camstack 1.2.70 → 1.2.71

package/dist/{launcher-E2VZZ5O3.js → launcher-4QRZCB6O.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-BhE8zNfY.js
-var require_dist_BhE8zNfY = __commonJS({
-  "../system/dist/dist-BhE8zNfY.js"(exports) {
+// ../system/dist/dist-CFTKQGym.js
+var require_dist_CFTKQGym = __commonJS({
+  "../system/dist/dist-CFTKQGym.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -26326,6 +26326,13 @@ var require_dist_BhE8zNfY = __commonJS({
     ]);
     var RelocateMediaInputSchema = zod.z.object({
       toLocationId: zod.z.string(),
+      /**
+      * Restrict the pass to rows currently on this location. Omitted / `'*'` =
+      * every row that is not already on `toLocationId` (the historical
+      * behaviour). A named source is what a from→to migration needs: without it
+      * "move events off disk 2" also emptied disk 1.
+      */
+      fromLocationId: zod.z.string().optional(),
       throttleMbps: zod.z.number().min(1).max(1e3).optional(),
       /** Omitted = `move`, the pre-existing behaviour. */
       mode: MediaRelocateModeSchema.optional()
@@ -26357,9 +26364,18 @@ var require_dist_BhE8zNfY = __commonJS({
       backups: zod.z.string().min(1).optional(),
       galleryMedia: zod.z.string().min(1).optional()
     }).refine((value) => Object.keys(value).length > 0, { message: "select at least one storage class" });
+    var StorageMigrationSourcesSchema = zod.z.object({
+      recordings: zod.z.string().min(1).optional(),
+      recordingsLow: zod.z.string().min(1).optional(),
+      eventMedia: zod.z.string().min(1).optional(),
+      backups: zod.z.string().min(1).optional(),
+      galleryMedia: zod.z.string().min(1).optional()
+    }).optional();
     var StorageMigrationModeSchema = zod.z.enum(["blocking", "nonBlocking"]);
     var StorageMigrationInputSchema = zod.z.object({
       destinations: StorageMigrationDestinationsSchema,
+      /** Omitted = each class's current default. */
+      sources: StorageMigrationSourcesSchema,
       throttleMbps: zod.z.number().min(1).max(1e3).optional(),
       /** Omitted = `blocking`, which stays the default. */
       mode: StorageMigrationModeSchema.optional()
@@ -26405,6 +26421,13 @@ var require_dist_BhE8zNfY = __commonJS({
       storageClass: StorageMigrationClassSchema,
       fromLocationId: zod.z.string(),
       toLocationId: zod.z.string(),
+      /**
+      * True when `from` was NOT the class default at plan time. The move still
+      * copies bytes, but the default is left alone and the source is disabled
+      * once the copy verifies. Absent on jobs planned before this field existed
+      * — those jobs always repointed, which is `false`.
+      */
+      freezeSource: zod.z.boolean().optional(),
       moverJobId: zod.z.string().nullable(),
       state: RelocateJobStateSchema.nullable(),
       error: zod.z.string().nullable(),
@@ -26418,6 +26441,7 @@ var require_dist_BhE8zNfY = __commonJS({
       *  can tell a seconds-long cutover from a thirty-hour one. */
       mode: StorageMigrationModeSchema,
       destinations: StorageMigrationDestinationsSchema,
+      sources: StorageMigrationSourcesSchema,
       throttleMbps: zod.z.number(),
       moves: zod.z.array(StorageMigrationMoveSchema),
       pauseLeaseId: zod.z.string().nullable(),
@@ -26444,6 +26468,7 @@ var require_dist_BhE8zNfY = __commonJS({
     });
     var StorageMigrationPlanSchema = zod.z.object({
       destinations: StorageMigrationDestinationsSchema,
+      sources: StorageMigrationSourcesSchema,
       /** The mode this plan was built for. A plan is only valid for its mode: the
       *  `eventMedia` seal gate and the single-cardinality refusal both depend on
       *  it. */
@@ -26451,7 +26476,8 @@ var require_dist_BhE8zNfY = __commonJS({
       moves: zod.z.array(zod.z.object({
         storageClass: StorageMigrationClassSchema,
         fromLocationId: zod.z.string(),
-        toLocationId: zod.z.string()
+        toLocationId: zod.z.string(),
+        freezeSource: zod.z.boolean().optional()
       })),
       findings: zod.z.array(StorageMigrationFindingSchema)
     });
@@ -26563,9 +26589,42 @@ var require_dist_BhE8zNfY = __commonJS({
     var RelocatableMediaCountSchema = zod.z.object({ rows: zod.z.number().int().nonnegative() }).nullable();
     var RelocatableMediaCountInputSchema = zod.z.object({
       toLocationId: zod.z.string().min(1),
+      /** Restrict the count to one source; omitted / `'*'` = every non-target row. */
+      fromLocationId: zod.z.string().optional(),
       /** Omitted = `move`. */
       mode: MediaRelocateModeSchema.optional()
     });
+    var StorageCleanupPhaseSchema = zod.z.enum([
+      "orphans",
+      "debug-media",
+      "ghost-ledger",
+      "done",
+      "failed",
+      "cancelled"
+    ]);
+    var StorageCleanupInputSchema = zod.z.object({
+      /** Also walk motion stills / track filmstrips. Off by default. */
+      includeDebugMedia: zod.z.boolean().optional()
+    });
+    var StorageCleanupJobSchema = zod.z.object({
+      jobId: zod.z.string(),
+      phase: StorageCleanupPhaseSchema,
+      includeDebugMedia: zod.z.boolean(),
+      orphansReclaimed: zod.z.number().int().nonnegative(),
+      orphanBytesReclaimed: zod.z.number().int().nonnegative(),
+      debugMediaReclaimed: zod.z.number().int().nonnegative(),
+      debugMediaBytesReclaimed: zod.z.number().int().nonnegative(),
+      ghostsForgotten: zod.z.number().int().nonnegative(),
+      ghostBytesForgotten: zod.z.number().int().nonnegative(),
+      /** Short operator-facing line: current collection, pass, or location. */
+      detail: zod.z.string().nullable(),
+      cancelRequested: zod.z.boolean(),
+      startedAt: zod.z.number(),
+      updatedAt: zod.z.number(),
+      finishedAt: zod.z.number().nullable(),
+      error: zod.z.string().nullable()
+    });
+    var StorageCleanupStatusInputSchema = zod.z.object({ jobId: zod.z.string().optional() });
     var StorageLocationTypeSchema = zod.z.string().regex(/^[a-z][a-zA-Z0-9-]*$/);
     var StorageLocationSchema = zod.z.object({
       id: zod.z.string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/),
@@ -40343,7 +40402,23 @@ var require_dist_BhE8zNfY = __commonJS({
         drain: method(StorageMigrationDrainInputSchema, zod.z.object({ jobId: zod.z.string() }), {
           kind: "mutation",
           auth: "admin"
-        })
+        }),
+        /**
+        * One operator cleanup of leftover analytics (DB + blobs) and ghost
+        * ledger rows on frozen footage locations. Optional debug-media sweep.
+        * Returns immediately; poll {@link cleanupStatus}.
