@camstack/system 1.2.461 → 1.2.463

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,6 +1,6 @@
-import { Dt as backupCapability, Or as storageOccupancyCapability, Ta as EventCategory, Un as mayWriteToLocation, ba as toNodeId, ni as BaseAddon, oa as nodePin } from "../../dist-Wy8cTxg6.mjs";
+import { Ca as EventCategory, Er as storageOccupancyCapability, Tt as backupCapability, Vn as mayWriteToLocation, ei as BaseAddon, ia as nodePin, va as toNodeId } from "../../dist-C2OBCa-A.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { _ as backupRecordStoresOf, a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, g as backupOrchestratorRecordKinds, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-CM23Pq9B.mjs";
+import { _ as backupRecordStoresOf, a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, g as backupOrchestratorRecordKinds, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-CSOR_tyN.mjs";
 import { randomUUID } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import * as path$1 from "node:path";
@@ -79,75 +79,26 @@ async function seedWeeklySchedule(store, markers) {
 //#endregion
 //#region src/builtins/backup-orchestrator/seed-marker-store.ts
 /**
-* @durable class=config owner=backup-orchestrator
-*   write="the orchestrator inserts one row per seed id the first time that
-*     seed is created (or found already created); never updated"
-*   retention="none — one tiny row per seed ever made; deleting it lets the
-*     seed be re-created once more on the next boot"
+* One `seed-markers` row per seed id (D902: no `backup_seed_markers` table).
+* Written once, never updated; deleting one lets that seed run once more.
 */
-var BACKUP_SEED_MARKERS_COLLECTION = "backup_seed_markers";
-var COLUMNS$1 = [{
-	name: "seed_id",
-	type: "TEXT",
-	primaryKey: true
-}, {
-	name: "seeded_at",
-	type: "INTEGER",
-	notNull: true
-}];
 var BackupSeedMarkerStore = class {
-	store;
-	now;
-	declared = false;
 	markersKind;
-	constructor(store, now = Date.now, markersKind = null) {
-		this.store = store;
-		this.now = now;
+	now;
+	constructor(markersKind, now = Date.now) {
 		this.markersKind = markersKind;
-	}
-	async ensureDeclared() {
-		if (this.markersKind !== null) return;
-		if (this.declared) return;
-		await this.store.declareCollection({
-			collection: BACKUP_SEED_MARKERS_COLLECTION,
-			columns: COLUMNS$1
-		});
-		this.declared = true;
+		this.now = now;
 	}
 	async has(seedId) {
-		await this.ensureDeclared();
-		const kind = this.markersKind;
-		if (kind !== null) return await kind.get(seedId) !== null;
-		return (await this.store.query({
-			collection: BACKUP_SEED_MARKERS_COLLECTION,
-			filter: {
-				where: { seed_id: seedId },
-				limit: 1
-			}
-		})).length > 0;
+		return await this.markersKind.get(seedId) !== null;
 	}
 	async mark(seedId) {
-		await this.ensureDeclared();
 		if (await this.has(seedId)) return;
-		const kind = this.markersKind;
-		if (kind !== null) {
-			const body = { seededAt: this.now() };
-			const data = backupOrchestratorRecordKinds["seed-markers"].schema.parse(body);
-			await kind.put({
-				id: seedId,
-				data
-			});
-			return;
-		}
-		await this.store.insert({
-			collection: BACKUP_SEED_MARKERS_COLLECTION,
-			record: {
-				id: seedId,
-				data: {
-					seed_id: seedId,
-					seeded_at: this.now()
-				}
-			}
+		const body = { seededAt: this.now() };
+		const data = backupOrchestratorRecordKinds["seed-markers"].schema.parse(body);
+		await this.markersKind.put({
+			id: seedId,
+			data
 		});
 	}
 };
@@ -947,165 +898,35 @@ function previewNextRuns(cron, count, after) {
 //#endregion
 //#region src/builtins/backup-orchestrator/destination-policy.ts
 var import_read_all_rows = require_read_all_rows();
-/**
-* @durable class=config owner=backup-orchestrator
-*   write="`ensureDefault` auto-creates one row the first time a `backups` storage
-*     location is listed (enabled, retentionCount 7, no cadence of its own), an operator
-*     edit rewrites it (`upsert` = delete + insert, carrying `last_run_at` forward so a
-*     label change does not reset the baseline), and `recordAttempt` stamps
-*     `last_run_at` + `last_error` on every attempted write to the destination"
-*   retention="none — `delete(locationId)` exists but NOTHING calls it, so a policy row
-*     outlives the `StorageLocation` it names and the table only ever grows, by one row
-*     per backups location ever seen. Losing a row is recoverable: the next
-*     `listDestinations` pass re-creates it from the defaults, which silently discards
-*     the operator's own retention count. The legacy `cron` column is written NULL and
-*     never read — it scheduled nothing after 2026-07-28 and reading it made a
-*     destination advertise a nightly run nobody performed (D384)."
