camstack 1.2.111 → 1.2.112

package/dist/{launcher-D6HMI7VW.js → launcher-4QDDQ4WQ.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-CcV3k-hD.js
-var require_dist_CcV3k_hD = __commonJS({
-  "../system/dist/dist-CcV3k-hD.js"(exports) {
+// ../system/dist/dist-jZb-HKI5.js
+var require_dist_jZb_HKI5 = __commonJS({
+  "../system/dist/dist-jZb-HKI5.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -26081,46 +26081,6 @@ var require_dist_CcV3k_hD = __commonJS({
     function logLevelAtMost(level, threshold) {
       return LOG_LEVEL_RANK[level] <= LOG_LEVEL_RANK[threshold];
     }
-    var LogChannelLevelSchema = zod.z.enum([
-      "info",
-      "warn",
-      "error"
-    ]);
-    var LogChannelDescriptorSchema = zod.z.object({
-      /**
-      * Dotted `area.thing`, unique across the workspace. `area` is conventionally
-      * the addon's short name so an operator reading a channel list can tell who
-      * owns it without a second lookup.
-      */
-      name: zod.z.string().min(3).regex(/^[a-z0-9-]+(\.[a-z0-9-]+)+$/, "a channel name is dotted lower-kebab, e.g. area.thing"),
-      /** One sentence: what the operator will SEE after arming it. */
-      description: zod.z.string().min(1),
-      /** The level its lines are emitted at. Never below `info`. */
-      defaultLevel: LogChannelLevelSchema,
-      /**
-      * Whether this channel can be narrowed to a camera.
-      *
-      * `true` is a PROMISE with two halves, and both must hold: the gate is
-      * consulted with the numeric device id, AND every line the channel admits
-      * carries `tags: { deviceId }` with that same numeric id. The second half is
-      * what makes `| json | deviceId="617"` work in Loki — `loki-payload.ts`
-      * keeps `deviceId` out of the stream labels for cardinality, so the tag in
-      * the body is the only way to filter.
-      *
-      * A channel whose lines carry the device only in `meta` (or not at all) is
-      * declared `false`. Declaring it `true` anyway would be a lie the UI repeats:
-      * the operator narrows to one camera, sees nothing, and concludes the code
-      * path was never taken.
-      */
-      perDevice: zod.z.boolean()
-    });
-    var LogChannelWindowSchema = zod.z.object({
-      channel: zod.z.string().min(1),
-      /** Epoch ms the window closes at. */
-      armedUntilMs: zod.z.number(),
-      /** `null` = every camera. A non-empty list narrows to those numeric ids. */
-      deviceIds: zod.z.array(zod.z.number().int()).readonly().nullable()
-    });
     var OpsLogDomainSchema = zod.z.enum(["recording", "events"]);
     var OpsLogOpSchema = zod.z.enum([
       "prune",
@@ -26711,21 +26671,20 @@ var require_dist_CcV3k_hD = __commonJS({
       * flag at upsert time, not here (the schema is provider-agnostic).
       */
       nodeId: zod.z.string().optional(),
-      isDefault: zod.z.boolean().default(false),
       isSystem: zod.z.boolean().default(false),
       /**
-      * Operator opt-in: whether consumers that BALANCE across several locations
-      * of a type may write here. Recordings reads it today; event media and
-      * backups are the next consumers, which is why the flag lives on the
-      * location rather than in any one addon's store — nothing has to be
-      * extended to add the next consumer.
+      * THE write switch, and the only one (D383). `enabled: true` means every
+      * consumer that chooses a write target for this type may write here, and all
+      * enabled locations of a type are used TOGETHER; `false` means read-only —
+      * still read, still played back, still age-swept, still drained, never
+      * written.
       *
-      * OPTIONAL, and ABSENT MEANS ACTIVE. Every location persisted before the
-      * flag existed reads back with no flag and keeps working exactly as before;
-      * that is the whole compat story, and it is why no migration ships with it.
-      * A newly CREATED sibling is stamped `false` by the orchestrator (creating a
-      * disk must not silently start writing to it); the default of a type is
-      * always stamped `true`.
+      * OPTIONAL only for the wire: an upsert that omits it means "leave what is
+      * stored" on an update and "born inert unless it is the first location of its
+      * type" on a create. On a PERSISTED row absence is legacy and it means
+      * enabled — {@link isLocationEnabled} is the one place that says so, and the
+      * orchestrator stamps every flagless row `true` once at hydrate so absence
+      * stops existing rather than being re-derived on every read.
       */
       enabled: zod.z.boolean().optional(),
       /** COMPUTED at read time by the orchestrator (statfs of the backing volume
@@ -26738,6 +26697,10 @@ var require_dist_CcV3k_hD = __commonJS({
       createdAt: zod.z.number(),
       updatedAt: zod.z.number()
     });
+    var LegacyStorageLocationDefaultSchema = zod.z.object({ isDefault: zod.z.boolean().optional() });
+    function isLocationEnabled(location) {
+      return location.enabled !== false;
+    }
     var StorageLocationRefSchema = zod.z.union([StorageLocationTypeSchema, zod.z.string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/)]);
     var StorageAccessSchema = zod.z.enum(["local-path", "cap-mediated"]);
     var STORAGE_ACCESS_FALLBACK = "local-path";
@@ -26865,6 +26828,46 @@ var require_dist_CcV3k_hD = __commonJS({
       */
       debug: zod.z.boolean().optional()
     });
+    var LogChannelLevelSchema = zod.z.enum([
+      "info",
+      "warn",
+      "error"
+    ]);
+    var LogChannelDescriptorSchema = zod.z.object({
+      /**
+      * Dotted `area.thing`, unique across the workspace. `area` is conventionally
+      * the addon's short name so an operator reading a channel list can tell who
+      * owns it without a second lookup.
+      */
+      name: zod.z.string().min(3).regex(/^[a-z0-9-]+(\.[a-z0-9-]+)+$/, "a channel name is dotted lower-kebab, e.g. area.thing"),
+      /** One sentence: what the operator will SEE after arming it. */
+      description: zod.z.string().min(1),
+      /** The level its lines are emitted at. Never below `info`. */
+      defaultLevel: LogChannelLevelSchema,
+      /**
+      * Whether this channel can be narrowed to a camera.
+      *
+      * `true` is a PROMISE with two halves, and both must hold: the gate is
+      * consulted with the numeric device id, AND every line the channel admits
+      * carries `tags: { deviceId }` with that same numeric id. The second half is
+      * what makes `| json | deviceId="617"` work in Loki — `loki-payload.ts`
+      * keeps `deviceId` out of the stream labels for cardinality, so the tag in
+      * the body is the only way to filter.
+      *
+      * A channel whose lines carry the device only in `meta` (or not at all) is
+      * declared `false`. Declaring it `true` anyway would be a lie the UI repeats:
+      * the operator narrows to one camera, sees nothing, and concludes the code
+      * path was never taken.
+      */
+      perDevice: zod.z.boolean()
+    });
+    var LogChannelWindowSchema = zod.z.object({
+      channel: zod.z.string().min(1),
+      /** Epoch ms the window closes at. */
+      armedUntilMs: zod.z.number(),
+      /** `null` = every camera. A non-empty list narrows to those numeric ids. */
+      deviceIds: zod.z.array(zod.z.number().int()).readonly().nullable()
+    });
     var UNATTRIBUTED_BUCKET_KEY = "__unattributed__";
     var ROOT_BUCKET_KEY = "__root__";
     function bucketFor(row) {
@@ -40670,7 +40673,6 @@ var require_dist_CcV3k_hD = __commonJS({
         }), zod.z.instanceof(Uint8Array)),
         endDownload: method(zod.z.object({ downloadId: zod.z.string() }), zod.z.void(), { kind: "mutation" }),
         listLocations: method(zod.z.object({ type: StorageLocationTypeSchema.optional() }), zod.z.array(StorageLocationSchema).readonly()),
-        getDefaultLocation: method(zod.z.object({ type: StorageLocationTypeSchema }), StorageLocationSchema.nullable()),
         listLocationDeclarations: method(zod.z.void(), zod.z.array(StorageLocationDeclarationSchema).readonly()),
         upsertLocation: method(StorageLocationSchema.omit({
           createdAt: true,
@@ -50706,6 +50708,26 @@ var require_dist_CcV3k_hD = __commonJS({
       "ffmpeg.threadCount": 0,
       "auth.tokenExpiry": "30d"
     };
+    var AccessoryKind = {
+      Siren: DeviceRole.Siren,
+      Floodlight: DeviceRole.Floodlight,
+      Spotlight: DeviceRole.Spotlight,
+      PirSensor: DeviceRole.PirSensor,
+      Chime: DeviceRole.Chime,
+      Autotrack: DeviceRole.Autotrack,
+      Nightvision: DeviceRole.Nightvision,
+      PrivacyMask: DeviceRole.PrivacyMask
+    };
+    AccessoryKind.Siren, AccessoryKind.Floodlight, AccessoryKind.Spotlight, AccessoryKind.PirSensor, AccessoryKind.Chime, AccessoryKind.Autotrack, AccessoryKind.Nightvision, AccessoryKind.PrivacyMask;
+    function deriveBatteryPresence(input) {
+      const status = input.status;
+      if (!status) return "sleeping";
+      if (status.sleeping !== true) return "awake";
+      const lastContactAt = status.lastContactAt;
+      if (typeof lastContactAt !== "number" || lastContactAt <= 0) return "sleeping";
+      const budget = input.unreachableAfterMs ?? 216e5;
+      return input.nowMs - lastContactAt > budget ? "unreachable" : "sleeping";
+    }
     var CONTAINER_CHILD_PRIORITY = [
       "media-player",
       "alarm-panel",
@@ -50762,26 +50784,6 @@ var require_dist_CcV3k_hD = __commonJS({
       const namesake = (c) => containerName !== void 0 && containerName.length > 0 && c.name !== void 0 && c.name.toLowerCase() === containerName.toLowerCase() ? 0 : 1;
       return [...children].toSorted((a, b) => roleRank(a.role) - roleRank(b.role) || namesake(a) - namesake(b) || rank(a.type) - rank(b.type))[0] ?? null;
     }
-    var AccessoryKind = {
-      Siren: DeviceRole.Siren,
-      Floodlight: DeviceRole.Floodlight,
-      Spotlight: DeviceRole.Spotlight,
-      PirSensor: DeviceRole.PirSensor,
-      Chime: DeviceRole.Chime,
-      Autotrack: DeviceRole.Autotrack,
-      Nightvision: DeviceRole.Nightvision,
-      PrivacyMask: DeviceRole.PrivacyMask
-    };
-    AccessoryKind.Siren, AccessoryKind.Floodlight, AccessoryKind.Spotlight, AccessoryKind.PirSensor, AccessoryKind.Chime, AccessoryKind.Autotrack, AccessoryKind.Nightvision, AccessoryKind.PrivacyMask;
-    function deriveBatteryPresence(input) {
-      const status = input.status;
-      if (!status) return "sleeping";
-      if (status.sleeping !== true) return "awake";
-      const lastContactAt = status.lastContactAt;
-      if (typeof lastContactAt !== "number" || lastContactAt <= 0) return "sleeping";
-      const budget = input.unreachableAfterMs ?? 216e5;
-      return input.nowMs - lastContactAt > budget ? "unreachable" : "sleeping";
-    }
     var DECLARED_INTEGRATION_FIXED_KEY = "fixed";
     function declarationOwnerNodeId(localNodeId) {
       const raw = localNodeId ?? "hub";
@@ -56221,12 +56223,6 @@ var require_dist_CcV3k_hD = __commonJS({
         addonId: null,
         access: "view"
       },
-      "storage.getDefaultLocation": {
-        capName: "storage",
-        capScope: "system",
-        addonId: null,
-        access: "view"
-      },
       "storage.list": {
         capName: "storage",
         capScope: "system",
@@ -60112,6 +60108,12 @@ var require_dist_CcV3k_hD = __commonJS({
         return LOG_LEVEL_RANK;
       }
     });
+    Object.defineProperty(exports, "LegacyStorageLocationDefaultSchema", {
+      enumerable: true,
+      get: function() {
+        return LegacyStorageLocationDefaultSchema;
+      }
+    });
     Object.defineProperty(exports, "METHOD_ACCESS_MAP", {
       enumerable: true,
       get: function() {
@@ -60442,6 +60444,12 @@ var require_dist_CcV3k_hD = __commonJS({
         return isDeviceConfigCap;
       }
     });
+    Object.defineProperty(exports, "isLocationEnabled", {
+      enumerable: true,
+      get: function() {
+        return isLocationEnabled;
+      }
+    });
     Object.defineProperty(exports, "isObjectInput", {
       enumerable: true,
       get: function() {
@@ -60694,7 +60702,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CcV3k_hD();
+    var require_dist10 = require_dist_jZb_HKI5();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -61513,7 +61521,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CcV3k_hD();
+    var require_dist10 = require_dist_jZb_HKI5();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -61607,7 +61615,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CcV3k_hD();
+    var require_dist10 = require_dist_jZb_HKI5();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -62504,11 +62512,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-Bd8fuwO1.js
-var require_retired_settings_keys_Bd8fuwO1 = __commonJS({
-  "../system/dist/retired-settings-keys-Bd8fuwO1.js"(exports) {
+// ../system/dist/retired-settings-keys-Dxv9S_lO.js
+var require_retired_settings_keys_Dxv9S_lO = __commonJS({
+  "../system/dist/retired-settings-keys-Dxv9S_lO.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_CcV3k_hD();
+    var require_dist10 = require_dist_jZb_HKI5();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -64722,8 +64730,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CcV3k_hD();
-    var require_retired_settings_keys = require_retired_settings_keys_Bd8fuwO1();
+    var require_dist10 = require_dist_jZb_HKI5();
+    var require_retired_settings_keys = require_retired_settings_keys_Dxv9S_lO();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -70348,7 +70356,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CcV3k_hD();
+    var require_dist10 = require_dist_jZb_HKI5();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -70485,7 +70493,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CcV3k_hD();
+    var require_dist10 = require_dist_jZb_HKI5();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -70681,7 +70689,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CcV3k_hD();
+    var require_dist10 = require_dist_jZb_HKI5();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -78494,7 +78502,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CcV3k_hD();
+    var require_dist10 = require_dist_jZb_HKI5();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -79059,7 +79067,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CcV3k_hD();
+    var require_dist10 = require_dist_jZb_HKI5();
     var node_fs_promises = __require("fs/promises");
     var node_child_process = __require("child_process");
     var node_util = __require("util");
@@ -81643,7 +81651,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CcV3k_hD();
+    var require_dist10 = require_dist_jZb_HKI5();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -82759,8 +82767,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CcV3k_hD();
-    var require_retired_settings_keys = require_retired_settings_keys_Bd8fuwO1();
+    var require_dist10 = require_dist_jZb_HKI5();
+    var require_retired_settings_keys = require_retired_settings_keys_Dxv9S_lO();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -85250,7 +85258,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CcV3k_hD();
+    var require_dist10 = require_dist_jZb_HKI5();
     var require_hub_cap_forward = require_hub_cap_forward_DmHNjbB0();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -85397,7 +85405,7 @@ var require_storage_orchestrator_addon = __commonJS({
         display_name: loc.displayName,
         provider_id: loc.providerId,
         config: storedConfig,
-        is_default: loc.isDefault ? 1 : 0,
+        is_default: 0,
         is_system: loc.isSystem ? 1 : 0,
         created_at: loc.createdAt,
         updated_at: loc.updatedAt
@@ -85426,7 +85434,7 @@ var require_storage_orchestrator_addon = __commonJS({
         config,
         ...nodeId !== void 0 ? { nodeId } : {},
         ...enabled !== void 0 ? { enabled } : {},
-        isDefault: row["is_default"] === 1 || row["is_default"] === true,
+        ...require_dist10.LegacyStorageLocationDefaultSchema.parse({ isDefault: row["is_default"] === 1 || row["is_default"] === true }),
         isSystem: row["is_system"] === 1 || row["is_system"] === true,
         createdAt: Number(row["created_at"] ?? 0),
         updatedAt: Number(row["updated_at"] ?? 0)
@@ -85475,16 +85483,18 @@ var require_storage_orchestrator_addon = __commonJS({
           const targetId = input.destinations[storageClass];
           if (targetId === void 0) continue;
           const namedSourceId = input.sources?.[storageClass];
-          const defaultLoc = this.deps.locations.getDefaultLocation(storageClass);
-          const source = namedSourceId ? this.deps.locations.getLocationById(namedSourceId) : defaultLoc;
-          if (!source) throw new Error(namedSourceId ? `Storage location "${namedSourceId}" not found` : `No default storage location for "${storageClass}"`);
+          const writeSet = this.deps.locations.writeTargets(storageClass);
+          const implicitSources = writeSet.filter((loc) => loc.id !== targetId);
+          if (!namedSourceId && implicitSources.length > 1) throw new Error(`"${storageClass}" writes to ${String(implicitSources.length)} locations (${implicitSources.map((loc) => loc.id).join(", ")}) \u2014 name the one to cut over explicitly with \`sources\`.`);
+          const source = namedSourceId ? this.deps.locations.getLocationById(namedSourceId) : implicitSources[0];
+          if (!source) throw new Error(namedSourceId ? `Storage location "${namedSourceId}" not found` : `Storage location "${targetId}" is already the only write target for "${storageClass}" \u2014 there is nothing to cut over. Use storageMigration.drain to move what is left behind.`);
           if (source.type !== storageClass) throw new Error(`Storage location "${source.id}" is type "${source.type}", expected "${storageClass}"`);
           const target = this.deps.locations.getLocationById(targetId);
           if (!target) throw new Error(`Storage location "${targetId}" not found`);
           if (target.type !== storageClass) throw new Error(`Storage location "${targetId}" is type "${target.type}", expected "${storageClass}"`);
-          if (source.id === target.id) throw new Error(namedSourceId ? `Source and destination are the same location ("${targetId}")` : `Storage location "${targetId}" is already the "${storageClass}" default`);
-          const freezeSource = defaultLoc === null || source.id !== defaultLoc.id;
-          if (!MOVER_CLASSES.includes(storageClass)) throw new Error(`No mover owns "${storageClass}" \u2014 the migration can repoint its default but cannot move its bytes. Move it by hand, then repoint the default with upsertLocation.`);
+          if (source.id === target.id) throw new Error(namedSourceId ? `Source and destination are the same location ("${targetId}")` : `Storage location "${targetId}" is already the only write target for "${storageClass}"`);
+          const freezeSource = !writeSet.some((loc) => loc.id === source.id);
+          if (!MOVER_CLASSES.includes(storageClass)) throw new Error(`No mover owns "${storageClass}" \u2014 the migration can move its write set but cannot move its bytes. Move it by hand, then enable the destination (and disable the source) with upsertLocation.`);
           moves.push({
             storageClass,
             fromLocationId: source.id,
@@ -85501,7 +85511,7 @@ var require_storage_orchestrator_addon = __commonJS({
         if (moves.some((move) => move.storageClass === "eventMedia")) {
           const unstamped = await this.deps.participants.analytics.countUnstamped();
           if (unstamped === null) {
-            if (mode === "nonBlocking") throw new Error("could not determine whether any event-media row still carries no locationId. A non-blocking cutover repoints the default and would silently orphan every such row, so an unmeasured collection is refused exactly like a non-empty one. Retry, or run the blocking mode, which stamps rows as it moves them.");
+            if (mode === "nonBlocking") throw new Error("could not determine whether any event-media row still carries no locationId. A non-blocking cutover moves the write set and would silently orphan every such row, so an unmeasured collection is refused exactly like a non-empty one. Retry, or run the blocking mode, which stamps rows as it moves them.");
             findings.push({
               code: "unstampedEventMediaRows",
               storageClass: "eventMedia",
@@ -85510,7 +85520,7 @@ var require_storage_orchestrator_addon = __commonJS({
           } else if (unstamped.anyPresent) {
             const scale = unstamped.total === null ? "an unknown number of" : unstamped.total.toString();
             const perLane = `${describeUnstamped(unstamped.media)} media, ${describeUnstamped(unstamped.retrainFrames)} retrain frames`;
-            if (mode === "nonBlocking") throw new Error(`${scale} event-media row(s) still carry no locationId (${perLane}). A non-blocking cutover would silently orphan them. Run the seal first: pipelineAnalytics.relocateMedia({ mode: "seal", toLocationId: "${this.deps.locations.getDefaultLocation("eventMedia")?.id ?? "eventMedia"}" }).`);
+            if (mode === "nonBlocking") throw new Error(`${scale} event-media row(s) still carry no locationId (${perLane}). A non-blocking cutover would silently orphan them. Run the seal first: pipelineAnalytics.relocateMedia({ mode: "seal", toLocationId: "${this.deps.locations.writeTargets("eventMedia")[0]?.id ?? "eventMedia"}" }).`);
             findings.push({
               code: "unstampedEventMediaRows",
               storageClass: "eventMedia",
@@ -85649,7 +85659,7 @@ var require_storage_orchestrator_addon = __commonJS({
       * remaining" action.
       *
       * A class appears here only when something is (or might be) left on a
-      * location that is not its default. An empty result therefore means exactly
+      * location outside its write set. An empty result therefore means exactly
       * "there is nothing to drain", which is what lets the UI offer the action
       * only when it is true, and what lets {@link drain} refuse rather than start
       * a job that would move nothing and report `done` — the failure mode D295
@@ -85663,11 +85673,13 @@ var require_storage_orchestrator_addon = __commonJS({
         const out = [];
         for (const storageClass of STORAGE_CLASSES) {
           if (!MOVER_CLASSES.includes(storageClass)) continue;
-          const target = this.deps.locations.getDefaultLocation(storageClass);
+          const writeSet = this.deps.locations.writeTargets(storageClass);
+          const target = writeSet[0];
           if (!target) continue;
+          const inWriteSet = new Set(writeSet.map((loc) => loc.id));
           if (laneOf(storageClass) === "media") {
             for (const source of this.deps.locations.listLocations({ type: storageClass })) {
-              if (source.id === target.id) continue;
+              if (inWriteSet.has(source.id)) continue;
               const count = await unanswerable(this.deps.participants.analytics.residue({
                 toLocationId: target.id,
                 fromLocationId: source.id,
@@ -85685,7 +85697,7 @@ var require_storage_orchestrator_addon = __commonJS({
             continue;
           }
           for (const source of this.deps.locations.listLocations({ type: storageClass })) {
-            if (source.id === target.id) continue;
+            if (inWriteSet.has(source.id)) continue;
             const census = await unanswerable(this.deps.participants.recorder.residue({
               fromLocationId: source.id,
               footageClass: storageClass === "recordingsLow" ? "recordingsLow" : "recordings"
@@ -85703,12 +85715,12 @@ var require_storage_orchestrator_addon = __commonJS({
         return out;
       }
       /**
-      * Run the DRAIN half alone, against classes whose default has already moved.
+      * Run the DRAIN half alone, against classes whose write set has already moved.
       *
       * ## Why this is a second verb rather than a looser `start`
       *
-      * `start` refuses a destination that is already the class's default
-      * (`"recordingsLow:ssd" is already the "recordingsLow" default`). That refusal
+      * `start` refuses a destination that is already the class's only write target
+      * (`"recordingsLow:ssd" is already the only write target for "recordingsLow"`). That refusal
       * is correct and it is load-bearing: there is genuinely nothing left to
       * repoint, and an operator must never be able to re-repoint a migrated class
       * by accident. Making `start` idempotent — "an already-repointed class
@@ -85717,7 +85729,7 @@ var require_storage_orchestrator_addon = __commonJS({
       * operator reads ("pauses the writers…") would be a lie half the time.
       *
       * `drain` instead cannot repoint AT ALL: it never touches
-      * `setDefaultLocations`, and its job starts in `draining` with `repointed`
+      * `setWriteTargets`, and its job starts in `draining` with `repointed`
       * already true, so the `repointing` / `refreshing` / `resuming` blocks of
       * {@link run} are behind it and unreachable. The two verbs are disjoint, and
       * `start`'s refusal keeps meaning exactly what it meant.
@@ -85727,7 +85739,7 @@ var require_storage_orchestrator_addon = __commonJS({
       * The finished job is the audit of what happened; re-opening it destroys
       * that. And a drain is needed in cases where no migration job ever existed
       * (a mover armed by hand, footage stranded on a location an operator added
-      * and then un-defaulted). One job = one operation, and the work list comes
+      * and then disabled again). One job = one operation, and the work list comes
       * from {@link residue} — the archive — not from what a previous job believed.
       */
       async drain(input) {
@@ -85750,9 +85762,9 @@ var require_storage_orchestrator_addon = __commonJS({
           const destinations = {};
           for (const storageClass of input.classes) {
             const remaining = residue.filter((entry) => entry.storageClass === storageClass);
-            if (remaining.length === 0) throw new Error(`"${storageClass}" has nothing left outside its default location \u2014 there is nothing to drain. To CHANGE where it writes, use storageMigration.start with a new destination.`);
+            if (remaining.length === 0) throw new Error(`"${storageClass}" has nothing left outside its write set \u2014 there is nothing to drain. To CHANGE where it writes, use storageMigration.start with a new destination.`);
             for (const entry of remaining) {
-              if (this.deps.locations.getLocationById(entry.toLocationId)?.enabled === false) throw new Error(`The "${storageClass}" drain destination "${entry.toLocationId}" is DISABLED \u2014 a disabled location takes no writes, and a drain is the largest write there is. Enable it on the Storage screen, or make an enabled location the "${storageClass}" default first.`);
+              if (this.deps.locations.getLocationById(entry.toLocationId)?.enabled === false) throw new Error(`The "${storageClass}" drain destination "${entry.toLocationId}" is DISABLED \u2014 a disabled location takes no writes, and a drain is the largest write there is. Enable it on the Storage screen first.`);
               moves.push({
                 storageClass,
                 fromLocationId: entry.fromLocationId,
@@ -85870,8 +85882,13 @@ var require_storage_orchestrator_addon = __commonJS({
             await this.setPhase(job, "repointing");
           }
           if (job.phase === "repointing") {
-            const targets = new Map(job.moves.filter((move) => move.freezeSource !== true).map((move) => [move.storageClass, move.toLocationId]));
-            if (targets.size > 0) await this.deps.locations.setDefaultLocations(targets);
+            const targets = /* @__PURE__ */ new Map();
+            for (const move of job.moves) {
+              if (move.freezeSource === true) continue;
+              targets.set(move.toLocationId, true);
+              targets.set(move.fromLocationId, false);
+            }
+            if (targets.size > 0) await this.deps.locations.setWriteTargets(targets);
             job.repointed = true;
             await this.setPhase(job, "refreshing");
           }
@@ -86071,9 +86088,9 @@ var require_storage_orchestrator_addon = __commonJS({
         for (const move of job.moves) if (move.state !== "done") throw new Error(`${move.storageClass} move did not complete verification`);
       }
       /**
-      * After a from→to copy whose source was NOT the class default: stop new
-      * writes to `from`. The default is unchanged (that is the whole point of
-      * naming a non-default source). A location that is already disabled is
+      * After a from→to copy whose source was NOT a write target: stop new writes
+      * to `from`. The rest of the write set is unchanged (that is the whole point
+      * of naming a source outside it). A location that is already disabled is
       * left alone.
       */
       freezeDrainedSources(job) {
@@ -86671,33 +86688,77 @@ var require_storage_orchestrator_addon = __commonJS({
           backfilled: backfill.length,
           total: this.locations.size
         } });
-        this.reportDisabledDefaults();
+        this.migrateOntoTheWriteSet(rows);
       }
       /**
-      * Shout about a persisted row that is BOTH the type default and disabled.
+      * ONE explicit migration onto the enabled write set (D383), run once per
+      * boot against the rows that came off disk. Idempotent: the second boot finds
+      * nothing to do.
       *
-      * `upsertLocation` can now produce this (enabled is the write set; `isDefault`
-      * is store residue). Hydrate also writes rows straight into the map, so a
-      * hand-edited store or a row written by another build can too. It matters
-      * because every bare-type ref still resolves through {@link getDefaultLocation}
-      * until Stage 5 of the enabled-write-set design: on such a row
-      * `storage.write({ location: 'eventMedia' })` and the migration coordinator's
-      * drain destination both point at a disk the operator turned off.
+      * Two steps, in order, and each one is a WRITE — the point is that "absent"
+      * stops existing rather than being re-interpreted on every read forever:
       *
-      * Reported, never repaired: flipping an operator's flag back on at boot would
-      * be the system overruling the switch instead of obeying it. The coordinator
-      * refuses the drain (`storage-migration-coordinator.drain`); the bare-ref read
-      * path is deliberately left working, because narrowing a READ is a worse bug
-      * than the one this line reports.
-      */
-      reportDisabledDefaults() {
+      *   1. A flagless row (persisted before `enabled` existed) is stamped
+      *      `enabled: true`. Absence already meant active, so this preserves
+      *      behaviour exactly; it is the operator's "the initial locations are
+      *      enabled" spelled into the store.
+      *   2. A type left with NO enabled row — only reachable from a hand-edited
+      *      store or a row an older build wrote — gets one enabled back, chosen as
+      *      the row the RETIRED default flag named, else the `:default`-slugged
+      *      row, else the lexicographically first. Loudly: a class with no write
+      *      target records nowhere, and refusing to repair it here would leave the
+      *      hub silently unable to write with no operator action pending.
+      *
+      * An operator's explicit `enabled: false` is never reversed by step 1 — only
+      * step 2 touches it, and only when the alternative is a class that cannot
+      * write at all.
+      */
+      migrateOntoTheWriteSet(rows) {
+        const legacyDefaultOfType = /* @__PURE__ */ new Map();
+        for (const row of rows) if (row.isDefault === true) legacyDefaultOfType.set(row.type, row.id);
+        const stamped = [];
         for (const loc of this.locations.values()) {
-          if (!loc.isDefault || loc.enabled !== false) continue;
-          this.logger.error("storage-orchestrator: the type DEFAULT is disabled \u2014 every bare-type ref for this type resolves to a location the operator turned off. Enable it, or make another location the default.", { meta: {
-            id: loc.id,
-            type: loc.type
-          } });
+          if (loc.enabled !== void 0) continue;
+          this.persistMigrated({
+            ...loc,
+            enabled: true
+          });
+          stamped.push(loc.id);
         }
+        const repaired = [];
+        for (const type of new Set([...this.locations.values()].map((l) => l.type))) {
+          const ofType = [...this.locations.values()].filter((l) => l.type === type);
+          if (ofType.some((l) => require_dist10.isLocationEnabled(l))) continue;
+          const legacyDefault = legacyDefaultOfType.get(type);
+          const pick = ofType.find((l) => l.id === legacyDefault) ?? ofType.find((l) => l.id === `${type}:default`) ?? ofType.toSorted((a, b) => a.id.localeCompare(b.id))[0];
+          if (!pick) continue;
+          this.persistMigrated({
+            ...pick,
+            enabled: true
+          });
+          repaired.push(pick.id);
+        }
+        if (stamped.length > 0 || repaired.length > 0) this.logger.info("storage-orchestrator: migrated locations onto the enabled write set", { meta: {
+          stamped,
+          repaired
+        } });
+        for (const id of repaired) this.logger.warn("storage-orchestrator: a storage type had NO enabled location \u2014 re-enabled one so it can write. Every other location of that type stays read-only until you enable it.", { meta: { id } });
+      }
+      /** Apply one migrated row in memory and mirror it to the store. */
+      persistMigrated(next) {
+        const withStamp = {
+          ...next,
+          updatedAt: Date.now()
+        };
+        this.locations.set(withStamp.id, withStamp);
+        const store = this.locationStore;
+        if (!store) return;
+        store.upsert(withStamp).catch((err) => {
+          this.logger.error("storage-orchestrator: write-set migration persist failed", { meta: {
+            id: withStamp.id,
+            error: err instanceof Error ? err.message : String(err)
+          } });
+        });
       }
       /**
       * Inject the declaration-driven cardinality source. Called once by the
@@ -86752,7 +86813,7 @@ var require_storage_orchestrator_addon = __commonJS({
         const rows = await this.locationStore.loadAll();
         for (const loc of rows) this.locations.set(loc.id, loc);
         this.logger.info("storage-orchestrator: hydrated locations from store", { meta: { loaded: this.locations.size } });
-        this.reportDisabledDefaults();
+        this.migrateOntoTheWriteSet(rows);
       }
       /**
       * Boot backfill (SP1): stamp `nodeId` on every persisted node-local
@@ -86801,40 +86862,51 @@ var require_storage_orchestrator_addon = __commonJS({
         const all = [...this.locations.values()];
         return filter?.type ? all.filter((l) => l.type === filter.type) : all;
       }
-      getDefaultLocation(type) {
-        for (const loc of this.locations.values()) if (loc.type === type && loc.isDefault) return loc;
-        return null;
-      }
       /**
-      * Repoint several logical defaults as one in-memory commit. The migration
-      * coordinator persists its `repointing` phase before calling this method, so
-      * a process crash during the backing-store writes is recovered by replaying
-      * the same idempotent target set before anyone resumes writers.
+      * The WRITE SET of a type: every enabled location of it, in stable id order.
+      * This replaced `getDefaultLocation` (D383) — a type does not have one write
+      * target any more, it has a pool, and every consumer that must pick one picks
+      * from here by its own rule (the recorder by headroom, a drain by an operator
+      * -named destination).
       */
-      async setDefaultLocations(targetByType) {
-        if (targetByType.size === 0) return;
+      writeTargets(type) {
+        return [...this.locations.values()].filter((loc) => loc.type === type && require_dist10.isLocationEnabled(loc)).toSorted((a, b) => a.id.localeCompare(b.id));
+      }
+      /**
+      * Change the WRITE SET as one compensated commit: each named location is
+      * enabled (it joins the pool) or disabled (it becomes read-only — still read,
+      * still played back, still age-swept, still drained).
+      *
+      * This is the cutover verb, and its only caller is the migration coordinator,
+      * which persists its `repointing` phase BEFORE calling so a crash mid-write
+      * is recovered by replaying the same idempotent set before writers resume.
+      *
+      * It moves ONLY the locations it is given: a cutover from A to C on a class
+      * that also writes to B leaves B in the pool, because the operator's pool is
+      * the authority and a migration is not a licence to shrink it. The commit is
+      * refused when it would leave a write-serving type with nothing enabled —
+      * the same refusal `upsertLocation` applies, judged on the RESULT so an
+      * enable and a disable in one commit are weighed together.
+      */
+      async setWriteTargets(enabledByLocationId) {
+        if (enabledByLocationId.size === 0) return;
         const now = Date.now();
         const nextById = new Map(this.locations);
         const touched = /* @__PURE__ */ new Map();
-        for (const [type, targetId] of targetByType) {
-          const target = nextById.get(targetId);
-          if (!target) throw new Error(`Storage location "${targetId}" not found`);
-          if (target.type !== type) throw new Error(`Storage location "${targetId}" is type "${target.type}", expected "${type}"`);
-          for (const [id, location] of nextById) {
-            if (location.type !== type) continue;
-            const isDefault = id === targetId;
-            const enable = isDefault && location.enabled === false;
-            if (location.isDefault === isDefault && !enable) continue;
-            const updated = {
-              ...location,
-              isDefault,
-              ...enable ? { enabled: true } : {},
-              updatedAt: now
-            };
-            nextById.set(id, updated);
-            touched.set(id, updated);
-          }
+        for (const [id, enabled] of enabledByLocationId) {
+          const location = nextById.get(id);
+          if (!location) throw new Error(`Storage location "${id}" not found`);
+          if (location.enabled === enabled) continue;
+          const updated = {
+            ...location,
+            enabled,
+            updatedAt: now
+          };
+          nextById.set(id, updated);
+          touched.set(id, updated);
         }
+        if (touched.size === 0) return;
+        refuseTypeWithoutWriteTarget(touched.values(), nextById.values());
         if (this.locationStore) {
           const previous = /* @__PURE__ */ new Map();
           for (const id of touched.keys()) {
@@ -86855,13 +86927,10 @@ var require_storage_orchestrator_addon = __commonJS({
         for (const [id, location] of nextById) this.locations.set(id, location);
       }
       /**
-      * Insert or update a location. If `isDefault: true`, atomically
-      * demotes any other default for the same type — operators always see
-      * exactly one default per type.
+      * Insert or update a location.
       *
-      * When a persistence store is wired (Task 6), the new record AND any
-      * implicitly-demoted siblings are persisted before the in-memory map
-      * mutation returns. Persistence errors propagate to the caller.
+      * When a persistence store is wired (Task 6), the record is mirrored to it;
+      * the mirror is fire-and-forget and its errors reach the logger.
       */
       /**
       * Refuse a `(location kind, provider)` pair the kind cannot use.
@@ -86947,30 +87016,17 @@ var require_storage_orchestrator_addon = __commonJS({
           updatedAt: now
         };
         refuseLastWriteTargetDisabled(existing, next, this.locations.values());
-        const demoted = [];
-        if (next.isDefault) {
-          for (const [otherId, otherLoc] of this.locations) if (otherLoc.type === next.type && otherLoc.id !== next.id && otherLoc.isDefault) {
-            const updated = {
-              ...otherLoc,
-              isDefault: false,
-              updatedAt: now
-            };
-            this.locations.set(otherId, updated);
-            demoted.push(updated);
-          }
-        }
         this.locations.set(next.id, next);
         this.logger.debug("storage-orchestrator: upsertLocation", { meta: {
           id: next.id,
           type: next.type,
           providerId: next.providerId,
-          isDefault: next.isDefault
+          enabled: next.enabled
         } });
         if (this.locationStore) {
           const store = this.locationStore;
           (async () => {
             try {
-              for (const d of demoted) await store.upsert(d);
               await store.upsert(next);
             } catch (err) {
               this.logger.error("storage-orchestrator: upsert persistence failed", { meta: {
@@ -86985,8 +87041,7 @@ var require_storage_orchestrator_addon = __commonJS({
       /**
       * Remove a location. Refuses the last location of a type and the last
       * enabled location of a type. `isSystem` is informational — a frozen
-      * recordings `:default` is deletable once a sibling is live. Deleting
-      * the flagged default promotes an enabled sibling. Occupancy still
+      * recordings `:default` is deletable once a sibling is live. Occupancy still
       * refuses unless `force` is set; force never overrides uniqueness /
       * last-enabled.
       */
@@ -86997,8 +87052,6 @@ var require_storage_orchestrator_addon = __commonJS({
         if (ofType.length <= 1) throw new Error(`Cannot delete "${id}" \u2014 it is the only location for type "${loc.type}"`);
         const enabledOfType = ofType.filter((l) => l.enabled !== false);
         if (loc.enabled !== false && enabledOfType.length <= 1) throw new Error(`Cannot delete "${id}" \u2014 it is the only enabled location for type "${loc.type}"`);
-        const successor = loc.isDefault === true ? ofType.find((l) => l.id !== id && l.enabled !== false) : void 0;
-        if (loc.isDefault === true && successor === void 0) throw new Error(`Cannot delete "${id}" \u2014 it is the only enabled location for type "${loc.type}"`);
         const occupancy = await this.probeOccupancy(loc);
         if (occupancy !== "empty") {
           if (options?.force !== true) throw new Error(occupancy === "occupied" ? `Storage location "${id}" still holds data \u2014 drain it first (storage migration / relocate), or pass force to delete the record anyway and strand what is on it` : `Storage location "${id}" could not be checked for remaining data (unreachable provider, another node, or an unmounted root) \u2014 pass force to delete the record anyway`);
@@ -87008,21 +87061,6 @@ var require_storage_orchestrator_addon = __commonJS({
             occupancy
           } });
         }
-        if (successor !== void 0 && successor.isDefault !== true) {
-          const now = Date.now();
-          const promoted = {
-            ...successor,
-            isDefault: true,
-            updatedAt: now
-          };
-          this.locations.set(successor.id, promoted);
-          if (this.locationStore) this.locationStore.upsert(promoted).catch((err) => {
-            this.logger.error("storage-orchestrator: default promotion persist failed", { meta: {
-              id: successor.id,
-              error: err instanceof Error ? err.message : String(err)
-            } });
-          });
-        }
         this.locations.delete(id);
         if (this.locationStore) this.locationStore.delete(id).catch((err) => {
           this.logger.error("storage-orchestrator: delete persistence failed", { meta: {
@@ -87101,9 +87139,17 @@ var require_storage_orchestrator_addon = __commonJS({
           if (!loc) throw new Error(`Storage location "${ref}" not found`);
           return loc;
         }
-        const def = this.getDefaultLocation(ref);
-        if (!def) throw new Error(`No default storage location configured for type "${ref}" \u2014 register one or pass a fully-qualified id (\`<type>:<slug>\`)`);
-        return def;
+        const ofType = [...this.locations.values()].filter((loc) => loc.type === ref);
+        if (ofType.length === 1) return ofType[0];
+        if (ofType.length === 0) throw new Error(`No storage location configured for type "${ref}" \u2014 register one or pass a fully-qualified id (\`<type>:<slug>\`)`);
+        const slugged = ofType.find((loc) => loc.id === `${ref}:default`);
+        if (!slugged) throw new Error(`Storage type "${ref}" has ${String(ofType.length)} locations (${ofType.map((loc) => loc.id).toSorted().join(", ")}) \u2014 a bare type ref is ambiguous, pass a fully-qualified id (\`<type>:<slug>\`)`);
+        this.logger.warn("storage-orchestrator: DEPRECATED bare-type ref on a type with several locations \u2014 resolved to the legacy `:default`-slugged row. Pass a fully-qualified location id.", { meta: {
+          ref,
+          resolved: slugged.id,
+          candidates: ofType.length
+        } });
+        return slugged;
       }
       /**
       * Find the storage-provider that backs a given location — the entry point
@@ -87207,9 +87253,11 @@ var require_storage_orchestrator_addon = __commonJS({
       * declarations on a populated map is a no-op (each declared `id`
       * already resolves to an existing `<id>:default`).
       *
-      * Convention: the bare-type ref `'recordings'` resolves via
-      * `getDefaultLocation('recordings')` (walks `isDefault === true`); the
-      * actual stored `id` is `'recordings:default'` so it satisfies the
+      * The seeded row is born ENABLED — a fresh install must be able to write the
+      * moment it boots, and `enabled` is the only write switch there is (D383).
+      * The `:default` suffix is a NAME kept for idempotency across existing
+      * installs, not a flag: the stored `id` is `'recordings:default'` so it
+      * satisfies the
       * `^[a-z][a-z0-9-]*:[a-z0-9-]+$` regex on `StorageLocationSchema.id`.
       *
       * `basePath` is the storage root (e.g. `<CAMSTACK_DATA>`). Each
@@ -87234,7 +87282,7 @@ var require_storage_orchestrator_addon = __commonJS({
             displayName: d.displayName,
             providerId: input.providerId,
             config: { basePath: base },
-            isDefault: true,
+            enabled: true,
             isSystem: false
           });
           added++;
@@ -87254,7 +87302,7 @@ var require_storage_orchestrator_addon = __commonJS({
       const requested = input.enabled ?? existing?.enabled;
       if (requested === void 0) {
         if (existing) return {};
-        return { enabled: input.isDefault || !typeAlreadyHasLocation };
+        return { enabled: !typeAlreadyHasLocation };
       }
       return { enabled: requested };
     }
@@ -87270,6 +87318,16 @@ var require_storage_orchestrator_addon = __commonJS({
       }
       throw new Error(`Cannot disable "${next.id}": it is the last enabled location of type "${next.type}". Enable another location of this type first.`);
     }
+    function refuseTypeWithoutWriteTarget(touched, result) {
+      const rows = [...result];
+      for (const type of new Set([...touched].map((loc) => loc.type))) {
+        if (OPTIONAL_WRITE_TYPES.has(type)) continue;
+        const ofType = rows.filter((loc) => loc.type === type);
+        if (ofType.length === 0) continue;
+        if (ofType.some((loc) => require_dist10.isLocationEnabled(loc))) continue;
+        throw new Error(`Refusing the write-set change: it would leave type "${type}" with no enabled location. Enable one of ${ofType.map((loc) => loc.id).toSorted().join(", ")} first.`);
+      }
+    }
     var DEFAULT_MAX_ROUNDS = 8;
     var DEFAULT_HYSTERESIS_PERCENT = 1;
     var StoragePressureManager = class {
@@ -87474,13 +87532,9 @@ var require_storage_orchestrator_addon = __commonJS({
             const rows = type !== void 0 ? service.listLocations({ type }) : service.listLocations();
             return Promise.all(rows.map(async (loc) => ({
               ...this.redacted(loc),
-              capacity: loc.enabled === false ? null : await this.localCapacityOf(loc)
+              capacity: require_dist10.isLocationEnabled(loc) ? await this.localCapacityOf(loc) : null
             })));
           },
-          getDefaultLocation: async ({ type }) => {
-            const loc = service.getDefaultLocation(type);
-            return loc === null ? null : this.redacted(loc);
-          },
           listLocationDeclarations: async () => service.listDeclarations(),
           upsertLocation: async (input) => {
             const stored = service.getLocationById(input.id);
@@ -88201,7 +88255,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CcV3k_hD();
+    var require_dist10 = require_dist_jZb_HKI5();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -106262,7 +106316,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CcV3k_hD();
+    var require_dist10 = require_dist_jZb_HKI5();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -112094,47 +112148,17 @@ var require_addon = __commonJS({
         },
         "setDeviceConfig": { "config": { "__nested__": { "bands": [] } } }
       },
-      "storage": { "upsertLocation": {
-        "isDefault": false,
-        "isSystem": false
-      } },
+      "storage": { "upsertLocation": { "isSystem": false } },
       "storage-provider": {
-        "beginDownload": { "location": { "__nested__": {
-          "isDefault": false,
-          "isSystem": false
-        } } },
-        "beginUpload": { "location": { "__nested__": {
-          "isDefault": false,
-          "isSystem": false
-        } } },
-        "delete": { "location": { "__nested__": {
-          "isDefault": false,
-          "isSystem": false
-        } } },
-        "exists": { "location": { "__nested__": {
-          "isDefault": false,
-          "isSystem": false
-        } } },
-        "getAvailableSpace": { "location": { "__nested__": {
-          "isDefault": false,
-          "isSystem": false
-        } } },
-        "list": { "location": { "__nested__": {
-          "isDefault": false,
-          "isSystem": false
-        } } },
-        "read": { "location": { "__nested__": {
-          "isDefault": false,
-          "isSystem": false
-        } } },
-        "resolve": { "location": { "__nested__": {
-          "isDefault": false,
-          "isSystem": false
-        } } },
-        "write": { "location": { "__nested__": {
-          "isDefault": false,
-          "isSystem": false
-        } } }
+        "beginDownload": { "location": { "__nested__": { "isSystem": false } } },
+        "beginUpload": { "location": { "__nested__": { "isSystem": false } } },
+        "delete": { "location": { "__nested__": { "isSystem": false } } },
+        "exists": { "location": { "__nested__": { "isSystem": false } } },
+        "getAvailableSpace": { "location": { "__nested__": { "isSystem": false } } },
+        "list": { "location": { "__nested__": { "isSystem": false } } },
+        "read": { "location": { "__nested__": { "isSystem": false } } },
+        "resolve": { "location": { "__nested__": { "isSystem": false } } },
+        "write": { "location": { "__nested__": { "isSystem": false } } }
       },
       "stream-broker": {
         "produceEventMedia": {
@@ -130900,7 +130924,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_CcV3k_hD();
+    var require_dist10 = require_dist_jZb_HKI5();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -212907,253 +212931,6 @@ var require_dist4 = __commonJS({
     function logLevelAtMost(level, threshold) {
       return LOG_LEVEL_RANK[level] <= LOG_LEVEL_RANK[threshold];
     }
-    var LogChannelLevelSchema = zod.z.enum([
-      "info",
-      "warn",
-      "error"
-    ]);
-    var LogChannelDescriptorSchema = zod.z.object({
-      /**
-      * Dotted `area.thing`, unique across the workspace. `area` is conventionally
-      * the addon's short name so an operator reading a channel list can tell who
-      * owns it without a second lookup.
-      */
-      name: zod.z.string().min(3).regex(/^[a-z0-9-]+(\.[a-z0-9-]+)+$/, "a channel name is dotted lower-kebab, e.g. area.thing"),
-      /** One sentence: what the operator will SEE after arming it. */
-      description: zod.z.string().min(1),
-      /** The level its lines are emitted at. Never below `info`. */
-      defaultLevel: LogChannelLevelSchema,
-      /**
-      * Whether this channel can be narrowed to a camera.
-      *
-      * `true` is a PROMISE with two halves, and both must hold: the gate is
-      * consulted with the numeric device id, AND every line the channel admits
-      * carries `tags: { deviceId }` with that same numeric id. The second half is
-      * what makes `| json | deviceId="617"` work in Loki — `loki-payload.ts`
-      * keeps `deviceId` out of the stream labels for cardinality, so the tag in
-      * the body is the only way to filter.
-      *
-      * A channel whose lines carry the device only in `meta` (or not at all) is
-      * declared `false`. Declaring it `true` anyway would be a lie the UI repeats:
-      * the operator narrows to one camera, sees nothing, and concludes the code
-      * path was never taken.
-      */
-      perDevice: zod.z.boolean()
-    });
-    var LogChannelWindowSchema = zod.z.object({
-      channel: zod.z.string().min(1),
-      /** Epoch ms the window closes at. */
-      armedUntilMs: zod.z.number(),
-      /** `null` = every camera. A non-empty list narrows to those numeric ids. */
-      deviceIds: zod.z.array(zod.z.number().int()).readonly().nullable()
-    });
-    var LogChannelGate = class {
-      descriptor;
-      /**
-      * HOT PATH GUARD. A plain data FIELD, and it must stay one.
-      *
-      * `log-channel.spec.ts` asserts the property descriptor has no getter and
-      * booby-traps the device set, so turning this into an accessor — or reading
-      * anything before it — fails the spec instead of taxing every line the
-      * process emits.
-      */
-      on = false;
-      /** `null` while armed for every camera. Never read while `on` is false. */
-      devices = null;
-      level;
-      closesAtMs = 0;
-      constructor(descriptor) {
-        this.descriptor = descriptor;
-        this.level = descriptor.defaultLevel;
-      }
-      /** Epoch ms this channel disarms itself at. 0 when disarmed. */
-      get armedUntilMs() {
-        return this.on ? this.closesAtMs : 0;
-      }
-      /**
-      * Does this channel want a line about `deviceId`?
-      *
-      * Call it only behind `gate.on &&`. On its own it is still correct — the
-      * guard is repeated inside — but the point of the prefix is that a disarmed
-      * channel must not pay the call at all.
-      */
-      wants(deviceId) {
-        if (!this.on) return false;
-        return this.devices === null || this.devices.has(deviceId);
-      }
-      /**
-      * Emit one line on this channel, at the channel's declared level.
-      *
-      * The channel name is added as `tags.logChannel` so LogQL can select the
-      * channel without matching on the message text, and whatever `tags` the
-      * caller passed — `deviceId` above all — is preserved.
-      */
-      log(logger, message, extras) {
-        if (!this.on) return;
-        const tags = {
-          ...extras.tags,
-          logChannel: this.descriptor.name
-        };
-        const line = {
-          ...extras,
-          tags
-        };
-        if (this.level === "error") logger.error(message, line);
-        else if (this.level === "warn") logger.warn(message, line);
-        else logger.info(message, line);
-      }
-      /**
-      * Arm (or RE-arm, restarting) this channel. Off the hot path only.
-      *
-      * An empty `deviceIds` list is treated as "every camera" rather than "no
-      * camera": a window that matches nothing is indistinguishable from a
-      * disarmed one, and the operator who asked for it would wait for lines that
-      * can never come.
-      */
-      arm(window2) {
-        const ids = window2.deviceIds;
-        this.devices = ids === null || ids.length === 0 ? null : new Set(ids);
-        this.closesAtMs = window2.armedUntilMs;
-        this.on = true;
-      }
-      /** Disarm. Off the hot path only. */
-      disarm() {
-        this.on = false;
-        this.devices = null;
-        this.closesAtMs = 0;
-      }
-    };
-    var LogChannelRegistry = class {
-      gates = /* @__PURE__ */ new Map();
-      /**
-      * Declare a channel and get its gate.
-      *
-      * A duplicate name throws. Two declarations of one name is a programming
-      * error, not a merge: the operator would arm one and the other would stay
-      * dark, which is the dead-knob shape (D62) with an extra step.
-      */
-      declare(descriptor) {
-        const parsed = LogChannelDescriptorSchema.parse(descriptor);
-        if (this.gates.get(parsed.name) !== void 0) throw new Error(`log channel "${parsed.name}" is already declared in this process \u2014 two declarations of one name is a programming error, not a merge`);
-        const gate = new LogChannelGate(parsed);
-        this.gates.set(parsed.name, gate);
-        return gate;
-      }
-      /** The declarations, sorted by name so a list is stable to read and diff. */
-      list() {
-        return [...this.gates.values()].map((gate) => gate.descriptor).sort((a, b) => a.name.localeCompare(b.name));
-      }
-      /** The gate for a declared channel, or `undefined`. */
-      gate(name) {
-        return this.gates.get(name);
-      }
-      /**
-      * Apply the FULL set of armed windows. Off the hot path.
-      *
-      * Full, not incremental, and that is the whole design: the document is the
-      * authority, so a channel the document does not name is disarmed here. An
-      * incremental apply would let a disarm get lost in transit and leave a
-      * channel running that nobody can see is running.
-      *
-      * A window already past its deadline is ignored rather than armed — a
-      * restore that re-armed an expired window would make a forgotten diagnostic
-      * immortal across restarts.
-      *
-      * Returns the names it could not place, so the caller can log them: a
-      * channel named in the document that this process does not declare is
-      * either a typo or an addon that has not booted yet, and both deserve a
-      * line rather than silence.
-      */
-      apply(windows, nowMs) {
-        const wanted = /* @__PURE__ */ new Map();
-        const unknown = [];
-        for (const window2 of windows) {
-          if (window2.armedUntilMs <= nowMs) continue;
-          if (!this.gates.has(window2.channel)) {
-            unknown.push(window2.channel);
-            continue;
-          }
-          wanted.set(window2.channel, window2);
-        }
-        for (const [name, gate] of this.gates) {
-          const window2 = wanted.get(name);
-          if (window2 === void 0) gate.disarm();
-          else gate.arm(window2);
-        }
-        return unknown;
-      }
-      /**
-      * Disarm whatever has run out. Called on a timer, NEVER from a log path — a
-      * diagnostic that adds a `Date.now()` to the path it is measuring measures
-      * itself.
-      *
-      * Returns the names it closed, so the caller can write the one line that
-      * says a window ended and stops "it went quiet" from reading as "the branch
-      * was not taken".
-      */
-      tick(nowMs) {
-        const closed = [];
-        for (const [name, gate] of this.gates) if (gate.on && gate.armedUntilMs <= nowMs) {
-          gate.disarm();
-          closed.push(name);
-        }
-        return closed;
-      }
-      /** The channels armed right now, as the document would describe them. */
-      armed() {
-        const out = [];
-        for (const [name, gate] of this.gates) if (gate.on) out.push({
-          channel: name,
-          armedUntilMs: gate.armedUntilMs,
-          deviceIds: null
-        });
-        return out;
-      }
-    };
-    var instance = null;
-    function getLogChannelRegistry() {
-      instance ??= new LogChannelRegistry();
-      return instance;
-    }
-    function declareLogChannel(descriptor) {
-      return getLogChannelRegistry().declare(descriptor);
-    }
-    function __resetLogChannelRegistryForTests() {
-      instance = null;
-    }
-    var LOG_CHANNEL_TICK_MS = 5e3;
-    function createLogChannelsProvider(logger, options = {}) {
-      const registry = getLogChannelRegistry();
-      const now = options.now ?? Date.now;
-      const tickMs = options.tickMs ?? 5e3;
-      const timer = setInterval(() => {
-        const closed = registry.tick(now());
-        for (const name of closed) logger.info("log channel window closed", {
-          tags: { logChannel: name },
-          meta: { channel: name }
-        });
-      }, tickMs);
-      timer.unref?.();
-      return {
-        list: () => registry.list(),
-        apply: (input) => {
-          const unknown = registry.apply(input.windows, now());
-          const armed = registry.armed();
-          logger.info("log channels applied", { meta: {
-            armed: armed.map((window2) => window2.channel),
-            unknown,
-            declared: registry.list().length
-          } });
-          return {
-            armed: armed.length,
-            unknown
-          };
-        },
-        stop: () => {
-          clearInterval(timer);
-        }
-      };
-    }
     var OpsLogDomainSchema = zod.z.enum(["recording", "events"]);
     var OpsLogOpSchema = zod.z.enum([
       "prune",
@@ -213859,21 +213636,20 @@ var require_dist4 = __commonJS({
       * flag at upsert time, not here (the schema is provider-agnostic).
       */
       nodeId: zod.z.string().optional(),
-      isDefault: zod.z.boolean().default(false),
       isSystem: zod.z.boolean().default(false),
       /**
-      * Operator opt-in: whether consumers that BALANCE across several locations
-      * of a type may write here. Recordings reads it today; event media and
-      * backups are the next consumers, which is why the flag lives on the
-      * location rather than in any one addon's store — nothing has to be
-      * extended to add the next consumer.
+      * THE write switch, and the only one (D383). `enabled: true` means every
+      * consumer that chooses a write target for this type may write here, and all
+      * enabled locations of a type are used TOGETHER; `false` means read-only —
+      * still read, still played back, still age-swept, still drained, never
+      * written.
       *
-      * OPTIONAL, and ABSENT MEANS ACTIVE. Every location persisted before the
-      * flag existed reads back with no flag and keeps working exactly as before;
-      * that is the whole compat story, and it is why no migration ships with it.
-      * A newly CREATED sibling is stamped `false` by the orchestrator (creating a
-      * disk must not silently start writing to it); the default of a type is
-      * always stamped `true`.
+      * OPTIONAL only for the wire: an upsert that omits it means "leave what is
+      * stored" on an update and "born inert unless it is the first location of its
+      * type" on a create. On a PERSISTED row absence is legacy and it means
+      * enabled — {@link isLocationEnabled} is the one place that says so, and the
+      * orchestrator stamps every flagless row `true` once at hydrate so absence
+      * stops existing rather than being re-derived on every read.
       */
       enabled: zod.z.boolean().optional(),
       /** COMPUTED at read time by the orchestrator (statfs of the backing volume
@@ -213886,6 +213662,10 @@ var require_dist4 = __commonJS({
       createdAt: zod.z.number(),
       updatedAt: zod.z.number()
     });
+    var LegacyStorageLocationDefaultSchema = zod.z.object({ isDefault: zod.z.boolean().optional() });
+    function isLocationEnabled(location) {
+      return location.enabled !== false;
+    }
     var StorageLocationRefSchema = zod.z.union([StorageLocationTypeSchema, zod.z.string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/)]);
     var StorageAccessSchema = zod.z.enum(["local-path", "cap-mediated"]);
     var STORAGE_ACCESS_FALLBACK = "local-path";
@@ -214183,163 +213963,253 @@ var require_dist4 = __commonJS({
     function findTimezone(id) {
       return TIMEZONES.find((tz) => tz.id === id);
     }
-    function pickPreferredRtspEntry(entries2, pref, deviceId, options = {}) {
-      if (entries2.length === 0) return null;
-      const prefix = `${deviceId}/`;
-      const toPicked = (e) => ({
-        brokerId: e.brokerId,
-        profileId: e.brokerId.startsWith(prefix) ? e.brokerId.slice(prefix.length) : e.brokerId,
-        url: e.url,
-        mutedUrl: e.mutedUrl,
-        enabled: e.enabled,
-        ...e.codec !== void 0 ? { codec: e.codec } : {},
-        ...e.resolution !== void 0 ? { resolution: e.resolution } : {}
-      });
-      if (pref !== "auto") {
-        const match = entries2.find((e) => e.enabled && e.url.length > 0 && (e.profile === pref || e.brokerId === `${prefix}${pref}`));
-        if (match) return toPicked(match);
+    var LogChannelLevelSchema = zod.z.enum([
+      "info",
+      "warn",
+      "error"
+    ]);
+    var LogChannelDescriptorSchema = zod.z.object({
+      /**
+      * Dotted `area.thing`, unique across the workspace. `area` is conventionally
+      * the addon's short name so an operator reading a channel list can tell who
+      * owns it without a second lookup.
+      */
+      name: zod.z.string().min(3).regex(/^[a-z0-9-]+(\.[a-z0-9-]+)+$/, "a channel name is dotted lower-kebab, e.g. area.thing"),
+      /** One sentence: what the operator will SEE after arming it. */
+      description: zod.z.string().min(1),
+      /** The level its lines are emitted at. Never below `info`. */
+      defaultLevel: LogChannelLevelSchema,
+      /**
+      * Whether this channel can be narrowed to a camera.
+      *
+      * `true` is a PROMISE with two halves, and both must hold: the gate is
+      * consulted with the numeric device id, AND every line the channel admits
+      * carries `tags: { deviceId }` with that same numeric id. The second half is
+      * what makes `| json | deviceId="617"` work in Loki — `loki-payload.ts`
+      * keeps `deviceId` out of the stream labels for cardinality, so the tag in
+      * the body is the only way to filter.
+      *
+      * A channel whose lines carry the device only in `meta` (or not at all) is
+      * declared `false`. Declaring it `true` anyway would be a lie the UI repeats:
+      * the operator narrows to one camera, sees nothing, and concludes the code
+      * path was never taken.
+      */
+      perDevice: zod.z.boolean()
+    });
+    var LogChannelWindowSchema = zod.z.object({
+      channel: zod.z.string().min(1),
+      /** Epoch ms the window closes at. */
+      armedUntilMs: zod.z.number(),
+      /** `null` = every camera. A non-empty list narrows to those numeric ids. */
+      deviceIds: zod.z.array(zod.z.number().int()).readonly().nullable()
+    });
+    var LogChannelGate = class {
+      descriptor;
+      /**
+      * HOT PATH GUARD. A plain data FIELD, and it must stay one.
+      *
+      * `log-channel.spec.ts` asserts the property descriptor has no getter and
+      * booby-traps the device set, so turning this into an accessor — or reading
+      * anything before it — fails the spec instead of taxing every line the
+      * process emits.
+      */
+      on = false;
+      /** `null` while armed for every camera. Never read while `on` is false. */
+      devices = null;
+      level;
+      closesAtMs = 0;
+      constructor(descriptor) {
+        this.descriptor = descriptor;
+        this.level = descriptor.defaultLevel;
       }
-      const eligible = entries2.filter((e) => e.enabled && e.url.length > 0);
-      if (eligible.length === 0) return null;
-      const target = options.targetResolution;
-      if (target) {
-        const withRes = eligible.filter((e) => e.resolution !== void 0);
-        if (withRes.length > 0) {
-          const picked = pickClosestResolution(withRes, target);
-          if (picked) return toPicked(picked);
-        }
+      /** Epoch ms this channel disarms itself at. 0 when disarmed. */
+      get armedUntilMs() {
+        return this.on ? this.closesAtMs : 0;
       }
-      return toPicked(eligible[0]);
-    }
-    function pickClosestResolution(entries2, target) {
-      const targetPixels = target.width * target.height;
-      let bestAbove;
-      let bestBelow;
-      for (const e of entries2) {
-        if (e.resolution === void 0) continue;
-        const pixels = e.resolution.width * e.resolution.height;
-        if (pixels >= targetPixels) {
-          if (!bestAbove || pixels < bestAbove.pixels) bestAbove = {
-            entry: e,
-            pixels
-          };
-        } else if (!bestBelow || pixels > bestBelow.pixels) bestBelow = {
-          entry: e,
-          pixels
-        };
+      /**
+      * Does this channel want a line about `deviceId`?
+      *
+      * Call it only behind `gate.on &&`. On its own it is still correct — the
+      * guard is repeated inside — but the point of the prefix is that a disarmed
+      * channel must not pay the call at all.
+      */
+      wants(deviceId) {
+        if (!this.on) return false;
+        return this.devices === null || this.devices.has(deviceId);
       }
-      return bestAbove?.entry ?? bestBelow?.entry;
-    }
-    var UNATTRIBUTED_BUCKET_KEY = "__unattributed__";
-    var ROOT_BUCKET_KEY = "__root__";
-    function bucketFor(row) {
-      if (row.addonId !== null) return {
-        key: row.addonId,
-        kind: "addon"
-      };
-      if (row.classification === "root") return {
-        key: ROOT_BUCKET_KEY,
-        kind: "root"
-      };
-      return {
-        key: UNATTRIBUTED_BUCKET_KEY,
-        kind: "unattributed"
-      };
-    }
-    function deci(value) {
-      return Math.round(value * 10) / 10;
-    }
-    function foldSnapshotByFunction(rows, atMs) {
-      const acc = /* @__PURE__ */ new Map();
-      for (const row of rows) {
-        const { key, kind } = bucketFor(row);
-        const cur = acc.get(key) ?? {
-          kind,
-          main: 0,
-          gc: 0,
-          lifetime: 0,
-          memory: 0,
-          count: 0,
-          splitKnown: true
+      /**
+      * Emit one line on this channel, at the channel's declared level.
+      *
+      * The channel name is added as `tags.logChannel` so LogQL can select the
+      * channel without matching on the message text, and whatever `tags` the
+      * caller passed — `deviceId` above all — is preserved.
+      */
+      log(logger, message, extras) {
+        if (!this.on) return;
+        const tags = {
+          ...extras.tags,
+          logChannel: this.descriptor.name
         };
-        const known = row.cpuMainPercent !== null && row.cpuGcPercent !== null;
-        acc.set(key, {
-          kind: cur.kind,
-          main: cur.main + (row.cpuMainPercent ?? 0),
-          gc: cur.gc + (row.cpuGcPercent ?? 0),
-          lifetime: cur.lifetime + row.cpuPercent,
-          memory: cur.memory + row.memoryRssBytes,
-          count: cur.count + 1,
-          splitKnown: cur.splitKnown && known
-        });
+        const line = {
+          ...extras,
+          tags
+        };
+        if (this.level === "error") logger.error(message, line);
+        else if (this.level === "warn") logger.warn(message, line);
+        else logger.info(message, line);
       }
-      return [...acc.entries()].map(([key, a]) => {
-        const main = a.splitKnown ? deci(a.main) : null;
-        const gc = a.splitKnown ? deci(a.gc) : null;
-        const lifetime = deci(a.lifetime);
-        return {
-          key,
-          kind: a.kind,
-          point: {
-            atMs,
-            samples: 1,
-            cpuMainPercent: main,
-            cpuMainPercentMin: main,
-            cpuGcPercent: gc,
-            cpuGcPercentMin: gc,
-            cpuLifetimePercent: lifetime,
-            cpuLifetimePercentMin: lifetime,
-            memoryRssBytes: a.memory,
-            memoryRssBytesMin: a.memory,
-            processCount: a.count,
-            processCountMin: a.count
+      /**
+      * Arm (or RE-arm, restarting) this channel. Off the hot path only.
+      *
+      * An empty `deviceIds` list is treated as "every camera" rather than "no
+      * camera": a window that matches nothing is indistinguishable from a
+      * disarmed one, and the operator who asked for it would wait for lines that
+      * can never come.
+      */
+      arm(window2) {
+        const ids = window2.deviceIds;
+        this.devices = ids === null || ids.length === 0 ? null : new Set(ids);
+        this.closesAtMs = window2.armedUntilMs;
+        this.on = true;
+      }
+      /** Disarm. Off the hot path only. */
+      disarm() {
+        this.on = false;
+        this.devices = null;
+        this.closesAtMs = 0;
+      }
+    };
+    var LogChannelRegistry = class {
+      gates = /* @__PURE__ */ new Map();
+      /**
+      * Declare a channel and get its gate.
+      *
+      * A duplicate name throws. Two declarations of one name is a programming
+      * error, not a merge: the operator would arm one and the other would stay
+      * dark, which is the dead-knob shape (D62) with an extra step.
+      */
+      declare(descriptor) {
+        const parsed = LogChannelDescriptorSchema.parse(descriptor);
+        if (this.gates.get(parsed.name) !== void 0) throw new Error(`log channel "${parsed.name}" is already declared in this process \u2014 two declarations of one name is a programming error, not a merge`);
+        const gate = new LogChannelGate(parsed);
+        this.gates.set(parsed.name, gate);
+        return gate;
+      }
+      /** The declarations, sorted by name so a list is stable to read and diff. */
+      list() {
+        return [...this.gates.values()].map((gate) => gate.descriptor).sort((a, b) => a.name.localeCompare(b.name));
+      }
+      /** The gate for a declared channel, or `undefined`. */
+      gate(name) {
+        return this.gates.get(name);
+      }
+      /**
+      * Apply the FULL set of armed windows. Off the hot path.
+      *
+      * Full, not incremental, and that is the whole design: the document is the
+      * authority, so a channel the document does not name is disarmed here. An
+      * incremental apply would let a disarm get lost in transit and leave a
+      * channel running that nobody can see is running.
+      *
+      * A window already past its deadline is ignored rather than armed — a
+      * restore that re-armed an expired window would make a forgotten diagnostic
+      * immortal across restarts.
+      *
+      * Returns the names it could not place, so the caller can log them: a
+      * channel named in the document that this process does not declare is
+      * either a typo or an addon that has not booted yet, and both deserve a
+      * line rather than silence.
+      */
+      apply(windows, nowMs) {
+        const wanted = /* @__PURE__ */ new Map();
+        const unknown = [];
+        for (const window2 of windows) {
+          if (window2.armedUntilMs <= nowMs) continue;
+          if (!this.gates.has(window2.channel)) {
+            unknown.push(window2.channel);
+            continue;
           }
-        };
-      });
+          wanted.set(window2.channel, window2);
+        }
+        for (const [name, gate] of this.gates) {
+          const window2 = wanted.get(name);
+          if (window2 === void 0) gate.disarm();
+          else gate.arm(window2);
+        }
+        return unknown;
+      }
+      /**
+      * Disarm whatever has run out. Called on a timer, NEVER from a log path — a
+      * diagnostic that adds a `Date.now()` to the path it is measuring measures
+      * itself.
+      *
+      * Returns the names it closed, so the caller can write the one line that
+      * says a window ended and stops "it went quiet" from reading as "the branch
+      * was not taken".
+      */
+      tick(nowMs) {
+        const closed = [];
+        for (const [name, gate] of this.gates) if (gate.on && gate.armedUntilMs <= nowMs) {
+          gate.disarm();
+          closed.push(name);
+        }
+        return closed;
+      }
+      /** The channels armed right now, as the document would describe them. */
+      armed() {
+        const out = [];
+        for (const [name, gate] of this.gates) if (gate.on) out.push({
+          channel: name,
+          armedUntilMs: gate.armedUntilMs,
+          deviceIds: null
+        });
+        return out;
+      }
+    };
+    var instance = null;
+    function getLogChannelRegistry() {
+      instance ??= new LogChannelRegistry();
+      return instance;
     }
-    function minNullable(a, b) {
-      if (a === null || b === null) return null;
-      return a < b ? a : b;
+    function declareLogChannel(descriptor) {
+      return getLogChannelRegistry().declare(descriptor);
     }
-    function maxNullable(a, b) {
-      if (a === null || b === null) return null;
-      return a > b ? a : b;
+    function __resetLogChannelRegistryForTests() {
+      instance = null;
     }
-    function mergePoints(held, next, atMs) {
+    var LOG_CHANNEL_TICK_MS = 5e3;
+    function createLogChannelsProvider(logger, options = {}) {
+      const registry = getLogChannelRegistry();
+      const now = options.now ?? Date.now;
+      const tickMs = options.tickMs ?? 5e3;
+      const timer = setInterval(() => {
+        const closed = registry.tick(now());
+        for (const name of closed) logger.info("log channel window closed", {
+          tags: { logChannel: name },
+          meta: { channel: name }
+        });
+      }, tickMs);
+      timer.unref?.();
       return {
-        atMs,
-        samples: held.samples + next.samples,
-        cpuMainPercent: maxNullable(held.cpuMainPercent, next.cpuMainPercent),
-        cpuMainPercentMin: minNullable(held.cpuMainPercentMin, next.cpuMainPercentMin),
-        cpuGcPercent: maxNullable(held.cpuGcPercent, next.cpuGcPercent),
-        cpuGcPercentMin: minNullable(held.cpuGcPercentMin, next.cpuGcPercentMin),
-        cpuLifetimePercent: Math.max(held.cpuLifetimePercent, next.cpuLifetimePercent),
-        cpuLifetimePercentMin: Math.min(held.cpuLifetimePercentMin, next.cpuLifetimePercentMin),
-        memoryRssBytes: Math.max(held.memoryRssBytes, next.memoryRssBytes),
-        memoryRssBytesMin: Math.min(held.memoryRssBytesMin, next.memoryRssBytesMin),
-        processCount: Math.max(held.processCount, next.processCount),
-        processCountMin: Math.min(held.processCountMin, next.processCountMin)
+        list: () => registry.list(),
+        apply: (input) => {
+          const unknown = registry.apply(input.windows, now());
+          const armed = registry.armed();
+          logger.info("log channels applied", { meta: {
+            armed: armed.map((window2) => window2.channel),
+            unknown,
+            declared: registry.list().length
+          } });
+          return {
+            armed: armed.length,
+            unknown
+          };
+        },
+        stop: () => {
+          clearInterval(timer);
+        }
       };
     }
-    function resolveBucketMs(spanMs, cadenceMs, maxPoints) {
-      if (maxPoints <= 0 || cadenceMs <= 0 || spanMs <= 0) return Math.max(cadenceMs, 1);
-      const wanted = spanMs / maxPoints;
-      if (wanted <= cadenceMs) return cadenceMs;
-      return Math.ceil(wanted / cadenceMs) * cadenceMs;
-    }
-    function reducePoints(points, bucketMs, origin) {
-      if (bucketMs <= 0 || points.length === 0) return points;
-      const buckets = /* @__PURE__ */ new Map();
-      for (const point of points) {
-        const start = origin + Math.floor((point.atMs - origin) / bucketMs) * bucketMs;
-        const held = buckets.get(start);
-        buckets.set(start, held === void 0 ? {
-          ...point,
-          atMs: start
-        } : mergePoints(held, point, start));
-      }
-      return [...buckets.values()].toSorted((a, b) => a.atMs - b.atMs);
-    }
     var MAX_REASONS_PER_KEY = 16;
     var MAX_KEYS = 1024;
     var OVERFLOW_REASON = "other";
@@ -214431,6 +214301,163 @@ var require_dist4 = __commonJS({
       if (sample.attempts <= 0) return null;
       return (sample.attempts - sample.succeeded) / sample.attempts;
     }
+    var UNATTRIBUTED_BUCKET_KEY = "__unattributed__";
+    var ROOT_BUCKET_KEY = "__root__";
+    function bucketFor(row) {
+      if (row.addonId !== null) return {
+        key: row.addonId,
+        kind: "addon"
+      };
+      if (row.classification === "root") return {
+        key: ROOT_BUCKET_KEY,
+        kind: "root"
+      };
+      return {
+        key: UNATTRIBUTED_BUCKET_KEY,
+        kind: "unattributed"
+      };
+    }
+    function deci(value) {
+      return Math.round(value * 10) / 10;
+    }
+    function foldSnapshotByFunction(rows, atMs) {
+      const acc = /* @__PURE__ */ new Map();
+      for (const row of rows) {
+        const { key, kind } = bucketFor(row);
+        const cur = acc.get(key) ?? {
+          kind,
+          main: 0,
+          gc: 0,
+          lifetime: 0,
+          memory: 0,
+          count: 0,
+          splitKnown: true
+        };
+        const known = row.cpuMainPercent !== null && row.cpuGcPercent !== null;
+        acc.set(key, {
+          kind: cur.kind,
+          main: cur.main + (row.cpuMainPercent ?? 0),
+          gc: cur.gc + (row.cpuGcPercent ?? 0),
+          lifetime: cur.lifetime + row.cpuPercent,
+          memory: cur.memory + row.memoryRssBytes,
+          count: cur.count + 1,
+          splitKnown: cur.splitKnown && known
+        });
+      }
+      return [...acc.entries()].map(([key, a]) => {
+        const main = a.splitKnown ? deci(a.main) : null;
+        const gc = a.splitKnown ? deci(a.gc) : null;
+        const lifetime = deci(a.lifetime);
+        return {
+          key,
+          kind: a.kind,
+          point: {
+            atMs,
+            samples: 1,
+            cpuMainPercent: main,
+            cpuMainPercentMin: main,
+            cpuGcPercent: gc,
+            cpuGcPercentMin: gc,
+            cpuLifetimePercent: lifetime,
+            cpuLifetimePercentMin: lifetime,
+            memoryRssBytes: a.memory,
+            memoryRssBytesMin: a.memory,
+            processCount: a.count,
+            processCountMin: a.count
+          }
+        };
+      });
+    }
+    function minNullable(a, b) {
+      if (a === null || b === null) return null;
+      return a < b ? a : b;
+    }
+    function maxNullable(a, b) {
+      if (a === null || b === null) return null;
+      return a > b ? a : b;
+    }
+    function mergePoints(held, next, atMs) {
+      return {
+        atMs,
+        samples: held.samples + next.samples,
+        cpuMainPercent: maxNullable(held.cpuMainPercent, next.cpuMainPercent),
+        cpuMainPercentMin: minNullable(held.cpuMainPercentMin, next.cpuMainPercentMin),
+        cpuGcPercent: maxNullable(held.cpuGcPercent, next.cpuGcPercent),
+        cpuGcPercentMin: minNullable(held.cpuGcPercentMin, next.cpuGcPercentMin),
+        cpuLifetimePercent: Math.max(held.cpuLifetimePercent, next.cpuLifetimePercent),
+        cpuLifetimePercentMin: Math.min(held.cpuLifetimePercentMin, next.cpuLifetimePercentMin),
+        memoryRssBytes: Math.max(held.memoryRssBytes, next.memoryRssBytes),
+        memoryRssBytesMin: Math.min(held.memoryRssBytesMin, next.memoryRssBytesMin),
+        processCount: Math.max(held.processCount, next.processCount),
+        processCountMin: Math.min(held.processCountMin, next.processCountMin)
+      };
+    }
+    function resolveBucketMs(spanMs, cadenceMs, maxPoints) {
+      if (maxPoints <= 0 || cadenceMs <= 0 || spanMs <= 0) return Math.max(cadenceMs, 1);
+      const wanted = spanMs / maxPoints;
+      if (wanted <= cadenceMs) return cadenceMs;
+      return Math.ceil(wanted / cadenceMs) * cadenceMs;
+    }
+    function reducePoints(points, bucketMs, origin) {
+      if (bucketMs <= 0 || points.length === 0) return points;
+      const buckets = /* @__PURE__ */ new Map();
+      for (const point of points) {
+        const start = origin + Math.floor((point.atMs - origin) / bucketMs) * bucketMs;
+        const held = buckets.get(start);
+        buckets.set(start, held === void 0 ? {
+          ...point,
+          atMs: start
+        } : mergePoints(held, point, start));
+      }
+      return [...buckets.values()].toSorted((a, b) => a.atMs - b.atMs);
+    }
+    function pickPreferredRtspEntry(entries2, pref, deviceId, options = {}) {
+      if (entries2.length === 0) return null;
+      const prefix = `${deviceId}/`;
+      const toPicked = (e) => ({
+        brokerId: e.brokerId,
+        profileId: e.brokerId.startsWith(prefix) ? e.brokerId.slice(prefix.length) : e.brokerId,
+        url: e.url,
+        mutedUrl: e.mutedUrl,
+        enabled: e.enabled,
+        ...e.codec !== void 0 ? { codec: e.codec } : {},
+        ...e.resolution !== void 0 ? { resolution: e.resolution } : {}
+      });
+      if (pref !== "auto") {
+        const match = entries2.find((e) => e.enabled && e.url.length > 0 && (e.profile === pref || e.brokerId === `${prefix}${pref}`));
+        if (match) return toPicked(match);
+      }
+      const eligible = entries2.filter((e) => e.enabled && e.url.length > 0);
+      if (eligible.length === 0) return null;
+      const target = options.targetResolution;
+      if (target) {
+        const withRes = eligible.filter((e) => e.resolution !== void 0);
+        if (withRes.length > 0) {
+          const picked = pickClosestResolution(withRes, target);
+          if (picked) return toPicked(picked);
+        }
+      }
+      return toPicked(eligible[0]);
+    }
+    function pickClosestResolution(entries2, target) {
+      const targetPixels = target.width * target.height;
+      let bestAbove;
+      let bestBelow;
+      for (const e of entries2) {
+        if (e.resolution === void 0) continue;
+        const pixels = e.resolution.width * e.resolution.height;
+        if (pixels >= targetPixels) {
+          if (!bestAbove || pixels < bestAbove.pixels) bestAbove = {
+            entry: e,
+            pixels
+          };
+        } else if (!bestBelow || pixels > bestBelow.pixels) bestBelow = {
+          entry: e,
+          pixels
+        };
+      }
+      return bestAbove?.entry ?? bestBelow?.entry;
+    }
     var FORMAT_KEYS = [
       "onnx",
       "coreml",
@@ -229960,7 +229987,6 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         }), zod.z.instanceof(Uint8Array)),
         endDownload: require_sleep.method(zod.z.object({ downloadId: zod.z.string() }), zod.z.void(), { kind: "mutation" }),
         listLocations: require_sleep.method(zod.z.object({ type: StorageLocationTypeSchema.optional() }), zod.z.array(StorageLocationSchema).readonly()),
-        getDefaultLocation: require_sleep.method(zod.z.object({ type: StorageLocationTypeSchema }), StorageLocationSchema.nullable()),
         listLocationDeclarations: require_sleep.method(zod.z.void(), zod.z.array(StorageLocationDeclarationSchema).readonly()),
         upsertLocation: require_sleep.method(StorageLocationSchema.omit({
           createdAt: true,
@@ -240233,62 +240259,6 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "ffmpeg.threadCount": 0,
       "auth.tokenExpiry": "30d"
     };
-    var CONTAINER_CHILD_PRIORITY = [
-      "media-player",
-      "alarm-panel",
-      "thermostat",
-      "climate",
-      "humidifier",
-      "water-heater",
-      "lock",
-      "cover",
-      "valve",
-      "fan",
-      "vacuum",
-      "lawn-mower",
-      "light",
-      "switch",
-      "siren",
-      "button",
-      "control",
-      "notifier",
-      "script",
-      "automation",
-      "update",
-      "presence",
-      "weather",
-      "image",
-      "sensor"
-    ];
-    var CONTAINER_CHILD_ROLE_PRIORITY = [
-      "contact-sensor",
-      "motion-sensor",
-      "occupancy-sensor",
-      "smoke-sensor",
-      "co-sensor",
-      "gas-sensor",
-      "leak-sensor",
-      "vibration-sensor",
-      "tamper-sensor",
-      "sound-sensor"
-    ];
-    function roleRank(role) {
-      if (role === void 0) return CONTAINER_CHILD_ROLE_PRIORITY.length;
-      const i = CONTAINER_CHILD_ROLE_PRIORITY.indexOf(role);
-      return i === -1 ? CONTAINER_CHILD_ROLE_PRIORITY.length : i;
-    }
-    function rank(type) {
-      const i = CONTAINER_CHILD_PRIORITY.indexOf(type);
-      return i === -1 ? CONTAINER_CHILD_PRIORITY.length : i;
-    }
-    function resolveContainerPrimaryChild(children, overrideEntityId, containerName) {
-      if (overrideEntityId !== void 0 && overrideEntityId !== null) {
-        const picked = children.find((c) => c.stableId === overrideEntityId) ?? children.find((c) => c.entityId !== void 0 && c.entityId === overrideEntityId);
-        if (picked !== void 0) return picked;
-      }
-      const namesake = (c) => containerName !== void 0 && containerName.length > 0 && c.name !== void 0 && c.name.toLowerCase() === containerName.toLowerCase() ? 0 : 1;
-      return [...children].toSorted((a, b) => roleRank(a.role) - roleRank(b.role) || namesake(a) - namesake(b) || rank(a.type) - rank(b.type))[0] ?? null;
-    }
     var AccessoryKind = {
       Siren: require_sleep.DeviceRole.Siren,
       Floodlight: require_sleep.DeviceRole.Floodlight,
@@ -241739,6 +241709,62 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     function isBatteryPresenceFault(presence) {
       return presence === "unreachable";
     }
+    var CONTAINER_CHILD_PRIORITY = [
+      "media-player",
+      "alarm-panel",
+      "thermostat",
+      "climate",
+      "humidifier",
+      "water-heater",
+      "lock",
+      "cover",
+      "valve",
+      "fan",
+      "vacuum",
+      "lawn-mower",
+      "light",
+      "switch",
+      "siren",
+      "button",
+      "control",
+      "notifier",
+      "script",
+      "automation",
+      "update",
+      "presence",
+      "weather",
+      "image",
+      "sensor"
+    ];
+    var CONTAINER_CHILD_ROLE_PRIORITY = [
+      "contact-sensor",
+      "motion-sensor",
+      "occupancy-sensor",
+      "smoke-sensor",
+      "co-sensor",
+      "gas-sensor",
+      "leak-sensor",
+      "vibration-sensor",
+      "tamper-sensor",
+      "sound-sensor"
+    ];
+    function roleRank(role) {
+      if (role === void 0) return CONTAINER_CHILD_ROLE_PRIORITY.length;
+      const i = CONTAINER_CHILD_ROLE_PRIORITY.indexOf(role);
+      return i === -1 ? CONTAINER_CHILD_ROLE_PRIORITY.length : i;
+    }
+    function rank(type) {
+      const i = CONTAINER_CHILD_PRIORITY.indexOf(type);
+      return i === -1 ? CONTAINER_CHILD_PRIORITY.length : i;
+    }
+    function resolveContainerPrimaryChild(children, overrideEntityId, containerName) {
+      if (overrideEntityId !== void 0 && overrideEntityId !== null) {
+        const picked = children.find((c) => c.stableId === overrideEntityId) ?? children.find((c) => c.entityId !== void 0 && c.entityId === overrideEntityId);
+        if (picked !== void 0) return picked;
+      }
+      const namesake = (c) => containerName !== void 0 && containerName.length > 0 && c.name !== void 0 && c.name.toLowerCase() === containerName.toLowerCase() ? 0 : 1;
+      return [...children].toSorted((a, b) => roleRank(a.role) - roleRank(b.role) || namesake(a) - namesake(b) || rank(a.type) - rank(b.type))[0] ?? null;
+    }
     var DECLARED_INTEGRATION_FIXED_KEY = "fixed";
     function declarationOwnerNodeId(localNodeId) {
       const raw = localNodeId ?? "hub";
@@ -249022,12 +249048,6 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
-      "storage.getDefaultLocation": {
-        capName: "storage",
-        capScope: "system",
-        addonId: null,
-        access: "view"
-      },
       "storage.list": {
         capName: "storage",
         capScope: "system",
@@ -253403,7 +253423,6 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           readChunk: (input) => dispatch("storage", "readChunk", "query", input),
           endDownload: (input) => dispatch("storage", "endDownload", "mutation", input),
           listLocations: (input) => dispatch("storage", "listLocations", "query", input),
-          getDefaultLocation: (input) => dispatch("storage", "getDefaultLocation", "query", input),
           listLocationDeclarations: (input) => dispatch("storage", "listLocationDeclarations", "query", input),
           upsertLocation: (input) => dispatch("storage", "upsertLocation", "mutation", input),
           deleteLocation: (input) => dispatch("storage", "deleteLocation", "mutation", input),
@@ -256581,6 +256600,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.LedgerWalkReportSchema = LedgerWalkReportSchema;
     exports.LedgerWalkSkipCountsSchema = LedgerWalkSkipCountsSchema;
     exports.LedgerWalkSkipReasonSchema = LedgerWalkSkipReasonSchema;
+    exports.LegacyStorageLocationDefaultSchema = LegacyStorageLocationDefaultSchema;
     exports.LinkedDeviceSchema = LinkedDeviceSchema;
     exports.LinkedDevicesModeSchema = LinkedDevicesModeSchema;
     exports.LlmDefaultSchema = LlmDefaultSchema;
@@ -257433,6 +257453,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.isEvent = require_sleep.isEvent;
     exports.isFirstLevelMacroClass = isFirstLevelMacroClass;
     exports.isIsolatedBuiltin = isIsolatedBuiltin;
+    exports.isLocationEnabled = isLocationEnabled;
     exports.isNode = isNode;
     exports.isObjectInput = isObjectInput;
     exports.isOccupancyRule = isOccupancyRule;