@camstack/system 1.2.443 → 1.2.445

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,5 +1,6 @@
-import { Ei as EventCategory, Si as toNodeId, bn as mayWriteToLocation, jr as BaseAddon, lt as backupCapability, rr as storageOccupancyCapability, ui as nodePin } from "../../dist-Bxt_S-9a.mjs";
-import { a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-9CGgeBzD.mjs";
+import { Hi as nodePin, Rr as BaseAddon, Tn as mayWriteToLocation, ia as toNodeId, la as EventCategory, mt as backupCapability, ur as storageOccupancyCapability } from "../../dist-BNunRyXT.mjs";
+import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
+import { _ as parseBackupSecretKey, a as BackupSnapshotRefusedError, c as backupOrchestratorRecordKinds, d as BackupEncryptionKeyStore, g as generateBackupKeyPair, h as ENCRYPTED_BACKUP_SUFFIX, i as BackupCancelledError, l as backupRecordStoresOf, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as BackupKeyFormatError, r as prepareRestoreArchive, s as SystemBackupService, u as BackupSeedMarkerStore } from "../../restore-archive-DR9MtO7J.mjs";
 import { randomUUID } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import * as path$1 from "node:path";
@@ -76,66 +77,6 @@ async function seedWeeklySchedule(store, markers) {
 	return seed;
 }
 //#endregion
-//#region src/builtins/backup-orchestrator/seed-marker-store.ts
-/**
-* @durable class=config owner=backup-orchestrator
-*   write="the orchestrator inserts one row per seed id the first time that
-*     seed is created (or found already created); never updated"
-*   retention="none — one tiny row per seed ever made; deleting it lets the
-*     seed be re-created once more on the next boot"
-*/
-var BACKUP_SEED_MARKERS_COLLECTION = "backup_seed_markers";
-var COLUMNS$1 = [{
-	name: "seed_id",
-	type: "TEXT",
-	primaryKey: true
-}, {
-	name: "seeded_at",
-	type: "INTEGER",
-	notNull: true
-}];
-var BackupSeedMarkerStore = class {
-	store;
-	now;
-	declared = false;
-	constructor(store, now = Date.now) {
-		this.store = store;
-		this.now = now;
-	}
-	async ensureDeclared() {
-		if (this.declared) return;
-		await this.store.declareCollection({
-			collection: BACKUP_SEED_MARKERS_COLLECTION,
-			columns: COLUMNS$1
-		});
-		this.declared = true;
-	}
-	async has(seedId) {
-		await this.ensureDeclared();
-		return (await this.store.query({
-			collection: BACKUP_SEED_MARKERS_COLLECTION,
-			filter: {
-				where: { seed_id: seedId },
-				limit: 1
-			}
-		})).length > 0;
-	}
-	async mark(seedId) {
-		await this.ensureDeclared();
-		if (await this.has(seedId)) return;
-		await this.store.insert({
-			collection: BACKUP_SEED_MARKERS_COLLECTION,
-			record: {
-				id: seedId,
-				data: {
-					seed_id: seedId,
-					seeded_at: this.now()
-				}
-			}
-		});
-	}
-};
-//#endregion
 //#region ../../node_modules/croner/dist/croner.js
 function T(s) {
 	return Date.UTC(s.y, s.m - 1, s.d, s.h, s.i, s.s);
@@ -930,6 +871,7 @@ function previewNextRuns(cron, count, after) {
 }
 //#endregion
 //#region src/builtins/backup-orchestrator/destination-policy.ts
+var import_read_all_rows = require_read_all_rows();
 /**
 * @durable class=config owner=backup-orchestrator
 *   write="`ensureDefault` auto-creates one row the first time a `backups` storage
@@ -984,8 +926,10 @@ var BACKUP_DESTINATION_POLICIES_COLUMNS = [
 var BackupDestinationPolicyService = class {
 	store;
 	declared = false;
-	constructor(store) {
+	policiesKind;
+	constructor(store, policiesKind = null) {
 		this.store = store;
+		this.policiesKind = policiesKind;
 	}
 	/**
 	* Lazy `declareCollection` — called from every read/write path.
@@ -997,6 +941,7 @@ var BackupDestinationPolicyService = class {
 		await this.ensureDeclared();
 	}
 	async ensureDeclared() {
+		if (this.policiesKind !== null) return;
 		if (this.declared) return;
 		await this.store.declareCollection({
 			collection: BACKUP_DESTINATION_POLICIES,
@@ -1006,6 +951,17 @@ var BackupDestinationPolicyService = class {
 	}
 	async list() {
 		await this.ensureDeclared();
+		const kind = this.policiesKind;
+		if (kind !== null) {
+			const rows = await (0, import_read_all_rows.readAllRows)(kind);
