@camstack/types 1.2.378 → 1.2.380

package/dist/addon.d.ts

@@ -55,3 +55,4 @@ export { maskUrlCredentials } from './utils/mask-url.js';
 export { asJsonObject, asString, parseJsonUnknown } from './utils/json-safe.js';
 export { sleep } from './utils/sleep.js';
 export * from './keychain/index.js';
+export * from './records/index.js';

package/dist/addon.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-gxUz0C9M.js");
+const require_sleep = require("./sleep-CIGOw58l.js");
 const require_event_category = require("./event-category-Hoe-mqbd.js");
 const require_err_msg = require("./err-msg-Bb-s4Xuj.js");
 //#region src/generated/cap-input-defaults.ts
@@ -16,7 +16,7 @@ const require_err_msg = require("./err-msg-Bb-s4Xuj.js");
 * Plain data, zero Zod: a forked runner must not import the schema barrel
 * (~144MB RSS per runner — D28).
 *
-* Coverage: 27 caps, 69 methods with defaults.
+* Coverage: 29 caps, 71 methods with defaults.
 */
 var CAP_INPUT_DEFAULTS = Object.freeze({
 	"addons": { "getLogs": { "limit": 100 } },
@@ -237,7 +237,9 @@ var CAP_INPUT_DEFAULTS = Object.freeze({
 		},
 		"setDeviceConfig": { "config": { "__nested__": { "bands": [] } } }
 	},
+	"records": { "query": { "limit": 100 } },
 	"storage": { "upsertLocation": { "isSystem": false } },
+	"storage-admin": { "readRecords": { "limit": 100 } },
 	"storage-provider": {
 		"beginDownload": { "location": { "__nested__": { "isSystem": false } } },
 		"beginUpload": { "location": { "__nested__": { "isSystem": false } } },
@@ -2133,8 +2135,10 @@ var CAP_STATE_LEAVES = Object.freeze({
 	]
 });
 //#endregion
+exports.AdoptionPendingError = require_sleep.AdoptionPendingError;
 exports.BOOT_RECOVERY_BACKOFF_MS = require_sleep.BOOT_RECOVERY_BACKOFF_MS;
 exports.BaseAddon = require_sleep.BaseAddon;
+exports.BatchTooLargeError = require_sleep.BatchTooLargeError;
 exports.CAP_ADVANCE_FIELDS = CAP_ADVANCE_FIELDS;
 exports.CAP_INPUT_DEFAULTS = CAP_INPUT_DEFAULTS;
 exports.CAP_STATE_LEAVES = CAP_STATE_LEAVES;
@@ -2142,38 +2146,82 @@ exports.COLLECTION_ARRAY_METHODS = COLLECTION_ARRAY_METHODS;
 exports.DATAPLANE_SECRET_HEADER = require_sleep.DATAPLANE_SECRET_HEADER;
 exports.DEVICE_CHILDREN_BATCH_MAX = require_sleep.DEVICE_CHILDREN_BATCH_MAX;
 exports.DEVICE_SCOPED_CAPS = require_sleep.DEVICE_SCOPED_CAPS;
+exports.DeclarationRefusedError = require_sleep.DeclarationRefusedError;
 exports.DeviceType = require_err_msg.DeviceType;
 exports.DisposerChain = require_sleep.DisposerChain;
+exports.EntryDescriptorSchema = require_sleep.EntryDescriptorSchema;
 exports.ErrorI18nPayloadSchema = require_sleep.ErrorI18nPayloadSchema;
 exports.EventCategory = require_event_category.EventCategory;
+exports.FilterRequiredError = require_sleep.FilterRequiredError;
+exports.ForeignSecretMarkerError = require_sleep.ForeignSecretMarkerError;
 exports.HF_REPO = require_sleep.HF_REPO;
+exports.InvalidRecordError = require_sleep.InvalidRecordError;
 exports.MIN_SCRUBBED_LENGTH = require_sleep.MIN_SCRUBBED_LENGTH;
 exports.MODEL_FORMATS = require_sleep.MODEL_FORMATS;
+exports.NoCallerError = require_sleep.NoCallerError;
 exports.PEER_BYTES_CHUNK_BYTES = require_sleep.PEER_BYTES_CHUNK_BYTES;
 exports.PEER_BYTES_MAX_OUTSTANDING = require_sleep.PEER_BYTES_MAX_OUTSTANDING;
 exports.PEER_BYTES_STALL_MS = require_sleep.PEER_BYTES_STALL_MS;
 exports.PEER_BYTES_TICKET_TTL_MS = require_sleep.PEER_BYTES_TICKET_TTL_MS;
 exports.PROVIDER_OPTIONAL_METHODS = PROVIDER_OPTIONAL_METHODS;
+exports.PlaintextSecretError = require_sleep.PlaintextSecretError;
+exports.RECORDS_ERROR_CODES = require_sleep.RECORDS_ERROR_CODES;
+exports.RECORD_BATCH_MAX = require_sleep.RECORD_BATCH_MAX;
+exports.RECORD_BATCH_MAX_BYTES = require_sleep.RECORD_BATCH_MAX_BYTES;
+exports.RECORD_CLASSES = require_sleep.RECORD_CLASSES;
+exports.RECORD_DATABASES = require_sleep.RECORD_DATABASES;
+exports.RECORD_DEFAULT_MAX_DATA_BYTES = require_sleep.RECORD_DEFAULT_MAX_DATA_BYTES;
+exports.RECORD_DELETE_BATCH = require_sleep.RECORD_DELETE_BATCH;
+exports.RECORD_ID_MAX_LENGTH = require_sleep.RECORD_ID_MAX_LENGTH;
+exports.RECORD_MAX_DATA_BYTES = require_sleep.RECORD_MAX_DATA_BYTES;
+exports.RECORD_MAX_INDEXES = require_sleep.RECORD_MAX_INDEXES;
+exports.RECORD_MAX_INDEX_FIELDS = require_sleep.RECORD_MAX_INDEX_FIELDS;
+exports.RECORD_QUERY_MAX = require_sleep.RECORD_QUERY_MAX;
+exports.RECORD_SECRET_COLLECTION_PREFIX = require_sleep.RECORD_SECRET_COLLECTION_PREFIX;
+exports.RECORD_SETTINGS_MAX_ROWS = require_sleep.RECORD_SETTINGS_MAX_ROWS;
