@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.11

package/dist/db-backup/admin-connection.util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-connection.util.js","sourceRoot":"","sources":["../../src/db-backup/admin-connection.util.ts"],"names":[],"mappings":";;;AAoRA,wDAcC;AAuID,kDA2CC;AA6BD,0CAYC;AAuCD,oCAMC;AA0BD,sDAYC;AAiDD,4DAEC;AAOD,oDAEC;AAuBD,oEAMC;AAoCD,4DAMC;AAkBD,0DAUC;AAcD,8DAUC;AAgBD,sDAQC;AAiBD,8CASC;AAOD,wCASC;AAkBD,oEAaC;AAsBD,wCASC;AAWD,oCAEC;AAoBD,oDAWC;AAWD,wCAQC;AAt8BD,2BAA4B;AAG5B,2DAAuD;AACvD,iDAAwE;AAExE,gFAAgF;AAChF,uDAAuD;AACvD,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,sEAAsE;AACtE,6EAA6E;AAC7E,6EAA6E;AAC7E,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,0EAA0E;AAC1E,4EAA4E;AAC5E,0EAA0E;AAC1E,sDAAsD;AACtD,yDAAyD;AACzD,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,yEAAyE;AACzE,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,2DAA2D;AAC3D,+EAA+E;AAC/E,2EAA2E;AAC3E,2DAA2D;AAC3D,EAAE;AACF,gFAAgF;AAChF,wCAAwC;AACxC,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,0EAA0E;AAC1E,kBAAkB;AAClB,EAAE;AACF,sEAAsE;AACtE,gFAAgF;AAChF,+EAA+E;AAC/E,2EAA2E;AAC3E,gFAAgF;AAEhF;;;;;;;;;GASG;AACU,QAAA,4BAA4B,GAAG,UAAU,CAAC;AAEvD;;;;;;;;;;;GAWG;AACU,QAAA,6BAA6B,GAAG,WAAW,CAAC;AAEzD;;;;;;;;;;;GAWG;AACU,QAAA,oBAAoB,GAAG,EAAE,CAAC;AAEvC;;;;GAIG;AACU,QAAA,cAAc,GAAG,WAAW,CAAC;AAE1C;;;;GAIG;AACU,QAAA,UAAU,GAAG,OAAO,CAAC;AAElC;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG,2BAA2B,CAAC;AAE5D;;;;;;;;GAQG;AACH,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAE9C;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAG,+CAA+C,CAAC;AAE9E,gFAAgF;AAChF,SAAS;AACT,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,wEAAwE;AACxE,2EAA2E;AAC3E,2EAA2E;AAC3E,+EAA+E;AAC/E,qDAAqD;AAErD;;;;;;;;GAQG;AACH,MAAa,8BAA+B,SAAQ,KAAK;IAClC;IAArB,YAAqB,UAAkB;QACrC,KAAK,CACH,IAAI,UAAU,qEAAqE;YACjF,oFAAoF;YACpF,qCAAqC;YACrC,GAAG,4BAAoB,cAAc,CACxC,CAAC;QANiB,eAAU,GAAV,UAAU,CAAQ;QAOrC,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;QAC7C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,8BAA8B,CAAC,SAAS,CAAC,CAAC;IACxE,CAAC;CACF;AAXD,wEAWC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAa,sBAAuB,SAAQ,KAAK;IAGpC;IAFX;IACE,6DAA6D;IACpD,IAAY;QAErB,KAAK,CACH,KAAK,IAAI,6EAA6E;YACpF,8EAA8E;YAC9E,mFAAmF;YACnF,yEAAyE,CAC5E,CAAC;QAPO,SAAI,GAAJ,IAAI,CAAQ;QAQrB,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;CACF;AAdD,wDAcC;AAED;;;;;;;GAOG;AACH,MAAa,2BAA4B,SAAQ,KAAK;IAC/B;IAArB,YAAqB,SAAiB;QACpC,KAAK,CACH,wEAAwE,SAAS,KAAK;YACpF,gFAAgF;YAChF,gCAAgC,CACnC,CAAC;QALiB,cAAS,GAAT,SAAS,CAAQ;QAMpC,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACrE,CAAC;CACF;AAVD,kEAUC;AA4BD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAgB,sBAAsB,CACpC,MAAmB,OAAO,CAAC,GAAG,EAC9B,sBAA8B,oCAA4B;IAE1D,MAAM,UAAU,GAAG,IAAA,kCAAmB,EAAC,GAAG,CAAC,CAAC;IAE5C,4EAA4E;IAC5E,qDAAqD;IACrD,MAAM,MAAM,GACV,mBAAmB,KAAK,UAAU,CAAC,QAAQ;QACzC,CAAC,CAAC,qCAA6B;QAC/B,CAAC,CAAC,mBAAmB,CAAC;IAE1B,OAAO,EAAE,GAAG,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;AAChF,CAAC;AA0CD;;;;;;;;;;;GAWG;AACU,QAAA,4BAA4B,GAAG,8BAA8B,CAAC;AAE3E;;;;;;;;;GASG;AACH,MAAM,yBAAyB,GAAuB,CAAC,MAAM,EAAE,EAAE,CAC/D,IAAI,WAAM,CAAC;IACT,IAAI,EAAE,MAAM,CAAC,IAAI;IACjB,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IACtC,IAAI,EAAE,MAAM,CAAC,IAAI;IACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;IACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;IACzB,GAAG,EAAE,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC;IACrC,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CACrE,CAAC,CAAC;AAEL;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CAAC,OAAsB;IAC9C,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC7F,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,aAAa;QACzD,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE;QAC9B,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC;AAyBD;;;;;;;;;;;;;;GAcG;AACI,KAAK,UAAU,mBAAmB,CACvC,MAAuB,EACvB,EAA4C,EAC5C,UAAsC,EAAE;IAExC,MAAM,EAAE,aAAa,GAAG,yBAAyB,EAAE,SAAS,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC;IAC7E,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAErC,IAAI,KAAiC,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QAEvB,wEAAwE;QACxE,sEAAsE;QACtE,qCAAqC;QACrC,MAAM,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAEhD,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QAE5C,wEAAwE;QACxE,2EAA2E;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,sBAAsB;QACtB,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,EAAE,CAAC,MAAM,CAAC;YACV,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBACtC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,2BAA2B,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBACxF,oEAAoE;gBACpE,+DAA+D;gBAC/D,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAClB,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAE7C,0EAA0