@camstack/system 1.2.458 → 1.2.460

package/dist/{restore-archive-C7kLDI_0.mjs → restore-archive-CM23Pq9B.mjs}

@@ -1,5 +1,4 @@
-import { Ki as defineRecordKinds, N as DataStoreDatabaseSchema, S as DATABASE_SNAPSHOT_SUFFIX } from "./dist-B_GRPhnY.mjs";
-import { t as require_read_all_rows } from "./read-all-rows-TaPqdWNF.mjs";
+import { Gi as defineRecordKinds, N as DataStoreDatabaseSchema, S as DATABASE_SNAPSHOT_SUFFIX } from "./dist-Wy8cTxg6.mjs";
 import { z } from "zod";
 import { createCipheriv, createDecipheriv, createHash, createPrivateKey, createPublicKey, diffieHellman, generateKeyPairSync, hkdfSync, randomBytes } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
@@ -7,8 +6,8 @@ import * as fsp from "node:fs/promises";
 import jn from "node:fs/promises";
 import * as path$1 from "node:path";
 import path, { basename, join, posix, win32 } from "node:path";
-import * as fs$1 from "node:fs";
-import Kt from "node:fs";
+import * as fs$2 from "node:fs";
+import fs from "node:fs";
 import { EventEmitter } from "node:events";
 import As, { Transform } from "node:stream";
 import { StringDecoder } from "node:string_decoder";
@@ -21,6 +20,88 @@ import $r, { EventEmitter as EventEmitter$1 } from "events";
 import * as zlib from "node:zlib";
 import { pipeline } from "node:stream/promises";
 import no from "node:assert";
+var BackupScheduleBodySchema = z.object({
+	label: z.string(),
+	cron: z.string(),
+	enabled: z.boolean(),
+	locationIds: z.array(z.string()).readonly(),
+	retentionCount: z.number(),
+	dataSources: z.array(z.string()).readonly().optional(),
+	databases: z.array(DataStoreDatabaseSchema).readonly().optional(),
+	lastAttemptAt: z.number().optional(),
+	lastSuccessAt: z.number().optional(),
+	lastError: z.string().optional()
+});
+var BackupDestinationPolicyBodySchema = z.object({
+	enabled: z.boolean(),
+	retentionCount: z.number(),
+	label: z.string().optional(),
+	lastAttemptAt: z.number().optional(),
+	lastError: z.string().optional()
+});
+var BackupEncryptionKeyBodySchema = z.object({
+	keyId: z.string(),
+	publicKey: z.string(),
+	createdAt: z.number(),
+	retiredAt: z.number().nullable()
+});
+var BackupSeedMarkerBodySchema = z.object({ seededAt: z.number() });
+var _backupOrchestratorRecordKinds = defineRecordKinds({
+	schedules: {
+		schema: BackupScheduleBodySchema,
+		class: "config",
+		writeTrigger: "operator upsert/delete; orchestrator stamps lastAttempt/success/error",
+		device: "none",
+		at: "none",
+		indexes: [{
+			name: "enabled",
+			fields: ["enabled"]
+		}],
+		retention: { none: "operator delete only" },
+		entry: {
+			title: "Backup schedules",
+			nameField: "label"
+		}
+	},
+	"destination-policies": {
+		schema: BackupDestinationPolicyBodySchema,
+		class: "config",
+		writeTrigger: "ensureDefault, operator upsert, recordAttempt after each archive write",
+		device: "none",
+		at: "none",
+		retention: { none: "row outlives location; ensureDefault recreates" }
+	},
+	"encryption-keys": {
+		schema: BackupEncryptionKeyBodySchema,
+		class: "config",
+		writeTrigger: "setupEncryption activate; disableEncryption retires active row",
+		device: "none",
+		at: "none",
+		retention: { none: "retired keys kept for archive decryption hints" }
+	},
+	"seed-markers": {
+		schema: BackupSeedMarkerBodySchema,
+		class: "config",
+		writeTrigger: "mark() once per seed id after seed landed",
+		device: "none",
+		at: "none",
+		retention: { none: "one row per seed id ever" }
+	}
+});
+var backupOrchestratorRecordKinds = _backupOrchestratorRecordKinds;
+var backupSchedulesRecordKind = _backupOrchestratorRecordKinds.schedules;
+var backupDestinationPoliciesRecordKind = _backupOrchestratorRecordKinds["destination-policies"];
+var backupEncryptionKeysRecordKind = _backupOrchestratorRecordKinds["encryption-keys"];
+var backupSeedMarkersRecordKind = _backupOrchestratorRecordKinds["seed-markers"];
+function backupRecordStoresOf(records) {
+	return {
+		schedules: records.kind(backupSchedulesRecordKind),
+		destinationPolicies: records.kind(backupDestinationPoliciesRecordKind),
+		encryptionKeys: records.kind(backupEncryptionKeysRecordKind),
+		seedMarkers: records.kind(backupSeedMarkersRecordKind)
+	};
+}
+//#endregion
 //#region src/builtins/system-backup/backup-encryption.ts
 /**
 * Backup archive encryption — public key, streaming, chunked AEAD (D-backup
@@ -378,341 +459,13 @@ async function readBackupEncryptionHeader(file) {
 async function decryptBackupFile(input, output, secretKey) {
 	const decrypt = createBackupDecryptStream(secretKey);
 	try {
-		await pipeline(fs$1.createReadStream(input), decrypt, fs$1.createWriteStream(output, { mode: 384 }));
+		await pipeline(fs$2.createReadStream(input), decrypt, fs$2.createWriteStream(output, { mode: 384 }));
 	} catch (err) {
 		await fsp.rm(output, { force: true }).catch(() => void 0);
 		throw err;
 	}
 }
 //#endregion
-//#region src/builtins/backup-orchestrator/encryption-key-store.ts
-var import_read_all_rows = require_read_all_rows();
-/**
-* @durable class=config owner=backup-orchestrator
-*   write="`setupEncryption` inserts one row per generated key and retires the
-*     previous active row; `disableEncryption` retires the active row"
-*   retention="none — one small row per key ever generated; a retired row
-*     names the key older archives need"
-*/
