@camstack/system 1.2.90 → 1.2.92

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYqL8oZq.js");
+const require_dist = require("../../dist-BH2tZ9ZN.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");
@@ -8823,9 +8823,44 @@ var TotpManager = class {
 };
 //#endregion
 //#region src/builtins/local-auth/auth-schema.ts
+/**
+* @durable class=config owner=local-auth
+*   write="an operator creates a user, or `ensureAdminExists` seeds/re-syncs the
+*     configured admin at boot; updated on scope, isAdmin and password edits"
+*   retention="none — a row goes only when an operator deletes the user. A
+*     `declareCollection` that adds a PK/UNIQUE/NOT-NULL-without-default column
+*     REBUILDS the table: every account is wiped and only the configured admin
+*     comes back on the next boot."
+*/
 var USERS_COLLECTION = "users";
+/**
+* @durable class=config owner=local-auth
+*   write="an operator mints an API key; `validateToken` rewrites `lastUsedAt` on
+*     every request the key authorises"
+*   retention="none — an explicit `revoke` is the only delete. API keys have no
+*     expiry column and no sweep, so a key lives until someone removes it (or the
+*     destructive `declareCollection` rebuild takes the table)."
+*/
 var API_KEYS_COLLECTION = "api_keys";
+/**
+* @durable class=config owner=local-auth
+*   write="an operator or the CLI mints a scoped token; `validate` fires
+*     `updateLastUsed` on every accepted call"
+*   retention="`revoke` deletes one. The daily sweep `reapExpired` drops rows past
+*     `expiresAt` — a NULL expiry is a deliberate never-expires token and BETWEEN
+*     never matches it. `cleanupOrphans` drops tokens owned by the legacy 'system'
+*     id or by a user that no longer exists."
+*/
 var SCOPED_TOKENS_COLLECTION = "scoped_tokens";
+/**
+* @durable class=ledger owner=local-auth
+*   write="one row per redeemed OAuth code — every completed account link through
+*     `oauthExchangeCode`; `touch` rewrites `lastUsedAt` on each refresh"
+*   retention="ONLY revoked rows are pruned: the daily sweep deletes sessions
+*     revoked more than OAUTH_REVOKED_RETENTION_MS (30 d) ago. An ACTIVE session
+*     has `revokedAt` NULL, never expires and is never swept — the table grows one
+*     row per login until an operator revokes the link."
+*/
 var OAUTH_SESSIONS_COLLECTION = "oauth_sessions";
 /**
 * TOTP enrollment table — split off from `users` to avoid the
@@ -8839,6 +8874,13 @@ var OAUTH_SESSIONS_COLLECTION = "oauth_sessions";
 *
 * "Enabled" means `confirmedAt != null`. A half-enrolled row (`confirmedAt
 * = null`) is INACTIVE — `verifyTotp` returns false until confirmation.
+*
+* @durable class=config owner=local-auth
+*   write="`setup` inserts a fresh secret for the user (deleting any pending row
+*     first); `confirm` flips `confirmedAt` once a valid code proves possession"
+*   retention="`disable` deletes the row, and `setup` deletes before re-inserting.
+*     Nothing else prunes — deleting a USER does not cascade here, so their
+*     enrollment row outlives the account."
 */
 var USER_TOTP_COLLECTION = "user_totp";
 var USERS_COLUMNS = [

