@camstack/system 1.2.419 → 1.2.420

package/dist/{restore-archive-gGHgAZsz.mjs → restore-archive-Bt65Em24.mjs}

@@ -3,15 +3,15 @@ import { createCipheriv, createDecipheriv, createHash, createPrivateKey, createP
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";
 import jn from "node:fs/promises";
-import * as path$2 from "node:path";
+import * as path$1 from "node:path";
 import path, { basename, join, posix, win32 } from "node:path";
-import * as fs$2 from "node:fs";
+import * as fs$1 from "node:fs";
 import Kt from "node:fs";
 import { EventEmitter } from "node:events";
 import As, { Transform } from "node:stream";
 import { StringDecoder } from "node:string_decoder";
-import fs from "fs";
-import path$1, { dirname as dirname$1, parse } from "path";
+import I from "fs";
+import qs, { dirname as dirname$1, parse } from "path";
 import * as Ms from "zlib";
 import Jr from "zlib";
 import Pi from "assert";
@@ -376,7 +376,7 @@ async function readBackupEncryptionHeader(file) {
 async function decryptBackupFile(input, output, secretKey) {
 	const decrypt = createBackupDecryptStream(secretKey);
 	try {
-		await pipeline(fs$2.createReadStream(input), decrypt, fs$2.createWriteStream(output, { mode: 384 }));
+		await pipeline(fs$1.createReadStream(input), decrypt, fs$1.createWriteStream(output, { mode: 384 }));
 	} catch (err) {
 		await fsp.rm(output, { force: true }).catch(() => void 0);
 		throw err;
@@ -714,7 +714,7 @@ while (this[Ns](this[Ae]()) && this[b].length);
 		return zr;
 	}
 };
-var Xr = fs.writev, ot = Symbol("_autoClose"), H = Symbol("_close"), te = Symbol("_ended"), m = Symbol("_fd"), Ni = Symbol("_finished"), j = Symbol("_flags"), Di = Symbol("_flush"), Ci = Symbol("_handleChunk"), ki = Symbol("_makeBuf"), ie = Symbol("_mode"), Ce = Symbol("_needDrain"), Ut = Symbol("_onerror"), Ht = Symbol("_onopen"), Ai = Symbol("_onread"), Pt = Symbol("_onwrite"), ht = Symbol("_open"), U = Symbol("_path"), nt = Symbol("_pos"), Y = Symbol("_queue"), zt = Symbol("_read"), Ii = Symbol("_readSize"), J = Symbol("_reading"), ee = Symbol("_remain"), Fi = Symbol("_size"), ke = Symbol("_write"), gt = Symbol("_writing"), ve = Symbol("_defaultFlag"), bt = Symbol("_errored"), _t = class extends A {
+var Xr = I.writev, ot = Symbol("_autoClose"), H = Symbol("_close"), te = Symbol("_ended"), m = Symbol("_fd"), Ni = Symbol("_finished"), j = Symbol("_flags"), Di = Symbol("_flush"), Ci = Symbol("_handleChunk"), ki = Symbol("_makeBuf"), ie = Symbol("_mode"), Ce = Symbol("_needDrain"), Ut = Symbol("_onerror"), Ht = Symbol("_onopen"), Ai = Symbol("_onread"), Pt = Symbol("_onwrite"), ht = Symbol("_open"), U = Symbol("_path"), nt = Symbol("_pos"), Y = Symbol("_queue"), zt = Symbol("_read"), Ii = Symbol("_readSize"), J = Symbol("_reading"), ee = Symbol("_remain"), Fi = Symbol("_size"), ke = Symbol("_write"), gt = Symbol("_writing"), ve = Symbol("_defaultFlag"), bt = Symbol("_errored"), _t = class extends A {
 	[bt] = !1;
 	[m];
 	[U];
@@ -740,7 +740,7 @@ var Xr = fs.writev, ot = Symbol("_autoClose"), H = Symbol("_close"), te = Symbol
 		throw new TypeError("this is a readable stream");
 	}
 	[ht]() {
-		fs.open(this[U], "r", (t, e) => this[Ht](t, e));
+		I.open(this[U], "r", (t, e) => this[Ht](t, e));
 	}
 	[Ht](t, e) {
 		t ? this[Ut](t) : (this[m] = e, this.emit("open", e), this[zt]());
