| /proc/prefs_import_read_upload | Shared upload validation. Policy-specific metadata filtering happens after this succeeds.
Returns an error, or the decoded tree and byte count; never logs uploaded JSON or decoder exceptions. |
|---|
| /proc/prefs_import_invalidate_cache | After successful replacement, old UI/disconnect callbacks must only write to memory. |
|---|
| /proc/prefs_import_replace | Write and verify the candidate before touching the destination. Returns an error, or null on success. |
|---|
| /proc/prefs_import_backup | Player backups rotate independently of retained staff/legacy backups. |
|---|
| /proc/prefs_import_admin_backup | Staff backups are retained until explicitly removed; never overwrite a numbered backup after a gap. |
|---|
