@camstack/system 1.2.20 → 1.2.22

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { at as BaseAddon, jt as EventCategory, y as backupCapability } from "../../dist-DmQ6thmF.mjs";
+import { at as BaseAddon, jt as EventCategory, y as backupCapability } from "../../dist-C9_XdXl5.mjs";
 import * as fs from "node:fs";
 import Kt from "node:fs";
 import * as path$1 from "node:path";
@@ -3115,13 +3115,20 @@ var SystemBackupService = class {
 		try {
 			const stagedInDataDir = path$1.join(this.dataDir, ARCHIVE_MANIFEST_NAME);
 			fs.copyFileSync(manifestStagePath, stagedInDataDir);
+			const stagingRel = path$1.relative(this.dataDir, path$1.dirname(opts.archivePath));
+			const excludePrefix = stagingRel && !stagingRel.startsWith("..") && !path$1.isAbsolute(stagingRel) ? stagingRel : null;
 			try {
 				await Kn({
 					file: opts.archivePath,
 					gzip: true,
 					cwd: this.dataDir,
 					follow: true,
-					portable: true
+					portable: true,
+					filter: (entryPath) => {
+						if (!excludePrefix) return true;
+						const norm = entryPath.replace(/^\.\//, "").replace(/\/+$/, "");
+						return norm !== excludePrefix && !norm.startsWith(`${excludePrefix}/`);
+					}
 				}, [ARCHIVE_MANIFEST_NAME, ...present]);
 			} finally {
 				try {
@@ -3388,1166 +3395,1302 @@ function entryMatchesLocation(entryPath, prefix) {
 	return entryPath === prefix || entryPath.startsWith(`${prefix}/`);
 }
 //#endregion
-//#region src/builtins/backup-orchestrator/destination-policy.ts
-var TABLE_NAME = "backup_destination_policies";
-var BACKUP_DESTINATION_POLICIES_SCHEMA = { columns: [
-	{
-		name: "location_id",
-		type: "TEXT",
-		primaryKey: true
-	},
-	{
-		name: "enabled",
-		type: "INTEGER",
-		notNull: true,
-		defaultValue: 1
-	},
-	{
-		name: "retention_count",
-		type: "INTEGER",
-		notNull: true,
-		defaultValue: 7
-	},
-	{
-		name: "label",
-		type: "TEXT"
-	},
-	{
-		name: "cron",
-		type: "TEXT"
-	},
-	{
-		name: "last_run_at",
-		type: "INTEGER"
-	}
-] };
-var BackupDestinationPolicyService = class {
-	backend;
-	tableEnsured = false;
-	constructor(backend) {
-		this.backend = backend;
+//#region ../../node_modules/croner/dist/croner.js
+function T(s) {
+	return Date.UTC(s.y, s.m - 1, s.d, s.h, s.i, s.s);
+}
+function D(s, e) {
+	return s.y === e.y && s.m === e.m && s.d === e.d && s.h === e.h && s.i === e.i && s.s === e.s;
+}
+function A(s, e) {
+	let t = new Date(Date.parse(s));
+	if (isNaN(t)) throw new Error("Invalid ISO8601 passed to timezone parser.");
+	let r = s.substring(9);
+	return r.includes("Z") || r.includes("+") || r.includes("-") ? b(t.getUTCFullYear(), t.getUTCMonth() + 1, t.getUTCDate(), t.getUTCHours(), t.getUTCMinutes(), t.getUTCSeconds(), "Etc/UTC") : b(t.getFullYear(), t.getMonth() + 1, t.getDate(), t.getHours(), t.getMinutes(), t.getSeconds(), e);
+}
+function v(s, e, t) {
+	return k(A(s, e), t);
+}
+function k(s, e) {
+	let t = new Date(T(s)), r = g(t, s.tz), a = T(s) - T(r), o = new Date(t.getTime() + a), h = g(o, s.tz);
+	if (D(h, s)) {
+		let u = /* @__PURE__ */ new Date(o.getTime() - 36e5);
+		return D(g(u, s.tz), s) ? u : o;
 	}
-	/**
-	* Lazy `ensureTable` — called from every read/write path. The
-	* settings backend's own `ensureTable` is idempotent (additive
-	* migration), so repeated calls collapse to a no-op after the first.
-	* This keeps the constructor synchronous and avoids a separate
-	* `initialize()` step that callers could forget.
-	*/
-	async initialize() {
-		await this.ensureTable();
+	let l = new Date(o.getTime() + T(s) - T(h));
+	if (D(g(l, s.tz), s)) return l;
+	if (e) throw new Error("Invalid date passed to fromTZ()");
+	return o.getTime() > l.getTime() ? o : l;
+}
+function g(s, e) {
+	let t, r;
+	try {
+		t = new Intl.DateTimeFormat("en-US", {
+			timeZone: e,
+			year: "numeric",
+			month: "numeric",
+			day: "numeric",
+			hour: "numeric",
+			minute: "numeric",
+			second: "numeric",
+			hour12: !1
+		}), r = t.formatToParts(s);
+	} catch (i) {
+		let a = i instanceof Error ? i.message : String(i);
+		throw new RangeError(`toTZ: Invalid timezone '${e}' or date. Please provide a valid IANA timezone (e.g., 'America/New_York', 'Europe/Stockholm'). Original error: ${a}`);
 	}
-	async ensureTable() {
-		if (this.tableEnsured) return;
-		if (!this.backend.ensureTable) throw new Error("BackupDestinationPolicyService: settings backend does not implement ensureTable — expected the SQLite settings backend, got a backend without structured-table support");
-		await this.backend.ensureTable(TABLE_NAME, BACKUP_DESTINATION_POLICIES_SCHEMA);
-		this.tableEnsured = true;
+	let n = {
+		year: 0,
+		month: 0,
+		day: 0,
+		hour: 0,
+		minute: 0,
+		second: 0
+	};
+	for (let i of r) (i.type === "year" || i.type === "month" || i.type === "day" || i.type === "hour" || i.type === "minute" || i.type === "second") && (n[i.type] = parseInt(i.value, 10));
+	if (isNaN(n.year) || isNaN(n.month) || isNaN(n.day) || isNaN(n.hour) || isNaN(n.minute) || isNaN(n.second)) throw new Error(`toTZ: Failed to parse all date components from timezone '${e}'. This may indicate an invalid date or timezone configuration. Parsed components: ${JSON.stringify(n)}`);
+	return n.hour === 24 && (n.hour = 0), {
+		y: n.year,
+		m: n.month,
+		d: n.day,
+		h: n.hour,
+		i: n.minute,
+		s: n.second,
+		tz: e
+	};
+}
+function b(s, e, t, r, n, i, a) {
+	return {
+		y: s,
+		m: e,
+		d: t,
+		h: r,
+		i: n,
+		s: i,
+		tz: a
+	};
+}
+var O = [
+	1,
+	2,
+	4,
+	8,
+	16
+], C = class {
+	pattern;
+	timezone;
+	mode;
+	alternativeWeekdays;
+	sloppyRanges;
+	second;
+	minute;
+	hour;
+	day;
+	month;
+	dayOfWeek;
+	year;
+	lastDayOfMonth;
+	lastWeekday;
+	nearestWeekdays;
+	starDOM;
+	starDOW;
+	starYear;
+	useAndLogic;
+	constructor(e, t, r) {
+		this.pattern = e, this.timezone = t, this.mode = r?.mode ?? "auto", this.alternativeWeekdays = r?.alternativeWeekdays ?? !1, this.sloppyRanges = r?.sloppyRanges ?? !1, this.second = Array(60).fill(0), this.minute = Array(60).fill(0), this.hour = Array(24).fill(0), this.day = Array(31).fill(0), this.month = Array(12).fill(0), this.dayOfWeek = Array(7).fill(0), this.year = Array(1e4).fill(0), this.lastDayOfMonth = !1, this.lastWeekday = !1, this.nearestWeekdays = Array(31).fill(0), this.starDOM = !1, this.starDOW = !1, this.starYear = !1, this.useAndLogic = !1, this.parse();
 	}
-	async list() {
-		await this.ensureTable();
-		if (!this.backend.tableQuery) return [];
-		const rows = await this.backend.tableQuery(TABLE_NAME, { orderBy: {
-			field: "location_id",
-			direction: "asc"
-		} });
-		const out = [];
-		for (const row of rows) {
-			const mapped = mapRowToPolicy(row);
-			if (mapped) out.push(mapped);
+	parse() {
+		if (!(typeof this.pattern == "string" || this.pattern instanceof String)) throw new TypeError("CronPattern: Pattern has to be of type string.");
+		this.pattern.indexOf("@") >= 0 && (this.pattern = this.handleNicknames(this.pattern).trim());
+		let e = this.pattern.match(/\S+/g) || [""], t = e.length;
+		if (e.length < 5 || e.length > 7) throw new TypeError("CronPattern: invalid configuration format ('" + this.pattern + "'), exactly five, six, or seven space separated parts are required.");
+		if (this.mode !== "auto") {
+			let n;
+			switch (this.mode) {
+				case "5-part":
+					n = 5;
+					break;
+				case "6-part":
+					n = 6;
+					break;
+				case "7-part":
+					n = 7;
+					break;
+				case "5-or-6-parts":
+					n = [5, 6];
+					break;
+				case "6-or-7-parts":
+					n = [6, 7];
+					break;
+				default: n = 0;
+			}
+			if (!(Array.isArray(n) ? n.includes(t) : t === n)) {
+				let a = Array.isArray(n) ? n.join(" or ") : n.toString();
+				throw new TypeError(`CronPattern: mode '${this.mode}' requires exactly ${a} parts, but pattern '${this.pattern}' has ${t} parts.`);
+			}
 		}
-		return out;
+		if (e.length === 5 && e.unshift("0"), e.length === 6 && e.push("*"), e[3].toUpperCase() === "LW" ? (this.lastWeekday = !0, e[3] = "") : e[3].toUpperCase().indexOf("L") >= 0 && (e[3] = e[3].replace(/L/gi, ""), this.lastDayOfMonth = !0), e[3] == "*" && (this.starDOM = !0), e[6] == "*" && (this.starYear = !0), e[4].length >= 3 && (e[4] = this.replaceAlphaMonths(e[4])), e[5].length >= 3 && (e[5] = this.alternativeWeekdays ? this.replaceAlphaDaysQuartz(e[5]) : this.replaceAlphaDays(e[5])), e[5].startsWith("+") && (this.useAndLogic = !0, e[5] = e[5].substring(1), e[5] === "")) throw new TypeError("CronPattern: Day-of-week field cannot be empty after '+' modifier.");
+		switch (e[5] == "*" && (this.starDOW = !0), this.pattern.indexOf("?") >= 0 && (e[0] = e[0].replace(/\?/g, "*"), e[1] = e[1].replace(/\?/g, "*"), e[2] = e[2].replace(/\?/g, "*"), e[3] = e[3].replace(/\?/g, "*"), e[4] = e[4].replace(/\?/g, "*"), e[5] = e[5].replace(/\?/g, "*"), e[6] && (e[6] = e[6].replace(/\?/g, "*"))), this.mode) {
+			case "5-part":
+				e[0] = "0", e[6] = "*";
+				break;
+			case "6-part":
+				e[6] = "*";
+				break;
+			case "5-or-6-parts":
+				e[6] = "*";
+				break;
+			case "6-or-7-parts": break;
+			case "7-part":
+			case "auto": break;
+		}
+		this.throwAtIllegalCharacters(e), this.partToArray("second", e[0], 0, 1), this.partToArray("minute", e[1], 0, 1), this.partToArray("hour", e[2], 0, 1), this.partToArray("day", e[3], -1, 1), this.partToArray("month", e[4], -1, 1);
+		let r = this.alternativeWeekdays ? -1 : 0;
+		this.partToArray("dayOfWeek", e[5], r, 63), this.partToArray("year", e[6], 0, 1), !this.alternativeWeekdays && this.dayOfWeek[7] && (this.dayOfWeek[0] = this.dayOfWeek[7]);
 	}
-	async get(locationId) {
-		await this.ensureTable();
-		if (!this.backend.tableGet) return null;
-		const row = await this.backend.tableGet(TABLE_NAME, { location_id: locationId });
-		return row ? mapRowToPolicy(row) : null;
+	partToArray(e, t, r, n) {
+		let i = this[e], a = e === "day" && this.lastDayOfMonth, o = e === "day" && this.lastWeekday;
+		if (t === "" && !a && !o) throw new TypeError("CronPattern: configuration entry " + e + " (" + t + ") is empty, check for trailing spaces.");
+		if (t === "*") return i.fill(n);
+		let h = t.split(",");
+		if (h.length > 1) for (let l = 0; l < h.length; l++) this.partToArray(e, h[l], r, n);
+		else t.indexOf("-") !== -1 && t.indexOf("/") !== -1 ? this.handleRangeWithStepping(t, e, r, n) : t.indexOf("-") !== -1 ? this.handleRange(t, e, r, n) : t.indexOf("/") !== -1 ? this.handleStepping(t, e, r, n) : t !== "" && this.handleNumber(t, e, r, n);
 	}
-	/**
-	* Replace-or-insert. Implemented as `delete` + `insert` (mirrors the
-	* `SqliteLocationStore` contract) so backends that don't surface
-	* `tableUpdate` still work.
-	*/
-	async upsert(p) {
-		await this.ensureTable();
-		if (!this.backend.tableDelete || !this.backend.tableInsert) throw new Error("BackupDestinationPolicyService: backend missing tableDelete/tableInsert");
-		await this.backend.tableDelete(TABLE_NAME, { location_id: p.locationId });
-		await this.backend.tableInsert(TABLE_NAME, mapPolicyToRow(p));
+	throwAtIllegalCharacters(e) {
+		for (let t = 0; t < e.length; t++) if ((t === 3 ? /[^/*0-9,\-WwLl]+/ : t === 5 ? /[^/*0-9,\-#Ll]+/ : /[^/*0-9,\-]+/).test(e[t])) throw new TypeError("CronPattern: configuration entry " + t + " (" + e[t] + ") contains illegal characters.");
 	}
-	async delete(locationId) {
-		await this.ensureTable();
-		if (!this.backend.tableDelete) throw new Error("BackupDestinationPolicyService: backend missing tableDelete");
-		await this.backend.tableDelete(TABLE_NAME, { location_id: locationId });
+	handleNumber(e, t, r, n) {
+		let i = this.extractNth(e, t), a = e.toUpperCase().includes("W");
+		if (t !== "day" && a) throw new TypeError("CronPattern: Nearest weekday modifier (W) only allowed in day-of-month.");
+		a && (t = "nearestWeekdays");
+		let o = parseInt(i[0], 10) + r;
+		if (isNaN(o)) throw new TypeError("CronPattern: " + t + " is not a number: '" + e + "'");
+		this.setPart(t, o, i[1] || n);
 	}
-	/**
-	* Auto-create a default policy for a `backups` location seen for the
-	* first time (returns the existing policy unchanged when present).
-	* The orchestrator calls this lazily on the first `listDestinations`
-	* pass so newly-added storage locations are surfaced as enabled
-	* destinations without an explicit configuration step.
-	*
-	* Defaults are passed by the orchestrator (currently:
-	* `retentionCount=7` + `cron='0 3 * * *'`) so a fresh destination
-	* starts running daily at 03:00 with 7 archives kept. Operator can
-	* tune both inline on the destinations table.
-	*/
-	async ensureDefault(locationId, defaults) {
-		const existing = await this.get(locationId);
-		if (existing) return existing;
-		const fresh = {
-			locationId,
-			enabled: true,
-			retentionCount: defaults.retentionCount,
-			...defaults.cron !== void 0 ? { cron: defaults.cron } : {}
-		};
-		await this.upsert(fresh);
-		return fresh;
+	setPart(e, t, r) {
+		if (!Object.prototype.hasOwnProperty.call(this, e)) throw new TypeError("CronPattern: Invalid part specified: " + e);
+		if (e === "dayOfWeek") {
+			if (t === 7 && (t = 0), t < 0 || t > 6) throw new RangeError("CronPattern: Invalid value for dayOfWeek: " + t);
+			this.setNthWeekdayOfMonth(t, r);
+			return;
+		}
+		if (e === "second" || e === "minute") {
+			if (t < 0 || t >= 60) throw new RangeError("CronPattern: Invalid value for " + e + ": " + t);
+		} else if (e === "hour") {
+			if (t < 0 || t >= 24) throw new RangeError("CronPattern: Invalid value for " + e + ": " + t);
+		} else if (e === "day" || e === "nearestWeekdays") {
+			if (t < 0 || t >= 31) throw new RangeError("CronPattern: Invalid value for " + e + ": " + t);
+		} else if (e === "month") {
+			if (t < 0 || t >= 12) throw new RangeError("CronPattern: Invalid value for " + e + ": " + t);
+		} else if (e === "year" && (t < 1 || t >= 1e4)) throw new RangeError("CronPattern: Invalid value for " + e + ": " + t + " (supported range: 1-9999)");
+		this[e][t] = r;
 	}
-};
-function mapPolicyToRow(p) {
-	return {
-		location_id: p.locationId,
-		enabled: p.enabled ? 1 : 0,
-		retention_count: p.retentionCount,
-		label: p.label ?? null,
-		cron: p.cron ?? null,
-		last_run_at: p.lastRunAt ?? null
-	};
-}
-/**
-* Decode a row pulled from the structured table. Defensive against
-* schema drift / partial migrations: returns `null` on missing
-* `location_id` so corrupt rows skip the result list rather than
-* throwing the whole orchestrator down at boot.
