@cleocode/core 2026.4.58 → 2026.4.59

package/dist/store/backup-unpack.js

@@ -0,0 +1,449 @@
+/**
+ * backup-unpack.ts — Bundle extraction and integrity verification for .cleobundle.tar.gz.
+ *
+ * Implements the unpack + verify half of the T311 import lifecycle.
+ * Extracts a .cleobundle.tar.gz (or .enc.cleobundle.tar.gz) to a staging
+ * directory and verifies all 6 integrity layers defined in ADR-038 §4.2.
+ *
+ * The caller is responsible for cleaning up the staging directory via
+ * {@link cleanupStaging} after processing. Restore-to-disk is the
+ * responsibility of T361 (CLI import handler).
+ *
+ * Verification layers (executed in strict order):
+ *   Layer 1 — AES-256-GCM auth tag (encrypted bundles only)
+ *   Layer 2 — Manifest self-hash (SHA-256 with placeholder substitution)
+ *   Layer 3 — Manifest JSON Schema validation (bundled schemas/manifest-v1.json)
+ *   Layer 4 — Per-file SHA-256 checksums
+ *   Layer 5 — SQLite PRAGMA integrity_check
+ *   Layer 6 — Schema version comparison (warnings only, never blocks)
+ *
+ * @task T350
+ * @epic T311
+ * @why ADR-038 — the unpack + verify half of the T311 import lifecycle.
+ *      Restore-to-disk is the responsibility of T361 (CLI import handler);
+ *      this module stops after verification and returns a staging dir path.
+ * @module store/backup-unpack
+ */
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import { createRequire } from 'node:module';
+import os from 'node:os';
+import path from 'node:path';
+// ajv/dist/2020 provides JSON Schema Draft 2020-12 support required by
+// schemas/manifest-v1.json which declares `"$schema": "https://json-schema.org/draft/2020-12/schema"`.
+import { default as Ajv2020Import } from 'ajv/dist/2020.js';
+import { default as addFormatsImport } from 'ajv-formats';
+import { extract as tarExtract } from 'tar';
+import { decryptBundle, isEncryptedBundle } from './backup-crypto.js';
+// ---------------------------------------------------------------------------
+// node:sqlite interop (createRequire — Vitest strips `node:` prefix)
+// ---------------------------------------------------------------------------
+const _require = createRequire(import.meta.url);
+const { DatabaseSync } = _require('node:sqlite');
+// ---------------------------------------------------------------------------
+// ajv ESM/CJS interop — Draft 2020-12 variant
+// ---------------------------------------------------------------------------
+const ajv2020Mod = Ajv2020Import;
+const Ajv2020 = (typeof ajv2020Mod.default === 'function' ? ajv2020Mod.default : Ajv2020Import);
+const fmtMod = addFormatsImport;
+const addFormats = (typeof fmtMod.default === 'function' ? fmtMod.default : addFormatsImport);
+// ---------------------------------------------------------------------------
+// Exit codes (ADR-038 §4.3)
+// ---------------------------------------------------------------------------
+/**
+ * Error thrown by {@link unpackBundle} when any integrity layer fails.
+ *
+ * Exit codes:
+ * - `70` `E_BUNDLE_DECRYPT`     — decryption or passphrase failure
+ * - `71` `E_BUNDLE_SCHEMA`      — manifest.json failed JSON Schema validation
+ * - `72` `E_CHECKSUM_MISMATCH`  — SHA-256 checksum did not match
+ * - `73` `E_SQLITE_INTEGRITY`   — SQLite PRAGMA integrity_check failed
+ * - `74` `E_MANIFEST_MISSING`   — manifest.json absent from archive
+ * - `75` `E_SCHEMAS_MISSING`    — schemas/manifest-v1.json absent from archive
+ *
+ * @task T350
+ * @epic T311
+ */
+export class BundleError extends Error {
+    code;
+    codeName;
+    /**
+     * @param code     - Numeric exit code (70–75).
+     * @param codeName - Symbolic constant name, e.g. `'E_BUNDLE_DECRYPT'`.
