@camstack/system 1.2.424 → 1.2.426

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,9 +1,141 @@
-import { Br as nodePin, Fn as storageOccupancyCapability, Qr as toNodeId, X as backupCapability, lr as BaseAddon, ti as EventCategory, tn as mayWriteToLocation } from "../../dist-B-NmfvVC.mjs";
-import { a as BackupSnapshotRefusedError, c as BackupKeyFormatError, d as generateBackupKeyPair, f as parseBackupPublicKey, i as BackupCancelledError, n as precheckRestoreKey, o as SystemBackupService, p as parseBackupSecretKey, r as prepareRestoreArchive, u as ENCRYPTED_BACKUP_SUFFIX } from "../../restore-archive-CFmPVlWQ.mjs";
+import { Br as nodePin, Fn as storageOccupancyCapability, Qr as toNodeId, X as backupCapability, lr as BaseAddon, ti as EventCategory, tn as mayWriteToLocation } from "../../dist-CGz9u2HD.mjs";
+import { a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-CZyUM8Qf.mjs";
 import { randomUUID } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import * as path$1 from "node:path";
 import * as fs from "node:fs";
+//#region src/builtins/backup-orchestrator/backup-databases.ts
+/** Stable id of the seeded weekly schedule. */
+var WEEKLY_SCHEDULE_ID = "weekly-events-history";
+var WEEKLY_SCHEDULE_LABEL = "Weekly — events & history";
+/** Sundays 04:00 — an hour after the nightly settings run. */
+var WEEKLY_SCHEDULE_CRON = "0 4 * * 0";
+/**
+* Events and history ONLY: a run that does not select settings carries no
+* data-root walk either, so the weekly archive is just the two snapshots.
+*/
+var WEEKLY_SCHEDULE_DATABASES = ["events", "history"];
+/** What a schedule carries: its own list, else the minimum (D382). */
+function databasesOfSchedule(schedule) {
+	return schedule.databases !== void 0 && schedule.databases.length > 0 ? schedule.databases : DEFAULT_BACKUP_DATABASES;
+}
+/**
+* True when a run asks for a database beyond settings and the owner has none
+* of them open: the run would only repeat the nightly archive. A settings-only
+* run is never nothing-to-carry.
+*/
+function hasNothingBeyondSettings(requested, owned) {
+	const extra = requested.filter((id) => id !== "settings");
+	if (extra.length === 0) return false;
+	return !extra.some((id) => owned.includes(id));
+}
+/**
+* The weekly schedule to seed, or null. Created only when NO schedule carries
+* `events` (a seed never overwrites, D728 — an operator's own weekly schedule,
+* or an edited seed, is left alone), and only when there is a nightly schedule
+* to take the destinations from: a hub that backs up nowhere gets no weekly
+* archive either.
+*/
+function planWeeklySeed(existing) {
+	if (existing.some((s) => s.id === "weekly-events-history")) return null;
+	if (existing.some((s) => databasesOfSchedule(s).includes("events"))) return null;
+	const destinations = /* @__PURE__ */ new Set();
+	for (const s of existing) {
+		if (!s.enabled) continue;
+		for (const id of s.locationIds) destinations.add(id);
+	}
+	if (destinations.size === 0) return null;
+	return {
+		id: WEEKLY_SCHEDULE_ID,
+		label: WEEKLY_SCHEDULE_LABEL,
+		cron: WEEKLY_SCHEDULE_CRON,
+		enabled: true,
+		locationIds: [...destinations].toSorted(),
+		retentionCount: 4,
+		databases: WEEKLY_SCHEDULE_DATABASES
+	};
+}
+/**
+* Seed the weekly schedule if {@link planWeeklySeed} says so; returns what it
+* wrote. Exactly once ever: the marker is written after the row, and a marker
+* that exists ends the seed for good — an operator who disabled or deleted the
+* weekly is never second-guessed. A weekly row found with no marker (seeded
+* before the marker existed) is marked, not re-created.
