@camstack/system 1.2.444 → 1.2.446

package/dist/builtins/alerts/emit-alert-policy.d.ts

@@ -0,0 +1,28 @@
+import type { Alert } from "@camstack/types";
+import { type PushState } from "./critical-push.js";
+export declare function episodeKeyFromMetadata(metadata: Record<string, unknown> | undefined): string | undefined;
+export interface EmitMergeInput {
+	readonly existing: {
+		readonly read?: boolean;
+		readonly episodeKey?: string;
+		readonly status?: string;
+	} | null;
+	readonly incoming: Alert;
+}
+export interface EmitMergeResult {
+	readonly alert: Alert;
+	readonly queuePush: boolean;
+}
+/** Completed episodes start fresh — prior push must not suppress the next digest. */
+export declare function shouldDropPriorPush(existingStatus: string | undefined): boolean;
+export declare function alertWithRetainedPush(toStore: Alert, existingPush: PushState | undefined, existingStatus: string | undefined): Alert;
+/**
+* Re-emit of the same alert id: preserve read when the episode is unchanged
+* and still active. A completed episode starts again. Queue a critical push
+* only for active, unread critical findings.
+*/
+export declare function mergeEmitAlert(input: EmitMergeInput): EmitMergeResult;
+export declare function criticalPushPayload(alert: Alert): {
+	readonly key: string;
+	readonly line: string;
+};

package/dist/builtins/alerts/record-kinds.d.ts

@@ -0,0 +1,15 @@
+/**
+* Record kinds owned by alert-center (records plan phase 4).
+*/
+import { type Alert, type DefinedRecordKind } from "@camstack/types";
+import { z } from "zod";
+/** Legacy collection / adoptsFrom target (canonical KV before phase 4). */
+export declare const ALERTS_COLLECTION = "alerts";
+export type AlertBody = Omit<Alert, "id">;
+export declare const AlertBodySchema: z.ZodType<AlertBody>;
+export type AlertCenterRecordKindsMap = {
+	readonly alerts: DefinedRecordKind<z.ZodType<AlertBody>>;
+};
+export declare const alertCenterRecordKinds: AlertCenterRecordKindsMap;
+/** Narrow kind for `records.kind()` — `IsolatedRecordKinds` string index is `| undefined`. */
+export declare const alertsRecordKind: DefinedRecordKind<z.ZodType<AlertBody>>;

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D1vECb_6.js");
+const require_dist = require("../../dist-BkNfEJKa.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { $i as EventCategory, Fn as ptzAutotrackCapability, Fr as BaseAddon, N as FIRST_LEVEL_MACRO_CLASSES, Oi as isEvent, Pr as errMsg, dt as bareAddonId } from "../../dist-DERK-gP5.mjs";
+import { Lr as errMsg, P as FIRST_LEVEL_MACRO_CLASSES, Pi as isEvent, Rr as BaseAddon, ht as bareAddonId, la as EventCategory, zn as ptzAutotrackCapability } from "../../dist-CkZIrsAP.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.d.ts

@@ -2,6 +2,7 @@ import type { ProviderRegistration } from "@camstack/types";
 import { BaseAddon } from "@camstack/types";
 export declare class BackupOrchestratorAddon extends BaseAddon<Record<string, never>> {
 	private systemBackup;
+	private backupRecords;
 	private policies;
 	private schedules;
 	/** Backup encryption keys — PUBLIC keys only (see encryption-key-store.ts). */

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,8 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D1vECb_6.js");
-const require_restore_archive = require("../../restore-archive-Dy-qKTdF.js");
+const require_dist = require("../../dist-BkNfEJKa.js");
+const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
+const require_restore_archive = require("../../restore-archive-B57xI5Ue.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -84,66 +85,6 @@ async function seedWeeklySchedule(store, markers) {
 	return seed;
 }
 //#endregion
-//#region src/builtins/backup-orchestrator/seed-marker-store.ts
-/**
-* @durable class=config owner=backup-orchestrator
