@camstack/system 1.2.22 → 1.2.23

package/dist/builtins/loki-logging/loki-logging.addon.d.ts

@@ -1,7 +1,15 @@
 import { LogLevel, ProviderRegistration, BaseAddon } from '@camstack/types';
 import { LokiDestination } from './loki-destination.js';
 interface LokiAddonConfig {
+    /**
+     * RETIRED (2026-07-30). Enablement is the orchestrator's per-destination
+     * toggle now — the ONE truth for every log destination. Kept only so a
+     * stored `false` can be migrated ONCE into a registry disable: without that,
+     * an operator who had Loki off would silently start shipping logs after this
+     * update. `migratedEnabled` marks the migration done; the field is then dead.
+     */
     readonly enabled: boolean;
+    readonly migratedEnabled: boolean;
     readonly url: string;
     readonly job: string;
     readonly level: LogLevel;
@@ -17,6 +25,17 @@ export declare class LokiLoggingAddon extends BaseAddon<LokiAddonConfig> {
     private destination;
     constructor();
     protected onInitialize(): Promise<ProviderRegistration[]>;
+    /**
+     * ONE-SHOT: carry a stored `enabled: false` over to the orchestrator's
+     * per-destination toggle, then never look at the flag again.
+     *
+     * Without this, retiring the private setting would silently RE-ENABLE Loki
+     * for every operator who had turned it off — shipping their logs to a host
+     * they may no longer control. Best-effort: if the toggle call fails the
+     * migration is simply retried next boot (the flag is only cleared on
+     * success).
+     */
+    private migrateRetiredEnabledFlag;
     protected onShutdown(): Promise<void>;
     /**
      * React to a settings change (enable/disable, URL, level, batching) without a

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_child_process = require("node:child_process");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { H as metricsProviderCapability, at as BaseAddon, jt as EventCategory, vt as createEvent } from "../../dist-C9_XdXl5.mjs";
+import { H as metricsProviderCapability, at as BaseAddon, jt as EventCategory, vt as createEvent } from "../../dist-CIek6F9X.mjs";
 import * as fs from "node:fs";
 import { execFile, execFileSync } from "node:child_process";
 import { promisify } from "node:util";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_child_process = require("node:child_process");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { J as scoreRuntimes, K as platformProbeCapability, T as enumerateInferenceDevices, at as BaseAddon, bt as emitReadiness, it as errMsg, jt as EventCategory } from "../../dist-C9_XdXl5.mjs";
+import { J as scoreRuntimes, K as platformProbeCapability, T as enumerateInferenceDevices, at as BaseAddon, bt as emitReadiness, it as errMsg, jt as EventCategory } from "../../dist-CIek6F9X.mjs";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { at as BaseAddon, jt as EventCategory } from "../../dist-C9_XdXl5.mjs";
+import { at as BaseAddon, jt as EventCategory } from "../../dist-CIek6F9X.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 let node_child_process = require("node:child_process");
 //#region src/builtins/snapshot/snapshot-coalescing.ts
 /**

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Z as snapshotCapability, at as BaseAddon, dt as DeviceType, et as streamQualityLabel, i as BatteryStatusSchema, it as errMsg, lt as DeviceFeature, wt as nodePin } from "../../dist-C9_XdXl5.mjs";
+import { Z as snapshotCapability, at as BaseAddon, dt as DeviceType, et as streamQualityLabel, i as BatteryStatusSchema, it as errMsg, lt as DeviceFeature, wt as nodePin } from "../../dist-CIek6F9X.mjs";
 import { execFile } from "node:child_process";
 //#region src/builtins/snapshot/snapshot-coalescing.ts
 /**

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { $ as storageProviderCapability, A as filesystemBrowseCapability, at as BaseAddon } from "../../dist-C9_XdXl5.mjs";
+import { $ as storageProviderCapability, A as filesystemBrowseCapability, at as BaseAddon } from "../../dist-CIek6F9X.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";
 import { basename, dirname, join, resolve, sep } from "node:path";

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 let node_crypto = require("node:crypto");
 let better_sqlite3 = require("better-sqlite3");
 better_sqlite3 = require_chunk.__toESM(better_sqlite3);

