@camstack/system 1.2.424 → 1.2.426

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,6 +1,6 @@
-import { Gn as vectorStoreCapability, Z as bareAddonId, _ as DATABASE_SNAPSHOT_TIMEOUT_MS, cr as errMsg, g as DATABASE_SNAPSHOT_SUFFIX, h as DATABASE_SNAPSHOT_PARTIAL_SUFFIX, lr as BaseAddon, mr as RUNTIME_DEFAULTS, mt as databaseSnapshotCapability, pt as dataStoreProviderCapability, v as DATA_STORE_DATABASES } from "../../dist-B-NmfvVC.mjs";
-import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-DCGEI4Vi.mjs";
-import { C as callControl, E as controlTargetOf, S as trustResult, T as callVector, _ as collectTransferables, a as WalMaintenance, c as SqliteSettingsBackend, d as CrossDatabaseTransactError, f as DatabaseBusyError, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callData } from "../../wal-maintenance-BlqNqaQ3.mjs";
+import { Gn as vectorStoreCapability, Z as bareAddonId, _ as DATABASE_SNAPSHOT_TIMEOUT_MS, cr as errMsg, g as DATABASE_SNAPSHOT_SUFFIX, h as DATABASE_SNAPSHOT_PARTIAL_SUFFIX, lr as BaseAddon, mr as RUNTIME_DEFAULTS, mt as databaseSnapshotCapability, pt as dataStoreProviderCapability, v as DATA_STORE_DATABASES } from "../../dist-CGz9u2HD.mjs";
+import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-Dut6QWh6.mjs";
+import { C as callControl, E as controlTargetOf, S as trustResult, T as callVector, _ as collectTransferables, a as WalMaintenance, c as SqliteSettingsBackend, d as CrossDatabaseTransactError, f as DatabaseBusyError, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callData } from "../../wal-maintenance-BZhzoxqA.mjs";
 import { r as isSnapshotWorkerMessage } from "../../sqlite-snapshot-protocol-2QaTouWV.mjs";
 import { a as isWorkerMessage, t as WAL_CHECKPOINT_LARGE_PASS_FRAMES } from "../../wal-checkpoint-policy-BahrTtyD.mjs";
 import { createRequire } from "node:module";
@@ -963,6 +963,51 @@ async function openOwnedSqliteFile(spec, deps) {
 	return file;
 }
 //#endregion
+//#region src/builtins/sqlite-storage/database-snapshot-provider.ts
+/**
+* The `database-snapshot` provider of the SQLite engine: every owned database
+* file it has open is listed, and each is snapshotted through its OWN
+* connection (D679, D693) — never by copying files.
+*
+* The list is read from the router at CALL time, not at boot: a file created at
+* runtime (the first declaration that names `events` or `history`) is listed
+* from the moment it opens, so no backup can leave it out.
+*/
+var DatabaseSnapshotProvider = class {
+	source;
+	/** Same database asked twice: the second call joins the first. */
+	inFlight = /* @__PURE__ */ new Map();
+	/** Different databases run one after the other: the disk reserve check is per copy. */
+	tail = Promise.resolve();
+	constructor(source) {
+		this.source = source;
+	}
+	async listDatabases() {
+		return { databases: this.source.openFiles().map((file) => ({
+			databaseId: file.databaseId,
+			livePath: path.resolve(file.livePath)
+		})) };
+	}
+	writeSnapshot(input) {
+		const running = this.inFlight.get(input.databaseId);
+		if (running !== void 0) return running;
+		const file = this.source.openFiles().find((f) => f.databaseId === input.databaseId);
+		if (file === void 0) return Promise.reject(/* @__PURE__ */ new Error(`database snapshot refused: database "${input.databaseId}" is not open`));
+		const run = this.tail.catch(() => void 0).then(async () => {
+			return {
+				...await file.snapshot(),
+				databaseId: file.databaseId
+			};
+		});
+		this.tail = run;
+		const tracked = run.finally(() => {
+			this.inFlight.delete(input.databaseId);
+		});
+		this.inFlight.set(input.databaseId, tracked);
+		return tracked;
+	}
+};
+//#endregion
 //#region src/builtins/sqlite-storage/placement-router.ts
 function scopedName(namespace, collection) {
 	return namespace ? `${namespace}:${collection}` : collection;
@@ -1338,10 +1383,7 @@ var SqliteSettingsAddon = class extends BaseAddon {
 			},
 			{
 				capability: databaseSnapshotCapability,
-				provider: {
-					listDatabases: async () => ({ databases: [{ livePath: path.resolve(settings.livePath) }] }),
-					writeSnapshot: async () => settings.snapshot()
-				}
+				provider: new DatabaseSnapshotProvider(router)
 			}
 		];
 	}

