@camstack/types 1.2.379 → 1.2.380

package/dist/capabilities/records.cap.d.ts

@@ -0,0 +1,399 @@
+import { z } from 'zod';
+import { type InferProvider } from './capability-definition.js';
+/**
+ * records - an addon's own facts and documents (D881): ledgers, audit rows,
+ * config documents, mirrors. The third storage API next to `ctx.settings`
+ * (operator intent, D870) and device-history (numbers over time, D850).
+ *
+ * Who the OWNER is: `callerAddonId`, stamped by the transport on a call that
+ * crossed a process and stated by a hub in-process caller (`ctx.records` does
+ * that with the addon id closed over). It is deliberately NOT in any input
+ * schema, so a session can never supply it, and a call with no stamp is refused
+ * `records/no-caller`. A kind is readable and writable only by its owner; other
+ * addons go through the owner's capability.
+ *
+ * Every read is three-way: a row, `null`, or the call THROWS. A failed read is
+ * never `[]`. Secret fields are never on the wire: a read shows the
+ * redaction token, `secretRefs` hands the owner's `ctx.secrets` the refs it
+ * resolves itself, and a write may carry only a keychain marker bound to the
+ * row's own ref.
+ *
+ * Internal: addons reach it through `ctx.records`, never directly.
+ */
+export declare const RecordIdSchema: z.ZodString;
+/** A JSON object body. Size is the engine's check (`maxDataBytes`), not a schema's. */
+export declare const RecordBodySchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+export declare const RecordInputSchema: z.ZodObject<{
+    id: z.ZodString;
+    deviceId: z.ZodOptional<z.ZodNumber>;
+    at: z.ZodOptional<z.ZodNumber>;
+    expiresAt: z.ZodOptional<z.ZodNumber>;
+    data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>;
+export type RecordInput = z.infer<typeof RecordInputSchema>;
+export declare const RecordViewSchema: z.ZodObject<{
+    id: z.ZodString;
+    deviceId: z.ZodNullable<z.ZodNumber>;
+    at: z.ZodNullable<z.ZodNumber>;
+    expiresAt: z.ZodNullable<z.ZodNumber>;
+    rev: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+    data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>;
+export type RecordView = z.infer<typeof RecordViewSchema>;
+/** One predicate on a declared index field: equality, a set, or a range. */
+export declare const RecordWhereValueSchema: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
+    in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
+}, z.core.$strip>, z.ZodObject<{
+    gt: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+    gte: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+    lt: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+    lte: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+}, z.core.$strip>]>;
+export type RecordWhereValue = z.infer<typeof RecordWhereValueSchema>;
+/** Declared index fields only. Anything else does not compile, by design. */
+export declare const RecordWhereSchema: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
+    in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
+}, z.core.$strip>, z.ZodObject<{
+    gt: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+    gte: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+    lt: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+    lte: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+}, z.core.$strip>]>>;
+export type RecordWhere = z.infer<typeof RecordWhereSchema>;
+export declare const RecordQueryInputSchema: z.ZodObject<{
+    kind: z.ZodString;
+    deviceId: z.ZodOptional<z.ZodNumber>;
+    atFrom: z.ZodOptional<z.ZodNumber>;
+    atTo: z.ZodOptional<z.ZodNumber>;
+    where: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
+        in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
+    }, z.core.$strip>, z.ZodObject<{
+        gt: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+        gte: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+        lt: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+        lte: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+    }, z.core.$strip>]>>>;
+    order: z.ZodOptional<z.ZodEnum<{
+        at: "at";
+        id: "id";
+    }>>;
+    desc: z.ZodOptional<z.ZodBoolean>;
+    limit: z.ZodDefault<z.ZodNumber>;
+    cursor: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type RecordQueryInput = z.infer<typeof RecordQueryInputSchema>;
+export declare const RecordQueryResultSchema: z.ZodObject<{
+    records: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        deviceId: z.ZodNullable<z.ZodNumber>;
+        at: z.ZodNullable<z.ZodNumber>;
+        expiresAt: z.ZodNullable<z.ZodNumber>;
+        rev: z.ZodNumber;
+        updatedAt: z.ZodNumber;
+        data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strip>>;
+    nextCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type RecordQueryResult = z.infer<typeof RecordQueryResultSchema>;
+export declare const RecordKindStateSchema: z.ZodEnum<{
+    created: "created";
+    unchanged: "unchanged";
+    updated: "updated";
+}>;
+export declare const DeclareKindResultSchema: z.ZodObject<{
+    kindId: z.ZodNumber;
+    state: z.ZodEnum<{
+        created: "created";
+        unchanged: "unchanged";
+        updated: "updated";
+    }>;
+    createdIndexes: z.ZodArray<z.ZodString>;
+    adoptionPending: z.ZodNullable<z.ZodObject<{
+        legacyTable: z.ZodString;