+			rows.sort((a, b) => a.id.localeCompare(b.id));
+			const out = [];
+			for (const row of rows) {
+				const mapped = bodyToPolicy(row.id, row.data);
+				if (mapped) out.push(mapped);
+			}
+			return out;
+		}
 		const rows = await this.store.query({
 			collection: BACKUP_DESTINATION_POLICIES,
 			filter: { orderBy: {
@@ -1022,6 +978,11 @@ var BackupDestinationPolicyService = class {
 	}
 	async get(locationId) {
 		await this.ensureDeclared();
+		const kind = this.policiesKind;
+		if (kind !== null) {
+			const row = await kind.get(locationId);
+			return row === null ? null : bodyToPolicy(locationId, row.data);
+		}
 		const rows = await this.store.query({
 			collection: BACKUP_DESTINATION_POLICIES,
 			filter: {
@@ -1037,6 +998,16 @@ var BackupDestinationPolicyService = class {
 	*/
 	async upsert(p) {
 		await this.ensureDeclared();
+		const kind = this.policiesKind;
+		if (kind !== null) {
+			const body = policyToBody(p);
+			const data = backupOrchestratorRecordKinds["destination-policies"].schema.parse(body);
+			await kind.put({
+				id: p.locationId,
+				data
+			});
+			return;
+		}
 		await this.store.deleteWhere({
 			collection: BACKUP_DESTINATION_POLICIES,
 			filter: { where: { location_id: p.locationId } }
@@ -1051,6 +1022,11 @@ var BackupDestinationPolicyService = class {
 	}
 	async delete(locationId) {
 		await this.ensureDeclared();
+		const kind = this.policiesKind;
+		if (kind !== null) {
+			await kind.delete(locationId);
+			return;
+		}
 		await this.store.deleteWhere({
 			collection: BACKUP_DESTINATION_POLICIES,
 			filter: { where: { location_id: locationId } }
@@ -1102,6 +1078,26 @@ var BackupDestinationPolicyService = class {
 		});
 	}
 };
+function policyToBody(p) {
+	return {
+		enabled: p.enabled,
+		retentionCount: p.retentionCount,
+		...p.label !== void 0 ? { label: p.label } : {},
+		...p.lastAttemptAt !== void 0 ? { lastAttemptAt: p.lastAttemptAt } : {},
+		...p.lastError !== void 0 ? { lastError: p.lastError } : {}
+	};
+}
+function bodyToPolicy(locationId, body) {
+	if (!locationId) return null;
+	return {
+		locationId,
+		enabled: body.enabled,
+		retentionCount: body.retentionCount,
+		...body.label !== void 0 ? { label: body.label } : {},
+		...body.lastAttemptAt !== void 0 ? { lastAttemptAt: body.lastAttemptAt } : {},
+		...body.lastError !== void 0 ? { lastError: body.lastError } : {}
+	};
+}
 function mapPolicyToRow(p) {
 	return {
 		location_id: p.locationId,
@@ -1205,131 +1201,6 @@ async function downloadArchiveToCache(input) {
 	}
 }
 //#endregion
-//#region src/builtins/backup-orchestrator/encryption-key-store.ts
-/**
-* @durable class=config owner=backup-orchestrator
-*   write="`setupEncryption` inserts one row per generated key and retires the
-*     previous active row; `disableEncryption` retires the active row"
-*   retention="none — one small row per key ever generated; a retired row
-*     names the key older archives need"
-*/
-var BACKUP_ENCRYPTION_KEYS_COLLECTION = "backup_encryption_keys";
-var COLUMNS = [
-	{
-		name: "key_id",
-		type: "TEXT",
-		primaryKey: true
-	},
-	{
-		name: "public_key",
-		type: "TEXT",
-		notNull: true
-	},
-	{
-		name: "created_at",
-		type: "INTEGER",
-		notNull: true
-	},
-	{
-		name: "retired_at",
-		type: "INTEGER"
-	}
-];
-var BackupEncryptionKeyStore = class {
-	store;
-	now;
-	declared = false;
-	constructor(store, now = Date.now) {
-		this.store = store;
-		this.now = now;
-	}
-	async ensureDeclared() {
-		if (this.declared) return;
-		await this.store.declareCollection({
-			collection: BACKUP_ENCRYPTION_KEYS_COLLECTION,
-			columns: COLUMNS
-		});
-		this.declared = true;
-	}
-	/** Every key, newest first. */
-	async list() {
-		await this.ensureDeclared();
-		const rows = await this.store.query({
-			collection: BACKUP_ENCRYPTION_KEYS_COLLECTION,
-			filter: { orderBy: {
-				field: "created_at",
-				direction: "desc"
-			} }
-		});
-		const out = [];
-		for (const row of rows) {
-			const record = toRecord(row.data);
-			if (record !== null) out.push(record);
-		}
-		return out;
-	}
-	/** The key new archives are encrypted to; `null` = encryption off. */
