@camstack/system 1.2.208 → 1.2.210

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, bn as EventCategory, k as addonPagesCapability, qt as errMsg } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, bn as EventCategory, k as addonPagesCapability, qt as errMsg } from "../../dist-GU5g4fSq.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, bn as EventCategory, j as addonWidgetsCapability, qt as errMsg } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, bn as EventCategory, j as addonWidgetsCapability, qt as errMsg } from "../../dist-GU5g4fSq.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, M as alertsCapability, bn as EventCategory, n as AlertSchema, qt as errMsg, sn as createEvent } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, M as alertsCapability, bn as EventCategory, n as AlertSchema, qt as errMsg, sn as createEvent } from "../../dist-GU5g4fSq.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Bt as storageOccupancyCapability, Jt as BaseAddon, P as backupCapability, bn as EventCategory, yt as mayWriteToLocation } from "../../dist-BTJq0ddi.mjs";
+import { Bt as storageOccupancyCapability, Jt as BaseAddon, P as backupCapability, bn as EventCategory, yt as mayWriteToLocation } from "../../dist-GU5g4fSq.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, ht as logDestinationCapability } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, ht as logDestinationCapability } from "../../dist-GU5g4fSq.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,4 +1,4 @@
-import { B as coreBlockIdFromAddonId, Jt as BaseAddon, V as coreBlocksCapability, c as CORE_BLOCK_ADDON_PREFIX, d as DeclaredDevices, l as CoreBlockSchema, qt as errMsg, s as CORE_BLOCKS_ADDON_ID, z as coreBlockAddonId } from "../../dist-BTJq0ddi.mjs";
+import { B as coreBlockIdFromAddonId, Jt as BaseAddon, V as coreBlocksCapability, c as CORE_BLOCK_ADDON_PREFIX, d as DeclaredDevices, l as CoreBlockSchema, qt as errMsg, s as CORE_BLOCKS_ADDON_ID, z as coreBlockAddonId } from "../../dist-GU5g4fSq.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-DtPZcaQ_.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-BpasSgff.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { $t as DeviceRole, G as deviceManagerCapability, Jt as BaseAddon, K as deviceStateCapability, L as buildStreamParamsConfigSchema, Mt as runtimeStatePolicyFor, Qt as DeviceFeature, S as STREAM_PROFILE_META, St as normalizeUnit, X as enumerateItemArrayFields, Z as enumerateSchemaFields, a as CAMERA_SWITCH_ORDER, bn as EventCategory, en as DeviceType, f as DeviceStatusSchema, fn as isDeviceConfigCap, kt as resolveContainerPrimaryChild, o as CAP_NAMES_WITH_STATUS, q as deviceStatusCapability, qt as errMsg, rn as WELL_KNOWN_TAB_MAP, t as ALL_CAPABILITY_DEFINITIONS, wt as parseStreamParamsFormPatch, yn as sleep } from "../../dist-BTJq0ddi.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-BZZPFp77.mjs";
+import { $t as DeviceRole, G as deviceManagerCapability, Jt as BaseAddon, K as deviceStateCapability, L as buildStreamParamsConfigSchema, Mt as runtimeStatePolicyFor, Qt as DeviceFeature, S as STREAM_PROFILE_META, St as normalizeUnit, X as enumerateItemArrayFields, Z as enumerateSchemaFields, a as CAMERA_SWITCH_ORDER, bn as EventCategory, en as DeviceType, f as DeviceStatusSchema, fn as isDeviceConfigCap, kt as resolveContainerPrimaryChild, o as CAP_NAMES_WITH_STATUS, q as deviceStatusCapability, qt as errMsg, rn as WELL_KNOWN_TAB_MAP, t as ALL_CAPABILITY_DEFINITIONS, wt as parseStreamParamsFormPatch, yn as sleep } from "../../dist-GU5g4fSq.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-qv-MlPVD.mjs";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { F as bareAddonId, J as doorbellCapability, Jt as BaseAddon, Q as evaluateSensorEdge, b as SOURCE_DEVICE_TYPES, bn as EventCategory, ct as isSameAddonId, en as DeviceType, lt as isSourceCap, qt as errMsg, sn as createEvent, y as SOURCE_CAPS } from "../../dist-BTJq0ddi.mjs";