E;QAC1E,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,cAAc;AACd,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAgB,eAAe,CAAC,UAAkB;IAChD,IACE,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC;QACzC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,4BAAoB,EAC5D,CAAC;QACD,MAAM,IAAI,8BAA8B,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,gDAAgD;IAChD,OAAO,IAAI,UAAU,GAAG,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,SAAgB,YAAY,CAAC,KAAa,EAAE,IAAI,GAAG,SAAS;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,IAAI,KAAK,GAAG,CAAC;AACtB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAgB,qBAAqB,CAAC,EAAQ;IAC5C,IAAI,CAAC,CAAC,EAAE,YAAY,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAE7B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,IAAI,GAAG,GAAG,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,wBAAwB,CAAC,IAAY,EAAE,MAAc,EAAE,EAAQ;IACtE,MAAM,IAAI,GAAG,GAAG,MAAM,GAAG,IAAA,oCAAgB,EAAC,EAAE,CAAC,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,4BAAoB,GAAG,IAAI,CAAC,MAAM,CAAC;IAEhD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,sEAAsE;QACtE,0EAA0E;QAC1E,aAAa;QACb,MAAM,IAAI,8BAA8B,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,gBAAgB;IAChB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC;IAEjC,mEAAmE;IACnE,6EAA6E;IAC7E,qEAAqE;IACrE,eAAe,CAAC,IAAI,CAAC,CAAC;IAEtB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAgB,wBAAwB,CAAC,YAAoB,EAAE,EAAQ;IACrE,OAAO,wBAAwB,CAAC,YAAY,EAAE,sBAAc,EAAE,EAAE,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,YAAoB,EAAE,EAAQ;IACjE,OAAO,wBAAwB,CAAC,YAAY,EAAE,kBAAU,EAAE,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,gFAAgF;AAChF,+CAA+C;AAC/C,gFAAgF;AAEhF;;;;;;;;;;;;;;;;GAgBG;AACI,KAAK,UAAU,4BAA4B,CAAC,MAAwB;IACzE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,2FAA2F,CAC5F,CAAC;IAEF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,KAAK,IAAI,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACI,KAAK,UAAU,wBAAwB,CAAC,MAAwB;IACrE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,6FAA6F,CAC9F,CAAC;IAEF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,KAAK,IAAI,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACI,KAAK,UAAU,uBAAuB,CAC3C,MAAwB;IAExB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,kHAAkH;QAChH,4CAA4C,CAC/C,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,KAAK,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,aAAa,EAAE,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;AAC3H,CAAC;AAED;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,yBAAyB,CAC7C,MAAwB,EACxB,IAAY;IAEZ,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,+DAA+D,EAC/D,CAAC,IAAI,CAAC,CACP,CAAC;IAEF,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,qBAAqB,CACzC,MAAwB,EACxB,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;IAEnC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACI,KAAK,UAAU,iBAAiB,CAAC,MAAwB;IAC9D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC;QAE7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,cAAc,CAClC,MAAwB,EACxB,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,sDAAsD,EAAE;QACxF,QAAQ;KACT,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACI,KAAK,UAAU,4BAA4B,CAChD,MAAwB,EACxB,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,0EAA0E;QACxE,gDAAgD,EAClD,CAAC,QAAQ,CAAC,CACX,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IACpC,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IAEnF,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,gFAAgF;AAChF,gCAAgC;AAChC,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,0EAA0E;AAC1E,6EAA6E;AAC7E,2DAA2D;AAE3D;;;;;;;;;GASG;AACI,KAAK,UAAU,cAAc,CAClC,MAAwB,EACxB,QAAgB,EAChB,UAAiC,EAAE;IAEnC,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IAEzF,MAAM,MAAM,CAAC,KAAK,CAAC,mBAAmB,eAAe,CAAC,QAAQ,CAAC,GAAG,QAAQ,EAAE,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,YAAY,CAAC,MAAwB,EAAE,QAAgB;IAC3E,MAAM,MAAM,CAAC,KAAK,CAAC,2BAA2B,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACI,KAAK,UAAU,oBAAoB,CACxC,MAAwB,EACxB,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,yDAAyD;QACvD,gDAAgD,EAClD,CAAC,QAAQ,CAAC,CACX,CAAC;IAEF,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;AAC5B,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,cAAc,CAClC,MAAwB,EACxB,IAAY,EACZ,EAAU;IAEV,MAAM,MAAM,CAAC,KAAK,CAChB,kBAAkB,eAAe,CAAC,IAAI,CAAC,cAAc,eAAe,CAAC,EAAE,CAAC,EAAE,CAC3E,CAAC;AACJ,CAAC"}

package/dist/db-backup/backup-target.d.ts

@@ -0,0 +1,222 @@
+import type { Readable, Writable } from 'node:stream';
+import type { StorageConfigService, StorageProvider } from '../storage/index';
+/**
+ * Injection token of the primary {@link BackupTarget}: where every archive is
+ * written, read back, downloaded from and deleted. Bound through
+ * `DbBackupModule.forRoot({ target })`; the default is an adapter over
+ * `STORAGE_PROVIDER`.