@@ -753,7 +753,7 @@ var Xr = fs.writev, ot = Symbol("_autoClose"), H = Symbol("_close"), te = Symbol
 			this[J] = !0;
 			let t = this[ki]();
 			if (t.length === 0) return process.nextTick(() => this[Ai](null, 0, t));
-			fs.read(this[m], t, 0, t.length, null, (e, i, r) => this[Ai](e, i, r));
+			I.read(this[m], t, 0, t.length, null, (e, i, r) => this[Ai](e, i, r));
 		}
 	}
 	[Ai](t, e, i) {
@@ -762,7 +762,7 @@ var Xr = fs.writev, ot = Symbol("_autoClose"), H = Symbol("_close"), te = Symbol
 	[H]() {
 		if (this[ot] && typeof this[m] == "number") {
 			let t = this[m];
-			this[m] = void 0, fs.close(t, (e) => e ? this.emit("error", e) : this.emit("close"));
+			this[m] = void 0, I.close(t, (e) => e ? this.emit("error", e) : this.emit("close"));
 		}
 	}
 	[Ut](t) {
@@ -785,7 +785,7 @@ var Xr = fs.writev, ot = Symbol("_autoClose"), H = Symbol("_close"), te = Symbol
 	[ht]() {
 		let t = !0;
 		try {
-			this[Ht](null, fs.openSync(this[U], "r")), t = !1;
+			this[Ht](null, I.openSync(this[U], "r")), t = !1;
 		} finally {
 			t && this[H]();
 		}
@@ -796,7 +796,7 @@ var Xr = fs.writev, ot = Symbol("_autoClose"), H = Symbol("_close"), te = Symbol
 			if (!this[J]) {
 				this[J] = !0;
 				do {
-					let e = this[ki](), i = e.length === 0 ? 0 : fs.readSync(this[m], e, 0, e.length, null);
+					let e = this[ki](), i = e.length === 0 ? 0 : I.readSync(this[m], e, 0, e.length, null);
 					if (!this[Ci](i, e)) break;
 				} while (!0);
 				this[J] = !1;
@@ -809,7 +809,7 @@ var Xr = fs.writev, ot = Symbol("_autoClose"), H = Symbol("_close"), te = Symbol
 	[H]() {
 		if (this[ot] && typeof this[m] == "number") {
 			let t = this[m];
-			this[m] = void 0, fs.closeSync(t), this.emit("close");
+			this[m] = void 0, I.closeSync(t), this.emit("close");
 		}
 	}
 }, tt = class extends $r {
@@ -850,7 +850,7 @@ var Xr = fs.writev, ot = Symbol("_autoClose"), H = Symbol("_close"), te = Symbol
 		this[H](), this[gt] = !0, this.emit("error", t);
 	}
 	[ht]() {
-		fs.open(this[U], this[j], this[ie], (t, e) => this[Ht](t, e));
+		I.open(this[U], this[j], this[ie], (t, e) => this[Ht](t, e));
 	}
 	[Ht](t, e) {
 		this[ve] && this[j] === "r+" && t && t.code === "ENOENT" ? (this[j] = "w", this[ht]()) : t ? this[Ut](t) : (this[m] = e, this.emit("open", e), this[gt] || this[Di]());
@@ -862,7 +862,7 @@ var Xr = fs.writev, ot = Symbol("_autoClose"), H = Symbol("_close"), te = Symbol
 		return typeof t == "string" && (t = Buffer.from(t, e)), this[te] ? (this.emit("error", /* @__PURE__ */ new Error("write() after end()")), !1) : this[m] === void 0 || this[gt] || this[Y].length ? (this[Y].push(t), this[Ce] = !0, !1) : (this[gt] = !0, this[ke](t), !0);
 	}
 	[ke](t) {
-		fs.write(this[m], t, 0, t.length, this[nt], (e, i) => this[Pt](e, i));
+		I.write(this[m], t, 0, t.length, this[nt], (e, i) => this[Pt](e, i));
 	}
 	[Pt](t, e) {
 		t ? this[Ut](t) : (this[nt] !== void 0 && typeof e == "number" && (this[nt] += e), this[Y].length ? this[Di]() : (this[gt] = !1, this[te] && !this[Ni] ? (this[Ni] = !0, this[H](), this.emit("finish")) : this[Ce] && (this[Ce] = !1, this.emit("drain"))));
@@ -878,31 +878,31 @@ var Xr = fs.writev, ot = Symbol("_autoClose"), H = Symbol("_close"), te = Symbol
 	[H]() {
 		if (this[ot] && typeof this[m] == "number") {
 			let t = this[m];
-			this[m] = void 0, fs.close(t, (e) => e ? this.emit("error", e) : this.emit("close"));
