@camstack/types 1.2.379 → 1.2.381

package/dist/addon.d.ts

@@ -24,6 +24,7 @@ export type { IAdminUiProvider } from './capabilities/admin-ui.cap.js';
 export { adminUiCapability } from './capabilities/admin-ui.cap.js';
 export { expandCapMethods } from './capabilities/capability-definition.js';
 export { describeCustomActions } from './capabilities/custom-actions.js';
+export { CALLER_STAMPED_CAPABILITIES, withoutCallerStamp, } from './capabilities/caller-stamp.js';
 export { deviceOpsCapability } from './capabilities/device-ops.cap.js';
 export type { IViewerUiProvider } from './capabilities/viewer-ui.cap.js';
 export { viewerUiCapability } from './capabilities/viewer-ui.cap.js';
@@ -44,6 +45,7 @@ export type { CapStateLeaf } from './generated/addon-cap-facts.js';
 export { createDeviceProxy } from './generated/device-proxy.js';
 export { createEventBusSliceSource } from './device/device-state-handle.js';
 export type { SliceEventBus, SliceHandleApi } from './device/device-state-handle.js';
+export { addonSliceHandleApi } from './helpers/addon-slice-handle.js';
 export { DEVICE_SCOPED_CAPS, isDeviceScopedCap } from './generated/device-scoped-caps.js';
 export type { AddonDeclaration, AddonInitResult, ICamstackAddon, ProviderRegistration, } from './interfaces/addon.js';
 export { DATAPLANE_SECRET_HEADER } from './interfaces/addon-data-plane.js';
@@ -55,3 +57,4 @@ export { maskUrlCredentials } from './utils/mask-url.js';
 export { asJsonObject, asString, parseJsonUnknown } from './utils/json-safe.js';
 export { sleep } from './utils/sleep.js';
 export * from './keychain/index.js';
+export * from './records/index.js';

package/dist/addon.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-DQYi915G.js");
+const require_sleep = require("./sleep-D8yJVc4r.js");
 const require_event_category = require("./event-category-Hoe-mqbd.js");
 const require_err_msg = require("./err-msg-Bb-s4Xuj.js");
 //#region src/generated/cap-input-defaults.ts
@@ -16,7 +16,7 @@ const require_err_msg = require("./err-msg-Bb-s4Xuj.js");
 * Plain data, zero Zod: a forked runner must not import the schema barrel
 * (~144MB RSS per runner — D28).
 *
-* Coverage: 27 caps, 69 methods with defaults.
+* Coverage: 29 caps, 71 methods with defaults.
 */
 var CAP_INPUT_DEFAULTS = Object.freeze({
 	"addons": { "getLogs": { "limit": 100 } },
@@ -237,7 +237,9 @@ var CAP_INPUT_DEFAULTS = Object.freeze({
 		},
 		"setDeviceConfig": { "config": { "__nested__": { "bands": [] } } }
 	},
+	"records": { "query": { "limit": 100 } },
 	"storage": { "upsertLocation": { "isSystem": false } },
+	"storage-admin": { "readRecords": { "limit": 100 } },
 	"storage-provider": {
 		"beginDownload": { "location": { "__nested__": { "isSystem": false } } },
 		"beginUpload": { "location": { "__nested__": { "isSystem": false } } },
@@ -2133,8 +2135,11 @@ var CAP_STATE_LEAVES = Object.freeze({
 	]
 });
 //#endregion
+exports.AdoptionPendingError = require_sleep.AdoptionPendingError;
 exports.BOOT_RECOVERY_BACKOFF_MS = require_sleep.BOOT_RECOVERY_BACKOFF_MS;
 exports.BaseAddon = require_sleep.BaseAddon;
+exports.BatchTooLargeError = require_sleep.BatchTooLargeError;
+exports.CALLER_STAMPED_CAPABILITIES = require_sleep.CALLER_STAMPED_CAPABILITIES;
 exports.CAP_ADVANCE_FIELDS = CAP_ADVANCE_FIELDS;
 exports.CAP_INPUT_DEFAULTS = CAP_INPUT_DEFAULTS;
 exports.CAP_STATE_LEAVES = CAP_STATE_LEAVES;
@@ -2142,38 +2147,85 @@ exports.COLLECTION_ARRAY_METHODS = COLLECTION_ARRAY_METHODS;
 exports.DATAPLANE_SECRET_HEADER = require_sleep.DATAPLANE_SECRET_HEADER;
 exports.DEVICE_CHILDREN_BATCH_MAX = require_sleep.DEVICE_CHILDREN_BATCH_MAX;
 exports.DEVICE_SCOPED_CAPS = require_sleep.DEVICE_SCOPED_CAPS;
+exports.DeclarationRefusedError = require_sleep.DeclarationRefusedError;
 exports.DeviceType = require_err_msg.DeviceType;
 exports.DisposerChain = require_sleep.DisposerChain;
+exports.EntryDescriptorSchema = require_sleep.EntryDescriptorSchema;
 exports.ErrorI18nPayloadSchema = require_sleep.ErrorI18nPayloadSchema;
 exports.EventCategory = require_event_category.EventCategory;
+exports.FilterRequiredError = require_sleep.FilterRequiredError;
+exports.ForeignSecretMarkerError = require_sleep.ForeignSecretMarkerError;
 exports.HF_REPO = require_sleep.HF_REPO;
+exports.InvalidRecordError = require_sleep.InvalidRecordError;
 exports.MIN_SCRUBBED_LENGTH = require_sleep.MIN_SCRUBBED_LENGTH;