+*/
+async function seedWeeklySchedule(store, markers) {
+	if (await markers.has("weekly-events-history")) return null;
+	const existing = await store.list();
+	if (existing.some((s) => s.id === "weekly-events-history")) {
+		await markers.mark(WEEKLY_SCHEDULE_ID);
+		return null;
+	}
+	const seed = planWeeklySeed(existing);
+	if (seed === null) return null;
+	await store.upsert(seed);
+	await markers.mark(WEEKLY_SCHEDULE_ID);
+	return seed;
+}
+//#endregion
+//#region src/builtins/backup-orchestrator/seed-marker-store.ts
+/**
+* @durable class=config owner=backup-orchestrator
+*   write="the orchestrator inserts one row per seed id the first time that
+*     seed is created (or found already created); never updated"
+*   retention="none — one tiny row per seed ever made; deleting it lets the
+*     seed be re-created once more on the next boot"
+*/
+var BACKUP_SEED_MARKERS_COLLECTION = "backup_seed_markers";
+var COLUMNS$1 = [{
+	name: "seed_id",
+	type: "TEXT",
+	primaryKey: true
+}, {
+	name: "seeded_at",
+	type: "INTEGER",
+	notNull: true
+}];
+var BackupSeedMarkerStore = class {
+	store;
+	now;
+	declared = false;
+	constructor(store, now = Date.now) {
+		this.store = store;
+		this.now = now;
+	}
+	async ensureDeclared() {
+		if (this.declared) return;
+		await this.store.declareCollection({
+			collection: BACKUP_SEED_MARKERS_COLLECTION,
+			columns: COLUMNS$1
+		});
+		this.declared = true;
+	}
+	async has(seedId) {
+		await this.ensureDeclared();
+		return (await this.store.query({
+			collection: BACKUP_SEED_MARKERS_COLLECTION,
+			filter: {
+				where: { seed_id: seedId },
+				limit: 1
+			}
+		})).length > 0;
+	}
+	async mark(seedId) {
+		await this.ensureDeclared();
+		if (await this.has(seedId)) return;
+		await this.store.insert({
+			collection: BACKUP_SEED_MARKERS_COLLECTION,
+			record: {
+				id: seedId,
+				data: {
+					seed_id: seedId,
+					seeded_at: this.now()
+				}
+			}
+		});
+	}
+};
+//#endregion
 //#region ../../node_modules/croner/dist/croner.js
 function T(s) {
 	return Date.UTC(s.y, s.m - 1, s.d, s.h, s.i, s.s);
@@ -1269,7 +1401,8 @@ function normalizeManifest(raw) {
 			sizeBytes: Number(cand["sizeBytes"]),
 			...typeof cand["label"] === "string" ? { label: cand["label"] } : {},
 			manifest,
-			...encryptionOf(cand["encryption"])
+			...encryptionOf(cand["encryption"]),
+			...databasesOf(cand["databases"])
 		};
 		archives.push(entry);
 	}
@@ -1282,6 +1415,15 @@ var EMPTY_MANIFEST = {
 	version: 1,
 	archives: []
 };
+function databasesOf(raw) {
+	if (!Array.isArray(raw)) return {};
+	const known = [];
+	const unknown = [];
+	for (const item of raw) if (item === "settings" || item === "events" || item === "history") known.push(item);
+	else if (typeof item === "string") unknown.push(item);
+	if (known.length > 0) return { databases: known };
+	return unknown.length > 0 ? { unrecognisedDatabases: unknown } : {};
+}
 function encryptionOf(raw) {
 	if (typeof raw !== "object" || raw === null) return {};
 	const scheme = Reflect.get(raw, "scheme");
@@ -1305,7 +1447,8 @@ function outlineOfManifest(manifest) {
 		locations: [...manifest.locations],
 		entries: [],
 		totalBytes: manifest.totalBytes,
-		totalFiles: manifest.totalFiles
+		totalFiles: manifest.totalFiles,
+		...manifest.omittedDatabases !== void 0 ? { omittedDatabases: [...manifest.omittedDatabases] } : {}
 	};
 }
 /**
@@ -1321,9 +1464,15 @@ function buildArchiveEntry(input) {
 		sizeBytes: input.sizeBytes,
 		...input.label !== void 0 ? { label: input.label } : {},
 		manifest: input.encryption !== void 0 ? outlineOfManifest(input.manifest) : input.manifest,
-		...input.encryption !== void 0 ? { encryption: input.encryption } : {}
+		...input.encryption !== void 0 ? { encryption: input.encryption } : {},
+		...input.databases !== void 0 ? { databases: [...input.databases] } : {}
 	};
 }
+/** The key under which archives of one cadence prune each other. */
+function retentionClassOf(entry) {
+	if (entry.databases === void 0 && entry.unrecognisedDatabases !== void 0) return `?${[...entry.unrecognisedDatabases].toSorted().join("+")}`;
+	return [...entry.databases ?? DEFAULT_BACKUP_DATABASES].toSorted().join("+");
+}
 /**
 * Pure retention split: given an archive list and the operator's
 * `retentionCount`, return `{ keep, drop }` where `keep` is the most-
@@ -1332,20 +1481,27 @@ function buildArchiveEntry(input) {
 * `retentionCount <= 0` is treated as "no pruning" — defensive against
 * a config value that would otherwise wipe every archive on the next
 * write.
