@camstack/system 1.2.19 → 1.2.21

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.d.ts

@@ -3,6 +3,15 @@ export declare class BackupOrchestratorAddon extends BaseAddon<Record<string, ne
     private systemBackup;
     private policies;
     private dataDir;
+    /**
+     * Transient build buffer for archive fan-out. The tar is built here
+     * ONCE, streamed to every destination via the storage cap's chunked
+     * upload, then removed. Lives in the addon's private `ctx.dataDir`
+     * (never `api.storage.resolve`, per the AddonContext contract) — a
+     * `cache` storage location is never declared, so resolving one threw
+     * and aborted every run before a byte was written.
+     */
+    private stagingDir;
     private scheduleTimer;
     /**
      * Baseline used as the "after" anchor when a policy has a cron but
@@ -47,12 +56,13 @@ export declare class BackupOrchestratorAddon extends BaseAddon<Record<string, ne
      * unreachable destination doesn't blank out the whole UI.
      */
     private aggregatedList;
+    private stagingPath;
     /**
-     * Build a single archive in the `cache` storage location, then push
+     * Build a single archive in the private staging dir, then push
      * it to every selected destination via the storage cap's chunked
      * upload protocol. Per-destination errors are logged and counted
      * via allSettled semantics — one bad sink doesn't kill the run. The
-     * cache file is deleted in `finally` so a crash mid-fanout doesn't
+     * staging file is deleted in `finally` so a crash mid-fanout doesn't
      * leak.
      */
     private triggerBackup;
@@ -99,8 +109,8 @@ export declare class BackupOrchestratorAddon extends BaseAddon<Record<string, ne
     /**
      * Schedule a restore for the next boot. Pulls the archive bytes
      * down from the destination's storage location via the chunked-
-     * download protocol into the `cache` location, then writes the
-     * usual restore marker against the cached path so the boot-time
+     * download protocol into the private staging dir, then writes the
+     * usual restore marker against the staged path so the boot-time
      * apply hook (in server-backend launcher) extracts before any
      * addon starts.
      *

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3130,13 +3130,20 @@ var SystemBackupService = class {
 		try {
 			const stagedInDataDir = node_path.join(this.dataDir, ARCHIVE_MANIFEST_NAME);
 			node_fs.copyFileSync(manifestStagePath, stagedInDataDir);
+			const stagingRel = node_path.relative(this.dataDir, node_path.dirname(opts.archivePath));
+			const excludePrefix = stagingRel && !stagingRel.startsWith("..") && !node_path.isAbsolute(stagingRel) ? stagingRel : null;
 			try {
 				await Kn({
 					file: opts.archivePath,
 					gzip: true,
 					cwd: this.dataDir,
 					follow: true,
-					portable: true
+					portable: true,
+					filter: (entryPath) => {
+						if (!excludePrefix) return true;
+						const norm = entryPath.replace(/^\.\//, "").replace(/\/+$/, "");
+						return norm !== excludePrefix && !norm.startsWith(`${excludePrefix}/`);
+					}
 				}, [ARCHIVE_MANIFEST_NAME, ...present]);
 			} finally {
 				try {
@@ -4587,8 +4594,8 @@ function previewNextRuns(cron, count, after) {
 * that list with the `backup_destination_policies` table to surface
 * `enabled` / `retentionCount` / `label`. The actual archive bytes
 * travel through `api.storage.beginUpload` / `writeChunk` /
-* `finalizeUpload`, with the staging archive built into the `cache`
-* location.
+* `finalizeUpload`, with the staging archive built into the addon's
+* private `ctx.dataDir/staging` dir.
 */
 /**
 * Hardcoded seed for newly-discovered `backups` locations. Operators
@@ -4636,6 +4643,15 @@ var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 	systemBackup = null;
 	policies = null;
 	dataDir = "";
+	/**
+	* Transient build buffer for archive fan-out. The tar is built here
+	* ONCE, streamed to every destination via the storage cap's chunked
+	* upload, then removed. Lives in the addon's private `ctx.dataDir`
+	* (never `api.storage.resolve`, per the AddonContext contract) — a
+	* `cache` storage location is never declared, so resolving one threw
+	* and aborted every run before a byte was written.