+import { F as bareAddonId, J as doorbellCapability, Jt as BaseAddon, Q as evaluateSensorEdge, b as SOURCE_DEVICE_TYPES, bn as EventCategory, ct as isSameAddonId, en as DeviceType, lt as isSourceCap, qt as errMsg, sn as createEvent, y as SOURCE_CAPS } from "../../dist-GU5g4fSq.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, ht as logDestinationCapability } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, ht as logDestinationCapability } from "../../dist-GU5g4fSq.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, bn as EventCategory, qt as errMsg, sn as createEvent, v as RecordingStatusSchema } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, bn as EventCategory, qt as errMsg, sn as createEvent, v as RecordingStatusSchema } from "../../dist-GU5g4fSq.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { C as ScopedTokenSchema, Jt as BaseAddon, N as authProviderCapability, O as UserRecordSchema, Ut as userManagementCapability, r as ApiKeyRecordSchema } from "../../dist-BTJq0ddi.mjs";
+import { C as ScopedTokenSchema, Jt as BaseAddon, N as authProviderCapability, O as UserRecordSchema, Ut as userManagementCapability, r as ApiKeyRecordSchema } from "../../dist-GU5g4fSq.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 const require_tls = require("../../tls-BxQlomxd.js");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, bn as EventCategory, mt as localNetworkCapability } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, bn as EventCategory, mt as localNetworkCapability } from "../../dist-GU5g4fSq.mjs";
 import { S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, i as writeExtraSans, l as reissueTlsLeaf, n as readTlsAccessStatus, o as validateUploadedTls, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, y as applyLanHttp } from "../../tls-DOTmtLCW.mjs";
 import { mkdir, writeFile } from "node:fs/promises";
 import { join } from "node:path";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, ht as logDestinationCapability } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, ht as logDestinationCapability } from "../../dist-GU5g4fSq.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 let node_fs_promises = require("node:fs/promises");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Dt as reducePoints, Jt as BaseAddon, Ot as resolveBucketMs, bn as EventCategory, bt as metricsProviderCapability, nt as foldSnapshotByFunction, qt as errMsg, sn as createEvent } from "../../dist-BTJq0ddi.mjs";
+import { Dt as reducePoints, Jt as BaseAddon, Ot as resolveBucketMs, bn as EventCategory, bt as metricsProviderCapability, nt as foldSnapshotByFunction, qt as errMsg, sn as createEvent } from "../../dist-GU5g4fSq.mjs";
 import { readFile, readdir } from "node:fs/promises";
 import { execFile, execFileSync } from "node:child_process";
 import { promisify } from "node:util";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_fs = require("node:fs");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { Ft as scoreRuntimes, Jt as BaseAddon, Tt as platformProbeCapability, Y as enumerateInferenceDevices, bn as EventCategory, ln as emitReadiness, qt as errMsg } from "../../dist-BTJq0ddi.mjs";
+import { Ft as scoreRuntimes, Jt as BaseAddon, Tt as platformProbeCapability, Y as enumerateInferenceDevices, bn as EventCategory, ln as emitReadiness, qt as errMsg } from "../../dist-GU5g4fSq.mjs";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import * as fs from "node:fs";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, bn as EventCategory } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, bn as EventCategory } from "../../dist-GU5g4fSq.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { F as bareAddonId, Ht as streamQualityLabel, I as batteryCapability, Jt as BaseAddon, Lt as snapshotCapability, Qt as DeviceFeature, W as deriveBatteryPresence, bn as EventCategory, en as DeviceType, i as BatteryStatusSchema, pn as nodePin, qt as errMsg } from "../../dist-BTJq0ddi.mjs";
+import { F as bareAddonId, Ht as streamQualityLabel, I as batteryCapability, Jt as BaseAddon, Lt as snapshotCapability, Qt as DeviceFeature, W as deriveBatteryPresence, bn as EventCategory, en as DeviceType, i as BatteryStatusSchema, pn as nodePin, qt as errMsg } from "../../dist-GU5g4fSq.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { signExpiringUrl, verifyExpiringUrl } from "@camstack/types/node";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, Vt as storageProviderCapability, tt as filesystemBrowseCapability } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, Vt as storageProviderCapability, tt as filesystemBrowseCapability } from "../../dist-GU5g4fSq.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/storage-orchestrator/location-repoint-move.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Moving a location's bytes when its root is re-pointed.