-*/
-function mapRowToPolicy(row) {
-	const locationId = String(row["location_id"] ?? "");
-	if (!locationId) return null;
-	const labelRaw = row["label"];
-	const label = typeof labelRaw === "string" && labelRaw.length > 0 ? labelRaw : void 0;
-	const cronRaw = row["cron"];
-	const cron = typeof cronRaw === "string" && cronRaw.length > 0 ? cronRaw : void 0;
-	const lastRunRaw = row["last_run_at"];
-	const lastRunAt = typeof lastRunRaw === "number" && lastRunRaw > 0 ? lastRunRaw : void 0;
-	return {
-		locationId,
-		enabled: row["enabled"] === 1 || row["enabled"] === true,
-		retentionCount: Number(row["retention_count"] ?? 0),
-		...label !== void 0 ? { label } : {},
-		...cron !== void 0 ? { cron } : {},
-		...lastRunAt !== void 0 ? { lastRunAt } : {}
-	};
-}
-//#endregion
-//#region src/builtins/backup-orchestrator/manifest-store.ts
-/** File path (relative to the location root) where the index lives. */
-var MANIFESTS_FILENAME = "manifests.json";
-/**
-* Read the per-location manifest. Returns an empty manifest on first
-* use (when `manifests.json` doesn't exist) or when the file is
-* unreadable / corrupt — operators see destination state degrade
-* gracefully rather than the orchestrator crashing.
-*/
-async function readLocationManifest(api, locationId) {
-	if (!await api.exists.query({
-		location: locationId,
-		relativePath: "manifests.json"
-	}).catch(() => false)) return EMPTY_MANIFEST;
-	let bytes;
-	try {
-		bytes = await api.read.query({
-			location: locationId,
-			relativePath: MANIFESTS_FILENAME
-		});
-	} catch {
-		return EMPTY_MANIFEST;
+	validateNotNaN(e, t) {
+		if (isNaN(e)) throw new TypeError(t);
 	}
-	return parseManifestBytes(bytes);
-}
-async function writeLocationManifest(api, locationId, manifest) {
-	const json = JSON.stringify(manifest, null, 2);
-	const bytes = new TextEncoder().encode(json);
-	await api.write.mutate({
-		location: locationId,
-		relativePath: MANIFESTS_FILENAME,
-		data: bytes
-	});
-}
-/**
-* Decode the raw bytes of `manifests.json`. Falls back to an empty
-* manifest on JSON-parse / shape-validation failure — same defensive
-* stance as the legacy `LocalBackupService.ensureManifestsLoaded`.
-*/
-function parseManifestBytes(bytes) {
-	try {
-		const text = new TextDecoder().decode(bytes);
-		if (text.trim().length === 0) return EMPTY_MANIFEST;
-		return normalizeManifest(JSON.parse(text));
-	} catch {
-		return EMPTY_MANIFEST;
+	validateRange(e, t, r, n, i) {
+		if (e > t) throw new TypeError("CronPattern: From value is larger than to value: '" + i + "'");
+		if (r !== void 0) {
+			if (r === 0) throw new TypeError("CronPattern: Syntax error, illegal stepping: 0");
+			if (r > this[n].length) throw new TypeError("CronPattern: Syntax error, steps cannot be greater than maximum value of part (" + this[n].length + ")");
+		}
 	}
-}
-/**
-* Coerce an arbitrary parsed JSON shape into the canonical manifest
-* type. Bogus archive entries are silently dropped (a corrupt row
-* shouldn't lock the whole location out of operator visibility).
-*/
-function normalizeManifest(raw) {
-	if (typeof raw !== "object" || raw == null) return EMPTY_MANIFEST;
-	const obj = raw;
-	const archives = [];
-	if (Array.isArray(obj.archives)) for (const a of obj.archives) {
-		if (typeof a !== "object" || a == null) continue;
-		const cand = a;
-		if (typeof cand["id"] !== "string" || typeof cand["filename"] !== "string") continue;
-		if (typeof cand["createdAt"] !== "number" || typeof cand["sizeBytes"] !== "number") continue;
-		const manifest = cand["manifest"];
-		if (typeof manifest !== "object" || manifest == null) continue;
-		const entry = {
-			id: String(cand["id"]),
-			filename: String(cand["filename"]),
-			createdAt: Number(cand["createdAt"]),
-			sizeBytes: Number(cand["sizeBytes"]),
-			...typeof cand["label"] === "string" ? { label: cand["label"] } : {},
-			manifest
-		};
-		archives.push(entry);
+	handleRangeWithStepping(e, t, r, n) {
+		if (e.toUpperCase().includes("W")) throw new TypeError("CronPattern: Syntax error, W is not allowed in ranges with stepping.");
+		let i = this.extractNth(e, t), a = i[0].match(/^(\d+)-(\d+)\/(\d+)$/);
+		if (a === null) throw new TypeError("CronPattern: Syntax error, illegal range with stepping: '" + e + "'");
+		let [, o, h, l] = a, y = parseInt(o, 10) + r, u = parseInt(h, 10) + r, d = parseInt(l, 10);
+		this.validateNotNaN(y, "CronPattern: Syntax error, illegal lower range (NaN)"), this.validateNotNaN(u, "CronPattern: Syntax error, illegal upper range (NaN)"), this.validateNotNaN(d, "CronPattern: Syntax error, illegal stepping: (NaN)"), this.validateRange(y, u, d, t, e);
+		for (let c = y; c <= u; c += d) this.setPart(t, c, i[1] || n);
 	}
-	return {
-		version: 1,
-		archives
-	};
-}
-var EMPTY_MANIFEST = {
-	version: 1,
-	archives: []
-};
-/**
-* Build a `ManifestArchiveEntry` from the raw inputs collected during
-* a successful upload. Pure transform — no I/O — kept here so the
-* triggerBackup path stays terse.
-*/
-function buildArchiveEntry(input) {
-	return {
-		id: input.id,
-		filename: input.filename,
-		createdAt: input.createdAt,
-		sizeBytes: input.sizeBytes,
-		...input.label !== void 0 ? { label: input.label } : {},
-		manifest: input.manifest
-	};
-}
-/**
-* Pure retention split: given an archive list and the operator's
-* `retentionCount`, return `{ keep, drop }` where `keep` is the most-
-* recent N archives (newest first) and `drop` is the older overflow.
-*
-* `retentionCount <= 0` is treated as "no pruning" — defensive against
-* a config value that would otherwise wipe every archive on the next
-* write.
-*/
-function applyRetention(archives, retentionCount) {
-	if (retentionCount <= 0) return {
-		keep: archives,
-		drop: []
-	};
-	const sorted = [...archives].toSorted((a, b) => b.createdAt - a.createdAt);
-	if (sorted.length <= retentionCount) return {
-		keep: sorted,
-		drop: []
-	};
-	return {
-		keep: sorted.slice(0, retentionCount),
-		drop: sorted.slice(retentionCount)
-	};
-}
-/**
-* Per-location async mutex. The orchestrator owns one instance and
-* funnels every read-modify-write of `manifests.json` through it so
-* parallel destination uploads (within the same location) commit in
-* arrival order. Across locations the operations run in parallel —
-* each location keys its own promise chain.
-*/
-var LocationManifestLock = class {
-	chains = /* @__PURE__ */ new Map();
-	async run(locationId, fn) {
-		const previous = this.chains.get(locationId) ?? Promise.resolve();
-		let resolveNext;
-		const next = new Promise((res) => {
-			resolveNext = res;
-		});
-		this.chains.set(locationId, previous.then(() => next));
-		try {
-			await previous;
-			return await fn();
-		} finally {
-			resolveNext();
-			const tail = this.chains.get(locationId);
-			if (tail) Promise.resolve(tail).then(() => {
-				if (this.chains.get(locationId) === tail) this.chains.delete(locationId);
-			}).catch(() => {});
+	extractNth(e, t) {
+		let r = e, n;
+		if (r.includes("#")) {
+			if (t !== "dayOfWeek") throw new Error("CronPattern: nth (#) only allowed in day-of-week field");
+			n = r.split("#")[1], r = r.split("#")[0];
+		} else if (r.toUpperCase().endsWith("L")) {
+			if (t !== "dayOfWeek") throw new Error("CronPattern: L modifier only allowed in day-of-week field (use L alone for day-of-month)");
+			n = "L", r = r.slice(0, -1);
 		}
+		return [r, n];
 	}
-};
-//#endregion
-//#region src/builtins/backup-orchestrator/download-helpers.ts
-/**
-* Chunked-download helper for the backup orchestrator (Task 12 of
-* the storage-unification refactor).
-*
-* Streams an archive from a destination `StorageLocation` into a
-* local filesystem path via the consumer-facing `storage` cap. Pulled
-* out of `backup-orchestrator.addon.ts` so it can be unit-tested with
-* an in-memory fake `AddonApi['storage']` slice — the addon is hard
-* to bootstrap in vitest because of the BaseAddon ceremony.
-*
-* Cleanup contract:
-*  - Successful run leaves the cache file in place + calls
-*    `endDownload`.
-*  - Mid-stream failure destroys the writeStream, removes the
-*    partial cache file, and best-effort calls `endDownload` so the
-*    storage provider's session bookkeeping doesn't leak.
-*/
-async function downloadArchiveToCache(input) {
-	const { downloadId, sizeBytes } = await input.api.beginDownload.mutate({
-		location: input.locationId,
-		relativePath: input.filename
-	});
-	const writeStream = fs.createWriteStream(input.cachePath);
-	let offset = 0;
-	try {
-		while (offset < sizeBytes) {
-			const remaining = sizeBytes - offset;
-			const length = Math.min(input.chunkBytes, remaining);
-			const chunk = await input.api.readChunk.query({
-				downloadId,
-				offset,
-				length
-			});
-			if (chunk.byteLength === 0) throw new Error(`backup restore: empty chunk at offset ${offset}/${sizeBytes} from "${input.locationId}/${input.filename}"`);
-			writeStream.write(chunk);
-			offset += chunk.byteLength;
-		}
-		await new Promise((resolve, reject) => {
-			writeStream.end((err) => {
-				if (err) reject(err);
-				else resolve();
-			});
-		});
-		try {
-			await input.api.endDownload.mutate({ downloadId });
-		} catch (err) {
-			input.logger.warn("backup restore: endDownload failed (ignoring)", { meta: {
-				downloadId,
-				error: err instanceof Error ? err.message : String(err)
-			} });
+	handleRange(e, t, r, n) {
+		if (e.toUpperCase().includes("W")) throw new TypeError("CronPattern: Syntax error, W is not allowed in a range.");
+		let i = this.extractNth(e, t), a = i[0].split("-");
+		if (a.length !== 2) throw new TypeError("CronPattern: Syntax error, illegal range: '" + e + "'");
+		let o = parseInt(a[0], 10) + r, h = parseInt(a[1], 10) + r;
+		this.validateNotNaN(o, "CronPattern: Syntax error, illegal lower range (NaN)"), this.validateNotNaN(h, "CronPattern: Syntax error, illegal upper range (NaN)"), this.validateRange(o, h, void 0, t, e);
+		for (let l = o; l <= h; l++) this.setPart(t, l, i[1] || n);
+	}
+	handleStepping(e, t, r, n) {
+		if (e.toUpperCase().includes("W")) throw new TypeError("CronPattern: Syntax error, W is not allowed in parts with stepping.");
+		let i = this.extractNth(e, t), a = i[0].split("/");
+		if (a.length !== 2) throw new TypeError("CronPattern: Syntax error, illegal stepping: '" + e + "'");
+		if (this.sloppyRanges) a[0] === "" && (a[0] = "*");
+		else {
+			if (a[0] === "") throw new TypeError("CronPattern: Syntax error, stepping with missing prefix ('" + e + "') is not allowed. Use wildcard (*/step) or range (min-max/step) instead.");
+			if (a[0] !== "*") throw new TypeError("CronPattern: Syntax error, stepping with numeric prefix ('" + e + "') is not allowed. Use wildcard (*/step) or range (min-max/step) instead.");
 		}
-	} catch (err) {
-		await new Promise((resolve) => {
-			writeStream.once("close", () => resolve());
-			writeStream.destroy();
-		});
-		try {
-			await fsp.rm(input.cachePath, { force: true });
-		} catch {}
-		try {
-			await input.api.endDownload.mutate({ downloadId });
-		} catch {}
-		throw err;
+		let o = 0;
+		a[0] !== "*" && (o = parseInt(a[0], 10) + r);
+		let h = parseInt(a[1], 10);
+		this.validateNotNaN(h, "CronPattern: Syntax error, illegal stepping: (NaN)"), this.validateRange(0, this[t].length - 1, h, t, e);
+		for (let l = o; l < this[t].length; l += h) this.setPart(t, l, i[1] || n);
 	}
-}
-//#endregion
-//#region ../../node_modules/croner/dist/croner.js
-function T(s) {
-	return Date.UTC(s.y, s.m - 1, s.d, s.h, s.i, s.s);
-}
-function D(s, e) {
-	return s.y === e.y && s.m === e.m && s.d === e.d && s.h === e.h && s.i === e.i && s.s === e.s;
-}
-function A(s, e) {
-	let t = new Date(Date.parse(s));
-	if (isNaN(t)) throw new Error("Invalid ISO8601 passed to timezone parser.");
-	let r = s.substring(9);
-	return r.includes("Z") || r.includes("+") || r.includes("-") ? b(t.getUTCFullYear(), t.getUTCMonth() + 1, t.getUTCDate(), t.getUTCHours(), t.getUTCMinutes(), t.getUTCSeconds(), "Etc/UTC") : b(t.getFullYear(), t.getMonth() + 1, t.getDate(), t.getHours(), t.getMinutes(), t.getSeconds(), e);
-}
-function v(s, e, t) {
-	return k(A(s, e), t);
-}
-function k(s, e) {
-	let t = new Date(T(s)), r = g(t, s.tz), a = T(s) - T(r), o = new Date(t.getTime() + a), h = g(o, s.tz);
-	if (D(h, s)) {
-		let u = /* @__PURE__ */ new Date(o.getTime() - 36e5);
-		return D(g(u, s.tz), s) ? u : o;
+	replaceAlphaDays(e) {
+		return e.replace(/-sun/gi, "-7").replace(/sun/gi, "0").replace(/mon/gi, "1").replace(/tue/gi, "2").replace(/wed/gi, "3").replace(/thu/gi, "4").replace(/fri/gi, "5").replace(/sat/gi, "6");
 	}
-	let l = new Date(o.getTime() + T(s) - T(h));
-	if (D(g(l, s.tz), s)) return l;
-	if (e) throw new Error("Invalid date passed to fromTZ()");
-	return o.getTime() > l.getTime() ? o : l;
-}
-function g(s, e) {
-	let t, r;
-	try {
-		t = new Intl.DateTimeFormat("en-US", {
-			timeZone: e,
-			year: "numeric",
-			month: "numeric",
-			day: "numeric",
-			hour: "numeric",
-			minute: "numeric",
-			second: "numeric",
-			hour12: !1
-		}), r = t.formatToParts(s);
-	} catch (i) {
-		let a = i instanceof Error ? i.message : String(i);
-		throw new RangeError(`toTZ: Invalid timezone '${e}' or date. Please provide a valid IANA timezone (e.g., 'America/New_York', 'Europe/Stockholm'). Original error: ${a}`);
+	replaceAlphaDaysQuartz(e) {