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { S as authProviderCapability, _ as UserRecordSchema, _t as BaseAddon, m as ScopedTokenSchema, pt as userManagementCapability, r as ApiKeyRecordSchema } from "../../dist-DMhxx5Kr.mjs";
+import { S as authProviderCapability, _ as UserRecordSchema, _t as BaseAddon, m as ScopedTokenSchema, pt as userManagementCapability, r as ApiKeyRecordSchema } from "../../dist-DXDvrBi0.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";
@@ -8815,9 +8815,44 @@ var TotpManager = class {
 };
 //#endregion
 //#region src/builtins/local-auth/auth-schema.ts
+/**
+* @durable class=config owner=local-auth
+*   write="an operator creates a user, or `ensureAdminExists` seeds/re-syncs the
+*     configured admin at boot; updated on scope, isAdmin and password edits"
+*   retention="none — a row goes only when an operator deletes the user. A
+*     `declareCollection` that adds a PK/UNIQUE/NOT-NULL-without-default column
+*     REBUILDS the table: every account is wiped and only the configured admin
+*     comes back on the next boot."
+*/
 var USERS_COLLECTION = "users";
+/**
+* @durable class=config owner=local-auth
+*   write="an operator mints an API key; `validateToken` rewrites `lastUsedAt` on
+*     every request the key authorises"
+*   retention="none — an explicit `revoke` is the only delete. API keys have no
+*     expiry column and no sweep, so a key lives until someone removes it (or the
+*     destructive `declareCollection` rebuild takes the table)."
+*/
 var API_KEYS_COLLECTION = "api_keys";
+/**
+* @durable class=config owner=local-auth
+*   write="an operator or the CLI mints a scoped token; `validate` fires
+*     `updateLastUsed` on every accepted call"
+*   retention="`revoke` deletes one. The daily sweep `reapExpired` drops rows past
+*     `expiresAt` — a NULL expiry is a deliberate never-expires token and BETWEEN
+*     never matches it. `cleanupOrphans` drops tokens owned by the legacy 'system'
+*     id or by a user that no longer exists."
+*/
 var SCOPED_TOKENS_COLLECTION = "scoped_tokens";
+/**
+* @durable class=ledger owner=local-auth
+*   write="one row per redeemed OAuth code — every completed account link through
+*     `oauthExchangeCode`; `touch` rewrites `lastUsedAt` on each refresh"
+*   retention="ONLY revoked rows are pruned: the daily sweep deletes sessions
+*     revoked more than OAUTH_REVOKED_RETENTION_MS (30 d) ago. An ACTIVE session
+*     has `revokedAt` NULL, never expires and is never swept — the table grows one
+*     row per login until an operator revokes the link."
+*/
 var OAUTH_SESSIONS_COLLECTION = "oauth_sessions";
 /**
 * TOTP enrollment table — split off from `users` to avoid the
@@ -8831,6 +8866,13 @@ var OAUTH_SESSIONS_COLLECTION = "oauth_sessions";
 *
 * "Enabled" means `confirmedAt != null`. A half-enrolled row (`confirmedAt
 * = null`) is INACTIVE — `verifyTotp` returns false until confirmation.
+*
+* @durable class=config owner=local-auth
+*   write="`setup` inserts a fresh secret for the user (deleting any pending row
+*     first); `confirm` flips `confirmedAt` once a valid code proves possession"
+*   retention="`disable` deletes the row, and `setup` deletes before re-inserting.
+*     Nothing else prunes — deleting a USER does not cascade here, so their
+*     enrollment row outlives the account."
 */
 var USER_TOTP_COLLECTION = "user_totp";
 var USERS_COLUMNS = [

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYqL8oZq.js");
+const require_dist = require("../../dist-BH2tZ9ZN.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 //#region src/builtins/local-network/local-network.addon.ts

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Ut as EventCategory, _t as BaseAddon, q as localNetworkCapability } from "../../dist-DMhxx5Kr.mjs";
+import { Ut as EventCategory, _t as BaseAddon, q as localNetworkCapability } from "../../dist-DXDvrBi0.mjs";
 import * as os from "node:os";
 //#region src/builtins/local-network/local-network.addon.ts
 /**

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYqL8oZq.js");
+const require_dist = require("../../dist-BH2tZ9ZN.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { J as logDestinationCapability, _t as BaseAddon } from "../../dist-DMhxx5Kr.mjs";
+import { J as logDestinationCapability, _t as BaseAddon } from "../../dist-DXDvrBi0.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYqL8oZq.js");
+const require_dist = require("../../dist-BH2tZ9ZN.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { At as createEvent, Ut as EventCategory, Z as metricsProviderCapability, _t as BaseAddon } from "../../dist-DMhxx5Kr.mjs";
+import { At as createEvent, Ut as EventCategory, Z as metricsProviderCapability, _t as BaseAddon } from "../../dist-DXDvrBi0.mjs";
 import { execFile, execFileSync } from "node:child_process";
 import { promisify } from "node:util";
 import * as os from "node:os";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYqL8oZq.js");
+const require_dist = require("../../dist-BH2tZ9ZN.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { F as enumerateInferenceDevices, Mt as emitReadiness, Ut as EventCategory, _t as BaseAddon, gt as errMsg, ot as scoreRuntimes, tt as platformProbeCapability } from "../../dist-DMhxx5Kr.mjs";
+import { F as enumerateInferenceDevices, Mt as emitReadiness, Ut as EventCategory, _t as BaseAddon, gt as errMsg, ot as scoreRuntimes, tt as platformProbeCapability } from "../../dist-DXDvrBi0.mjs";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import * as os from "node:os";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYqL8oZq.js");
+const require_dist = require("../../dist-BH2tZ9ZN.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ut as EventCategory, _t as BaseAddon } from "../../dist-DMhxx5Kr.mjs";
+import { Ut as EventCategory, _t as BaseAddon } from "../../dist-DXDvrBi0.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYqL8oZq.js");
+const require_dist = require("../../dist-BH2tZ9ZN.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Ct as DeviceType, It as nodePin, Ut as EventCategory, _t as BaseAddon, ct as snapshotCapability, ft as streamQualityLabel, gt as errMsg, i as BatteryStatusSchema, w as bareAddonId, xt as DeviceFeature } from "../../dist-DMhxx5Kr.mjs";
+import { Ct as DeviceType, It as nodePin, Ut as EventCategory, _t as BaseAddon, ct as snapshotCapability, ft as streamQualityLabel, gt as errMsg, i as BatteryStatusSchema, w as bareAddonId, xt as DeviceFeature } from "../../dist-DXDvrBi0.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { signExpiringUrl, verifyExpiringUrl } from "@camstack/types/node";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYqL8oZq.js");
+const require_dist = require("../../dist-BH2tZ9ZN.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { _t as BaseAddon, dt as storageProviderCapability, z as filesystemBrowseCapability } from "../../dist-DMhxx5Kr.mjs";
+import { _t as BaseAddon, dt as storageProviderCapability, z as filesystemBrowseCapability } from "../../dist-DXDvrBi0.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYqL8oZq.js");
+const require_dist = require("../../dist-BH2tZ9ZN.js");
 let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
 let node_module = require("node:module");
@@ -1144,10 +1144,21 @@ var SqliteSettingsBackend = class SqliteSettingsBackend {
 			}
 		}
 		this.getDb().exec(`CREATE TABLE IF NOT EXISTS "${table}" (${colDefs.join(", ")})`);
-		if (schema.indexes) for (const idx of schema.indexes) {
-			const unique = idx.unique ? "UNIQUE " : "";
-			const cols = idx.columns.map((c) => `"${c}"`).join(", ");
-			this.getDb().exec(`CREATE ${unique}INDEX IF NOT EXISTS "${idx.name}" ON "${table}" (${cols})`);
+		if (schema.indexes) {
+			const pkName = schema.columns.find((c) => c.primaryKey === true)?.name ?? "id";
+			const nonPkColumns = schema.columns.filter((c) => c.name !== pkName).map((c) => c.name);
+			const kvBlobColumn = nonPkColumns.length === 1 && nonPkColumns[0] === "data" ? "data" : null;
+			const isRealColumn = (field) => field === pkName || nonPkColumns.includes(field);
+			const indexExpr = (field) => {
+				if (isRealColumn(field)) return `"${field}"`;
+				return kvBlobColumn === null ? null : `json_extract("${kvBlobColumn}", '$.${field}')`;
+			};
+			for (const idx of schema.indexes) {
+				const exprs = idx.columns.map((c) => indexExpr(c));
+				if (exprs.some((e) => e === null)) continue;
+				const unique = idx.unique ? "UNIQUE " : "";
+				this.getDb().exec(`CREATE ${unique}INDEX IF NOT EXISTS "${idx.name}" ON "${table}" (${exprs.join(", ")})`);
+			}
 		}
 		this.structuredTables.set(table, fingerprint);
 	}

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,4 +1,4 @@
-import { A as decodeVectorBase64, Dt as asJsonObject, Rt as parseJsonUnknown, _t as BaseAddon, f as RUNTIME_DEFAULTS, gt as errMsg, ht as vectorStoreCapability, k as dataStoreProviderCapability, mt as vectorDimFromBase64, w as bareAddonId } from "../../dist-DMhxx5Kr.mjs";
+import { A as decodeVectorBase64, Dt as asJsonObject, Rt as parseJsonUnknown, _t as BaseAddon, f as RUNTIME_DEFAULTS, gt as errMsg, ht as vectorStoreCapability, k as dataStoreProviderCapability, mt as vectorDimFromBase64, w as bareAddonId } from "../../dist-DXDvrBi0.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { statSync } from "node:fs";
@@ -1138,10 +1138,21 @@ var SqliteSettingsBackend = class SqliteSettingsBackend {
 			}
 		}
 		this.getDb().exec(`CREATE TABLE IF NOT EXISTS "${table}" (${colDefs.join(", ")})`);
-		if (schema.indexes) for (const idx of schema.indexes) {
-			const unique = idx.unique ? "UNIQUE " : "";
-			const cols = idx.columns.map((c) => `"${c}"`).join(", ");
-			this.getDb().exec(`CREATE ${unique}INDEX IF NOT EXISTS "${idx.name}" ON "${table}" (${cols})`);
+		if (schema.indexes) {
+			const pkName = schema.columns.find((c) => c.primaryKey === true)?.name ?? "id";
+			const nonPkColumns = schema.columns.filter((c) => c.name !== pkName).map((c) => c.name);
+			const kvBlobColumn = nonPkColumns.length === 1 && nonPkColumns[0] === "data" ? "data" : null;
+			const isRealColumn = (field) => field === pkName || nonPkColumns.includes(field);
+			const indexExpr = (field) => {
+				if (isRealColumn(field)) return `"${field}"`;
+				return kvBlobColumn === null ? null : `json_extract("${kvBlobColumn}", '$.${field}')`;
+			};
+			for (const idx of schema.indexes) {
+				const exprs = idx.columns.map((c) => indexExpr(c));
+				if (exprs.some((e) => e === null)) continue;
+				const unique = idx.unique ? "UNIQUE " : "";
+				this.getDb().exec(`CREATE ${unique}INDEX IF NOT EXISTS "${idx.name}" ON "${table}" (${exprs.join(", ")})`);
+			}
 		}
 		this.structuredTables.set(table, fingerprint);
 	}

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,13 +3,18 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYqL8oZq.js");
+const require_dist = require("../../dist-BH2tZ9ZN.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);
 //#region src/builtins/storage-orchestrator/location-store.ts
+/**
+* @durable class=config owner=storage-orchestrator
+*   write="an operator creates or edits a location (basePath, minFreePercent, enabled, node pin); plus the boot reconcile — declared defaults seeded on a fresh install, and in-memory-only locations backfilled when the store is late-wired"
+*   retention="none — a row goes only when the operator deletes the location, or when the declaration pass prunes one whose declaring addon is gone. Bounded by the storage targets a human configures."
+*/
 var STORAGE_LOCATIONS = "storage_locations";
 /**
 * Reserved key under which the cluster `nodeId` (SP1) is persisted INSIDE
@@ -799,11 +804,23 @@ var StorageOrchestratorService = class {
 	*   2. backfill — in-memory locations the DB doesn't have yet (the
 	*      pre-store seed defaults on a fresh install) are persisted, so the
 	*      store becomes the durable source of truth from here on.
+	*
+	* **The re-entry guard latches on a SUCCESSFUL hydrate, not on the attempt** —
+	* `loadAll()` is awaited BEFORE `this.locationStore` is assigned, and the
+	* order is load-bearing. Latching first meant one transient read error
+	* answered `hasStore()` true forever, so the addon's `ensureStoreWired` gate
+	* skipped every retry; the service then ran the whole process lifetime on
+	* pre-store seed defaults while `upsert` mirrored them onto rows it had never
+	* read, silently replacing the operator's persisted `minFreePercent`. Failing
+	* back to store-less is the safe direction: an in-memory-only service writes
+	* nothing over what is on disk, and the next `capability:provider-registered`
+	* event tries again. Held by
+	* `__tests__/storage-orchestrator-persistence.spec.ts`.
 	*/
 	async attachStore(store) {
 		if (this.locationStore) return;
-		this.locationStore = store;
 		const rows = await store.loadAll();
+		this.locationStore = store;
 		const dbIds = new Set(rows.map((r) => r.id));
 		for (const loc of rows) {
 			const upgraded = !loc.isSystem && loc.id === `${loc.type}:default` ? {