+	*/
+	stagingDir = "";
 	scheduleTimer = null;
 	/**
 	* Baseline used as the "after" anchor when a policy has a cron but
@@ -4650,6 +4666,7 @@ var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 	}
 	async onInitialize() {
 		this.dataDir = this.ctx.nodeDataDir;
+		this.stagingDir = node_path.join(this.ctx.dataDir, "staging");
 		this.systemBackup = new SystemBackupService(this.dataDir, this.ctx.logger);
 		this.policies = this.resolvePolicyService();
 		if (this.policies) try {
@@ -4826,12 +4843,16 @@ var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 		}
 		return out;
 	}
+	async stagingPath(filename) {
+		await node_fs_promises.mkdir(this.stagingDir, { recursive: true });
+		return node_path.join(this.stagingDir, filename);
+	}
 	/**
-	* Build a single archive in the `cache` storage location, then push
+	* Build a single archive in the private staging dir, then push
 	* it to every selected destination via the storage cap's chunked
 	* upload protocol. Per-destination errors are logged and counted
 	* via allSettled semantics — one bad sink doesn't kill the run. The
-	* cache file is deleted in `finally` so a crash mid-fanout doesn't
+	* staging file is deleted in `finally` so a crash mid-fanout doesn't
 	* leak.
 	*/
 	async triggerBackup(input) {
@@ -4844,11 +4865,7 @@ var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 		const policies = await this.loadPoliciesIndexed(targets.map((t) => t.id));
 		const archiveId = (0, node_crypto.randomUUID)();
 		const archiveFilename = `${archiveId}.tar.gz`;
-		const cacheRelativePath = `${archiveId}.tar.gz`;
-		const cachePath = await this.ctx.api.storage.resolve.query({
-			location: "cache",
-			relativePath: cacheRelativePath
-		});
+		const cachePath = await this.stagingPath(archiveFilename);
 		const result = await this.systemBackup.createArchive({
 			archivePath: cachePath,
 			...input?.locations ? { locations: input.locations } : {}
@@ -5092,8 +5109,8 @@ var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 	/**
 	* Schedule a restore for the next boot. Pulls the archive bytes
 	* down from the destination's storage location via the chunked-
-	* download protocol into the `cache` location, then writes the
-	* usual restore marker against the cached path so the boot-time
+	* download protocol into the private staging dir, then writes the
+	* usual restore marker against the staged path so the boot-time
 	* apply hook (in server-backend launcher) extracts before any
 	* addon starts.
 	*
@@ -5104,10 +5121,7 @@ var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 		if (!this.systemBackup) throw new Error("orchestrator not initialized");
 		const entry = (await readLocationManifest(this.storageApi(), input.destinationId)).archives.find((a) => a.id === input.backupId);
 		if (!entry) throw new Error(`backup restore: backup "${input.backupId}" not found at location "${input.destinationId}"`);
-		const cachePath = await this.ctx.api.storage.resolve.query({
-			location: "cache",
-			relativePath: `restore-${input.backupId}.tar.gz`
-		});
+		const cachePath = await this.stagingPath(`restore-${input.backupId}.tar.gz`);
 		await downloadArchiveToCache({
 			api: this.ctx.api.storage,
 			locationId: input.destinationId,

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -3115,13 +3115,20 @@ var SystemBackupService = class {
 		try {
 			const stagedInDataDir = path$1.join(this.dataDir, ARCHIVE_MANIFEST_NAME);
 			fs.copyFileSync(manifestStagePath, stagedInDataDir);
+			const stagingRel = path$1.relative(this.dataDir, path$1.dirname(opts.archivePath));
+			const excludePrefix = stagingRel && !stagingRel.startsWith("..") && !path$1.isAbsolute(stagingRel) ? stagingRel : null;
 			try {
 				await Kn({
 					file: opts.archivePath,
 					gzip: true,
 					cwd: this.dataDir,
 					follow: true,
-					portable: true
+					portable: true,
+					filter: (entryPath) => {
+						if (!excludePrefix) return true;
+						const norm = entryPath.replace(/^\.\//, "").replace(/\/+$/, "");
+						return norm !== excludePrefix && !norm.startsWith(`${excludePrefix}/`);
+					}
 				}, [ARCHIVE_MANIFEST_NAME, ...present]);
 			} finally {
 				try {
@@ -4572,8 +4579,8 @@ function previewNextRuns(cron, count, after) {
 * that list with the `backup_destination_policies` table to surface
 * `enabled` / `retentionCount` / `label`. The actual archive bytes
 * travel through `api.storage.beginUpload` / `writeChunk` /
-* `finalizeUpload`, with the staging archive built into the `cache`
-* location.
