@camstack/system 1.2.442 → 1.2.444

package/dist/file-host-worker.js

@@ -1,5 +1,5 @@
 require("./chunk-Cek0wNdY.js");
-const require_wal_maintenance = require("./wal-maintenance-C-bmkDhm.js");
+const require_wal_maintenance = require("./wal-maintenance-dAv4IdzC.js");
 let node_worker_threads = require("node:worker_threads");
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**
@@ -90,6 +90,11 @@ async function main() {
 		return;
 	}
 	const dataTarget = backend;
+	const db = backend.getDatabase();
+	const recordsEngine = db === null || spec.databaseId === "history" ? null : new require_wal_maintenance.RecordsEngine(db, {
+		databaseId: spec.databaseId,
+		logger: logger.child("Records")
+	});
 	const vectorTarget = vectorIndex === null ? null : require_wal_maintenance.vectorProviderOf(vectorIndex);
 	const control = require_wal_maintenance.controlTargetOf(backend, node_worker_threads.threadId);
 	const answer = (id, result, transfer = false) => post({
@@ -124,6 +129,11 @@ async function main() {
 				answer(request.id, await require_wal_maintenance.callVector(vectorTarget, request.op, require_wal_maintenance.trustInput(request.input)), true);
 				return;
 			}
+			if (request.kind === "records") {
+				if (recordsEngine === null) throw new Error(`database "${spec.databaseId}" is not open`);
+				answer(request.id, await require_wal_maintenance.callRecords(recordsEngine, request.op, require_wal_maintenance.trustInput(request.input)));
+				return;
+			}
 			answer(request.id, require_wal_maintenance.callControl(control, request.op, require_wal_maintenance.trustInput(request.input)));
 		} catch (err) {
 			refuse(request.id, err);

package/dist/file-host-worker.mjs

@@ -1,4 +1,4 @@
-import { C as callData, S as callControl, T as controlTargetOf, a as WalMaintenance, b as trustInput, c as SqliteSettingsBackend, g as collectTransferables, m as serializeError, o as createVectorIndex, s as vectorProviderOf, v as isFileHostRequest, w as callVector, y as isFileHostWorkerData } from "./wal-maintenance-DE8QrreK.mjs";
+import { C as callControl, D as controlTargetOf, E as callVector, S as RecordsEngine, T as callRecords, a as WalMaintenance, b as trustInput, c as SqliteSettingsBackend, g as collectTransferables, m as serializeError, o as createVectorIndex, s as vectorProviderOf, v as isFileHostRequest, w as callData, y as isFileHostWorkerData } from "./wal-maintenance-zRc24mOC.mjs";
 import { parentPort, threadId, workerData } from "node:worker_threads";
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**
@@ -89,6 +89,11 @@ async function main() {
 		return;
 	}
 	const dataTarget = backend;
+	const db = backend.getDatabase();
+	const recordsEngine = db === null || spec.databaseId === "history" ? null : new RecordsEngine(db, {
+		databaseId: spec.databaseId,
+		logger: logger.child("Records")
+	});
 	const vectorTarget = vectorIndex === null ? null : vectorProviderOf(vectorIndex);
 	const control = controlTargetOf(backend, threadId);
 	const answer = (id, result, transfer = false) => post({
@@ -123,6 +128,11 @@ async function main() {
 				answer(request.id, await callVector(vectorTarget, request.op, trustInput(request.input)), true);
 				return;
 			}
+			if (request.kind === "records") {
+				if (recordsEngine === null) throw new Error(`database "${spec.databaseId}" is not open`);
+				answer(request.id, await callRecords(recordsEngine, request.op, trustInput(request.input)));
+				return;
+			}
 			answer(request.id, callControl(control, request.op, trustInput(request.input)));
 		} catch (err) {
 			refuse(request.id, err);

package/dist/{hub-mdns-ciao-BS2akjWx.mjs → hub-mdns-ciao-CRaC97V0.mjs}

@@ -1,5 +1,5 @@
 import { o as __toESM } from "./chunk-CNf5ZN-e.mjs";
-import { Si as userError } from "./dist-DsrQYcLm.mjs";
+import { Qi as userError } from "./dist-DERK-gP5.mjs";
 import { f as X509Certificate$1 } from "./x509.es-DK__ETIe.mjs";
 import { A as isConstrainedCa, E as reasonRequiresNewCa, M as permitsIdentity, P as readNameConstraints, T as evaluateExistingCert, _ as issueLeaf, g as generateCa, v as loadCa, y as collectCertIdentity } from "./agent-https-U0d4uvn2.mjs";
 import { X509Certificate, createPrivateKey } from "node:crypto";

