camstack 1.2.199 → 1.2.200

package/dist/{launcher-35ZYSID7.js → launcher-SOSAKLLX.js}

@@ -24024,9 +24024,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-Ct-4tTeX.js
-var require_dist_Ct_4tTeX = __commonJS({
-  "../system/dist/dist-Ct-4tTeX.js"(exports) {
+// ../system/dist/dist-D9aw_d0G.js
+var require_dist_D9aw_d0G = __commonJS({
+  "../system/dist/dist-D9aw_d0G.js"(exports) {
     "use strict";
     var zod = require_zod();
     __require("crypto");
@@ -24239,21 +24239,21 @@ var require_dist_Ct_4tTeX = __commonJS({
       for (const section of sectionsOf(schema)) for (const field of fieldsOf(section)) walkField(field, keys);
       return keys;
     }
-    function isRecord$6(value) {
+    function isRecord$7(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function sectionsOf(schema) {
-      if (!isRecord$6(schema)) return [];
+      if (!isRecord$7(schema)) return [];
       const sections = schema["sections"];
       return Array.isArray(sections) ? sections : [];
     }
     function fieldsOf(node) {
-      if (!isRecord$6(node)) return [];
+      if (!isRecord$7(node)) return [];
       const fields = node["fields"];
       return Array.isArray(fields) ? fields : [];
     }
     function walkField(field, out) {
-      if (!isRecord$6(field)) return;
+      if (!isRecord$7(field)) return;
       const type = field["type"];
       const key = field["key"];
       if ((type === "password" || field["secret"] === true) && typeof key === "string" && key.length > 0) out.add(key);
@@ -24269,7 +24269,7 @@ var require_dist_Ct_4tTeX = __commonJS({
     }
     var SECRET_CLEAR = { $secretClear: true };
     var LEGACY_DEVICE_REDACTION = "***";
-    function isRecord$5(value) {
+    function isRecord$6(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function makeSecretMarker(ref) {
@@ -24279,15 +24279,15 @@ var require_dist_Ct_4tTeX = __commonJS({
       };
     }
     function isSecretMarker(value) {
-      if (!isRecord$5(value)) return false;
+      if (!isRecord$6(value)) return false;
       const ref = value["$secret"];
       return typeof ref === "string" && ref.length > 0;
     }
     function isSecretMarkerLike(value) {
-      return isRecord$5(value) && Object.prototype.hasOwnProperty.call(value, "$secret");
+      return isRecord$6(value) && Object.prototype.hasOwnProperty.call(value, "$secret");
     }
     function isSecretClear(value) {
-      return isRecord$5(value) && value["$secretClear"] === true;
+      return isRecord$6(value) && value["$secretClear"] === true;
     }
     function toSecretFieldView(stored) {
       if (isSecretMarker(stored)) return {
@@ -24814,7 +24814,7 @@ var require_dist_Ct_4tTeX = __commonJS({
       }
     };
     var KEEP = { kind: "keep" };
-    function isRecord$4(value) {
+    function isRecord$5(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function defaultMintId() {
@@ -24826,7 +24826,7 @@ var require_dist_Ct_4tTeX = __commonJS({
         return out;
       }
       if (Array.isArray(value)) for (const item of value) collectSecretMarkerRefs(item, out);
-      else if (isRecord$4(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
+      else if (isRecord$5(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
       return out;
     }
     async function storedValueEquals(secrets, marker, candidate) {
@@ -24880,7 +24880,7 @@ var require_dist_Ct_4tTeX = __commonJS({
       return null;
     }
     async function writeArray(ctx, node, incoming, stored, fieldPath) {
-      const storedRows = Array.isArray(stored) ? stored.filter(isRecord$4) : [];
+      const storedRows = Array.isArray(stored) ? stored.filter(isRecord$5) : [];
       if (!Array.isArray(incoming)) {
         ctx.deletes.push(...collectSecretMarkerRefs(storedRows));
         return {
@@ -24896,7 +24896,7 @@ var require_dist_Ct_4tTeX = __commonJS({
       const kept = /* @__PURE__ */ new Set();
       const rows = [];
       for (const row of incoming) {
-        if (!isRecord$4(row)) {
+        if (!isRecord$5(row)) {
           rows.push(row);
           continue;
         }
@@ -24923,7 +24923,7 @@ var require_dist_Ct_4tTeX = __commonJS({
         case "array":
           return writeArray(ctx, node, incoming, stored, fieldPath);
         case "object": {
-          if (!isRecord$4(incoming)) {
+          if (!isRecord$5(incoming)) {
             if (incoming === void 0) return KEEP;
             ctx.deletes.push(...collectSecretMarkerRefs(stored));
             return {
@@ -24931,7 +24931,7 @@ var require_dist_Ct_4tTeX = __commonJS({
               value: incoming
             };
           }
-          const storedObj = isRecord$4(stored) ? stored : {};
+          const storedObj = isRecord$5(stored) ? stored : {};
           return {
             kind: "value",
             value: await writeMembers(ctx, node.children, incoming, storedObj, (m) => `${fieldPath}.${m}`)
@@ -25047,7 +25047,7 @@ var require_dist_Ct_4tTeX = __commonJS({
             value: items
           };
         }
-        if (isRecord$4(v)) {
+        if (isRecord$5(v)) {
           const out = {};
           for (const [k, child] of Object.entries(v)) {
             const s = substitute(child);
@@ -25078,7 +25078,7 @@ var require_dist_Ct_4tTeX = __commonJS({
         this.name = "SecretOverwriteRefusedError";
       }
     };
-    function isRecord$3(value) {
+    function isRecord$4(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function resolvedValue(pass, marker) {
@@ -25107,7 +25107,7 @@ var require_dist_Ct_4tTeX = __commonJS({
       return incoming.map((item, index) => {
         const twin = stored[index];
         if (isSecretMarker(twin)) return typeof item === "string" && item === resolvedValue(pass, twin) ? twin : item;
-        if (isRecord$3(item) && isRecord$3(twin)) return inArrayRow(pass, item, twin);
+        if (isRecord$4(item) && isRecord$4(twin)) return inArrayRow(pass, item, twin);
         if (Array.isArray(item) && Array.isArray(twin)) return inArray(pass, item, twin);
         return item;
       });
@@ -25118,7 +25118,7 @@ var require_dist_Ct_4tTeX = __commonJS({
         const twin = stored[key];
         if (isSecretMarker(twin)) {
           if (typeof value === "string" && value === resolvedValue(pass, twin)) out[key] = twin;
-        } else if (isRecord$3(value) && isRecord$3(twin)) out[key] = inArrayRow(pass, value, twin);
+        } else if (isRecord$4(value) && isRecord$4(twin)) out[key] = inArrayRow(pass, value, twin);
         else if (Array.isArray(value) && Array.isArray(twin)) out[key] = inArray(pass, value, twin);
       }
       return out;
@@ -25126,7 +25126,7 @@ var require_dist_Ct_4tTeX = __commonJS({
     async function walk(pass, incoming, stored) {
       if (isSecretMarker(stored)) return atMarker(pass, incoming, stored);
       if (Array.isArray(incoming) && Array.isArray(stored)) return inArray(pass, incoming, stored);
-      if (!isRecord$3(incoming) || !isRecord$3(stored)) return incoming;
+      if (!isRecord$4(incoming) || !isRecord$4(stored)) return incoming;
       const out = { ...incoming };
       for (const [key, value] of Object.entries(incoming)) out[key] = await walk(pass, value, stored[key]);
       return out;
@@ -25155,7 +25155,7 @@ var require_dist_Ct_4tTeX = __commonJS({
     function isJsonEqual(a, b) {
       if (Object.is(a, b)) return true;
       if (Array.isArray(a)) return Array.isArray(b) && a.length === b.length && a.every((v, i) => isJsonEqual(v, b[i]));
-      if (isRecord$3(a) && isRecord$3(b)) {
+      if (isRecord$4(a) && isRecord$4(b)) {
         const keys = Object.keys(a);
         if (keys.length !== Object.keys(b).length) return false;
         return keys.every((k) => Object.prototype.hasOwnProperty.call(b, k) && isJsonEqual(a[k], b[k]));
@@ -25177,7 +25177,7 @@ var require_dist_Ct_4tTeX = __commonJS({
     }
     function nodeFromStored(value, owner) {
       if (isSecretMarker(value)) return isSecretRefOwnedBy(value.$secret, owner) ? { kind: "leaf" } : null;
-      if (!isRecord$3(value)) return null;
+      if (!isRecord$4(value)) return null;
       const children = /* @__PURE__ */ new Map();
       for (const [key, child] of Object.entries(value)) {
         const node = nodeFromStored(child, owner);
@@ -26548,17 +26548,17 @@ var require_dist_Ct_4tTeX = __commonJS({
       }
       return prefixes;
     }
-    function isRecord$2(value) {
+    function isRecord$3(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function elementId(element, idKey, declared, prefix) {
-      const id = isRecord$2(element) ? element[idKey] : void 0;
+      const id = isRecord$3(element) ? element[idKey] : void 0;
       if (typeof id !== "string" || id.length === 0) throw new InvalidRecordError(`"${declared}": every element of "${prefix}" needs a non-empty string "${idKey}" to carry a secret`);
       return id;
     }
     var REMOVE_LEAF = /* @__PURE__ */ Symbol("remove-leaf");
     function mapAt(node, segments, index, walkedKeys, concretePrefix, declared, arrayKeys, visit) {
-      if (!isRecord$2(node)) return node;
+      if (!isRecord$3(node)) return node;
       const segment = segments[index];
       if (segment === void 0) return node;
       if (!Object.prototype.hasOwnProperty.call(node, segment.key)) return node;
@@ -114024,11 +114024,11 @@ ${values.join("\n")}` : `${blockName} :`;
   }
 });
 
-// ../system/dist/device-ca-CUEx7sti.js
-var require_device_ca_CUEx7sti = __commonJS({
-  "../system/dist/device-ca-CUEx7sti.js"(exports) {