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,4 +1,4 @@
-import { Et as parseJsonUnknown, X as settingsStoreCapability, at as BaseAddon, c as RUNTIME_DEFAULTS, ht as asJsonObject, it as errMsg } from "../../dist-C9_XdXl5.mjs";
+import { Et as parseJsonUnknown, X as settingsStoreCapability, at as BaseAddon, c as RUNTIME_DEFAULTS, ht as asJsonObject, it as errMsg } from "../../dist-CIek6F9X.mjs";
 import { randomUUID } from "node:crypto";
 import Database from "better-sqlite3";
 //#region src/builtins/sqlite-storage/sqlite-settings-backend.ts

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.d.ts

@@ -64,6 +64,13 @@ export declare class StorageOrchestratorAddon extends BaseAddon<StorageOrchestra
      * the recorder so disk-pressure is a single core concern.
      */
     private resolveLocationThresholds;
+    /** statfs capacity of a location's basePath, walking up to the nearest
+     *  existing ancestor. Null for remote-node locations or unstattable paths. */
+    private localCapacityOf;
+    /** Per-location cap on EVICTABLE bytes (`config.maxUsedGb`): the operator's
+     *  "recordings may use at most N GB in total" — enforced by the pressure
+     *  manager alongside the free-percent guard. */
+    private resolveLocationMaxUsedBytes;
     private locationBasePath;
     /**
      * A stable key for the PHYSICAL storage device behind a location — the

