@camstack/addon-remote-storage 1.2.75 → 1.2.77

package/dist/s3.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_shared = require("./shared-BFq0ZzN8.js");
+const require_shared = require("./shared-DW6PfRB-.js");
 let node_stream = require("node:stream");
 let _aws_sdk_client_s3 = require("@aws-sdk/client-s3");
 let _aws_sdk_lib_storage = require("@aws-sdk/lib-storage");

package/dist/s3.addon.mjs

@@ -1,4 +1,4 @@
-import { c as BaseAddon, i as rearmIdleAbort, n as getOptionalBasePath, o as scheduleIdleAbort, s as storageProviderCapability, t as createSessionId } from "./shared-CTsaqcNM.mjs";
+import { c as BaseAddon, i as rearmIdleAbort, n as getOptionalBasePath, o as scheduleIdleAbort, s as storageProviderCapability, t as createSessionId } from "./shared-NUBj0w5N.mjs";
 import { PassThrough } from "node:stream";
 import { DeleteObjectCommand, GetObjectCommand, HeadBucketCommand, HeadObjectCommand, ListObjectsV2Command, PutObjectCommand, S3Client } from "@aws-sdk/client-s3";
 import { Upload } from "@aws-sdk/lib-storage";

package/dist/sftp.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_shared = require("./shared-BFq0ZzN8.js");
+const require_shared = require("./shared-DW6PfRB-.js");
 let ssh2 = require("ssh2");
 let node_path = require("node:path");
 node_path = require_shared.__toESM(node_path);

package/dist/sftp.addon.mjs

@@ -1,4 +1,4 @@
-import { a as safeJoinRemotePath, c as BaseAddon, i as rearmIdleAbort, o as scheduleIdleAbort, r as getRequiredBasePath, s as storageProviderCapability, t as createSessionId } from "./shared-CTsaqcNM.mjs";
+import { a as safeJoinRemotePath, c as BaseAddon, i as rearmIdleAbort, o as scheduleIdleAbort, r as getRequiredBasePath, s as storageProviderCapability, t as createSessionId } from "./shared-NUBj0w5N.mjs";
 import { Client } from "ssh2";
 import * as path from "node:path";
 //#region src/providers/sftp/sftp-config-schema.ts