+ *
+ * @example
+ * ```ts
+ * constructor(@Inject(DB_BACKUP_TARGET) private readonly target: BackupTarget) {}
+ * ```
+ *
+ * @extensionPoint token
+ * @stability experimental
+ */
+export declare const DB_BACKUP_TARGET: unique symbol;
+/**
+ * Injection token of the mirror targets, as one array (empty when the app
+ * configured none). Bound through `DbBackupModule.forRoot({ mirrorTargets })`.
+ *
+ * @extensionPoint token
+ * @stability experimental
+ */
+export declare const DB_BACKUP_MIRROR_TARGETS: unique symbol;
+/**
+ * What the engine tells a target about the object it is about to receive.
+ *
+ * @stability experimental
+ */
+export interface BackupWriteMeta {
+    /** The object's media type (`application/octet-stream`: a custom-format archive has none of its own). */
+    readonly contentType: string;
+    /** Provenance to store on the object when the backend can (`runId`, `trigger`). Plain strings. */
+    readonly metadata: Readonly<Record<string, string>>;
+}
+/**
+ * A streaming write: the engine pipes the archive into `stream` and awaits
+ * `done`.
+ *
+ * `done` resolves once every byte is durably stored and rejects when the write
+ * failed. When `stream` is destroyed with an error (the dump died, the run was
+ * cancelled) `done` must reject, and the target must not leave a half-written
+ * object it can avoid (the engine also calls `delete(key)` on failure).
+ *
+ * @stability experimental
+ */
+export interface BackupSink {
+    /** The writable side. Honour backpressure: `write` returns `false` when the target is behind. */
+    readonly stream: Writable;
+    /** Settles when the object is fully stored (or the write failed). */
+    readonly done: Promise<void>;
+}
+/**
+ * One object a {@link BackupTarget} lists.
+ *
+ * @stability experimental
+ */
+export interface BackupTargetObject {
+    /** The full key, including the prefix. */
+    readonly key: string;
+    /** The object's size in bytes, when the backend reports it. */
+    readonly sizeBytes?: number;
+    /** When it was last written, when the backend reports it. */
+    readonly lastModified?: Date;
+}
+/**
+ * Options of {@link BackupTarget.signedDownloadUrl}.
+ *
+ * @stability experimental
+ */
+export interface BackupSignedUrlOptions {
+    /** How long the URL stays valid, in seconds. */
+    readonly expiresInSeconds: number;
+    /** The file name the browser should save the archive under. */
+    readonly filename: string;
+}
+/**
+ * Where database backup archives live: a streaming object store with a key.
+ *
+ * @example
+ * ```ts
+ * @Injectable()
+ * export class LocalDirBackupTarget implements BackupTarget {
+ *   readonly id = 'local-dir';
+ *   openWrite(key: string): BackupSink { const stream = createWriteStream(this.path(key)); return { stream, done: finished(stream) }; }
+ *   openRead(key: string): Promise<Readable> { return Promise.resolve(createReadStream(this.path(key))); }
+ *   delete(key: string): Promise<void> { return rm(this.path(key), { force: true }); }
+ *   async *list(prefix: string) { /* ... *\/ }
+ * }
+ * ```
+ *
+ * @extensionPoint token
+ * @stability experimental
+ */
+export interface BackupTarget {
+    /**
+     * The id recorded on every run (`database_backup_runs.storage_provider`) and
+     * compared with `databaseBackup.storageProvider`: a stable lowercase id
+     * (`'s3'`, `'local-dir'`). May change over time for a target that follows a
+     * setting (see {@link BackupTarget.refresh}).
+     */
+    readonly id: string;
+    /**
+     * Where the target points, recorded on every run as `database_backup_runs.bucket`
+     * (a bucket, a directory). Default: the {@link BackupTarget.id}.
+     */
+    readonly location?: string;
+    /**
+     * Re-reads the settings `id` and `location` depend on. Called before they are
+     * read for a new run; a target with a fixed identity omits it.
+     */
+    refresh?(): Promise<void>;
+    /**
+     * Opens a streaming write of the object `key`. See the file header.
+     *
+     * @param key - the server-chosen key.
+     * @param meta - the object's content type and provenance.
+     * @returns the sink.
+     */
+    openWrite(key: string, meta: BackupWriteMeta): BackupSink;
+    /**
+     * Opens a streaming read of the object `key`.
+     *
+     * @param key - the key.
+     * @returns the readable stream.
+     * @throws when the object does not exist.
+     */
+    openRead(key: string): Promise<Readable>;
+    /**
+     * Deletes the object `key`. A missing key is not an error.
+     *
+     * @param key - the key.
+     */
+    delete(key: string): Promise<void>;
+    /**
+     * Lists the objects under `prefix`, in no particular order.
+     *
+     * @param prefix - a key prefix (`database-backups/`).
+     * @returns the objects, lazily.
+     */
+    list(prefix: string): AsyncIterable<BackupTargetObject>;
+    /**
+     * A short-lived URL a browser can download the archive from, when the backend
+     * can sign one. Without it `GET /api/admin/db-backup/runs/:id/download-url`
+     * answers 400 for runs on this target; the archive is still restorable.
+     *
+     * @param key - the key.
+     * @param options - the expiry and the file name.
+     * @returns the URL.
