@camstack/system 1.2.20 → 1.2.22

package/dist/builtins/backup-orchestrator/schedule-store.d.ts

@@ -0,0 +1,33 @@
+import { ISettingsBackend, TableSchema } from '@camstack/types';
+/**
+ * A backup schedule row.
+ *
+ * `locationIds` is the fan-out set (destination `backups` locations).
+ * `retentionCount` applies to every one of them for THIS schedule's
+ * runs. `dataSources` optionally narrows which top-level state
+ * locations get archived; empty = the orchestrator's full default set.
+ */
+export interface BackupSchedule {
+    readonly id: string;
+    readonly label: string;
+    readonly cron: string;
+    readonly enabled: boolean;
+    readonly locationIds: readonly string[];
+    readonly retentionCount: number;
+    readonly dataSources?: readonly string[];
+    /** ms-epoch of the last successful run. */
+    readonly lastRunAt?: number;
+}
+export declare const BACKUP_SCHEDULES_SCHEMA: TableSchema;
+export declare class BackupScheduleService {
+    private readonly backend;
+    private tableEnsured;
+    constructor(backend: ISettingsBackend);
+    initialize(): Promise<void>;
+    private ensureTable;
+    list(): Promise<readonly BackupSchedule[]>;
+    get(id: string): Promise<BackupSchedule | null>;
+    /** Replace-or-insert (delete + insert — mirrors the policy store). */
+    upsert(s: BackupSchedule): Promise<void>;
+    delete(id: string): Promise<void>;
+}

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-OQ1yU92D.js");
+const require_dist = require("../../dist-j49ewCPY.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { at as BaseAddon, z as logDestinationCapability } from "../../dist-DmQ6thmF.mjs";
+import { at as BaseAddon, z as logDestinationCapability } from "../../dist-C9_XdXl5.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-OQ1yU92D.js");
+const require_dist = require("../../dist-j49ewCPY.js");
 let _camstack_types_node = require("@camstack/types/node");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,4 +1,4 @@
-import { At as sleep, C as deviceStatusCapability, Ct as isDeviceConfigCap, D as enumerateSchemaFields, E as enumerateItemArrayFields, G as parseStreamParamsFormPatch, O as evaluateLinkExpression, S as deviceStateCapability, U as normalizeUnit, Y as setByPath, _ as applyTransform, a as CAP_NAMES_WITH_STATUS, at as BaseAddon, b as buildStreamParamsConfigSchema, dt as DeviceType, it as errMsg, j as getByPath, jt as EventCategory, l as STREAM_PROFILE_META, lt as DeviceFeature, mt as WELL_KNOWN_TAB_MAP, o as DeviceStatusSchema, rt as validateExpressionSource, t as ALL_CAPABILITY_DEFINITIONS, tt as toExpressionValue, ut as DeviceRole, x as deviceManagerCapability } from "../../dist-DmQ6thmF.mjs";
+import { At as sleep, C as deviceStatusCapability, Ct as isDeviceConfigCap, D as enumerateSchemaFields, E as enumerateItemArrayFields, G as parseStreamParamsFormPatch, O as evaluateLinkExpression, S as deviceStateCapability, U as normalizeUnit, Y as setByPath, _ as applyTransform, a as CAP_NAMES_WITH_STATUS, at as BaseAddon, b as buildStreamParamsConfigSchema, dt as DeviceType, it as errMsg, j as getByPath, jt as EventCategory, l as STREAM_PROFILE_META, lt as DeviceFeature, mt as WELL_KNOWN_TAB_MAP, o as DeviceStatusSchema, rt as validateExpressionSource, t as ALL_CAPABILITY_DEFINITIONS, tt as toExpressionValue, ut as DeviceRole, x as deviceManagerCapability } from "../../dist-C9_XdXl5.mjs";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-OQ1yU92D.js");
+const require_dist = require("../../dist-j49ewCPY.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { at as BaseAddon, dt as DeviceType, it as errMsg, jt as EventCategory, vt as createEvent, w as doorbellCapability } from "../../dist-DmQ6thmF.mjs";
+import { at as BaseAddon, dt as DeviceType, it as errMsg, jt as EventCategory, vt as createEvent, w as doorbellCapability } from "../../dist-C9_XdXl5.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-OQ1yU92D.js");
+const require_dist = require("../../dist-j49ewCPY.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { at as BaseAddon, z as logDestinationCapability } from "../../dist-DmQ6thmF.mjs";
+import { at as BaseAddon, z as logDestinationCapability } from "../../dist-C9_XdXl5.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-OQ1yU92D.js");
+const require_dist = require("../../dist-j49ewCPY.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { at as BaseAddon, f as UserRecordSchema, nt as userManagementCapability, r as ApiKeyRecordSchema, u as ScopedTokenSchema, v as authProviderCapability } from "../../dist-DmQ6thmF.mjs";
+import { at as BaseAddon, f as UserRecordSchema, nt as userManagementCapability, r as ApiKeyRecordSchema, u as ScopedTokenSchema, v as authProviderCapability } from "../../dist-C9_XdXl5.mjs";
 import * as crypto$1 from "node:crypto";
 import { randomUUID } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-OQ1yU92D.js");
+const require_dist = require("../../dist-j49ewCPY.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 //#region src/builtins/local-network/local-network.addon.ts