-*/
-var BACKUP_DESTINATION_POLICIES = "backup_destination_policies";
-var BACKUP_DESTINATION_POLICIES_COLUMNS = [
-	{
-		name: "location_id",
-		type: "TEXT",
-		primaryKey: true
-	},
-	{
-		name: "enabled",
-		type: "INTEGER",
-		notNull: true,
-		defaultValue: 1
-	},
-	{
-		name: "retention_count",
-		type: "INTEGER",
-		notNull: true,
-		defaultValue: 7
-	},
-	{
-		name: "label",
-		type: "TEXT"
-	},
-	{
-		name: "cron",
-		type: "TEXT"
-	},
-	{
-		name: "last_run_at",
-		type: "INTEGER"
-	},
-	{
-		name: "last_error",
-		type: "TEXT"
-	}
-];
 var BackupDestinationPolicyService = class {
-	store;
-	declared = false;
 	policiesKind;
-	constructor(store, policiesKind = null) {
-		this.store = store;
+	constructor(policiesKind) {
 		this.policiesKind = policiesKind;
 	}
-	/**
-	* Lazy `declareCollection` — called from every read/write path.
-	* `declareCollection` is idempotent, so repeated calls collapse to a no-op
-	* after the first. This keeps the constructor synchronous and avoids a
-	* separate `initialize()` step that callers could forget.
-	*/
-	async initialize() {
-		await this.ensureDeclared();
-	}
-	async ensureDeclared() {
-		if (this.policiesKind !== null) return;
-		if (this.declared) return;
-		await this.store.declareCollection({
-			collection: BACKUP_DESTINATION_POLICIES,
-			columns: BACKUP_DESTINATION_POLICIES_COLUMNS
-		});
-		this.declared = true;
-	}
 	async list() {
-		await this.ensureDeclared();
-		const kind = this.policiesKind;
-		if (kind !== null) {
-			const rows = await (0, import_read_all_rows.readAllRows)(kind);
-			rows.sort((a, b) => a.id.localeCompare(b.id));
-			const out = [];
-			for (const row of rows) {
-				const mapped = bodyToPolicy(row.id, row.data);
-				if (mapped) out.push(mapped);
-			}
-			return out;
-		}
-		const rows = await this.store.query({
-			collection: BACKUP_DESTINATION_POLICIES,
-			filter: { orderBy: {
-				field: "location_id",
-				direction: "asc"
-			} }
-		});
+		const rows = await (0, import_read_all_rows.readAllRows)(this.policiesKind);
+		rows.sort((a, b) => a.id.localeCompare(b.id));
 		const out = [];
 		for (const row of rows) {
-			const mapped = mapRowToPolicy(row.data);
+			const mapped = bodyToPolicy(row.id, row.data);
 			if (mapped) out.push(mapped);
 		}
 		return out;
 	}
 	async get(locationId) {
-		await this.ensureDeclared();
-		const kind = this.policiesKind;
-		if (kind !== null) {
-			const row = await kind.get(locationId);
-			return row === null ? null : bodyToPolicy(locationId, row.data);
-		}
-		const rows = await this.store.query({
-			collection: BACKUP_DESTINATION_POLICIES,
-			filter: {
-				where: { location_id: locationId },
-				limit: 1
-			}
-		});
-		return rows[0] ? mapRowToPolicy(rows[0].data) : null;
+		const row = await this.policiesKind.get(locationId);
+		return row === null ? null : bodyToPolicy(locationId, row.data);
 	}
-	/**
-	* Replace-or-insert. Implemented as delete + insert, mirroring the
-	* `SqliteLocationStore` contract.