+     */
+    signedDownloadUrl?(key: string, options: BackupSignedUrlOptions): Promise<string>;
+}
+/**
+ * The default {@link BackupTarget}: an adapter over the active
+ * `STORAGE_PROVIDER`, so the engine behaves exactly as it did before targets
+ * existed. `id` is the provider's `kind`, `location` its bucket, `refresh`
+ * re-reads the `storage` settings the default provider answers `kind` from, and
+ * `signedDownloadUrl` is the provider's signed GET.
+ *
+ * The storage provider interface has no listing; `list` uses the provider's
+ * `list` when it has one and otherwise throws a clear error (nothing in the
+ * engine calls it). Bind a target with a real `list` when the kit's listing
+ * scenario matters to you.
+ *
+ * @stability experimental
+ */
+export declare class StorageProviderBackupTarget implements BackupTarget {
+    private readonly storage;
+    private readonly storageConfig?;
+    /**
+     * @param storage - the active storage provider.
+     * @param storageConfig - when present, refreshed before `id` is read (the default provider's `kind` follows the `storage` settings).
+     */
+    constructor(storage: StorageProvider, storageConfig?: Pick<StorageConfigService, "activeProvider"> | undefined);
+    /** The provider's kind (`s3`, `r2`, `s3compatible` or an app driver's id). */
+    get id(): string;
+    /** The provider's bucket. */
+    get location(): string;
+    /** Refreshes the settings snapshot the default provider answers `kind` from. */
+    refresh(): Promise<void>;
+    openWrite(key: string, meta: BackupWriteMeta): BackupSink;
+    openRead(key: string): Promise<Readable>;
+    delete(key: string): Promise<void>;
+    list(prefix: string): AsyncIterable<BackupTargetObject>;
+    signedDownloadUrl(key: string, options: BackupSignedUrlOptions): Promise<string>;
+}
+/**
+ * Whether `target` is the default adapter over `STORAGE_PROVIDER`. The node
+ * data plane (a worker node's presigned PUT of the archive) writes through the
+ * storage provider, so it can take a backup only for this target.
+ *
+ * @param target - a backup target.
+ * @returns `true` for a {@link StorageProviderBackupTarget}.
+ *
+ * @stability experimental
+ */
+export declare function isStorageBackedTarget(target: BackupTarget): boolean;
+/**
+ * Validates a target at `forRoot` time and at bind time: every member the
+ * engine calls is present and the id is well formed.
+ *
+ * @param target - the candidate.
+ * @param where - what to call it in the error.
+ * @throws Error naming the missing member.
+ *
+ * @stability experimental
+ */
+export declare function assertBackupTarget(target: unknown, where: string): asserts target is BackupTarget;
+/**
+ * Validates the bound targets at boot: each is well formed and no two share an
+ * id. The default adapter is the platform's own class (its members exist) and
+ * its id is the storage provider's CURRENT kind, which follows the `storage`
+ * settings and is not settled at boot, so it is recorded for the collision
+ * check only when it can be read.
+ *
+ * @param primary - the primary target.
+ * @param mirrors - the mirror targets.
+ * @throws Error naming the malformed target or the duplicated id.
+ */
+export declare function validateBackupTargets(primary: BackupTarget, mirrors: readonly BackupTarget[]): void;
+//# sourceMappingURL=backup-target.d.ts.map

package/dist/db-backup/backup-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-target.d.ts","sourceRoot":"","sources":["../../src/db-backup/backup-target.ts"],"names":[],"mappings":"AAiDA,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAE9E;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,EAAE,OAAO,MAA4D,CAAC;AAEnG;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,EAAE,OAAO,MAAoE,CAAC;AAEnH;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,yGAAyG;IACzG,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,kGAAkG;IAClG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACrD;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,UAAU;IACzB,iGAAiG;IACjG,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,0CAA0C;IAC1C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,6DAA6D;IAC7D,QAAQ,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,gDAAgD;IAChD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;;;OAMG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,UAAU,CAAC;IAC1D;;;;;;OAMG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC;;;;OAIG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC;;;;;OAKG;IACH,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC,kBAAkB,CAAC,CAAC;IACxD;;;;;;;;OAQG;IACH,iBAAiB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACnF;AAED;;;;;;;;;;;;;GAaG;AACH,qBACa,2BAA4B,YAAW,YAAY;IAM5D,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;IANjC;;;OAGG;gBAEgB,OAAO,EAAE,eAAe,EACxB,aAAa,CAAC,EAAE,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,YAAA;IAG/E,8EAA8E;IAC9E,IAAI,EAAE,IAAI,MAAM,CAEf;IAED,6BAA6B;IAC7B,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,gFAAgF;IAC1E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAI9B,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,UAAU;IAiBzD,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAIxC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3B,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAAC,kBAAkB,CAAC;IAa9D,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC;CAMjF;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAEnE;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,CASjG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,YAAY,EAAE,GAAG,IAAI,CAsBnG"}

package/dist/db-backup/backup-target.js

@@ -0,0 +1,237 @@
+"use strict";
+// =============================================================================
+// The backup target port (PP-14.12)
+// =============================================================================
+//
+// WHERE AN ARCHIVE LIVES is one port, `DB_BACKUP_TARGET`, so an app can put its
+// backups somewhere the platform's object-storage drivers do not reach (a
+// filesystem, a vault, a tape gateway) and can keep a second copy elsewhere
+// (`mirrorTargets`), without editing the slice. The default is an adapter over
+// the active `STORAGE_PROVIDER` ({@link StorageProviderBackupTarget}), which is
+// exactly what the engine did before the port existed.