+*
+* `cadence` (see {@link retentionClassOf}) restricts the count to archives of
+* the run that was just written: nightly archives (settings) and weekly ones
+* (settings + events + history) are retained separately.
 */
-function applyRetention(archives, retentionCount) {
+function applyRetention(archives, retentionCount, cadence) {
 	if (retentionCount <= 0) return {
 		keep: archives,
 		drop: []
 	};
 	const sorted = [...archives].toSorted((a, b) => b.createdAt - a.createdAt);
-	if (sorted.length <= retentionCount) return {
+	const inCadence = cadence === void 0 ? sorted : sorted.filter((a) => retentionClassOf(a) === cadence);
+	if (inCadence.length <= retentionCount) return {
 		keep: sorted,
 		drop: []
 	};
+	const drop = inCadence.slice(retentionCount);
+	const dropped = new Set(drop);
 	return {
-		keep: sorted.slice(0, retentionCount),
-		drop: sorted.slice(retentionCount)
+		keep: sorted.filter((a) => !dropped.has(a)),
+		drop
 	};
 }
 /**
@@ -1629,7 +1785,8 @@ function requestSignature(request) {
 		destinations: [...request.destinations ?? []].toSorted(),
 		locations: [...request.locations ?? []].toSorted(),
 		label: request.label ?? null,
-		retentionCount: request.retentionCount ?? null
+		retentionCount: request.retentionCount ?? null,
+		databases: [...request.databases ?? []].toSorted()
 	});
 }
 //#endregion
@@ -1688,6 +1845,10 @@ var BACKUP_SCHEDULES_COLUMNS = [
 		name: "data_sources",
 		type: "JSON"
 	},
+	{
+		name: "databases",
+		type: "JSON"
+	},
 	{
 		name: "last_run_at",
 		type: "INTEGER"
@@ -1777,6 +1938,7 @@ function mapScheduleToRow(s) {
 		location_ids: [...s.locationIds],
 		retention_count: s.retentionCount,
 		data_sources: s.dataSources ? [...s.dataSources] : null,
+		databases: s.databases ? [...s.databases] : null,
 		last_run_at: s.lastAttemptAt ?? null,
 		last_success_at: s.lastSuccessAt ?? null,
 		last_error: s.lastError ?? null
@@ -1793,6 +1955,12 @@ function parseStringArray(raw) {
 	if (!Array.isArray(value)) return [];
 	return value.filter((v) => typeof v === "string");
 }
+/** Known database ids only: an unknown name in a stored row is dropped, not carried. */
+function parseDatabaseIds(raw) {
+	const out = [];
+	for (const id of parseStringArray(raw)) if (id === "settings" || id === "events" || id === "history") out.push(id);
+	return out;
+}
 function tryParseJson(raw) {
 	if (raw.length === 0) return null;
 	try {
@@ -1806,6 +1974,8 @@ function mapRowToSchedule(row) {
 	if (!id) return null;
 	const dataSourcesRaw = row["data_sources"];
 	const dataSources = dataSourcesRaw === null || dataSourcesRaw === void 0 ? void 0 : parseStringArray(dataSourcesRaw);
+	const databasesRaw = row["databases"];
+	const databases = databasesRaw === null || databasesRaw === void 0 ? void 0 : parseDatabaseIds(databasesRaw);
 	const lastRunRaw = row["last_run_at"];
 	const lastAttemptAt = typeof lastRunRaw === "number" && lastRunRaw > 0 ? lastRunRaw : void 0;
 	const lastSuccessRaw = row["last_success_at"];
@@ -1820,6 +1990,7 @@ function mapRowToSchedule(row) {
 		locationIds: parseStringArray(row["location_ids"]),
 		retentionCount: Number(row["retention_count"] ?? 7),
 		...dataSources !== void 0 ? { dataSources } : {},
+		...databases !== void 0 && databases.length > 0 ? { databases } : {},
 		...lastAttemptAt !== void 0 ? { lastAttemptAt } : {},
 		...lastSuccessAt !== void 0 ? { lastSuccessAt } : {},
 		...lastError !== void 0 ? { lastError } : {}
@@ -2072,6 +2243,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 			this.ctx.logger.error("backup-orchestrator: schedule table init failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
 			this.schedules = null;
 		}
+		await this.seedWeekly();
 		const settingsStore = this.ctx.kernel.capabilityRegistry?.getSingleton("settings-store");
 		this.encryptionKeys = settingsStore ? new BackupEncryptionKeyStore(settingsStore) : null;
 		const provider = {
@@ -2092,6 +2264,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 			upsertDestinationPolicy: (input) => this.upsertDestinationPolicy(input),
 			previewSchedule: (input) => this.previewSchedule(input),