+// ../system/dist/device-ca-B3xUzps7.js
+var require_device_ca_B3xUzps7 = __commonJS({
+  "../system/dist/device-ca-B3xUzps7.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_x509_es = require_x509_es_C4cOo48M();
     var node_crypto = __require("crypto");
     var SYSTEM_SECRET_OWNER = "system";
@@ -114452,7 +114452,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     function nextEpisodeId(input) {
       const { previous } = input;
@@ -115857,7 +115857,7 @@ var require_calendars_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_settle_sources = require_settle_sources_Bhsy57y();
     var zod = require_zod();
     var CALENDAR_COLOR_PALETTE = [
@@ -116073,11 +116073,11 @@ var require_calendars = __commonJS({
   }
 });
 
-// ../system/dist/composition-sources-BPnpB9XG.js
-var require_composition_sources_BPnpB9XG = __commonJS({
-  "../system/dist/composition-sources-BPnpB9XG.js"(exports) {
+// ../system/dist/composition-sources-oXvmbMHX.js
+var require_composition_sources_oXvmbMHX = __commonJS({
+  "../system/dist/composition-sources-oXvmbMHX.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     function normalizedNativeOwner(owner) {
       const trimmed = owner?.trim();
       return trimmed ? trimmed : null;
@@ -116192,8 +116192,8 @@ var require_composer_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
-    var require_composition_sources = require_composition_sources_BPnpB9XG();
+    var require_dist10 = require_dist_D9aw_d0G();
+    var require_composition_sources = require_composition_sources_oXvmbMHX();
     var zod = require_zod();
     function isRecord$2(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -120003,7 +120003,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -124667,9 +124667,9 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
-    var require_composition_sources = require_composition_sources_BPnpB9XG();
+    var require_composition_sources = require_composition_sources_oXvmbMHX();
     var require_prefix_range = require_prefix_range_D_KueXbQ();
     var require_prefix_walk = require_prefix_walk_Dv6MLZlM();
     var zod = require_zod();
@@ -127072,9 +127072,9 @@ var require_event_category_eSqkye_K = __commonJS({
   }
 });
 
-// ../types/dist/sleep-gRQc2IoX.js
-var require_sleep_gRQc2IoX = __commonJS({
-  "../types/dist/sleep-gRQc2IoX.js"(exports) {
+// ../types/dist/sleep-Re8daN0Y.js
+var require_sleep_Re8daN0Y = __commonJS({
+  "../types/dist/sleep-Re8daN0Y.js"(exports) {
     "use strict";
     var require_event_category = require_event_category_eSqkye_K();
     var zod = require_zod();
@@ -127147,7 +127147,7 @@ var require_sleep_gRQc2IoX = __commonJS({
       return next;
     }
     function collectOmitted(field, out) {
-      if (!isRecord$6(field)) return;
+      if (!isRecord$7(field)) return;
       const type = field["type"];
       const key = field["key"];
       if (field["omitFromSettings"] === true && typeof key === "string" && key.length > 0) out.add(key);
@@ -127167,7 +127167,7 @@ var require_sleep_gRQc2IoX = __commonJS({
       return keys;
     }
     function walkKeychainField(field, out) {
-      if (!isRecord$6(field)) return;
+      if (!isRecord$7(field)) return;
       const type = field["type"];
       const key = field["key"];
       const isSecret = type === "password" || field["secret"] === true;
@@ -127187,21 +127187,21 @@ var require_sleep_gRQc2IoX = __commonJS({
       for (const section of sectionsOf(schema)) if (fieldsOf(section).length > 0) return true;
       return false;
     }
-    function isRecord$6(value) {
+    function isRecord$7(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function sectionsOf(schema) {
-      if (!isRecord$6(schema)) return [];
+      if (!isRecord$7(schema)) return [];
       const sections = schema["sections"];
       return Array.isArray(sections) ? sections : [];
     }
     function fieldsOf(node) {
-      if (!isRecord$6(node)) return [];
+      if (!isRecord$7(node)) return [];
       const fields = node["fields"];
       return Array.isArray(fields) ? fields : [];
     }
     function walkField(field, out) {
-      if (!isRecord$6(field)) return;
+      if (!isRecord$7(field)) return;
       const type = field["type"];
       const key = field["key"];
       if ((type === "password" || field["secret"] === true) && typeof key === "string" && key.length > 0) out.add(key);
@@ -127217,7 +127217,7 @@ var require_sleep_gRQc2IoX = __commonJS({
     }
     var SECRET_CLEAR = { $secretClear: true };
     var LEGACY_DEVICE_REDACTION = "***";
-    function isRecord$5(value) {
+    function isRecord$6(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function makeSecretMarker(ref) {
@@ -127227,18 +127227,18 @@ var require_sleep_gRQc2IoX = __commonJS({
       };
     }
     function isSecretMarker(value) {
-      if (!isRecord$5(value)) return false;
+      if (!isRecord$6(value)) return false;
       const ref = value["$secret"];
       return typeof ref === "string" && ref.length > 0;
     }
     function isSecretMarkerLike(value) {
-      return isRecord$5(value) && Object.prototype.hasOwnProperty.call(value, "$secret");
+      return isRecord$6(value) && Object.prototype.hasOwnProperty.call(value, "$secret");
     }
     function isSecretClear(value) {
-      return isRecord$5(value) && value["$secretClear"] === true;
+      return isRecord$6(value) && value["$secretClear"] === true;
     }
     function isSecretFieldView(value) {
-      return isRecord$5(value) && value["set"] === true && isSecretMarkerLike(value);
+      return isRecord$6(value) && value["set"] === true && isSecretMarkerLike(value);
     }
     function toSecretFieldView(stored) {
       if (isSecretMarker(stored)) return {
@@ -127836,7 +127836,7 @@ var require_sleep_gRQc2IoX = __commonJS({
       }
     };
     var KEEP = { kind: "keep" };
-    function isRecord$4(value) {
+    function isRecord$5(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function defaultMintId() {
@@ -127848,7 +127848,7 @@ var require_sleep_gRQc2IoX = __commonJS({
         return out;
       }
       if (Array.isArray(value)) for (const item of value) collectSecretMarkerRefs(item, out);
-      else if (isRecord$4(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
+      else if (isRecord$5(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
       return out;
     }
     async function storedValueEquals(secrets, marker, candidate) {
@@ -127902,7 +127902,7 @@ var require_sleep_gRQc2IoX = __commonJS({
       return null;
     }
     async function writeArray(ctx, node, incoming, stored, fieldPath) {
-      const storedRows = Array.isArray(stored) ? stored.filter(isRecord$4) : [];
+      const storedRows = Array.isArray(stored) ? stored.filter(isRecord$5) : [];
       if (!Array.isArray(incoming)) {
         ctx.deletes.push(...collectSecretMarkerRefs(storedRows));
         return {
@@ -127918,7 +127918,7 @@ var require_sleep_gRQc2IoX = __commonJS({
       const kept = /* @__PURE__ */ new Set();
       const rows = [];
       for (const row of incoming) {
-        if (!isRecord$4(row)) {
+        if (!isRecord$5(row)) {
           rows.push(row);
           continue;
         }
@@ -127945,7 +127945,7 @@ var require_sleep_gRQc2IoX = __commonJS({
         case "array":
           return writeArray(ctx, node, incoming, stored, fieldPath);
         case "object": {
-          if (!isRecord$4(incoming)) {
+          if (!isRecord$5(incoming)) {
             if (incoming === void 0) return KEEP;
             ctx.deletes.push(...collectSecretMarkerRefs(stored));
             return {
@@ -127953,7 +127953,7 @@ var require_sleep_gRQc2IoX = __commonJS({
               value: incoming
             };
           }
-          const storedObj = isRecord$4(stored) ? stored : {};
+          const storedObj = isRecord$5(stored) ? stored : {};
           return {
             kind: "value",
             value: await writeMembers(ctx, node.children, incoming, storedObj, (m) => `${fieldPath}.${m}`)
@@ -128069,7 +128069,7 @@ var require_sleep_gRQc2IoX = __commonJS({
             value: items
           };
         }
-        if (isRecord$4(v)) {
+        if (isRecord$5(v)) {
           const out = {};
           for (const [k, child] of Object.entries(v)) {
             const s = substitute(child);
@@ -128100,7 +128100,7 @@ var require_sleep_gRQc2IoX = __commonJS({
         this.name = "SecretOverwriteRefusedError";
       }
     };
-    function isRecord$3(value) {
+    function isRecord$4(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function resolvedValue(pass, marker) {
@@ -128129,7 +128129,7 @@ var require_sleep_gRQc2IoX = __commonJS({
       return incoming.map((item, index) => {
         const twin = stored[index];
         if (isSecretMarker(twin)) return typeof item === "string" && item === resolvedValue(pass, twin) ? twin : item;
-        if (isRecord$3(item) && isRecord$3(twin)) return inArrayRow(pass, item, twin);
+        if (isRecord$4(item) && isRecord$4(twin)) return inArrayRow(pass, item, twin);
         if (Array.isArray(item) && Array.isArray(twin)) return inArray(pass, item, twin);
         return item;
       });
@@ -128140,7 +128140,7 @@ var require_sleep_gRQc2IoX = __commonJS({
         const twin = stored[key];
         if (isSecretMarker(twin)) {
           if (typeof value === "string" && value === resolvedValue(pass, twin)) out[key] = twin;
-        } else if (isRecord$3(value) && isRecord$3(twin)) out[key] = inArrayRow(pass, value, twin);