+		return e.replace(/sun/gi, "1").replace(/mon/gi, "2").replace(/tue/gi, "3").replace(/wed/gi, "4").replace(/thu/gi, "5").replace(/fri/gi, "6").replace(/sat/gi, "7");
 	}
-	let n = {
-		year: 0,
-		month: 0,
-		day: 0,
-		hour: 0,
-		minute: 0,
-		second: 0
-	};
-	for (let i of r) (i.type === "year" || i.type === "month" || i.type === "day" || i.type === "hour" || i.type === "minute" || i.type === "second") && (n[i.type] = parseInt(i.value, 10));
-	if (isNaN(n.year) || isNaN(n.month) || isNaN(n.day) || isNaN(n.hour) || isNaN(n.minute) || isNaN(n.second)) throw new Error(`toTZ: Failed to parse all date components from timezone '${e}'. This may indicate an invalid date or timezone configuration. Parsed components: ${JSON.stringify(n)}`);
-	return n.hour === 24 && (n.hour = 0), {
-		y: n.year,
-		m: n.month,
-		d: n.day,
-		h: n.hour,
-		i: n.minute,
-		s: n.second,
-		tz: e
-	};
-}
-function b(s, e, t, r, n, i, a) {
-	return {
-		y: s,
-		m: e,
-		d: t,
-		h: r,
-		i: n,
-		s: i,
-		tz: a
-	};
-}
-var O = [
-	1,
-	2,
-	4,
-	8,
-	16
-], C = class {
-	pattern;
-	timezone;
-	mode;
-	alternativeWeekdays;
-	sloppyRanges;
+	replaceAlphaMonths(e) {
+		return e.replace(/jan/gi, "1").replace(/feb/gi, "2").replace(/mar/gi, "3").replace(/apr/gi, "4").replace(/may/gi, "5").replace(/jun/gi, "6").replace(/jul/gi, "7").replace(/aug/gi, "8").replace(/sep/gi, "9").replace(/oct/gi, "10").replace(/nov/gi, "11").replace(/dec/gi, "12");
+	}
+	handleNicknames(e) {
+		let t = e.trim().toLowerCase();
+		if (t === "@yearly" || t === "@annually") return "0 0 1 1 *";
+		if (t === "@monthly") return "0 0 1 * *";
+		if (t === "@weekly") return "0 0 * * 0";
+		if (t === "@daily" || t === "@midnight") return "0 0 * * *";
+		if (t === "@hourly") return "0 * * * *";
+		if (t === "@reboot") throw new TypeError("CronPattern: @reboot is not supported in this environment. This is an event-based trigger that requires system startup detection.");
+		return e;
+	}
+	setNthWeekdayOfMonth(e, t) {
+		if (typeof t != "number" && t.toUpperCase() === "L") this.dayOfWeek[e] = this.dayOfWeek[e] | 32;
+		else if (t === 63) this.dayOfWeek[e] = 63;
+		else if (t < 6 && t > 0) this.dayOfWeek[e] = this.dayOfWeek[e] | O[t - 1];
+		else throw new TypeError(`CronPattern: nth weekday out of range, should be 1-5 or L. Value: ${t}, Type: ${typeof t}`);
+	}
+};
+var P = [
+	31,
+	28,
+	31,
+	30,
+	31,
+	30,
+	31,
+	31,
+	30,
+	31,
+	30,
+	31
+], f = [
+	[
+		"month",
+		"year",
+		0
+	],
+	[
+		"day",
+		"month",
+		-1
+	],
+	[
+		"hour",
+		"day",
+		0
+	],
+	[
+		"minute",
+		"hour",
+		0
+	],
+	[
+		"second",
+		"minute",
+		0
+	]
+], m = class s {
+	tz;
+	ms;
 	second;
 	minute;
 	hour;
 	day;
 	month;
-	dayOfWeek;
 	year;
-	lastDayOfMonth;
-	lastWeekday;
-	nearestWeekdays;
-	starDOM;
-	starDOW;
-	starYear;
-	useAndLogic;
-	constructor(e, t, r) {
-		this.pattern = e, this.timezone = t, this.mode = r?.mode ?? "auto", this.alternativeWeekdays = r?.alternativeWeekdays ?? !1, this.sloppyRanges = r?.sloppyRanges ?? !1, this.second = Array(60).fill(0), this.minute = Array(60).fill(0), this.hour = Array(24).fill(0), this.day = Array(31).fill(0), this.month = Array(12).fill(0), this.dayOfWeek = Array(7).fill(0), this.year = Array(1e4).fill(0), this.lastDayOfMonth = !1, this.lastWeekday = !1, this.nearestWeekdays = Array(31).fill(0), this.starDOM = !1, this.starDOW = !1, this.starYear = !1, this.useAndLogic = !1, this.parse();
+	constructor(e, t) {
+		if (this.tz = t, e && e instanceof Date) if (!isNaN(e)) this.fromDate(e);
+		else throw new TypeError("CronDate: Invalid date passed to CronDate constructor");
+		else if (e == null) this.fromDate(/* @__PURE__ */ new Date());
+		else if (e && typeof e == "string") this.fromString(e);
+		else if (e instanceof s) this.fromCronDate(e);
+		else throw new TypeError("CronDate: Invalid type (" + typeof e + ") passed to CronDate constructor");
 	}
-	parse() {
-		if (!(typeof this.pattern == "string" || this.pattern instanceof String)) throw new TypeError("CronPattern: Pattern has to be of type string.");
-		this.pattern.indexOf("@") >= 0 && (this.pattern = this.handleNicknames(this.pattern).trim());
-		let e = this.pattern.match(/\S+/g) || [""], t = e.length;
-		if (e.length < 5 || e.length > 7) throw new TypeError("CronPattern: invalid configuration format ('" + this.pattern + "'), exactly five, six, or seven space separated parts are required.");
-		if (this.mode !== "auto") {
-			let n;
-			switch (this.mode) {
-				case "5-part":
-					n = 5;
-					break;
-				case "6-part":
-					n = 6;
-					break;
-				case "7-part":
-					n = 7;
-					break;
-				case "5-or-6-parts":
-					n = [5, 6];
-					break;
-				case "6-or-7-parts":
-					n = [6, 7];
-					break;
-				default: n = 0;
+	getLastDayOfMonth(e, t) {
+		return t !== 1 ? P[t] : new Date(Date.UTC(e, t + 1, 0)).getUTCDate();
+	}
+	getLastWeekday(e, t) {
+		let r = this.getLastDayOfMonth(e, t), i = new Date(Date.UTC(e, t, r)).getUTCDay();
+		return i === 0 ? r - 2 : i === 6 ? r - 1 : r;
+	}
+	getNearestWeekday(e, t, r) {
+		let n = this.getLastDayOfMonth(e, t);
+		if (r > n) return -1;
+		let a = new Date(Date.UTC(e, t, r)).getUTCDay();
+		return a === 0 ? r === n ? r - 2 : r + 1 : a === 6 ? r === 1 ? r + 2 : r - 1 : r;
+	}
+	isNthWeekdayOfMonth(e, t, r, n) {
+		let a = new Date(Date.UTC(e, t, r)).getUTCDay(), o = 0;
+		for (let h = 1; h <= r; h++) new Date(Date.UTC(e, t, h)).getUTCDay() === a && o++;
+		if (n & 63 && O[o - 1] & n) return !0;
+		if (n & 32) {
+			let h = this.getLastDayOfMonth(e, t);
+			for (let l = r + 1; l <= h; l++) if (new Date(Date.UTC(e, t, l)).getUTCDay() === a) return !1;
+			return !0;
+		}
+		return !1;
+	}
+	fromDate(e) {
+		if (this.tz !== void 0) if (typeof this.tz == "number") this.ms = e.getUTCMilliseconds(), this.second = e.getUTCSeconds(), this.minute = e.getUTCMinutes() + this.tz, this.hour = e.getUTCHours(), this.day = e.getUTCDate(), this.month = e.getUTCMonth(), this.year = e.getUTCFullYear(), this.apply();
+		else try {
+			let t = g(e, this.tz);
+			this.ms = e.getMilliseconds(), this.second = t.s, this.minute = t.i, this.hour = t.h, this.day = t.d, this.month = t.m - 1, this.year = t.y;
+		} catch (t) {
+			let r = t instanceof Error ? t.message : String(t);
+			throw new TypeError(`CronDate: Failed to convert date to timezone '${this.tz}'. This may happen with invalid timezone names or dates. Original error: ${r}`);
+		}
+		else this.ms = e.getMilliseconds(), this.second = e.getSeconds(), this.minute = e.getMinutes(), this.hour = e.getHours(), this.day = e.getDate(), this.month = e.getMonth(), this.year = e.getFullYear();
+	}
+	fromCronDate(e) {
+		this.tz = e.tz, this.year = e.year, this.month = e.month, this.day = e.day, this.hour = e.hour, this.minute = e.minute, this.second = e.second, this.ms = e.ms;
+	}
+	apply() {
+		if (this.month > 11 || this.month < 0 || this.day > P[this.month] || this.day < 1 || this.hour > 59 || this.minute > 59 || this.second > 59 || this.hour < 0 || this.minute < 0 || this.second < 0) {
+			let e = new Date(Date.UTC(this.year, this.month, this.day, this.hour, this.minute, this.second, this.ms));
+			return this.ms = e.getUTCMilliseconds(), this.second = e.getUTCSeconds(), this.minute = e.getUTCMinutes(), this.hour = e.getUTCHours(), this.day = e.getUTCDate(), this.month = e.getUTCMonth(), this.year = e.getUTCFullYear(), !0;
+		} else return !1;
+	}
+	fromString(e) {
+		if (typeof this.tz == "number") {
+			let t = v(e);
+			this.ms = t.getUTCMilliseconds(), this.second = t.getUTCSeconds(), this.minute = t.getUTCMinutes(), this.hour = t.getUTCHours(), this.day = t.getUTCDate(), this.month = t.getUTCMonth(), this.year = t.getUTCFullYear(), this.apply();
+		} else return this.fromDate(v(e, this.tz));
+	}
+	findNext(e, t, r, n) {
+		return this._findMatch(e, t, r, n, 1);
+	}
+	_findMatch(e, t, r, n, i) {
+		let a = this[t], o;
+		r.lastDayOfMonth && (o = this.getLastDayOfMonth(this.year, this.month));
+		let h = !r.starDOW && t == "day" ? new Date(Date.UTC(this.year, this.month, 1, 0, 0, 0, 0)).getUTCDay() : void 0, l = this[t] + n, y = i === 1 ? (u) => u < r[t].length : (u) => u >= 0;
+		for (let u = l; y(u); u += i) {
+			let d = r[t][u];
+			if (t === "day" && !d) {
+				for (let c = 0; c < r.nearestWeekdays.length; c++) if (r.nearestWeekdays[c]) {
+					let M = this.getNearestWeekday(this.year, this.month, c - n);
+					if (M === -1) continue;
+					if (M === u - n) {
+						d = 1;
+						break;
+					}
+				}
 			}
-			if (!(Array.isArray(n) ? n.includes(t) : t === n)) {
-				let a = Array.isArray(n) ? n.join(" or ") : n.toString();
-				throw new TypeError(`CronPattern: mode '${this.mode}' requires exactly ${a} parts, but pattern '${this.pattern}' has ${t} parts.`);
+			if (t === "day" && r.lastWeekday) {
+				let c = this.getLastWeekday(this.year, this.month);
+				u - n === c && (d = 1);
 			}
+			if (t === "day" && r.lastDayOfMonth && u - n == o && (d = 1), t === "day" && !r.starDOW) {
+				let c = r.dayOfWeek[(h + (u - n - 1)) % 7];
+				if (c && c & 63) c = this.isNthWeekdayOfMonth(this.year, this.month, u - n, c) ? 1 : 0;
+				else if (c) throw new Error(`CronDate: Invalid value for dayOfWeek encountered. ${c}`);
+				r.useAndLogic ? d = d && c : !e.domAndDow && !r.starDOM ? d = d || c : d = d && c;
+			}
+			if (d) return this[t] = u - n, a !== this[t] ? 2 : 1;
 		}
-		if (e.length === 5 && e.unshift("0"), e.length === 6 && e.push("*"), e[3].toUpperCase() === "LW" ? (this.lastWeekday = !0, e[3] = "") : e[3].toUpperCase().indexOf("L") >= 0 && (e[3] = e[3].replace(/L/gi, ""), this.lastDayOfMonth = !0), e[3] == "*" && (this.starDOM = !0), e[6] == "*" && (this.starYear = !0), e[4].length >= 3 && (e[4] = this.replaceAlphaMonths(e[4])), e[5].length >= 3 && (e[5] = this.alternativeWeekdays ? this.replaceAlphaDaysQuartz(e[5]) : this.replaceAlphaDays(e[5])), e[5].startsWith("+") && (this.useAndLogic = !0, e[5] = e[5].substring(1), e[5] === "")) throw new TypeError("CronPattern: Day-of-week field cannot be empty after '+' modifier.");
-		switch (e[5] == "*" && (this.starDOW = !0), this.pattern.indexOf("?") >= 0 && (e[0] = e[0].replace(/\?/g, "*"), e[1] = e[1].replace(/\?/g, "*"), e[2] = e[2].replace(/\?/g, "*"), e[3] = e[3].replace(/\?/g, "*"), e[4] = e[4].replace(/\?/g, "*"), e[5] = e[5].replace(/\?/g, "*"), e[6] && (e[6] = e[6].replace(/\?/g, "*"))), this.mode) {
-			case "5-part":
-				e[0] = "0", e[6] = "*";
-				break;
-			case "6-part":
-				e[6] = "*";
-				break;
-			case "5-or-6-parts":
-				e[6] = "*";
-				break;
-			case "6-or-7-parts": break;
-			case "7-part":
-			case "auto": break;
-		}
-		this.throwAtIllegalCharacters(e), this.partToArray("second", e[0], 0, 1), this.partToArray("minute", e[1], 0, 1), this.partToArray("hour", e[2], 0, 1), this.partToArray("day", e[3], -1, 1), this.partToArray("month", e[4], -1, 1);
-		let r = this.alternativeWeekdays ? -1 : 0;
-		this.partToArray("dayOfWeek", e[5], r, 63), this.partToArray("year", e[6], 0, 1), !this.alternativeWeekdays && this.dayOfWeek[7] && (this.dayOfWeek[0] = this.dayOfWeek[7]);
+		return 3;
 	}
-	partToArray(e, t, r, n) {
-		let i = this[e], a = e === "day" && this.lastDayOfMonth, o = e === "day" && this.lastWeekday;
-		if (t === "" && !a && !o) throw new TypeError("CronPattern: configuration entry " + e + " (" + t + ") is empty, check for trailing spaces.");
-		if (t === "*") return i.fill(n);
-		let h = t.split(",");
-		if (h.length > 1) for (let l = 0; l < h.length; l++) this.partToArray(e, h[l], r, n);
-		else t.indexOf("-") !== -1 && t.indexOf("/") !== -1 ? this.handleRangeWithStepping(t, e, r, n) : t.indexOf("-") !== -1 ? this.handleRange(t, e, r, n) : t.indexOf("/") !== -1 ? this.handleStepping(t, e, r, n) : t !== "" && this.handleNumber(t, e, r, n);
+	recurse(e, t, r) {
+		if (r === 0 && !e.starYear) {
+			if (this.year >= 0 && this.year < e.year.length && e.year[this.year] === 0) {
+				let i = -1;
+				for (let a = this.year + 1; a < e.year.length && a < 1e4; a++) if (e.year[a] === 1) {
+					i = a;
+					break;
+				}
+				if (i === -1) return null;
+				this.year = i, this.month = 0, this.day = 1, this.hour = 0, this.minute = 0, this.second = 0, this.ms = 0;
+			}
+			if (this.year >= 1e4) return null;
+		}
+		let n = this.findNext(t, f[r][0], e, f[r][2]);
+		if (n > 1) {
+			let i = r + 1;
+			for (; i < f.length;) this[f[i][0]] = -f[i][2], i++;
+			if (n === 3) {
+				if (this[f[r][1]]++, this[f[r][0]] = -f[r][2], this.apply(), r === 0 && !e.starYear) {
+					for (; this.year >= 0 && this.year < e.year.length && e.year[this.year] === 0 && this.year < 1e4;) this.year++;
+					if (this.year >= 1e4 || this.year >= e.year.length) return null;
+				}
+				return this.recurse(e, t, 0);
+			} else if (this.apply()) return this.recurse(e, t, r - 1);
+		}
+		return r += 1, r >= f.length ? this : (e.starYear ? this.year >= 3e3 : this.year >= 1e4) ? null : this.recurse(e, t, r);
 	}
-	throwAtIllegalCharacters(e) {
-		for (let t = 0; t < e.length; t++) if ((t === 3 ? /[^/*0-9,\-WwLl]+/ : t === 5 ? /[^/*0-9,\-#Ll]+/ : /[^/*0-9,\-]+/).test(e[t])) throw new TypeError("CronPattern: configuration entry " + t + " (" + e[t] + ") contains illegal characters.");
+	increment(e, t, r) {
+		return this.second += t.interval !== void 0 && t.interval > 1 && r ? t.interval : 1, this.ms = 0, this.apply(), this.recurse(e, t, 0);
 	}
-	handleNumber(e, t, r, n) {