+//
+//   const DbBackupModule = PlatformDbBackupModule.forRoot({
+//     target: { useClass: VaultBackupTarget },          // optional: the primary
+//     mirrorTargets: [{ useClass: LocalDirBackupTarget }], // optional: copies
+//   });
+//
+// -----------------------------------------------------------------------------
+// THE RULES A TARGET HONOURS (the conformance kit asserts each)
+// -----------------------------------------------------------------------------
+//
+//   1. THE KEY IS THE SERVER'S. A target receives a key the engine built
+//      (`database-backups/<slug>/<yyyy>/<mm>/<file>.dump`, see
+//      `buildBackupStorageKey`) and stores the archive under it. It never
+//      chooses, rewrites or derives a key from anything else, and it refuses a
+//      key that would escape its own root (`..`, an absolute path).
+//   2. AN ARCHIVE IS NEVER BUFFERED. `openWrite` returns a streaming sink: the
+//      engine pipes `pg_dump`'s standard output into `stream` and awaits
+//      `done`. A target that collects the bytes and writes them at the end
+//      defeats the point (a database dump is gigabytes); the kit streams 20 MiB
+//      through every target and fails one whose memory grows with the object.
+//      `openRead` is a stream for the same reason.
+//   3. BOTH HALVES ARE AWAITED. A write succeeded when `done` resolved AND the
+//      dump exited 0 (the runner awaits both, and reads the object back through
+//      `openRead` to prove it is a readable archive before it marks the run
+//      `completed`).
+//   4. `delete` OF A MISSING KEY IS NOT AN ERROR (retention and the failure
+//      path both delete keys that may never have been written).
+//   5. A TARGET HOLDS NO SECRET IN A LOG OR AN ERROR. Its credentials come from
+//      the encrypted credential store, never an environment variable.
+//
+// A MIRROR IS A COPY, NOT A SECOND PRIMARY. It is written only after the
+// primary's archive was written, read back and verified, by streaming the
+// primary's bytes through `openRead` into the mirror's `openWrite` (the dump is
+// never run twice), inside the same `db.backup.run` job. A mirror that fails
+// is recorded (an `audit_events` row, a log line, the `backup.mirrors` Doctor
+// check) and never fails the run: the primary is already restorable.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StorageProviderBackupTarget = exports.DB_BACKUP_MIRROR_TARGETS = exports.DB_BACKUP_TARGET = void 0;
+exports.isStorageBackedTarget = isStorageBackedTarget;
+exports.assertBackupTarget = assertBackupTarget;
+exports.validateBackupTargets = validateBackupTargets;
+const common_1 = require("@nestjs/common");
+const node_stream_1 = require("node:stream");
+/**
+ * Injection token of the primary {@link BackupTarget}: where every archive is
+ * written, read back, downloaded from and deleted. Bound through
+ * `DbBackupModule.forRoot({ target })`; the default is an adapter over
+ * `STORAGE_PROVIDER`.
+ *
+ * @example
+ * ```ts
+ * constructor(@Inject(DB_BACKUP_TARGET) private readonly target: BackupTarget) {}
+ * ```
+ *
+ * @extensionPoint token
+ * @stability experimental
+ */
+exports.DB_BACKUP_TARGET = Symbol.for('@marinoscar/platform/db-backup/TARGET');
+/**
+ * Injection token of the mirror targets, as one array (empty when the app
+ * configured none). Bound through `DbBackupModule.forRoot({ mirrorTargets })`.
+ *
+ * @extensionPoint token
+ * @stability experimental
+ */
+exports.DB_BACKUP_MIRROR_TARGETS = Symbol.for('@marinoscar/platform/db-backup/MIRROR_TARGETS');
+/**
+ * The default {@link BackupTarget}: an adapter over the active
+ * `STORAGE_PROVIDER`, so the engine behaves exactly as it did before targets
+ * existed. `id` is the provider's `kind`, `location` its bucket, `refresh`
+ * re-reads the `storage` settings the default provider answers `kind` from, and
+ * `signedDownloadUrl` is the provider's signed GET.
+ *
+ * The storage provider interface has no listing; `list` uses the provider's
+ * `list` when it has one and otherwise throws a clear error (nothing in the
+ * engine calls it). Bind a target with a real `list` when the kit's listing
+ * scenario matters to you.
+ *
+ * @stability experimental
+ */
+let StorageProviderBackupTarget = class StorageProviderBackupTarget {
+    storage;
+    storageConfig;
+    /**
+     * @param storage - the active storage provider.
+     * @param storageConfig - when present, refreshed before `id` is read (the default provider's `kind` follows the `storage` settings).
+     */
+    constructor(storage, storageConfig) {
+        this.storage = storage;
+        this.storageConfig = storageConfig;
+    }
+    /** The provider's kind (`s3`, `r2`, `s3compatible` or an app driver's id). */
+    get id() {
+        return this.storage.kind;
+    }
+    /** The provider's bucket. */
+    get location() {
+        return this.storage.getBucket();
+    }
+    /** Refreshes the settings snapshot the default provider answers `kind` from. */
+    async refresh() {
+        await this.storageConfig?.activeProvider();
+    }
+    openWrite(key, meta) {
+        const stream = new node_stream_1.PassThrough();
+        const done = this.storage
+            .upload(key, stream, {
+            mimeType: meta.contentType,
+            // Deliberately no `contentLength`: a streamed dump's size is unknown
+            // until the last byte, which is exactly why it is streamed.
+            metadata: { ...meta.metadata },
+        })
+            .then(() => undefined);
+        // A failed upload must tear the writer down, or the dump keeps filling a
+        // stream nobody reads. `done` itself still rejects to its awaiter.