-*   write="the orchestrator inserts one row per seed id the first time that
-*     seed is created (or found already created); never updated"
-*   retention="none — one tiny row per seed ever made; deleting it lets the
-*     seed be re-created once more on the next boot"
-*/
-var BACKUP_SEED_MARKERS_COLLECTION = "backup_seed_markers";
-var COLUMNS$1 = [{
-	name: "seed_id",
-	type: "TEXT",
-	primaryKey: true
-}, {
-	name: "seeded_at",
-	type: "INTEGER",
-	notNull: true
-}];
-var BackupSeedMarkerStore = class {
-	store;
-	now;
-	declared = false;
-	constructor(store, now = Date.now) {
-		this.store = store;
-		this.now = now;
-	}
-	async ensureDeclared() {
-		if (this.declared) return;
-		await this.store.declareCollection({
-			collection: BACKUP_SEED_MARKERS_COLLECTION,
-			columns: COLUMNS$1
-		});
-		this.declared = true;
-	}
-	async has(seedId) {
-		await this.ensureDeclared();
-		return (await this.store.query({
-			collection: BACKUP_SEED_MARKERS_COLLECTION,
-			filter: {
-				where: { seed_id: seedId },
-				limit: 1
-			}
-		})).length > 0;
-	}
-	async mark(seedId) {
-		await this.ensureDeclared();
-		if (await this.has(seedId)) return;
-		await this.store.insert({
-			collection: BACKUP_SEED_MARKERS_COLLECTION,
-			record: {
-				id: seedId,
-				data: {
-					seed_id: seedId,
-					seeded_at: this.now()
-				}
-			}
-		});
-	}
-};
-//#endregion
 //#region ../../node_modules/croner/dist/croner.js
 function T(s) {
 	return Date.UTC(s.y, s.m - 1, s.d, s.h, s.i, s.s);
@@ -938,6 +879,7 @@ function previewNextRuns(cron, count, after) {
 }
 //#endregion
 //#region src/builtins/backup-orchestrator/destination-policy.ts
+var import_read_all_rows = require_read_all_rows$1.require_read_all_rows();
 /**
 * @durable class=config owner=backup-orchestrator
 *   write="`ensureDefault` auto-creates one row the first time a `backups` storage
@@ -992,8 +934,10 @@ var BACKUP_DESTINATION_POLICIES_COLUMNS = [
 var BackupDestinationPolicyService = class {
 	store;
 	declared = false;
-	constructor(store) {
+	policiesKind;
+	constructor(store, policiesKind = null) {
 		this.store = store;
+		this.policiesKind = policiesKind;
 	}
 	/**
 	* Lazy `declareCollection` — called from every read/write path.
@@ -1005,6 +949,7 @@ var BackupDestinationPolicyService = class {
 		await this.ensureDeclared();
 	}
 	async ensureDeclared() {
+		if (this.policiesKind !== null) return;
 		if (this.declared) return;
 		await this.store.declareCollection({
 			collection: BACKUP_DESTINATION_POLICIES,
@@ -1014,6 +959,17 @@ var BackupDestinationPolicyService = class {
 	}
 	async list() {
 		await this.ensureDeclared();
+		const kind = this.policiesKind;
+		if (kind !== null) {
+			const rows = await (0, import_read_all_rows.readAllRows)(kind);
+			rows.sort((a, b) => a.id.localeCompare(b.id));
+			const out = [];
+			for (const row of rows) {
+				const mapped = bodyToPolicy(row.id, row.data);
+				if (mapped) out.push(mapped);
+			}
+			return out;
+		}
 		const rows = await this.store.query({
 			collection: BACKUP_DESTINATION_POLICIES,
 			filter: { orderBy: {
@@ -1030,6 +986,11 @@ var BackupDestinationPolicyService = class {
 	}
 	async get(locationId) {
 		await this.ensureDeclared();
+		const kind = this.policiesKind;
+		if (kind !== null) {
+			const row = await kind.get(locationId);
+			return row === null ? null : bodyToPolicy(locationId, row.data);
+		}
 		const rows = await this.store.query({
 			collection: BACKUP_DESTINATION_POLICIES,
 			filter: {
@@ -1045,6 +1006,16 @@ var BackupDestinationPolicyService = class {
 	*/
 	async upsert(p) {
 		await this.ensureDeclared();
+		const kind = this.policiesKind;
+		if (kind !== null) {
+			const body = policyToBody(p);
+			const data = require_restore_archive.backupOrchestratorRecordKinds["destination-policies"].schema.parse(body);
+			await kind.put({
+				id: p.locationId,
+				data
