@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.11

package/dist/db-backup/handlers/db-restore-old-db-drop.handler.js

@@ -0,0 +1,122 @@
+"use strict";
+// =============================================================================
+// `db.restore.old-db-drop` — dropping databases a restore displaced, as a queue
+// job (issue #353, epic #345)
+// =============================================================================
+//
+// A retained database is a FULL SECOND COPY of the production database, kept so
+// that rolling a restore back costs one rename instead of a multi-hour replay
+// (#285). Something has to drop it when `databaseBackup.oldDatabaseRetentionHours`
+// closes, and until #353 that something was the third duty of
+// `DatabaseBackupScheduleTask`'s ten-minute tick, inline.
+//
+// It is a job now for the reason every other conversion in #353 is: `DROP
+// DATABASE` against a copy of a production database is not a statement whose
+// duration nobody should have to account for. It can block for as long as one
+// session somebody left open, it can fail for reasons an operator needs to see,
+// and "did the displaced database get cleaned up?" deserves a better answer
+// than a log grep on whichever replica held the timer. As a job it has a
+// duration, a `lastError` and a retry budget.
+//
+// -----------------------------------------------------------------------------
+// THE WORK ITSELF DID NOT MOVE, AND MUST NOT
+// -----------------------------------------------------------------------------
+//
+// `DatabaseRestoreService.dropExpiredOldDatabases` stays where it is and this
+// handler calls it, exactly as the cron did. The restore service owns the admin
+// connection, the identifier rules, the live-database guard and the seam, and a
+// second place that issues `DROP DATABASE` is a second place to get the guard
+// wrong. Read that method's header for why the sweep is ROW-DRIVEN rather than
+// name-driven — it is the reason this job will never drop a database an
+// operator created by hand from the runbook's guided command block.
+//
+// -----------------------------------------------------------------------------
+// SERVER-ONLY, PERMANENTLY, FOR THE SAME REASON THE RESTORE IS
+// -----------------------------------------------------------------------------
+//
+// Neither `nodeResultSchema` nor `persistNodeResult`, so
+// `JobHandlerRegistry.serverOnlyTypes()` derives server-only and nothing has to
+// enforce it. It runs an ADMIN CONNECTION ON THE `postgres` MAINTENANCE
+// DATABASE and drops databases with it. That is the most privileged credential
+// this application ever holds, and the node plane's founding constraint is that
+// a node holds none (`docs/specs/worker-nodes.md` §1). There is no version of
+// this work that belongs on a remote machine.
+//
+// NO PROFILE: the sweep is idempotent (a database already dropped is skipped by
+// the `databaseExists` check) and per-row failures are already swallowed inside
+// the service, so the deployment-wide timeout and attempt budget are right.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var DatabaseRestoreOldDbDropHandler_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DatabaseRestoreOldDbDropHandler = exports.DB_RESTORE_OLD_DB_DROP_TYPE = void 0;
+const common_1 = require("@nestjs/common");
+const index_1 = require("../../jobs/index");
+const index_2 = require("../../settings/index");
+const database_restore_service_1 = require("../database-restore.service");
+/**
+ * The handler key, and therefore the `Job.type` every old-database-drop row
+ * carries. PERMANENT — rows outlive handlers. Exported so the scheduling task
+ * asks about the same string it queues.
+ *
+ * @stability experimental
+ */
+exports.DB_RESTORE_OLD_DB_DROP_TYPE = 'db.restore.old-db-drop';
+/** @stability experimental */
+let DatabaseRestoreOldDbDropHandler = DatabaseRestoreOldDbDropHandler_1 = class DatabaseRestoreOldDbDropHandler {
+    registry;
+    settings;
+    restore;
+    logger = new common_1.Logger(DatabaseRestoreOldDbDropHandler_1.name);
+    type = exports.DB_RESTORE_OLD_DB_DROP_TYPE;
+    label = 'Restore cleanup';
+    constructor(registry, settings, restore) {
+        this.registry = registry;
+        this.settings = settings;
+        this.restore = restore;
+    }
+    /** Self-registration — the only wiring a handler needs. */
+    onModuleInit() {
+        this.registry.register(this);
+    }
+    /**
+     * Drops every `<live>_old_<ts>` database past its retention window.
+     *
+     * THROWS TO FAIL. The cron this replaced caught and logged, because a throw
+     * out of a `@Cron` handler is an unhandled rejection; here the worker above
+     * turns a rejection into `lastError` plus a retry, and swallowing would report
+     * a sweep that never ran as `succeeded`. Note that a SINGLE database that
+     * could not be dropped is not a failure — the service swallows those per row
+     * and the next sweep retries them — so a throw out of here means the settings
+     * read or the admin connection failed, which is exactly what an operator
+     * should see.
+     */
+    async process(job) {
+        const policy = await this.settings.getDatabaseBackupPolicy();
+        const dropped = await this.restore.dropExpiredOldDatabases(policy, new Date());
+        if (dropped > 0) {
+            this.logger.warn(`Retained-database sweep ${job.id}: dropped ${dropped} database(s) displaced by a ` +
+                `restore and past ${policy.oldDatabaseRetentionHours}h; rolling those restores ` +
+                'back now means restoring an archive rather than renaming a database');
+        }
+        else {
+            this.logger.debug(`Retained-database sweep ${job.id}: no displaced database is past its retention`);
+        }
+    }
+};
+exports.DatabaseRestoreOldDbDropHandler = DatabaseRestoreOldDbDropHandler;
+exports.DatabaseRestoreOldDbDropHandler = DatabaseRestoreOldDbDropHandler = DatabaseRestoreOldDbDropHandler_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [index_1.JobHandlerRegistry,
+        index_2.SystemSettingsService,
+        database_restore_service_1.DatabaseRestoreService])
+], DatabaseRestoreOldDbDropHandler);
+//# sourceMappingURL=db-restore-old-db-drop.handler.js.map

package/dist/db-backup/handlers/db-restore-old-db-drop.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-restore-old-db-drop.handler.js","sourceRoot":"","sources":["../../../src/db-backup/handlers/db-restore-old-db-drop.handler.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,mFAAmF;AACnF,8DAA8D;AAC9D,0DAA0D;AAC1D,EAAE;AACF,0EAA0E;AAC1E,6EAA6E;AAC7E,8EAA8E;AAC9E,gFAAgF;AAChF,4EAA4E;AAC5E,yEAAyE;AACzE,8CAA8C;AAC9C,EAAE;AACF,gFAAgF;AAChF,6CAA6C;AAC7C,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,gFAAgF;AAChF,8EAA8E;AAC9E,+EAA+E;AAC/E,wEAAwE;AACxE,oEAAoE;AACpE,EAAE;AACF,gFAAgF;AAChF,+DAA+D;AAC/D,gFAAgF;AAChF,EAAE;AACF,yDAAyD;AACzD,gFAAgF;AAChF,wEAAwE;AACxE,+EAA+E;AAC/E,gFAAgF;AAChF,8EAA8E;AAC9E,8CAA8C;AAC9C,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,4EAA4E;AAC5E,gFAAgF;;;;;;;;;;;;;AAEhF,2CAAkE;AAIlE,4CAAsD;AACtD,gDAA6D;AAC7D,0EAAqE;AAErE;;;;;;GAMG;AACU,QAAA,2BAA2B,GAAG,wBAAwB,CAAC;AAEpE,8BAA8B;AAEvB,IAAM,+BAA+B,uCAArC,MAAM,+BAA+B;IAQvB;IACA;IACA;IATF,MAAM,GAAG,IAAI,eAAM,CAAC,iCAA+B,CAAC,IAAI,CAAC,CAAC;IAElE,IAAI,GAAG,mCAA2B,CAAC;IAEnC,KAAK,GAAG,iBAAiB,CAAC;IAEnC,YACmB,QAA4B,EAC5B,QAA+B,EAC/B,OAA+B;QAF/B,aAAQ,GAAR,QAAQ,CAAoB;QAC5B,aAAQ,GAAR,QAAQ,CAAuB;QAC/B,YAAO,GAAP,OAAO,CAAwB;IAC/C,CAAC;IAEJ,2DAA2D;IAC3D,YAAY;QACV,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,OAAO,CAAC,GAAQ;QACpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,uBAAuB,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAE/E,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,2BAA2B,GAAG,CAAC,EAAE,aAAa,OAAO,8BAA8B;gBACjF,oBAAoB,MAAM,CAAC,yBAAyB,4BAA4B;gBAChF,qEAAqE,CACxE,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,2BAA2B,GAAG,CAAC,EAAE,+CAA+C,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AA9CY,0EAA+B;0CAA/B,+BAA+B;IAD3C,IAAA,mBAAU,GAAE;qCASkB,0BAAkB;QAClB,6BAAqB;QACtB,iDAAsB;GAVvC,+BAA+B,CA8C3C"}

package/dist/db-backup/handlers/db-restore-run.handler.d.ts

@@ -0,0 +1,55 @@
+import { OnModuleInit } from '@nestjs/common';
+import type { Job } from '../../jobs/index';
+import { JobHandler } from '../../jobs/index';
+import type { JobExecutionProfile } from '../../jobs/index';
+import { JobHandlerRegistry } from '../../jobs/index';
+import { DbBackupRestoreGate } from '../restore-gate';
+import { DatabaseRestoreService } from '../database-restore.service';
+/**
+ * The wall-clock ceiling for one restore, in milliseconds.
+ *
+ * SIX HOURS — the same number `BACKUP_JOB_MAX_RUNTIME_MS` uses, and chosen to be
+ * uninteresting rather than tight for the same reason. ⚠ IT IS ALSO THE LEASE,
+ * INDIRECTLY: `resolveJobLeaseMs` derives the claim's lease from this number, so
+ * raising it lengthens how long a dead executor's claim survives before the
+ * reaper reclaims it. That coupling is deliberate — see
+ * `job-execution-profile.ts` for why a lease may not be declared separately.
+ *
+ * @stability experimental
+ */
+export declare const RESTORE_JOB_MAX_RUNTIME_MS: number;
+/** @stability experimental */
+export declare class DatabaseRestoreRunHandler implements JobHandler, OnModuleInit {
+    private readonly registry;
+    private readonly restore;
+    private readonly deployment;
+    private readonly logger;
+    /**
+     * Imported from the service rather than written out here, because the
+     * enqueueing side and the executing side must agree on it exactly and only one
+     * of the two can own the definition. See `DB_RESTORE_RUN_TYPE`.
+     */
+    readonly type = "db.restore.run";
+    readonly label = "Database restore";
+    /**
+     * The two numbers this type is unlike the rest of the queue in — and there
+     * will only ever be two. See the file header for the argument behind each.
+     */
+    readonly profile: JobExecutionProfile;
+    constructor(registry: JobHandlerRegistry, restore: DatabaseRestoreService, deployment: DbBackupRestoreGate);
+    /** Self-registration — the only wiring a handler needs. */
+    onModuleInit(): void;
+    /**
+     * Replays the archive named in the payload and swaps it into place.
+     *
+     * ⚠ ON SUCCESS THIS NEVER RETURNS — the process exits inside the swap, having
+     * already written this job's own terminal row into the promoted database. See
+     * the file header.
+     *
+     * On failure it throws, after `executeRestore` has recorded what happened on
+     * the run's restore columns. With `maxAttempts: 1` the worker turns that into
+     * a terminal `failed` and never a retry.
+     */
+    process(job: Job): Promise<void>;
+}
+//# sourceMappingURL=db-restore-run.handler.d.ts.map

package/dist/db-backup/handlers/db-restore-run.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-restore-run.handler.d.ts","sourceRoot":"","sources":["../../../src/db-backup/handlers/db-restore-run.handler.ts"],"names":[],"mappings":"AA4GA,OAAO,EAAsB,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAuB,MAAM,6BAA6B,CAAC;AAE1F;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,0BAA0B,QAAqB,CAAC;AAE7D,8BAA8B;AAC9B,qBACa,yBAA0B,YAAW,UAAU,EAAE,YAAY;IAqBtE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAGxB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAxB7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8C;IAErE;;;;OAIG;IACH,QAAQ,CAAC,IAAI,oBAAuB;IACpC,QAAQ,CAAC,KAAK,sBAAsB;IAEpC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAGnC;gBAGiB,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,sBAAsB,EAG/B,UAAU,EAAE,mBAAmB;IAGlD,2DAA2D;IAC3D,YAAY,IAAI,IAAI;IAIpB;;;;;;;;;;OAUG;IACG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;CAuBvC"}

package/dist/db-backup/handlers/db-restore-run.handler.js

@@ -0,0 +1,207 @@
+"use strict";
+// =============================================================================
+// `db.restore.run` — replacing the live database, as a queue job
+// (issue #353, epic #345)
+// =============================================================================
+//
+// The last of the two genuinely long-running detached operations in this
+// application (`grep -rn "void this\." apps/api/src` found exactly two: the
+// backup, moved by #351, and this). Until now `DatabaseRestoreService
+// .startRestore` ended in `void this.executeRestore(...)`: a promise nothing
+// owned, running for hours, absent from `GET /api/admin/jobs`, holding no
+// worker slot, bounded by no timeout, and — on a process that restarted
+// mid-replay — leaving nothing behind that any part of the system would ever
+// come back to. It is a job now, and it gets the queue's accounting like
+// everything else.
+//
+// -----------------------------------------------------------------------------
+// ⚠ SERVER-ONLY. PERMANENTLY. THIS IS NOT A DEFAULT, IT IS A DECISION.
+// -----------------------------------------------------------------------------
+//
+// This handler carries `process()` and NEITHER `nodeResultSchema` NOR
+// `persistNodeResult`, so `JobHandlerRegistry.serverOnlyTypes()` DERIVES
+// server-only and nothing anywhere has to enforce it — the same construction
+// `job-handler.interface.ts` chose over a `nodeEligible: boolean` flag, and the
+// reason there is no line of code in the nodes module mentioning this type.
+//
+// The reason it must never become node-eligible, stated once so nobody has to
+// reconstruct it:
+//
+//   - IT RENAMES THE LIVE DATABASE. Twice, and the window between the two
+//     renames is a window in which no database exists under the application's
+//     name at all.
+//   - IT TERMINATES EVERY POOLED CONNECTION on that database, including this
+//     application's own, because a rename fails while any session is attached.
+//   - IT NEEDS `CREATEDB`, and it runs its DDL over an ADMIN CONNECTION ON THE
+//     `postgres` MAINTENANCE DATABASE — the most privileged credential this
+//     deployment has. The node plane's founding constraint is that a node holds
+//     NO credentials (`docs/specs/worker-nodes.md` §1); the secret broker (#349)
+//     exists to mint a SHORT-LIVED READ-ONLY role for a `pg_dump`, and there is
+//     no version of it that could mint this.
+//   - IT ENDS BY EXITING THE PROCESS, so that a supervisor restarts the API with
+//     a connection pool built against the promoted database. A remote executor
+//     exiting ITS process would achieve nothing at all: the process that must
+//     restart is this one.
+//
+// None of that is work a remote machine may do, and `apps/api/test/jobs/`'s
+// server-only assertion pins it so a future member added to this class cannot
+// quietly make it claimable.
+//
+// -----------------------------------------------------------------------------
+// ⚠ THE PROFILE: SIX HOURS, AND EXACTLY ONE ATTEMPT
+// -----------------------------------------------------------------------------
+//
+// `maxAttempts: 1` IS THE MOST IMPORTANT LINE IN THIS FILE. `attempts` is
+// charged AT CLAIM TIME (`job-claim.service.ts`), so a restore whose executor
+// dies has already spent its only attempt: the lease expires, the reaper finds
+// it, and the give-up phase permanently FAILS the row instead of requeueing it.
+// That is the behaviour this type must have, because A REQUEUED RESTORE WOULD
+// REPLAY A RESTORE THAT MAY ALREADY HAVE SUCCEEDED — unattended, against the
+// database it just promoted, from an archive that is now older than the live
+// data. It is the worst outcome available anywhere in this epic, and
+// `resolveMaxAttempts` reading this number on BOTH give-up paths (the terminal
+// service and the reaper) is what makes "never automatically retried" a
+// property the queue enforces rather than a property of nobody having written
+// the retry yet.
+//
+// `maxRuntimeMs: 6h` matches the backup's, and for the same reason: a restore
+// is a download, a `pg_restore -j` replay and a verification pass over a
+// database whose size nobody here knows. It is not a target, it is the point
+// past which "still replaying" stops being a credible explanation. The lease is
+// DERIVED from it (`resolveJobLeaseMs`), never declared beside it, so the
+// reaper's deadline is longer than the permitted runtime by construction.
+//
+// -----------------------------------------------------------------------------
+// ⚠ `process()` DOES NOT RETURN ON THE SUCCESS PATH, AND THAT IS HANDLED
+// -----------------------------------------------------------------------------
+//
+// The swap ends in `DatabaseRestoreSeam.exitProcess(0)`, inside `process()`. So
+// on the path where everything works, this method never returns, the worker's
+// `completeSucceeded` never runs, and — left alone — the `jobs` row would sit
+// `running` with a live lease until the restarted process's reaper found it and,
+// under `maxAttempts: 1`, marked a SUCCESSFUL restore `failed`.
+//
+// The terminal write is therefore performed by the restore itself, as part of
+// the catalog carried across the rename: see `CarriedJob` and `CARRY_JOB_SQL` in
+// `database-restore.service.ts` for the full ordering argument. In one line: the
+// settled row is written into the PROMOTED database, after both renames have
+// succeeded and before the exit, so it lands if and only if the restore actually
+// happened. `test/db-backup/restore-job-settlement.spec.ts` pins it.
+//
+// A harmless consequence worth knowing about: the worker's lease-renewal ticker
+// may fire between the rename and the exit, find the row already `succeeded`
+// (or, for the few milliseconds of the rename window, find no database), and log
+// that the lease could not be renewed. It is correct — this worker no longer
+// holds the row, because the row is finished — and the process exits moments
+// later.
+//
+// -----------------------------------------------------------------------------
+// THE GATES ARE NOT RE-RUN HERE
+// -----------------------------------------------------------------------------
+//
+// `startRestore` runs the pre-flight before it enqueues, and its VERDICT — the
+// two database names and the effective rollback mode — travels in the payload.
+// See `RestoreJobPayload`: re-deriving those names from a later clock would make
+// the API response, the run row and the DDL name three different databases. The
+// run ROW is re-read at run time, because the payload carries identifiers and
+// not copies.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var DatabaseRestoreRunHandler_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DatabaseRestoreRunHandler = exports.RESTORE_JOB_MAX_RUNTIME_MS = void 0;
+const common_1 = require("@nestjs/common");
+const index_1 = require("../../jobs/index");
+const restore_gate_1 = require("../restore-gate");
+const database_restore_service_1 = require("../database-restore.service");
+/**
+ * The wall-clock ceiling for one restore, in milliseconds.
+ *
+ * SIX HOURS — the same number `BACKUP_JOB_MAX_RUNTIME_MS` uses, and chosen to be
+ * uninteresting rather than tight for the same reason. ⚠ IT IS ALSO THE LEASE,
+ * INDIRECTLY: `resolveJobLeaseMs` derives the claim's lease from this number, so
+ * raising it lengthens how long a dead executor's claim survives before the
+ * reaper reclaims it. That coupling is deliberate — see
+ * `job-execution-profile.ts` for why a lease may not be declared separately.
+ *
+ * @stability experimental
+ */
+exports.RESTORE_JOB_MAX_RUNTIME_MS = 6 * 60 * 60 * 1000;
+/** @stability experimental */
+let DatabaseRestoreRunHandler = DatabaseRestoreRunHandler_1 = class DatabaseRestoreRunHandler {
+    registry;
+    restore;
+    deployment;
+    logger = new common_1.Logger(DatabaseRestoreRunHandler_1.name);
+    /**
+     * Imported from the service rather than written out here, because the
+     * enqueueing side and the executing side must agree on it exactly and only one
+     * of the two can own the definition. See `DB_RESTORE_RUN_TYPE`.
+     */
+    type = database_restore_service_1.DB_RESTORE_RUN_TYPE;
+    label = 'Database restore';
+    /**
+     * The two numbers this type is unlike the rest of the queue in — and there
+     * will only ever be two. See the file header for the argument behind each.
+     */
+    profile = {
+        maxRuntimeMs: exports.RESTORE_JOB_MAX_RUNTIME_MS,
+        maxAttempts: 1,
+    };
+    constructor(registry, restore, 
+    // #685. Read on every `process()`, so a job queued before the deployment
+    // switched to `saas` is refused when it is claimed.
+    deployment) {
+        this.registry = registry;
+        this.restore = restore;
+        this.deployment = deployment;
+    }
+    /** Self-registration — the only wiring a handler needs. */
+    onModuleInit() {
+        this.registry.register(this);
+    }
+    /**
+     * Replays the archive named in the payload and swaps it into place.
+     *
+     * ⚠ ON SUCCESS THIS NEVER RETURNS — the process exits inside the swap, having
+     * already written this job's own terminal row into the promoted database. See
+     * the file header.
+     *
+     * On failure it throws, after `executeRestore` has recorded what happened on
+     * the run's restore columns. With `maxAttempts: 1` the worker turns that into
+     * a terminal `failed` and never a retry.
+     */
+    async process(job) {
+        // ⚠ FIRST (#685). In `DEPLOYMENT_MODE=saas` there is no in-app restore, and
+        // that includes a job queued while the deployment was still self-hosted:
+        // it fails here, with the same `DatabaseRestoreDisabledError` the routes
+        // map to 403, before the payload is read and before any database is
+        // touched. `maxAttempts: 1` makes that terminal. The retention drop job
+        // (`db.restore.old_db.drop`) is deliberately NOT gated — it only cleans up
+        // a database a past restore retained.
+        if (!this.deployment.inAppRestoreEnabled) {
+            this.logger.warn(`Refusing database restore job ${job.id}: in-app restore is disabled ` +
+                `(DEPLOYMENT_MODE=${this.deployment.mode}). No database was touched.`);
+            this.deployment.assertInAppRestoreEnabled();
+        }
+        this.logger.warn(`Executing database restore job ${job.id}. This replaces the live database; the ` +
+            'process will exit when the swap completes so a supervisor can restart it.');
+        await this.restore.executeRestoreJob(job);
+    }
+};
+exports.DatabaseRestoreRunHandler = DatabaseRestoreRunHandler;
+exports.DatabaseRestoreRunHandler = DatabaseRestoreRunHandler = DatabaseRestoreRunHandler_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [index_1.JobHandlerRegistry,
+        database_restore_service_1.DatabaseRestoreService,
+        restore_gate_1.DbBackupRestoreGate])
+], DatabaseRestoreRunHandler);
+//# sourceMappingURL=db-restore-run.handler.js.map

package/dist/db-backup/handlers/db-restore-run.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-restore-run.handler.js","sourceRoot":"","sources":["../../../src/db-backup/handlers/db-restore-run.handler.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,iEAAiE;AACjE,0BAA0B;AAC1B,gFAAgF;AAChF,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,sEAAsE;AACtE,6EAA6E;AAC7E,0EAA0E;AAC1E,wEAAwE;AACxE,6EAA6E;AAC7E,yEAAyE;AACzE,mBAAmB;AACnB,EAAE;AACF,gFAAgF;AAChF,uEAAuE;AACvE,gFAAgF;AAChF,EAAE;AACF,sEAAsE;AACtE,yEAAyE;AACzE,6EAA6E;AAC7E,gFAAgF;AAChF,4EAA4E;AAC5E,EAAE;AACF,8EAA8E;AAC9E,kBAAkB;AAClB,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,mBAAmB;AACnB,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAChF,6CAA6C;AAC7C,iFAAiF;AACjF,+EAA+E;AAC/E,8EAA8E;AAC9E,2BAA2B;AAC3B,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,6BAA6B;AAC7B,EAAE;AACF,gFAAgF;AAChF,oDAAoD;AACpD,gFAAgF;AAChF,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,qEAAqE;AACrE,+EAA+E;AAC/E,wEAAwE;AACxE,8EAA8E;AAC9E,iBAAiB;AACjB,EAAE;AACF,8EAA8E;AAC9E,yEAAyE;AACzE,6EAA6E;AAC7E,gFAAgF;AAChF,0EAA0E;AAC1E,0EAA0E;AAC1E,EAAE;AACF,gFAAgF;AAChF,yEAAyE;AACzE,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,iFAAiF;AACjF,gEAAgE;AAChE,EAAE;AACF,8EAA8E;AAC9E,iFAAiF;AACjF,iFAAiF;AACjF,6EAA6E;AAC7E,iFAAiF;AACjF,qEAAqE;AACrE,EAAE;AACF,gFAAgF;AAChF,6EAA6E;AAC7E,iFAAiF;AACjF,6EAA6E;AAC7E,6EAA6E;AAC7E,SAAS;AACT,EAAE;AACF,gFAAgF;AAChF,gCAAgC;AAChC,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,iFAAiF;AACjF,gFAAgF;AAChF,8EAA8E;AAC9E,cAAc;AACd,gFAAgF;;;;;;;;;;;;;AAEhF,2CAAkE;AAKlE,4CAAsD;AACtD,kDAAsD;AACtD,0EAA0F;AAE1F;;;;;;;;;;;GAWG;AACU,QAAA,0BAA0B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7D,8BAA8B;AAEvB,IAAM,yBAAyB,iCAA/B,MAAM,yBAAyB;IAqBjB;IACA;IAGA;IAxBF,MAAM,GAAG,IAAI,eAAM,CAAC,2BAAyB,CAAC,IAAI,CAAC,CAAC;IAErE;;;;OAIG;IACM,IAAI,GAAG,8CAAmB,CAAC;IAC3B,KAAK,GAAG,kBAAkB,CAAC;IAEpC;;;OAGG;IACM,OAAO,GAAwB;QACtC,YAAY,EAAE,kCAA0B;QACxC,WAAW,EAAE,CAAC;KACf,CAAC;IAEF,YACmB,QAA4B,EAC5B,OAA+B;IAChD,yEAAyE;IACzE,oDAAoD;IACnC,UAA+B;QAJ/B,aAAQ,GAAR,QAAQ,CAAoB;QAC5B,YAAO,GAAP,OAAO,CAAwB;QAG/B,eAAU,GAAV,UAAU,CAAqB;IAC/C,CAAC;IAEJ,2DAA2D;IAC3D,YAAY;QACV,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,OAAO,CAAC,GAAQ;QACpB,4EAA4E;QAC5E,yEAAyE;QACzE,yEAAyE;QACzE,oEAAoE;QACpE,wEAAwE;QACxE,2EAA2E;QAC3E,sCAAsC;QACtC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,iCAAiC,GAAG,CAAC,EAAE,+BAA+B;gBACpE,oBAAoB,IAAI,CAAC,UAAU,CAAC,IAAI,6BAA6B,CACxE,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,yBAAyB,EAAE,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,kCAAkC,GAAG,CAAC,EAAE,yCAAyC;YAC/E,2EAA2E,CAC9E,CAAC;QAEF,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;CACF,CAAA;AAnEY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,mBAAU,GAAE;qCAsBkB,0BAAkB;QACnB,iDAAsB;QAGnB,kCAAmB;GAzBvC,yBAAyB,CAmErC"}

package/dist/db-backup/index.d.ts

@@ -0,0 +1,49 @@
+export { DbBackupModule } from './db-backup.module';
+export { DB_BACKUP_OPTIONS, DEFAULT_DB_BACKUP_APP_NAME, defaultAppVersion, resolveDbBackupModuleOptions, resolveRestoreEnabled, } from './options';
+/** @stability experimental */
+export type { DbBackupModuleOptions, ResolvedDbBackupModuleOptions } from './options';
+export { DbBackupRestoreGate, restoreGateFor } from './restore-gate';
+export { DB_BACKUP_MIRROR_TARGETS, DB_BACKUP_TARGET, StorageProviderBackupTarget, assertBackupTarget, isStorageBackedTarget, } from './backup-target';
+/** @stability experimental */
+export type { BackupSignedUrlOptions, BackupSink, BackupTarget, BackupTargetObject, BackupWriteMeta, } from './backup-target';
+export { RESTORE_GATE_TIMEOUT_MS, evaluateRestoreGate, evaluateRestoreGates, registerRestoreGate, restoreGateRegistry, } from './restore-gate.registry';
+/** @stability experimental */
+export type { RestoreClusterFacts, RestoreGateContext, RestoreGateDefinition, RestoreGateKind, RestoreGateOutcome, RestoreGateResult, RestoreGateRun, RestoreGateSettings, RestoreGateVerdict, RestorePreflightFacts, } from './restore-gate.registry';
+export { BUILTIN_RESTORE_GATES } from './restore-gates.builtin';
+export { DB_BACKUP_RESTORE_COMPLETED_EVENT, DB_BACKUP_RUN_COMPLETED_EVENT, DbBackupEvents, } from './db-backup-events';
+/** @stability experimental */
+export type { DbBackupRestoreCompletedEvent, DbBackupRunCompletedEvent } from './db-backup-events';
+export { CronIntervalTooShortError, InvalidCronExpressionError, assertBackupCron, minimumCronIntervalMinutes, parseBackupCron, } from './schedule.util';
+/** @stability experimental */
+export type { BackupCronSchedule } from './schedule.util';
+export { DB_BACKUP_DEPLOYMENT_MODE, DB_BACKUP_MAINTENANCE, DB_BACKUP_METRICS, DB_BACKUP_NOTIFIER, DB_BACKUP_SYSTEM_DATA, NOOP_DB_BACKUP_METRICS, } from './ports';
+/** @stability experimental */
+export type { DbBackupDeploymentMode, DbBackupMaintenance, DbBackupMaintenanceOverride, DbBackupMetrics, DbBackupNotifier, DbBackupNotifyOptions, DbBackupSystemData, DbBackupSystemTx, } from './ports';
+export { registerRestoreCarryOver, registerRestoreCarryOvers, restoreCarryOverRegistry } from './carry-over.registry';
+/** @stability experimental */
+export type { RestoreCarryOver } from './carry-over.registry';
+export { DatabaseBackupStatus, DatabaseBackupTrigger } from './data/db-backup-db';
+/** @stability experimental */
+export type { DatabaseBackupRun, DatabaseBackupRunCreateData, DatabaseBackupRunDelegate, DatabaseBackupRunUpdateData, DatabaseBackupRunWhere, DbBackupAuditRow, DbBackupPrisma, DbBackupTx, DbBackupUserRow, } from './data/db-backup-db';
+export { DB_BACKUP_PERMISSIONS } from './db-backup.permissions';
+/** @stability experimental */
+export type { DbBackupPermissionDeclaration } from './db-backup.permissions';
+export { DATABASE_BACKUP_SYSTEM_SETTINGS, mergeDatabaseBackupSettings, resolveBackupRetention } from './db-backup.system-settings';
+/** @stability experimental */
+export type { ResolvedBackupRetention } from './db-backup.system-settings';
+export { DATABASE_BACKUPS_KEY_PREFIX, DB_BACKUP_KEY_PREFIX, registerDbBackupKeyPrefix } from './db-backup-key-prefix';
+export { DB_BACKUP_APP_METRICS, DB_BACKUP_EMAIL_TEMPLATES, DB_BACKUP_NOTIFICATION_EVENTS, DB_BACKUP_JOB_TYPES, } from './db-backup.registrations';
+/** @stability experimental */
+export type { DbBackupAppMetricDef } from './db-backup.registrations';
+export { DatabaseBackupRunnerService, BACKUP_JOB_TYPE } from './db-backup-runner.service';
+/** @stability experimental */
+export type { CancelBackupResult, QueuedBackup, StartBackupInput } from './db-backup-runner.service';
+export { DatabaseBackupRetentionService } from './db-backup-retention.service';
+/** @stability experimental */
+export type { BackupPruneResult } from './db-backup-retention.service';
+export { DB_RESTORE_RUN_TYPE } from './database-restore.service';
+export { DB_BACKUP_SWEEP_TYPE } from './handlers/db-backup-sweep.handler';
+export { DB_RESTORE_OLD_DB_DROP_TYPE } from './handlers/db-restore-old-db-drop.handler';
+export { DatabaseBackupAlreadyRunningError, DatabaseBackupCancelledError, DatabaseBackupClientVersionError, DatabaseBackupStorageProviderError, DatabaseBackupVerificationError, DatabaseRestoreArchiveError, DatabaseRestoreDisabledError, DatabaseRestoreNotAllowedError, DatabaseRestoreRunNotFoundError, DatabaseRestoreSwapError, DatabaseRestoreVerificationError, } from './db-backup.errors';
+export { RLS_BYPASS_PGOPTIONS, rlsBypassEnv } from './pg-dump.util';
+//# sourceMappingURL=index.d.ts.map

package/dist/db-backup/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/db-backup/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EACL,iBAAiB,EACjB,0BAA0B,EAC1B,iBAAiB,EACjB,4BAA4B,EAC5B,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,8BAA8B;AAC9B,YAAY,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,MAAM,WAAW,CAAC;AACtF,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGrE,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,2BAA2B,EAC3B,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AACzB,8BAA8B;AAC9B,YAAY,EACV,sBAAsB,EACtB,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AACjC,8BAA8B;AAC9B,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAGhE,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,8BAA8B;AAC9B,YAAY,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAGnG,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,gBAAgB,EAChB,0BAA0B,EAC1B,eAAe,GAChB,MAAM,iBAAiB,CAAC;AACzB,8BAA8B;AAC9B,YAAY,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAG1D,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,SAAS,CAAC;AACjB,8BAA8B;AAC9B,YAAY,EACV,sBAAsB,EACtB,mBAAmB,EACnB,2BAA2B,EAC3B,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtH,8BAA8B;AAC9B,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAG9D,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAClF,8BAA8B;AAC9B,YAAY,EACV,iBAAiB,EACjB,2BAA2B,EAC3B,yBAAyB,EACzB,2BAA2B,EAC3B,sBAAsB,EACtB,gBAAgB,EAChB,cAAc,EACd,UAAU,EACV,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,8BAA8B;AAC9B,YAAY,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,+BAA+B,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACnI,8BAA8B;AAC9B,YAAY,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,2BAA2B,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACtH,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,6BAA6B,EAC7B,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AACnC,8BAA8B;AAC9B,YAAY,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGtE,OAAO,EAAE,2BAA2B,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC1F,8BAA8B;AAC9B,YAAY,EAAE,kBAAkB,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACrG,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,8BAA8B;AAC9B,YAAY,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AAGxF,OAAO,EACL,iCAAiC,EACjC,4BAA4B,EAC5B,gCAAgC,EAChC,kCAAkC,EAClC,+BAA+B,EAC/B,2BAA2B,EAC3B,4BAA4B,EAC5B,8BAA8B,EAC9B,+BAA+B,EAC/B,wBAAwB,EACxB,gCAAgC,GACjC,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/db-backup/index.js

@@ -0,0 +1,116 @@
+"use strict";
+// `@marinoscar/platform-api/db-backup`: the database backup and restore slice
+// (issue #740, PP-8.7; engine #280-#288, epic #254; node offload #350-#353,
+// epic #345; row-level security #725; deployment mode #685). The streaming
+// `pg_dump` into object storage, the schedule and retention, the restore
+// (pre-flight, swap, rollback) and its carry-over registry, the four job
+// types, the `/api/admin/db-backup` routes, the job-scoped database role
+// broker and three Doctor checks. Documented in ./README.md. Explicit named
+// exports only; anything not listed here is internal.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DatabaseBackupRunnerService = exports.DB_BACKUP_JOB_TYPES = exports.DB_BACKUP_NOTIFICATION_EVENTS = exports.DB_BACKUP_EMAIL_TEMPLATES = exports.DB_BACKUP_APP_METRICS = exports.registerDbBackupKeyPrefix = exports.DB_BACKUP_KEY_PREFIX = exports.DATABASE_BACKUPS_KEY_PREFIX = exports.resolveBackupRetention = exports.mergeDatabaseBackupSettings = exports.DATABASE_BACKUP_SYSTEM_SETTINGS = exports.DB_BACKUP_PERMISSIONS = exports.DatabaseBackupTrigger = exports.DatabaseBackupStatus = exports.restoreCarryOverRegistry = exports.registerRestoreCarryOvers = exports.registerRestoreCarryOver = exports.NOOP_DB_BACKUP_METRICS = exports.DB_BACKUP_SYSTEM_DATA = exports.DB_BACKUP_NOTIFIER = exports.DB_BACKUP_METRICS = exports.DB_BACKUP_MAINTENANCE = exports.DB_BACKUP_DEPLOYMENT_MODE = exports.parseBackupCron = exports.minimumCronIntervalMinutes = exports.assertBackupCron = exports.InvalidCronExpressionError = exports.CronIntervalTooShortError = exports.DbBackupEvents = exports.DB_BACKUP_RUN_COMPLETED_EVENT = exports.DB_BACKUP_RESTORE_COMPLETED_EVENT = exports.BUILTIN_RESTORE_GATES = exports.restoreGateRegistry = exports.registerRestoreGate = exports.evaluateRestoreGates = exports.evaluateRestoreGate = exports.RESTORE_GATE_TIMEOUT_MS = exports.isStorageBackedTarget = exports.assertBackupTarget = exports.StorageProviderBackupTarget = exports.DB_BACKUP_TARGET = exports.DB_BACKUP_MIRROR_TARGETS = exports.restoreGateFor = exports.DbBackupRestoreGate = exports.resolveRestoreEnabled = exports.resolveDbBackupModuleOptions = exports.defaultAppVersion = exports.DEFAULT_DB_BACKUP_APP_NAME = exports.DB_BACKUP_OPTIONS = exports.DbBackupModule = void 0;
+exports.rlsBypassEnv = exports.RLS_BYPASS_PGOPTIONS = exports.DatabaseRestoreVerificationError = exports.DatabaseRestoreSwapError = exports.DatabaseRestoreRunNotFoundError = exports.DatabaseRestoreNotAllowedError = exports.DatabaseRestoreDisabledError = exports.DatabaseRestoreArchiveError = exports.DatabaseBackupVerificationError = exports.DatabaseBackupStorageProviderError = exports.DatabaseBackupClientVersionError = exports.DatabaseBackupCancelledError = exports.DatabaseBackupAlreadyRunningError = exports.DB_RESTORE_OLD_DB_DROP_TYPE = exports.DB_BACKUP_SWEEP_TYPE = exports.DB_RESTORE_RUN_TYPE = exports.DatabaseBackupRetentionService = exports.BACKUP_JOB_TYPE = void 0;
+// ---- the module and its options (rung 1) -----------------------------------------------
+var db_backup_module_1 = require("./db-backup.module");
+Object.defineProperty(exports, "DbBackupModule", { enumerable: true, get: function () { return db_backup_module_1.DbBackupModule; } });
+var options_1 = require("./options");
+Object.defineProperty(exports, "DB_BACKUP_OPTIONS", { enumerable: true, get: function () { return options_1.DB_BACKUP_OPTIONS; } });
+Object.defineProperty(exports, "DEFAULT_DB_BACKUP_APP_NAME", { enumerable: true, get: function () { return options_1.DEFAULT_DB_BACKUP_APP_NAME; } });
+Object.defineProperty(exports, "defaultAppVersion", { enumerable: true, get: function () { return options_1.defaultAppVersion; } });
+Object.defineProperty(exports, "resolveDbBackupModuleOptions", { enumerable: true, get: function () { return options_1.resolveDbBackupModuleOptions; } });
+Object.defineProperty(exports, "resolveRestoreEnabled", { enumerable: true, get: function () { return options_1.resolveRestoreEnabled; } });
+var restore_gate_1 = require("./restore-gate");
+Object.defineProperty(exports, "DbBackupRestoreGate", { enumerable: true, get: function () { return restore_gate_1.DbBackupRestoreGate; } });
+Object.defineProperty(exports, "restoreGateFor", { enumerable: true, get: function () { return restore_gate_1.restoreGateFor; } });
+// ---- the backup target port (PP-14.12) ----------------------------------------------------
+var backup_target_1 = require("./backup-target");
+Object.defineProperty(exports, "DB_BACKUP_MIRROR_TARGETS", { enumerable: true, get: function () { return backup_target_1.DB_BACKUP_MIRROR_TARGETS; } });
+Object.defineProperty(exports, "DB_BACKUP_TARGET", { enumerable: true, get: function () { return backup_target_1.DB_BACKUP_TARGET; } });
+Object.defineProperty(exports, "StorageProviderBackupTarget", { enumerable: true, get: function () { return backup_target_1.StorageProviderBackupTarget; } });
+Object.defineProperty(exports, "assertBackupTarget", { enumerable: true, get: function () { return backup_target_1.assertBackupTarget; } });
+Object.defineProperty(exports, "isStorageBackedTarget", { enumerable: true, get: function () { return backup_target_1.isStorageBackedTarget; } });
+// ---- the restore gate registry (PP-14.12) --------------------------------------------------
+var restore_gate_registry_1 = require("./restore-gate.registry");
+Object.defineProperty(exports, "RESTORE_GATE_TIMEOUT_MS", { enumerable: true, get: function () { return restore_gate_registry_1.RESTORE_GATE_TIMEOUT_MS; } });
+Object.defineProperty(exports, "evaluateRestoreGate", { enumerable: true, get: function () { return restore_gate_registry_1.evaluateRestoreGate; } });
+Object.defineProperty(exports, "evaluateRestoreGates", { enumerable: true, get: function () { return restore_gate_registry_1.evaluateRestoreGates; } });
+Object.defineProperty(exports, "registerRestoreGate", { enumerable: true, get: function () { return restore_gate_registry_1.registerRestoreGate; } });
+Object.defineProperty(exports, "restoreGateRegistry", { enumerable: true, get: function () { return restore_gate_registry_1.restoreGateRegistry; } });
+// Importing this registers the eight built-in gates (they register through the same function an app uses).
+var restore_gates_builtin_1 = require("./restore-gates.builtin");
+Object.defineProperty(exports, "BUILTIN_RESTORE_GATES", { enumerable: true, get: function () { return restore_gates_builtin_1.BUILTIN_RESTORE_GATES; } });
+// ---- the events a settled run and restore raise (PP-14.12) ----------------------------------
+var db_backup_events_1 = require("./db-backup-events");
+Object.defineProperty(exports, "DB_BACKUP_RESTORE_COMPLETED_EVENT", { enumerable: true, get: function () { return db_backup_events_1.DB_BACKUP_RESTORE_COMPLETED_EVENT; } });
+Object.defineProperty(exports, "DB_BACKUP_RUN_COMPLETED_EVENT", { enumerable: true, get: function () { return db_backup_events_1.DB_BACKUP_RUN_COMPLETED_EVENT; } });
+Object.defineProperty(exports, "DbBackupEvents", { enumerable: true, get: function () { return db_backup_events_1.DbBackupEvents; } });
+// ---- the cron schedule (PP-14.12) ------------------------------------------------------------
+var schedule_util_1 = require("./schedule.util");
+Object.defineProperty(exports, "CronIntervalTooShortError", { enumerable: true, get: function () { return schedule_util_1.CronIntervalTooShortError; } });
+Object.defineProperty(exports, "InvalidCronExpressionError", { enumerable: true, get: function () { return schedule_util_1.InvalidCronExpressionError; } });
+Object.defineProperty(exports, "assertBackupCron", { enumerable: true, get: function () { return schedule_util_1.assertBackupCron; } });
+Object.defineProperty(exports, "minimumCronIntervalMinutes", { enumerable: true, get: function () { return schedule_util_1.minimumCronIntervalMinutes; } });
+Object.defineProperty(exports, "parseBackupCron", { enumerable: true, get: function () { return schedule_util_1.parseBackupCron; } });
+// ---- host ports (rung 3) ---------------------------------------------------------------
+var ports_1 = require("./ports");
+Object.defineProperty(exports, "DB_BACKUP_DEPLOYMENT_MODE", { enumerable: true, get: function () { return ports_1.DB_BACKUP_DEPLOYMENT_MODE; } });
+Object.defineProperty(exports, "DB_BACKUP_MAINTENANCE", { enumerable: true, get: function () { return ports_1.DB_BACKUP_MAINTENANCE; } });
+Object.defineProperty(exports, "DB_BACKUP_METRICS", { enumerable: true, get: function () { return ports_1.DB_BACKUP_METRICS; } });
+Object.defineProperty(exports, "DB_BACKUP_NOTIFIER", { enumerable: true, get: function () { return ports_1.DB_BACKUP_NOTIFIER; } });
+Object.defineProperty(exports, "DB_BACKUP_SYSTEM_DATA", { enumerable: true, get: function () { return ports_1.DB_BACKUP_SYSTEM_DATA; } });
+Object.defineProperty(exports, "NOOP_DB_BACKUP_METRICS", { enumerable: true, get: function () { return ports_1.NOOP_DB_BACKUP_METRICS; } });
+// ---- the restore carry-over registry (rung 2) -------------------------------------------
+var carry_over_registry_1 = require("./carry-over.registry");
+Object.defineProperty(exports, "registerRestoreCarryOver", { enumerable: true, get: function () { return carry_over_registry_1.registerRestoreCarryOver; } });
+Object.defineProperty(exports, "registerRestoreCarryOvers", { enumerable: true, get: function () { return carry_over_registry_1.registerRestoreCarryOvers; } });
+Object.defineProperty(exports, "restoreCarryOverRegistry", { enumerable: true, get: function () { return carry_over_registry_1.restoreCarryOverRegistry; } });
+// ---- data -------------------------------------------------------------------------------
+var db_backup_db_1 = require("./data/db-backup-db");
+Object.defineProperty(exports, "DatabaseBackupStatus", { enumerable: true, get: function () { return db_backup_db_1.DatabaseBackupStatus; } });
+Object.defineProperty(exports, "DatabaseBackupTrigger", { enumerable: true, get: function () { return db_backup_db_1.DatabaseBackupTrigger; } });
+// ---- registrations the app makes ----------------------------------------------------------
+var db_backup_permissions_1 = require("./db-backup.permissions");
+Object.defineProperty(exports, "DB_BACKUP_PERMISSIONS", { enumerable: true, get: function () { return db_backup_permissions_1.DB_BACKUP_PERMISSIONS; } });
+var db_backup_system_settings_1 = require("./db-backup.system-settings");
+Object.defineProperty(exports, "DATABASE_BACKUP_SYSTEM_SETTINGS", { enumerable: true, get: function () { return db_backup_system_settings_1.DATABASE_BACKUP_SYSTEM_SETTINGS; } });
+Object.defineProperty(exports, "mergeDatabaseBackupSettings", { enumerable: true, get: function () { return db_backup_system_settings_1.mergeDatabaseBackupSettings; } });
+Object.defineProperty(exports, "resolveBackupRetention", { enumerable: true, get: function () { return db_backup_system_settings_1.resolveBackupRetention; } });
+var db_backup_key_prefix_1 = require("./db-backup-key-prefix");
+Object.defineProperty(exports, "DATABASE_BACKUPS_KEY_PREFIX", { enumerable: true, get: function () { return db_backup_key_prefix_1.DATABASE_BACKUPS_KEY_PREFIX; } });
+Object.defineProperty(exports, "DB_BACKUP_KEY_PREFIX", { enumerable: true, get: function () { return db_backup_key_prefix_1.DB_BACKUP_KEY_PREFIX; } });
+Object.defineProperty(exports, "registerDbBackupKeyPrefix", { enumerable: true, get: function () { return db_backup_key_prefix_1.registerDbBackupKeyPrefix; } });
+var db_backup_registrations_1 = require("./db-backup.registrations");
+Object.defineProperty(exports, "DB_BACKUP_APP_METRICS", { enumerable: true, get: function () { return db_backup_registrations_1.DB_BACKUP_APP_METRICS; } });
+Object.defineProperty(exports, "DB_BACKUP_EMAIL_TEMPLATES", { enumerable: true, get: function () { return db_backup_registrations_1.DB_BACKUP_EMAIL_TEMPLATES; } });
+Object.defineProperty(exports, "DB_BACKUP_NOTIFICATION_EVENTS", { enumerable: true, get: function () { return db_backup_registrations_1.DB_BACKUP_NOTIFICATION_EVENTS; } });
+Object.defineProperty(exports, "DB_BACKUP_JOB_TYPES", { enumerable: true, get: function () { return db_backup_registrations_1.DB_BACKUP_JOB_TYPES; } });
+// ---- the services an app may drive ----------------------------------------------------
+var db_backup_runner_service_1 = require("./db-backup-runner.service");
+Object.defineProperty(exports, "DatabaseBackupRunnerService", { enumerable: true, get: function () { return db_backup_runner_service_1.DatabaseBackupRunnerService; } });
+Object.defineProperty(exports, "BACKUP_JOB_TYPE", { enumerable: true, get: function () { return db_backup_runner_service_1.BACKUP_JOB_TYPE; } });
+var db_backup_retention_service_1 = require("./db-backup-retention.service");
+Object.defineProperty(exports, "DatabaseBackupRetentionService", { enumerable: true, get: function () { return db_backup_retention_service_1.DatabaseBackupRetentionService; } });
+var database_restore_service_1 = require("./database-restore.service");
+Object.defineProperty(exports, "DB_RESTORE_RUN_TYPE", { enumerable: true, get: function () { return database_restore_service_1.DB_RESTORE_RUN_TYPE; } });
+var db_backup_sweep_handler_1 = require("./handlers/db-backup-sweep.handler");
+Object.defineProperty(exports, "DB_BACKUP_SWEEP_TYPE", { enumerable: true, get: function () { return db_backup_sweep_handler_1.DB_BACKUP_SWEEP_TYPE; } });
+var db_restore_old_db_drop_handler_1 = require("./handlers/db-restore-old-db-drop.handler");
+Object.defineProperty(exports, "DB_RESTORE_OLD_DB_DROP_TYPE", { enumerable: true, get: function () { return db_restore_old_db_drop_handler_1.DB_RESTORE_OLD_DB_DROP_TYPE; } });
+// ---- errors ----------------------------------------------------------------------------
+var db_backup_errors_1 = require("./db-backup.errors");
+Object.defineProperty(exports, "DatabaseBackupAlreadyRunningError", { enumerable: true, get: function () { return db_backup_errors_1.DatabaseBackupAlreadyRunningError; } });
+Object.defineProperty(exports, "DatabaseBackupCancelledError", { enumerable: true, get: function () { return db_backup_errors_1.DatabaseBackupCancelledError; } });
+Object.defineProperty(exports, "DatabaseBackupClientVersionError", { enumerable: true, get: function () { return db_backup_errors_1.DatabaseBackupClientVersionError; } });
+Object.defineProperty(exports, "DatabaseBackupStorageProviderError", { enumerable: true, get: function () { return db_backup_errors_1.DatabaseBackupStorageProviderError; } });
+Object.defineProperty(exports, "DatabaseBackupVerificationError", { enumerable: true, get: function () { return db_backup_errors_1.DatabaseBackupVerificationError; } });
+Object.defineProperty(exports, "DatabaseRestoreArchiveError", { enumerable: true, get: function () { return db_backup_errors_1.DatabaseRestoreArchiveError; } });
+Object.defineProperty(exports, "DatabaseRestoreDisabledError", { enumerable: true, get: function () { return db_backup_errors_1.DatabaseRestoreDisabledError; } });
+Object.defineProperty(exports, "DatabaseRestoreNotAllowedError", { enumerable: true, get: function () { return db_backup_errors_1.DatabaseRestoreNotAllowedError; } });
+Object.defineProperty(exports, "DatabaseRestoreRunNotFoundError", { enumerable: true, get: function () { return db_backup_errors_1.DatabaseRestoreRunNotFoundError; } });
+Object.defineProperty(exports, "DatabaseRestoreSwapError", { enumerable: true, get: function () { return db_backup_errors_1.DatabaseRestoreSwapError; } });
+Object.defineProperty(exports, "DatabaseRestoreVerificationError", { enumerable: true, get: function () { return db_backup_errors_1.DatabaseRestoreVerificationError; } });
+// ---- the row-level-security pair of every dump and restore (#725) -------------------------
+var pg_dump_util_1 = require("./pg-dump.util");
+Object.defineProperty(exports, "RLS_BYPASS_PGOPTIONS", { enumerable: true, get: function () { return pg_dump_util_1.RLS_BYPASS_PGOPTIONS; } });
+Object.defineProperty(exports, "rlsBypassEnv", { enumerable: true, get: function () { return pg_dump_util_1.rlsBypassEnv; } });
+//# sourceMappingURL=index.js.map

package/dist/db-backup/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/db-backup/index.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,yEAAyE;AACzE,yEAAyE;AACzE,4EAA4E;AAC5E,sDAAsD;;;;AAEtD,2FAA2F;AAC3F,uDAAoD;AAA3C,kHAAA,cAAc,OAAA;AACvB,qCAMmB;AALjB,4GAAA,iBAAiB,OAAA;AACjB,qHAAA,0BAA0B,OAAA;AAC1B,4GAAA,iBAAiB,OAAA;AACjB,uHAAA,4BAA4B,OAAA;AAC5B,gHAAA,qBAAqB,OAAA;AAIvB,+CAAqE;AAA5D,mHAAA,mBAAmB,OAAA;AAAE,8GAAA,cAAc,OAAA;AAE5C,8FAA8F;AAC9F,iDAMyB;AALvB,yHAAA,wBAAwB,OAAA;AACxB,iHAAA,gBAAgB,OAAA;AAChB,4HAAA,2BAA2B,OAAA;AAC3B,mHAAA,kBAAkB,OAAA;AAClB,sHAAA,qBAAqB,OAAA;AAWvB,+FAA+F;AAC/F,iEAMiC;AAL/B,gIAAA,uBAAuB,OAAA;AACvB,4HAAA,mBAAmB,OAAA;AACnB,6HAAA,oBAAoB,OAAA;AACpB,4HAAA,mBAAmB,OAAA;AACnB,4HAAA,mBAAmB,OAAA;AAerB,2GAA2G;AAC3G,iEAAgE;AAAvD,8HAAA,qBAAqB,OAAA;AAE9B,gGAAgG;AAChG,uDAI4B;AAH1B,qIAAA,iCAAiC,OAAA;AACjC,iIAAA,6BAA6B,OAAA;AAC7B,kHAAA,cAAc,OAAA;AAKhB,iGAAiG;AACjG,iDAMyB;AALvB,0HAAA,yBAAyB,OAAA;AACzB,2HAAA,0BAA0B,OAAA;AAC1B,iHAAA,gBAAgB,OAAA;AAChB,2HAAA,0BAA0B,OAAA;AAC1B,gHAAA,eAAe,OAAA;AAKjB,2FAA2F;AAC3F,iCAOiB;AANf,kHAAA,yBAAyB,OAAA;AACzB,8GAAA,qBAAqB,OAAA;AACrB,0GAAA,iBAAiB,OAAA;AACjB,2GAAA,kBAAkB,OAAA;AAClB,8GAAA,qBAAqB,OAAA;AACrB,+GAAA,sBAAsB,OAAA;AAcxB,4FAA4F;AAC5F,6DAAsH;AAA7G,+HAAA,wBAAwB,OAAA;AAAE,gIAAA,yBAAyB,OAAA;AAAE,+HAAA,wBAAwB,OAAA;AAItF,4FAA4F;AAC5F,oDAAkF;AAAzE,oHAAA,oBAAoB,OAAA;AAAE,qHAAA,qBAAqB,OAAA;AAcpD,8FAA8F;AAC9F,iEAAgE;AAAvD,8HAAA,qBAAqB,OAAA;AAG9B,yEAAmI;AAA1H,4IAAA,+BAA+B,OAAA;AAAE,wIAAA,2BAA2B,OAAA;AAAE,mIAAA,sBAAsB,OAAA;AAG7F,+DAAsH;AAA7G,mIAAA,2BAA2B,OAAA;AAAE,4HAAA,oBAAoB,OAAA;AAAE,iIAAA,yBAAyB,OAAA;AACrF,qEAKmC;AAJjC,gIAAA,qBAAqB,OAAA;AACrB,oIAAA,yBAAyB,OAAA;AACzB,wIAAA,6BAA6B,OAAA;AAC7B,8HAAA,mBAAmB,OAAA;AAKrB,0FAA0F;AAC1F,uEAA0F;AAAjF,uIAAA,2BAA2B,OAAA;AAAE,2HAAA,eAAe,OAAA;AAGrD,6EAA+E;AAAtE,6IAAA,8BAA8B,OAAA;AAGvC,uEAAiE;AAAxD,+HAAA,mBAAmB,OAAA;AAC5B,8EAA0E;AAAjE,+HAAA,oBAAoB,OAAA;AAC7B,4FAAwF;AAA/E,6IAAA,2BAA2B,OAAA;AAEpC,2FAA2F;AAC3F,uDAY4B;AAX1B,qIAAA,iCAAiC,OAAA;AACjC,gIAAA,4BAA4B,OAAA;AAC5B,oIAAA,gCAAgC,OAAA;AAChC,sIAAA,kCAAkC,OAAA;AAClC,mIAAA,+BAA+B,OAAA;AAC/B,+HAAA,2BAA2B,OAAA;AAC3B,gIAAA,4BAA4B,OAAA;AAC5B,kIAAA,8BAA8B,OAAA;AAC9B,mIAAA,+BAA+B,OAAA;AAC/B,4HAAA,wBAAwB,OAAA;AACxB,oIAAA,gCAAgC,OAAA;AAGlC,8FAA8F;AAC9F,+CAAoE;AAA3D,oHAAA,oBAAoB,OAAA;AAAE,4GAAA,YAAY,OAAA"}