@camstack/system 1.2.443 → 1.2.444

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D9qT3jHr.js");
+const require_dist = require("../../dist-D1vECb_6.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { gn as logDestinationCapability, jr as BaseAddon } from "../../dist-Bxt_S-9a.mjs";
+import { Fr as BaseAddon, _n as logDestinationCapability } from "../../dist-DERK-gP5.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/keychain/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D9qT3jHr.js");
-const require_device_ca = require("../../device-ca-DGayRmC0.js");
-const require_constants = require("../../constants-DWmm7_of.js");
+const require_dist = require("../../dist-D1vECb_6.js");
+const require_device_ca = require("../../device-ca-DT9X2S6d.js");
+const require_constants = require("../../constants-BXiNEIeV.js");
 const require_platform_key_source = require("../../platform-key-source-Di7HrlGR.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/keychain/index.mjs

@@ -1,6 +1,6 @@
-import { Ei as EventCategory, L as KEYCHAIN_RESET_TRIGGER_ACTOR, di as normalizeSecretOwner, ei as formatSecretScope, jr as BaseAddon, ln as keychainAdminCapability, mi as parseSecretRef, un as keychainCapability } from "../../dist-Bxt_S-9a.mjs";
-import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-DBfiJ_SB.mjs";
-import { a as MESH_CA_KEY_REF } from "../../constants-CGwVaAV3.mjs";
+import { $i as EventCategory, Bi as parseSecretRef, Fr as BaseAddon, Li as normalizeSecretOwner, R as KEYCHAIN_RESET_TRIGGER_ACTOR, Ti as formatSecretScope, dn as keychainCapability, un as keychainAdminCapability } from "../../dist-DERK-gP5.mjs";
+import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-jxjSL8Ov.mjs";
+import { a as MESH_CA_KEY_REF } from "../../constants-BKX2QnIg.mjs";
 import { n as getPlatformKeychainKey } from "../../platform-key-source-BWlq0jjn.mjs";
 import { createCipheriv, createDecipheriv, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { restrictDirToOwnerSync, restrictFileToOwnerSync, writeOwnerOnlyFileSync } from "@camstack/types/node";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D9qT3jHr.js");
+const require_dist = require("../../dist-D1vECb_6.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Ar as errMsg, Ei as EventCategory, G as RecordingStatusSchema, Jr as createEvent, W as RECORDING_SOURCE_CAMSTACK_ADDON, jr as BaseAddon } from "../../dist-Bxt_S-9a.mjs";
+import { $i as EventCategory, Fr as BaseAddon, G as RECORDING_SOURCE_CAMSTACK_ADDON, K as RecordingStatusSchema, Pr as errMsg, yi as createEvent } from "../../dist-DERK-gP5.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,10 +3,10 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D9qT3jHr.js");
+const require_dist = require("../../dist-D1vECb_6.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_ms$1 = require("../../ms-LB3giGoU.js");
-const require_device_ca = require("../../device-ca-DGayRmC0.js");
+const require_device_ca = require("../../device-ca-DT9X2S6d.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,8 +1,8 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { E as DEVICE_NONCE_TTL_MS, It as deviceCredentialsCapability, Q as SsoBridgeClaimsSchema, T as DEVICE_ENROLLMENT_TTL_MS, Ti as userError, X as ScopedTokenSchema, Zt as formatDeviceRevoker, a as ApiKeyRecordSchema, cr as userManagementCapability, ct as authProviderCapability, jr as BaseAddon, li as makeSecretMarker, mt as buildDeviceSignatureMessage, oi as isSecretMarker, pt as buildDeviceEnrollmentLink, rt as UserRecordSchema } from "../../dist-Bxt_S-9a.mjs";
+import { $ as SsoBridgeClaimsSchema, D as DEVICE_NONCE_TTL_MS, E as DEVICE_ENROLLMENT_TTL_MS, Fr as BaseAddon, Lt as deviceCredentialsCapability, Pi as makeSecretMarker, Qi as userError, Qt as formatDeviceRevoker, Z as ScopedTokenSchema, a as ApiKeyRecordSchema, dr as userManagementCapability, ht as buildDeviceSignatureMessage, it as UserRecordSchema, ji as isSecretMarker, lt as authProviderCapability, mt as buildDeviceEnrollmentLink } from "../../dist-DERK-gP5.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { t as require_ms } from "../../ms-CgH2OFlD.mjs";
-import { _ as setProcessJwtSigningKey, a as importDevicePublicKey, c as rebuildDeviceCaCertificate, d as JWT_SIGNING_KEY_REF, g as processJwtSigningKey, h as loadJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, r as DEVICE_CA_SETTINGS_SECTION, s as loadDeviceCa, t as DEVICE_CA_FIELD, u as verifyDeviceSignature } from "../../device-ca-DBfiJ_SB.mjs";