+        } else if (isRecord$4(value) && isRecord$4(twin)) out[key] = inArrayRow(pass, value, twin);
         else if (Array.isArray(value) && Array.isArray(twin)) out[key] = inArray(pass, value, twin);
       }
       return out;
@@ -128148,7 +128148,7 @@ var require_sleep_gRQc2IoX = __commonJS({
     async function walk(pass, incoming, stored) {
       if (isSecretMarker(stored)) return atMarker(pass, incoming, stored);
       if (Array.isArray(incoming) && Array.isArray(stored)) return inArray(pass, incoming, stored);
-      if (!isRecord$3(incoming) || !isRecord$3(stored)) return incoming;
+      if (!isRecord$4(incoming) || !isRecord$4(stored)) return incoming;
       const out = { ...incoming };
       for (const [key, value] of Object.entries(incoming)) out[key] = await walk(pass, value, stored[key]);
       return out;
@@ -128177,7 +128177,7 @@ var require_sleep_gRQc2IoX = __commonJS({
     function isJsonEqual(a, b) {
       if (Object.is(a, b)) return true;
       if (Array.isArray(a)) return Array.isArray(b) && a.length === b.length && a.every((v, i) => isJsonEqual(v, b[i]));
-      if (isRecord$3(a) && isRecord$3(b)) {
+      if (isRecord$4(a) && isRecord$4(b)) {
         const keys = Object.keys(a);
         if (keys.length !== Object.keys(b).length) return false;
         return keys.every((k) => Object.prototype.hasOwnProperty.call(b, k) && isJsonEqual(a[k], b[k]));
@@ -128199,7 +128199,7 @@ var require_sleep_gRQc2IoX = __commonJS({
     }
     function nodeFromStored(value, owner) {
       if (isSecretMarker(value)) return isSecretRefOwnedBy(value.$secret, owner) ? { kind: "leaf" } : null;
-      if (!isRecord$3(value)) return null;
+      if (!isRecord$4(value)) return null;
       const children = /* @__PURE__ */ new Map();
       for (const [key, child] of Object.entries(value)) {
         const node = nodeFromStored(child, owner);
@@ -129962,17 +129962,17 @@ var require_sleep_gRQc2IoX = __commonJS({
       }
       return prefixes;
     }
-    function isRecord$2(value) {
+    function isRecord$3(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     function elementId(element, idKey, declared, prefix) {
-      const id = isRecord$2(element) ? element[idKey] : void 0;
+      const id = isRecord$3(element) ? element[idKey] : void 0;
       if (typeof id !== "string" || id.length === 0) throw new InvalidRecordError(`"${declared}": every element of "${prefix}" needs a non-empty string "${idKey}" to carry a secret`);
       return id;
     }
     var REMOVE_LEAF = /* @__PURE__ */ Symbol("remove-leaf");
     function mapAt(node, segments, index, walkedKeys, concretePrefix, declared, arrayKeys, visit) {
-      if (!isRecord$2(node)) return node;
+      if (!isRecord$3(node)) return node;
       const segment = segments[index];
       if (segment === void 0) return node;
       if (!Object.prototype.hasOwnProperty.call(node, segment.key)) return node;
@@ -130178,7 +130178,7 @@ var require_sleep_gRQc2IoX = __commonJS({
     function declarationsOf(kinds) {
       return Object.fromEntries(Object.entries(kinds).map(([name, kind]) => [name, kind.declaration]));
     }
-    function isRecord$1(value) {
+    function isRecord$2(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
     async function call(fn) {
@@ -130303,7 +130303,7 @@ var require_sleep_gRQc2IoX = __commonJS({
         }) : data;
         const parsed = this.def.schema.safeParse(shaped);
         if (!parsed.success) throw new InvalidRecordError(`${this.name}/${id}: ${zodSummary(parsed.error)}`);
-        if (!isRecord$1(parsed.data)) throw new InvalidRecordError(`${this.name}/${id}: the body must be an object`);
+        if (!isRecord$2(parsed.data)) throw new InvalidRecordError(`${this.name}/${id}: the body must be an object`);
         return parsed.data;
       }
       async get(id) {
@@ -130472,7 +130472,7 @@ var require_sleep_gRQc2IoX = __commonJS({
       }
     };
     function toBody(value) {
-      if (!isRecord$1(value)) throw new InvalidRecordError("the record body must be an object");
+      if (!isRecord$2(value)) throw new InvalidRecordError("the record body must be an object");
       return value;
     }
     function createRecordsAccess(options) {
@@ -130544,11 +130544,213 @@ var require_sleep_gRQc2IoX = __commonJS({
       if (defined === void 0) throw new DeclarationRefusedError(`entry kind "${name}" was not built`);
       return defined;
     }
+    function isRecord$1(value) {
+      return typeof value === "object" && value !== null && !Array.isArray(value);
+    }
+    function extractField(data, path) {
+      let current = data;
+      for (const segment of path.split(".")) {
+        if (!isRecord$1(current)) return null;
+        current = current[segment];
+      }
+      if (current === void 0 || current === null) return null;
+      if (typeof current === "boolean") return current ? 1 : 0;
+      if (typeof current === "number" || typeof current === "string") return current;
+      return JSON.stringify(current);
+    }
+    function bindable(value) {
+      if (typeof value === "boolean") return value ? 1 : 0;
+      if (typeof value === "string" || typeof value === "number") return value;
+      throw new InvalidRecordError("a where value must be a string, number or boolean");
+    }
+    function compareText(a, b) {
+      const ai = a[Symbol.iterator]();
+      const bi = b[Symbol.iterator]();
+      for (; ; ) {
+        const x = ai.next();
+        const y = bi.next();
+        if (x.done === true) return y.done === true ? 0 : -1;
+        if (y.done === true) return 1;
+        const cx = x.value.codePointAt(0) ?? 0;
+        const cy = y.value.codePointAt(0) ?? 0;
+        if (cx !== cy) return cx < cy ? -1 : 1;
+      }
+    }
+    function compareSql(a, b) {
+      if (a === null || b === null) return a === b ? 0 : a === null ? -1 : 1;
+      if (typeof a === "number" && typeof b === "number") return a === b ? 0 : a < b ? -1 : 1;
+      if (typeof a === "number") return -1;
+      if (typeof b === "number") return 1;
+      return compareText(a, b);
+    }
+    function rowValueAfter(row, cursor, desc) {
+      for (let i = 0; i < row.length; i += 1) {
+        const a = row[i] ?? null;
+        const b = cursor[i] ?? null;
+        if (a === null || b === null) return false;
+        const c = compareSql(a, b);
+        if (c !== 0) return desc ? c < 0 : c > 0;
+      }
+      return false;
+    }
+    function predicateOf(field, value) {
+      if (typeof value === "object") return {
+        field,
+        shape: "in" in value ? "in" : "range",
+        value
+      };
+      return {
+        field,
+        shape: "eq",
+        value
+      };
+    }
+    function predicateTest(p) {
+      const value = p.value;
+      if (p.shape === "eq") {
+        const wanted = bindable(value);
+        return (data) => {
+          const got = extractField(data, p.field);
+          return got !== null && compareSql(got, wanted) === 0;
+        };
+      }
+      if (typeof value === "object" && "in" in value) {
+        const set = value.in.map(bindable);
+        return (data) => {
+          const got = extractField(data, p.field);
+          return got !== null && set.some((w) => w !== null && compareSql(got, w) === 0);
+        };
+      }
+      if (typeof value !== "object") return () => false;
+      const active = [
+        ["gt" in value ? value.gt : void 0, (c) => c > 0],
+        ["gte" in value ? value.gte : void 0, (c) => c >= 0],
+        ["lt" in value ? value.lt : void 0, (c) => c < 0],
+        ["lte" in value ? value.lte : void 0, (c) => c <= 0]
+      ].flatMap(([b, ok]) => b === void 0 ? [] : [{
+        bound: bindable(b),
+        ok
+      }]);
+      return (data) => {
+        const got = extractField(data, p.field);
+        if (got === null) return false;
+        return active.every(({ bound, ok }) => ok(compareSql(got, bound)));
+      };
+    }
+    function planWhere(kind, decl, where, opts) {
+      const predicates = Object.entries(where ?? {}).map(([f, v]) => predicateOf(f, v));
+      const extra = opts.extraFields ?? [];
+      if (predicates.length === 0 && extra.length === 0) return null;
+      const equalities = predicates.filter((p) => p.shape !== "range");
+      const ranges = predicates.filter((p) => p.shape === "range");
+      if (ranges.length > 1) throw new UnindexedFilterError(`${kind}: at most one range predicate (${ranges.map((r) => r.field).join(", ")}) - it must be the field right after the equality fields of one index`);
+      if (!opts.allowIn && equalities.some((p) => p.shape === "in")) throw new UnindexedFilterError(`${kind}: an "in" set cannot be paged in index order - ask once per value`);
+      const eqCount = equalities.length;
+      const eqSet = new Set(equalities.map((p) => p.field));
+      const range = ranges[0];
+      const candidates = decl.indexes.filter((index) => {
+        const leading = index.fields.slice(0, eqCount);
+        if (leading.length !== eqCount || !leading.every((f) => eqSet.has(f))) return false;
+        if (range !== void 0 && index.fields[eqCount] !== range.field) return false;
+        return extra.every((f) => index.fields.includes(f));
+      });
+      const groupBy = opts.groupBy;
+      const candidate = (groupBy === void 0 ? void 0 : candidates.find((index) => index.fields[eqCount] === groupBy)) ?? candidates[0];
+      if (candidate === void 0) {