 exports.MODEL_FORMATS = require_sleep.MODEL_FORMATS;
+exports.NoCallerError = require_sleep.NoCallerError;
 exports.PEER_BYTES_CHUNK_BYTES = require_sleep.PEER_BYTES_CHUNK_BYTES;
 exports.PEER_BYTES_MAX_OUTSTANDING = require_sleep.PEER_BYTES_MAX_OUTSTANDING;
 exports.PEER_BYTES_STALL_MS = require_sleep.PEER_BYTES_STALL_MS;
 exports.PEER_BYTES_TICKET_TTL_MS = require_sleep.PEER_BYTES_TICKET_TTL_MS;
 exports.PROVIDER_OPTIONAL_METHODS = PROVIDER_OPTIONAL_METHODS;
+exports.PlaintextSecretError = require_sleep.PlaintextSecretError;
+exports.RECORDS_ERROR_CODES = require_sleep.RECORDS_ERROR_CODES;
+exports.RECORD_BATCH_MAX = require_sleep.RECORD_BATCH_MAX;
+exports.RECORD_BATCH_MAX_BYTES = require_sleep.RECORD_BATCH_MAX_BYTES;
+exports.RECORD_CLASSES = require_sleep.RECORD_CLASSES;
+exports.RECORD_DATABASES = require_sleep.RECORD_DATABASES;
+exports.RECORD_DEFAULT_MAX_DATA_BYTES = require_sleep.RECORD_DEFAULT_MAX_DATA_BYTES;
+exports.RECORD_DELETE_BATCH = require_sleep.RECORD_DELETE_BATCH;
+exports.RECORD_ID_MAX_LENGTH = require_sleep.RECORD_ID_MAX_LENGTH;
+exports.RECORD_MAX_DATA_BYTES = require_sleep.RECORD_MAX_DATA_BYTES;
+exports.RECORD_MAX_INDEXES = require_sleep.RECORD_MAX_INDEXES;
+exports.RECORD_MAX_INDEX_FIELDS = require_sleep.RECORD_MAX_INDEX_FIELDS;
+exports.RECORD_QUERY_MAX = require_sleep.RECORD_QUERY_MAX;
+exports.RECORD_SECRET_COLLECTION_PREFIX = require_sleep.RECORD_SECRET_COLLECTION_PREFIX;
+exports.RECORD_SETTINGS_MAX_ROWS = require_sleep.RECORD_SETTINGS_MAX_ROWS;
+exports.RECORD_SWEEP_INTERVAL_MS = require_sleep.RECORD_SWEEP_INTERVAL_MS;
+exports.REMOVE_LEAF = require_sleep.REMOVE_LEAF;
 exports.REVALIDATE_AFTER_MS = require_sleep.REVALIDATE_AFTER_MS;
 exports.ReadinessRegistry = require_sleep.ReadinessRegistry;
 exports.ReadinessTimeoutError = require_sleep.ReadinessTimeoutError;
+exports.RecordFieldPathSchema = require_sleep.RecordFieldPathSchema;
+exports.RecordIndexSchema = require_sleep.RecordIndexSchema;
+exports.RecordKindDeclarationSchema = require_sleep.RecordKindDeclarationSchema;
+exports.RecordKindNameSchema = require_sleep.RecordKindNameSchema;
+exports.RecordNotFoundError = require_sleep.RecordNotFoundError;
+exports.RecordRetentionSchema = require_sleep.RecordRetentionSchema;
+exports.RecordSecretUnavailableError = require_sleep.RecordSecretUnavailableError;
+exports.RecordTooLargeError = require_sleep.RecordTooLargeError;
+exports.RecordUniqueViolationError = require_sleep.RecordUniqueViolationError;
+exports.RecordsError = require_sleep.RecordsError;
+exports.RevConflictError = require_sleep.RevConflictError;
 exports.SECRET_CLEAR = require_sleep.SECRET_CLEAR;
 exports.SECRET_REF_SCHEME = require_sleep.SECRET_REF_SCHEME;
+exports.SETTINGS_ARRAY_ADOPTS_PREFIX = require_sleep.SETTINGS_ARRAY_ADOPTS_PREFIX;
+exports.SETTINGS_BROKERS_ADOPTS_PREFIX = require_sleep.SETTINGS_BROKERS_ADOPTS_PREFIX;
+exports.UnindexedFilterError = require_sleep.UnindexedFilterError;
+exports.UnknownRecordKindError = require_sleep.UnknownRecordKindError;
+exports.addonSliceHandleApi = require_sleep.addonSliceHandleApi;
 exports.adminUiCapability = require_sleep.adminUiCapability;
 exports.arrayItemFieldPath = require_sleep.arrayItemFieldPath;
 exports.asJsonObject = require_sleep.asJsonObject;
+exports.asRecordsError = require_sleep.asRecordsError;
 exports.asString = require_sleep.asString;
+exports.assertValidDeclaration = require_sleep.assertValidDeclaration;
 exports.buildSecretRef = require_sleep.buildSecretRef;
 exports.classifySecretWrite = require_sleep.classifySecretWrite;
 exports.clearKnownSecrets = require_sleep.clearKnownSecrets;
+exports.collectSecretLeaves = require_sleep.collectSecretLeaves;
 exports.collectZodSecretPaths = require_sleep.collectZodSecretPaths;
 exports.createDeviceProxy = require_sleep.createDeviceProxy;
 exports.createEvent = require_sleep.createEvent;
 exports.createEventBusSliceSource = require_sleep.createEventBusSliceSource;
+exports.createRecordsAccess = require_sleep.createRecordsAccess;
 exports.createSecretsAccess = require_sleep.createSecretsAccess;
+exports.declarationsOf = require_sleep.declarationsOf;
+exports.defineEntryKind = require_sleep.defineEntryKind;
+exports.defineRecordKinds = require_sleep.defineRecordKinds;
 exports.describeCustomActions = require_sleep.describeCustomActions;
 exports.deviceOpsCapability = require_sleep.deviceOpsCapability;
 exports.emitReadiness = require_sleep.emitReadiness;