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,8 +1,13 @@
-import { Lt as parseJsonObject, _t as BaseAddon, g as StorageMigrationJobSchema, h as StorageLocationTypeSchema, lt as storageCapability, st as settingsStoreCapability, ut as storageMigrationCapability } from "../../dist-DMhxx5Kr.mjs";
+import { Lt as parseJsonObject, _t as BaseAddon, g as StorageMigrationJobSchema, h as StorageLocationTypeSchema, lt as storageCapability, st as settingsStoreCapability, ut as storageMigrationCapability } from "../../dist-DXDvrBi0.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";
 //#region src/builtins/storage-orchestrator/location-store.ts
+/**
+* @durable class=config owner=storage-orchestrator
+*   write="an operator creates or edits a location (basePath, minFreePercent, enabled, node pin); plus the boot reconcile — declared defaults seeded on a fresh install, and in-memory-only locations backfilled when the store is late-wired"
+*   retention="none — a row goes only when the operator deletes the location, or when the declaration pass prunes one whose declaring addon is gone. Bounded by the storage targets a human configures."
+*/
 var STORAGE_LOCATIONS = "storage_locations";
 /**
 * Reserved key under which the cluster `nodeId` (SP1) is persisted INSIDE
@@ -792,11 +797,23 @@ var StorageOrchestratorService = class {
 	*   2. backfill — in-memory locations the DB doesn't have yet (the
 	*      pre-store seed defaults on a fresh install) are persisted, so the
 	*      store becomes the durable source of truth from here on.
+	*
+	* **The re-entry guard latches on a SUCCESSFUL hydrate, not on the attempt** —
+	* `loadAll()` is awaited BEFORE `this.locationStore` is assigned, and the
+	* order is load-bearing. Latching first meant one transient read error
+	* answered `hasStore()` true forever, so the addon's `ensureStoreWired` gate
+	* skipped every retry; the service then ran the whole process lifetime on
+	* pre-store seed defaults while `upsert` mirrored them onto rows it had never
+	* read, silently replacing the operator's persisted `minFreePercent`. Failing
+	* back to store-less is the safe direction: an in-memory-only service writes
+	* nothing over what is on disk, and the next `capability:provider-registered`
+	* event tries again. Held by
+	* `__tests__/storage-orchestrator-persistence.spec.ts`.
 	*/
 	async attachStore(store) {
 		if (this.locationStore) return;
-		this.locationStore = store;
 		const rows = await store.loadAll();
+		this.locationStore = store;
 		const dbIds = new Set(rows.map((r) => r.id));
 		for (const loc of rows) {
 			const upgraded = !loc.isSystem && loc.id === `${loc.type}:default` ? {

package/dist/builtins/storage-orchestrator/storage-orchestrator.service.d.ts

@@ -139,6 +139,18 @@ export declare class StorageOrchestratorService {
      *   2. backfill — in-memory locations the DB doesn't have yet (the
      *      pre-store seed defaults on a fresh install) are persisted, so the
      *      store becomes the durable source of truth from here on.
+     *
+     * **The re-entry guard latches on a SUCCESSFUL hydrate, not on the attempt** —
+     * `loadAll()` is awaited BEFORE `this.locationStore` is assigned, and the
+     * order is load-bearing. Latching first meant one transient read error
+     * answered `hasStore()` true forever, so the addon's `ensureStoreWired` gate
+     * skipped every retry; the service then ran the whole process lifetime on
+     * pre-store seed defaults while `upsert` mirrored them onto rows it had never
+     * read, silently replacing the operator's persisted `minFreePercent`. Failing
+     * back to store-less is the safe direction: an in-memory-only service writes
+     * nothing over what is on disk, and the next `capability:provider-registered`
+     * event tries again. Held by
+     * `__tests__/storage-orchestrator-persistence.spec.ts`.
      */
     attachStore(store: ILocationStore): Promise<void>;
     /**

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYqL8oZq.js");
+const require_dist = require("../../dist-BH2tZ9ZN.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { Pt as hydrateSchema, _t as BaseAddon, gt as errMsg } from "../../dist-DMhxx5Kr.mjs";
+import { Pt as hydrateSchema, _t as BaseAddon, gt as errMsg } from "../../dist-DXDvrBi0.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CYqL8oZq.js");
+const require_dist = require("../../dist-BH2tZ9ZN.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { J as logDestinationCapability, _t as BaseAddon } from "../../dist-DMhxx5Kr.mjs";
+import { J as logDestinationCapability, _t as BaseAddon } from "../../dist-DXDvrBi0.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";