+        const declared = decl.indexes.map((i) => `${i.name}(${i.fields.join(", ")})`).join("; ");
+        throw new UnindexedFilterError(`${kind}: no declared index serves [${[...predicates.map((p) => p.field), ...extra].join(", ")}]. Declared: ${declared.length > 0 ? declared : "none"}. A filter on an unindexed field does not compile - declare an index`);
+      }
+      const tests = predicates.map(predicateTest);
+      return {
+        indexName: candidate.name,
+        orderFields: candidate.fields.slice(eqCount),
+        matches: (data) => tests.every((t) => t(data))
+      };
+    }
+    function assertWindowAllowed(kind, decl, w) {
+      if (w.deviceId !== void 0 && decl.device === "none") throw new InvalidRecordError(`${kind}: declared device: "none", it cannot be filtered by deviceId`);
+      if ((w.atFrom !== void 0 || w.atTo !== void 0) && decl.at === "none") throw new InvalidRecordError(`${kind}: declared at: "none", it cannot be filtered by time`);
+    }
+    function inWindow(row, w) {
+      if (w.deviceId !== void 0 && row.deviceId !== w.deviceId) return false;
+      if (w.atFrom !== void 0 && (row.at === null || row.at < w.atFrom)) return false;
+      if (w.atTo !== void 0 && (row.at === null || row.at >= w.atTo)) return false;
+      return true;
+    }
     function isRecord(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
     }
+    function validateHeader(kind, decl, rec, nowMs) {
+      const fail = (why) => {
+        throw new InvalidRecordError(`${kind}/${rec.id.slice(0, 64)}: ${why}`);
+      };
+      if (rec.id.length === 0 || rec.id.length > 256) fail(`the id must be 1..256 characters`);
+      if (decl.device === "required" && rec.deviceId === void 0) fail("deviceId is required");
+      if (decl.device === "none" && rec.deviceId !== void 0) fail("this kind is not device-scoped");
+      if (decl.at === "required" && rec.at === void 0) fail("at is required");
+      if (decl.at === "none" && rec.at !== void 0) fail("this kind has no time");
+      const { retention } = decl;
+      let expiresAt = rec.expiresAt ?? null;
+      if ("ttlMs" in retention) {
+        if (rec.expiresAt !== void 0) fail("expiresAt is set by the engine on a kind with a ttl retention");
+        expiresAt = (retention.from === "at" ? rec.at ?? nowMs : nowMs) + retention.ttlMs;
+      } else if (rec.expiresAt !== void 0 && decl.secretPaths.length > 0) fail("a kind with secret fields cannot expire by the engine (its keychain values would be orphaned)");
+      return {
+        id: rec.id,
+        deviceId: rec.deviceId ?? null,
+        at: rec.at ?? null,
+        expiresAt
+      };
+    }
+    function serializeBody(kind, decl, id, body) {
+      const json = JSON.stringify(body);
+      const bytes = Buffer.byteLength(json, "utf8");
+      if (bytes > decl.maxDataBytes) throw new RecordTooLargeError(`${kind}/${id.slice(0, 64)}: ${bytes} bytes exceeds maxDataBytes ${decl.maxDataBytes}. Bytes are never record fields - use files and ctx.peerBytes`);
+      return json;
+    }
+    function markersOf(decl, body) {
+      const out = /* @__PURE__ */ new Map();
+      if (decl.secretPaths.length === 0) return out;
+      for (const leaf of collectSecretLeaves(body, decl.secretPaths, decl.secretArrayKeys)) if (isSecretMarker(leaf.value)) out.set(leaf.concrete, leaf.value.$secret);
+      return out;
+    }
+    function redactBody(decl, body) {
+      if (decl.secretPaths.length === 0) return body;
+      const redacted = mapSecretLeaves(body, decl.secretPaths, decl.secretArrayKeys, (leaf) => leaf.value === null ? null : REDACTED_SECRET);
+      return isRecord(redacted) ? redacted : body;
+    }
+    function enforceSecrets(owner, kind, decl, id, body, stored, mode) {
+      if (decl.secretPaths.length === 0) return {
+        body,
+        releasedRefs: []
+      };
+      const storedMarkers = stored === null ? /* @__PURE__ */ new Map() : markersOf(decl, stored);
+      const next = mapSecretLeaves(body, decl.secretPaths, decl.secretArrayKeys, (leaf) => {
+        const expected = recordSecretRef(owner, kind, id, leaf.concrete);
+        if (isSecretMarker(leaf.value)) {
+          if (leaf.value.$secret !== expected) throw new ForeignSecretMarkerError(`${kind}/${id.slice(0, 64)} field "${leaf.concrete}": the marker is not this row's own ref`);
+          return leaf.value;
+        }
+        if (leaf.value === "__camstack_redacted__") {
+          const keep = storedMarkers.get(leaf.concrete);
+          if (keep === void 0) return REMOVE_LEAF;
+          if (mode === "patch" && !leaf.concrete.includes("[")) return REMOVE_LEAF;
+          return {
+            $secret: keep,
+            v: 1
+          };
+        }
+        if (leaf.value === null || leaf.value === void 0) return mode === "patch" ? null : REMOVE_LEAF;
+        throw new PlaintextSecretError(`${kind}/${id.slice(0, 64)} field "${leaf.concrete}": a secret field takes a keychain marker, never a value`);
+      });
+      if (!isRecord(next)) throw new InvalidRecordError(`${kind}/${id}: the body must be an object`);
+      const nextMarkers = markersOf(decl, next);
+      return {
+        body: next,
+        releasedRefs: [...storedMarkers.entries()].filter(([path, ref]) => mode === "put" && nextMarkers.get(path) !== ref).map(([, ref]) => ref)
+      };
+    }
     function mergePatch(target, patch) {
-      if (!isRecord(patch)) return target;
       const out = { ...target };
       for (const [key, value] of Object.entries(patch)) {
         if (value === null) {
@@ -130556,17 +130758,14 @@ var require_sleep_gRQc2IoX = __commonJS({
           continue;
         }
         const current = out[key];
-        out[key] = isRecord(value) && isRecord(current) ? mergePatch(current, value) : value;
+        out[key] = isRecord(value) ? mergePatch(isRecord(current) ? current : {}, value) : value;
       }
       return out;
     }
-    function markersOf(decl, body) {
-      const out = /* @__PURE__ */ new Map();
-      mapSecretLeaves(body, decl.secretPaths, decl.secretArrayKeys, (leaf) => {
-        if (isSecretMarker(leaf.value)) out.set(leaf.concrete, leaf.value.$secret);
-        return leaf.value;
-      });
-      return out;
+    function jsonCopy(body) {
+      const parsed = JSON.parse(JSON.stringify(body));
+      if (!isRecord(parsed)) throw new InvalidRecordError("a stored body is not an object");
+      return parsed;
     }
     function makeSpecKeychain(owner) {
       const values = /* @__PURE__ */ new Map();
@@ -130603,10 +130802,85 @@ var require_sleep_gRQc2IoX = __commonJS({
         forOwner: null
       } };
     }
-    function makeInMemoryRecords(owner = "spec") {
+    function encodeCursor(tag, values) {
+      return Buffer.from(JSON.stringify({
+        t: tag,
+        v: values
+      }), "utf8").toString("base64url");
+    }
+    function decodeCursor(cursor) {
+      try {
+        const parsed = JSON.parse(Buffer.from(cursor, "base64url").toString("utf8"));
+        if (typeof parsed === "object" && parsed !== null) {
+          const t = Reflect.get(parsed, "t");
+          const v = Reflect.get(parsed, "v");
+          if (typeof t === "string" && Array.isArray(v)) {
+            const values = [];
+            for (const item of v) if (typeof item === "string" || typeof item === "number" || item === null) values.push(item);
+            else throw new Error("bad cursor value");
+            return {
+              tag: t,
+              values
+            };
+          }
+        }
+      } catch {
+      }
+      throw new InvalidRecordError("the cursor is not valid");
+    }
+    function assertCursor(cursor, tag, length) {
+      if (cursor.tag !== tag || cursor.values.length !== length) throw new InvalidRecordError("the cursor does not belong to this query");
+    }
+    function compareKeys(a, b) {
+      for (let i = 0; i < a.length; i += 1) {
+        const c = compareSql(a[i] ?? null, b[i] ?? null);
+        if (c !== 0) return c;
+      }
+      return 0;
+    }
+    function assertAdditive(kind, before, next) {
+      const refuse = (why) => {
+        throw new DeclarationRefusedError(`kind "${kind}": ${why} - the engine never migrates data; a changed index is a new name`);
+      };
+      if (before.database !== next.database) refuse("the database cannot change");
+      if (before.device !== next.device) refuse('"device" cannot change');
+      if (before.at !== next.at) refuse('"at" cannot change');
+      for (const old of before.indexes) {
+        const same = next.indexes.find((i) => i.name === old.name);
+        if (same === void 0) continue;
+        if (same.unique !== old.unique || same.fields.join(",") !== old.fields.join(",")) refuse(`index "${old.name}" was declared differently before`);
+      }
+      for (const path of before.secretPaths) if (!next.secretPaths.includes(path)) refuse(`secret path "${path}" cannot stop being secret`);
+    }
+    function ringBounds(decl) {
+      const { retention } = decl;
+      if ("maxRows" in retention || "maxRowsPerDevice" in retention) return {
+        ...retention.maxRows === void 0 ? {} : { maxRows: retention.maxRows },
+        ...retention.maxRowsPerDevice === void 0 ? {} : { maxRowsPerDevice: retention.maxRowsPerDevice }
+      };
+      return null;
+    }
+    var HISTOGRAM_MAX_BUCKETS = 1e4;
+    function aggregateOf(op, field, rows) {
+      if (field === void 0) return rows.length;
+      const values = rows.map((r) => extractField(r.data, field)).filter((v) => v !== null);