package/dist/{hub-mdns-ciao-Da-0NEyr.js → hub-mdns-ciao-Cah9GCIg.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-CyIHDLCg.js");
+const require_dist = require("./dist-D1vECb_6.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
 const require_agent_https = require("./agent-https-DlpTMDqA.js");
 let node_crypto = require("node:crypto");

package/dist/index.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-CyIHDLCg.js");
-const require_device_ca = require("./device-ca-tKY_ZS9H.js");
+const require_dist = require("./dist-D1vECb_6.js");
+const require_device_ca = require("./device-ca-DT9X2S6d.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_builtins_calendars_calendars_addon = require("./builtins/calendars/calendars.addon.js");
@@ -25,21 +25,21 @@ require("./builtins/local-auth/index.js");
 const require_builtins_loki_logging_index = require("./builtins/loki-logging/index.js");
 const require_builtins_native_metrics_native_metrics_addon = require("./builtins/native-metrics/native-metrics.addon.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
-const require_wal_maintenance = require("./wal-maintenance-C-bmkDhm.js");
+const require_wal_maintenance = require("./wal-maintenance-dAv4IdzC.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./builtins/sqlite-storage/sqlite-settings.addon.js");
 const require_builtins_sqlite_storage_index = require("./builtins/sqlite-storage/index.js");
 const require_builtins_storage_orchestrator_storage_orchestrator_addon = require("./builtins/storage-orchestrator/storage-orchestrator.addon.js");
 require("./builtins/storage-orchestrator/index.js");
 const require_agent_https = require("./agent-https-DlpTMDqA.js");
-const require_constants = require("./constants-b7kpjuO4.js");
+const require_constants = require("./constants-BXiNEIeV.js");
 const require_builtins_system_config_system_config_addon = require("./builtins/system-config/system-config.addon.js");
 require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
-const require_custom_action_registry = require("./custom-action-registry-BKmoaqG0.js");
-const require_hub_mdns_ciao = require("./hub-mdns-ciao-Da-0NEyr.js");
+const require_custom_action_registry = require("./custom-action-registry-COyb49zm.js");
+const require_hub_mdns_ciao = require("./hub-mdns-ciao-Cah9GCIg.js");
 const require_platform_key_source = require("./platform-key-source-Di7HrlGR.js");
 const require_resource_monitor = require("./resource-monitor-mio9dSCT.js");
-const require_restore_archive = require("./restore-archive-Cdf09dHm.js");
+const require_restore_archive = require("./restore-archive-Dy-qKTdF.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
@@ -48,6 +48,8 @@ let node_net = require("node:net");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);
+let node_util = require("node:util");
+node_util = require_chunk.__toESM(node_util);
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_url = require("node:url");
@@ -55,8 +57,6 @@ let _camstack_types_addon = require("@camstack/types/addon");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_child_process = require("node:child_process");
-let node_util = require("node:util");
-node_util = require_chunk.__toESM(node_util);
 let node_events = require("node:events");
 let node_http = require("node:http");
 let node_v8 = require("node:v8");
@@ -11377,8 +11377,10 @@ function buildOneCapRouter(def, primitives, services) {
 			continue;
 		}
 		if (method.isObject) {