+        */
+        cleanupStart: method(StorageCleanupInputSchema, zod.z.object({ jobId: zod.z.string() }), {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        cleanupStatus: method(StorageCleanupStatusInputSchema, StorageCleanupJobSchema.nullable(), { auth: "admin" }),
+        cleanupCancel: method(zod.z.object({ jobId: zod.z.string() }), zod.z.object({ cancelled: zod.z.boolean() }), {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        /** Recent finished migration jobs, newest first. The live job is `status`. */
+        history: method(zod.z.object({}), zod.z.array(StorageMigrationJobSchema).readonly(), { auth: "admin" })
       }
     };
     var ProviderInfoSchema = zod.z.discriminatedUnion("shouldSaveDiskSpace", [zod.z.object({
@@ -47135,6 +47210,26 @@ var require_dist_BhE8zNfY = __commonJS({
       /** Ignore piles smaller than this (default 1 GB). */
       minMoveGb: zod.z.number().min(0).optional()
     });
+    var RecordingDevicePlacementSchema = zod.z.object({
+      deviceId: zod.z.number().int(),
+      profile: zod.z.string(),
+      locationId: zod.z.string()
+    });
+    var RecordingDevicePinSchema = zod.z.object({
+      deviceId: zod.z.number().int(),
+      /** Recordings-class location this camera is pinned to. */
+      locationId: zod.z.string()
+    });
+    var RecordingPlacementViewSchema = zod.z.object({
+      assignments: zod.z.array(RecordingDevicePlacementSchema),
+      pins: zod.z.array(RecordingDevicePinSchema),
+      defaultLocations: zod.z.record(zod.z.string(), zod.z.string())
+    });
+    var RecordingSetDevicePlacementInputSchema = zod.z.object({
+      deviceId: zod.z.number().int(),
+      /** `null` = Auto. Otherwise a `recordings:*` location id. */
+      locationId: zod.z.string().nullable()
+    });
     var LocateSegmentResultSchema = zod.z.discriminatedUnion("kind", [zod.z.object({
       kind: zod.z.literal("segment"),
       startMs: zod.z.number(),
@@ -47453,6 +47548,22 @@ var require_dist_BhE8zNfY = __commonJS({
         startStorageRebalance: method(RecordingRebalanceInputSchema, RecordingRebalancePlanSchema, {
           kind: "mutation",
           auth: "admin"
+        }),
+        /**
+        * The placement plan in force plus operator pins. Drives the Locations
+        * admin page: Auto vs a named recordings location, per camera.
+        */
+        getPlacement: method(zod.z.object({}), RecordingPlacementViewSchema, {
+          kind: "query",
+          auth: "admin"
+        }),
+        /**
+        * Pin a camera to a recordings location, or clear the pin (Auto). High and
+        * mid follow the pin; low stays with the recordingsLow planner.
+        */
+        setDevicePlacement: method(RecordingSetDevicePlacementInputSchema, zod.z.object({ ok: zod.z.literal(true) }), {
+          kind: "mutation",
+          auth: "admin"
         })
       }
     };
@@ -54676,6 +54787,12 @@ var require_dist_BhE8zNfY = __commonJS({
         addonId: null,
         access: "view"
       },
+      "recording.getPlacement": {
+        capName: "recording",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "recording.getPlaybackManifest": {
         capName: "recording",
         capScope: "system",
@@ -54802,6 +54919,12 @@ var require_dist_BhE8zNfY = __commonJS({
         addonId: null,
         access: "create"
       },
+      "recording.setDevicePlacement": {
+        capName: "recording",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "recording.startStorageMigrationMove": {
         capName: "recording",
         capScope: "system",
@@ -55246,12 +55369,36 @@ var require_dist_BhE8zNfY = __commonJS({
         addonId: null,
         access: "create"
       },
+      "storageMigration.cleanupCancel": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
+      "storageMigration.cleanupStart": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
+      "storageMigration.cleanupStatus": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "storageMigration.drain": {
         capName: "storage-migration",
         capScope: "system",
         addonId: null,
         access: "create"
       },
+      "storageMigration.history": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "storageMigration.movers": {
         capName: "storage-migration",
         capScope: "system",
@@ -57738,6 +57885,11 @@ var require_dist_BhE8zNfY = __commonJS({
         form: "single",
         optional: false
       }],
+      "recording.setDevicePlacement": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "recording.startStorageMigrationMove": [{
         name: "deviceId",
         form: "single",
@@ -58978,6 +59130,12 @@ var require_dist_BhE8zNfY = __commonJS({
         return ScopedTokenSchema;
       }
     });
+    Object.defineProperty(exports, "StorageCleanupJobSchema", {
+      enumerable: true,
+      get: function() {
+        return StorageCleanupJobSchema;
+      }
+    });
     Object.defineProperty(exports, "StorageLocationTypeSchema", {
       enumerable: true,
       get: function() {
@@ -59482,7 +59640,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BhE8zNfY();
+    var require_dist10 = require_dist_CFTKQGym();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -60301,7 +60459,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BhE8zNfY();
+    var require_dist10 = require_dist_CFTKQGym();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -60395,7 +60553,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BhE8zNfY();
+    var require_dist10 = require_dist_CFTKQGym();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -61292,11 +61450,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-CqDbI-vK.js
-var require_retired_settings_keys_CqDbI_vK = __commonJS({
-  "../system/dist/retired-settings-keys-CqDbI-vK.js"(exports) {
+// ../system/dist/retired-settings-keys-dehyu2N3.js
+var require_retired_settings_keys_dehyu2N3 = __commonJS({
+  "../system/dist/retired-settings-keys-dehyu2N3.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_BhE8zNfY();
+    var require_dist10 = require_dist_CFTKQGym();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -63510,8 +63668,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BhE8zNfY();
-    var require_retired_settings_keys = require_retired_settings_keys_CqDbI_vK();
+    var require_dist10 = require_dist_CFTKQGym();
+    var require_retired_settings_keys = require_retired_settings_keys_dehyu2N3();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -68327,7 +68485,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BhE8zNfY();
+    var require_dist10 = require_dist_CFTKQGym();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -68464,7 +68622,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BhE8zNfY();
+    var require_dist10 = require_dist_CFTKQGym();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -68654,7 +68812,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BhE8zNfY();
+    var require_dist10 = require_dist_CFTKQGym();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -76467,7 +76625,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BhE8zNfY();
+    var require_dist10 = require_dist_CFTKQGym();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -77032,7 +77190,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BhE8zNfY();
+    var require_dist10 = require_dist_CFTKQGym();
     var node_fs_promises = __require("fs/promises");
     var node_child_process = __require("child_process");
     var node_util = __require("util");
@@ -79654,7 +79812,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BhE8zNfY();
+    var require_dist10 = require_dist_CFTKQGym();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -80770,8 +80928,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BhE8zNfY();
-    var require_retired_settings_keys = require_retired_settings_keys_CqDbI_vK();
+    var require_dist10 = require_dist_CFTKQGym();
+    var require_retired_settings_keys = require_retired_settings_keys_dehyu2N3();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -83180,7 +83338,8 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BhE8zNfY();
+    var require_dist10 = require_dist_CFTKQGym();
+    var zod = require_zod();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -83402,17 +83561,22 @@ var require_storage_orchestrator_addon = __commonJS({
         for (const storageClass of STORAGE_CLASSES) {
           const targetId = input.destinations[storageClass];
           if (targetId === void 0) continue;
-          const source = this.deps.locations.getDefaultLocation(storageClass);
-          if (!source) throw new Error(`No default storage location for "${storageClass}"`);
+          const namedSourceId = input.sources?.[storageClass];
+          const defaultLoc = this.deps.locations.getDefaultLocation(storageClass);
+          const source = namedSourceId ? this.deps.locations.getLocationById(namedSourceId) : defaultLoc;
+          if (!source) throw new Error(namedSourceId ? `Storage location "${namedSourceId}" not found` : `No default storage location for "${storageClass}"`);
+          if (source.type !== storageClass) throw new Error(`Storage location "${source.id}" is type "${source.type}", expected "${storageClass}"`);
           const target = this.deps.locations.getLocationById(targetId);
           if (!target) throw new Error(`Storage location "${targetId}" not found`);
           if (target.type !== storageClass) throw new Error(`Storage location "${targetId}" is type "${target.type}", expected "${storageClass}"`);
-          if (source.id === target.id) throw new Error(`Storage location "${targetId}" is already the "${storageClass}" default`);
+          if (source.id === target.id) throw new Error(namedSourceId ? `Source and destination are the same location ("${targetId}")` : `Storage location "${targetId}" is already the "${storageClass}" default`);
+          const freezeSource = defaultLoc !== void 0 && source.id !== defaultLoc.id;
           if (!MOVER_CLASSES.includes(storageClass)) throw new Error(`No mover owns "${storageClass}" \u2014 the migration can repoint its default but cannot move its bytes. Move it by hand, then repoint the default with upsertLocation.`);
           moves.push({
             storageClass,
             fromLocationId: source.id,
             toLocationId: target.id,
+            freezeSource,
             moverJobId: null,
             state: null,
             error: null,
@@ -83443,11 +83607,13 @@ var require_storage_orchestrator_addon = __commonJS({
         }
         return {
           destinations: input.destinations,
+          sources: input.sources,
           mode,
-          moves: moves.map(({ storageClass, fromLocationId, toLocationId }) => ({
+          moves: moves.map(({ storageClass, fromLocationId, toLocationId, freezeSource }) => ({
             storageClass,
             fromLocationId,
-            toLocationId
+            toLocationId,
+            freezeSource
           })),
           findings
         };
@@ -83477,12 +83643,12 @@ var require_storage_orchestrator_addon = __commonJS({
         this.startReserved = true;
         try {
           const existing = await this.status();
-          if (existing && isTerminal(existing) && existing.pausedParticipants.length > 0) {
+          if (existing && isTerminal$1(existing) && existing.pausedParticipants.length > 0) {
             await this.releaseAfterTerminal(existing);
             await this.persist(existing);
             if (existing.pausedParticipants.length > 0) throw new Error(`storage migration ${existing.jobId} still holds maintenance leases`);
           }
-          if (existing && !isTerminal(existing)) throw new Error(`storage migration is already active (${existing.jobId})`);
+          if (existing && !isTerminal$1(existing)) throw new Error(`storage migration is already active (${existing.jobId})`);
           const plan = await this.plan(input);
           const now = this.deps.now();
           const job = {
@@ -83490,6 +83656,7 @@ var require_storage_orchestrator_addon = __commonJS({
             phase: "planning",
             mode: plan.mode,
             destinations: input.destinations,
+            sources: input.sources,
             throttleMbps: input.throttleMbps ?? 40,
             moves: plan.moves.map((move) => ({
               ...move,
@@ -83521,10 +83688,15 @@ var require_storage_orchestrator_addon = __commonJS({
         if (jobId !== void 0 && job?.jobId !== jobId) return null;
         return job;
       }
+      /** Finished jobs, newest first, excluding the one `status` currently shows. */
+      async history() {
+        const current = await this.status();
+        return (await this.deps.history?.get() ?? []).filter((job) => job.jobId !== current?.jobId);
+      }
       async cancel(jobId) {
         const job = await this.status(jobId);
         const cutoverInFlight = job !== null && job.repointed && (job.phase === "refreshing" || job.phase === "resuming");
-        if (!job || isTerminal(job) || cutoverInFlight) return false;
+        if (!job || isTerminal$1(job) || cutoverInFlight) return false;
         job.cancelRequested = true;
         await this.persist(job);
         await Promise.all(job.moves.filter((move) => move.moverJobId !== null).map((move) => this.cancelMove(move)));
@@ -83581,18 +83753,22 @@ var require_storage_orchestrator_addon = __commonJS({
           const target = this.deps.locations.getDefaultLocation(storageClass);
           if (!target) continue;
           if (laneOf(storageClass) === "media") {
-            const count = await unanswerable(this.deps.participants.analytics.residue({
-              toLocationId: target.id,
-              mode: "move"
-            }));
-            if (count !== null && count.rows === 0) continue;
-            out.push({
-              storageClass,
-              fromLocationId: "*",
-              toLocationId: target.id,
-              items: count?.rows ?? null,
-              bytes: null
-            });
+            for (const source of this.deps.locations.listLocations({ type: storageClass })) {
+              if (source.id === target.id) continue;
+              const count = await unanswerable(this.deps.participants.analytics.residue({
+                toLocationId: target.id,
+                fromLocationId: source.id,
+                mode: "move"
+              }));
+              if (count !== null && count.rows === 0) continue;
+              out.push({
+                storageClass,
+                fromLocationId: source.id,
+                toLocationId: target.id,
+                items: count?.rows ?? null,
+                bytes: null
+              });
+            }
             continue;
           }
           for (const source of this.deps.locations.listLocations({ type: storageClass })) {
@@ -83646,12 +83822,12 @@ var require_storage_orchestrator_addon = __commonJS({
         this.startReserved = true;
         try {
           const existing = await this.status();
-          if (existing && isTerminal(existing) && existing.pausedParticipants.length > 0) {
+          if (existing && isTerminal$1(existing) && existing.pausedParticipants.length > 0) {
             await this.releaseAfterTerminal(existing);
             await this.persist(existing);
             if (existing.pausedParticipants.length > 0) throw new Error(`storage migration ${existing.jobId} still holds maintenance leases`);
           }
-          if (existing && !isTerminal(existing)) throw new Error(`storage migration is already active (${existing.jobId})`);
+          if (existing && !isTerminal$1(existing)) throw new Error(`storage migration is already active (${existing.jobId})`);
           for (const storageClass of input.classes) {
             if (MOVER_CLASSES.includes(storageClass)) continue;
             throw new Error(`No mover owns "${storageClass}" \u2014 there is nothing that can drain it. Move it by hand.`);
@@ -83716,7 +83892,7 @@ var require_storage_orchestrator_addon = __commonJS({
           await this.persist(job);
           return;
         }
-        if (isTerminal(job)) {
+        if (isTerminal$1(job)) {
           if (job.pausedParticipants.length > 0) {
             await this.releaseAfterTerminal(job);
             await this.persist(job);
@@ -83777,11 +83953,12 @@ var require_storage_orchestrator_addon = __commonJS({
           if (job.phase === "verifying" && !nonBlocking) {
             await this.verifyMoves(job);
             if (job.cancelRequested) return this.finishCancelled(job);
+            await this.freezeDrainedSources(job);
             await this.setPhase(job, "repointing");
           }
           if (job.phase === "repointing") {
-            const targets = new Map(job.moves.map((move) => [move.storageClass, move.toLocationId]));
-            await this.deps.locations.setDefaultLocations(targets);
+            const targets = new Map(job.moves.filter((move) => move.freezeSource !== true).map((move) => [move.storageClass, move.toLocationId]));
+            if (targets.size > 0) await this.deps.locations.setDefaultLocations(targets);
             job.repointed = true;
             await this.setPhase(job, "refreshing");
           }
@@ -83804,6 +83981,7 @@ var require_storage_orchestrator_addon = __commonJS({
           if (job.phase === "verifying" && nonBlocking) {
             await this.verifyMoves(job);
             if (job.cancelRequested) return this.finishCancelled(job);
+            await this.freezeDrainedSources(job);
             await this.setPhase(job, "done");
           }
         } catch (err) {
@@ -83819,7 +83997,7 @@ var require_storage_orchestrator_addon = __commonJS({
           await this.releaseAfterTerminal(job);
           await this.persist(job);
         } finally {
-          if (isTerminal(job)) {
+          if (isTerminal$1(job)) {
             await this.releaseAfterTerminal(job);
             this.active = job;
           }
@@ -83980,6 +84158,24 @@ var require_storage_orchestrator_addon = __commonJS({
         for (const move of job.moves) if (move.state !== "done") throw new Error(`${move.storageClass} move did not complete verification`);
       }
       /**
+      * After a from→to copy whose source was NOT the class default: stop new
+      * writes to `from`. The default is unchanged (that is the whole point of
+      * naming a non-default source). A location that is already disabled is
+      * left alone.
+      */
+      freezeDrainedSources(job) {
+        for (const move of job.moves) {
+          if (move.freezeSource !== true) continue;
+          const loc = this.deps.locations.getLocationById(move.fromLocationId);
+          if (!loc || loc.enabled === false) continue;
+          const { createdAt: _c, updatedAt: _u, capacity: _cap, ...rest } = loc;
+          this.deps.locations.upsertLocation({
+            ...rest,
+            enabled: false
+          });
+        }
+      }
+      /**
       * Arm one class's mover.
       *
       * `draining` runs after every writer has been resumed, so there is no lease
@@ -83992,6 +84188,7 @@ var require_storage_orchestrator_addon = __commonJS({
         if (laneOf(move.storageClass) === "media") {
           const input2 = {
             toLocationId: move.toLocationId,
+            fromLocationId: move.fromLocationId,
             throttleMbps: job.throttleMbps,
             mode: "move"
           };
@@ -84025,7 +84222,7 @@ var require_storage_orchestrator_addon = __commonJS({
       }
       async setPhase(job, phase) {
         job.phase = phase;
-        if (isTerminal(job)) job.finishedAt = this.deps.now();
+        if (isTerminal$1(job)) job.finishedAt = this.deps.now();
         await this.persist(job);
       }
       async finishCancelled(job) {
@@ -84037,6 +84234,9 @@ var require_storage_orchestrator_addon = __commonJS({
       async persist(job) {
         job.updatedAt = this.deps.now();
         await this.deps.state.set(job);
+        if (!isTerminal$1(job) || this.deps.history === void 0) return;
+        const prev = [...await this.deps.history.get() ?? []];
+        await this.deps.history.set([job, ...prev.filter((row) => row.jobId !== job.jobId)].slice(0, HISTORY_CAP));
       }
     };
     async function unanswerable(read) {
@@ -84050,9 +84250,10 @@ var require_storage_orchestrator_addon = __commonJS({
       if (job.pauseLeaseId === null) throw new Error("storage migration has no maintenance lease");
       return job.pauseLeaseId;
     }
-    function isTerminal(job) {
+    function isTerminal$1(job) {
       return job.phase === "done" || job.phase === "failed" || job.phase === "cancelled";
     }
+    var HISTORY_CAP = 20;
     function laneOf(storageClass) {
       return storageClass === "eventMedia" ? "media" : "footage";
     }
@@ -84105,6 +84306,46 @@ var require_storage_orchestrator_addon = __commonJS({
     function canProbeOccupancyLocally(locality) {
       return locality === true;
     }
+    var STORAGE_CLASS_SUBTREES = {
+      eventMedia: ["events"],
+      recordingsLow: ["low"],
+      recordings: ["high", "mid"]
+    };
+    function isDotEntry(name) {
+      return name.startsWith(".");
+    }
+    async function dirHasAnyEntry(dir) {
+      let handle;
+      try {
+        handle = await (0, node_fs_promises.opendir)(dir);
+      } catch (err) {
+        if (err.code === "ENOENT") return false;
+        throw err;
+      }
+      try {
+        return await handle.read() !== null;
+      } finally {
+        await handle.close();
+      }
+    }
+    async function probeLocalDirectoryOccupancy(input) {
+      let names;
+      try {
+        names = await (0, node_fs_promises.readdir)(input.basePath);
+      } catch (err) {
+        if (err.code === "ENOENT") return "empty";
+        return "unknown";
+      }
+      const visible = names.filter((name) => !isDotEntry(name));
+      const subtrees = STORAGE_CLASS_SUBTREES[input.type];
+      if (subtrees === void 0) return visible.length > 0 ? "occupied" : "empty";
+      try {
+        for (const camera of visible) for (const subtree of subtrees) if (await dirHasAnyEntry(node_path.default.join(input.basePath, camera, subtree))) return "occupied";
+      } catch {
+        return "unknown";
+      }
+      return "empty";
+    }
     function resolveEngine(getEngines) {
       const engines = getEngines();
       if (engines.length === 0) throw new Error("settings-store: no data-store-provider engine is registered \u2014 the data door has nothing behind it");
@@ -84194,6 +84435,164 @@ var require_storage_orchestrator_addon = __commonJS({
       }
       return out;
     }
+    var FOOTAGE_TYPES = /* @__PURE__ */ new Set(["recordings", "recordingsLow"]);
+    function isTerminal(job) {
+      return job.phase === "done" || job.phase === "failed" || job.phase === "cancelled";
+    }
+    function footageFrozen(location) {
+      return location.enabled === false || location.config["readOnly"] === true;
+    }
+    var StorageCleanupCoordinator = class {
+      deps;
+      active = null;
+      startReserved = false;
+      constructor(deps) {
+        this.deps = deps;
+      }
+      async start(input) {
+        if (this.startReserved) throw new Error("storage cleanup is already active");
+        this.startReserved = true;
+        try {
+          const existing = await this.status();
+          if (existing && !isTerminal(existing)) throw new Error(`storage cleanup is already active (${existing.jobId})`);
+          const now = this.deps.now();
+          const job = {
+            jobId: this.deps.newId(),
+            phase: "orphans",
+            includeDebugMedia: input.includeDebugMedia === true,
+            orphansReclaimed: 0,
+            orphanBytesReclaimed: 0,
+            debugMediaReclaimed: 0,
+            debugMediaBytesReclaimed: 0,
+            ghostsForgotten: 0,
+            ghostBytesForgotten: 0,
+            detail: "Starting orphan reclaim",
+            cancelRequested: false,
+            startedAt: now,
+            updatedAt: now,
+            finishedAt: null,
+            error: null
+          };
+          await this.persist(job);
+          this.active = job;
+          this.run(job);
+          return job.jobId;
+        } finally {
+          this.startReserved = false;
+        }
+      }
+      async status(jobId) {
+        const job = this.active ?? await this.deps.state.get();
+        if (jobId !== void 0 && job?.jobId !== jobId) return null;
+        return job;
+      }
+      async cancel(jobId) {
+        const job = await this.status(jobId);
+        if (!job || isTerminal(job)) return false;
+        job.cancelRequested = true;
+        job.detail = "Cancel requested \u2014 finishing the current step";
+        await this.persist(job);
+        return true;
+      }
+      async run(job) {
+        try {
+          await this.reclaimOrphans(job);
+          if (await this.stopped(job)) return;
+          if (job.includeDebugMedia) {
+            await this.setPhase(job, "debug-media", "Reclaiming debug media");
+            await this.reclaimDebugMedia(job);
+            if (await this.stopped(job)) return;
+          }
+          await this.setPhase(job, "ghost-ledger", "Forgetting ghost footage rows");
+          await this.forgetGhosts(job);
+          if (await this.stopped(job)) return;
+          await this.finish(job, "done", null);
+        } catch (err) {
+          const message = err instanceof Error ? err.message : String(err);
+          await this.finish(job, "failed", message);
+        }
+      }
+      async reclaimOrphans(job) {
+        let restart = true;
+        for (; ; ) {
+          if (await this.stopped(job)) return;
+          const start = await this.deps.participants.startOrphan(restart);
+          restart = false;
+          if (!start.started && !start.alreadyRunning) throw new Error("orphan reclaim did not start");
+          const status = await this.waitUntilIdle(() => this.deps.participants.orphanStatus(), job, (s) => `Orphan reclaim: ${s.totalReclaimed} rows / ${String(s.totalBytesReclaimed)} bytes`);
+          job.orphansReclaimed += status.totalReclaimed;
+          job.orphanBytesReclaimed += status.totalBytesReclaimed;
+          job.detail = `Orphans: ${job.orphansReclaimed} rows, ${String(job.orphanBytesReclaimed)} bytes`;
+          await this.persist(job);
+          if (status.error) throw new Error(status.error);
+          if (status.complete === true) return;
+        }
+      }
+      async reclaimDebugMedia(job) {
+        const start = await this.deps.participants.startDebugMedia();
+        if (!start.started && !start.alreadyRunning) throw new Error("debug-media reclaim did not start");
+        const status = await this.waitUntilIdle(() => this.deps.participants.debugMediaStatus(), job, (s) => `Debug media: ${s.totalReclaimed} files`);
+        job.debugMediaReclaimed = status.totalReclaimed;
+        job.debugMediaBytesReclaimed = status.totalBytesReclaimed;
+        await this.persist(job);
+        if (status.error) throw new Error(status.error);
+      }
+      async forgetGhosts(job) {
+        const frozen = this.deps.locations.listLocations().filter((l) => FOOTAGE_TYPES.has(l.type) && footageFrozen(l));
+        if (frozen.length === 0) {
+          job.detail = "No frozen footage locations";
+          await this.persist(job);
+          return;
+        }
+        for (const loc of frozen) {
+          if (await this.stopped(job)) return;
+          job.detail = `Ghost ledger: ${loc.id}`;
+          await this.persist(job);
+          const report = await this.deps.participants.walkLedger({
+            locationId: loc.id,
+            apply: true
+          });
+          job.ghostsForgotten += report.forgottenSegments;
+          job.ghostBytesForgotten += report.forgottenBytes;
+          await this.persist(job);
+        }
+      }
+      async waitUntilIdle(read, job, detail) {
+        const pollMs = this.deps.pollMs ?? 2e3;
+        const sleep = this.deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+        for (; ; ) {
+          const status = await read();
+          job.detail = detail(status);
+          await this.persist(job);
+          if (!status.running) return status;
+          await sleep(pollMs);
+        }
+      }
+      async stopped(job) {
+        if ((await this.status(job.jobId))?.cancelRequested === true) {
+          await this.finish(job, "cancelled", null);
+          return true;
+        }
+        return false;
+      }
+      async setPhase(job, phase, detail) {
+        job.phase = phase;
+        job.detail = detail;
+        await this.persist(job);
+      }
+      async finish(job, phase, error) {
+        job.phase = phase;
+        job.error = error;
+        job.finishedAt = this.deps.now();
+        job.detail = phase === "done" ? "Cleanup finished" : job.detail;
+        await this.persist(job);
+      }
+      async persist(job) {
+        job.updatedAt = this.deps.now();
+        this.active = job;
+        await this.deps.state.set(job);
+      }
+    };
     var SESSION_VOCABULARY = {
       upload: {
         idLabel: "uploadId",
@@ -84281,7 +84680,7 @@ var require_storage_orchestrator_addon = __commonJS({
       * Reconciles both directions so operator edits survive a reboot:
       *   1. hydrate — DB rows win over any early in-memory seed (restores
       *      operator config like `minFreePercent` that the pre-store boot
-      *      can't see), with the same `isSystem` upgrade as {@link initialize};
+      *      can't see);
       *   2. backfill — in-memory locations the DB doesn't have yet (the
       *      pre-store seed defaults on a fresh install) are persisted, so the
       *      store becomes the durable source of truth from here on.
@@ -84303,15 +84702,7 @@ var require_storage_orchestrator_addon = __commonJS({
         const rows = await store.loadAll();
         this.locationStore = store;
         const dbIds = new Set(rows.map((r) => r.id));
-        for (const loc of rows) {
-          const upgraded = !loc.isSystem && loc.id === `${loc.type}:default` ? {
-            ...loc,
-            isSystem: true
-          } : loc;
-          this.locations.set(upgraded.id, upgraded);
-          if (upgraded !== loc) store.upsert(upgraded).catch(() => {
-          });
-        }
+        for (const loc of rows) this.locations.set(loc.id, loc);
         const backfill = [...this.locations.values()].filter((l) => !dbIds.has(l.id));
         for (const loc of backfill) store.upsert(loc).catch((err) => {
           this.logger.warn("storage-orchestrator: attachStore backfill persist failed", { meta: {
@@ -84403,25 +84794,8 @@ var require_storage_orchestrator_addon = __commonJS({
       async initialize() {
         if (!this.locationStore) return;
         const rows = await this.locationStore.loadAll();
-        let upgraded = 0;
-        for (const loc of rows) if (!loc.isSystem && loc.id === `${loc.type}:default`) {
-          const upgradedLoc = {
-            ...loc,
-            isSystem: true
-          };
-          this.locations.set(upgradedLoc.id, upgradedLoc);
-          this.locationStore.upsert(upgradedLoc).catch((err) => {
-            this.logger.warn("storage-orchestrator: isSystem upgrade persist failed", { meta: {
-              id: upgradedLoc.id,
-              error: err instanceof Error ? err.message : String(err)
-            } });
-          });
-          upgraded++;
-        } else this.locations.set(loc.id, loc);
-        this.logger.info("storage-orchestrator: hydrated locations from store", { meta: {
-          loaded: this.locations.size,
-          isSystemUpgraded: upgraded
-        } });
+        for (const loc of rows) this.locations.set(loc.id, loc);
+        this.logger.info("storage-orchestrator: hydrated locations from store", { meta: { loaded: this.locations.size } });
         this.reportDisabledDefaults();
       }
       /**
@@ -84607,10 +84981,6 @@ var require_storage_orchestrator_addon = __commonJS({
           ...input,
           nodeId: "hub"
         };
-        if (existing?.isSystem === true) input = {
-          ...input,
-          isSystem: true
-        };
         input = {
           ...input,
           ...resolveEnabled(input, existing, this.hasAnyLocationOfType(input.type))
@@ -84657,21 +85027,22 @@ var require_storage_orchestrator_addon = __commonJS({
         return next;
       }
       /**
-      * Remove a location. Refuses to remove the default of a type unless a
-      * sibling default exists (defensive — `upsertLocation` already ensures
-      * at most one default per type, but the logic guards against future
-      * bypass paths e.g. SQLite migration that imports two defaults).
-      *
-      * Persistence (Task 6) mirrors the delete asynchronously, with errors
-      * routed to the logger — see `upsertLocation` for the rationale.
+      * Remove a location. Refuses the last location of a type and the last
+      * enabled location of a type. `isSystem` is informational — a frozen
+      * recordings `:default` is deletable once a sibling is live. Deleting
+      * the flagged default promotes an enabled sibling. Occupancy still
+      * refuses unless `force` is set; force never overrides uniqueness /
+      * last-enabled.
       */
       async deleteLocation(id, options) {
         const loc = this.locations.get(id);
         if (!loc) throw new Error(`Storage location "${id}" not found`);
-        if (loc.isSystem) throw new Error(`Storage location "${id}" is system-managed and cannot be deleted. Edit its config (path / providerId) instead.`);
-        if (loc.isDefault) {
-          if (![...this.locations.values()].find((l) => l.type === loc.type && l.id !== id && l.isDefault)) throw new Error(`Cannot delete default location "${id}" for type "${loc.type}" \u2014 promote another location to default first`);
-        }
+        const ofType = [...this.locations.values()].filter((l) => l.type === loc.type);
+        if (ofType.length <= 1) throw new Error(`Cannot delete "${id}" \u2014 it is the only location for type "${loc.type}"`);
+        const enabledOfType = ofType.filter((l) => l.enabled !== false);
+        if (loc.enabled !== false && enabledOfType.length <= 1) throw new Error(`Cannot delete "${id}" \u2014 it is the only enabled location for type "${loc.type}"`);
+        const successor = loc.isDefault === true ? ofType.find((l) => l.id !== id && l.enabled !== false) : void 0;
+        if (loc.isDefault === true && successor === void 0) throw new Error(`Cannot delete "${id}" \u2014 it is the only enabled location for type "${loc.type}"`);
         const occupancy = await this.probeOccupancy(loc);
         if (occupancy !== "empty") {
           if (options?.force !== true) throw new Error(occupancy === "occupied" ? `Storage location "${id}" still holds data \u2014 drain it first (storage migration / relocate), or pass force to delete the record anyway and strand what is on it` : `Storage location "${id}" could not be checked for remaining data (unreachable provider, another node, or an unmounted root) \u2014 pass force to delete the record anyway`);
@@ -84681,6 +85052,21 @@ var require_storage_orchestrator_addon = __commonJS({
             occupancy
           } });
         }
+        if (successor !== void 0 && successor.isDefault !== true) {
+          const now = Date.now();
+          const promoted = {
+            ...successor,
+            isDefault: true,
+            updatedAt: now
+          };
+          this.locations.set(successor.id, promoted);
+          if (this.locationStore) this.locationStore.upsert(promoted).catch((err) => {
+            this.logger.error("storage-orchestrator: default promotion persist failed", { meta: {
+              id: successor.id,
+              error: err instanceof Error ? err.message : String(err)
+            } });
+          });
+        }
         this.locations.delete(id);
         if (this.locationStore) this.locationStore.delete(id).catch((err) => {
           this.logger.error("storage-orchestrator: delete persistence failed", { meta: {
@@ -84707,15 +85093,14 @@ var require_storage_orchestrator_addon = __commonJS({
         }
       }
       /**
-      * Remove system-seeded locations whose type is no longer declared by any
-      * addon (stale defaults from a removed location type). Operator-added
-      * (non-system) locations of an undeclared type are KEPT but warned — the
-      * operator owns them. Requires the registry to be set first.
+      * Remove seed-shaped locations (`<type>:default`) whose type is no longer
+      * declared by any addon (stale defaults from a removed location type).
+      * Operator-added locations of an undeclared type are KEPT but warned.
       *
       * FAIL-SAFE: if the registry is EMPTY (no addon declared any location), we
       * refuse to prune anything. An empty registry almost always means
       * declarations failed to load (boot ordering, a stale install) — pruning
-      * "everything undeclared" in that state would wipe every system location
+      * "everything undeclared" in that state would wipe every seeded location
       * (data/logs/recordings/…). Better to keep stale rows than destroy live ones.