package/dist/{shared-BFq0ZzN8.js → shared-DW6PfRB-.js}

@@ -7959,13 +7959,28 @@ var RecordingBandSchema = object({
 	end: string().regex(HHMM),
 	mode: RecordingBandModeSchema,
 	triggers: RecordingBandTriggersSchema.optional(),
+	/**
+	* RETIRED (D381). A band no longer carries a pre-buffer of its own.
+	*
+	* It was the retroactive KEEP bound — which already-written segments survive
+	* a trigger — and it had to be at least as wide as the widest pre-roll the
+	* broker could serve, or the gate would delete the seconds the ring had just
+	* handed the writer. That "at least as wide as" is the tell: it was a second
+	* expression of the broker's retention, in different units, in a different
+	* addon, with an invariant the operator had to maintain by hand. The keep
+	* bound is now derived from the one prebuffer ceiling and there is nothing
+	* left to configure here.
+	*
+	* The key survives in the SHAPE so a config written before that record still
+	* parses and can be migrated deliberately — `RecordingBandSchema` is not
+	* strict, so simply deleting it would strip an operator's value in silence on
+	* the next save (the failure D380 came one commit from shipping). Nothing
+	* reads it: {@link stripRetiredBandPreBufferSec} removes it on load.
+	*/
 	preBufferSec: number().min(0).optional(),
 	postBufferSec: number().min(0).optional()
 });
-({
-	preBufferSec: 15,
-	postBufferSec: 30
-}).postBufferSec * 1e3;
+({ postBufferSec: 30 }).postBufferSec * 1e3;
 /**
 * Per-device retention overrides. Every field is optional; an unset or `0`
 * value inherits the node-wide recorder default. Only footage-lifetime limits
@@ -10542,12 +10557,30 @@ var BackupDestinationInfoSchema = object({
 	lastSuccessAt: number().optional(),
 	/** Newest-archive size from `manifests.json`, or undefined. */
 	lastSuccessSizeBytes: number().optional(),
-	/** Per-destination cron expression. Empty = manual-only (no schedule). */
+	/**
+	* Cron cadence(s) of the ENABLED schedules that fan out to this
+	* destination, comma-joined. Absent when no enabled schedule targets it
+	* — a destination nothing is scheduled to write to must not advertise a
+	* cadence (D384). This is never the `backup_destination_policies.cron`
+	* column: that per-location cron has scheduled nothing since 2026-07-28
+	* and reading it made a destination with a DISABLED schedule claim a
+	* nightly run.
+	*/
 	cron: string().optional(),
-	/** ms-epoch of next computed firing for this destination's cron, if any. */
+	/** ms-epoch of the next firing across those schedules (earliest), if any. */
 	nextRunAt: number().optional(),
-	/** ms-epoch of last successful scheduled run (mirrors policy.lastRunAt). */
-	lastRunAt: number().optional()
+	/**
+	* ms-epoch of the last time a run ATTEMPTED to write here — success or
+	* failure. Never a success stamp: pair it with `lastSuccessAt` (the
+	* newest archive that actually landed) and `lastError`.
+	*/
+	lastAttemptAt: number().optional(),
+	/**
+	* Why the last attempt failed, verbatim. Absent when the last attempt
+	* landed the archive. A destination that has never been written to has
+	* neither this nor `lastAttemptAt`.
+	*/
+	lastError: string().optional()
 });
 /**
 * Per-archive entry returned by `backup.listArchives({ destinationId })`.
@@ -10710,8 +10743,16 @@ var BackupScheduleSchema = object({
 	retentionCount: number().int().min(1).max(1e3),
 	/** Optional subset of source locations to include; omitted = all. */
 	dataSources: array(string()).readonly().optional(),
-	/** ms-epoch of last successful run. */
-	lastRunAt: number().optional(),
+	/**
+	* ms-epoch of the last tick that FIRED this schedule. Stamped before the
+	* archive runs (it is the dedupe anchor), so it says "attempted", never
+	* "succeeded" — a run refused by every destination stamps it too.
+	*/
+	lastAttemptAt: number().optional(),
+	/** ms-epoch of the last run of this schedule that landed at ≥1 destination. */
+	lastSuccessAt: number().optional(),
+	/** Why the last fired run failed, verbatim. Absent when it succeeded. */
+	lastError: string().optional(),
 	/** ms-epoch of next computed firing (read-only, filled on list). */
 	nextRunAt: number().optional()
 });
@@ -10760,14 +10801,7 @@ method(_void(), array(BackupDestinationInfoSchema).readonly(), { auth: "admin" }
 	locationId: string(),
 	enabled: boolean(),
 	retentionCount: number().int().min(1).max(1e3),
-	label: string().optional(),
-	/**
-	* Per-destination cron expression. Empty string clears the
-	* schedule (manual-only). Validated server-side via croner;
-	* malformed expressions reject the upsert with an actionable
-	* message.
-	*/
-	cron: string().optional()
+	label: string().optional()
 }), _void(), {
 	kind: "mutation",
 	auth: "admin"