+      if (op === "count") return values.length;
+      if (values.length === 0) return null;
+      if (op === "sum") return values.reduce((s, v) => s + (typeof v === "number" ? v : Number(v) || 0), 0);
+      const sorted = [...values].sort(compareSql);
+      const picked = op === "min" ? sorted[0] : sorted.at(-1);
+      return typeof picked === "number" ? picked : null;
+    }
+    function makeInMemoryRecords(owner = "spec", options = {}) {
+      const now = options.now ?? Date.now;
       const decls = /* @__PURE__ */ new Map();
+      const kindIds = /* @__PURE__ */ new Map();
       const tables = /* @__PURE__ */ new Map();
-      let clock = 1;
+      const sequences = /* @__PURE__ */ new Map();
+      const pendingAllocated = /* @__PURE__ */ new Set();
+      const writesSinceTrim = /* @__PURE__ */ new Map();
+      const queries = [];
+      let nextRid = 1;
       let writesFail = false;
       let readsFail = false;
       const table = (kind) => {
@@ -130619,74 +130893,107 @@ var require_sleep_gRQc2IoX = __commonJS({
       };
       const declOf = (kind) => {
         const decl = decls.get(kind);
-        if (decl === void 0) throw new Error(`kind "${kind}" is not declared`);
+        if (decl === void 0) throw new UnknownRecordKindError(`"${owner}" declared no kind "${kind}"`);
         return decl;
       };
-      const redact = (decl, body) => {
-        if (decl.secretPaths.length === 0) return body;
-        const out = mapSecretLeaves(body, decl.secretPaths, decl.secretArrayKeys, (leaf) => leaf.value === null ? null : REDACTED_SECRET);
-        return isRecord(out) ? out : body;
+      const reading = () => {
+        if (readsFail) throw new Error("records engine unreachable");
+      };
+      const writing = () => {
+        if (writesFail) throw new Error("records engine unreachable");
       };
-      const view = (kind, row) => ({
+      const view = (decl, row) => ({
         id: row.id,
-        deviceId: null,
+        deviceId: row.deviceId,
         at: row.at,
-        expiresAt: null,
+        expiresAt: row.expiresAt,
         rev: row.rev,
         updatedAt: row.updatedAt,
-        data: redact(declOf(kind), row.data)
+        data: redactBody(decl, jsonCopy(row.data))
       });
-      const enforce = (kind, id, body, stored) => {
-        const decl = declOf(kind);
-        if (decl.secretPaths.length === 0) return {
-          body,
-          released: []
-        };
-        const before = stored === null ? /* @__PURE__ */ new Map() : markersOf(decl, stored);
-        const next = mapSecretLeaves(body, decl.secretPaths, decl.secretArrayKeys, (leaf) => {
-          const expected = recordSecretRef(owner, kind, id, leaf.concrete);
-          if (isSecretMarker(leaf.value)) {
-            if (leaf.value.$secret !== expected) throw new Error("foreign secret marker");
-            return leaf.value;
-          }
-          if (leaf.value === "__camstack_redacted__") {
-            const keep = before.get(leaf.concrete);
-            return keep === void 0 ? REMOVE_LEAF : {
-              $secret: keep,
-              v: 1
-            };
+      const assertUnique = (kind, decl, id, body) => {
+        for (const index of decl.indexes) {
+          if (index.unique !== true) continue;
+          const mine = index.fields.map((f) => extractField(body, f));
+          if (mine.some((v) => v === null)) continue;
+          for (const other of table(kind).values()) {
+            if (other.id === id) continue;
+            const theirs = index.fields.map((f) => extractField(other.data, f));
+            if (compareKeys(mine, theirs) === 0 && theirs.every((v) => v !== null)) throw new RecordUniqueViolationError(`${kind}: the unique index "${index.name}" refused the write`);
           }
-          if (leaf.value === null || leaf.value === void 0) return REMOVE_LEAF;
-          throw new Error(`${kind}/${id}: a secret field takes a keychain marker, never a value`);
+        }
+      };
+      const store2 = (kind, prev, next) => {
+        const rid = prev?.rid ?? nextRid;
+        if (prev === void 0) nextRid += 1;
+        table(kind).set(next.id, {
+          ...next,
+          rid
         });
-        if (!isRecord(next)) throw new Error("the body must be an object");
-        const after = markersOf(decl, next);
-        return {
-          body: next,
-          released: [...before.entries()].filter(([p, ref]) => after.get(p) !== ref).map(([, r]) => r)
-        };
       };
-      const write = (kind, input) => {
-        if (writesFail) throw new Error("records engine unreachable");
-        if (declOf(kind).at === "required" && input.at === void 0) throw new Error(`${kind}/${input.id}: the kind needs "at" on every write`);
-        const prev = table(kind).get(input.id);
-        const { body, released } = enforce(kind, input.id, input.data, prev?.data ?? null);
+      const writeRecord = (kind, rec, ifRev, nowMs) => {
+        const decl = declOf(kind);
+        const header = validateHeader(kind, decl, rec, nowMs);
+        const allocatedKey = `${kind}:${rec.id}`;
+        const prev = table(kind).get(rec.id);
+        if (pendingAllocated.has(allocatedKey) && prev !== void 0) throw new RevConflictError(`${kind}/${rec.id}: an allocated id is insert-only and a row already holds it`);
+        if (ifRev !== void 0) {
+          if (ifRev === 0 && prev !== void 0) throw new RevConflictError(`${kind}/${rec.id}: the row exists (ifRev 0 means "must not exist")`);
+          if (ifRev > 0 && prev?.rev !== ifRev) throw new RevConflictError(`${kind}/${rec.id}: expected rev ${ifRev}, found ${prev === void 0 ? "no row" : `rev ${prev.rev}`}`);
+        }
+        const checked = enforceSecrets(owner, kind, decl, rec.id, rec.data, prev?.data ?? null, "put");
+        serializeBody(kind, decl, rec.id, checked.body);
+        const body = jsonCopy(checked.body);
+        assertUnique(kind, decl, rec.id, body);
         const rev = (prev?.rev ?? 0) + 1;
-        clock += 1;
-        table(kind).set(input.id, {
-          id: input.id,
-          at: input.at ?? null,
+        store2(kind, prev, {
+          id: header.id,
+          deviceId: header.deviceId,
+          at: header.at,
+          expiresAt: header.expiresAt,
           rev,
-          updatedAt: clock,
+          updatedAt: nowMs,
           data: body
         });
+        pendingAllocated.delete(allocatedKey);
         return {
           rev,
-          released
+          released: checked.releasedRefs
         };
       };
-      const unimplemented = (op) => {
-        throw new Error(`the fake records transport does not implement ${op}`);
+      const trimScope = (kind, max, deviceId) => {
+        const scope = [...table(kind).values()].filter((r) => deviceId === void 0 || r.deviceId === deviceId);
+        const excess = Math.min(scope.length - max, RECORD_DELETE_BATCH);
+        if (excess <= 0) return;
+        scope.sort((a, b) => compareKeys([a.at, a.rid], [b.at, b.rid]));
+        for (const row of scope.slice(0, excess)) table(kind).delete(row.id);
+      };
+      const afterWrite = (kind, devices) => {
+        const bounds = ringBounds(declOf(kind));
+        if (bounds === null) return;
+        const bound = Math.max(bounds.maxRows ?? 0, bounds.maxRowsPerDevice ?? 0);
+        const interval = bound <= 100 ? 1 : Math.floor(bound / 100);
+        const count = (writesSinceTrim.get(kind) ?? 0) + devices.length;
+        if (count < interval) {
+          writesSinceTrim.set(kind, count);
+          return;
+        }
+        writesSinceTrim.set(kind, 0);
+        if (bounds.maxRows !== void 0) trimScope(kind, bounds.maxRows, void 0);
+        if (bounds.maxRowsPerDevice !== void 0) {
+          const seen = new Set(devices.filter((d) => d !== void 0));
+          for (const device of seen) trimScope(kind, bounds.maxRowsPerDevice, device);
+        }
+      };
+      const refsOf = (decl, rows) => rows.flatMap((row) => [...markersOf(decl, row.data).values()]);
+      const removeWhere = (kind, test) => {
+        const decl = declOf(kind);
+        const gone = [...table(kind).values()].filter(test);
+        for (const row of gone) table(kind).delete(row.id);
+        return {
+          deleted: gone.length,
+          secretRefs: refsOf(decl, gone)
+        };
       };
       return {
         records: createRecordsAccess({
@@ -130694,69 +131001,119 @@ var require_sleep_gRQc2IoX = __commonJS({
           transport: {
             declareKinds: async ({ kinds }) => {
               const out = {};
-              let n = 0;
-              for (const [name, decl] of Object.entries(kinds)) {
+              for (const [name, raw] of Object.entries(kinds)) {
+                const decl = RecordKindDeclarationSchema.parse(raw);
+                assertValidDeclaration(name, decl);
+                const prior = decls.get(name);
+                if (prior !== void 0) assertAdditive(name, prior, decl);
+                const kindId = kindIds.get(name) ?? kindIds.size + 1;
+                kindIds.set(name, kindId);
+                const created = decl.indexes.filter((i) => prior?.indexes.every((p) => p.name !== i.name) ?? true).map((i) => i.name);
+                const state = prior === void 0 ? "created" : JSON.stringify(prior) === JSON.stringify(decl) ? "unchanged" : "updated";
                 decls.set(name, decl);
-                n += 1;
                 out[name] = {
