camstack 1.2.198 → 1.2.200

package/dist/{launcher-JMVZTHWI.js → launcher-SOSAKLLX.js}

@@ -24024,9 +24024,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-Bn-RNanh.js
-var require_dist_Bn_RNanh = __commonJS({
-  "../system/dist/dist-Bn-RNanh.js"(exports) {
+// ../system/dist/dist-D9aw_d0G.js
+var require_dist_D9aw_d0G = __commonJS({
+  "../system/dist/dist-D9aw_d0G.js"(exports) {
     "use strict";
     var zod = require_zod();
     __require("crypto");
@@ -24239,21 +24239,21 @@ var require_dist_Bn_RNanh = __commonJS({
       for (const section of sectionsOf(schema)) for (const field of fieldsOf(section)) walkField(field, keys);
       return keys;
     }
-    function isRecord$6(value) {
+    function isRecord$7(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function sectionsOf(schema) {
-      if (!isRecord$6(schema)) return [];
+      if (!isRecord$7(schema)) return [];
       const sections = schema["sections"];
       return Array.isArray(sections) ? sections : [];
     }
     function fieldsOf(node) {
-      if (!isRecord$6(node)) return [];
+      if (!isRecord$7(node)) return [];
       const fields = node["fields"];
       return Array.isArray(fields) ? fields : [];
     }
     function walkField(field, out) {
-      if (!isRecord$6(field)) return;
+      if (!isRecord$7(field)) return;
       const type = field["type"];
       const key = field["key"];
       if ((type === "password" || field["secret"] === true) && typeof key === "string" && key.length > 0) out.add(key);
@@ -24269,7 +24269,7 @@ var require_dist_Bn_RNanh = __commonJS({
     }
     var SECRET_CLEAR = { $secretClear: true };
     var LEGACY_DEVICE_REDACTION = "***";
-    function isRecord$5(value) {
+    function isRecord$6(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function makeSecretMarker(ref) {
@@ -24279,15 +24279,15 @@ var require_dist_Bn_RNanh = __commonJS({
       };
     }
     function isSecretMarker(value) {
-      if (!isRecord$5(value)) return false;
+      if (!isRecord$6(value)) return false;
       const ref = value["$secret"];
       return typeof ref === "string" && ref.length > 0;
     }
     function isSecretMarkerLike(value) {
-      return isRecord$5(value) && Object.prototype.hasOwnProperty.call(value, "$secret");
+      return isRecord$6(value) && Object.prototype.hasOwnProperty.call(value, "$secret");
     }
     function isSecretClear(value) {
-      return isRecord$5(value) && value["$secretClear"] === true;
+      return isRecord$6(value) && value["$secretClear"] === true;
     }
     function toSecretFieldView(stored) {
       if (isSecretMarker(stored)) return {
@@ -24814,7 +24814,7 @@ var require_dist_Bn_RNanh = __commonJS({
       }
     };
     var KEEP = { kind: "keep" };
-    function isRecord$4(value) {
+    function isRecord$5(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function defaultMintId() {
@@ -24826,7 +24826,7 @@ var require_dist_Bn_RNanh = __commonJS({
         return out;
       }
       if (Array.isArray(value)) for (const item of value) collectSecretMarkerRefs(item, out);
-      else if (isRecord$4(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
+      else if (isRecord$5(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
       return out;
     }
     async function storedValueEquals(secrets, marker, candidate) {
@@ -24880,7 +24880,7 @@ var require_dist_Bn_RNanh = __commonJS({
       return null;
     }
     async function writeArray(ctx, node, incoming, stored, fieldPath) {
-      const storedRows = Array.isArray(stored) ? stored.filter(isRecord$4) : [];
+      const storedRows = Array.isArray(stored) ? stored.filter(isRecord$5) : [];
       if (!Array.isArray(incoming)) {
         ctx.deletes.push(...collectSecretMarkerRefs(storedRows));
         return {
@@ -24896,7 +24896,7 @@ var require_dist_Bn_RNanh = __commonJS({
       const kept = /* @__PURE__ */ new Set();
       const rows = [];
       for (const row of incoming) {
-        if (!isRecord$4(row)) {
+        if (!isRecord$5(row)) {
           rows.push(row);
           continue;
         }
@@ -24923,7 +24923,7 @@ var require_dist_Bn_RNanh = __commonJS({
         case "array":
           return writeArray(ctx, node, incoming, stored, fieldPath);
         case "object": {
-          if (!isRecord$4(incoming)) {
+          if (!isRecord$5(incoming)) {
             if (incoming === void 0) return KEEP;
             ctx.deletes.push(...collectSecretMarkerRefs(stored));
             return {
@@ -24931,7 +24931,7 @@ var require_dist_Bn_RNanh = __commonJS({
               value: incoming
             };
           }
-          const storedObj = isRecord$4(stored) ? stored : {};
+          const storedObj = isRecord$5(stored) ? stored : {};
           return {
             kind: "value",
             value: await writeMembers(ctx, node.children, incoming, storedObj, (m) => `${fieldPath}.${m}`)
@@ -25047,7 +25047,7 @@ var require_dist_Bn_RNanh = __commonJS({
             value: items
           };
         }
-        if (isRecord$4(v)) {
+        if (isRecord$5(v)) {
           const out = {};
           for (const [k, child] of Object.entries(v)) {
             const s = substitute(child);
@@ -25078,7 +25078,7 @@ var require_dist_Bn_RNanh = __commonJS({
         this.name = "SecretOverwriteRefusedError";
       }
     };
-    function isRecord$3(value) {
+    function isRecord$4(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function resolvedValue(pass, marker) {
@@ -25107,7 +25107,7 @@ var require_dist_Bn_RNanh = __commonJS({
       return incoming.map((item, index) => {
         const twin = stored[index];
         if (isSecretMarker(twin)) return typeof item === "string" && item === resolvedValue(pass, twin) ? twin : item;
-        if (isRecord$3(item) && isRecord$3(twin)) return inArrayRow(pass, item, twin);
+        if (isRecord$4(item) && isRecord$4(twin)) return inArrayRow(pass, item, twin);
         if (Array.isArray(item) && Array.isArray(twin)) return inArray(pass, item, twin);
         return item;
       });
@@ -25118,7 +25118,7 @@ var require_dist_Bn_RNanh = __commonJS({
         const twin = stored[key];
         if (isSecretMarker(twin)) {
           if (typeof value === "string" && value === resolvedValue(pass, twin)) out[key] = twin;
-        } else if (isRecord$3(value) && isRecord$3(twin)) out[key] = inArrayRow(pass, value, twin);
+        } else if (isRecord$4(value) && isRecord$4(twin)) out[key] = inArrayRow(pass, value, twin);
         else if (Array.isArray(value) && Array.isArray(twin)) out[key] = inArray(pass, value, twin);
       }
       return out;
@@ -25126,7 +25126,7 @@ var require_dist_Bn_RNanh = __commonJS({
     async function walk(pass, incoming, stored) {
       if (isSecretMarker(stored)) return atMarker(pass, incoming, stored);
       if (Array.isArray(incoming) && Array.isArray(stored)) return inArray(pass, incoming, stored);
-      if (!isRecord$3(incoming) || !isRecord$3(stored)) return incoming;
+      if (!isRecord$4(incoming) || !isRecord$4(stored)) return incoming;
       const out = { ...incoming };
       for (const [key, value] of Object.entries(incoming)) out[key] = await walk(pass, value, stored[key]);
       return out;
@@ -25155,7 +25155,7 @@ var require_dist_Bn_RNanh = __commonJS({
     function isJsonEqual(a, b) {
       if (Object.is(a, b)) return true;
       if (Array.isArray(a)) return Array.isArray(b) && a.length === b.length && a.every((v, i) => isJsonEqual(v, b[i]));
-      if (isRecord$3(a) && isRecord$3(b)) {
+      if (isRecord$4(a) && isRecord$4(b)) {
         const keys = Object.keys(a);
         if (keys.length !== Object.keys(b).length) return false;
         return keys.every((k) => Object.prototype.hasOwnProperty.call(b, k) && isJsonEqual(a[k], b[k]));
@@ -25177,7 +25177,7 @@ var require_dist_Bn_RNanh = __commonJS({
     }
     function nodeFromStored(value, owner) {
       if (isSecretMarker(value)) return isSecretRefOwnedBy(value.$secret, owner) ? { kind: "leaf" } : null;
-      if (!isRecord$3(value)) return null;
+      if (!isRecord$4(value)) return null;
       const children = /* @__PURE__ */ new Map();
       for (const [key, child] of Object.entries(value)) {
         const node = nodeFromStored(child, owner);
@@ -26548,17 +26548,17 @@ var require_dist_Bn_RNanh = __commonJS({
       }
       return prefixes;
     }
-    function isRecord$2(value) {
+    function isRecord$3(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function elementId(element, idKey, declared, prefix) {
-      const id = isRecord$2(element) ? element[idKey] : void 0;
+      const id = isRecord$3(element) ? element[idKey] : void 0;
       if (typeof id !== "string" || id.length === 0) throw new InvalidRecordError(`"${declared}": every element of "${prefix}" needs a non-empty string "${idKey}" to carry a secret`);
       return id;
     }
     var REMOVE_LEAF = /* @__PURE__ */ Symbol("remove-leaf");
     function mapAt(node, segments, index, walkedKeys, concretePrefix, declared, arrayKeys, visit) {
-      if (!isRecord$2(node)) return node;
+      if (!isRecord$3(node)) return node;
       const segment = segments[index];
       if (segment === void 0) return node;
       if (!Object.prototype.hasOwnProperty.call(node, segment.key)) return node;
@@ -37046,19 +37046,6 @@ var require_dist_Bn_RNanh = __commonJS({
       /** The whole declaration, secret paths and entry descriptor included (the entries service builds its handle from it). */
       declaration: RecordKindDeclarationSchema
     });
-    var STORAGE_ADMIN_MOVED_COLLECTIONS = [
-      "stream-broker:probe-snapshots",
-      "stream-broker:profile-map",
-      "stream-broker:rtsp-tokens",
-      "notification-center:device-mutes",
-      "recorder:recording-configs",
-      "pipeline-orchestrator:device-features"
-    ];
-    var STORAGE_ADMIN_SCOPED_BASES = [
-      "addon-settings",
-      "addon-devices",
-      "sections"
-    ];
     var storageAdminCapability = {
       name: "storage-admin",
       scope: "system",
@@ -37070,26 +37057,6 @@ var require_dist_Bn_RNanh = __commonJS({
         * optionally only those owned by `ownerPrefix`. Reads only.
         */
         listTables: method(zod.z.object({ ownerPrefix: zod.z.string().min(1).optional() }), zod.z.object({ tables: zod.z.array(StorageTableSchema) }), { auth: "admin" }),
-        /**
-        * Drop one table. REFUSES when an addon declared it since the engine
-        * started (a running addon still owns it), when it is an engine or
-        * canonical table, when it does not exist, or when its row count is not
-        * `expectRows` - the caller states what it believes it is deleting. The
-        * engine also refuses anything but `<owner>:(addon-settings|addon-devices|
-        * sections)`, the retired collections by name, and tables of owners that
-        * are not installed (and refuses when it cannot read the installed list).
-        * Removed with the D870 migration script once the last hub ran it.
-        */
-        dropCollection: method(zod.z.object({
-          collection: zod.z.string().min(1),
-          expectRows: zod.z.number().int().nonnegative()
-        }), zod.z.object({
-          dropped: zod.z.literal(true),
-          rows: zod.z.number().int().nonnegative()
-        }), {
-          kind: "mutation",
-          auth: "admin"
-        }),
         /** Every record kind of both files with rows, a size estimate, class and retention (D881). */
         listKinds: method(zod.z.object({
           owner: zod.z.string().min(1).optional(),
@@ -63642,6 +63609,15 @@ var require_dist_Bn_RNanh = __commonJS({
       * Replaces `zoneCrop`.
       */
       showTriggerZone: zod.z.boolean().optional(),
+      /**
+      * Draw the SUBJECT'S PATH on the picture — a line in the subject's colour
+      * through the track's positions up to the frame shown, the same path the
+      * debug views draw (`buildSubjectPath`, D903). Every picture mode a subject
+      * is drawn on: a `crop` maps the path into the crop and clips it. Valid only
+      * on a rule whose subject is a tracked object (refused on a sound rule);
+      * dropped on `image: 'none'`. Absent = off.
+      */
+      showSubjectPath: zod.z.boolean().optional(),
       /** @deprecated D897 — accepted from an editor that predates `image`, folded into it on save. */
       attach: zod.z.enum([
         "best",
@@ -94558,12 +94534,6 @@ var require_dist_Bn_RNanh = __commonJS({
         addonId: null,
         access: "create"
       },
-      "storageAdmin.dropCollection": {
-        capName: "storage-admin",
-        capScope: "system",
-        addonId: null,
-        access: "delete"
-      },
       "storageAdmin.listKinds": {
         capName: "storage-admin",
         capScope: "system",
@@ -101340,18 +101310,6 @@ var require_dist_Bn_RNanh = __commonJS({
         return STORAGE_ACCESS_FALLBACK;
       }
     });
-    Object.defineProperty(exports, "STORAGE_ADMIN_MOVED_COLLECTIONS", {
-      enumerable: true,
-      get: function() {
-        return STORAGE_ADMIN_MOVED_COLLECTIONS;
-      }
-    });
-    Object.defineProperty(exports, "STORAGE_ADMIN_SCOPED_BASES", {
-      enumerable: true,
-      get: function() {
-        return STORAGE_ADMIN_SCOPED_BASES;
-      }
-    });
     Object.defineProperty(exports, "STREAM_PROFILE_META", {
       enumerable: true,
       get: function() {
@@ -114066,11 +114024,11 @@ ${values.join("\n")}` : `${blockName} :`;
   }
 });
 
-// ../system/dist/device-ca-CPTDs--d.js
-var require_device_ca_CPTDs_d = __commonJS({
-  "../system/dist/device-ca-CPTDs--d.js"(exports) {
+// ../system/dist/device-ca-B3xUzps7.js
+var require_device_ca_B3xUzps7 = __commonJS({
+  "../system/dist/device-ca-B3xUzps7.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_x509_es = require_x509_es_C4cOo48M();
     var node_crypto = __require("crypto");
     var SYSTEM_SECRET_OWNER = "system";
@@ -114494,7 +114452,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     function nextEpisodeId(input) {
       const { previous } = input;
@@ -115899,7 +115857,7 @@ var require_calendars_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_settle_sources = require_settle_sources_Bhsy57y();
     var zod = require_zod();
     var CALENDAR_COLOR_PALETTE = [
@@ -116115,11 +116073,11 @@ var require_calendars = __commonJS({
   }
 });
 
-// ../system/dist/composition-sources-b0e_2I-D.js
-var require_composition_sources_b0e_2I_D = __commonJS({
-  "../system/dist/composition-sources-b0e_2I-D.js"(exports) {
+// ../system/dist/composition-sources-oXvmbMHX.js
+var require_composition_sources_oXvmbMHX = __commonJS({
+  "../system/dist/composition-sources-oXvmbMHX.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     function normalizedNativeOwner(owner) {
       const trimmed = owner?.trim();
       return trimmed ? trimmed : null;
@@ -116234,8 +116192,8 @@ var require_composer_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
-    var require_composition_sources = require_composition_sources_b0e_2I_D();
+    var require_dist10 = require_dist_D9aw_d0G();
+    var require_composition_sources = require_composition_sources_oXvmbMHX();
     var zod = require_zod();
     function isRecord$2(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -120045,7 +120003,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -124709,9 +124667,9 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
-    var require_composition_sources = require_composition_sources_b0e_2I_D();
+    var require_composition_sources = require_composition_sources_oXvmbMHX();
     var require_prefix_range = require_prefix_range_D_KueXbQ();
     var require_prefix_walk = require_prefix_walk_Dv6MLZlM();
     var zod = require_zod();
@@ -127114,9 +127072,9 @@ var require_event_category_eSqkye_K = __commonJS({
   }
 });
 
-// ../types/dist/sleep-gRQc2IoX.js
-var require_sleep_gRQc2IoX = __commonJS({
-  "../types/dist/sleep-gRQc2IoX.js"(exports) {
+// ../types/dist/sleep-Re8daN0Y.js
+var require_sleep_Re8daN0Y = __commonJS({
+  "../types/dist/sleep-Re8daN0Y.js"(exports) {
     "use strict";
     var require_event_category = require_event_category_eSqkye_K();
     var zod = require_zod();
@@ -127189,7 +127147,7 @@ var require_sleep_gRQc2IoX = __commonJS({
       return next;
     }
     function collectOmitted(field, out) {
-      if (!isRecord$6(field)) return;
+      if (!isRecord$7(field)) return;
       const type = field["type"];
       const key = field["key"];
       if (field["omitFromSettings"] === true && typeof key === "string" && key.length > 0) out.add(key);
@@ -127209,7 +127167,7 @@ var require_sleep_gRQc2IoX = __commonJS({
       return keys;
     }
     function walkKeychainField(field, out) {
-      if (!isRecord$6(field)) return;
+      if (!isRecord$7(field)) return;
       const type = field["type"];
       const key = field["key"];
       const isSecret = type === "password" || field["secret"] === true;
@@ -127229,21 +127187,21 @@ var require_sleep_gRQc2IoX = __commonJS({
       for (const section of sectionsOf(schema)) if (fieldsOf(section).length > 0) return true;
       return false;
     }
-    function isRecord$6(value) {
+    function isRecord$7(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function sectionsOf(schema) {
-      if (!isRecord$6(schema)) return [];
+      if (!isRecord$7(schema)) return [];
       const sections = schema["sections"];
       return Array.isArray(sections) ? sections : [];
     }
     function fieldsOf(node) {
-      if (!isRecord$6(node)) return [];
+      if (!isRecord$7(node)) return [];
       const fields = node["fields"];
       return Array.isArray(fields) ? fields : [];
     }
     function walkField(field, out) {
-      if (!isRecord$6(field)) return;
+      if (!isRecord$7(field)) return;
       const type = field["type"];
       const key = field["key"];
       if ((type === "password" || field["secret"] === true) && typeof key === "string" && key.length > 0) out.add(key);
@@ -127259,7 +127217,7 @@ var require_sleep_gRQc2IoX = __commonJS({
     }
     var SECRET_CLEAR = { $secretClear: true };
     var LEGACY_DEVICE_REDACTION = "***";
-    function isRecord$5(value) {
+    function isRecord$6(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function makeSecretMarker(ref) {
@@ -127269,18 +127227,18 @@ var require_sleep_gRQc2IoX = __commonJS({
       };
     }
     function isSecretMarker(value) {
-      if (!isRecord$5(value)) return false;
+      if (!isRecord$6(value)) return false;
       const ref = value["$secret"];
       return typeof ref === "string" && ref.length > 0;
     }
     function isSecretMarkerLike(value) {
-      return isRecord$5(value) && Object.prototype.hasOwnProperty.call(value, "$secret");
+      return isRecord$6(value) && Object.prototype.hasOwnProperty.call(value, "$secret");
     }
     function isSecretClear(value) {
-      return isRecord$5(value) && value["$secretClear"] === true;
+      return isRecord$6(value) && value["$secretClear"] === true;
     }
     function isSecretFieldView(value) {
-      return isRecord$5(value) && value["set"] === true && isSecretMarkerLike(value);
+      return isRecord$6(value) && value["set"] === true && isSecretMarkerLike(value);
     }
     function toSecretFieldView(stored) {
       if (isSecretMarker(stored)) return {
@@ -127878,7 +127836,7 @@ var require_sleep_gRQc2IoX = __commonJS({
       }
     };
     var KEEP = { kind: "keep" };
-    function isRecord$4(value) {
+    function isRecord$5(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function defaultMintId() {
@@ -127890,7 +127848,7 @@ var require_sleep_gRQc2IoX = __commonJS({
         return out;
       }
       if (Array.isArray(value)) for (const item of value) collectSecretMarkerRefs(item, out);
-      else if (isRecord$4(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
+      else if (isRecord$5(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
       return out;
     }
     async function storedValueEquals(secrets, marker, candidate) {
@@ -127944,7 +127902,7 @@ var require_sleep_gRQc2IoX = __commonJS({
       return null;
     }
     async function writeArray(ctx, node, incoming, stored, fieldPath) {
-      const storedRows = Array.isArray(stored) ? stored.filter(isRecord$4) : [];
+      const storedRows = Array.isArray(stored) ? stored.filter(isRecord$5) : [];
       if (!Array.isArray(incoming)) {
         ctx.deletes.push(...collectSecretMarkerRefs(storedRows));
         return {
@@ -127960,7 +127918,7 @@ var require_sleep_gRQc2IoX = __commonJS({
       const kept = /* @__PURE__ */ new Set();
       const rows = [];
       for (const row of incoming) {
-        if (!isRecord$4(row)) {
+        if (!isRecord$5(row)) {
           rows.push(row);
           continue;
         }
@@ -127987,7 +127945,7 @@ var require_sleep_gRQc2IoX = __commonJS({
         case "array":
           return writeArray(ctx, node, incoming, stored, fieldPath);