+        done.catch((error) => stream.destroy(error instanceof Error ? error : new Error(String(error))));
+        return { stream, done };
+    }
+    openRead(key) {
+        return this.storage.download(key);
+    }
+    delete(key) {
+        return this.storage.delete(key);
+    }
+    async *list(prefix) {
+        const lister = this.storage.list;
+        if (typeof lister !== 'function') {
+            throw new Error(`The storage provider "${this.storage.kind}" cannot list objects, so the default backup target cannot list "${prefix}". ` +
+                'Bind a BackupTarget with a list() through DbBackupModule.forRoot({ target }) if you need one.');
+        }
+        for await (const entry of lister.call(this.storage, prefix)) {
+            yield typeof entry === 'string' ? { key: entry } : entry;
+        }
+    }
+    signedDownloadUrl(key, options) {
+        return this.storage.getSignedDownloadUrl(key, {
+            expiresIn: options.expiresInSeconds,
+            responseContentDisposition: `attachment; filename="${options.filename}"`,
+        });
+    }
+};
+exports.StorageProviderBackupTarget = StorageProviderBackupTarget;
+exports.StorageProviderBackupTarget = StorageProviderBackupTarget = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [Object, Object])
+], StorageProviderBackupTarget);
+/**
+ * Whether `target` is the default adapter over `STORAGE_PROVIDER`. The node
+ * data plane (a worker node's presigned PUT of the archive) writes through the
+ * storage provider, so it can take a backup only for this target.
+ *
+ * @param target - a backup target.
+ * @returns `true` for a {@link StorageProviderBackupTarget}.
+ *
+ * @stability experimental
+ */
+function isStorageBackedTarget(target) {
+    return target instanceof StorageProviderBackupTarget;
+}
+/**
+ * Validates a target at `forRoot` time and at bind time: every member the
+ * engine calls is present and the id is well formed.
+ *
+ * @param target - the candidate.
+ * @param where - what to call it in the error.
+ * @throws Error naming the missing member.
+ *
+ * @stability experimental
+ */
+function assertBackupTarget(target, where) {
+    if (typeof target !== 'object' || target === null)
+        throw new Error(`${where}: a BackupTarget must be an object.`);
+    const t = target;
+    if (typeof t.id !== 'string' || !/^[a-z][a-z0-9_-]{0,47}$/.test(t.id)) {
+        throw new Error(`${where}: a BackupTarget needs a lowercase id such as "local-dir" (got ${JSON.stringify(t.id)}).`);
+    }
+    for (const member of ['openWrite', 'openRead', 'delete', 'list']) {
+        if (typeof t[member] !== 'function')
+            throw new Error(`${where}: a BackupTarget needs ${member}() (target "${t.id}").`);
+    }
+}
+/**
+ * Validates the bound targets at boot: each is well formed and no two share an
+ * id. The default adapter is the platform's own class (its members exist) and
+ * its id is the storage provider's CURRENT kind, which follows the `storage`
+ * settings and is not settled at boot, so it is recorded for the collision
+ * check only when it can be read.
+ *
+ * @param primary - the primary target.
+ * @param mirrors - the mirror targets.
+ * @throws Error naming the malformed target or the duplicated id.
+ */
+function validateBackupTargets(primary, mirrors) {
+    const seen = new Set();
+    if (isStorageBackedTarget(primary)) {
+        try {
+            seen.add(primary.id);
+        }
+        catch {
+            // not readable yet; a mirror cannot collide with an id that is not known
+        }
+    }
+    else {
+        assertBackupTarget(primary, 'DbBackupModule.forRoot({ target })');
+        seen.add(primary.id);
+    }
+    mirrors.forEach((mirror, index) => {
+        assertBackupTarget(mirror, `DbBackupModule.forRoot({ mirrorTargets[${index}] })`);
+        if (seen.has(mirror.id)) {
+            throw new Error(`DbBackupModule.forRoot(): mirror target "${mirror.id}" has the same id as another target. ` +
+                "Every target needs its own id (the primary's id is recorded on each run).");
+        }
+        seen.add(mirror.id);
+    });
+}
+//# sourceMappingURL=backup-target.js.map

package/dist/db-backup/backup-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-target.js","sourceRoot":"","sources":["../../src/db-backup/backup-target.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,oCAAoC;AACpC,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,0EAA0E;AAC1E,4EAA4E;AAC5E,+EAA+E;AAC/E,gFAAgF;AAChF,uDAAuD;AACvD,EAAE;AACF,4DAA4D;AAC5D,iFAAiF;AACjF,+EAA+E;AAC/E,QAAQ;AACR,EAAE;AACF,gFAAgF;AAChF,gEAAgE;AAChE,gFAAgF;AAChF,EAAE;AACF,yEAAyE;AACzE,+DAA+D;AAC/D,0EAA0E;AAC1E,+EAA+E;AAC/E,oEAAoE;AACpE,+EAA+E;AAC/E,yEAAyE;AACzE,2EAA2E;AAC3E,gFAAgF;AAChF,8EAA8E;AAC9E,mDAAmD;AACnD,+EAA+E;AAC/E,gFAAgF;AAChF,4EAA4E;AAC5E,qBAAqB;AACrB,4EAA4E;AAC5E,gEAAgE;AAChE,gFAAgF;AAChF,sEAAsE;AACtE,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,gFAAgF;AAChF,6EAA6E;AAC7E,8EAA8E;AAC9E,qEAAqE;AACrE,gFAAgF;;;;;;;;;;;;AAsQhF,sDAEC;AAYD,gDASC;AAaD,sDAsBC;AA9TD,2CAA4C;AAE5C,6CAA0C;AAI1C;;;;;;;;;;;;;GAaG;AACU,QAAA,gBAAgB,GAAkB,MAAM,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;AAEnG;;;;;;GAMG;AACU,QAAA,wBAAwB,GAAkB,MAAM,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;AAuInH;;;;;;;;;;;;;GAaG;AAEI,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IAMnB;IACA;IANnB;;;OAGG;IACH,YACmB,OAAwB,EACxB,aAA4D;QAD5D,YAAO,GAAP,OAAO,CAAiB;QACxB,kBAAa,GAAb,aAAa,CAA+C;IAC5E,CAAC;IAEJ,8EAA8E;IAC9E,IAAI,EAAE;QACJ,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,6BAA6B;IAC7B,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;IAClC,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,CAAC;IAC7C,CAAC;IAED,SAAS,CAAC,GAAW,EAAE,IAAqB;QAC1C,MAAM,MAAM,GAAG,IAAI,yBAAW,