-                  kindId: n,
-                  state: "created",
-                  createdIndexes: decl.indexes.map((i) => i.name),
+                  kindId,
+                  state,
+                  createdIndexes: created,
                   adoptionPending: null
                 };
               }
               return { kinds: out };
             },
             get: async ({ kind, id }) => {
-              if (readsFail) throw new Error("records engine unreachable");
+              reading();
+              const decl = declOf(kind);
               const row = table(kind).get(id);
-              return row === void 0 ? null : view(kind, row);
+              return row === void 0 ? null : view(decl, row);
+            },
+            getMany: async ({ kind, ids }) => {
+              reading();
+              const decl = declOf(kind);
+              return [...new Set(ids)].sort((a, b) => compareSql(a, b)).flatMap((id) => {
+                const row = table(kind).get(id);
+                return row === void 0 ? [] : [view(decl, row)];
+              });
             },
-            getMany: async ({ kind, ids }) => ids.flatMap((id) => {
-              const row = table(kind).get(id);
-              return row === void 0 ? [] : [view(kind, row)];
-            }),
             secretRefs: async ({ kind, ids }) => {
+              reading();
               const decl = declOf(kind);
               const out = {};
               for (const id of ids) {
                 const row = table(kind).get(id);
-                if (row !== void 0) out[id] = Object.fromEntries(markersOf(decl, row.data));
+                if (row === void 0) continue;
+                const refs = Object.fromEntries(markersOf(decl, row.data));
+                if (Object.keys(refs).length > 0) out[id] = refs;
               }
               return out;
             },
             put: async ({ kind, record, ifRev }) => {
-              if (ifRev !== void 0 && (table(kind).get(record.id)?.rev ?? 0) !== ifRev) throw new Error("stale ifRev");
-              const { rev, released } = write(kind, record);
+              writing();
+              const written = writeRecord(kind, record, ifRev, now());
+              afterWrite(kind, [record.deviceId]);
               return {
-                rev,
-                releasedRefs: released
+                rev: written.rev,
+                releasedRefs: [...written.released]
               };
             },
             putMany: async ({ kind, records }) => {
+              writing();
+              declOf(kind);
+              if (records.length > 1e3) throw new BatchTooLargeError(`${records.length} records exceed ${RECORD_BATCH_MAX}`);
+              const bytes = records.reduce((sum, r) => sum + Buffer.byteLength(JSON.stringify(r.data), "utf8"), 0);
+              if (bytes > 4194304) throw new BatchTooLargeError(`${bytes} bytes exceed ${RECORD_BATCH_MAX_BYTES}`);
+              const nowMs = now();
+              const before = new Map(table(kind));
+              const ridBefore = nextRid;
               const released = [];
-              for (const record of records) released.push(...write(kind, record).released);
+              try {
+                for (const rec of records) released.push(...writeRecord(kind, rec, void 0, nowMs).released);
+              } catch (err) {
+                tables.set(kind, before);
+                nextRid = ridBefore;
+                throw err;
+              }
+              let top = -1;
+              for (const r of records) if (/^\d{1,15}$/.test(r.id)) top = Math.max(top, Number(r.id));
+              if (top >= 0) sequences.set(kind, Math.max(sequences.get(kind) ?? 0, top + 1));
+              afterWrite(kind, records.map((r) => r.deviceId));
               return {
                 count: records.length,
                 releasedRefs: released
               };
             },
-            patch: async ({ kind, id, data, at, ifRev }) => {
-              const prev = table(kind).get(id);
-              if (prev === void 0) throw new Error(`${kind}/${id}: no such record`);
-              if (ifRev !== void 0 && prev.rev !== ifRev) throw new Error("stale ifRev");
-              const { rev, released } = write(kind, {
-                id,
-                ...at !== void 0 && at !== null ? { at } : prev.at !== null ? { at: prev.at } : {},
-                data: mergePatch(prev.data, data)
+            patch: async (input) => {
+              writing();
+              const decl = declOf(input.kind);
+              if (input.at !== void 0 && decl.at !== "required") throw new InvalidRecordError(`${input.kind}: declared at: "none"`);
+              if (input.at === null) throw new InvalidRecordError(`${input.kind}: "at" cannot be removed`);
+              if (input.expiresAt !== void 0 && decl.secretPaths.length > 0) throw new InvalidRecordError(`${input.kind}: a kind with secret fields cannot expire by the engine (its keychain values would be orphaned)`);
+              if (input.expiresAt !== void 0 && "ttlMs" in decl.retention) throw new InvalidRecordError(`${input.kind}: expiresAt is set by the engine`);
+              const before = table(input.kind).get(input.id);
+              const checked = enforceSecrets(owner, input.kind, decl, input.id, input.data, before?.data ?? null, "patch");
+              if (before === void 0) throw new RecordNotFoundError(`${input.kind}/${input.id}: no such row`);
+              if (input.ifRev !== void 0 && before.rev !== input.ifRev) throw new RevConflictError(`${input.kind}/${input.id}: expected rev ${String(input.ifRev)}, found rev ${before.rev}`);
+              const merged = jsonCopy(mergePatch(before.data, jsonCopy(checked.body)));
+              const size = [...JSON.stringify(merged)].length;
+              if (size > decl.maxDataBytes) throw new RecordTooLargeError(`${input.kind}/${input.id}: the patched body is ${size} bytes, over maxDataBytes ${decl.maxDataBytes}`);
+              assertUnique(input.kind, decl, input.id, merged);
+              const rev = before.rev + 1;
+              store2(input.kind, before, {
+                ...before,
+                at: input.at ?? before.at,
+                expiresAt: input.expiresAt === void 0 ? before.expiresAt : input.expiresAt,
+                rev,
+                updatedAt: now(),
+                data: merged
               });
+              const kept = new Set(markersOf(decl, merged).values());
               return {
                 rev,
-                releasedRefs: released
+                releasedRefs: [...markersOf(decl, before.data).values()].filter((r) => !kept.has(r))
               };
             },
             delete: async ({ kind, id }) => {
-              if (writesFail) throw new Error("records engine unreachable");
+              writing();
+              const decl = declOf(kind);
               const row = table(kind).get(id);
               if (row === void 0) return {
                 deleted: false,
@@ -130765,57 +131122,189 @@ var require_sleep_gRQc2IoX = __commonJS({
               table(kind).delete(id);
               return {
                 deleted: true,
-                secretRefs: [...markersOf(declOf(kind), row.data).values()]
+                secretRefs: refsOf(decl, [row])
               };
             },
             deleteMany: async ({ kind, ids }) => {
-              let deleted = 0;
-              const refs = [];
-              for (const id of ids) {
-                const row = table(kind).get(id);
-                if (row === void 0) continue;
-                table(kind).delete(id);
-                deleted += 1;
-                refs.push(...markersOf(declOf(kind), row.data).values());
+              writing();
+              const wanted = new Set(ids);
+              return removeWhere(kind, (row) => wanted.has(row.id));
+            },
+            query: async (q) => {
+              reading();
+              const decl = declOf(q.kind);
+              queries.push({
+                kind: q.kind,
+                limit: q.limit
+              });
+              assertWindowAllowed(q.kind, decl, q);
+              const desc = q.desc === true;
+              const dir = desc ? "DESC" : "ASC";
+              const where = planWhere(q.kind, decl, q.where, { allowIn: false });
+              const cursor = q.cursor === void 0 ? void 0 : decodeCursor(q.cursor);
+              let rows = [...table(q.kind).values()].filter((r) => inWindow(r, q));
+              let keysOf;
+              let keyCount;
+              let tag;
+              if (where !== null) {
+                if (q.order !== void 0) throw new InvalidRecordError(`${q.kind}: with a where the order is the index's; drop "order"`);
+                const fields = where.orderFields;
+                keysOf = (row) => [...fields.map((f) => extractField(row.data, f)), row.rid];
+                keyCount = fields.length;
+                tag = `rx:${where.indexName}:${dir}`;
+                rows = rows.filter((r) => where.matches(r.data));
+                if (cursor !== void 0) {
+                  assertCursor(cursor, tag, fields.length + 1);
+                  rows = rows.filter((r) => rowValueAfter(keysOf(r), cursor.values, desc));
+                }
+              } else {
+                const order = q.order ?? (decl.at === "required" ? "at" : "id");
+                keyCount = 1;
+                if (order === "at") {