-	*/
+	/** Replace-or-insert: one full `put` of the row. */
 	async upsert(p) {
-		await this.ensureDeclared();
-		const kind = this.policiesKind;
-		if (kind !== null) {
-			const body = policyToBody(p);
-			const data = backupOrchestratorRecordKinds["destination-policies"].schema.parse(body);
-			await kind.put({
-				id: p.locationId,
-				data
-			});
-			return;
-		}
-		await this.store.deleteWhere({
-			collection: BACKUP_DESTINATION_POLICIES,
-			filter: { where: { location_id: p.locationId } }
-		});
-		await this.store.insert({
-			collection: BACKUP_DESTINATION_POLICIES,
-			record: {
-				id: p.locationId,
-				data: mapPolicyToRow(p)
-			}
+		const data = backupOrchestratorRecordKinds["destination-policies"].schema.parse(policyToBody(p));
+		await this.policiesKind.put({
+			id: p.locationId,
+			data
 		});
 	}
 	async delete(locationId) {
-		await this.ensureDeclared();
-		const kind = this.policiesKind;
-		if (kind !== null) {
-			await kind.delete(locationId);
-			return;
-		}
-		await this.store.deleteWhere({
-			collection: BACKUP_DESTINATION_POLICIES,
-			filter: { where: { location_id: locationId } }
-		});
+		await this.policiesKind.delete(locationId);
 	}
 	/**
 	* Auto-create a default policy for a `backups` location seen for the
@@ -1173,41 +994,6 @@ function bodyToPolicy(locationId, body) {
 		...body.lastError !== void 0 ? { lastError: body.lastError } : {}
 	};
 }
-function mapPolicyToRow(p) {
-	return {
-		location_id: p.locationId,
-		enabled: p.enabled ? 1 : 0,
-		retention_count: p.retentionCount,
-		label: p.label ?? null,
-		cron: null,
-		last_run_at: p.lastAttemptAt ?? null,
-		last_error: p.lastError ?? null
-	};
-}
-/**
-* Decode a row pulled from the structured table. Defensive against
-* schema drift / partial migrations: returns `null` on missing
-* `location_id` so corrupt rows skip the result list rather than
-* throwing the whole orchestrator down at boot.