+			const stampedCap = require_dist.CALLER_STAMPED_CAPABILITIES.includes(capName);
 			const schema = nodeIdData ? inputSchema : require_dist.looseSchema(inputSchema);
-			procedures[method.name] = base.input(schema)[procKind](({ input, ctx }) => {
+			procedures[method.name] = base.input(schema)[procKind](({ input: wireInput, ctx }) => {
+				const input = stampedCap ? require_dist.withoutCallerStamp(wireInput) : wireInput;
 				if (nodeIdData) return invokeCapMethod(requireLocal(capName, () => getLocal(ctx), services), method, method.callerRequired ? injectCaller(stripKeys(input, []).rest, ctx, capName, method.name, services) : input, capName, isCollection, services);
 				if (isCollection) {
 					const { rest, picked } = stripKeys(input, ["nodeId", "addonId"]);
@@ -15670,6 +15672,29 @@ function asName(value) {
 	return typeof value === "string" && value.length > 0 ? value : null;
 }
 //#endregion
+//#region src/kernel/moleculer/records-api-transport.ts
+function recordsTransportOf(api) {
+	const r = api.records;
+	return {
+		declareKinds: (input) => r.declareKinds.mutate(input),
+		get: (input) => r.get.query(input),
+		getMany: (input) => r.getMany.query(input),
+		secretRefs: (input) => r.secretRefs.query(input),
+		put: (input) => r.put.mutate(input),
+		putMany: (input) => r.putMany.mutate(input),
+		patch: (input) => r.patch.mutate(input),
+		delete: (input) => r.delete.mutate(input),
+		deleteMany: (input) => r.deleteMany.mutate(input),
+		query: (input) => r.query.query(input),
+		count: (input) => r.count.query(input),
+		histogram: (input) => r.histogram.query(input),
+		aggregate: (input) => r.aggregate.query(input),
+		deleteWhere: (input) => r.deleteWhere.mutate(input),
+		deleteDevice: (input) => r.deleteDevice.mutate(input),
+		allocateId: (input) => r.allocateId.mutate(input)
+	};
+}
+//#endregion
 //#region src/kernel/moleculer/children-batch-loader.ts
 /**
 * Narrow an untyped cap answer to the fields the reconcile reads.
@@ -23567,6 +23592,19 @@ async function buildAddonContext(runtime, declaration, dataDir, options) {
 		nodeId
 	});
 	workerDisposerChain.add(() => peerBytesFacility.dispose());
+	const secrets = (0, _camstack_types_addon.createSecretsAccess)({
+		owner: addonId,
+		transport: {
+			put: (input) => api.keychain.put.mutate({
+				ref: input.ref,
+				value: input.value
+			}),
+			resolve: (input) => api.keychain.resolve.query({ refs: [...input.refs] }),
+			delete: (input) => api.keychain.delete.mutate({ refs: [...input.refs] }),
+			getState: () => api.keychain.getState.query({})
+		},
+		eventBus: scopedEventBus
+	});
 	return {
 		id: addonId,
 		logger: scopedLogger,
@@ -23579,18 +23617,12 @@ async function buildAddonContext(runtime, declaration, dataDir, options) {
 		api,
 		deps: new AddonDepsManager(addonDataDir, scopedLogger),
 		settings: settingsView,
-		secrets: (0, _camstack_types_addon.createSecretsAccess)({
+		secrets,
+		records: (0, _camstack_types_addon.createRecordsAccess)({
 			owner: addonId,
-			transport: {
-				put: (input) => api.keychain.put.mutate({
-					ref: input.ref,
-					value: input.value
-				}),
-				resolve: (input) => api.keychain.resolve.query({ refs: [...input.refs] }),
-				delete: (input) => api.keychain.delete.mutate({ refs: [...input.refs] }),
-				getState: () => api.keychain.getState.query({})
-			},
-			eventBus: scopedEventBus
+			transport: recordsTransportOf(api),
+			secrets,
+			logger: scopedLogger
 		}),
 		kernel: (() => {
 			const streamProbe = runtime.mode === "broker" ? {