+ *
+ * ## Why this exists, and why only for singletons
+ *
+ * A `multi` location moves the sanctioned way: register a second instance,
+ * drain the first, watch it empty (D386). A **singleton** cannot — the
+ * cardinality guard in `upsertLocation` refuses the second instance by
+ * declaration, so there is no destination to drain into. For those, editing
+ * the `basePath` IS the migration, and either it carries the data or the data
+ * is stranded.
+ *
+ * It was stranded. On 2026-09-08 the `artifacts` root moved and 320 enrolled
+ * gallery blobs stayed at the previous path — invisible until every face in the
+ * Review panel answered 404, and one boot away from being collected as "the
+ * pixels are gone" by a reconcile that had no way to know better.
+ *
+ * ## The order is the safety property
+ *
+ * copy → verify → (caller saves the row) → delete. A crash at any point leaves
+ * the bytes somewhere that a location still points at: before the row moves,
+ * that is the OLD root; after it, the new one holds a verified copy. Nothing
+ * here deletes anything until every file has landed and been read back.
+ *
+ * A failure ABORTS with nothing deleted, so the caller can refuse the edit and
+ * leave the operator pointing at intact data.
+ *
+ * I/O is injected: the walk and the ordering are what matter and they are
+ * testable without a filesystem.
+ */
+/** The four operations a move needs, in the caller's own terms. */
+export interface RepointMoveIo {
+    /** Entries directly under `prefix` (undefined = the root), as relative paths. */
+    list(prefix: string | undefined): Promise<readonly string[]>;
+    /** Bytes of a source file. THROWS when the path is a directory. */
+    read(relativePath: string): Promise<Uint8Array<ArrayBuffer>>;
+    /** Write into the destination root. */
+    write(relativePath: string, data: Uint8Array<ArrayBuffer>): Promise<void>;
+    /** Read back from the DESTINATION, to prove the copy landed. */
+    readBack(relativePath: string): Promise<Uint8Array<ArrayBuffer>>;
+    /** Remove one file from the source root. */
+    deleteSource(relativePath: string): Promise<void>;
+}
+export interface RepointMoveResult {
+    readonly files: number;
+    readonly bytes: number;
+}
+/**
+ * Copy every file from the source root to the destination, verify each, then
+ * delete the originals. Throws with NOTHING deleted if any copy fails.
+ */
+export declare function moveLocationTree(io: RepointMoveIo): Promise<RepointMoveResult>;

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.d.ts

@@ -133,6 +133,19 @@ export declare class StorageOrchestratorAddon extends BaseAddon<StorageOrchestra
      */
     private declaredSecretKeys;
     /** Which keys of a given stored config must never leave this process. */
+    /**
+     * Move a singleton location's bytes when its root changes.
+     *
+     * Runs BEFORE the row is saved: a copy that fails throws out of the mutation,
+     * so the location keeps pointing at the intact original and the operator is
+     * told why rather than discovering it in a blank panel weeks later.
+     * `moveLocationTree` deletes nothing until every file has been read back from
+     * the destination.
+     *
+     * A no-op for everything else — a rename, a mode change, a `multi` kind, or a
+     * location being created for the first time.
+     */
+    private carryDataOnRepoint;
     private secretKeysFor;
     /**
      * Ring the doorbell: the SET of storage locations changed (D387).

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-C_WvDOQ9.js");
 const require_hub_cap_forward = require("../../hub-cap-forward-DmHNjbB0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
@@ -1107,6 +1107,56 @@ function buildStorageLocationRegistry(perAddon) {
 	};
 }
 //#endregion
+//#region src/builtins/storage-orchestrator/location-repoint-move.ts
+/**
+* Walk the source root and collect FILES.
+*
+* The storage cap's `list` reports names without saying which are directories,
+* so the walk decides by asking: an entry that lists children is a directory,
+* and one that lists none is a leaf. A leaf that turns out not to be readable
+* (an empty directory) is skipped by the copy loop, which is the only place
+* that can tell — and skipping it is right, since there is nothing to move.
