           this.logger.warn("snapshot upsert failed (best-effort)", {
             tags: { nodeId: descriptor.id },
@@ -595618,47 +595233,21 @@ var require_cluster_node_history_store = __commonJS({
         return !descriptorsEqual(existing.descriptor, next);
       }
       /** Read one node's row, validated. `null` when absent or malformed. */
-      async readStored(nodeId) {
-        const kind = this.resolveKind();
-        if (kind !== null) {
-          const row = await kind.get(nodeId);
-          if (row === null)
-            return null;
-          const parsed = RowDataSchema.safeParse({
-            lastActive: row.at ?? 0,
-            descriptor: row.data.descriptor
-          });
-          return parsed.success ? parsed.data : null;
-        }
-        const store = this.resolveSettingsStore();
-        if (!store)
-          return null;
-        return this.readRowLegacy(store, nodeId);
-      }
-      async readRowLegacy(store, nodeId) {
-        const raw = await store.get({ collection: COLLECTION, key: nodeId });
-        if (raw === null || raw === void 0)
+      async readStored(kind, nodeId) {
+        const row = await kind.get(nodeId);
+        if (row === null)
           return null;
-        const parsed = RowDataSchema.safeParse(raw);
+        const parsed = RowDataSchema.safeParse({
+          lastActive: row.at ?? 0,
+          descriptor: row.data.descriptor
+        });
         return parsed.success ? parsed.data : null;
       }
-      async writeStored(nodeId, lastActive, descriptor) {
-        const kind = this.resolveKind();
-        if (kind !== null) {
-          const body = system_1.ClusterNodeHistoryBodySchema.safeParse({ descriptor });
-          if (!body.success)
-            return;
-          await kind.put({ id: nodeId, at: lastActive, data: body.data });
-          return;
-        }
-        const store = this.resolveSettingsStore();
-        if (!store)
+      async writeStored(kind, nodeId, lastActive, descriptor) {
+        const body = system_1.ClusterNodeHistoryBodySchema.safeParse({ descriptor });
+        if (!body.success)
           return;
-        await store.set({
-          collection: COLLECTION,
-          key: nodeId,
-          value: { lastActive, descriptor }
-        });
+        await kind.put({ id: nodeId, at: lastActive, data: body.data });
       }
       /** A placeholder descriptor for a node the topology pass has not seen yet. */
       static placeholderDescriptor(nodeId) {
@@ -595683,11 +595272,11 @@ var require_cluster_node_history_store = __commonJS({
        * nothing is delivered rather than something guessed.
        */
       async getPackages(nodeId) {
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
           return [];
         try {
-          return (await this.readStored(nodeId))?.descriptor.packages ?? [];
+          return (await this.readStored(kind, nodeId))?.descriptor.packages ?? [];
         } catch (err) {
           this.logger.warn("getPackages failed (best-effort)", {
             tags: { nodeId },
@@ -595707,11 +595296,11 @@ var require_cluster_node_history_store = __commonJS({
       async recordPackages(nodeId, packages) {
         if (packages.length === 0)
           return;
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
           return;
         try {
-          const existing = await this.readStored(nodeId);
+          const existing = await this.readStored(kind, nodeId);
           const merged = new Map((existing?.descriptor.packages ?? []).map((p) => [p.name, p]));
           for (const entry of packages)
             merged.set(entry.name, entry);
@@ -595719,7 +595308,7 @@ var require_cluster_node_history_store = __commonJS({
             ...existing?.descriptor ?? _ClusterNodeHistoryStore.placeholderDescriptor(nodeId),
             packages: [...merged.values()]
           };
-          await this.writeStored(nodeId, existing?.lastActive ?? Date.now(), descriptor);
+          await this.writeStored(kind, nodeId, existing?.lastActive ?? Date.now(), descriptor);
         } catch (err) {
           this.logger.warn("recordPackages failed (best-effort)", {
             tags: { nodeId },
@@ -595735,11 +595324,11 @@ var require_cluster_node_history_store = __commonJS({
       async prunePackages(nodeId, names) {
         if (names.length === 0)
           return;
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
           return;
         try {
-          const existing = await this.readStored(nodeId);
+          const existing = await this.readStored(kind, nodeId);
           if (existing === null)
             return;
           const current = existing.descriptor.packages;
@@ -595749,7 +595338,7 @@ var require_cluster_node_history_store = __commonJS({
           const remaining = current.filter((p) => !drop.has(p.name));
           if (remaining.length === current.length)
             return;
-          await this.writeStored(nodeId, existing.lastActive, {
+          await this.writeStored(kind, nodeId, existing.lastActive, {
             ...existing.descriptor,
             packages: remaining
           });
@@ -595770,27 +595359,14 @@ var require_cluster_node_history_store = __commonJS({
        * time. A no-op if the node was never snapshotted (nothing to update).
