@camstack/system 1.2.200 → 1.2.202

package/dist/builtins/storage-orchestrator/storage-orchestrator.service.d.ts

@@ -184,23 +184,31 @@ export declare class StorageOrchestratorService {
      */
     attachStore(store: ILocationStore): Promise<void>;
     /**
-     * Shout about a persisted row that is BOTH the type default and disabled.
+     * ONE explicit migration onto the enabled write set (D383), run once per
+     * boot against the rows that came off disk. Idempotent: the second boot finds
+     * nothing to do.
      *
-     * `upsertLocation` can now produce this (enabled is the write set; `isDefault`
-     * is store residue). Hydrate also writes rows straight into the map, so a
-     * hand-edited store or a row written by another build can too. It matters
-     * because every bare-type ref still resolves through {@link getDefaultLocation}
-     * until Stage 5 of the enabled-write-set design: on such a row
-     * `storage.write({ location: 'eventMedia' })` and the migration coordinator's
-     * drain destination both point at a disk the operator turned off.
+     * Two steps, in order, and each one is a WRITE — the point is that "absent"
+     * stops existing rather than being re-interpreted on every read forever:
      *
-     * Reported, never repaired: flipping an operator's flag back on at boot would
-     * be the system overruling the switch instead of obeying it. The coordinator
-     * refuses the drain (`storage-migration-coordinator.drain`); the bare-ref read
-     * path is deliberately left working, because narrowing a READ is a worse bug
-     * than the one this line reports.
+     *   1. A flagless row (persisted before `enabled` existed) is stamped
+     *      `enabled: true`. Absence already meant active, so this preserves
+     *      behaviour exactly; it is the operator's "the initial locations are
+     *      enabled" spelled into the store.
+     *   2. A type left with NO enabled row — only reachable from a hand-edited
+     *      store or a row an older build wrote — gets one enabled back, chosen as
+     *      the row the RETIRED default flag named, else the `:default`-slugged
+     *      row, else the lexicographically first. Loudly: a class with no write
+     *      target records nowhere, and refusing to repair it here would leave the
+     *      hub silently unable to write with no operator action pending.
+     *
+     * An operator's explicit `enabled: false` is never reversed by step 1 — only
+     * step 2 touches it, and only when the alternative is a class that cannot
+     * write at all.
      */
-    private reportDisabledDefaults;
+    private migrateOntoTheWriteSet;
+    /** Apply one migrated row in memory and mirror it to the store. */
+    private persistMigrated;
     /**
      * Inject the declaration-driven cardinality source. Called once by the
      * addon after the kernel aggregates every addon's `storageLocations`
@@ -259,22 +267,36 @@ export declare class StorageOrchestratorService {
      */
     backfillNodeIds(hubNodeId: string): Promise<void>;
     listLocations(filter?: ListLocationsFilter): readonly StorageLocation[];
-    getDefaultLocation(type: string): StorageLocation | null;
     /**
-     * Repoint several logical defaults as one in-memory commit. The migration
-     * coordinator persists its `repointing` phase before calling this method, so
-     * a process crash during the backing-store writes is recovered by replaying
-     * the same idempotent target set before anyone resumes writers.
+     * The WRITE SET of a type: every enabled location of it, in stable id order.
+     * This replaced `getDefaultLocation` (D383) — a type does not have one write
+     * target any more, it has a pool, and every consumer that must pick one picks
+     * from here by its own rule (the recorder by headroom, a drain by an operator
+     * -named destination).
+     */
+    writeTargets(type: string): readonly StorageLocation[];
+    /**
+     * Change the WRITE SET as one compensated commit: each named location is
+     * enabled (it joins the pool) or disabled (it becomes read-only — still read,
+     * still played back, still age-swept, still drained).
+     *
+     * This is the cutover verb, and its only caller is the migration coordinator,
+     * which persists its `repointing` phase BEFORE calling so a crash mid-write
+     * is recovered by replaying the same idempotent set before writers resume.
+     *
+     * It moves ONLY the locations it is given: a cutover from A to C on a class
+     * that also writes to B leaves B in the pool, because the operator's pool is
+     * the authority and a migration is not a licence to shrink it. The commit is
+     * refused when it would leave a write-serving type with nothing enabled —
+     * the same refusal `upsertLocation` applies, judged on the RESULT so an
+     * enable and a disable in one commit are weighed together.
      */
-    setDefaultLocations(targetByType: ReadonlyMap<string, string>): Promise<void>;
+    setWriteTargets(enabledByLocationId: ReadonlyMap<string, boolean>): Promise<void>;
     /**
-     * Insert or update a location. If `isDefault: true`, atomically
-     * demotes any other default for the same type — operators always see
-     * exactly one default per type.
+     * Insert or update a location.
      *
-     * When a persistence store is wired (Task 6), the new record AND any
-     * implicitly-demoted siblings are persisted before the in-memory map
-     * mutation returns. Persistence errors propagate to the caller.
+     * When a persistence store is wired (Task 6), the record is mirrored to it;
+     * the mirror is fire-and-forget and its errors reach the logger.
      */
     /**
      * Refuse a `(location kind, provider)` pair the kind cannot use.
@@ -310,8 +332,7 @@ export declare class StorageOrchestratorService {
     /**
      * Remove a location. Refuses the last location of a type and the last
      * enabled location of a type. `isSystem` is informational — a frozen
-     * recordings `:default` is deletable once a sibling is live. Deleting
-     * the flagged default promotes an enabled sibling. Occupancy still
+     * recordings `:default` is deletable once a sibling is live. Occupancy still
      * refuses unless `force` is set; force never overrides uniqueness /
      * last-enabled.
      */
@@ -392,9 +413,11 @@ export declare class StorageOrchestratorService {
      * declarations on a populated map is a no-op (each declared `id`
      * already resolves to an existing `<id>:default`).
      *
-     * Convention: the bare-type ref `'recordings'` resolves via
-     * `getDefaultLocation('recordings')` (walks `isDefault === true`); the
-     * actual stored `id` is `'recordings:default'` so it satisfies the
+     * The seeded row is born ENABLED — a fresh install must be able to write the
+     * moment it boots, and `enabled` is the only write switch there is (D383).
+     * The `:default` suffix is a NAME kept for idempotency across existing
+     * installs, not a flag: the stored `id` is `'recordings:default'` so it
+     * satisfies the
      * `^[a-z][a-z0-9-]*:[a-z0-9-]+$` regex on `StorageLocationSchema.id`.
      *
      * `basePath` is the storage root (e.g. `<CAMSTACK_DATA>`). Each

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-KQ5D2wqr.js");
+const require_dist = require("../../dist-jZb-HKI5.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { $t as hydrateSchema, Ft as errMsg, It as BaseAddon } from "../../dist-CCp74QLJ.mjs";
+import { Lt as errMsg, Rt as BaseAddon, tn as hydrateSchema } from "../../dist-CiHYspij.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-KQ5D2wqr.js");
+const require_dist = require("../../dist-jZb-HKI5.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { It as BaseAddon, lt as logDestinationCapability } from "../../dist-CCp74QLJ.mjs";
+import { Rt as BaseAddon, dt as logDestinationCapability } from "../../dist-CiHYspij.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";