+			});
+			return;
+		}
 		await this.store.deleteWhere({
 			collection: BACKUP_DESTINATION_POLICIES,
 			filter: { where: { location_id: p.locationId } }
@@ -1059,6 +1030,11 @@ var BackupDestinationPolicyService = class {
 	}
 	async delete(locationId) {
 		await this.ensureDeclared();
+		const kind = this.policiesKind;
+		if (kind !== null) {
+			await kind.delete(locationId);
+			return;
+		}
 		await this.store.deleteWhere({
 			collection: BACKUP_DESTINATION_POLICIES,
 			filter: { where: { location_id: locationId } }
@@ -1110,6 +1086,26 @@ var BackupDestinationPolicyService = class {
 		});
 	}
 };
+function policyToBody(p) {
+	return {
+		enabled: p.enabled,
+		retentionCount: p.retentionCount,
+		...p.label !== void 0 ? { label: p.label } : {},
+		...p.lastAttemptAt !== void 0 ? { lastAttemptAt: p.lastAttemptAt } : {},
+		...p.lastError !== void 0 ? { lastError: p.lastError } : {}
+	};
+}
+function bodyToPolicy(locationId, body) {
+	if (!locationId) return null;
+	return {
+		locationId,
+		enabled: body.enabled,
+		retentionCount: body.retentionCount,
+		...body.label !== void 0 ? { label: body.label } : {},
+		...body.lastAttemptAt !== void 0 ? { lastAttemptAt: body.lastAttemptAt } : {},
+		...body.lastError !== void 0 ? { lastError: body.lastError } : {}
+	};
+}
 function mapPolicyToRow(p) {
 	return {
 		location_id: p.locationId,
@@ -1213,131 +1209,6 @@ async function downloadArchiveToCache(input) {
 	}
 }
 //#endregion
-//#region src/builtins/backup-orchestrator/encryption-key-store.ts
-/**
-* @durable class=config owner=backup-orchestrator
-*   write="`setupEncryption` inserts one row per generated key and retires the
-*     previous active row; `disableEncryption` retires the active row"
-*   retention="none — one small row per key ever generated; a retired row
-*     names the key older archives need"
-*/
-var BACKUP_ENCRYPTION_KEYS_COLLECTION = "backup_encryption_keys";
-var COLUMNS = [
-	{
-		name: "key_id",
-		type: "TEXT",
-		primaryKey: true
-	},
-	{
-		name: "public_key",
-		type: "TEXT",
-		notNull: true
-	},
-	{
-		name: "created_at",
-		type: "INTEGER",
-		notNull: true
-	},
-	{
-		name: "retired_at",
-		type: "INTEGER"
-	}
-];
-var BackupEncryptionKeyStore = class {
-	store;
-	now;
-	declared = false;
-	constructor(store, now = Date.now) {
-		this.store = store;
-		this.now = now;
-	}
-	async ensureDeclared() {
-		if (this.declared) return;
-		await this.store.declareCollection({
-			collection: BACKUP_ENCRYPTION_KEYS_COLLECTION,
-			columns: COLUMNS
-		});
-		this.declared = true;
-	}
-	/** Every key, newest first. */
-	async list() {
-		await this.ensureDeclared();
-		const rows = await this.store.query({
-			collection: BACKUP_ENCRYPTION_KEYS_COLLECTION,
-			filter: { orderBy: {
-				field: "created_at",
-				direction: "desc"
-			} }
-		});
-		const out = [];
-		for (const row of rows) {
-			const record = toRecord(row.data);
-			if (record !== null) out.push(record);
-		}
-		return out;
-	}
-	/** The key new archives are encrypted to; `null` = encryption off. */
-	async active() {
-		return (await this.list()).find((k) => k.retiredAt === null) ?? null;
-	}
-	/** Make `publicKey` the active key; the previous one is retired, kept listed. */
-	async activate(input) {
-		const parsed = require_restore_archive.parseBackupPublicKey(input.publicKey);
-		const t = this.now();
-		await this.retireActive(t);
-		const record = {
-			keyId: parsed.keyId,
-			publicKey: input.publicKey.trim(),
-			createdAt: t,
-			retiredAt: null
-		};
-		await this.write(record);
-		return record;
-	}
-	/** Encryption off: the active key is retired. Archives already made keep needing it. */
-	async disable() {
-		await this.retireActive(this.now());
-	}
-	async retireActive(at) {
-		for (const key of await this.list()) if (key.retiredAt === null) await this.write({