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { A as LegacyStorageLocationDefaultSchema, An as settingsStoreCapability, B as StorageCleanupJobSchema, Bt as isLocationEnabled, Cn as resolveLocationMode, Cr as collectSecretConfigKeys, Ft as gbToBytes, H as StorageLocationTypeSchema, Hr as parseJsonObject, Kn as withLocationMode, Lr as isSecretMarker, Nn as storageCapability, Ot as evictionPolicyOfLocation, Pn as storageMigrationCapability, U as StorageMigrationJobSchema, V as StorageLocationModeSchema, Yr as secretTreeFromPaths, ei as transformSecretWrite, en as mayReadLocation, in as modeMayWrite, lr as BaseAddon, pr as REDACTED_SECRET, qr as resolveSecretMarkers, qt as legacyModeOf, ti as EventCategory, tn as mayWriteToLocation } from "../../dist-B-NmfvVC.mjs";
+import { A as LegacyStorageLocationDefaultSchema, An as settingsStoreCapability, B as StorageCleanupJobSchema, Bt as isLocationEnabled, Cn as resolveLocationMode, Cr as collectSecretConfigKeys, Ft as gbToBytes, H as StorageLocationTypeSchema, Hr as parseJsonObject, Kn as withLocationMode, Lr as isSecretMarker, Nn as storageCapability, Ot as evictionPolicyOfLocation, Pn as storageMigrationCapability, U as StorageMigrationJobSchema, V as StorageLocationModeSchema, Yr as secretTreeFromPaths, ei as transformSecretWrite, en as mayReadLocation, in as modeMayWrite, lr as BaseAddon, pr as REDACTED_SECRET, qr as resolveSecretMarkers, qt as legacyModeOf, ti as EventCategory, tn as mayWriteToLocation } from "../../dist-CGz9u2HD.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { containsOrEquals, physicalRootOf } from "@camstack/types/node";