-	async active() {
-		return (await this.list()).find((k) => k.retiredAt === null) ?? null;
-	}
-	/** Make `publicKey` the active key; the previous one is retired, kept listed. */
-	async activate(input) {
-		const parsed = parseBackupPublicKey(input.publicKey);
-		const t = this.now();
-		await this.retireActive(t);
-		const record = {
-			keyId: parsed.keyId,
-			publicKey: input.publicKey.trim(),
-			createdAt: t,
-			retiredAt: null
-		};
-		await this.write(record);
-		return record;
-	}
-	/** Encryption off: the active key is retired. Archives already made keep needing it. */
-	async disable() {
-		await this.retireActive(this.now());
-	}
-	async retireActive(at) {
-		for (const key of await this.list()) if (key.retiredAt === null) await this.write({
-			...key,
-			retiredAt: at
-		});
-	}
-	async write(record) {
-		await this.ensureDeclared();
-		await this.store.deleteWhere({
-			collection: BACKUP_ENCRYPTION_KEYS_COLLECTION,
-			filter: { where: { key_id: record.keyId } }
-		});
-		await this.store.insert({
-			collection: BACKUP_ENCRYPTION_KEYS_COLLECTION,
-			record: {
-				id: record.keyId,
-				data: {
-					key_id: record.keyId,
-					public_key: record.publicKey,
-					created_at: record.createdAt,
-					retired_at: record.retiredAt
-				}
-			}
-		});
-	}
-};
-function toRecord(row) {
-	const keyId = row["key_id"];
-	const publicKey = row["public_key"];
-	const createdAt = row["created_at"];
-	if (typeof keyId !== "string" || typeof publicKey !== "string") return null;
-	const retired = row["retired_at"];
-	return {
-		keyId,
-		publicKey,
-		createdAt: typeof createdAt === "number" ? createdAt : Number(createdAt ?? 0),
-		retiredAt: typeof retired === "number" ? retired : null
-	};
-}
-//#endregion
 //#region src/builtins/backup-orchestrator/manifest-store.ts
 /** File path (relative to the location root) where the index lives. */
 var MANIFESTS_FILENAME = "manifests.json";
@@ -1865,13 +1736,16 @@ var BACKUP_SCHEDULES_COLUMNS = [
 var BackupScheduleService = class {
 	store;
 	declared = false;
-	constructor(store) {
+	schedulesKind;
+	constructor(store, schedulesKind = null) {
 		this.store = store;
+		this.schedulesKind = schedulesKind;
 	}
 	async initialize() {
 		await this.ensureDeclared();
 	}
 	async ensureDeclared() {
+		if (this.schedulesKind !== null) return;
 		if (this.declared) return;
 		await this.store.declareCollection({
 			collection: BACKUP_SCHEDULES,
@@ -1881,6 +1755,17 @@ var BackupScheduleService = class {
 	}
 	async list() {
 		await this.ensureDeclared();
+		const kind = this.schedulesKind;
+		if (kind !== null) {
+			const rows = await (0, import_read_all_rows.readAllRows)(kind);
+			rows.sort((a, b) => a.id.localeCompare(b.id));
+			const out = [];
+			for (const row of rows) {
+				const mapped = bodyToSchedule(row.id, row.data);
+				if (mapped) out.push(mapped);
+			}
+			return out;
+		}
 		const rows = await this.store.query({
 			collection: BACKUP_SCHEDULES,
 			filter: { orderBy: {
@@ -1897,6 +1782,11 @@ var BackupScheduleService = class {
 	}
 	async get(id) {
 		await this.ensureDeclared();
+		const kind = this.schedulesKind;
+		if (kind !== null) {
+			const row = await kind.get(id);
+			return row === null ? null : bodyToSchedule(id, row.data);
+		}
 		const rows = await this.store.query({
 			collection: BACKUP_SCHEDULES,
 			filter: {
@@ -1909,6 +1799,16 @@ var BackupScheduleService = class {
 	/** Replace-or-insert (delete + insert — mirrors the policy store). */
 	async upsert(s) {
 		await this.ensureDeclared();
+		const kind = this.schedulesKind;
+		if (kind !== null) {
+			const body = scheduleToBody(s);
+			const data = backupOrchestratorRecordKinds.schedules.schema.parse(body);
+			await kind.put({
+				id: s.id,
+				data
+			});
+			return;
+		}
 		await this.store.deleteWhere({
 			collection: BACKUP_SCHEDULES,
 			filter: { where: { id: s.id } }
@@ -1923,12 +1823,47 @@ var BackupScheduleService = class {
 	}
 	async delete(id) {
 		await this.ensureDeclared();
+		const kind = this.schedulesKind;
+		if (kind !== null) {
+			await kind.delete(id);
+			return;
+		}
 		await this.store.deleteWhere({