+                  if (decl.at !== "required") throw new InvalidRecordError(`${q.kind}: declared at: "none", it has no time order - use order: "id"`);
+                  keysOf = (row) => [row.at, row.rid];
+                  tag = `at:${dir}`;
+                  if (cursor !== void 0) {
+                    assertCursor(cursor, tag, 2);
+                    rows = rows.filter((r) => rowValueAfter(keysOf(r), cursor.values, desc));
+                  }
+                } else {
+                  if (q.deviceId !== void 0 || q.atFrom !== void 0 || q.atTo !== void 0) throw new UnindexedFilterError(`${q.kind}: order "id" cannot be combined with a device or time window (use order "at")`);
+                  keysOf = (row) => [row.id, row.rid];
+                  tag = `id:${dir}`;
+                  if (cursor !== void 0) {
+                    assertCursor(cursor, tag, 2);
+                    const last2 = cursor.values[0] ?? null;
+                    rows = rows.filter((r) => rowValueAfter([r.id], [last2], desc));
+                  }
+                }
+              }
+              rows.sort((a, b) => (desc ? -1 : 1) * compareKeys(keysOf(a), keysOf(b)));
+              const page = rows.slice(0, q.limit);
+              const more = rows.length > q.limit;
+              const last = page.at(-1);
+              let nextCursor = null;
+              if (more && last !== void 0) {
+                const all = keysOf(last);
+                const keys = [];
+                for (let i = 0; i < keyCount; i += 1) {
+                  const value = all[i];
+                  if (typeof value !== "string" && typeof value !== "number") throw new InvalidRecordError(`${q.kind}: a row has no value for an ordering field, so this query cannot be paged`);
+                  keys.push(value);
+                }
+                keys.push(last.rid);
+                nextCursor = encodeCursor(tag, keys);
               }
               return {
-                deleted,
-                secretRefs: refs
+                records: page.map((r) => view(decl, r)),
+                nextCursor
               };
             },
-            query: async (q) => {
-              if (readsFail) throw new Error("records engine unreachable");
+            count: async (q) => {
+              reading();
+              const decl = declOf(q.kind);
+              assertWindowAllowed(q.kind, decl, q);
+              const where = planWhere(q.kind, decl, q.where, { allowIn: true });
+              let n = 0;
+              for (const row of table(q.kind).values()) if (inWindow(row, q) && (where === null || where.matches(row.data))) n += 1;
+              return { count: n };
+            },
+            histogram: async (q) => {
+              reading();
               const decl = declOf(q.kind);
-              const asked = Object.keys(q.where ?? {});
-              if (asked.length > 0) {
-                if (!decl.indexes.some((index) => {
-                  const leading = new Set(index.fields.slice(0, asked.length));
-                  return asked.length <= index.fields.length && asked.every((f) => leading.has(f));
-                })) throw new Error(`${q.kind}: no declared index serves [${asked.join(", ")}]`);
-              }
-              let rows = [...table(q.kind).values()];
-              for (const [field, wanted] of Object.entries(q.where ?? {})) rows = rows.filter((r) => r.data[field] === wanted);
-              const byAt = q.order === "at" || q.order === void 0 && decl.at === "required";
-              rows.sort((a, b) => byAt ? (a.at ?? 0) - (b.at ?? 0) : a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
-              if (q.desc === true) rows.reverse();
-              const start = q.cursor === void 0 ? 0 : Number(q.cursor);
-              const page = rows.slice(start, start + q.limit);
-              const more = start + q.limit < rows.length;
+              assertWindowAllowed(q.kind, decl, {
+                deviceId: q.deviceId,
+                atFrom: q.from
+              });
+              if (!(q.to > q.from)) throw new InvalidRecordError(`${q.kind}: histogram needs from < to`);
+              if (Math.ceil((q.to - q.from) / q.bucketMs) > 1e4) throw new InvalidRecordError(`${q.kind}: histogram would exceed ${HISTOGRAM_MAX_BUCKETS} buckets`);
+              const from = Math.floor(q.from);
+              const to = Math.ceil(q.to);
+              const step = Math.trunc(q.bucketMs);
+              const counts = /* @__PURE__ */ new Map();
+              for (const row of table(q.kind).values()) {
+                if (q.deviceId !== void 0 && row.deviceId !== q.deviceId) continue;
+                if (row.at === null || row.at < from || row.at >= to) continue;
+                const b = Math.trunc((row.at - from) / step);
+                counts.set(b, (counts.get(b) ?? 0) + 1);
+              }
+              return { buckets: [...counts.entries()].sort(([a], [b]) => a - b).map(([b, count]) => ({
+                bucketStart: from + b * q.bucketMs,
+                count
+              })) };
+            },
+            aggregate: async (q) => {
+              reading();
+              const decl = declOf(q.kind);
+              if (q.op !== "count" && q.field === void 0) throw new InvalidRecordError(`${q.kind}: ${q.op} needs a field`);
+              const extra = [q.field, q.groupBy].filter((f) => f !== void 0);
+              if (extra.length === 0 && q.where === void 0) throw new InvalidRecordError(`${q.kind}: a count with no field and no groupBy is "count"`);
+              const where = planWhere(q.kind, decl, q.where, {
+                allowIn: true,
+                extraFields: extra,
+                groupBy: q.groupBy
+              });
+              if (where === null) throw new InvalidRecordError(`${q.kind}: aggregate has nothing to read`);
+              const rows = [...table(q.kind).values()].filter((r) => where.matches(r.data));
+              const groups = /* @__PURE__ */ new Map();
+              if (q.groupBy === void 0) groups.set(null, rows);
+              else {
+                const by = q.groupBy;
+                for (const row of rows) {
+                  const g = extractField(row.data, by);
+                  groups.set(g, [...groups.get(g) ?? [], row]);
+                }
+              }
+              return { rows: [...groups.entries()].sort(([a], [b]) => compareSql(a, b)).map(([group, members]) => ({
+                group,
+                value: aggregateOf(q.op, q.field, members)
+              })) };
+            },
+            deleteWhere: async (q) => {
+              writing();
+              const decl = declOf(q.kind);
+              if (q.deviceId === void 0 && q.atBefore === void 0 && (q.where === void 0 || Object.keys(q.where).length === 0)) throw new FilterRequiredError(`${q.kind}: deleteWhere needs deviceId, atBefore or where - there is no "delete all"`);
+              assertWindowAllowed(q.kind, decl, {
+                deviceId: q.deviceId,
+                atFrom: q.atBefore
+              });
+              const where = planWhere(q.kind, decl, q.where, { allowIn: true });
+              return removeWhere(q.kind, (row) => {
+                if (where !== null && !where.matches(row.data)) return false;
+                if (q.deviceId !== void 0 && row.deviceId !== q.deviceId) return false;
+                if (q.atBefore !== void 0 && (row.at === null || row.at >= q.atBefore)) return false;
+                return true;
+              });
+            },
+            deleteDevice: async ({ deviceId, kinds }) => {
+              writing();
+              const deleted = {};
+              const secretRefs = [];
+              for (const [kind, decl] of decls) {
+                if (decl.deviceRemoval !== "delete") continue;
+                if (kinds !== void 0 && !kinds.includes(kind)) continue;
+                const result = removeWhere(kind, (row) => row.deviceId === deviceId);
+                deleted[kind] = result.deleted;
+                secretRefs.push(...result.secretRefs);
+              }
               return {
-                records: page.map((r) => view(q.kind, r)),
-                nextCursor: more ? String(start + q.limit) : null
+                deleted,
+                secretRefs
               };
             },
-            count: async ({ kind }) => ({ count: table(kind).size }),
-            histogram: async () => unimplemented("histogram"),
-            aggregate: async () => unimplemented("aggregate"),
-            deleteWhere: async () => unimplemented("deleteWhere"),
-            deleteDevice: async () => unimplemented("deleteDevice"),
-            allocateId: async () => unimplemented("allocateId")
+            allocateId: async ({ kind }) => {
+              writing();
+              declOf(kind);
+              const id = sequences.get(kind) ?? 1;
+              sequences.set(kind, id + 1);
+              pendingAllocated.add(`${kind}:${id}`);
+              return { id };
+            }
           },
           secrets: makeSpecKeychain(owner).access
         }),
         tables,
+        queries,
         failWrites: (on) => {
           writesFail = on;
         },
@@ -130823,12 +131312,14 @@ var require_sleep_gRQc2IoX = __commonJS({
           readsFail = on;
         },
         seed: (kind, row) => {
-          table(kind).set(row.id, {
+          store2(kind, table(kind).get(row.id), {
             id: row.id,