+* `finalizeUpload`, with the staging archive built into the addon's
+* private `ctx.dataDir/staging` dir.
 */
 /**
 * Hardcoded seed for newly-discovered `backups` locations. Operators
@@ -4621,6 +4628,15 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 	systemBackup = null;
 	policies = null;
 	dataDir = "";
+	/**
+	* Transient build buffer for archive fan-out. The tar is built here
+	* ONCE, streamed to every destination via the storage cap's chunked
+	* upload, then removed. Lives in the addon's private `ctx.dataDir`
+	* (never `api.storage.resolve`, per the AddonContext contract) — a
+	* `cache` storage location is never declared, so resolving one threw
+	* and aborted every run before a byte was written.
+	*/
+	stagingDir = "";
 	scheduleTimer = null;
 	/**
 	* Baseline used as the "after" anchor when a policy has a cron but
@@ -4635,6 +4651,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 	}
 	async onInitialize() {
 		this.dataDir = this.ctx.nodeDataDir;
+		this.stagingDir = path$1.join(this.ctx.dataDir, "staging");
 		this.systemBackup = new SystemBackupService(this.dataDir, this.ctx.logger);
 		this.policies = this.resolvePolicyService();
 		if (this.policies) try {
@@ -4811,12 +4828,16 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 		}
 		return out;
 	}
+	async stagingPath(filename) {
+		await fsp.mkdir(this.stagingDir, { recursive: true });
+		return path$1.join(this.stagingDir, filename);
+	}
 	/**
-	* Build a single archive in the `cache` storage location, then push
+	* Build a single archive in the private staging dir, then push
 	* it to every selected destination via the storage cap's chunked
 	* upload protocol. Per-destination errors are logged and counted
 	* via allSettled semantics — one bad sink doesn't kill the run. The
-	* cache file is deleted in `finally` so a crash mid-fanout doesn't
+	* staging file is deleted in `finally` so a crash mid-fanout doesn't
 	* leak.
 	*/
 	async triggerBackup(input) {
@@ -4829,11 +4850,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 		const policies = await this.loadPoliciesIndexed(targets.map((t) => t.id));
 		const archiveId = randomUUID();
 		const archiveFilename = `${archiveId}.tar.gz`;
-		const cacheRelativePath = `${archiveId}.tar.gz`;
-		const cachePath = await this.ctx.api.storage.resolve.query({
-			location: "cache",
-			relativePath: cacheRelativePath
-		});
+		const cachePath = await this.stagingPath(archiveFilename);
 		const result = await this.systemBackup.createArchive({
 			archivePath: cachePath,
 			...input?.locations ? { locations: input.locations } : {}
@@ -5077,8 +5094,8 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 	/**
 	* Schedule a restore for the next boot. Pulls the archive bytes
 	* down from the destination's storage location via the chunked-
-	* download protocol into the `cache` location, then writes the
-	* usual restore marker against the cached path so the boot-time
+	* download protocol into the private staging dir, then writes the
+	* usual restore marker against the staged path so the boot-time
 	* apply hook (in server-backend launcher) extracts before any
 	* addon starts.
 	*
@@ -5089,10 +5106,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 		if (!this.systemBackup) throw new Error("orchestrator not initialized");
 		const entry = (await readLocationManifest(this.storageApi(), input.destinationId)).archives.find((a) => a.id === input.backupId);
 		if (!entry) throw new Error(`backup restore: backup "${input.backupId}" not found at location "${input.destinationId}"`);
-		const cachePath = await this.ctx.api.storage.resolve.query({
-			location: "cache",
-			relativePath: `restore-${input.backupId}.tar.gz`
-		});
+		const cachePath = await this.stagingPath(`restore-${input.backupId}.tar.gz`);
 		await downloadArchiveToCache({
 			api: this.ctx.api.storage,
 			locationId: input.destinationId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.19",
+  "version": "1.2.21",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",