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);
 let node_fs_promises = require("node:fs/promises");
@@ -14,6 +14,8 @@ var StorageOrchestratorService = class {
 	logger;
 	getProviders;
 	locationStore;
+	localNodeId;
+	getRemoteProvider;
 	locations = /* @__PURE__ */ new Map();
 	/**
 	* Declaration-driven cardinality source, injected by the addon after
@@ -31,10 +33,12 @@ var StorageOrchestratorService = class {
 	* early-boot path that predates the resolver wiring.
 	*/
 	nodeLocalResolver = null;
-	constructor(logger, getProviders, locationStore = null) {
+	constructor(logger, getProviders, locationStore = null, localNodeId = "hub", getRemoteProvider) {
 		this.logger = logger;
 		this.getProviders = getProviders;
 		this.locationStore = locationStore;
+		this.localNodeId = localNodeId;
+		this.getRemoteProvider = getRemoteProvider;
 	}
 	/** True once a persistence store is wired (constructor or {@link attachStore}). */
 	hasStore() {
@@ -349,6 +353,12 @@ var StorageOrchestratorService = class {
 	* the right place to fix the config.
 	*/
 	async getProviderFor(location) {
+		const nodeId = location.nodeId;
+		if (nodeId !== void 0 && nodeId !== this.localNodeId) {
+			const remote = this.getRemoteProvider?.(nodeId);
+			if (remote) return remote;
+			throw new Error(`storage-provider for location "${location.id}" lives on node "${nodeId}" which is not reachable`);
+		}
 		const providers = this.getProviders();
 		for (const p of providers) if ((await p.getProviderInfo()).providerId === location.providerId) return p;
 		throw new Error(`No storage-provider registered for providerId "${location.providerId}" (location "${location.id}")`);
@@ -634,6 +644,53 @@ var StoragePressureManager = class {
 				} });
 			}
 		}
+		const caps = await this.deps.getLocationMaxUsedBytes?.() ?? /* @__PURE__ */ new Map();
+		for (const [locationId, maxBytes] of caps) {
+			if (relievedDevices.size > 0) {
+				const deviceKey = await this.deps.getLocationDeviceKey?.(locationId) ?? null;
+				if (deviceKey !== null && relievedDevices.has(deviceKey)) continue;
+			}
+			try {
+				await this.relieveToUsageCap(locationId, maxBytes);
+			} catch (err) {
+				this.deps.logger.warn("storage pressure: usage-cap relief failed", { meta: {
+					locationId,
+					error: err instanceof Error ? err.message : String(err)
+				} });
+			}
+		}
+	}
+	/** Evict oldest-first until the location's evictable usage fits `maxBytes`. */
+	async relieveToUsageCap(locationId, maxBytes) {
+		const maxRounds = this.deps.maxRounds ?? DEFAULT_MAX_ROUNDS;
+		for (let round = 0; round < maxRounds; round++) {
+			const providers = this.deps.getEvictableProviders();
+			const usages = await Promise.all(providers.map(async (p) => ({
+				p,
+				bytes: (await p.getEvictableUsage({ locationId })).bytes
+			})));
+			const totalUsed = usages.reduce((s, u) => s + u.bytes, 0);
+			const excess = totalUsed - maxBytes;
+			if (excess <= 0) return;
+			let reclaimed = 0;
+			for (const u of usages) {
+				if (u.bytes <= 0) continue;
+				const share = Math.max(1, Math.ceil(excess * u.bytes / totalUsed));
+				const res = await u.p.evict({
+					locationId,
+					targetBytes: share
+				});
+				reclaimed += res.reclaimedBytes;
+			}
+			this.deps.logger.info("storage pressure: usage-cap relief round", { meta: {
+				locationId,
+				round,
+				totalUsed,
+				maxBytes,
+				reclaimedBytes: reclaimed
+			} });
+			if (reclaimed <= 0) return;
+		}
 	}
 	/**
 	* Relieve one location until it recovers, nothing is evictable, or a round
@@ -772,13 +829,21 @@ var StorageOrchestratorAddon = class extends require_dist.BaseAddon {
 			return reg.getCollection(STORAGE_PROVIDER_CAP_NAME);
 		};
 		const locationStore = this.resolveLocationStore();
-		const service = new StorageOrchestratorService(this.ctx.logger, getProviders, locationStore);
+		const service = new StorageOrchestratorService(this.ctx.logger, getProviders, locationStore, this.ctx.kernel.localNodeId ?? "hub", (nodeId) => {
+			const proxy = this.ctx.kernel.resolveNodeCapability?.("storage-provider", nodeId);
+			if (!proxy) return null;
+			return proxy;
+		});
 		this.service = service;
 		service.setNodeLocalResolver((providerId) => this.nodeLocalByProvider.get(providerId));
 		await service.initialize();
 		const provider = {
 			listLocations: async ({ type }) => {
-				return type !== void 0 ? service.listLocations({ type }) : service.listLocations();
+				const rows = type !== void 0 ? service.listLocations({ type }) : service.listLocations();
+				return Promise.all(rows.map(async (loc) => ({
+					...loc,
+					capacity: await this.localCapacityOf(loc)
+				})));
 			},
 			getDefaultLocation: async ({ type }) => service.getDefaultLocation(type),
 			listLocationDeclarations: async () => service.listDeclarations(),
@@ -944,6 +1009,7 @@ var StorageOrchestratorAddon = class extends require_dist.BaseAddon {
 			getVolumeTotalBytes: (id) => this.locationVolumeTotalBytes(id),
 			getEvictableProviders: () => this.ctx.kernel.capabilityRegistry?.getCollection(STORAGE_EVICTABLE_CAP_NAME) ?? [],
 			getLocationThresholds: () => this.resolveLocationThresholds(),
+			getLocationMaxUsedBytes: () => this.resolveLocationMaxUsedBytes(),
 			getLocationDeviceKey: (id) => this.locationDeviceKey(id)
 		});
 		this.pressureTimer = setInterval(() => {
@@ -1053,6 +1119,44 @@ var StorageOrchestratorAddon = class extends require_dist.BaseAddon {
 		}
 		return out;
 	}
+	/** statfs capacity of a location's basePath, walking up to the nearest
+	*  existing ancestor. Null for remote-node locations or unstattable paths. */
+	async localCapacityOf(loc) {
+		if (loc.nodeId !== void 0 && loc.nodeId !== "hub" && loc.nodeId !== this.ctx.nodeId) return null;
+		const bp = loc.config["basePath"];
+		if (typeof bp !== "string" || bp.length === 0) return null;
+		try {
+			let target = node_path.resolve(bp);
+			for (;;) try {
+				await node_fs_promises.access(target);
+				break;
+			} catch {
+				const parent = node_path.dirname(target);
+				if (!parent || parent === target) return null;
+				target = parent;
+			}
+			const st = await node_fs_promises.statfs(target);
+			return {
+				totalBytes: st.blocks * st.bsize,
+				availableBytes: st.bavail * st.bsize
+			};
+		} catch {
+			return null;
+		}
+	}
+	/** Per-location cap on EVICTABLE bytes (`config.maxUsedGb`): the operator's
+	*  "recordings may use at most N GB in total" — enforced by the pressure
+	*  manager alongside the free-percent guard. */
+	async resolveLocationMaxUsedBytes() {
+		const out = /* @__PURE__ */ new Map();
+		const svc = this.service;
+		if (!svc) return out;
+		for (const loc of svc.listLocations()) {
+			const raw = loc.config["maxUsedGb"];
+			if (typeof raw === "number" && Number.isFinite(raw) && raw > 0) out.set(loc.id, Math.floor(raw * 1024 ** 3));
+		}
+		return out;
+	}
 	locationBasePath(locationId) {
 		const bp = (this.service?.listLocations().find((l) => l.id === locationId))?.config["basePath"];
 		return typeof bp === "string" && bp.length > 0 ? bp : null;