+     * @param message  - Human-readable error description.
+     */
+    constructor(code, codeName, message) {
+        super(message);
+        this.code = code;
+        this.codeName = codeName;
+        this.name = 'BundleError';
+    }
+}
+// ---------------------------------------------------------------------------
+// Private helpers
+// ---------------------------------------------------------------------------
+/** Compute SHA-256 hex of a buffer. */
+function sha256OfBuffer(buf) {
+    return crypto.createHash('sha256').update(buf).digest('hex');
+}
+/** Compute SHA-256 hex of a file on disk. */
+function sha256OfFile(filePath) {
+    return sha256OfBuffer(fs.readFileSync(filePath));
+}
+/**
+ * Build and return a singleton Ajv 2020-12 instance with formats support.
+ * The schema cache lives for the lifetime of the process, which is acceptable
+ * since the manifest-v1.json schema is stable.
+ */
+let _ajv2020 = null;
+function getAjv2020() {
+    if (_ajv2020 === null) {
+        _ajv2020 = new Ajv2020({ allErrors: true, strict: false, allowUnionTypes: true });
+        addFormats(_ajv2020);
+    }
+    return _ajv2020;
+}
+/**
+ * Stable schema ID for manifest-v1.json used as Ajv internal key.
+ * Having a fixed, well-known ID lets us call `ajv.getSchema(id)` on
+ * subsequent requests instead of re-compiling from disk every time.
+ */
+const MANIFEST_SCHEMA_ID = 'cleo-manifest-v1-internal';
+/**
+ * Validate `data` against the JSON Schema loaded from `schemaPath`.
+ * Returns an array of error messages; empty array means valid.
+ *
+ * Uses a stable internal schema ID so that multiple calls within the
+ * same process reuse the compiled validator without triggering the Ajv
+ * "schema already exists" error.
+ */
+function validateAgainstJsonSchema(data, schemaPath) {
+    const ajv = getAjv2020();
+    // Reuse previously compiled validator if already registered.
+    let validate = ajv.getSchema(MANIFEST_SCHEMA_ID);
+    if (validate === undefined) {
+        const rawSchema = JSON.parse(fs.readFileSync(schemaPath, 'utf-8'));
+        // Strip the external `$id` to avoid Ajv's cross-call duplicate-id check,
+        // then add with our stable internal key.
+        const { $id: _unusedId, ...schemaWithoutId } = rawSchema;
+        ajv.addSchema(schemaWithoutId, MANIFEST_SCHEMA_ID);
+        validate = ajv.getSchema(MANIFEST_SCHEMA_ID);
+    }
+    if (validate(data)) {
+        return [];
+    }
+    return (validate.errors ?? []).map((e) => `${e.instancePath ?? '/'}: ${e.message ?? 'unknown'}`);
+}
+/**
+ * Read the latest applied Drizzle migration identifier from a local DB file.
+ *
+ * Looks for a `__drizzle_migrations` or `drizzle_migrations` table and reads
+ * the latest `folder_millis` or `created_at` value. Returns `null` if the
+ * local DB file does not exist or has no migration table (unknown DB).
+ *
+ * @param dbName - Logical database name (e.g. "tasks").
+ * @returns Migration identifier string, or `null` if unknown.
+ */
+function getLocalSchemaVersion(dbName) {
+    // Resolve the path for known project-tier databases relative to this module.
+    // packages/core/src/store/backup-unpack.ts → packages/core/ → packages/ → root
+    const thisFile = import.meta.url.replace('file://', '');
+    const packageRoot = path.resolve(path.dirname(thisFile), '..', '..', '..');
+    // Known DB paths: project-tier DBs live at <projectRoot>/.cleo/<name>.db but
+    // we can only inspect the local running project's DB here.  For schema version
+    // comparison we read from the local .cleo directory relative to a project root
+    // heuristic, but that is inherently environment-specific.  The simpler and
+    // safer approach (spec §9 best-effort) is to look at the Drizzle migration
+    // folder for the known DBs shipped with this package.