package/dist/builtins/system-backup/system-backup.service.d.ts

@@ -1,4 +1,4 @@
-import { type ArchiveSqliteSnapshot, type DatabaseSnapshotResult, type IScopedLogger } from "@camstack/types";
+import { type ArchiveSqliteSnapshot, type DatabaseSnapshotWritten, type DataStoreDatabase, type IScopedLogger } from "@camstack/types";
 import { BACKUP_ENCRYPTION_SCHEME } from "./backup-encryption.js";
 /**
 * Thrown when an archive build (or a backup run driving one) is
@@ -58,10 +58,21 @@ export declare function isExcludedFromBackup(relPath: string): boolean;
 * the `database-snapshot` capability, pinned to its own node.
 */
 export interface DatabaseOwner {
-	/** Absolute paths of the databases the owner snapshots. */
-	listDatabases(): Promise<readonly string[]>;
-	writeSnapshot(): Promise<DatabaseSnapshotResult>;
+	/** EVERY database the owner has open: its id, and its absolute path. */
+	listDatabases(): Promise<readonly OwnedDatabase[]>;
+	/** One verified snapshot of ONE database. */
+	writeSnapshot(databaseId: DataStoreDatabase): Promise<DatabaseSnapshotWritten>;
 }
+/** One database file the owner serves. */
+export interface OwnedDatabase {
+	readonly databaseId: DataStoreDatabase;
+	readonly livePath: string;
+}
+/**
+* The databases a run carries when it states none: the minimum (D382). A
+* schedule, a manual run and `createArchive` all fall back to this one value.
+*/
+export declare const DEFAULT_BACKUP_DATABASES: readonly DataStoreDatabase[];
 /** Path of the manifest file embedded inside every archive. */
 export declare const ARCHIVE_MANIFEST_NAME = ".camstack-backup-manifest.json";
 export type ArchiveEntryKind = "file" | "dir" | "symlink";
@@ -94,6 +105,12 @@ export interface ArchiveManifest {
 	* files (D693). Paths are archive-relative.
 	*/
 	sqliteSnapshots?: ArchiveSqliteSnapshot[];
+	/**
+	* Owned databases this run did NOT select: left out of the tar and of
+	* `entries` alike (a live file is never carried anyway). Absent when the
+	* run carried every owned database it found.
+	*/
+	omittedDatabases?: DataStoreDatabase[];
 }
 /** How an archive was encrypted — absent on a plain `.tar.gz`. */
 export interface ArchiveEncryption {
@@ -207,6 +224,12 @@ export declare class SystemBackupService {
 		*/
 		owner?: DatabaseOwner;
 		/**
+		* Which owned databases this run carries as snapshots; the others are left
+		* out and listed in `manifest.omittedDatabases`. Absent = `['settings']`
+		* ({@link DEFAULT_BACKUP_DATABASES}): an unstated ask is the minimum.
+		*/
+		databases?: readonly DataStoreDatabase[];
+		/**
 		* A backup PUBLIC key: the gzip stream is encrypted to it as it is
 		* written, so no plaintext archive ever touches the staging disk. Parsed
 		* before any work — a bad key builds nothing.
@@ -214,6 +237,13 @@ export declare class SystemBackupService {
 		encryptTo?: string;
 	}): Promise<CreateArchiveResult>;
 	/**
+	* An archive of the selected databases' owner snapshots and the manifest —
+	* no data-root walk, no location, no settings (D852). Refused when the owner
+	* has none of the selected files: an archive of nothing must reach no
+	* destination, because its upload prunes an older archive that has them.
+	*/
+	private createSnapshotsOnlyArchive;
+	/**
 	* Tar `present` (filtered by `excluded`) plus the staged manifest into
 	* `archivePath`.
 	*/
@@ -240,20 +270,22 @@ export declare class SystemBackupService {
 	/** Drop the marker after a successful boot-time restore. */
 	clearPendingMarker(): void;
 	/**
-	* The databases the owner declares, archive-relative, that this walk found.
-	* One outside this data root is not in scope. An owner that cannot answer
-	* stops the archive: without the answer, nothing says which file is live.
+	* The databases the owner declares, archive-relative, that this walk found,
+	* with the id of each. One outside this data root is not in scope. An owner
+	* that cannot answer stops the archive: without the answer, nothing says
+	* which file is live.
 	*/
 	private ownedDatabasesInScope;
 	/**
-	* Ask the owner for its snapshot, and place it in this archive. The snapshot
-	* must sit on THIS data root — the call is pinned to this node, so a path
-	* elsewhere means it reached another host, and that file is not ours to
-	* read — beside an owned database in scope, and it must cover EVERY owned
-	* database in scope. Anything else is refused.
+	* Ask the owner for one verified snapshot per SELECTED database, one after
+	* the other, and place each in this archive. A snapshot must sit on THIS data
+	* root — the call is pinned to this node, so a path elsewhere means it
+	* reached another host, and that file is not ours to read — beside the very
+	* database it was asked for. Anything else is refused, and the run builds
+	* nothing: the copies already taken are removed.
 	*
-	* Only ever DELETED here: `<owned db>.backup-snapshot` under this data root,
-	* a name this process derives itself. A path the owner ANSWERS is never
+	* Only ever DELETED here: `<selected db>.backup-snapshot` under this data
+	* root, a name this process derives itself. A path the owner ANSWERS is never
 	* deleted on its word — answering the live database as the snapshot would
 	* otherwise delete the live database. A file at any other path is left to
 	* the owner's own sweep.
@@ -261,7 +293,8 @@ export declare class SystemBackupService {
 	* A cancel is honoured while the owner is still copying; the copy it may
 	* finish afterwards is removed when that call settles.
 	*/
-	private takeOwnerSnapshot;
+	private takeOwnerSnapshots;
+	private takeOneSnapshot;
 	private removeSnapshot;
 	/** `abs` relative to the data root, or null when it lies outside it. */
 	private archiveRelative;