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Q as storageCapability, Tt as parseJsonObject, at as BaseAddon, d as StorageLocationTypeSchema } from "../../dist-C9_XdXl5.mjs";
+import { Q as storageCapability, Tt as parseJsonObject, at as BaseAddon, d as StorageLocationTypeSchema } from "../../dist-CIek6F9X.mjs";
 import * as path$1 from "node:path";
 import * as fs from "node:fs/promises";
 import { buildStorageLocationRegistry } from "@camstack/system";
@@ -7,6 +7,8 @@ var StorageOrchestratorService = class {
 	logger;
 	getProviders;
 	locationStore;
+	localNodeId;
+	getRemoteProvider;
 	locations = /* @__PURE__ */ new Map();
 	/**
 	* Declaration-driven cardinality source, injected by the addon after
@@ -24,10 +26,12 @@ var StorageOrchestratorService = class {
 	* early-boot path that predates the resolver wiring.
 	*/
 	nodeLocalResolver = null;
-	constructor(logger, getProviders, locationStore = null) {
+	constructor(logger, getProviders, locationStore = null, localNodeId = "hub", getRemoteProvider) {
 		this.logger = logger;
 		this.getProviders = getProviders;
 		this.locationStore = locationStore;
+		this.localNodeId = localNodeId;
+		this.getRemoteProvider = getRemoteProvider;
 	}
 	/** True once a persistence store is wired (constructor or {@link attachStore}). */
 	hasStore() {
@@ -342,6 +346,12 @@ var StorageOrchestratorService = class {
 	* the right place to fix the config.
 	*/
 	async getProviderFor(location) {
+		const nodeId = location.nodeId;
+		if (nodeId !== void 0 && nodeId !== this.localNodeId) {
+			const remote = this.getRemoteProvider?.(nodeId);
+			if (remote) return remote;
+			throw new Error(`storage-provider for location "${location.id}" lives on node "${nodeId}" which is not reachable`);
+		}
 		const providers = this.getProviders();
 		for (const p of providers) if ((await p.getProviderInfo()).providerId === location.providerId) return p;
 		throw new Error(`No storage-provider registered for providerId "${location.providerId}" (location "${location.id}")`);
@@ -627,6 +637,53 @@ var StoragePressureManager = class {
 				} });
 			}
 		}
+		const caps = await this.deps.getLocationMaxUsedBytes?.() ?? /* @__PURE__ */ new Map();
+		for (const [locationId, maxBytes] of caps) {
+			if (relievedDevices.size > 0) {
+				const deviceKey = await this.deps.getLocationDeviceKey?.(locationId) ?? null;
+				if (deviceKey !== null && relievedDevices.has(deviceKey)) continue;
+			}
+			try {
+				await this.relieveToUsageCap(locationId, maxBytes);
+			} catch (err) {
+				this.deps.logger.warn("storage pressure: usage-cap relief failed", { meta: {
+					locationId,
+					error: err instanceof Error ? err.message : String(err)
+				} });
+			}
+		}
+	}
+	/** Evict oldest-first until the location's evictable usage fits `maxBytes`. */
+	async relieveToUsageCap(locationId, maxBytes) {
+		const maxRounds = this.deps.maxRounds ?? DEFAULT_MAX_ROUNDS;
+		for (let round = 0; round < maxRounds; round++) {
+			const providers = this.deps.getEvictableProviders();
+			const usages = await Promise.all(providers.map(async (p) => ({
+				p,
+				bytes: (await p.getEvictableUsage({ locationId })).bytes
+			})));
+			const totalUsed = usages.reduce((s, u) => s + u.bytes, 0);
+			const excess = totalUsed - maxBytes;
+			if (excess <= 0) return;
+			let reclaimed = 0;
+			for (const u of usages) {
+				if (u.bytes <= 0) continue;
+				const share = Math.max(1, Math.ceil(excess * u.bytes / totalUsed));
+				const res = await u.p.evict({
+					locationId,
+					targetBytes: share
+				});
+				reclaimed += res.reclaimedBytes;
+			}
+			this.deps.logger.info("storage pressure: usage-cap relief round", { meta: {