-*/
-function mapRowToPolicy(row) {
-	const locationId = String(row["location_id"] ?? "");
-	if (!locationId) return null;
-	const labelRaw = row["label"];
-	const label = typeof labelRaw === "string" && labelRaw.length > 0 ? labelRaw : void 0;
-	const lastRunRaw = row["last_run_at"];
-	const lastAttemptAt = typeof lastRunRaw === "number" && lastRunRaw > 0 ? lastRunRaw : void 0;
-	const lastErrorRaw = row["last_error"];
-	const lastError = typeof lastErrorRaw === "string" && lastErrorRaw.length > 0 ? lastErrorRaw : void 0;
-	return {
-		locationId,
-		enabled: row["enabled"] === 1 || row["enabled"] === true,
-		retentionCount: Number(row["retention_count"] ?? 0),
-		...label !== void 0 ? { label } : {},
-		...lastAttemptAt !== void 0 ? { lastAttemptAt } : {},
-		...lastError !== void 0 ? { lastError } : {}
-	};
-}
 //#endregion
 //#region src/builtins/backup-orchestrator/download-helpers.ts
 /**
@@ -1900,176 +1686,35 @@ function requestSignature(request) {
 }
 //#endregion
 //#region src/builtins/backup-orchestrator/schedule-store.ts
-/**
-* @durable class=config owner=backup-orchestrator
-*   write="an operator creating or editing a schedule (`upsert`, implemented as
-*     delete + insert: cron, enabled, the fan-out `location_ids`, `retention_count`,
-*     optional `data_sources`), plus a `last_run_at` stamp the orchestrator writes on
-*     every due tick BEFORE the archive runs, so an upload outliving the tick cannot
-*     fire the same schedule twice, and a `last_success_at` / `last_error` pair it
-*     writes AFTER the run resolves"
-*   retention="only the operator's `delete(id)` — no sweep, no expiry, and `retention_count`
-*     bounds the ARCHIVES at the destination, never these rows. Losing the table stops
-*     every scheduled backup silently: no cron remains to fire, and the fan-out sets and
-*     retention counts are gone with it."
-*/
-var BACKUP_SCHEDULES = "backup_schedules";
-var BACKUP_SCHEDULES_COLUMNS = [
-	{
-		name: "id",
-		type: "TEXT",
-		primaryKey: true
-	},
-	{
-		name: "label",
-		type: "TEXT",
-		notNull: true,
-		defaultValue: ""
-	},
-	{
-		name: "cron",
-		type: "TEXT",
-		notNull: true,
-		defaultValue: ""
-	},
-	{
-		name: "enabled",
-		type: "INTEGER",
-		notNull: true,
-		defaultValue: 1
-	},
-	{
-		name: "location_ids",
-		type: "JSON",
-		notNull: true,
-		defaultValue: "[]"
-	},
-	{
-		name: "retention_count",
-		type: "INTEGER",
-		notNull: true,
-		defaultValue: 7
-	},
-	{
-		name: "data_sources",
-		type: "JSON"
-	},
-	{
-		name: "databases",
-		type: "JSON"
-	},
-	{
-		name: "last_run_at",
-		type: "INTEGER"
-	},
-	{
-		name: "last_success_at",
-		type: "INTEGER"
-	},
-	{
-		name: "last_error",
-		type: "TEXT"
-	}
-];
 var BackupScheduleService = class {
-	store;
-	declared = false;
 	schedulesKind;
-	constructor(store, schedulesKind = null) {
-		this.store = store;
+	constructor(schedulesKind) {
 		this.schedulesKind = schedulesKind;
 	}
-	async initialize() {
-		await this.ensureDeclared();
-	}
-	async ensureDeclared() {
-		if (this.schedulesKind !== null) return;
-		if (this.declared) return;
-		await this.store.declareCollection({
-			collection: BACKUP_SCHEDULES,
-			columns: BACKUP_SCHEDULES_COLUMNS
-		});
-		this.declared = true;
-	}
 	async list() {
-		await this.ensureDeclared();
-		const kind = this.schedulesKind;
-		if (kind !== null) {