package/dist/builtins/system-config/system-config.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
-const require_constants$8 = require("../../constants-BBWZlnpQ.js");
+const require_constants$8 = require("../../constants-CO5zpJQY.js");
 const require_x509_es = require("../../x509.es-Dzl0BbmG.js");
 const require_src$1 = require("../../src-CnAqG6EF.js");
 let zod = require("zod");

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,7 +1,7 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Dr as defineCustomActions, Er as customAction, Ir as isSecretClear, Lr as isSecretMarker, Mr as hydrateSchema, Xr as secretTreeFromSchema, cr as errMsg, ei as transformSecretWrite, lr as BaseAddon, zr as makeSecretMarker } from "../../dist-B-NmfvVC.mjs";
+import { Dr as defineCustomActions, Er as customAction, Ir as isSecretClear, Lr as isSecretMarker, Mr as hydrateSchema, Xr as secretTreeFromSchema, cr as errMsg, ei as transformSecretWrite, lr as BaseAddon, zr as makeSecretMarker } from "../../dist-CGz9u2HD.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
-import { a as MESH_CA_KEY_REF, b as setProcessClusterSecretGate, c as MESH_JOIN_TOKEN_MAX_TTL_SEC, d as CLUSTER_SECRET_REF, i as MESH_CA_FIELD, l as SERVER_AUTH_OID, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID, v as hashClusterSecret } from "../../constants-DHhhVjkt.mjs";
+import { a as MESH_CA_KEY_REF, b as setProcessClusterSecretGate, c as MESH_JOIN_TOKEN_MAX_TTL_SEC, d as CLUSTER_SECRET_REF, i as MESH_CA_FIELD, l as SERVER_AUTH_OID, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID, v as hashClusterSecret } from "../../constants-B6YTf0v2.mjs";
 import { a as KeyUsagesExtension, c as Pkcs10CertificateRequestGenerator, d as X509Certificate$1, f as X509CertificateGenerator, i as KeyUsageFlags, n as BasicConstraintsExtension, o as PemConverter, p as cryptoProvider, r as ExtendedKeyUsageExtension, s as Pkcs10CertificateRequest, t as AuthorityKeyIdentifierExtension, u as SubjectKeyIdentifierExtension } from "../../x509.es-CAjSsrkk.mjs";
 import { t as require_src } from "../../src-hG4grMU4.mjs";
 import { z } from "zod";

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-B-NmfvVC.mjs";
+import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-CGz9u2HD.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{composition-sources-BWNs-ZeH.js → composition-sources-60tuHQ9N.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-CiUKtVkX.js");
+const require_dist = require("./dist-K3WFop9Q.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-tRG7nKWK.mjs → composition-sources-gxVpghXh.mjs}

@@ -1,4 +1,4 @@
-import { cr as errMsg, tr as compositionSourceKey } from "./dist-B-NmfvVC.mjs";
+import { cr as errMsg, tr as compositionSourceKey } from "./dist-CGz9u2HD.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{constants-DHhhVjkt.mjs → constants-B6YTf0v2.mjs}

@@ -1,4 +1,4 @@
-import { Sr as buildSecretRef } from "./dist-B-NmfvVC.mjs";
+import { Sr as buildSecretRef } from "./dist-CGz9u2HD.mjs";
 import { createHash, timingSafeEqual } from "node:crypto";
 //#region src/kernel/moleculer/cluster-secret.ts
 /**

package/dist/{constants-BBWZlnpQ.js → constants-CO5zpJQY.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-CiUKtVkX.js");
+const require_dist = require("./dist-K3WFop9Q.js");
 let node_crypto = require("node:crypto");
 //#region src/kernel/moleculer/cluster-secret.ts
 /**