@camstack/system 1.2.157 → 1.2.160

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.d.ts

@@ -15,6 +15,19 @@ export declare class StorageOrchestratorAddon extends BaseAddon<StorageOrchestra
      * `undefined` (treated as node-agnostic).
      */
     private readonly nodeLocalByProvider;
+    /**
+     * Cached `providerId → secret config keys`, derived from each provider's own
+     * `configSchema` in the SAME refresh as `nodeLocalByProvider` — one
+     * `getProviderInfo()` round trip answers both questions.
+     *
+     * An absent providerId yields an EMPTY set, which redacts nothing. That is
+     * the one direction this cache can be wrong in, so it is worth saying why it
+     * is acceptable: the entry is populated at the same moment the provider
+     * becomes resolvable at all, so a location whose provider is unknown here
+     * cannot be dispatched to either — there is no window in which a credential
+     * is readable through a provider the orchestrator can otherwise use.
+     */
+    private readonly secretKeysByProvider;
     /**
      * Disposers run on `onShutdown` — currently the eventBus subscription
      * for `capability:provider-registered` events used by the lazy seed
@@ -61,6 +74,19 @@ export declare class StorageOrchestratorAddon extends BaseAddon<StorageOrchestra
      * the recorder so disk-pressure is a single core concern.
      */
     private resolveLocationThresholds;
+    /** Declared secret config keys for a provider; empty when unknown. */
+    private secretKeysFor;
+    /** A location with its provider's declared secrets replaced by the sentinel. */
+    private redacted;
+    /**
+     * Is this location backed by a provider that serves a genuine local
+     * filesystem? `true` / `false` / `undefined` — see
+     * `StorageOrchestratorService.refuseIncompatibleProvider` for why the
+     * unknown case is kept distinct rather than folded into either answer.
+     */
+    private providerIsNodeLocal;
+    /** See the call site in the `resolve` dispatch, and `access-guards.ts`. */
+    private refuseRemoteResolve;
     /** statfs capacity of a location's basePath, walking up to the nearest
      *  existing ancestor. Null for remote-node locations or unstattable paths. */
     private localCapacityOf;