 			collection: BACKUP_SCHEDULES,
 			filter: { where: { id } }
 		});
 	}
 };
+function scheduleToBody(s) {
+	return {
+		label: s.label,
+		cron: s.cron,
+		enabled: s.enabled,
+		locationIds: [...s.locationIds],
+		retentionCount: s.retentionCount,
+		...s.dataSources !== void 0 ? { dataSources: [...s.dataSources] } : {},
+		...s.databases !== void 0 ? { databases: [...s.databases] } : {},
+		...s.lastAttemptAt !== void 0 ? { lastAttemptAt: s.lastAttemptAt } : {},
+		...s.lastSuccessAt !== void 0 ? { lastSuccessAt: s.lastSuccessAt } : {},
+		...s.lastError !== void 0 ? { lastError: s.lastError } : {}
+	};
+}
+function bodyToSchedule(id, body) {
+	if (!id) return null;
+	return {
+		id,
+		label: body.label,
+		cron: body.cron,
+		enabled: body.enabled,
+		locationIds: [...body.locationIds],
+		retentionCount: body.retentionCount,
+		...body.dataSources !== void 0 ? { dataSources: [...body.dataSources] } : {},
+		...body.databases !== void 0 && body.databases.length > 0 ? { databases: [...body.databases] } : {},
+		...body.lastAttemptAt !== void 0 ? { lastAttemptAt: body.lastAttemptAt } : {},
+		...body.lastSuccessAt !== void 0 ? { lastSuccessAt: body.lastSuccessAt } : {},
+		...body.lastError !== void 0 ? { lastError: body.lastError } : {}
+	};
+}
 function mapScheduleToRow(s) {
 	return {
 		id: s.id,
@@ -2183,6 +2118,7 @@ var UPLOAD_CHUNK_BYTES = 8 * 1024 * 1024;
 var ORCHESTRATOR_ADDON_ID = "backup-orchestrator";
 var BackupOrchestratorAddon = class extends BaseAddon {
 	systemBackup = null;
+	backupRecords = null;
 	policies = null;
 	schedules = null;
 	/** Backup encryption keys — PUBLIC keys only (see encryption-key-store.ts). */
@@ -2224,6 +2160,11 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 		super({});
 	}
 	async onInitialize() {
+		const records = this.ctx.records;
+		if (records !== void 0) {
+			await records.declare(backupOrchestratorRecordKinds);
+			this.backupRecords = backupRecordStoresOf(records);
+		}
 		this.dataDir = this.ctx.nodeDataDir;
 		this.stagingDir = resolveStagingDir(this.ctx.nodeDataDir);
 		this.systemBackup = new SystemBackupService(this.dataDir, this.ctx.logger);
@@ -2245,7 +2186,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 		}
 		await this.seedWeekly();
 		const settingsStore = this.ctx.kernel.capabilityRegistry?.getSingleton("settings-store");
-		this.encryptionKeys = settingsStore ? new BackupEncryptionKeyStore(settingsStore) : null;
+		this.encryptionKeys = settingsStore ? new BackupEncryptionKeyStore(settingsStore, Date.now, this.backupRecords?.encryptionKeys ?? null) : null;
 		const provider = {
 			listDestinations: () => this.listDestinations(),
 			list: () => this.aggregatedList(),
@@ -3248,7 +3189,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 		try {
 			const store = this.ctx.kernel.capabilityRegistry?.getSingleton("settings-store");
 			if (!store) return;
-			const seed = await seedWeeklySchedule(this.schedules, new BackupSeedMarkerStore(store));
+			const seed = await seedWeeklySchedule(this.schedules, new BackupSeedMarkerStore(store, Date.now, this.backupRecords?.seedMarkers ?? null));
 			if (seed === null) return;
 			this.ctx.logger.info("backup: seeded the weekly events & history schedule", { meta: {
 				scheduleId: seed.id,
@@ -3405,7 +3346,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 			this.ctx.logger.warn("backup-orchestrator: no settings-store provider — backup schedules will not persist");
 			return null;
 		}
-		return new BackupScheduleService(store);
+		return new BackupScheduleService(store, this.backupRecords?.schedules ?? null);
 	}
 	resolvePolicyService() {
 		const reg = this.ctx.kernel.capabilityRegistry;
@@ -3415,7 +3356,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 			this.ctx.logger.warn("backup-orchestrator: no settings-store provider — destination policies will not persist");
 			return null;
 		}
-		return new BackupDestinationPolicyService(store);
+		return new BackupDestinationPolicyService(store, this.backupRecords?.destinationPolicies ?? null);
 	}
 	/**
 	* Narrow `ctx.api.storage` to the subset the manifest helpers need.

