@camstack/system 1.2.157 → 1.2.160

package/dist/builtins/storage-orchestrator/storage-orchestrator.service.d.ts

@@ -1,4 +1,4 @@
-import { IScopedLogger, IStorageProviderImpl, StorageLocation, StorageLocationDeclaration, StorageLocationRef } from '@camstack/types';
+import { IScopedLogger, IStorageProviderImpl, StorageAccess, StorageLocation, StorageLocationDeclaration, StorageLocationRef } from '@camstack/types';
 import { ILocationStore } from './location-store.js';
 export interface ListLocationsFilter {
     readonly type?: string;
@@ -14,6 +14,12 @@ export interface ListLocationsFilter {
  */
 export interface DeclarationSource {
     cardinalityOf(id: string): 'single' | 'multi' | null;
+    /**
+     * Effective {@link StorageAccess} of a declared location kind — the
+     * constraint that decides which providers may back it. `null` = the kind
+     * was never declared. See `upsertLocation`'s remote-provider refusal.
+     */
+    accessOf(id: string): StorageAccess | null;
     list(): readonly StorageLocationDeclaration[];
 }
 /**
@@ -177,6 +183,25 @@ export declare class StorageOrchestratorService {
      * `__tests__/storage-orchestrator-persistence.spec.ts`.
      */
     attachStore(store: ILocationStore): Promise<void>;
+    /**
+     * Shout about a persisted row that is BOTH the type default and disabled.
+     *
+     * `upsertLocation` cannot produce this (`resolveEnabled` force-enables a
+     * default) and neither can `setDefaultLocations` — but hydrate writes rows
+     * straight into the map without either, so a hand-edited store, a partial
+     * migration or a row written by another build can. It matters because every
+     * bare-type ref resolves through {@link getDefaultLocation}: on such a row
+     * `storage.write({ location: 'eventMedia' })` and the migration coordinator's
+     * drain destination both point at a disk the operator turned off. That is the
+     * one thing this model must never do silently.
+     *
+     * Reported, never repaired: flipping an operator's flag back on at boot would
+     * be the system overruling the switch instead of obeying it. The coordinator
+     * refuses the drain (`storage-migration-coordinator.drain`); the bare-ref read
+     * path is deliberately left working, because narrowing a READ is a worse bug
+     * than the one this line reports.
+     */
+    private reportDisabledDefaults;
     /**
      * Inject the declaration-driven cardinality source. Called once by the
      * addon after the kernel aggregates every addon's `storageLocations`
@@ -252,6 +277,36 @@ export declare class StorageOrchestratorService {
      * implicitly-demoted siblings are persisted before the in-memory map
      * mutation returns. Persistence errors propagate to the caller.
      */
+    /**
+     * Refuse a `(location kind, provider)` pair the kind cannot use.
+     *
+     * The rule, in one line: a `'local-path'` kind requires a provider whose
+     * `getProviderInfo().nodeLocal` is `true`.
+     *
+     * `nodeLocal` is the honest name for "this provider's `resolve` returns a
+     * path on the filesystem of the node that resolved it". The
+     * `storage-provider` cap's own discriminated union already forces every
+     * provider to declare it, and all four remote providers declare `false`, so
+     * no new cap surface is needed to ask the question.
+     *
+     * Three-valued on purpose. Only a POSITIVE `false` refuses:
+     *  - `true`      → node-local, always fine.
+     *  - `false`     → the provider is known and known to be remote. REFUSE.
+     *  - `undefined` → the provider has not registered yet (early boot, an addon
+     *    still loading). That is "unknown", not "remote", and a read that could
+     *    not be made must never destroy work (D49) — the system seed runs
+     *    through this path before any provider registers. Allowed, and logged,
+     *    so the allowance is never silent.
+     *
+     * The DECLARATION side is read the same way. A kind the registry does not
+     * know is `local-path` (fail-closed: an unknown kind is not a permissive
+     * one), but NO REGISTRY AT ALL is a different statement — nothing has been
+     * loaded, so nothing can be concluded about any kind. The addon injects the
+     * registry inside `onInitialize`, before the `storage` cap is mounted, so
+     * there is no window in which an operator upsert sees this branch; a service
+     * constructed without one is the in-memory/early-boot path.
+     */
+    private refuseIncompatibleProvider;
     upsertLocation(input: Omit<StorageLocation, 'createdAt' | 'updatedAt'>): StorageLocation;
     /**
      * Remove a location. Refuses to remove the default of a type unless a

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CDgIzo82.js");
+const require_dist = require("../../dist-CcvXUhHK.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { Kt as hydrateSchema, Ot as errMsg, kt as BaseAddon } from "../../dist-LvKus-mT.mjs";
+import { Mt as BaseAddon, Yt as hydrateSchema, jt as errMsg } from "../../dist-DKs---Vx.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CDgIzo82.js");
+const require_dist = require("../../dist-CcvXUhHK.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { kt as BaseAddon, rt as logDestinationCapability } from "../../dist-LvKus-mT.mjs";
+import { Mt as BaseAddon, ot as logDestinationCapability } from "../../dist-DKs---Vx.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";