-var BACKUP_ENCRYPTION_KEYS_COLLECTION = "backup_encryption_keys";
-var COLUMNS$1 = [
-	{
-		name: "key_id",
-		type: "TEXT",
-		primaryKey: true
-	},
-	{
-		name: "public_key",
-		type: "TEXT",
-		notNull: true
-	},
-	{
-		name: "created_at",
-		type: "INTEGER",
-		notNull: true
-	},
-	{
-		name: "retired_at",
-		type: "INTEGER"
-	}
-];
-var BackupEncryptionKeyStore = class {
-	store;
-	now;
-	declared = false;
-	keysKind;
-	constructor(store, now = Date.now, keysKind = null) {
-		this.store = store;
-		this.now = now;
-		this.keysKind = keysKind;
-	}
-	async ensureDeclared() {
-		if (this.keysKind !== null) return;
-		if (this.declared) return;
-		await this.store.declareCollection({
-			collection: BACKUP_ENCRYPTION_KEYS_COLLECTION,
-			columns: COLUMNS$1
-		});
-		this.declared = true;
-	}
-	/** Every key, newest first. */
-	async list() {
-		await this.ensureDeclared();
-		const kind = this.keysKind;
-		if (kind !== null) {
-			const rows = await (0, import_read_all_rows.readAllRows)(kind);
-			rows.sort((a, b) => b.data.createdAt - a.data.createdAt);
-			const out = [];
-			for (const row of rows) {
-				const record = bodyToRecord(row.id, row.data);
-				if (record !== null) out.push(record);
-			}
-			return out;
-		}
-		const rows = await this.store.query({
-			collection: BACKUP_ENCRYPTION_KEYS_COLLECTION,
-			filter: { orderBy: {
-				field: "created_at",
-				direction: "desc"
-			} }
-		});
-		const out = [];
-		for (const row of rows) {
-			const record = toRecord(row.data);
-			if (record !== null) out.push(record);
-		}
-		return out;
-	}
-	/** The key new archives are encrypted to; `null` = encryption off. */
-	async active() {
-		return (await this.list()).find((k) => k.retiredAt === null) ?? null;
-	}
-	/** Make `publicKey` the active key; the previous one is retired, kept listed. */
-	async activate(input) {
-		const parsed = parseBackupPublicKey(input.publicKey);
-		const t = this.now();
-		await this.retireActive(t);
-		const record = {
-			keyId: parsed.keyId,
-			publicKey: input.publicKey.trim(),
-			createdAt: t,
-			retiredAt: null
-		};
-		await this.write(record);
-		return record;
-	}
-	/** Encryption off: the active key is retired. Archives already made keep needing it. */
-	async disable() {
-		await this.retireActive(this.now());
-	}
-	async retireActive(at) {
-		for (const key of await this.list()) if (key.retiredAt === null) await this.write({
-			...key,
-			retiredAt: at
-		});
-	}
-	async write(record) {
-		await this.ensureDeclared();
-		const kind = this.keysKind;
-		if (kind !== null) {
-			const body = {
-				keyId: record.keyId,
-				publicKey: record.publicKey,
-				createdAt: record.createdAt,
-				retiredAt: record.retiredAt
-			};
-			const data = backupOrchestratorRecordKinds["encryption-keys"].schema.parse(body);
-			await kind.put({
-				id: record.keyId,
-				data
-			});
-			return;
-		}
-		await this.store.deleteWhere({
-			collection: BACKUP_ENCRYPTION_KEYS_COLLECTION,
-			filter: { where: { key_id: record.keyId } }
-		});
-		await this.store.insert({
-			collection: BACKUP_ENCRYPTION_KEYS_COLLECTION,
-			record: {
-				id: record.keyId,
-				data: {
-					key_id: record.keyId,
-					public_key: record.publicKey,
-					created_at: record.createdAt,
-					retired_at: record.retiredAt
-				}
-			}
-		});
-	}
-};
-function bodyToRecord(keyId, body) {
-	if (!keyId) return null;
-	return {
-		keyId: body.keyId,
-		publicKey: body.publicKey,
-		createdAt: body.createdAt,
-		retiredAt: body.retiredAt
-	};
-}
-function toRecord(row) {
-	const keyId = row["key_id"];
-	const publicKey = row["public_key"];
-	const createdAt = row["created_at"];
-	if (typeof keyId !== "string" || typeof publicKey !== "string") return null;
-	const retired = row["retired_at"];
-	return {
-		keyId,
-		publicKey,
-		createdAt: typeof createdAt === "number" ? createdAt : Number(createdAt ?? 0),
-		retiredAt: typeof retired === "number" ? retired : null
-	};
-}
-//#endregion
-//#region src/builtins/backup-orchestrator/seed-marker-store.ts
-/**
-* @durable class=config owner=backup-orchestrator
-*   write="the orchestrator inserts one row per seed id the first time that
-*     seed is created (or found already created); never updated"
-*   retention="none — one tiny row per seed ever made; deleting it lets the
-*     seed be re-created once more on the next boot"
-*/
-var BACKUP_SEED_MARKERS_COLLECTION = "backup_seed_markers";
-var COLUMNS = [{
-	name: "seed_id",
-	type: "TEXT",
-	primaryKey: true
-}, {
-	name: "seeded_at",
-	type: "INTEGER",
-	notNull: true
-}];
-var BackupSeedMarkerStore = class {
-	store;
-	now;
-	declared = false;
-	markersKind;
-	constructor(store, now = Date.now, markersKind = null) {
-		this.store = store;
-		this.now = now;
-		this.markersKind = markersKind;
-	}
-	async ensureDeclared() {
-		if (this.markersKind !== null) return;
-		if (this.declared) return;
-		await this.store.declareCollection({
-			collection: BACKUP_SEED_MARKERS_COLLECTION,
-			columns: COLUMNS
-		});
-		this.declared = true;
-	}
-	async has(seedId) {
-		await this.ensureDeclared();
-		const kind = this.markersKind;
-		if (kind !== null) return await kind.get(seedId) !== null;
-		return (await this.store.query({
-			collection: BACKUP_SEED_MARKERS_COLLECTION,
-			filter: {
-				where: { seed_id: seedId },
-				limit: 1
-			}
-		})).length > 0;
-	}