+import { _ as setProcessJwtSigningKey, a as importDevicePublicKey, c as rebuildDeviceCaCertificate, d as JWT_SIGNING_KEY_REF, g as processJwtSigningKey, h as loadJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, r as DEVICE_CA_SETTINGS_SECTION, s as loadDeviceCa, t as DEVICE_CA_FIELD, u as verifyDeviceSignature } from "../../device-ca-jxjSL8Ov.mjs";
 import * as crypto$1 from "node:crypto";
 import { X509Certificate, createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D9qT3jHr.js");
-const require_hub_mdns_ciao = require("../../hub-mdns-ciao-B-wk9nzx.js");
+const require_dist = require("../../dist-D1vECb_6.js");
+const require_hub_mdns_ciao = require("../../hub-mdns-ciao-Cah9GCIg.js");
 let zod = require("zod");
 let node_net = require("node:net");
 let node_os = require("node:os");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,5 +1,5 @@
-import { An as pickAppLinkHub, Ei as EventCategory, F as HUB_MDNS_SERVICE_TYPE, I as HUB_MDNS_TXT_KEYS, Ln as resolveAppConnections, U as NetworkTunnelStartedDataSchema, Vn as resolveHubAddressRoles, Wn as resolveNotificationTapAddress, in as isDefaultAppConnectionEndpoint, jr as BaseAddon, l as CAMSTACK_APP_LINK_ORIGIN, mn as localNetworkCapability, tn as isAppLinkBase, ur as validateCustomAddress, yt as checkRoleAddress } from "../../dist-Bxt_S-9a.mjs";
-import { P as readLanHttpState, a as storeUploadedCertificate, d as servedHttpsLeafFingerprint, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, r as regenerateCertificate, t as createCiaoPublisher, v as writeExtraSans, w as ensureTlsCert } from "../../hub-mdns-ciao-DpPcQDg-.mjs";
+import { $i as EventCategory, Bn as resolveAppConnections, Fr as BaseAddon, I as HUB_MDNS_SERVICE_TYPE, L as HUB_MDNS_TXT_KEYS, W as NetworkTunnelStartedDataSchema, Wn as resolveHubAddressRoles, an as isDefaultAppConnectionEndpoint, bt as checkRoleAddress, hn as localNetworkCapability, jn as pickAppLinkHub, nn as isAppLinkBase, pr as validateCustomAddress, qn as resolveNotificationTapAddress, u as CAMSTACK_APP_LINK_ORIGIN } from "../../dist-DERK-gP5.mjs";
+import { P as readLanHttpState, a as storeUploadedCertificate, d as servedHttpsLeafFingerprint, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, r as regenerateCertificate, t as createCiaoPublisher, v as writeExtraSans, w as ensureTlsCert } from "../../hub-mdns-ciao-CRaC97V0.mjs";
 import { z } from "zod";
 import { isIP } from "node:net";
 import * as os$1 from "node:os";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D9qT3jHr.js");
+const require_dist = require("../../dist-D1vECb_6.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { gn as logDestinationCapability, jr as BaseAddon } from "../../dist-Bxt_S-9a.mjs";
+import { Fr as BaseAddon, _n as logDestinationCapability } from "../../dist-DERK-gP5.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D9qT3jHr.js");
+const require_dist = require("../../dist-D1vECb_6.js");
 let node_fs_promises = require("node:fs/promises");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Ar as errMsg, Ei as EventCategory, Fn as reducePoints, Jr as createEvent, Rn as resolveBucketMs, Sn as metricsProviderCapability, Xt as foldSnapshotByFunction, jr as BaseAddon } from "../../dist-Bxt_S-9a.mjs";
+import { $i as EventCategory, Cn as metricsProviderCapability, Fr as BaseAddon, Pr as errMsg, Rn as reducePoints, Vn as resolveBucketMs, Zt as foldSnapshotByFunction, yi as createEvent } from "../../dist-DERK-gP5.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import { promisify } from "node:util";
 import * as os$1 from "node:os";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D9qT3jHr.js");
+const require_dist = require("../../dist-D1vECb_6.js");
 let node_util = require("node:util");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM, r as __exportAll } from "../../chunk-CNf5ZN-e.mjs";
-import { Ar as errMsg, Ei as EventCategory, Jn as scoreRuntimes, Mn as platformProbeCapability, Qr as emitReadiness, Vt as enumerateInferenceDevices, jr as BaseAddon } from "../../dist-Bxt_S-9a.mjs";
+import { $i as EventCategory, Ci as emitReadiness, Fr as BaseAddon, Ht as enumerateInferenceDevices, Nn as platformProbeCapability, Pr as errMsg, Zn as scoreRuntimes } from "../../dist-DERK-gP5.mjs";
 import { promisify } from "node:util";
 import * as os$1 from "node:os";
 import * as fs from "node:fs";