package/dist/builtins/backup-orchestrator/destination-policy.d.ts

@@ -15,7 +15,8 @@
 * the `settings-store` collection surface. Callers obtain the provider via
 * `kernel.capabilityRegistry.getSingleton<ISettingsStoreProvider>('settings-store')`.
 */
-import type { CollectionColumn, ISettingsStoreProvider } from "@camstack/types";
+import type { CollectionColumn, ISettingsStoreProvider, RecordKindHandle } from "@camstack/types";
+import { type BackupDestinationPolicyBody } from "./record-kinds.js";
 /**
 * Per-`backups`-location policy. `locationId` is the foreign-key into
 * the storage orchestrator's `storage_locations` table.
@@ -54,7 +55,8 @@ export declare const BACKUP_DESTINATION_POLICIES_COLUMNS: readonly CollectionCol
 export declare class BackupDestinationPolicyService {
 	private readonly store;
 	private declared;
-	constructor(store: ISettingsStoreProvider);
+	private readonly policiesKind;
+	constructor(store: ISettingsStoreProvider, policiesKind?: RecordKindHandle<BackupDestinationPolicyBody> | null);
 	/**
 	* Lazy `declareCollection` — called from every read/write path.
 	* `declareCollection` is idempotent, so repeated calls collapse to a no-op

package/dist/builtins/backup-orchestrator/encryption-key-store.d.ts

@@ -9,7 +9,8 @@
 * A read that fails THROWS: a backup run must never take "could not read the
 * setting" for "encryption is off" and ship a plain archive.
 */
-import type { ISettingsStoreProvider } from "@camstack/types";
+import type { ISettingsStoreProvider, RecordKindHandle } from "@camstack/types";
+import { type BackupEncryptionKeyBody } from "./record-kinds.js";
 /**
 * @durable class=config owner=backup-orchestrator
 *   write="`setupEncryption` inserts one row per generated key and retires the
@@ -29,7 +30,8 @@ export declare class BackupEncryptionKeyStore {
 	private readonly store;
 	private readonly now;
 	private declared;
-	constructor(store: Store, now?: () => number);
+	private readonly keysKind;
+	constructor(store: Store, now?: () => number, keysKind?: RecordKindHandle<BackupEncryptionKeyBody> | null);
 	private ensureDeclared;
 	/** Every key, newest first. */
 	list(): Promise<readonly BackupEncryptionKeyRecord[]>;