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO;aACtB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE;YACnB,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC1B,qEAAqE;YACrE,4DAA4D;YAC5D,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE;SAC/B,CAAC;aACD,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzB,yEAAyE;QACzE,mEAAmE;QACnE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1G,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IAED,QAAQ,CAAC,GAAW;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,CAAC,IAAI,CAAC,MAAc;QACxB,MAAM,MAAM,GAAI,IAAI,CAAC,OAAgG,CAAC,IAAI,CAAC;QAC3H,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,CAAC,OAAO,CAAC,IAAI,oEAAoE,MAAM,KAAK;gBACvH,+FAA+F,CAClG,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YAC5D,MAAM,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,GAAW,EAAE,OAA+B;QAC5D,OAAO,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,GAAG,EAAE;YAC5C,SAAS,EAAE,OAAO,CAAC,gBAAgB;YACnC,0BAA0B,EAAE,yBAAyB,OAAO,CAAC,QAAQ,GAAG;SACzE,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AArEY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,mBAAU,GAAE;;GACA,2BAA2B,CAqEvC;AAED;;;;;;;;;GASG;AACH,SAAgB,qBAAqB,CAAC,MAAoB;IACxD,OAAO,MAAM,YAAY,2BAA2B,CAAC;AACvD,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,kBAAkB,CAAC,MAAe,EAAE,KAAa;IAC/D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAC;IAClH,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kEAAkE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACtH,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAU,EAAE,CAAC;QAC1E,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0BAA0B,MAAM,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACzH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,qBAAqB,CAAC,OAAqB,EAAE,OAAgC;IAC3F,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;QAC3E,CAAC;IACH,CAAC;SAAM,CAAC;QACN,kBAAkB,CAAC,OAAO,EAAE,oCAAoC,CAAC,CAAC;QAClE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAChC,kBAAkB,CAAC,MAAM,EAAE,0CAA0C,KAAK,MAAM,CAAC,CAAC;QAClF,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,4CAA4C,MAAM,CAAC,EAAE,uCAAuC;gBAC1F,2EAA2E,CAC9E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/db-backup/carry-over.registry.d.ts

@@ -0,0 +1,58 @@
+import { type Registry } from '../core/index';
+/**
+ * One table whose rows must survive a restore.
+ *
+ * @example
+ * ```ts
+ * registerRestoreCarryOver({
+ *   id: 'android_app_releases',
+ *   order: 10,
+ *   exportSql: 'SELECT * FROM android_app_releases',
+ *   reinsertSql:
+ *     'INSERT INTO android_app_releases SELECT * FROM jsonb_populate_record(NULL::android_app_releases, $1::jsonb) ' +
+ *     'ON CONFLICT (id) DO UPDATE SET is_current = EXCLUDED.is_current',
+ * });
+ * ```
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+export interface RestoreCarryOver {
+    /** Stable id, e.g. the table name (`android_app_releases`). */
+    readonly id: string;
+    /** Read from the live database before the swap; every row it returns is carried. */
+    readonly exportSql: string;
+    /** Run on the promoted database after the swap, once per row, with the row as JSON in `$1`. */
+    readonly reinsertSql: string;
+    /** Foreign-key order among the extra carries: lower runs first. */
+    readonly order: number;
+}
+/**
+ * The registry of {@link RestoreCarryOver} entries, listed in ascending
+ * `order`. A duplicate id is refused; frozen after bootstrap.
+ *
+ * @stability experimental
+ */
+export declare const restoreCarryOverRegistry: Registry<RestoreCarryOver>;
+/**
+ * Registers one {@link RestoreCarryOver}.
+ *
+ * @param entry - the carry.
+ * @throws RegistryError on a duplicate id, an invalid entry or a frozen registry.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+export declare function registerRestoreCarryOver(entry: RestoreCarryOver): void;
+/**
+ * Registers each entry not already registered with the identical definition
+ * (so `forRoot({ extraCarryOver })` and an app's own file may name the same
+ * carry). A different definition under a registered id is still refused.
+ *
+ * @param entries - the carries.
+ * @throws RegistryError as {@link registerRestoreCarryOver} does.
+ *
+ * @stability experimental
+ */
+export declare function registerRestoreCarryOvers(entries: readonly RestoreCarryOver[]): void;
+//# sourceMappingURL=carry-over.registry.d.ts.map

package/dist/db-backup/carry-over.registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"carry-over.registry.d.ts","sourceRoot":"","sources":["../../src/db-backup/carry-over.registry.ts"],"names":[],"mappings":"AAiCA,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,+FAA+F;IAC/F,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,mEAAmE;IACnE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAcD;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,EAAE,QAAQ,CAAC,gBAAgB,CAK9D,CAAC;AAEH;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAEtE;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,GAAG,IAAI,CAapF"}

package/dist/db-backup/carry-over.registry.js

@@ -0,0 +1,96 @@
+"use strict";
+// =============================================================================
+// The restore carry-over registry (issue #740, PP-8.7)
+// =============================================================================
+//
+// A restore replaces the live database with an archive, so every row written
+// after that archive was taken is gone, by design. A few tables must survive
+// it anyway: the backup catalog itself (or the deployment forgets every backup
+// newer than the archive), the restore's own job row and its completion audit
+// row. Those four are BUILT IN (`database-restore.service.ts`, "Catalog
+// carry-over") and stay there: their SQL is typed, ordered and argued
+// statement by statement.