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { R as localNetworkCapability, at as BaseAddon, jt as EventCategory } from "../../dist-DmQ6thmF.mjs";
+import { R as localNetworkCapability, at as BaseAddon, jt as EventCategory } from "../../dist-C9_XdXl5.mjs";
 import * as os from "node:os";
 //#region src/builtins/local-network/local-network.addon.ts
 /**

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-OQ1yU92D.js");
+const require_dist = require("../../dist-j49ewCPY.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { at as BaseAddon, z as logDestinationCapability } from "../../dist-DmQ6thmF.mjs";
+import { at as BaseAddon, z as logDestinationCapability } from "../../dist-C9_XdXl5.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-OQ1yU92D.js");
+const require_dist = require("../../dist-j49ewCPY.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_child_process = require("node:child_process");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { H as metricsProviderCapability, at as BaseAddon, jt as EventCategory, vt as createEvent } from "../../dist-DmQ6thmF.mjs";
+import { H as metricsProviderCapability, at as BaseAddon, jt as EventCategory, vt as createEvent } from "../../dist-C9_XdXl5.mjs";
 import * as fs from "node:fs";
 import { execFile, execFileSync } from "node:child_process";
 import { promisify } from "node:util";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-OQ1yU92D.js");
+const require_dist = require("../../dist-j49ewCPY.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_child_process = require("node:child_process");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { J as scoreRuntimes, K as platformProbeCapability, T as enumerateInferenceDevices, at as BaseAddon, bt as emitReadiness, it as errMsg, jt as EventCategory } from "../../dist-DmQ6thmF.mjs";
+import { J as scoreRuntimes, K as platformProbeCapability, T as enumerateInferenceDevices, at as BaseAddon, bt as emitReadiness, it as errMsg, jt as EventCategory } from "../../dist-C9_XdXl5.mjs";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-OQ1yU92D.js");
+const require_dist = require("../../dist-j49ewCPY.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { at as BaseAddon, jt as EventCategory } from "../../dist-DmQ6thmF.mjs";
+import { at as BaseAddon, jt as EventCategory } from "../../dist-C9_XdXl5.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-OQ1yU92D.js");
+const require_dist = require("../../dist-j49ewCPY.js");
 let node_child_process = require("node:child_process");
 //#region src/builtins/snapshot/snapshot-coalescing.ts
 /**

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Z as snapshotCapability, at as BaseAddon, dt as DeviceType, et as streamQualityLabel, i as BatteryStatusSchema, it as errMsg, lt as DeviceFeature, wt as nodePin } from "../../dist-DmQ6thmF.mjs";
+import { Z as snapshotCapability, at as BaseAddon, dt as DeviceType, et as streamQualityLabel, i as BatteryStatusSchema, it as errMsg, lt as DeviceFeature, wt as nodePin } from "../../dist-C9_XdXl5.mjs";
 import { execFile } from "node:child_process";
 //#region src/builtins/snapshot/snapshot-coalescing.ts
 /**