+*/
+async function collectFiles(io, prefix) {
+	const entries = await io.list(prefix);
+	const files = [];
+	for (const entry of entries) {
+		if ((await io.list(entry)).length > 0) {
+			files.push(...await collectFiles(io, entry));
+			continue;
+		}
+		files.push(entry);
+	}
+	return files;
+}
+/**
+* Copy every file from the source root to the destination, verify each, then
+* delete the originals. Throws with NOTHING deleted if any copy fails.
+*/
+async function moveLocationTree(io) {
+	const candidates = await collectFiles(io);
+	const copied = [];
+	let bytes = 0;
+	for (const relativePath of candidates) {
+		let data;
+		try {
+			data = await io.read(relativePath);
+		} catch {
+			continue;
+		}
+		await io.write(relativePath, data);
+		const landed = await io.readBack(relativePath);
+		if (landed.length !== data.length) throw new Error(`location repoint: size mismatch after copying "${relativePath}" (${String(landed.length)} != ${String(data.length)}) — nothing deleted`);
+		copied.push(relativePath);
+		bytes += data.length;
+	}
+	for (const relativePath of copied) await io.deleteSource(relativePath);
+	return {
+		files: copied.length,
+		bytes
+	};
+}
+//#endregion
 //#region src/builtins/storage-orchestrator/access-guards.ts
 /**
 * May `storage.resolve` return a path for this location?
@@ -3300,10 +3350,12 @@ var StorageOrchestratorAddon = class extends require_dist.BaseAddon {
 			upsertLocation: async (input) => {
 				const stored = service.getLocationById(input.id);
 				const config = restoreRedactedSecrets(input.config, stored?.config, this.secretKeysFor(input.providerId, stored?.config ?? {}));
-				const saved = service.upsertLocation(config === input.config ? input : {
+				const next = config === input.config ? input : {
 					...input,
 					config
-				});
+				};
+				await this.carryDataOnRepoint(stored, next);
+				const saved = service.upsertLocation(next);
 				this.announceLocationsChanged(saved.id, saved.type, "upsert");
 				return this.redacted(saved);
 			},
@@ -3796,6 +3848,63 @@ var StorageOrchestratorAddon = class extends require_dist.BaseAddon {
 		return this.secretKeysByProvider.get(providerId);
 	}
 	/** Which keys of a given stored config must never leave this process. */
+	/**
+	* Move a singleton location's bytes when its root changes.
+	*
+	* Runs BEFORE the row is saved: a copy that fails throws out of the mutation,
+	* so the location keeps pointing at the intact original and the operator is
+	* told why rather than discovering it in a blank panel weeks later.
+	* `moveLocationTree` deletes nothing until every file has been read back from
+	* the destination.
+	*
+	* A no-op for everything else — a rename, a mode change, a `multi` kind, or a
+	* location being created for the first time.
+	*/
+	async carryDataOnRepoint(stored, next) {
+		if (stored === void 0) return;
+		const service = this.service;
+		if (service === null) return;
+		if (service.listDeclarations().find((entry) => entry.id === next.type)?.cardinality !== "single") return;
+		const from = stored.config["basePath"];
+		const to = next.config["basePath"];
+		if (typeof from !== "string" || typeof to !== "string" || from === to) return;
+		const source = await service.getProviderFor(stored);
+		const target = {
+			...stored,
+			config: next.config
+		};
+		const destination = await service.getProviderFor(target);
+		const moved = await moveLocationTree({
+			list: (prefix) => source.list(prefix === void 0 ? { location: stored } : {
+				location: stored,
+				prefix
+			}),
+			read: (relativePath) => source.read({
+				location: stored,
+				relativePath
+			}),
+			write: (relativePath, data) => destination.write({
+				location: target,
+				relativePath,
+				data
+			}),
+			readBack: (relativePath) => destination.read({
+				location: target,
+				relativePath
+			}),
+			deleteSource: (relativePath) => source.delete({
+				location: stored,
+				relativePath
+			})
+		});
+		this.ctx.logger.info("storage-orchestrator: singleton location re-pointed — its data was carried over", { meta: {
+			id: stored.id,
+			type: stored.type,
+			from,
+			to,
+			...moved
+		} });
+	}
 	secretKeysFor(providerId, config) {
 		return secretKeysForConfig(config, this.declaredSecretKeys(providerId));
 	}