+exports.entryBody = require_sleep.entryBody;
 exports.errMsg = require_err_msg.errMsg;
 exports.expandCapMethods = require_sleep.expandCapMethods;
 exports.forgetKnownSecret = require_sleep.forgetKnownSecret;
@@ -2190,21 +2242,34 @@ exports.isSecretMarkerLike = require_sleep.isSecretMarkerLike;
 exports.isSecretRef = require_sleep.isSecretRef;
 exports.isZodSecret = require_sleep.isZodSecret;
 exports.knownSecretCount = require_sleep.knownSecretCount;
+exports.makeInMemoryRecords = require_sleep.makeInMemoryRecords;
 exports.makeSecretMarker = require_sleep.makeSecretMarker;
+exports.mapSecretLeaves = require_sleep.mapSecretLeaves;
 exports.maskUrlCredentials = require_sleep.maskUrlCredentials;
 exports.nodePin = require_sleep.nodePin;
 exports.normalizeAddonInitResult = require_sleep.normalizeAddonInitResult;
 exports.normalizeSecretOwner = require_sleep.normalizeSecretOwner;
 exports.parseJsonUnknown = require_sleep.parseJsonUnknown;
+exports.parseSecretPath = require_sleep.parseSecretPath;
 exports.parseSecretRef = require_sleep.parseSecretRef;
+exports.parseSettingsArrayAdoptsFrom = require_sleep.parseSettingsArrayAdoptsFrom;
+exports.parseSettingsBrokersAdoptsFrom = require_sleep.parseSettingsBrokersAdoptsFrom;
 exports.readErrorI18n = require_sleep.readErrorI18n;
 exports.readNodePin = require_sleep.readNodePin;
+exports.recordArrayItemPath = require_sleep.recordArrayItemPath;
+exports.recordSecretCollection = require_sleep.recordSecretCollection;
+exports.recordSecretRef = require_sleep.recordSecretRef;
+exports.recordsErrorFromMessage = require_sleep.recordsErrorFromMessage;
 exports.registerKnownSecret = require_sleep.registerKnownSecret;
 exports.resolveSecretViewsIn = require_sleep.resolveSecretViewsIn;
 exports.scopeKey = require_sleep.scopeKey;
 exports.scrubKnownSecrets = require_sleep.scrubKnownSecrets;
+exports.secretArrayPrefixes = require_sleep.secretArrayPrefixes;
+exports.settingsArrayAdoptsFrom = require_sleep.settingsArrayAdoptsFrom;
+exports.settingsBrokersAdoptsFrom = require_sleep.settingsBrokersAdoptsFrom;
 exports.shortSecretRefHash = require_sleep.shortSecretRefHash;
 exports.sleep = require_sleep.sleep;
 exports.toSecretFieldView = require_sleep.toSecretFieldView;
 exports.viewerUiCapability = require_sleep.viewerUiCapability;
 exports.withCapInputDefaults = withCapInputDefaults;
+exports.withoutCallerStamp = require_sleep.withoutCallerStamp;

package/dist/addon.mjs

@@ -1,4 +1,4 @@
-import { $t as normalizeAddonInitResult, An as isSecretClear, Bt as registerKnownSecret, D as collectZodSecretPaths, F as viewerUiCapability, Fn as toSecretFieldView, Ft as createSecretsAccess, Gt as PEER_BYTES_STALL_MS, Ht as shortSecretRefHash, I as DEVICE_CHILDREN_BATCH_MAX, It as MIN_SCRUBBED_LENGTH, Jt as DATAPLANE_SECRET_HEADER, Kt as PEER_BYTES_TICKET_TTL_MS, Lt as clearKnownSecrets, Mn as isSecretMarker, Nn as isSecretMarkerLike, Nt as resolveSecretViewsIn, O as isZodSecret, On as SECRET_CLEAR, P as deviceOpsCapability, Pn as makeSecretMarker, Pt as REVALIDATE_AFTER_MS, Rt as forgetKnownSecret, S as createEventBusSliceSource, Ut as PEER_BYTES_CHUNK_BYTES, V as adminUiCapability, Vt as scrubKnownSecrets, Wt as PEER_BYTES_MAX_OUTSTANDING, Xt as DisposerChain, Y as expandCapMethods, Zt as BaseAddon, _ as readErrorI18n, at as MODEL_FORMATS, b as isDeviceScopedCap, bn as emitReadiness, c as asString, d as parseJsonUnknown, dn as buildSecretRef, f as hfModelUrl, fn as formatSecretScope, g as ErrorI18nPayloadSchema, gn as parseSecretRef, hn as normalizeSecretOwner, j as HF_REPO, jn as isSecretFieldView, kn as classifySecretWrite, ln as SECRET_REF_SCHEME, mn as isSecretRef, nt as nodePin, o as asJsonObject, ot as ReadinessRegistry, p as BOOT_RECOVERY_BACKOFF_MS, pn as globalSecretScope, r as maskUrlCredentials, rt as readNodePin, st as ReadinessTimeoutError, t as sleep, un as arrayItemFieldPath, ut as scopeKey, x as createDeviceProxy, y as DEVICE_SCOPED_CAPS, yn as createEvent, z as describeCustomActions, zt as knownSecretCount } from "./sleep-D-Q2_Mcd.mjs";