+//
+// An app with a table of the same kind (a record of something that happened
+// OUTSIDE the database, such as an uploaded release artefact) registers a
+// `RestoreCarryOver` here instead of editing the restore service:
+//
+//   - `exportSql` runs on the LIVE database before the swap, in a session with
+//     `app.rls_bypass` set transaction-locally (so an org-owned table is read
+//     in full); every row it returns is carried;
+//   - `reinsertSql` runs on the PROMOTED database after the swap, once per
+//     carried row, with that row as JSON in `$1` (`$1::jsonb`), in the same
+//     kind of session. Write it as an upsert (`ON CONFLICT (id) DO UPDATE`):
+//     the archive usually holds an older copy of the same row.
+//
+// Carries run after the built-in four, in ascending `order` (ties keep
+// registration order). Like the built-in carry, a failing extra carry is
+// logged as CRITICAL and never throws: the swap has already happened.
+//
+// FROZEN AFTER BOOTSTRAP (the #675 primitive): register from a module-level
+// file the app imports before `NestFactory.create`, or through
+// `DbBackupModule.forRoot({ extraCarryOver })`.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.restoreCarryOverRegistry = void 0;
+exports.registerRestoreCarryOver = registerRestoreCarryOver;
+exports.registerRestoreCarryOvers = registerRestoreCarryOvers;
+const index_1 = require("../core/index");
+function assertCarry(entry) {
+    if (typeof entry.exportSql !== 'string' || entry.exportSql.trim() === '') {
+        throw new Error(`restore carry-over "${entry.id}" needs a non-empty exportSql`);
+    }
+    if (typeof entry.reinsertSql !== 'string' || !entry.reinsertSql.includes('$1')) {
+        throw new Error(`restore carry-over "${entry.id}" needs a reinsertSql that binds the row as $1`);
+    }
+    if (!Number.isFinite(entry.order)) {
+        throw new Error(`restore carry-over "${entry.id}" needs a finite order`);
+    }
+}
+/**
+ * The registry of {@link RestoreCarryOver} entries, listed in ascending
+ * `order`. A duplicate id is refused; frozen after bootstrap.
+ *
+ * @stability experimental
+ */
+exports.restoreCarryOverRegistry = (0, index_1.defineRegistry)({
+    name: 'db-backup-restore-carry-over',
+    idOf: (entry) => entry.id,
+    validate: (entry) => assertCarry(entry),
+    order: (a, b) => a.order - b.order,
+});
+/**
+ * Registers one {@link RestoreCarryOver}.
+ *
+ * @param entry - the carry.
+ * @throws RegistryError on a duplicate id, an invalid entry or a frozen registry.
+ *
+ * @extensionPoint registry
+ * @stability experimental
+ */
+function registerRestoreCarryOver(entry) {
+    exports.restoreCarryOverRegistry.register(entry);
+}
+/**
+ * Registers each entry not already registered with the identical definition
+ * (so `forRoot({ extraCarryOver })` and an app's own file may name the same
+ * carry). A different definition under a registered id is still refused.
+ *
+ * @param entries - the carries.
+ * @throws RegistryError as {@link registerRestoreCarryOver} does.
+ *
+ * @stability experimental
+ */
+function registerRestoreCarryOvers(entries) {
+    for (const entry of entries) {
+        const existing = exports.restoreCarryOverRegistry.has(entry.id) ? exports.restoreCarryOverRegistry.get(entry.id) : undefined;
+        if (existing !== undefined &&
+            existing.exportSql === entry.exportSql &&
+            existing.reinsertSql === entry.reinsertSql &&
+            existing.order === entry.order) {
+            continue;
+        }
+        exports.restoreCarryOverRegistry.register(entry);
+    }
+}
+//# sourceMappingURL=carry-over.registry.js.map

package/dist/db-backup/carry-over.registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"carry-over.registry.js","sourceRoot":"","sources":["../../src/db-backup/carry-over.registry.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,uDAAuD;AACvD,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,wEAAwE;AACxE,sEAAsE;AACtE,0BAA0B;AAC1B,EAAE;AACF,4EAA4E;AAC5E,0EAA0E;AAC1E,kEAAkE;AAClE,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,iDAAiD;AACjD,2EAA2E;AAC3E,4EAA4E;AAC5E,6EAA6E;AAC7E,+DAA+D;AAC/D,EAAE;AACF,uEAAuE;AACvE,yEAAyE;AACzE,sEAAsE;AACtE,EAAE;AACF,4EAA4E;AAC5E,+DAA+D;AAC/D,gDAAgD;AAChD,gFAAgF;;;AAmEhF,4DAEC;AAYD,8DAaC;AA5FD,yCAA8D;AA+B9D,SAAS,WAAW,CAAC,KAAuB;IAC1C,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,CAAC,EAAE,+BAA+B,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,CAAC,EAAE,gDAAgD,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACU,QAAA,wBAAwB,GAA+B,IAAA,sBAAc,EAAmB;IACnG,IAAI,EAAE,8BAA8B;IACpC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE;IACzB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK;CACnC,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,SAAgB,wBAAwB,CAAC,KAAuB;IAC9D,gCAAwB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,yBAAyB,CAAC,OAAoC;IAC5E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,gCAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,gCAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7G,IACE,QAAQ,KAAK,SAAS;YACtB,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YACtC,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;YAC1C,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAC9B,CAAC;YACD,SAAS;QACX,CAAC;QACD,gCAAwB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC"}