-			...key,
-			retiredAt: at
-		});
-	}
-	async write(record) {
-		await this.ensureDeclared();
-		await this.store.deleteWhere({
-			collection: BACKUP_ENCRYPTION_KEYS_COLLECTION,
-			filter: { where: { key_id: record.keyId } }
-		});
-		await this.store.insert({
-			collection: BACKUP_ENCRYPTION_KEYS_COLLECTION,
-			record: {
-				id: record.keyId,
-				data: {
-					key_id: record.keyId,
-					public_key: record.publicKey,
-					created_at: record.createdAt,
-					retired_at: record.retiredAt
-				}
-			}
-		});
-	}
-};
-function toRecord(row) {
-	const keyId = row["key_id"];
-	const publicKey = row["public_key"];
-	const createdAt = row["created_at"];
-	if (typeof keyId !== "string" || typeof publicKey !== "string") return null;
-	const retired = row["retired_at"];
-	return {
-		keyId,
-		publicKey,
-		createdAt: typeof createdAt === "number" ? createdAt : Number(createdAt ?? 0),
-		retiredAt: typeof retired === "number" ? retired : null
-	};
-}
-//#endregion
 //#region src/builtins/backup-orchestrator/manifest-store.ts
 /** File path (relative to the location root) where the index lives. */
 var MANIFESTS_FILENAME = "manifests.json";
@@ -1873,13 +1744,16 @@ var BACKUP_SCHEDULES_COLUMNS = [
 var BackupScheduleService = class {
 	store;
 	declared = false;
-	constructor(store) {
+	schedulesKind;
+	constructor(store, schedulesKind = null) {
 		this.store = store;
+		this.schedulesKind = schedulesKind;
 	}
 	async initialize() {
 		await this.ensureDeclared();
 	}
 	async ensureDeclared() {
+		if (this.schedulesKind !== null) return;
 		if (this.declared) return;
 		await this.store.declareCollection({
 			collection: BACKUP_SCHEDULES,
@@ -1889,6 +1763,17 @@ var BackupScheduleService = class {
 	}
 	async list() {
 		await this.ensureDeclared();
+		const kind = this.schedulesKind;
+		if (kind !== null) {
+			const rows = await (0, import_read_all_rows.readAllRows)(kind);
+			rows.sort((a, b) => a.id.localeCompare(b.id));
+			const out = [];
+			for (const row of rows) {
+				const mapped = bodyToSchedule(row.id, row.data);
+				if (mapped) out.push(mapped);
+			}
+			return out;
+		}
 		const rows = await this.store.query({
 			collection: BACKUP_SCHEDULES,
 			filter: { orderBy: {
@@ -1905,6 +1790,11 @@ var BackupScheduleService = class {
 	}
 	async get(id) {
 		await this.ensureDeclared();
+		const kind = this.schedulesKind;
+		if (kind !== null) {
+			const row = await kind.get(id);
+			return row === null ? null : bodyToSchedule(id, row.data);
+		}
 		const rows = await this.store.query({
 			collection: BACKUP_SCHEDULES,
 			filter: {
@@ -1917,6 +1807,16 @@ var BackupScheduleService = class {
 	/** Replace-or-insert (delete + insert — mirrors the policy store). */
 	async upsert(s) {
 		await this.ensureDeclared();
+		const kind = this.schedulesKind;
+		if (kind !== null) {
+			const body = scheduleToBody(s);
+			const data = require_restore_archive.backupOrchestratorRecordKinds.schedules.schema.parse(body);
+			await kind.put({
+				id: s.id,
+				data
+			});
+			return;
+		}
 		await this.store.deleteWhere({
 			collection: BACKUP_SCHEDULES,
 			filter: { where: { id: s.id } }
@@ -1931,12 +1831,47 @@ var BackupScheduleService = class {
 	}
 	async delete(id) {
 		await this.ensureDeclared();
+		const kind = this.schedulesKind;
+		if (kind !== null) {
+			await kind.delete(id);
+			return;
+		}
 		await this.store.deleteWhere({
 			collection: BACKUP_SCHEDULES,
 			filter: { where: { id } }
 		});
 	}
 };
+function scheduleToBody(s) {
+	return {
+		label: s.label,
+		cron: s.cron,
+		enabled: s.enabled,
+		locationIds: [...s.locationIds],
+		retentionCount: s.retentionCount,
+		...s.dataSources !== void 0 ? { dataSources: [...s.dataSources] } : {},
+		...s.databases !== void 0 ? { databases: [...s.databases] } : {},
+		...s.lastAttemptAt !== void 0 ? { lastAttemptAt: s.lastAttemptAt } : {},