+        legacyRows: z.ZodNumber;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type DeclareKindResult = z.infer<typeof DeclareKindResultSchema>;
+export declare const RecordSecretRefsSchema: z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>>;
+export declare const recordsCapability: {
+    readonly name: 'records';
+    readonly scope: 'system';
+    readonly mode: 'singleton';
+    readonly internal: true;
+    readonly methods: {
+        /** Reconcile this addon's kinds: create the catalog rows and the declared indexes. Additive only. */
+        readonly declareKinds: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            kinds: z.ZodRecord<z.ZodString, z.ZodObject<{
+                database: z.ZodDefault<z.ZodEnum<{
+                    events: "events";
+                    settings: "settings";
+                }>>;
+                class: z.ZodEnum<{
+                    audit: "audit";
+                    config: "config";
+                    ephemeral: "ephemeral";
+                    ledger: "ledger";
+                    mirror: "mirror";
+                }>;
+                writeTrigger: z.ZodString;
+                device: z.ZodDefault<z.ZodEnum<{
+                    none: "none";
+                    optional: "optional";
+                    required: "required";
+                }>>;
+                at: z.ZodDefault<z.ZodEnum<{
+                    none: "none";
+                    required: "required";
+                }>>;
+                indexes: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                    name: z.ZodString;
+                    fields: z.ZodArray<z.ZodString>;
+                    unique: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strict>>>;
+                retention: z.ZodUnion<readonly [z.ZodObject<{
+                    ttlMs: z.ZodNumber;
+                    from: z.ZodEnum<{
+                        at: "at";
+                        write: "write";
+                    }>;
+                }, z.core.$strict>, z.ZodObject<{
+                    maxRows: z.ZodOptional<z.ZodNumber>;
+                    maxRowsPerDevice: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    owner: z.ZodString;
+                    reason: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    none: z.ZodString;
+                }, z.core.$strict>]>;
+                deviceRemoval: z.ZodDefault<z.ZodEnum<{
+                    delete: "delete";
+                    none: "none";
+                }>>;
+                maxDataBytes: z.ZodDefault<z.ZodNumber>;
+                secretPaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                secretArrayKeys: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+                adoptsFrom: z.ZodOptional<z.ZodString>;
+                transactFamily: z.ZodOptional<z.ZodString>;
+                entry: z.ZodOptional<z.ZodObject<{
+                    title: z.ZodString;
+                    nameField: z.ZodString;
+                    fields: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>;
+        }, z.core.$strip>, z.ZodObject<{
+            kinds: z.ZodRecord<z.ZodString, z.ZodObject<{
+                kindId: z.ZodNumber;
+                state: z.ZodEnum<{
+                    created: "created";
+                    unchanged: "unchanged";
+                    updated: "updated";
+                }>;
+                createdIndexes: z.ZodArray<z.ZodString>;
+                adoptionPending: z.ZodNullable<z.ZodObject<{
+                    legacyTable: z.ZodString;
+                    legacyRows: z.ZodNumber;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, "mutation">;
+        readonly get: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            kind: z.ZodString;
+            id: z.ZodString;
+        }, z.core.$strip>, z.ZodNullable<z.ZodObject<{
+            id: z.ZodString;
+            deviceId: z.ZodNullable<z.ZodNumber>;
+            at: z.ZodNullable<z.ZodNumber>;
+            expiresAt: z.ZodNullable<z.ZodNumber>;
+            rev: z.ZodNumber;
+            updatedAt: z.ZodNumber;
+            data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>>, import("./capability-definition.js").CapabilityMethodKind>;
+        readonly getMany: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            kind: z.ZodString;
+            ids: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            deviceId: z.ZodNullable<z.ZodNumber>;
+            at: z.ZodNullable<z.ZodNumber>;
+            expiresAt: z.ZodNullable<z.ZodNumber>;
+            rev: z.ZodNumber;
+            updatedAt: z.ZodNumber;
+            data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>>, import("./capability-definition.js").CapabilityMethodKind>;
+        /** The keychain refs of the rows' secret fields, by id and concrete path. For the owner's `ctx.secrets`. */
+        readonly secretRefs: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            kind: z.ZodString;
+            ids: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>>, import("./capability-definition.js").CapabilityMethodKind>;
+        readonly put: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            kind: z.ZodString;
+            record: z.ZodObject<{
+                id: z.ZodString;
+                deviceId: z.ZodOptional<z.ZodNumber>;
+                at: z.ZodOptional<z.ZodNumber>;
+                expiresAt: z.ZodOptional<z.ZodNumber>;
+                data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            }, z.core.$strip>;
