@camstack/server 1.2.592 → 1.2.593

package/dist/core/addon/addon-registry.service.js

@@ -110,10 +110,6 @@ function isSettingsStore(backend) {
         'getAllSystem',
         'getAllAddon',
         'setAllAddon',
-        'getAllProvider',
-        'setProvider',
-        'getAllDevice',
-        'setDevice',
         'getDeviceRuntimeState',
         'setDeviceRuntimeState',
         'clearDeviceRuntimeState',
@@ -1170,6 +1166,47 @@ class AddonRegistryService {
             eventBus: this.eventBusService,
         });
     }
+    /**
+     * A hub in-process records handle acting for `owner` (D881): the provider is
+     * reached straight, with the caller STATED - the one place a claim is trusted,
+     * as for the keychain. Only a system builtin's `ctx.records.forOwner` ever
+     * reaches a different owner.
+     */
+    recordsForOwner(owner, secrets) {
+        return (0, types_1.createRecordsAccess)({
+            owner,
+            transport: this.inProcessRecordsTransport(owner),
+            transportForOwner: (other) => this.inProcessRecordsTransport(other),
+            secrets,
+        });
+    }
+    inProcessRecordsTransport(owner) {
+        const provider = () => {
+            const p = this.capabilityRegistry.getSingleton('records');
+            if (p === null || p === undefined)
+                throw new Error('records provider is not registered');
+            return p;
+        };
+        const as = (input) => Object.assign({}, input, { callerAddonId: owner });
+        return {
+            declareKinds: (input) => provider().declareKinds(as(input)),
+            get: (input) => provider().get(as(input)),
+            getMany: (input) => provider().getMany(as(input)),
+            secretRefs: (input) => provider().secretRefs(as(input)),
+            put: (input) => provider().put(as(input)),
+            putMany: (input) => provider().putMany(as(input)),
+            patch: (input) => provider().patch(as(input)),
+            delete: (input) => provider().delete(as(input)),
+            deleteMany: (input) => provider().deleteMany(as(input)),
+            query: (input) => provider().query(as(input)),
+            count: (input) => provider().count(as(input)),
+            histogram: (input) => provider().histogram(as(input)),
+            aggregate: (input) => provider().aggregate(as(input)),
+            deleteWhere: (input) => provider().deleteWhere(as(input)),
+            deleteDevice: (input) => provider().deleteDevice(as(input)),
+            allocateId: (input) => provider().allocateId(as(input)),
+        };
+    }
     childIdForAddon(addonId) {
         const decl = this.addonEntries.get(addonId)?.declaration;
         return decl ? (0, types_1.resolveRunnerId)(decl, addonId) : addonId;
@@ -2896,6 +2933,16 @@ class AddonRegistryService {
             nodeId: this.broker.nodeID,
         });
         this.getOrCreateDisposerChain(addonId).add(() => peerBytesFacility.dispose());
+        // This builtin's keychain values (D787). In-process, so the caller is
+        // STATED (no wire, no stamp) - the one place the keychain trusts a claim.
+        // `forOwner` is the door a system builtin (device-manager,
+        // storage-orchestrator) uses to keep another addon's values.
+        const secrets = (0, types_1.createSecretsAccess)({
+            owner: addonId,
+            transport: this.inProcessKeychainTransport(addonId),
+            transportForOwner: (owner) => this.inProcessKeychainTransport(owner),
+            eventBus: this.eventBusService,
+        });
         const ctx = {
             id: `addon:${addonId}`,
             logger,
@@ -2983,16 +3030,12 @@ class AddonRegistryService {
                 return (0, types_1.createDeviceProxy)(api, binding);
             },
             settings: settingsView,
-            // This builtin's keychain values (D787). In-process, so the caller is
-            // STATED (no wire, no stamp) — the one place the keychain trusts a
-            // claim. `forOwner` is the door a system builtin (device-manager,
-            // storage-orchestrator) uses to keep another addon's values.
-            secrets: (0, types_1.createSecretsAccess)({
-                owner: addonId,
-                transport: this.inProcessKeychainTransport(addonId),
-                transportForOwner: (owner) => this.inProcessKeychainTransport(owner),
-                eventBus: this.eventBusService,
-            }),
+            secrets,
+            // This builtin's record kinds (D881). In-process, so the caller is STATED
+            // (no wire, no stamp): the same single place identity is trusted as for
+            // the keychain. `ctx.records` is the owner's own door; a builtin that
+            // acts for another owner (the entries service) builds one with `recordsForOwner`.
+            records: this.recordsForOwner(addonId, secrets),
             useCapability(capName, scope = { type: 'global' }) {
                 return getOrCreateHandle(capName, scope, 15_000);
             },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/server",
-  "version": "1.2.592",
+  "version": "1.2.593",
   "license": "MIT",
   "private": false,
   "files": [
@@ -38,19 +38,19 @@
     ]
   },
   "dependencies": {
-    "@camstack/addon-admin-ui": "1.2.434",
-    "@camstack/addon-agent-ui": "1.2.241",
+    "@camstack/addon-admin-ui": "1.2.435",
+    "@camstack/addon-agent-ui": "1.2.242",
     "@camstack/addon-auth": "1.2.148",
     "@camstack/addon-decoder-nodeav": "1.2.123",
     "@camstack/addon-notifiers": "1.2.135",
-    "@camstack/addon-pipeline": "1.2.374",
+    "@camstack/addon-pipeline": "1.2.375",
     "@camstack/addon-pipeline-orchestrator": "1.2.332",
-    "@camstack/addon-post-analysis": "1.2.373",
+    "@camstack/addon-post-analysis": "1.2.374",
     "@camstack/develop": "0.1.11",
     "@camstack/sdk": "1.2.132",
-    "@camstack/system": "1.2.443",
-    "@camstack/types": "1.2.379",
-    "@camstack/ui-library": "1.2.297",
+    "@camstack/system": "1.2.444",
+    "@camstack/types": "1.2.380",
+    "@camstack/ui-library": "1.2.298",
     "@fastify/compress": "^9.0.0",
     "@fastify/cookie": "^11.0.2",
     "@fastify/cors": "^11.2.0",