        */
       async touch(nodeId) {
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
           return;
         try {
-          const existing = await this.readStored(nodeId);
+          const existing = await this.readStored(kind, nodeId);
           if (existing === null)
             return;
-          const kind = this.resolveKind();
-          if (kind !== null) {
-            await kind.put({
-              id: nodeId,
-              at: Date.now(),
-              data: { descriptor: existing.descriptor }
-            });
-            return;
-          }
-          await store.update({
-            collection: COLLECTION,
-            id: nodeId,
-            data: { lastActive: Date.now() }
-          });
+          await this.writeStored(kind, nodeId, Date.now(), existing.descriptor);
         } catch (err) {
           this.logger.warn("touch failed (best-effort)", {
             tags: { nodeId },
@@ -595804,24 +595380,20 @@ var require_cluster_node_history_store = __commonJS({
       }
       /**
        * Read the full persisted history, validated, or `null` when the store did
-       * not ANSWER (unavailable, or the query threw). A caller that must not claim
+       * not ANSWER (the kind is not bound yet, or the read threw). A caller that must not claim
        * a node absent from an unanswered read (D315) uses this; `getAll` folds the
        * `null` into `[]` for the callers that only render what exists. Malformed
        * rows are dropped (and logged) — the rest of the answer still stands.
        */
       async tryGetAll() {
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
           return null;
         try {
-          const kind = this.resolveKind();
           const result = [];
-          const rows = kind !== null ? (await (0, system_1.readAllRows)(kind)).map((row) => ({
+          const rows = (await (0, system_1.readAllRows)(kind)).map((row) => ({
             id: row.id,
             data: { lastActive: row.at ?? 0, descriptor: row.data.descriptor }
-          })) : (await store.query({ collection: COLLECTION })).map((row) => ({
-            id: row.id,
-            data: row.data
           }));
           for (const row of rows) {
             const parsed = RowDataSchema.safeParse(row.data);
@@ -595848,17 +595420,12 @@ var require_cluster_node_history_store = __commonJS({
        * 2026-09-01 all three reached the UI as `{"success": true}`.