+    const migrationCandidates = [
+        path.join(packageRoot, 'migrations', `drizzle-${dbName}`),
+        path.join(packageRoot, 'migrations', dbName),
+    ];
+    for (const dir of migrationCandidates) {
+        if (!fs.existsSync(dir))
+            continue;
+        try {
+            const entries = fs
+                .readdirSync(dir)
+                .filter((n) => /^\d+/.test(n))
+                .sort()
+                .reverse();
+            if (entries.length > 0 && entries[0] != null) {
+                // Strip non-numeric suffix to get the millis part
+                const match = /^(\d+)/.exec(entries[0]);
+                if (match?.[1] != null) {
+                    return match[1];
+                }
+            }
+        }
+        catch {
+            // Non-fatal — fall through to next candidate
+        }
+    }
+    return null;
+}
+/**
+ * Compare bundle schema version vs local schema version for a single DB.
+ * Returns a {@link SchemaCompatWarning} when the versions differ, or `null`.
+ */
+function compareSchemaVersions(dbName, bundleVersion) {
+    if (bundleVersion === 'unknown')
+        return null;
+    const localVersion = getLocalSchemaVersion(dbName);
+    if (localVersion === null)
+        return null; // unknown DB — skip comparison
+    if (localVersion === 'unknown')
+        return null;
+    if (bundleVersion === localVersion)
+        return null;
+    // Numeric comparison where possible (Drizzle uses epoch millis as folder names)
+    const bNum = Number(bundleVersion);
+    const lNum = Number(localVersion);
+    if (!Number.isNaN(bNum) && !Number.isNaN(lNum)) {
+        const severity = bNum < lNum ? 'older-bundle' : 'newer-bundle';
+        return { db: dbName, bundleVersion, localVersion, severity };
+    }
+    // Fallback: lexicographic comparison
+    const severity = bundleVersion < localVersion ? 'older-bundle' : 'newer-bundle';
+    return { db: dbName, bundleVersion, localVersion, severity };
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Extract a `.cleobundle.tar.gz` to a temp staging directory and verify all
+ * 6 integrity layers in strict sequence (ADR-038 §4.2).
+ *
+ * On any failure AFTER the staging directory is created, the staging directory
+ * is cleaned up before the {@link BundleError} is thrown.
+ *
+ * The caller MUST call {@link cleanupStaging} with the returned `stagingDir`
+ * after it is done processing.
+ *
+ * @param input - Bundle path and optional passphrase.
+ * @returns Verification result with staging dir, manifest, layer flags, and warnings.
+ * @throws {BundleError} On any integrity failure (exit codes 70–75).
+ *
+ * @task T350
+ * @epic T311
+ */
+export async function unpackBundle(input) {
+    const { bundlePath, passphrase } = input;
+    // ----- Step 1: Read bundle header (first 8 bytes) -------------------------
+    const fd = fs.openSync(bundlePath, 'r');
+    const header = Buffer.alloc(8);
+    fs.readSync(fd, header, 0, 8, 0);
+    fs.closeSync(fd);
+    // ----- Step 2: Detect encryption ------------------------------------------
+    const encrypted = isEncryptedBundle(header);
+    // ----- Step 3: Decrypt if needed ------------------------------------------
+    let encryptionAuth = false;
+    let tarPath;
+    let tmpDecryptedPath = null;
+    if (encrypted) {
+        if (!passphrase || passphrase.length === 0) {
+            throw new BundleError(70, 'E_BUNDLE_DECRYPT', 'Bundle is encrypted but no passphrase was provided.');
+        }
+        const encryptedBuf = fs.readFileSync(bundlePath);
+        let decrypted;
+        try {
+            decrypted = decryptBundle(encryptedBuf, passphrase);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            throw new BundleError(70, 'E_BUNDLE_DECRYPT', `Decryption failed: ${msg}`);
+        }
+        // Write decrypted tar.gz to a temp file for extraction
+        tmpDecryptedPath = path.join(os.tmpdir(), `cleo-unpack-dec-${Date.now()}.tar.gz`);
+        fs.writeFileSync(tmpDecryptedPath, decrypted);
+        tarPath = tmpDecryptedPath;
+        encryptionAuth = true;
+    }
+    else {
+        tarPath = bundlePath;
+        // unencrypted: auth is N/A — report true (not applicable = pass)
+        encryptionAuth = true;
+    }
+    // ----- Step 4: Create staging directory -----------------------------------
+    const stagingDir = fs.mkdtempSync(path.join(os.tmpdir(), 'cleo-unpack-'));
+    // From here on, any failure must clean up stagingDir (and tmpDecryptedPath).