package/dist/builtins/record-entries/entries-service.d.ts

@@ -0,0 +1,42 @@
+import { type EntryKindInfo, type EntryView, type RecordsAccess, type StorageKind } from "@camstack/types";
+/** Entries one list answers: an entries list is a settings page, not a table. */
+export declare const ENTRIES_LIST_MAX = 2e3;
+export interface EntriesServiceDeps {
+	/** Every record kind of the engine; `counts: false` is a catalog read with no row counting. */
+	listKinds(counts: boolean): Promise<readonly StorageKind[]>;
+	/** The records door of `owner` (hub in-process builtins only). */
+	recordsFor(owner: string): RecordsAccess;
+	newId?: () => string;
+}
+export declare class EntriesService {
+	private readonly deps;
+	constructor(deps: EntriesServiceDeps);
+	private entryKind;
+	private definitionOf;
+	listEntryKinds(): Promise<{
+		kinds: EntryKindInfo[];
+	}>;
+	listEntries(input: {
+		owner: string;
+		kind: string;
+	}): Promise<{
+		entries: EntryView[];
+	}>;
+	putEntry(input: {
+		owner: string;
+		kind: string;
+		id?: string | undefined;
+		data: Record<string, unknown>;
+		ifRev?: number | undefined;
+	}): Promise<{
+		id: string;
+		rev: number;
+	}>;
+	deleteEntry(input: {
+		owner: string;
+		kind: string;
+		id: string;
+	}): Promise<{
+		deleted: boolean;
+	}>;
+}

package/dist/builtins/record-entries/index.d.ts

@@ -0,0 +1 @@
+export { RecordEntriesAddon, default } from "./record-entries.addon.js";