+		...s.lastSuccessAt !== void 0 ? { lastSuccessAt: s.lastSuccessAt } : {},
+		...s.lastError !== void 0 ? { lastError: s.lastError } : {}
+	};
+}
+function bodyToSchedule(id, body) {
+	if (!id) return null;
+	return {
+		id,
+		label: body.label,
+		cron: body.cron,
+		enabled: body.enabled,
+		locationIds: [...body.locationIds],
+		retentionCount: body.retentionCount,
+		...body.dataSources !== void 0 ? { dataSources: [...body.dataSources] } : {},
+		...body.databases !== void 0 && body.databases.length > 0 ? { databases: [...body.databases] } : {},
+		...body.lastAttemptAt !== void 0 ? { lastAttemptAt: body.lastAttemptAt } : {},
+		...body.lastSuccessAt !== void 0 ? { lastSuccessAt: body.lastSuccessAt } : {},
+		...body.lastError !== void 0 ? { lastError: body.lastError } : {}
+	};
+}
 function mapScheduleToRow(s) {
 	return {
 		id: s.id,
@@ -2191,6 +2126,7 @@ var UPLOAD_CHUNK_BYTES = 8 * 1024 * 1024;
 var ORCHESTRATOR_ADDON_ID = "backup-orchestrator";
 var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 	systemBackup = null;
+	backupRecords = null;
 	policies = null;
 	schedules = null;
 	/** Backup encryption keys — PUBLIC keys only (see encryption-key-store.ts). */
@@ -2232,6 +2168,11 @@ var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 		super({});
 	}
 	async onInitialize() {
+		const records = this.ctx.records;
+		if (records !== void 0) {
+			await records.declare(require_restore_archive.backupOrchestratorRecordKinds);
+			this.backupRecords = require_restore_archive.backupRecordStoresOf(records);
+		}
 		this.dataDir = this.ctx.nodeDataDir;
 		this.stagingDir = resolveStagingDir(this.ctx.nodeDataDir);
 		this.systemBackup = new require_restore_archive.SystemBackupService(this.dataDir, this.ctx.logger);
@@ -2253,7 +2194,7 @@ var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 		}
 		await this.seedWeekly();
 		const settingsStore = this.ctx.kernel.capabilityRegistry?.getSingleton("settings-store");
-		this.encryptionKeys = settingsStore ? new BackupEncryptionKeyStore(settingsStore) : null;
+		this.encryptionKeys = settingsStore ? new require_restore_archive.BackupEncryptionKeyStore(settingsStore, Date.now, this.backupRecords?.encryptionKeys ?? null) : null;
 		const provider = {
 			listDestinations: () => this.listDestinations(),
 			list: () => this.aggregatedList(),
@@ -3256,7 +3197,7 @@ var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 		try {
 			const store = this.ctx.kernel.capabilityRegistry?.getSingleton("settings-store");
 			if (!store) return;
-			const seed = await seedWeeklySchedule(this.schedules, new BackupSeedMarkerStore(store));
+			const seed = await seedWeeklySchedule(this.schedules, new require_restore_archive.BackupSeedMarkerStore(store, Date.now, this.backupRecords?.seedMarkers ?? null));
 			if (seed === null) return;
 			this.ctx.logger.info("backup: seeded the weekly events & history schedule", { meta: {
 				scheduleId: seed.id,
@@ -3413,7 +3354,7 @@ var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 			this.ctx.logger.warn("backup-orchestrator: no settings-store provider — backup schedules will not persist");
 			return null;
 		}
-		return new BackupScheduleService(store);
+		return new BackupScheduleService(store, this.backupRecords?.schedules ?? null);
 	}
 	resolvePolicyService() {
 		const reg = this.ctx.kernel.capabilityRegistry;
@@ -3423,7 +3364,7 @@ var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 			this.ctx.logger.warn("backup-orchestrator: no settings-store provider — destination policies will not persist");
 			return null;
 		}
-		return new BackupDestinationPolicyService(store);
+		return new BackupDestinationPolicyService(store, this.backupRecords?.destinationPolicies ?? null);
 	}
 	/**
 	* Narrow `ctx.api.storage` to the subset the manifest helpers need.