+    const cleanup = () => {
+        try {
+            fs.rmSync(stagingDir, { recursive: true, force: true });
+        }
+        catch {
+            // best-effort
+        }
+        if (tmpDecryptedPath !== null) {
+            try {
+                if (fs.existsSync(tmpDecryptedPath)) {
+                    fs.unlinkSync(tmpDecryptedPath);
+                }
+            }
+            catch {
+                // best-effort
+            }
+        }
+    };
+    try {
+        // ----- Step 5: Extract tarball ------------------------------------------
+        try {
+            await tarExtract({ file: tarPath, cwd: stagingDir });
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            // Tar extraction failure is most likely due to corruption — treat as
+            // checksum mismatch (the corrupted bytes caused tar to fail before we
+            // could even read checksums).
+            throw new BundleError(72, 'E_CHECKSUM_MISMATCH', `Tar extraction failed: ${msg}`);
+        }
+        // ----- Step 6: Verify manifest.json exists -------------------------------
+        const manifestPath = path.join(stagingDir, 'manifest.json');
+        if (!fs.existsSync(manifestPath)) {
+            throw new BundleError(74, 'E_MANIFEST_MISSING', 'manifest.json is missing from the bundle.');
+        }
+        // ----- Step 7: Verify schemas/manifest-v1.json exists -------------------
+        const schemaPath = path.join(stagingDir, 'schemas', 'manifest-v1.json');
+        if (!fs.existsSync(schemaPath)) {
+            throw new BundleError(75, 'E_SCHEMAS_MISSING', 'schemas/manifest-v1.json is missing from the bundle.');
+        }
+        // ----- Step 8: Parse manifest.json ---------------------------------------
+        let manifest;
+        try {
+            manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf-8'));
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            throw new BundleError(71, 'E_BUNDLE_SCHEMA', `manifest.json is not valid JSON: ${msg}`);
+        }
+        // ----- Step 9: Validate manifest against bundled JSON Schema (Layer 3) --
+        const schemaErrors = validateAgainstJsonSchema(manifest, schemaPath);
+        if (schemaErrors.length > 0) {
+            throw new BundleError(71, 'E_BUNDLE_SCHEMA', `manifest.json failed schema validation: ${schemaErrors.join('; ')}`);
+        }
+        const manifestSchema = true;
+        // ----- Layer 2: Manifest self-hash verification --------------------------
+        // Per spec §4.1: compute SHA-256 of manifest JSON with integrity.manifestHash=""
+        // and compare to integrity.manifestHash.
+        if (manifest.integrity.manifestHash != null && manifest.integrity.manifestHash.length > 0) {
+            const manifestWithPlaceholder = {
+                ...manifest,
+                integrity: { ...manifest.integrity, manifestHash: '' },
+            };
+            const computedHash = sha256OfBuffer(Buffer.from(JSON.stringify(manifestWithPlaceholder), 'utf-8'));
+            if (computedHash !== manifest.integrity.manifestHash) {
+                throw new BundleError(71, 'E_BUNDLE_SCHEMA', 'Manifest self-hash mismatch — manifest.json may have been tampered with.');
+            }
+        }
+        // ----- Step 10: Checksum verification (Layer 4) --------------------------
+        const checksumsPath = path.join(stagingDir, 'checksums.sha256');
+        let checksums = true;
+        if (fs.existsSync(checksumsPath)) {
+            const checksumContent = fs.readFileSync(checksumsPath, 'utf-8');
+            const lines = checksumContent.split('\n').filter((l) => l.trim().length > 0);
+            for (const line of lines) {
+                // GNU sha256sum format: "<64 hex chars>  <relative path>"
+                const spaceIdx = line.indexOf('  ');
+                if (spaceIdx === -1)
+                    continue;
+                const expectedHash = line.slice(0, spaceIdx).trim();
+                const relPath = line.slice(spaceIdx + 2).trim();
+                const filePath = path.join(stagingDir, relPath);
+                if (!fs.existsSync(filePath)) {
+                    throw new BundleError(72, 'E_CHECKSUM_MISMATCH', `Checksummed file missing from staging: file=${relPath}`);
+                }
+                const actualHash = sha256OfFile(filePath);
+                if (actualHash !== expectedHash) {
+                    throw new BundleError(72, 'E_CHECKSUM_MISMATCH', `SHA-256 mismatch for file=${relPath}`);
+                }
+            }
+        }
+        else {
+            // checksums.sha256 missing from the extracted bundle is acceptable for
+            // bundles that were packed without checksums; pass through without failure.
+            checksums = true;
+        }
+        // ----- Step 11: SQLite integrity check (Layer 5) -------------------------
+        const sqliteIntegrity = true;
+        for (const dbEntry of manifest.databases) {
+            const dbPath = path.join(stagingDir, dbEntry.filename);
+            if (!fs.existsSync(dbPath))
+                continue;
+            let db = null;
+            try {
+                db = new DatabaseSync(dbPath, { readOnly: true });
+                const row = db.prepare('PRAGMA integrity_check').get();
+                if (row?.integrity_check !== 'ok') {
+                    throw new BundleError(73, 'E_SQLITE_INTEGRITY', `PRAGMA integrity_check failed for file=${dbEntry.filename}`);
+                }
+            }
+            catch (err) {
+                if (err instanceof BundleError)
+                    throw err;
+                throw new BundleError(73, 'E_SQLITE_INTEGRITY', `Could not open database for integrity check: file=${dbEntry.filename}`);
+            }
+            finally {
+                try {
+                    db?.close();
+                }
+                catch {
+                    // ignore
+                }
+            }
+        }
+        // ----- Step 12: Schema version compat warnings (Layer 6) ----------------
+        const warnings = [];
+        for (const dbEntry of manifest.databases) {
+            const warning = compareSchemaVersions(dbEntry.name, dbEntry.schemaVersion);
+            if (warning !== null) {
+                warnings.push(warning);
+            }
+        }
+        // ----- Step 13: Clean up temp decrypted file if any ----------------------
+        if (tmpDecryptedPath !== null) {
+            try {
+                if (fs.existsSync(tmpDecryptedPath)) {
+                    fs.unlinkSync(tmpDecryptedPath);
+                }
+            }
+            catch {
+                // best-effort
+            }
+        }
+        // ----- Return result -----------------------------------------------------
+        return {
+            stagingDir,
+            manifest,
+            verified: {
+                encryptionAuth,
+                manifestSchema,
+                checksums,
+                sqliteIntegrity,
+            },
+            warnings,
+        };
+    }
+    catch (err) {
+        cleanup();
+        throw err;
+    }
+}
+/**
+ * Remove the staging directory created by {@link unpackBundle}.
+ *
+ * Safe to call on a path that no longer exists (idempotent).
+ *
+ * @param stagingDir - Absolute path returned in {@link UnpackBundleResult.stagingDir}.
+ *
+ * @task T350
+ * @epic T311
+ */
+export function cleanupStaging(stagingDir) {
+    try {
+        fs.rmSync(stagingDir, { recursive: true, force: true });
+    }
+    catch {
+        // best-effort — do not throw on cleanup
+    }
+}
+//# sourceMappingURL=backup-unpack.js.map

package/dist/store/backup-unpack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-unpack.js","sourceRoot":"","sources":["../../src/store/backup-unpack.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,uEAAuE;AACvE,uGAAuG;AACvG,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,KAAK,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEtE,8EAA8E;AAC9E,qEAAqE;AACrE,8EAA8E;AAE9E,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEhD,MAAM,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC,aAAa,CAE9C,CAAC;AAEF,8EAA8E;AAC9E,8CAA8C;AAC9C,8EAA8E;AAE9E,MAAM,UAAU,GAAG,aAAwC,CAAC;AAC5D,MAAM,OAAO,GAAG,CACd,OAAO,UAAU,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAG/D,CAAC;AACjB,MAAM,MAAM,GAAG,gBAA2C,CAAC;AAC3D,MAAM,UAAU,GAAG,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAE5E,CAAC;AAoEjB,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAOlB;IACA;IAPlB;;;;OAIG;IACH,YACkB,IAAY,EACZ,QAAgB,EAChC,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAQ;QACZ,aAAQ,GAAR,QAAQ,CAAQ;QAIhC,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,uCAAuC;AACvC,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,6CAA6C;AAC7C,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,cAAc,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,IAAI,QAAQ,GAAuB,IAAI,CAAC;AACxC,SAAS,UAAU;IACjB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,QAAQ,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;AAEvD;;;;;;;GAOG;AACH,SAAS,yBAAyB,CAAC,IAAa,EAAE,UAAkB;IAClE,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IAEzB,6DAA6D;IAC7D,IAAI,QAAQ,GAAiC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAC/E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;QAC9F,yEAAyE;QACzE,yCAAyC;QACzC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,eAAe,EAAE,GAAG,SAAS,CAAC;QACzD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;QACnD,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAqB,CAAC;IACnE,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAChC,CAAC,CAA8C,EAAE,EAAE,CACjD,GAAG,CAAC,CAAC,YAAY,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,IAAI,SAAS,EAAE,CACxD,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,qBAAqB,CAAC,MAAc;IAC3C,6EAA6E;IAC7E,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAE3E,6EAA6E;IAC7E,+EAA+E;IAC/E,+EAA+E;IAC/E,2EAA2E;IAC3E,2EAA2E;IAC3E,sDAAsD;IACtD,MAAM,mBAAmB,GAAG;QAC1B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,MAAM,EAAE,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC;KAC7C,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE;iBACf,WAAW,CAAC,GAAG,CAAC;iBAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBAC7B,IAAI,EAAE;iBACN,OAAO,EAAE,CAAC;YACb,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC7C,kDAAkD;gBAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;oBACvB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,MAAc,EAAE,aAAqB;IAClE,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAE7C,MAAM,YAAY,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,+BAA+B;IACvE,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,aAAa,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IAEhD,gFAAgF;IAChF,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAElC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAoC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC;QAChG,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;IAC/D,CAAC;IAED,qCAAqC;IACrC,MAAM,QAAQ,GACZ,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC;IACjE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AAC/D,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAwB;IACzD,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAEzC,6EAA6E;IAC7E,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACjC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAEjB,6EAA6E;IAC7E,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAE5C,6EAA6E;IAC7E,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,OAAe,CAAC;IACpB,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAE3C,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,WAAW,CACnB,EAAE,EACF,kBAAkB,EAClB,qDAAqD,CACtD,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,aAAa,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,IAAI,WAAW,CAAC,EAAE,EAAE,kBAAkB,EAAE,sBAAsB,GAAG,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,uDAAuD;QACvD,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAClF,EAAE,CAAC,aAAa,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;QAC9C,OAAO,GAAG,gBAAgB,CAAC;QAC3B,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,UAAU,CAAC;QACrB,iEAAiE;QACjE,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,6EAA6E;IAC7E,MAAM,UAAU,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;IAE1E,6EAA6E;IAC7E,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,IAAI,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBACpC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,2EAA2E;QAC3E,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,qEAAqE;YACrE,sEAAsE;YACtE,8BAA8B;YAC9B,MAAM,IAAI,WAAW,CAAC,EAAE,EAAE,qBAAqB,EAAE,0BAA0B,GAAG,EAAE,CAAC,CAAC;QACpF,CAAC;QAED,4EAA4E;QAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,WAAW,CAAC,EAAE,EAAE,oBAAoB,EAAE,2CAA2C,CAAC,CAAC;QAC/F,CAAC;QAED,2EAA2E;QAC3E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACxE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,WAAW,CACnB,EAAE,EACF,mBAAmB,EACnB,sDAAsD,CACvD,CAAC;QACJ,CAAC;QAED,4EAA4E;QAC5E,IAAI,QAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAmB,CAAC;QAClF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,IAAI,WAAW,CAAC,EAAE,EAAE,iBAAiB,EAAE,oCAAoC,GAAG,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,2EAA2E;QAC3E,MAAM,YAAY,GAAG,yBAAyB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,WAAW,CACnB,EAAE,EACF,iBAAiB,EACjB,2CAA2C,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrE,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC;QAE5B,4EAA4E;QAC5E,iFAAiF;QACjF,yCAAyC;QACzC,IAAI,QAAQ,CAAC,SAAS,CAAC,YAAY,IAAI,IAAI,IAAI,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1F,MAAM,uBAAuB,GAAG;gBAC9B,GAAG,QAAQ;gBACX,SAAS,EAAE,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,EAAE;aACvD,CAAC;YACF,MAAM,YAAY,GAAG,cAAc,CACjC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC,CAC9D,CAAC;YACF,IAAI,YAAY,KAAK,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;gBACrD,MAAM,IAAI,WAAW,CACnB,EAAE,EACF,iBAAiB,EACjB,0EAA0E,CAC3E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;QAChE,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACjC,MAAM,eAAe,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC7E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,0DAA0D;gBAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,QAAQ,KAAK,CAAC,CAAC;oBAAE,SAAS;gBAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;gBACpD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7B,MAAM,IAAI,WAAW,CACnB,EAAE,EACF,qBAAqB,EACrB,+CAA+C,OAAO,EAAE,CACzD,CAAC;gBACJ,CAAC;gBACD,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC1C,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;oBAChC,MAAM,IAAI,WAAW,CAAC,EAAE,EAAE,qBAAqB,EAAE,6BAA6B,OAAO,EAAE,CAAC,CAAC;gBAC3F,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,uEAAuE;YACvE,4EAA4E;YAC5E,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAED,4EAA4E;QAC5E,MAAM,eAAe,GAAG,IAAI,CAAC;QAC7B,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YACrC,IAAI,EAAE,GAAwB,IAAI,CAAC;YACnC,IAAI,CAAC;gBACH,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,GAAG,EAEvC,CAAC;gBACd,IAAI,GAAG,EAAE,eAAe,KAAK,IAAI,EAAE,CAAC;oBAClC,MAAM,IAAI,WAAW,CACnB,EAAE,EACF,oBAAoB,EACpB,0CAA0C,OAAO,CAAC,QAAQ,EAAE,CAC7D,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,WAAW;oBAAE,MAAM,GAAG,CAAC;gBAC1C,MAAM,IAAI,WAAW,CACnB,EAAE,EACF,oBAAoB,EACpB,qDAAqD,OAAO,CAAC,QAAQ,EAAE,CACxE,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC;oBACH,EAAE,EAAE,KAAK,EAAE,CAAC;gBACd,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,MAAM,QAAQ,GAA0B,EAAE,CAAC;QAC3C,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;YAC3E,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,IAAI,gBAAgB,KAAK,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,IAAI,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBACpC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,OAAO;YACL,UAAU;YACV,QAAQ;YACR,QAAQ,EAAE;gBACR,cAAc;gBACd,cAAc;gBACd,SAAS;gBACT,eAAe;aAChB;YACD,QAAQ;SACT,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;QACV,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,IAAI,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;AACH,CAAC"}

package/dist/store/backup.js

@@ -0,0 +1,94 @@
+/**
+ * Numbered backup system for CLEO data files.
+ * Maintains a rotating window of recent backups for rollback protection.