package/dist/builtins/record-entries/index.js

@@ -0,0 +1,142 @@
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
+});
+require("../../chunk-Cek0wNdY.js");
+const require_dist = require("../../dist-D1vECb_6.js");
+let zod = require("zod");
+let node_crypto = require("node:crypto");
+//#region src/builtins/record-entries/entries-service.ts
+/**
+* The entries service (D881): one list/add/edit/delete surface for every entry
+* kind an addon declares (`defineEntryKind`). It holds no data and no schema of
+* its own - the engine's catalog is the source (`storageAdmin.listKinds`), and
+* each call acts for the entry's OWNER through `ctx.records.forOwner`, so the
+* owner's keychain refs and the owner-only rule of records both hold.
+*
+* The body is validated against the kind's JSON Schema descriptor
+* (`z.fromJSONSchema`), so a form can only save what the owner's own schema
+* describes. A password field is whatever the schema marks `secret: true`.
+*/
+/** Entries one list answers: an entries list is a settings page, not a table. */
+var ENTRIES_LIST_MAX = 2e3;
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var EntriesService = class {
+	deps;
+	constructor(deps) {
+		this.deps = deps;
+	}
+	async entryKind(owner, kind) {
+		const found = (await this.deps.listKinds(false)).find((k) => k.owner === owner && k.kind === kind && k.declaration.entry !== void 0);
+		if (found === void 0) throw new require_dist.UnknownRecordKindError(`"${owner}" declared no entry kind "${kind}"`);
+		return found;
+	}
+	definitionOf(info) {
+		const entry = info.declaration.entry;
+		if (entry === void 0) throw new require_dist.UnknownRecordKindError(`"${info.kind}" is not an entry kind`);
+		const body = zod.z.fromJSONSchema(entry.fields);
+		const schema = zod.z.custom((value) => isRecord(value) && body.safeParse(value).success, { message: "the entry does not match the kind's schema" });
+		return {
+			name: info.kind,
+			schema,
+			declaration: info.declaration
+		};
+	}
+	async listEntryKinds() {
+		return { kinds: (await this.deps.listKinds(true)).filter((k) => k.declaration.entry !== void 0 && k.state === "declared").map((k) => {
+			const entry = k.declaration.entry;
+			return {
+				owner: k.owner,
+				kind: k.kind,
+				title: entry?.title ?? k.kind,
+				nameField: entry?.nameField ?? "name",
+				fields: entry?.fields ?? {},
+				secretPaths: k.declaration.secretPaths,
+				rows: k.rows ?? 0
+			};
+		}) };
+	}
+	async listEntries(input) {
+		const info = await this.entryKind(input.owner, input.kind);
+		const nameField = info.declaration.entry?.nameField ?? "name";
+		const handle = this.deps.recordsFor(input.owner).kind(this.definitionOf(info));
+		const entries = [];
+		let cursor;
+		do {
+			const page = await handle.query({
+				limit: 500,
+				...cursor === void 0 ? {} : { cursor },
+				order: "id"
+			});
+			for (const row of page.records) {
+				const name = row.data[nameField];
+				entries.push({
+					id: row.id,
+					name: typeof name === "string" ? name : row.id,
+					rev: row.rev,
+					updatedAt: row.updatedAt,
+					data: row.data
+				});
+			}
+			cursor = page.nextCursor ?? void 0;
+			if (entries.length > 2e3) throw new require_dist.InvalidRecordError(`${input.kind}: more than ${ENTRIES_LIST_MAX} entries`);
+		} while (cursor !== void 0);
+		return { entries };
+	}
+	async putEntry(input) {
+		const info = await this.entryKind(input.owner, input.kind);
+		const handle = this.deps.recordsFor(input.owner).kind(this.definitionOf(info));
+		const id = input.id ?? (this.deps.newId ?? node_crypto.randomUUID)();
+		const ifRev = input.id === void 0 ? 0 : input.ifRev;
+		const { rev } = await handle.put({
+			id,
+			data: input.data
+		}, ifRev === void 0 ? {} : { ifRev });
+		return {
+			id,
+			rev
+		};
+	}
+	async deleteEntry(input) {
+		const info = await this.entryKind(input.owner, input.kind);
+		return { deleted: await this.deps.recordsFor(input.owner).kind(this.definitionOf(info)).delete(input.id) };
+	}
+};
+//#endregion
+//#region src/builtins/record-entries/record-entries.addon.ts
+/**
+* `record-entries` - the generic entries surface (D881). Hub-only and
+* in-process: it acts for each entry's owner on the keychain and on the
+* records door, which only a hub in-process system builtin may do
+* (`ctx.records.forOwner`, `ctx.secrets.forOwner`).
+*/
+var RecordEntriesAddon = class extends require_dist.BaseAddon {
+	id = "record-entries";
+	constructor() {
+		super({});
+	}
+	async onInitialize() {
+		const ctx = this.ctx;
+		const records = ctx.records;
+		const forOwner = records?.forOwner ?? null;
+		if (records === void 0 || forOwner === null) throw new Error("record-entries: this process cannot act for another owner (hub in-process only)");
+		const service = new EntriesService({
+			listKinds: async (counts) => (await ctx.api.storageAdmin.listKinds.query({ counts })).kinds,
+			recordsFor: (owner) => forOwner(owner)
+		});
+		return [{
+			capability: require_dist.recordEntriesCapability,
+			provider: {
+				listEntryKinds: () => service.listEntryKinds(),
+				listEntries: (input) => service.listEntries(input),
+				putEntry: (input) => service.putEntry(input),
+				deleteEntry: (input) => service.deleteEntry(input)
+			}
+		}];
+	}
+};
+//#endregion
+exports.RecordEntriesAddon = RecordEntriesAddon;
+exports.default = RecordEntriesAddon;