+import { $n as PEER_BYTES_CHUNK_BYTES, $t as REMOVE_LEAF, A as HF_REPO, An as RECORD_BATCH_MAX_BYTES, Ar as emitReadiness, B as describeCustomActions, Bn as RECORD_SECRET_COLLECTION_PREFIX, Br as SECRET_CLEAR, Bt as settingsBrokersAdoptsFrom, C as addonSliceHandleApi, Cn as RecordsError, Cr as globalSecretScope, Dn as asRecordsError, En as UnknownRecordKindError, Er as parseSecretRef, F as DEVICE_CHILDREN_BATCH_MAX, Fn as RECORD_ID_MAX_LENGTH, Ft as SETTINGS_ARRAY_ADOPTS_PREFIX, Gn as createSecretsAccess, Gr as isSecretMarkerLike, Gt as RecordFieldPathSchema, H as adminUiCapability, Hn as RECORD_SWEEP_INTERVAL_MS, Hr as isSecretClear, Ht as entryBody, I as CALLER_STAMPED_CAPABILITIES, In as RECORD_MAX_DATA_BYTES, It as parseSettingsArrayAdoptsFrom, Jn as forgetKnownSecret, Jt as RecordKindNameSchema, Kn as MIN_SCRUBBED_LENGTH, Kr as makeSecretMarker, Kt as RecordIndexSchema, L as withoutCallerStamp, Ln as RECORD_MAX_INDEXES, Lt as settingsArrayAdoptsFrom, Mn as RECORD_DATABASES, N as deviceOpsCapability, Nn as RECORD_DEFAULT_MAX_DATA_BYTES, On as recordsErrorFromMessage, P as viewerUiCapability, Pn as RECORD_DELETE_BATCH, Pt as makeInMemoryRecords, Qn as shortSecretRefHash, Qt as defineRecordKinds, Rn as RECORD_MAX_INDEX_FIELDS, Rt as SETTINGS_BROKERS_ADOPTS_PREFIX, Sn as RecordUniqueViolationError, Sr as formatSecretScope, Tn as UnindexedFilterError, Tr as normalizeSecretOwner, Un as resolveSecretViewsIn, Ur as isSecretFieldView, Ut as createRecordsAccess, Vn as RECORD_SETTINGS_MAX_ROWS, Vr as classifySecretWrite, Vt as defineEntryKind, Wn as REVALIDATE_AFTER_MS, Wr as isSecretMarker, Wt as EntryDescriptorSchema, X as expandCapMethods, Xn as registerKnownSecret, Xt as assertValidDeclaration, Yn as knownSecretCount, Yt as RecordRetentionSchema, Zn as scrubKnownSecrets, Zt as declarationsOf, _ as readErrorI18n, _n as PlaintextSecretError, an as recordSecretRef, b as isDeviceScopedCap, bn as RecordSecretUnavailableError, br as arrayItemFieldPath, c as asString, cn as collectZodSecretPaths, ct as ReadinessTimeoutError, d as parseJsonUnknown, dn as BatchTooLargeError, dt as scopeKey, en as collectSecretLeaves, er as PEER_BYTES_MAX_OUTSTANDING, f as hfModelUrl, fn as DeclarationRefusedError, g as ErrorI18nPayloadSchema, gn as NoCallerError, hn as InvalidRecordError, in as recordSecretCollection, ir as DATAPLANE_SECRET_HEADER, it as readNodePin, jn as RECORD_CLASSES, kn as RECORD_BATCH_MAX, kr as createEvent, ln as isZodSecret, lr as normalizeAddonInitResult, mn as ForeignSecretMarkerError, nn as parseSecretPath, nr as PEER_BYTES_TICKET_TTL_MS, o as asJsonObject, on as secretArrayPrefixes, or as DisposerChain, ot as MODEL_FORMATS, p as BOOT_RECOVERY_BACKOFF_MS, pn as FilterRequiredError, qn as clearKnownSecrets, qr as toSecretFieldView, qt as RecordKindDeclarationSchema, r as maskUrlCredentials, rn as recordArrayItemPath, rt as nodePin, sr as BaseAddon, st as ReadinessRegistry, t as sleep, tn as mapSecretLeaves, tr as PEER_BYTES_STALL_MS, un as AdoptionPendingError, vn as RECORDS_ERROR_CODES, w as createEventBusSliceSource, wn as RevConflictError, wr as isSecretRef, x as createDeviceProxy, xn as RecordTooLargeError, xr as buildSecretRef, y as DEVICE_SCOPED_CAPS, yn as RecordNotFoundError, yr as SECRET_REF_SCHEME, zn as RECORD_QUERY_MAX, zt as parseSettingsBrokersAdoptsFrom } from "./sleep-bZIhUvjd.mjs";
 import { t as EventCategory } from "./event-category-BvOFi6PY.mjs";
 import { a as DeviceType, t as errMsg } from "./err-msg--2RrYiLO.mjs";
 //#region src/generated/cap-input-defaults.ts
@@ -15,7 +15,7 @@ import { a as DeviceType, t as errMsg } from "./err-msg--2RrYiLO.mjs";
 * Plain data, zero Zod: a forked runner must not import the schema barrel
 * (~144MB RSS per runner — D28).
 *
-* Coverage: 27 caps, 69 methods with defaults.
+* Coverage: 29 caps, 71 methods with defaults.
 */
 var CAP_INPUT_DEFAULTS = Object.freeze({
 	"addons": { "getLogs": { "limit": 100 } },
@@ -236,7 +236,9 @@ var CAP_INPUT_DEFAULTS = Object.freeze({
 		},
 		"setDeviceConfig": { "config": { "__nested__": { "bands": [] } } }
 	},
+	"records": { "query": { "limit": 100 } },
 	"storage": { "upsertLocation": { "isSystem": false } },
+	"storage-admin": { "readRecords": { "limit": 100 } },
 	"storage-provider": {
 		"beginDownload": { "location": { "__nested__": { "isSystem": false } } },
 		"beginUpload": { "location": { "__nested__": { "isSystem": false } } },
@@ -2132,4 +2134,4 @@ var CAP_STATE_LEAVES = Object.freeze({
 	]
 });
 //#endregion
-export { BOOT_RECOVERY_BACKOFF_MS, BaseAddon, CAP_ADVANCE_FIELDS, CAP_INPUT_DEFAULTS, CAP_STATE_LEAVES, COLLECTION_ARRAY_METHODS, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DEVICE_SCOPED_CAPS, DeviceType, DisposerChain, ErrorI18nPayloadSchema, EventCategory, HF_REPO, MIN_SCRUBBED_LENGTH, MODEL_FORMATS, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, PROVIDER_OPTIONAL_METHODS, REVALIDATE_AFTER_MS, ReadinessRegistry, ReadinessTimeoutError, SECRET_CLEAR, SECRET_REF_SCHEME, adminUiCapability, arrayItemFieldPath, asJsonObject, asString, buildSecretRef, classifySecretWrite, clearKnownSecrets, collectZodSecretPaths, createDeviceProxy, createEvent, createEventBusSliceSource, createSecretsAccess, describeCustomActions, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods, forgetKnownSecret, formatSecretScope, globalSecretScope, hfModelUrl, isCollectionArrayMethodName, isDeviceScopedCap, isProviderOptionalMethodName, isSecretClear, isSecretFieldView, isSecretMarker, isSecretMarkerLike, isSecretRef, isZodSecret, knownSecretCount, makeSecretMarker, maskUrlCredentials, nodePin, normalizeAddonInitResult, normalizeSecretOwner, parseJsonUnknown, parseSecretRef, readErrorI18n, readNodePin, registerKnownSecret, resolveSecretViewsIn, scopeKey, scrubKnownSecrets, shortSecretRefHash, sleep, toSecretFieldView, viewerUiCapability, withCapInputDefaults };
+export { AdoptionPendingError, BOOT_RECOVERY_BACKOFF_MS, BaseAddon, BatchTooLargeError, CALLER_STAMPED_CAPABILITIES, CAP_ADVANCE_FIELDS, CAP_INPUT_DEFAULTS, CAP_STATE_LEAVES, COLLECTION_ARRAY_METHODS, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DEVICE_SCOPED_CAPS, DeclarationRefusedError, DeviceType, DisposerChain, EntryDescriptorSchema, ErrorI18nPayloadSchema, EventCategory, FilterRequiredError, ForeignSecretMarkerError, HF_REPO, InvalidRecordError, MIN_SCRUBBED_LENGTH, MODEL_FORMATS, NoCallerError, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, PROVIDER_OPTIONAL_METHODS, PlaintextSecretError, RECORDS_ERROR_CODES, RECORD_BATCH_MAX, RECORD_BATCH_MAX_BYTES, RECORD_CLASSES, RECORD_DATABASES, RECORD_DEFAULT_MAX_DATA_BYTES, RECORD_DELETE_BATCH, RECORD_ID_MAX_LENGTH, RECORD_MAX_DATA_BYTES, RECORD_MAX_INDEXES, RECORD_MAX_INDEX_FIELDS, RECORD_QUERY_MAX, RECORD_SECRET_COLLECTION_PREFIX, RECORD_SETTINGS_MAX_ROWS, RECORD_SWEEP_INTERVAL_MS, REMOVE_LEAF, REVALIDATE_AFTER_MS, ReadinessRegistry, ReadinessTimeoutError, RecordFieldPathSchema, RecordIndexSchema, RecordKindDeclarationSchema, RecordKindNameSchema, RecordNotFoundError, RecordRetentionSchema, RecordSecretUnavailableError, RecordTooLargeError, RecordUniqueViolationError, RecordsError, RevConflictError, SECRET_CLEAR, SECRET_REF_SCHEME, SETTINGS_ARRAY_ADOPTS_PREFIX, SETTINGS_BROKERS_ADOPTS_PREFIX, UnindexedFilterError, UnknownRecordKindError, addonSliceHandleApi, adminUiCapability, arrayItemFieldPath, asJsonObject, asRecordsError, asString, assertValidDeclaration, buildSecretRef, classifySecretWrite, clearKnownSecrets, collectSecretLeaves, collectZodSecretPaths, createDeviceProxy, createEvent, createEventBusSliceSource, createRecordsAccess, createSecretsAccess, declarationsOf, defineEntryKind, defineRecordKinds, describeCustomActions, deviceOpsCapability, emitReadiness, entryBody, errMsg, expandCapMethods, forgetKnownSecret, formatSecretScope, globalSecretScope, hfModelUrl, isCollectionArrayMethodName, isDeviceScopedCap, isProviderOptionalMethodName, isSecretClear, isSecretFieldView, isSecretMarker, isSecretMarkerLike, isSecretRef, isZodSecret, knownSecretCount, makeInMemoryRecords, makeSecretMarker, mapSecretLeaves, maskUrlCredentials, nodePin, normalizeAddonInitResult, normalizeSecretOwner, parseJsonUnknown, parseSecretPath, parseSecretRef, parseSettingsArrayAdoptsFrom, parseSettingsBrokersAdoptsFrom, readErrorI18n, readNodePin, recordArrayItemPath, recordSecretCollection, recordSecretRef, recordsErrorFromMessage, registerKnownSecret, resolveSecretViewsIn, scopeKey, scrubKnownSecrets, secretArrayPrefixes, settingsArrayAdoptsFrom, settingsBrokersAdoptsFrom, shortSecretRefHash, sleep, toSecretFieldView, viewerUiCapability, withCapInputDefaults, withoutCallerStamp };

package/dist/capabilities/caller-stamp.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Every cap whose provider reads a `callerAddonId` in its input (the keychain's
+ * owner check, device-history's `not-owner`, records' owner).
+ *
+ * The stamp is set ONLY by the transport (`stampCallerAddonId`, or stated by a
+ * hub in-process caller). The generated HTTP/tRPC mount parses input with
+ * `.loose()`, so without this a session could add the key itself and act as
+ * another addon. The mount strips it for these caps.