+            ifRev: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>, z.ZodObject<{
+            rev: z.ZodNumber;
+            releasedRefs: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, "mutation">;
+        readonly putMany: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            kind: z.ZodString;
+            records: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                deviceId: z.ZodOptional<z.ZodNumber>;
+                at: z.ZodOptional<z.ZodNumber>;
+                expiresAt: z.ZodOptional<z.ZodNumber>;
+                data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, z.ZodObject<{
+            count: z.ZodNumber;
+            releasedRefs: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, "mutation">;
+        /** One-statement RFC 7396 merge: `null` removes a field; a merge never reads. */
+        readonly patch: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            kind: z.ZodString;
+            id: z.ZodString;
+            data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            at: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            expiresAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            ifRev: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>, z.ZodObject<{
+            rev: z.ZodNumber;
+            releasedRefs: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, "mutation">;
+        readonly delete: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            kind: z.ZodString;
+            id: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            deleted: z.ZodBoolean;
+            secretRefs: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, "mutation">;
+        readonly deleteMany: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            kind: z.ZodString;
+            ids: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            deleted: z.ZodNumber;
+            secretRefs: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, "mutation">;
+        readonly query: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            kind: z.ZodString;
+            deviceId: z.ZodOptional<z.ZodNumber>;
+            atFrom: z.ZodOptional<z.ZodNumber>;
+            atTo: z.ZodOptional<z.ZodNumber>;
+            where: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
+                in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
+            }, z.core.$strip>, z.ZodObject<{
+                gt: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+                gte: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+                lt: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+                lte: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+            }, z.core.$strip>]>>>;
+            order: z.ZodOptional<z.ZodEnum<{
+                at: "at";
+                id: "id";
+            }>>;
+            desc: z.ZodOptional<z.ZodBoolean>;
+            limit: z.ZodDefault<z.ZodNumber>;
+            cursor: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            records: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                deviceId: z.ZodNullable<z.ZodNumber>;
+                at: z.ZodNullable<z.ZodNumber>;
+                expiresAt: z.ZodNullable<z.ZodNumber>;
+                rev: z.ZodNumber;
+                updatedAt: z.ZodNumber;
+                data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            }, z.core.$strip>>;
+            nextCursor: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
+        readonly count: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            kind: z.ZodString;
+            deviceId: z.ZodOptional<z.ZodNumber>;
+            atFrom: z.ZodOptional<z.ZodNumber>;
+            atTo: z.ZodOptional<z.ZodNumber>;
+            where: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
+                in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
+            }, z.core.$strip>, z.ZodObject<{
+                gt: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+                gte: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+                lt: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+                lte: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+            }, z.core.$strip>]>>>;
+        }, z.core.$strip>, z.ZodObject<{
+            count: z.ZodNumber;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
+        readonly histogram: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            kind: z.ZodString;
+            deviceId: z.ZodOptional<z.ZodNumber>;
+            from: z.ZodNumber;
+            to: z.ZodNumber;
+            bucketMs: z.ZodNumber;
+        }, z.core.$strip>, z.ZodObject<{
+            buckets: z.ZodArray<z.ZodObject<{
+                bucketStart: z.ZodNumber;
+                count: z.ZodNumber;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
+        /** Index-served only: every field must belong to ONE declared index. */
+        readonly aggregate: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            kind: z.ZodString;
+            op: z.ZodEnum<{
+                count: "count";
+                max: "max";
+                min: "min";
+                sum: "sum";
+            }>;
+            field: z.ZodOptional<z.ZodString>;
+            groupBy: z.ZodOptional<z.ZodString>;