package/dist/builtins/record-entries/index.mjs

@@ -0,0 +1,136 @@
+import { Fr as BaseAddon, In as recordEntriesCapability, Ur as InvalidRecordError, ci as UnknownRecordKindError } from "../../dist-DERK-gP5.mjs";
+import { z } from "zod";
+import { randomUUID } from "node:crypto";
+//#region src/builtins/record-entries/entries-service.ts
+/**
+* The entries service (D881): one list/add/edit/delete surface for every entry
+* kind an addon declares (`defineEntryKind`). It holds no data and no schema of
+* its own - the engine's catalog is the source (`storageAdmin.listKinds`), and
+* each call acts for the entry's OWNER through `ctx.records.forOwner`, so the
+* owner's keychain refs and the owner-only rule of records both hold.
+*
+* The body is validated against the kind's JSON Schema descriptor
+* (`z.fromJSONSchema`), so a form can only save what the owner's own schema
+* describes. A password field is whatever the schema marks `secret: true`.
+*/
+/** Entries one list answers: an entries list is a settings page, not a table. */
+var ENTRIES_LIST_MAX = 2e3;
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var EntriesService = class {
+	deps;
+	constructor(deps) {
+		this.deps = deps;
+	}
+	async entryKind(owner, kind) {
+		const found = (await this.deps.listKinds(false)).find((k) => k.owner === owner && k.kind === kind && k.declaration.entry !== void 0);
+		if (found === void 0) throw new UnknownRecordKindError(`"${owner}" declared no entry kind "${kind}"`);
+		return found;
+	}
+	definitionOf(info) {
+		const entry = info.declaration.entry;
+		if (entry === void 0) throw new UnknownRecordKindError(`"${info.kind}" is not an entry kind`);
+		const body = z.fromJSONSchema(entry.fields);
+		const schema = z.custom((value) => isRecord(value) && body.safeParse(value).success, { message: "the entry does not match the kind's schema" });
+		return {
+			name: info.kind,
+			schema,
+			declaration: info.declaration
+		};
+	}
+	async listEntryKinds() {
+		return { kinds: (await this.deps.listKinds(true)).filter((k) => k.declaration.entry !== void 0 && k.state === "declared").map((k) => {
+			const entry = k.declaration.entry;
+			return {
+				owner: k.owner,
+				kind: k.kind,
+				title: entry?.title ?? k.kind,
+				nameField: entry?.nameField ?? "name",
+				fields: entry?.fields ?? {},
+				secretPaths: k.declaration.secretPaths,
+				rows: k.rows ?? 0
+			};
+		}) };
+	}
+	async listEntries(input) {
+		const info = await this.entryKind(input.owner, input.kind);
+		const nameField = info.declaration.entry?.nameField ?? "name";
+		const handle = this.deps.recordsFor(input.owner).kind(this.definitionOf(info));
+		const entries = [];
+		let cursor;
+		do {
+			const page = await handle.query({
+				limit: 500,
+				...cursor === void 0 ? {} : { cursor },
+				order: "id"
+			});
+			for (const row of page.records) {
+				const name = row.data[nameField];
+				entries.push({
+					id: row.id,
+					name: typeof name === "string" ? name : row.id,
+					rev: row.rev,
+					updatedAt: row.updatedAt,
+					data: row.data
+				});
+			}
+			cursor = page.nextCursor ?? void 0;
+			if (entries.length > 2e3) throw new InvalidRecordError(`${input.kind}: more than ${ENTRIES_LIST_MAX} entries`);
+		} while (cursor !== void 0);
+		return { entries };
+	}
+	async putEntry(input) {
+		const info = await this.entryKind(input.owner, input.kind);
+		const handle = this.deps.recordsFor(input.owner).kind(this.definitionOf(info));
+		const id = input.id ?? (this.deps.newId ?? randomUUID)();
+		const ifRev = input.id === void 0 ? 0 : input.ifRev;
+		const { rev } = await handle.put({
+			id,
+			data: input.data
+		}, ifRev === void 0 ? {} : { ifRev });
+		return {
+			id,
+			rev
+		};
+	}
+	async deleteEntry(input) {
+		const info = await this.entryKind(input.owner, input.kind);
+		return { deleted: await this.deps.recordsFor(input.owner).kind(this.definitionOf(info)).delete(input.id) };
+	}
+};
+//#endregion
+//#region src/builtins/record-entries/record-entries.addon.ts
+/**
+* `record-entries` - the generic entries surface (D881). Hub-only and
+* in-process: it acts for each entry's owner on the keychain and on the
+* records door, which only a hub in-process system builtin may do
+* (`ctx.records.forOwner`, `ctx.secrets.forOwner`).
+*/
+var RecordEntriesAddon = class extends BaseAddon {
+	id = "record-entries";
+	constructor() {
+		super({});
+	}
+	async onInitialize() {
+		const ctx = this.ctx;
+		const records = ctx.records;
+		const forOwner = records?.forOwner ?? null;
+		if (records === void 0 || forOwner === null) throw new Error("record-entries: this process cannot act for another owner (hub in-process only)");
+		const service = new EntriesService({
+			listKinds: async (counts) => (await ctx.api.storageAdmin.listKinds.query({ counts })).kinds,
+			recordsFor: (owner) => forOwner(owner)
+		});
+		return [{
+			capability: recordEntriesCapability,
+			provider: {
+				listEntryKinds: () => service.listEntryKinds(),
+				listEntries: (input) => service.listEntries(input),
+				putEntry: (input) => service.putEntry(input),
+				deleteEntry: (input) => service.deleteEntry(input)
+			}
+		}];
+	}
+};
+//#endregion
+export { RecordEntriesAddon, RecordEntriesAddon as default };