+ */
+export declare const CALLER_STAMPED_CAPABILITIES: readonly string[];
+/** A copy of `input` without the caller stamp. Anything that is not a plain object passes through. */
+export declare function withoutCallerStamp<T>(input: T): T;

package/dist/capabilities/index.d.ts

@@ -45,7 +45,10 @@ export type { CustomModelDescriptor, ICustomModelRegistryProvider, ImportModelBu
 export { CustomModelDescriptorSchema, customModelRegistryCapability, ImportModelBundleInputSchema, ImportModelBundleResultSchema, ModelBundleFileSchema, } from './custom-model-registry.cap.js';
 export { type DataStoreEngineInfo, dataStoreProviderCapability, EngineInfoSchema as DataStoreEngineInfoSchema, type IDataStoreProvider, } from './data-store-provider.cap.js';
 export { type ArchiveSqliteSnapshot, ArchiveSqliteSnapshotSchema, DATABASE_SNAPSHOT_PARTIAL_SUFFIX, DATABASE_SNAPSHOT_SUFFIX, DATABASE_SNAPSHOT_TIMEOUT_MS, type DatabaseSnapshotRequest, DatabaseSnapshotRequestSchema, type DatabaseSnapshotResult, DatabaseSnapshotResultSchema, type DatabaseSnapshotTable, DatabaseSnapshotTableSchema, type DatabaseSnapshotTargets, DatabaseSnapshotTargetsSchema, type DatabaseSnapshotWritten, DatabaseSnapshotWrittenSchema, databaseSnapshotCapability, type IDatabaseSnapshotProvider, } from './database-snapshot.cap.js';
-export { type IStorageAdminProvider, STORAGE_ADMIN_MOVED_COLLECTIONS, STORAGE_ADMIN_SCOPED_BASES, type StorageTable, StorageTableSchema, storageAdminCapability, } from './storage-admin.cap.js';
+export { CALLER_STAMPED_CAPABILITIES, withoutCallerStamp } from './caller-stamp.js';
+export { type IStorageAdminProvider, STORAGE_ADMIN_MOVED_COLLECTIONS, STORAGE_ADMIN_SCOPED_BASES, type StorageKind, StorageKindSchema, type StorageTable, StorageTableSchema, storageAdminCapability, } from './storage-admin.cap.js';
+export { type DeclareKindResult, DeclareKindResultSchema, type IRecordsProvider, type RecordInput, RecordInputSchema, type RecordQueryInput, RecordQueryInputSchema, type RecordQueryResult, RecordQueryResultSchema, type RecordView, RecordViewSchema, type RecordWhere, RecordWhereSchema, type RecordWhereValue, RecordIdSchema, RecordBodySchema, RecordSecretRefsSchema, recordsCapability, } from './records.cap.js';
+export { type EntryKindInfo, EntryKindInfoSchema, type EntryView, EntryViewSchema, type IRecordEntriesProvider, recordEntriesCapability, } from './record-entries.cap.js';
 export { type IKeychainProvider, KEYCHAIN_MAX_REFS_PER_CALL, type KeychainResolveEntry, KeychainResolveEntrySchema, type KeychainResolveResult, KeychainResolveResultSchema, type KeychainSecretMeta, KeychainSecretMetaSchema, type KeychainState, KeychainStateSchema, type KeychainUnavailableReason, KeychainUnavailableReasonSchema, keychainCapability, } from './keychain.cap.js';
 export { type DeviceHistoryStatus, DeviceHistoryStatusSchema, type DeviceHistoryIngestResult, type DeviceHistoryKind, DeviceHistoryKindSchema, type DeviceHistoryQueryPoint, type DeviceHistoryRefusalReason, DeviceHistoryRefusalReasonSchema, type DeviceHistoryResolution, DeviceHistoryResolutionSchema, type DeviceHistorySeriesInfo, type DeviceHistorySubject, DeviceHistorySubjectSchema, type IDeviceHistoryProvider, deviceHistoryCapability, } from './device-history.cap.js';
 export { type DeviceCaStatus, DeviceCaStatusSchema, type DeviceCertificateSettings, DeviceCertificateSettingsSchema, deviceCredentialsCapability, type IDeviceCredentialsProvider, } from './device-credentials.cap.js';
@@ -293,6 +296,8 @@ import type { customModelRegistryCapability } from './custom-model-registry.cap.
 import type { dataStoreProviderCapability } from './data-store-provider.cap.js';
 import type { databaseSnapshotCapability } from './database-snapshot.cap.js';
 import type { storageAdminCapability } from './storage-admin.cap.js';
+import type { recordsCapability } from './records.cap.js';
+import type { recordEntriesCapability } from './record-entries.cap.js';
 import type { deviceHistoryCapability } from './device-history.cap.js';
 import type { keychainCapability } from './keychain.cap.js';
 import type { keychainAdminCapability } from './keychain-admin.cap.js';
@@ -422,6 +427,6 @@ import type { trainingProviderCapability } from './training-provider.cap.js';
 import type { zoneAnalyticsCapability } from './zone-analytics.cap.js';
 import type { zoneRulesCapability } from './zone-rules.cap.js';
 import type { zonesCapability } from './zones.cap.js';
-type AnyCapability = typeof streamSignalsCapability | typeof addonSettingsCapability | typeof alertsCapability | typeof storageCapability | typeof storageMigrationCapability | typeof storageProviderCapability | typeof storageEvictableCapability | typeof storageOccupancyCapability | typeof filesystemBrowseCapability | typeof backupCapability | typeof terminalSessionCapability | typeof settingsStoreCapability | typeof dataStoreProviderCapability | typeof databaseSnapshotCapability | typeof storageAdminCapability | typeof deviceHistoryCapability | typeof keychainCapability | typeof keychainAdminCapability | typeof deviceCredentialsCapability | typeof nodeCertificatesCapability | typeof logChannelsCapability | typeof logDestinationCapability | typeof loadContributionCapability | typeof failureContributionCapability | typeof deviceRemovalHookCapability | typeof adminUiCapability | typeof viewerUiCapability | typeof ssoBridgeCapability | typeof userPasskeysCapability | typeof smtpProviderCapability | typeof mqttBrokerCapability | typeof brokerCapability | typeof deviceAdoptionCapability | typeof deviceAdminLinkCapability | typeof deviceExportCapability | typeof addonPagesCapability | typeof addonPagesSourceCapability | typeof addonWidgetsCapability | typeof addonWidgetsSourceCapability | typeof customModelRegistryCapability | typeof modelDistributorCapability | typeof modelConvertCapability | typeof addonRoutesCapability | typeof streamBrokerCapability | typeof decoderCapability | typeof webrtcSessionCapability | typeof cameraStreamsCapability | typeof calendarSourceCapability | typeof calendarsCapability | typeof motionDetectionCapability | typeof pipelineExecutorCapability | typeof detectionPipelineCapability | typeof cameraPipelineConfigCapability | typeof pipelineRunnerCapability | typeof pipelineOrchestratorCapability | typeof audioAnalyzerCapability | typeof audioAnalysisCapability | typeof audioCodecCapability | typeof embeddingEncoderCapability | typeof vectorStoreCapability | typeof deviceProviderCapability | typeof deviceManagerCapability | typeof deviceStateCapability | typeof authProviderCapability | typeof loginMethodCapability | typeof networkAccessCapability | typeof turnProviderCapability | typeof snapshotCapability | typeof llmCapability | typeof llmRuntimeCapability | typeof notificationOutputCapability | typeof composerCapability | typeof coreBlocksCapability | typeof notificationRulesCapability | typeof pipelineAnalyticsCapability | typeof metricsProviderCapability | typeof ptzCapability | typeof ptzAutotrackCapability | typeof navigationCapability | typeof consumablesCapability | typeof connectionTestCapability | typeof rebootCapability | typeof deviceDiscoveryCapability | typeof brightnessCapability | typeof colorCapability | typeof climateControlCapability | typeof coverCapability | typeof valveCapability | typeof humidifierCapability | typeof waterHeaterCapability | typeof weatherCapability | typeof imageCapability | typeof lockControlCapability | typeof vacuumControlCapability | typeof petFeederCapability | typeof lawnMowerControlCapability | typeof fanControlCapability | typeof controlCapability | typeof notifierCapability | typeof mediaPlayerCapability | typeof alarmPanelCapability | typeof presenceCapability | typeof scriptRunnerCapability | typeof automationControlCapability | typeof motionTriggerCapability | typeof zonesCapability | typeof zoneRulesCapability | typeof trainingCapability | typeof trainingProviderCapability | typeof zoneAnalyticsCapability | typeof audioMetricsCapability | typeof motionCapability | typeof contactCapability | typeof floodCapability | typeof smokeCapability | typeof carbonMonoxideCapability | typeof gasCapability | typeof tamperCapability | typeof vibrationCapability | typeof connectivityCapability | typeof binaryCapability | typeof temperatureSensorCapability | typeof humiditySensorCapability | typeof ambientLightSensorCapability | typeof pressureSensorCapability | typeof powerMeterCapability | typeof airQualitySensorCapability | typeof numericSensorCapability | typeof enumSensorCapability | typeof recordingCapability | typeof recordingArchiveCapability | typeof recordingExportCapability | typeof recordingSignalCapability | typeof deviceOpsCapability | typeof platformProbeCapability | typeof localNetworkCapability | typeof meshNetworkCapability | typeof userManagementCapability | typeof systemCapability | typeof networkQualityCapability | typeof toastCapability | typeof nodesCapability | typeof serverManagementCapability | typeof integrationsCapability | typeof addonsCapability | typeof oauthIntegrationCapability | typeof oidcConnectionsCapability | typeof streamParamsCapability | typeof streamCatalogCapability | typeof motionZonesCapability | typeof cameraGridLayoutCapability | typeof sceneMonitorCapability | typeof privacyMaskCapability | typeof dayNightCapability | typeof recordingOnboardCapability | typeof imageSettingsCapability | typeof osdCapability | typeof osdManagerCapability | typeof accessoriesCapability | typeof batteryCapability | typeof networkLinkCapability | typeof buttonCapability | typeof cameraCredentialsCapability | typeof deviceStatusCapability | typeof doorbellCapability | typeof eventEmitterCapability | typeof faceGalleryCapability | typeof featureProbeCapability | typeof intercomCapability | typeof nativeObjectDetectionCapability | typeof plateGalleryCapability | typeof switchCapability | typeof updateCapability | typeof videoclipsCapability | typeof deviceExtensionCapability;
+type AnyCapability = typeof streamSignalsCapability | typeof addonSettingsCapability | typeof alertsCapability | typeof storageCapability | typeof storageMigrationCapability | typeof storageProviderCapability | typeof storageEvictableCapability | typeof storageOccupancyCapability | typeof filesystemBrowseCapability | typeof backupCapability | typeof terminalSessionCapability | typeof settingsStoreCapability | typeof dataStoreProviderCapability | typeof databaseSnapshotCapability | typeof storageAdminCapability | typeof recordsCapability | typeof recordEntriesCapability | typeof deviceHistoryCapability | typeof keychainCapability | typeof keychainAdminCapability | typeof deviceCredentialsCapability | typeof nodeCertificatesCapability | typeof logChannelsCapability | typeof logDestinationCapability | typeof loadContributionCapability | typeof failureContributionCapability | typeof deviceRemovalHookCapability | typeof adminUiCapability | typeof viewerUiCapability | typeof ssoBridgeCapability | typeof userPasskeysCapability | typeof smtpProviderCapability | typeof mqttBrokerCapability | typeof brokerCapability | typeof deviceAdoptionCapability | typeof deviceAdminLinkCapability | typeof deviceExportCapability | typeof addonPagesCapability | typeof addonPagesSourceCapability | typeof addonWidgetsCapability | typeof addonWidgetsSourceCapability | typeof customModelRegistryCapability | typeof modelDistributorCapability | typeof modelConvertCapability | typeof addonRoutesCapability | typeof streamBrokerCapability | typeof decoderCapability | typeof webrtcSessionCapability | typeof cameraStreamsCapability | typeof calendarSourceCapability | typeof calendarsCapability | typeof motionDetectionCapability | typeof pipelineExecutorCapability | typeof detectionPipelineCapability | typeof cameraPipelineConfigCapability | typeof pipelineRunnerCapability | typeof pipelineOrchestratorCapability | typeof audioAnalyzerCapability | typeof audioAnalysisCapability | typeof audioCodecCapability | typeof embeddingEncoderCapability | typeof vectorStoreCapability | typeof deviceProviderCapability | typeof deviceManagerCapability | typeof deviceStateCapability | typeof authProviderCapability | typeof loginMethodCapability | typeof networkAccessCapability | typeof turnProviderCapability | typeof snapshotCapability | typeof llmCapability | typeof llmRuntimeCapability | typeof notificationOutputCapability | typeof composerCapability | typeof coreBlocksCapability | typeof notificationRulesCapability | typeof pipelineAnalyticsCapability | typeof metricsProviderCapability | typeof ptzCapability | typeof ptzAutotrackCapability | typeof navigationCapability | typeof consumablesCapability | typeof connectionTestCapability | typeof rebootCapability | typeof deviceDiscoveryCapability | typeof brightnessCapability | typeof colorCapability | typeof climateControlCapability | typeof coverCapability | typeof valveCapability | typeof humidifierCapability | typeof waterHeaterCapability | typeof