package/dist/{shared-CTsaqcNM.mjs → shared-NUBj0w5N.mjs}

@@ -7936,13 +7936,28 @@ var RecordingBandSchema = object({
 	end: string().regex(HHMM),
 	mode: RecordingBandModeSchema,
 	triggers: RecordingBandTriggersSchema.optional(),
+	/**
+	* RETIRED (D381). A band no longer carries a pre-buffer of its own.
+	*
+	* It was the retroactive KEEP bound — which already-written segments survive
+	* a trigger — and it had to be at least as wide as the widest pre-roll the
+	* broker could serve, or the gate would delete the seconds the ring had just
+	* handed the writer. That "at least as wide as" is the tell: it was a second
+	* expression of the broker's retention, in different units, in a different
+	* addon, with an invariant the operator had to maintain by hand. The keep
+	* bound is now derived from the one prebuffer ceiling and there is nothing
+	* left to configure here.
+	*
+	* The key survives in the SHAPE so a config written before that record still
+	* parses and can be migrated deliberately — `RecordingBandSchema` is not
+	* strict, so simply deleting it would strip an operator's value in silence on
+	* the next save (the failure D380 came one commit from shipping). Nothing
+	* reads it: {@link stripRetiredBandPreBufferSec} removes it on load.
+	*/
 	preBufferSec: number().min(0).optional(),
 	postBufferSec: number().min(0).optional()
 });
-({
-	preBufferSec: 15,
-	postBufferSec: 30
-}).postBufferSec * 1e3;
+({ postBufferSec: 30 }).postBufferSec * 1e3;
 /**
 * Per-device retention overrides. Every field is optional; an unset or `0`
 * value inherits the node-wide recorder default. Only footage-lifetime limits
@@ -10519,12 +10534,30 @@ var BackupDestinationInfoSchema = object({
 	lastSuccessAt: number().optional(),
 	/** Newest-archive size from `manifests.json`, or undefined. */
 	lastSuccessSizeBytes: number().optional(),
-	/** Per-destination cron expression. Empty = manual-only (no schedule). */
+	/**
+	* Cron cadence(s) of the ENABLED schedules that fan out to this
+	* destination, comma-joined. Absent when no enabled schedule targets it
+	* — a destination nothing is scheduled to write to must not advertise a
+	* cadence (D384). This is never the `backup_destination_policies.cron`
+	* column: that per-location cron has scheduled nothing since 2026-07-28
+	* and reading it made a destination with a DISABLED schedule claim a
+	* nightly run.
+	*/
 	cron: string().optional(),
-	/** ms-epoch of next computed firing for this destination's cron, if any. */
+	/** ms-epoch of the next firing across those schedules (earliest), if any. */
 	nextRunAt: number().optional(),
-	/** ms-epoch of last successful scheduled run (mirrors policy.lastRunAt). */
-	lastRunAt: number().optional()
+	/**
+	* ms-epoch of the last time a run ATTEMPTED to write here — success or
+	* failure. Never a success stamp: pair it with `lastSuccessAt` (the
+	* newest archive that actually landed) and `lastError`.
+	*/
+	lastAttemptAt: number().optional(),
+	/**
+	* Why the last attempt failed, verbatim. Absent when the last attempt
+	* landed the archive. A destination that has never been written to has
+	* neither this nor `lastAttemptAt`.
+	*/
+	lastError: string().optional()
 });
 /**
 * Per-archive entry returned by `backup.listArchives({ destinationId })`.
@@ -10687,8 +10720,16 @@ var BackupScheduleSchema = object({
 	retentionCount: number().int().min(1).max(1e3),
 	/** Optional subset of source locations to include; omitted = all. */
 	dataSources: array(string()).readonly().optional(),
-	/** ms-epoch of last successful run. */
-	lastRunAt: number().optional(),
+	/**
+	* ms-epoch of the last tick that FIRED this schedule. Stamped before the
+	* archive runs (it is the dedupe anchor), so it says "attempted", never
+	* "succeeded" — a run refused by every destination stamps it too.
+	*/
+	lastAttemptAt: number().optional(),
+	/** ms-epoch of the last run of this schedule that landed at ≥1 destination. */
+	lastSuccessAt: number().optional(),
+	/** Why the last fired run failed, verbatim. Absent when it succeeded. */
+	lastError: string().optional(),
 	/** ms-epoch of next computed firing (read-only, filled on list). */
 	nextRunAt: number().optional()
 });
@@ -10737,14 +10778,7 @@ method(_void(), array(BackupDestinationInfoSchema).readonly(), { auth: "admin" }
 	locationId: string(),
 	enabled: boolean(),
 	retentionCount: number().int().min(1).max(1e3),
-	label: string().optional(),
-	/**
-	* Per-destination cron expression. Empty string clears the
-	* schedule (manual-only). Validated server-side via croner;
-	* malformed expressions reject the upsert with an actionable
-	* message.
-	*/
-	cron: string().optional()
+	label: string().optional()
 }), _void(), {
 	kind: "mutation",
 	auth: "admin"