-	async mark(seedId) {
-		await this.ensureDeclared();
-		if (await this.has(seedId)) return;
-		const kind = this.markersKind;
-		if (kind !== null) {
-			const body = { seededAt: this.now() };
-			const data = backupOrchestratorRecordKinds["seed-markers"].schema.parse(body);
-			await kind.put({
-				id: seedId,
-				data
-			});
-			return;
-		}
-		await this.store.insert({
-			collection: BACKUP_SEED_MARKERS_COLLECTION,
-			record: {
-				id: seedId,
-				data: {
-					seed_id: seedId,
-					seeded_at: this.now()
-				}
-			}
-		});
-	}
-};
-//#endregion
-//#region src/builtins/backup-orchestrator/record-kinds.ts
-var BACKUP_SCHEDULES_LEGACY = "backup_schedules";
-var BACKUP_DESTINATION_POLICIES_LEGACY = "backup_destination_policies";
-var BackupScheduleBodySchema = z.object({
-	label: z.string(),
-	cron: z.string(),
-	enabled: z.boolean(),
-	locationIds: z.array(z.string()).readonly(),
-	retentionCount: z.number(),
-	dataSources: z.array(z.string()).readonly().optional(),
-	databases: z.array(DataStoreDatabaseSchema).readonly().optional(),
-	lastAttemptAt: z.number().optional(),
-	lastSuccessAt: z.number().optional(),
-	lastError: z.string().optional()
-});
-var BackupDestinationPolicyBodySchema = z.object({
-	enabled: z.boolean(),
-	retentionCount: z.number(),
-	label: z.string().optional(),
-	lastAttemptAt: z.number().optional(),
-	lastError: z.string().optional()
-});
-var BackupEncryptionKeyBodySchema = z.object({
-	keyId: z.string(),
-	publicKey: z.string(),
-	createdAt: z.number(),
-	retiredAt: z.number().nullable()
-});
-var BackupSeedMarkerBodySchema = z.object({ seededAt: z.number() });
-var _backupOrchestratorRecordKinds = defineRecordKinds({
-	schedules: {
-		schema: BackupScheduleBodySchema,
-		class: "config",
-		writeTrigger: "operator upsert/delete; orchestrator stamps lastAttempt/success/error",
-		device: "none",
-		at: "none",
-		indexes: [{
-			name: "enabled",
-			fields: ["enabled"]
-		}],
-		retention: { none: "operator delete only" },
-		adoptsFrom: BACKUP_SCHEDULES_LEGACY,
-		entry: {
-			title: "Backup schedules",
-			nameField: "label"
-		}
-	},
-	"destination-policies": {
-		schema: BackupDestinationPolicyBodySchema,
-		class: "config",
-		writeTrigger: "ensureDefault, operator upsert, recordAttempt after each archive write",
-		device: "none",
-		at: "none",
-		retention: { none: "row outlives location; ensureDefault recreates" },
-		adoptsFrom: BACKUP_DESTINATION_POLICIES_LEGACY
-	},
-	"encryption-keys": {
-		schema: BackupEncryptionKeyBodySchema,
-		class: "config",
-		writeTrigger: "setupEncryption activate; disableEncryption retires active row",
-		device: "none",
-		at: "none",
-		retention: { none: "retired keys kept for archive decryption hints" },
-		adoptsFrom: BACKUP_ENCRYPTION_KEYS_COLLECTION
-	},
-	"seed-markers": {
-		schema: BackupSeedMarkerBodySchema,
-		class: "config",
-		writeTrigger: "mark() once per seed id after seed landed",
-		device: "none",
-		at: "none",
-		retention: { none: "one row per seed id ever" },
-		adoptsFrom: BACKUP_SEED_MARKERS_COLLECTION
-	}
-});
-var backupOrchestratorRecordKinds = _backupOrchestratorRecordKinds;
-var backupSchedulesRecordKind = _backupOrchestratorRecordKinds.schedules;
-var backupDestinationPoliciesRecordKind = _backupOrchestratorRecordKinds["destination-policies"];
-var backupEncryptionKeysRecordKind = _backupOrchestratorRecordKinds["encryption-keys"];
-var backupSeedMarkersRecordKind = _backupOrchestratorRecordKinds["seed-markers"];
-function backupRecordStoresOf(records) {
-	return {
-		schedules: records.kind(backupSchedulesRecordKind),
-		destinationPolicies: records.kind(backupDestinationPoliciesRecordKind),
-		encryptionKeys: records.kind(backupEncryptionKeysRecordKind),
-		seedMarkers: records.kind(backupSeedMarkersRecordKind)
-	};
-}
-//#endregion
 //#region node_modules/tar/dist/esm/index.min.js
 var Mr = Object.defineProperty;
 var Br = (s, t) => {
@@ -2101,15 +1854,15 @@ var An = (s) => {
 }, In = (s) => {
 	let t = new st(s), e = s.file, i;
 	try {
-		i = Kt.openSync(e, "r");
-		let r = Kt.fstatSync(i), n = s.maxReadSize || 16 * 1024 * 1024;
+		i = fs.openSync(e, "r");
+		let r = fs.fstatSync(i), n = s.maxReadSize || 16 * 1024 * 1024;
 		if (r.size < n) {
-			let o = Buffer.allocUnsafe(r.size), a = Kt.readSync(i, o, 0, r.size, 0);
+			let o = Buffer.allocUnsafe(r.size), a = fs.readSync(i, o, 0, r.size, 0);
 			t.end(a === o.byteLength ? o : o.subarray(0, a));
 		} else {
 			let o = 0, a = Buffer.allocUnsafe(n);
 			for (; o < r.size;) {
-				let h = Kt.readSync(i, a, 0, n, o);
+				let h = fs.readSync(i, a, 0, n, o);
 				if (h === 0) break;
 				o += h, t.write(a.subarray(0, h));
 			}
@@ -2117,13 +1870,13 @@ var An = (s) => {
 		}
 	} finally {
 		if (typeof i == "number") try {
-			Kt.closeSync(i);
+			fs.closeSync(i);
 		} catch {}
 	}
 }, Fn = (s, t) => {
 	let e = new st(s), i = s.maxReadSize || 16 * 1024 * 1024, r = s.file;
 	return new Promise((o, a) => {
-		e.on("error", a), e.on("end", o), Kt.stat(r, (h, l) => {
+		e.on("error", a), e.on("end", o), fs.stat(r, (h, l) => {
 			if (h) a(h);
 			else {
 				let c = new _t(r, {
@@ -2644,7 +2397,7 @@ var mi = class {
 	constructor(t, e) {
 		this.path = t || "./", this.absolute = e;
 	}