package/dist/builtins/backup-orchestrator/record-kinds.d.ts

@@ -0,0 +1,58 @@
+/**
+* Record kinds owned by backup-orchestrator (phase 4 — hub-main).
+*/
+import type { RecordKindHandle, RecordsAccess } from "@camstack/types";
+import { DataStoreDatabaseSchema, type DefinedRecordKind } from "@camstack/types";
+import { z } from "zod";
+export declare const BACKUP_SCHEDULES_LEGACY = "backup_schedules";
+export declare const BACKUP_DESTINATION_POLICIES_LEGACY = "backup_destination_policies";
+export type BackupScheduleBody = {
+	readonly label: string;
+	readonly cron: string;
+	readonly enabled: boolean;
+	readonly locationIds: readonly string[];
+	readonly retentionCount: number;
+	readonly dataSources?: readonly string[];
+	readonly databases?: readonly z.infer<typeof DataStoreDatabaseSchema>[];
+	readonly lastAttemptAt?: number;
+	readonly lastSuccessAt?: number;
+	readonly lastError?: string;
+};
+export declare const BackupScheduleBodySchema: z.ZodType<BackupScheduleBody>;
+export type BackupDestinationPolicyBody = {
+	readonly enabled: boolean;
+	readonly retentionCount: number;
+	readonly label?: string;
+	readonly lastAttemptAt?: number;
+	readonly lastError?: string;
+};
+export declare const BackupDestinationPolicyBodySchema: z.ZodType<BackupDestinationPolicyBody>;
+export type BackupEncryptionKeyBody = {
+	readonly keyId: string;
+	readonly publicKey: string;
+	readonly createdAt: number;
+	readonly retiredAt: number | null;
+};
+export declare const BackupEncryptionKeyBodySchema: z.ZodType<BackupEncryptionKeyBody>;
+export type BackupSeedMarkerBody = {
+	readonly seededAt: number;
+};
+export declare const BackupSeedMarkerBodySchema: z.ZodType<BackupSeedMarkerBody>;
+export type BackupOrchestratorRecordKindsMap = {
+	readonly schedules: DefinedRecordKind<z.ZodType<BackupScheduleBody>>;
+	readonly "destination-policies": DefinedRecordKind<z.ZodType<BackupDestinationPolicyBody>>;
+	readonly "encryption-keys": DefinedRecordKind<z.ZodType<BackupEncryptionKeyBody>>;
+	readonly "seed-markers": DefinedRecordKind<z.ZodType<BackupSeedMarkerBody>>;
+};
+export declare const backupOrchestratorRecordKinds: BackupOrchestratorRecordKindsMap;
+export declare const backupSchedulesRecordKind: DefinedRecordKind<z.ZodType<BackupScheduleBody>>;
+export declare const backupDestinationPoliciesRecordKind: DefinedRecordKind<z.ZodType<BackupDestinationPolicyBody>>;
+export declare const backupEncryptionKeysRecordKind: DefinedRecordKind<z.ZodType<BackupEncryptionKeyBody>>;
+export declare const backupSeedMarkersRecordKind: DefinedRecordKind<z.ZodType<BackupSeedMarkerBody>>;
+export interface BackupRecordStores {
+	readonly schedules: RecordKindHandle<BackupScheduleBody>;
+	readonly destinationPolicies: RecordKindHandle<BackupDestinationPolicyBody>;
+	readonly encryptionKeys: RecordKindHandle<BackupEncryptionKeyBody>;
+	readonly seedMarkers: RecordKindHandle<BackupSeedMarkerBody>;
+}
+export declare function backupRecordStoresOf(records: Pick<RecordsAccess, "kind">): BackupRecordStores;

package/dist/builtins/backup-orchestrator/schedule-store.d.ts

@@ -14,7 +14,8 @@
 *     the surface serialises and parses them, so this file passes and
 *     receives real arrays.
 */
-import type { CollectionColumn, DataStoreDatabase, ISettingsStoreProvider } from "@camstack/types";
+import type { CollectionColumn, DataStoreDatabase, ISettingsStoreProvider, RecordKindHandle } from "@camstack/types";
+import { type BackupScheduleBody } from "./record-kinds.js";
 /**
 * A backup schedule row.
 *
@@ -54,7 +55,8 @@ export declare const BACKUP_SCHEDULES_COLUMNS: readonly CollectionColumn[];
 export declare class BackupScheduleService {
 	private readonly store;
 	private declared;
-	constructor(store: ISettingsStoreProvider);
+	private readonly schedulesKind;
+	constructor(store: ISettingsStoreProvider, schedulesKind?: RecordKindHandle<BackupScheduleBody> | null);
 	initialize(): Promise<void>;
 	private ensureDeclared;
 	list(): Promise<readonly BackupSchedule[]>;