+            where: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
+                in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
+            }, z.core.$strip>, z.ZodObject<{
+                gt: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+                gte: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+                lt: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+                lte: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+            }, z.core.$strip>]>>>;
+        }, z.core.$strip>, z.ZodObject<{
+            rows: z.ZodArray<z.ZodObject<{
+                group: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodNull]>;
+                value: z.ZodNullable<z.ZodNumber>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
+        /** Batched (5 000 rows per statement, yielding between). Needs a predicate: there is no "delete all". */
+        readonly deleteWhere: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            kind: z.ZodString;
+            deviceId: z.ZodOptional<z.ZodNumber>;
+            atBefore: z.ZodOptional<z.ZodNumber>;
+            where: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
+                in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
+            }, z.core.$strip>, z.ZodObject<{
+                gt: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+                gte: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+                lt: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+                lte: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+            }, z.core.$strip>]>>>;
+        }, z.core.$strip>, z.ZodObject<{
+            deleted: z.ZodNumber;
+            secretRefs: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, "mutation">;
+        /** The D865 hook body: every kind of this addon declared `deviceRemoval: 'delete'`. */
+        readonly deleteDevice: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            deviceId: z.ZodNumber;
+            kinds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>, z.ZodObject<{
+            deleted: z.ZodRecord<z.ZodString, z.ZodNumber>;
+            secretRefs: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, "mutation">;
+        /** A monotonically increasing integer per kind (replaces "resume from the highest"). */
+        readonly allocateId: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            kind: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodNumber;
+        }, z.core.$strip>, "mutation">;
+    };
+};
+export type IRecordsProvider = InferProvider<typeof recordsCapability>;

package/dist/capabilities/storage-admin.cap.d.ts

@@ -9,6 +9,98 @@ export declare const StorageTableSchema: z.ZodObject<{
     declaredThisBoot: z.ZodBoolean;
 }, z.core.$strip>;
 export type StorageTable = z.infer<typeof StorageTableSchema>;
+/** One declared record kind (D881) as System -> Data shows it. */
+export declare const StorageKindSchema: z.ZodObject<{
+    owner: z.ZodString;
+    kind: z.ZodString;
+    database: z.ZodEnum<{
+        events: "events";
+        settings: "settings";
+    }>;
+    class: z.ZodString;
+    state: z.ZodEnum<{
+        declared: "declared";
+        dropped: "dropped";
+        orphaned: "orphaned";
+    }>;
+    rows: z.ZodNullable<z.ZodNumber>;
+    bytesEstimate: z.ZodNullable<z.ZodNumber>;
+    writeTrigger: z.ZodString;
+    retention: z.ZodUnion<readonly [z.ZodObject<{
+        ttlMs: z.ZodNumber;
+        from: z.ZodEnum<{
+            at: "at";
+            write: "write";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        maxRows: z.ZodOptional<z.ZodNumber>;
+        maxRowsPerDevice: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        owner: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        none: z.ZodString;
+    }, z.core.$strict>]>;
+    entry: z.ZodBoolean;
+    declaration: z.ZodObject<{
+        database: z.ZodDefault<z.ZodEnum<{
+            events: "events";
+            settings: "settings";
+        }>>;
+        class: z.ZodEnum<{
+            audit: "audit";
+            config: "config";
+            ephemeral: "ephemeral";
+            ledger: "ledger";
+            mirror: "mirror";
+        }>;
+        writeTrigger: z.ZodString;
+        device: z.ZodDefault<z.ZodEnum<{
+            none: "none";
+            optional: "optional";
+            required: "required";
+        }>>;
+        at: z.ZodDefault<z.ZodEnum<{
+            none: "none";
+            required: "required";
+        }>>;
+        indexes: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            fields: z.ZodArray<z.ZodString>;
+            unique: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>>;
+        retention: z.ZodUnion<readonly [z.ZodObject<{
+            ttlMs: z.ZodNumber;
+            from: z.ZodEnum<{
+                at: "at";
+                write: "write";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            maxRows: z.ZodOptional<z.ZodNumber>;
+            maxRowsPerDevice: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            owner: z.ZodString;
+            reason: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            none: z.ZodString;
+        }, z.core.$strict>]>;
+        deviceRemoval: z.ZodDefault<z.ZodEnum<{
+            delete: "delete";
+            none: "none";
+        }>>;
+        maxDataBytes: z.ZodDefault<z.ZodNumber>;
+        secretPaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        secretArrayKeys: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        adoptsFrom: z.ZodOptional<z.ZodString>;
+        transactFamily: z.ZodOptional<z.ZodString>;
+        entry: z.ZodOptional<z.ZodObject<{
+            title: z.ZodString;
+            nameField: z.ZodString;
+            fields: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strip>;
+export type StorageKind = z.infer<typeof StorageKindSchema>;
 /**
  * The collections retired by exact name: the D870 ones (their data became keys
  * of the camera's settings) and the three D871 leftovers (the `stats-5m` tables
@@ -71,6 +163,160 @@ export declare const storageAdminCapability: {
             dropped: z.ZodLiteral<true>;
             rows: z.ZodNumber;
         }, z.core.$strip>, "mutation">;
+        /** Every record kind of both files with rows, a size estimate, class and retention (D881). */
+        readonly listKinds: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            owner: z.ZodOptional<z.ZodString>;
+            counts: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>, z.ZodObject<{
+            kinds: z.ZodArray<z.ZodObject<{
+                owner: z.ZodString;
+                kind: z.ZodString;
+                database: z.ZodEnum<{
+                    events: "events";
+                    settings: "settings";
+                }>;
+                class: z.ZodString;
+                state: z.ZodEnum<{
+                    declared: "declared";
+                    dropped: "dropped";
+                    orphaned: "orphaned";
+                }>;
+                rows: z.ZodNullable<z.ZodNumber>;
+                bytesEstimate: z.ZodNullable<z.ZodNumber>;
+                writeTrigger: z.ZodString;
+                retention: z.ZodUnion<readonly [z.ZodObject<{
+                    ttlMs: z.ZodNumber;
+                    from: z.ZodEnum<{
+                        at: "at";
+                        write: "write";
+                    }>;
+                }, z.core.$strict>, z.ZodObject<{
+                    maxRows: z.ZodOptional<z.ZodNumber>;
+                    maxRowsPerDevice: z.ZodOptional<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    owner: z.ZodString;
+                    reason: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    none: z.ZodString;
+                }, z.core.$strict>]>;
+                entry: z.ZodBoolean;
+                declaration: z.ZodObject<{
+                    database: z.ZodDefault<z.ZodEnum<{
+                        events: "events";
+                        settings: "settings";
+                    }>>;
+                    class: z.ZodEnum<{
+                        audit: "audit";
+                        config: "config";
+                        ephemeral: "ephemeral";
+                        ledger: "ledger";
+                        mirror: "mirror";
+                    }>;
+                    writeTrigger: z.ZodString;
+                    device: z.ZodDefault<z.ZodEnum<{
+                        none: "none";
+                        optional: "optional";
+                        required: "required";
+                    }>>;
+                    at: z.ZodDefault<z.ZodEnum<{
+                        none: "none";
+                        required: "required";
+                    }>>;
+                    indexes: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                        name: z.ZodString;
+                        fields: z.ZodArray<z.ZodString>;
+                        unique: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strict>>>;
+                    retention: z.ZodUnion<readonly [z.ZodObject<{
+                        ttlMs: z.ZodNumber;
+                        from: z.ZodEnum<{
+                            at: "at";
+                            write: "write";
+                        }>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        maxRows: z.ZodOptional<z.ZodNumber>;
+                        maxRowsPerDevice: z.ZodOptional<z.ZodNumber>;
+                    }, z.core.$strict>, z.ZodObject<{
+                        owner: z.ZodString;
+                        reason: z.ZodString;
+                    }, z.core.$strict>, z.ZodObject<{
+                        none: z.ZodString;
+                    }, z.core.$strict>]>;
+                    deviceRemoval: z.ZodDefault<z.ZodEnum<{
+                        delete: "delete";
+                        none: "none";
+                    }>>;
+                    maxDataBytes: z.ZodDefault<z.ZodNumber>;
+                    secretPaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                    secretArrayKeys: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    adoptsFrom: z.ZodOptional<z.ZodString>;
+                    transactFamily: z.ZodOptional<z.ZodString>;
+                    entry: z.ZodOptional<z.ZodObject<{
+                        title: z.ZodString;
+                        nameField: z.ZodString;
+                        fields: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+                    }, z.core.$strict>>;
+                }, z.core.$strict>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
+        /**
+         * Read-only diagnosis of ANY owner's kind: the same indexed query as the
+         * owner's, secret fields redacted, audited in the engine log.