         case "object": {
-          if (!isRecord$4(incoming)) {
+          if (!isRecord$5(incoming)) {
             if (incoming === void 0) return KEEP;
             ctx.deletes.push(...collectSecretMarkerRefs(stored));
             return {
@@ -127995,7 +127953,7 @@ var require_sleep_gRQc2IoX = __commonJS({
               value: incoming
             };
           }
-          const storedObj = isRecord$4(stored) ? stored : {};
+          const storedObj = isRecord$5(stored) ? stored : {};
           return {
             kind: "value",
             value: await writeMembers(ctx, node.children, incoming, storedObj, (m) => `${fieldPath}.${m}`)
@@ -128111,7 +128069,7 @@ var require_sleep_gRQc2IoX = __commonJS({
             value: items
           };
         }
-        if (isRecord$4(v)) {
+        if (isRecord$5(v)) {
           const out = {};
           for (const [k, child] of Object.entries(v)) {
             const s = substitute(child);
@@ -128142,7 +128100,7 @@ var require_sleep_gRQc2IoX = __commonJS({
         this.name = "SecretOverwriteRefusedError";
       }
     };
-    function isRecord$3(value) {
+    function isRecord$4(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function resolvedValue(pass, marker) {
@@ -128171,7 +128129,7 @@ var require_sleep_gRQc2IoX = __commonJS({
       return incoming.map((item, index) => {
         const twin = stored[index];
         if (isSecretMarker(twin)) return typeof item === "string" && item === resolvedValue(pass, twin) ? twin : item;
-        if (isRecord$3(item) && isRecord$3(twin)) return inArrayRow(pass, item, twin);
+        if (isRecord$4(item) && isRecord$4(twin)) return inArrayRow(pass, item, twin);
         if (Array.isArray(item) && Array.isArray(twin)) return inArray(pass, item, twin);
         return item;
       });
@@ -128182,7 +128140,7 @@ var require_sleep_gRQc2IoX = __commonJS({
         const twin = stored[key];
         if (isSecretMarker(twin)) {
           if (typeof value === "string" && value === resolvedValue(pass, twin)) out[key] = twin;
-        } else if (isRecord$3(value) && isRecord$3(twin)) out[key] = inArrayRow(pass, value, twin);
+        } else if (isRecord$4(value) && isRecord$4(twin)) out[key] = inArrayRow(pass, value, twin);
         else if (Array.isArray(value) && Array.isArray(twin)) out[key] = inArray(pass, value, twin);
       }
       return out;
@@ -128190,7 +128148,7 @@ var require_sleep_gRQc2IoX = __commonJS({
     async function walk(pass, incoming, stored) {
       if (isSecretMarker(stored)) return atMarker(pass, incoming, stored);
       if (Array.isArray(incoming) && Array.isArray(stored)) return inArray(pass, incoming, stored);
-      if (!isRecord$3(incoming) || !isRecord$3(stored)) return incoming;
+      if (!isRecord$4(incoming) || !isRecord$4(stored)) return incoming;
       const out = { ...incoming };
       for (const [key, value] of Object.entries(incoming)) out[key] = await walk(pass, value, stored[key]);
       return out;
@@ -128219,7 +128177,7 @@ var require_sleep_gRQc2IoX = __commonJS({
     function isJsonEqual(a, b) {
       if (Object.is(a, b)) return true;
       if (Array.isArray(a)) return Array.isArray(b) && a.length === b.length && a.every((v, i) => isJsonEqual(v, b[i]));
-      if (isRecord$3(a) && isRecord$3(b)) {
+      if (isRecord$4(a) && isRecord$4(b)) {
         const keys = Object.keys(a);
         if (keys.length !== Object.keys(b).length) return false;
         return keys.every((k) => Object.prototype.hasOwnProperty.call(b, k) && isJsonEqual(a[k], b[k]));
@@ -128241,7 +128199,7 @@ var require_sleep_gRQc2IoX = __commonJS({
     }
     function nodeFromStored(value, owner) {
       if (isSecretMarker(value)) return isSecretRefOwnedBy(value.$secret, owner) ? { kind: "leaf" } : null;
-      if (!isRecord$3(value)) return null;
+      if (!isRecord$4(value)) return null;
       const children = /* @__PURE__ */ new Map();
       for (const [key, child] of Object.entries(value)) {
         const node = nodeFromStored(child, owner);
@@ -130004,17 +129962,17 @@ var require_sleep_gRQc2IoX = __commonJS({
       }
       return prefixes;
     }
-    function isRecord$2(value) {
+    function isRecord$3(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function elementId(element, idKey, declared, prefix) {
-      const id = isRecord$2(element) ? element[idKey] : void 0;
+      const id = isRecord$3(element) ? element[idKey] : void 0;
       if (typeof id !== "string" || id.length === 0) throw new InvalidRecordError(`"${declared}": every element of "${prefix}" needs a non-empty string "${idKey}" to carry a secret`);
       return id;
     }
     var REMOVE_LEAF = /* @__PURE__ */ Symbol("remove-leaf");
     function mapAt(node, segments, index, walkedKeys, concretePrefix, declared, arrayKeys, visit) {
-      if (!isRecord$2(node)) return node;
+      if (!isRecord$3(node)) return node;
       const segment = segments[index];
       if (segment === void 0) return node;
       if (!Object.prototype.hasOwnProperty.call(node, segment.key)) return node;
@@ -130220,7 +130178,7 @@ var require_sleep_gRQc2IoX = __commonJS({
     function declarationsOf(kinds) {
       return Object.fromEntries(Object.entries(kinds).map(([name, kind]) => [name, kind.declaration]));
     }
-    function isRecord$1(value) {
+    function isRecord$2(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     async function call(fn) {
@@ -130345,7 +130303,7 @@ var require_sleep_gRQc2IoX = __commonJS({
         }) : data;
         const parsed = this.def.schema.safeParse(shaped);
         if (!parsed.success) throw new InvalidRecordError(`${this.name}/${id}: ${zodSummary(parsed.error)}`);
-        if (!isRecord$1(parsed.data)) throw new InvalidRecordError(`${this.name}/${id}: the body must be an object`);
+        if (!isRecord$2(parsed.data)) throw new InvalidRecordError(`${this.name}/${id}: the body must be an object`);
         return parsed.data;
       }
       async get(id) {
@@ -130514,7 +130472,7 @@ var require_sleep_gRQc2IoX = __commonJS({
       }
     };
     function toBody(value) {
-      if (!isRecord$1(value)) throw new InvalidRecordError("the record body must be an object");
+      if (!isRecord$2(value)) throw new InvalidRecordError("the record body must be an object");
       return value;
     }
     function createRecordsAccess(options) {
@@ -130586,11 +130544,213 @@ var require_sleep_gRQc2IoX = __commonJS({
       if (defined === void 0) throw new DeclarationRefusedError(`entry kind "${name}" was not built`);
       return defined;
     }
+    function isRecord$1(value) {
+      return typeof value === "object" && value !== null && !Array.isArray(value);
+    }
+    function extractField(data, path) {
+      let current = data;
+      for (const segment of path.split(".")) {
+        if (!isRecord$1(current)) return null;
+        current = current[segment];
+      }
+      if (current === void 0 || current === null) return null;
+      if (typeof current === "boolean") return current ? 1 : 0;
+      if (typeof current === "number" || typeof current === "string") return current;
+      return JSON.stringify(current);
+    }
+    function bindable(value) {
+      if (typeof value === "boolean") return value ? 1 : 0;
+      if (typeof value === "string" || typeof value === "number") return value;
+      throw new InvalidRecordError("a where value must be a string, number or boolean");
+    }
+    function compareText(a, b) {
+      const ai = a[Symbol.iterator]();
+      const bi = b[Symbol.iterator]();
+      for (; ; ) {
+        const x = ai.next();
+        const y = bi.next();
+        if (x.done === true) return y.done === true ? 0 : -1;
+        if (y.done === true) return 1;
+        const cx = x.value.codePointAt(0) ?? 0;
+        const cy = y.value.codePointAt(0) ?? 0;
+        if (cx !== cy) return cx < cy ? -1 : 1;
+      }
+    }
+    function compareSql(a, b) {
+      if (a === null || b === null) return a === b ? 0 : a === null ? -1 : 1;
+      if (typeof a === "number" && typeof b === "number") return a === b ? 0 : a < b ? -1 : 1;
+      if (typeof a === "number") return -1;
+      if (typeof b === "number") return 1;
+      return compareText(a, b);
+    }
+    function rowValueAfter(row, cursor, desc) {
+      for (let i = 0; i < row.length; i += 1) {
+        const a = row[i] ?? null;
+        const b = cursor[i] ?? null;
+        if (a === null || b === null) return false;
+        const c = compareSql(a, b);
+        if (c !== 0) return desc ? c < 0 : c > 0;
+      }
+      return false;
+    }
+    function predicateOf(field, value) {
+      if (typeof value === "object") return {
+        field,
+        shape: "in" in value ? "in" : "range",
+        value
+      };
+      return {
+        field,
+        shape: "eq",
+        value
+      };
+    }
+    function predicateTest(p) {
+      const value = p.value;
+      if (p.shape === "eq") {
+        const wanted = bindable(value);
+        return (data) => {
+          const got = extractField(data, p.field);
+          return got !== null && compareSql(got, wanted) === 0;
+        };
+      }
+      if (typeof value === "object" && "in" in value) {
+        const set = value.in.map(bindable);
+        return (data) => {
+          const got = extractField(data, p.field);
+          return got !== null && set.some((w) => w !== null && compareSql(got, w) === 0);
+        };
+      }
+      if (typeof value !== "object") return () => false;
+      const active = [
+        ["gt" in value ? value.gt : void 0, (c) => c > 0],
+        ["gte" in value ? value.gte : void 0, (c) => c >= 0],
+        ["lt" in value ? value.lt : void 0, (c) => c < 0],
+        ["lte" in value ? value.lte : void 0, (c) => c <= 0]
+      ].flatMap(([b, ok]) => b === void 0 ? [] : [{
+        bound: bindable(b),
+        ok
+      }]);
+      return (data) => {
+        const got = extractField(data, p.field);
+        if (got === null) return false;
+        return active.every(({ bound, ok }) => ok(compareSql(got, bound)));
+      };
+    }
+    function planWhere(kind, decl, where, opts) {
+      const predicates = Object.entries(where ?? {}).map(([f, v]) => predicateOf(f, v));
+      const extra = opts.extraFields ?? [];
+      if (predicates.length === 0 && extra.length === 0) return null;
+      const equalities = predicates.filter((p) => p.shape !== "range");
+      const ranges = predicates.filter((p) => p.shape === "range");
+      if (ranges.length > 1) throw new UnindexedFilterError(`${kind}: at most one range predicate (${ranges.map((r) => r.field).join(", ")}) - it must be the field right after the equality fields of one index`);
+      if (!opts.allowIn && equalities.some((p) => p.shape === "in")) throw new UnindexedFilterError(`${kind}: an "in" set cannot be paged in index order - ask once per value`);
+      const eqCount = equalities.length;
+      const eqSet = new Set(equalities.map((p) => p.field));
+      const range = ranges[0];
+      const candidates = decl.indexes.filter((index) => {
+        const leading = index.fields.slice(0, eqCount);
+        if (leading.length !== eqCount || !leading.every((f) => eqSet.has(f))) return false;
+        if (range !== void 0 && index.fields[eqCount] !== range.field) return false;
+        return extra.every((f) => index.fields.includes(f));
+      });
+      const groupBy = opts.groupBy;
+      const candidate = (groupBy === void 0 ? void 0 : candidates.find((index) => index.fields[eqCount] === groupBy)) ?? candidates[0];
+      if (candidate === void 0) {
+        const declared = decl.indexes.map((i) => `${i.name}(${i.fields.join(", ")})`).join("; ");
+        throw new UnindexedFilterError(`${kind}: no declared index serves [${[...predicates.map((p) => p.field), ...extra].join(", ")}]. Declared: ${declared.length > 0 ? declared : "none"}. A filter on an unindexed field does not compile - declare an index`);
+      }
+      const tests = predicates.map(predicateTest);
+      return {
+        indexName: candidate.name,
+        orderFields: candidate.fields.slice(eqCount),
+        matches: (data) => tests.every((t) => t(data))
+      };
+    }
+    function assertWindowAllowed(kind, decl, w) {
+      if (w.deviceId !== void 0 && decl.device === "none") throw new InvalidRecordError(`${kind}: declared device: "none", it cannot be filtered by deviceId`);
+      if ((w.atFrom !== void 0 || w.atTo !== void 0) && decl.at === "none") throw new InvalidRecordError(`${kind}: declared at: "none", it cannot be filtered by time`);
+    }
+    function inWindow(row, w) {
+      if (w.deviceId !== void 0 && row.deviceId !== w.deviceId) return false;
+      if (w.atFrom !== void 0 && (row.at === null || row.at < w.atFrom)) return false;
+      if (w.atTo !== void 0 && (row.at === null || row.at >= w.atTo)) return false;
+      return true;
+    }
     function isRecord(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
+    function validateHeader(kind, decl, rec, nowMs) {
+      const fail = (why) => {
+        throw new InvalidRecordError(`${kind}/${rec.id.slice(0, 64)}: ${why}`);
+      };
+      if (rec.id.length === 0 || rec.id.length > 256) fail(`the id must be 1..256 characters`);
+      if (decl.device === "required" && rec.deviceId === void 0) fail("deviceId is required");
+      if (decl.device === "none" && rec.deviceId !== void 0) fail("this kind is not device-scoped");
+      if (decl.at === "required" && rec.at === void 0) fail("at is required");
+      if (decl.at === "none" && rec.at !== void 0) fail("this kind has no time");
+      const { retention } = decl;
+      let expiresAt = rec.expiresAt ?? null;
+      if ("ttlMs" in retention) {
+        if (rec.expiresAt !== void 0) fail("expiresAt is set by the engine on a kind with a ttl retention");
+        expiresAt = (retention.from === "at" ? rec.at ?? nowMs : nowMs) + retention.ttlMs;
+      } else if (rec.expiresAt !== void 0 && decl.secretPaths.length > 0) fail("a kind with secret fields cannot expire by the engine (its keychain values would be orphaned)");
+      return {
+        id: rec.id,
+        deviceId: rec.deviceId ?? null,
+        at: rec.at ?? null,
+        expiresAt
+      };
+    }
+    function serializeBody(kind, decl, id, body) {
+      const json = JSON.stringify(body);
+      const bytes = Buffer.byteLength(json, "utf8");
+      if (bytes > decl.maxDataBytes) throw new RecordTooLargeError(`${kind}/${id.slice(0, 64)}: ${bytes} bytes exceeds maxDataBytes ${decl.maxDataBytes}. Bytes are never record fields - use files and ctx.peerBytes`);
+      return json;
+    }
+    function markersOf(decl, body) {
+      const out = /* @__PURE__ */ new Map();
+      if (decl.secretPaths.length === 0) return out;
+      for (const leaf of collectSecretLeaves(body, decl.secretPaths, decl.secretArrayKeys)) if (isSecretMarker(leaf.value)) out.set(leaf.concrete, leaf.value.$secret);
+      return out;
+    }
+    function redactBody(decl, body) {
+      if (decl.secretPaths.length === 0) return body;
+      const redacted = mapSecretLeaves(body, decl.secretPaths, decl.secretArrayKeys, (leaf) => leaf.value === null ? null : REDACTED_SECRET);
+      return isRecord(redacted) ? redacted : body;
+    }
+    function enforceSecrets(owner, kind, decl, id, body, stored, mode) {
+      if (decl.secretPaths.length === 0) return {
+        body,
+        releasedRefs: []
+      };
+      const storedMarkers = stored === null ? /* @__PURE__ */ new Map() : markersOf(decl, stored);
+      const next = mapSecretLeaves(body, decl.secretPaths, decl.secretArrayKeys, (leaf) => {
+        const expected = recordSecretRef(owner, kind, id, leaf.concrete);
+        if (isSecretMarker(leaf.value)) {
+          if (leaf.value.$secret !== expected) throw new ForeignSecretMarkerError(`${kind}/${id.slice(0, 64)} field "${leaf.concrete}": the marker is not this row's own ref`);
+          return leaf.value;
+        }
+        if (leaf.value === "__camstack_redacted__") {
+          const keep = storedMarkers.get(leaf.concrete);
+          if (keep === void 0) return REMOVE_LEAF;
+          if (mode === "patch" && !leaf.concrete.includes("[")) return REMOVE_LEAF;
+          return {
+            $secret: keep,
+            v: 1
+          };
+        }
+        if (leaf.value === null || leaf.value === void 0) return mode === "patch" ? null : REMOVE_LEAF;
+        throw new PlaintextSecretError(`${kind}/${id.slice(0, 64)} field "${leaf.concrete}": a secret field takes a keychain marker, never a value`);
+      });
+      if (!isRecord(next)) throw new InvalidRecordError(`${kind}/${id}: the body must be an object`);
+      const nextMarkers = markersOf(decl, next);
+      return {
+        body: next,
+        releasedRefs: [...storedMarkers.entries()].filter(([path, ref]) => mode === "put" && nextMarkers.get(path) !== ref).map(([, ref]) => ref)
+      };
+    }
     function mergePatch(target, patch) {
-      if (!isRecord(patch)) return target;
       const out = { ...target };
       for (const [key, value] of Object.entries(patch)) {
         if (value === null) {
@@ -130598,17 +130758,14 @@ var require_sleep_gRQc2IoX = __commonJS({
           continue;
         }
         const current = out[key];
-        out[key] = isRecord(value) && isRecord(current) ? mergePatch(current, value) : value;
+        out[key] = isRecord(value) ? mergePatch(isRecord(current) ? current : {}, value) : value;
       }
       return out;
     }
-    function markersOf(decl, body) {
-      const out = /* @__PURE__ */ new Map();
-      mapSecretLeaves(body, decl.secretPaths, decl.secretArrayKeys, (leaf) => {
-        if (isSecretMarker(leaf.value)) out.set(leaf.concrete, leaf.value.$secret);
-        return leaf.value;
-      });
-      return out;
+    function jsonCopy(body) {
+      const parsed = JSON.parse(JSON.stringify(body));
+      if (!isRecord(parsed)) throw new InvalidRecordError("a stored body is not an object");
+      return parsed;
     }
     function makeSpecKeychain(owner) {
       const values = /* @__PURE__ */ new Map();
@@ -130645,10 +130802,85 @@ var require_sleep_gRQc2IoX = __commonJS({
         forOwner: null
       } };
     }
-    function makeInMemoryRecords(owner = "spec") {
+    function encodeCursor(tag, values) {
+      return Buffer.from(JSON.stringify({
+        t: tag,
+        v: values
+      }), "utf8").toString("base64url");
+    }
+    function decodeCursor(cursor) {
+      try {
+        const parsed = JSON.parse(Buffer.from(cursor, "base64url").toString("utf8"));
+        if (typeof parsed === "object" && parsed !== null) {
+          const t = Reflect.get(parsed, "t");
+          const v = Reflect.get(parsed, "v");
+          if (typeof t === "string" && Array.isArray(v)) {
+            const values = [];
+            for (const item of v) if (typeof item === "string" || typeof item === "number" || item === null) values.push(item);
+            else throw new Error("bad cursor value");
+            return {
+              tag: t,
+              values
+            };
+          }
+        }
+      } catch {
+      }
+      throw new InvalidRecordError("the cursor is not valid");
+    }
+    function assertCursor(cursor, tag, length) {
+      if (cursor.tag !== tag || cursor.values.length !== length) throw new InvalidRecordError("the cursor does not belong to this query");
+    }
+    function compareKeys(a, b) {
+      for (let i = 0; i < a.length; i += 1) {
+        const c = compareSql(a[i] ?? null, b[i] ?? null);
+        if (c !== 0) return c;
+      }
+      return 0;
+    }
+    function assertAdditive(kind, before, next) {
+      const refuse = (why) => {
+        throw new DeclarationRefusedError(`kind "${kind}": ${why} - the engine never migrates data; a changed index is a new name`);
+      };
+      if (before.database !== next.database) refuse("the database cannot change");
+      if (before.device !== next.device) refuse('"device" cannot change');
+      if (before.at !== next.at) refuse('"at" cannot change');
+      for (const old of before.indexes) {
+        const same = next.indexes.find((i) => i.name === old.name);
+        if (same === void 0) continue;
+        if (same.unique !== old.unique || same.fields.join(",") !== old.fields.join(",")) refuse(`index "${old.name}" was declared differently before`);
+      }
+      for (const path of before.secretPaths) if (!next.secretPaths.includes(path)) refuse(`secret path "${path}" cannot stop being secret`);
+    }
+    function ringBounds(decl) {
+      const { retention } = decl;
+      if ("maxRows" in retention || "maxRowsPerDevice" in retention) return {
+        ...retention.maxRows === void 0 ? {} : { maxRows: retention.maxRows },
+        ...retention.maxRowsPerDevice === void 0 ? {} : { maxRowsPerDevice: retention.maxRowsPerDevice }
+      };
+      return null;
+    }
+    var HISTOGRAM_MAX_BUCKETS = 1e4;
+    function aggregateOf(op, field, rows) {
+      if (field === void 0) return rows.length;
+      const values = rows.map((r) => extractField(r.data, field)).filter((v) => v !== null);
+      if (op === "count") return values.length;
+      if (values.length === 0) return null;
+      if (op === "sum") return values.reduce((s, v) => s + (typeof v === "number" ? v : Number(v) || 0), 0);
+      const sorted = [...values].sort(compareSql);
+      const picked = op === "min" ? sorted[0] : sorted.at(-1);
+      return typeof picked === "number" ? picked : null;
+    }
+    function makeInMemoryRecords(owner = "spec", options = {}) {
+      const now = options.now ?? Date.now;
       const decls = /* @__PURE__ */ new Map();
+      const kindIds = /* @__PURE__ */ new Map();
       const tables = /* @__PURE__ */ new Map();
-      let clock = 1;
+      const sequences = /* @__PURE__ */ new Map();
+      const pendingAllocated = /* @__PURE__ */ new Set();
+      const writesSinceTrim = /* @__PURE__ */ new Map();
+      const queries = [];
+      let nextRid = 1;
       let writesFail = false;
       let readsFail = false;
       const table = (kind) => {
@@ -130661,74 +130893,107 @@ var require_sleep_gRQc2IoX = __commonJS({
       };
       const declOf = (kind) => {
         const decl = decls.get(kind);
-        if (decl === void 0) throw new Error(`kind "${kind}" is not declared`);
+        if (decl === void 0) throw new UnknownRecordKindError(`"${owner}" declared no kind "${kind}"`);
         return decl;
       };
-      const redact = (decl, body) => {
-        if (decl.secretPaths.length === 0) return body;
-        const out = mapSecretLeaves(body, decl.secretPaths, decl.secretArrayKeys, (leaf) => leaf.value === null ? null : REDACTED_SECRET);
-        return isRecord(out) ? out : body;
+      const reading = () => {
+        if (readsFail) throw new Error("records engine unreachable");
+      };
+      const writing = () => {
+        if (writesFail) throw new Error("records engine unreachable");
       };
-      const view = (kind, row) => ({
+      const view = (decl, row) => ({
         id: row.id,
-        deviceId: null,
+        deviceId: row.deviceId,
         at: row.at,
-        expiresAt: null,
+        expiresAt: row.expiresAt,
         rev: row.rev,
         updatedAt: row.updatedAt,
-        data: redact(declOf(kind), row.data)
+        data: redactBody(decl, jsonCopy(row.data))
       });
-      const enforce = (kind, id, body, stored) => {
-        const decl = declOf(kind);
-        if (decl.secretPaths.length === 0) return {
-          body,
-          released: []
-        };
-        const before = stored === null ? /* @__PURE__ */ new Map() : markersOf(decl, stored);
-        const next = mapSecretLeaves(body, decl.secretPaths, decl.secretArrayKeys, (leaf) => {
-          const expected = recordSecretRef(owner, kind, id, leaf.concrete);
-          if (isSecretMarker(leaf.value)) {
-            if (leaf.value.$secret !== expected) throw new Error("foreign secret marker");
-            return leaf.value;
-          }
-          if (leaf.value === "__camstack_redacted__") {
-            const keep = before.get(leaf.concrete);
-            return keep === void 0 ? REMOVE_LEAF : {
-              $secret: keep,
-              v: 1
-            };
+      const assertUnique = (kind, decl, id, body) => {
+        for (const index of decl.indexes) {
+          if (index.unique !== true) continue;
+          const mine = index.fields.map((f) => extractField(body, f));
+          if (mine.some((v) => v === null)) continue;
+          for (const other of table(kind).values()) {
+            if (other.id === id) continue;
+            const theirs = index.fields.map((f) => extractField(other.data, f));
+            if (compareKeys(mine, theirs) === 0 && theirs.every((v) => v !== null)) throw new RecordUniqueViolationError(`${kind}: the unique index "${index.name}" refused the write`);
           }
-          if (leaf.value === null || leaf.value === void 0) return REMOVE_LEAF;
-          throw new Error(`${kind}/${id}: a secret field takes a keychain marker, never a value`);
+        }
+      };
+      const store2 = (kind, prev, next) => {
+        const rid = prev?.rid ?? nextRid;
+        if (prev === void 0) nextRid += 1;
+        table(kind).set(next.id, {
+          ...next,
+          rid
         });
-        if (!isRecord(next)) throw new Error("the body must be an object");
-        const after = markersOf(decl, next);
-        return {
-          body: next,
-          released: [...before.entries()].filter(([p, ref]) => after.get(p) !== ref).map(([, r]) => r)
-        };
       };
-      const write = (kind, input) => {
-        if (writesFail) throw new Error("records engine unreachable");
-        if (declOf(kind).at === "required" && input.at === void 0) throw new Error(`${kind}/${input.id}: the kind needs "at" on every write`);
-        const prev = table(kind).get(input.id);
-        const { body, released } = enforce(kind, input.id, input.data, prev?.data ?? null);
+      const writeRecord = (kind, rec, ifRev, nowMs) => {
+        const decl = declOf(kind);
+        const header = validateHeader(kind, decl, rec, nowMs);
+        const allocatedKey = `${kind}:${rec.id}`;
+        const prev = table(kind).get(rec.id);
+        if (pendingAllocated.has(allocatedKey) && prev !== void 0) throw new RevConflictError(`${kind}/${rec.id}: an allocated id is insert-only and a row already holds it`);
+        if (ifRev !== void 0) {
+          if (ifRev === 0 && prev !== void 0) throw new RevConflictError(`${kind}/${rec.id}: the row exists (ifRev 0 means "must not exist")`);
+          if (ifRev > 0 && prev?.rev !== ifRev) throw new RevConflictError(`${kind}/${rec.id}: expected rev ${ifRev}, found ${prev === void 0 ? "no row" : `rev ${prev.rev}`}`);
+        }
+        const checked = enforceSecrets(owner, kind, decl, rec.id, rec.data, prev?.data ?? null, "put");
+        serializeBody(kind, decl, rec.id, checked.body);
+        const body = jsonCopy(checked.body);
+        assertUnique(kind, decl, rec.id, body);
         const rev = (prev?.rev ?? 0) + 1;
-        clock += 1;
-        table(kind).set(input.id, {
-          id: input.id,
-          at: input.at ?? null,
+        store2(kind, prev, {
+          id: header.id,
+          deviceId: header.deviceId,
+          at: header.at,
+          expiresAt: header.expiresAt,
           rev,
-          updatedAt: clock,
+          updatedAt: nowMs,
           data: body
         });
+        pendingAllocated.delete(allocatedKey);
         return {
           rev,
-          released
+          released: checked.releasedRefs
         };
       };
-      const unimplemented = (op) => {
-        throw new Error(`the fake records transport does not implement ${op}`);
+      const trimScope = (kind, max, deviceId) => {
+        const scope = [...table(kind).values()].filter((r) => deviceId === void 0 || r.deviceId === deviceId);
+        const excess = Math.min(scope.length - max, RECORD_DELETE_BATCH);
+        if (excess <= 0) return;
+        scope.sort((a, b) => compareKeys([a.at, a.rid], [b.at, b.rid]));
+        for (const row of scope.slice(0, excess)) table(kind).delete(row.id);
+      };
+      const afterWrite = (kind, devices) => {
+        const bounds = ringBounds(declOf(kind));
+        if (bounds === null) return;
+        const bound = Math.max(bounds.maxRows ?? 0, bounds.maxRowsPerDevice ?? 0);
+        const interval = bound <= 100 ? 1 : Math.floor(bound / 100);
+        const count = (writesSinceTrim.get(kind) ?? 0) + devices.length;
+        if (count < interval) {
+          writesSinceTrim.set(kind, count);
+          return;
+        }
+        writesSinceTrim.set(kind, 0);
+        if (bounds.maxRows !== void 0) trimScope(kind, bounds.maxRows, void 0);
+        if (bounds.maxRowsPerDevice !== void 0) {
+          const seen = new Set(devices.filter((d) => d !== void 0));
+          for (const device of seen) trimScope(kind, bounds.maxRowsPerDevice, device);
+        }
+      };
+      const refsOf = (decl, rows) => rows.flatMap((row) => [...markersOf(decl, row.data).values()]);
+      const removeWhere = (kind, test) => {
+        const decl = declOf(kind);
+        const gone = [...table(kind).values()].filter(test);
+        for (const row of gone) table(kind).delete(row.id);
+        return {
+          deleted: gone.length,
+          secretRefs: refsOf(decl, gone)
+        };
       };
       return {
         records: createRecordsAccess({
@@ -130736,69 +131001,119 @@ var require_sleep_gRQc2IoX = __commonJS({
           transport: {
             declareKinds: async ({ kinds }) => {
               const out = {};
-              let n = 0;
-              for (const [name, decl] of Object.entries(kinds)) {
+              for (const [name, raw] of Object.entries(kinds)) {
+                const decl = RecordKindDeclarationSchema.parse(raw);
+                assertValidDeclaration(name, decl);
+                const prior = decls.get(name);
+                if (prior !== void 0) assertAdditive(name, prior, decl);
+                const kindId = kindIds.get(name) ?? kindIds.size + 1;
+                kindIds.set(name, kindId);
+                const created = decl.indexes.filter((i) => prior?.indexes.every((p) => p.name !== i.name) ?? true).map((i) => i.name);
+                const state = prior === void 0 ? "created" : JSON.stringify(prior) === JSON.stringify(decl) ? "unchanged" : "updated";
                 decls.set(name, decl);
-                n += 1;
                 out[name] = {
-                  kindId: n,
-                  state: "created",
-                  createdIndexes: decl.indexes.map((i) => i.name),
+                  kindId,
+                  state,
+                  createdIndexes: created,
                   adoptionPending: null
                 };
               }
               return { kinds: out };
             },
             get: async ({ kind, id }) => {
-              if (readsFail) throw new Error("records engine unreachable");
+              reading();
+              const decl = declOf(kind);
               const row = table(kind).get(id);
-              return row === void 0 ? null : view(kind, row);
+              return row === void 0 ? null : view(decl, row);
+            },
+            getMany: async ({ kind, ids }) => {
+              reading();
+              const decl = declOf(kind);
+              return [...new Set(ids)].sort((a, b) => compareSql(a, b)).flatMap((id) => {
+                const row = table(kind).get(id);
+                return row === void 0 ? [] : [view(decl, row)];
+              });
             },
-            getMany: async ({ kind, ids }) => ids.flatMap((id) => {
-              const row = table(kind).get(id);
-              return row === void 0 ? [] : [view(kind, row)];
-            }),
             secretRefs: async ({ kind, ids }) => {
+              reading();
               const decl = declOf(kind);
               const out = {};
               for (const id of ids) {
                 const row = table(kind).get(id);
-                if (row !== void 0) out[id] = Object.fromEntries(markersOf(decl, row.data));
+                if (row === void 0) continue;
+                const refs = Object.fromEntries(markersOf(decl, row.data));
+                if (Object.keys(refs).length > 0) out[id] = refs;
               }
               return out;
             },
             put: async ({ kind, record, ifRev }) => {
-              if (ifRev !== void 0 && (table(kind).get(record.id)?.rev ?? 0) !== ifRev) throw new Error("stale ifRev");
-              const { rev, released } = write(kind, record);
+              writing();
+              const written = writeRecord(kind, record, ifRev, now());
+              afterWrite(kind, [record.deviceId]);
               return {
-                rev,
-                releasedRefs: released
+                rev: written.rev,
+                releasedRefs: [...written.released]
               };
             },
             putMany: async ({ kind, records }) => {
+              writing();
+              declOf(kind);
+              if (records.length > 1e3) throw new BatchTooLargeError(`${records.length} records exceed ${RECORD_BATCH_MAX}`);
+              const bytes = records.reduce((sum, r) => sum + Buffer.byteLength(JSON.stringify(r.data), "utf8"), 0);
+              if (bytes > 4194304) throw new BatchTooLargeError(`${bytes} bytes exceed ${RECORD_BATCH_MAX_BYTES}`);
+              const nowMs = now();
+              const before = new Map(table(kind));
+              const ridBefore = nextRid;
               const released = [];
-              for (const record of records) released.push(...write(kind, record).released);
+              try {
+                for (const rec of records) released.push(...writeRecord(kind, rec, void 0, nowMs).released);
+              } catch (err) {
+                tables.set(kind, before);
+                nextRid = ridBefore;
+                throw err;
+              }
+              let top = -1;
+              for (const r of records) if (/^\d{1,15}$/.test(r.id)) top = Math.max(top, Number(r.id));
+              if (top >= 0) sequences.set(kind, Math.max(sequences.get(kind) ?? 0, top + 1));
+              afterWrite(kind, records.map((r) => r.deviceId));
               return {
                 count: records.length,
                 releasedRefs: released
               };
             },
-            patch: async ({ kind, id, data, at, ifRev }) => {
-              const prev = table(kind).get(id);
-              if (prev === void 0) throw new Error(`${kind}/${id}: no such record`);
-              if (ifRev !== void 0 && prev.rev !== ifRev) throw new Error("stale ifRev");
-              const { rev, released } = write(kind, {
-                id,
-                ...at !== void 0 && at !== null ? { at } : prev.at !== null ? { at: prev.at } : {},
-                data: mergePatch(prev.data, data)
+            patch: async (input) => {
+              writing();
+              const decl = declOf(input.kind);
+              if (input.at !== void 0 && decl.at !== "required") throw new InvalidRecordError(`${input.kind}: declared at: "none"`);
+              if (input.at === null) throw new InvalidRecordError(`${input.kind}: "at" cannot be removed`);
+              if (input.expiresAt !== void 0 && decl.secretPaths.length > 0) throw new InvalidRecordError(`${input.kind}: a kind with secret fields cannot expire by the engine (its keychain values would be orphaned)`);
+              if (input.expiresAt !== void 0 && "ttlMs" in decl.retention) throw new InvalidRecordError(`${input.kind}: expiresAt is set by the engine`);
+              const before = table(input.kind).get(input.id);
+              const checked = enforceSecrets(owner, input.kind, decl, input.id, input.data, before?.data ?? null, "patch");
+              if (before === void 0) throw new RecordNotFoundError(`${input.kind}/${input.id}: no such row`);
+              if (input.ifRev !== void 0 && before.rev !== input.ifRev) throw new RevConflictError(`${input.kind}/${input.id}: expected rev ${String(input.ifRev)}, found rev ${before.rev}`);
+              const merged = jsonCopy(mergePatch(before.data, jsonCopy(checked.body)));
+              const size = [...JSON.stringify(merged)].length;
+              if (size > decl.maxDataBytes) throw new RecordTooLargeError(`${input.kind}/${input.id}: the patched body is ${size} bytes, over maxDataBytes ${decl.maxDataBytes}`);
+              assertUnique(input.kind, decl, input.id, merged);
+              const rev = before.rev + 1;
+              store2(input.kind, before, {
+                ...before,
+                at: input.at ?? before.at,
+                expiresAt: input.expiresAt === void 0 ? before.expiresAt : input.expiresAt,
+                rev,
+                updatedAt: now(),
+                data: merged
               });
+              const kept = new Set(markersOf(decl, merged).values());
               return {
                 rev,
-                releasedRefs: released
+                releasedRefs: [...markersOf(decl, before.data).values()].filter((r) => !kept.has(r))
               };
             },
             delete: async ({ kind, id }) => {
-              if (writesFail) throw new Error("records engine unreachable");
+              writing();
+              const decl = declOf(kind);
               const row = table(kind).get(id);
               if (row === void 0) return {
                 deleted: false,
@@ -130807,57 +131122,189 @@ var require_sleep_gRQc2IoX = __commonJS({
               table(kind).delete(id);
               return {
                 deleted: true,
-                secretRefs: [...markersOf(declOf(kind), row.data).values()]
+                secretRefs: refsOf(decl, [row])
               };
             },
             deleteMany: async ({ kind, ids }) => {
-              let deleted = 0;
-              const refs = [];
-              for (const id of ids) {
-                const row = table(kind).get(id);
-                if (row === void 0) continue;
-                table(kind).delete(id);
-                deleted += 1;
-                refs.push(...markersOf(declOf(kind), row.data).values());
+              writing();
+              const wanted = new Set(ids);
+              return removeWhere(kind, (row) => wanted.has(row.id));
+            },
+            query: async (q) => {
+              reading();
+              const decl = declOf(q.kind);
+              queries.push({
+                kind: q.kind,
+                limit: q.limit
+              });
+              assertWindowAllowed(q.kind, decl, q);
+              const desc = q.desc === true;
+              const dir = desc ? "DESC" : "ASC";
+              const where = planWhere(q.kind, decl, q.where, { allowIn: false });
+              const cursor = q.cursor === void 0 ? void 0 : decodeCursor(q.cursor);
+              let rows = [...table(q.kind).values()].filter((r) => inWindow(r, q));
+              let keysOf;
+              let keyCount;
+              let tag;
+              if (where !== null) {
+                if (q.order !== void 0) throw new InvalidRecordError(`${q.kind}: with a where the order is the index's; drop "order"`);
+                const fields = where.orderFields;
+                keysOf = (row) => [...fields.map((f) => extractField(row.data, f)), row.rid];
+                keyCount = fields.length;
+                tag = `rx:${where.indexName}:${dir}`;
+                rows = rows.filter((r) => where.matches(r.data));
+                if (cursor !== void 0) {
+                  assertCursor(cursor, tag, fields.length + 1);
+                  rows = rows.filter((r) => rowValueAfter(keysOf(r), cursor.values, desc));
+                }
+              } else {
+                const order = q.order ?? (decl.at === "required" ? "at" : "id");
+                keyCount = 1;
+                if (order === "at") {
+                  if (decl.at !== "required") throw new InvalidRecordError(`${q.kind}: declared at: "none", it has no time order - use order: "id"`);
+                  keysOf = (row) => [row.at, row.rid];
+                  tag = `at:${dir}`;
+                  if (cursor !== void 0) {
+                    assertCursor(cursor, tag, 2);
+                    rows = rows.filter((r) => rowValueAfter(keysOf(r), cursor.values, desc));
+                  }
+                } else {
+                  if (q.deviceId !== void 0 || q.atFrom !== void 0 || q.atTo !== void 0) throw new UnindexedFilterError(`${q.kind}: order "id" cannot be combined with a device or time window (use order "at")`);
+                  keysOf = (row) => [row.id, row.rid];
+                  tag = `id:${dir}`;
+                  if (cursor !== void 0) {
+                    assertCursor(cursor, tag, 2);
+                    const last2 = cursor.values[0] ?? null;
+                    rows = rows.filter((r) => rowValueAfter([r.id], [last2], desc));
+                  }
+                }
+              }
+              rows.sort((a, b) => (desc ? -1 : 1) * compareKeys(keysOf(a), keysOf(b)));
+              const page = rows.slice(0, q.limit);
+              const more = rows.length > q.limit;
+              const last = page.at(-1);
+              let nextCursor = null;
+              if (more && last !== void 0) {
+                const all = keysOf(last);
+                const keys = [];
+                for (let i = 0; i < keyCount; i += 1) {
+                  const value = all[i];
+                  if (typeof value !== "string" && typeof value !== "number") throw new InvalidRecordError(`${q.kind}: a row has no value for an ordering field, so this query cannot be paged`);
+                  keys.push(value);
+                }
+                keys.push(last.rid);
+                nextCursor = encodeCursor(tag, keys);
               }
               return {
-                deleted,
-                secretRefs: refs
+                records: page.map((r) => view(decl, r)),
+                nextCursor
               };
             },
-            query: async (q) => {
-              if (readsFail) throw new Error("records engine unreachable");
+            count: async (q) => {
+              reading();
               const decl = declOf(q.kind);
-              const asked = Object.keys(q.where ?? {});
-              if (asked.length > 0) {
-                if (!decl.indexes.some((index) => {
-                  const leading = new Set(index.fields.slice(0, asked.length));
-                  return asked.length <= index.fields.length && asked.every((f) => leading.has(f));
-                })) throw new Error(`${q.kind}: no declared index serves [${asked.join(", ")}]`);
-              }
-              let rows = [...table(q.kind).values()];
-              for (const [field, wanted] of Object.entries(q.where ?? {})) rows = rows.filter((r) => r.data[field] === wanted);
-              const byAt = q.order === "at" || q.order === void 0 && decl.at === "required";
-              rows.sort((a, b) => byAt ? (a.at ?? 0) - (b.at ?? 0) : a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
-              if (q.desc === true) rows.reverse();
-              const start = q.cursor === void 0 ? 0 : Number(q.cursor);
-              const page = rows.slice(start, start + q.limit);
-              const more = start + q.limit < rows.length;
+              assertWindowAllowed(q.kind, decl, q);
+              const where = planWhere(q.kind, decl, q.where, { allowIn: true });
+              let n = 0;
+              for (const row of table(q.kind).values()) if (inWindow(row, q) && (where === null || where.matches(row.data))) n += 1;
+              return { count: n };
+            },
+            histogram: async (q) => {
+              reading();
+              const decl = declOf(q.kind);
+              assertWindowAllowed(q.kind, decl, {
+                deviceId: q.deviceId,
+                atFrom: q.from
+              });
+              if (!(q.to > q.from)) throw new InvalidRecordError(`${q.kind}: histogram needs from < to`);
+              if (Math.ceil((q.to - q.from) / q.bucketMs) > 1e4) throw new InvalidRecordError(`${q.kind}: histogram would exceed ${HISTOGRAM_MAX_BUCKETS} buckets`);
+              const from = Math.floor(q.from);
+              const to = Math.ceil(q.to);
+              const step = Math.trunc(q.bucketMs);
+              const counts = /* @__PURE__ */ new Map();
+              for (const row of table(q.kind).values()) {
+                if (q.deviceId !== void 0 && row.deviceId !== q.deviceId) continue;
+                if (row.at === null || row.at < from || row.at >= to) continue;
+                const b = Math.trunc((row.at - from) / step);
+                counts.set(b, (counts.get(b) ?? 0) + 1);
+              }
+              return { buckets: [...counts.entries()].sort(([a], [b]) => a - b).map(([b, count]) => ({
+                bucketStart: from + b * q.bucketMs,
+                count
+              })) };
+            },
+            aggregate: async (q) => {
+              reading();
+              const decl = declOf(q.kind);
+              if (q.op !== "count" && q.field === void 0) throw new InvalidRecordError(`${q.kind}: ${q.op} needs a field`);
+              const extra = [q.field, q.groupBy].filter((f) => f !== void 0);
+              if (extra.length === 0 && q.where === void 0) throw new InvalidRecordError(`${q.kind}: a count with no field and no groupBy is "count"`);
+              const where = planWhere(q.kind, decl, q.where, {
+                allowIn: true,
+                extraFields: extra,
+                groupBy: q.groupBy
+              });
+              if (where === null) throw new InvalidRecordError(`${q.kind}: aggregate has nothing to read`);
+              const rows = [...table(q.kind).values()].filter((r) => where.matches(r.data));
+              const groups = /* @__PURE__ */ new Map();
+              if (q.groupBy === void 0) groups.set(null, rows);
+              else {
+                const by = q.groupBy;
+                for (const row of rows) {
+                  const g = extractField(row.data, by);
+                  groups.set(g, [...groups.get(g) ?? [], row]);
+                }
+              }
+              return { rows: [...groups.entries()].sort(([a], [b]) => compareSql(a, b)).map(([group, members]) => ({
+                group,
+                value: aggregateOf(q.op, q.field, members)
+              })) };
+            },
+            deleteWhere: async (q) => {
+              writing();
+              const decl = declOf(q.kind);
+              if (q.deviceId === void 0 && q.atBefore === void 0 && (q.where === void 0 || Object.keys(q.where).length === 0)) throw new FilterRequiredError(`${q.kind}: deleteWhere needs deviceId, atBefore or where - there is no "delete all"`);
+              assertWindowAllowed(q.kind, decl, {
+                deviceId: q.deviceId,
+                atFrom: q.atBefore
+              });
+              const where = planWhere(q.kind, decl, q.where, { allowIn: true });
+              return removeWhere(q.kind, (row) => {
+                if (where !== null && !where.matches(row.data)) return false;
+                if (q.deviceId !== void 0 && row.deviceId !== q.deviceId) return false;
+                if (q.atBefore !== void 0 && (row.at === null || row.at >= q.atBefore)) return false;
+                return true;
+              });
+            },
+            deleteDevice: async ({ deviceId, kinds }) => {
+              writing();
+              const deleted = {};
+              const secretRefs = [];
+              for (const [kind, decl] of decls) {
+                if (decl.deviceRemoval !== "delete") continue;
+                if (kinds !== void 0 && !kinds.includes(kind)) continue;
+                const result = removeWhere(kind, (row) => row.deviceId === deviceId);
+                deleted[kind] = result.deleted;
+                secretRefs.push(...result.secretRefs);
+              }
               return {
-                records: page.map((r) => view(q.kind, r)),
-                nextCursor: more ? String(start + q.limit) : null
+                deleted,
+                secretRefs
               };
             },
-            count: async ({ kind }) => ({ count: table(kind).size }),
-            histogram: async () => unimplemented("histogram"),
-            aggregate: async () => unimplemented("aggregate"),
-            deleteWhere: async () => unimplemented("deleteWhere"),
-            deleteDevice: async () => unimplemented("deleteDevice"),
-            allocateId: async () => unimplemented("allocateId")
+            allocateId: async ({ kind }) => {
+              writing();
+              declOf(kind);
+              const id = sequences.get(kind) ?? 1;
+              sequences.set(kind, id + 1);
+              pendingAllocated.add(`${kind}:${id}`);
+              return { id };
+            }
           },
           secrets: makeSpecKeychain(owner).access
         }),
         tables,
+        queries,
         failWrites: (on) => {
           writesFail = on;
         },
@@ -130865,12 +131312,14 @@ var require_sleep_gRQc2IoX = __commonJS({
           readsFail = on;
         },
         seed: (kind, row) => {
-          table(kind).set(row.id, {
+          store2(kind, table(kind).get(row.id), {
             id: row.id,
+            deviceId: row.deviceId ?? null,
             at: row.at ?? null,
+            expiresAt: row.expiresAt ?? null,
             rev: 1,
             updatedAt: 1,
-            data: row.data
+            data: jsonCopy(row.data)
           });
         }
       };
@@ -134634,7 +135083,7 @@ var require_addon = __commonJS({
   "../types/dist/addon.js"(exports) {
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-    var require_sleep = require_sleep_gRQc2IoX();
+    var require_sleep = require_sleep_Re8daN0Y();
     var require_event_category = require_event_category_eSqkye_K();
     var require_err_msg = require_err_msg_BhVbr0NX();
     var CAP_INPUT_DEFAULTS = Object.freeze({
@@ -136984,9 +137433,9 @@ var require_addon = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-D_VwZiDt.js
-var require_retired_settings_keys_D_VwZiDt = __commonJS({
-  "../system/dist/retired-settings-keys-D_VwZiDt.js"(exports) {
+// ../system/dist/retired-settings-keys-CGUqX-Oz.js
+var require_retired_settings_keys_CGUqX_Oz = __commonJS({
+  "../system/dist/retired-settings-keys-CGUqX-Oz.js"(exports) {
     "use strict";
     var _camstack_types_addon = require_addon();
     function settingsStoreIsAuthoritativeHere(env) {
@@ -137247,12 +137696,6 @@ var require_retired_settings_keys_D_VwZiDt = __commonJS({
     function errText(err) {
       return err instanceof Error ? err.message : String(err);
     }
-    Object.defineProperty(exports, "RETIRED_SETTINGS_KEYS", {
-      enumerable: true,
-      get: function() {
-        return RETIRED_SETTINGS_KEYS;
-      }
-    });
     Object.defineProperty(exports, "purgeRetiredSettingsKeys", {
       enumerable: true,
       get: function() {
@@ -137283,11 +137726,11 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     var require_prefix_range = require_prefix_range_D_KueXbQ();
     var require_prefix_walk = require_prefix_walk_Dv6MLZlM();
-    var require_retired_settings_keys = require_retired_settings_keys_D_VwZiDt();
+    var require_retired_settings_keys = require_retired_settings_keys_CGUqX_Oz();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
@@ -146355,7 +146798,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -146489,7 +146932,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -146852,11 +147295,11 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     var require_safe_buffer$1 = require_safe_buffer_D3aoa_7X();
     var require_ms$1 = require_ms_LB3giGoU();
-    var require_device_ca = require_device_ca_CPTDs_d();
+    var require_device_ca = require_device_ca_B3xUzps7();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
@@ -152443,7 +152886,6 @@ var require_local_auth_addon = __commonJS({
     var USERS_COLLECTION$1 = "users";
     var API_KEYS_COLLECTION = "api_keys";
     var SCOPED_TOKENS_COLLECTION = "scoped_tokens";
-    var OAUTH_SESSIONS_COLLECTION = "oauth_sessions";
     var USER_TOTP_COLLECTION = "user_totp";
     var USER_EXTERNAL_IDENTITIES_COLLECTION = "user_external_identities";
     var USERS_COLUMNS = [
@@ -152643,47 +153085,6 @@ var require_local_auth_addon = __commonJS({
         notNull: true
       }
     ];
-    var OAUTH_SESSIONS_COLUMNS = [
-      {
-        name: "id",
-        type: "TEXT",
-        primaryKey: true,
-        notNull: true
-      },
-      {
-        name: "userId",
-        type: "TEXT",
-        notNull: true
-      },
-      {
-        name: "username",
-        type: "TEXT",
-        notNull: true
-      },
-      {
-        name: "integrationId",
-        type: "TEXT",
-        notNull: true
-      },
-      {
-        name: "scopes",
-        type: "JSON"
-      },
-      {
-        name: "createdAt",
-        type: "INTEGER",
-        notNull: true
-      },
-      {
-        name: "lastUsedAt",
-        type: "INTEGER",
-        notNull: true
-      },
-      {
-        name: "revokedAt",
-        type: "INTEGER"
-      }
-    ];
     async function declareAuthSchema(store, options) {
       const skip = new Set(options?.skipCollections ?? []);
       if (!skip.has("users")) await store.declareCollection.mutate({
@@ -152718,14 +153119,6 @@ var require_local_auth_addon = __commonJS({
           columns: ["userId"]
         }]
       });
-      if (!skip.has("oauth_sessions")) await store.declareCollection.mutate({
-        collection: OAUTH_SESSIONS_COLLECTION,
-        columns: OAUTH_SESSIONS_COLUMNS,
-        indexes: [{
-          name: "idx_oauth_sessions_user_id",
-          columns: ["userId"]
-        }]
-      });
       if (!skip.has("login_sessions")) await store.declareCollection.mutate({
         collection: LOGIN_SESSIONS_COLLECTION,
         columns: LOGIN_SESSIONS_COLUMNS,
@@ -152926,16 +153319,19 @@ var require_local_auth_addon = __commonJS({
       "oauth-sessions": {
         schema: OauthSessionBodySchema,
         class: "ledger",
-        writeTrigger: "OAuth code exchange; refresh touches lastUsedAt",
+        writeTrigger: "OAuth code exchange; refresh touches lastUsedAt; revoke stamps revokedAt",
         device: "none",
         at: "none",
         indexes: [{
           name: "user",
           fields: ["userId"]
+        }, {
+          name: "revoked",
+          fields: ["revokedAt"]
         }],
         retention: {
           owner: "local-auth",
-          reason: "daily reap deletes revoked sessions older than 30 days; active rows never expire"
+          reason: "daily reap deletes sessions revoked more than 30 days ago; an active session has no lifetime, so no engine TTL"
         }
       },
       "user-totp": {
@@ -153015,7 +153411,6 @@ var require_local_auth_addon = __commonJS({
       ADMIN_TOKENS_COLLECTION,
       LOGIN_SESSIONS_COLLECTION,
       LOGIN_SESSION_CUTOFFS_COLLECTION,
-      OAUTH_SESSIONS_COLLECTION,
       USER_TOTP_COLLECTION,
       USER_EXTERNAL_IDENTITIES_COLLECTION,
       DEVICE_CREDENTIALS_COLLECTION,
@@ -153163,7 +153558,7 @@ var require_local_auth_addon = __commonJS({
       const value = data[key];
       return typeof value === "number" && Number.isFinite(value) ? value : null;
     }
-    function parseSession$1(data) {
+    function parseSession(data) {
       const id = str(data, "id");
       const userId = str(data, "userId");
       const createdAt = num(data, "createdAt");
@@ -153226,7 +153621,7 @@ var require_local_auth_addon = __commonJS({
         if (sessionsKind !== null) {
           const rows2 = await (0, import_read_all_rows.readAllRows)(sessionsKind);
           for (const row of rows2) {
-            const record = parseSession$1({
+            const record = parseSession({
               id: row.id,
               ...row.data
             });
@@ -153238,7 +153633,7 @@ var require_local_auth_addon = __commonJS({
         }
         const rows = await this.store.query.query({ collection: LOGIN_SESSIONS_COLLECTION });
         for (const row of rows) {
-          const record = parseSession$1(row.data);
+          const record = parseSession(row.data);
           if (record !== null) this.remember(record);
         }
         const cutoffs = await this.store.query.query({ collection: LOGIN_SESSION_CUTOFFS_COLLECTION });
@@ -156565,33 +156960,6 @@ var require_local_auth_addon = __commonJS({
         }
       };
     }
-    function parseSession(data) {
-      const id = data["id"];
-      const userId = data["userId"];
-      const username = data["username"];
-      const integrationId = data["integrationId"];
-      const scopes = data["scopes"];
-      const createdAt = data["createdAt"];
-      const lastUsedAt = data["lastUsedAt"];
-      const revokedAt = data["revokedAt"];
-      if (typeof id !== "string") throw new Error("oauth_sessions row: missing id");
-      if (typeof userId !== "string") throw new Error("oauth_sessions row: missing userId");
-      if (typeof username !== "string") throw new Error("oauth_sessions row: missing username");
-      if (typeof integrationId !== "string") throw new Error("oauth_sessions row: missing integrationId");
-      if (!Array.isArray(scopes)) throw new Error("oauth_sessions row: scopes must be an array");
-      if (typeof createdAt !== "number") throw new Error("oauth_sessions row: missing createdAt");
-      if (typeof lastUsedAt !== "number") throw new Error("oauth_sessions row: missing lastUsedAt");
-      return {
-        id,
-        userId,
-        username,
-        integrationId,
-        scopes,
-        createdAt,
-        lastUsedAt,
-        revokedAt: typeof revokedAt === "number" ? revokedAt : null
-      };
-    }
     function sessionToBody(session) {
       return {
         userId: session.userId,
@@ -156604,22 +156972,29 @@ var require_local_auth_addon = __commonJS({
       };
     }
     function rowToSession(id, body) {
-      return parseSession({
+      return {
         id,
-        ...body
-      });
+        userId: body.userId,
+        username: body.username,
+        integrationId: body.integrationId,
+        scopes: body.scopes,
+        createdAt: body.createdAt,
+        lastUsedAt: body.lastUsedAt,
+        revokedAt: typeof body.revokedAt === "number" ? body.revokedAt : null
+      };
     }
     var OauthSessionManager = class {
       kind;
-      store;
       constructor(deps) {
-        if ("oauthSessionsKind" in deps) {
-          this.kind = deps.oauthSessionsKind;
-          this.store = deps.legacyStore ?? null;
-        } else {
-          this.kind = null;
-          this.store = deps;
-        }
+        this.kind = deps.oauthSessionsKind;
+      }
+      async write(session) {
+        const parsed = localAuthRecordKinds["oauth-sessions"].schema.safeParse(sessionToBody(session));
+        if (!parsed.success) throw new Error(parsed.error.message);
+        await this.kind.put({
+          id: session.id,
+          data: parsed.data
+        });
       }
       async create(input) {
         const now = Date.now();
@@ -156633,117 +157008,53 @@ var require_local_auth_addon = __commonJS({
           lastUsedAt: now,
           revokedAt: null
         };
-        const kind = this.kind;
-        if (kind !== null) {
-          const parsed = localAuthRecordKinds["oauth-sessions"].schema.safeParse(sessionToBody(session));
-          if (!parsed.success) throw new Error(parsed.error.message);
-          await kind.put({
-            id: session.id,
-            data: parsed.data
-          });
-          return session;
-        }
-        await this.store.insert.mutate({
-          collection: OAUTH_SESSIONS_COLLECTION,
-          record: {
-            id: session.id,
-            data: { ...session }
-          }
-        });
+        await this.write(session);
         return session;
       }
       async list() {
-        const kind = this.kind;
-        if (kind !== null) return (await (0, import_read_all_rows.readAllRows)(kind)).map((row) => rowToSession(row.id, row.data));
-        return (await this.store.query.query({
-          collection: OAUTH_SESSIONS_COLLECTION,
-          filter: {}
-        })).map((r2) => parseSession(r2.data));
+        return (await (0, import_read_all_rows.readAllRows)(this.kind)).map((row) => rowToSession(row.id, row.data));
       }
       async getById(id) {
-        const kind = this.kind;
-        if (kind !== null) {
-          const row = await kind.get(id);
-          return row === null ? null : rowToSession(row.id, row.data);
-        }
-        const results = await this.store.query.query({
-          collection: OAUTH_SESSIONS_COLLECTION,
-          filter: { where: { id } }
-        });
-        if (results.length === 0) return null;
-        return parseSession(results[0].data);
+        const row = await this.kind.get(id);
+        return row === null ? null : rowToSession(row.id, row.data);
       }
       async markRevoked(id) {
         const existing = await this.getById(id);
         if (existing === null) return false;
         if (existing.revokedAt !== null) return true;
-        const updated = {
+        await this.write({
           ...existing,
           revokedAt: Date.now()
-        };
-        const kind = this.kind;
-        if (kind !== null) {
-          const parsed = localAuthRecordKinds["oauth-sessions"].schema.safeParse(sessionToBody(updated));
-          if (!parsed.success) throw new Error(parsed.error.message);
-          await kind.put({
-            id,
-            data: parsed.data
-          });
-          return true;
-        }
-        await this.store.update.mutate({
-          collection: OAUTH_SESSIONS_COLLECTION,
-          id,
-          data: { ...updated }
         });
         return true;
       }
       async remove(id) {
         if (await this.getById(id) === null) return false;
-        const kind = this.kind;
-        if (kind !== null) {
-          await kind.delete(id);
-          return true;
-        }
-        await this.store.delete.mutate({
-          collection: OAUTH_SESSIONS_COLLECTION,
-          key: id
-        });
+        await this.kind.delete(id);
         return true;
       }
+      /**
+      * Delete the sessions revoked at or before `horizonMs`. An active session
+      * (`revokedAt` null) is never matched: it has no lifetime of its own, which
+      * is why this is the owner's sweep and not an engine TTL.
+      */
       async reapRevoked(horizonMs) {
-        const kind = this.kind;
-        if (kind !== null) return kind.deleteWhere({ where: { revokedAt: {
+        return this.kind.deleteWhere({ where: { revokedAt: {
           gte: 1,
           lte: horizonMs
         } } });
-        const { deleted } = await this.store.deleteWhere.mutate({
-          collection: OAUTH_SESSIONS_COLLECTION,
-          filter: { whereBetween: { revokedAt: [1, horizonMs] } }
-        });
-        return deleted;
       }
       async touch(id) {
         const existing = await this.getById(id);
         if (existing === null) return;
-        const updated = {
+        const parsed = localAuthRecordKinds["oauth-sessions"].schema.safeParse(sessionToBody({
           ...existing,
           lastUsedAt: Date.now()
-        };
-        const kind = this.kind;
-        if (kind !== null) {
-          const parsed = localAuthRecordKinds["oauth-sessions"].schema.safeParse(sessionToBody(updated));
-          if (!parsed.success) return;
-          await kind.put({
-            id,
-            data: parsed.data
-          });
-          return;
-        }
-        await this.store.update.mutate({
-          collection: OAUTH_SESSIONS_COLLECTION,
+        }));
+        if (!parsed.success) return;
+        await this.kind.put({
           id,
-          data: { ...updated }
+          data: parsed.data
         });
       }
     };
@@ -156800,10 +157111,7 @@ var require_local_auth_addon = __commonJS({
             apiKeysKind: authStores.apiKeys,
             legacyStore: store
           });
-          this.oauthSessionManager = new OauthSessionManager({
-            oauthSessionsKind: authStores.oauthSessions,
-            legacyStore: store
-          });
+          this.oauthSessionManager = new OauthSessionManager({ oauthSessionsKind: authStores.oauthSessions });
           this.totpManager = new TotpManager({
             userTotpKind: authStores.userTotp,
             legacyStore: store
@@ -157523,7 +157831,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_log_read_filter = require_log_read_filter_Bi066jwU();
     var zod = require_zod();
     function sanitizeLabelName(raw) {
@@ -158484,7 +158792,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var node_fs_promises = __require("fs/promises");
     var node_util = __require("util");
     var node_os = __require("os");
@@ -161051,7 +161359,7 @@ var require_device_history_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var FIVE_MINUTES_MS = 5 * 6e4;
     var HOUR_MS = 60 * 6e4;
     var DAY_MS = 24 * HOUR_MS;
@@ -164097,7 +164405,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -165207,12 +165515,12 @@ var require_lib = __commonJS({
   }
 });
 
-// ../system/dist/wal-maintenance-CaJjuLHq.js
-var require_wal_maintenance_CaJjuLHq = __commonJS({
-  "../system/dist/wal-maintenance-CaJjuLHq.js"(exports) {
+// ../system/dist/wal-maintenance-jXcOxm2T.js
+var require_wal_maintenance_jXcOxm2T = __commonJS({
+  "../system/dist/wal-maintenance-jXcOxm2T.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_prefix_range = require_prefix_range_D_KueXbQ();
     var node_crypto = __require("crypto");
     var node_module = __require("module");
@@ -165496,7 +165804,6 @@ var require_wal_maintenance_CaJjuLHq = __commonJS({
     function controlTargetOf(backend, threadId) {
       return {
         hasTable: ({ name }) => backend.hasTable(name),
-        dropRetiredTable: ({ name }) => backend.dropRetiredTable(name),
         threadId: () => threadId,
         listPhysicalTables: ({ ownerPrefix }) => backend.listTables(ownerPrefix)
       };
@@ -165588,9 +165895,6 @@ var require_wal_maintenance_CaJjuLHq = __commonJS({
         params
       };
     }
-    var RECORDS_TABLE = "records";
-    var RECORD_KINDS_TABLE = "_record_kinds";
-    var RECORD_SEQUENCES_TABLE = "_record_sequences";
     var RECORDS_SCHEMA_SQL = `
 CREATE TABLE IF NOT EXISTS records (
   rid        INTEGER PRIMARY KEY,
@@ -165626,11 +165930,6 @@ CREATE TABLE IF NOT EXISTS _record_sequences (
   next    INTEGER NOT NULL
 );
 `;
-    var RECORDS_ENGINE_TABLES = [
-      RECORDS_TABLE,
-      RECORD_KINDS_TABLE,
-      RECORD_SEQUENCES_TABLE
-    ];
     var INDEX_KIND_DEVICE_AT = "records_kind_device_at";
     var INDEX_KIND_AT = "records_kind_at";
     var FIELD_PATH = /^[A-Za-z_][A-Za-z0-9_]{0,63}(\.[A-Za-z_][A-Za-z0-9_]{0,63}){0,3}$/;
@@ -166634,7 +166933,6 @@ CREATE TABLE IF NOT EXISTS _record_sequences (
     ];
     var CONTROL_OPS = [
       "hasTable",
-      "dropRetiredTable",
       "threadId",
       "listPhysicalTables"
     ];
@@ -166883,9 +167181,6 @@ CREATE TABLE IF NOT EXISTS _record_sequences (
         kind: kind === "table" || kind === "index" ? kind : "unknown"
       };
     }
-    function isCountRow(raw) {
-      return raw !== null && typeof raw === "object" && typeof Reflect.get(raw, "n") === "number";
-    }
     function parseRowData(raw) {
       return require_dist10.asJsonObject(require_dist10.parseJsonUnknown(raw)) ?? {};
     }
@@ -167848,28 +168143,6 @@ CREATE TABLE IF NOT EXISTS _record_sequences (
         return out;
       }
       /**
-      * Drop one table nobody owns (D870 migration, one-shot). Refuses a canonical
-      * or engine table, one a running addon declared since boot, a table that is
-      * not there, and a row count other than the one the caller stated.
-      */
-      dropTable(name, expectRows) {
-        if (name.startsWith("sqlite_") || name === SqliteSettingsBackend2.DECLARATIONS_TABLE) throw new Error(`drop refused: "${name}" is an engine table`);
-        if (RECORDS_ENGINE_TABLES.includes(name)) throw new Error(`drop refused: "${name}" is a table of the records engine`);
-        if (SqliteSettingsBackend2.CANONICAL_KV_COLLECTIONS.includes(name)) throw new Error(`drop refused: "${name}" is a canonical collection`);
-        if (this.declaredThisBoot.has(name)) throw new Error(`drop refused: "${name}" is declared by a running addon`);
-        if (!this.hasTable(name)) throw new Error(`drop refused: no table "${name}"`);
-        const db = this.getDb();
-        const rows = db.prepare(`SELECT COUNT(*) AS c FROM "${name}"`).get()?.c ?? 0;
-        if (rows !== expectRows) throw new Error(`drop refused: "${name}" holds ${rows} rows, the caller expected ${expectRows}`);
-        db.transaction(() => {
-          db.exec(`DROP TABLE "${name}"`);
-          this.ensureDeclarationsTable();
-          db.prepare(`DELETE FROM "${SqliteSettingsBackend2.DECLARATIONS_TABLE}" WHERE name = ?`).run(name);
-        })();
-        this.declaredCollections.delete(name);
-        return rows;
-      }
-      /**
       * The tables this file's own `_collection_declarations` names — the
       * placement authority (D851). Read from DISK, not from memory, so a table
       * created and declared by an earlier life of the process still counts.
@@ -168289,31 +168562,6 @@ CREATE TABLE IF NOT EXISTS _record_sequences (
         }
         this.structuredTables.set(table, fingerprint);
       }
-      /**
-      * Drop a table nothing declares any more, reporting what went with it.
-      *
-      * The DDL lives here because the engine owns the handle AND the two memos
-      * that outlive a table: `structuredTables` (schema fingerprint) and
-      * `declaredCollections` (the column set `compileFilter` resolves against).
-      * Dropping behind their backs would leave a ghost — a later declaration of
-      * the same name would be memoised as "already materialised" against a table
-      * that no longer exists.
-      *
-      * WHICH tables are retired, and the logging, are policy: they live in
-      * `retired-collections.ts`. This method knows only how to drop one.
-      *
-      * Answers `null` when the table is not there — the steady state after the
-      * first boot that ran the purge, and the case on a fresh install.
-      */
-      dropRetiredTable(table) {
-        if (this.getDb().prepare(`SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?`).get(table) === void 0) return null;
-        const counted = this.getDb().prepare(`SELECT COUNT(*) AS n FROM "${table}"`).get();
-        const rows = isCountRow(counted) ? counted.n : 0;
-        this.getDb().exec(`DROP TABLE "${table}"`);
-        this.structuredTables.delete(table);
-        this.declaredCollections.delete(table);
-        return { rows };
-      }
       /** Returns SQLite's `lastInsertRowid` — the only place an auto-assigned key
       *  is knowable (D473). */
       async tableInsert(table, row) {
@@ -169389,9 +169637,9 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
-    var require_retired_settings_keys = require_retired_settings_keys_D_VwZiDt();
-    var require_wal_maintenance = require_wal_maintenance_CaJjuLHq();
+    var require_dist10 = require_dist_D9aw_d0G();
+    var require_retired_settings_keys = require_retired_settings_keys_CGUqX_Oz();
+    var require_wal_maintenance = require_wal_maintenance_jXcOxm2T();
     var require_sqlite_snapshot_protocol = require_sqlite_snapshot_protocol_B9OndqZv();
     var require_wal_checkpoint_policy = require_wal_checkpoint_policy_d2z2qPqx();
     var node_fs_promises = __require("fs/promises");
@@ -170277,9 +170525,6 @@ var require_sqlite_settings_addon = __commonJS({
       listPhysicalTables(ownerPrefix) {
         return Promise.resolve(require_wal_maintenance.callControl(require_wal_maintenance.controlTargetOf(this.backend, 0), "listPhysicalTables", { ownerPrefix }));
       }
-      async dropRetiredTable(name) {
-        return require_wal_maintenance.callControl(require_wal_maintenance.controlTargetOf(this.backend, 0), "dropRetiredTable", { name });
-      }
       async servingThreadId() {
         return 0;
       }
@@ -170333,9 +170578,6 @@ var require_sqlite_settings_addon = __commonJS({
       listPhysicalTables(ownerPrefix) {
         return this.client.control("listPhysicalTables", { ownerPrefix });
       }
-      dropRetiredTable(name) {
-        return this.client.control("dropRetiredTable", { name });
-      }
       servingThreadId() {
         return this.client.control("threadId", {});
       }
@@ -170808,13 +171050,11 @@ var require_sqlite_settings_addon = __commonJS({
     var StorageAdminProvider = class {
       backend;
       logger;
-      installedOwners;
       records;
       peerFiles;
-      constructor(backend, logger, installedOwners, records, peerFiles = async () => []) {
+      constructor(backend, logger, records, peerFiles = async () => []) {
         this.backend = backend;
         this.logger = logger;
-        this.installedOwners = installedOwners;
         this.records = records;
         this.peerFiles = peerFiles;
       }
@@ -170824,19 +171064,6 @@ var require_sqlite_settings_addon = __commonJS({
       readRecords(input) {
         return this.records.readRecords(input);
       }
-      /** May this table be dropped AT ALL? Throws with the reason when not. */
-      async assertDroppable(collection) {
-        const colon = collection.indexOf(":");
-        const base = colon > 0 ? collection.slice(colon + 1) : "";
-        if (colon > 0 && require_dist10.STORAGE_ADMIN_SCOPED_BASES.includes(base)) return;
-        if (require_dist10.STORAGE_ADMIN_MOVED_COLLECTIONS.includes(collection)) return;
-        if (colon <= 0) throw new Error(`drop refused: "${collection}" is not a scoped table`);
-        const installed = await this.installedOwners().catch((err) => {
-          throw new Error(`drop refused: the installed addons could not be read (${err instanceof Error ? err.message : String(err)})`);
-        });
-        const owner = collection.slice(0, colon);
-        if (installed.has(owner)) throw new Error(`drop refused: "${collection}" belongs to the installed addon "${owner}"`);
-      }
       async listTables(input) {
         const tables = [...this.backend.listTables(input.ownerPrefix)];
         for (const file of await this.peerFiles()) tables.push(...await file.listPhysicalTables(input.ownerPrefix));
@@ -170847,98 +171074,7 @@ var require_sqlite_settings_addon = __commonJS({
         } });
         return { tables };
       }
-      async dropCollection(input) {
-        try {
-          await this.assertDroppable(input.collection);
-          const rows = this.backend.dropTable(input.collection, input.expectRows);
-          this.logger.warn("storage-admin: DROPPED a table", { meta: {
-            collection: input.collection,
-            rows
-          } });
-          return {
-            dropped: true,
-            rows
-          };
-        } catch (err) {
-          this.logger.warn("storage-admin: drop refused", { meta: {
-            collection: input.collection,
-            expectRows: input.expectRows,
-            error: err instanceof Error ? err.message : String(err)
-          } });
-          throw err;
-        }
-      }
     };
-    var RETIRED_COLLECTIONS = [
-      {
-        collection: "devices",
-        owner: "integration-registry",
-        reason: "the device half of the integration-registry is deleted; the fleet is `device-manager:devices` and always was (0 rows here against 974 live devices)"
-      },
-      {
-        collection: "device_settings_kv",
-        owner: "integration-registry",
-        reason: "per-device settings of a device table that never had a row; the live per-camera store is the device-manager row plus `addon-device-settings`"
-      },
-      {
-        collection: "pipeline-analytics:track-groups",
-        owner: "pipeline-analytics",
-        reason: "the co-moving group entity is deleted (operator decision 2026-09-01, after the 2026-08-24 kill switch); nothing declares, writes or reads it"
-      },
-      {
-        collection: "pipeline-analytics:track-group-members",
-        owner: "pipeline-analytics",
-        reason: "membership rows of the deleted group entity; the track cascade that used to carry them away no longer has a group leg"
-      },
-      {
-        collection: "pipeline-analytics:summaries",
-        owner: "pipeline-analytics",
-        reason: "the session summary (proximity track grouping, D489/D490) is deleted (operator decision 2026-09-29, D680, after the 2026-09-16 switch-off); nothing declares, writes or reads it"
-      },
-      {
-        collection: "pipeline-analytics:summary-members",
-        owner: "pipeline-analytics",
-        reason: "membership rows of the deleted session summary; the track cascade no longer has a summary leg (D680)"
-      }
-    ];
-    function retiredCollectionStoreOfFile(file) {
-      return { async drop(collection) {
-        return file.dropRetiredTable(collection);
-      } };
-    }
-    async function purgeRetiredCollections(store, logger, specs = RETIRED_COLLECTIONS) {
-      const results = [];
-      for (const spec of specs) {
-        let dropped;
-        try {
-          dropped = await store.drop(spec.collection);
-        } catch (err) {
-          logger.warn("retired collection \u2014 drop failed, table left in place", { meta: {
-            addon: spec.owner,
-            collection: spec.collection,
-            error: err instanceof Error ? err.message : String(err)
-          } });
-          continue;
-        }
-        if (dropped === null) continue;
-        const result = {
-          collection: spec.collection,
-          owner: spec.owner,
-          rows: dropped.rows
-        };
-        results.push(result);
-        const line = "dropped a retired collection";
-        if (dropped.rows > 0) logger.warn(`${line} \u2014 it still held rows`, { meta: {
-          ...result,
-          reason: spec.reason
-        } });
-        else logger.info(line, { meta: {
-          ...result,
-          reason: spec.reason
-        } });
-      }
-      return results;
-    }
     var DATABASE_FILE_NAMES = {
       settings: "camstack.db",
       events: "events.db",
@@ -171028,14 +171164,13 @@ var require_sqlite_settings_addon = __commonJS({
           },
           {
             capability: require_dist10.storageAdminCapability,
-            provider: new StorageAdminProvider(settings.backend, this.ctx.logger.child("StorageAdmin"), async () => new Set((await this.ctx.api.addons.list.query()).map((addon) => addon.manifest.id)), records, async () => router.openFiles().filter((file) => file.databaseId !== "settings"))
+            provider: new StorageAdminProvider(settings.backend, this.ctx.logger.child("StorageAdmin"), records, async () => router.openFiles().filter((file) => file.databaseId !== "settings"))
           }
         ];
       }
       /**
       * Housekeeping that must happen BEFORE anything can read a file: the
-      * retired-key purge (settings only) and the retired-table purge (every
-      * open file).
+      * retired-key purge (settings file only).
       */
       async purgeBeforeServing(file) {
         if (file instanceof InlineOwnedFile && file.databaseId === "settings") try {
@@ -171043,7 +171178,6 @@ var require_sqlite_settings_addon = __commonJS({
         } catch (err) {
           this.ctx.logger.warn("Retired-key purge failed", { meta: { error: require_dist10.errMsg(err) } });
         }
-        await purgeRetiredCollections(retiredCollectionStoreOfFile(file), this.ctx.logger.child("RetiredCollections").withTags({ database: file.databaseId }));
       }
       /**
       * The engine's TTL sweep (D881): every 10 minutes, off the boot path (the
@@ -171118,7 +171252,7 @@ var require_sqlite_storage = __commonJS({
     });
     require_chunk_Cek0wNdY();
     var require_builtins_sqlite_storage_filesystem_storage_addon = require_filesystem_storage_addon();
-    var require_wal_maintenance = require_wal_maintenance_CaJjuLHq();
+    var require_wal_maintenance = require_wal_maintenance_jXcOxm2T();
     var require_builtins_sqlite_storage_sqlite_settings_addon = require_sqlite_settings_addon();
     var ConfigStore = class {
       db;
@@ -171202,7 +171336,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -175789,12 +175923,12 @@ var require_storage_orchestrator = __commonJS({
   }
 });
 
-// ../system/dist/agent-https-Dnr_nIVx.js
-var require_agent_https_Dnr_nIVx = __commonJS({
-  "../system/dist/agent-https-Dnr_nIVx.js"(exports) {
+// ../system/dist/agent-https-DhFIbEwN.js
+var require_agent_https_DhFIbEwN = __commonJS({
+  "../system/dist/agent-https-DhFIbEwN.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_x509_es = require_x509_es_C4cOo48M();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -176852,11 +176986,11 @@ var require_agent_https_Dnr_nIVx = __commonJS({
   }
 });
 
-// ../system/dist/constants-6OeJiZgi.js
-var require_constants_6OeJiZgi = __commonJS({
-  "../system/dist/constants-6OeJiZgi.js"(exports) {
+// ../system/dist/constants-5mrGZxwS.js
+var require_constants_5mrGZxwS = __commonJS({
+  "../system/dist/constants-5mrGZxwS.js"(exports) {
     "use strict";
-    var MESH_CA_KEY_REF = require_dist_Bn_RNanh().buildSecretRef({
+    var MESH_CA_KEY_REF = require_dist_D9aw_d0G().buildSecretRef({
       owner: "system",
       scope: { kind: "global" },
       fieldPath: "meshCaKey"
@@ -193953,11 +194087,11 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_safe_buffer$1 = require_safe_buffer_D3aoa_7X();
     var require_x509_es = require_x509_es_C4cOo48M();
-    var require_agent_https = require_agent_https_Dnr_nIVx();
-    var require_constants$8 = require_constants_6OeJiZgi();
+    var require_agent_https = require_agent_https_DhFIbEwN();
+    var require_constants$8 = require_constants_5mrGZxwS();
     var require_src$1 = require_src_CnAqG6EF();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -275009,7 +275143,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_formatter = require_formatter_DqAKDlvN();
     var require_log_file_read_protocol = require_log_file_read_protocol_D0WcLbIV();
     var node_path = __require("path");
@@ -282812,14 +282946,14 @@ var require_lib_8oZrELLm = __commonJS({
   }
 });
 
-// ../system/dist/hub-mdns-ciao-CTBTlia4.js
-var require_hub_mdns_ciao_CTBTlia4 = __commonJS({
-  "../system/dist/hub-mdns-ciao-CTBTlia4.js"(exports) {
+// ../system/dist/hub-mdns-ciao-CFlhVKK6.js
+var require_hub_mdns_ciao_CFlhVKK6 = __commonJS({
+  "../system/dist/hub-mdns-ciao-CFlhVKK6.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_x509_es = require_x509_es_C4cOo48M();
-    var require_agent_https = require_agent_https_Dnr_nIVx();
+    var require_agent_https = require_agent_https_DhFIbEwN();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var node_fs_promises = __require("fs/promises");
@@ -283831,12 +283965,12 @@ var require_platform_key_source_Di7HrlGR = __commonJS({
   }
 });
 
-// ../system/dist/restore-archive-DM1OBYq4.js
-var require_restore_archive_DM1OBYq4 = __commonJS({
-  "../system/dist/restore-archive-DM1OBYq4.js"(exports) {
+// ../system/dist/restore-archive-6zkRREHO.js
+var require_restore_archive_6zkRREHO = __commonJS({
+  "../system/dist/restore-archive-6zkRREHO.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     var buffer = __require("buffer");
@@ -295077,9 +295211,9 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Bn_RNanh();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
-    var require_device_ca = require_device_ca_CPTDs_d();
+    var require_device_ca = require_device_ca_B3xUzps7();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_builtins_calendars_calendars_addon = require_calendars_addon();
@@ -295088,11 +295222,9 @@ var require_dist3 = __commonJS({
     require_composer();
     var require_formatter = require_formatter_DqAKDlvN();
     var require_builtins_console_logging_index = require_console_logging();
-    var require_prefix_range = require_prefix_range_D_KueXbQ();
     var require_prefix_walk = require_prefix_walk_Dv6MLZlM();
     var require_builtins_core_blocks_core_blocks_addon = require_core_blocks_addon();
     require_core_blocks();
-    var require_retired_settings_keys = require_retired_settings_keys_D_VwZiDt();
     var require_builtins_device_manager_device_manager_addon = require_device_manager_addon();
     require_device_manager();
     var require_builtins_hub_forwarder_index = require_hub_forwarder();
@@ -295105,21 +295237,21 @@ var require_dist3 = __commonJS({
     var require_builtins_native_metrics_native_metrics_addon = require_native_metrics_addon();
     var require_builtins_device_history_device_history_addon = require_device_history_addon();
     var require_builtins_sqlite_storage_filesystem_storage_addon = require_filesystem_storage_addon();
-    var require_wal_maintenance = require_wal_maintenance_CaJjuLHq();
+    var require_wal_maintenance = require_wal_maintenance_jXcOxm2T();
     var require_builtins_sqlite_storage_sqlite_settings_addon = require_sqlite_settings_addon();
     var require_builtins_sqlite_storage_index = require_sqlite_storage();
     var require_builtins_storage_orchestrator_storage_orchestrator_addon = require_storage_orchestrator_addon();
     require_storage_orchestrator();
-    var require_agent_https = require_agent_https_Dnr_nIVx();
-    var require_constants15 = require_constants_6OeJiZgi();
+    var require_agent_https = require_agent_https_DhFIbEwN();
+    var require_constants15 = require_constants_5mrGZxwS();
     var require_builtins_system_config_system_config_addon = require_system_config_addon();
     require_system_config();
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_custom_action_registry = require_custom_action_registry_MRyes5j0();
-    var require_hub_mdns_ciao = require_hub_mdns_ciao_CTBTlia4();
+    var require_hub_mdns_ciao = require_hub_mdns_ciao_CFlhVKK6();
     var require_platform_key_source = require_platform_key_source_Di7HrlGR();
     var require_resource_monitor = require_resource_monitor_mio9dSCT();
-    var require_restore_archive = require_restore_archive_DM1OBYq4();
+    var require_restore_archive = require_restore_archive_6zkRREHO();
     var require_coral_accelerators = require_coral_accelerators_oUXmmbc2();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -295909,22 +296041,22 @@ var require_dist3 = __commonJS({
       const queuedTop = window2.queued.top.map((p) => `${p.peerId}:${kb$1(p.bytes)}`).join(",");
       return ` socketPeers=${window2.peersMeasured}/${window2.peersConnected} socketTx=${formatDirection(window2.tx)} socketRx=${formatDirection(window2.rx)}` + (top.length === 0 ? "" : ` socketTop=${top}`) + (topBytes.length === 0 ? "" : ` socketTopBytes=${topBytes}`) + ` socketQueued=${kb$1(window2.queued.totalBytes)}kB` + (window2.queued.unmeasured === 0 ? "" : ` socketQueuedUnmeasured=${window2.queued.unmeasured}`) + (queuedTop.length === 0 ? "" : ` socketQueuedTop=${queuedTop}`) + (window2.forward === void 0 ? "" : ` socketFwd=${window2.forward.raw}/${window2.forward.decoded}`) + (window2.actions === void 0 ? "" : ` socketActions=${kb$1(window2.actions.labelledBytes)}/${kb$1(window2.actions.totalBytes)}kB` + (window2.actions.top.length === 0 ? "" : ` socketTopActions=${window2.actions.top.map(formatAction).join(",")}`));
     }
-    function isRecord$7(value) {
+    function isRecord$6(value) {
       return typeof value === "object" && value !== null;
     }
     function writerSocketsOf(broker) {
-      if (!isRecord$7(broker)) return void 0;
+      if (!isRecord$6(broker)) return void 0;
       const transit = broker["transit"];
-      if (!isRecord$7(transit)) return void 0;
+      if (!isRecord$6(transit)) return void 0;
       const transporter = transit["tx"];
-      if (!isRecord$7(transporter)) return void 0;
+      if (!isRecord$6(transporter)) return void 0;
       const writer = transporter["writer"];
-      if (!isRecord$7(writer)) return void 0;
+      if (!isRecord$6(writer)) return void 0;
       const sockets = writer["sockets"];
       return sockets instanceof Map ? sockets : void 0;
     }
     function readSocket(nodeId, socket) {
-      if (typeof nodeId !== "string" || !isRecord$7(socket)) return void 0;
+      if (typeof nodeId !== "string" || !isRecord$6(socket)) return void 0;
       const queuedBytes = socket["writableLength"];
       const bytesWritten = socket["bytesWritten"];
       if (typeof queuedBytes !== "number" || typeof bytesWritten !== "number") return void 0;
@@ -299530,7 +299662,6 @@ var require_dist3 = __commonJS({
         };
       }
     };
-    var CLUSTER_NODE_HISTORY_COLLECTION = "cluster-node-history";
     var NodePackageEntrySchema = zod.z.object({
       name: zod.z.string(),
       version: zod.z.string().nullable()
@@ -299823,27 +299954,27 @@ var require_dist3 = __commonJS({
         throw new Error(`no system npm on PATH and the npm bootstrap failed \u2014 cannot install addon dependencies on this node: ${err instanceof Error ? err.message : String(err)}`, { cause: err });
       }
     }
-    function isRecord$6(value) {
+    function isRecord$5(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function isAddonConstructor(fn) {
       if (typeof fn !== "function") return false;
       const proto = fn.prototype;
-      if (!isRecord$6(proto)) return false;
+      if (!isRecord$5(proto)) return false;
       return typeof proto["initialize"] === "function";
     }
     function resolveAddonClass(mod) {
       let candidate = mod["default"];
-      if (isRecord$6(candidate) && "default" in candidate) candidate = candidate["default"];
+      if (isRecord$5(candidate) && "default" in candidate) candidate = candidate["default"];
       if (isAddonConstructor(candidate)) return candidate;
-      if (isRecord$6(candidate)) {
+      if (isRecord$5(candidate)) {
         const fn = Object.values(candidate).find(isAddonConstructor);
         if (fn) return fn;
       }
       const namedAddon = Object.values(mod).find(isAddonConstructor);
       if (namedAddon) return namedAddon;
     }
-    function isRecord$5(value) {
+    function isRecord$4(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     var PACKAGE_JSON_LOOKUP_DEPTH = 4;
@@ -299883,12 +300014,12 @@ var require_dist3 = __commonJS({
       return import(`${(0, node_url.pathToFileURL)(entryPath).href}?v=${encodeURIComponent(bust)}`);
     }
     function isAddonPackageManifest(value) {
-      if (!isRecord$5(value)) return false;
+      if (!isRecord$4(value)) return false;
       if (!Array.isArray(value.addons)) return false;
-      return value.addons.every((a) => isRecord$5(a) && typeof a.id === "string");
+      return value.addons.every((a) => isRecord$4(a) && typeof a.id === "string");
     }
     function toAddonPackageManifest(value) {
-      if (!isRecord$5(value)) return void 0;
+      if (!isRecord$4(value)) return void 0;
       if (!isAddonPackageManifest(value)) return void 0;
       return value;
     }
@@ -300045,7 +300176,7 @@ var require_dist3 = __commonJS({
         }
         if (!node_fs.existsSync(entryPath)) throw new Error(`Entry not found: ${entryPath}`);
         const modUnknown = await importAddonModuleFresh(entryPath);
-        const mod = isRecord$5(modUnknown) ? modUnknown : {};
+        const mod = isRecord$4(modUnknown) ? modUnknown : {};
         const AddonClass = resolveAddonClass(mod);
         if (!AddonClass) throw new Error(`No addon class in ${entryPath}`);
         this.addons.set(declaration.id, {
@@ -300061,7 +300192,7 @@ var require_dist3 = __commonJS({
       /** Load addon from a direct path (for development/testing) */
       async loadFromPath(addonId, modulePath, packageName, declaration, packageVersion = "0.0.0") {
         const modUnknown = await importAddonModuleFresh(modulePath);
-        const mod = isRecord$5(modUnknown) ? modUnknown : {};
+        const mod = isRecord$4(modUnknown) ? modUnknown : {};
         const AddonClass = resolveAddonClass(mod);
         if (!AddonClass) throw new Error(`Module ${modulePath} has no default export`);
         this.addons.set(addonId, {
@@ -304332,11 +304463,11 @@ var require_dist3 = __commonJS({
       await steps.bootInProcessConsumers();
       await steps.spawnIsolatedConsumers();
     }
-    function isRecord$4(value) {
+    function isRecord$3(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function asBlob(value) {
-      return isRecord$4(value) ? value : {};
+      return isRecord$3(value) ? value : {};
     }
     async function loadSystemSettingsPrefix(door, prefix, mayRead = () => true) {
       const listed = await require_prefix_walk.loadPrefixed(door, "system-settings", prefix, () => null);
@@ -306884,7 +307015,7 @@ var require_dist3 = __commonJS({
     })))(), 1);
     var { Type, Schema, FAILSAFE_SCHEMA, JSON_SCHEMA, CORE_SCHEMA, DEFAULT_SCHEMA, load: load2, loadAll, dump, YAMLException, types, safeLoad, safeLoadAll, safeDump } = import_js_yaml.default;
     import_js_yaml.default;
-    function isRecord$3(value) {
+    function isRecord$2(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     var BOOTSTRAP_SECTIONS = /* @__PURE__ */ new Set([
@@ -306961,7 +307092,7 @@ var require_dist3 = __commonJS({
         [head]: value
       };
       const existing = obj[head];
-      const child = isRecord$3(existing) ? existing : {};
+      const child = isRecord$2(existing) ? existing : {};
       return {
         ...obj,
         [head]: setNested(child, rest.join("."), value)
@@ -307170,7 +307301,7 @@ var require_dist3 = __commonJS({
         }
       }
     };
-    function isRecord$2(value) {
+    function isRecord$1(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function errorText(err) {
@@ -307535,7 +307666,7 @@ var require_dist3 = __commonJS({
         const keys = configPath.split(".");
         let current = this.bootstrapConfig;
         for (const key of keys) {
-          if (!isRecord$2(current)) return void 0;
+          if (!isRecord$1(current)) return void 0;
           current = current[key];
         }
         return current;
@@ -308304,7 +308435,7 @@ var require_dist3 = __commonJS({
         this.name = "RuntimeStateLoadError";
       }
     };
-    function isRecord$1(value) {
+    function isRecord(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function errorMessage(err) {
@@ -308330,7 +308461,7 @@ var require_dist3 = __commonJS({
       } catch (err) {
         return refuse2(errorMessage(err), err);
       }
-      if (!isRecord$1(answer)) return refuse2(`answered ${answer === null ? "null" : typeof answer}`);
+      if (!isRecord(answer)) return refuse2(`answered ${answer === null ? "null" : typeof answer}`);
       return answer;
     }
     var ACCESSORY_SPAWN_CONCURRENCY = 12;
@@ -314243,8 +314374,7 @@ var require_dist3 = __commonJS({
         }
       };
     }
-    function createRunnerAddonSettings(client, addonId, before = async () => {
-    }) {
+    function createRunnerAddonSettings(client, addonId) {
       if (client === void 0) {
         const refuse2 = async () => {
           throw new Error(`settings of "${addonId}": settings store not wired`);
@@ -314266,22 +314396,10 @@ var require_dist3 = __commonJS({
         };
       }
       const door = {
-        query: async (input) => {
-          await before();
-          return client.query.query(input);
-        },
-        get: async (input) => {
-          await before();
-          return client.get.query(input);
-        },
-        set: async (input) => {
-          await before();
-          return client.set.mutate(input);
-        },
-        transact: async (input) => {
-          await before();
-          return client.transact.mutate(input);
-        }
+        query: (input) => client.query.query(input),
+        get: (input) => client.get.query(input),
+        set: (input) => client.set.mutate(input),
+        transact: (input) => client.transact.mutate(input)
       };
       const store = require_builtins_core_blocks_core_blocks_addon.createAddonSettingsStore(door, addonId);
       const sections = createSectionsStore(door);
@@ -314327,141 +314445,14 @@ var require_dist3 = __commonJS({
         setSection: (section, patch) => sections.write(section, patch)
       };
     }
-    var AddonRefusedError = class extends Error {
-      /** Stable, greppable cause, e.g. `unmigrated-settings`. */
-      code;
-      /** What the operator does about it. */
-      remedy;
-      constructor(code, message, remedy, options) {
-        super(message, options);
-        this.name = "AddonRefusedError";
-        this.code = code;
-        this.remedy = remedy;
-      }
-    };
-    function findAddonRefusal(err) {
-      const seen = /* @__PURE__ */ new Set();
-      let current = err;
-      while (current !== null && current !== void 0 && !seen.has(current)) {
-        if (current instanceof AddonRefusedError) return current;
-        seen.add(current);
-        current = current instanceof Error ? current.cause : void 0;
-      }
-      return null;
-    }
-    var OWN_RETIRED_ROOT_KEYS = /* @__PURE__ */ new Set([
-      "recordingConfigs",
-      "recordingExports",
-      "recordingOpsLog",
-      "probeSnapshots",
-      "rtspTokens",
-      "profileMap"
-    ]);
-    function isRetiredRootKey(addonId, key) {
-      if (OWN_RETIRED_ROOT_KEYS.has(key)) return true;
-      return require_retired_settings_keys.RETIRED_SETTINGS_KEYS.some((spec) => spec.namespace === addonId && (spec.keys.includes(key) || spec.perNodeKeys.some((k) => key === k || key.startsWith(`${k}@`))));
-    }
-    var UNMIGRATED_SETTINGS_CODE = "unmigrated-settings";
-    var UNMIGRATED_SETTINGS_REMEDY = "Run scripts/hub/migrate-device-store.ts --copy --apply (D870), then restart the addon.";
-    var UnmigratedSettingsError = class extends AddonRefusedError {
-      constructor(addonId, what) {
-        super(UNMIGRATED_SETTINGS_CODE, `addon "${addonId}" refuses to start: ${what} - the settings it had are still in the per-addon tables and the standard store holds none. Run scripts/hub/migrate-device-store.ts --copy --apply (D870) before starting it.`, UNMIGRATED_SETTINGS_REMEDY);
-        this.name = "UnmigratedSettingsError";
-      }
-    };
-    async function countOf(client, input) {
-      const n = await client.count.query(input);
-      if (typeof n !== "number") throw new Error("settings store answered a non-number to a count");
-      return n;
-    }
-    var LEGACY_PAGE = 500;
-    var LEGACY_PAGE_BUDGET = 200;
-    var ID_TAIL = "\x7F";
-    function isRecord(value) {
-      return typeof value === "object" && value !== null && !Array.isArray(value);
-    }
-    async function hasMigratableDeviceRow(client, addonId) {
-      let cursor = "";
-      for (let page = 0; page < LEGACY_PAGE_BUDGET; page++) {
-        const rows = await client.query.query({
-          namespace: addonId,
-          collection: "addon-devices",
-          filter: {
-            whereBetween: { id: [cursor, ID_TAIL] },
-            orderBy: {
-              field: "id",
-              direction: "asc"
-            },
-            limit: LEGACY_PAGE
-          }
-        });
-        if (!Array.isArray(rows)) throw new Error("settings store answered a non-list to a query");
-        let lastId = cursor;
-        for (const row of rows) {
-          if (!isRecord(row) || typeof row["id"] !== "string") continue;
-          lastId = row["id"];
-          const id = Number(row["id"]);
-          const data = row["data"];
-          if (Number.isInteger(id) && id > 0 && isRecord(data) && Object.keys(data).length > 0) return true;
-        }
-        if (rows.length < LEGACY_PAGE || lastId === cursor) return false;
-        cursor = lastId;
-      }
-      throw new Error(`addon "${addonId}": more legacy blob pages than the guard will read`);
-    }
-    async function assertLegacyBlobsMigrated(client, addonId, logger) {
-      const legacyDevices = await hasMigratableDeviceRow(client, addonId);
-      const root = await client.get.query({
-        namespace: addonId,
-        collection: "addon-settings",
-        key: "root"
-      });
-      const legacySettings = isRecord(root) && Object.keys(root).some((key) => !isRetiredRootKey(addonId, key));
-      if (!legacyDevices && !legacySettings) return;
-      const rangeOf = (prefix) => {
-        const range = require_prefix_range.prefixRange(prefix);
-        if (range === null) throw new Error(`no id range for addon "${addonId}"`);
-        return { whereBetween: { id: [range.lo, range.hi] } };
-      };
-      const newDevices = await countOf(client, {
-        collection: "addon-device-settings",
-        filter: rangeOf(`${addonId}:`)
-      });
-      const newSettings = await countOf(client, {
-        collection: "addon-settings",
-        filter: rangeOf(`${addonId}.`)
-      });
-      const problems = [];
-      if (legacyDevices && newDevices === 0) problems.push("per-device blobs");
-      if (legacySettings && newSettings === 0) problems.push("an addon settings blob");
-      if (problems.length === 0) return;
-      const error = new UnmigratedSettingsError(addonId, problems.join(" and "));
-      logger.error(error.message, { meta: {
-        addonId,
-        newDevices,
-        newSettings
-      } });
-      throw error;
-    }
-    function doorOverClient(client, before = async () => {
-    }) {
+    function doorOverClient(client) {
       return {
-        query: async (input) => {
-          await before();
-          return client.query.query(input);
-        },
-        transact: async (input) => {
-          await before();
-          return client.transact.mutate(input);
-        },
-        deleteWhere: async (input) => {
-          await before();
-          return client.deleteWhere.mutate(input);
-        }
+        query: (input) => client.query.query(input),
+        transact: (input) => client.transact.mutate(input),
+        deleteWhere: (input) => client.deleteWhere.mutate(input)
       };
     }
-    function createRunnerDeviceSettings(client, addonId, before = async () => {
-    }) {
+    function createRunnerDeviceSettings(client, addonId) {
       if (client === void 0) {
         const refuse2 = () => {
           throw new Error(`device settings of "${addonId}": settings store not wired`);
@@ -314474,7 +314465,7 @@ var require_dist3 = __commonJS({
           clearDeviceStore: async () => refuse2()
         };
       }
-      const store = require_builtins_device_manager_device_manager_addon.createDeviceSettingsStore(doorOverClient(client, before), addonId);
+      const store = require_builtins_device_manager_device_manager_addon.createDeviceSettingsStore(doorOverClient(client), addonId);
       return {
         readDeviceStore: (deviceId) => require_builtins_device_manager_device_manager_addon.readDeviceOrThrow(store, deviceId),
         readDeviceStoreBatch: (ids) => store.readBatch(ids),
@@ -314676,23 +314667,9 @@ var require_dist3 = __commonJS({
         }
       };
       const deviceSettingsClient = Reflect.get(api, "settingsStore");
-      let blobsChecked = null;
-      const bootGuard = () => {
-        const client = deviceSettingsClient;
-        if (client === void 0) return Promise.resolve();
-        blobsChecked ??= assertLegacyBlobsMigrated({
-          get: { query: (input) => client.get.query(input) },
-          query: { query: (input) => client.query.query(input) },
-          count: { query: (input) => client.count.query(input) }
-        }, addonId, scopedLogger).catch((err) => {
-          blobsChecked = null;
-          throw err;
-        });
-        return blobsChecked;
-      };
       const settingsView = {
-        ...createRunnerAddonSettings(deviceSettingsClient, addonId, bootGuard),
-        ...createRunnerDeviceSettings(deviceSettingsClient, addonId, bootGuard),
+        ...createRunnerAddonSettings(deviceSettingsClient, addonId),
+        ...createRunnerDeviceSettings(deviceSettingsClient, addonId),
         async readDeviceRuntimeState(deviceId) {
           return readBlob("device-runtime-state", String(deviceId));
         },
@@ -316780,6 +316757,28 @@ var require_dist3 = __commonJS({
         }
       };
     }
+    var AddonRefusedError = class extends Error {
+      /** Stable, greppable cause, e.g. `unmigrated-settings`. */
+      code;
+      /** What the operator does about it. */
+      remedy;
+      constructor(code, message, remedy, options) {
+        super(message, options);
+        this.name = "AddonRefusedError";
+        this.code = code;
+        this.remedy = remedy;
+      }
+    };
+    function findAddonRefusal(err) {
+      const seen = /* @__PURE__ */ new Set();
+      let current = err;
+      while (current !== null && current !== void 0 && !seen.has(current)) {
+        if (current instanceof AddonRefusedError) return current;
+        seen.add(current);
+        current = current instanceof Error ? current.cause : void 0;
+      }
+      return null;
+    }
     function createScopedProcessManager(broker, addonId) {
       return {
         async spawn(config) {
@@ -317868,7 +317867,6 @@ var require_dist3 = __commonJS({
     exports.CAP_METHOD_NOT_IMPLEMENTED = CAP_METHOD_NOT_IMPLEMENTED;
     exports.CA_COMMON_NAME = require_agent_https.CA_COMMON_NAME;
     exports.CA_VALIDITY_DAYS = require_agent_https.CA_VALIDITY_DAYS;
-    exports.CLUSTER_NODE_HISTORY_COLLECTION = CLUSTER_NODE_HISTORY_COLLECTION;
     exports.CORE_CAP_SERVICE_NAME = CORE_CAP_SERVICE_NAME;
     exports.CalendarsAddon = require_builtins_calendars_calendars_addon.CalendarsAddon;
     exports.CapRouteError = CapRouteError;
@@ -318044,14 +318042,11 @@ var require_dist3 = __commonJS({
     exports.ToastService = ToastService;
     exports.UDS_NO_ROUTE_PREFIX = UDS_NO_ROUTE_PREFIX;
     exports.UNCLAIMED = UNCLAIMED;
-    exports.UNMIGRATED_SETTINGS_CODE = UNMIGRATED_SETTINGS_CODE;
-    exports.UNMIGRATED_SETTINGS_REMEDY = UNMIGRATED_SETTINGS_REMEDY;
     exports.UPLOADED_CA_FILE = require_hub_mdns_ciao.UPLOADED_CA_FILE;
     exports.USER_MANAGEMENT_INTERNAL = require_builtins_local_auth_local_auth_addon.USER_MANAGEMENT_INTERNAL;
     exports.UdsLocalTransportClient = UdsLocalTransportClient;
     exports.UdsLocalTransportServer = UdsLocalTransportServer;
     exports.UnlockTicketJtiStore = require_builtins_system_config_system_config_addon.UnlockTicketJtiStore;
-    exports.UnmigratedSettingsError = UnmigratedSettingsError;
     exports.UserManager = require_builtins_local_auth_local_auth_addon.UserManager;
     exports.WinstonDestination = require_builtins_winston_logging_index.WinstonDestination$1;
     exports.WinstonLoggingAddon = require_builtins_winston_logging_index.WinstonLoggingAddon$1;
@@ -318069,7 +318064,6 @@ var require_dist3 = __commonJS({
     exports.applyCertificateToListener = require_hub_mdns_ciao.applyCertificateToListener;
     exports.applyLanHttp = require_hub_mdns_ciao.applyLanHttp;
     exports.asBrokerLike = asBrokerLike;
-    exports.assertLegacyBlobsMigrated = assertLegacyBlobsMigrated;
     exports.attachUserManagementInternal = require_builtins_local_auth_local_auth_addon.attachUserManagementInternal;
     exports.attributeStall = require_custom_action_registry.attributeStall;
     exports.backupOrchestratorRecordKinds = require_restore_archive.backupOrchestratorRecordKinds;
@@ -318701,7 +318695,7 @@ var require_dist4 = __commonJS({
   "../types/dist/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-    var require_sleep = require_sleep_gRQc2IoX();
+    var require_sleep = require_sleep_Re8daN0Y();
     var require_event_category = require_event_category_eSqkye_K();
     var require_composition = require_composition_eoYYVfOp();
     var require_node_color2 = require_node_color();
@@ -329231,19 +329225,6 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       /** The whole declaration, secret paths and entry descriptor included (the entries service builds its handle from it). */
       declaration: require_sleep.RecordKindDeclarationSchema
     });
-    var STORAGE_ADMIN_MOVED_COLLECTIONS = [
-      "stream-broker:probe-snapshots",
-      "stream-broker:profile-map",
-      "stream-broker:rtsp-tokens",
-      "notification-center:device-mutes",
-      "recorder:recording-configs",
-      "pipeline-orchestrator:device-features"
-    ];
-    var STORAGE_ADMIN_SCOPED_BASES = [
-      "addon-settings",
-      "addon-devices",
-      "sections"
-    ];
     var storageAdminCapability = {
       name: "storage-admin",
       scope: "system",
@@ -329255,26 +329236,6 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         * optionally only those owned by `ownerPrefix`. Reads only.
         */
         listTables: require_sleep.method(zod.z.object({ ownerPrefix: zod.z.string().min(1).optional() }), zod.z.object({ tables: zod.z.array(StorageTableSchema) }), { auth: "admin" }),
-        /**
-        * Drop one table. REFUSES when an addon declared it since the engine
-        * started (a running addon still owns it), when it is an engine or
-        * canonical table, when it does not exist, or when its row count is not
-        * `expectRows` - the caller states what it believes it is deleting. The
-        * engine also refuses anything but `<owner>:(addon-settings|addon-devices|
-        * sections)`, the retired collections by name, and tables of owners that
-        * are not installed (and refuses when it cannot read the installed list).
-        * Removed with the D870 migration script once the last hub ran it.
-        */
-        dropCollection: require_sleep.method(zod.z.object({
-          collection: zod.z.string().min(1),
-          expectRows: zod.z.number().int().nonnegative()
-        }), zod.z.object({
-          dropped: zod.z.literal(true),
-          rows: zod.z.number().int().nonnegative()
-        }), {
-          kind: "mutation",
-          auth: "admin"
-        }),
         /** Every record kind of both files with rows, a size estimate, class and retention (D881). */
         listKinds: require_sleep.method(zod.z.object({
           owner: zod.z.string().min(1).optional(),
@@ -356575,6 +356536,15 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * Replaces `zoneCrop`.
       */
       showTriggerZone: zod.z.boolean().optional(),
+      /**
+      * Draw the SUBJECT'S PATH on the picture — a line in the subject's colour
+      * through the track's positions up to the frame shown, the same path the
+      * debug views draw (`buildSubjectPath`, D903). Every picture mode a subject
+      * is drawn on: a `crop` maps the path into the crop and clips it. Valid only
+      * on a rule whose subject is a tracked object (refused on a sound rule);
+      * dropped on `image: 'none'`. Absent = off.
+      */
+      showSubjectPath: zod.z.boolean().optional(),
       /** @deprecated D897 — accepted from an editor that predates `image`, folded into it on save. */
       attach: zod.z.enum([
         "best",
@@ -390230,12 +390200,6 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
-      "storageAdmin.dropCollection": {
-        capName: "storage-admin",
-        capScope: "system",
-        addonId: null,
-        access: "delete"
-      },
       "storageAdmin.listKinds": {
         capName: "storage-admin",
         capScope: "system",
@@ -400578,15 +400542,22 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       return clampToKind(legacyImageMode(media), kind);
     }
     function normalizeNcMediaPolicy(media, rule) {
-      const image = resolveNcMediaImage(media, ruleKindOf(rule));
-      const { attach: _attach, frame: _frame, zoneCrop, showTriggerZone, image: _image, ...rest } = media;
+      const kind = ruleKindOf(rule);
+      const image = resolveNcMediaImage(media, kind);
+      const { attach: _attach, frame: _frame, zoneCrop, showTriggerZone, showSubjectPath, image: _image, ...rest } = media;
       const drawable = (showTriggerZone === true || media.image === void 0 && zoneCrop === true) && image !== "crop" && image !== "none" && ruleTriggerZoneIds(rule.conditions).length > 0;
+      const pathDrawable = showSubjectPath === true && image !== "none" && subjectHasPath(kind);
       return {
         ...rest,
         image,
-        ...drawable ? { showTriggerZone: true } : {}
+        ...drawable ? { showTriggerZone: true } : {},
+        ...pathDrawable ? { showSubjectPath: true } : {}
       };
     }
+    function subjectHasPath(kind) {
+      const spec = ruleKindSpec(kind);
+      return spec.carriesMedia && spec.carriesSubjectCrop;
+    }
     function ncMediaPolicyError(media, rule) {
       const kind = ruleKindOf(rule);
       if (media.image !== void 0) {
@@ -400594,6 +400565,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         if (offered.length > 0 && !offered.includes(media.image)) return `media.image '${media.image}' is not available for a ${kind} rule (offered: ${offered.join(", ")})`;
       }
       if (media.showTriggerZone === true && ruleTriggerZoneIds(rule.conditions).length === 0) return "media.showTriggerZone needs a rule triggered by a zone (a zones condition or an occupancy zone)";
+      if (media.showSubjectPath === true && !subjectHasPath(kind)) return `media.showSubjectPath needs a rule whose subject is a tracked object (not a ${kind} rule)`;
       return null;
     }
     var WEEKDAY_TO_DAY = {
@@ -400651,17 +400623,181 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       if (schedule === void 0) return true;
       const { day, minute } = localDayMinute(atMs, schedule.timezone);
       const prevDay = (day + 6) % 7;
-      let inside = false;
+      let inside2 = false;
       for (const w of schedule.windows) if (w.startMinute <= w.endMinute) {
         if (w.days.includes(day) && minute >= w.startMinute && minute < w.endMinute) {
-          inside = true;
+          inside2 = true;
           break;
         }
       } else if (w.days.includes(day) && minute >= w.startMinute || w.days.includes(prevDay) && minute < w.endMinute) {
-        inside = true;
+        inside2 = true;
         break;
       }
-      return schedule.invert === true ? !inside : inside;
+      return schedule.invert === true ? !inside2 : inside2;
+    }
+    var SUBJECT_PATH_FULL_FRAME_COVERAGE = 0.85;
+    var SUBJECT_PATH_DWELL_EPS = 5e-3;
+    var SUBJECT_PATH_MAX_POINTS = 120;
+    var clamp01 = (n) => n < 0 ? 0 : n > 1 ? 1 : n;
+    function subjectPathSampleFromBox(bbox, timestamp) {
+      return {
+        x: bbox.x + bbox.w / 2,
+        y: bbox.y + bbox.h / 2,
+        w: bbox.w,
+        h: bbox.h,
+        ...timestamp !== void 0 ? { timestamp } : {}
+      };
+    }
+    function isPlaceholder(s) {
+      return s.w !== void 0 && s.h !== void 0 && s.w >= 0.85 && s.h >= 0.85;
+    }
+    function downsample(xs, max) {
+      if (xs.length <= max || max < 2) return xs;
+      const step = (xs.length - 1) / (max - 1);
+      const out = [];
+      for (let i = 0; i < max - 1; i++) {
+        const x = xs[Math.round(i * step)];
+        if (x !== void 0) out.push(x);
+      }
+      const last = xs[xs.length - 1];
+      if (last !== void 0) out.push(last);
+      return out;
+    }
+    function isFiniteSample(s) {
+      return Number.isFinite(s.x) && Number.isFinite(s.y);
+    }
+    function buildSubjectPath(samples, opts) {
+      const until = opts?.untilTimestamp;
+      const nodes = [];
+      let unlocalized = 0;
+      let tail = null;
+      for (let index = 0; index < samples.length; index++) {
+        const s = samples[index];
+        if (s === void 0 || !isFiniteSample(s)) continue;
+        if (until !== void 0 && s.timestamp !== void 0 && s.timestamp > until) continue;
+        if (isPlaceholder(s)) {
+          unlocalized += 1;
+          continue;
+        }
+        const ts = s.timestamp !== void 0 && Number.isFinite(s.timestamp) ? s.timestamp : index;
+        const x = clamp01(s.x);
+        const y = clamp01(s.y);
+        const prev = nodes[nodes.length - 1];
+        if (prev !== void 0 && Math.hypot(x - prev.x, y - prev.y) < 5e-3) {
+          nodes[nodes.length - 1] = {
+            ...prev,
+            samples: prev.samples + 1,
+            lastTs: Math.max(prev.lastTs, ts)
+          };
+          tail = {
+            x,
+            y,
+            samples: 1,
+            firstTs: ts,
+            lastTs: ts
+          };
+          continue;
+        }
+        tail = null;
+        nodes.push({
+          x,
+          y,
+          samples: 1,
+          firstTs: ts,
+          lastTs: ts
+        });
+      }
+      const end = nodes[nodes.length - 1];
+      if (tail !== null && end !== void 0 && end.samples > 1 && (tail.x !== end.x || tail.y !== end.y)) {
+        nodes[nodes.length - 1] = {
+          ...end,
+          samples: end.samples - 1
+        };
+        nodes.push(tail);
+      }
+      return {
+        nodes: downsample(nodes, opts?.maxPoints ?? 120),
+        unlocalized
+      };
+    }
+    function isDrawableSubjectPath(path) {
+      return path.nodes.length >= 2;
+    }
+    function inside(p) {
+      return p.x >= 0 && p.x <= 1 && p.y >= 0 && p.y <= 1;
+    }
+    function clipSegment(a, b) {
+      const dx = b.x - a.x;
+      const dy = b.y - a.y;
+      let t0 = 0;
+      let t1 = 1;
+      const edges = [
+        [-dx, a.x],
+        [dx, 1 - a.x],
+        [-dy, a.y],
+        [dy, 1 - a.y]
+      ];
+      for (const [p, q] of edges) {
+        if (p === 0) {
+          if (q < 0) return null;
+          continue;
+        }
+        const r = q / p;
+        if (p < 0) {
+          if (r > t1) return null;
+          if (r > t0) t0 = r;
+        } else {
+          if (r < t0) return null;
+          if (r < t1) t1 = r;
+        }
+      }
+      return [{
+        x: a.x + t0 * dx,
+        y: a.y + t0 * dy
+      }, {
+        x: a.x + t1 * dx,
+        y: a.y + t1 * dy
+      }];
+    }
+    function samePoint(a, b) {
+      return Math.abs(a.x - b.x) < 1e-9 && Math.abs(a.y - b.y) < 1e-9;
+    }
+    function projectSubjectPath(points, view) {
+      if (points.length < 2 || !(view.w > 0) || !(view.h > 0)) return [];
+      const local = points.map((p) => ({
+        x: (p.x - view.x) / view.w,
+        y: (p.y - view.y) / view.h
+      }));
+      const runs = [];
+      let run = [];
+      for (let i = 1; i < local.length; i++) {
+        const a = local[i - 1];
+        const b = local[i];
+        if (a === void 0 || b === void 0) continue;
+        const seg = clipSegment(a, b);
+        if (seg === null) {
+          if (run.length >= 2) runs.push(run);
+          run = [];
+          continue;
+        }
+        const [from2, to] = seg;
+        const last = run[run.length - 1];
+        if (last === void 0 || !samePoint(last, from2)) {
+          if (run.length >= 2) runs.push(run);
+          run = [from2];
+        }
+        run.push(to);
+        if (!inside(b)) {
+          if (run.length >= 2) runs.push(run);
+          run = [];
+        }
+      }
+      if (run.length >= 2) runs.push(run);
+      return runs;
+    }
+    function subjectPathSvgPoints(run, width, height) {
+      const fmt = (v) => String(Math.round(v * 100) / 100);
+      return run.map((p) => `${fmt(p.x * width)},${fmt(p.y * height)}`).join(" ");
     }
     var ARMED_WORD_PREFIX = "armed_";
     var ALARM_PANEL_CAP = "alarm-panel";
@@ -406102,14 +406238,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     }
     function pointInPolygon(point, polygon) {
       if (polygon.length < 3) return false;
-      let inside = false;
+      let inside2 = false;
       const { x, y } = point;
       for (let i = 0, j2 = polygon.length - 1; i < polygon.length; j2 = i++) {
         const a = polygon[i];
         const b = polygon[j2];
-        if (a.y > y !== b.y > y && x < (b.x - a.x) * (y - a.y) / (b.y - a.y || Number.EPSILON) + a.x) inside = !inside;
+        if (a.y > y !== b.y > y && x < (b.x - a.x) * (y - a.y) / (b.y - a.y || Number.EPSILON) + a.x) inside2 = !inside2;
       }
-      return inside;
+      return inside2;
     }
     function bindAddonActions(api, addonId, catalog) {
       const out = {};
@@ -408042,12 +408178,13 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.STATE_LABEL_KEYS = STATE_LABEL_KEYS;
     exports.STATIONARY_OVERLAY_STYLE = STATIONARY_OVERLAY_STYLE;
     exports.STORAGE_ACCESS_FALLBACK = STORAGE_ACCESS_FALLBACK;
-    exports.STORAGE_ADMIN_MOVED_COLLECTIONS = STORAGE_ADMIN_MOVED_COLLECTIONS;
-    exports.STORAGE_ADMIN_SCOPED_BASES = STORAGE_ADMIN_SCOPED_BASES;
     exports.STORAGE_BYTES_PER_GB = STORAGE_BYTES_PER_GB;
     exports.STORAGE_LOCATION_MODES = STORAGE_LOCATION_MODES;
     exports.STREAM_PROFILE_META = STREAM_PROFILE_META;
     exports.STREAM_QUALITY_LABELS = STREAM_QUALITY_LABELS;
+    exports.SUBJECT_PATH_DWELL_EPS = SUBJECT_PATH_DWELL_EPS;
+    exports.SUBJECT_PATH_FULL_FRAME_COVERAGE = SUBJECT_PATH_FULL_FRAME_COVERAGE;
+    exports.SUBJECT_PATH_MAX_POINTS = SUBJECT_PATH_MAX_POINTS;
     exports.SUB_DETECTION_TYPES = SUB_DETECTION_TYPES;
     exports.SYSTEM_CAP_NAMES = SYSTEM_CAP_NAMES;
     exports.SYSTEM_SCOPE_DEVICE_METHODS = SYSTEM_SCOPE_DEVICE_METHODS;
@@ -408439,6 +408576,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.buildRoleScopes = buildRoleScopes;
     exports.buildSecretRef = require_sleep.buildSecretRef;
     exports.buildStreamParamsConfigSchema = buildStreamParamsConfigSchema;
+    exports.buildSubjectPath = buildSubjectPath;
     exports.buildVideoArgs = require_composition.buildVideoArgs;
     exports.buildViewerLink = buildViewerLink;
     exports.builtCapabilityBlockers = builtCapabilityBlockers;
@@ -408760,6 +408898,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.isDeviceScopedCap = require_sleep.isDeviceScopedCap;
     exports.isDoActionActuatable = isDoActionActuatable;
     exports.isDoPickerDeviceType = isDoPickerDeviceType;
+    exports.isDrawableSubjectPath = isDrawableSubjectPath;
     exports.isEmbeddingModelFailed = isEmbeddingModelFailed;
     exports.isEvent = require_sleep.isEvent;
     exports.isEventKindLabelKey = isEventKindLabelKey;
@@ -408973,6 +409112,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.principalMayReachAddon = principalMayReachAddon;
     exports.privacyMaskCapability = privacyMaskCapability;
     exports.procedureAuthKey = procedureAuthKey;
+    exports.projectSubjectPath = projectSubjectPath;
     exports.providerMotionEvent = providerMotionEvent;
     exports.ptzAutotrackCapability = ptzAutotrackCapability;
     exports.ptzCapability = ptzCapability;
@@ -409152,6 +409292,9 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.stripRetiredBandPreBufferSec = stripRetiredBandPreBufferSec;
     exports.strippedOfLegacyReadOnly = strippedOfLegacyReadOnly;
     exports.subKindsOf = subKindsOf;
+    exports.subjectHasPath = subjectHasPath;
+    exports.subjectPathSampleFromBox = subjectPathSampleFromBox;
+    exports.subjectPathSvgPoints = subjectPathSvgPoints;
     exports.summarisePrivacyAudio = summarisePrivacyAudio;
     exports.summarizeEffectiveScope = summarizeEffectiveScope;
     exports.summarizeReview = summarizeReview;
@@ -590921,10 +591064,6 @@ var require_addon_registry_service = __commonJS({
       plannedRunnerIds() {
         return [...this.buildAddonGroupPlan([...this.addonEntries.keys()]).keys()];
       }
-      /** The forked addon ids (the ones whose Init the D870 guard gates). */
-      forkedAddonIds() {
-        return [...this.buildAddonGroupPlan([...this.addonEntries.keys()]).values()].flatMap((roster) => roster.map((r) => r.addonId));
-      }
       /**
        * Snapshot of the live runner subprocesses (`$process.list`), reduced to the
        * `{ runnerId, addonIds }` shape the convergence planner needs. Returns `[]`
@@ -595515,7 +595654,6 @@ var require_cluster_node_history_store = __commonJS({
       lastActive: zod_1.z.number(),
       descriptor: DescriptorSchema
     });
-    var COLLECTION = "cluster-node-history";
     var LAST_ACTIVE_HEARTBEAT_MS = 5 * 6e4;
     function descriptorsEqual(a, b) {
       return a.id === b.id && a.name === b.name && a.hostname === b.hostname && a.platform === b.platform && a.arch === b.arch && a.cpuModel === b.cpuModel && a.cpuCores === b.cpuCores && a.memoryMB === b.memoryMB && a.isHub === b.isHub && sameStrings(a.engines, b.engines) && sameStrings(a.localIps, b.localIps) && sameStrings(a.addonIds, b.addonIds) && samePackages(a.packages, b.packages);
@@ -595529,12 +595667,9 @@ var require_cluster_node_history_store = __commonJS({
       return a.length === b.length && a.every((p, i) => p.name === b[i]?.name && p.version === b[i]?.version);
     }
     var ClusterNodeHistoryStore = class _ClusterNodeHistoryStore {
-      resolveSettingsStore;
       logger;
-      declared = false;
       resolveKind;
-      constructor(resolveSettingsStore, logger, resolveKind = () => null) {
-        this.resolveSettingsStore = resolveSettingsStore;
+      constructor(logger, resolveKind = () => null) {
         this.logger = logger;
         this.resolveKind = resolveKind;
       }
@@ -595542,37 +595677,6 @@ var require_cluster_node_history_store = __commonJS({
       bindRecordsKind(resolver) {
         this.resolveKind = resolver;
       }
-      /**
-       * Idempotently declare the typed collection. Returns the resolved provider
-       * or null if the settings-store isn't available yet (early boot / hub
-       * unreachable) — callers treat null as "skip, best-effort".
-       */
-      async ensureDeclared() {
-        if (this.resolveKind() !== null)
-          return this.resolveSettingsStore();
-        const store = this.resolveSettingsStore();
-        if (!store)
-          return null;
-        if (this.declared)
-          return store;
-        try {
-          await store.declareCollection({
-            collection: COLLECTION,
-            columns: [
-              { name: "id", type: "TEXT", primaryKey: true, notNull: true },
-              { name: "lastActive", type: "INTEGER", notNull: true },
-              { name: "descriptor", type: "JSON", notNull: true }
-            ]
-          });
-          this.declared = true;
-          return store;
-        } catch (err) {
-          this.logger.warn("declareCollection failed (best-effort)", {
-            meta: { error: (0, types_1.errMsg)(err) }
-          });
-          return null;
-        }
-      }
       /**
        * Upsert a node's descriptor + addon roster while it is ONLINE, stamping
        * `lastActive = Date.now()`. Called on each `listNodes()` refresh for every
@@ -595592,16 +595696,16 @@ var require_cluster_node_history_store = __commonJS({
        * `$node.disconnected`, and buys 288 writes/day/node instead of 2,880.
        */
       async snapshot(descriptor) {
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
           return;
         try {
-          const existing = await this.readStored(descriptor.id);
+          const existing = await this.readStored(kind, descriptor.id);
           const packages = descriptor.packages ?? existing?.descriptor.packages;
           const next = packages === void 0 ? descriptor : { ...descriptor, packages };
           if (existing !== null && !this.worthWriting(existing, next))
             return;
-          await this.writeStored(descriptor.id, Date.now(), next);
+          await this.writeStored(kind, descriptor.id, Date.now(), next);
         } catch (err) {
           this.logger.warn("snapshot upsert failed (best-effort)", {
             tags: { nodeId: descriptor.id },
@@ -595620,47 +595724,21 @@ var require_cluster_node_history_store = __commonJS({
         return !descriptorsEqual(existing.descriptor, next);
       }
       /** Read one node's row, validated. `null` when absent or malformed. */
-      async readStored(nodeId) {
-        const kind = this.resolveKind();
-        if (kind !== null) {
-          const row = await kind.get(nodeId);
-          if (row === null)
-            return null;
-          const parsed = RowDataSchema.safeParse({
-            lastActive: row.at ?? 0,
-            descriptor: row.data.descriptor
-          });
-          return parsed.success ? parsed.data : null;
-        }
-        const store = this.resolveSettingsStore();
-        if (!store)
-          return null;
-        return this.readRowLegacy(store, nodeId);
-      }
-      async readRowLegacy(store, nodeId) {
-        const raw = await store.get({ collection: COLLECTION, key: nodeId });
-        if (raw === null || raw === void 0)
+      async readStored(kind, nodeId) {
+        const row = await kind.get(nodeId);
+        if (row === null)
           return null;
-        const parsed = RowDataSchema.safeParse(raw);
+        const parsed = RowDataSchema.safeParse({
+          lastActive: row.at ?? 0,
+          descriptor: row.data.descriptor
+        });
         return parsed.success ? parsed.data : null;
       }
-      async writeStored(nodeId, lastActive, descriptor) {
-        const kind = this.resolveKind();
-        if (kind !== null) {
-          const body = system_1.ClusterNodeHistoryBodySchema.safeParse({ descriptor });
-          if (!body.success)
-            return;
-          await kind.put({ id: nodeId, at: lastActive, data: body.data });
-          return;
-        }
-        const store = this.resolveSettingsStore();
-        if (!store)
+      async writeStored(kind, nodeId, lastActive, descriptor) {
+        const body = system_1.ClusterNodeHistoryBodySchema.safeParse({ descriptor });
+        if (!body.success)
           return;
-        await store.set({
-          collection: COLLECTION,
-          key: nodeId,
-          value: { lastActive, descriptor }
-        });
+        await kind.put({ id: nodeId, at: lastActive, data: body.data });
       }
       /** A placeholder descriptor for a node the topology pass has not seen yet. */
       static placeholderDescriptor(nodeId) {
@@ -595685,11 +595763,11 @@ var require_cluster_node_history_store = __commonJS({
        * nothing is delivered rather than something guessed.
        */
       async getPackages(nodeId) {
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
           return [];
         try {
-          return (await this.readStored(nodeId))?.descriptor.packages ?? [];
+          return (await this.readStored(kind, nodeId))?.descriptor.packages ?? [];
         } catch (err) {
           this.logger.warn("getPackages failed (best-effort)", {
             tags: { nodeId },
@@ -595709,11 +595787,11 @@ var require_cluster_node_history_store = __commonJS({
       async recordPackages(nodeId, packages) {
         if (packages.length === 0)
           return;
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
           return;
         try {
-          const existing = await this.readStored(nodeId);
+          const existing = await this.readStored(kind, nodeId);
           const merged = new Map((existing?.descriptor.packages ?? []).map((p) => [p.name, p]));
           for (const entry of packages)
             merged.set(entry.name, entry);
@@ -595721,7 +595799,7 @@ var require_cluster_node_history_store = __commonJS({
             ...existing?.descriptor ?? _ClusterNodeHistoryStore.placeholderDescriptor(nodeId),
             packages: [...merged.values()]
           };
-          await this.writeStored(nodeId, existing?.lastActive ?? Date.now(), descriptor);
+          await this.writeStored(kind, nodeId, existing?.lastActive ?? Date.now(), descriptor);
         } catch (err) {
           this.logger.warn("recordPackages failed (best-effort)", {
             tags: { nodeId },
@@ -595737,11 +595815,11 @@ var require_cluster_node_history_store = __commonJS({
       async prunePackages(nodeId, names) {
         if (names.length === 0)
           return;
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
           return;
         try {
-          const existing = await this.readStored(nodeId);
+          const existing = await this.readStored(kind, nodeId);
           if (existing === null)
             return;
           const current = existing.descriptor.packages;
@@ -595751,7 +595829,7 @@ var require_cluster_node_history_store = __commonJS({
           const remaining = current.filter((p) => !drop.has(p.name));
           if (remaining.length === current.length)
             return;
-          await this.writeStored(nodeId, existing.lastActive, {
+          await this.writeStored(kind, nodeId, existing.lastActive, {
             ...existing.descriptor,
             packages: remaining
           });
@@ -595772,27 +595850,14 @@ var require_cluster_node_history_store = __commonJS({
        * time. A no-op if the node was never snapshotted (nothing to update).
        */
       async touch(nodeId) {
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
           return;
         try {
-          const existing = await this.readStored(nodeId);
+          const existing = await this.readStored(kind, nodeId);
           if (existing === null)
             return;
-          const kind = this.resolveKind();
-          if (kind !== null) {
-            await kind.put({
-              id: nodeId,
-              at: Date.now(),
-              data: { descriptor: existing.descriptor }
-            });
-            return;
-          }
-          await store.update({
-            collection: COLLECTION,
-            id: nodeId,
-            data: { lastActive: Date.now() }
-          });
+          await this.writeStored(kind, nodeId, Date.now(), existing.descriptor);
         } catch (err) {
           this.logger.warn("touch failed (best-effort)", {
             tags: { nodeId },
@@ -595806,24 +595871,20 @@ var require_cluster_node_history_store = __commonJS({
       }
       /**
        * Read the full persisted history, validated, or `null` when the store did
-       * not ANSWER (unavailable, or the query threw). A caller that must not claim
+       * not ANSWER (the kind is not bound yet, or the read threw). A caller that must not claim
        * a node absent from an unanswered read (D315) uses this; `getAll` folds the
        * `null` into `[]` for the callers that only render what exists. Malformed
        * rows are dropped (and logged) — the rest of the answer still stands.
        */
       async tryGetAll() {
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
           return null;
         try {
-          const kind = this.resolveKind();
           const result = [];
-          const rows = kind !== null ? (await (0, system_1.readAllRows)(kind)).map((row) => ({
+          const rows = (await (0, system_1.readAllRows)(kind)).map((row) => ({
             id: row.id,
             data: { lastActive: row.at ?? 0, descriptor: row.data.descriptor }
-          })) : (await store.query({ collection: COLLECTION })).map((row) => ({
-            id: row.id,
-            data: row.data
           }));
           for (const row of rows) {
             const parsed = RowDataSchema.safeParse(row.data);
@@ -595850,17 +595911,12 @@ var require_cluster_node_history_store = __commonJS({
        * 2026-09-01 all three reached the UI as `{"success": true}`.
        */
       async forget(nodeId) {
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
           return "store-unavailable";
         try {
-          const existed = await this.readStored(nodeId) !== null;
-          const kind = this.resolveKind();
-          if (kind !== null) {
-            await kind.delete(nodeId);
-          } else {
-            await store.delete({ collection: COLLECTION, key: nodeId });
-          }
+          const existed = await this.readStored(kind, nodeId) !== null;
+          await kind.delete(nodeId);
           if (!existed) {
             this.logger.info("cluster node had no history row to forget", { tags: { nodeId } });
             return "not-found";
@@ -595997,52 +596053,6 @@ var require_toast_wrapper_service = __commonJS({
   }
 });
 
-// ../../server/backend/dist/core/runner-health/update-preflight.js
-var require_update_preflight = __commonJS({
-  "../../server/backend/dist/core/runner-health/update-preflight.js"(exports) {
-    "use strict";
-    Object.defineProperty(exports, "__esModule", { value: true });
-    exports.LEGACY_BLOB_GUARD_SINCE = void 0;
-    exports.buildUpdatePreflight = buildUpdatePreflight;
-    exports.legacyGuardClientOf = legacyGuardClientOf;
-    var system_1 = require_dist3();
-    var index_js_1 = require_server_root();
-    exports.LEGACY_BLOB_GUARD_SINCE = "1.2.585";
-    function buildUpdatePreflight(deps) {
-      return async (targetVersion) => {
-        if ((0, index_js_1.compareSemver)(targetVersion, exports.LEGACY_BLOB_GUARD_SINCE) < 0)
-          return [];
-        const store = deps.store();
-        if (store === null) {
-          throw new Error("the settings store is not available to pre-check the update");
-        }
-        const blockers = [];
-        for (const addonId of deps.forkedAddonIds()) {
-          try {
-            await (0, system_1.assertLegacyBlobsMigrated)(store, addonId, deps.logger);
-          } catch (err) {
-            if (!(err instanceof system_1.UnmigratedSettingsError))
-              throw err;
-            blockers.push({
-              addonId,
-              reason: err.message,
-              remedy: system_1.UNMIGRATED_SETTINGS_REMEDY
-            });
-          }
-        }
-        return blockers;
-      };
-    }
-    function legacyGuardClientOf(store) {
-      return {
-        query: { query: (input) => store.query(input) },
-        get: { query: (input) => store.get(input) },
-        count: { query: (input) => store.count(input) }
-      };
-    }
-  }
-});
-
 // ../../server/backend/dist/core/topology/topology-emitter.service.js
 var require_topology_emitter_service = __commonJS({
   "../../server/backend/dist/core/topology/topology-emitter.service.js"(exports) {
@@ -596272,7 +596282,6 @@ var require_manual_boot = __commonJS({
     var repl_engine_service_1 = require_repl_engine_service();
     var server_update_service_1 = require_server_update_service();
     var runner_boot_check_1 = require_runner_boot_check();
-    var update_preflight_1 = require_update_preflight();
     var storage_service_1 = require_storage_service();
     var stream_probe_service_1 = require_stream_probe_service();
     var topology_emitter_service_1 = require_topology_emitter_service();
@@ -596326,7 +596335,7 @@ var require_manual_boot = __commonJS({
       const addonRegistryService = new addon_registry_service_1.AddonRegistryService(loggingService, eventBusService, configService, storageService, capabilityService, moleculerService, streamProbeService);
       agentRegistryService.setAddonRegistry(addonRegistryService);
       agentRegistryService.setLogger(loggingService.createLogger("ClusterNodes"));
-      const clusterNodeHistoryStore = new cluster_node_history_store_1.ClusterNodeHistoryStore(() => capabilityService.getRegistry()?.getSingleton("settings-store") ?? null, loggingService.createLogger("cluster-node-history"));
+      const clusterNodeHistoryStore = new cluster_node_history_store_1.ClusterNodeHistoryStore(loggingService.createLogger("cluster-node-history"));
       agentRegistryService.setClusterNodeHistoryStore(clusterNodeHistoryStore);
       addonRegistryService.setClusterNodeHistoryStore(clusterNodeHistoryStore);
       const addonWidgetsService = new addon_widgets_service_1.AddonWidgetsService(loggingService, capabilityService, addonRegistryService);
@@ -596412,16 +596421,7 @@ var require_manual_boot = __commonJS({
           });
         }
       });
-      const settingsStoreOrNull = () => capabilityService.getRegistry()?.getSingleton("settings-store") ?? null;
       const serverUpdateService = new server_update_service_1.ServerUpdateService({
-        updatePreflight: (0, update_preflight_1.buildUpdatePreflight)({
-          logger: loggingService.createLogger("UpdatePreflight"),
-          forkedAddonIds: () => addonRegistryService.forkedAddonIds(),
-          store: () => {
-            const store = settingsStoreOrNull();
-            return store === null ? null : (0, update_preflight_1.legacyGuardClientOf)(store);
-          }
-        }),
         runnerBootCheck: () => hubRunnerBootCheck.current(),
         logger: loggingService.createLogger("ServerUpdate"),
         restartServer: (requestedBy, update) => addonPackageService.restartServer(requestedBy, update),