+exports.RECORD_SWEEP_INTERVAL_MS = require_sleep.RECORD_SWEEP_INTERVAL_MS;
+exports.REMOVE_LEAF = require_sleep.REMOVE_LEAF;
 exports.REVALIDATE_AFTER_MS = require_sleep.REVALIDATE_AFTER_MS;
 exports.ReadinessRegistry = require_sleep.ReadinessRegistry;
 exports.ReadinessTimeoutError = require_sleep.ReadinessTimeoutError;
+exports.RecordFieldPathSchema = require_sleep.RecordFieldPathSchema;
+exports.RecordIndexSchema = require_sleep.RecordIndexSchema;
+exports.RecordKindDeclarationSchema = require_sleep.RecordKindDeclarationSchema;
+exports.RecordKindNameSchema = require_sleep.RecordKindNameSchema;
+exports.RecordNotFoundError = require_sleep.RecordNotFoundError;
+exports.RecordRetentionSchema = require_sleep.RecordRetentionSchema;
+exports.RecordSecretUnavailableError = require_sleep.RecordSecretUnavailableError;
+exports.RecordTooLargeError = require_sleep.RecordTooLargeError;
+exports.RecordUniqueViolationError = require_sleep.RecordUniqueViolationError;
+exports.RecordsError = require_sleep.RecordsError;
+exports.RevConflictError = require_sleep.RevConflictError;
 exports.SECRET_CLEAR = require_sleep.SECRET_CLEAR;
 exports.SECRET_REF_SCHEME = require_sleep.SECRET_REF_SCHEME;
+exports.UnindexedFilterError = require_sleep.UnindexedFilterError;
+exports.UnknownRecordKindError = require_sleep.UnknownRecordKindError;
 exports.adminUiCapability = require_sleep.adminUiCapability;
 exports.arrayItemFieldPath = require_sleep.arrayItemFieldPath;
 exports.asJsonObject = require_sleep.asJsonObject;
+exports.asRecordsError = require_sleep.asRecordsError;
 exports.asString = require_sleep.asString;
+exports.assertValidDeclaration = require_sleep.assertValidDeclaration;
 exports.buildSecretRef = require_sleep.buildSecretRef;
 exports.classifySecretWrite = require_sleep.classifySecretWrite;
 exports.clearKnownSecrets = require_sleep.clearKnownSecrets;
+exports.collectSecretLeaves = require_sleep.collectSecretLeaves;
 exports.collectZodSecretPaths = require_sleep.collectZodSecretPaths;
 exports.createDeviceProxy = require_sleep.createDeviceProxy;
 exports.createEvent = require_sleep.createEvent;
 exports.createEventBusSliceSource = require_sleep.createEventBusSliceSource;
+exports.createRecordsAccess = require_sleep.createRecordsAccess;
 exports.createSecretsAccess = require_sleep.createSecretsAccess;
+exports.declarationsOf = require_sleep.declarationsOf;
+exports.defineEntryKind = require_sleep.defineEntryKind;
+exports.defineRecordKinds = require_sleep.defineRecordKinds;
 exports.describeCustomActions = require_sleep.describeCustomActions;
 exports.deviceOpsCapability = require_sleep.deviceOpsCapability;
 exports.emitReadiness = require_sleep.emitReadiness;
+exports.entryBody = require_sleep.entryBody;
 exports.errMsg = require_err_msg.errMsg;
 exports.expandCapMethods = require_sleep.expandCapMethods;
 exports.forgetKnownSecret = require_sleep.forgetKnownSecret;
@@ -2191,18 +2239,25 @@ exports.isSecretRef = require_sleep.isSecretRef;
 exports.isZodSecret = require_sleep.isZodSecret;
 exports.knownSecretCount = require_sleep.knownSecretCount;
 exports.makeSecretMarker = require_sleep.makeSecretMarker;
+exports.mapSecretLeaves = require_sleep.mapSecretLeaves;
 exports.maskUrlCredentials = require_sleep.maskUrlCredentials;
 exports.nodePin = require_sleep.nodePin;
 exports.normalizeAddonInitResult = require_sleep.normalizeAddonInitResult;
 exports.normalizeSecretOwner = require_sleep.normalizeSecretOwner;
 exports.parseJsonUnknown = require_sleep.parseJsonUnknown;
+exports.parseSecretPath = require_sleep.parseSecretPath;
 exports.parseSecretRef = require_sleep.parseSecretRef;
 exports.readErrorI18n = require_sleep.readErrorI18n;
 exports.readNodePin = require_sleep.readNodePin;
+exports.recordArrayItemPath = require_sleep.recordArrayItemPath;
+exports.recordSecretCollection = require_sleep.recordSecretCollection;
+exports.recordSecretRef = require_sleep.recordSecretRef;
+exports.recordsErrorFromMessage = require_sleep.recordsErrorFromMessage;
 exports.registerKnownSecret = require_sleep.registerKnownSecret;
 exports.resolveSecretViewsIn = require_sleep.resolveSecretViewsIn;
 exports.scopeKey = require_sleep.scopeKey;
 exports.scrubKnownSecrets = require_sleep.scrubKnownSecrets;
+exports.secretArrayPrefixes = require_sleep.secretArrayPrefixes;
 exports.shortSecretRefHash = require_sleep.shortSecretRefHash;
 exports.sleep = require_sleep.sleep;
 exports.toSecretFieldView = require_sleep.toSecretFieldView;

package/dist/addon.mjs

@@ -1,4 +1,4 @@
-import { $t as normalizeAddonInitResult, An as isSecretFieldView, Bt as registerKnownSecret, D as collectZodSecretPaths, Dn as SECRET_CLEAR, F as viewerUiCapability, Ft as createSecretsAccess, Gt as PEER_BYTES_STALL_MS, Ht as shortSecretRefHash, I as DEVICE_CHILDREN_BATCH_MAX, It as MIN_SCRUBBED_LENGTH, Jt as DATAPLANE_SECRET_HEADER, Kt as PEER_BYTES_TICKET_TTL_MS, Lt as clearKnownSecrets, Mn as isSecretMarkerLike, Nn as makeSecretMarker, Nt as resolveSecretViewsIn, O as isZodSecret, On as classifySecretWrite, P as deviceOpsCapability, Pn as toSecretFieldView, Pt as REVALIDATE_AFTER_MS, Rt as forgetKnownSecret, S as createEventBusSliceSource, Ut as PEER_BYTES_CHUNK_BYTES, V as adminUiCapability, Vt as scrubKnownSecrets, Wt as PEER_BYTES_MAX_OUTSTANDING, Xt as DisposerChain, Y as expandCapMethods, Zt as BaseAddon, _ as readErrorI18n, at as MODEL_FORMATS, b as isDeviceScopedCap, c as asString, cn as SECRET_REF_SCHEME, d as parseJsonUnknown, dn as formatSecretScope, f as hfModelUrl, fn as globalSecretScope, g as ErrorI18nPayloadSchema, hn as parseSecretRef, j as HF_REPO, jn as isSecretMarker, kn as isSecretClear, ln as arrayItemFieldPath, mn as normalizeSecretOwner, nt as nodePin, o as asJsonObject, ot as ReadinessRegistry, p as BOOT_RECOVERY_BACKOFF_MS, pn as isSecretRef, r as maskUrlCredentials, rt as readNodePin, st as ReadinessTimeoutError, t as sleep, un as buildSecretRef, ut as scopeKey, vn as createEvent, x as createDeviceProxy, y as DEVICE_SCOPED_CAPS, yn as emitReadiness, z as describeCustomActions, zt as knownSecretCount } from "./sleep-bgZLodYc.mjs";
+import { $ as nodePin, $t as AdoptionPendingError, An as RECORD_SETTINGS_MAX_ROWS, Ar as isSecretFieldView, At as defineEntryKind, Bn as scrubKnownSecrets, Bt as declarationsOf, Cn as RECORD_DELETE_BATCH, Dn as RECORD_MAX_INDEX_FIELDS, Dr as SECRET_CLEAR, En as RECORD_MAX_INDEXES, Fn as MIN_SCRUBBED_LENGTH, Ft as RecordIndexSchema, Gn as PEER_BYTES_TICKET_TTL_MS, Gt as parseSecretPath, Hn as PEER_BYTES_CHUNK_BYTES, Ht as REMOVE_LEAF, I as describeCustomActions, In as clearKnownSecrets, It as RecordKindDeclarationSchema, Jt as recordSecretRef, K as expandCapMethods, Kt as recordArrayItemPath, Ln as forgetKnownSecret, Lt as RecordKindNameSchema, M as viewerUiCapability, Mn as resolveSecretViewsIn, Mr as isSecretMarkerLike, Mt as createRecordsAccess, N as DEVICE_CHILDREN_BATCH_MAX, Nn as REVALIDATE_AFTER_MS, Nr as makeSecretMarker, Nt as EntryDescriptorSchema, O as HF_REPO, On as RECORD_QUERY_MAX, Or as classifySecretWrite, Pn as createSecretsAccess, Pr as toSecretFieldView, Pt as RecordFieldPathSchema, Qn as normalizeAddonInitResult, Qt as isZodSecret, R as adminUiCapability, Rn as knownSecretCount, Rt as RecordRetentionSchema, S as createEventBusSliceSource, Sn as RECORD_DEFAULT_MAX_DATA_BYTES, Tn as RECORD_MAX_DATA_BYTES, Un as PEER_BYTES_MAX_OUTSTANDING, Ut as collectSecretLeaves, Vn as shortSecretRefHash, Vt as defineRecordKinds, Wn as PEER_BYTES_STALL_MS, Wt as mapSecretLeaves, Xn as BaseAddon, Yn as DisposerChain, Yt as secretArrayPrefixes, Zt as collectZodSecretPaths, _ as readErrorI18n, _n as recordsErrorFromMessage, an as NoCallerError, b as isDeviceScopedCap, bn as RECORD_CLASSES, c as asString, cn as RecordNotFoundError, cr as SECRET_REF_SCHEME, d as parseJsonUnknown, dn as RecordUniqueViolationError, dr as formatSecretScope, en as BatchTooLargeError, et as readNodePin, f as hfModelUrl, fn as RecordsError, fr as globalSecretScope, g as ErrorI18nPayloadSchema, gn as asRecordsError, hn as UnknownRecordKindError, hr as parseSecretRef, in as InvalidRecordError, it as ReadinessTimeoutError, j as deviceOpsCapability, jn as RECORD_SWEEP_INTERVAL_MS, jr as isSecretMarker, jt as entryBody, kn as RECORD_SECRET_COLLECTION_PREFIX, kr as isSecretClear, ln as RecordSecretUnavailableError, lr as arrayItemFieldPath, mn as UnindexedFilterError, mr as normalizeSecretOwner, nn as FilterRequiredError, nt as MODEL_FORMATS, o as asJsonObject, on as PlaintextSecretError, p as BOOT_RECOVERY_BACKOFF_MS, pn as RevConflictError, pr as isSecretRef, qn as DATAPLANE_SECRET_HEADER, qt as recordSecretCollection, r as maskUrlCredentials, rn as ForeignSecretMarkerError, rt as ReadinessRegistry, sn as RECORDS_ERROR_CODES, st as scopeKey, t as sleep, tn as DeclarationRefusedError, un as RecordTooLargeError, ur as buildSecretRef, vn as RECORD_BATCH_MAX, vr as createEvent, wn as RECORD_ID_MAX_LENGTH, x as createDeviceProxy, xn as RECORD_DATABASES, y as DEVICE_SCOPED_CAPS, yn as RECORD_BATCH_MAX_BYTES, yr as emitReadiness, zn as registerKnownSecret, zt as assertValidDeclaration } from "./sleep-WsrozGDL.mjs";
 import { t as EventCategory } from "./event-category-BvOFi6PY.mjs";
 import { a as DeviceType, t as errMsg } from "./err-msg--2RrYiLO.mjs";
 //#region src/generated/cap-input-defaults.ts
@@ -15,7 +15,7 @@ import { a as DeviceType, t as errMsg } from "./err-msg--2RrYiLO.mjs";
 * Plain data, zero Zod: a forked runner must not import the schema barrel
 * (~144MB RSS per runner — D28).
 *
-* Coverage: 27 caps, 69 methods with defaults.
+* Coverage: 29 caps, 71 methods with defaults.
 */
 var CAP_INPUT_DEFAULTS = Object.freeze({
 	"addons": { "getLogs": { "limit": 100 } },
@@ -236,7 +236,9 @@ var CAP_INPUT_DEFAULTS = Object.freeze({
 		},
 		"setDeviceConfig": { "config": { "__nested__": { "bands": [] } } }
 	},
+	"records": { "query": { "limit": 100 } },
 	"storage": { "upsertLocation": { "isSystem": false } },
+	"storage-admin": { "readRecords": { "limit": 100 } },
 	"storage-provider": {
 		"beginDownload": { "location": { "__nested__": { "isSystem": false } } },
 		"beginUpload": { "location": { "__nested__": { "isSystem": false } } },
@@ -2132,4 +2134,4 @@ var CAP_STATE_LEAVES = Object.freeze({
 	]
 });
 //#endregion
-export { BOOT_RECOVERY_BACKOFF_MS, BaseAddon, CAP_ADVANCE_FIELDS, CAP_INPUT_DEFAULTS, CAP_STATE_LEAVES, COLLECTION_ARRAY_METHODS, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DEVICE_SCOPED_CAPS, DeviceType, DisposerChain, ErrorI18nPayloadSchema, EventCategory, HF_REPO, MIN_SCRUBBED_LENGTH, MODEL_FORMATS, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, PROVIDER_OPTIONAL_METHODS, REVALIDATE_AFTER_MS, ReadinessRegistry, ReadinessTimeoutError, SECRET_CLEAR, SECRET_REF_SCHEME, adminUiCapability, arrayItemFieldPath, asJsonObject, asString, buildSecretRef, classifySecretWrite, clearKnownSecrets, collectZodSecretPaths, createDeviceProxy, createEvent, createEventBusSliceSource, createSecretsAccess, describeCustomActions, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods, forgetKnownSecret, formatSecretScope, globalSecretScope, hfModelUrl, isCollectionArrayMethodName, isDeviceScopedCap, isProviderOptionalMethodName, isSecretClear, isSecretFieldView, isSecretMarker, isSecretMarkerLike, isSecretRef, isZodSecret, knownSecretCount, makeSecretMarker, maskUrlCredentials, nodePin, normalizeAddonInitResult, normalizeSecretOwner, parseJsonUnknown, parseSecretRef, readErrorI18n, readNodePin, registerKnownSecret, resolveSecretViewsIn, scopeKey, scrubKnownSecrets, shortSecretRefHash, sleep, toSecretFieldView, viewerUiCapability, withCapInputDefaults };
+export { AdoptionPendingError, BOOT_RECOVERY_BACKOFF_MS, BaseAddon, BatchTooLargeError, CAP_ADVANCE_FIELDS, CAP_INPUT_DEFAULTS, CAP_STATE_LEAVES, COLLECTION_ARRAY_METHODS, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DEVICE_SCOPED_CAPS, DeclarationRefusedError, DeviceType, DisposerChain, EntryDescriptorSchema, ErrorI18nPayloadSchema, EventCategory, FilterRequiredError, ForeignSecretMarkerError, HF_REPO, InvalidRecordError, MIN_SCRUBBED_LENGTH, MODEL_FORMATS, NoCallerError, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, PROVIDER_OPTIONAL_METHODS, PlaintextSecretError, RECORDS_ERROR_CODES, RECORD_BATCH_MAX, RECORD_BATCH_MAX_BYTES, RECORD_CLASSES, RECORD_DATABASES, RECORD_DEFAULT_MAX_DATA_BYTES, RECORD_DELETE_BATCH, RECORD_ID_MAX_LENGTH, RECORD_MAX_DATA_BYTES, RECORD_MAX_INDEXES, RECORD_MAX_INDEX_FIELDS, RECORD_QUERY_MAX, RECORD_SECRET_COLLECTION_PREFIX, RECORD_SETTINGS_MAX_ROWS, RECORD_SWEEP_INTERVAL_MS, REMOVE_LEAF, REVALIDATE_AFTER_MS, ReadinessRegistry, ReadinessTimeoutError, RecordFieldPathSchema, RecordIndexSchema, RecordKindDeclarationSchema, RecordKindNameSchema, RecordNotFoundError, RecordRetentionSchema, RecordSecretUnavailableError, RecordTooLargeError, RecordUniqueViolationError, RecordsError, RevConflictError, SECRET_CLEAR, SECRET_REF_SCHEME, UnindexedFilterError, UnknownRecordKindError, adminUiCapability, arrayItemFieldPath, asJsonObject, asRecordsError, asString, assertValidDeclaration, buildSecretRef, classifySecretWrite, clearKnownSecrets, collectSecretLeaves, collectZodSecretPaths, createDeviceProxy, createEvent, createEventBusSliceSource, createRecordsAccess, createSecretsAccess, declarationsOf, defineEntryKind, defineRecordKinds, describeCustomActions, deviceOpsCapability, emitReadiness, entryBody, errMsg, expandCapMethods, forgetKnownSecret, formatSecretScope, globalSecretScope, hfModelUrl, isCollectionArrayMethodName, isDeviceScopedCap, isProviderOptionalMethodName, isSecretClear, isSecretFieldView, isSecretMarker, isSecretMarkerLike, isSecretRef, isZodSecret, knownSecretCount, makeSecretMarker, mapSecretLeaves, maskUrlCredentials, nodePin, normalizeAddonInitResult, normalizeSecretOwner, parseJsonUnknown, parseSecretPath, parseSecretRef, readErrorI18n, readNodePin, recordArrayItemPath, recordSecretCollection, recordSecretRef, recordsErrorFromMessage, registerKnownSecret, resolveSecretViewsIn, scopeKey, scrubKnownSecrets, secretArrayPrefixes, shortSecretRefHash, sleep, toSecretFieldView, viewerUiCapability, withCapInputDefaults };

package/dist/capabilities/caller-stamp.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Every cap whose provider reads a `callerAddonId` in its input (the keychain's
+ * owner check, device-history's `not-owner`, records' owner).
+ *
+ * The stamp is set ONLY by the transport (`stampCallerAddonId`, or stated by a
+ * hub in-process caller). The generated HTTP/tRPC mount parses input with
+ * `.loose()`, so without this a session could add the key itself and act as
+ * another addon. The mount strips it for these caps.
+ */
+export declare const CALLER_STAMPED_CAPABILITIES: readonly string[];
+/** A copy of `input` without the caller stamp. Anything that is not a plain object passes through. */
+export declare function withoutCallerStamp<T>(input: T): T;

package/dist/capabilities/core-blocks.cap.d.ts

@@ -2483,7 +2483,8 @@ export declare const coreBlocksCapability: {
         /**
          * Hydrated settings form for one block, or null until a `settingsSchema`
          * is known (extracted from the compiled entry's named export, or set on
-         * the block). Values live in the `core-blocks:settings` collection.
+         * the block). Values live in the block addon's `addon-settings` rows (D880);
+         * a password field answers as a "set" view, never the value.
          */
         readonly getBlockSettings: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
             blockId: z.ZodString;
@@ -2517,9 +2518,10 @@ export declare const coreBlocksCapability: {
         }, z.core.$strip>>, import("./capability-definition.js").CapabilityMethodKind>;
         /**
          * Patch persisted preference values for one block. The schema is not
-         * rewritten here — only values. Scripts read the same blob via
-         * `ctx.settings.readAddonStore()` (mirrored into the block addon's
-         * `addon-settings` namespace on every patch).
+         * rewritten here — only values. Scripts read the same rows via
+         * `ctx.settings.readAddonStore()`. A field the schema declares `password` /
+         * `secret: true` is stored in the keychain (owner = the block's addon id)
+         * and the row holds a marker; a REDACTED or view value keeps the stored one.
          */
         readonly updateBlockSettings: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
             blockId: z.ZodString;
@@ -2527,6 +2529,26 @@ export declare const coreBlocksCapability: {
         }, z.core.$strip>, z.ZodObject<{
             success: z.ZodLiteral<true>;
         }, z.core.$strip>, "mutation">;
+        /**
+         * D880: move every plaintext password a block's `settingsSchema` declares
+         * into the keychain and delete the legacy `core-blocks:settings` copy. Dry
+         * run unless `apply`; idempotent; counts only. A secret is read back from
+         * the keychain before its row is rewritten.
+         */
+        readonly migrateRawSecrets: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            apply: z.ZodBoolean;
+        }, z.core.$strip>, z.ZodObject<{
+            apply: z.ZodBoolean;
+            rows: z.ZodNumber;
+            raw: z.ZodNumber;
+            markers: z.ZodNumber;
+            migrated: z.ZodNumber;
+            failed: z.ZodNumber;
+            remainingRaw: z.ZodNumber;
+            unresolvedMarkers: z.ZodNumber;
+            redundantCopies: z.ZodOptional<z.ZodNumber>;
+            verified: z.ZodBoolean;
+        }, z.core.$strip>, "mutation">;
         /**
          * The declaration files the editor type-checks against.
          *

package/dist/capabilities/index.d.ts

@@ -45,7 +45,10 @@ export type { CustomModelDescriptor, ICustomModelRegistryProvider, ImportModelBu
 export { CustomModelDescriptorSchema, customModelRegistryCapability, ImportModelBundleInputSchema, ImportModelBundleResultSchema, ModelBundleFileSchema, } from './custom-model-registry.cap.js';
 export { type DataStoreEngineInfo, dataStoreProviderCapability, EngineInfoSchema as DataStoreEngineInfoSchema, type IDataStoreProvider, } from './data-store-provider.cap.js';
 export { type ArchiveSqliteSnapshot, ArchiveSqliteSnapshotSchema, DATABASE_SNAPSHOT_PARTIAL_SUFFIX, DATABASE_SNAPSHOT_SUFFIX, DATABASE_SNAPSHOT_TIMEOUT_MS, type DatabaseSnapshotRequest, DatabaseSnapshotRequestSchema, type DatabaseSnapshotResult, DatabaseSnapshotResultSchema, type DatabaseSnapshotTable, DatabaseSnapshotTableSchema, type DatabaseSnapshotTargets, DatabaseSnapshotTargetsSchema, type DatabaseSnapshotWritten, DatabaseSnapshotWrittenSchema, databaseSnapshotCapability, type IDatabaseSnapshotProvider, } from './database-snapshot.cap.js';
-export { type IStorageAdminProvider, STORAGE_ADMIN_MOVED_COLLECTIONS, STORAGE_ADMIN_SCOPED_BASES, type StorageTable, StorageTableSchema, storageAdminCapability, } from './storage-admin.cap.js';
+export { CALLER_STAMPED_CAPABILITIES, withoutCallerStamp } from './caller-stamp.js';
+export { type IStorageAdminProvider, STORAGE_ADMIN_MOVED_COLLECTIONS, STORAGE_ADMIN_SCOPED_BASES, type StorageKind, StorageKindSchema, type StorageTable, StorageTableSchema, storageAdminCapability, } from './storage-admin.cap.js';
+export { type DeclareKindResult, DeclareKindResultSchema, type IRecordsProvider, type RecordInput, RecordInputSchema, type RecordQueryInput, RecordQueryInputSchema, type RecordQueryResult, RecordQueryResultSchema, type RecordView, RecordViewSchema, type RecordWhere, RecordWhereSchema, type RecordWhereValue, RecordIdSchema, RecordBodySchema, RecordSecretRefsSchema, recordsCapability, } from './records.cap.js';
+export { type EntryKindInfo, EntryKindInfoSchema, type EntryView, EntryViewSchema, type IRecordEntriesProvider, recordEntriesCapability, } from './record-entries.cap.js';
 export { type IKeychainProvider, KEYCHAIN_MAX_REFS_PER_CALL, type KeychainResolveEntry, KeychainResolveEntrySchema, type KeychainResolveResult, KeychainResolveResultSchema, type KeychainSecretMeta, KeychainSecretMetaSchema, type KeychainState, KeychainStateSchema, type KeychainUnavailableReason, KeychainUnavailableReasonSchema, keychainCapability, } from './keychain.cap.js';
 export { type DeviceHistoryStatus, DeviceHistoryStatusSchema, type DeviceHistoryIngestResult, type DeviceHistoryKind, DeviceHistoryKindSchema, type DeviceHistoryQueryPoint, type DeviceHistoryRefusalReason, DeviceHistoryRefusalReasonSchema, type DeviceHistoryResolution, DeviceHistoryResolutionSchema, type DeviceHistorySeriesInfo, type DeviceHistorySubject, DeviceHistorySubjectSchema, type IDeviceHistoryProvider, deviceHistoryCapability, } from './device-history.cap.js';
 export { type DeviceCaStatus, DeviceCaStatusSchema, type DeviceCertificateSettings, DeviceCertificateSettingsSchema, deviceCredentialsCapability, type IDeviceCredentialsProvider, } from './device-credentials.cap.js';
@@ -293,6 +296,8 @@ import type { customModelRegistryCapability } from './custom-model-registry.cap.
 import type { dataStoreProviderCapability } from './data-store-provider.cap.js';
 import type { databaseSnapshotCapability } from './database-snapshot.cap.js';
 import type { storageAdminCapability } from './storage-admin.cap.js';
+import type { recordsCapability } from './records.cap.js';
+import type { recordEntriesCapability } from './record-entries.cap.js';
 import type { deviceHistoryCapability } from './device-history.cap.js';
 import type { keychainCapability } from './keychain.cap.js';
 import type { keychainAdminCapability } from './keychain-admin.cap.js';
@@ -422,6 +427,6 @@ import type { trainingProviderCapability } from './training-provider.cap.js';
 import type { zoneAnalyticsCapability } from './zone-analytics.cap.js';
 import type { zoneRulesCapability } from './zone-rules.cap.js';
 import type { zonesCapability } from './zones.cap.js';
-type AnyCapability = typeof streamSignalsCapability | typeof addonSettingsCapability | typeof alertsCapability | typeof storageCapability | typeof storageMigrationCapability | typeof storageProviderCapability | typeof storageEvictableCapability | typeof storageOccupancyCapability | typeof filesystemBrowseCapability | typeof backupCapability | typeof terminalSessionCapability | typeof settingsStoreCapability | typeof dataStoreProviderCapability | typeof databaseSnapshotCapability | typeof storageAdminCapability | typeof deviceHistoryCapability | typeof keychainCapability | typeof keychainAdminCapability | typeof deviceCredentialsCapability | typeof nodeCertificatesCapability | typeof logChannelsCapability | typeof logDestinationCapability | typeof loadContributionCapability | typeof failureContributionCapability | typeof deviceRemovalHookCapability | typeof adminUiCapability | typeof viewerUiCapability | typeof ssoBridgeCapability | typeof userPasskeysCapability | typeof smtpProviderCapability | typeof mqttBrokerCapability | typeof brokerCapability | typeof deviceAdoptionCapability | typeof deviceAdminLinkCapability | typeof deviceExportCapability | typeof addonPagesCapability | typeof addonPagesSourceCapability | typeof addonWidgetsCapability | typeof addonWidgetsSourceCapability | typeof customModelRegistryCapability | typeof modelDistributorCapability | typeof modelConvertCapability | typeof addonRoutesCapability | typeof streamBrokerCapability | typeof decoderCapability | typeof webrtcSessionCapability | typeof cameraStreamsCapability | typeof calendarSourceCapability | typeof calendarsCapability | typeof motionDetectionCapability | typeof pipelineExecutorCapability | typeof detectionPipelineCapability | typeof cameraPipelineConfigCapability | typeof pipelineRunnerCapability | typeof pipelineOrchestratorCapability | typeof audioAnalyzerCapability | typeof audioAnalysisCapability | typeof audioCodecCapability | typeof embeddingEncoderCapability | typeof vectorStoreCapability | typeof deviceProviderCapability | typeof deviceManagerCapability | typeof deviceStateCapability | typeof authProviderCapability | typeof loginMethodCapability | typeof networkAccessCapability | typeof turnProviderCapability | typeof snapshotCapability | typeof llmCapability | typeof llmRuntimeCapability | typeof notificationOutputCapability | typeof composerCapability | typeof coreBlocksCapability | typeof notificationRulesCapability | typeof pipelineAnalyticsCapability | typeof metricsProviderCapability | typeof ptzCapability | typeof ptzAutotrackCapability | typeof navigationCapability | typeof consumablesCapability | typeof connectionTestCapability | typeof rebootCapability | typeof deviceDiscoveryCapability | typeof brightnessCapability | typeof colorCapability | typeof climateControlCapability | typeof coverCapability | typeof valveCapability | typeof humidifierCapability | typeof waterHeaterCapability | typeof weatherCapability | typeof imageCapability | typeof lockControlCapability | typeof vacuumControlCapability | typeof petFeederCapability | typeof lawnMowerControlCapability | typeof fanControlCapability | typeof controlCapability | typeof notifierCapability | typeof mediaPlayerCapability | typeof alarmPanelCapability | typeof presenceCapability | typeof scriptRunnerCapability | typeof automationControlCapability | typeof motionTriggerCapability | typeof zonesCapability | typeof zoneRulesCapability | typeof trainingCapability | typeof trainingProviderCapability | typeof zoneAnalyticsCapability | typeof audioMetricsCapability | typeof motionCapability | typeof contactCapability | typeof floodCapability | typeof smokeCapability | typeof carbonMonoxideCapability | typeof gasCapability | typeof tamperCapability | typeof vibrationCapability | typeof connectivityCapability | typeof binaryCapability | typeof temperatureSensorCapability | typeof humiditySensorCapability | typeof ambientLightSensorCapability | typeof pressureSensorCapability | typeof powerMeterCapability | typeof airQualitySensorCapability | typeof numericSensorCapability | typeof enumSensorCapability | typeof recordingCapability | typeof recordingArchiveCapability | typeof recordingExportCapability | typeof recordingSignalCapability | typeof deviceOpsCapability | typeof platformProbeCapability | typeof localNetworkCapability | typeof meshNetworkCapability | typeof userManagementCapability | typeof systemCapability | typeof networkQualityCapability | typeof toastCapability | typeof nodesCapability | typeof serverManagementCapability | typeof integrationsCapability | typeof addonsCapability | typeof oauthIntegrationCapability | typeof oidcConnectionsCapability | typeof streamParamsCapability | typeof streamCatalogCapability | typeof motionZonesCapability | typeof cameraGridLayoutCapability | typeof sceneMonitorCapability | typeof privacyMaskCapability | typeof dayNightCapability | typeof recordingOnboardCapability | typeof imageSettingsCapability | typeof osdCapability | typeof osdManagerCapability | typeof accessoriesCapability | typeof batteryCapability | typeof networkLinkCapability | typeof buttonCapability | typeof cameraCredentialsCapability | typeof deviceStatusCapability | typeof doorbellCapability | typeof eventEmitterCapability | typeof faceGalleryCapability | typeof featureProbeCapability | typeof intercomCapability | typeof nativeObjectDetectionCapability | typeof plateGalleryCapability | typeof switchCapability | typeof updateCapability | typeof videoclipsCapability | typeof deviceExtensionCapability;
+type AnyCapability = typeof streamSignalsCapability | typeof addonSettingsCapability | typeof alertsCapability | typeof storageCapability | typeof storageMigrationCapability | typeof storageProviderCapability | typeof storageEvictableCapability | typeof storageOccupancyCapability | typeof filesystemBrowseCapability | typeof backupCapability | typeof terminalSessionCapability | typeof settingsStoreCapability | typeof dataStoreProviderCapability | typeof databaseSnapshotCapability | typeof storageAdminCapability | typeof recordsCapability | typeof recordEntriesCapability | typeof deviceHistoryCapability | typeof keychainCapability | typeof keychainAdminCapability | typeof deviceCredentialsCapability | typeof nodeCertificatesCapability | typeof logChannelsCapability | typeof logDestinationCapability | typeof loadContributionCapability | typeof failureContributionCapability | typeof deviceRemovalHookCapability | typeof adminUiCapability | typeof viewerUiCapability | typeof ssoBridgeCapability | typeof userPasskeysCapability | typeof smtpProviderCapability | typeof mqttBrokerCapability | typeof brokerCapability | typeof deviceAdoptionCapability | typeof deviceAdminLinkCapability | typeof deviceExportCapability | typeof addonPagesCapability | typeof addonPagesSourceCapability | typeof addonWidgetsCapability | typeof addonWidgetsSourceCapability | typeof customModelRegistryCapability | typeof modelDistributorCapability | typeof modelConvertCapability | typeof addonRoutesCapability | typeof streamBrokerCapability | typeof decoderCapability | typeof webrtcSessionCapability | typeof cameraStreamsCapability | typeof calendarSourceCapability | typeof calendarsCapability | typeof motionDetectionCapability | typeof pipelineExecutorCapability | typeof detectionPipelineCapability | typeof cameraPipelineConfigCapability | typeof pipelineRunnerCapability | typeof pipelineOrchestratorCapability | typeof audioAnalyzerCapability | typeof audioAnalysisCapability | typeof audioCodecCapability | typeof embeddingEncoderCapability | typeof vectorStoreCapability | typeof deviceProviderCapability | typeof deviceManagerCapability | typeof deviceStateCapability | typeof authProviderCapability | typeof loginMethodCapability | typeof networkAccessCapability | typeof turnProviderCapability | typeof snapshotCapability | typeof llmCapability | typeof llmRuntimeCapability | typeof notificationOutputCapability | typeof composerCapability | typeof coreBlocksCapability | typeof notificationRulesCapability | typeof pipelineAnalyticsCapability | typeof metricsProviderCapability | typeof ptzCapability | typeof ptzAutotrackCapability | typeof navigationCapability | typeof consumablesCapability | typeof connectionTestCapability | typeof rebootCapability | typeof deviceDiscoveryCapability | typeof brightnessCapability | typeof colorCapability | typeof climateControlCapability | typeof coverCapability | typeof valveCapability | typeof humidifierCapability | typeof waterHeaterCapability | typeof weatherCapability | typeof imageCapability | typeof lockControlCapability | typeof vacuumControlCapability | typeof petFeederCapability | typeof lawnMowerControlCapability | typeof fanControlCapability | typeof controlCapability | typeof notifierCapability | typeof mediaPlayerCapability | typeof alarmPanelCapability | typeof presenceCapability | typeof scriptRunnerCapability | typeof automationControlCapability | typeof motionTriggerCapability | typeof zonesCapability | typeof zoneRulesCapability | typeof trainingCapability | typeof trainingProviderCapability | typeof zoneAnalyticsCapability | typeof audioMetricsCapability | typeof motionCapability | typeof contactCapability | typeof floodCapability | typeof smokeCapability | typeof carbonMonoxideCapability | typeof gasCapability | typeof tamperCapability | typeof vibrationCapability | typeof connectivityCapability | typeof binaryCapability | typeof temperatureSensorCapability | typeof humiditySensorCapability | typeof ambientLightSensorCapability | typeof pressureSensorCapability | typeof powerMeterCapability | typeof airQualitySensorCapability | typeof numericSensorCapability | typeof enumSensorCapability | typeof recordingCapability | typeof recordingArchiveCapability | typeof recordingExportCapability | typeof recordingSignalCapability | typeof deviceOpsCapability | typeof platformProbeCapability | typeof localNetworkCapability | typeof meshNetworkCapability | typeof userManagementCapability | typeof systemCapability | typeof networkQualityCapability | typeof toastCapability | typeof nodesCapability | typeof serverManagementCapability | typeof integrationsCapability | typeof addonsCapability | typeof oauthIntegrationCapability | typeof oidcConnectionsCapability | typeof streamParamsCapability | typeof streamCatalogCapability | typeof motionZonesCapability | typeof cameraGridLayoutCapability | typeof sceneMonitorCapability | typeof privacyMaskCapability | typeof dayNightCapability | typeof recordingOnboardCapability | typeof imageSettingsCapability | typeof osdCapability | typeof osdManagerCapability | typeof accessoriesCapability | typeof batteryCapability | typeof networkLinkCapability | typeof buttonCapability | typeof cameraCredentialsCapability | typeof deviceStatusCapability | typeof doorbellCapability | typeof eventEmitterCapability | typeof faceGalleryCapability | typeof featureProbeCapability | typeof intercomCapability | typeof nativeObjectDetectionCapability | typeof plateGalleryCapability | typeof switchCapability | typeof updateCapability | typeof videoclipsCapability | typeof deviceExtensionCapability;
 export type CapabilityName = AnyCapability['name'];
 export type ITypedReadinessRegistry = IReadinessRegistry<CapabilityName>;

package/dist/capabilities/llm.cap.d.ts

@@ -723,6 +723,7 @@ export declare const llmCapability: {
             failed: z.ZodNumber;
             remainingRaw: z.ZodNumber;
             unresolvedMarkers: z.ZodNumber;
+            redundantCopies: z.ZodOptional<z.ZodNumber>;
             verified: z.ZodBoolean;
         }, z.core.$strip>, "mutation">;
         readonly deleteProfile: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{

package/dist/capabilities/raw-secret-migration.d.ts

@@ -20,6 +20,7 @@ export declare const RawSecretMigrationReportSchema: z.ZodObject<{
     failed: z.ZodNumber;
     remainingRaw: z.ZodNumber;
     unresolvedMarkers: z.ZodNumber;
+    redundantCopies: z.ZodOptional<z.ZodNumber>;
     verified: z.ZodBoolean;
 }, z.core.$strip>;
 export type RawSecretMigrationReport = z.infer<typeof RawSecretMigrationReportSchema>;

package/dist/capabilities/record-entries.cap.d.ts

@@ -0,0 +1,84 @@
+import { z } from 'zod';
+import { type InferProvider } from './capability-definition.js';
+/**
+ * record-entries - the ONE admin surface for every list of user-created entries
+ * (D881): notification targets, brokers, LLM profiles, anything an addon
+ * declares as an ENTRY kind (`entry: { title }` in `defineRecordKinds`).
+ *
+ * The UI is generic. `listEntryKinds` hands it, per kind, the JSON Schema of
+ * the entry body with `secret: true` on every credential field, so a password
+ * field is derived from the schema and never from a name. `putEntry` takes the
+ * redaction token for an untouched secret (the stored value is kept), a string
+ * for a new one, and the clear instruction to remove one. A read never carries
+ * a secret value, and a locked keychain refuses the write with
+ * `records/secret-unavailable` instead of storing plaintext.
+ *
+ * Hub-only, served in-process (it acts for each entry's owner on the keychain).
+ */
+export declare const EntryKindInfoSchema: z.ZodObject<{
+    owner: z.ZodString;
+    kind: z.ZodString;
+    title: z.ZodString;
+    nameField: z.ZodString;
+    fields: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    secretPaths: z.ZodArray<z.ZodString>;
+    rows: z.ZodNumber;
+}, z.core.$strip>;
+export type EntryKindInfo = z.infer<typeof EntryKindInfoSchema>;
+export declare const EntryViewSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    rev: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+    data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>;
+export type EntryView = z.infer<typeof EntryViewSchema>;
+export declare const recordEntriesCapability: {
+    readonly name: 'record-entries';
+    readonly scope: 'system';
+    readonly mode: 'singleton';
+    readonly methods: {
+        readonly listEntryKinds: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
+            kinds: z.ZodArray<z.ZodObject<{
+                owner: z.ZodString;
+                kind: z.ZodString;
+                title: z.ZodString;
+                nameField: z.ZodString;
+                fields: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+                secretPaths: z.ZodArray<z.ZodString>;
+                rows: z.ZodNumber;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
+        readonly listEntries: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            owner: z.ZodString;
+            kind: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            entries: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                name: z.ZodString;
+                rev: z.ZodNumber;
+                updatedAt: z.ZodNumber;
+                data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
+        /** Create (no `id`: one is generated) or edit. `ifRev` guards an edit against a concurrent one. */
+        readonly putEntry: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            owner: z.ZodString;
+            kind: z.ZodString;
+            id: z.ZodOptional<z.ZodString>;
+            data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            ifRev: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            rev: z.ZodNumber;
+        }, z.core.$strip>, "mutation">;
+        readonly deleteEntry: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            owner: z.ZodString;
+            kind: z.ZodString;
+            id: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            deleted: z.ZodBoolean;
+        }, z.core.$strip>, "mutation">;
+    };
+};
+export type IRecordEntriesProvider = InferProvider<typeof recordEntriesCapability>;