+ * @epic T4454
+ * @task T4457
+ */
+import { copyFile, rename as fsRename, mkdir, readdir, stat, unlink } from 'node:fs/promises';
+import { basename, join } from 'node:path';
+import { ExitCode } from '@cleocode/contracts';
+import { CleoError } from '../errors.js';
+const DEFAULT_MAX_BACKUPS = 5;
+/**
+ * Create a numbered backup of a file.
+ * Rotates existing backups (file.1 -> file.2, etc.) and removes excess.
+ */
+export async function createBackup(filePath, backupDir, maxBackups = DEFAULT_MAX_BACKUPS) {
+    try {
+        await mkdir(backupDir, { recursive: true });
+        const fileName = basename(filePath);
+        // Check if source file exists
+        try {
+            await stat(filePath);
+        }
+        catch {
+            throw new CleoError(ExitCode.FILE_ERROR, `Cannot backup: source file not found: ${filePath}`);
+        }
+        // Rotate existing backups (shift numbers up)
+        for (let i = maxBackups; i >= 1; i--) {
+            const current = join(backupDir, `${fileName}.${i}`);
+            if (i === maxBackups) {
+                // Remove oldest backup
+                try {
+                    await unlink(current);
+                }
+                catch {
+                    // File may not exist
+                }
+            }
+            else {
+                const next = join(backupDir, `${fileName}.${i + 1}`);
+                try {
+                    await stat(current);
+                    await fsRename(current, next);
+                }
+                catch {
+                    // File may not exist
+                }
+            }
+        }
+        // Create new backup as .1
+        const backupPath = join(backupDir, `${fileName}.1`);
+        await copyFile(filePath, backupPath);
+        return backupPath;
+    }
+    catch (err) {
+        if (err instanceof CleoError)
+            throw err;
+        throw new CleoError(ExitCode.FILE_ERROR, `Backup failed for: ${filePath}`, { cause: err });
+    }
+}
+/**
+ * List existing backups for a file, sorted by number (newest first).
+ */
+export async function listBackups(fileName, backupDir) {
+    try {
+        const entries = await readdir(backupDir);
+        const prefix = `${fileName}.`;
+        return entries
+            .filter((e) => e.startsWith(prefix) && /^\d+$/.test(e.slice(prefix.length)))
+            .sort((a, b) => {
+            const numA = parseInt(a.slice(prefix.length), 10);
+            const numB = parseInt(b.slice(prefix.length), 10);
+            return numA - numB;
+        })
+            .map((e) => join(backupDir, e));
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Restore a file from its most recent backup.
+ * Returns the path of the backup that was restored.
+ */
+export async function restoreFromBackup(fileName, backupDir, targetPath) {
+    const backups = await listBackups(fileName, backupDir);
+    if (backups.length === 0) {
+        throw new CleoError(ExitCode.NOT_FOUND, `No backups found for: ${fileName}`);
+    }
+    const newest = backups[0];
+    await copyFile(newest, targetPath);
+    return newest;
+}
+//# sourceMappingURL=backup.js.map

package/dist/store/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/store/backup.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,SAAiB,EACjB,aAAqB,mBAAmB;IAExC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEpC,8BAA8B;QAC9B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,yCAAyC,QAAQ,EAAE,CAAC,CAAC;QAChG,CAAC;QAED,6CAA6C;QAC7C,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,IAAI,CAAC,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;gBACrB,uBAAuB;gBACvB,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,qBAAqB;gBACvB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrD,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;oBACpB,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAChC,CAAC;gBAAC,MAAM,CAAC;oBACP,qBAAqB;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,IAAI,CAAC,CAAC;QACpD,MAAM,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrC,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,SAAS;YAAE,MAAM,GAAG,CAAC;QACxC,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,SAAiB;IACnE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,GAAG,QAAQ,GAAG,CAAC;QAC9B,OAAO,OAAO;aACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;aAC3E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACb,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,OAAO,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC,CAAC;aACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAgB,EAChB,SAAiB,EACjB,UAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,yBAAyB,QAAQ,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;IAC3B,MAAM,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC"}