 			listSchedules: () => this.listSchedules(),
+			listAvailableDatabases: () => this.listAvailableDatabases(),
 			upsertSchedule: (input) => this.upsertSchedule(input),
 			deleteSchedule: (input) => this.deleteSchedule(input)
 		};
@@ -2377,7 +2550,8 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 			...input?.destinations ? { destinations: input.destinations } : {},
 			...input?.locations ? { locations: input.locations } : {},
 			...input?.label !== void 0 ? { label: input.label } : {},
-			...input?.retentionCount !== void 0 ? { retentionCount: input.retentionCount } : {}
+			...input?.retentionCount !== void 0 ? { retentionCount: input.retentionCount } : {},
+			...input?.databases ? { databases: input.databases } : {}
 		};
 		const submitted = this.runQueue.submit(request);
 		if (submitted.queued) this.ctx.logger.info(submitted.joined ? "backup trigger: identical run already queued — joined it" : "backup trigger: a run is in flight — enqueued behind it", { meta: { runId: submitted.runId } });
@@ -2451,6 +2625,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 				signal,
 				onArchiveBytes: (bytes) => progress.setStagedBytes(bytes),
 				owner: this.databaseOwner(),
+				...input.databases ? { databases: input.databases } : {},
 				...encryptTo !== null ? { encryptTo: encryptTo.publicKey } : {}
 			});
 		} catch (err) {
@@ -2483,6 +2658,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 						sizeBytes: result.sizeBytes,
 						archiveManifest: result.manifest,
 						retentionCount: input.retentionCount ?? policy.retentionCount,
+						databases: input.databases ?? DEFAULT_BACKUP_DATABASES,
 						createdAt,
 						label: formatArchiveLabel(dest.id, createdAt, input.label),
 						...result.encryption !== void 0 ? { encryption: result.encryption } : {},
@@ -2554,9 +2730,9 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 		};
 		return {
 			listDatabases: async () => {
-				return (await this.ctx.api.databaseSnapshot.listDatabases.query({}, pin())).databases.map((d) => d.livePath);
+				return (await this.ctx.api.databaseSnapshot.listDatabases.query({}, pin())).databases;
 			},
-			writeSnapshot: async () => this.ctx.api.databaseSnapshot.writeSnapshot.mutate({}, pin())
+			writeSnapshot: async (databaseId) => this.ctx.api.databaseSnapshot.writeSnapshot.mutate({ databaseId }, pin())
 		};
 	}
 	/**
@@ -2608,10 +2784,11 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 			sizeBytes: input.sizeBytes,
 			label: input.label,
 			manifest: input.archiveManifest,
-			...input.encryption !== void 0 ? { encryption: input.encryption } : {}
+			...input.encryption !== void 0 ? { encryption: input.encryption } : {},
+			databases: input.databases
 		});
 		await this.manifestLock.run(input.locationId, async () => {
-			const { keep, drop } = applyRetention([...(await readLocationManifest(this.storageApi(), input.locationId)).archives, entry], input.retentionCount);
+			const { keep, drop } = applyRetention([...(await readLocationManifest(this.storageApi(), input.locationId)).archives, entry], input.retentionCount, retentionClassOf(entry));
 			for (const stale of drop) try {
 				await this.ctx.api.storage.delete.mutate({
 					location: input.locationId,
@@ -2665,7 +2842,8 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 			sizeBytes: a.sizeBytes,
 			...a.label !== void 0 ? { label: a.label } : {},
 			locations: [...a.manifest.locations],
-			...a.encryption !== void 0 ? { encryption: a.encryption } : {}
+			...a.encryption !== void 0 ? { encryption: a.encryption } : {},
+			...a.databases !== void 0 ? { databases: [...a.databases] } : {}
 		}));
 	}
 	/**
@@ -3032,6 +3210,55 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 		}
 	}
 	/**
+	* A schedule that asks for events/history while the owner has neither open
+	* would only repeat the nightly archive (D852: the weekly schedule has
+	* nothing to carry until those files exist). Said on the record, no archive
+	* built, no outcome stamped. An owner that cannot answer never skips: the
+	* run goes ahead and fails — or succeeds — in the open.