package/dist/smb.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_shared = require("./shared-BFq0ZzN8.js");
+const require_shared = require("./shared-DW6PfRB-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");
 node_path = require_shared.__toESM(node_path);
@@ -225,6 +225,28 @@ function shareIdentity(input) {
 function pathSegments(remotePath) {
 	return remotePath.split("/").filter((s) => s.length > 0);
 }
+/**
+* Turn a directory path into the MASK `smbclient dir` needs to enumerate it.
+*
+* `samba-client`'s `list(x)` runs `smbclient -c 'dir x'`, and smbclient's
+* `dir` argument is a wildcard mask evaluated against the current directory —
+* it does NOT descend into a directory named by it. A bare directory path
+* therefore returns that directory's own entry, and an empty string returns
+* nothing at all, because an empty mask matches nothing.
+*
+* Measured on the hub, 2026-09-07: `backups:smb` held a 387 MB archive and a
+* `manifests.json`; `storage.list` answered `[]` and `storage.exists`
+* answered `false`, so every SMB upload was refused by its own post-transfer
+* "did it land?" check even though the bytes were intact on the share. The
+* unit suite was green because its fake client treated the argument as a
+* directory — the fake supplied the semantics production assumed and
+* smbclient does not have.
+*
+* @param dir `''` for the connection's basePath, else a relative directory.
+*/
+function listMaskFor(dir) {
+	return dir === "" ? "*" : `${dir}/*`;
+}
 //#endregion
 //#region src/providers/smb/smb-provider.ts
 /**
@@ -484,7 +506,7 @@ var SmbStorageProvider = class {
 		const client = await this.clientForLocation(location);
 		const dir = safeSmbRelativePath(prefix ?? "");
 		try {
-			return (await client.list(dir)).filter((e) => e.name !== "." && e.name !== "..").map((e) => dir === "" ? e.name : `${dir}/${e.name}`);
+			return (await client.list(listMaskFor(dir))).filter((e) => e.name !== "." && e.name !== "..").map((e) => dir === "" ? e.name : `${dir}/${e.name}`);
 		} catch (err) {
 			if (isNotFound(err)) return [];
 			this.logger.warn("smb-storage: list failed", { meta: {
@@ -682,14 +704,19 @@ var SmbStorageProvider = class {
 			...cfg.basePath !== "" ? { directory: cfg.basePath } : {}
 		});
 	}
-	/** One entry of a remote listing, or `null` when the path does not exist. */
+	/**
+	* One entry of a remote listing, or `null` when the path does not exist.
+	*
+	* Goes through {@link listMaskFor} — a bare directory path is NOT a
+	* listable argument for smbclient.
+	*/
 	async statRemote(location, relativePath) {
 		const client = await this.clientForLocation(location);
 		const target = safeSmbRelativePath(relativePath);
 		const dir = target.includes("/") ? target.slice(0, target.lastIndexOf("/")) : "";
 		const name = target.includes("/") ? target.slice(target.lastIndexOf("/") + 1) : target;
 		try {
-			return (await client.list(dir)).find((e) => e.name.toLowerCase() === name.toLowerCase()) ?? null;
+			return (await client.list(listMaskFor(dir))).find((e) => e.name.toLowerCase() === name.toLowerCase()) ?? null;
 		} catch (err) {
 			if (isNotFound(err)) return null;
 			throw err;