-		let i = this.extractNth(e, t), a = e.toUpperCase().includes("W");
-		if (t !== "day" && a) throw new TypeError("CronPattern: Nearest weekday modifier (W) only allowed in day-of-month.");
-		a && (t = "nearestWeekdays");
-		let o = parseInt(i[0], 10) + r;
-		if (isNaN(o)) throw new TypeError("CronPattern: " + t + " is not a number: '" + e + "'");
-		this.setPart(t, o, i[1] || n);
+	decrement(e, t) {
+		return this.second -= t.interval !== void 0 && t.interval > 1 ? t.interval : 1, this.ms = 0, this.apply(), this.recurseBackward(e, t, 0, 0);
 	}
-	setPart(e, t, r) {
-		if (!Object.prototype.hasOwnProperty.call(this, e)) throw new TypeError("CronPattern: Invalid part specified: " + e);
-		if (e === "dayOfWeek") {
-			if (t === 7 && (t = 0), t < 0 || t > 6) throw new RangeError("CronPattern: Invalid value for dayOfWeek: " + t);
-			this.setNthWeekdayOfMonth(t, r);
-			return;
+	recurseBackward(e, t, r, n = 0) {
+		if (n > 1e4) return null;
+		if (r === 0 && !e.starYear) {
+			if (this.year >= 0 && this.year < e.year.length && e.year[this.year] === 0) {
+				let a = -1;
+				for (let o = this.year - 1; o >= 0; o--) if (e.year[o] === 1) {
+					a = o;
+					break;
+				}
+				if (a === -1) return null;
+				this.year = a, this.month = 11, this.day = 31, this.hour = 23, this.minute = 59, this.second = 59, this.ms = 0;
+			}
+			if (this.year < 0) return null;
+		}
+		let i = this.findPrevious(t, f[r][0], e, f[r][2]);
+		if (i > 1) {
+			let a = r + 1;
+			for (; a < f.length;) {
+				let o = f[a][0], h = f[a][2], l = this.getMaxPatternValue(o, e, h);
+				this[o] = l, a++;
+			}
+			if (i === 3) {
+				if (this[f[r][1]]--, r === 0) {
+					let y = this.getLastDayOfMonth(this.year, this.month);
+					this.day > y && (this.day = y);
+				}
+				if (r === 1) if (this.day <= 0) this.day = 1;
+				else {
+					let y = this.year, u = this.month;
+					for (; u < 0;) u += 12, y--;
+					for (; u > 11;) u -= 12, y++;
+					let d = u !== 1 ? P[u] : new Date(Date.UTC(y, u + 1, 0)).getUTCDate();
+					this.day > d && (this.day = d);
+				}
+				this.apply();
+				let o = f[r][0], h = f[r][2], l = this.getMaxPatternValue(o, e, h);
+				if (o === "day") {
+					let y = this.getLastDayOfMonth(this.year, this.month);
+					this[o] = Math.min(l, y);
+				} else this[o] = l;
+				if (this.apply(), r === 0) {
+					let y = f[1][2], u = this.getMaxPatternValue("day", e, y), d = this.getLastDayOfMonth(this.year, this.month), c = Math.min(u, d);
+					c !== this.day && (this.day = c, this.hour = this.getMaxPatternValue("hour", e, f[2][2]), this.minute = this.getMaxPatternValue("minute", e, f[3][2]), this.second = this.getMaxPatternValue("second", e, f[4][2]));
+				}
+				if (r === 0 && !e.starYear) {
+					for (; this.year >= 0 && this.year < e.year.length && e.year[this.year] === 0;) this.year--;
+					if (this.year < 0) return null;
+				}
+				return this.recurseBackward(e, t, 0, n + 1);
+			} else if (this.apply()) return this.recurseBackward(e, t, r - 1, n + 1);
 		}
-		if (e === "second" || e === "minute") {
-			if (t < 0 || t >= 60) throw new RangeError("CronPattern: Invalid value for " + e + ": " + t);
-		} else if (e === "hour") {
-			if (t < 0 || t >= 24) throw new RangeError("CronPattern: Invalid value for " + e + ": " + t);
-		} else if (e === "day" || e === "nearestWeekdays") {
-			if (t < 0 || t >= 31) throw new RangeError("CronPattern: Invalid value for " + e + ": " + t);
-		} else if (e === "month") {
-			if (t < 0 || t >= 12) throw new RangeError("CronPattern: Invalid value for " + e + ": " + t);
-		} else if (e === "year" && (t < 1 || t >= 1e4)) throw new RangeError("CronPattern: Invalid value for " + e + ": " + t + " (supported range: 1-9999)");
-		this[e][t] = r;
-	}
-	validateNotNaN(e, t) {
-		if (isNaN(e)) throw new TypeError(t);
+		return r += 1, r >= f.length ? this : this.year < 0 ? null : this.recurseBackward(e, t, r, n + 1);
 	}
-	validateRange(e, t, r, n, i) {
-		if (e > t) throw new TypeError("CronPattern: From value is larger than to value: '" + i + "'");
-		if (r !== void 0) {
-			if (r === 0) throw new TypeError("CronPattern: Syntax error, illegal stepping: 0");
-			if (r > this[n].length) throw new TypeError("CronPattern: Syntax error, steps cannot be greater than maximum value of part (" + this[n].length + ")");
-		}
+	getMaxPatternValue(e, t, r) {
+		if (e === "day" && t.lastDayOfMonth) return this.getLastDayOfMonth(this.year, this.month);
+		if (e === "day" && !t.starDOW) return this.getLastDayOfMonth(this.year, this.month);
+		for (let n = t[e].length - 1; n >= 0; n--) if (t[e][n]) return n - r;
+		return t[e].length - 1 - r;
 	}
-	handleRangeWithStepping(e, t, r, n) {
-		if (e.toUpperCase().includes("W")) throw new TypeError("CronPattern: Syntax error, W is not allowed in ranges with stepping.");
-		let i = this.extractNth(e, t), a = i[0].match(/^(\d+)-(\d+)\/(\d+)$/);
-		if (a === null) throw new TypeError("CronPattern: Syntax error, illegal range with stepping: '" + e + "'");
-		let [, o, h, l] = a, y = parseInt(o, 10) + r, u = parseInt(h, 10) + r, d = parseInt(l, 10);
-		this.validateNotNaN(y, "CronPattern: Syntax error, illegal lower range (NaN)"), this.validateNotNaN(u, "CronPattern: Syntax error, illegal upper range (NaN)"), this.validateNotNaN(d, "CronPattern: Syntax error, illegal stepping: (NaN)"), this.validateRange(y, u, d, t, e);
-		for (let c = y; c <= u; c += d) this.setPart(t, c, i[1] || n);
+	findPrevious(e, t, r, n) {
+		return this._findMatch(e, t, r, n, -1);
 	}
-	extractNth(e, t) {
-		let r = e, n;
-		if (r.includes("#")) {
-			if (t !== "dayOfWeek") throw new Error("CronPattern: nth (#) only allowed in day-of-week field");
-			n = r.split("#")[1], r = r.split("#")[0];
-		} else if (r.toUpperCase().endsWith("L")) {
-			if (t !== "dayOfWeek") throw new Error("CronPattern: L modifier only allowed in day-of-week field (use L alone for day-of-month)");
-			n = "L", r = r.slice(0, -1);
-		}
-		return [r, n];
+	getDate(e) {
+		return e || this.tz === void 0 ? new Date(this.year, this.month, this.day, this.hour, this.minute, this.second, this.ms) : typeof this.tz == "number" ? new Date(Date.UTC(this.year, this.month, this.day, this.hour, this.minute - this.tz, this.second, this.ms)) : k(b(this.year, this.month + 1, this.day, this.hour, this.minute, this.second, this.tz), !1);
 	}
-	handleRange(e, t, r, n) {
-		if (e.toUpperCase().includes("W")) throw new TypeError("CronPattern: Syntax error, W is not allowed in a range.");
-		let i = this.extractNth(e, t), a = i[0].split("-");
-		if (a.length !== 2) throw new TypeError("CronPattern: Syntax error, illegal range: '" + e + "'");
-		let o = parseInt(a[0], 10) + r, h = parseInt(a[1], 10) + r;
-		this.validateNotNaN(o, "CronPattern: Syntax error, illegal lower range (NaN)"), this.validateNotNaN(h, "CronPattern: Syntax error, illegal upper range (NaN)"), this.validateRange(o, h, void 0, t, e);
-		for (let l = o; l <= h; l++) this.setPart(t, l, i[1] || n);
+	getTime() {
+		return this.getDate(!1).getTime();
 	}
-	handleStepping(e, t, r, n) {
-		if (e.toUpperCase().includes("W")) throw new TypeError("CronPattern: Syntax error, W is not allowed in parts with stepping.");
-		let i = this.extractNth(e, t), a = i[0].split("/");
-		if (a.length !== 2) throw new TypeError("CronPattern: Syntax error, illegal stepping: '" + e + "'");
-		if (this.sloppyRanges) a[0] === "" && (a[0] = "*");
-		else {
-			if (a[0] === "") throw new TypeError("CronPattern: Syntax error, stepping with missing prefix ('" + e + "') is not allowed. Use wildcard (*/step) or range (min-max/step) instead.");
-			if (a[0] !== "*") throw new TypeError("CronPattern: Syntax error, stepping with numeric prefix ('" + e + "') is not allowed. Use wildcard (*/step) or range (min-max/step) instead.");
+	match(e, t) {
+		if (!e.starYear && (this.year < 0 || this.year >= e.year.length || e.year[this.year] === 0)) return !1;
+		for (let r = 0; r < f.length; r++) {
+			let n = f[r][0], i = f[r][2], a = this[n];
+			if (a + i < 0 || a + i >= e[n].length) return !1;
+			let o = e[n][a + i];
+			if (n === "day") {
+				if (!o) {
+					for (let h = 0; h < e.nearestWeekdays.length; h++) if (e.nearestWeekdays[h]) {
+						let l = this.getNearestWeekday(this.year, this.month, h - i);
+						if (l !== -1 && l === a) {
+							o = 1;
+							break;
+						}
+					}
+				}
+				if (e.lastWeekday) a === this.getLastWeekday(this.year, this.month) && (o = 1);
+				if (e.lastDayOfMonth) a === this.getLastDayOfMonth(this.year, this.month) && (o = 1);
+				if (!e.starDOW) {
+					let h = new Date(Date.UTC(this.year, this.month, 1, 0, 0, 0, 0)).getUTCDay(), l = e.dayOfWeek[(h + (a - 1)) % 7];
+					l && l & 63 && (l = this.isNthWeekdayOfMonth(this.year, this.month, a, l) ? 1 : 0), e.useAndLogic ? o = o && l : !t.domAndDow && !e.starDOM ? o = o || l : o = o && l;
+				}
+			}
+			if (!o) return !1;
 		}
-		let o = 0;
-		a[0] !== "*" && (o = parseInt(a[0], 10) + r);
-		let h = parseInt(a[1], 10);
-		this.validateNotNaN(h, "CronPattern: Syntax error, illegal stepping: (NaN)"), this.validateRange(0, this[t].length - 1, h, t, e);
-		for (let l = o; l < this[t].length; l += h) this.setPart(t, l, i[1] || n);
+		return !0;
 	}
-	replaceAlphaDays(e) {
-		return e.replace(/-sun/gi, "-7").replace(/sun/gi, "0").replace(/mon/gi, "1").replace(/tue/gi, "2").replace(/wed/gi, "3").replace(/thu/gi, "4").replace(/fri/gi, "5").replace(/sat/gi, "6");
+};
+function R(s) {
+	if (s === void 0 && (s = {}), delete s.name, s.legacyMode !== void 0 && s.domAndDow === void 0 ? s.domAndDow = !s.legacyMode : s.domAndDow === void 0 && (s.domAndDow = !1), s.legacyMode = !s.domAndDow, s.paused = s.paused === void 0 ? !1 : s.paused, s.maxRuns = s.maxRuns === void 0 ? Infinity : s.maxRuns, s.catch = s.catch === void 0 ? !1 : s.catch, s.interval = s.interval === void 0 ? 0 : parseInt(s.interval.toString(), 10), s.utcOffset = s.utcOffset === void 0 ? void 0 : parseInt(s.utcOffset.toString(), 10), s.dayOffset = s.dayOffset === void 0 ? 0 : parseInt(s.dayOffset.toString(), 10), s.unref = s.unref === void 0 ? !1 : s.unref, s.mode = s.mode === void 0 ? "auto" : s.mode, s.alternativeWeekdays = s.alternativeWeekdays === void 0 ? !1 : s.alternativeWeekdays, s.sloppyRanges = s.sloppyRanges === void 0 ? !1 : s.sloppyRanges, ![
+		"auto",
+		"5-part",
+		"6-part",
+		"7-part",
+		"5-or-6-parts",
+		"6-or-7-parts"
+	].includes(s.mode)) throw new Error("CronOptions: mode must be one of 'auto', '5-part', '6-part', '7-part', '5-or-6-parts', or '6-or-7-parts'.");
+	if (s.startAt && (s.startAt = new m(s.startAt, s.timezone)), s.stopAt && (s.stopAt = new m(s.stopAt, s.timezone)), s.interval !== null) {
+		if (isNaN(s.interval)) throw new Error("CronOptions: Supplied value for interval is not a number");
+		if (s.interval < 0) throw new Error("CronOptions: Supplied value for interval can not be negative");
 	}
-	replaceAlphaDaysQuartz(e) {
-		return e.replace(/sun/gi, "1").replace(/mon/gi, "2").replace(/tue/gi, "3").replace(/wed/gi, "4").replace(/thu/gi, "5").replace(/fri/gi, "6").replace(/sat/gi, "7");
+	if (s.utcOffset !== void 0) {
+		if (isNaN(s.utcOffset)) throw new Error("CronOptions: Invalid value passed for utcOffset, should be number representing minutes offset from UTC.");
+		if (s.utcOffset < -870 || s.utcOffset > 870) throw new Error("CronOptions: utcOffset out of bounds.");
+		if (s.utcOffset !== void 0 && s.timezone) throw new Error("CronOptions: Combining 'utcOffset' with 'timezone' is not allowed.");
 	}
-	replaceAlphaMonths(e) {
-		return e.replace(/jan/gi, "1").replace(/feb/gi, "2").replace(/mar/gi, "3").replace(/apr/gi, "4").replace(/may/gi, "5").replace(/jun/gi, "6").replace(/jul/gi, "7").replace(/aug/gi, "8").replace(/sep/gi, "9").replace(/oct/gi, "10").replace(/nov/gi, "11").replace(/dec/gi, "12");
+	if (s.unref !== !0 && s.unref !== !1) throw new Error("CronOptions: Unref should be either true, false or undefined(false).");
+	if (s.dayOffset !== void 0 && s.dayOffset !== 0 && isNaN(s.dayOffset)) throw new Error("CronOptions: Invalid value passed for dayOffset, should be a number representing days to offset.");
+	return s;
+}
+function p(s) {
+	return Object.prototype.toString.call(s) === "[object Function]" || typeof s == "function" || s instanceof Function;
+}
+function _(s) {
+	return p(s);
+}
+function x(s) {
+	typeof Deno < "u" && typeof Deno.unrefTimer < "u" ? Deno.unrefTimer(s) : s && typeof s.unref < "u" && s.unref();
+}
+var W = 30 * 1e3, w = [], E = class {
+	name;
+	options;
+	_states;
+	fn;
+	getTz() {
+		return this.options.timezone || this.options.utcOffset;
 	}
-	handleNicknames(e) {
-		let t = e.trim().toLowerCase();
-		if (t === "@yearly" || t === "@annually") return "0 0 1 1 *";
-		if (t === "@monthly") return "0 0 1 * *";
-		if (t === "@weekly") return "0 0 * * 0";
-		if (t === "@daily" || t === "@midnight") return "0 0 * * *";
-		if (t === "@hourly") return "0 * * * *";
-		if (t === "@reboot") throw new TypeError("CronPattern: @reboot is not supported in this environment. This is an event-based trigger that requires system startup detection.");
+	applyDayOffset(e) {
+		if (this.options.dayOffset !== void 0 && this.options.dayOffset !== 0) {
+			let t = this.options.dayOffset * 24 * 60 * 60 * 1e3;
+			return new Date(e.getTime() + t);
+		}
 		return e;
 	}
-	setNthWeekdayOfMonth(e, t) {
-		if (typeof t != "number" && t.toUpperCase() === "L") this.dayOfWeek[e] = this.dayOfWeek[e] | 32;