+				locationId,
+				round,
+				totalUsed,
+				maxBytes,
+				reclaimedBytes: reclaimed
+			} });
+			if (reclaimed <= 0) return;
+		}
 	}
 	/**
 	* Relieve one location until it recovers, nothing is evictable, or a round
@@ -765,13 +822,21 @@ var StorageOrchestratorAddon = class extends BaseAddon {
 			return reg.getCollection(STORAGE_PROVIDER_CAP_NAME);
 		};
 		const locationStore = this.resolveLocationStore();
-		const service = new StorageOrchestratorService(this.ctx.logger, getProviders, locationStore);
+		const service = new StorageOrchestratorService(this.ctx.logger, getProviders, locationStore, this.ctx.kernel.localNodeId ?? "hub", (nodeId) => {
+			const proxy = this.ctx.kernel.resolveNodeCapability?.("storage-provider", nodeId);
+			if (!proxy) return null;
+			return proxy;
+		});
 		this.service = service;
 		service.setNodeLocalResolver((providerId) => this.nodeLocalByProvider.get(providerId));
 		await service.initialize();
 		const provider = {
 			listLocations: async ({ type }) => {
-				return type !== void 0 ? service.listLocations({ type }) : service.listLocations();
+				const rows = type !== void 0 ? service.listLocations({ type }) : service.listLocations();
+				return Promise.all(rows.map(async (loc) => ({
+					...loc,
+					capacity: await this.localCapacityOf(loc)
+				})));
 			},
 			getDefaultLocation: async ({ type }) => service.getDefaultLocation(type),
 			listLocationDeclarations: async () => service.listDeclarations(),
@@ -937,6 +1002,7 @@ var StorageOrchestratorAddon = class extends BaseAddon {
 			getVolumeTotalBytes: (id) => this.locationVolumeTotalBytes(id),
 			getEvictableProviders: () => this.ctx.kernel.capabilityRegistry?.getCollection(STORAGE_EVICTABLE_CAP_NAME) ?? [],
 			getLocationThresholds: () => this.resolveLocationThresholds(),
+			getLocationMaxUsedBytes: () => this.resolveLocationMaxUsedBytes(),
 			getLocationDeviceKey: (id) => this.locationDeviceKey(id)
 		});
 		this.pressureTimer = setInterval(() => {
@@ -1046,6 +1112,44 @@ var StorageOrchestratorAddon = class extends BaseAddon {
 		}
 		return out;
 	}
+	/** statfs capacity of a location's basePath, walking up to the nearest
+	*  existing ancestor. Null for remote-node locations or unstattable paths. */
+	async localCapacityOf(loc) {
+		if (loc.nodeId !== void 0 && loc.nodeId !== "hub" && loc.nodeId !== this.ctx.nodeId) return null;
+		const bp = loc.config["basePath"];
+		if (typeof bp !== "string" || bp.length === 0) return null;
+		try {
+			let target = path$1.resolve(bp);
+			for (;;) try {
+				await fs.access(target);
+				break;
+			} catch {
+				const parent = path$1.dirname(target);
+				if (!parent || parent === target) return null;
+				target = parent;
+			}
+			const st = await fs.statfs(target);
+			return {
+				totalBytes: st.blocks * st.bsize,
+				availableBytes: st.bavail * st.bsize
+			};
+		} catch {
+			return null;
+		}
+	}
+	/** Per-location cap on EVICTABLE bytes (`config.maxUsedGb`): the operator's
+	*  "recordings may use at most N GB in total" — enforced by the pressure
+	*  manager alongside the free-percent guard. */
+	async resolveLocationMaxUsedBytes() {
+		const out = /* @__PURE__ */ new Map();
+		const svc = this.service;
+		if (!svc) return out;
+		for (const loc of svc.listLocations()) {
+			const raw = loc.config["maxUsedGb"];
+			if (typeof raw === "number" && Number.isFinite(raw) && raw > 0) out.set(loc.id, Math.floor(raw * 1024 ** 3));
+		}
+		return out;
+	}
 	locationBasePath(locationId) {
 		const bp = (this.service?.listLocations().find((l) => l.id === locationId))?.config["basePath"];
 		return typeof bp === "string" && bp.length > 0 ? bp : null;