package/dist/smb.addon.mjs

@@ -1,4 +1,4 @@
-import { c as BaseAddon, i as rearmIdleAbort, o as scheduleIdleAbort, s as storageProviderCapability } from "./shared-CTsaqcNM.mjs";
+import { c as BaseAddon, i as rearmIdleAbort, o as scheduleIdleAbort, s as storageProviderCapability } from "./shared-NUBj0w5N.mjs";
 import { randomUUID } from "node:crypto";
 import * as path from "node:path";
 import * as fsp from "node:fs/promises";
@@ -218,6 +218,28 @@ function shareIdentity(input) {
 function pathSegments(remotePath) {
 	return remotePath.split("/").filter((s) => s.length > 0);
 }
+/**
+* Turn a directory path into the MASK `smbclient dir` needs to enumerate it.
+*
+* `samba-client`'s `list(x)` runs `smbclient -c 'dir x'`, and smbclient's
+* `dir` argument is a wildcard mask evaluated against the current directory —
+* it does NOT descend into a directory named by it. A bare directory path
+* therefore returns that directory's own entry, and an empty string returns
+* nothing at all, because an empty mask matches nothing.
+*
+* Measured on the hub, 2026-09-07: `backups:smb` held a 387 MB archive and a
+* `manifests.json`; `storage.list` answered `[]` and `storage.exists`
+* answered `false`, so every SMB upload was refused by its own post-transfer
+* "did it land?" check even though the bytes were intact on the share. The
+* unit suite was green because its fake client treated the argument as a
+* directory — the fake supplied the semantics production assumed and
+* smbclient does not have.
+*
+* @param dir `''` for the connection's basePath, else a relative directory.
+*/
+function listMaskFor(dir) {
+	return dir === "" ? "*" : `${dir}/*`;
+}
 //#endregion
 //#region src/providers/smb/smb-provider.ts
 /**
@@ -477,7 +499,7 @@ var SmbStorageProvider = class {
 		const client = await this.clientForLocation(location);
 		const dir = safeSmbRelativePath(prefix ?? "");
 		try {
-			return (await client.list(dir)).filter((e) => e.name !== "." && e.name !== "..").map((e) => dir === "" ? e.name : `${dir}/${e.name}`);
+			return (await client.list(listMaskFor(dir))).filter((e) => e.name !== "." && e.name !== "..").map((e) => dir === "" ? e.name : `${dir}/${e.name}`);
 		} catch (err) {
 			if (isNotFound(err)) return [];
 			this.logger.warn("smb-storage: list failed", { meta: {
@@ -675,14 +697,19 @@ var SmbStorageProvider = class {
 			...cfg.basePath !== "" ? { directory: cfg.basePath } : {}
 		});
 	}
-	/** One entry of a remote listing, or `null` when the path does not exist. */
+	/**
+	* One entry of a remote listing, or `null` when the path does not exist.
+	*
+	* Goes through {@link listMaskFor} — a bare directory path is NOT a
+	* listable argument for smbclient.
+	*/
 	async statRemote(location, relativePath) {
 		const client = await this.clientForLocation(location);
 		const target = safeSmbRelativePath(relativePath);
 		const dir = target.includes("/") ? target.slice(0, target.lastIndexOf("/")) : "";
 		const name = target.includes("/") ? target.slice(target.lastIndexOf("/") + 1) : target;
 		try {
-			return (await client.list(dir)).find((e) => e.name.toLowerCase() === name.toLowerCase()) ?? null;
+			return (await client.list(listMaskFor(dir))).find((e) => e.name.toLowerCase() === name.toLowerCase()) ?? null;
 		} catch (err) {
 			if (isNotFound(err)) return null;
 			throw err;

package/dist/webdav.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_shared = require("./shared-BFq0ZzN8.js");
+const require_shared = require("./shared-DW6PfRB-.js");
 let node_stream = require("node:stream");
 let webdav = require("webdav");
 //#region src/providers/webdav/webdav-config-schema.ts

package/dist/webdav.addon.mjs

@@ -1,4 +1,4 @@
-import { a as safeJoinRemotePath, c as BaseAddon, i as rearmIdleAbort, o as scheduleIdleAbort, r as getRequiredBasePath, s as storageProviderCapability, t as createSessionId } from "./shared-CTsaqcNM.mjs";
+import { a as safeJoinRemotePath, c as BaseAddon, i as rearmIdleAbort, o as scheduleIdleAbort, r as getRequiredBasePath, s as storageProviderCapability, t as createSessionId } from "./shared-NUBj0w5N.mjs";
 import { PassThrough } from "node:stream";
 import { AuthType, createClient } from "webdav";
 //#region src/providers/webdav/webdav-config-schema.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-remote-storage",
-  "version": "1.2.75",
+  "version": "1.2.77",
   "description": "Remote storage providers (SFTP, S3, WebDAV, SMB) — unifies remote backends behind the storage-provider cap",
   "keywords": [
     "camstack",