+	*/
+	async nothingToCarry(schedule) {
+		const requested = databasesOfSchedule(schedule);
+		if (!requested.some((id) => id !== "settings")) return false;
+		let owned;
+		try {
+			owned = (await this.databaseOwner().listDatabases()).map((d) => d.databaseId);
+		} catch (err) {
+			this.ctx.logger.warn("Scheduled backup: the database owner did not answer — running anyway", { meta: {
+				scheduleId: schedule.id,
+				label: schedule.label,
+				error: err instanceof Error ? err.message : String(err)
+			} });
+			return false;
+		}
+		if (!hasNothingBeyondSettings(requested, owned)) return false;
+		this.ctx.logger.info("Scheduled backup skipped — no database it carries exists yet", { meta: {
+			scheduleId: schedule.id,
+			label: schedule.label,
+			requested: [...requested],
+			owned
+		} });
+		return true;
+	}
+	/**
+	* Seed the weekly "events & history" schedule (D852) — once, and never over
+	* anything the operator has: see `planWeeklySeed`.
+	*/
+	async seedWeekly() {
+		if (!this.schedules) return;
+		try {
+			const store = this.ctx.kernel.capabilityRegistry?.getSingleton("settings-store");
+			if (!store) return;
+			const seed = await seedWeeklySchedule(this.schedules, new BackupSeedMarkerStore(store));
+			if (seed === null) return;
+			this.ctx.logger.info("backup: seeded the weekly events & history schedule", { meta: {
+				scheduleId: seed.id,
+				destinationIds: [...seed.locationIds]
+			} });
+		} catch (err) {
+			this.ctx.logger.warn("backup: the weekly schedule could not be seeded", { meta: { error: err instanceof Error ? err.message : String(err) } });
+		}
+	}
+	/**
 	* Fire one schedule and RECORD what happened to it, naming every
 	* destination. Three outcomes, three different persisted states —
 	* because "fired" and "backed up" were the same field until D384:
@@ -3042,13 +3269,15 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 	*/
 	async runScheduledBackup(schedule, firedAt) {
 		const destinationIds = [...schedule.locationIds];
+		if (await this.nothingToCarry(schedule)) return;
 		let failure;
 		try {
 			const result = await this.triggerBackup({
 				destinations: destinationIds,
 				...schedule.dataSources && schedule.dataSources.length > 0 ? { locations: [...schedule.dataSources] } : {},
 				label: schedule.label,
-				retentionCount: schedule.retentionCount
+				retentionCount: schedule.retentionCount,
+				...schedule.databases ? { databases: [...schedule.databases] } : {}
 			});
 			if (result.entries.length === 0 && !result.cancelled) failure = `no destination accepted the archive (${destinationIds.join(", ")})`;
 		} catch (err) {
@@ -3081,6 +3310,25 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 			} });
 		}
 	}
+	/**
+	* The database files the owner has open right now, for the selection UI. An
+	* owner that cannot answer is `answered: false` — never an empty list, which
+	* the UI would read as "none exists yet".