-		else if (t === 63) this.dayOfWeek[e] = 63;
-		else if (t < 6 && t > 0) this.dayOfWeek[e] = this.dayOfWeek[e] | O[t - 1];
-		else throw new TypeError(`CronPattern: nth weekday out of range, should be 1-5 or L. Value: ${t}, Type: ${typeof t}`);
+	constructor(e, t, r) {
+		let n, i;
+		if (p(t)) i = t;
+		else if (typeof t == "object") n = t;
+		else if (t !== void 0) throw new Error("Cron: Invalid argument passed for optionsIn. Should be one of function, or object (options).");
+		if (p(r)) i = r;
+		else if (typeof r == "object") n = r;
+		else if (r !== void 0) throw new Error("Cron: Invalid argument passed for funcIn. Should be one of function, or object (options).");
+		if (this.name = n?.name, this.options = R(n), this._states = {
+			kill: !1,
+			blocking: !1,
+			previousRun: void 0,
+			currentRun: void 0,
+			once: void 0,
+			currentTimeout: void 0,
+			maxRuns: n ? n.maxRuns : void 0,
+			paused: n ? n.paused : !1,
+			pattern: new C("* * * * *", void 0, { mode: "auto" })
+		}, e && (e instanceof Date || typeof e == "string" && e.indexOf(":") > 0) ? this._states.once = new m(e, this.getTz()) : this._states.pattern = new C(e, this.options.timezone, {
+			mode: this.options.mode,
+			alternativeWeekdays: this.options.alternativeWeekdays,
+			sloppyRanges: this.options.sloppyRanges
+		}), this.name) {
+			if (w.find((o) => o.name === this.name)) throw new Error("Cron: Tried to initialize new named job '" + this.name + "', but name already taken.");
+			w.push(this);
+		}
+		return i !== void 0 && _(i) && (this.fn = i, this.schedule()), this;
 	}
-};
-var P = [
-	31,
-	28,
-	31,
-	30,
-	31,
-	30,
-	31,
-	31,
-	30,
-	31,
-	30,
-	31
-], f = [
-	[
-		"month",
-		"year",
-		0
-	],
-	[
-		"day",
-		"month",
-		-1
-	],
-	[
-		"hour",
-		"day",
-		0
-	],
-	[
-		"minute",
-		"hour",
-		0
-	],
-	[
-		"second",
-		"minute",
-		0
-	]
-], m = class s {
-	tz;
-	ms;
-	second;
-	minute;
-	hour;
-	day;
-	month;
-	year;
-	constructor(e, t) {
-		if (this.tz = t, e && e instanceof Date) if (!isNaN(e)) this.fromDate(e);
-		else throw new TypeError("CronDate: Invalid date passed to CronDate constructor");
-		else if (e == null) this.fromDate(/* @__PURE__ */ new Date());
-		else if (e && typeof e == "string") this.fromString(e);
-		else if (e instanceof s) this.fromCronDate(e);
-		else throw new TypeError("CronDate: Invalid type (" + typeof e + ") passed to CronDate constructor");
+	nextRun(e) {
+		let t = this._next(e);
+		return t ? this.applyDayOffset(t.getDate(!1)) : null;
+	}
+	nextRuns(e, t) {
+		this._states.maxRuns !== void 0 && e > this._states.maxRuns && (e = this._states.maxRuns);
+		let r = t || this._states.currentRun || void 0;
+		return this._enumerateRuns(e, r, "next");
+	}
+	previousRuns(e, t) {
+		return this._enumerateRuns(e, t || void 0, "previous");
+	}
+	_enumerateRuns(e, t, r) {
+		let n = [], i = t ? new m(t, this.getTz()) : null, a = r === "next" ? this._next : this._previous;
+		for (; e--;) {
+			let o = a.call(this, i);
+			if (!o) break;
+			let h = o.getDate(!1);
+			n.push(this.applyDayOffset(h)), i = o;
+		}
+		return n;
 	}
-	getLastDayOfMonth(e, t) {
-		return t !== 1 ? P[t] : new Date(Date.UTC(e, t + 1, 0)).getUTCDate();
+	match(e) {
+		if (this._states.once) {
+			let r = new m(e, this.getTz());
+			r.ms = 0;
+			let n = new m(this._states.once, this.getTz());
+			return n.ms = 0, r.getTime() === n.getTime();
+		}
+		let t = new m(e, this.getTz());
+		return t.ms = 0, t.match(this._states.pattern, this.options);
 	}
-	getLastWeekday(e, t) {
-		let r = this.getLastDayOfMonth(e, t), i = new Date(Date.UTC(e, t, r)).getUTCDay();
-		return i === 0 ? r - 2 : i === 6 ? r - 1 : r;
+	getPattern() {
+		if (!this._states.once) return this._states.pattern ? this._states.pattern.pattern : void 0;
 	}
-	getNearestWeekday(e, t, r) {
-		let n = this.getLastDayOfMonth(e, t);
-		if (r > n) return -1;
-		let a = new Date(Date.UTC(e, t, r)).getUTCDay();
-		return a === 0 ? r === n ? r - 2 : r + 1 : a === 6 ? r === 1 ? r + 2 : r - 1 : r;
+	getOnce() {
+		return this._states.once ? this._states.once.getDate() : null;
 	}
-	isNthWeekdayOfMonth(e, t, r, n) {
-		let a = new Date(Date.UTC(e, t, r)).getUTCDay(), o = 0;
-		for (let h = 1; h <= r; h++) new Date(Date.UTC(e, t, h)).getUTCDay() === a && o++;
-		if (n & 63 && O[o - 1] & n) return !0;
-		if (n & 32) {
-			let h = this.getLastDayOfMonth(e, t);
-			for (let l = r + 1; l <= h; l++) if (new Date(Date.UTC(e, t, l)).getUTCDay() === a) return !1;
-			return !0;
-		}
-		return !1;
+	isRunning() {
+		let e = this.nextRun(this._states.currentRun), t = !this._states.paused, r = this.fn !== void 0, n = !this._states.kill;
+		return t && r && n && e !== null;
 	}
-	fromDate(e) {
-		if (this.tz !== void 0) if (typeof this.tz == "number") this.ms = e.getUTCMilliseconds(), this.second = e.getUTCSeconds(), this.minute = e.getUTCMinutes() + this.tz, this.hour = e.getUTCHours(), this.day = e.getUTCDate(), this.month = e.getUTCMonth(), this.year = e.getUTCFullYear(), this.apply();
-		else try {
-			let t = g(e, this.tz);
-			this.ms = e.getMilliseconds(), this.second = t.s, this.minute = t.i, this.hour = t.h, this.day = t.d, this.month = t.m - 1, this.year = t.y;
-		} catch (t) {
-			let r = t instanceof Error ? t.message : String(t);
-			throw new TypeError(`CronDate: Failed to convert date to timezone '${this.tz}'. This may happen with invalid timezone names or dates. Original error: ${r}`);
-		}
-		else this.ms = e.getMilliseconds(), this.second = e.getSeconds(), this.minute = e.getMinutes(), this.hour = e.getHours(), this.day = e.getDate(), this.month = e.getMonth(), this.year = e.getFullYear();
+	isStopped() {
+		return this._states.kill;
 	}
-	fromCronDate(e) {
-		this.tz = e.tz, this.year = e.year, this.month = e.month, this.day = e.day, this.hour = e.hour, this.minute = e.minute, this.second = e.second, this.ms = e.ms;
+	isBusy() {
+		return this._states.blocking;
 	}
-	apply() {
-		if (this.month > 11 || this.month < 0 || this.day > P[this.month] || this.day < 1 || this.hour > 59 || this.minute > 59 || this.second > 59 || this.hour < 0 || this.minute < 0 || this.second < 0) {
-			let e = new Date(Date.UTC(this.year, this.month, this.day, this.hour, this.minute, this.second, this.ms));
-			return this.ms = e.getUTCMilliseconds(), this.second = e.getUTCSeconds(), this.minute = e.getUTCMinutes(), this.hour = e.getUTCHours(), this.day = e.getUTCDate(), this.month = e.getUTCMonth(), this.year = e.getUTCFullYear(), !0;
-		} else return !1;
+	currentRun() {
+		return this._states.currentRun ? this._states.currentRun.getDate() : null;
 	}
-	fromString(e) {
-		if (typeof this.tz == "number") {
-			let t = v(e);
-			this.ms = t.getUTCMilliseconds(), this.second = t.getUTCSeconds(), this.minute = t.getUTCMinutes(), this.hour = t.getUTCHours(), this.day = t.getUTCDate(), this.month = t.getUTCMonth(), this.year = t.getUTCFullYear(), this.apply();
-		} else return this.fromDate(v(e, this.tz));
+	previousRun() {
+		return this._states.previousRun ? this._states.previousRun.getDate() : null;
 	}
-	findNext(e, t, r, n) {
-		return this._findMatch(e, t, r, n, 1);
+	msToNext(e) {
+		let t = this._next(e);
+		return t ? e instanceof m || e instanceof Date ? t.getTime() - e.getTime() : t.getTime() - new m(e).getTime() : null;
 	}
-	_findMatch(e, t, r, n, i) {
-		let a = this[t], o;
-		r.lastDayOfMonth && (o = this.getLastDayOfMonth(this.year, this.month));
-		let h = !r.starDOW && t == "day" ? new Date(Date.UTC(this.year, this.month, 1, 0, 0, 0, 0)).getUTCDay() : void 0, l = this[t] + n, y = i === 1 ? (u) => u < r[t].length : (u) => u >= 0;
-		for (let u = l; y(u); u += i) {
-			let d = r[t][u];
-			if (t === "day" && !d) {
-				for (let c = 0; c < r.nearestWeekdays.length; c++) if (r.nearestWeekdays[c]) {
-					let M = this.getNearestWeekday(this.year, this.month, c - n);
-					if (M === -1) continue;
-					if (M === u - n) {
-						d = 1;
-						break;
-					}
-				}
-			}
-			if (t === "day" && r.lastWeekday) {
-				let c = this.getLastWeekday(this.year, this.month);
-				u - n === c && (d = 1);
-			}
-			if (t === "day" && r.lastDayOfMonth && u - n == o && (d = 1), t === "day" && !r.starDOW) {
-				let c = r.dayOfWeek[(h + (u - n - 1)) % 7];
-				if (c && c & 63) c = this.isNthWeekdayOfMonth(this.year, this.month, u - n, c) ? 1 : 0;
-				else if (c) throw new Error(`CronDate: Invalid value for dayOfWeek encountered. ${c}`);
-				r.useAndLogic ? d = d && c : !e.domAndDow && !r.starDOM ? d = d || c : d = d && c;
+	stop() {
+		this._states.kill = !0, this._states.currentTimeout && clearTimeout(this._states.currentTimeout);
+		let e = w.indexOf(this);
+		e >= 0 && w.splice(e, 1);
+	}
+	pause() {
+		return this._states.paused = !0, !this._states.kill;
+	}
+	resume() {
+		return this._states.paused = !1, !this._states.kill;
+	}
+	schedule(e) {
+		if (e && this.fn) throw new Error("Cron: It is not allowed to schedule two functions using the same Croner instance.");
+		e && (this.fn = e);
+		let t = this.msToNext(), r = this.nextRun(this._states.currentRun);
+		return t == null || isNaN(t) || r === null ? this : (t > W && (t = W), this._states.currentTimeout = setTimeout(() => this._checkTrigger(r), t), this._states.currentTimeout && this.options.unref && x(this._states.currentTimeout), this);
+	}
+	async _trigger(e) {
+		this._states.blocking = !0, this._states.currentRun = new m(void 0, this.getTz());
+		try {
+			if (this.options.catch) try {
+				this.fn !== void 0 && await this.fn(this, this.options.context);
+			} catch (t) {
+				if (p(this.options.catch)) try {
+					this.options.catch(t, this);
+				} catch {}
 			}
-			if (d) return this[t] = u - n, a !== this[t] ? 2 : 1;
+			else this.fn !== void 0 && await this.fn(this, this.options.context);
+		} finally {
+			this._states.previousRun = new m(e, this.getTz()), this._states.blocking = !1;
 		}
-		return 3;
 	}
-	recurse(e, t, r) {
-		if (r === 0 && !e.starYear) {
-			if (this.year >= 0 && this.year < e.year.length && e.year[this.year] === 0) {
-				let i = -1;
-				for (let a = this.year + 1; a < e.year.length && a < 1e4; a++) if (e.year[a] === 1) {
-					i = a;
-					break;
-				}
-				if (i === -1) return null;
-				this.year = i, this.month = 0, this.day = 1, this.hour = 0, this.minute = 0, this.second = 0, this.ms = 0;
-			}
-			if (this.year >= 1e4) return null;
-		}
-		let n = this.findNext(t, f[r][0], e, f[r][2]);
-		if (n > 1) {
-			let i = r + 1;
-			for (; i < f.length;) this[f[i][0]] = -f[i][2], i++;
-			if (n === 3) {
-				if (this[f[r][1]]++, this[f[r][0]] = -f[r][2], this.apply(), r === 0 && !e.starYear) {
-					for (; this.year >= 0 && this.year < e.year.length && e.year[this.year] === 0 && this.year < 1e4;) this.year++;
-					if (this.year >= 1e4 || this.year >= e.year.length) return null;
-				}
-				return this.recurse(e, t, 0);
-			} else if (this.apply()) return this.recurse(e, t, r - 1);
-		}
-		return r += 1, r >= f.length ? this : (e.starYear ? this.year >= 3e3 : this.year >= 1e4) ? null : this.recurse(e, t, r);
+	async trigger() {
+		await this._trigger();
+	}
+	runsLeft() {
+		return this._states.maxRuns;
+	}
+	_checkTrigger(e) {
+		let t = /* @__PURE__ */ new Date(), r = !this._states.paused && t.getTime() >= e.getTime(), n = this._states.blocking && this.options.protect;
+		r && !n ? (this._states.maxRuns !== void 0 && this._states.maxRuns--, this._trigger()) : r && n && p(this.options.protect) && setTimeout(() => this.options.protect(this), 0), this.schedule();
+	}
+	_next(e) {
+		let t = !!(e || this._states.currentRun), r = !1;
+		!e && this.options.startAt && this.options.interval && ([e, t] = this._calculatePreviousRun(e, t), r = !e), e = new m(e, this.getTz()), this.options.startAt && e && e.getTime() < this.options.startAt.getTime() && (e = this.options.startAt);
+		let n = this._states.once || new m(e, this.getTz());
+		return !r && n !== this._states.once && (n = n.increment(this._states.pattern, this.options, t)), this._states.once && this._states.once.getTime() <= e.getTime() || n === null || this._states.maxRuns !== void 0 && this._states.maxRuns <= 0 || this._states.kill || this.options.stopAt && n.getTime() >= this.options.stopAt.getTime() ? null : n;
+	}
+	_previous(e) {
+		let t = new m(e, this.getTz());
+		this.options.stopAt && t.getTime() > this.options.stopAt.getTime() && (t = this.options.stopAt);
+		let r = new m(t, this.getTz());
+		return this._states.once ? this._states.once.getTime() < t.getTime() ? this._states.once : null : (r = r.decrement(this._states.pattern, this.options), r === null || this.options.startAt && r.getTime() < this.options.startAt.getTime() ? null : r);
+	}
+	_calculatePreviousRun(e, t) {
+		let r = new m(void 0, this.getTz()), n = e;
+		if (this.options.startAt.getTime() <= r.getTime()) {
+			n = this.options.startAt;
+			let i = n.getTime() + this.options.interval * 1e3;
+			for (; i <= r.getTime();) n = new m(n, this.getTz()).increment(this._states.pattern, this.options, !0), i = n.getTime() + this.options.interval * 1e3;
+			t = !0;
+		}
+		return n === null && (n = void 0), [n, t];
+	}
+};
+//#endregion
+//#region src/builtins/backup-orchestrator/cron-helpers.ts
+/**
+* Cron helpers — wraps `croner` so the orchestrator + the `previewNextRuns`
+* cap method share one validation + next-run-computation surface.