        */
       async forget(nodeId) {
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
           return "store-unavailable";
         try {
-          const existed = await this.readStored(nodeId) !== null;
-          const kind = this.resolveKind();
-          if (kind !== null) {
-            await kind.delete(nodeId);
-          } else {
-            await store.delete({ collection: COLLECTION, key: nodeId });
-          }
+          const existed = await this.readStored(kind, nodeId) !== null;
+          await kind.delete(nodeId);
           if (!existed) {
             this.logger.info("cluster node had no history row to forget", { tags: { nodeId } });
             return "not-found";
@@ -595995,52 +595562,6 @@ var require_toast_wrapper_service = __commonJS({
   }
 });
 
-// ../../server/backend/dist/core/runner-health/update-preflight.js
-var require_update_preflight = __commonJS({
-  "../../server/backend/dist/core/runner-health/update-preflight.js"(exports) {
-    "use strict";
-    Object.defineProperty(exports, "__esModule", { value: true });
-    exports.LEGACY_BLOB_GUARD_SINCE = void 0;
-    exports.buildUpdatePreflight = buildUpdatePreflight;
-    exports.legacyGuardClientOf = legacyGuardClientOf;
-    var system_1 = require_dist3();
-    var index_js_1 = require_server_root();
-    exports.LEGACY_BLOB_GUARD_SINCE = "1.2.585";
-    function buildUpdatePreflight(deps) {
-      return async (targetVersion) => {
-        if ((0, index_js_1.compareSemver)(targetVersion, exports.LEGACY_BLOB_GUARD_SINCE) < 0)
-          return [];
-        const store = deps.store();
-        if (store === null) {
-          throw new Error("the settings store is not available to pre-check the update");
-        }
-        const blockers = [];
-        for (const addonId of deps.forkedAddonIds()) {
-          try {
-            await (0, system_1.assertLegacyBlobsMigrated)(store, addonId, deps.logger);
-          } catch (err) {
-            if (!(err instanceof system_1.UnmigratedSettingsError))
-              throw err;
-            blockers.push({
-              addonId,
-              reason: err.message,
-              remedy: system_1.UNMIGRATED_SETTINGS_REMEDY
-            });
-          }
-        }
-        return blockers;
-      };
-    }
-    function legacyGuardClientOf(store) {
-      return {
-        query: { query: (input) => store.query(input) },
-        get: { query: (input) => store.get(input) },
-        count: { query: (input) => store.count(input) }
-      };
-    }
-  }
-});
-
 // ../../server/backend/dist/core/topology/topology-emitter.service.js
 var require_topology_emitter_service = __commonJS({
   "../../server/backend/dist/core/topology/topology-emitter.service.js"(exports) {
@@ -596270,7 +595791,6 @@ var require_manual_boot = __commonJS({
     var repl_engine_service_1 = require_repl_engine_service();
     var server_update_service_1 = require_server_update_service();
     var runner_boot_check_1 = require_runner_boot_check();
-    var update_preflight_1 = require_update_preflight();
     var storage_service_1 = require_storage_service();
     var stream_probe_service_1 = require_stream_probe_service();
     var topology_emitter_service_1 = require_topology_emitter_service();
@@ -596324,7 +595844,7 @@ var require_manual_boot = __commonJS({
       const addonRegistryService = new addon_registry_service_1.AddonRegistryService(loggingService, eventBusService, configService, storageService, capabilityService, moleculerService, streamProbeService);
       agentRegistryService.setAddonRegistry(addonRegistryService);
       agentRegistryService.setLogger(loggingService.createLogger("ClusterNodes"));
-      const clusterNodeHistoryStore = new cluster_node_history_store_1.ClusterNodeHistoryStore(() => capabilityService.getRegistry()?.getSingleton("settings-store") ?? null, loggingService.createLogger("cluster-node-history"));
+      const clusterNodeHistoryStore = new cluster_node_history_store_1.ClusterNodeHistoryStore(loggingService.createLogger("cluster-node-history"));
       agentRegistryService.setClusterNodeHistoryStore(clusterNodeHistoryStore);
       addonRegistryService.setClusterNodeHistoryStore(clusterNodeHistoryStore);
       const addonWidgetsService = new addon_widgets_service_1.AddonWidgetsService(loggingService, capabilityService, addonRegistryService);
@@ -596410,16 +595930,7 @@ var require_manual_boot = __commonJS({
           });
         }
       });
-      const settingsStoreOrNull = () => capabilityService.getRegistry()?.getSingleton("settings-store") ?? null;
       const serverUpdateService = new server_update_service_1.ServerUpdateService({
-        updatePreflight: (0, update_preflight_1.buildUpdatePreflight)({
-          logger: loggingService.createLogger("UpdatePreflight"),
-          forkedAddonIds: () => addonRegistryService.forkedAddonIds(),
-          store: () => {
-            const store = settingsStoreOrNull();
-            return store === null ? null : (0, update_preflight_1.legacyGuardClientOf)(store);
-          }
-        }),
         runnerBootCheck: () => hubRunnerBootCheck.current(),
         logger: loggingService.createLogger("ServerUpdate"),
         restartServer: (requestedBy, update) => addonPackageService.restartServer(requestedBy, update),