+			this[m] = void 0, I.close(t, (e) => e ? this.emit("error", e) : this.emit("close"));
 		}
 	}
 }, Wt = class extends tt {
 	[ht]() {
 		let t;
 		if (this[ve] && this[j] === "r+") try {
-			t = fs.openSync(this[U], this[j], this[ie]);
+			t = I.openSync(this[U], this[j], this[ie]);
 		} catch (e) {
 			if (e?.code === "ENOENT") return this[j] = "w", this[ht]();
 			throw e;
 		}
-		else t = fs.openSync(this[U], this[j], this[ie]);
+		else t = I.openSync(this[U], this[j], this[ie]);
 		this[Ht](null, t);
 	}
 	[H]() {
 		if (this[ot] && typeof this[m] == "number") {
 			let t = this[m];
-			this[m] = void 0, fs.closeSync(t), this.emit("close");
+			this[m] = void 0, I.closeSync(t), this.emit("close");
 		}
 	}
 	[ke](t) {
 		let e = !0;
 		try {
-			this[Pt](null, fs.writeSync(this[m], t, 0, t.length, this[nt])), e = !1;
+			this[Pt](null, I.writeSync(this[m], t, 0, t.length, this[nt])), e = !1;
 		} finally {
 			if (e) try {
 				this[H]();
@@ -1862,7 +1862,7 @@ var er = (s, t) => t ? (s = f(s).replace(/^\.(\/|$)/, ""), mt(t) + "/" + s) : f(
 			let [o, a] = le(this.path);
 			o && typeof a == "string" && (this.path = a, r = o);
 		}
-		this.win32 = !!i.win32 || process.platform === "win32", this.win32 && (this.path = $s(this.path.replaceAll(/\\/g, "/")), t = t.replaceAll(/\\/g, "/")), this.absolute = f(i.absolute || path$1.resolve(this.cwd, t)), this.path === "" && (this.path = "./"), r && this.warn("TAR_ENTRY_INFO", `stripping ${r} from absolute path`, {
+		this.win32 = !!i.win32 || process.platform === "win32", this.win32 && (this.path = $s(this.path.replaceAll(/\\/g, "/")), t = t.replaceAll(/\\/g, "/")), this.absolute = f(i.absolute || qs.resolve(this.cwd, t)), this.path === "" && (this.path = "./"), r && this.warn("TAR_ENTRY_INFO", `stripping ${r} from absolute path`, {
 			entry: this,
 			path: r + this.path
 		});
@@ -1876,7 +1876,7 @@ var er = (s, t) => t ? (s = f(s).replace(/^\.(\/|$)/, ""), mt(t) + "/" + s) : f(
 		return t === "error" && (this.#t = !0), super.emit(t, ...e);
 	}
 	[es]() {
-		fs.lstat(this.absolute, (t, e) => {
+		I.lstat(this.absolute, (t, e) => {
 			if (t) return this.emit("error", t);
 			this[ii](e);
 		});
@@ -1935,7 +1935,7 @@ var er = (s, t) => t ? (s = f(s).replace(/^\.(\/|$)/, ""), mt(t) + "/" + s) : f(
 		this.path.slice(-1) !== "/" && (this.path += "/"), this.stat.size = 0, this[ce](), this.end();
 	}
 	[ts]() {
-		fs.readlink(this.absolute, (t, e) => {
+		I.readlink(this.absolute, (t, e) => {
 			if (t) return this.emit("error", t);
 			this[ss](e);
 		});
@@ -1945,7 +1945,7 @@ var er = (s, t) => t ? (s = f(s).replace(/^\.(\/|$)/, ""), mt(t) + "/" + s) : f(
 	}
 	[tr](t) {
 		if (!this.stat) throw new Error("cannot create link entry without stat");
-		this.type = "Link", this.linkpath = f(path$1.relative(this.cwd, t)), this.stat.size = 0, this[ce](), this.end();
+		this.type = "Link", this.linkpath = f(qs.relative(this.cwd, t)), this.stat.size = 0, this[ce](), this.end();
 	}
 	[Js]() {
 		if (!this.stat) throw new Error("cannot create file entry without stat");
@@ -1958,7 +1958,7 @@ var er = (s, t) => t ? (s = f(s).replace(/^\.(\/|$)/, ""), mt(t) + "/" + s) : f(
 		this[rs]();
 	}
 	[rs]() {
-		fs.open(this.absolute, "r", (t, e) => {
+		I.open(this.absolute, "r", (t, e) => {
 			if (t) return this.emit("error", t);
 			this[ns](e);
 		});
@@ -1973,13 +1973,13 @@ var er = (s, t) => t ? (s = f(s).replace(/^\.(\/|$)/, ""), mt(t) + "/" + s) : f(
 	[ei]() {
 		let { fd: t, buf: e, offset: i, length: r, pos: n } = this;
 		if (t === void 0 || e === void 0) throw new Error("cannot read file without first opening");
-		fs.read(t, e, i, r, n, (o, a) => {
+		I.read(t, e, i, r, n, (o, a) => {
 			if (o) return this[pt](() => this.emit("error", o));
 			this[is](a);
 		});
 	}
 	[pt](t = () => {}) {
-		this.fd !== void 0 && fs.close(this.fd, t);
+		this.fd !== void 0 && I.close(this.fd, t);
 	}
 	[is](t) {
 		if (t <= 0 && this.remain > 0) {
@@ -2021,20 +2021,20 @@ var er = (s, t) => t ? (s = f(s).replace(/^\.(\/|$)/, ""), mt(t) + "/" + s) : f(
 }, ri = class extends fe {
 	sync = !0;
 	[es]() {
-		this[ii](fs.lstatSync(this.absolute));
+		this[ii](I.lstatSync(this.absolute));
 	}
 	[ts]() {
-		this[ss](fs.readlinkSync(this.absolute));
+		this[ss](I.readlinkSync(this.absolute));
 	}
 	[rs]() {
-		this[ns](fs.openSync(this.absolute, "r"));
+		this[ns](I.openSync(this.absolute, "r"));
 	}
 	[ei]() {
 		let t = !0;
 		try {
 			let { fd: e, buf: i, offset: r, length: n, pos: o } = this;
 			if (e === void 0 || i === void 0) throw new Error("fd and buf must be set in READ method");
-			let a = fs.readSync(e, i, r, n, o);
+			let a = I.readSync(e, i, r, n, o);
 			this[is](a), t = !1;
 		} finally {
 			if (t) try {
@@ -2046,7 +2046,7 @@ var er = (s, t) => t ? (s = f(s).replace(/^\.(\/|$)/, ""), mt(t) + "/" + s) : f(
 		t();
 	}
 	[pt](t = () => {}) {
-		this.fd !== void 0 && fs.closeSync(this.fd), t();
+		this.fd !== void 0 && I.closeSync(this.fd), t();
 	}
 }, ni = class extends A {
 	blockLen = 0;
@@ -2314,7 +2314,7 @@ var mi = class {
 	constructor(t, e) {
 		this.path = t || "./", this.absolute = e;
 	}
-}, ir = Buffer.alloc(1024), ai = Symbol("onStat"), ue = Symbol("ended"), W = Symbol("queue"), me = Symbol("pendingLinks"), Et = Symbol("current"), Ct = Symbol("process"), pe = Symbol("processing"), hi = Symbol("processJob"), G = Symbol("jobs"), hs = Symbol("jobDone"), li = Symbol("addFSEntry"), sr = Symbol("addTarEntry"), cs = Symbol("stat"), fs$1 = Symbol("readdir"), ci = Symbol("onreaddir"), fi = Symbol("pipe"), rr = Symbol("entry"), as = Symbol("entryOpt"), di = Symbol("writeEntryClass"), or = Symbol("write"), ls = Symbol("ondrain"), wt = class extends A {
+}, ir = Buffer.alloc(1024), ai = Symbol("onStat"), ue = Symbol("ended"), W = Symbol("queue"), me = Symbol("pendingLinks"), Et = Symbol("current"), Ct = Symbol("process"), pe = Symbol("processing"), hi = Symbol("processJob"), G = Symbol("jobs"), hs = Symbol("jobDone"), li = Symbol("addFSEntry"), sr = Symbol("addTarEntry"), cs = Symbol("stat"), fs = Symbol("readdir"), ci = Symbol("onreaddir"), fi = Symbol("pipe"), rr = Symbol("entry"), as = Symbol("entryOpt"), di = Symbol("writeEntryClass"), or = Symbol("write"), ls = Symbol("ondrain"), wt = class extends A {
 	sync = !1;
 	opt;
 	cwd;
@@ -2365,7 +2365,7 @@ var mi = class {
 		return typeof t == "string" ? this[li](t) : this[sr](t), this.flowing;
 	}
 	[sr](t) {
-		let e = f(path$1.resolve(this.cwd, t.path));
+		let e = f(qs.resolve(this.cwd, t.path));
 		if (!this.filter(t.path, t)) t.resume();
 		else {
 			let i = new mi(t.path, e);
@@ -2374,12 +2374,12 @@ var mi = class {
 		this[Ct]();
 	}
 	[li](t) {
-		let e = f(path$1.resolve(this.cwd, t));
+		let e = f(qs.resolve(this.cwd, t));
 		this[W].push(new mi(t, e)), this[Ct]();
 	}
 	[cs](t) {
 		t.pending = !0, this[G] += 1;
-		fs[this.follow ? "stat" : "lstat"](t.absolute, (i, r) => {
+		I[this.follow ? "stat" : "lstat"](t.absolute, (i, r) => {
 			t.pending = !1, this[G] -= 1, i ? this.emit("error", i) : this[ai](t, r);
 		});
 	}
@@ -2392,8 +2392,8 @@ var mi = class {
 		}
 		this[Ct]();
 	}
-	[fs$1](t) {
-		t.pending = !0, this[G] += 1, fs.readdir(t.absolute, (e, i) => {
+	[fs](t) {
+		t.pending = !0, this[G] += 1, I.readdir(t.absolute, (e, i) => {
 			if (t.pending = !1, this[G] -= 1, e) return this.emit("error", e);
 			this[ci](t, i);
 		});
@@ -2439,7 +2439,7 @@ var mi = class {
 			if (t.stat && !t.ignore) {
 				if (!this.noDirRecurse && t.stat.isDirectory() && !t.readdir) {
 					let e = this.readdirCache.get(t.absolute);
-					if (e ? this[ci](t, e) : this[fs$1](t), !t.readdir) return;
+					if (e ? this[ci](t, e) : this[fs](t), !t.readdir) return;
 				}
 				if (t.entry = this[rr](t), !t.entry) {
 					t.ignore = !0;
@@ -2506,10 +2506,10 @@ var mi = class {
 	resume() {}
 	[cs](t) {
 		let e = this.follow ? "statSync" : "lstatSync";
-		this[ai](t, fs[e](t.absolute));
+		this[ai](t, I[e](t.absolute));
 	}
-	[fs$1](t) {
-		this[ci](t, fs.readdirSync(t.absolute));
+	[fs](t) {
+		this[ci](t, I.readdirSync(t.absolute));
 	}
 	[fi](t) {
 		let e = t.entry, i = this.zip;
@@ -2561,7 +2561,7 @@ var Wn = (s, t) => {
 }, Kn = K(Wn, Gn, Zn, Yn, (s, t) => {
 	if (!t?.length) throw new TypeError("no paths specified to add to archive");
 });
-var ur = (process.env.__FAKE_PLATFORM__ || process.platform) === "win32", { O_CREAT: mr, O_NOFOLLOW: cr, O_TRUNC: pr, O_WRONLY: Er } = fs.constants, wr = Number(process.env.__FAKE_FS_O_FILENAME__) || fs.constants.UV_FS_O_FILEMAP || 0, $n = ur && !!wr, Xn = 512 * 1024, qn = wr | pr | mr | Er, fr = !ur && typeof cr == "number" ? cr | pr | mr | Er : null, ds = fr !== null ? () => fr : $n ? (s) => s < Xn ? qn : "w" : () => "w";
+var ur = (process.env.__FAKE_PLATFORM__ || process.platform) === "win32", { O_CREAT: mr, O_NOFOLLOW: cr, O_TRUNC: pr, O_WRONLY: Er } = I.constants, wr = Number(process.env.__FAKE_FS_O_FILENAME__) || I.constants.UV_FS_O_FILEMAP || 0, $n = ur && !!wr, Xn = 512 * 1024, qn = wr | pr | mr | Er, fr = !ur && typeof cr == "number" ? cr | pr | mr | Er : null, ds = fr !== null ? () => fr : $n ? (s) => s < Xn ? qn : "w" : () => "w";
 var us = (s, t, e) => {
 	try {
 		return Kt.lchownSync(s, t, e);
@@ -3542,8 +3542,8 @@ var SystemBackupService = class {
 		return value;
 	}
 	async statLocation(loc) {
-		const abs = path$2.isAbsolute(loc) ? loc : path$2.join(this.dataDir, loc);
-		if (!fs$2.existsSync(abs)) return {
+		const abs = path$1.isAbsolute(loc) ? loc : path$1.join(this.dataDir, loc);
+		if (!fs$1.existsSync(abs)) return {
 			name: loc,
 			sizeBytes: 0,
 			fileCount: 0,
@@ -3587,19 +3587,19 @@ var SystemBackupService = class {
 		const requested = opts.locations ?? DEFAULT_BACKUP_LOCATIONS;
 		const present = [];
 		for (const loc of requested) {
-			const abs = path$2.isAbsolute(loc) ? loc : path$2.join(this.dataDir, loc);
-			if (fs$2.existsSync(abs)) present.push(loc);
+			const abs = path$1.isAbsolute(loc) ? loc : path$1.join(this.dataDir, loc);
+			if (fs$1.existsSync(abs)) present.push(loc);
 			else this.logger.debug("createArchive: skipping missing location", { meta: { location: loc } });
 		}
 		if (present.length === 0) throw new Error(`createArchive: no locations from {${requested.join(", ")}} exist under ${this.dataDir}`);
-		fs$2.mkdirSync(path$2.dirname(opts.archivePath), { recursive: true });
+		fs$1.mkdirSync(path$1.dirname(opts.archivePath), { recursive: true });
 		const walked = [];
 		for (const loc of present) {
 			throwIfCancelled(opts.signal);
-			const abs = path$2.join(this.dataDir, loc);
+			const abs = path$1.join(this.dataDir, loc);
 			const stat = await fsp.stat(abs);
 			if (stat.isDirectory()) for (const e of await walkAbs(abs, this.dataDir, this.exclusionPredicate(), opts.signal)) walked.push(e);
-			else if (!isExcludedFromBackup(path$2.relative(this.dataDir, abs))) walked.push(toArchiveEntry(abs, this.dataDir, stat));
+			else if (!isExcludedFromBackup(path$1.relative(this.dataDir, abs))) walked.push(toArchiveEntry(abs, this.dataDir, stat));
 		}
 		const walkedPaths = new Set(walked.map((e) => e.path));
 		const owned = walked.some((e) => isSqlitePath(e.path)) ? await this.ownedDatabasesInScope(opts.owner, walkedPaths) : /* @__PURE__ */ new Set();
@@ -3665,7 +3665,7 @@ var SystemBackupService = class {
 	async writeArchive(opts) {
 		const { present, manifest } = opts;
 		const manifestStagePath = `${opts.archivePath}.${process.pid}.manifest.json`;
-		fs$2.writeFileSync(manifestStagePath, JSON.stringify(manifest, null, 2), "utf-8");
+		fs$1.writeFileSync(manifestStagePath, JSON.stringify(manifest, null, 2), "utf-8");
 		this.logger.info("createArchive: tarring", { meta: {
 			archivePath: opts.archivePath,
 			locations: [...present],
@@ -3673,10 +3673,10 @@ var SystemBackupService = class {
 			totalBytes: manifest.totalBytes
 		} });
 		try {
-			const stagedInDataDir = path$2.join(this.dataDir, ARCHIVE_MANIFEST_NAME);
-			fs$2.copyFileSync(manifestStagePath, stagedInDataDir);
-			const stagingRel = path$2.relative(this.dataDir, path$2.dirname(opts.archivePath));
-			const excludePrefix = stagingRel && !stagingRel.startsWith("..") && !path$2.isAbsolute(stagingRel) ? stagingRel : null;
+			const stagedInDataDir = path$1.join(this.dataDir, ARCHIVE_MANIFEST_NAME);
+			fs$1.copyFileSync(manifestStagePath, stagedInDataDir);
+			const stagingRel = path$1.relative(this.dataDir, path$1.dirname(opts.archivePath));
+			const excludePrefix = stagingRel && !stagingRel.startsWith("..") && !path$1.isAbsolute(stagingRel) ? stagingRel : null;
 			try {
 				const pack = Kn({
 					gzip: true,
@@ -3690,29 +3690,29 @@ var SystemBackupService = class {
 						return norm !== excludePrefix && !norm.startsWith(`${excludePrefix}/`);
 					}
 				}, [ARCHIVE_MANIFEST_NAME, ...present]);
-				const sink = fs$2.createWriteStream(opts.archivePath, { mode: 384 });
+				const sink = fs$1.createWriteStream(opts.archivePath, { mode: 384 });
 				try {
 					const streamOpts = opts.signal ? { signal: opts.signal } : {};
 					if (opts.encryptTo !== void 0) await pipeline(pack, createBackupEncryptStream(opts.encryptTo), byteCountingPassthrough(opts.onArchiveBytes), sink, streamOpts);
 					else await pipeline(pack, byteCountingPassthrough(opts.onArchiveBytes), sink, streamOpts);
 				} catch (err) {
 					try {
-						fs$2.rmSync(opts.archivePath, { force: true });
+						fs$1.rmSync(opts.archivePath, { force: true });
 					} catch {}
 					if (opts.signal?.aborted) throw new BackupCancelledError();
 					throw err;
 				}
 			} finally {
 				try {
-					fs$2.rmSync(stagedInDataDir, { force: true });
+					fs$1.rmSync(stagedInDataDir, { force: true });
 				} catch {}
 			}
 		} finally {
 			try {
-				fs$2.rmSync(manifestStagePath, { force: true });
+				fs$1.rmSync(manifestStagePath, { force: true });
 			} catch {}
 		}
-		const sizeBytes = fs$2.statSync(opts.archivePath).size;
+		const sizeBytes = fs$1.statSync(opts.archivePath).size;
 		return {
 			archivePath: opts.archivePath,
 			includedLocations: [...present],
@@ -3725,7 +3725,7 @@ var SystemBackupService = class {
 	* one entry we care about, then aborts.
 	*/
 	async readArchiveManifest(archivePath) {
-		if (!fs$2.existsSync(archivePath)) throw new Error(`readArchiveManifest: ${archivePath} does not exist`);
+		if (!fs$1.existsSync(archivePath)) throw new Error(`readArchiveManifest: ${archivePath} does not exist`);
 		return new Promise((resolve, reject) => {
 			const chunks = [];
 			let found = false;
@@ -3757,7 +3757,7 @@ var SystemBackupService = class {
 					reject(err);
 				}
 			});
-			const reader = fs$2.createReadStream(archivePath);
+			const reader = fs$1.createReadStream(archivePath);
 			reader.on("error", (err) => {
 				if (!resolved) {
 					resolved = true;
@@ -3775,7 +3775,7 @@ var SystemBackupService = class {
 	* restart.
 	*/
 	scheduleRestoreMarker(opts) {
-		if (!fs$2.existsSync(opts.archivePath)) throw new Error(`scheduleRestoreMarker: ${opts.archivePath} missing`);
+		if (!fs$1.existsSync(opts.archivePath)) throw new Error(`scheduleRestoreMarker: ${opts.archivePath} missing`);
 		const markerPath = this.getRestoreMarkerPath();
 		const marker = {
 			archivePath: opts.archivePath,
@@ -3783,16 +3783,16 @@ var SystemBackupService = class {
 			source: opts.source,
 			...opts.locations ? { locations: [...opts.locations] } : {}
 		};
-		fs$2.mkdirSync(path$2.dirname(markerPath), { recursive: true });
-		fs$2.writeFileSync(markerPath, JSON.stringify(marker, null, 2), { mode: 384 });
+		fs$1.mkdirSync(path$1.dirname(markerPath), { recursive: true });
+		fs$1.writeFileSync(markerPath, JSON.stringify(marker, null, 2), { mode: 384 });
 		return markerPath;
 	}
 	/** Read the pending-restore marker if one is present. */
 	readPendingMarker() {
 		const markerPath = this.getRestoreMarkerPath();
-		if (!fs$2.existsSync(markerPath)) return null;
+		if (!fs$1.existsSync(markerPath)) return null;
 		try {
-			const raw = fs$2.readFileSync(markerPath, "utf-8");
+			const raw = fs$1.readFileSync(markerPath, "utf-8");
 			const parsed = JSON.parse(raw);
 			if (typeof parsed === "object" && parsed != null && typeof parsed.archivePath === "string") return parsed;
 		} catch (err) {
@@ -3803,7 +3803,7 @@ var SystemBackupService = class {
 	/** Drop the marker after a successful boot-time restore. */
 	clearPendingMarker() {
 		const markerPath = this.getRestoreMarkerPath();
-		if (fs$2.existsSync(markerPath)) fs$2.rmSync(markerPath, { force: true });
+		if (fs$1.existsSync(markerPath)) fs$1.rmSync(markerPath, { force: true });
 	}
 	/**
 	* The databases the owner declares, archive-relative, that this walk found.
@@ -3845,7 +3845,7 @@ var SystemBackupService = class {
 	*/
 	async takeOwnerSnapshot(owner, owned, signal) {
 		const removeOwnedSnapshots = async () => {
-			for (const db of owned) await this.removeSnapshot(path$2.join(this.dataDir, db + DATABASE_SNAPSHOT_SUFFIX));
+			for (const db of owned) await this.removeSnapshot(path$1.join(this.dataDir, db + DATABASE_SNAPSHOT_SUFFIX));
 		};
 		let result;
 		try {
@@ -3876,7 +3876,7 @@ var SystemBackupService = class {
 			if (snapshotPath !== livePath + ".backup-snapshot") throw new BackupSnapshotRefusedError(`snapshot ${snapshotPath} does not sit beside the database ${livePath} it copies`);
 			const uncovered = [...owned].filter((db) => db !== livePath);
 			if (!owned.has(livePath) || uncovered.length > 0) throw new BackupSnapshotRefusedError(`snapshot copies ${livePath}, but the owned database(s) in this archive are ${[...owned].join(", ")}`);
-			const absPath = path$2.join(this.dataDir, snapshotPath);
+			const absPath = path$1.join(this.dataDir, snapshotPath);
 			const stat = await fsp.stat(absPath);
 			this.logger.info("createArchive: carrying the owner snapshot in place of the live database", { meta: {
 				database: livePath,
@@ -3912,12 +3912,12 @@ var SystemBackupService = class {
 	}
 	/** `abs` relative to the data root, or null when it lies outside it. */
 	archiveRelative(abs) {
-		const rel = path$2.relative(path$2.resolve(this.dataDir), path$2.resolve(abs));
-		if (rel.length === 0 || rel.startsWith("..") || path$2.isAbsolute(rel)) return null;
+		const rel = path$1.relative(path$1.resolve(this.dataDir), path$1.resolve(abs));
+		if (rel.length === 0 || rel.startsWith("..") || path$1.isAbsolute(rel)) return null;
 		return normalizeArchivePath(rel);
 	}
 	getRestoreMarkerPath() {
-		return path$2.join(this.dataDir, ".pending-restore.json");
+		return path$1.join(this.dataDir, ".pending-restore.json");
 	}
 	/**
 	* Absolute-path form of {@link isExcludedFromBackup}, anchored on
@@ -3925,7 +3925,7 @@ var SystemBackupService = class {
 	* stats so both agree with the tar filter about what a backup contains.
 	*/
 	exclusionPredicate() {
-		return (abs) => isExcludedFromBackup(path$2.relative(this.dataDir, abs));
+		return (abs) => isExcludedFromBackup(path$1.relative(this.dataDir, abs));
 	}
 };
 /**
@@ -3956,7 +3956,7 @@ async function walkRec(abs, dataDir, out, shouldSkip, signal) {
 		} catch {
 			return;
 		}
-		for (const child of children) await walkRec(path$2.join(abs, child), dataDir, out, shouldSkip, signal);
+		for (const child of children) await walkRec(path$1.join(abs, child), dataDir, out, shouldSkip, signal);
 	}
 }
 /**
@@ -3973,10 +3973,10 @@ function byteCountingPassthrough(onBytes) {
 	} });
 }
 function toArchiveEntry(abs, dataDir, stat) {
-	const rel = path$2.relative(dataDir, abs).replace(/\\/g, "/");
+	const rel = path$1.relative(dataDir, abs).replace(/\\/g, "/");
 	const kind = stat.isDirectory() ? "dir" : stat.isSymbolicLink() ? "symlink" : "file";
 	return {
-		path: rel || path$2.basename(abs),
+		path: rel || path$1.basename(abs),
 		kind,
 		sizeBytes: kind === "file" ? stat.size : 0,
 		mtime: stat.mtimeMs

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.419",
+  "version": "1.2.420",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",