-}, ir = Buffer.alloc(1024), ai = Symbol("onStat"), ue = Symbol("ended"), W = Symbol("queue"), me = Symbol("pendingLinks"), Et = Symbol("current"), Ct = Symbol("process"), pe = Symbol("processing"), hi = Symbol("processJob"), G = Symbol("jobs"), hs = Symbol("jobDone"), li = Symbol("addFSEntry"), sr = Symbol("addTarEntry"), cs = Symbol("stat"), fs = Symbol("readdir"), ci = Symbol("onreaddir"), fi = Symbol("pipe"), rr = Symbol("entry"), as = Symbol("entryOpt"), di = Symbol("writeEntryClass"), or = Symbol("write"), ls = Symbol("ondrain"), wt = class extends A {
+}, ir = Buffer.alloc(1024), ai = Symbol("onStat"), ue = Symbol("ended"), W = Symbol("queue"), me = Symbol("pendingLinks"), Et = Symbol("current"), Ct = Symbol("process"), pe = Symbol("processing"), hi = Symbol("processJob"), G = Symbol("jobs"), hs = Symbol("jobDone"), li = Symbol("addFSEntry"), sr = Symbol("addTarEntry"), cs = Symbol("stat"), fs$1 = Symbol("readdir"), ci = Symbol("onreaddir"), fi = Symbol("pipe"), rr = Symbol("entry"), as = Symbol("entryOpt"), di = Symbol("writeEntryClass"), or = Symbol("write"), ls = Symbol("ondrain"), wt = class extends A {
 	sync = !1;
 	opt;
 	cwd;
@@ -2722,7 +2475,7 @@ var mi = class {
 		}
 		this[Ct]();
 	}
-	[fs](t) {
+	[fs$1](t) {
 		t.pending = !0, this[G] += 1, I.readdir(t.absolute, (e, i) => {
 			if (t.pending = !1, this[G] -= 1, e) return this.emit("error", e);
 			this[ci](t, i);
@@ -2769,7 +2522,7 @@ var mi = class {
 			if (t.stat && !t.ignore) {
 				if (!this.noDirRecurse && t.stat.isDirectory() && !t.readdir) {
 					let e = this.readdirCache.get(t.absolute);
-					if (e ? this[ci](t, e) : this[fs](t), !t.readdir) return;
+					if (e ? this[ci](t, e) : this[fs$1](t), !t.readdir) return;
 				}
 				if (t.entry = this[rr](t), !t.entry) {
 					t.ignore = !0;
@@ -2838,7 +2591,7 @@ var mi = class {
 		let e = this.follow ? "statSync" : "lstatSync";
 		this[ai](t, I[e](t.absolute));
 	}
-	[fs](t) {
+	[fs$1](t) {
 		this[ci](t, I.readdirSync(t.absolute));
 	}
 	[fi](t) {
@@ -2894,12 +2647,12 @@ var Wn = (s, t) => {
 var ur = (process.env.__FAKE_PLATFORM__ || process.platform) === "win32", { O_CREAT: mr, O_NOFOLLOW: cr, O_TRUNC: pr, O_WRONLY: Er } = I.constants, wr = Number(process.env.__FAKE_FS_O_FILENAME__) || I.constants.UV_FS_O_FILEMAP || 0, $n = ur && !!wr, Xn = 512 * 1024, qn = wr | pr | mr | Er, fr = !ur && typeof cr == "number" ? cr | pr | mr | Er : null, ds = fr !== null ? () => fr : $n ? (s) => s < Xn ? qn : "w" : () => "w";
 var us = (s, t, e) => {
 	try {
-		return Kt.lchownSync(s, t, e);
+		return fs.lchownSync(s, t, e);
 	} catch (i) {
 		if (i?.code !== "ENOENT") throw i;
 	}
 }, pi = (s, t, e, i) => {
-	Kt.lchown(s, t, e, (r) => {
+	fs.lchown(s, t, e, (r) => {
 		i(r && r?.code !== "ENOENT" ? r : null);
 	});
 }, Qn = (s, t, e, i, r) => {
@@ -2909,7 +2662,7 @@ var us = (s, t, e) => {
 	});
 	else pi(path.resolve(s, t.name), e, i, r);
 }, ms = (s, t, e, i) => {
-	Kt.readdir(s, { withFileTypes: !0 }, (r, n) => {
+	fs.readdir(s, { withFileTypes: !0 }, (r, n) => {
 		if (r) {
 			if (r.code === "ENOENT") return i();
 			if (r.code !== "ENOTDIR" && r.code !== "ENOTSUP") return i(r);
@@ -2928,7 +2681,7 @@ var us = (s, t, e) => {
 }, ps = (s, t, e) => {
 	let i;
 	try {
-		i = Kt.readdirSync(s, { withFileTypes: !0 });
+		i = fs.readdirSync(s, { withFileTypes: !0 });
 	} catch (r) {
 		let n = r;
 		if (n?.code === "ENOENT") return;
@@ -2962,13 +2715,13 @@ var St = class extends Error {
 	}
 };
 var to = (s, t) => {
-	Kt.stat(s, (e, i) => {
+	fs.stat(s, (e, i) => {
 		(e || !i.isDirectory()) && (e = new we(s, e?.code || "ENOTDIR")), t(e);
 	});
 }, Sr = (s, t, e) => {
 	s = f(s);
 	let i = t.umask ?? 18, r = t.mode | 448, n = (r & i) !== 0, o = t.uid, a = t.gid, h = typeof o == "number" && typeof a == "number" && (o !== t.processUid || a !== t.processGid), l = t.preserve, c = t.unlink, d = f(t.cwd), S = (E, x) => {
-		E ? e(E) : x && h ? ms(x, o, a, (xe) => S(xe)) : n ? Kt.chmod(s, r, e) : e();
+		E ? e(E) : x && h ? ms(x, o, a, (xe) => S(xe)) : n ? fs.chmod(s, r, e) : e();
 	};
 	if (s === d) return to(s, S);
 	if (l) return jn.mkdir(s, {
@@ -2979,14 +2732,14 @@ var to = (s, t) => {
 }, Es = (s, t, e, i, r, n, o) => {
 	if (t.length === 0) return o(null, n);
 	let a = t.shift(), h = f(path.resolve(s + "/" + a));
-	Kt.mkdir(h, e, yr(h, t, e, i, r, n, o));
+	fs.mkdir(h, e, yr(h, t, e, i, r, n, o));
 }, yr = (s, t, e, i, r, n, o) => (a) => {
-	a ? Kt.lstat(s, (h, l) => {
+	a ? fs.lstat(s, (h, l) => {
 		if (h) h.path = h.path && f(h.path), o(h);
 		else if (l.isDirectory()) Es(s, t, e, i, r, n, o);
-		else if (i) Kt.unlink(s, (c) => {
+		else if (i) fs.unlink(s, (c) => {
 			if (c) return o(c);
-			Kt.mkdir(s, e, yr(s, t, e, i, r, n, o));
+			fs.mkdir(s, e, yr(s, t, e, i, r, n, o));
 		});
 		else {
 			if (l.isSymbolicLink()) return o(new St(s, s + "/" + t.join("/")));
@@ -2996,7 +2749,7 @@ var to = (s, t) => {
 }, eo = (s) => {
 	let t = !1, e;
 	try {
-		t = Kt.statSync(s).isDirectory();
+		t = fs.statSync(s).isDirectory();
 	} catch (i) {
 		e = i?.code;
 	} finally {
@@ -3005,10 +2758,10 @@ var to = (s, t) => {
 }, Rr = (s, t) => {
 	s = f(s);
 	let e = t.umask ?? 18, i = t.mode | 448, r = (i & e) !== 0, n = t.uid, o = t.gid, a = typeof n == "number" && typeof o == "number" && (n !== t.processUid || o !== t.processGid), h = t.preserve, l = t.unlink, c = f(t.cwd), d = (E) => {
-		E && a && ps(E, n, o), r && Kt.chmodSync(s, i);
+		E && a && ps(E, n, o), r && fs.chmodSync(s, i);
 	};
 	if (s === c) return eo(c), d();
-	if (h) return d(Kt.mkdirSync(s, {
+	if (h) return d(fs.mkdirSync(s, {
 		mode: i,
 		recursive: !0
 	}) ?? void 0);
@@ -3016,12 +2769,12 @@ var to = (s, t) => {
 	for (let E = T.shift(), x = c; E && (x += "/" + E); E = T.shift()) {
 		x = f(path.resolve(x));
 		try {
-			Kt.mkdirSync(x, i), N = N || x;
+			fs.mkdirSync(x, i), N = N || x;
 		} catch {
-			let xe = Kt.lstatSync(x);
+			let xe = fs.lstatSync(x);
 			if (xe.isDirectory()) continue;
 			if (l) {
-				Kt.unlinkSync(x), Kt.mkdirSync(x, i), N = N || x;
+				fs.unlinkSync(x), fs.mkdirSync(x, i), N = N || x;
 				continue;
 			} else if (xe.isSymbolicLink()) return new St(x, x + "/" + T.join("/"));
 		}
@@ -3111,16 +2864,16 @@ var so = (process.env.TESTING_TAR_FAKE_PLATFORM || process.platform) === "win32"
 };
 var Or = () => process.umask();
 var Tr = Symbol("onEntry"), gs = Symbol("checkFs"), xr = Symbol("checkFs2"), bs = Symbol("isReusable"), P = Symbol("makeFs"), _s = Symbol("file"), Os = Symbol("directory"), Ri = Symbol("link"), Lr = Symbol("symlink"), Nr = Symbol("hardlink"), ye = Symbol("ensureNoSymlink"), Dr = Symbol("unsupported"), Ar = Symbol("checkPath"), Ss = Symbol("stripAbsolutePath"), yt = Symbol("mkdir"), O = Symbol("onError"), yi = Symbol("pending"), Ir = Symbol("pend"), $t = Symbol("unpend"), ys = Symbol("ended"), Rs = Symbol("maybeClose"), Ts = Symbol("skip"), Re = Symbol("doChown"), ge = Symbol("uid"), be = Symbol("gid"), _e = Symbol("checkedCwd"), Oe = (process.env.TESTING_TAR_FAKE_PLATFORM || process.platform) === "win32", ho = 1024, ao = (s, t) => {
-	if (!Oe) return Kt.unlink(s, t);
+	if (!Oe) return fs.unlink(s, t);
 	let e = s + ".DELETE." + randomBytes(16).toString("hex");
-	Kt.rename(s, e, (i) => {
+	fs.rename(s, e, (i) => {
 		if (i) return t(i);
-		Kt.unlink(e, t);
+		fs.unlink(e, t);
 	});
 }, lo = (s) => {
-	if (!Oe) return Kt.unlinkSync(s);
+	if (!Oe) return fs.unlinkSync(s);
 	let t = s + ".DELETE." + randomBytes(16).toString("hex");
-	Kt.renameSync(s, t), Kt.unlinkSync(t);
+	fs.renameSync(s, t), fs.unlinkSync(t);
 }, Fr = (s, t, e) => s !== void 0 && s === s >>> 0 ? s : t !== void 0 && t === t >>> 0 ? t : e, Xt = class extends st {
 	[ys] = !1;
 	[_e] = !1;
@@ -3264,14 +3017,14 @@ var Tr = Symbol("onEntry"), gs = Symbol("checkFs"), xr = Symbol("checkFs2"), bs
 			autoClose: !1
 		});
 		r.on("error", (h) => {
-			r.fd && Kt.close(r.fd, () => {}), r.write = () => !0, this[O](h, t), e();
+			r.fd && fs.close(r.fd, () => {}), r.write = () => !0, this[O](h, t), e();
 		});
 		let n = 1, o = (h) => {
 			if (h) {
-				r.fd && Kt.close(r.fd, () => {}), this[O](h, t), e();
+				r.fd && fs.close(r.fd, () => {}), this[O](h, t), e();
 				return;
 			}
-			--n === 0 && r.fd !== void 0 && Kt.close(r.fd, (l) => {
+			--n === 0 && r.fd !== void 0 && fs.close(r.fd, (l) => {
 				l ? this[O](l, t) : this[$t](), e();
 			});
 		};
@@ -3280,12 +3033,12 @@ var Tr = Symbol("onEntry"), gs = Symbol("checkFs"), xr = Symbol("checkFs2"), bs
 			if (typeof l == "number" && t.mtime && !this.noMtime) {
 				n++;
 				let c = t.atime || /* @__PURE__ */ new Date(), d = t.mtime;
-				Kt.futimes(l, c, d, (S) => S ? Kt.utimes(h, c, d, (T) => o(T && S)) : o());
+				fs.futimes(l, c, d, (S) => S ? fs.utimes(h, c, d, (T) => o(T && S)) : o());
 			}
 			if (typeof l == "number" && this[Re](t)) {
 				n++;
 				let c = this[ge](t), d = this[be](t);
-				typeof c == "number" && typeof d == "number" && Kt.fchown(l, c, d, (S) => S ? Kt.chown(h, c, d, (T) => o(T && S)) : o());
+				typeof c == "number" && typeof d == "number" && fs.fchown(l, c, d, (S) => S ? fs.chown(h, c, d, (T) => o(T && S)) : o());
 			}
 			o();
 		});
@@ -3304,7 +3057,7 @@ var Tr = Symbol("onEntry"), gs = Symbol("checkFs"), xr = Symbol("checkFs2"), bs
 			let n = 1, o = () => {
 				--n === 0 && (e(), this[$t](), t.resume());
 			};
-			t.mtime && !this.noMtime && (n++, Kt.utimes(String(t.absolute), t.atime || /* @__PURE__ */ new Date(), t.mtime, o)), this[Re](t) && (n++, Kt.chown(String(t.absolute), Number(this[ge](t)), Number(this[be](t)), o)), o();
+			t.mtime && !this.noMtime && (n++, fs.utimes(String(t.absolute), t.atime || /* @__PURE__ */ new Date(), t.mtime, o)), this[Re](t) && (n++, fs.chown(String(t.absolute), Number(this[ge](t)), Number(this[be](t)), o)), o();
 		});
 	}
 	[Dr](t) {
@@ -3326,7 +3079,7 @@ var Tr = Symbol("onEntry"), gs = Symbol("checkFs"), xr = Symbol("checkFs2"), bs
 		let o = i.shift();
 		if (this.preservePaths || o === void 0) return r();
 		let a = path.resolve(e, o);
-		Kt.lstat(a, (h, l) => {
+		fs.lstat(a, (h, l) => {
 			if (h) return r();
 			if (l?.isSymbolicLink()) return n(new St(a, path.resolve(a, i.join("/"))));
 			this[ye](t, a, i, r, n);
@@ -3373,7 +3126,7 @@ var Tr = Symbol("onEntry"), gs = Symbol("checkFs"), xr = Symbol("checkFs2"), bs
 			}
 			o();
 		}, o = () => {
-			Kt.lstat(String(t.absolute), (a, h) => {
+			fs.lstat(String(t.absolute), (a, h) => {
 				if (h && (this.keep || this.newer && h.mtime > (t.mtime ?? h.mtime))) {
 					this[Ts](t), i();
 					return;
@@ -3382,9 +3135,9 @@ var Tr = Symbol("onEntry"), gs = Symbol("checkFs"), xr = Symbol("checkFs2"), bs
 				if (h.isDirectory()) {
 					if (t.type === "Directory") {
 						let l = this.chmod && t.mode && (h.mode & 4095) !== t.mode, c = (d) => this[P](d ?? null, t, i);
-						return l ? Kt.chmod(String(t.absolute), Number(t.mode), c) : c();
+						return l ? fs.chmod(String(t.absolute), Number(t.mode), c) : c();
 					}
-					if (t.absolute !== this.cwd) return Kt.rmdir(String(t.absolute), (l) => this[P](l ?? null, t, i));
+					if (t.absolute !== this.cwd) return fs.rmdir(String(t.absolute), (l) => this[P](l ?? null, t, i));
 				}
 				if (t.absolute === this.cwd) return this[P](null, t, i);
 				ao(String(t.absolute), (l) => this[P](l ?? null, t, i));
@@ -3408,7 +3161,7 @@ var Tr = Symbol("onEntry"), gs = Symbol("checkFs"), xr = Symbol("checkFs2"), bs
 		}
 	}
 	[Ri](t, e, i, r) {
-		Kt[i](e, String(t.absolute), (n) => {
+		fs[i](e, String(t.absolute), (n) => {
 			n ? this[O](n, t) : (this[$t](), t.resume()), r();
 		});
 	}
@@ -3436,17 +3189,17 @@ var Tr = Symbol("onEntry"), gs = Symbol("checkFs"), xr = Symbol("checkFs2"), bs
 				if (o) return this[O](o, t);
 			}
 		}
-		let [e, i] = Se(() => Kt.lstatSync(String(t.absolute)));
+		let [e, i] = Se(() => fs.lstatSync(String(t.absolute)));
 		if (i && (this.keep || this.newer && i.mtime > (t.mtime ?? i.mtime))) return this[Ts](t);
 		if (e || this[bs](t, i)) return this[P](null, t);
 		if (i.isDirectory()) {
 			if (t.type === "Directory") {
 				let [a] = this.chmod && t.mode && (i.mode & 4095) !== t.mode ? Se(() => {
-					Kt.chmodSync(String(t.absolute), Number(t.mode));
+					fs.chmodSync(String(t.absolute), Number(t.mode));
 				}) : [];
 				return this[P](a, t);
 			}
-			let [n] = Se(() => Kt.rmdirSync(String(t.absolute)));
+			let [n] = Se(() => fs.rmdirSync(String(t.absolute)));
 			this[P](n, t);
 		}
 		let [r] = t.absolute === this.cwd ? [] : Se(() => lo(String(t.absolute)));
@@ -3456,21 +3209,21 @@ var Tr = Symbol("onEntry"), gs = Symbol("checkFs"), xr = Symbol("checkFs2"), bs
 		let i = typeof t.mode == "number" ? t.mode & 4095 : this.fmode, r = (a) => {
 			let h;
 			try {
-				Kt.closeSync(n);
+				fs.closeSync(n);
 			} catch (l) {
 				h = l;
 			}
 			(a || h) && this[O](a || h, t), e();
 		}, n;
 		try {
-			n = Kt.openSync(String(t.absolute), ds(t.size), i);
+			n = fs.openSync(String(t.absolute), ds(t.size), i);
 		} catch (a) {
 			return r(a);
 		}
 		let o = this.transform && this.transform(t) || t;
 		o !== t && (o.on("error", (a) => this[O](a, t)), t.pipe(o)), o.on("data", (a) => {
 			try {
-				Kt.writeSync(n, a, 0, a.length);
+				fs.writeSync(n, a, 0, a.length);
 			} catch (h) {
 				r(h);
 			}
@@ -3479,10 +3232,10 @@ var Tr = Symbol("onEntry"), gs = Symbol("checkFs"), xr = Symbol("checkFs2"), bs
 			if (t.mtime && !this.noMtime) {
 				let h = t.atime || /* @__PURE__ */ new Date(), l = t.mtime;
 				try {
-					Kt.futimesSync(n, h, l);
+					fs.futimesSync(n, h, l);
 				} catch (c) {
 					try {
-						Kt.utimesSync(String(t.absolute), h, l);
+						fs.utimesSync(String(t.absolute), h, l);
 					} catch {
 						a = c;
 					}
@@ -3491,10 +3244,10 @@ var Tr = Symbol("onEntry"), gs = Symbol("checkFs"), xr = Symbol("checkFs2"), bs
 			if (this[Re](t)) {
 				let h = this[ge](t), l = this[be](t);
 				try {
-					Kt.fchownSync(n, Number(h), Number(l));
+					fs.fchownSync(n, Number(h), Number(l));
 				} catch (c) {
 					try {
-						Kt.chownSync(String(t.absolute), Number(h), Number(l));
+						fs.chownSync(String(t.absolute), Number(h), Number(l));
 					} catch {
 						a = a || c;
 					}
@@ -3510,10 +3263,10 @@ var Tr = Symbol("onEntry"), gs = Symbol("checkFs"), xr = Symbol("checkFs2"), bs
 			return;
 		}
 		if (t.mtime && !this.noMtime) try {
-			Kt.utimesSync(String(t.absolute), t.atime || /* @__PURE__ */ new Date(), t.mtime);
+			fs.utimesSync(String(t.absolute), t.atime || /* @__PURE__ */ new Date(), t.mtime);
 		} catch {}
 		if (this[Re](t)) try {
-			Kt.chownSync(String(t.absolute), Number(this[ge](t)), Number(this[be](t)));
+			fs.chownSync(String(t.absolute), Number(this[ge](t)), Number(this[be](t)));
 		} catch {}
 		e(), t.resume();
 	}
@@ -3539,7 +3292,7 @@ var Tr = Symbol("onEntry"), gs = Symbol("checkFs"), xr = Symbol("checkFs2"), bs
 		let o = e;
 		for (let a of i) {
 			o = path.resolve(o, a);
-			let [h, l] = Se(() => Kt.lstatSync(o));
+			let [h, l] = Se(() => fs.lstatSync(o));
 			if (h) return r();
 			if (l.isSymbolicLink()) return n(new St(o, path.resolve(e, i.join("/"))));
 		}
@@ -3548,13 +3301,13 @@ var Tr = Symbol("onEntry"), gs = Symbol("checkFs"), xr = Symbol("checkFs2"), bs
 	[Ri](t, e, i, r) {
 		let n = `${i}Sync`;
 		try {
-			Kt[n](e, String(t.absolute)), r(), t.resume();
+			fs[n](e, String(t.absolute)), r(), t.resume();
 		} catch (o) {
 			return this[O](o, t);
 		}
 	}
 }, co = (s) => {
-	let t = new Te(s), e = s.file, i = Kt.statSync(e);
+	let t = new Te(s), e = s.file, i = fs.statSync(e);
 	new Me(e, {
 		readSize: s.maxReadSize || 16 * 1024 * 1024,
 		size: i.size
@@ -3562,7 +3315,7 @@ var Tr = Symbol("onEntry"), gs = Symbol("checkFs"), xr = Symbol("checkFs2"), bs
 }, fo = (s, t) => {
 	let e = new Xt(s), i = s.maxReadSize || 16 * 1024 * 1024, r = s.file;
 	return new Promise((o, a) => {
-		e.on("error", a), e.on("close", o), Kt.stat(r, (h, l) => {
+		e.on("error", a), e.on("close", o), fs.stat(r, (h, l) => {
 			if (h) a(h);
 			else {
 				let c = new _t(r, {
@@ -3581,15 +3334,15 @@ var mo = (s, t) => {
 	let e = new kt(s), i = !0, r, n;
 	try {
 		try {
-			r = Kt.openSync(s.file, "r+");
+			r = fs.openSync(s.file, "r+");
 		} catch (h) {
-			if (h?.code === "ENOENT") r = Kt.openSync(s.file, "w+");
+			if (h?.code === "ENOENT") r = fs.openSync(s.file, "w+");
 			else throw h;
 		}
-		let o = Kt.fstatSync(r), a = Buffer.alloc(512);
+		let o = fs.fstatSync(r), a = Buffer.alloc(512);
 		t: for (n = 0; n < o.size; n += 512) {
 			for (let c = 0, d = 0; c < 512; c += d) {
-				if (d = Kt.readSync(r, a, c, a.length - c, n + c), n === 0 && a[0] === 31 && a[1] === 139) throw new Error("cannot append to compressed archives");
+				if (d = fs.readSync(r, a, c, a.length - c, n + c), n === 0 && a[0] === 31 && a[1] === 139) throw new Error("cannot append to compressed archives");
 				if (!d) break t;
 			}
 			let h = new C(a);
@@ -3601,7 +3354,7 @@ var mo = (s, t) => {
 		i = !1, po(s, e, n, r, t);
 	} finally {
 		if (i) try {
-			Kt.closeSync(r);
+			fs.closeSync(r);
 		} catch {}
 	}
 }, po = (s, t, e, i, r) => {
@@ -3614,29 +3367,29 @@ var mo = (s, t) => {
 	t = Array.from(t);
 	let e = new wt(s), i = (n, o, a) => {
 		let h = (T, N) => {
-			T ? Kt.close(n, (E) => a(T)) : a(null, N);
+			T ? fs.close(n, (E) => a(T)) : a(null, N);
 		}, l = 0;
 		if (o === 0) return h(null, 0);
 		let c = 0, d = Buffer.alloc(512), S = (T, N) => {
 			if (T || N === void 0) return h(T);
-			if (c += N, c < 512 && N) return Kt.read(n, d, c, d.length - c, l + c, S);
+			if (c += N, c < 512 && N) return fs.read(n, d, c, d.length - c, l + c, S);
 			if (l === 0 && d[0] === 31 && d[1] === 139) return h(/* @__PURE__ */ new Error("cannot append to compressed archives"));
 			if (c < 512) return h(null, l);
 			let E = new C(d);
 			if (!E.cksumValid) return h(null, l);
 			let x = 512 * Math.ceil((E.size ?? 0) / 512);
 			if (l + x + 512 > o || (l += x + 512, l >= o)) return h(null, l);
-			s.mtimeCache && E.mtime && s.mtimeCache.set(String(E.path), E.mtime), c = 0, Kt.read(n, d, 0, 512, l, S);
+			s.mtimeCache && E.mtime && s.mtimeCache.set(String(E.path), E.mtime), c = 0, fs.read(n, d, 0, 512, l, S);
 		};
-		Kt.read(n, d, 0, 512, l, S);
+		fs.read(n, d, 0, 512, l, S);
 	};
 	return new Promise((n, o) => {
 		e.on("error", o);
 		let a = "r+", h = (l, c) => {
-			if (l && l.code === "ENOENT" && a === "r+") return a = "w+", Kt.open(s.file, a, h);
+			if (l && l.code === "ENOENT" && a === "r+") return a = "w+", fs.open(s.file, a, h);
 			if (l || !c) return o(l);
-			Kt.fstat(c, (d, S) => {
-				if (d) return Kt.close(c, () => o(d));
+			fs.fstat(c, (d, S) => {
+				if (d) return fs.close(c, () => o(d));
 				i(c, S.size, (T, N) => {
 					if (T) return o(T);
 					let E = new tt(s.file, {
@@ -3647,7 +3400,7 @@ var mo = (s, t) => {
 				});
 			});
 		};
-		Kt.open(s.file, a, h);
+		fs.open(s.file, a, h);
 	});
 }, wo = (s, t) => {
 	t.forEach((e) => {
@@ -3878,7 +3631,7 @@ var SystemBackupService = class {
 	}
 	async statLocation(loc) {
 		const abs = path$1.isAbsolute(loc) ? loc : path$1.join(this.dataDir, loc);
-		if (!fs$1.existsSync(abs)) return {
+		if (!fs$2.existsSync(abs)) return {
 			name: loc,
 			sizeBytes: 0,
 			fileCount: 0,
@@ -3925,11 +3678,11 @@ var SystemBackupService = class {
 		const present = [];
 		for (const loc of requested) {
 			const abs = path$1.isAbsolute(loc) ? loc : path$1.join(this.dataDir, loc);
-			if (fs$1.existsSync(abs)) present.push(loc);
+			if (fs$2.existsSync(abs)) present.push(loc);
 			else this.logger.debug("createArchive: skipping missing location", { meta: { location: loc } });
 		}
 		if (present.length === 0) throw new Error(`createArchive: no locations from {${requested.join(", ")}} exist under ${this.dataDir}`);
-		fs$1.mkdirSync(path$1.dirname(opts.archivePath), { recursive: true });
+		fs$2.mkdirSync(path$1.dirname(opts.archivePath), { recursive: true });
 		const walked = [];
 		for (const loc of present) {
 			throwIfCancelled(opts.signal);
@@ -4013,7 +3766,7 @@ var SystemBackupService = class {
 	*/
 	async createSnapshotsOnlyArchive(opts, selection, recipient) {
 		if (opts.owner === void 0) throw new BackupSnapshotRefusedError("a snapshots-only archive needs the database owner, and none was given");
-		fs$1.mkdirSync(path$1.dirname(opts.archivePath), { recursive: true });
+		fs$2.mkdirSync(path$1.dirname(opts.archivePath), { recursive: true });
 		const ownedById = await this.ownedDatabasesInScope(opts.owner, null);
 		const selected = /* @__PURE__ */ new Map();
 		for (const [rel, databaseId] of ownedById) if (selection.has(databaseId)) selected.set(rel, databaseId);
@@ -4067,7 +3820,7 @@ var SystemBackupService = class {
 	async writeArchive(opts) {
 		const { present, manifest } = opts;
 		const manifestStagePath = `${opts.archivePath}.${process.pid}.manifest.json`;
-		fs$1.writeFileSync(manifestStagePath, JSON.stringify(manifest, null, 2), "utf-8");
+		fs$2.writeFileSync(manifestStagePath, JSON.stringify(manifest, null, 2), "utf-8");
 		this.logger.info("createArchive: tarring", { meta: {
 			archivePath: opts.archivePath,
 			locations: [...present],
@@ -4076,7 +3829,7 @@ var SystemBackupService = class {
 		} });
 		try {
 			const stagedInDataDir = path$1.join(this.dataDir, ARCHIVE_MANIFEST_NAME);
-			fs$1.copyFileSync(manifestStagePath, stagedInDataDir);
+			fs$2.copyFileSync(manifestStagePath, stagedInDataDir);
 			const stagingRel = path$1.relative(this.dataDir, path$1.dirname(opts.archivePath));
 			const excludePrefix = stagingRel && !stagingRel.startsWith("..") && !path$1.isAbsolute(stagingRel) ? stagingRel : null;
 			try {
@@ -4092,29 +3845,29 @@ var SystemBackupService = class {
 						return norm !== excludePrefix && !norm.startsWith(`${excludePrefix}/`);
 					}
 				}, [ARCHIVE_MANIFEST_NAME, ...opts.tarRoots ?? present]);
-				const sink = fs$1.createWriteStream(opts.archivePath, { mode: 384 });
+				const sink = fs$2.createWriteStream(opts.archivePath, { mode: 384 });
 				try {
 					const streamOpts = opts.signal ? { signal: opts.signal } : {};
 					if (opts.encryptTo !== void 0) await pipeline(pack, createBackupEncryptStream(opts.encryptTo), byteCountingPassthrough(opts.onArchiveBytes), sink, streamOpts);
 					else await pipeline(pack, byteCountingPassthrough(opts.onArchiveBytes), sink, streamOpts);
 				} catch (err) {
 					try {
-						fs$1.rmSync(opts.archivePath, { force: true });
+						fs$2.rmSync(opts.archivePath, { force: true });
 					} catch {}
 					if (opts.signal?.aborted) throw new BackupCancelledError();
 					throw err;
 				}
 			} finally {
 				try {
-					fs$1.rmSync(stagedInDataDir, { force: true });
+					fs$2.rmSync(stagedInDataDir, { force: true });
 				} catch {}
 			}
 		} finally {
 			try {
-				fs$1.rmSync(manifestStagePath, { force: true });
+				fs$2.rmSync(manifestStagePath, { force: true });
 			} catch {}
 		}
-		const sizeBytes = fs$1.statSync(opts.archivePath).size;
+		const sizeBytes = fs$2.statSync(opts.archivePath).size;
 		return {
 			archivePath: opts.archivePath,
 			includedLocations: [...present],
@@ -4127,7 +3880,7 @@ var SystemBackupService = class {
 	* one entry we care about, then aborts.
 	*/
 	async readArchiveManifest(archivePath) {
-		if (!fs$1.existsSync(archivePath)) throw new Error(`readArchiveManifest: ${archivePath} does not exist`);
+		if (!fs$2.existsSync(archivePath)) throw new Error(`readArchiveManifest: ${archivePath} does not exist`);
 		return new Promise((resolve, reject) => {
 			const chunks = [];
 			let found = false;
@@ -4159,7 +3912,7 @@ var SystemBackupService = class {
 					reject(err);
 				}
 			});
-			const reader = fs$1.createReadStream(archivePath);
+			const reader = fs$2.createReadStream(archivePath);
 			reader.on("error", (err) => {
 				if (!resolved) {
 					resolved = true;
@@ -4177,7 +3930,7 @@ var SystemBackupService = class {
 	* restart.
 	*/
 	scheduleRestoreMarker(opts) {
-		if (!fs$1.existsSync(opts.archivePath)) throw new Error(`scheduleRestoreMarker: ${opts.archivePath} missing`);
+		if (!fs$2.existsSync(opts.archivePath)) throw new Error(`scheduleRestoreMarker: ${opts.archivePath} missing`);
 		const markerPath = this.getRestoreMarkerPath();
 		const marker = {
 			archivePath: opts.archivePath,
@@ -4185,16 +3938,16 @@ var SystemBackupService = class {
 			source: opts.source,
 			...opts.locations ? { locations: [...opts.locations] } : {}
 		};
-		fs$1.mkdirSync(path$1.dirname(markerPath), { recursive: true });
-		fs$1.writeFileSync(markerPath, JSON.stringify(marker, null, 2), { mode: 384 });
+		fs$2.mkdirSync(path$1.dirname(markerPath), { recursive: true });
+		fs$2.writeFileSync(markerPath, JSON.stringify(marker, null, 2), { mode: 384 });
 		return markerPath;
 	}
 	/** Read the pending-restore marker if one is present. */
 	readPendingMarker() {
 		const markerPath = this.getRestoreMarkerPath();
-		if (!fs$1.existsSync(markerPath)) return null;
+		if (!fs$2.existsSync(markerPath)) return null;
 		try {
-			const raw = fs$1.readFileSync(markerPath, "utf-8");
+			const raw = fs$2.readFileSync(markerPath, "utf-8");
 			const parsed = JSON.parse(raw);
 			if (typeof parsed === "object" && parsed != null && typeof parsed.archivePath === "string") return parsed;
 		} catch (err) {
@@ -4205,7 +3958,7 @@ var SystemBackupService = class {
 	/** Drop the marker after a successful boot-time restore. */
 	clearPendingMarker() {
 		const markerPath = this.getRestoreMarkerPath();
-		if (fs$1.existsSync(markerPath)) fs$1.rmSync(markerPath, { force: true });
+		if (fs$2.existsSync(markerPath)) fs$2.rmSync(markerPath, { force: true });
 	}
 	/**
 	* The databases the owner declares, archive-relative, that this walk found,
@@ -4457,4 +4210,4 @@ async function prepareRestoreArchive(input) {
 	}
 }
 //#endregion
-export { parseBackupSecretKey as _, BackupSnapshotRefusedError as a, backupOrchestratorRecordKinds as c, BackupEncryptionKeyStore as d, BackupDecryptError as f, generateBackupKeyPair as g, ENCRYPTED_BACKUP_SUFFIX as h, BackupCancelledError as i, backupRecordStoresOf as l, BackupKeyMismatchError as m, precheckRestoreKey as n, DEFAULT_BACKUP_DATABASES as o, BackupKeyFormatError as p, prepareRestoreArchive as r, SystemBackupService as s, BackupKeyRequiredError as t, BackupSeedMarkerStore as u, readBackupEncryptionHeader as v };
+export { backupRecordStoresOf as _, BackupSnapshotRefusedError as a, BackupDecryptError as c, ENCRYPTED_BACKUP_SUFFIX as d, generateBackupKeyPair as f, backupOrchestratorRecordKinds as g, readBackupEncryptionHeader as h, BackupCancelledError as i, BackupKeyFormatError as l, parseBackupSecretKey as m, precheckRestoreKey as n, DEFAULT_BACKUP_DATABASES as o, parseBackupPublicKey as p, prepareRestoreArchive as r, SystemBackupService as s, BackupKeyRequiredError as t, BackupKeyMismatchError as u };