+	*/
+	async listAvailableDatabases() {
+		try {
+			return {
+				answered: true,
+				databases: (await this.databaseOwner().listDatabases()).map((d) => d.databaseId)
+			};
+		} catch (err) {
+			this.ctx.logger.warn("Backup database list: the database owner did not answer", { meta: { error: err instanceof Error ? err.message : String(err) } });
+			return {
+				answered: false,
+				databases: []
+			};
+		}
+	}
 	async listSchedules() {
 		if (!this.schedules) return [];
 		return (await this.schedules.list()).map((s) => {
@@ -3097,6 +3345,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 				locationIds: [...s.locationIds],
 				retentionCount: s.retentionCount,
 				...s.dataSources !== void 0 ? { dataSources: [...s.dataSources] } : {},
+				...s.databases !== void 0 ? { databases: [...s.databases] } : {},
 				...s.lastAttemptAt !== void 0 ? { lastAttemptAt: s.lastAttemptAt } : {},
 				...s.lastSuccessAt !== void 0 ? { lastSuccessAt: s.lastSuccessAt } : {},
 				...s.lastError !== void 0 ? { lastError: s.lastError } : {},
@@ -3118,6 +3367,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 			locationIds: [...input.locationIds],
 			retentionCount: input.retentionCount,
 			...input.dataSources && input.dataSources.length > 0 ? { dataSources: [...input.dataSources] } : {},
+			...input.databases && input.databases.length > 0 ? { databases: [...input.databases] } : {},
 			...existing?.lastAttemptAt !== void 0 ? { lastAttemptAt: existing.lastAttemptAt } : {},
 			...existing?.lastSuccessAt !== void 0 ? { lastSuccessAt: existing.lastSuccessAt } : {},
 			...existing?.lastError !== void 0 ? { lastError: existing.lastError } : {}
@@ -3136,6 +3386,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 			locationIds: [...next.locationIds],
 			retentionCount: next.retentionCount,
 			...next.dataSources !== void 0 ? { dataSources: [...next.dataSources] } : {},
+			...next.databases !== void 0 ? { databases: [...next.databases] } : {},
 			...next.lastAttemptAt !== void 0 ? { lastAttemptAt: next.lastAttemptAt } : {},
 			...next.lastSuccessAt !== void 0 ? { lastSuccessAt: next.lastSuccessAt } : {},
 			...next.lastError !== void 0 ? { lastError: next.lastError } : {},

package/dist/builtins/backup-orchestrator/manifest-store.d.ts

@@ -17,8 +17,8 @@
 * snapshot of the embedded `ArchiveManifest` so `getEntries` can
 * serve the contents preview without re-reading the tarball.
 */
-import type { AddonApi } from "@camstack/types";
-import type { ArchiveManifest } from "../system-backup/system-backup.service.js";
+import type { AddonApi, DataStoreDatabase } from "@camstack/types";
+import { type ArchiveManifest } from "../system-backup/system-backup.service.js";
 /** File path (relative to the location root) where the index lives. */
 export declare const MANIFESTS_FILENAME = "manifests.json";
 export interface ManifestArchiveEntry {
@@ -37,6 +37,19 @@ export interface ManifestArchiveEntry {
 	readonly manifest: ArchiveManifest;
 	/** Present when the archive is encrypted to a backup key. */
 	readonly encryption?: ManifestArchiveEncryption;
+	/**
+	* The databases the run ASKED to carry — its retention class: archives of one
+	* cadence prune each other, never another cadence's (a weekly archive that
+	* holds the events ledgers must not be evicted by seven nightly ones).
+	* Absent on an entry written before several files were owned: `['settings']`.
+	*/
+	readonly databases?: readonly DataStoreDatabase[];
+	/**
+	* Ids this build does not know, kept ONLY when no known id remains: such an
+	* entry is its own retention class and is never counted or pruned by another
+	* cadence (a newer build's database must not collapse to `settings`).