+*
+* `croner` is the opinionated node cron library we standardize on
+* server-side: pure JS, native TypeScript types, supports the full
+* 5-field POSIX cron grammar plus seconds (6-field), DST-aware, and
+* exposes `nextRun()` / `nextRuns(N)` for peeking without scheduling.
+* The orchestrator uses the peeking API (it has its own polling
+* loop); future surfaces (e.g. event-driven retention sweeps) can
+* register an actual scheduled `Cron(pattern, fn)` and let croner
+* own the timer.
+*/
+/**
+* Validate a cron expression and return its next firing time strictly
+* after `after`, expressed as ms-epoch. Returns `null` when the
+* expression has no future runs (croner returns null e.g. for
+* fully-bounded patterns that have already elapsed). Throws when the
+* expression is syntactically invalid — callers are expected to
+* surface that to the operator.
+*/
+function computeNextDue(cron, after) {
+	const next = new E(cron, { paused: true }).nextRun(new Date(after));
+	return next ? next.getTime() : null;
+}
+/**
+* Validate without computing — returns true when `cron` parses, false
+* otherwise. Used by the cap-router input zod schema's `.refine`
+* callback to reject malformed expressions at the boundary instead
+* of at scheduler-tick time.
+*/
+function isValidCron(cron) {
+	try {
+		new E(cron, { paused: true });
+		return true;
+	} catch {
+		return false;
+	}
+}
+/**
+* Peek the next N firing times after `after` (default: now). Used by
+* the admin UI's CronEditor preview pane — operators see the next
+* 3–5 runs as they edit the expression so a wrong pattern is
+* obvious before save.
+*/
+function previewNextRuns(cron, count, after) {
+	const job = new E(cron, { paused: true });
+	const baseline = after !== void 0 ? new Date(after) : /* @__PURE__ */ new Date();
+	const out = [];
+	let cursor = baseline;
+	for (let i = 0; i < count; i++) {
+		cursor = job.nextRun(cursor);
+		if (!cursor) break;
+		out.push(cursor.getTime());
+	}
+	return out;
+}
+//#endregion
+//#region src/builtins/backup-orchestrator/destination-policy.ts
+var TABLE_NAME$1 = "backup_destination_policies";
+var BACKUP_DESTINATION_POLICIES_SCHEMA = { columns: [
+	{
+		name: "location_id",
+		type: "TEXT",
+		primaryKey: true
+	},
+	{
+		name: "enabled",
+		type: "INTEGER",
+		notNull: true,
+		defaultValue: 1
+	},
+	{
+		name: "retention_count",
+		type: "INTEGER",
+		notNull: true,
+		defaultValue: 7
+	},
+	{
+		name: "label",
+		type: "TEXT"
+	},
+	{
+		name: "cron",
+		type: "TEXT"
+	},
+	{
+		name: "last_run_at",
+		type: "INTEGER"
+	}
+] };
+var BackupDestinationPolicyService = class {
+	backend;
+	tableEnsured = false;
+	constructor(backend) {
+		this.backend = backend;
 	}
-	increment(e, t, r) {
-		return this.second += t.interval !== void 0 && t.interval > 1 && r ? t.interval : 1, this.ms = 0, this.apply(), this.recurse(e, t, 0);
+	/**
+	* Lazy `ensureTable` — called from every read/write path. The
+	* settings backend's own `ensureTable` is idempotent (additive
+	* migration), so repeated calls collapse to a no-op after the first.
+	* This keeps the constructor synchronous and avoids a separate
+	* `initialize()` step that callers could forget.
+	*/
+	async initialize() {
+		await this.ensureTable();
 	}
-	decrement(e, t) {
-		return this.second -= t.interval !== void 0 && t.interval > 1 ? t.interval : 1, this.ms = 0, this.apply(), this.recurseBackward(e, t, 0, 0);
+	async ensureTable() {
+		if (this.tableEnsured) return;
+		if (!this.backend.ensureTable) throw new Error("BackupDestinationPolicyService: settings backend does not implement ensureTable — expected the SQLite settings backend, got a backend without structured-table support");
+		await this.backend.ensureTable(TABLE_NAME$1, BACKUP_DESTINATION_POLICIES_SCHEMA);
+		this.tableEnsured = true;
 	}
-	recurseBackward(e, t, r, n = 0) {
-		if (n > 1e4) return null;
-		if (r === 0 && !e.starYear) {
-			if (this.year >= 0 && this.year < e.year.length && e.year[this.year] === 0) {
-				let a = -1;
-				for (let o = this.year - 1; o >= 0; o--) if (e.year[o] === 1) {
-					a = o;
-					break;
-				}
-				if (a === -1) return null;
-				this.year = a, this.month = 11, this.day = 31, this.hour = 23, this.minute = 59, this.second = 59, this.ms = 0;
-			}
-			if (this.year < 0) return null;
-		}
-		let i = this.findPrevious(t, f[r][0], e, f[r][2]);
-		if (i > 1) {
-			let a = r + 1;
-			for (; a < f.length;) {
-				let o = f[a][0], h = f[a][2], l = this.getMaxPatternValue(o, e, h);
-				this[o] = l, a++;
-			}
-			if (i === 3) {
-				if (this[f[r][1]]--, r === 0) {
-					let y = this.getLastDayOfMonth(this.year, this.month);
-					this.day > y && (this.day = y);
-				}
-				if (r === 1) if (this.day <= 0) this.day = 1;
-				else {
-					let y = this.year, u = this.month;
-					for (; u < 0;) u += 12, y--;
-					for (; u > 11;) u -= 12, y++;
-					let d = u !== 1 ? P[u] : new Date(Date.UTC(y, u + 1, 0)).getUTCDate();
-					this.day > d && (this.day = d);
-				}
-				this.apply();
-				let o = f[r][0], h = f[r][2], l = this.getMaxPatternValue(o, e, h);
-				if (o === "day") {
-					let y = this.getLastDayOfMonth(this.year, this.month);
-					this[o] = Math.min(l, y);
-				} else this[o] = l;
-				if (this.apply(), r === 0) {
-					let y = f[1][2], u = this.getMaxPatternValue("day", e, y), d = this.getLastDayOfMonth(this.year, this.month), c = Math.min(u, d);
-					c !== this.day && (this.day = c, this.hour = this.getMaxPatternValue("hour", e, f[2][2]), this.minute = this.getMaxPatternValue("minute", e, f[3][2]), this.second = this.getMaxPatternValue("second", e, f[4][2]));
-				}
-				if (r === 0 && !e.starYear) {
-					for (; this.year >= 0 && this.year < e.year.length && e.year[this.year] === 0;) this.year--;
-					if (this.year < 0) return null;
-				}
-				return this.recurseBackward(e, t, 0, n + 1);
-			} else if (this.apply()) return this.recurseBackward(e, t, r - 1, n + 1);
+	async list() {
+		await this.ensureTable();
+		if (!this.backend.tableQuery) return [];
+		const rows = await this.backend.tableQuery(TABLE_NAME$1, { orderBy: {
+			field: "location_id",
+			direction: "asc"
+		} });
+		const out = [];
+		for (const row of rows) {
+			const mapped = mapRowToPolicy(row);
+			if (mapped) out.push(mapped);
 		}
-		return r += 1, r >= f.length ? this : this.year < 0 ? null : this.recurseBackward(e, t, r, n + 1);
+		return out;
 	}
-	getMaxPatternValue(e, t, r) {
-		if (e === "day" && t.lastDayOfMonth) return this.getLastDayOfMonth(this.year, this.month);
-		if (e === "day" && !t.starDOW) return this.getLastDayOfMonth(this.year, this.month);
-		for (let n = t[e].length - 1; n >= 0; n--) if (t[e][n]) return n - r;
-		return t[e].length - 1 - r;
+	async get(locationId) {
+		await this.ensureTable();
+		if (!this.backend.tableGet) return null;
+		const row = await this.backend.tableGet(TABLE_NAME$1, { location_id: locationId });
+		return row ? mapRowToPolicy(row) : null;
 	}
-	findPrevious(e, t, r, n) {
-		return this._findMatch(e, t, r, n, -1);
+	/**
+	* Replace-or-insert. Implemented as `delete` + `insert` (mirrors the
+	* `SqliteLocationStore` contract) so backends that don't surface
+	* `tableUpdate` still work.
+	*/
+	async upsert(p) {
+		await this.ensureTable();
+		if (!this.backend.tableDelete || !this.backend.tableInsert) throw new Error("BackupDestinationPolicyService: backend missing tableDelete/tableInsert");
+		await this.backend.tableDelete(TABLE_NAME$1, { location_id: p.locationId });
+		await this.backend.tableInsert(TABLE_NAME$1, mapPolicyToRow(p));
 	}
-	getDate(e) {
-		return e || this.tz === void 0 ? new Date(this.year, this.month, this.day, this.hour, this.minute, this.second, this.ms) : typeof this.tz == "number" ? new Date(Date.UTC(this.year, this.month, this.day, this.hour, this.minute - this.tz, this.second, this.ms)) : k(b(this.year, this.month + 1, this.day, this.hour, this.minute, this.second, this.tz), !1);
+	async delete(locationId) {
+		await this.ensureTable();
+		if (!this.backend.tableDelete) throw new Error("BackupDestinationPolicyService: backend missing tableDelete");
+		await this.backend.tableDelete(TABLE_NAME$1, { location_id: locationId });
 	}
-	getTime() {
-		return this.getDate(!1).getTime();
+	/**
+	* Auto-create a default policy for a `backups` location seen for the
+	* first time (returns the existing policy unchanged when present).
+	* The orchestrator calls this lazily on the first `listDestinations`
+	* pass so newly-added storage locations are surfaced as enabled
+	* destinations without an explicit configuration step.
+	*
+	* Defaults are passed by the orchestrator (currently:
+	* `retentionCount=7` + `cron='0 3 * * *'`) so a fresh destination
+	* starts running daily at 03:00 with 7 archives kept. Operator can
+	* tune both inline on the destinations table.
+	*/
+	async ensureDefault(locationId, defaults) {
+		const existing = await this.get(locationId);
+		if (existing) return existing;
+		const fresh = {
+			locationId,
+			enabled: true,
+			retentionCount: defaults.retentionCount,
+			...defaults.cron !== void 0 ? { cron: defaults.cron } : {}
+		};
+		await this.upsert(fresh);
+		return fresh;
 	}
-	match(e, t) {
-		if (!e.starYear && (this.year < 0 || this.year >= e.year.length || e.year[this.year] === 0)) return !1;
-		for (let r = 0; r < f.length; r++) {
-			let n = f[r][0], i = f[r][2], a = this[n];
-			if (a + i < 0 || a + i >= e[n].length) return !1;
-			let o = e[n][a + i];
-			if (n === "day") {
-				if (!o) {
-					for (let h = 0; h < e.nearestWeekdays.length; h++) if (e.nearestWeekdays[h]) {
-						let l = this.getNearestWeekday(this.year, this.month, h - i);
-						if (l !== -1 && l === a) {
-							o = 1;
-							break;
-						}
-					}
-				}
-				if (e.lastWeekday) a === this.getLastWeekday(this.year, this.month) && (o = 1);
-				if (e.lastDayOfMonth) a === this.getLastDayOfMonth(this.year, this.month) && (o = 1);
-				if (!e.starDOW) {
-					let h = new Date(Date.UTC(this.year, this.month, 1, 0, 0, 0, 0)).getUTCDay(), l = e.dayOfWeek[(h + (a - 1)) % 7];
-					l && l & 63 && (l = this.isNthWeekdayOfMonth(this.year, this.month, a, l) ? 1 : 0), e.useAndLogic ? o = o && l : !t.domAndDow && !e.starDOM ? o = o || l : o = o && l;
-				}
-			}
-			if (!o) return !1;
+};
+function mapPolicyToRow(p) {
+	return {
+		location_id: p.locationId,
+		enabled: p.enabled ? 1 : 0,
+		retention_count: p.retentionCount,
+		label: p.label ?? null,
+		cron: p.cron ?? null,
+		last_run_at: p.lastRunAt ?? null
+	};
+}
+/**
+* Decode a row pulled from the structured table. Defensive against
+* schema drift / partial migrations: returns `null` on missing
+* `location_id` so corrupt rows skip the result list rather than
+* throwing the whole orchestrator down at boot.
+*/
+function mapRowToPolicy(row) {
+	const locationId = String(row["location_id"] ?? "");
+	if (!locationId) return null;
+	const labelRaw = row["label"];
+	const label = typeof labelRaw === "string" && labelRaw.length > 0 ? labelRaw : void 0;
+	const cronRaw = row["cron"];
+	const cron = typeof cronRaw === "string" && cronRaw.length > 0 ? cronRaw : void 0;
+	const lastRunRaw = row["last_run_at"];
+	const lastRunAt = typeof lastRunRaw === "number" && lastRunRaw > 0 ? lastRunRaw : void 0;
+	return {
+		locationId,
+		enabled: row["enabled"] === 1 || row["enabled"] === true,
+		retentionCount: Number(row["retention_count"] ?? 0),
+		...label !== void 0 ? { label } : {},
+		...cron !== void 0 ? { cron } : {},
+		...lastRunAt !== void 0 ? { lastRunAt } : {}
+	};
+}
+//#endregion
+//#region src/builtins/backup-orchestrator/download-helpers.ts
+/**
+* Chunked-download helper for the backup orchestrator (Task 12 of
+* the storage-unification refactor).
+*
+* Streams an archive from a destination `StorageLocation` into a
+* local filesystem path via the consumer-facing `storage` cap. Pulled
+* out of `backup-orchestrator.addon.ts` so it can be unit-tested with
+* an in-memory fake `AddonApi['storage']` slice — the addon is hard
+* to bootstrap in vitest because of the BaseAddon ceremony.
+*
+* Cleanup contract:
+*  - Successful run leaves the cache file in place + calls
+*    `endDownload`.
+*  - Mid-stream failure destroys the writeStream, removes the
+*    partial cache file, and best-effort calls `endDownload` so the
+*    storage provider's session bookkeeping doesn't leak.
+*/
+async function downloadArchiveToCache(input) {
+	const { downloadId, sizeBytes } = await input.api.beginDownload.mutate({
+		location: input.locationId,
+		relativePath: input.filename
+	});
+	const writeStream = fs.createWriteStream(input.cachePath);
+	let offset = 0;
+	try {
+		while (offset < sizeBytes) {
+			const remaining = sizeBytes - offset;
+			const length = Math.min(input.chunkBytes, remaining);
+			const chunk = await input.api.readChunk.query({
+				downloadId,
+				offset,
+				length
+			});
+			if (chunk.byteLength === 0) throw new Error(`backup restore: empty chunk at offset ${offset}/${sizeBytes} from "${input.locationId}/${input.filename}"`);
+			writeStream.write(chunk);
+			offset += chunk.byteLength;
 		}
-		return !0;
+		await new Promise((resolve, reject) => {
+			writeStream.end((err) => {
+				if (err) reject(err);
+				else resolve();
+			});
+		});
+		try {
+			await input.api.endDownload.mutate({ downloadId });
+		} catch (err) {
+			input.logger.warn("backup restore: endDownload failed (ignoring)", { meta: {
+				downloadId,
+				error: err instanceof Error ? err.message : String(err)
+			} });
+		}
+	} catch (err) {
+		await new Promise((resolve) => {
+			writeStream.once("close", () => resolve());
+			writeStream.destroy();
+		});
+		try {
+			await fsp.rm(input.cachePath, { force: true });
+		} catch {}
+		try {
+			await input.api.endDownload.mutate({ downloadId });
+		} catch {}
+		throw err;
 	}
-};
-function R(s) {
-	if (s === void 0 && (s = {}), delete s.name, s.legacyMode !== void 0 && s.domAndDow === void 0 ? s.domAndDow = !s.legacyMode : s.domAndDow === void 0 && (s.domAndDow = !1), s.legacyMode = !s.domAndDow, s.paused = s.paused === void 0 ? !1 : s.paused, s.maxRuns = s.maxRuns === void 0 ? Infinity : s.maxRuns, s.catch = s.catch === void 0 ? !1 : s.catch, s.interval = s.interval === void 0 ? 0 : parseInt(s.interval.toString(), 10), s.utcOffset = s.utcOffset === void 0 ? void 0 : parseInt(s.utcOffset.toString(), 10), s.dayOffset = s.dayOffset === void 0 ? 0 : parseInt(s.dayOffset.toString(), 10), s.unref = s.unref === void 0 ? !1 : s.unref, s.mode = s.mode === void 0 ? "auto" : s.mode, s.alternativeWeekdays = s.alternativeWeekdays === void 0 ? !1 : s.alternativeWeekdays, s.sloppyRanges = s.sloppyRanges === void 0 ? !1 : s.sloppyRanges, ![
-		"auto",
-		"5-part",
-		"6-part",
-		"7-part",
-		"5-or-6-parts",
-		"6-or-7-parts"
-	].includes(s.mode)) throw new Error("CronOptions: mode must be one of 'auto', '5-part', '6-part', '7-part', '5-or-6-parts', or '6-or-7-parts'.");
-	if (s.startAt && (s.startAt = new m(s.startAt, s.timezone)), s.stopAt && (s.stopAt = new m(s.stopAt, s.timezone)), s.interval !== null) {
-		if (isNaN(s.interval)) throw new Error("CronOptions: Supplied value for interval is not a number");
-		if (s.interval < 0) throw new Error("CronOptions: Supplied value for interval can not be negative");
+}
+//#endregion
+//#region src/builtins/backup-orchestrator/manifest-store.ts
+/** File path (relative to the location root) where the index lives. */
+var MANIFESTS_FILENAME = "manifests.json";
+/**
+* Read the per-location manifest. Returns an empty manifest on first
+* use (when `manifests.json` doesn't exist) or when the file is
+* unreadable / corrupt — operators see destination state degrade
+* gracefully rather than the orchestrator crashing.