package/dist/index.mjs

@@ -1,6 +1,6 @@
 import { i as __require } from "./chunk-CNf5ZN-e.mjs";
-import { $n as splitTranslationRef, Ar as errMsg$1, B as METHOD_ACCESS_MAP, Ci as EventCategory$1, Dn as objectInputDeclaresAddonId, Hr as asNumber, Ir as RUNTIME_DEFAULTS, Jt as extractNestedAddonId, Kn as scopesAllowAddon, Lr as ReadinessRegistry, Mr as DATAPLANE_SECRET_HEADER$1, Nn as procedureAuthKey, Nr as DEVICE_SETTINGS_CONTRIBUTION_METHODS, On as objectInputDeclaresRequiredDeviceId, Pr as DEVICE_STATUS_METHOD, Qr as expandCapMethods, R as LOG_LEVEL_RANK, Rr as ReadinessTimeoutError, Si as userError, Un as resolveMethodAuth, Ur as asString$1, Vr as asJsonObject$1, Xr as emitDownForOwnedCaps, _ as CatalogFileSchema, _n as logLevelAtMost, at as addonSettingsCapability, cn as kebabToCamel$1, d as CATALOG_LANGS, di as parseJsonUnknown, en as interpolate, gi as scopeKey, mi as resolveCapMount, n as AGENT_MDNS_TXT_KEYS, nn as isArrayOutputSchema, on as isObjectInput, pi as readinessKey, pn as lifecycleJobSchema, qn as scopesAllowDeviceCap, qr as createEvent$1, r as ALL_CAPABILITY_DEFINITIONS, rn as isCollectionArrayMethod, sn as isVoidInput, sr as supportedRuntimes, t as AGENT_MDNS_SERVICE_TYPE, ui as parseJsonObject, vn as looseSchema } from "./dist-DsrQYcLm.mjs";
-import { d as JWT_SIGNING_KEY_REF, f as JwtSigningKeyUnavailableError, g as processJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, p as SYSTEM_SECRET_OWNER, s as loadDeviceCa, u as verifyDeviceSignature, v as staticJwtSigningKey } from "./device-ca-BJpYTAPg.mjs";
+import { $i as EventCategory$1, $r as ReadinessRegistry, Gi as scopeKey, Kn as resolveMethodAuth, Lr as DATAPLANE_SECRET_HEADER$1, On as objectInputDeclaresAddonId, Pn as procedureAuthKey, Pr as errMsg$1, Qi as userError, Qr as RUNTIME_DEFAULTS, Ri as parseJsonObject, Rr as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Si as emitDownForOwnedCaps, Ui as resolveCapMount, V as METHOD_ACCESS_MAP, Vi as readinessKey, Xn as scopesAllowDeviceCap, Yn as scopesAllowAddon, Yt as extractNestedAddonId, c as CALLER_STAMPED_CAPABILITIES, cn as isVoidInput, di as asNumber, ei as ReadinessTimeoutError, f as CATALOG_LANGS, fi as asString$1, in as isCollectionArrayMethod, kn as objectInputDeclaresRequiredDeviceId, ln as kebabToCamel$1, mn as lifecycleJobSchema, n as AGENT_MDNS_TXT_KEYS, nr as splitTranslationRef, ot as addonSettingsCapability, r as ALL_CAPABILITY_DEFINITIONS, rn as isArrayOutputSchema, sn as isObjectInput, t as AGENT_MDNS_SERVICE_TYPE, tn as interpolate, ui as asJsonObject$1, ur as supportedRuntimes, v as CatalogFileSchema, vn as logLevelAtMost, vr as withoutCallerStamp, wi as expandCapMethods, yi as createEvent$1, yn as looseSchema, z as LOG_LEVEL_RANK, zi as parseJsonUnknown, zr as DEVICE_STATUS_METHOD } from "./dist-DERK-gP5.mjs";
+import { d as JWT_SIGNING_KEY_REF, f as JwtSigningKeyUnavailableError, g as processJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, p as SYSTEM_SECRET_OWNER, s as loadDeviceCa, u as verifyDeviceSignature, v as staticJwtSigningKey } from "./device-ca-jxjSL8Ov.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { CalendarsAddon } from "./builtins/calendars/calendars.addon.mjs";
@@ -24,21 +24,21 @@ import "./builtins/local-auth/index.mjs";
 import { LokiDestination, LokiLoggingAddon } from "./builtins/loki-logging/index.mjs";
 import NativeMetricsAddon, { a as NativeMetricsProvider, n as nodeProcReader, r as parseProcStat } from "./builtins/native-metrics/native-metrics.addon.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
-import { c as SqliteSettingsBackend } from "./wal-maintenance-DE8QrreK.mjs";
+import { c as SqliteSettingsBackend } from "./wal-maintenance-zRc24mOC.mjs";
 import { SqliteSettingsAddon } from "./builtins/sqlite-storage/sqlite-settings.addon.mjs";
 import { ConfigStore, DeviceStore } from "./builtins/sqlite-storage/index.mjs";
 import { StorageOrchestratorAddon, a as stripForwardedCaller, i as createHubCapForwardService, n as HUB_CAP_FWD_ACTION, o as buildStorageLocationRegistry, r as HUB_CAP_FWD_SERVICE, t as StorageOrchestratorService } from "./builtins/storage-orchestrator/storage-orchestrator.addon.mjs";
 import "./builtins/storage-orchestrator/index.mjs";
 import { A as isConstrainedCa, C as MAX_LEAF_VALIDITY_DAYS, D as PERMITTED_DNS_SUFFIXES, F as AGENT_HTTPS_NAMES_COLLECTION, I as AGENT_HTTPS_NAMES_COLUMNS, L as AgentHttpsNames, M as permitsIdentity, N as permitsName, O as PERMITTED_IP_RANGES, P as readNameConstraints, R as getProcessAgentHttpsNames, S as LEAF_RENEWAL_WINDOW_DAYS, T as evaluateExistingCert, a as collectAgentNames, b as systemHostFacts, c as installAgentHttps, d as issueAgentHttpsLeaf, f as loadAgentHttps, h as CA_COMMON_NAME, i as certificateNames, j as isLocalOnlyHostname, k as buildNameConstraintSet, l as isContainerBridgeAddress, m as pinnedHttpsCaFingerprint, n as acceptAgentSans, o as createAgentHttpsRequest, p as pemDigest, r as agentHttpsPaths, s as describeHttpsLeaf, t as AgentHttpsInstallError, u as isPrivateAddress, w as SERVER_AUTH_OID, x as CA_VALIDITY_DAYS, y as collectCertIdentity, z as setProcessAgentHttpsNames } from "./agent-https-U0d4uvn2.mjs";
-import { a as MESH_CA_KEY_REF, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY } from "./constants-2iWQ-Nx-.mjs";
+import { a as MESH_CA_KEY_REF, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY } from "./constants-BKX2QnIg.mjs";
 import { $ as generateMeshKeyPair, A as setProcessMeshPeerTransportLookup, B as describeMeshLeaf, C as setProcessMeshTlsEnabler, D as getProcessPeerLeaf, E as getProcessNodeMeshTransport, F as setProcessMeshTlsListenerState, G as MeshCaKeeper, H as setProcessMeshCertificateRegistry, I as MESH_NODE_CERTIFICATES_COLLECTION, J as caFingerprint, K as getProcessMeshCaState, L as MESH_NODE_CERTIFICATES_COLUMNS, M as revokeMeshCertificate, N as getProcessMeshTlsListenerState, O as isProcessVerifiedMeshPeer, P as openMeshTlsWhenRevocationsLoaded, Q as generateMeshCa, R as MeshCertificateRegistry, S as ServiceBroker, SystemConfigAddon, T as emitProcessNodeRegistered, U as MeshCrl, V as getProcessMeshCertificateRegistry, W as processMeshCrl, X as createMeshCsrPem, Y as caFingerprintCompact, Z as exportMeshPrivateKeyPem, _ as signPairingProof, _t as readCidrSetting, a as hubHostFromMeshAddress, at as AGENT_UI_UNLOCK_TTL_MS, b as TlsTcpTransporter, c as PAIRING_MAX_SESSIONS, ct as AGENT_UI_UNLOCK_VERSION, d as PAIRING_PROTOCOL, dt as mintAgentUiUnlockTicket, et as isValidAgentNodeId, f as PAIRING_TTL_MS, ft as parseAgentDashboardOrigins, g as keyFingerprintShort, gt as parseCidrList, h as describeCsr, ht as normalizeIp, i as AgentPairing, it as AGENT_DASHBOARD_ORIGINS_FIELD, j as renewMeshCertificate, k as onProcessNodeRegistered, l as PAIRING_PATHS, lt as UnlockTicketJtiStore, m as computePairingSas, mt as createCidrMatcher, n as HubPairing, nt as issueMeshLeafFromCsr, o as PAIRING_CODE_DIGITS, ot as AGENT_UI_UNLOCK_TYP, p as computePairingCommitment, pt as verifyAgentUiUnlockTicket, q as requireProcessMeshCa, r as PairingHttpError, rt as loadMeshCa, s as PAIRING_MAX_CODE_ATTEMPTS, st as AGENT_UI_UNLOCK_USE, tt as issueMeshLeafForNode, u as PAIRING_PIN_DIGITS, ut as isAllowedAgentDashboardReturnTo, v as verifyPairingProof, w as dropProcessPeer, x as Errors, y as MESH_TLS_PORT_HELLO_FIELD, z as RENEWAL_ABANDONED } from "./builtins/system-config/system-config.addon.mjs";
 import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
-import { C as isModelDownloaded, T as revisionWeightUrl, _ as downloadFile, a as startEventLoopStallMonitor, b as fetchJson, c as createAuthenticatedFileServer, d as resolveFilePath, f as ModelDownloadService, g as deleteModelFromDisk, h as collectModelFiles, i as attributeStall, l as parseRangeHeader, m as adoptModelRevisions, n as STALL_REPORT_MS, o as createFileDataPlaneHandler, r as STALL_TICK_MS, s as contentTypeFor, t as CustomActionRegistry, u as parseTokenizedUrl, v as downloadModel, w as resolveFormatRevision, x as getModelFilePath, y as ensureModel } from "./custom-action-registry-CyUuhATc.mjs";
-import { A as allFamiliesListenHost, C as caReplacementMarkerFile, D as replaceUnconstrainedLocalCa, E as reissueTlsLeaf, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as retirePreviousLocalCa, P as readLanHttpState, S as validateUploadedTls, T as loadTlsCert, _ as splitPemCertificates, a as storeUploadedCertificate, b as chainsToPublicRoot, c as leafFingerprintOf, d as servedHttpsLeafFingerprint, f as prepareBootTls, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as registerHttpsListener, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, p as UPLOADED_CA_FILE, r as regenerateCertificate, s as clearHttpsListener, t as createCiaoPublisher, u as reloadHttpsListener, v as writeExtraSans, w as ensureTlsCert, x as checkUploadedCa, y as writeTlsMode } from "./hub-mdns-ciao-BS2akjWx.mjs";
+import { C as isModelDownloaded, T as revisionWeightUrl, _ as downloadFile, a as startEventLoopStallMonitor, b as fetchJson, c as createAuthenticatedFileServer, d as resolveFilePath, f as ModelDownloadService, g as deleteModelFromDisk, h as collectModelFiles, i as attributeStall, l as parseRangeHeader, m as adoptModelRevisions, n as STALL_REPORT_MS, o as createFileDataPlaneHandler, r as STALL_TICK_MS, s as contentTypeFor, t as CustomActionRegistry, u as parseTokenizedUrl, v as downloadModel, w as resolveFormatRevision, x as getModelFilePath, y as ensureModel } from "./custom-action-registry-stpC3Zy-.mjs";
+import { A as allFamiliesListenHost, C as caReplacementMarkerFile, D as replaceUnconstrainedLocalCa, E as reissueTlsLeaf, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as retirePreviousLocalCa, P as readLanHttpState, S as validateUploadedTls, T as loadTlsCert, _ as splitPemCertificates, a as storeUploadedCertificate, b as chainsToPublicRoot, c as leafFingerprintOf, d as servedHttpsLeafFingerprint, f as prepareBootTls, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as registerHttpsListener, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, p as UPLOADED_CA_FILE, r as regenerateCertificate, s as clearHttpsListener, t as createCiaoPublisher, u as reloadHttpsListener, v as writeExtraSans, w as ensureTlsCert, x as checkUploadedCa, y as writeTlsMode } from "./hub-mdns-ciao-CRaC97V0.mjs";
 import { n as getPlatformKeychainKey, r as setPlatformKeychainKey, t as clearPlatformKeychainKey } from "./platform-key-source-BWlq0jjn.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Di9daRwI.mjs";
-import { c as BackupDecryptError, f as generateBackupKeyPair, h as readBackupEncryptionHeader, l as BackupKeyFormatError, r as prepareRestoreArchive, s as SystemBackupService, t as BackupKeyRequiredError, u as BackupKeyMismatchError } from "./restore-archive-RaA3uZ7H.mjs";
+import { c as BackupDecryptError, f as generateBackupKeyPair, h as readBackupEncryptionHeader, l as BackupKeyFormatError, r as prepareRestoreArchive, s as SystemBackupService, t as BackupKeyRequiredError, u as BackupKeyMismatchError } from "./restore-archive-daKyE24F.mjs";
 import { z } from "zod";
 import * as crypto$1 from "node:crypto";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
@@ -47,15 +47,15 @@ import { connect, createConnection, createServer } from "node:net";
 import { mkdir, rm, stat, unlink } from "node:fs/promises";
 import * as path$1 from "node:path";
 import { dirname, isAbsolute, join, resolve } from "node:path";
+import * as util from "node:util";
+import { promisify } from "node:util";
 import * as os$1 from "node:os";
 import { tmpdir } from "node:os";
 import { pathToFileURL } from "node:url";
-import { BOOT_RECOVERY_BACKOFF_MS, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DeviceType, DisposerChain, ErrorI18nPayloadSchema, EventCategory, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, ReadinessRegistry as ReadinessRegistry$1, asJsonObject, asString, collectZodSecretPaths, createDeviceProxy, createEvent, createEventBusSliceSource, createSecretsAccess, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods as expandCapMethods$1, maskUrlCredentials, readErrorI18n, readNodePin, scopeKey as scopeKey$1, scrubKnownSecrets, sleep, withCapInputDefaults } from "@camstack/types/addon";
+import { BOOT_RECOVERY_BACKOFF_MS, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DeviceType, DisposerChain, ErrorI18nPayloadSchema, EventCategory, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, ReadinessRegistry as ReadinessRegistry$1, asJsonObject, asString, collectZodSecretPaths, createDeviceProxy, createEvent, createEventBusSliceSource, createRecordsAccess, createSecretsAccess, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods as expandCapMethods$1, maskUrlCredentials, readErrorI18n, readNodePin, scopeKey as scopeKey$1, scrubKnownSecrets, sleep, withCapInputDefaults } from "@camstack/types/addon";
 import * as fs from "node:fs";
 import { accessSync, constants, createReadStream, createWriteStream, existsSync, readFileSync, readdirSync } from "node:fs";
 import { execFile, spawn } from "node:child_process";
-import * as util from "node:util";
-import { promisify } from "node:util";
 import { once } from "node:events";
 import { createServer as createServer$1, request } from "node:http";
 import * as v8 from "node:v8";
@@ -11374,8 +11374,10 @@ function buildOneCapRouter(def, primitives, services) {
 			continue;
 		}
 		if (method.isObject) {
+			const stampedCap = CALLER_STAMPED_CAPABILITIES.includes(capName);
 			const schema = nodeIdData ? inputSchema : looseSchema(inputSchema);
-			procedures[method.name] = base.input(schema)[procKind](({ input, ctx }) => {
+			procedures[method.name] = base.input(schema)[procKind](({ input: wireInput, ctx }) => {
+				const input = stampedCap ? withoutCallerStamp(wireInput) : wireInput;
 				if (nodeIdData) return invokeCapMethod(requireLocal(capName, () => getLocal(ctx), services), method, method.callerRequired ? injectCaller(stripKeys(input, []).rest, ctx, capName, method.name, services) : input, capName, isCollection, services);
 				if (isCollection) {
 					const { rest, picked } = stripKeys(input, ["nodeId", "addonId"]);
@@ -15667,6 +15669,29 @@ function asName(value) {
 	return typeof value === "string" && value.length > 0 ? value : null;
 }
 //#endregion
+//#region src/kernel/moleculer/records-api-transport.ts
+function recordsTransportOf(api) {
+	const r = api.records;
+	return {
+		declareKinds: (input) => r.declareKinds.mutate(input),
+		get: (input) => r.get.query(input),
+		getMany: (input) => r.getMany.query(input),
+		secretRefs: (input) => r.secretRefs.query(input),
+		put: (input) => r.put.mutate(input),
+		putMany: (input) => r.putMany.mutate(input),
+		patch: (input) => r.patch.mutate(input),
+		delete: (input) => r.delete.mutate(input),
+		deleteMany: (input) => r.deleteMany.mutate(input),
+		query: (input) => r.query.query(input),
+		count: (input) => r.count.query(input),
+		histogram: (input) => r.histogram.query(input),
+		aggregate: (input) => r.aggregate.query(input),
+		deleteWhere: (input) => r.deleteWhere.mutate(input),
+		deleteDevice: (input) => r.deleteDevice.mutate(input),
+		allocateId: (input) => r.allocateId.mutate(input)
+	};
+}
+//#endregion
 //#region src/kernel/moleculer/children-batch-loader.ts
 /**
 * Narrow an untyped cap answer to the fields the reconcile reads.
@@ -23564,6 +23589,19 @@ async function buildAddonContext(runtime, declaration, dataDir, options) {
 		nodeId
 	});
 	workerDisposerChain.add(() => peerBytesFacility.dispose());
+	const secrets = createSecretsAccess({
+		owner: addonId,
+		transport: {
+			put: (input) => api.keychain.put.mutate({
+				ref: input.ref,
+				value: input.value
+			}),
+			resolve: (input) => api.keychain.resolve.query({ refs: [...input.refs] }),
+			delete: (input) => api.keychain.delete.mutate({ refs: [...input.refs] }),
+			getState: () => api.keychain.getState.query({})
+		},
+		eventBus: scopedEventBus
+	});
 	return {
 		id: addonId,
 		logger: scopedLogger,
@@ -23576,18 +23614,12 @@ async function buildAddonContext(runtime, declaration, dataDir, options) {
 		api,
 		deps: new AddonDepsManager(addonDataDir, scopedLogger),
 		settings: settingsView,
-		secrets: createSecretsAccess({
+		secrets,
+		records: createRecordsAccess({
 			owner: addonId,
-			transport: {
-				put: (input) => api.keychain.put.mutate({
-					ref: input.ref,
-					value: input.value
-				}),
-				resolve: (input) => api.keychain.resolve.query({ refs: [...input.refs] }),
-				delete: (input) => api.keychain.delete.mutate({ refs: [...input.refs] }),
-				getState: () => api.keychain.getState.query({})
-			},
-			eventBus: scopedEventBus
+			transport: recordsTransportOf(api),
+			secrets,
+			logger: scopedLogger
 		}),
 		kernel: (() => {
 			const streamProbe = runtime.mode === "broker" ? {

package/dist/kernel/moleculer/records-api-transport.d.ts

@@ -0,0 +1,9 @@
+/**
+* The wire of `ctx.records` for an addon that runs in a forked runner or on an
+* agent (D881): every call is a cap call on `ctx.api.records`, and the parent
+* (or, on an agent, the agent and then `$hub-cap-fwd`) STAMPS who is calling
+* from the connection the call arrived on. The input carries no identity, so
+* there is nothing here an addon could change to read another addon's kind.
+*/
+import type { AddonApi, RecordsTransport } from "@camstack/types";
+export declare function recordsTransportOf(api: AddonApi): RecordsTransport;

package/dist/kernel/settings-view-types.d.ts

@@ -53,13 +53,6 @@ export interface ISettingsStore {
 	/** Addon-level global settings (apply to every device unless overridden). */
 	getAllAddon(addonId: string): Record<string, unknown>;
 	setAllAddon(addonId: string, config: Record<string, unknown>): void;
-	/** Legacy per-provider settings (used by some older wiring paths). */
-	getAllProvider(providerId: string): Record<string, unknown>;
-	setProvider(providerId: string, key: string, value: unknown): void;
-	/** Legacy flat per-device settings. Kept for backward compatibility
-	*  with pre-addon wiring; new code should use the addon-device API. */
-	getAllDevice(deviceId: string): Record<string, unknown>;
-	setDevice(deviceId: string, key: string, value: unknown): void;
 	/**
 	* Per-device runtime state — the whole cap-slice map as ONE row in the
 	* `device-runtime-state` collection.

package/dist/{restore-archive-Cdf09dHm.js → restore-archive-Dy-qKTdF.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-CyIHDLCg.js");
+const require_dist = require("./dist-D1vECb_6.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/{restore-archive-RaA3uZ7H.mjs → restore-archive-daKyE24F.mjs}

@@ -1,4 +1,4 @@
-import { b as DATABASE_SNAPSHOT_SUFFIX } from "./dist-DsrQYcLm.mjs";
+import { x as DATABASE_SNAPSHOT_SUFFIX } from "./dist-DERK-gP5.mjs";
 import { createCipheriv, createDecipheriv, createHash, createPrivateKey, createPublicKey, diffieHellman, generateKeyPairSync, hkdfSync, randomBytes } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.442",
+  "version": "1.2.444",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",
@@ -75,6 +75,9 @@
           },
           {
             "name": "storage-admin"
+          },
+          {
+            "name": "records"
           }
         ]
       },
@@ -199,6 +202,24 @@
           }
         ]
       },
+      {
+        "id": "record-entries",
+        "category": "system",
+        "name": "Record Entries",
+        "icon": "assets/record-entries/icon.svg",
+        "color": "#0d9488",
+        "description": "The ONE admin surface for every list of user-created entries (notification targets, brokers, LLM profiles): any addon declares an entry kind with `defineEntryKind` and the entries UI lists, adds, edits and deletes it, with password fields derived from the schema (`.meta({ secret: true })`). Holds no data of its own: it acts for each entry's owner on the records door and the keychain, in-process on the hub.",
+        "entry": "./dist/builtins/record-entries/index.js",
+        "protected": true,
+        "execution": {
+          "placement": "hub-only"
+        },
+        "capabilities": [
+          {
+            "name": "record-entries"
+          }
+        ]
+      },
       {
         "id": "metrics-native",
         "category": "system",

package/dist/{custom-action-registry-BKmoaqG0.js → custom-action-registry-COyb49zm.js}

@@ -2,10 +2,10 @@ const require_chunk = require("./chunk-Cek0wNdY.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);
+let node_util = require("node:util");
 let _camstack_types_addon = require("@camstack/types/addon");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
-let node_util = require("node:util");
 let node_http = require("node:http");
 let node_zlib = require("node:zlib");
 let node_perf_hooks = require("node:perf_hooks");

package/dist/{custom-action-registry-CyUuhATc.mjs → custom-action-registry-stpC3Zy-.mjs}

@@ -1,10 +1,10 @@
 import { createHash } from "node:crypto";
 import * as path$1 from "node:path";
 import path from "node:path";
+import { promisify } from "node:util";
 import { HF_REPO, MODEL_FORMATS, describeCustomActions, hfModelUrl } from "@camstack/types/addon";
 import * as fs from "node:fs";
 import { createReadStream, promises } from "node:fs";
-import { promisify } from "node:util";
 import { createServer } from "node:http";
 import { brotliCompress, constants as constants$1, gzip } from "node:zlib";
 import { PerformanceObserver } from "node:perf_hooks";