package/dist/builtins/record-entries/record-entries.addon.d.ts

@@ -0,0 +1,13 @@
+/**
+* `record-entries` - the generic entries surface (D881). Hub-only and
+* in-process: it acts for each entry's owner on the keychain and on the
+* records door, which only a hub in-process system builtin may do
+* (`ctx.records.forOwner`, `ctx.secrets.forOwner`).
+*/
+import { BaseAddon, type ProviderRegistration } from "@camstack/types";
+export declare class RecordEntriesAddon extends BaseAddon {
+	readonly id = "record-entries";
+	constructor();
+	protected onInitialize(): Promise<ProviderRegistration[]>;
+}
+export default RecordEntriesAddon;

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D9qT3jHr.js");
+const require_dist = require("../../dist-D1vECb_6.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ei as EventCategory, jr as BaseAddon } from "../../dist-Bxt_S-9a.mjs";
+import { $i as EventCategory, Fr as BaseAddon } from "../../dist-DERK-gP5.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D9qT3jHr.js");
+const require_dist = require("../../dist-D1vECb_6.js");
 const require_snapshot_courtesy = require("../../snapshot-courtesy-D_C5-nC0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Ar as errMsg, Dr as DeviceFeature, Ei as EventCategory, Pt as deriveBatteryPresence, Qn as snapshotCapability, dt as batteryCapability, jr as BaseAddon, kr as DeviceType, or as streamQualityLabel, s as BatteryStatusSchema, ui as nodePin, ut as bareAddonId, xn as memoizePinnedFfmpeg } from "../../dist-Bxt_S-9a.mjs";
+import { $i as EventCategory, Fr as BaseAddon, Ft as deriveBatteryPresence, Ii as nodePin, Nr as DeviceType, Pr as errMsg, Sn as memoizePinnedFfmpeg, dt as bareAddonId, ft as batteryCapability, jr as DeviceFeature, lr as streamQualityLabel, s as BatteryStatusSchema, tr as snapshotCapability } from "../../dist-DERK-gP5.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg } from "../../snapshot-courtesy-CyFs1M3I.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/sqlite-storage/file-host-client.d.ts

@@ -1,5 +1,6 @@
 import type { IScopedLogger } from "@camstack/types";
 import { type ControlOp, type ControlOps, type DataStoreInput, type DataStoreOp, type DataStoreOutput, type FileHostWorkerData, type OwnedSqliteFileSpec, type VectorInput, type VectorOp, type VectorOutput } from "./file-host-protocol.js";
+import type { RecordsInput, RecordsOp, RecordsOutput } from "./records/records-engine-types.js";
 /** The members of a `Worker` this class touches — structural, so a spec can substitute. */
 export interface FileHostThread {
 	on(event: "message", listener: (message: unknown) => void): unknown;
@@ -48,6 +49,7 @@ export declare class FileHostClient {
 	noteDeclared(table: string): void;
 	data<K extends DataStoreOp>(op: K, input: DataStoreInput<K>): Promise<DataStoreOutput<K>>;
 	vector<K extends VectorOp>(op: K, input: VectorInput<K>): Promise<VectorOutput<K>>;
+	records<K extends RecordsOp>(op: K, input: RecordsInput<K>): Promise<RecordsOutput<K>>;
 	control<K extends ControlOp>(op: K, input: ControlOps[K]["input"]): Promise<ControlOps[K]["output"]>;
 	/** Ask the thread to close its connection, then end it. */
 	stop(): Promise<void>;