+	*/
+	readonly unrecognisedDatabases?: readonly string[];
 }
 export interface ManifestArchiveEncryption {
 	readonly scheme: string;
@@ -87,7 +100,10 @@ export declare function buildArchiveEntry(input: {
 	label?: string;
 	manifest: ArchiveManifest;
 	encryption?: ManifestArchiveEncryption;
+	databases?: readonly DataStoreDatabase[];
 }): ManifestArchiveEntry;
+/** The key under which archives of one cadence prune each other. */
+export declare function retentionClassOf(entry: Pick<ManifestArchiveEntry, "databases" | "unrecognisedDatabases">): string;
 /**
 * Pure retention split: given an archive list and the operator's
 * `retentionCount`, return `{ keep, drop }` where `keep` is the most-
@@ -96,8 +112,12 @@ export declare function buildArchiveEntry(input: {
 * `retentionCount <= 0` is treated as "no pruning" — defensive against
 * a config value that would otherwise wipe every archive on the next
 * write.
+*
+* `cadence` (see {@link retentionClassOf}) restricts the count to archives of
+* the run that was just written: nightly archives (settings) and weekly ones
+* (settings + events + history) are retained separately.
 */
-export declare function applyRetention(archives: readonly ManifestArchiveEntry[], retentionCount: number): {
+export declare function applyRetention(archives: readonly ManifestArchiveEntry[], retentionCount: number, cadence?: string): {
 	readonly keep: readonly ManifestArchiveEntry[];
 	readonly drop: readonly ManifestArchiveEntry[];
 };

package/dist/builtins/backup-orchestrator/run-queue.d.ts

@@ -1,3 +1,4 @@
+import type { DataStoreDatabase } from "@camstack/types";
 export type BackupRunState = "queued" | "running" | "succeeded" | "failed" | "cancelled";
 export type BackupRunPhase = "queued" | "building" | "uploading" | "done";
 /** What a trigger asks for — the queue keys joining on this. */
@@ -6,6 +7,8 @@ export interface BackupRunRequest {
 	readonly locations?: readonly string[];
 	readonly label?: string;
 	readonly retentionCount?: number;
+	/** Database files to carry; absent = settings only. */
+	readonly databases?: readonly DataStoreDatabase[];
 }
 /** Immutable snapshot of one run — the wire shape of `backup.listRuns`. */
 export interface BackupRunSnapshot {

package/dist/builtins/backup-orchestrator/schedule-store.d.ts

@@ -14,7 +14,7 @@
 *     the surface serialises and parses them, so this file passes and
 *     receives real arrays.
 */
-import type { CollectionColumn, ISettingsStoreProvider } from "@camstack/types";
+import type { CollectionColumn, DataStoreDatabase, ISettingsStoreProvider } from "@camstack/types";
 /**
 * A backup schedule row.
 *
@@ -32,6 +32,12 @@ export interface BackupSchedule {
 	readonly retentionCount: number;
 	readonly dataSources?: readonly string[];
 	/**
+	* Which database files this schedule carries. Absent (a `NULL` column) =
+	* `['settings']`: an unstated ask is the minimum (D382). Settings runs
+	* nightly, events and history weekly (D852).
+	*/
+	readonly databases?: readonly DataStoreDatabase[];
+	/**
 	* ms-epoch of the last tick that FIRED this schedule. Stamped BEFORE the
 	* archive runs — it is the dedupe anchor and the cron's "after" cursor —
 	* so it means "attempted", never "succeeded". It was documented as the

package/dist/builtins/backup-orchestrator/seed-marker-store.d.ts

@@ -0,0 +1,34 @@
+/**
+* "This seed has run, once, ever" (D728, D852).
+*
+* A seed that decides from the data alone re-creates what the operator deleted
+* on the next boot. The marker is the orchestrator's own row in the settings
+* store it already owns (D62: no new authority), one per seed id, written
+* AFTER the seeded row landed. A read that fails THROWS: "could not read the
+* marker" must never look like "never seeded".
