@camstack/types 1.2.378 → 1.2.380

package/dist/index.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-gxUz0C9M.js");
+const require_sleep = require("./sleep-CIGOw58l.js");
 const require_event_category = require("./event-category-Hoe-mqbd.js");
 const require_composition = require("./composition-CUAOHZ38.js");
 const require_node_color = require("./node-color.js");
@@ -13088,6 +13088,43 @@ function describeComposableCaps(defs, deviceType) {
 	}).toSorted((a, b) => a.cap.localeCompare(b.cap));
 }
 //#endregion
+//#region src/capabilities/raw-secret-migration.ts
+/**
+* The report of a one-shot "move this owner's plaintext secrets into the
+* keychain" run (D878). COUNTS only - never a value, never a ref.
+*
+* The owner runs it on its own rows, through its own write path; an operator
+* script (`scripts/hub/migrate-raw-secrets.ts`) calls the owner's cap method.
+* Dry run (`apply: false`) reports what WOULD move and changes nothing.
+*/
+var RawSecretMigrationInputSchema = zod.z.object({ 
+/** `false` (the default of the script) = report only. */
+apply: zod.z.boolean() });
+var RawSecretMigrationReportSchema = zod.z.object({
+	apply: zod.z.boolean(),
+	/** Rows that can carry a secret (a profile, an enrolment). */
+	rows: zod.z.number().int(),
+	/** Rows whose secret was plaintext when the run started. */
+	raw: zod.z.number().int(),
+	/** Rows that already held a keychain marker when the run started. */
+	markers: zod.z.number().int(),
+	/** Plaintext rows moved by THIS run (always 0 on a dry run). */
+	migrated: zod.z.number().int(),
+	/** Plaintext rows left in place because the move or its read-back failed. */
+	failed: zod.z.number().int(),
+	/** After the run: rows still holding plaintext. */
+	remainingRaw: zod.z.number().int(),
+	/** After the run: markers the keychain could not resolve right now. */
+	unresolvedMarkers: zod.z.number().int(),
+	/**
+	* A second, redundant copy of the secrets' rows that the run found (and, on
+	* `apply`, deleted after verifying the first). Owners with a single copy omit it.
+	*/
+	redundantCopies: zod.z.number().int().optional(),
+	/** True when nothing is raw and every marker resolves. */
+	verified: zod.z.boolean()
+});
+//#endregion
 //#region src/capabilities/core-blocks.cap.ts
 /**
 * core-blocks — user-authored TypeScript, stored in the kernel and executed in
@@ -13453,14 +13490,16 @@ var coreBlocksCapability = {
 		/**
 		* Hydrated settings form for one block, or null until a `settingsSchema`
 		* is known (extracted from the compiled entry's named export, or set on
-		* the block). Values live in the `core-blocks:settings` collection.
+		* the block). Values live in the block addon's `addon-settings` rows (D880);
+		* a password field answers as a "set" view, never the value.
 		*/
 		getBlockSettings: require_sleep.method(zod.z.object({ blockId: zod.z.string() }), SettingsSchemaWithValuesSchema.nullable(), { auth: "admin" }),
 		/**
 		* Patch persisted preference values for one block. The schema is not
-		* rewritten here — only values. Scripts read the same blob via
-		* `ctx.settings.readAddonStore()` (mirrored into the block addon's
-		* `addon-settings` namespace on every patch).
+		* rewritten here — only values. Scripts read the same rows via
+		* `ctx.settings.readAddonStore()`. A field the schema declares `password` /
+		* `secret: true` is stored in the keychain (owner = the block's addon id)
+		* and the row holds a marker; a REDACTED or view value keeps the stored one.
 		*/
 		updateBlockSettings: require_sleep.method(zod.z.object({
 			blockId: zod.z.string(),
@@ -13470,6 +13509,16 @@ var coreBlocksCapability = {
 			auth: "admin"
 		}),
 		/**
+		* D880: move every plaintext password a block's `settingsSchema` declares
+		* into the keychain and delete the legacy `core-blocks:settings` copy. Dry
+		* run unless `apply`; idempotent; counts only. A secret is read back from
+		* the keychain before its row is rewritten.
+		*/
+		migrateRawSecrets: require_sleep.method(RawSecretMigrationInputSchema, RawSecretMigrationReportSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/**
 		* The declaration files the editor type-checks against.
 		*
 		* Served rather than bundled: the graph is 3.4 MB across 344 files, and
@@ -13900,6 +13949,280 @@ id: zod.z.union([zod.z.string(), zod.z.number()]) }), {
 	}
 };
 //#endregion
+//#region src/capabilities/caller-stamp.ts
+/**
+* Every cap whose provider reads a `callerAddonId` in its input (the keychain's
+* owner check, device-history's `not-owner`, records' owner).
+*
+* The stamp is set ONLY by the transport (`stampCallerAddonId`, or stated by a
+* hub in-process caller). The generated HTTP/tRPC mount parses input with
+* `.loose()`, so without this a session could add the key itself and act as
+* another addon. The mount strips it for these caps.
+*/
+var CALLER_STAMPED_CAPABILITIES = [
+	"keychain",
+	"device-history",
+	"records",
+	"integrations",
+	"device-manager"
+];
+/** A copy of `input` without the caller stamp. Anything that is not a plain object passes through. */
+function withoutCallerStamp(input) {
+	if (input === null || typeof input !== "object" || Array.isArray(input)) return input;
+	if (!Object.prototype.hasOwnProperty.call(input, "callerAddonId")) return input;
+	return Object.fromEntries(Object.entries(input).filter(([key]) => key !== "callerAddonId"));
+}
+//#endregion
+//#region src/capabilities/records.cap.ts
+/**
+* records - an addon's own facts and documents (D881): ledgers, audit rows,
+* config documents, mirrors. The third storage API next to `ctx.settings`
+* (operator intent, D870) and device-history (numbers over time, D850).
+*
+* Who the OWNER is: `callerAddonId`, stamped by the transport on a call that
+* crossed a process and stated by a hub in-process caller (`ctx.records` does
+* that with the addon id closed over). It is deliberately NOT in any input
+* schema, so a session can never supply it, and a call with no stamp is refused
+* `records/no-caller`. A kind is readable and writable only by its owner; other
+* addons go through the owner's capability.
+*
+* Every read is three-way: a row, `null`, or the call THROWS. A failed read is
+* never `[]`. Secret fields are never on the wire: a read shows the
+* redaction token, `secretRefs` hands the owner's `ctx.secrets` the refs it
+* resolves itself, and a write may carry only a keychain marker bound to the
+* row's own ref.
+*
+* Internal: addons reach it through `ctx.records`, never directly.
+*/
+var RecordIdSchema = zod.z.string().min(1).max(256);
+/** A JSON object body. Size is the engine's check (`maxDataBytes`), not a schema's. */
+var RecordBodySchema = zod.z.record(zod.z.string(), zod.z.unknown());
+var RecordInputSchema = zod.z.object({
+	id: RecordIdSchema,
+	/** The device this row belongs to (D865 removal, per-device reads). */
+	deviceId: zod.z.number().int().optional(),
+	/** The domain clock, ms: observed / created / opened. */
+	at: zod.z.number().int().optional(),
+	/** Producer-set expiry, ms. Refused on a kind whose retention is an engine TTL. */
+	expiresAt: zod.z.number().int().optional(),
+	data: RecordBodySchema
+});
+var RecordViewSchema = zod.z.object({
+	id: zod.z.string(),
+	deviceId: zod.z.number().int().nullable(),
+	at: zod.z.number().nullable(),
+	expiresAt: zod.z.number().nullable(),
+	rev: zod.z.number().int(),
+	updatedAt: zod.z.number(),
+	data: RecordBodySchema
+});
+/** One predicate on a declared index field: equality, a set, or a range. */
+var RecordWhereValueSchema = zod.z.union([
+	zod.z.string(),
+	zod.z.number(),
+	zod.z.boolean(),
+	zod.z.object({ in: zod.z.array(zod.z.union([
+		zod.z.string(),
+		zod.z.number(),
+		zod.z.boolean()
+	])).min(1).max(require_sleep.RECORD_BATCH_MAX) }),
+	zod.z.object({
+		gt: zod.z.union([zod.z.string(), zod.z.number()]).optional(),
+		gte: zod.z.union([zod.z.string(), zod.z.number()]).optional(),
+		lt: zod.z.union([zod.z.string(), zod.z.number()]).optional(),
+		lte: zod.z.union([zod.z.string(), zod.z.number()]).optional()
+	}).refine((r) => Object.keys(r).length > 0, { message: "name at least one bound" })
+]);
+/** Declared index fields only. Anything else does not compile, by design. */
+var RecordWhereSchema = zod.z.record(require_sleep.RecordFieldPathSchema, RecordWhereValueSchema);
+var KindShape = { kind: require_sleep.RecordKindNameSchema };
+var TimeWindowShape = {
+	deviceId: zod.z.number().int().optional(),
+	atFrom: zod.z.number().optional(),
+	atTo: zod.z.number().optional()
+};
+var RecordQueryInputSchema = zod.z.object({
+	...KindShape,
+	...TimeWindowShape,
+	where: RecordWhereSchema.optional(),
+	/** Without `where`: `at` (default for a kind with a clock) or `id`. With `where` the order is the index's. */
+	order: zod.z.enum(["at", "id"]).optional(),
+	desc: zod.z.boolean().optional(),
+	limit: zod.z.number().int().min(1).max(require_sleep.RECORD_QUERY_MAX).default(100),
+	/** Opaque keyset cursor from a previous answer. There is no offset. */
+	cursor: zod.z.string().min(1).optional()
+});
+var RecordQueryResultSchema = zod.z.object({
+	records: zod.z.array(RecordViewSchema),
+	nextCursor: zod.z.string().nullable()
+});
+var RecordKindStateSchema = zod.z.enum([
+	"created",
+	"unchanged",
+	"updated"
+]);
+var DeclareKindResultSchema = zod.z.object({
+	kindId: zod.z.number().int(),
+	state: RecordKindStateSchema,
+	createdIndexes: zod.z.array(zod.z.string()),
+	/** The boot guard: the kind is empty while its legacy table still holds rows. */
+	adoptionPending: zod.z.object({
+		legacyTable: zod.z.string(),
+		legacyRows: zod.z.number().int()
+	}).nullable()
+});
+/** Keychain refs a write released (the old marker is gone from the row): the owner deletes the values. */
+var SecretRefsList = zod.z.array(zod.z.string());
+var RecordSecretRefsSchema = zod.z.record(zod.z.string(), zod.z.record(zod.z.string(), zod.z.string()));
+var recordsCapability = {
+	name: "records",
+	scope: "system",
+	mode: "singleton",
+	internal: true,
+	methods: {
+		/** Reconcile this addon's kinds: create the catalog rows and the declared indexes. Additive only. */
+		declareKinds: require_sleep.method(zod.z.object({ kinds: zod.z.record(require_sleep.RecordKindNameSchema, require_sleep.RecordKindDeclarationSchema) }), zod.z.object({ kinds: zod.z.record(zod.z.string(), DeclareKindResultSchema) }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		get: require_sleep.method(zod.z.object({
+			...KindShape,
+			id: RecordIdSchema
+		}), RecordViewSchema.nullable(), { auth: "admin" }),
+		getMany: require_sleep.method(zod.z.object({
+			...KindShape,
+			ids: zod.z.array(RecordIdSchema).min(1).max(require_sleep.RECORD_BATCH_MAX)
+		}), zod.z.array(RecordViewSchema), { auth: "admin" }),
+		/** The keychain refs of the rows' secret fields, by id and concrete path. For the owner's `ctx.secrets`. */
+		secretRefs: require_sleep.method(zod.z.object({
+			...KindShape,
+			ids: zod.z.array(RecordIdSchema).min(1).max(require_sleep.RECORD_BATCH_MAX)
+		}), RecordSecretRefsSchema, { auth: "admin" }),
+		put: require_sleep.method(zod.z.object({
+			...KindShape,
+			record: RecordInputSchema,
+			/** Compare-and-set. `0` means "the row must not exist". */
+			ifRev: zod.z.number().int().min(0).optional()
+		}), zod.z.object({
+			rev: zod.z.number().int(),
+			releasedRefs: SecretRefsList
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		putMany: require_sleep.method(zod.z.object({
+			...KindShape,
+			records: zod.z.array(RecordInputSchema).min(1).max(require_sleep.RECORD_BATCH_MAX)
+		}), zod.z.object({
+			count: zod.z.number().int(),
+			releasedRefs: SecretRefsList
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/** One-statement RFC 7396 merge: `null` removes a field; a merge never reads. */
+		patch: require_sleep.method(zod.z.object({
+			...KindShape,
+			id: RecordIdSchema,
+			data: RecordBodySchema,
+			at: zod.z.number().int().nullable().optional(),
+			expiresAt: zod.z.number().int().nullable().optional(),
+			ifRev: zod.z.number().int().min(1).optional()
+		}), zod.z.object({
+			rev: zod.z.number().int(),
+			releasedRefs: SecretRefsList
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		delete: require_sleep.method(zod.z.object({
+			...KindShape,
+			id: RecordIdSchema
+		}), zod.z.object({
+			deleted: zod.z.boolean(),
+			secretRefs: SecretRefsList
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		deleteMany: require_sleep.method(zod.z.object({
+			...KindShape,
+			ids: zod.z.array(RecordIdSchema).min(1).max(require_sleep.RECORD_BATCH_MAX)
+		}), zod.z.object({
+			deleted: zod.z.number().int(),
+			secretRefs: SecretRefsList
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		query: require_sleep.method(RecordQueryInputSchema, RecordQueryResultSchema, { auth: "admin" }),
+		count: require_sleep.method(zod.z.object({
+			...KindShape,
+			...TimeWindowShape,
+			where: RecordWhereSchema.optional()
+		}), zod.z.object({ count: zod.z.number().int() }), { auth: "admin" }),
+		histogram: require_sleep.method(zod.z.object({
+			...KindShape,
+			deviceId: zod.z.number().int().optional(),
+			from: zod.z.number(),
+			to: zod.z.number(),
+			bucketMs: zod.z.number().int().positive()
+		}), zod.z.object({ buckets: zod.z.array(zod.z.object({
+			bucketStart: zod.z.number(),
+			count: zod.z.number().int()
+		})) }), { auth: "admin" }),
+		/** Index-served only: every field must belong to ONE declared index. */
+		aggregate: require_sleep.method(zod.z.object({
+			...KindShape,
+			op: zod.z.enum([
+				"sum",
+				"min",
+				"max",
+				"count"
+			]),
+			field: require_sleep.RecordFieldPathSchema.optional(),
+			groupBy: require_sleep.RecordFieldPathSchema.optional(),
+			where: RecordWhereSchema.optional()
+		}), zod.z.object({ rows: zod.z.array(zod.z.object({
+			group: zod.z.union([
+				zod.z.string(),
+				zod.z.number(),
+				zod.z.null()
+			]),
+			value: zod.z.number().nullable()
+		})) }), { auth: "admin" }),
+		/** Batched (5 000 rows per statement, yielding between). Needs a predicate: there is no "delete all". */
+		deleteWhere: require_sleep.method(zod.z.object({
+			...KindShape,
+			deviceId: zod.z.number().int().optional(),
+			atBefore: zod.z.number().optional(),
+			where: RecordWhereSchema.optional()
+		}), zod.z.object({
+			deleted: zod.z.number().int(),
+			secretRefs: SecretRefsList
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/** The D865 hook body: every kind of this addon declared `deviceRemoval: 'delete'`. */
+		deleteDevice: require_sleep.method(zod.z.object({
+			deviceId: zod.z.number().int(),
+			kinds: zod.z.array(require_sleep.RecordKindNameSchema).optional()
+		}), zod.z.object({
+			deleted: zod.z.record(zod.z.string(), zod.z.number().int()),
+			secretRefs: SecretRefsList
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/** A monotonically increasing integer per kind (replaces "resume from the highest"). */
+		allocateId: require_sleep.method(zod.z.object(KindShape), zod.z.object({ id: zod.z.number().int() }), {
+			kind: "mutation",
+			auth: "admin"
+		})
+	}
+};
+//#endregion
 //#region src/capabilities/storage-admin.cap.ts
 /** One table of the settings database. */
 var StorageTableSchema = zod.z.object({
@@ -13913,6 +14236,28 @@ var StorageTableSchema = zod.z.object({
 	/** Declared by an addon since this engine process started (a running addon claims it). */
 	declaredThisBoot: zod.z.boolean()
 });
+/** One declared record kind (D881) as System -> Data shows it. */
+var StorageKindSchema = zod.z.object({
+	owner: zod.z.string(),
+	kind: zod.z.string(),
+	database: zod.z.enum(["settings", "events"]),
+	class: zod.z.string(),
+	state: zod.z.enum([
+		"declared",
+		"orphaned",
+		"dropped"
+	]),
+	/** `null` when the caller asked for no counts (`counts: false`). */
+	rows: zod.z.number().int().nonnegative().nullable(),
+	/** Rows x the average size of a sample; null for an empty kind. */
+	bytesEstimate: zod.z.number().int().nonnegative().nullable(),
+	writeTrigger: zod.z.string(),
+	retention: require_sleep.RecordRetentionSchema,
+	/** `true` when the kind is an entry kind (the generic entries UI lists it). */
+	entry: zod.z.boolean(),
+	/** The whole declaration, secret paths and entry descriptor included (the entries service builds its handle from it). */
+	declaration: require_sleep.RecordKindDeclarationSchema
+});
 /**
 * The collections retired by exact name: the D870 ones (their data became keys
 * of the camera's settings) and the three D871 leftovers (the `stats-5m` tables
@@ -13931,7 +14276,16 @@ var STORAGE_ADMIN_MOVED_COLLECTIONS = [
 	"pipeline-orchestrator:device-features",
 	"pipeline-analytics:stats-5m",
 	"pipeline-orchestrator:stats-5m",
-	"vec_object_clip"
+	"vec_object_clip",
+	"addon-devices",
+	"sections",
+	"provider-settings",
+	"device-settings",
+	"ai:budgets",
+	"pipeline-analytics:retrain-dataset-versions",
+	"training:dataset-versions",
+	"benchmark:replay-runs",
+	"viewer-settings-snapshots"
 ];
 /** The per-addon blob tables a scoped name may carry. */
 var STORAGE_ADMIN_SCOPED_BASES = [
@@ -13981,6 +14335,105 @@ var storageAdminCapability = {
 		}), {
 			kind: "mutation",
 			auth: "admin"
+		}),
+		/** Every record kind of both files with rows, a size estimate, class and retention (D881). */
+		listKinds: require_sleep.method(zod.z.object({
+			owner: zod.z.string().min(1).optional(),
+			/** `false` skips the per-kind row count (a catalog read only). Default true. */
+			counts: zod.z.boolean().optional()
+		}), zod.z.object({ kinds: zod.z.array(StorageKindSchema) }), { auth: "admin" }),
+		/**
+		* Read-only diagnosis of ANY owner's kind: the same indexed query as the
+		* owner's, secret fields redacted, audited in the engine log.
+		*/
+		readRecords: require_sleep.method(RecordQueryInputSchema.extend({
+			owner: zod.z.string().min(1),
+			kind: require_sleep.RecordKindNameSchema
+		}), RecordQueryResultSchema, { auth: "admin" }),
+		/**
+		* The migration copy path (D881): write rows into a kind AS ITS DECLARED
+		* OWNER. Refused when that owner's manifest does not declare the kind.
+		* Idempotent (a put by id, so a re-run resumes). A secret field carries a
+		* keychain marker bound to the row's own ref - the operator script imports
+		* the value first - and a plain string there is refused.
+		*/
+		adoptRecords: require_sleep.method(zod.z.object({
+			owner: zod.z.string().min(1),
+			kind: require_sleep.RecordKindNameSchema,
+			records: zod.z.array(RecordInputSchema).min(1).max(require_sleep.RECORD_BATCH_MAX),
+			/** The LAST batch: the copy is complete, the boot guard stops asking. */
+			complete: zod.z.boolean().optional()
+		}), zod.z.object({ adopted: zod.z.number().int() }), {
+			kind: "mutation",
+			auth: "admin"
+		})
+	}
+};
+//#endregion
+//#region src/capabilities/record-entries.cap.ts
+/**
+* record-entries - the ONE admin surface for every list of user-created entries
+* (D881): notification targets, brokers, LLM profiles, anything an addon
+* declares as an ENTRY kind (`entry: { title }` in `defineRecordKinds`).
+*
+* The UI is generic. `listEntryKinds` hands it, per kind, the JSON Schema of
+* the entry body with `secret: true` on every credential field, so a password
+* field is derived from the schema and never from a name. `putEntry` takes the
+* redaction token for an untouched secret (the stored value is kept), a string
+* for a new one, and the clear instruction to remove one. A read never carries
+* a secret value, and a locked keychain refuses the write with
+* `records/secret-unavailable` instead of storing plaintext.
+*
+* Hub-only, served in-process (it acts for each entry's owner on the keychain).
+*/
+var EntryKindInfoSchema = zod.z.object({
+	owner: zod.z.string(),
+	kind: require_sleep.RecordKindNameSchema,
+	title: zod.z.string(),
+	nameField: zod.z.string(),
+	/** JSON Schema of the body; `secret: true` marks a password field. */
+	fields: zod.z.record(zod.z.string(), zod.z.unknown()),
+	secretPaths: zod.z.array(zod.z.string()),
+	rows: zod.z.number().int().nonnegative()
+});
+var EntryViewSchema = zod.z.object({
+	id: RecordIdSchema,
+	name: zod.z.string(),
+	rev: zod.z.number().int(),
+	updatedAt: zod.z.number(),
+	/** Secret fields hold the redaction token. */
+	data: RecordBodySchema
+});
+var EntryAddress = {
+	owner: zod.z.string().min(1),
+	kind: require_sleep.RecordKindNameSchema
+};
+var recordEntriesCapability = {
+	name: "record-entries",
+	scope: "system",
+	mode: "singleton",
+	methods: {
+		listEntryKinds: require_sleep.method(zod.z.object({}), zod.z.object({ kinds: zod.z.array(EntryKindInfoSchema) }), { auth: "admin" }),
+		listEntries: require_sleep.method(zod.z.object({ ...EntryAddress }), zod.z.object({ entries: zod.z.array(EntryViewSchema) }), { auth: "admin" }),
+		/** Create (no `id`: one is generated) or edit. `ifRev` guards an edit against a concurrent one. */
+		putEntry: require_sleep.method(zod.z.object({
+			...EntryAddress,
+			id: RecordIdSchema.optional(),
+			data: RecordBodySchema,
+			ifRev: zod.z.number().int().min(1).optional()
+		}), zod.z.object({
+			id: zod.z.string(),
+			rev: zod.z.number().int()
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		deleteEntry: require_sleep.method(zod.z.object({
+			...EntryAddress,
+			id: RecordIdSchema
+		}), zod.z.object({ deleted: zod.z.boolean() }), {
+			kind: "mutation",
+			auth: "admin"
 		})
 	}
 };
@@ -39304,38 +39757,6 @@ var llmRuntimeCapability = {
 	}
 };
 //#endregion
-//#region src/capabilities/raw-secret-migration.ts
-/**
-* The report of a one-shot "move this owner's plaintext secrets into the
-* keychain" run (D878). COUNTS only - never a value, never a ref.
-*
-* The owner runs it on its own rows, through its own write path; an operator
-* script (`scripts/hub/migrate-raw-secrets.ts`) calls the owner's cap method.
-* Dry run (`apply: false`) reports what WOULD move and changes nothing.
-*/
-var RawSecretMigrationInputSchema = zod.z.object({ 
-/** `false` (the default of the script) = report only. */
-apply: zod.z.boolean() });
-var RawSecretMigrationReportSchema = zod.z.object({
-	apply: zod.z.boolean(),
-	/** Rows that can carry a secret (a profile, an enrolment). */
-	rows: zod.z.number().int(),
-	/** Rows whose secret was plaintext when the run started. */
-	raw: zod.z.number().int(),
-	/** Rows that already held a keychain marker when the run started. */
-	markers: zod.z.number().int(),
-	/** Plaintext rows moved by THIS run (always 0 on a dry run). */
-	migrated: zod.z.number().int(),
-	/** Plaintext rows left in place because the move or its read-back failed. */
-	failed: zod.z.number().int(),
-	/** After the run: rows still holding plaintext. */
-	remainingRaw: zod.z.number().int(),
-	/** After the run: markers the keychain could not resolve right now. */
-	unresolvedMarkers: zod.z.number().int(),
-	/** True when nothing is raw and every marker resolves. */
-	verified: zod.z.boolean()
-});
-//#endregion
 //#region src/capabilities/llm.cap.ts
 /**
 * `llm` — consumer-facing LLM surface (spec §1-§3). Collection-mode: array
@@ -77938,6 +78359,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"coreBlocks.migrateRawSecrets": {
+		capName: "core-blocks",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"coreBlocks.restart": {
 		capName: "core-blocks",
 		capScope: "system",
@@ -82690,6 +83117,30 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recordEntries.deleteEntry": {
+		capName: "record-entries",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"recordEntries.listEntries": {
+		capName: "record-entries",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordEntries.listEntryKinds": {
+		capName: "record-entries",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordEntries.putEntry": {
+		capName: "record-entries",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"recording.getAvailability": {
 		capName: "recording",
 		capScope: "device",
@@ -82990,6 +83441,102 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"records.aggregate": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"records.allocateId": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"records.count": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"records.declareKinds": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"records.delete": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"records.deleteDevice": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"records.deleteMany": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"records.deleteWhere": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"records.get": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"records.getMany": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"records.histogram": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"records.patch": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"records.put": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"records.putMany": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"records.query": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"records.secretRefs": {
+		capName: "records",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"sceneMonitor.captureReference": {
 		capName: "scene-monitor",
 		capScope: "device",
@@ -83422,18 +83969,36 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"storageAdmin.adoptRecords": {
+		capName: "storage-admin",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"storageAdmin.dropCollection": {
 		capName: "storage-admin",
 		capScope: "system",
 		addonId: null,
 		access: "delete"
 	},
+	"storageAdmin.listKinds": {
+		capName: "storage-admin",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"storageAdmin.listTables": {
 		capName: "storage-admin",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
+	"storageAdmin.readRecords": {
+		capName: "storage-admin",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"storageEvictable.evict": {
 		capName: "storage-evictable",
 		capScope: "system",
@@ -84981,11 +85546,13 @@ var KNOWN_CAP_NAMES = [
 	"ptz",
 	"ptz-autotrack",
 	"reboot",
+	"record-entries",
 	"recording",
 	"recording-archive",
 	"recording-export",
 	"recording-onboard",
 	"recording-signal",
+	"records",
 	"scene-monitor",
 	"script-runner",
 	"server-management",
@@ -85186,8 +85753,10 @@ var SYSTEM_CAP_NAMES = [
 	"pipeline-runner",
 	"plate-gallery",
 	"platform-probe",
+	"record-entries",
 	"recording-archive",
 	"recording-export",
+	"records",
 	"server-management",
 	"settings-store",
 	"smtp-provider",
@@ -87255,11 +87824,13 @@ var CAPABILITY_NAMES = {
 	ptz: "ptz",
 	ptzAutotrack: "ptz-autotrack",
 	reboot: "reboot",
+	recordEntries: "record-entries",
 	recording: "recording",
 	recordingArchive: "recording-archive",
 	recordingExport: "recording-export",
 	recordingOnboard: "recording-onboard",
 	recordingSignal: "recording-signal",
+	records: "records",
 	sceneMonitor: "scene-monitor",
 	scriptRunner: "script-runner",
 	serverManagement: "server-management",
@@ -87817,6 +88388,10 @@ var CAPABILITY_ROUTER_KEYS = [
 		key: "reboot",
 		name: "reboot"
 	},
+	{
+		key: "recordEntries",
+		name: "record-entries"
+	},
 	{
 		key: "recording",
 		name: "recording"
@@ -87837,6 +88412,10 @@ var CAPABILITY_ROUTER_KEYS = [
 		key: "recordingSignal",
 		name: "recording-signal"
 	},
+	{
+		key: "records",
+		name: "records"
+	},
 	{
 		key: "sceneMonitor",
 		name: "scene-monitor"
@@ -88144,11 +88723,13 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	ptzCapability,
 	ptzAutotrackCapability,
 	rebootCapability,
+	recordEntriesCapability,
 	recordingCapability,
 	recordingArchiveCapability,
 	recordingExportCapability,
 	recordingOnboardCapability,
 	recordingSignalCapability,
+	recordsCapability,
 	sceneMonitorCapability,
 	scriptRunnerCapability,
 	serverManagementCapability,
@@ -90369,6 +90950,37 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"records.count": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
+	"records.deleteDevice": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"records.deleteWhere": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
+	"records.histogram": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
+	"records.putMany": [{
+		name: "records",
+		form: "object-array",
+		optional: false,
+		itemField: "deviceId"
+	}],
+	"records.query": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
 	"sceneMonitor.captureReference": [{
 		name: "deviceId",
 		form: "single",
@@ -90485,6 +91097,17 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"storageAdmin.adoptRecords": [{
+		name: "records",
+		form: "object-array",
+		optional: false,
+		itemField: "deviceId"
+	}],
+	"storageAdmin.readRecords": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
 	"streamBroker.acquireEgressTranscode": [{
 		name: "deviceId",
 		form: "single",
@@ -91013,6 +91636,14 @@ var SYSTEM_SCOPE_DEVICE_METHODS = [
 	"recordingArchive.startStorageMigrationMove",
 	"recordingExport.createExport",
 	"recordingExport.listExports",
+	"records.count",
+	"records.deleteDevice",
+	"records.deleteWhere",
+	"records.histogram",
+	"records.putMany",
+	"records.query",
+	"storageAdmin.adoptRecords",
+	"storageAdmin.readRecords",
 	"streamBroker.acquireEgressTranscode",
 	"streamBroker.applyDeviceSettingsPatch",
 	"streamBroker.assignProfile",
@@ -92061,6 +92692,7 @@ function createSystemProxy(api) {
 			compile: (input) => dispatch("coreBlocks", "compile", "mutation", input),
 			getBlockSettings: (input) => dispatch("coreBlocks", "getBlockSettings", "query", input),
 			updateBlockSettings: (input) => dispatch("coreBlocks", "updateBlockSettings", "mutation", input),
+			migrateRawSecrets: (input) => dispatch("coreBlocks", "migrateRawSecrets", "mutation", input),
 			getTypeDefs: (input) => dispatch("coreBlocks", "getTypeDefs", "query", input),
 			createComposition: (input) => dispatch("coreBlocks", "createComposition", "mutation", input),
 			updateComposition: (input) => dispatch("coreBlocks", "updateComposition", "mutation", input),
@@ -92496,6 +93128,12 @@ function createSystemProxy(api) {
 			assignPlates: (input) => dispatch("plateGallery", "assignPlates", "mutation", input),
 			unassignPlates: (input) => dispatch("plateGallery", "unassignPlates", "mutation", input)
 		},
+		recordEntries: {
+			listEntryKinds: (input) => dispatch("recordEntries", "listEntryKinds", "query", input),
+			listEntries: (input) => dispatch("recordEntries", "listEntries", "query", input),
+			putEntry: (input) => dispatch("recordEntries", "putEntry", "mutation", input),
+			deleteEntry: (input) => dispatch("recordEntries", "deleteEntry", "mutation", input)
+		},
 		recordingArchive: {
 			getAvailabilityBatch: (input) => dispatch("recordingArchive", "getAvailabilityBatch", "query", input),
 			getDaysWithRecordingsBatch: (input) => dispatch("recordingArchive", "getDaysWithRecordingsBatch", "query", input),
@@ -101405,6 +102043,7 @@ exports.AdoptionJobStateSchema = AdoptionJobStateSchema;
 exports.AdoptionListCandidatesInputSchema = ListCandidatesInputSchema;
 exports.AdoptionListCandidatesOutputSchema = ListCandidatesOutputSchema;
 exports.AdoptionOutcomeSchema = AdoptionOutcomeSchema;
+exports.AdoptionPendingError = require_sleep.AdoptionPendingError;
 exports.AdoptionReleaseInputSchema = ReleaseInputSchema;
 exports.AdoptionStatusSchema = AdoptionStatusSchema;
 exports.AgentLoadSummarySchema = AgentLoadSummarySchema;
@@ -101491,6 +102130,7 @@ exports.BackupTriggerResultSchema = BackupTriggerResultSchema;
 exports.BaseAddon = require_sleep.BaseAddon;
 exports.BaseDevice = BaseDevice;
 exports.BaseDeviceProvider = BaseDeviceProvider;
+exports.BatchTooLargeError = require_sleep.BatchTooLargeError;
 exports.BatteryStatusSchema = BatteryStatusSchema;
 exports.BinaryStatusSchema = BinaryStatusSchema;
 exports.BirthDecisionQueryInputSchema = BirthDecisionQueryInputSchema;
@@ -101520,6 +102160,7 @@ exports.BrokerTestConnectionResultSchema = TestConnectionResultSchema;
 exports.BrokerUnsubscribeInputSchema = UnsubscribeInputSchema;
 exports.BucketAccumulator = BucketAccumulator;
 exports.BulkRecordSchema = BulkRecordSchema;
+exports.CALLER_STAMPED_CAPABILITIES = CALLER_STAMPED_CAPABILITIES;
 exports.CAMERA_SENSORS_NOT_LOADED = CAMERA_SENSORS_NOT_LOADED;
 exports.CAMERA_SENSORS_SETTINGS_KEY = CAMERA_SENSORS_SETTINGS_KEY;
 exports.CAMERA_SWITCH_CATALOG = CAMERA_SWITCH_CATALOG;
@@ -101830,7 +102471,9 @@ exports.DayNightModeSchema = DayNightModeSchema;
 exports.DayNightOptionsSchema = DayNightOptionsSchema;
 exports.DayNightSettingsPatchSchema = DayNightSettingsPatchSchema;
 exports.DayNightStatusSchema = DayNightStatusSchema;
+exports.DeclarationRefusedError = require_sleep.DeclarationRefusedError;
 exports.DeclareCollectionInputSchema = DeclareCollectionInputSchema;
+exports.DeclareKindResultSchema = DeclareKindResultSchema;
 exports.DeclaredDevices = DeclaredDevices;
 exports.DecodedAudioChunkSchema = require_sleep.DecodedAudioChunkSchema;
 exports.DeleteIntegrationResultSchema = DeleteIntegrationResultSchema;
@@ -101930,6 +102573,9 @@ exports.EmbeddingTowerSchema = EmbeddingTowerSchema;
 exports.EncodeProfileSchema = EncodeProfileSchema;
 exports.EnrichedWidgetMetadataSchema = EnrichedWidgetMetadataSchema;
 exports.EnrollSelfInputSchema = EnrollSelfInputSchema;
+exports.EntryDescriptorSchema = require_sleep.EntryDescriptorSchema;
+exports.EntryKindInfoSchema = EntryKindInfoSchema;
+exports.EntryViewSchema = EntryViewSchema;
 exports.EnumSensorDateTimeFormatSchema = EnumSensorDateTimeFormatSchema;
 exports.EnumSensorStatusSchema = EnumSensorStatusSchema;
 exports.ErrorCodeSchema = require_sleep.ErrorCodeSchema;
@@ -102012,8 +102658,10 @@ exports.FeatureManifestSchema = FeatureManifestSchema;
 exports.FeatureProbeStatusSchema = FeatureProbeStatusSchema;
 exports.FieldClaimModeSchema = FieldClaimModeSchema;
 exports.FieldClaimSchema = FieldClaimSchema;
+exports.FilterRequiredError = require_sleep.FilterRequiredError;
 exports.FloodStatusSchema = FloodStatusSchema;
 exports.Fmp4BoxSplitter = require_composition.Fmp4BoxSplitter;
+exports.ForeignSecretMarkerError = require_sleep.ForeignSecretMarkerError;
 exports.FrameHandleSchema = require_sleep.FrameHandleSchema;
 exports.FrameInputSchema = FrameInputSchema;
 exports.FrameLazyCountersSchema = FrameLazyCountersSchema;
@@ -102078,6 +102726,7 @@ exports.IntegrationLiteSchema = IntegrationLiteSchema;
 exports.IntegrationWithStateSchema = IntegrationWithStateSchema;
 exports.IntercomAbilitySchema = IntercomAbilitySchema;
 exports.IntercomStatusSchema = IntercomStatusSchema;
+exports.InvalidRecordError = require_sleep.InvalidRecordError;
 exports.KEYCHAIN_MAX_REFS_PER_CALL = KEYCHAIN_MAX_REFS_PER_CALL;
 exports.KEYCHAIN_RESET_CONFIRMATION = KEYCHAIN_RESET_CONFIRMATION;
 exports.KEYCHAIN_RESET_TRIGGER_ACTOR = KEYCHAIN_RESET_TRIGGER_ACTOR;
@@ -102506,6 +103155,7 @@ exports.NetworkAddressSchema = NetworkAddressSchema;
 exports.NetworkEndpointSchema = NetworkEndpointSchema;
 exports.NetworkLinkStatusSchema = NetworkLinkStatusSchema;
 exports.NetworkTunnelStartedDataSchema = NetworkTunnelStartedDataSchema;
+exports.NoCallerError = require_sleep.NoCallerError;
 exports.NodeBenchCellSchema = NodeBenchCellSchema;
 exports.NodeBenchClipSchema = NodeBenchClipSchema;
 exports.NodeBenchDeviceCellSchema = NodeBenchDeviceCellSchema;
@@ -102634,6 +103284,7 @@ exports.PlacementDeviceStatsSchema = PlacementDeviceStatsSchema;
 exports.PlacementNodeStatsSchema = PlacementNodeStatsSchema;
 exports.PlacementStatsInputSchema = PlacementStatsInputSchema;
 exports.PlacementStatsSchema = PlacementStatsSchema;
+exports.PlaintextSecretError = require_sleep.PlaintextSecretError;
 exports.PolygonPointSchema = PolygonPointSchema;
 exports.PoolMemoryWatchdog = PoolMemoryWatchdog;
 exports.PowerMeterStatusSchema = PowerMeterStatusSchema;
@@ -102677,9 +103328,25 @@ exports.RECORDING_EXPORT_MAX_READ_BYTES = RECORDING_EXPORT_MAX_READ_BYTES;
 exports.RECORDING_SOURCE_CAMSTACK = RECORDING_SOURCE_CAMSTACK;
 exports.RECORDING_SOURCE_CAMSTACK_ADDON = RECORDING_SOURCE_CAMSTACK_ADDON;
 exports.RECORDING_TIMELINE_BATCH_MAX = RECORDING_TIMELINE_BATCH_MAX;
+exports.RECORDS_ERROR_CODES = require_sleep.RECORDS_ERROR_CODES;
+exports.RECORD_BATCH_MAX = require_sleep.RECORD_BATCH_MAX;
+exports.RECORD_BATCH_MAX_BYTES = require_sleep.RECORD_BATCH_MAX_BYTES;
+exports.RECORD_CLASSES = require_sleep.RECORD_CLASSES;
+exports.RECORD_DATABASES = require_sleep.RECORD_DATABASES;
+exports.RECORD_DEFAULT_MAX_DATA_BYTES = require_sleep.RECORD_DEFAULT_MAX_DATA_BYTES;
+exports.RECORD_DELETE_BATCH = require_sleep.RECORD_DELETE_BATCH;
+exports.RECORD_ID_MAX_LENGTH = require_sleep.RECORD_ID_MAX_LENGTH;
+exports.RECORD_MAX_DATA_BYTES = require_sleep.RECORD_MAX_DATA_BYTES;
+exports.RECORD_MAX_INDEXES = require_sleep.RECORD_MAX_INDEXES;
+exports.RECORD_MAX_INDEX_FIELDS = require_sleep.RECORD_MAX_INDEX_FIELDS;
+exports.RECORD_QUERY_MAX = require_sleep.RECORD_QUERY_MAX;
+exports.RECORD_SECRET_COLLECTION_PREFIX = require_sleep.RECORD_SECRET_COLLECTION_PREFIX;
+exports.RECORD_SETTINGS_MAX_ROWS = require_sleep.RECORD_SETTINGS_MAX_ROWS;
+exports.RECORD_SWEEP_INTERVAL_MS = require_sleep.RECORD_SWEEP_INTERVAL_MS;
 exports.REDACTED_SECRET = require_sleep.REDACTED_SECRET;
 exports.REMOVAL_RECONCILE_INTERVAL_MS = REMOVAL_RECONCILE_INTERVAL_MS;
 exports.REMOVED_MODEL_IDS = REMOVED_MODEL_IDS;
+exports.REMOVE_LEAF = require_sleep.REMOVE_LEAF;
 exports.RESERVED_BINDING_NAMES = require_composition.RESERVED_BINDING_NAMES;
 exports.RESERVED_COLLECTION_SOURCES = RESERVED_COLLECTION_SOURCES;
 exports.RESTORED_CAP_NAMES = RESTORED_CAP_NAMES;
@@ -102712,7 +103379,24 @@ exports.RebuildObjectEmbeddingsRefusalSchema = RebuildObjectEmbeddingsRefusalSch
 exports.RecentTracksPageSchema = RecentTracksPageSchema;
 exports.RecentTracksQueryInput = RecentTracksQueryInput;
 exports.RecommendationReasonSchema = RecommendationReasonSchema;
+exports.RecordBodySchema = RecordBodySchema;
+exports.RecordFieldPathSchema = require_sleep.RecordFieldPathSchema;
+exports.RecordIdSchema = RecordIdSchema;
+exports.RecordIndexSchema = require_sleep.RecordIndexSchema;
+exports.RecordInputSchema = RecordInputSchema;
+exports.RecordKindDeclarationSchema = require_sleep.RecordKindDeclarationSchema;
+exports.RecordKindNameSchema = require_sleep.RecordKindNameSchema;
+exports.RecordNotFoundError = require_sleep.RecordNotFoundError;
+exports.RecordQueryInputSchema = RecordQueryInputSchema;
+exports.RecordQueryResultSchema = RecordQueryResultSchema;
+exports.RecordRetentionSchema = require_sleep.RecordRetentionSchema;
+exports.RecordSecretRefsSchema = RecordSecretRefsSchema;
+exports.RecordSecretUnavailableError = require_sleep.RecordSecretUnavailableError;
+exports.RecordTooLargeError = require_sleep.RecordTooLargeError;
 exports.RecordTriggerSchema = RecordTriggerSchema;
+exports.RecordUniqueViolationError = require_sleep.RecordUniqueViolationError;
+exports.RecordViewSchema = RecordViewSchema;
+exports.RecordWhereSchema = RecordWhereSchema;
 exports.RecordWindowSchema = RecordWindowSchema;
 exports.RecordingAvailabilityForDeviceSchema = RecordingAvailabilityForDeviceSchema;
 exports.RecordingAvailabilitySchema = RecordingAvailabilitySchema;
@@ -102749,6 +103433,7 @@ exports.RecordingStorageModeSchema = RecordingStorageModeSchema;
 exports.RecordingStorageUsageSchema = RecordingStorageUsageSchema;
 exports.RecordingTriggersSchema = RecordingTriggersSchema;
 exports.RecordingWeekdaySchema = RecordingWeekdaySchema;
+exports.RecordsError = require_sleep.RecordsError;
 exports.RedirectLoginMethodSchema = RedirectLoginMethodSchema;
 exports.RelocatableMediaCountInputSchema = RelocatableMediaCountInputSchema;
 exports.RelocatableMediaCountSchema = RelocatableMediaCountSchema;
@@ -102813,6 +103498,7 @@ exports.RetrainTrackSchema = RetrainTrackSchema;
 exports.RetrainTrainingCorpusResolveResultSchema = RetrainTrainingCorpusResolveResultSchema;
 exports.RetrainTrainingCorpusSelectionSchema = RetrainTrainingCorpusSelectionSchema;
 exports.RetrainTransitionResultSchema = RetrainTransitionResultSchema;
+exports.RevConflictError = require_sleep.RevConflictError;
 exports.RevokeOwnDeviceCertificateResultSchema = RevokeOwnDeviceCertificateResultSchema;
 exports.RingBuffer = RingBuffer;
 exports.RootStepSupplySchema = RootStepSupplySchema;
@@ -102941,6 +103627,7 @@ exports.StorageDrainProgressSchema = StorageDrainProgressSchema;
 exports.StorageEndDownloadInputSchema = EndDownloadInputSchema;
 exports.StorageEvictionPolicySchema = StorageEvictionPolicySchema;
 exports.StorageFinalizeUploadInputSchema = FinalizeUploadInputSchema;
+exports.StorageKindSchema = StorageKindSchema;
 exports.StorageLocationDeclarationSchema = StorageLocationDeclarationSchema;
 exports.StorageLocationModeSchema = StorageLocationModeSchema;
 exports.StorageLocationRefSchema = StorageLocationRefSchema;
@@ -103086,10 +103773,12 @@ exports.UNIT_TABLE = UNIT_TABLE;
 exports.USE_ROOT_MODEL_DEFAULTS = USE_ROOT_MODEL_DEFAULTS;
 exports.USE_ROOT_MODEL_SETTING_KEY = USE_ROOT_MODEL_SETTING_KEY;
 exports.UnifiedBrokerInfoSchema = BrokerInfoSchema;
+exports.UnindexedFilterError = require_sleep.UnindexedFilterError;
 exports.UninstallNodeOutcomeSchema = UninstallNodeOutcomeSchema;
 exports.UninstallNodeResultSchema = UninstallNodeResultSchema;
 exports.UninstallPackageResultSchema = UninstallPackageResultSchema;
 exports.UnitConversionError = UnitConversionError;
+exports.UnknownRecordKindError = require_sleep.UnknownRecordKindError;
 exports.UnstampedEventMediaCountSchema = UnstampedEventMediaCountSchema;
 exports.UnstampedRowsSchema = UnstampedRowsSchema;
 exports.UpdateBlockerSchema = UpdateBlockerSchema;
@@ -103201,8 +103890,10 @@ exports.asBoolean = require_sleep.asBoolean;
 exports.asJsonArray = require_sleep.asJsonArray;
 exports.asJsonObject = require_sleep.asJsonObject;
 exports.asNumber = require_sleep.asNumber;
+exports.asRecordsError = require_sleep.asRecordsError;
 exports.asString = require_sleep.asString;
 exports.assertTimelapseCadences = assertTimelapseCadences;
+exports.assertValidDeclaration = require_sleep.assertValidDeclaration;
 exports.assignNodeColorId = require_node_color.assignNodeColorId;
 exports.audioAnalysisCapability = audioAnalysisCapability;
 exports.audioAnalyzerCapability = audioAnalyzerCapability;
@@ -103294,6 +103985,7 @@ exports.collectHydratedFieldValues = require_sleep.collectHydratedFieldValues;
 exports.collectKeychainStoredKeys = require_sleep.collectKeychainStoredKeys;
 exports.collectModelBoundKeys = collectModelBoundKeys;
 exports.collectSecretConfigKeys = require_sleep.collectSecretConfigKeys;
+exports.collectSecretLeaves = require_sleep.collectSecretLeaves;
 exports.collectSecretMarkerRefs = require_sleep.collectSecretMarkerRefs;
 exports.collectZodSecretPaths = require_sleep.collectZodSecretPaths;
 exports.colorCapability = colorCapability;
@@ -103346,6 +104038,7 @@ exports.createHwAccelCache = createHwAccelCache;
 exports.createLazyTrpcSource = require_sleep.createLazyTrpcSource;
 exports.createLogChannelsProvider = createLogChannelsProvider;
 exports.createMirrorSource = require_sleep.createMirrorSource;
+exports.createRecordsAccess = require_sleep.createRecordsAccess;
 exports.createRuntimeStateBridge = createRuntimeStateBridge;
 exports.createSecretsAccess = require_sleep.createSecretsAccess;
 exports.createSliceHandle = require_sleep.createSliceHandle;
@@ -103358,13 +104051,16 @@ exports.databaseSnapshotCapability = databaseSnapshotCapability;
 exports.dayNightCapability = dayNightCapability;
 exports.dayOfWeekToIndex = dayOfWeekToIndex;
 exports.declarationOwnerNodeId = declarationOwnerNodeId;
+exports.declarationsOf = require_sleep.declarationsOf;
 exports.declareLogChannel = declareLogChannel;
 exports.decodeVectorBase64 = decodeVectorBase64;
 exports.decoderCapability = decoderCapability;
 exports.defaultDeliveryForSection = defaultDeliveryForSection;
 exports.defaultDeviceFor = defaultDeviceFor;
 exports.defineCustomActions = require_sleep.defineCustomActions;
+exports.defineEntryKind = require_sleep.defineEntryKind;
 exports.defineExtensionSlotProvider = defineExtensionSlotProvider;
+exports.defineRecordKinds = require_sleep.defineRecordKinds;
 exports.deleteAlarmProfile = deleteAlarmProfile;
 exports.deriveBatteryPresence = deriveBatteryPresence;
 exports.deriveCameraSwitches = deriveCameraSwitches;
@@ -103429,6 +104125,7 @@ exports.emitsCollectionSelector = emitsCollectionSelector;
 exports.encodeProfileFromStreamShape = encodeProfileFromStreamShape;
 exports.encodeVectorBase64 = encodeVectorBase64;
 exports.ensureAlarmProfiles = ensureAlarmProfiles;
+exports.entryBody = require_sleep.entryBody;
 exports.enumSensorCapability = enumSensorCapability;
 exports.enumerateInferenceDevices = enumerateInferenceDevices;
 exports.enumerateItemArrayFields = enumerateItemArrayFields;
@@ -103578,6 +104275,7 @@ exports.isSecretFieldView = require_sleep.isSecretFieldView;
 exports.isSecretMarker = require_sleep.isSecretMarker;
 exports.isSecretMarkerLike = require_sleep.isSecretMarkerLike;
 exports.isSecretRef = require_sleep.isSecretRef;
+exports.isSecretRefOwnedBy = require_sleep.isSecretRefOwnedBy;
 exports.isSingleHubAddressRole = isSingleHubAddressRole;
 exports.isSoftwareDecode = require_composition.isSoftwareDecode;
 exports.isSourceCap = require_composition.isSourceCap;
@@ -103628,6 +104326,7 @@ exports.makeProfileBrokerId = require_sleep.makeProfileBrokerId;
 exports.makeSecretMarker = require_sleep.makeSecretMarker;
 exports.makeSourceBrokerId = require_sleep.makeSourceBrokerId;
 exports.mapAudioLabelToMacro = mapAudioLabelToMacro;
+exports.mapSecretLeaves = require_sleep.mapSecretLeaves;
 exports.markdownToHtmlLite = markdownToHtmlLite;
 exports.markdownToText = markdownToText;
 exports.maskUrlCredentials = require_sleep.maskUrlCredentials;
@@ -103709,6 +104408,7 @@ exports.parseProcStatus = parseProcStatus;
 exports.parseProfileBrokerId = require_sleep.parseProfileBrokerId;
 exports.parseRetrainRevisionConflict = parseRetrainRevisionConflict;
 exports.parseRuleSection = parseRuleSection;
+exports.parseSecretPath = require_sleep.parseSecretPath;
 exports.parseSecretRef = require_sleep.parseSecretRef;
 exports.parseSecretStatePath = require_sleep.parseSecretStatePath;
 exports.parseSessionPlacementPolicy = parseSessionPlacementPolicy;
@@ -103773,11 +104473,17 @@ exports.rebootCapability = rebootCapability;
 exports.recommendNode = recommendNode;
 exports.reconcileBlockDevices = reconcileBlockDevices;
 exports.reconcileRemovedDevices = reconcileRemovedDevices;
+exports.recordArrayItemPath = require_sleep.recordArrayItemPath;
+exports.recordEntriesCapability = recordEntriesCapability;
+exports.recordSecretCollection = require_sleep.recordSecretCollection;
+exports.recordSecretRef = require_sleep.recordSecretRef;
 exports.recordingArchiveCapability = recordingArchiveCapability;
 exports.recordingCapability = recordingCapability;
 exports.recordingExportCapability = recordingExportCapability;
 exports.recordingOnboardCapability = recordingOnboardCapability;
 exports.recordingSignalCapability = recordingSignalCapability;
+exports.recordsCapability = recordsCapability;
+exports.recordsErrorFromMessage = require_sleep.recordsErrorFromMessage;
 exports.rectsToCells = rectsToCells;
 exports.reducePoints = reducePoints;
 exports.registerKnownSecret = require_sleep.registerKnownSecret;
@@ -103864,6 +104570,7 @@ exports.scoreRuntimes = scoreRuntimes;
 exports.scriptRunnerCapability = scriptRunnerCapability;
 exports.scrubKnownSecrets = require_sleep.scrubKnownSecrets;
 exports.searchIcons = searchIcons;
+exports.secretArrayPrefixes = require_sleep.secretArrayPrefixes;
 exports.secretTreeFromPaths = require_sleep.secretTreeFromPaths;
 exports.secretTreeFromSchema = require_sleep.secretTreeFromSchema;
 exports.secureActuationFor = secureActuationFor;
@@ -104000,6 +104707,7 @@ exports.wiringProbeKindSchema = wiringProbeKindSchema;
 exports.wiringProbeResultSchema = wiringProbeResultSchema;
 exports.withFieldFrom = withFieldFrom;
 exports.withLocationMode = withLocationMode;
+exports.withoutCallerStamp = withoutCallerStamp;
 exports.withoutField = withoutField;
 exports.writeModelBoundSetting = writeModelBoundSetting;
 exports.zodEntriesToConfigUI = zodEntriesToConfigUI;