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-OQ1yU92D.js");
+const require_dist = require("../../dist-j49ewCPY.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { $ as storageProviderCapability, A as filesystemBrowseCapability, at as BaseAddon } from "../../dist-DmQ6thmF.mjs";
+import { $ as storageProviderCapability, A as filesystemBrowseCapability, at as BaseAddon } from "../../dist-C9_XdXl5.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";
 import { basename, dirname, join, resolve, sep } from "node:path";

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-OQ1yU92D.js");
+const require_dist = require("../../dist-j49ewCPY.js");
 let node_crypto = require("node:crypto");
 let better_sqlite3 = require("better-sqlite3");
 better_sqlite3 = require_chunk.__toESM(better_sqlite3);

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,4 +1,4 @@
-import { Et as parseJsonUnknown, X as settingsStoreCapability, at as BaseAddon, c as RUNTIME_DEFAULTS, ht as asJsonObject, it as errMsg } from "../../dist-DmQ6thmF.mjs";
+import { Et as parseJsonUnknown, X as settingsStoreCapability, at as BaseAddon, c as RUNTIME_DEFAULTS, ht as asJsonObject, it as errMsg } from "../../dist-C9_XdXl5.mjs";
 import { randomUUID } from "node:crypto";
 import Database from "better-sqlite3";
 //#region src/builtins/sqlite-storage/sqlite-settings-backend.ts

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-OQ1yU92D.js");
+const require_dist = require("../../dist-j49ewCPY.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);
 let node_fs_promises = require("node:fs/promises");
@@ -378,8 +378,8 @@ var StorageOrchestratorService = class {
 		let added = 0;
 		const declById = new Map(input.declarations.map((d) => [d.id, d]));
 		const rootFor = (d) => {
-			const useMedia = d.defaultRoot === "media" && input.mediaBasePath;
-			return node_path.join(useMedia ? input.mediaBasePath : input.basePath, d.id);
+			const dedicated = d.defaultRoot === "media" ? input.mediaBasePath : d.defaultRoot === "backup" ? input.backupBasePath : void 0;
+			return node_path.join(dedicated ?? input.basePath, d.id);
 		};
 		for (const d of input.declarations) {
 			if (this.hasAnyLocationOfType(d.id)) continue;
@@ -1120,10 +1120,12 @@ var StorageOrchestratorAddon = class extends require_dist.BaseAddon {
 		this.service.setRegistry(registry);
 		this.service.pruneUndeclaredSystemLocations();
 		const mediaRoot = process.env.CAMSTACK_MEDIA_ROOT?.trim();
+		const backupRoot = process.env.CAMSTACK_BACKUP_ROOT?.trim();
 		this.service.seedDefaults({
 			providerId: "filesystem-storage",
 			basePath: this.ctx.nodeDataDir,
 			mediaBasePath: mediaRoot && mediaRoot.length > 0 ? mediaRoot : void 0,
+			backupBasePath: backupRoot && backupRoot.length > 0 ? backupRoot : void 0,
 			declarations: registry.list()
 		});
 		await this.service.backfillNodeIds(HUB_NODE_ID);

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Q as storageCapability, Tt as parseJsonObject, at as BaseAddon, d as StorageLocationTypeSchema } from "../../dist-DmQ6thmF.mjs";
+import { Q as storageCapability, Tt as parseJsonObject, at as BaseAddon, d as StorageLocationTypeSchema } from "../../dist-C9_XdXl5.mjs";
 import * as path$1 from "node:path";
 import * as fs from "node:fs/promises";
 import { buildStorageLocationRegistry } from "@camstack/system";
@@ -371,8 +371,8 @@ var StorageOrchestratorService = class {
 		let added = 0;
 		const declById = new Map(input.declarations.map((d) => [d.id, d]));
 		const rootFor = (d) => {
-			const useMedia = d.defaultRoot === "media" && input.mediaBasePath;
-			return path$1.join(useMedia ? input.mediaBasePath : input.basePath, d.id);
+			const dedicated = d.defaultRoot === "media" ? input.mediaBasePath : d.defaultRoot === "backup" ? input.backupBasePath : void 0;
+			return path$1.join(dedicated ?? input.basePath, d.id);
 		};
 		for (const d of input.declarations) {
 			if (this.hasAnyLocationOfType(d.id)) continue;
@@ -1113,10 +1113,12 @@ var StorageOrchestratorAddon = class extends BaseAddon {
 		this.service.setRegistry(registry);
 		this.service.pruneUndeclaredSystemLocations();
 		const mediaRoot = process.env.CAMSTACK_MEDIA_ROOT?.trim();
+		const backupRoot = process.env.CAMSTACK_BACKUP_ROOT?.trim();
 		this.service.seedDefaults({
 			providerId: "filesystem-storage",
 			basePath: this.ctx.nodeDataDir,
 			mediaBasePath: mediaRoot && mediaRoot.length > 0 ? mediaRoot : void 0,
+			backupBasePath: backupRoot && backupRoot.length > 0 ? backupRoot : void 0,
 			declarations: registry.list()
 		});
 		await this.service.backfillNodeIds(HUB_NODE_ID);