+         */
+        readonly readRecords: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            deviceId: z.ZodOptional<z.ZodNumber>;
+            atFrom: z.ZodOptional<z.ZodNumber>;
+            atTo: z.ZodOptional<z.ZodNumber>;
+            where: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodObject<{
+                in: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>;
+            }, z.core.$strip>, z.ZodObject<{
+                gt: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+                gte: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+                lt: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+                lte: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+            }, z.core.$strip>]>>>;
+            order: z.ZodOptional<z.ZodEnum<{
+                at: "at";
+                id: "id";
+            }>>;
+            desc: z.ZodOptional<z.ZodBoolean>;
+            limit: z.ZodDefault<z.ZodNumber>;
+            cursor: z.ZodOptional<z.ZodString>;
+            owner: z.ZodString;
+            kind: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            records: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                deviceId: z.ZodNullable<z.ZodNumber>;
+                at: z.ZodNullable<z.ZodNumber>;
+                expiresAt: z.ZodNullable<z.ZodNumber>;
+                rev: z.ZodNumber;
+                updatedAt: z.ZodNumber;
+                data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            }, z.core.$strip>>;
+            nextCursor: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
+        /**
+         * The migration copy path (D881): write rows into a kind AS ITS DECLARED
+         * OWNER. Refused when that owner's manifest does not declare the kind.
+         * Idempotent (a put by id, so a re-run resumes). A secret field carries a
+         * keychain marker bound to the row's own ref - the operator script imports
+         * the value first - and a plain string there is refused.
+         */
+        readonly adoptRecords: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            owner: z.ZodString;
+            kind: z.ZodString;
+            records: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                deviceId: z.ZodOptional<z.ZodNumber>;
+                at: z.ZodOptional<z.ZodNumber>;
+                expiresAt: z.ZodOptional<z.ZodNumber>;
+                data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            }, z.core.$strip>>;
+            complete: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>, z.ZodObject<{
+            adopted: z.ZodNumber;
+        }, z.core.$strip>, "mutation">;
     };
 };
 export type IStorageAdminProvider = InferProvider<typeof storageAdminCapability>;

package/dist/client.js

@@ -28076,6 +28076,12 @@ function createSystemProxy(api) {
 			assignPlates: (input) => dispatch("plateGallery", "assignPlates", "mutation", input),
 			unassignPlates: (input) => dispatch("plateGallery", "unassignPlates", "mutation", input)
 		},
+		recordEntries: {
+			listEntryKinds: (input) => dispatch("recordEntries", "listEntryKinds", "query", input),
+			listEntries: (input) => dispatch("recordEntries", "listEntries", "query", input),
+			putEntry: (input) => dispatch("recordEntries", "putEntry", "mutation", input),
+			deleteEntry: (input) => dispatch("recordEntries", "deleteEntry", "mutation", input)
+		},
 		recordingArchive: {
 			getAvailabilityBatch: (input) => dispatch("recordingArchive", "getAvailabilityBatch", "query", input),
 			getDaysWithRecordingsBatch: (input) => dispatch("recordingArchive", "getDaysWithRecordingsBatch", "query", input),