+            deviceId: row.deviceId ?? null,
             at: row.at ?? null,
+            expiresAt: row.expiresAt ?? null,
             rev: 1,
             updatedAt: 1,
-            data: row.data
+            data: jsonCopy(row.data)
           });
         }
       };
@@ -134592,7 +135083,7 @@ var require_addon = __commonJS({
   "../types/dist/addon.js"(exports) {
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-    var require_sleep = require_sleep_gRQc2IoX();
+    var require_sleep = require_sleep_Re8daN0Y();
     var require_event_category = require_event_category_eSqkye_K();
     var require_err_msg = require_err_msg_BhVbr0NX();
     var CAP_INPUT_DEFAULTS = Object.freeze({
@@ -137235,7 +137726,7 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     var require_prefix_range = require_prefix_range_D_KueXbQ();
     var require_prefix_walk = require_prefix_walk_Dv6MLZlM();
@@ -146307,7 +146798,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -146441,7 +146932,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -146804,11 +147295,11 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     var require_safe_buffer$1 = require_safe_buffer_D3aoa_7X();
     var require_ms$1 = require_ms_LB3giGoU();
-    var require_device_ca = require_device_ca_CUEx7sti();
+    var require_device_ca = require_device_ca_B3xUzps7();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
@@ -157340,7 +157831,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_log_read_filter = require_log_read_filter_Bi066jwU();
     var zod = require_zod();
     function sanitizeLabelName(raw) {
@@ -158301,7 +158792,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var node_fs_promises = __require("fs/promises");
     var node_util = __require("util");
     var node_os = __require("os");
@@ -160868,7 +161359,7 @@ var require_device_history_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var FIVE_MINUTES_MS = 5 * 6e4;
     var HOUR_MS = 60 * 6e4;
     var DAY_MS = 24 * HOUR_MS;
@@ -163914,7 +164405,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -165024,12 +165515,12 @@ var require_lib = __commonJS({
   }
 });
 
-// ../system/dist/wal-maintenance-DBvuVU9s.js
-var require_wal_maintenance_DBvuVU9s = __commonJS({
-  "../system/dist/wal-maintenance-DBvuVU9s.js"(exports) {
+// ../system/dist/wal-maintenance-jXcOxm2T.js
+var require_wal_maintenance_jXcOxm2T = __commonJS({
+  "../system/dist/wal-maintenance-jXcOxm2T.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_prefix_range = require_prefix_range_D_KueXbQ();
     var node_crypto = __require("crypto");
     var node_module = __require("module");
@@ -169146,9 +169637,9 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_retired_settings_keys = require_retired_settings_keys_CGUqX_Oz();
-    var require_wal_maintenance = require_wal_maintenance_DBvuVU9s();
+    var require_wal_maintenance = require_wal_maintenance_jXcOxm2T();
     var require_sqlite_snapshot_protocol = require_sqlite_snapshot_protocol_B9OndqZv();
     var require_wal_checkpoint_policy = require_wal_checkpoint_policy_d2z2qPqx();
     var node_fs_promises = __require("fs/promises");
@@ -170761,7 +171252,7 @@ var require_sqlite_storage = __commonJS({
     });
     require_chunk_Cek0wNdY();
     var require_builtins_sqlite_storage_filesystem_storage_addon = require_filesystem_storage_addon();
-    var require_wal_maintenance = require_wal_maintenance_DBvuVU9s();
+    var require_wal_maintenance = require_wal_maintenance_jXcOxm2T();
     var require_builtins_sqlite_storage_sqlite_settings_addon = require_sqlite_settings_addon();
     var ConfigStore = class {
       db;
@@ -170845,7 +171336,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -175432,12 +175923,12 @@ var require_storage_orchestrator = __commonJS({
   }
 });
 
-// ../system/dist/agent-https-C6M6apPV.js
-var require_agent_https_C6M6apPV = __commonJS({
-  "../system/dist/agent-https-C6M6apPV.js"(exports) {
+// ../system/dist/agent-https-DhFIbEwN.js
+var require_agent_https_DhFIbEwN = __commonJS({
+  "../system/dist/agent-https-DhFIbEwN.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_x509_es = require_x509_es_C4cOo48M();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -176495,11 +176986,11 @@ var require_agent_https_C6M6apPV = __commonJS({
   }
 });
 
-// ../system/dist/constants-7ZMxWr8Z.js
-var require_constants_7ZMxWr8Z = __commonJS({
-  "../system/dist/constants-7ZMxWr8Z.js"(exports) {
+// ../system/dist/constants-5mrGZxwS.js
+var require_constants_5mrGZxwS = __commonJS({
+  "../system/dist/constants-5mrGZxwS.js"(exports) {
     "use strict";
-    var MESH_CA_KEY_REF = require_dist_Ct_4tTeX().buildSecretRef({
+    var MESH_CA_KEY_REF = require_dist_D9aw_d0G().buildSecretRef({
       owner: "system",
       scope: { kind: "global" },
       fieldPath: "meshCaKey"
@@ -193596,11 +194087,11 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_safe_buffer$1 = require_safe_buffer_D3aoa_7X();
     var require_x509_es = require_x509_es_C4cOo48M();
-    var require_agent_https = require_agent_https_C6M6apPV();
-    var require_constants$8 = require_constants_7ZMxWr8Z();
+    var require_agent_https = require_agent_https_DhFIbEwN();
+    var require_constants$8 = require_constants_5mrGZxwS();
     var require_src$1 = require_src_CnAqG6EF();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -274652,7 +275143,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_formatter = require_formatter_DqAKDlvN();
     var require_log_file_read_protocol = require_log_file_read_protocol_D0WcLbIV();
     var node_path = __require("path");
@@ -282455,14 +282946,14 @@ var require_lib_8oZrELLm = __commonJS({
   }
 });
 
-// ../system/dist/hub-mdns-ciao-DJ-Amqd7.js
-var require_hub_mdns_ciao_DJ_Amqd7 = __commonJS({
-  "../system/dist/hub-mdns-ciao-DJ-Amqd7.js"(exports) {
+// ../system/dist/hub-mdns-ciao-CFlhVKK6.js
+var require_hub_mdns_ciao_CFlhVKK6 = __commonJS({
+  "../system/dist/hub-mdns-ciao-CFlhVKK6.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_x509_es = require_x509_es_C4cOo48M();
-    var require_agent_https = require_agent_https_C6M6apPV();
+    var require_agent_https = require_agent_https_DhFIbEwN();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var node_fs_promises = __require("fs/promises");
@@ -283474,12 +283965,12 @@ var require_platform_key_source_Di7HrlGR = __commonJS({
   }
 });
 
-// ../system/dist/restore-archive-HwOA83v3.js
-var require_restore_archive_HwOA83v3 = __commonJS({
-  "../system/dist/restore-archive-HwOA83v3.js"(exports) {
+// ../system/dist/restore-archive-6zkRREHO.js
+var require_restore_archive_6zkRREHO = __commonJS({
+  "../system/dist/restore-archive-6zkRREHO.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     var buffer = __require("buffer");
@@ -294720,9 +295211,9 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Ct_4tTeX();
+    var require_dist10 = require_dist_D9aw_d0G();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
-    var require_device_ca = require_device_ca_CUEx7sti();
+    var require_device_ca = require_device_ca_B3xUzps7();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_builtins_calendars_calendars_addon = require_calendars_addon();
@@ -294746,21 +295237,21 @@ var require_dist3 = __commonJS({
     var require_builtins_native_metrics_native_metrics_addon = require_native_metrics_addon();
     var require_builtins_device_history_device_history_addon = require_device_history_addon();
     var require_builtins_sqlite_storage_filesystem_storage_addon = require_filesystem_storage_addon();
-    var require_wal_maintenance = require_wal_maintenance_DBvuVU9s();
+    var require_wal_maintenance = require_wal_maintenance_jXcOxm2T();
     var require_builtins_sqlite_storage_sqlite_settings_addon = require_sqlite_settings_addon();
     var require_builtins_sqlite_storage_index = require_sqlite_storage();
     var require_builtins_storage_orchestrator_storage_orchestrator_addon = require_storage_orchestrator_addon();
     require_storage_orchestrator();
-    var require_agent_https = require_agent_https_C6M6apPV();
-    var require_constants15 = require_constants_7ZMxWr8Z();
+    var require_agent_https = require_agent_https_DhFIbEwN();
+    var require_constants15 = require_constants_5mrGZxwS();
     var require_builtins_system_config_system_config_addon = require_system_config_addon();
     require_system_config();
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_custom_action_registry = require_custom_action_registry_MRyes5j0();
-    var require_hub_mdns_ciao = require_hub_mdns_ciao_DJ_Amqd7();
+    var require_hub_mdns_ciao = require_hub_mdns_ciao_CFlhVKK6();
     var require_platform_key_source = require_platform_key_source_Di7HrlGR();
     var require_resource_monitor = require_resource_monitor_mio9dSCT();
-    var require_restore_archive = require_restore_archive_HwOA83v3();
+    var require_restore_archive = require_restore_archive_6zkRREHO();
     var require_coral_accelerators = require_coral_accelerators_oUXmmbc2();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -318204,7 +318695,7 @@ var require_dist4 = __commonJS({
   "../types/dist/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-    var require_sleep = require_sleep_gRQc2IoX();
+    var require_sleep = require_sleep_Re8daN0Y();
     var require_event_category = require_event_category_eSqkye_K();
     var require_composition = require_composition_eoYYVfOp();
     var require_node_color2 = require_node_color();