weatherCapability | typeof imageCapability | typeof lockControlCapability | typeof vacuumControlCapability | typeof petFeederCapability | typeof lawnMowerControlCapability | typeof fanControlCapability | typeof controlCapability | typeof notifierCapability | typeof mediaPlayerCapability | typeof alarmPanelCapability | typeof presenceCapability | typeof scriptRunnerCapability | typeof automationControlCapability | typeof motionTriggerCapability | typeof zonesCapability | typeof zoneRulesCapability | typeof trainingCapability | typeof trainingProviderCapability | typeof zoneAnalyticsCapability | typeof audioMetricsCapability | typeof motionCapability | typeof contactCapability | typeof floodCapability | typeof smokeCapability | typeof carbonMonoxideCapability | typeof gasCapability | typeof tamperCapability | typeof vibrationCapability | typeof connectivityCapability | typeof binaryCapability | typeof temperatureSensorCapability | typeof humiditySensorCapability | typeof ambientLightSensorCapability | typeof pressureSensorCapability | typeof powerMeterCapability | typeof airQualitySensorCapability | typeof numericSensorCapability | typeof enumSensorCapability | typeof recordingCapability | typeof recordingArchiveCapability | typeof recordingExportCapability | typeof recordingSignalCapability | typeof deviceOpsCapability | typeof platformProbeCapability | typeof localNetworkCapability | typeof meshNetworkCapability | typeof userManagementCapability | typeof systemCapability | typeof networkQualityCapability | typeof toastCapability | typeof nodesCapability | typeof serverManagementCapability | typeof integrationsCapability | typeof addonsCapability | typeof oauthIntegrationCapability | typeof oidcConnectionsCapability | typeof streamParamsCapability | typeof streamCatalogCapability | typeof motionZonesCapability | typeof cameraGridLayoutCapability | typeof sceneMonitorCapability | typeof privacyMaskCapability | typeof dayNightCapability | typeof recordingOnboardCapability | typeof imageSettingsCapability | typeof osdCapability | typeof osdManagerCapability | typeof accessoriesCapability | typeof batteryCapability | typeof networkLinkCapability | typeof buttonCapability | typeof cameraCredentialsCapability | typeof deviceStatusCapability | typeof doorbellCapability | typeof eventEmitterCapability | typeof faceGalleryCapability | typeof featureProbeCapability | typeof intercomCapability | typeof nativeObjectDetectionCapability | typeof plateGalleryCapability | typeof switchCapability | typeof updateCapability | typeof videoclipsCapability | typeof deviceExtensionCapability;
 export type CapabilityName = AnyCapability['name'];
 export type ITypedReadinessRegistry = IReadinessRegistry<CapabilityName>;

package/dist/capabilities/record-entries.cap.d.ts

@@ -0,0 +1,84 @@
+import { z } from 'zod';
+import { type InferProvider } from './capability-definition.js';
+/**
+ * record-entries - the ONE admin surface for every list of user-created entries
+ * (D881): notification targets, brokers, LLM profiles, anything an addon
+ * declares as an ENTRY kind (`entry: { title }` in `defineRecordKinds`).
+ *
+ * The UI is generic. `listEntryKinds` hands it, per kind, the JSON Schema of
+ * the entry body with `secret: true` on every credential field, so a password
+ * field is derived from the schema and never from a name. `putEntry` takes the
+ * redaction token for an untouched secret (the stored value is kept), a string
+ * for a new one, and the clear instruction to remove one. A read never carries
+ * a secret value, and a locked keychain refuses the write with
+ * `records/secret-unavailable` instead of storing plaintext.
+ *
+ * Hub-only, served in-process (it acts for each entry's owner on the keychain).
+ */
+export declare const EntryKindInfoSchema: z.ZodObject<{
+    owner: z.ZodString;
+    kind: z.ZodString;
+    title: z.ZodString;
+    nameField: z.ZodString;
+    fields: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    secretPaths: z.ZodArray<z.ZodString>;
+    rows: z.ZodNumber;
+}, z.core.$strip>;
+export type EntryKindInfo = z.infer<typeof EntryKindInfoSchema>;
+export declare const EntryViewSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    rev: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+    data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>;
+export type EntryView = z.infer<typeof EntryViewSchema>;
+export declare const recordEntriesCapability: {
+    readonly name: 'record-entries';
+    readonly scope: 'system';
+    readonly mode: 'singleton';
+    readonly methods: {
+        readonly listEntryKinds: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
+            kinds: z.ZodArray<z.ZodObject<{
+                owner: z.ZodString;
+                kind: z.ZodString;
+                title: z.ZodString;
+                nameField: z.ZodString;
+                fields: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+                secretPaths: z.ZodArray<z.ZodString>;
+                rows: z.ZodNumber;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
+        readonly listEntries: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            owner: z.ZodString;
+            kind: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            entries: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                name: z.ZodString;
+                rev: z.ZodNumber;
+                updatedAt: z.ZodNumber;
+                data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, import("./capability-definition.js").CapabilityMethodKind>;
+        /** Create (no `id`: one is generated) or edit. `ifRev` guards an edit against a concurrent one. */
+        readonly putEntry: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            owner: z.ZodString;
+            kind: z.ZodString;
+            id: z.ZodOptional<z.ZodString>;
+            data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            ifRev: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            rev: z.ZodNumber;
+        }, z.core.$strip>, "mutation">;
+        readonly deleteEntry: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            owner: z.ZodString;
+            kind: z.ZodString;
+            id: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            deleted: z.ZodBoolean;
+        }, z.core.$strip>, "mutation">;
+    };
+};
+export type IRecordEntriesProvider = InferProvider<typeof recordEntriesCapability>;