package/dist/builtins/backup-orchestrator/seed-marker-store.d.ts

@@ -7,7 +7,8 @@
 * AFTER the seeded row landed. A read that fails THROWS: "could not read the
 * marker" must never look like "never seeded".
 */
-import type { ISettingsStoreProvider } from "@camstack/types";
+import type { ISettingsStoreProvider, RecordKindHandle } from "@camstack/types";
+import { type BackupSeedMarkerBody } from "./record-kinds.js";
 /**
 * @durable class=config owner=backup-orchestrator
 *   write="the orchestrator inserts one row per seed id the first time that
@@ -26,7 +27,8 @@ export declare class BackupSeedMarkerStore implements SeedMarkers {
 	private readonly store;
 	private readonly now;
 	private declared;
-	constructor(store: Store, now?: () => number);
+	private readonly markersKind;
+	constructor(store: Store, now?: () => number, markersKind?: RecordKindHandle<BackupSeedMarkerBody> | null);
 	private ensureDeclared;
 	has(seedId: string): Promise<boolean>;
 	mark(seedId: string): Promise<void>;

package/dist/builtins/calendars/calendar-prefs-store.d.ts

@@ -1,10 +1,12 @@
 /**
 * Per-user calendar UI preferences (colour override + visibility).
 *
-* One row per `userId`. The calendars builtin owns declare + read/write;
+* One row per `userId`. The calendars builtin owns read/write via records;
 * the browser never talks to `settingsStore` directly.
 */
-import { type CalendarPreferences, type SettingsStoreClient } from "@camstack/types";
+import { type CalendarPreferences, type RecordKindHandle, type RecordsAccess } from "@camstack/types";
+import { z } from "zod";
+import { CalendarUserPrefsBodySchema } from "./record-kinds.js";
 /**
 * @durable class=config owner=calendars
 *   write="`setCalendarPreference` upserts the caller's row"
@@ -13,9 +15,14 @@ import { type CalendarPreferences, type SettingsStoreClient } from "@camstack/ty
 *     colour/hide choices."
 */
 export declare const CALENDARS_USER_PREFS_COLLECTION = "calendars:user-prefs";
-export declare function declareCalendarPrefsSchema(store: SettingsStoreClient): Promise<void>;
-export declare function loadCalendarPreferences(store: SettingsStoreClient, userId: string): Promise<CalendarPreferences>;
-export declare function saveCalendarPreferences(store: SettingsStoreClient, userId: string, prefs: CalendarPreferences, nowMs: number): Promise<void>;
+type PrefsBody = z.infer<typeof CalendarUserPrefsBodySchema>;
+export declare class CalendarPrefsStore {
+	private readonly kind;
+	constructor(kind: RecordKindHandle<PrefsBody>);
+	static of(records: Pick<RecordsAccess, "kind">): CalendarPrefsStore;
+	load(userId: string): Promise<CalendarPreferences>;
+	save(userId: string, prefs: CalendarPreferences, nowMs: number): Promise<void>;
+}
 /**
 * Patch one calendar's preference entry. `color: null` clears the override;
 * omitting a field leaves it unchanged. An entry that becomes empty is dropped.
@@ -24,3 +31,4 @@ export declare function patchCalendarPreference(current: CalendarPreferences, ca
 	readonly visible?: boolean;
 	readonly color?: string | null;
 }): CalendarPreferences;
+export {};

package/dist/builtins/calendars/calendars.addon.d.ts

@@ -6,10 +6,10 @@
 import { BaseAddon, type ProviderRegistration } from "@camstack/types";
 export declare class CalendarsAddon extends BaseAddon {
 	readonly id = "calendars";
-	private prefsDeclared;
+	private prefsStore;
 	constructor();
 	protected onInitialize(): Promise<ProviderRegistration[]>;
-	private ensurePrefsSchema;
+	private prefs;
 	private sources;
 	private listCalendars;
 	private listEvents;