-			const rows = await (0, import_read_all_rows.readAllRows)(kind);
-			rows.sort((a, b) => a.id.localeCompare(b.id));
-			const out = [];
-			for (const row of rows) {
-				const mapped = bodyToSchedule(row.id, row.data);
-				if (mapped) out.push(mapped);
-			}
-			return out;
-		}
-		const rows = await this.store.query({
-			collection: BACKUP_SCHEDULES,
-			filter: { orderBy: {
-				field: "id",
-				direction: "asc"
-			} }
-		});
+		const rows = await (0, import_read_all_rows.readAllRows)(this.schedulesKind);
+		rows.sort((a, b) => a.id.localeCompare(b.id));
 		const out = [];
 		for (const row of rows) {
-			const mapped = mapRowToSchedule(row.data);
+			const mapped = bodyToSchedule(row.id, row.data);
 			if (mapped) out.push(mapped);
 		}
 		return out;
 	}
 	async get(id) {
-		await this.ensureDeclared();
-		const kind = this.schedulesKind;
-		if (kind !== null) {
-			const row = await kind.get(id);
-			return row === null ? null : bodyToSchedule(id, row.data);
-		}
-		const rows = await this.store.query({
-			collection: BACKUP_SCHEDULES,
-			filter: {
-				where: { id },
-				limit: 1
-			}
-		});
-		return rows[0] ? mapRowToSchedule(rows[0].data) : null;
+		const row = await this.schedulesKind.get(id);
+		return row === null ? null : bodyToSchedule(id, row.data);
 	}
-	/** Replace-or-insert (delete + insert — mirrors the policy store). */
+	/** Replace-or-insert: one full `put` of the row. */
 	async upsert(s) {
-		await this.ensureDeclared();
-		const kind = this.schedulesKind;
-		if (kind !== null) {
-			const body = scheduleToBody(s);
-			const data = backupOrchestratorRecordKinds.schedules.schema.parse(body);
-			await kind.put({
-				id: s.id,
-				data
-			});
-			return;
-		}
-		await this.store.deleteWhere({
-			collection: BACKUP_SCHEDULES,
-			filter: { where: { id: s.id } }
-		});
-		await this.store.insert({
-			collection: BACKUP_SCHEDULES,
-			record: {
-				id: s.id,
-				data: mapScheduleToRow(s)
-			}
+		const data = backupOrchestratorRecordKinds.schedules.schema.parse(scheduleToBody(s));
+		await this.schedulesKind.put({
+			id: s.id,
+			data
 		});
 	}
 	async delete(id) {
-		await this.ensureDeclared();
-		const kind = this.schedulesKind;
-		if (kind !== null) {
-			await kind.delete(id);
-			return;
-		}
-		await this.store.deleteWhere({
-			collection: BACKUP_SCHEDULES,
-			filter: { where: { id } }
-		});
+		await this.schedulesKind.delete(id);
 	}
 };
 function scheduleToBody(s) {
@@ -2102,73 +1747,6 @@ function bodyToSchedule(id, body) {
 		...body.lastError !== void 0 ? { lastError: body.lastError } : {}
 	};
 }
-function mapScheduleToRow(s) {
-	return {
-		id: s.id,
-		label: s.label,
-		cron: s.cron,
-		enabled: s.enabled ? 1 : 0,
-		location_ids: [...s.locationIds],
-		retention_count: s.retentionCount,
-		data_sources: s.dataSources ? [...s.dataSources] : null,
-		databases: s.databases ? [...s.databases] : null,
-		last_run_at: s.lastAttemptAt ?? null,
-		last_success_at: s.lastSuccessAt ?? null,
-		last_error: s.lastError ?? null
-	};
-}
-/**
-* `location_ids` / `data_sources` are `JSON` columns, so the surface hands
-* back real arrays. A STRING still arrives for rows an older build wrote and
-* nothing has rewritten since — a schedule whose fan-out set silently read as
-* empty would back up to nowhere, so both shapes are accepted.