       */
       pruneUndeclaredSystemLocations() {
@@ -84726,7 +85111,7 @@ var require_storage_orchestrator_addon = __commonJS({
         }
         for (const [id, loc] of Array.from(this.locations)) {
           if (this.registry.cardinalityOf(loc.type) !== null) continue;
-          if (loc.isSystem) {
+          if (loc.id === `${loc.type}:default`) {
             this.locations.delete(id);
             if (this.locationStore) this.locationStore.delete(id).catch((err) => {
               this.logger.error("storage-orchestrator: prune persistence failed", { meta: {
@@ -84734,7 +85119,7 @@ var require_storage_orchestrator_addon = __commonJS({
                 error: err instanceof Error ? err.message : String(err)
               } });
             });
-            this.logger.info("storage-orchestrator: pruned stale system location", { meta: {
+            this.logger.info("storage-orchestrator: pruned stale seeded location", { meta: {
               id,
               type: loc.type
             } });
@@ -84894,7 +85279,7 @@ var require_storage_orchestrator_addon = __commonJS({
             providerId: input.providerId,
             config: { basePath: base },
             isDefault: true,
-            isSystem: true
+            isSystem: false
           });
           added++;
         }
@@ -85076,6 +85461,7 @@ var require_storage_orchestrator_addon = __commonJS({
       pressureTimer = null;
       pressureSweepInFlight = false;
       migration = null;
+      cleanup = null;
       /**
       * Cached `providerId → nodeLocal` snapshot (SP1). Backs the orchestrator's
       * synchronous `NodeLocalResolver` — `getProviderInfo()` is async, so we
@@ -85133,7 +85519,7 @@ var require_storage_orchestrator_addon = __commonJS({
             const rows = type !== void 0 ? service.listLocations({ type }) : service.listLocations();
             return Promise.all(rows.map(async (loc) => ({
               ...this.redacted(loc),
-              capacity: await this.localCapacityOf(loc)
+              capacity: loc.enabled === false ? null : await this.localCapacityOf(loc)
             })));
           },
           getDefaultLocation: async ({ type }) => {
@@ -85301,6 +85687,7 @@ var require_storage_orchestrator_addon = __commonJS({
         const migration = new StorageMigrationCoordinator({
           locations: service,
           state: this.state("storage-migration", require_dist10.StorageMigrationJobSchema.nullable(), null),
+          history: this.state("storage-migration-history", zod.z.array(require_dist10.StorageMigrationJobSchema), []),
           participants: {
             pipeline: {
               pause: async (leaseId) => {
@@ -85351,6 +85738,36 @@ var require_storage_orchestrator_addon = __commonJS({
           deviceKeyOf: (locationId) => this.locationDeviceKey(locationId)
         });
         this.migration = migration;
+        const cleanup = new StorageCleanupCoordinator({
+          locations: service,
+          state: this.state("storage-cleanup", require_dist10.StorageCleanupJobSchema.nullable(), null),
+          participants: {
+            startOrphan: async (restart) => {
+              return parseStarted(await this.ctx.api.addons.custom.mutate({
+                addonId: "pipeline-analytics",
+                action: "retention.orphanAudit",
+                input: {
+                  mode: "reclaim",
+                  restart,
+                  maxRowsPerScope: 2e4
+                }
+              }));
+            },
+            orphanStatus: async () => {
+              return parseOrphanStatus(await this.ctx.api.addons.custom.mutate({
+                addonId: "pipeline-analytics",
+                action: "retention.orphanAuditStatus",
+                input: {}
+              }));
+            },
+            startDebugMedia: () => this.ctx.api.pipelineAnalytics.reclaimDebugMedia.mutate({ mode: "reclaim" }),
+            debugMediaStatus: () => this.ctx.api.pipelineAnalytics.getMediaReclaimStatus.query({}),
+            walkLedger: (input) => this.ctx.api.recording.reconcileLedgerAgainstDisk.mutate(input)
+          },
+          now: () => Date.now(),
+          newId: () => (0, node_crypto.randomUUID)()
+        });
+        this.cleanup = cleanup;
         const migrationProvider = {
           plan: (input) => migration.plan(input),
           start: async (input) => ({ jobId: await migration.start(input) }),
@@ -85358,7 +85775,11 @@ var require_storage_orchestrator_addon = __commonJS({
           cancel: async ({ jobId }) => ({ cancelled: await migration.cancel(jobId) }),
           movers: () => migration.movers(),
           residue: () => migration.residue(),
-          drain: async (input) => ({ jobId: await migration.drain(input) })
+          drain: async (input) => ({ jobId: await migration.drain(input) }),
+          cleanupStart: async (input) => ({ jobId: await cleanup.start(input) }),
+          cleanupStatus: ({ jobId }) => cleanup.status(jobId),
+          cleanupCancel: async ({ jobId }) => ({ cancelled: await cleanup.cancel(jobId) }),
+          history: () => migration.history()
         };
         await this.seedFromDeclarations();
         const eventBus = this.ctx.eventBus;
@@ -85603,11 +86024,14 @@ var require_storage_orchestrator_addon = __commonJS({
         }
       }
       /**
-      * Does this location still hold anything? A SHALLOW `readdir` of its
-      * `basePath` — one syscall, never a walk. `/recordings` holds one entry per
-      * camera, so this is cheap on a volume with millions of segments, and a
-      * `find`-style walk of a saturated recordings disk is precisely what must
-      * not happen here.
+      * Does this location still hold anything of ITS class?
+      *
+      * Shared roots (`/recordings` hosting high + low + events) are scored by
+      * class subtree (`<camera>/high|mid`, `/low`, `/events`), not by a raw
+      * `readdir` of the root — camera dirs and `.camstack-location` would
+      * otherwise make every class look occupied. The walk stays shallow: one
+      * dirent per camera, then first-entry of the named subtree. A `find` of
+      * segments is precisely what must not happen here.
       *
       * **What it cannot see, stated rather than papered over:**
       *
@@ -85616,9 +86040,10 @@ var require_storage_orchestrator_addon = __commonJS({
       *    `unknown`, never `empty`.
       *  - A location with no `basePath` — same answer.
       *  - The difference between "holds live footage" and "holds one stray
-      *    lock-file". It measures BYTES ON DISK, not durable rows, so it refuses
-      *    a location holding orphan files that no index names. That direction is
-      *    the safe one, and `force` is the escape hatch for it.
+      *    lock-file". It measures ON-DISK entries of this class, not durable
+      *    rows, so it refuses a location holding orphan files that no index
+      *    names. That direction is the safe one, and `force` is the escape
+      *    hatch for it.
       *
       * A missing root (`ENOENT`) is `empty`, not `unknown`: an unmounted disk and
       * a deleted directory are indistinguishable here, and if the record's own
@@ -85636,16 +86061,16 @@ var require_storage_orchestrator_addon = __commonJS({
         if ((location.nodeId === void 0 || location.nodeId === "" ? HUB_NODE_ID : location.nodeId) !== (this.service?.getLocalNodeId() ?? HUB_NODE_ID)) return "unknown";
         const basePath = this.locationBasePath(location.id);
         if (basePath === null) return "unknown";
-        try {
-          return (await node_fs_promises.readdir(basePath)).length > 0 ? "occupied" : "empty";
-        } catch (err) {
-          if (err instanceof Error && "code" in err && err.code === "ENOENT") return "empty";
-          this.ctx.logger.warn("storage-orchestrator: could not read a location root to check it", { meta: {
-            id: location.id,
-            error: err instanceof Error ? err.message : String(err)
-          } });
-          return "unknown";
-        }
+        const occupancy = await probeLocalDirectoryOccupancy({
+          type: location.type,
+          basePath
+        });
+        if (occupancy === "unknown") this.ctx.logger.warn("storage-orchestrator: could not read a location root to check it", { meta: {
+          id: location.id,
+          basePath,
+          type: location.type
+        } });
+        return occupancy;
       }
       /** Free capacity (%) on a location's volume via `statfs`; 100 (guard inert) when unstattable. */
       async locationFreePercent(locationId) {
@@ -85721,6 +86146,38 @@ var require_storage_orchestrator_addon = __commonJS({
         }
       }
     };
+    function parseStarted(raw) {
+      if (raw !== null && typeof raw === "object") {
+        const o = raw;
+        if (typeof o["started"] === "boolean" && typeof o["alreadyRunning"] === "boolean") return {
+          started: o["started"],
+          alreadyRunning: o["alreadyRunning"]
+        };
+      }
+      return {
+        started: false,
+        alreadyRunning: false
+      };
+    }
+    function parseOrphanStatus(raw) {
+      if (raw !== null && typeof raw === "object") {
+        const o = raw;
+        return {
+          running: o["running"] === true,
+          complete: typeof o["complete"] === "boolean" ? o["complete"] : null,
+          totalReclaimed: typeof o["totalReclaimed"] === "number" ? o["totalReclaimed"] : 0,
+          totalBytesReclaimed: typeof o["totalBytesReclaimed"] === "number" ? o["totalBytesReclaimed"] : 0,
+          error: typeof o["error"] === "string" ? o["error"] : null
+        };
+      }
+      return {
+        running: false,
+        complete: true,
+        totalReclaimed: 0,
+        totalBytesReclaimed: 0,
+        error: "orphan audit status unreadable"
+      };
+    }
     exports.SqliteLocationStore = SqliteLocationStore;
     exports.StorageMigrationCoordinator = StorageMigrationCoordinator;
     exports.StorageOrchestratorAddon = StorageOrchestratorAddon;
@@ -85757,7 +86214,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BhE8zNfY();
+    var require_dist10 = require_dist_CFTKQGym();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -103818,7 +104275,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BhE8zNfY();
+    var require_dist10 = require_dist_CFTKQGym();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -116320,12 +116777,12 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/manifest-system-deps-uflHvHDB.js
-var require_manifest_system_deps_uflHvHDB = __commonJS({
-  "../system/dist/manifest-system-deps-uflHvHDB.js"(exports) {
+// ../system/dist/manifest-system-deps-BIxY1Y5e.js
+var require_manifest_system_deps_BIxY1Y5e = __commonJS({
+  "../system/dist/manifest-system-deps-BIxY1Y5e.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    require_dist_BhE8zNfY();
+    require_dist_CFTKQGym();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var _camstack_types_node = require_node();
@@ -128473,7 +128930,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_BhE8zNfY();
+    var require_dist10 = require_dist_CFTKQGym();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -128499,7 +128956,7 @@ var require_dist3 = __commonJS({
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_file_data_plane = require_file_data_plane_DO8KbxCe();
     var require_tls$1 = require_tls_BxQlomxd();
-    var require_manifest_system_deps = require_manifest_system_deps_uflHvHDB();
+    var require_manifest_system_deps = require_manifest_system_deps_BIxY1Y5e();
     var require_resource_monitor = require_resource_monitor_CdnzxBLP();
     var require_custom_action_registry = require_custom_action_registry_jY0NOZK8();
     var zod = require_zod();
@@ -210740,6 +211197,13 @@ var require_dist4 = __commonJS({
     ]);
     var RelocateMediaInputSchema = zod.z.object({
       toLocationId: zod.z.string(),
+      /**
+      * Restrict the pass to rows currently on this location. Omitted / `'*'` =
+      * every row that is not already on `toLocationId` (the historical
+      * behaviour). A named source is what a from→to migration needs: without it
+      * "move events off disk 2" also emptied disk 1.
+      */
+      fromLocationId: zod.z.string().optional(),
       throttleMbps: zod.z.number().min(1).max(1e3).optional(),
       /** Omitted = `move`, the pre-existing behaviour. */
       mode: MediaRelocateModeSchema.optional()
@@ -210771,9 +211235,18 @@ var require_dist4 = __commonJS({
       backups: zod.z.string().min(1).optional(),
       galleryMedia: zod.z.string().min(1).optional()
     }).refine((value) => Object.keys(value).length > 0, { message: "select at least one storage class" });
+    var StorageMigrationSourcesSchema = zod.z.object({
+      recordings: zod.z.string().min(1).optional(),
+      recordingsLow: zod.z.string().min(1).optional(),
+      eventMedia: zod.z.string().min(1).optional(),
+      backups: zod.z.string().min(1).optional(),
+      galleryMedia: zod.z.string().min(1).optional()
+    }).optional();
     var StorageMigrationModeSchema = zod.z.enum(["blocking", "nonBlocking"]);
     var StorageMigrationInputSchema = zod.z.object({
       destinations: StorageMigrationDestinationsSchema,
+      /** Omitted = each class's current default. */
+      sources: StorageMigrationSourcesSchema,
       throttleMbps: zod.z.number().min(1).max(1e3).optional(),
       /** Omitted = `blocking`, which stays the default. */
       mode: StorageMigrationModeSchema.optional()
@@ -210819,6 +211292,13 @@ var require_dist4 = __commonJS({
       storageClass: StorageMigrationClassSchema,
       fromLocationId: zod.z.string(),
       toLocationId: zod.z.string(),
+      /**
+      * True when `from` was NOT the class default at plan time. The move still
+      * copies bytes, but the default is left alone and the source is disabled
+      * once the copy verifies. Absent on jobs planned before this field existed
+      * — those jobs always repointed, which is `false`.
+      */
+      freezeSource: zod.z.boolean().optional(),
       moverJobId: zod.z.string().nullable(),
       state: RelocateJobStateSchema.nullable(),
       error: zod.z.string().nullable(),
@@ -210832,6 +211312,7 @@ var require_dist4 = __commonJS({
       *  can tell a seconds-long cutover from a thirty-hour one. */
       mode: StorageMigrationModeSchema,
       destinations: StorageMigrationDestinationsSchema,
+      sources: StorageMigrationSourcesSchema,
       throttleMbps: zod.z.number(),
       moves: zod.z.array(StorageMigrationMoveSchema),
       pauseLeaseId: zod.z.string().nullable(),
@@ -210858,6 +211339,7 @@ var require_dist4 = __commonJS({
     });
     var StorageMigrationPlanSchema = zod.z.object({
       destinations: StorageMigrationDestinationsSchema,
+      sources: StorageMigrationSourcesSchema,
       /** The mode this plan was built for. A plan is only valid for its mode: the
       *  `eventMedia` seal gate and the single-cardinality refusal both depend on
       *  it. */
@@ -210865,7 +211347,8 @@ var require_dist4 = __commonJS({
       moves: zod.z.array(zod.z.object({
         storageClass: StorageMigrationClassSchema,
         fromLocationId: zod.z.string(),
-        toLocationId: zod.z.string()
+        toLocationId: zod.z.string(),
+        freezeSource: zod.z.boolean().optional()
       })),
       findings: zod.z.array(StorageMigrationFindingSchema)
     });
@@ -210977,9 +211460,42 @@ var require_dist4 = __commonJS({
     var RelocatableMediaCountSchema = zod.z.object({ rows: zod.z.number().int().nonnegative() }).nullable();
     var RelocatableMediaCountInputSchema = zod.z.object({
       toLocationId: zod.z.string().min(1),
+      /** Restrict the count to one source; omitted / `'*'` = every non-target row. */
+      fromLocationId: zod.z.string().optional(),
       /** Omitted = `move`. */
       mode: MediaRelocateModeSchema.optional()
     });
+    var StorageCleanupPhaseSchema = zod.z.enum([
+      "orphans",
+      "debug-media",
+      "ghost-ledger",
+      "done",
+      "failed",
+      "cancelled"
+    ]);
+    var StorageCleanupInputSchema = zod.z.object({
+      /** Also walk motion stills / track filmstrips. Off by default. */
+      includeDebugMedia: zod.z.boolean().optional()
+    });
+    var StorageCleanupJobSchema = zod.z.object({
+      jobId: zod.z.string(),
+      phase: StorageCleanupPhaseSchema,
+      includeDebugMedia: zod.z.boolean(),
+      orphansReclaimed: zod.z.number().int().nonnegative(),
+      orphanBytesReclaimed: zod.z.number().int().nonnegative(),
+      debugMediaReclaimed: zod.z.number().int().nonnegative(),
+      debugMediaBytesReclaimed: zod.z.number().int().nonnegative(),
+      ghostsForgotten: zod.z.number().int().nonnegative(),
+      ghostBytesForgotten: zod.z.number().int().nonnegative(),
+      /** Short operator-facing line: current collection, pass, or location. */
+      detail: zod.z.string().nullable(),
+      cancelRequested: zod.z.boolean(),
+      startedAt: zod.z.number(),
+      updatedAt: zod.z.number(),
+      finishedAt: zod.z.number().nullable(),
+      error: zod.z.string().nullable()
+    });
+    var StorageCleanupStatusInputSchema = zod.z.object({ jobId: zod.z.string().optional() });
     var SUB_DETECTION_TYPES = ["face", "plate"];
     var RECOGNITION_TYPES = [
       "face",
@@ -226903,7 +227419,23 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         drain: require_sleep.method(StorageMigrationDrainInputSchema, zod.z.object({ jobId: zod.z.string() }), {
           kind: "mutation",
           auth: "admin"
-        })
+        }),
+        /**
+        * One operator cleanup of leftover analytics (DB + blobs) and ghost
+        * ledger rows on frozen footage locations. Optional debug-media sweep.
+        * Returns immediately; poll {@link cleanupStatus}.
+        */
+        cleanupStart: require_sleep.method(StorageCleanupInputSchema, zod.z.object({ jobId: zod.z.string() }), {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        cleanupStatus: require_sleep.method(StorageCleanupStatusInputSchema, StorageCleanupJobSchema.nullable(), { auth: "admin" }),
+        cleanupCancel: require_sleep.method(zod.z.object({ jobId: zod.z.string() }), zod.z.object({ cancelled: zod.z.boolean() }), {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        /** Recent finished migration jobs, newest first. The live job is `status`. */
+        history: require_sleep.method(zod.z.object({}), zod.z.array(StorageMigrationJobSchema).readonly(), { auth: "admin" })
       }
     };
     var ProviderInfoSchema = zod.z.discriminatedUnion("shouldSaveDiskSpace", [zod.z.object({
@@ -233704,6 +234236,26 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       /** Ignore piles smaller than this (default 1 GB). */
       minMoveGb: zod.z.number().min(0).optional()
     });
+    var RecordingDevicePlacementSchema = zod.z.object({
+      deviceId: zod.z.number().int(),
+      profile: zod.z.string(),
+      locationId: zod.z.string()
+    });
+    var RecordingDevicePinSchema = zod.z.object({
+      deviceId: zod.z.number().int(),
+      /** Recordings-class location this camera is pinned to. */
+      locationId: zod.z.string()
+    });
+    var RecordingPlacementViewSchema = zod.z.object({
+      assignments: zod.z.array(RecordingDevicePlacementSchema),
+      pins: zod.z.array(RecordingDevicePinSchema),
+      defaultLocations: zod.z.record(zod.z.string(), zod.z.string())
+    });
+    var RecordingSetDevicePlacementInputSchema = zod.z.object({
+      deviceId: zod.z.number().int(),
+      /** `null` = Auto. Otherwise a `recordings:*` location id. */
+      locationId: zod.z.string().nullable()
+    });
     var LocateSegmentResultSchema = zod.z.discriminatedUnion("kind", [zod.z.object({
       kind: zod.z.literal("segment"),
       startMs: zod.z.number(),
@@ -234022,6 +234574,22 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         startStorageRebalance: require_sleep.method(RecordingRebalanceInputSchema, RecordingRebalancePlanSchema, {
           kind: "mutation",
           auth: "admin"
+        }),
+        /**
+        * The placement plan in force plus operator pins. Drives the Locations
+        * admin page: Auto vs a named recordings location, per camera.
+        */
+        getPlacement: require_sleep.method(zod.z.object({}), RecordingPlacementViewSchema, {
+          kind: "query",
+          auth: "admin"
+        }),
+        /**
+        * Pin a camera to a recordings location, or clear the pin (Auto). High and
+        * mid follow the pin; low stays with the recordingsLow planner.
+        */
+        setDevicePlacement: require_sleep.method(RecordingSetDevicePlacementInputSchema, zod.z.object({ ok: zod.z.literal(true) }), {
+          kind: "mutation",
+          auth: "admin"
         })
       }
     };
@@ -244181,6 +244749,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "recording.getPlacement": {
+        capName: "recording",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "recording.getPlaybackManifest": {
         capName: "recording",
         capScope: "system",
@@ -244307,6 +244881,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "recording.setDevicePlacement": {
+        capName: "recording",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "recording.startStorageMigrationMove": {
         capName: "recording",
         capScope: "system",
@@ -244751,12 +245331,36 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "storageMigration.cleanupCancel": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
+      "storageMigration.cleanupStart": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
+      "storageMigration.cleanupStatus": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "storageMigration.drain": {
         capName: "storage-migration",
         capScope: "system",
         addonId: null,
         access: "create"
       },
+      "storageMigration.history": {
+        capName: "storage-migration",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "storageMigration.movers": {
         capName: "storage-migration",
         capScope: "system",
@@ -247501,6 +248105,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: false
       }],
+      "recording.setDevicePlacement": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "recording.startStorageMigrationMove": [{
         name: "deviceId",
         form: "single",
@@ -247970,6 +248579,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "recording.renderGif",
       "recording.rescanStorage",
       "recording.setDeviceConfig",
+      "recording.setDevicePlacement",
       "recording.startStorageMigrationMove",
       "recordingExport.createExport",
       "recordingExport.listExports",
@@ -248853,7 +249463,9 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           reconcileLedgerAgainstDisk: (input) => dispatch("recording", "reconcileLedgerAgainstDisk", "mutation", input),
           cancelRelocateJob: (input) => dispatch("recording", "cancelRelocateJob", "mutation", input),
           planStorageRebalance: (input) => dispatch("recording", "planStorageRebalance", "query", input),
-          startStorageRebalance: (input) => dispatch("recording", "startStorageRebalance", "mutation", input)
+          startStorageRebalance: (input) => dispatch("recording", "startStorageRebalance", "mutation", input),
+          getPlacement: (input) => dispatch("recording", "getPlacement", "query", input),
+          setDevicePlacement: (input) => dispatch("recording", "setDevicePlacement", "mutation", input)
         },
         recordingExport: {
           createExport: (input) => dispatch("recordingExport", "createExport", "mutation", input),
@@ -248917,7 +249529,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           cancel: (input) => dispatch("storageMigration", "cancel", "mutation", input),
           movers: (input) => dispatch("storageMigration", "movers", "query", input),
           residue: (input) => dispatch("storageMigration", "residue", "query", input),
-          drain: (input) => dispatch("storageMigration", "drain", "mutation", input)
+          drain: (input) => dispatch("storageMigration", "drain", "mutation", input),
+          cleanupStart: (input) => dispatch("storageMigration", "cleanupStart", "mutation", input),
+          cleanupStatus: (input) => dispatch("storageMigration", "cleanupStatus", "query", input),
+          cleanupCancel: (input) => dispatch("storageMigration", "cleanupCancel", "mutation", input),
+          history: (input) => dispatch("storageMigration", "history", "query", input)
         },
         streamBroker: {
           fetchEventMedia: (input) => dispatch("streamBroker", "fetchEventMedia", "mutation", input),
@@ -252534,6 +253150,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.StorageBeginDownloadResultSchema = BeginDownloadResultSchema;
     exports.StorageBeginUploadInputSchema = BeginUploadInputSchema;
     exports.StorageBeginUploadResultSchema = BeginUploadResultSchema;
+    exports.StorageCleanupInputSchema = StorageCleanupInputSchema;
+    exports.StorageCleanupJobSchema = StorageCleanupJobSchema;
+    exports.StorageCleanupPhaseSchema = StorageCleanupPhaseSchema;
+    exports.StorageCleanupStatusInputSchema = StorageCleanupStatusInputSchema;
     exports.StorageEndDownloadInputSchema = EndDownloadInputSchema;
     exports.StorageFinalizeUploadInputSchema = FinalizeUploadInputSchema;
     exports.StorageLocationDeclarationSchema = StorageLocationDeclarationSchema;
@@ -252559,6 +253179,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.StorageMigrationPhaseSchema = StorageMigrationPhaseSchema;
     exports.StorageMigrationPlanSchema = StorageMigrationPlanSchema;
     exports.StorageMigrationResidueSchema = StorageMigrationResidueSchema;
+    exports.StorageMigrationSourcesSchema = StorageMigrationSourcesSchema;
     exports.StorageProviderInfoSchema = ProviderInfoSchema;
     exports.StorageReadChunkInputSchema = ReadChunkInputSchema;
     exports.StorageTestLocationResultSchema = TestLocationResultSchema;