package/dist/builtins/storage-orchestrator/storage-orchestrator.service.d.ts

@@ -235,6 +235,12 @@ export declare class StorageOrchestratorService {
          * `basePath` like everything else.
          */
         readonly mediaBasePath?: string;
+        /**
+         * Root for declarations marked `defaultRoot: 'backup'` (the dedicated
+         * backup volume, `CAMSTACK_BACKUP_ROOT`, default `/backups`). Absent →
+         * backup declarations fall back to `basePath`.
+         */
+        readonly backupBasePath?: string;
         readonly declarations: readonly StorageLocationDeclaration[];
     }): void;
     /** Internal: check whether any location of the given type exists. */

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-OQ1yU92D.js");
+const require_dist = require("../../dist-j49ewCPY.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { St as hydrateSchema, at as BaseAddon, it as errMsg } from "../../dist-DmQ6thmF.mjs";
+import { St as hydrateSchema, at as BaseAddon, it as errMsg } from "../../dist-C9_XdXl5.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-OQ1yU92D.js");
+const require_dist = require("../../dist-j49ewCPY.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { at as BaseAddon, z as logDestinationCapability } from "../../dist-DmQ6thmF.mjs";
+import { at as BaseAddon, z as logDestinationCapability } from "../../dist-C9_XdXl5.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{dist-DmQ6thmF.mjs → dist-C9_XdXl5.mjs}