+*/
+async function readLocationManifest(api, locationId) {
+	if (!await api.exists.query({
+		location: locationId,
+		relativePath: "manifests.json"
+	}).catch(() => false)) return EMPTY_MANIFEST;
+	let bytes;
+	try {
+		bytes = await api.read.query({
+			location: locationId,
+			relativePath: MANIFESTS_FILENAME
+		});
+	} catch {
+		return EMPTY_MANIFEST;
 	}
-	if (s.utcOffset !== void 0) {
-		if (isNaN(s.utcOffset)) throw new Error("CronOptions: Invalid value passed for utcOffset, should be number representing minutes offset from UTC.");
-		if (s.utcOffset < -870 || s.utcOffset > 870) throw new Error("CronOptions: utcOffset out of bounds.");
-		if (s.utcOffset !== void 0 && s.timezone) throw new Error("CronOptions: Combining 'utcOffset' with 'timezone' is not allowed.");
+	return parseManifestBytes(bytes);
+}
+async function writeLocationManifest(api, locationId, manifest) {
+	const json = JSON.stringify(manifest, null, 2);
+	const bytes = new TextEncoder().encode(json);
+	await api.write.mutate({
+		location: locationId,
+		relativePath: MANIFESTS_FILENAME,
+		data: bytes
+	});
+}
+/**
+* Decode the raw bytes of `manifests.json`. Falls back to an empty
+* manifest on JSON-parse / shape-validation failure — same defensive
+* stance as the legacy `LocalBackupService.ensureManifestsLoaded`.
+*/
+function parseManifestBytes(bytes) {
+	try {
+		const text = new TextDecoder().decode(bytes);
+		if (text.trim().length === 0) return EMPTY_MANIFEST;
+		return normalizeManifest(JSON.parse(text));
+	} catch {
+		return EMPTY_MANIFEST;
 	}
-	if (s.unref !== !0 && s.unref !== !1) throw new Error("CronOptions: Unref should be either true, false or undefined(false).");
-	if (s.dayOffset !== void 0 && s.dayOffset !== 0 && isNaN(s.dayOffset)) throw new Error("CronOptions: Invalid value passed for dayOffset, should be a number representing days to offset.");
-	return s;
 }
-function p(s) {
-	return Object.prototype.toString.call(s) === "[object Function]" || typeof s == "function" || s instanceof Function;
+/**
+* Coerce an arbitrary parsed JSON shape into the canonical manifest
+* type. Bogus archive entries are silently dropped (a corrupt row
+* shouldn't lock the whole location out of operator visibility).
+*/
+function normalizeManifest(raw) {
+	if (typeof raw !== "object" || raw == null) return EMPTY_MANIFEST;
+	const obj = raw;
+	const archives = [];
+	if (Array.isArray(obj.archives)) for (const a of obj.archives) {
+		if (typeof a !== "object" || a == null) continue;
+		const cand = a;
+		if (typeof cand["id"] !== "string" || typeof cand["filename"] !== "string") continue;
+		if (typeof cand["createdAt"] !== "number" || typeof cand["sizeBytes"] !== "number") continue;
+		const manifest = cand["manifest"];
+		if (typeof manifest !== "object" || manifest == null) continue;
+		const entry = {
+			id: String(cand["id"]),
+			filename: String(cand["filename"]),
+			createdAt: Number(cand["createdAt"]),
+			sizeBytes: Number(cand["sizeBytes"]),
+			...typeof cand["label"] === "string" ? { label: cand["label"] } : {},
+			manifest
+		};
+		archives.push(entry);
+	}
+	return {
+		version: 1,
+		archives
+	};
 }
-function _(s) {
-	return p(s);
+var EMPTY_MANIFEST = {
+	version: 1,
+	archives: []
+};
+/**
+* Build a `ManifestArchiveEntry` from the raw inputs collected during
+* a successful upload. Pure transform — no I/O — kept here so the
+* triggerBackup path stays terse.
+*/
+function buildArchiveEntry(input) {
+	return {
+		id: input.id,
+		filename: input.filename,
+		createdAt: input.createdAt,
+		sizeBytes: input.sizeBytes,
+		...input.label !== void 0 ? { label: input.label } : {},
+		manifest: input.manifest
+	};
 }
-function x(s) {
-	typeof Deno < "u" && typeof Deno.unrefTimer < "u" ? Deno.unrefTimer(s) : s && typeof s.unref < "u" && s.unref();
+/**
+* Pure retention split: given an archive list and the operator's
+* `retentionCount`, return `{ keep, drop }` where `keep` is the most-
+* recent N archives (newest first) and `drop` is the older overflow.
+*
+* `retentionCount <= 0` is treated as "no pruning" — defensive against
+* a config value that would otherwise wipe every archive on the next
+* write.
+*/
+function applyRetention(archives, retentionCount) {
+	if (retentionCount <= 0) return {
+		keep: archives,
+		drop: []
+	};
+	const sorted = [...archives].toSorted((a, b) => b.createdAt - a.createdAt);
+	if (sorted.length <= retentionCount) return {
+		keep: sorted,
+		drop: []
+	};
+	return {
+		keep: sorted.slice(0, retentionCount),
+		drop: sorted.slice(retentionCount)
+	};
 }
-var W = 30 * 1e3, w = [], E = class {
-	name;
-	options;
-	_states;
-	fn;
-	getTz() {
-		return this.options.timezone || this.options.utcOffset;
-	}
-	applyDayOffset(e) {
-		if (this.options.dayOffset !== void 0 && this.options.dayOffset !== 0) {
-			let t = this.options.dayOffset * 24 * 60 * 60 * 1e3;
-			return new Date(e.getTime() + t);
-		}
-		return e;
-	}
-	constructor(e, t, r) {
-		let n, i;
-		if (p(t)) i = t;
-		else if (typeof t == "object") n = t;
-		else if (t !== void 0) throw new Error("Cron: Invalid argument passed for optionsIn. Should be one of function, or object (options).");
-		if (p(r)) i = r;
-		else if (typeof r == "object") n = r;
-		else if (r !== void 0) throw new Error("Cron: Invalid argument passed for funcIn. Should be one of function, or object (options).");
-		if (this.name = n?.name, this.options = R(n), this._states = {
-			kill: !1,
-			blocking: !1,
-			previousRun: void 0,
-			currentRun: void 0,
-			once: void 0,
-			currentTimeout: void 0,
-			maxRuns: n ? n.maxRuns : void 0,
-			paused: n ? n.paused : !1,
-			pattern: new C("* * * * *", void 0, { mode: "auto" })
-		}, e && (e instanceof Date || typeof e == "string" && e.indexOf(":") > 0) ? this._states.once = new m(e, this.getTz()) : this._states.pattern = new C(e, this.options.timezone, {
-			mode: this.options.mode,
-			alternativeWeekdays: this.options.alternativeWeekdays,
-			sloppyRanges: this.options.sloppyRanges
-		}), this.name) {
-			if (w.find((o) => o.name === this.name)) throw new Error("Cron: Tried to initialize new named job '" + this.name + "', but name already taken.");
-			w.push(this);
-		}
-		return i !== void 0 && _(i) && (this.fn = i, this.schedule()), this;
-	}
-	nextRun(e) {
-		let t = this._next(e);
-		return t ? this.applyDayOffset(t.getDate(!1)) : null;
-	}
-	nextRuns(e, t) {
-		this._states.maxRuns !== void 0 && e > this._states.maxRuns && (e = this._states.maxRuns);
-		let r = t || this._states.currentRun || void 0;
-		return this._enumerateRuns(e, r, "next");
-	}
-	previousRuns(e, t) {
-		return this._enumerateRuns(e, t || void 0, "previous");
-	}
-	_enumerateRuns(e, t, r) {
-		let n = [], i = t ? new m(t, this.getTz()) : null, a = r === "next" ? this._next : this._previous;
-		for (; e--;) {
-			let o = a.call(this, i);
-			if (!o) break;
-			let h = o.getDate(!1);
-			n.push(this.applyDayOffset(h)), i = o;
-		}
-		return n;
-	}
-	match(e) {
-		if (this._states.once) {
-			let r = new m(e, this.getTz());
-			r.ms = 0;
-			let n = new m(this._states.once, this.getTz());
-			return n.ms = 0, r.getTime() === n.getTime();
+/**
+* Per-location async mutex. The orchestrator owns one instance and
+* funnels every read-modify-write of `manifests.json` through it so
+* parallel destination uploads (within the same location) commit in
+* arrival order. Across locations the operations run in parallel —
+* each location keys its own promise chain.
+*/
+var LocationManifestLock = class {
+	chains = /* @__PURE__ */ new Map();
+	async run(locationId, fn) {
+		const previous = this.chains.get(locationId) ?? Promise.resolve();
+		let resolveNext;
+		const next = new Promise((res) => {
+			resolveNext = res;
+		});
+		this.chains.set(locationId, previous.then(() => next));
+		try {
+			await previous;
+			return await fn();
+		} finally {
+			resolveNext();
+			const tail = this.chains.get(locationId);
+			if (tail) Promise.resolve(tail).then(() => {
+				if (this.chains.get(locationId) === tail) this.chains.delete(locationId);
+			}).catch(() => {});
 		}
-		let t = new m(e, this.getTz());
-		return t.ms = 0, t.match(this._states.pattern, this.options);
-	}
-	getPattern() {
-		if (!this._states.once) return this._states.pattern ? this._states.pattern.pattern : void 0;
-	}
-	getOnce() {
-		return this._states.once ? this._states.once.getDate() : null;
-	}
-	isRunning() {
-		let e = this.nextRun(this._states.currentRun), t = !this._states.paused, r = this.fn !== void 0, n = !this._states.kill;
-		return t && r && n && e !== null;
-	}
-	isStopped() {
-		return this._states.kill;
-	}
-	isBusy() {
-		return this._states.blocking;
-	}
-	currentRun() {
-		return this._states.currentRun ? this._states.currentRun.getDate() : null;
-	}
-	previousRun() {
-		return this._states.previousRun ? this._states.previousRun.getDate() : null;
-	}
-	msToNext(e) {
-		let t = this._next(e);
-		return t ? e instanceof m || e instanceof Date ? t.getTime() - e.getTime() : t.getTime() - new m(e).getTime() : null;
 	}
-	stop() {
-		this._states.kill = !0, this._states.currentTimeout && clearTimeout(this._states.currentTimeout);
-		let e = w.indexOf(this);
-		e >= 0 && w.splice(e, 1);
+};
+//#endregion
+//#region src/builtins/backup-orchestrator/schedule-store.ts
+var TABLE_NAME = "backup_schedules";
+var BACKUP_SCHEDULES_SCHEMA = { columns: [
+	{
+		name: "id",
+		type: "TEXT",
+		primaryKey: true
+	},
+	{
+		name: "label",
+		type: "TEXT",
+		notNull: true,
+		defaultValue: ""
+	},
+	{
+		name: "cron",
+		type: "TEXT",
+		notNull: true,
+		defaultValue: ""
+	},
+	{
+		name: "enabled",
+		type: "INTEGER",
+		notNull: true,
+		defaultValue: 1
+	},
+	{
+		name: "location_ids",
+		type: "TEXT",
+		notNull: true,
+		defaultValue: "[]"
+	},
+	{
+		name: "retention_count",
+		type: "INTEGER",
+		notNull: true,
+		defaultValue: 7
+	},
+	{
+		name: "data_sources",
+		type: "TEXT"
+	},
+	{
+		name: "last_run_at",
+		type: "INTEGER"
 	}
-	pause() {
-		return this._states.paused = !0, !this._states.kill;
+] };
+var BackupScheduleService = class {
+	backend;
+	tableEnsured = false;
+	constructor(backend) {
+		this.backend = backend;
 	}
-	resume() {
-		return this._states.paused = !1, !this._states.kill;
+	async initialize() {
+		await this.ensureTable();
 	}
-	schedule(e) {
-		if (e && this.fn) throw new Error("Cron: It is not allowed to schedule two functions using the same Croner instance.");
-		e && (this.fn = e);
-		let t = this.msToNext(), r = this.nextRun(this._states.currentRun);
-		return t == null || isNaN(t) || r === null ? this : (t > W && (t = W), this._states.currentTimeout = setTimeout(() => this._checkTrigger(r), t), this._states.currentTimeout && this.options.unref && x(this._states.currentTimeout), this);
+	async ensureTable() {
+		if (this.tableEnsured) return;
+		if (!this.backend.ensureTable) throw new Error("BackupScheduleService: settings backend does not implement ensureTable — expected the SQLite settings backend, got a backend without structured-table support");
+		await this.backend.ensureTable(TABLE_NAME, BACKUP_SCHEDULES_SCHEMA);
+		this.tableEnsured = true;
 	}
-	async _trigger(e) {
-		this._states.blocking = !0, this._states.currentRun = new m(void 0, this.getTz());
-		try {
-			if (this.options.catch) try {
-				this.fn !== void 0 && await this.fn(this, this.options.context);
-			} catch (t) {
-				if (p(this.options.catch)) try {
-					this.options.catch(t, this);
-				} catch {}
-			}
-			else this.fn !== void 0 && await this.fn(this, this.options.context);
-		} finally {
-			this._states.previousRun = new m(e, this.getTz()), this._states.blocking = !1;
+	async list() {
+		await this.ensureTable();
+		if (!this.backend.tableQuery) return [];
+		const rows = await this.backend.tableQuery(TABLE_NAME, { orderBy: {
+			field: "id",
+			direction: "asc"
+		} });
+		const out = [];
+		for (const row of rows) {
+			const mapped = mapRowToSchedule(row);
+			if (mapped) out.push(mapped);
 		}
+		return out;
 	}
-	async trigger() {
-		await this._trigger();
-	}
-	runsLeft() {
-		return this._states.maxRuns;
-	}
-	_checkTrigger(e) {
-		let t = /* @__PURE__ */ new Date(), r = !this._states.paused && t.getTime() >= e.getTime(), n = this._states.blocking && this.options.protect;
-		r && !n ? (this._states.maxRuns !== void 0 && this._states.maxRuns--, this._trigger()) : r && n && p(this.options.protect) && setTimeout(() => this.options.protect(this), 0), this.schedule();
-	}
-	_next(e) {
-		let t = !!(e || this._states.currentRun), r = !1;
-		!e && this.options.startAt && this.options.interval && ([e, t] = this._calculatePreviousRun(e, t), r = !e), e = new m(e, this.getTz()), this.options.startAt && e && e.getTime() < this.options.startAt.getTime() && (e = this.options.startAt);
-		let n = this._states.once || new m(e, this.getTz());
-		return !r && n !== this._states.once && (n = n.increment(this._states.pattern, this.options, t)), this._states.once && this._states.once.getTime() <= e.getTime() || n === null || this._states.maxRuns !== void 0 && this._states.maxRuns <= 0 || this._states.kill || this.options.stopAt && n.getTime() >= this.options.stopAt.getTime() ? null : n;
+	async get(id) {
+		await this.ensureTable();
+		if (!this.backend.tableGet) return null;
+		const row = await this.backend.tableGet(TABLE_NAME, { id });
+		return row ? mapRowToSchedule(row) : null;
 	}
-	_previous(e) {
-		let t = new m(e, this.getTz());
-		this.options.stopAt && t.getTime() > this.options.stopAt.getTime() && (t = this.options.stopAt);
-		let r = new m(t, this.getTz());
-		return this._states.once ? this._states.once.getTime() < t.getTime() ? this._states.once : null : (r = r.decrement(this._states.pattern, this.options), r === null || this.options.startAt && r.getTime() < this.options.startAt.getTime() ? null : r);
+	/** Replace-or-insert (delete + insert — mirrors the policy store). */
+	async upsert(s) {
+		await this.ensureTable();
+		if (!this.backend.tableDelete || !this.backend.tableInsert) throw new Error("BackupScheduleService: backend missing tableDelete/tableInsert");
+		await this.backend.tableDelete(TABLE_NAME, { id: s.id });
+		await this.backend.tableInsert(TABLE_NAME, mapScheduleToRow(s));
 	}
-	_calculatePreviousRun(e, t) {
-		let r = new m(void 0, this.getTz()), n = e;
-		if (this.options.startAt.getTime() <= r.getTime()) {
-			n = this.options.startAt;
-			let i = n.getTime() + this.options.interval * 1e3;
-			for (; i <= r.getTime();) n = new m(n, this.getTz()).increment(this._states.pattern, this.options, !0), i = n.getTime() + this.options.interval * 1e3;
-			t = !0;
-		}
-		return n === null && (n = void 0), [n, t];
+	async delete(id) {
+		await this.ensureTable();
+		if (!this.backend.tableDelete) throw new Error("BackupScheduleService: backend missing tableDelete");
+		await this.backend.tableDelete(TABLE_NAME, { id });
 	}
 };
-//#endregion
-//#region src/builtins/backup-orchestrator/cron-helpers.ts
-/**
-* Cron helpers — wraps `croner` so the orchestrator + the `previewNextRuns`
-* cap method share one validation + next-run-computation surface.