-*/
-function parseStringArray(raw) {
-	const value = typeof raw === "string" ? tryParseJson(raw) : raw;
-	if (!Array.isArray(value)) return [];
-	return value.filter((v) => typeof v === "string");
-}
-/** Known database ids only: an unknown name in a stored row is dropped, not carried. */
-function parseDatabaseIds(raw) {
-	const out = [];
-	for (const id of parseStringArray(raw)) if (id === "settings" || id === "events" || id === "history") out.push(id);
-	return out;
-}
-function tryParseJson(raw) {
-	if (raw.length === 0) return null;
-	try {
-		return JSON.parse(raw);
-	} catch {
-		return null;
-	}
-}
-function mapRowToSchedule(row) {
-	const id = String(row["id"] ?? "");
-	if (!id) return null;
-	const dataSourcesRaw = row["data_sources"];
-	const dataSources = dataSourcesRaw === null || dataSourcesRaw === void 0 ? void 0 : parseStringArray(dataSourcesRaw);
-	const databasesRaw = row["databases"];
-	const databases = databasesRaw === null || databasesRaw === void 0 ? void 0 : parseDatabaseIds(databasesRaw);
-	const lastRunRaw = row["last_run_at"];
-	const lastAttemptAt = typeof lastRunRaw === "number" && lastRunRaw > 0 ? lastRunRaw : void 0;
-	const lastSuccessRaw = row["last_success_at"];
-	const lastSuccessAt = typeof lastSuccessRaw === "number" && lastSuccessRaw > 0 ? lastSuccessRaw : void 0;
-	const lastErrorRaw = row["last_error"];
-	const lastError = typeof lastErrorRaw === "string" && lastErrorRaw.length > 0 ? lastErrorRaw : void 0;
-	return {
-		id,
-		label: typeof row["label"] === "string" ? String(row["label"]) : "",
-		cron: typeof row["cron"] === "string" ? String(row["cron"]) : "",
-		enabled: row["enabled"] === 1 || row["enabled"] === true,
-		locationIds: parseStringArray(row["location_ids"]),
-		retentionCount: Number(row["retention_count"] ?? 7),
-		...dataSources !== void 0 ? { dataSources } : {},
-		...databases !== void 0 && databases.length > 0 ? { databases } : {},
-		...lastAttemptAt !== void 0 ? { lastAttemptAt } : {},
-		...lastSuccessAt !== void 0 ? { lastSuccessAt } : {},
-		...lastError !== void 0 ? { lastError } : {}
-	};
-}
 //#endregion
 //#region src/builtins/backup-orchestrator/staging-paths.ts
 /** Basename of the staging dir under the node data root. */
@@ -2300,8 +1878,8 @@ function selectBackupTargets(input) {
 * Responsibilities:
 *   - Schedule (cron-like timer at top of hour, daily/weekly cadence)
 *   - Per-destination policy (enable/disable, retention count, label)
-*     persisted in `backup_destination_policies` (this builtin owns
-*     the table).
+*     persisted in the `destination-policies` records kind (this builtin
+*     owns the kind).
 *   - Archive build (one tar.gz with embedded manifest, fanned out to
 *     every selected `backups`-typed `StorageLocation` via the
 *     consumer-facing `storage` cap's chunked upload protocol).
@@ -2312,7 +1890,7 @@ function selectBackupTargets(input) {
 * Storage routing: destinations are
 * `api.storage.listLocations({ type: 'backups' })` — every operator-
 * visible `backups` location IS a destination. The orchestrator joins
-* that list with the `backup_destination_policies` table to surface
+* that list with the `destination-policies` records to surface
 * `enabled` / `retentionCount` / `label`. The actual archive bytes
 * travel through `api.storage.beginUpload` / `writeChunk` /
 * `finalizeUpload`, with the staging archive built into
@@ -2408,19 +1986,11 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 		this.systemBackup = new SystemBackupService(this.dataDir, this.ctx.logger);
 		this.runQueue = new BackupRunQueue((request, signal, progress) => this.runBackupBuild(request, signal, progress));
 		await this.cleanStagingArea();
-		this.policies = this.resolvePolicyService();
-		if (this.policies) try {
-			await this.policies.initialize();
-		} catch (err) {
-			this.ctx.logger.error("backup-orchestrator: policy table init failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
-			this.policies = null;
-		}
-		this.schedules = this.resolveScheduleService();
-		if (this.schedules) try {
-			await this.schedules.initialize();
-		} catch (err) {
-			this.ctx.logger.error("backup-orchestrator: schedule table init failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
-			this.schedules = null;
+		const backupRecords = this.backupRecords;
+		if (backupRecords === null) this.ctx.logger.warn("backup-orchestrator: no ctx.records — schedules and destination policies will not persist");
+		else {
+			this.policies = new BackupDestinationPolicyService(backupRecords.destinationPolicies);
+			this.schedules = new BackupScheduleService(backupRecords.schedules);
 		}
 		await this.seedWeekly();
 		const settingsStore = this.ctx.kernel.capabilityRegistry?.getSingleton("settings-store");
@@ -2534,7 +2104,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 	* lazily seeding a default for any `locationId` we haven't seen
 	* before. Idempotent — `ensureDefault` no-ops on already-persisted
 	* rows. Falls back to the in-memory default policy when the policy
-	* service isn't wired (no settings-store backend available).
+	* service isn't wired (no `ctx.records`).
 	*/
 	async loadPoliciesIndexed(locationIds) {
 		const out = /* @__PURE__ */ new Map();
@@ -3040,7 +2610,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 	*/
 	async upsertDestinationPolicy(input) {
 		if (!this.policies) {
-			this.ctx.logger.warn("backup upsertDestinationPolicy: no settings-store backend — change will not persist", { meta: { locationId: input.locationId } });
+			this.ctx.logger.warn("backup upsertDestinationPolicy: no ctx.records — change will not persist", { meta: { locationId: input.locationId } });
 			return;
 		}
 		const existing = await this.policies.get(input.locationId).catch(() => null);
@@ -3423,11 +2993,10 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 	* anything the operator has: see `planWeeklySeed`.
 	*/
 	async seedWeekly() {
-		if (!this.schedules) return;
+		const markers = this.backupRecords?.seedMarkers;
+		if (!this.schedules || markers === void 0) return;
 		try {
-			const store = this.ctx.kernel.capabilityRegistry?.getSingleton("settings-store");
-			if (!store) return;
-			const seed = await seedWeeklySchedule(this.schedules, new BackupSeedMarkerStore(store, Date.now, this.backupRecords?.seedMarkers ?? null));
+			const seed = await seedWeeklySchedule(this.schedules, new BackupSeedMarkerStore(markers));
 			if (seed === null) return;
 			this.ctx.logger.info("backup: seeded the weekly events & history schedule", { meta: {
 				scheduleId: seed.id,
@@ -3533,7 +3102,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 		});
 	}
 	async upsertSchedule(input) {
-		if (!this.schedules) throw new Error("backup upsertSchedule: no settings-store backend — schedule cannot be persisted");
+		if (!this.schedules) throw new Error("backup upsertSchedule: no ctx.records — schedule cannot be persisted");
 		const cron = input.cron.trim();
 		if (cron.length > 0 && !isValidCron(cron)) throw new Error(`Invalid cron expression: "${cron}"`);
 		const id = input.id && input.id.length > 0 ? input.id : randomUUID();
@@ -3576,26 +3145,6 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 		if (!this.schedules) return;
 		await this.schedules.delete(input.id);
 	}
-	resolveScheduleService() {
-		const reg = this.ctx.kernel.capabilityRegistry;
-		if (!reg) return null;
-		const store = reg.getSingleton("settings-store");
-		if (!store) {
-			this.ctx.logger.warn("backup-orchestrator: no settings-store provider — backup schedules will not persist");
-			return null;
-		}
-		return new BackupScheduleService(store, this.backupRecords?.schedules ?? null);
-	}
-	resolvePolicyService() {
-		const reg = this.ctx.kernel.capabilityRegistry;
-		if (!reg) return null;
-		const store = reg.getSingleton("settings-store");
-		if (!store) {
-			this.ctx.logger.warn("backup-orchestrator: no settings-store provider — destination policies will not persist");
-			return null;
-		}
-		return new BackupDestinationPolicyService(store, this.backupRecords?.destinationPolicies ?? null);
-	}
 	/**
 	* Narrow `ctx.api.storage` to the subset the manifest helpers need.
 	* Lets the helpers be unit-tested with a Map-backed fake without