@@ -3567,16 +3567,23 @@ var StorageLocationDeclarationSchema = z.object({
 	* Which node root the seeded `<id>:default` instance is placed under on a
 	* FRESH install:
 	* - `'data'` (default) — the node's data dir (`CAMSTACK_DATA` / boot dir),
-	*   the appData volume. Right for small/durable data (backups, logs, models).
+	*   the appData volume. Right for small/durable data (logs, models).
 	* - `'media'` — the dedicated media volume (`CAMSTACK_MEDIA_ROOT`) when that
 	*   env is set, else falls back to the data root. Right for bulky, hot media
 	*   (recordings, event media) that should stay off the appData disk.
+	* - `'backup'` — the dedicated backup volume (`CAMSTACK_BACKUP_ROOT`, default
+	*   `/backups` in the image) so archives live on their own mount rather than
+	*   filling the appData disk. Falls back to the data root when unset.
 	*
 	* Only affects the seeded default's `basePath`; operators can repoint any
 	* location afterwards, and a `defaultsTo` slot inherits its parent's root
 	* regardless of this field. Absent (the common case) is treated as `'data'`.
 	*/
-	defaultRoot: z.enum(["data", "media"]).optional()
+	defaultRoot: z.enum([
+		"data",
+		"media",
+		"backup"
+	]).optional()
 });
 /** Friendly display labels for stream quality IDs. */
 var STREAM_QUALITY_LABELS = {
@@ -13573,6 +13580,41 @@ var LocationStatSchema = z.object({
 	present: z.boolean()
 });
 /**
+* A backup schedule — the N:M "entry" that binds one cron cadence to a
+* SET of destination locations. Supersedes the per-location cron on
+* `BackupDestinationPolicy`: an operator creates a schedule, picks the
+* `backups` locations it should write to, and the orchestrator fans a
+* single archive out to all of them when the cron fires.
+*
+* `retentionCount` is per-schedule (D-decision 2026-07-28): every
+* location targeted by this schedule keeps this many archives from
+* this schedule's runs.
+*
+* `dataSources` optionally narrows which top-level state locations
+* (db, addons, tls, …) are archived; omitted = the orchestrator's
+* default full set.
+*/
+var BackupScheduleSchema = z.object({
+	/** Stable id. Generated by the orchestrator on first upsert if absent. */
+	id: z.string(),
+	/** Operator-facing display name. */
+	label: z.string(),
+	/** 5-field POSIX cron. Empty = disabled cadence (kept for editing). */
+	cron: z.string(),
+	/** Master on/off toggle for the whole schedule. */
+	enabled: z.boolean(),
+	/** `backups`-location ids this schedule writes to (fan-out set). */
+	locationIds: z.array(z.string()).readonly(),
+	/** Archives kept per targeted location for this schedule. */
+	retentionCount: z.number().int().min(1).max(1e3),
+	/** Optional subset of source locations to include; omitted = all. */
+	dataSources: z.array(z.string()).readonly().optional(),
+	/** ms-epoch of last successful run. */
+	lastRunAt: z.number().optional(),
+	/** ms-epoch of next computed firing (read-only, filled on list). */
+	nextRunAt: z.number().optional()
+});
+/**
 * backup — singleton capability for backup management.
 *
 * Implemented by `local-backup` addon. Future providers (S3, rsync)
@@ -13599,7 +13641,14 @@ var backupCapability = {
 			/** Subset of registered `backup-destination` addon ids to write to. */
 			destinations: z.array(z.string()).optional(),
 			locations: z.array(z.string()).optional(),
-			label: z.string().optional()
+			label: z.string().optional(),
+			/**
+			* Per-run retention override applied to every targeted
+			* destination. Used by schedule-driven runs (per-entry
+			* retention). Omitted = each destination's own policy
+			* retention (manual runs).
+			*/
+			retentionCount: z.number().int().min(1).max(1e3).optional()
 		}).optional(), z.array(BackupEntrySchema).readonly(), {
 			kind: "mutation",
 			auth: "admin"
@@ -13686,7 +13735,36 @@ var backupCapability = {
 			ok: z.boolean(),
 			error: z.string().optional(),
 			nextRuns: z.array(z.number()).readonly()
-		}))
+		})),
+		/**
+		* List every backup schedule (the N:M entries), each with its
+		* computed `nextRunAt`. Powers the Schedules section of the
+		* admin-UI Backups page.
+		*/
+		listSchedules: method(z.void(), z.array(BackupScheduleSchema).readonly(), { auth: "admin" }),
+		/**
+		* Create or replace a schedule. An empty / absent `id` mints a new
+		* one; a present `id` replaces in place. `cron` is validated
+		* server-side; `locationIds` must reference existing `backups`
+		* locations (unknown ids are dropped with a warning).
+		*/
+		upsertSchedule: method(z.object({
+			id: z.string().optional(),
+			label: z.string(),
+			cron: z.string(),
+			enabled: z.boolean(),
+			locationIds: z.array(z.string()).readonly(),
+			retentionCount: z.number().int().min(1).max(1e3),
+			dataSources: z.array(z.string()).readonly().optional()
+		}), BackupScheduleSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/** Delete a schedule by id. Does not touch the target locations. */
+		deleteSchedule: method(z.object({ id: z.string() }), z.void(), {
+			kind: "mutation",
+			auth: "admin"
+		})
 	}
 };
 /**
@@ -23904,6 +23982,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"backup.deleteSchedule": {
+		capName: "backup",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"backup.getEntries": {
 		capName: "backup",
 		capScope: "system",
@@ -23934,6 +24018,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"backup.listSchedules": {
+		capName: "backup",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"backup.previewSchedule": {
 		capName: "backup",
 		capScope: "system",
@@ -23958,6 +24048,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"backup.upsertSchedule": {
+		capName: "backup",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"battery.wakeForStream": {
 		capName: "battery",
 		capScope: "device",