package/dist/builtins/sqlite-storage/file-host-handlers.d.ts

@@ -6,12 +6,16 @@
 */
 import type { IVectorStoreProvider } from "@camstack/types";
 import { type ControlOp, type ControlOps, type DataStoreInput, type DataStoreOp, type DataStoreOutput, type VectorInput, type VectorOp, type VectorOutput } from "./file-host-protocol.js";
+import type { RecordsEngineOps, RecordsInput, RecordsOp, RecordsOutput } from "./records/records-engine-types.js";
 import type { SqliteSettingsBackend } from "./sqlite-settings-backend.js";
 /** The data surface as a mapped type — what lets `target[op](input)` type-check for a generic `op`. */
 export type DataTarget = { readonly [K in DataStoreOp]: (input: DataStoreInput<K>) => Promise<DataStoreOutput<K>> };
 export type VectorTarget = { readonly [K in VectorOp]: (input: VectorInput<K>) => Promise<VectorOutput<K>> };
 export declare function callData<K extends DataStoreOp>(target: DataTarget, op: K, input: DataStoreInput<K>): Promise<DataStoreOutput<K>>;
 export declare function callVector<K extends VectorOp>(target: IVectorStoreProvider, op: K, input: VectorInput<K>): Promise<VectorOutput<K>>;
+/** The records surface as a mapped type, for the same reason. */
+export type RecordsTarget = { readonly [K in RecordsOp]: (input: RecordsInput<K>) => Promise<RecordsOutput<K>> };
+export declare function callRecords<K extends RecordsOp>(target: RecordsEngineOps, op: K, input: RecordsInput<K>): Promise<RecordsOutput<K>>;
 /** The control surface as a mapped type, for the same reason. */
 type ControlTarget = { readonly [K in ControlOp]: (input: ControlOps[K]["input"]) => ControlOps[K]["output"] };
 /**

package/dist/builtins/sqlite-storage/file-host-protocol.d.ts

@@ -9,7 +9,7 @@
 * result }` or `{ id, ok: false, error }`. `kind` is `data` (the
 * `data-store-provider` surface), `vector` (the `vector-store` surface) or
 * `control` (what the placement router needs to ask a file that no cap
-* method covers). Errors cross by NAME (`placement-errors.ts`).
+* method covers), or `records` (the `records` surface, D881). Errors cross by NAME (`placement-errors.ts`).
 *
 * ## The type boundary
 *
@@ -22,6 +22,7 @@
 import type { IDataStoreProvider, IVectorStoreProvider } from "@camstack/types";
 import type { DataStoreDatabase, LogTags } from "@camstack/types";
 import type { SerializedError } from "./placement-errors.js";
+import { type RecordsOp } from "./records/records-engine-types.js";
 /** Every `data-store-provider` method a file serves (all but self-description). */
 export type DataStoreMethods = Omit<IDataStoreProvider, "getEngineInfo">;
 export type DataStoreOp = keyof DataStoreMethods;
@@ -86,6 +87,11 @@ export type FileHostRequest = {
 	readonly kind: "vector";
 	readonly op: VectorOp;
 	readonly input: unknown;
+} | {
+	readonly id: number;
+	readonly kind: "records";
+	readonly op: RecordsOp;
+	readonly input: unknown;
 } | {
 	readonly id: number;
 	readonly kind: "control";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D9qT3jHr.js");
+const require_dist = require("../../dist-D1vECb_6.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { Yt as filesystemBrowseCapability, ir as storageProviderCapability, jr as BaseAddon } from "../../dist-Bxt_S-9a.mjs";
+import { Fr as BaseAddon, Xt as filesystemBrowseCapability, sr as storageProviderCapability } from "../../dist-DERK-gP5.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/sqlite-storage/index.js

@@ -4,7 +4,7 @@ Object.defineProperties(exports, {
 });
 require("../../chunk-Cek0wNdY.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./filesystem-storage.addon.js");
-const require_wal_maintenance = require("../../wal-maintenance-cRHR4rUY.js");
+const require_wal_maintenance = require("../../wal-maintenance-dAv4IdzC.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./sqlite-settings.addon.js");
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {