camstack 1.2.69 → 1.2.71

package/dist/{launcher-INC5TETK.js → launcher-4QRZCB6O.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-B29Skpzo.js
-var require_dist_B29Skpzo = __commonJS({
-  "../system/dist/dist-B29Skpzo.js"(exports) {
+// ../system/dist/dist-CFTKQGym.js
+var require_dist_CFTKQGym = __commonJS({
+  "../system/dist/dist-CFTKQGym.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -26326,6 +26326,13 @@ var require_dist_B29Skpzo = __commonJS({
     ]);
     var RelocateMediaInputSchema = zod.z.object({
       toLocationId: zod.z.string(),
+      /**
+      * Restrict the pass to rows currently on this location. Omitted / `'*'` =
+      * every row that is not already on `toLocationId` (the historical
+      * behaviour). A named source is what a from→to migration needs: without it
+      * "move events off disk 2" also emptied disk 1.
+      */
+      fromLocationId: zod.z.string().optional(),
       throttleMbps: zod.z.number().min(1).max(1e3).optional(),
       /** Omitted = `move`, the pre-existing behaviour. */
       mode: MediaRelocateModeSchema.optional()
@@ -26357,9 +26364,18 @@ var require_dist_B29Skpzo = __commonJS({
       backups: zod.z.string().min(1).optional(),
       galleryMedia: zod.z.string().min(1).optional()
     }).refine((value) => Object.keys(value).length > 0, { message: "select at least one storage class" });
+    var StorageMigrationSourcesSchema = zod.z.object({
+      recordings: zod.z.string().min(1).optional(),
+      recordingsLow: zod.z.string().min(1).optional(),
+      eventMedia: zod.z.string().min(1).optional(),
+      backups: zod.z.string().min(1).optional(),
+      galleryMedia: zod.z.string().min(1).optional()
+    }).optional();
     var StorageMigrationModeSchema = zod.z.enum(["blocking", "nonBlocking"]);
     var StorageMigrationInputSchema = zod.z.object({
       destinations: StorageMigrationDestinationsSchema,
+      /** Omitted = each class's current default. */
+      sources: StorageMigrationSourcesSchema,
       throttleMbps: zod.z.number().min(1).max(1e3).optional(),
       /** Omitted = `blocking`, which stays the default. */
       mode: StorageMigrationModeSchema.optional()
@@ -26405,6 +26421,13 @@ var require_dist_B29Skpzo = __commonJS({
       storageClass: StorageMigrationClassSchema,
       fromLocationId: zod.z.string(),
       toLocationId: zod.z.string(),
+      /**
+      * True when `from` was NOT the class default at plan time. The move still
+      * copies bytes, but the default is left alone and the source is disabled
+      * once the copy verifies. Absent on jobs planned before this field existed
+      * — those jobs always repointed, which is `false`.
+      */
+      freezeSource: zod.z.boolean().optional(),
       moverJobId: zod.z.string().nullable(),
       state: RelocateJobStateSchema.nullable(),
       error: zod.z.string().nullable(),
@@ -26418,6 +26441,7 @@ var require_dist_B29Skpzo = __commonJS({
       *  can tell a seconds-long cutover from a thirty-hour one. */
       mode: StorageMigrationModeSchema,
       destinations: StorageMigrationDestinationsSchema,
+      sources: StorageMigrationSourcesSchema,
       throttleMbps: zod.z.number(),
       moves: zod.z.array(StorageMigrationMoveSchema),
       pauseLeaseId: zod.z.string().nullable(),
@@ -26444,6 +26468,7 @@ var require_dist_B29Skpzo = __commonJS({
     });
     var StorageMigrationPlanSchema = zod.z.object({
       destinations: StorageMigrationDestinationsSchema,
+      sources: StorageMigrationSourcesSchema,
       /** The mode this plan was built for. A plan is only valid for its mode: the
       *  `eventMedia` seal gate and the single-cardinality refusal both depend on
       *  it. */
@@ -26451,7 +26476,8 @@ var require_dist_B29Skpzo = __commonJS({
       moves: zod.z.array(zod.z.object({
         storageClass: StorageMigrationClassSchema,
         fromLocationId: zod.z.string(),
-        toLocationId: zod.z.string()
+        toLocationId: zod.z.string(),
+        freezeSource: zod.z.boolean().optional()
       })),
       findings: zod.z.array(StorageMigrationFindingSchema)
     });
@@ -26563,9 +26589,42 @@ var require_dist_B29Skpzo = __commonJS({
     var RelocatableMediaCountSchema = zod.z.object({ rows: zod.z.number().int().nonnegative() }).nullable();
     var RelocatableMediaCountInputSchema = zod.z.object({
       toLocationId: zod.z.string().min(1),
+      /** Restrict the count to one source; omitted / `'*'` = every non-target row. */
+      fromLocationId: zod.z.string().optional(),
       /** Omitted = `move`. */
       mode: MediaRelocateModeSchema.optional()
     });
+    var StorageCleanupPhaseSchema = zod.z.enum([
+      "orphans",
+      "debug-media",
+      "ghost-ledger",
+      "done",
+      "failed",
+      "cancelled"
+    ]);
+    var StorageCleanupInputSchema = zod.z.object({
+      /** Also walk motion stills / track filmstrips. Off by default. */
+      includeDebugMedia: zod.z.boolean().optional()
+    });
+    var StorageCleanupJobSchema = zod.z.object({
+      jobId: zod.z.string(),
+      phase: StorageCleanupPhaseSchema,
+      includeDebugMedia: zod.z.boolean(),
+      orphansReclaimed: zod.z.number().int().nonnegative(),
+      orphanBytesReclaimed: zod.z.number().int().nonnegative(),
+      debugMediaReclaimed: zod.z.number().int().nonnegative(),
+      debugMediaBytesReclaimed: zod.z.number().int().nonnegative(),
+      ghostsForgotten: zod.z.number().int().nonnegative(),
+      ghostBytesForgotten: zod.z.number().int().nonnegative(),
+      /** Short operator-facing line: current collection, pass, or location. */
+      detail: zod.z.string().nullable(),
+      cancelRequested: zod.z.boolean(),
+      startedAt: zod.z.number(),
+      updatedAt: zod.z.number(),
+      finishedAt: zod.z.number().nullable(),
+      error: zod.z.string().nullable()
+    });
+    var StorageCleanupStatusInputSchema = zod.z.object({ jobId: zod.z.string().optional() });
     var StorageLocationTypeSchema = zod.z.string().regex(/^[a-z][a-zA-Z0-9-]*$/);
     var StorageLocationSchema = zod.z.object({
       id: zod.z.string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/),
@@ -37286,6 +37345,39 @@ var require_dist_B29Skpzo = __commonJS({
       /** Present when the pass ended by throwing. */
       error: zod.z.string().nullable()
     });
+    var MediaReclaimStartResultSchema = zod.z.object({
+      started: zod.z.boolean(),
+      /** True when a pass was already running; the new request is ignored. */
+      alreadyRunning: zod.z.boolean()
+    });
+    var MediaReclaimInputSchema = zod.z.object({
+      mode: zod.z.enum(["report", "reclaim"]).default("report"),
+      scopes: zod.z.array(zod.z.enum(["motion-still", "track-filmstrip"])).min(1).optional(),
+      deviceIds: zod.z.array(zod.z.number().int()).min(1).optional(),
+      restart: zod.z.boolean().optional(),
+      pageSize: zod.z.number().int().min(50).max(5e3).optional(),
+      maxRowsPerDevice: zod.z.number().int().min(1).max(5e5).optional(),
+      maxReclaimPerDevice: zod.z.number().int().min(1).max(5e5).optional(),
+      maxBytesPerRun: zod.z.number().int().min(1).optional(),
+      budgetMinutes: zod.z.number().int().min(1).max(720).optional(),
+      throttleBytesPerSec: zod.z.number().int().min(64 * 1024).optional(),
+      graceMinutes: zod.z.number().int().min(1).max(10080).optional()
+    });
+    var MediaReclaimStatusSchema = zod.z.object({
+      running: zod.z.boolean(),
+      mode: zod.z.enum(["report", "reclaim"]).nullable(),
+      totalExamined: zod.z.number(),
+      totalEligible: zod.z.number(),
+      totalReclaimed: zod.z.number(),
+      totalBytesReclaimed: zod.z.number(),
+      totalRefused: zod.z.number(),
+      /** Device+scope windows finished in this pass. */
+      devicesDone: zod.z.number(),
+      complete: zod.z.boolean().nullable(),
+      startedAtMs: zod.z.number().nullable(),
+      finishedAtMs: zod.z.number().nullable(),
+      error: zod.z.string().nullable()
+    });
     var ReplayFrameInputSchema = zod.z.object({
       timestamp: zod.z.number(),
       frame: PipelineRunResultBridge
@@ -37709,6 +37801,20 @@ var require_dist_B29Skpzo = __commonJS({
           auth: "admin"
         }),
         /**
+        * Reclaim the standing debug-media backlog (motion-visit stills + track
+        * filmstrips). DETACHED: returns `{ started }` immediately. The pass is
+        * tens of minutes; awaiting it is a timeout, not a verdict. Dry-run unless
+        * `mode: 'reclaim'`. Poll `getMediaReclaimStatus`.
+        */
+        reclaimDebugMedia: method(MediaReclaimInputSchema, MediaReclaimStartResultSchema, {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        getMediaReclaimStatus: method(zod.z.object({}), MediaReclaimStatusSchema, {
+          kind: "query",
+          auth: "admin"
+        }),
+        /**
         * The CHEAP QUESTION, asked before any media moves: how big is the dataset
         * the marked (`markForTrain`) tracks would produce?
         *
@@ -40296,7 +40402,23 @@ var require_dist_B29Skpzo = __commonJS({
         drain: method(StorageMigrationDrainInputSchema, zod.z.object({ jobId: zod.z.string() }), {
           kind: "mutation",
           auth: "admin"
-        })
+        }),
+        /**
+        * One operator cleanup of leftover analytics (DB + blobs) and ghost
+        * ledger rows on frozen footage locations. Optional debug-media sweep.
+        * Returns immediately; poll {@link cleanupStatus}.
+        */
+        cleanupStart: method(StorageCleanupInputSchema, zod.z.object({ jobId: zod.z.string() }), {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        cleanupStatus: method(StorageCleanupStatusInputSchema, StorageCleanupJobSchema.nullable(), { auth: "admin" }),
+        cleanupCancel: method(zod.z.object({ jobId: zod.z.string() }), zod.z.object({ cancelled: zod.z.boolean() }), {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        /** Recent finished migration jobs, newest first. The live job is `status`. */
+        history: method(zod.z.object({}), zod.z.array(StorageMigrationJobSchema).readonly(), { auth: "admin" })
       }
     };
     var ProviderInfoSchema = zod.z.discriminatedUnion("shouldSaveDiskSpace", [zod.z.object({
@@ -47088,6 +47210,26 @@ var require_dist_B29Skpzo = __commonJS({
       /** Ignore piles smaller than this (default 1 GB). */
       minMoveGb: zod.z.number().min(0).optional()
     });
+    var RecordingDevicePlacementSchema = zod.z.object({
+      deviceId: zod.z.number().int(),
+      profile: zod.z.string(),
+      locationId: zod.z.string()
+    });
+    var RecordingDevicePinSchema = zod.z.object({
+      deviceId: zod.z.number().int(),
+      /** Recordings-class location this camera is pinned to. */
+      locationId: zod.z.string()
+    });
+    var RecordingPlacementViewSchema = zod.z.object({
+      assignments: zod.z.array(RecordingDevicePlacementSchema),
+      pins: zod.z.array(RecordingDevicePinSchema),
+      defaultLocations: zod.z.record(zod.z.string(), zod.z.string())
+    });
+    var RecordingSetDevicePlacementInputSchema = zod.z.object({
+      deviceId: zod.z.number().int(),
+      /** `null` = Auto. Otherwise a `recordings:*` location id. */
+      locationId: zod.z.string().nullable()
+    });
     var LocateSegmentResultSchema = zod.z.discriminatedUnion("kind", [zod.z.object({
       kind: zod.z.literal("segment"),
       startMs: zod.z.number(),
@@ -47406,6 +47548,22 @@ var require_dist_B29Skpzo = __commonJS({
         startStorageRebalance: method(RecordingRebalanceInputSchema, RecordingRebalancePlanSchema, {
           kind: "mutation",
           auth: "admin"
+        }),
+        /**
+        * The placement plan in force plus operator pins. Drives the Locations
+        * admin page: Auto vs a named recordings location, per camera.
+        */
+        getPlacement: method(zod.z.object({}), RecordingPlacementViewSchema, {
+          kind: "query",
+          auth: "admin"
+        }),
+        /**
+        * Pin a camera to a recordings location, or clear the pin (Auto). High and
+        * mid follow the pin; low stays with the recordingsLow planner.
+        */
+        setDevicePlacement: method(RecordingSetDevicePlacementInputSchema, zod.z.object({ ok: zod.z.literal(true) }), {
+          kind: "mutation",
+          auth: "admin"
         })
       }
     };
@@ -53519,6 +53677,12 @@ var require_dist_B29Skpzo = __commonJS({
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.getMediaReclaimStatus": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.getMotionEvents": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -53693,6 +53857,12 @@ var require_dist_B29Skpzo = __commonJS({
         addonId: null,
         access: "create"
       },
+      "pipelineAnalytics.reclaimDebugMedia": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "create"
+      },
       "pipelineAnalytics.reconcileFromDisk": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -54617,6 +54787,12 @@ var require_dist_B29Skpzo = __commonJS({
         addonId: null,
         access: "view"
       },
+      "recording.getPlacement": {
+        capName: "recording",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "recording.getPlaybackManifest": {
         capName: "recording",
         capScope: "system",
@@ -54743,6 +54919,12 @@ var require_dist_B29Skpzo = __commonJS({
         addonId: null,
         access: "create"
       },
+      "recording.setDevicePlacement": {
+        capName: "recording",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "recording.startStorageMigrationMove": {
         capName: "recording",
         capScope: "system",
@@ -55187,12 +55369,36 @@ var require_dist_B29Skpzo = __commonJS({
         addonId: null,
         access: "create"
       },
+      "storageMigration.cleanupCancel": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
+      "storageMigration.cleanupStart": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
+      "storageMigration.cleanupStatus": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "storageMigration.drain": {
         capName: "storage-migration",
         capScope: "system",
         addonId: null,
         access: "create"
       },
+      "storageMigration.history": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "storageMigration.movers": {
         capName: "storage-migration",
         capScope: "system",
@@ -57309,6 +57515,11 @@ var require_dist_B29Skpzo = __commonJS({
         form: "single",
         optional: true
       }],
+      "pipelineAnalytics.reclaimDebugMedia": [{
+        name: "deviceIds",
+        form: "array",
+        optional: true
+      }],
       "pipelineAnalytics.reconcileFromDisk": [{
         name: "deviceId",
         form: "single",
@@ -57674,6 +57885,11 @@ var require_dist_B29Skpzo = __commonJS({
         form: "single",
         optional: false
       }],
+      "recording.setDevicePlacement": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "recording.startStorageMigrationMove": [{
         name: "deviceId",
         form: "single",
@@ -58914,6 +59130,12 @@ var require_dist_B29Skpzo = __commonJS({
         return ScopedTokenSchema;
       }
     });
+    Object.defineProperty(exports, "StorageCleanupJobSchema", {
+      enumerable: true,
+      get: function() {
+        return StorageCleanupJobSchema;
+      }
+    });
     Object.defineProperty(exports, "StorageLocationTypeSchema", {
       enumerable: true,
       get: function() {
@@ -59418,7 +59640,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_CFTKQGym();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -60237,7 +60459,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_CFTKQGym();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -60331,7 +60553,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_CFTKQGym();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -61228,11 +61450,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-CRL0qOnU.js
-var require_retired_settings_keys_CRL0qOnU = __commonJS({
-  "../system/dist/retired-settings-keys-CRL0qOnU.js"(exports) {
+// ../system/dist/retired-settings-keys-dehyu2N3.js
+var require_retired_settings_keys_dehyu2N3 = __commonJS({
+  "../system/dist/retired-settings-keys-dehyu2N3.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_CFTKQGym();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -63446,8 +63668,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
-    var require_retired_settings_keys = require_retired_settings_keys_CRL0qOnU();
+    var require_dist10 = require_dist_CFTKQGym();
+    var require_retired_settings_keys = require_retired_settings_keys_dehyu2N3();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -64425,6 +64647,9 @@ var require_device_manager_addon = __commonJS({
       for (const f of features) if (DEVICE_FEATURE_VALUES.has(f)) out.push(f);
       return out;
     }
+    function persistedIsCamera(type) {
+      return type === require_dist10.DeviceType.Camera;
+    }
     function buildSourceInfoFromConfig(persistedConfig, stableId, addonId) {
       const id = typeof persistedConfig["entityId"] === "string" ? persistedConfig["entityId"] : void 0;
       const system = typeof persistedConfig["system"] === "string" ? persistedConfig["system"] : void 0;
@@ -64571,7 +64796,7 @@ var require_device_manager_addon = __commonJS({
           online: pctx.host.resolveDeviceOnline(m.id, pctx.registry !== null),
           probed: pctx.host.resolveDeviceProbed(m.id),
           features: persistedFeatures(m.features),
-          isCamera: persistedType === require_dist10.DeviceType.Camera,
+          isCamera: persistedIsCamera(persistedType),
           config: persistedConfig ?? {},
           metadata,
           ...m.integrationId !== void 0 ? { integrationId: m.integrationId } : {},
@@ -64616,7 +64841,7 @@ var require_device_manager_addon = __commonJS({
         online: pctx.host.resolveDeviceOnline(deviceId, true),
         probed: pctx.host.resolveDeviceProbed(deviceId),
         features: persistedFeatures(m.features),
-        isCamera: false,
+        isCamera: persistedIsCamera(m.type),
         config: persistedConfig ?? {},
         metadata,
         ...m.integrationId !== void 0 ? { integrationId: m.integrationId } : {},
@@ -64664,7 +64889,7 @@ var require_device_manager_addon = __commonJS({
           online: pctx.host.resolveDeviceOnline(m.id, pctx.registry !== null),
           probed: pctx.host.resolveDeviceProbed(m.id),
           features: persistedFeatures(m.features),
-          isCamera: false,
+          isCamera: persistedIsCamera(m.type),
           config: persistedConfig,
           metadata,
           ...m.integrationId !== void 0 ? { integrationId: m.integrationId } : {},
@@ -68260,7 +68485,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_CFTKQGym();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -68397,7 +68622,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_CFTKQGym();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -68587,7 +68812,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_CFTKQGym();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -76400,7 +76625,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_CFTKQGym();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -76965,7 +77190,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_CFTKQGym();
     var node_fs_promises = __require("fs/promises");
     var node_child_process = __require("child_process");
     var node_util = __require("util");
@@ -79587,7 +79812,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_CFTKQGym();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -80703,8 +80928,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
-    var require_retired_settings_keys = require_retired_settings_keys_CRL0qOnU();
+    var require_dist10 = require_dist_CFTKQGym();
+    var require_retired_settings_keys = require_retired_settings_keys_dehyu2N3();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -80740,6 +80965,14 @@ var require_sqlite_settings_addon = __commonJS({
     var SQLITE_PROFILE_REPORT_INTERVAL_MS = 6e4;
     var SQLITE_PROFILE_REPORT_FLOOR_MS = 250;
     var SQLITE_PROFILE_TOP_N = 5;
+    var SQLITE_ENGINE_STORM_WALL_SHARE = 0.5;
+    function sqliteEngineStorm(stats, windowMs) {
+      if (windowMs <= 0) return null;
+      const top = stats[0];
+      if (top === void 0) return null;
+      if (top.totalMs / windowMs < 0.5) return null;
+      return top;
+    }
     function rowsOf(value) {
       if (Array.isArray(value)) return value.length;
       if (value === void 0 || value === null) return 0;
@@ -80874,21 +81107,39 @@ var require_sqlite_settings_addon = __commonJS({
         const stats = this.drain();
         const busyMs = stats.reduce((acc, s) => acc + s.totalMs, 0);
         if (busyMs < this.reportFloorMs) return;
+        const busyPct = Math.round(busyMs / windowMs * 100);
+        const calls = stats.reduce((acc, s) => acc + s.calls, 0);
+        const top = stats.slice(0, this.topN).map((s) => ({
+          op: s.op,
+          collection: s.collection,
+          ...s.owner === void 0 ? {} : { owner: s.owner },
+          ...s.shape === void 0 ? {} : { shape: s.shape },
+          calls: s.calls,
+          totalMs: Math.round(s.totalMs),
+          maxMs: Math.round(s.maxMs),
+          rows: s.rows
+        }));
         this.logger.info("sqlite engine busy", { meta: {
           busyMs: Math.round(busyMs),
           windowMs: Math.round(windowMs),
-          busyPct: Math.round(busyMs / windowMs * 100),
-          calls: stats.reduce((acc, s) => acc + s.calls, 0),
-          top: stats.slice(0, this.topN).map((s) => ({
-            op: s.op,
-            collection: s.collection,
-            ...s.owner === void 0 ? {} : { owner: s.owner },
-            ...s.shape === void 0 ? {} : { shape: s.shape },
-            calls: s.calls,
-            totalMs: Math.round(s.totalMs),
-            maxMs: Math.round(s.maxMs),
-            rows: s.rows
-          }))
+          busyPct,
+          calls,
+          top
+        } });
+        const storm = sqliteEngineStorm(stats, windowMs);
+        if (storm !== null) this.logger.warn("sqlite engine storm", { meta: {
+          busyMs: Math.round(busyMs),
+          windowMs: Math.round(windowMs),
+          busyPct,
+          wallPct: Math.round(storm.totalMs / windowMs * 100),
+          op: storm.op,
+          collection: storm.collection,
+          ...storm.owner === void 0 ? {} : { owner: storm.owner },
+          ...storm.shape === void 0 ? {} : { shape: storm.shape },
+          calls: storm.calls,
+          totalMs: Math.round(storm.totalMs),
+          maxMs: Math.round(storm.maxMs),
+          rows: storm.rows
         } });
       }
       start() {
@@ -82968,6 +83219,7 @@ var require_sqlite_settings_addon = __commonJS({
         return this.vectorIndex;
       }
     };
+    exports.SQLITE_ENGINE_STORM_WALL_SHARE = SQLITE_ENGINE_STORM_WALL_SHARE;
     exports.SQLITE_JOURNAL_SIZE_LIMIT_BYTES = SQLITE_JOURNAL_SIZE_LIMIT_BYTES;
     exports.SQLITE_MMAP_CEILING_BYTES = SQLITE_MMAP_CEILING_BYTES;
     exports.SQLITE_MMAP_FLOOR_BYTES = SQLITE_MMAP_FLOOR_BYTES;
@@ -82987,6 +83239,7 @@ var require_sqlite_settings_addon = __commonJS({
     exports.WAL_MAINTENANCE_INTERVAL_MS = WAL_MAINTENANCE_INTERVAL_MS;
     exports.WalMaintenance = WalMaintenance;
     exports.prefixRange = prefixRange;
+    exports.sqliteEngineStorm = sqliteEngineStorm;
     exports.sqliteMmapSizeFor = sqliteMmapSizeFor;
     exports.sqlitePageCacheKibFor = sqlitePageCacheKibFor;
   }
@@ -83051,6 +83304,7 @@ var require_sqlite_storage = __commonJS({
     exports.DeviceStore$1 = DeviceStore;
     exports.FilesystemStorageAddon = require_builtins_sqlite_storage_filesystem_storage_addon.FilesystemStorageAddon;
     exports.FilesystemStorageProvider = require_builtins_sqlite_storage_filesystem_storage_addon.FilesystemStorageProvider;
+    exports.SQLITE_ENGINE_STORM_WALL_SHARE = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_ENGINE_STORM_WALL_SHARE;
     exports.SQLITE_JOURNAL_SIZE_LIMIT_BYTES = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_JOURNAL_SIZE_LIMIT_BYTES;
     exports.SQLITE_MMAP_CEILING_BYTES = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_MMAP_CEILING_BYTES;
     exports.SQLITE_MMAP_FLOOR_BYTES = require_builtins_sqlite_storage_sqlite_settings_addon.SQLITE_MMAP_FLOOR_BYTES;
@@ -83069,6 +83323,7 @@ var require_sqlite_storage = __commonJS({
     exports.WAL_MAINTENANCE_INTERVAL_MS = require_builtins_sqlite_storage_sqlite_settings_addon.WAL_MAINTENANCE_INTERVAL_MS;
     exports.WalMaintenance = require_builtins_sqlite_storage_sqlite_settings_addon.WalMaintenance;
     exports.default = require_builtins_sqlite_storage_filesystem_storage_addon.FilesystemStorageAddon;
+    exports.sqliteEngineStorm = require_builtins_sqlite_storage_sqlite_settings_addon.sqliteEngineStorm;
     exports.sqliteMmapSizeFor = require_builtins_sqlite_storage_sqlite_settings_addon.sqliteMmapSizeFor;
     exports.sqlitePageCacheKibFor = require_builtins_sqlite_storage_sqlite_settings_addon.sqlitePageCacheKibFor;
   }
@@ -83083,7 +83338,8 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_CFTKQGym();
+    var zod = require_zod();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -83267,17 +83523,13 @@ var require_storage_orchestrator_addon = __commonJS({
       "recordings",
       "recordingsLow",
       "eventMedia",
-      "backups",
-      "galleryMedia"
+      "backups"
     ];
     var MOVER_CLASSES = [
       "recordings",
       "recordingsLow",
-      "eventMedia",
-      "galleryMedia"
+      "eventMedia"
     ];
-    var BLOCKING_ONLY_CLASSES = ["galleryMedia"];
-    var GALLERY_FORBIDDEN_NEIGHBOUR_TYPES = ["recordings", "recordingsLow"];
     var MOVE_LANES = ["media", "footage"];
     var PARTICIPANTS = [
       "pipeline",
@@ -83302,35 +83554,34 @@ var require_storage_orchestrator_addon = __commonJS({
         this.deps = deps;
       }
       async plan(input) {
+        refuseRetiredGalleryClass(input.destinations);
         const mode = input.mode ?? "blocking";
         const moves = [];
         const findings = [];
         for (const storageClass of STORAGE_CLASSES) {
           const targetId = input.destinations[storageClass];
           if (targetId === void 0) continue;
-          const source = this.deps.locations.getDefaultLocation(storageClass);
-          if (!source) throw new Error(`No default storage location for "${storageClass}"`);
+          const namedSourceId = input.sources?.[storageClass];
+          const defaultLoc = this.deps.locations.getDefaultLocation(storageClass);
+          const source = namedSourceId ? this.deps.locations.getLocationById(namedSourceId) : defaultLoc;
+          if (!source) throw new Error(namedSourceId ? `Storage location "${namedSourceId}" not found` : `No default storage location for "${storageClass}"`);
+          if (source.type !== storageClass) throw new Error(`Storage location "${source.id}" is type "${source.type}", expected "${storageClass}"`);
           const target = this.deps.locations.getLocationById(targetId);
           if (!target) throw new Error(`Storage location "${targetId}" not found`);
           if (target.type !== storageClass) throw new Error(`Storage location "${targetId}" is type "${target.type}", expected "${storageClass}"`);
-          if (source.id === target.id) throw new Error(`Storage location "${targetId}" is already the "${storageClass}" default`);
+          if (source.id === target.id) throw new Error(namedSourceId ? `Source and destination are the same location ("${targetId}")` : `Storage location "${targetId}" is already the "${storageClass}" default`);
+          const freezeSource = defaultLoc !== void 0 && source.id !== defaultLoc.id;
           if (!MOVER_CLASSES.includes(storageClass)) throw new Error(`No mover owns "${storageClass}" \u2014 the migration can repoint its default but cannot move its bytes. Move it by hand, then repoint the default with upsertLocation.`);
-          if (mode === "nonBlocking" && BLOCKING_ONLY_CLASSES.includes(storageClass)) throw new Error(`"${storageClass}" is a single-cardinality storage class: it can never exist at two locations at once, so it cannot be repointed first and drained behind. Use mode "blocking".`);
-          await this.refuseGalleryOntoRecordingsVolume(storageClass, targetId);
           moves.push({
             storageClass,
             fromLocationId: source.id,
             toLocationId: target.id,
+            freezeSource,
             moverJobId: null,
             state: null,
             error: null,
             progress: null
           });
-          if (BLOCKING_ONLY_CLASSES.includes(storageClass)) findings.push({
-            code: "blockingOnly",
-            storageClass,
-            message: `"${storageClass}" is single-cardinality: this move is stop-the-world for its whole duration, in every mode. It is a few KB per enrolled sample, which is why that is acceptable.`
-          });
           findings.push(...await this.deviceFindings(storageClass, source.id, target.id));
         }
         if (moves.length === 0) throw new Error("select at least one storage class");
@@ -83356,38 +83607,17 @@ var require_storage_orchestrator_addon = __commonJS({
         }
         return {
           destinations: input.destinations,
+          sources: input.sources,
           mode,
-          moves: moves.map(({ storageClass, fromLocationId, toLocationId }) => ({
+          moves: moves.map(({ storageClass, fromLocationId, toLocationId, freezeSource }) => ({
             storageClass,
             fromLocationId,
-            toLocationId
+            toLocationId,
+            freezeSource
           })),
           findings
         };
       }
-      /**
-      * HARD refusal: `galleryMedia` onto a volume a recordings class lives on.
-      *
-      * This is the one same-device case that is a refusal rather than a finding,
-      * because its consequence is silent and arrives months later — the gallery is
-      * wiped by the next footage wipe, quota eviction or recordings disk swap, and
-      * nothing at that moment points back at this migration.
-      *
-      * It can only refuse what it can SEE. `deviceKeyOf` is a realpath, so it
-      * catches a symlink, a bind mount and a literally-shared directory — and
-      * misses two distinct directories on one filesystem, and any location pinned
-      * to another node. Those come back `null`/distinct and produce a
-      * `deviceIdentityUnknown` finding instead.
-      */
-      async refuseGalleryOntoRecordingsVolume(storageClass, targetId) {
-        if (storageClass !== "galleryMedia") return;
-        const targetKey = await this.deviceKey(targetId);
-        if (targetKey === null) return;
-        for (const type of GALLERY_FORBIDDEN_NEIGHBOUR_TYPES) for (const neighbour of this.deps.locations.listLocations({ type })) {
-          if (await this.deviceKey(neighbour.id) !== targetKey) continue;
-          throw new Error(`Storage location "${targetId}" shares a volume with "${neighbour.id}" (${type}). galleryMedia is deliberately NOT on the recordings volume: enrolment images survive every retention sweep, so they must also survive a footage wipe, a quota eviction and a recordings disk swap. Choose a destination on another volume.`);
-        }
-      }
       /** Same-device observations that are reported, not refused. */
       async deviceFindings(storageClass, sourceId, targetId) {
         if (this.deps.deviceKeyOf === void 0) return [];
@@ -83413,12 +83643,12 @@ var require_storage_orchestrator_addon = __commonJS({
         this.startReserved = true;
         try {
           const existing = await this.status();
-          if (existing && isTerminal(existing) && existing.pausedParticipants.length > 0) {
+          if (existing && isTerminal$1(existing) && existing.pausedParticipants.length > 0) {
             await this.releaseAfterTerminal(existing);
             await this.persist(existing);
             if (existing.pausedParticipants.length > 0) throw new Error(`storage migration ${existing.jobId} still holds maintenance leases`);
           }
-          if (existing && !isTerminal(existing)) throw new Error(`storage migration is already active (${existing.jobId})`);
+          if (existing && !isTerminal$1(existing)) throw new Error(`storage migration is already active (${existing.jobId})`);
           const plan = await this.plan(input);
           const now = this.deps.now();
           const job = {
@@ -83426,6 +83656,7 @@ var require_storage_orchestrator_addon = __commonJS({
             phase: "planning",
             mode: plan.mode,
             destinations: input.destinations,
+            sources: input.sources,
             throttleMbps: input.throttleMbps ?? 40,
             moves: plan.moves.map((move) => ({
               ...move,
@@ -83457,10 +83688,15 @@ var require_storage_orchestrator_addon = __commonJS({
         if (jobId !== void 0 && job?.jobId !== jobId) return null;
         return job;
       }
+      /** Finished jobs, newest first, excluding the one `status` currently shows. */
+      async history() {
+        const current = await this.status();
+        return (await this.deps.history?.get() ?? []).filter((job) => job.jobId !== current?.jobId);
+      }
       async cancel(jobId) {
         const job = await this.status(jobId);
         const cutoverInFlight = job !== null && job.repointed && (job.phase === "refreshing" || job.phase === "resuming");
-        if (!job || isTerminal(job) || cutoverInFlight) return false;
+        if (!job || isTerminal$1(job) || cutoverInFlight) return false;
         job.cancelRequested = true;
         await this.persist(job);
         await Promise.all(job.moves.filter((move) => move.moverJobId !== null).map((move) => this.cancelMove(move)));
@@ -83517,18 +83753,22 @@ var require_storage_orchestrator_addon = __commonJS({
           const target = this.deps.locations.getDefaultLocation(storageClass);
           if (!target) continue;
           if (laneOf(storageClass) === "media") {
-            const count = await unanswerable(this.deps.participants.analytics.residue({
-              toLocationId: target.id,
-              mode: storageClass === "galleryMedia" ? "gallery" : "move"
-            }));
-            if (count !== null && count.rows === 0) continue;
-            out.push({
-              storageClass,
-              fromLocationId: "*",
-              toLocationId: target.id,
-              items: count?.rows ?? null,
-              bytes: null
-            });
+            for (const source of this.deps.locations.listLocations({ type: storageClass })) {
+              if (source.id === target.id) continue;
+              const count = await unanswerable(this.deps.participants.analytics.residue({
+                toLocationId: target.id,
+                fromLocationId: source.id,
+                mode: "move"
+              }));
+              if (count !== null && count.rows === 0) continue;
+              out.push({
+                storageClass,
+                fromLocationId: source.id,
+                toLocationId: target.id,
+                items: count?.rows ?? null,
+                bytes: null
+              });
+            }
             continue;
           }
           for (const source of this.deps.locations.listLocations({ type: storageClass })) {
@@ -83582,12 +83822,12 @@ var require_storage_orchestrator_addon = __commonJS({
         this.startReserved = true;
         try {
           const existing = await this.status();
-          if (existing && isTerminal(existing) && existing.pausedParticipants.length > 0) {
+          if (existing && isTerminal$1(existing) && existing.pausedParticipants.length > 0) {
             await this.releaseAfterTerminal(existing);
             await this.persist(existing);
             if (existing.pausedParticipants.length > 0) throw new Error(`storage migration ${existing.jobId} still holds maintenance leases`);
           }
-          if (existing && !isTerminal(existing)) throw new Error(`storage migration is already active (${existing.jobId})`);
+          if (existing && !isTerminal$1(existing)) throw new Error(`storage migration is already active (${existing.jobId})`);
           for (const storageClass of input.classes) {
             if (MOVER_CLASSES.includes(storageClass)) continue;
             throw new Error(`No mover owns "${storageClass}" \u2014 there is nothing that can drain it. Move it by hand.`);
@@ -83652,7 +83892,7 @@ var require_storage_orchestrator_addon = __commonJS({
           await this.persist(job);
           return;
         }
-        if (isTerminal(job)) {
+        if (isTerminal$1(job)) {
           if (job.pausedParticipants.length > 0) {
             await this.releaseAfterTerminal(job);
             await this.persist(job);
@@ -83713,11 +83953,12 @@ var require_storage_orchestrator_addon = __commonJS({
           if (job.phase === "verifying" && !nonBlocking) {
             await this.verifyMoves(job);
             if (job.cancelRequested) return this.finishCancelled(job);
+            await this.freezeDrainedSources(job);
             await this.setPhase(job, "repointing");
           }
           if (job.phase === "repointing") {
-            const targets = new Map(job.moves.map((move) => [move.storageClass, move.toLocationId]));
-            await this.deps.locations.setDefaultLocations(targets);
+            const targets = new Map(job.moves.filter((move) => move.freezeSource !== true).map((move) => [move.storageClass, move.toLocationId]));
+            if (targets.size > 0) await this.deps.locations.setDefaultLocations(targets);
             job.repointed = true;
             await this.setPhase(job, "refreshing");
           }
@@ -83740,6 +83981,7 @@ var require_storage_orchestrator_addon = __commonJS({
           if (job.phase === "verifying" && nonBlocking) {
             await this.verifyMoves(job);
             if (job.cancelRequested) return this.finishCancelled(job);
+            await this.freezeDrainedSources(job);
             await this.setPhase(job, "done");
           }
         } catch (err) {
@@ -83755,7 +83997,7 @@ var require_storage_orchestrator_addon = __commonJS({
           await this.releaseAfterTerminal(job);
           await this.persist(job);
         } finally {
-          if (isTerminal(job)) {
+          if (isTerminal$1(job)) {
             await this.releaseAfterTerminal(job);
             this.active = job;
           }
@@ -83799,9 +84041,7 @@ var require_storage_orchestrator_addon = __commonJS({
       *
       * Two lanes — the recorder's footage engine and post-analysis's media engine
       * — run in parallel with each other and strictly FIFO within themselves.
-      * `galleryMedia` shares the media lane with `eventMedia` because it shares
-      * the same `MediaRelocateEngine`, which refuses a second running job; starting
-      * both would fail the second one instantly.
+      * `eventMedia` is the only class on the media lane.
       */
       async startOrResumeMoves(job) {
         if (job.cancelRequested) return;
@@ -83918,6 +84158,24 @@ var require_storage_orchestrator_addon = __commonJS({
         for (const move of job.moves) if (move.state !== "done") throw new Error(`${move.storageClass} move did not complete verification`);
       }
       /**
+      * After a from→to copy whose source was NOT the class default: stop new
+      * writes to `from`. The default is unchanged (that is the whole point of
+      * naming a non-default source). A location that is already disabled is
+      * left alone.
+      */
+      freezeDrainedSources(job) {
+        for (const move of job.moves) {
+          if (move.freezeSource !== true) continue;
+          const loc = this.deps.locations.getLocationById(move.fromLocationId);
+          if (!loc || loc.enabled === false) continue;
+          const { createdAt: _c, updatedAt: _u, capacity: _cap, ...rest } = loc;
+          this.deps.locations.upsertLocation({
+            ...rest,
+            enabled: false
+          });
+        }
+      }
+      /**
       * Arm one class's mover.
       *
       * `draining` runs after every writer has been resumed, so there is no lease
@@ -83930,8 +84188,9 @@ var require_storage_orchestrator_addon = __commonJS({
         if (laneOf(move.storageClass) === "media") {
           const input2 = {
             toLocationId: move.toLocationId,
+            fromLocationId: move.fromLocationId,
             throttleMbps: job.throttleMbps,
-            mode: move.storageClass === "galleryMedia" ? "gallery" : "move"
+            mode: "move"
           };
           return (unleased ? await this.deps.participants.analytics.startDrain(input2) : await this.deps.participants.analytics.startMove({
             ...input2,
@@ -83963,7 +84222,7 @@ var require_storage_orchestrator_addon = __commonJS({
       }
       async setPhase(job, phase) {
         job.phase = phase;
-        if (isTerminal(job)) job.finishedAt = this.deps.now();
+        if (isTerminal$1(job)) job.finishedAt = this.deps.now();
         await this.persist(job);
       }
       async finishCancelled(job) {
@@ -83975,6 +84234,9 @@ var require_storage_orchestrator_addon = __commonJS({
       async persist(job) {
         job.updatedAt = this.deps.now();
         await this.deps.state.set(job);
+        if (!isTerminal$1(job) || this.deps.history === void 0) return;
+        const prev = [...await this.deps.history.get() ?? []];
+        await this.deps.history.set([job, ...prev.filter((row) => row.jobId !== job.jobId)].slice(0, HISTORY_CAP));
       }
     };
     async function unanswerable(read) {
@@ -83988,11 +84250,16 @@ var require_storage_orchestrator_addon = __commonJS({
       if (job.pauseLeaseId === null) throw new Error("storage migration has no maintenance lease");
       return job.pauseLeaseId;
     }
-    function isTerminal(job) {
+    function isTerminal$1(job) {
       return job.phase === "done" || job.phase === "failed" || job.phase === "cancelled";
     }
+    var HISTORY_CAP = 20;
     function laneOf(storageClass) {
-      return storageClass === "eventMedia" || storageClass === "galleryMedia" ? "media" : "footage";
+      return storageClass === "eventMedia" ? "media" : "footage";
+    }
+    function refuseRetiredGalleryClass(destinations) {
+      if (destinations.galleryMedia === void 0) return;
+      throw new Error("galleryMedia is no longer a storage class. Enrolled gallery lives in the pipeline-analytics addon data directory, not a location the operator places.");
     }
     function runsUnleased(job) {
       if (job.phase === "sealing" || job.phase === "draining") return true;
@@ -84039,6 +84306,46 @@ var require_storage_orchestrator_addon = __commonJS({
     function canProbeOccupancyLocally(locality) {
       return locality === true;
     }
+    var STORAGE_CLASS_SUBTREES = {
+      eventMedia: ["events"],
+      recordingsLow: ["low"],
+      recordings: ["high", "mid"]
+    };
+    function isDotEntry(name) {
+      return name.startsWith(".");
+    }
+    async function dirHasAnyEntry(dir) {
+      let handle;
+      try {
+        handle = await (0, node_fs_promises.opendir)(dir);
+      } catch (err) {
+        if (err.code === "ENOENT") return false;
+        throw err;
+      }
+      try {
+        return await handle.read() !== null;
+      } finally {
+        await handle.close();
+      }
+    }
+    async function probeLocalDirectoryOccupancy(input) {
+      let names;
+      try {
+        names = await (0, node_fs_promises.readdir)(input.basePath);
+      } catch (err) {
+        if (err.code === "ENOENT") return "empty";
+        return "unknown";
+      }
+      const visible = names.filter((name) => !isDotEntry(name));
+      const subtrees = STORAGE_CLASS_SUBTREES[input.type];
+      if (subtrees === void 0) return visible.length > 0 ? "occupied" : "empty";
+      try {
+        for (const camera of visible) for (const subtree of subtrees) if (await dirHasAnyEntry(node_path.default.join(input.basePath, camera, subtree))) return "occupied";
+      } catch {
+        return "unknown";
+      }
+      return "empty";
+    }
     function resolveEngine(getEngines) {
       const engines = getEngines();
       if (engines.length === 0) throw new Error("settings-store: no data-store-provider engine is registered \u2014 the data door has nothing behind it");
@@ -84128,6 +84435,164 @@ var require_storage_orchestrator_addon = __commonJS({
       }
       return out;
     }
+    var FOOTAGE_TYPES = /* @__PURE__ */ new Set(["recordings", "recordingsLow"]);
+    function isTerminal(job) {
+      return job.phase === "done" || job.phase === "failed" || job.phase === "cancelled";
+    }
+    function footageFrozen(location) {
+      return location.enabled === false || location.config["readOnly"] === true;
+    }
+    var StorageCleanupCoordinator = class {
+      deps;
+      active = null;
+      startReserved = false;
+      constructor(deps) {
+        this.deps = deps;
+      }
+      async start(input) {
+        if (this.startReserved) throw new Error("storage cleanup is already active");
+        this.startReserved = true;
+        try {
+          const existing = await this.status();
+          if (existing && !isTerminal(existing)) throw new Error(`storage cleanup is already active (${existing.jobId})`);
+          const now = this.deps.now();
+          const job = {
+            jobId: this.deps.newId(),
+            phase: "orphans",
+            includeDebugMedia: input.includeDebugMedia === true,
+            orphansReclaimed: 0,
+            orphanBytesReclaimed: 0,
+            debugMediaReclaimed: 0,
+            debugMediaBytesReclaimed: 0,
+            ghostsForgotten: 0,
+            ghostBytesForgotten: 0,
+            detail: "Starting orphan reclaim",
+            cancelRequested: false,
+            startedAt: now,
+            updatedAt: now,
+            finishedAt: null,
+            error: null
+          };
+          await this.persist(job);
+          this.active = job;
+          this.run(job);
+          return job.jobId;
+        } finally {
+          this.startReserved = false;
+        }
+      }
+      async status(jobId) {
+        const job = this.active ?? await this.deps.state.get();
+        if (jobId !== void 0 && job?.jobId !== jobId) return null;
+        return job;
+      }
+      async cancel(jobId) {
+        const job = await this.status(jobId);
+        if (!job || isTerminal(job)) return false;
+        job.cancelRequested = true;
+        job.detail = "Cancel requested \u2014 finishing the current step";
+        await this.persist(job);
+        return true;
+      }
+      async run(job) {
+        try {
+          await this.reclaimOrphans(job);
+          if (await this.stopped(job)) return;
+          if (job.includeDebugMedia) {
+            await this.setPhase(job, "debug-media", "Reclaiming debug media");
+            await this.reclaimDebugMedia(job);
+            if (await this.stopped(job)) return;
+          }
+          await this.setPhase(job, "ghost-ledger", "Forgetting ghost footage rows");
+          await this.forgetGhosts(job);
+          if (await this.stopped(job)) return;
+          await this.finish(job, "done", null);
+        } catch (err) {
+          const message = err instanceof Error ? err.message : String(err);
+          await this.finish(job, "failed", message);
+        }
+      }
+      async reclaimOrphans(job) {
+        let restart = true;
+        for (; ; ) {
+          if (await this.stopped(job)) return;
+          const start = await this.deps.participants.startOrphan(restart);
+          restart = false;
+          if (!start.started && !start.alreadyRunning) throw new Error("orphan reclaim did not start");
+          const status = await this.waitUntilIdle(() => this.deps.participants.orphanStatus(), job, (s) => `Orphan reclaim: ${s.totalReclaimed} rows / ${String(s.totalBytesReclaimed)} bytes`);
+          job.orphansReclaimed += status.totalReclaimed;
+          job.orphanBytesReclaimed += status.totalBytesReclaimed;
+          job.detail = `Orphans: ${job.orphansReclaimed} rows, ${String(job.orphanBytesReclaimed)} bytes`;
+          await this.persist(job);
+          if (status.error) throw new Error(status.error);
+          if (status.complete === true) return;
+        }
+      }
+      async reclaimDebugMedia(job) {
+        const start = await this.deps.participants.startDebugMedia();
+        if (!start.started && !start.alreadyRunning) throw new Error("debug-media reclaim did not start");
+        const status = await this.waitUntilIdle(() => this.deps.participants.debugMediaStatus(), job, (s) => `Debug media: ${s.totalReclaimed} files`);
+        job.debugMediaReclaimed = status.totalReclaimed;
+        job.debugMediaBytesReclaimed = status.totalBytesReclaimed;
+        await this.persist(job);
+        if (status.error) throw new Error(status.error);
+      }
+      async forgetGhosts(job) {
+        const frozen = this.deps.locations.listLocations().filter((l) => FOOTAGE_TYPES.has(l.type) && footageFrozen(l));
+        if (frozen.length === 0) {
+          job.detail = "No frozen footage locations";
+          await this.persist(job);
+          return;
+        }
+        for (const loc of frozen) {
+          if (await this.stopped(job)) return;
+          job.detail = `Ghost ledger: ${loc.id}`;
+          await this.persist(job);
+          const report = await this.deps.participants.walkLedger({
+            locationId: loc.id,
+            apply: true
+          });
+          job.ghostsForgotten += report.forgottenSegments;
+          job.ghostBytesForgotten += report.forgottenBytes;
+          await this.persist(job);
+        }
+      }
+      async waitUntilIdle(read, job, detail) {
+        const pollMs = this.deps.pollMs ?? 2e3;
+        const sleep = this.deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+        for (; ; ) {
+          const status = await read();
+          job.detail = detail(status);
+          await this.persist(job);
+          if (!status.running) return status;
+          await sleep(pollMs);
+        }
+      }
+      async stopped(job) {
+        if ((await this.status(job.jobId))?.cancelRequested === true) {
+          await this.finish(job, "cancelled", null);
+          return true;
+        }
+        return false;
+      }
+      async setPhase(job, phase, detail) {
+        job.phase = phase;
+        job.detail = detail;
+        await this.persist(job);
+      }
+      async finish(job, phase, error) {
+        job.phase = phase;
+        job.error = error;
+        job.finishedAt = this.deps.now();
+        job.detail = phase === "done" ? "Cleanup finished" : job.detail;
+        await this.persist(job);
+      }
+      async persist(job) {
+        job.updatedAt = this.deps.now();
+        this.active = job;
+        await this.deps.state.set(job);
+      }
+    };
     var SESSION_VOCABULARY = {
       upload: {
         idLabel: "uploadId",
@@ -84215,7 +84680,7 @@ var require_storage_orchestrator_addon = __commonJS({
       * Reconciles both directions so operator edits survive a reboot:
       *   1. hydrate — DB rows win over any early in-memory seed (restores
       *      operator config like `minFreePercent` that the pre-store boot
-      *      can't see), with the same `isSystem` upgrade as {@link initialize};
+      *      can't see);
       *   2. backfill — in-memory locations the DB doesn't have yet (the
       *      pre-store seed defaults on a fresh install) are persisted, so the
       *      store becomes the durable source of truth from here on.
@@ -84237,15 +84702,7 @@ var require_storage_orchestrator_addon = __commonJS({
         const rows = await store.loadAll();
         this.locationStore = store;
         const dbIds = new Set(rows.map((r) => r.id));
-        for (const loc of rows) {
-          const upgraded = !loc.isSystem && loc.id === `${loc.type}:default` ? {
-            ...loc,
-            isSystem: true
-          } : loc;
-          this.locations.set(upgraded.id, upgraded);
-          if (upgraded !== loc) store.upsert(upgraded).catch(() => {
-          });
-        }
+        for (const loc of rows) this.locations.set(loc.id, loc);
         const backfill = [...this.locations.values()].filter((l) => !dbIds.has(l.id));
         for (const loc of backfill) store.upsert(loc).catch((err) => {
           this.logger.warn("storage-orchestrator: attachStore backfill persist failed", { meta: {
@@ -84263,14 +84720,13 @@ var require_storage_orchestrator_addon = __commonJS({
       /**
       * Shout about a persisted row that is BOTH the type default and disabled.
       *
-      * `upsertLocation` cannot produce this (`resolveEnabled` force-enables a
-      * default) and neither can `setDefaultLocations` — but hydrate writes rows
-      * straight into the map without either, so a hand-edited store, a partial
-      * migration or a row written by another build can. It matters because every
-      * bare-type ref resolves through {@link getDefaultLocation}: on such a row
+      * `upsertLocation` can now produce this (enabled is the write set; `isDefault`
+      * is store residue). Hydrate also writes rows straight into the map, so a
+      * hand-edited store or a row written by another build can too. It matters
+      * because every bare-type ref still resolves through {@link getDefaultLocation}
+      * until Stage 5 of the enabled-write-set design: on such a row
       * `storage.write({ location: 'eventMedia' })` and the migration coordinator's
-      * drain destination both point at a disk the operator turned off. That is the
-      * one thing this model must never do silently.
+      * drain destination both point at a disk the operator turned off.
       *
       * Reported, never repaired: flipping an operator's flag back on at boot would
       * be the system overruling the switch instead of obeying it. The coordinator
@@ -84338,25 +84794,8 @@ var require_storage_orchestrator_addon = __commonJS({
       async initialize() {
         if (!this.locationStore) return;
         const rows = await this.locationStore.loadAll();
-        let upgraded = 0;
-        for (const loc of rows) if (!loc.isSystem && loc.id === `${loc.type}:default`) {
-          const upgradedLoc = {
-            ...loc,
-            isSystem: true
-          };
-          this.locations.set(upgradedLoc.id, upgradedLoc);
-          this.locationStore.upsert(upgradedLoc).catch((err) => {
-            this.logger.warn("storage-orchestrator: isSystem upgrade persist failed", { meta: {
-              id: upgradedLoc.id,
-              error: err instanceof Error ? err.message : String(err)
-            } });
-          });
-          upgraded++;
-        } else this.locations.set(loc.id, loc);
-        this.logger.info("storage-orchestrator: hydrated locations from store", { meta: {
-          loaded: this.locations.size,
-          isSystemUpgraded: upgraded
-        } });
+        for (const loc of rows) this.locations.set(loc.id, loc);
+        this.logger.info("storage-orchestrator: hydrated locations from store", { meta: { loaded: this.locations.size } });
         this.reportDisabledDefaults();
       }
       /**
@@ -84542,10 +84981,6 @@ var require_storage_orchestrator_addon = __commonJS({
           ...input,
           nodeId: "hub"
         };
-        if (existing?.isSystem === true) input = {
-          ...input,
-          isSystem: true
-        };
         input = {
           ...input,
           ...resolveEnabled(input, existing, this.hasAnyLocationOfType(input.type))
@@ -84555,6 +84990,7 @@ var require_storage_orchestrator_addon = __commonJS({
           createdAt: existing?.createdAt ?? now,
           updatedAt: now
         };
+        refuseLastWriteTargetDisabled(existing, next, this.locations.values());
         const demoted = [];
         if (next.isDefault) {
           for (const [otherId, otherLoc] of this.locations) if (otherLoc.type === next.type && otherLoc.id !== next.id && otherLoc.isDefault) {
@@ -84591,21 +85027,22 @@ var require_storage_orchestrator_addon = __commonJS({
         return next;
       }
       /**
-      * Remove a location. Refuses to remove the default of a type unless a
-      * sibling default exists (defensive — `upsertLocation` already ensures
-      * at most one default per type, but the logic guards against future
-      * bypass paths e.g. SQLite migration that imports two defaults).
-      *
-      * Persistence (Task 6) mirrors the delete asynchronously, with errors
-      * routed to the logger — see `upsertLocation` for the rationale.
+      * Remove a location. Refuses the last location of a type and the last
+      * enabled location of a type. `isSystem` is informational — a frozen
+      * recordings `:default` is deletable once a sibling is live. Deleting
+      * the flagged default promotes an enabled sibling. Occupancy still
+      * refuses unless `force` is set; force never overrides uniqueness /
+      * last-enabled.
       */
       async deleteLocation(id, options) {
         const loc = this.locations.get(id);
         if (!loc) throw new Error(`Storage location "${id}" not found`);
-        if (loc.isSystem) throw new Error(`Storage location "${id}" is system-managed and cannot be deleted. Edit its config (path / providerId) instead.`);
-        if (loc.isDefault) {
-          if (![...this.locations.values()].find((l) => l.type === loc.type && l.id !== id && l.isDefault)) throw new Error(`Cannot delete default location "${id}" for type "${loc.type}" \u2014 promote another location to default first`);
-        }
+        const ofType = [...this.locations.values()].filter((l) => l.type === loc.type);
+        if (ofType.length <= 1) throw new Error(`Cannot delete "${id}" \u2014 it is the only location for type "${loc.type}"`);
+        const enabledOfType = ofType.filter((l) => l.enabled !== false);
+        if (loc.enabled !== false && enabledOfType.length <= 1) throw new Error(`Cannot delete "${id}" \u2014 it is the only enabled location for type "${loc.type}"`);
+        const successor = loc.isDefault === true ? ofType.find((l) => l.id !== id && l.enabled !== false) : void 0;
+        if (loc.isDefault === true && successor === void 0) throw new Error(`Cannot delete "${id}" \u2014 it is the only enabled location for type "${loc.type}"`);
         const occupancy = await this.probeOccupancy(loc);
         if (occupancy !== "empty") {
           if (options?.force !== true) throw new Error(occupancy === "occupied" ? `Storage location "${id}" still holds data \u2014 drain it first (storage migration / relocate), or pass force to delete the record anyway and strand what is on it` : `Storage location "${id}" could not be checked for remaining data (unreachable provider, another node, or an unmounted root) \u2014 pass force to delete the record anyway`);
@@ -84615,6 +85052,21 @@ var require_storage_orchestrator_addon = __commonJS({
             occupancy
           } });
         }
+        if (successor !== void 0 && successor.isDefault !== true) {
+          const now = Date.now();
+          const promoted = {
+            ...successor,
+            isDefault: true,
+            updatedAt: now
+          };
+          this.locations.set(successor.id, promoted);
+          if (this.locationStore) this.locationStore.upsert(promoted).catch((err) => {
+            this.logger.error("storage-orchestrator: default promotion persist failed", { meta: {
+              id: successor.id,
+              error: err instanceof Error ? err.message : String(err)
+            } });
+          });
+        }
         this.locations.delete(id);
         if (this.locationStore) this.locationStore.delete(id).catch((err) => {
           this.logger.error("storage-orchestrator: delete persistence failed", { meta: {
@@ -84641,15 +85093,14 @@ var require_storage_orchestrator_addon = __commonJS({
         }
       }
       /**
-      * Remove system-seeded locations whose type is no longer declared by any
-      * addon (stale defaults from a removed location type). Operator-added
-      * (non-system) locations of an undeclared type are KEPT but warned — the
-      * operator owns them. Requires the registry to be set first.
+      * Remove seed-shaped locations (`<type>:default`) whose type is no longer
+      * declared by any addon (stale defaults from a removed location type).
+      * Operator-added locations of an undeclared type are KEPT but warned.
       *
       * FAIL-SAFE: if the registry is EMPTY (no addon declared any location), we
       * refuse to prune anything. An empty registry almost always means
       * declarations failed to load (boot ordering, a stale install) — pruning
-      * "everything undeclared" in that state would wipe every system location
+      * "everything undeclared" in that state would wipe every seeded location
       * (data/logs/recordings/…). Better to keep stale rows than destroy live ones.
       */
       pruneUndeclaredSystemLocations() {
@@ -84660,7 +85111,7 @@ var require_storage_orchestrator_addon = __commonJS({
         }
         for (const [id, loc] of Array.from(this.locations)) {
           if (this.registry.cardinalityOf(loc.type) !== null) continue;
-          if (loc.isSystem) {
+          if (loc.id === `${loc.type}:default`) {
             this.locations.delete(id);
             if (this.locationStore) this.locationStore.delete(id).catch((err) => {
               this.logger.error("storage-orchestrator: prune persistence failed", { meta: {
@@ -84668,7 +85119,7 @@ var require_storage_orchestrator_addon = __commonJS({
                 error: err instanceof Error ? err.message : String(err)
               } });
             });
-            this.logger.info("storage-orchestrator: pruned stale system location", { meta: {
+            this.logger.info("storage-orchestrator: pruned stale seeded location", { meta: {
               id,
               type: loc.type
             } });
@@ -84828,7 +85279,7 @@ var require_storage_orchestrator_addon = __commonJS({
             providerId: input.providerId,
             config: { basePath: base },
             isDefault: true,
-            isSystem: true
+            isSystem: false
           });
           added++;
         }
@@ -84849,9 +85300,20 @@ var require_storage_orchestrator_addon = __commonJS({
         if (existing) return {};
         return { enabled: input.isDefault || !typeAlreadyHasLocation };
       }
-      if (input.isDefault && requested === false) return { enabled: true };
       return { enabled: requested };
     }
+    var OPTIONAL_WRITE_TYPES = /* @__PURE__ */ new Set(["backups"]);
+    function refuseLastWriteTargetDisabled(existing, next, locations) {
+      if (OPTIONAL_WRITE_TYPES.has(next.type)) return;
+      if (next.enabled !== false) return;
+      if (existing === void 0) return;
+      if (existing.enabled === false) return;
+      for (const loc of locations) {
+        if (loc.id === next.id || loc.type !== next.type) continue;
+        if (loc.enabled !== false) return;
+      }
+      throw new Error(`Cannot disable "${next.id}": it is the last enabled location of type "${next.type}". Enable another location of this type first.`);
+    }
     var DEFAULT_MAX_ROUNDS = 8;
     var DEFAULT_HYSTERESIS_PERCENT = 1;
     var StoragePressureManager = class {
@@ -84999,6 +85461,7 @@ var require_storage_orchestrator_addon = __commonJS({
       pressureTimer = null;
       pressureSweepInFlight = false;
       migration = null;
+      cleanup = null;
       /**
       * Cached `providerId → nodeLocal` snapshot (SP1). Backs the orchestrator's
       * synchronous `NodeLocalResolver` — `getProviderInfo()` is async, so we
@@ -85056,7 +85519,7 @@ var require_storage_orchestrator_addon = __commonJS({
             const rows = type !== void 0 ? service.listLocations({ type }) : service.listLocations();
             return Promise.all(rows.map(async (loc) => ({
               ...this.redacted(loc),
-              capacity: await this.localCapacityOf(loc)
+              capacity: loc.enabled === false ? null : await this.localCapacityOf(loc)
             })));
           },
           getDefaultLocation: async ({ type }) => {
@@ -85224,6 +85687,7 @@ var require_storage_orchestrator_addon = __commonJS({
         const migration = new StorageMigrationCoordinator({
           locations: service,
           state: this.state("storage-migration", require_dist10.StorageMigrationJobSchema.nullable(), null),
+          history: this.state("storage-migration-history", zod.z.array(require_dist10.StorageMigrationJobSchema), []),
           participants: {
             pipeline: {
               pause: async (leaseId) => {
@@ -85274,6 +85738,36 @@ var require_storage_orchestrator_addon = __commonJS({
           deviceKeyOf: (locationId) => this.locationDeviceKey(locationId)
         });
         this.migration = migration;
+        const cleanup = new StorageCleanupCoordinator({
+          locations: service,
+          state: this.state("storage-cleanup", require_dist10.StorageCleanupJobSchema.nullable(), null),
+          participants: {
+            startOrphan: async (restart) => {
+              return parseStarted(await this.ctx.api.addons.custom.mutate({
+                addonId: "pipeline-analytics",
+                action: "retention.orphanAudit",
+                input: {
+                  mode: "reclaim",
+                  restart,
+                  maxRowsPerScope: 2e4
+                }
+              }));
+            },
+            orphanStatus: async () => {
+              return parseOrphanStatus(await this.ctx.api.addons.custom.mutate({
+                addonId: "pipeline-analytics",
+                action: "retention.orphanAuditStatus",
+                input: {}
+              }));
+            },
+            startDebugMedia: () => this.ctx.api.pipelineAnalytics.reclaimDebugMedia.mutate({ mode: "reclaim" }),
+            debugMediaStatus: () => this.ctx.api.pipelineAnalytics.getMediaReclaimStatus.query({}),
+            walkLedger: (input) => this.ctx.api.recording.reconcileLedgerAgainstDisk.mutate(input)
+          },
+          now: () => Date.now(),
+          newId: () => (0, node_crypto.randomUUID)()
+        });
+        this.cleanup = cleanup;
         const migrationProvider = {
           plan: (input) => migration.plan(input),
           start: async (input) => ({ jobId: await migration.start(input) }),
@@ -85281,7 +85775,11 @@ var require_storage_orchestrator_addon = __commonJS({
           cancel: async ({ jobId }) => ({ cancelled: await migration.cancel(jobId) }),
           movers: () => migration.movers(),
           residue: () => migration.residue(),
-          drain: async (input) => ({ jobId: await migration.drain(input) })
+          drain: async (input) => ({ jobId: await migration.drain(input) }),
+          cleanupStart: async (input) => ({ jobId: await cleanup.start(input) }),
+          cleanupStatus: ({ jobId }) => cleanup.status(jobId),
+          cleanupCancel: async ({ jobId }) => ({ cancelled: await cleanup.cancel(jobId) }),
+          history: () => migration.history()
         };
         await this.seedFromDeclarations();
         const eventBus = this.ctx.eventBus;
@@ -85526,11 +86024,14 @@ var require_storage_orchestrator_addon = __commonJS({
         }
       }
       /**
-      * Does this location still hold anything? A SHALLOW `readdir` of its
-      * `basePath` — one syscall, never a walk. `/recordings` holds one entry per
-      * camera, so this is cheap on a volume with millions of segments, and a
-      * `find`-style walk of a saturated recordings disk is precisely what must
-      * not happen here.
+      * Does this location still hold anything of ITS class?
+      *
+      * Shared roots (`/recordings` hosting high + low + events) are scored by
+      * class subtree (`<camera>/high|mid`, `/low`, `/events`), not by a raw
+      * `readdir` of the root — camera dirs and `.camstack-location` would
+      * otherwise make every class look occupied. The walk stays shallow: one
+      * dirent per camera, then first-entry of the named subtree. A `find` of
+      * segments is precisely what must not happen here.
       *
       * **What it cannot see, stated rather than papered over:**
       *
@@ -85539,9 +86040,10 @@ var require_storage_orchestrator_addon = __commonJS({
       *    `unknown`, never `empty`.
       *  - A location with no `basePath` — same answer.
       *  - The difference between "holds live footage" and "holds one stray
-      *    lock-file". It measures BYTES ON DISK, not durable rows, so it refuses
-      *    a location holding orphan files that no index names. That direction is
-      *    the safe one, and `force` is the escape hatch for it.
+      *    lock-file". It measures ON-DISK entries of this class, not durable
+      *    rows, so it refuses a location holding orphan files that no index
+      *    names. That direction is the safe one, and `force` is the escape
+      *    hatch for it.
       *
       * A missing root (`ENOENT`) is `empty`, not `unknown`: an unmounted disk and
       * a deleted directory are indistinguishable here, and if the record's own
@@ -85559,16 +86061,16 @@ var require_storage_orchestrator_addon = __commonJS({
         if ((location.nodeId === void 0 || location.nodeId === "" ? HUB_NODE_ID : location.nodeId) !== (this.service?.getLocalNodeId() ?? HUB_NODE_ID)) return "unknown";
         const basePath = this.locationBasePath(location.id);
         if (basePath === null) return "unknown";
-        try {
-          return (await node_fs_promises.readdir(basePath)).length > 0 ? "occupied" : "empty";
-        } catch (err) {
-          if (err instanceof Error && "code" in err && err.code === "ENOENT") return "empty";
-          this.ctx.logger.warn("storage-orchestrator: could not read a location root to check it", { meta: {
-            id: location.id,
-            error: err instanceof Error ? err.message : String(err)
-          } });
-          return "unknown";
-        }
+        const occupancy = await probeLocalDirectoryOccupancy({
+          type: location.type,
+          basePath
+        });
+        if (occupancy === "unknown") this.ctx.logger.warn("storage-orchestrator: could not read a location root to check it", { meta: {
+          id: location.id,
+          basePath,
+          type: location.type
+        } });
+        return occupancy;
       }
       /** Free capacity (%) on a location's volume via `statfs`; 100 (guard inert) when unstattable. */
       async locationFreePercent(locationId) {
@@ -85644,6 +86146,38 @@ var require_storage_orchestrator_addon = __commonJS({
         }
       }
     };
+    function parseStarted(raw) {
+      if (raw !== null && typeof raw === "object") {
+        const o = raw;
+        if (typeof o["started"] === "boolean" && typeof o["alreadyRunning"] === "boolean") return {
+          started: o["started"],
+          alreadyRunning: o["alreadyRunning"]
+        };
+      }
+      return {
+        started: false,
+        alreadyRunning: false
+      };
+    }
+    function parseOrphanStatus(raw) {
+      if (raw !== null && typeof raw === "object") {
+        const o = raw;
+        return {
+          running: o["running"] === true,
+          complete: typeof o["complete"] === "boolean" ? o["complete"] : null,
+          totalReclaimed: typeof o["totalReclaimed"] === "number" ? o["totalReclaimed"] : 0,
+          totalBytesReclaimed: typeof o["totalBytesReclaimed"] === "number" ? o["totalBytesReclaimed"] : 0,
+          error: typeof o["error"] === "string" ? o["error"] : null
+        };
+      }
+      return {
+        running: false,
+        complete: true,
+        totalReclaimed: 0,
+        totalBytesReclaimed: 0,
+        error: "orphan audit status unreadable"
+      };
+    }
     exports.SqliteLocationStore = SqliteLocationStore;
     exports.StorageMigrationCoordinator = StorageMigrationCoordinator;
     exports.StorageOrchestratorAddon = StorageOrchestratorAddon;
@@ -85680,7 +86214,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_CFTKQGym();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -103741,7 +104275,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_CFTKQGym();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -105684,9 +106218,9 @@ var require_event_category_BaEgqJNv = __commonJS({
   }
 });
 
-// ../types/dist/sleep-DIg3xuEw.js
-var require_sleep_DIg3xuEw = __commonJS({
-  "../types/dist/sleep-DIg3xuEw.js"(exports) {
+// ../types/dist/sleep-CqVyhcl-.js
+var require_sleep_CqVyhcl = __commonJS({
+  "../types/dist/sleep-CqVyhcl-.js"(exports) {
     "use strict";
     var require_event_category = require_event_category_BaEgqJNv();
     var zod = require_zod();
@@ -108393,6 +108927,8 @@ var require_sleep_DIg3xuEw = __commonJS({
           listRelocateMediaJobs: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listRelocateMediaJobs", "query", input),
           cancelRelocateMedia: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "cancelRelocateMedia", "mutation", input),
           listOpsLog: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listOpsLog", "query", input),
+          reclaimDebugMedia: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "reclaimDebugMedia", "mutation", input),
+          getMediaReclaimStatus: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getMediaReclaimStatus", "query", input),
           getTrainingExportSummary: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getTrainingExportSummary", "query", input),
           getTrainingExportUrl: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getTrainingExportUrl", "query", input),
           listRetrainStaging: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listRetrainStaging", "query", input),
@@ -109357,7 +109893,7 @@ var require_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_DIg3xuEw();
+    var require_sleep = require_sleep_CqVyhcl();
     var require_err_msg = require_err_msg_COpsHMw2();
     var CAP_INPUT_DEFAULTS = Object.freeze({
       "addons": { "getLogs": { "limit": 100 } },
@@ -109473,6 +110009,7 @@ var require_addon = __commonJS({
         "getSensorEvents": { "limit": 1e3 },
         "listGroups": { "limit": 40 },
         "listRecentTracks": { "limit": 200 },
+        "reclaimDebugMedia": { "mode": "report" },
         "searchObjectEvents": {
           "limit": 50,
           "minScore": 0.2
@@ -116240,12 +116777,12 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/manifest-system-deps-DBje540e.js
-var require_manifest_system_deps_DBje540e = __commonJS({
-  "../system/dist/manifest-system-deps-DBje540e.js"(exports) {
+// ../system/dist/manifest-system-deps-BIxY1Y5e.js
+var require_manifest_system_deps_BIxY1Y5e = __commonJS({
+  "../system/dist/manifest-system-deps-BIxY1Y5e.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    require_dist_B29Skpzo();
+    require_dist_CFTKQGym();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var _camstack_types_node = require_node();
@@ -123530,6 +124067,93 @@ var require_manifest_system_deps_DBje540e = __commonJS({
       }
       await deps.installPythonRequirements(reqAbs);
     }
+    var DISTRO_PACKAGE_ALLOWLIST = {
+      apt: ["smbclient"],
+      apk: ["samba-client"],
+      dnf: ["samba-client"]
+    };
+    function packageIsAllowlisted(manager, packageName) {
+      if (manager === "brew") return true;
+      if (packageName.length === 0) return false;
+      if (!/^[a-zA-Z0-9][a-zA-Z0-9+._-]*$/.test(packageName)) return false;
+      return DISTRO_PACKAGE_ALLOWLIST[manager].includes(packageName);
+    }
+    function decidePackageInstall(input) {
+      if (input.manager === "brew") return { kind: "local" };
+      if (!packageIsAllowlisted(input.manager, input.packageName)) return {
+        kind: "refuse",
+        reason: "not-allowlisted"
+      };
+      if (!input.helperAvailable) return {
+        kind: "refuse",
+        reason: "helper-unavailable"
+      };
+      return { kind: "helper" };
+    }
+    function pkgdSocketPath() {
+      return process.env["CAMSTACK_PKGD_SOCKET"] ?? "/run/camstack/pkgd.sock";
+    }
+    function privilegedHelperAvailable(socketPath = pkgdSocketPath()) {
+      return (0, node_fs.existsSync)(socketPath);
+    }
+    function requestPrivilegedInstall(req, socketPath = pkgdSocketPath(), timeoutMs = 360 * 1e3) {
+      return new Promise((resolve) => {
+        const socket = (0, node_net.createConnection)({ path: socketPath });
+        const chunks = [];
+        const finish = (result) => {
+          socket.destroy();
+          resolve(result);
+        };
+        const timer = setTimeout(() => {
+          finish({
+            ok: false,
+            error: `privileged helper timed out after ${timeoutMs}ms`
+          });
+        }, timeoutMs);
+        socket.on("connect", () => {
+          socket.write(`${JSON.stringify({
+            v: 1,
+            ...req
+          })}
+`);
+        });
+        socket.on("data", (data) => {
+          chunks.push(data);
+          const text = Buffer.concat(chunks).toString("utf8");
+          const nl = text.indexOf("\n");
+          if (nl === -1) return;
+          clearTimeout(timer);
+          try {
+            const parsed = JSON.parse(text.slice(0, nl));
+            finish({
+              ok: parsed.ok === true,
+              ...parsed.error !== void 0 ? { error: parsed.error } : {}
+            });
+          } catch (err) {
+            finish({
+              ok: false,
+              error: err instanceof Error ? err.message : String(err)
+            });
+          }
+        });
+        socket.on("error", (err) => {
+          clearTimeout(timer);
+          finish({
+            ok: false,
+            error: err.message
+          });
+        });
+        socket.on("end", () => {
+          if (chunks.length === 0) {
+            clearTimeout(timer);
+            finish({
+              ok: false,
+              error: "privileged helper closed without a reply"
+            });
+          }
+        });
+      });
+    }
     var execFileAsync = (0, node_util.promisify)(node_child_process.execFile);
     var INSTALL_TIMEOUT_MS = 300 * 1e3;
     var PROBE_TIMEOUT_MS = 1e4;
@@ -123540,12 +124164,16 @@ var require_manifest_system_deps_DBje540e = __commonJS({
       const detectManager = options.detectManager ?? defaultDetectManager;
       const run = options.run ?? defaultRun;
       const platform = options.platform ?? process.platform;
+      const helperAvailable = options.helperAvailable ?? (async () => privilegedHelperAvailable());
+      const requestInstall = options.requestInstall ?? ((req) => requestPrivilegedInstall(req));
       for (const dep of deps) try {
         await satisfyOne(dep, declaration.id, {
           hasBinary,
           detectManager,
           run,
-          platform
+          platform,
+          helperAvailable,
+          requestInstall
         }, logger);
       } catch (err) {
         logger.warn("system dependency step failed", { meta: {
@@ -123583,15 +124211,43 @@ var require_manifest_system_deps_DBje540e = __commonJS({
         } });
         return;
       }
-      const plan = planFor(manager, packageName);
+      const decision = decidePackageInstall({
+        manager,
+        packageName,
+        helperAvailable: await rt.helperAvailable()
+      });
+      if (decision.kind === "refuse") {
+        const message = decision.reason === "helper-unavailable" ? "system dependency missing and the privileged helper is not running \u2014 apt cannot run as uid 1001" : "system dependency missing and the package is not on the helper allowlist";
+        logger.warn(message, { meta: {
+          addonId,
+          binary: dep.binary,
+          manager,
+          package: packageName,
+          reason: decision.reason,
+          ...dep.reason !== void 0 ? { reason: dep.reason } : {}
+        } });
+        return;
+      }
       logger.info("installing system dependency", { meta: {
         addonId,
         binary: dep.binary,
         manager,
-        package: packageName
+        package: packageName,
+        via: decision.kind
       } });
       try {
-        for (const [command, args] of plan.steps) await rt.run(command, args);
+        if (decision.kind === "helper") {
+          const result = await rt.requestInstall({
+            addonId,
+            binary: dep.binary,
+            manager,
+            packageName
+          });
+          if (!result.ok) throw new Error(result.error ?? "privileged helper refused");
+        } else {
+          const plan = planFor(manager, packageName);
+          for (const [command, args] of plan.steps) await rt.run(command, args);
+        }
       } catch (err) {
         logger.warn("system dependency install failed \u2014 the addon loads, its capability must refuse", { meta: {
           addonId,
@@ -128274,7 +128930,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B29Skpzo();
+    var require_dist10 = require_dist_CFTKQGym();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -128300,7 +128956,7 @@ var require_dist3 = __commonJS({
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_file_data_plane = require_file_data_plane_DO8KbxCe();
     var require_tls$1 = require_tls_BxQlomxd();
-    var require_manifest_system_deps = require_manifest_system_deps_DBje540e();
+    var require_manifest_system_deps = require_manifest_system_deps_BIxY1Y5e();
     var require_resource_monitor = require_resource_monitor_CdnzxBLP();
     var require_custom_action_registry = require_custom_action_registry_jY0NOZK8();
     var zod = require_zod();
@@ -209142,7 +209798,7 @@ var require_dist4 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_DIg3xuEw();
+    var require_sleep = require_sleep_CqVyhcl();
     var require_canonical_hash = require_canonical_hash_DNV8S5ET();
     var require_enums2 = require_enums();
     var require_err_msg = require_err_msg_COpsHMw2();
@@ -210541,6 +211197,13 @@ var require_dist4 = __commonJS({
     ]);
     var RelocateMediaInputSchema = zod.z.object({
       toLocationId: zod.z.string(),
+      /**
+      * Restrict the pass to rows currently on this location. Omitted / `'*'` =
+      * every row that is not already on `toLocationId` (the historical
+      * behaviour). A named source is what a from→to migration needs: without it
+      * "move events off disk 2" also emptied disk 1.
+      */
+      fromLocationId: zod.z.string().optional(),
       throttleMbps: zod.z.number().min(1).max(1e3).optional(),
       /** Omitted = `move`, the pre-existing behaviour. */
       mode: MediaRelocateModeSchema.optional()
@@ -210572,9 +211235,18 @@ var require_dist4 = __commonJS({
       backups: zod.z.string().min(1).optional(),
       galleryMedia: zod.z.string().min(1).optional()
     }).refine((value) => Object.keys(value).length > 0, { message: "select at least one storage class" });
+    var StorageMigrationSourcesSchema = zod.z.object({
+      recordings: zod.z.string().min(1).optional(),
+      recordingsLow: zod.z.string().min(1).optional(),
+      eventMedia: zod.z.string().min(1).optional(),
+      backups: zod.z.string().min(1).optional(),
+      galleryMedia: zod.z.string().min(1).optional()
+    }).optional();
     var StorageMigrationModeSchema = zod.z.enum(["blocking", "nonBlocking"]);
     var StorageMigrationInputSchema = zod.z.object({
       destinations: StorageMigrationDestinationsSchema,
+      /** Omitted = each class's current default. */
+      sources: StorageMigrationSourcesSchema,
       throttleMbps: zod.z.number().min(1).max(1e3).optional(),
       /** Omitted = `blocking`, which stays the default. */
       mode: StorageMigrationModeSchema.optional()
@@ -210620,6 +211292,13 @@ var require_dist4 = __commonJS({
       storageClass: StorageMigrationClassSchema,
       fromLocationId: zod.z.string(),
       toLocationId: zod.z.string(),
+      /**
+      * True when `from` was NOT the class default at plan time. The move still
+      * copies bytes, but the default is left alone and the source is disabled
+      * once the copy verifies. Absent on jobs planned before this field existed
+      * — those jobs always repointed, which is `false`.
+      */
+      freezeSource: zod.z.boolean().optional(),
       moverJobId: zod.z.string().nullable(),
       state: RelocateJobStateSchema.nullable(),
       error: zod.z.string().nullable(),
@@ -210633,6 +211312,7 @@ var require_dist4 = __commonJS({
       *  can tell a seconds-long cutover from a thirty-hour one. */
       mode: StorageMigrationModeSchema,
       destinations: StorageMigrationDestinationsSchema,
+      sources: StorageMigrationSourcesSchema,
       throttleMbps: zod.z.number(),
       moves: zod.z.array(StorageMigrationMoveSchema),
       pauseLeaseId: zod.z.string().nullable(),
@@ -210659,6 +211339,7 @@ var require_dist4 = __commonJS({
     });
     var StorageMigrationPlanSchema = zod.z.object({
       destinations: StorageMigrationDestinationsSchema,
+      sources: StorageMigrationSourcesSchema,
       /** The mode this plan was built for. A plan is only valid for its mode: the
       *  `eventMedia` seal gate and the single-cardinality refusal both depend on
       *  it. */
@@ -210666,7 +211347,8 @@ var require_dist4 = __commonJS({
       moves: zod.z.array(zod.z.object({
         storageClass: StorageMigrationClassSchema,
         fromLocationId: zod.z.string(),
-        toLocationId: zod.z.string()
+        toLocationId: zod.z.string(),
+        freezeSource: zod.z.boolean().optional()
       })),
       findings: zod.z.array(StorageMigrationFindingSchema)
     });
@@ -210778,9 +211460,42 @@ var require_dist4 = __commonJS({
     var RelocatableMediaCountSchema = zod.z.object({ rows: zod.z.number().int().nonnegative() }).nullable();
     var RelocatableMediaCountInputSchema = zod.z.object({
       toLocationId: zod.z.string().min(1),
+      /** Restrict the count to one source; omitted / `'*'` = every non-target row. */
+      fromLocationId: zod.z.string().optional(),
       /** Omitted = `move`. */
       mode: MediaRelocateModeSchema.optional()
     });
+    var StorageCleanupPhaseSchema = zod.z.enum([
+      "orphans",
+      "debug-media",
+      "ghost-ledger",
+      "done",
+      "failed",
+      "cancelled"
+    ]);
+    var StorageCleanupInputSchema = zod.z.object({
+      /** Also walk motion stills / track filmstrips. Off by default. */
+      includeDebugMedia: zod.z.boolean().optional()
+    });
+    var StorageCleanupJobSchema = zod.z.object({
+      jobId: zod.z.string(),
+      phase: StorageCleanupPhaseSchema,
+      includeDebugMedia: zod.z.boolean(),
+      orphansReclaimed: zod.z.number().int().nonnegative(),
+      orphanBytesReclaimed: zod.z.number().int().nonnegative(),
+      debugMediaReclaimed: zod.z.number().int().nonnegative(),
+      debugMediaBytesReclaimed: zod.z.number().int().nonnegative(),
+      ghostsForgotten: zod.z.number().int().nonnegative(),
+      ghostBytesForgotten: zod.z.number().int().nonnegative(),
+      /** Short operator-facing line: current collection, pass, or location. */
+      detail: zod.z.string().nullable(),
+      cancelRequested: zod.z.boolean(),
+      startedAt: zod.z.number(),
+      updatedAt: zod.z.number(),
+      finishedAt: zod.z.number().nullable(),
+      error: zod.z.string().nullable()
+    });
+    var StorageCleanupStatusInputSchema = zod.z.object({ jobId: zod.z.string().optional() });
     var SUB_DETECTION_TYPES = ["face", "plate"];
     var RECOGNITION_TYPES = [
       "face",
@@ -223483,6 +224198,39 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       /** Present when the pass ended by throwing. */
       error: zod.z.string().nullable()
     });
+    var MediaReclaimStartResultSchema = zod.z.object({
+      started: zod.z.boolean(),
+      /** True when a pass was already running; the new request is ignored. */
+      alreadyRunning: zod.z.boolean()
+    });
+    var MediaReclaimInputSchema = zod.z.object({
+      mode: zod.z.enum(["report", "reclaim"]).default("report"),
+      scopes: zod.z.array(zod.z.enum(["motion-still", "track-filmstrip"])).min(1).optional(),
+      deviceIds: zod.z.array(zod.z.number().int()).min(1).optional(),
+      restart: zod.z.boolean().optional(),
+      pageSize: zod.z.number().int().min(50).max(5e3).optional(),
+      maxRowsPerDevice: zod.z.number().int().min(1).max(5e5).optional(),
+      maxReclaimPerDevice: zod.z.number().int().min(1).max(5e5).optional(),
+      maxBytesPerRun: zod.z.number().int().min(1).optional(),
+      budgetMinutes: zod.z.number().int().min(1).max(720).optional(),
+      throttleBytesPerSec: zod.z.number().int().min(64 * 1024).optional(),
+      graceMinutes: zod.z.number().int().min(1).max(10080).optional()
+    });
+    var MediaReclaimStatusSchema = zod.z.object({
+      running: zod.z.boolean(),
+      mode: zod.z.enum(["report", "reclaim"]).nullable(),
+      totalExamined: zod.z.number(),
+      totalEligible: zod.z.number(),
+      totalReclaimed: zod.z.number(),
+      totalBytesReclaimed: zod.z.number(),
+      totalRefused: zod.z.number(),
+      /** Device+scope windows finished in this pass. */
+      devicesDone: zod.z.number(),
+      complete: zod.z.boolean().nullable(),
+      startedAtMs: zod.z.number().nullable(),
+      finishedAtMs: zod.z.number().nullable(),
+      error: zod.z.string().nullable()
+    });
     var ReplayFrameInputSchema = zod.z.object({
       timestamp: zod.z.number(),
       frame: PipelineRunResultBridge
@@ -223906,6 +224654,20 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           auth: "admin"
         }),
         /**
+        * Reclaim the standing debug-media backlog (motion-visit stills + track
+        * filmstrips). DETACHED: returns `{ started }` immediately. The pass is
+        * tens of minutes; awaiting it is a timeout, not a verdict. Dry-run unless
+        * `mode: 'reclaim'`. Poll `getMediaReclaimStatus`.
+        */
+        reclaimDebugMedia: require_sleep.method(MediaReclaimInputSchema, MediaReclaimStartResultSchema, {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        getMediaReclaimStatus: require_sleep.method(zod.z.object({}), MediaReclaimStatusSchema, {
+          kind: "query",
+          auth: "admin"
+        }),
+        /**
         * The CHEAP QUESTION, asked before any media moves: how big is the dataset
         * the marked (`markForTrain`) tracks would produce?
         *
@@ -226657,7 +227419,23 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         drain: require_sleep.method(StorageMigrationDrainInputSchema, zod.z.object({ jobId: zod.z.string() }), {
           kind: "mutation",
           auth: "admin"
-        })
+        }),
+        /**
+        * One operator cleanup of leftover analytics (DB + blobs) and ghost
+        * ledger rows on frozen footage locations. Optional debug-media sweep.
+        * Returns immediately; poll {@link cleanupStatus}.
+        */
+        cleanupStart: require_sleep.method(StorageCleanupInputSchema, zod.z.object({ jobId: zod.z.string() }), {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        cleanupStatus: require_sleep.method(StorageCleanupStatusInputSchema, StorageCleanupJobSchema.nullable(), { auth: "admin" }),
+        cleanupCancel: require_sleep.method(zod.z.object({ jobId: zod.z.string() }), zod.z.object({ cancelled: zod.z.boolean() }), {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        /** Recent finished migration jobs, newest first. The live job is `status`. */
+        history: require_sleep.method(zod.z.object({}), zod.z.array(StorageMigrationJobSchema).readonly(), { auth: "admin" })
       }
     };
     var ProviderInfoSchema = zod.z.discriminatedUnion("shouldSaveDiskSpace", [zod.z.object({
@@ -233458,6 +234236,26 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       /** Ignore piles smaller than this (default 1 GB). */
       minMoveGb: zod.z.number().min(0).optional()
     });
+    var RecordingDevicePlacementSchema = zod.z.object({
+      deviceId: zod.z.number().int(),
+      profile: zod.z.string(),
+      locationId: zod.z.string()
+    });
+    var RecordingDevicePinSchema = zod.z.object({
+      deviceId: zod.z.number().int(),
+      /** Recordings-class location this camera is pinned to. */
+      locationId: zod.z.string()
+    });
+    var RecordingPlacementViewSchema = zod.z.object({
+      assignments: zod.z.array(RecordingDevicePlacementSchema),
+      pins: zod.z.array(RecordingDevicePinSchema),
+      defaultLocations: zod.z.record(zod.z.string(), zod.z.string())
+    });
+    var RecordingSetDevicePlacementInputSchema = zod.z.object({
+      deviceId: zod.z.number().int(),
+      /** `null` = Auto. Otherwise a `recordings:*` location id. */
+      locationId: zod.z.string().nullable()
+    });
     var LocateSegmentResultSchema = zod.z.discriminatedUnion("kind", [zod.z.object({
       kind: zod.z.literal("segment"),
       startMs: zod.z.number(),
@@ -233776,6 +234574,22 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         startStorageRebalance: require_sleep.method(RecordingRebalanceInputSchema, RecordingRebalancePlanSchema, {
           kind: "mutation",
           auth: "admin"
+        }),
+        /**
+        * The placement plan in force plus operator pins. Drives the Locations
+        * admin page: Auto vs a named recordings location, per camera.
+        */
+        getPlacement: require_sleep.method(zod.z.object({}), RecordingPlacementViewSchema, {
+          kind: "query",
+          auth: "admin"
+        }),
+        /**
+        * Pin a camera to a recordings location, or clear the pin (Auto). High and
+        * mid follow the pin; low stays with the recordingsLow planner.
+        */
+        setDevicePlacement: require_sleep.method(RecordingSetDevicePlacementInputSchema, zod.z.object({ ok: zod.z.literal(true) }), {
+          kind: "mutation",
+          auth: "admin"
         })
       }
     };
@@ -242825,6 +243639,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.getMediaReclaimStatus": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.getMotionEvents": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -242999,6 +243819,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "pipelineAnalytics.reclaimDebugMedia": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "create"
+      },
       "pipelineAnalytics.reconcileFromDisk": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -243923,6 +244749,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "recording.getPlacement": {
+        capName: "recording",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "recording.getPlaybackManifest": {
         capName: "recording",
         capScope: "system",
@@ -244049,6 +244881,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "recording.setDevicePlacement": {
+        capName: "recording",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "recording.startStorageMigrationMove": {
         capName: "recording",
         capScope: "system",
@@ -244493,12 +245331,36 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "storageMigration.cleanupCancel": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
+      "storageMigration.cleanupStart": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
+      "storageMigration.cleanupStatus": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "storageMigration.drain": {
         capName: "storage-migration",
         capScope: "system",
         addonId: null,
         access: "create"
       },
+      "storageMigration.history": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "storageMigration.movers": {
         capName: "storage-migration",
         capScope: "system",
@@ -246873,6 +247735,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: true
       }],
+      "pipelineAnalytics.reclaimDebugMedia": [{
+        name: "deviceIds",
+        form: "array",
+        optional: true
+      }],
       "pipelineAnalytics.reconcileFromDisk": [{
         name: "deviceId",
         form: "single",
@@ -247238,6 +248105,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: false
       }],
+      "recording.setDevicePlacement": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "recording.startStorageMigrationMove": [{
         name: "deviceId",
         form: "single",
@@ -247707,6 +248579,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "recording.renderGif",
       "recording.rescanStorage",
       "recording.setDeviceConfig",
+      "recording.setDevicePlacement",
       "recording.startStorageMigrationMove",
       "recordingExport.createExport",
       "recordingExport.listExports",
@@ -248590,7 +249463,9 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           reconcileLedgerAgainstDisk: (input) => dispatch("recording", "reconcileLedgerAgainstDisk", "mutation", input),
           cancelRelocateJob: (input) => dispatch("recording", "cancelRelocateJob", "mutation", input),
           planStorageRebalance: (input) => dispatch("recording", "planStorageRebalance", "query", input),
-          startStorageRebalance: (input) => dispatch("recording", "startStorageRebalance", "mutation", input)
+          startStorageRebalance: (input) => dispatch("recording", "startStorageRebalance", "mutation", input),
+          getPlacement: (input) => dispatch("recording", "getPlacement", "query", input),
+          setDevicePlacement: (input) => dispatch("recording", "setDevicePlacement", "mutation", input)
         },
         recordingExport: {
           createExport: (input) => dispatch("recordingExport", "createExport", "mutation", input),
@@ -248654,7 +249529,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           cancel: (input) => dispatch("storageMigration", "cancel", "mutation", input),
           movers: (input) => dispatch("storageMigration", "movers", "query", input),
           residue: (input) => dispatch("storageMigration", "residue", "query", input),
-          drain: (input) => dispatch("storageMigration", "drain", "mutation", input)
+          drain: (input) => dispatch("storageMigration", "drain", "mutation", input),
+          cleanupStart: (input) => dispatch("storageMigration", "cleanupStart", "mutation", input),
+          cleanupStatus: (input) => dispatch("storageMigration", "cleanupStatus", "query", input),
+          cleanupCancel: (input) => dispatch("storageMigration", "cleanupCancel", "mutation", input),
+          history: (input) => dispatch("storageMigration", "history", "query", input)
         },
         streamBroker: {
           fetchEventMedia: (input) => dispatch("streamBroker", "fetchEventMedia", "mutation", input),
@@ -252271,6 +253150,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.StorageBeginDownloadResultSchema = BeginDownloadResultSchema;
     exports.StorageBeginUploadInputSchema = BeginUploadInputSchema;
     exports.StorageBeginUploadResultSchema = BeginUploadResultSchema;
+    exports.StorageCleanupInputSchema = StorageCleanupInputSchema;
+    exports.StorageCleanupJobSchema = StorageCleanupJobSchema;
+    exports.StorageCleanupPhaseSchema = StorageCleanupPhaseSchema;
+    exports.StorageCleanupStatusInputSchema = StorageCleanupStatusInputSchema;
     exports.StorageEndDownloadInputSchema = EndDownloadInputSchema;
     exports.StorageFinalizeUploadInputSchema = FinalizeUploadInputSchema;
     exports.StorageLocationDeclarationSchema = StorageLocationDeclarationSchema;
@@ -252296,6 +253179,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.StorageMigrationPhaseSchema = StorageMigrationPhaseSchema;
     exports.StorageMigrationPlanSchema = StorageMigrationPlanSchema;
     exports.StorageMigrationResidueSchema = StorageMigrationResidueSchema;
+    exports.StorageMigrationSourcesSchema = StorageMigrationSourcesSchema;
     exports.StorageProviderInfoSchema = ProviderInfoSchema;
     exports.StorageReadChunkInputSchema = ReadChunkInputSchema;
     exports.StorageTestLocationResultSchema = TestLocationResultSchema;