package/dist/builtins/storage-orchestrator/storage-orchestrator.service.d.ts

@@ -54,6 +54,11 @@ export declare class StorageOrchestratorService {
      * the provider appears. See {@link attachStore}.
      */
     private locationStore;
+    /** This node's id — locations pinned to OTHER nodes dispatch remotely. */
+    private readonly localNodeId;
+    /** Cross-node provider resolver (hub wiring: a node-routed capability
+     *  proxy over `storage-provider`). Absent → remote locations error. */
+    private readonly getRemoteProvider?;
     private readonly locations;
     /**
      * Declaration-driven cardinality source, injected by the addon after
@@ -85,7 +90,12 @@ export declare class StorageOrchestratorService {
      * service starts store-less and the addon calls {@link attachStore} once
      * the provider appears. See {@link attachStore}.
      */
-    locationStore?: ILocationStore | null);
+    locationStore?: ILocationStore | null, 
+    /** This node's id — locations pinned to OTHER nodes dispatch remotely. */
+    localNodeId?: string, 
+    /** Cross-node provider resolver (hub wiring: a node-routed capability
+     *  proxy over `storage-provider`). Absent → remote locations error. */
+    getRemoteProvider?: ((nodeId: string) => IStorageProviderImpl | null) | undefined);
     /** True once a persistence store is wired (constructor or {@link attachStore}). */
     hasStore(): boolean;
     /**

package/dist/builtins/storage-orchestrator/storage-pressure-manager.d.ts

@@ -24,6 +24,9 @@ export interface PressureManagerDeps {
     readonly getEvictableProviders: () => readonly IStorageEvictableProvider[];
     /** locationId → minFreePercent threshold; entries with `<= 0` have the guard off. */
     readonly getLocationThresholds: () => Promise<ReadonlyMap<string, number>>;
+    /** locationId → hard cap on EVICTABLE bytes (`config.maxUsedGb`, operator's
+     *  "recordings may use at most N GB total"). Optional — absent = no caps. */
+    readonly getLocationMaxUsedBytes?: () => Promise<ReadonlyMap<string, number>>;
     /** Max relief rounds per location per sweep (backstop, default 8). */
     readonly maxRounds?: number;
     /** Extra headroom % freed beyond the threshold to avoid re-breaching immediately (default 1). */
@@ -53,6 +56,8 @@ export declare class StoragePressureManager {
     constructor(deps: PressureManagerDeps);
     /** Relieve every managed location currently under its threshold. */
     sweep(): Promise<void>;
+    /** Evict oldest-first until the location's evictable usage fits `maxBytes`. */
+    private relieveToUsageCap;
     /**
      * Relieve one location until it recovers, nothing is evictable, or a round
      * makes no progress. Returns `true` when at least one relief round actually

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { St as hydrateSchema, at as BaseAddon, it as errMsg } from "../../dist-C9_XdXl5.mjs";
+import { St as hydrateSchema, at as BaseAddon, it as errMsg } from "../../dist-CIek6F9X.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { at as BaseAddon, z as logDestinationCapability } from "../../dist-C9_XdXl5.mjs";
+import { at as BaseAddon, z as logDestinationCapability } from "../../dist-CIek6F9X.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";