+*/
+import type { ISettingsStoreProvider } from "@camstack/types";
+/**
+* @durable class=config owner=backup-orchestrator
+*   write="the orchestrator inserts one row per seed id the first time that
+*     seed is created (or found already created); never updated"
+*   retention="none — one tiny row per seed ever made; deleting it lets the
+*     seed be re-created once more on the next boot"
+*/
+export declare const BACKUP_SEED_MARKERS_COLLECTION = "backup_seed_markers";
+type Store = Pick<ISettingsStoreProvider, "declareCollection" | "query" | "insert">;
+/** The slice of the marker store a seed needs. */
+export interface SeedMarkers {
+	has(seedId: string): Promise<boolean>;
+	mark(seedId: string): Promise<void>;
+}
+export declare class BackupSeedMarkerStore implements SeedMarkers {
+	private readonly store;
+	private readonly now;
+	private declared;
+	constructor(store: Store, now?: () => number);
+	private ensureDeclared;
+	has(seedId: string): Promise<boolean>;
+	mark(seedId: string): Promise<void>;
+}
+export {};

package/dist/builtins/calendars/calendars.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let zod = require("zod");
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/calendars/calendars.addon.mjs

@@ -1,4 +1,4 @@
-import { lr as BaseAddon, p as CalendarPreferencesSchema, tt as calendarsCapability } from "../../dist-B-NmfvVC.mjs";
+import { lr as BaseAddon, p as CalendarPreferencesSchema, tt as calendarsCapability } from "../../dist-CGz9u2HD.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { z } from "zod";
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { Jn as buildFfmpegArgs, Ln as streamCatalogCapability, Mn as snapshotCapability, Mr as hydrateSchema, P as MOTION_CLOSE_AFTER_MS, Tr as createEvent, an as motionCapability, ar as DeviceFeature, b as DERIVED_CAMERA_SILENCED_CAP_NAMES, cr as errMsg, ht as declarationOwnerNodeId, i as BaseDevice, lr as BaseAddon, nn as memoizePinnedFfmpeg, nt as cameraGridLayoutCapability, sr as DeviceType, ti as EventCategory, x as DeclaredDevices } from "../../dist-B-NmfvVC.mjs";
+import { Jn as buildFfmpegArgs, Ln as streamCatalogCapability, Mn as snapshotCapability, Mr as hydrateSchema, P as MOTION_CLOSE_AFTER_MS, Tr as createEvent, an as motionCapability, ar as DeviceFeature, b as DERIVED_CAMERA_SILENCED_CAP_NAMES, cr as errMsg, ht as declarationOwnerNodeId, i as BaseDevice, lr as BaseAddon, nn as memoizePinnedFfmpeg, nt as cameraGridLayoutCapability, sr as DeviceType, ti as EventCategory, x as DeclaredDevices } from "../../dist-CGz9u2HD.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/composer/composer.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
-const require_composition_sources = require("../../composition-sources-BWNs-ZeH.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
+const require_composition_sources = require("../../composition-sources-60tuHQ9N.js");
 let zod = require("zod");
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/composer/composer.addon.mjs

@@ -1,5 +1,5 @@
-import { $ as buildCapabilityLookup, $n as compositionItemFieldPath, At as expressionContainsBuiltinCall, Dt as evaluateCompositionField, Qn as compositionFeatureEnabled, Tr as createEvent, Xn as composedDeviceRef, Yn as cloneStatefulExpressionMemory, Zn as composedDeviceStableId, at as compositionFieldKey, cr as errMsg, er as compositionSliceKey, fn as planComposition, i as BaseDevice, ir as toExpressionValue, it as composerCapability, l as COMPOSED_ITEM_FIXED_FIELDS, lr as BaseAddon, nr as createStatefulExpressionMemory, qn as COMPOSER_ADDON_ID, rr as disarmRoseMemory, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, ti as EventCategory, tr as compositionSourceKey, x as DeclaredDevices } from "../../dist-B-NmfvVC.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-tRG7nKWK.mjs";
+import { $ as buildCapabilityLookup, $n as compositionItemFieldPath, At as expressionContainsBuiltinCall, Dt as evaluateCompositionField, Qn as compositionFeatureEnabled, Tr as createEvent, Xn as composedDeviceRef, Yn as cloneStatefulExpressionMemory, Zn as composedDeviceStableId, at as compositionFieldKey, cr as errMsg, er as compositionSliceKey, fn as planComposition, i as BaseDevice, ir as toExpressionValue, it as composerCapability, l as COMPOSED_ITEM_FIXED_FIELDS, lr as BaseAddon, nr as createStatefulExpressionMemory, qn as COMPOSER_ADDON_ID, rr as disarmRoseMemory, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, ti as EventCategory, tr as compositionSourceKey, x as DeclaredDevices } from "../../dist-CGz9u2HD.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-gxVpghXh.mjs";
 import { z } from "zod";
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */