chore(console): regenerate the SDUI manifest and lockstep record at objectui 616df6598b42

The pin move's second half: node scripts/gen-sdui-manifest-node.mjs over the
tree pnpm objectui:build left at .cache/objectui-616df6598b42 (107 components;
list-view publishes requiredPermissions and addRecord), and
OBJECTUI_ROOT=.cache/objectui-616df6598b42 pnpm gen:sdui-lockstep (both
blobs unchanged, so no parser port is owed).

Claude-Session: https://claude.ai/code/session_01FM29ZqLTrnPNXxijioZwMp
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

packages/sdui-parser/objectui-lockstep.json

@@ -6,8 +6,8 @@
   ],
   "objectui": {
     "repo": "https://github.com/objectstack-ai/objectui.git",
-    "rev": "12dc7b47c340d9bd80b35406d890c2d27c8017dc",
-    "revDate": "2026-10-19T20:08:18+00:00",
+    "rev": "616df6598b429d2b3687301a2041198928e68971",
+    "revDate": "2026-10-20T07:14:48+00:00",
     "source": "packages/sdui-parser/src",
     "files": [
       "packages/sdui-parser/src/body-dialect.ts",
@@ -21,7 +21,7 @@
       "packages/sdui-parser/src/validate.ts"
     ]
   },
-  "recordedAgainstPin": "12dc7b47c340d9bd80b35406d890c2d27c8017dc",
+  "recordedAgainstPin": "616df6598b429d2b3687301a2041198928e68971",
   "grammarRegion": {
     "file": "packages/sdui-parser/src/parse.ts",
     "delimiter": "/* ---------------------- the JS literal subset (#6614) ---------------------- */",

scripts/sdui-manifest.record.json

@@ -11,12 +11,12 @@
     "a pin bump without regeneration goes RED there — that is the anti-rot half of the freshness gate.",
     "Regenerate + re-record: pnpm objectui:build && node scripts/gen-sdui-manifest-node.mjs"
   ],
-  "objectuiSha": "12dc7b47c340d9bd80b35406d890c2d27c8017dc",
+  "objectuiSha": "616df6598b429d2b3687301a2041198928e68971",
   "source": "built-tree",
-  "modulesRoot": ".cache/objectui-12dc7b47c340/apps/console",
+  "modulesRoot": ".cache/objectui-616df6598b42/apps/console",
   "objectuiWorkspaceVersion": "17.7.0",
   "generator": "scripts/gen-sdui-manifest-node.mjs",
-  "generatedAt": "2026-10-19",
-  "sha256": "b7a53e34856fc4b34c5e615aaf62e149361b92ba6936290d9e1e6cbcbd068bf5",
+  "generatedAt": "2026-10-20",
+  "sha256": "d1fde278ffd643900aba9e8fcf834d35a9c345246709f1667ae71618eaad109c",
   "components": 107
 }

sdui.manifest.json

@@ -270,6 +270,12 @@
           ],
           "description": "One line about the list, drawn as the toolbar's info control (its tooltip and accessible name). A plain string, or an inline per-locale map resolved against the display locale. `appearance.showDescription: false` hides it."
         },
+        {
+          "name": "requiredPermissions",
+          "type": "array",
+          "of": "string",
+          "description": "Capabilities the viewer must ALL hold to see this list, the names permission sets grant through `systemPermissions`. A viewer missing one sees an insufficient-permissions notice in place of the list, and no records are queried. Absent or empty: no gate."
+        },
         {
           "name": "userFilters",
           "type": "object",
@@ -280,6 +286,11 @@
           "type": "object",
           "description": "Which toolbar controls the user gets, the spec's `UserActionsConfig` of per-control toggles: a control set to `false` (for example `sort: false`) is taken off the toolbar, and the controls it does not name stay."
         },
+        {
+          "name": "addRecord",
+          "type": "object",
+          "description": "The Add button, the spec's `AddRecordConfig`. The spec row declares `enabled` default `true` and `position` default `\"bottom\"`; the renderer does not apply those defaults: it draws the button only for an explicit `enabled: true`, and places an absent `position` at the top (objectui#13099 owns that gap). `position` places it: `\"top\"` (the toolbar), `\"bottom\"` (under the list) or `\"both\"`. A click opens the create form for the listed object, the one the object list's New opens: the record-form overlay, or the full-page create for an object whose `editMode` is `page`. The button is withheld for a viewer who may not create, or whose create the object greys, and on a host that serves no create. `mode` and `formView` are not read. `userActions.addRecordForm: false` also takes the button off."
+        },
         {
           "name": "compactToolbar",
           "type": "boolean",