-*
-* `croner` is the opinionated node cron library we standardize on
-* server-side: pure JS, native TypeScript types, supports the full
-* 5-field POSIX cron grammar plus seconds (6-field), DST-aware, and
-* exposes `nextRun()` / `nextRuns(N)` for peeking without scheduling.
-* The orchestrator uses the peeking API (it has its own polling
-* loop); future surfaces (e.g. event-driven retention sweeps) can
-* register an actual scheduled `Cron(pattern, fn)` and let croner
-* own the timer.
-*/
-/**
-* Validate a cron expression and return its next firing time strictly
-* after `after`, expressed as ms-epoch. Returns `null` when the
-* expression has no future runs (croner returns null e.g. for
-* fully-bounded patterns that have already elapsed). Throws when the
-* expression is syntactically invalid — callers are expected to
-* surface that to the operator.
-*/
-function computeNextDue(cron, after) {
-	const next = new E(cron, { paused: true }).nextRun(new Date(after));
-	return next ? next.getTime() : null;
+function mapScheduleToRow(s) {
+	return {
+		id: s.id,
+		label: s.label,
+		cron: s.cron,
+		enabled: s.enabled ? 1 : 0,
+		location_ids: JSON.stringify([...s.locationIds]),
+		retention_count: s.retentionCount,
+		data_sources: s.dataSources ? JSON.stringify([...s.dataSources]) : null,
+		last_run_at: s.lastRunAt ?? null
+	};
 }
-/**
-* Validate without computing — returns true when `cron` parses, false
-* otherwise. Used by the cap-router input zod schema's `.refine`
-* callback to reject malformed expressions at the boundary instead
-* of at scheduler-tick time.
-*/
-function isValidCron(cron) {
+function parseStringArray(raw) {
+	if (typeof raw !== "string" || raw.length === 0) return [];
 	try {
-		new E(cron, { paused: true });
-		return true;
+		const parsed = JSON.parse(raw);
+		if (!Array.isArray(parsed)) return [];
+		return parsed.filter((v) => typeof v === "string");
 	} catch {
-		return false;
+		return [];
 	}
 }
-/**
-* Peek the next N firing times after `after` (default: now). Used by
-* the admin UI's CronEditor preview pane — operators see the next
-* 3–5 runs as they edit the expression so a wrong pattern is
-* obvious before save.
-*/
-function previewNextRuns(cron, count, after) {
-	const job = new E(cron, { paused: true });
-	const baseline = after !== void 0 ? new Date(after) : /* @__PURE__ */ new Date();
-	const out = [];
-	let cursor = baseline;
-	for (let i = 0; i < count; i++) {
-		cursor = job.nextRun(cursor);
-		if (!cursor) break;
-		out.push(cursor.getTime());
-	}
-	return out;
+function mapRowToSchedule(row) {
+	const id = String(row["id"] ?? "");
+	if (!id) return null;
+	const dataSourcesRaw = row["data_sources"];
+	const dataSources = typeof dataSourcesRaw === "string" && dataSourcesRaw.length > 0 ? parseStringArray(dataSourcesRaw) : void 0;
+	const lastRunRaw = row["last_run_at"];
+	const lastRunAt = typeof lastRunRaw === "number" && lastRunRaw > 0 ? lastRunRaw : void 0;
+	return {
+		id,
+		label: typeof row["label"] === "string" ? String(row["label"]) : "",
+		cron: typeof row["cron"] === "string" ? String(row["cron"]) : "",
+		enabled: row["enabled"] === 1 || row["enabled"] === true,
+		locationIds: parseStringArray(row["location_ids"]),
+		retentionCount: Number(row["retention_count"] ?? 7),
+		...dataSources !== void 0 ? { dataSources } : {},
+		...lastRunAt !== void 0 ? { lastRunAt } : {}
+	};
 }
 //#endregion
 //#region src/builtins/backup-orchestrator/backup-orchestrator.addon.ts
@@ -4620,6 +4763,7 @@ var ORCHESTRATOR_ADDON_ID = "backup-orchestrator";
 var BackupOrchestratorAddon = class extends BaseAddon {
 	systemBackup = null;
 	policies = null;
+	schedules = null;
 	dataDir = "";
 	/**
 	* Transient build buffer for archive fan-out. The tar is built here
@@ -4653,6 +4797,14 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 			this.ctx.logger.error("backup-orchestrator: policy table init failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
 			this.policies = null;
 		}
+		this.schedules = this.resolveScheduleService();
+		if (this.schedules) try {
+			await this.schedules.initialize();
+			await this.migrateLegacyCronToSchedules();
+		} catch (err) {
+			this.ctx.logger.error("backup-orchestrator: schedule table init failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
+			this.schedules = null;
+		}
 		const provider = {
 			listDestinations: () => this.listDestinations(),
 			list: () => this.aggregatedList(),
@@ -4663,7 +4815,10 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 			delete: (input) => this.deleteArchive(input),
 			listArchives: (input) => this.listArchives(input),
 			upsertDestinationPolicy: (input) => this.upsertDestinationPolicy(input),
-			previewSchedule: (input) => this.previewSchedule(input)
+			previewSchedule: (input) => this.previewSchedule(input),
+			listSchedules: () => this.listSchedules(),
+			upsertSchedule: (input) => this.upsertSchedule(input),
+			deleteSchedule: (input) => this.deleteSchedule(input)
 		};
 		this.startScheduleTimer();
 		this.ctx.logger.info("Backup orchestrator initialized", { meta: {
@@ -4679,6 +4834,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 		this.stopScheduleTimer();
 		this.systemBackup = null;
 		this.policies = null;
+		this.schedules = null;
 	}
 	/**
 	* Aggregate destinations from `api.storage.listLocations({ type: 'backups' })`
@@ -4860,7 +5016,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 					cachePath,
 					sizeBytes: result.sizeBytes,
 					archiveManifest: result.manifest,
-					retentionCount: policy.retentionCount,
+					retentionCount: input?.retentionCount ?? policy.retentionCount,
 					createdAt,
 					label: formatArchiveLabel(dest.id, createdAt, input?.label)
 				});
@@ -5153,65 +5309,177 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 		this.scheduleTimer = null;
 	}
 	/**
-	* Per-destination cron-based scheduling. Walks every enabled
-	* destination policy that carries a `cron` expression, computes the
-	* next due time after `lastRunAt` (or the orchestrator's first-tick
-	* baseline if never run), and fires a backup targeting that single
-	* destination when due. Each destination keeps its own cadence —
-	* an offsite SFTP can run weekly while local stays nightly without
-	* any global setting.
+	* Schedule-driven backup scheduling. Walks every enabled backup
+	* SCHEDULE (the N:M entry), computes the next due time after
+	* `lastRunAt` (or the orchestrator's first-tick baseline if never
+	* run), and fires a SINGLE archive fanned out to ALL of the
+	* schedule's `locationIds` when due — with the schedule's per-entry
+	* retention applied to each. Each schedule keeps its own cadence.
 	*
-	* Errors per destination are isolated; one misconfigured cron
-	* doesn't block the others. The policy's `lastRunAt` is updated
-	* BEFORE the trigger to dedupe (the tick runs every
-	* SCHEDULE_TICK_MS — without the up-front update a long-running
-	* upload could overlap with the next tick's same-due check).
+	* Errors per schedule are isolated; one misconfigured cron doesn't
+	* block the others. The schedule's `lastRunAt` is updated BEFORE the
+	* trigger to dedupe (the tick runs every SCHEDULE_TICK_MS — without
+	* the up-front update a long-running upload could overlap with the
+	* next tick's same-due check).
 	*/
 	async onScheduleTick() {
-		if (!this.policies) return;
-		const policies = await this.policies.list();
+		if (!this.schedules) return;
+		const schedules = await this.schedules.list();
 		const now = Date.now();
-		for (const p of policies) {
-			if (!p.enabled || !p.cron || p.cron.trim().length === 0) continue;
+		for (const s of schedules) {
+			if (!s.enabled || !s.cron || s.cron.trim().length === 0) continue;
+			if (s.locationIds.length === 0) continue;
 			let due;
 			try {
-				due = computeNextDue(p.cron, p.lastRunAt ?? this.scheduleBaselineAt);
+				due = computeNextDue(s.cron, s.lastRunAt ?? this.scheduleBaselineAt);
 			} catch (err) {
-				this.ctx.logger.warn("Invalid cron — skipping destination", { meta: {
-					locationId: p.locationId,
-					cron: p.cron,
+				this.ctx.logger.warn("Invalid cron — skipping schedule", { meta: {
+					scheduleId: s.id,
+					cron: s.cron,
 					error: err instanceof Error ? err.message : String(err)
 				} });
 				continue;
 			}
 			if (due === null || due > now) continue;
 			const stamped = {
-				...p,
+				...s,
 				lastRunAt: now
 			};
 			try {
-				await this.policies.upsert(stamped);
+				await this.schedules.upsert(stamped);
 			} catch (err) {
 				this.ctx.logger.warn("Failed to persist scheduled-run timestamp", { meta: {
-					locationId: p.locationId,
+					scheduleId: s.id,
 					error: err instanceof Error ? err.message : String(err)
 				} });
 			}
 			try {
-				this.ctx.logger.info("Scheduled backup firing for destination", { meta: {
-					locationId: p.locationId,
-					cron: p.cron,
+				this.ctx.logger.info("Scheduled backup firing", { meta: {
+					scheduleId: s.id,
+					label: s.label,
+					locationIds: s.locationIds,
+					cron: s.cron,
 					dueAt: due
 				} });
-				await this.triggerBackup({ destinations: [p.locationId] });
+				await this.triggerBackup({
+					destinations: [...s.locationIds],
+					...s.dataSources && s.dataSources.length > 0 ? { locations: [...s.dataSources] } : {},
+					label: s.label,
+					retentionCount: s.retentionCount
+				});
 			} catch (err) {
 				this.ctx.logger.error("Scheduled backup failed", { meta: {
+					scheduleId: s.id,
+					error: err instanceof Error ? err.message : String(err)
+				} });
+			}
+		}
+	}
+	async listSchedules() {
+		if (!this.schedules) return [];
+		return (await this.schedules.list()).map((s) => {
+			let nextRunAt;
+			if (s.enabled && s.cron.trim().length > 0) try {
+				const next = computeNextDue(s.cron, Date.now());
+				if (next !== null) nextRunAt = next;
+			} catch {}
+			return {
+				id: s.id,
+				label: s.label,
+				cron: s.cron,
+				enabled: s.enabled,
+				locationIds: [...s.locationIds],
+				retentionCount: s.retentionCount,
+				...s.dataSources !== void 0 ? { dataSources: [...s.dataSources] } : {},
+				...s.lastRunAt !== void 0 ? { lastRunAt: s.lastRunAt } : {},
+				...nextRunAt !== void 0 ? { nextRunAt } : {}
+			};
+		});
+	}
+	async upsertSchedule(input) {
+		if (!this.schedules) throw new Error("backup upsertSchedule: no settings-store backend — schedule cannot be persisted");
+		const cron = input.cron.trim();
+		if (cron.length > 0 && !isValidCron(cron)) throw new Error(`Invalid cron expression: "${cron}"`);
+		const id = input.id && input.id.length > 0 ? input.id : randomUUID();
+		const existing = await this.schedules.get(id).catch(() => null);
+		const next = {
+			id,
+			label: input.label,
+			cron,
+			enabled: input.enabled,
+			locationIds: [...input.locationIds],
+			retentionCount: input.retentionCount,
+			...input.dataSources && input.dataSources.length > 0 ? { dataSources: [...input.dataSources] } : {},
+			...existing?.lastRunAt !== void 0 ? { lastRunAt: existing.lastRunAt } : {}
+		};
+		await this.schedules.upsert(next);
+		let nextRunAt;
+		if (next.enabled && cron.length > 0) try {
+			const due = computeNextDue(cron, Date.now());
+			if (due !== null) nextRunAt = due;
+		} catch {}
+		return {
+			id: next.id,
+			label: next.label,
+			cron: next.cron,
+			enabled: next.enabled,
+			locationIds: [...next.locationIds],
+			retentionCount: next.retentionCount,
+			...next.dataSources !== void 0 ? { dataSources: [...next.dataSources] } : {},
+			...next.lastRunAt !== void 0 ? { lastRunAt: next.lastRunAt } : {},
+			...nextRunAt !== void 0 ? { nextRunAt } : {}
+		};
+	}
+	async deleteSchedule(input) {
+		if (!this.schedules) return;
+		await this.schedules.delete(input.id);
+	}
+	/**
+	* One-shot migration: pre-schedule installs carried the cron on each
+	* `BackupDestinationPolicy`. When the schedule table is empty but
+	* policies with crons exist, mint one schedule per cron'd destination
+	* so existing scheduled backups keep firing after the redesign. The
+	* legacy per-location cron is left intact but the scheduler no longer
+	* reads it, so no double-fire.
+	*/
+	async migrateLegacyCronToSchedules() {
+		if (!this.schedules || !this.policies) return;
+		if ((await this.schedules.list()).length > 0) return;
+		const cronned = (await this.policies.list()).filter((p) => p.cron && p.cron.trim().length > 0);
+		if (cronned.length === 0) return;
+		for (const p of cronned) {
+			const schedule = {
+				id: randomUUID(),
+				label: p.label ?? p.locationId,
+				cron: p.cron ?? "",
+				enabled: p.enabled,
+				locationIds: [p.locationId],
+				retentionCount: p.retentionCount,
+				...p.lastRunAt !== void 0 ? { lastRunAt: p.lastRunAt } : {}
+			};
+			try {
+				await this.schedules.upsert(schedule);
+				this.ctx.logger.info("Migrated legacy per-location cron to schedule", { meta: {
+					locationId: p.locationId,
+					scheduleId: schedule.id,
+					cron: schedule.cron
+				} });
+			} catch (err) {
+				this.ctx.logger.warn("Legacy cron migration failed for destination", { meta: {
 					locationId: p.locationId,
 					error: err instanceof Error ? err.message : String(err)
 				} });
 			}
 		}
 	}
+	resolveScheduleService() {
+		const reg = this.ctx.kernel.capabilityRegistry;
+		if (!reg) return null;
+		const backend = reg.getSingleton("settings-store");
+		if (!backend) return null;
+		if (!backend.ensureTable || !backend.tableInsert) return null;
+		return new BackupScheduleService(backend);
+	}
 	resolvePolicyService() {
 		const reg = this.ctx.kernel.capabilityRegistry;
 		if (!reg) return null;